Re: 2.4.0 tcp over firewall - no connection

Doug McNaught (doug@wireboard.com)
10 Jan 2001 16:07:52 -0500


crosser@average.org (Eugene Crosser) writes:

> I noticed rather strange behavior: stock 2.4.0 with old ISA 3Com
> on UP compiled as UP cannot open TCP connection to hosts behind a
> firewall. E.g. it is impossible to go to http://www.etrade.com/ -
> connect just never finishes. 2.2.17 on the same hardware works
> right. 2.4.0 on SMP over PPP connection works right too. MTU
> is 1500 in both cases. In both cases, kernel is compiled with
> netfilter as modules, but those are not loaded.

Known problem, exhaustively discussed on the list, and not related
to your NIC. Disable ECN (explicit congestion notification), either
in your kernel compile or in /proc/sys/<something>.

-Doug
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/