Re: Iptables & ECN

[Thomas Lussnig]

>
>
>
>	I'm afraid I've just run in an embarassing iptables « bug » on
>2.4.13-ac7. When I tell iptables to drop unclean packets with ecn on I
>can no longuer connect to ftp.kernel.org, and get a lot of ipt_unclean:
>TCP reserved bits not zero in the logs. Shouldn't iptables be made
>ecn-aware ? (especially given all the red-inked comments on ECN in the
>FAQ)
>
Yes,
this is an often discussed problem. An i think it should fixed in the
actuall cvs tree. But its not to hard to fix it self. :-)

Cu Thomas