ECN fixes for Cisco gear

Dax Kelson
2001-01-28T21:34:38Z

In Sept of 2000, I did a survey of 30,000 websites and found that 8% of
them were unreachable from an ECN capable client. Two major culprits were
identified, the Cisco PIX and Local Director. To Cisco's credit, fixes
were released quickly.

Here is a message I sent with info about the Cisco updates:

http://www.uwsg.iu.edu/hypermail/linux/kernel/0010.1/1205.html

Here is the fix for PIX:

(see
http://www.cisco.com/cgi-bin/Support/Bugtool/onebug.pl?bugid=CSCds23698)
Bud ID: CSCds23698
Headline: PIX sends RSET in response to tcp connections with ECN
bits set
Product: PIX
Component: fw
Severity: 2 Status: R [Resolved]
Version Found: 5.1(1) Fixed-in Version: 5.1(2.206) 5.1(2.207)
5.2(1.200)

Here is the fix for Local Director:

(see
http://www.cisco.com/cgi-bin/Support/Bugtool/onebug.pl?bugid=CSCds40921)
Bug Id : CSCds40921
Headline: LD rejects syn with reserved bits set in flags field of TCP hdr
Product: ld
Component: rotor
Severity: 3 Status: R [Resolved]
Version Found: 3.3(3) Fixed-in Version: 3.3.3.107

Dax Kelson
Guru Labs