linux-kernel - Re: server don't accept ip-connections from linux

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20061214001247.GA26676@artselect.com>
Date:	Wed, 13 Dec 2006 18:12:47 -0600
From:	Pete Harlan <harlan@...select.com>
To:	Dieter Ferdinand <dieter.ferdinand@....de>
Cc:	linux-kernel@...r.kernel.org
Subject: Re: server don't accept ip-connections from linux

On Wed, Dec 13, 2006 at 10:26:38AM +0000, Dieter Ferdinand wrote:
> i don't know, what is the difference of the tcp-packets from windows/kernel 
> 2.2 and linux with kernel 2.4. but with kernel 2.4 i have trouble with some 
> servers.
> 
> i check the packets with an analyser and make some test. if i disable ecn 
> with "echo 0x0 > /proc/sys/net/ipv4/tcp_ecn" it works, with ecn enabled, it 
> don't work.

With kernel 2.6.17.13 or higher, you can limit the scaling factor for
that broken host with:

	THEIR_IP=1.2.3.4
	MY_GATEWAY=5.6.7.8

	ip route add $THEIR_IP/32 via $MY_GATEWAY window 65535

which limits window scaling for that destination without interfering
with your other connections.

--Pete
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/