Thanks Henrik,
Found the last section about the ECN thing of linux.
Just do a echo "0"/proc/sys/net/ipv4/tcp_ecn and everything works like a
charm =)
Its just funny that my previous transparent installations with older 2.4
kernels didnt come up with such a bug, but the new 2.4.18 gave this
prob.
Anyway many thanks again!
best regards,
sixx
On Thu, 2002-03-28 at 10:35, Henrik Nordstrom wrote:
> Have you read the Squid FAQ, section Linux oddities?
>
> (there are many broken sites out there, Linux triggers a lot of them)
>
> Regards
> Henrik Nordström
> Squid Developer
>
>
> sixx wrote:
> >
> > Hi dudes,
> >
> > I'm stuck here with a funny problem running a transparent squid
> > 2.4STABLE3 with 2.4.18 on iptables 1.2.5-3 for NAT and port redirecting.
> >
> > Everything works fine except connection to www.sony.com (connection
> > refused), www.dlink.com (time out) and to my provider's web page (time
> > out) ...
> >
> > Interesting bit is if traffic is directed through squid, this problems
> > occur, but if there's no transparent proxy, you can access all of the
> > web sites.
> >
> > telnet www.sony.com 80 also gives connection refused from the gateway.
> > tcpdump shows packets leaving my WAN interface.
> >
> > iptables only has the rules for NAT and redirection. Squid only have the
> > stock config for transproxy and acl for local users to use squid.
> >
> > Any ideas?
> >
> > best regards,
> > sixx
> >
> > _____________________________________________________________________
> > This OUTBOUND message has been checked for all known viruses by the
> > Swiftech Virus Scanning Service. For further information visit
> > http://www.swiftech.net.sg/html/antivirusdetails.html or write to antivirus@swiftech.net.sg.
_____________________________________________________________________
This OUTBOUND message has been checked for all known viruses by the
Swiftech Virus Scanning Service. For further information visit
http://www.swiftech.net.sg/html/antivirusdetails.html or write to antivirus@swiftech.net.sg.
Received on Wed Mar 27 2002 - 21:21:02 MST
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:07:09 MST