Re: [SLUG] Problems with 2.4 kernel and Pix Firewalls

[Morton, Andrew [WOLL:4009-M:EXCH]]

Peter Rundle wrote:
> 
> Sluggers,
> 
> Bit of a heads up for those thinking about the 2.4 kernel,
> maybe someone can shed some light on this.
> 
> One of the guys here has just upgraded his rh6.1 box to the new
> 2.4 kernel. Networking to hosts on the same leg of the Lan works
> fine, udp, icmp and tcp. However only udp and icmp work to hosts
> on another leg of the lan, accessed via a Pix firewall (cisco).
> (The Linux box is on the higher security side).
> 

CISCO bug.  A patch is available.  See

http://www.uwsg.iu.edu/hypermail/linux/kernel/0010.1/0485.html

A workaround is

        echo "0" >/proc/sys/net/ipv4/tcp_ecn


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug