[NTLUG:Discuss] Re: No return packets from wellsfargo.com -- touche on the ECN TCP flag

Bryan J. Smith b.j.smith at ieee.org
Wed Nov 10 17:44:24 CST 2004


On Wed, 2004-11-10 at 18:28, Courtney Grimland wrote:
> I guess I'll try that at home tonight too.  Ignore my previous message, 
> as I hadn't gotten to this one yet in the thread when I wrote it.

Man, I thought this was old news (hence why I didn't think of it) but I
guess not.  Looks like there are still some devices out there that don't
like the ECN TCP flag.

In a nutshell, with the defaults in the 2.6 kernel, the ECN TCP flag is
causing all sorts of issues with packet inspectors (firewalls and/or
1-to-many NAT devices) as well as some routers.  Disabling it quickly
and effectively solves the issue.

Touche on the suggestion.


-- 
Bryan J. Smith                                  b.j.smith at ieee.org 
------------------------------------------------------------------ 
"Communities don't have rights. Only individuals in the community
 have rights. ... That idea of community rights is firmly rooted
 in the 'Communist Manifesto.'" -- Michael Badnarik





More information about the Discuss mailing list