Help!!! IPVS not forwarding packets

Hello All,

I'm having a bit of trouble getting UM to forward the packets or at least 
that appears to be the problem. I can ping/ftp to the real servers. If I 
run ldirectord in the foreground it sees the real servers as enabled. I 
can also ping the virtual ip address. It just doesn't seem to forward the 
packets.  Any and all help would be much appreciated.

Thanks,
-G

========================================================================================

vs01:/etc/ha.d# cat ha.cf
logfacility local0
keepalive 2
deadtime 30
warntime 10
initdead 120
ucast eth1 10.10.50.2
node vs01
node vs02
ping 10.10.20.239
respawn hacluster /usr/lib/heartbeat/ipfail

========================================================================================

vs01:/etc/ha.d# cat haresources
vs01    10.10.20.237/24/eth0 ldirectord

========================================================================================

vs01:/etc/ha.d# cat ldirectord.cf

# Global Directives
checktimeout=10
checkinterval=2
#fallback=127.0.0.1:80
autoreload=no
#logfile="/var/log/ldirectord.log"
logfile="local0"
quiescent=yes
logfile="local0"

#virtual=10.10.20.237:21
#       real=10.10.20.240 gate
#       real=10.10.20.241 gate
#       scheduler=wlc

virtual=10.10.20.237:21
        fallback=127.0.0.1:21
        real=10.10.20.240:21 gate
        real=10.10.20.241:21 gate
#        service=ftp
#        request="welcome.msg"
#        receive="Welcome"
#       login="anonymous"
#        passwd="[email protected]"
        scheduler=rr
        #persistent=600
        protocol=tcp
        checktype=negotiate

========================================================================================

vs01:/etc/ha.d# ip addr
1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
2: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:02:b3:ea:80:41 brd ff:ff:ff:ff:ff:ff
    inet 10.10.20.238/24 brd 10.255.255.255 scope global eth0
    inet 10.10.20.237/24 scope global secondary eth0
3: eth1: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:50:70:b6:71:03 brd ff:ff:ff:ff:ff:ff
    inet 10.10.50.1/24 brd 10.255.255.255 scope global eth1

========================================================================================

vs01:/etc/ha.d# ip route
10.10.20.0/24 dev eth0  proto kernel  scope link  src 10.10.20.238 
10.10.50.0/24 dev eth1  proto kernel  scope link  src 10.10.50.1 
default via 10.10.20.254 dev eth0 

========================================================================================

vs01:/etc/ha.d# cat /etc/hosts
127.0.0.1       localhost.localdomain   localhost       vs01

10.10.20.238    vs01
10.10.20.239    vs02
10.10.20.237    vs

10.10.50.1      localip
10.10.50.2      remoteip

========================================================================================

vs01:~# cat /etc/sysctl.conf
#
# /etc/sysctl.conf - Configuration file for setting system variables
# See sysctl.conf (5) for information.
#
#kernel.domainname = example.com
#net/ipv4/icmp_echo_ignore_broadcasts=1

net.ipv4.ip_forward = 1
net.ipv4.conf.default.rp_filter = 1
#

# Enable configuration of arp_ignore option
net.ipv4.conf.all.arp_ignore = 1

# When an arp request is received on eth0, only respond if that address is
# configured on eth0. In particular, do not respond if the address is
# configured on lo
net.ipv4.conf.eth0.arp_ignore = 1

# Ditto for eth1, add for all ARPing interfaces
net.ipv4.conf.eth1.arp_ignore = 1


# Enable configuration of arp_announce option
net.ipv4.conf.all.arp_announce = 2

# When making an ARP request sent through eth0 Always use an address that
# is configured on eth0 as the source address of the ARP request.  If this
# is not set, and packets are being sent out eth0 for an address that is 
on
# lo, and an arp request is required, then the address on lo will be used.
# As the source IP address of arp requests is entered into the ARP cache 
on
# the destination, it has the effect of announcing this address.  This is
# not desirable in this case as adresses on lo on the real-servers should
# be announced only by the linux-director.
net.ipv4.conf.eth0.arp_announce = 2

# Ditto for eth1, add for all ARPing interfaces
net.ipv4.conf.eth1.arp_announce = 2