On Tue, 6 Jul 2004 13:05:49 -0700 Stephen Hemminger <shemminger@osdl.org> wrote: > On Tue, 6 Jul 2004 20:40:34 +0100 > Jamie Lokier <jamie@shareable.org> wrote: > > > Are you saying there are broken firewalls which strip TCP options in > > one direction only? > > It appears so. Ok, this is a possibility. And why it breaks is that if the ACK for the SYN+ACK comes back, the SYN+ACK sender can only assume that the window scale was accepted. Stephen, do you have a trace showing exactly this? - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html