UM w/ Firewall: Kernel 2.6 vs 2.4

I've been running successfully UM kernel 2.4 w/ the NFCT patch for a few 
years (LVS-NAT). I'm trying to get a 2.6 kernel (Centos 4.3) to 
successfully run with firewalling (iptables) with LVS-NAT. The director 
works fine w/ iptables turned off; however, it doesn't seem to catch the 
iptable rules and rejects any load-balancing at the output chain (I think). 
I implmented the NFCT patch on centos's kernel (2.6.9-34.0.2). I've enabled 
both /proc/sys/net/ipv4/vs/conntrack and /proc/sys/net/ipv4/vs/snat_reroute 
with no avail. I'm using the same iptables script that works on the 2.4 
kernel setup. I'm sure someone has run into this issue. Any pointers, 
places to look, etc.

This is what gets denied (eth0=outside, eth1=inside)
...DENY IN= OUT=eth1 SRC={outside client's IP} DST={internal nat ip} LEN=48 
TOS=0x00 PREC=0x00 TTL=114 ID=5759 DF PROTO=TCP SPT=2826 DPT=80 
WINDOW=65535 RES=0x00 SYN URGP=0

Thanks! 


-- 
Ultra Monkey - http://www.ultramonkey.org/
To UNSUBSCRIBE, email to [email protected], with a body:
unsubscribe ultramonkey-users [email protected]
where "[email protected]" is YOUR email address.