[BBLISA] Troubleshooting iptables/netfilter problems

Brian Reichert reichert at numachi.com
Fri Feb 28 12:28:00 EST 2014


On Fri, Feb 28, 2014 at 11:16:42AM -0500, John Miller wrote:
> Hey there folks,
> 
> We're running into an issue with our LDAP servers where legitimate 
> packets are being intermittently (say 1/10000) rejected by iptables. 
> They match one of our ACCEPT rules, yet still get rejected (we're seeing 
> the return ICMP traffic).

Have you explored disabling TOE as an experiment?  Might be neccesary
if you need to start collecting packet captures.

> 
> John
> 
> 
> -- 
> John Miller
> Systems Engineer
> Brandeis University
> johnmill at brandeis.edu
> 
> _______________________________________________
> bblisa mailing list
> bblisa at bblisa.org
> http://www.bblisa.org/mailman/listinfo/bblisa

-- 
Brian Reichert				<reichert at numachi.com>
BSD admin/developer at large	



More information about the bblisa mailing list