On 12/02/2011 12:44 AM, Amos Jeffries wrote:
I can't speak for what they know. I only pay attention to the details directly affecting Squid features on the netfilter lists.
Of course you can't, sorry. I just thought that, out of the thousands of sites we visit every day, accessing this particular site would trigger a linux bug at our end was a bit strange.
FWIW I'm running the Wheezy kernels here with no such problems. It may be something particular in your iptables rules affecting the checksum.
We have no iptables rules. We have issues with these two sites http://www.usitc.gov/ http://hts.usitc.gov/ The second one gives us frames, but no content.. err.. In the access.log it can look like this 1322829005.662 30215 XX.XX.XX.XX TCP_MISS/000 0 GET http://www.usitc.gov/ - DIRECT/63.173.254.47 - I take it you have already tried that one.
Its probably best to take this to the netfilter mailing list now and see if anyone there has a better clue than me.
Ok, I might do that. I was thinking of trying to contact the admins at usitc to see what they think, but thought I would try here first. You have been very responsive, thank you. Regards -- Fredrik
