linux-kernel - Re: [BUG] ? Strange behaviour since kernel 2.6.17 with a https website

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:	Fri, 29 Sep 2006 14:14:42 -0500
From:	Pete Harlan <harlan@...select.com>
To:	Tchesmeli Serge <serge@...-linux.com>
Cc:	Joerg Roedel <joro-lkml@...g.org>, linux-kernel@...r.kernel.org
Subject: Re: [BUG] ? Strange behaviour since kernel 2.6.17 with a https website

On Fri, Sep 29, 2006 at 12:08:13PM +0200, Tchesmeli Serge wrote:
> Joerg Roedel wrote:
> > On Fri, Sep 29, 2006 at 11:47:20AM +0200, Tchesmeli Serge wrote:
> >
> >   
> >> Me and a friend have discover a stange behaviour since kernel 2.6.17.
> >>     
> >
> > Please try to switch off TCP window scaling using the command below
> > (as root) and retry.
> >
> > echo 0 > /proc/sys/net/ipv4/tcp_window_scaling
> >
> >   
> Yes, it's work!

And for a less-intrusive workaround in 2.6.18, see this commit
comment:

commit 316c1592bea94ead75301cb764523661fbbcc1ca
Author: Stephen Hemminger <shemminger@...l.org>
Date:   Tue Aug 22 00:06:11 2006 -0700

    [TCP]: Limit window scaling if window is clamped.
    
    This small change allows for easy per-route workarounds for broken hosts or
    middleboxes that are not compliant with TCP standards for window scaling.
    Rather than having to turn off window scaling globally. This patch allows
    reducing or disabling window scaling if window clamp is present.
    
    Example: Mark Lord reported a problem with 2.6.17 kernel being unable to
    access http://www.everymac.com
    
    # ip route add 216.145.246.23/32 via 10.8.0.1 window 65535
    
    Signed-off-by: Stephen Hemminger <shemminger@...l.org>
    Signed-off-by: David S. Miller <davem@...emloft.net>

----------------------------------
Pete Harlan
ArtSelect, Inc.
harlan@...select.com
http://www.artselect.com
ArtSelect is a subsidiary of a21, Inc.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/