Maybe a silly question: Couldn't Linux turn off ECN in retransmitted SYN packets, so it would still work with sites that drop ECN packets on the floor? The only related thread I could find in list archives implied that Linux is "all or none" because of someone's conviction that making Linux fail to interoperate with such sites would somehow force them to change. I hope it's not that... Jim James Rich wrote: > Turns out that the remote sites were rejecting TCP packets with ECN > headers in them. Setting tcp_ecn to 0 fixed the problem. Masqueraded > hosts don't have the ECN fields set. - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html