The situation is the same on a totally different hardware. Traffic of Windows clients drastically degraded through the firewall. We had to downgrade package linux-image-3.2.0-4-686-pae:i386 from 3.2.60-1+deb7u1 to 3.2.57-3+deb7u2. Ethernet card is 01:06.0 Ethernet controller: Broadcom Corporation NetXtreme BCM5703X Gigabit Ethernet (rev 02) Driver is tg3 that is also affected in recent kernel patches. Gabor