search for: anstat

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=511 ------- Additional Comments From kaber@trash.net 2006-09-15 06:42 MET ------- So you're saying the problem is that the receiver updates its window multiple times without receiving any data in between, thereby falsely triggering the "dead-peer detection" (as you call it)? -- Configure bugmail:

...ents Product: netfilter/iptables Version: linux-2.6.x Platform: All OS/Version: All Status: NEW Severity: minor Priority: P2 Component: ip_conntrack AssignedTo: laforge@netfilter.org ReportedBy: georgeh@anstat.com.au The linux firewall loses track of valid TCP connections, due to premature expiry of the ip_conntrack timer. This can result in one end of the TCP connection being kept open indefinitely, waiting for more data. This data is now being dropped by the firewall, due to the ip_conntrack timer h...