Re: [SQU] Need Info . . .

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Wed, 07 Mar 2001 08:16:16 +0100

Bryan Campbell wrote:

> O.K. Here is an odd behaviour. From the command line on a RH 7.0 2.2.x
> machine I can pull up www.postnet.com with lynx. From the machine
> installed with RH 7.0 2.4.2 reiserfs, etc . . . running squid (as per
> Joe's instructions) with squid turned off and all redirection shut-down,
> I cannot. Is there a whole new batch of gotchas for 2.4.x kernels?

Your 2.4.2 kernel most likely have the ECN TCP extension enabled. Some
firewalls gets confused by this.

echo 0 >/proc/sys/net/ipv4/<something with ecn in the name>

You might also want to disable TCP timestamps which share the same
problem but to an lesser extent

echo 0 > /proc/sys/net/ipv4/tcp_timestamps

I'll see if I can find the patch needed, or you could try upgrading to
Squid-2.4 which includes the needed changes.. (I also have a Squid-2.2
backport of this and some other stuff in the branch hno-2_2-mara on
cvs.squid.sourceforge.net. I should clean it up a bit and make a new
"hno" 2.2 snapshot)

--
Henrik Nordstrom
Squid hacker
--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html
Received on Wed Mar 07 2001 - 00:19:47 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:58:33 MST