> I'm having a problem where twice a day or so, any new tcp connection
> it gets stuck in SYN_SENT. Eventually this situation rights itself,
> but obviously in the meantime many services (e.g. squid, X) are
> broken. The machine does IP masquerdading with ipchains, and
> masqueraded connections through it seem to be unaffected. The kernel
> version is 2.2.18, although the same happened with 2.2.17.
>
[SNIPPED]
You probably compiled your kernel with "CONFIG_INET_ECN" set.
If so, you need to turn it OFF in /proc/sys/net/...something_ecn.
Many/most/all servers are "not ready for prime time" and will
reject packets that have "strange" bits set.
Cheers,
Dick Johnson
Penguin : Linux version 2.4.0 on an i686 machine (799.53 BogoMips).
"Memory is like gasoline. You use it up when you are running. Of
course you get it all back when you reboot..."; Actual explanation
obtained from the Micro$oft help desk.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/