Conversation

Today I've spent about 7 hours of my life trying to debug an iptables/firewall/VPN issue.

Whatever I tried, it just didn't work.

...and then after hours of painful debugging, wiresharking and TCP dumping I realized I'm on a system with several GB/s of throughput and someone was clever enough to skip conn-tracking on the raw packet level for performance reasons.

Lesson of the day: There is always one more lesson to learn. 😆