Version 1.5.20. The cut-off problem is back. Here is a sample. Here is a few samples. Sep 3 12:59:46 server SRC=63.171.79.154 DST=64.30.195.78 LEN=576 TOS=0x00 PREC=0x00 TTL=114 ID=44751 PROTO=TCP SPT=80 DPT=4959 SEQ=168963 ACK=2319997928 WINDOW=17373 RES=0x00 ACK URGP=0 ip_conntrack_tcp: INVALID: Out of window data; SEQ is over the upper bound (over the window of the receiver) It should be. Sep 3 12:59:46 server IPT: Reject_TCP_Packet: IN=eth0 OUT= MAC=00:50:ba:5c:16:53:00:10:67:00:51:f7:08:00 SRC=63.171.79.154 DST=64.30.195.78 LEN=576 TOS=0x00 PREC=0x00 TTL=114 ID=44750 PROTO=TCP SPT=80 DPT=4959 WINDOW=17373 RES=0x00 ACK URGP=0 ip_conntrack_tcp: INVALID: Out of window data; SEQ is over the upper bound (over the window of the receiver)