The importance of being liberal in a Cisco environment
Network incompatibilities do happen and sometimes you need to be a little more forgiving in order to let the traffic flow. An example of where some Cisco behaviour was running foul of Linux.
IPTables
Use IPTables NOTRACK to implement stateless rules and reduce packet loss
Disabling IPTables connection tracking for DNS can resolve problems due to too many connections in the connection table.