CLUSTERIP problems

[Piotr Chytla <pch@packetconsulting.pl>]

Hi 

I've problem with CLUSTERIP from 2.6.12 kernel, both nodes run debian
sarge on 2.6.12.

First node :
eth0      Link encap:Ethernet  HWaddr 00:06:29:8F:42:0D  
          inet addr:192.168.116.50  Bcast:192.168.116.127
	  Mask:255.255.255.128

iptables -A INPUT -i eth0 -p tcp -d 192.168.116.50/32 --dport 80 -j CLUSTERIP --new --hashmode sourceip --clustermac 01:23:45:67:89:AB --total-nodes 2 --local-node 1

Second node:
eth0      Link encap:Ethernet  HWaddr 00:06:29:A8:14:4D  
          inet addr:192.168.116.51  Bcast:192.168.116.127
	  Mask:255.255.255.128

iptables -A INPUT -i eth0 -p tcp -d 192.168.116.50/32 --dport 80 -j CLUSTERIP --new --hashmode sourceip --clustermac 01:23:45:67:89:AB --total-nodes 2 --local-node 2

When I've tried to connect from outside to cluster , connection fails . 
Only some SYN packets appears on input interface , but connection is not
created. 

On the first machine I have in logs only this :

hash=1 ct_hash=1 not responsible

ARP mangling patch for 2.6.12 is applied :

http://patchwork.netfilter.org/netfilter-devel/patch.pl?id=2643

/pch

-- 
Dyslexia bug unpatched sinse 1977 ...
exploit have leaked to the underground.