15 Mar
2005
15 Mar
'05
14:22
Mar 15 09:38:55 zzz kernel: SFW2-INext-DROP-DEFLT-INV IN=eth0 OUT= MAC=00:0d:56: b8:5a:f4:08:00:69:0d:9a:2e:08:00 SRC=130.88.xxx.yyy DST=130.88.xxx.zzz LEN=40 TOS =0x00 PREC=0x00 TTL=60 ID=12095 DF PROTO=TCP SPT=757 DPT=2049 WINDOW=32761 RES=0 x00 ACK RST URGP=0
Conntrack thinks those packets are invalid for some reason. Do you have the latest kernel available through YaST Online Update? There have been issues with tcp window tracking but I thought they were fixed already.
I have kernel 2.6.8-24.11-smp (the latest available I believe) Regards -- Simon Oliver