Re: [Snort-inline-users] low traffic from debian or ubuntu through snort inline

[Eric L. <er...@in...>]

Hi,

On Friday, 2008 July 11 at 15:42:52 +0200, Alain DEGUILLE wrote:
> Hello,
>  
> I'm using snort inline (snort_inline-2.6.1.5) on my firewall (Linux Redhat
> Entreprise 5) with iptable, to secure my web server on dmz.
> It works very well, except when http client comes from Linux Debian or
> Ubuntu. There traffic are very slowly.
>  
> Do you know this problem ?

Which kernel are you using ? 2.6.22.x with X < 4 has a problem when
nfqueuing packet with some specific packet size.

Cordialement,
-- 
Eric Leblond
INL: http://www.inl.fr/
NuFW: http://www.nufw.org/