Fail to send TCP SYN Ack message

[深圳联友科技有限公司 信息技术中心 新技术应用领域]

Hi all, 

Cloustack version:  4.2   
Hypervisor:  vmware
Static NAT Config:
            0.0.0.0/0                ICMP                      -1    -1
            0.0.0.0/0                UDP                         1        65535
            0.0.0.0/0                TCP                           1        
65535
OS:  CentOS 6.2 64bits

Scenario:
      1) Create one vritual machine though Cloudstack 
      2) Config the static NAT  and log in this virtual machine.
      3)  Running the TCP Server in this virtual machine 
      4)   another real machine as TCP client.   (The two machines can be ping)
 I found The TCP connection could not be created.  

With tcpdump, i can capture the tcp SYN message from client  in server machine. 
06:16:35.940145 IP 172.26.228.81.53506 > 
36f99eab-d7c8-4e14-b1fb-221e3d15aac7.dnp-sec: Flags [S], seq 898177152, win 
14600, options [mss 1460], length 0 

but the server fail to reply SYN ACK message to client. 



Thanks &  Regards





luoch...@szlanyou.com