Hello all. I found reason - recompile kernel with the following options. options IPFIREWALL #firewall options IPFIREWALL_DEFAULT_TO_ACCEPT #allow everything by default options IPDIVERT #divert sockets Alexey