NATed computer can't access certain websites

Chris Linton-Ford chris.lintonford at firebox.com
Thu Jul 6 15:31:12 UTC 2006


On Wed, 2006-07-05 at 19:06 +0200, Roberto Ragusa wrote:

> Chris Linton-Ford wrote:
> > Hi Roberto,
> > 
> > Changing the MTU size didn't help, but disabling tcp_window_scaling did
> > the trick. Having looked around various groups, it sounds like this is a
> > problem with the 2.6.17-1.2139 kernel; is it a better idea for me to
> > permanently disable window scaling on our machines or wait until a fix
> > comes out for the kernel? Is window scaling a Good Thing?
> 
> I think the fix is needed on your OpenBSD firewall, according to this:
> 
>   http://kerneltrap.org/node/6723
> 
> David Miller: "Window scaling has been standardized and around for 14
> years, RFC1323 was published in May of 1992. How much longer can we wait
> or it to be deployed properly? :-)"
> 
> Window scaling is a good thing, because it improves speed on fast
> connections to distant sites; the problem is that if an intermediate
> node is buggy there are problems.
> The same thing happened for ECN.
> 
> Best regards.
> -- 
>    Roberto Ragusa    mail at robertoragusa.it
> 


I'll have a play around with the settings on the firewall, but it seems
to be more likely to be something in between, as it happens with very
few websites. On the other hand, I've been stung in the past by
OpenBSD's overzealousness.

Thanks again for your help,

Chris
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.fedoraproject.org/pipermail/users/attachments/20060706/dccd7f5f/attachment-0002.html 


More information about the users mailing list