* Phil Brutsche <[EMAIL PROTECTED]> [12/11/00 17:43] wrote:
> A long time ago, in a galaxy far, far way, someone said...
> > Hi,
> > I'm using 2.4.0-test12-pre7 (compiled it on my own, not through a
> > .deb) and I've encountered a very strange problem. There are certain
> > websites that my system now refuses to connect to. I know that these
> > sites are up because other systems can connect to them. And I can
> > even ping these same sites from my machine! However, HTTP connections
> > seem to go nowhere. Examples of these are:
> >
> > www.compubank.com
> > bank.netbank.com (but www.netbank.com works!)
> > www.exchangepath.com
> > www.zanybrainy.com
> > www.barnesandnoble.com
> > counters.honesty.com
>
> Your getting bit by ECN (explicit congestion notification). The sites in
> question have broken firewalls that are blocking valid (but little used
> until now) optional TCP flags.
>
> Do "sysctl -w net.ipv4.tcp_ecn=0" as root and see what you get.
Phil,
Thanks, that solved it!
Max
