I forgot, I have these settings too: echo "1" > /proc/sys/net/ipv4/ip_forward echo "1" > /proc/sys/net/ipv4/tcp_syncookies echo "1" > /proc/sys/net/ipv4/tcp_abort_on_overflow echo "600" > /proc/sys/net/ipv4/tcp_keepalive_time echo "60" > /proc/sys/net/ipv4/tcp_keepalive_intvl echo "32" > /proc/sys/net/ipv4/tcp_max_orphans echo "3" > /proc/sys/net/ipv4/tcp_orphan_retries Is the tcp keepalive too long? Thanks in advance, Oki