Re: raw table and NOTRACK target

[Ramunas Vabolis <ramuva@openoffice.lt>]

* Philip Craig <philipc@snapgear.com> [2009-06-26 10:54]:
> Ramunas Vabolis wrote:
> > running lynx http://any.host.com from real.ip
> > 
> > running tcpdump on inner interface:
> > tcpdump -i ethlocal -n host real.ip and port 80 
> > 
> > does show connection attempts while 
> > tcpdump -i ethoutside -n host real.ip and port 80 
> > is silent.
> > 
> > iptables -t raw -vxnL shows that first rule is hit couple times, the
> > second rule is never hit.
> 
> Then the problem is not in the raw table.  Something else is dropping
> the first syn packet after it has been through the raw table.
> You should see an outgoing syn packet before you start worrying
> about the second rule being hit.
	That's why I'm asking for advice :) 
	iptables -n -L |grep DROP -> is empty. I'd paste entire iptables
output, but it is quite biggie (There are quite a lot of chains which do
nothing but ACCEPT packets - for iptables based traffic accounting
solution). I've flushed all FORWARD chain just in case, but it did not
had any influence as I've suspected. 

	What else can be done to pinpoint the problem?