Re: [SQU] Need Info . . .

Henrick -

Thanks, I had found the ECN problem and that fixed it. The
tcp_timestamps I had not.

I will go ahead and upgrade to 2.4 to address the squid/2.4.x kernel
ip_tables issues.

Thanks! I will let you know how it turns out.

Bryan -

Henrik Nordstrom wrote:
>
> Bryan Campbell wrote:
>
> > O.K. Here is an odd behaviour. From the command line on a RH 7.0 2.2.x
> > machine I can pull up www.postnet.com with lynx. From the machine
> > installed with RH 7.0 2.4.2 reiserfs, etc . . . running squid (as per
> > Joe's instructions) with squid turned off and all redirection shut-down,
> > I cannot. Is there a whole new batch of gotchas for 2.4.x kernels?
>
> Your 2.4.2 kernel most likely have the ECN TCP extension enabled. Some
> firewalls gets confused by this.
>
> echo 0 >/proc/sys/net/ipv4/<something with ecn in the name>
>
> You might also want to disable TCP timestamps which share the same
> problem but to an lesser extent
>
> echo 0 > /proc/sys/net/ipv4/tcp_timestamps
>
> I'll see if I can find the patch needed, or you could try upgrading to
> Squid-2.4 which includes the needed changes.. (I also have a Squid-2.2
> backport of this and some other stuff in the branch hno-2_2-mara on
> cvs.squid.sourceforge.net. I should clean it up a bit and make a new
> "hno" 2.2 snapshot)
>
> --
> Henrik Nordstrom
> Squid hacker
>
> --
> To unsubscribe, see http://www.squid-cache.org/mailing-lists.html

-- 
Bryan Campbell - <bbc@misn.com>
Steelville Telephone Exchange
573-775-2111
--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html