Problem with networking in 2.4.0

Problem with networking in 2.4.0

[snpe]

Hello,

I have got 2 Linux machine with kernel 2.4.0 i kernel 2.2.18.
I am in Belgrade , Yugoslavia and I can't access to any hosts :

for example, www.linux.co.yu (Island), www.skyrr.is, www.hotmail.com etc

Access is ok with kernel 2.2 even in a case when machine with 2.4 kernel is
masquerading host.
It doesn't work with any port.
Ping works.

I think that these hosts are behind CISCO PIX firewall.

I am not sure if it is related with seting kernel.

Regards
Haris Peco
snpe@infosky.net
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/

Re: Problem with networking in 2.4.0

[Jerry Frana]

hi

have you tried

echo 0  > /proc/sys/net/ipv4/tcp_ecn ?
for some reason PIX firewalls act strangely when explicit congestion
notification is used...

hope this helps..

david F.




On Wed, 17 Jan 2001, snpe wrote:

> Hello,
> 
> I have got 2 Linux machine with kernel 2.4.0 i kernel 2.2.18.
> I am in Belgrade , Yugoslavia and I can't access to any hosts :
> 
> for example, www.linux.co.yu (Island), www.skyrr.is, www.hotmail.com etc
> 
> Access is ok with kernel 2.2 even in a case when machine with 2.4 kernel is
> masquerading host.
> It doesn't work with any port.
> Ping works.
> 
> I think that these hosts are behind CISCO PIX firewall.
> 
> I am not sure if it is related with seting kernel.
> 
> Regards
> Haris Peco
> snpe@infosky.net
> -
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> the body of a message to majordomo@vger.kernel.org
> Please read the FAQ at http://www.tux.org/lkml/
> 

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/

Re: Problem with networking in 2.4.0

[David Woodhouse]

snpe@infosky.net said:
>  Access is ok with kernel 2.2 even in a case when machine with 2.4
> kernel is masquerading host. It doesn't work with any port. Ping
> works. 

Read the FAQ again. More carefully this time. Pay close attention to 
section 14.2

http://www.tux.org/lkml/


--
dwmw2


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/

Re: Problem with networking in 2.4.0

[J Sloan]

Try this shot in the dark:

echo "0" > /proc/sys/net/ipv4/tcp_ecn

jjs

snpe wrote:

> Hello,
>
> I have got 2 Linux machine with kernel 2.4.0 i kernel 2.2.18.
> I am in Belgrade , Yugoslavia and I can't access to any hosts :
>
> for example, www.linux.co.yu (Island), www.skyrr.is, www.hotmail.com etc
>
> Access is ok with kernel 2.2 even in a case when machine with 2.4 kernel is
> masquerading host.
> It doesn't work with any port.
> Ping works.
>
> I think that these hosts are behind CISCO PIX firewall.
>
> I am not sure if it is related with seting kernel.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/

Re: Problem with networking in 2.4.0

[Bill Crawford]

 In connection with connection failures using recent kernels, it often
seems to be related to ECN being enabled.

 PIX firewalls seem to interpret the ECN option header as a source
route header (that's what it's logged as).

 I got bitten by this at work ;·(

-- 
/* Bill Crawford, Unix Systems Developer, ebOne, formerly GTS Netcom */
#include "stddiscl.h"
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/

Re: Problem with networking in 2.4.0

[David Ford]

Bill Crawford wrote:

>  In connection with connection failures using recent kernels, it often
> seems to be related to ECN being enabled.
>
>  PIX firewalls seem to interpret the ECN option header as a source
> route header (that's what it's logged as).
>
>  I got bitten by this at work ;·(

Cisco is aware of the ECN issues and has updates for their stuff.

-d

--
..NOTICE fwd: fwd: fwd: type emails will be deleted automatically.
      "There is a natural aristocracy among men. The grounds of this are
      virtue and talents", Thomas Jefferson [1742-1826], 3rd US President



-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/