Unpatched 2.6.10 kernels are apparently broken WRT TCP connection tracking. Established connections that are ended with an RST are not removed from the conntrack table. See: http://lists.netfilter.org/pipermail/netfilter-devel/2005-January/017956.html -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
Possibly Parallel Threads
Wisdom of the Ancients
