On Fri, Jul 23, 2004 at 01:12:22PM -0400, you [David Ford] wrote: > What is the MTU on your interface? Is it less than 1500? If so, use an > iptables rule to clamp the MSS to the MTU of the interface. 'man > iptables', search for clamp, perfect example available. Make sure ICMP > is not firewalled so icmp-need-frag messages get through. Seems that your MTU idea was good. I did # ifconfig eth0 <ip> netmask 255.255.255.248 mtu 750 up and was unable to reproduce the problem anymore. Then I retried with MTU=1500, and it would happen again every now and then. Then I tried 1000, 1400, 1450 and finally 1480 -- all of which seemed to work. Retried with 1500 -- hangs happened again. I've no set the MTU to 1480 (which I gather shouldn't impose great performance penalty), but I'm still baffled what is the actual problem. - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html