Subject: Re: bug in tcp?

From: Sebastian Kuzminsky <[email-masked]>
Date: Mon, 16 Apr 2007 22:42:22 -0600

John Heffner <[email-masked]> wrote:
> Stephen Hemminger wrote:
> > A guess: maybe something related to a PAWS wraparound problem.
> > Does turning off sysctl net.ipv4.tcp_timestamps fix it?
> 
> That was my first thought too (aside from netfilter), but a failed PAWS 
> check should not result in a reset..

All three of the systems where I saw the problems earlier did have some
netfilter rules up and running....

All tests I'm doing now have netfilter compiled in but no rules set
(INPUT, FORWARD, and OUTPUT are all empty, and the policies are all
ACCEPT).

-- 
Sebastian Kuzminsky