-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello all, first of all I would like to appoligise if this is not right topic on this mailling list... Few days ago I installed new shaping/nat box with latest 2.4.20 kernel, iproute-20010824, and iptables 1.2.7a, which was built from netfilter cvs together with all extra netfilter patches. Since I had nice working shaping/nat box, I just transferred all iptables and tc setup scripts to new box, but got unexpected strange results after start. Problem is, that I am unable to retrieve big files - e.g. telnet to remote 22 port _shows_ ssh banner, but ssh'ing to that host fails, telnet to some remote 80 port _shows_ http proto error, but MsIE timeouts, retrieving http://ftp.lt.kernel.org/pub/linux/kernel/v2.4/linux-2.4.20.tar.bz2.sign is ok, but whole kernel is NOT. Also all tested hosts responds to ping.... ECN is not compiled in. NAT is working ok, since i have communication with outside world... CBQ and sfq shaping is done on vlan interfaces, pakets are being marked, no other (TOS, etc) mangling is being done. Any ideas what could be wrong? MTU problem, etc? Please help, because I'm just lost.... Thank You. Andrew. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE99fJkN8/5pHh2B0YRAkR7AJ4yeuKqzbRLaZbVc+ZUkHfpeBv2wACfdizT 6x9xEy3LShVvseKlr6m7rYY= =7SBj -----END PGP SIGNATURE----- _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/