On Wednesday 16 September 2015 10:00:53 Sebastian Damm wrote:
Has anyone ever seen this? It looks like a load thing,
because at weekends
there are significantly less errors.
You should look at the OS level, the error is from the kernel.
Are you runing out of sockets/files? It the connection tracker full?
BTW you accept related and new state, this makes no sense, you could just as
well have no rules for the OUTPUT chain (which is much better for perfomance).