On Tue, 6 Jul 2004 13:28:22 -0700 "David S. Miller" <davem@redhat.com> wrote: > On Tue, 6 Jul 2004 13:05:49 -0700 > Stephen Hemminger <shemminger@osdl.org> wrote: > > > On Tue, 6 Jul 2004 20:40:34 +0100 > > Jamie Lokier <jamie@shareable.org> wrote: > > > > > Are you saying there are broken firewalls which strip TCP options in > > > one direction only? > > > > It appears so. > > Ok, this is a possibility. And why it breaks is that if the ACK > for the SYN+ACK comes back, the SYN+ACK sender can only assume > that the window scale was accepted. > > Stephen, do you have a trace showing exactly this? No, I don't have a br0ken firewall here. I can get out fine. When I setup with same kernel as packages.gentoo.org, it works fine as well. - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
