2.4.0 tcp over firewall - no connection
I noticed rather strange behavior: stock 2.4.0 with old ISA 3Com on UP compiled as UP cannot open TCP connection to hosts behind a firewall. E.g. it is impossible to go to http://www.etrade.com/ - connect just never finishes. 2.2.17 on the same hardware works right. 2.4.0 on SMP over PPP connection works right too. MTU is 1500 in both cases. In both cases, kernel is compiled with netfilter as modules, but those are not loaded.
I did not investigate further yet, just wanted to bring this to attention of those whom it may concern...
Eugene
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [email protected]
Please read the FAQ at http://www.tux.org/lkml/
Quoted 7 lines · [email protected] (Eugene Crosser) writes:
I noticed rather strange behavior: stock 2.4.0 with old ISA 3Com on UP compiled as UP cannot open TCP connection to hosts behind a firewall. E.g. it is impossible to go to http://www.etrade.com/ - connect just never finishes. 2.2.17 on the same hardware works right. 2.4.0 on SMP over PPP connection works right too. MTU is 1500 in both cases. In both cases, kernel is compiled with netfilter as modules, but those are not loaded.
Known problem, exhaustively discussed on the list, and not related to your NIC. Disable ECN (explicit congestion notification), either in your kernel compile or in /proc/sys/<something>.
-Doug
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [email protected]
Please read the FAQ at http://www.tux.org/lkml/
In article <[email protected]>,
Quoted 11 lines · Doug McNaught
Quoted 7 lines
I noticed rather strange behavior: stock 2.4.0 with old ISA 3Com on UP compiled as UP cannot open TCP connection to hosts behind a firewall. E.g. it is impossible to go to http://www.etrade.com/ - connect just never finishes. 2.2.17 on the same hardware works right. 2.4.0 on SMP over PPP connection works right too. MTU is 1500 in both cases. In both cases, kernel is compiled with netfilter as modules, but those are not loaded.
Known problem, exhaustively discussed on the list, and not related to your NIC. Disable ECN (explicit congestion notification), either in your kernel compile or in /proc/sys/<something>.
This really was ECN, sorry for noise in this list...
Eugene
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [email protected]
Please read the FAQ at http://www.tux.org/lkml/