Date: Tue, 20 Mar 2007 13:42:24 -0400 From: WAYNE KING <king.812@osu.edu> To: freebsd-pf@freebsd.org Subject: problem with linux kernel 2.16.18.2 and packet filter Message-ID: <2a1c4c62a19f27.2a19f272a1c4c6@osu.edu>
next in thread | raw e-mail | index | archive | help
Hello list, My subnet at Ohio State is running a BSD firewall with packet filter. It works great, but I just encountered a weird problem with the linux 2.16.18.2 kernel and packet filter. When the firewall was on I could do absolutely nothing via the web; every page would hang. As soon as I turned the firewall off, all connections worked fine. Apparently this is a known bug? and changing the tcp_window_scaling setting in the kernel to 0 fixes it. Anyway I was hoping that someone could explain to me why that setting might cause a problem with packet filter. It irritated me for weeks. By the way I'm using OpenSuse 10.2 --never had it up to and including Suse 10.1. I'm not sure if this is a problem in general with that kernel or with some distro particular. I'm running fedora core 6 on another computer and that works fine. I just discovered this fix so I haven't checked what kernel that has installed (fedora core 6) or what the tcp_window_scaling is by default. The following com mand fixed it on my computer (openSuse 10.2) echo 0 > /proc/sys/net/ipv4/tcp_window_scaling Any quick insights just for my own education? Thanks so much, Wayne King
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?2a1c4c62a19f27.2a19f272a1c4c6>