Mailinglist Archive: opensuse-security (448 mails)

[Stijn Vander Maelen <stijn@xxxxxxxxxxxxxxxxx>]

On Thu, 16 May 2002, Austin Morgan wrote:

> My configuration for NAT is using SuSEfirewall2 I have set
> FW_MASQ_NETS="192.168.0.0/16".  I am connected using an cable modem and
> everything there seems ok.  The only place I can not access (for a week
> now) is google.  What is ECN Markus?

ECN is an option when you compile your kernel, it's under general
networking options: this is the help text:

CONFIG_INET_ECN:
Explicit Congestion Notification (ECN) allows routers to notify
clients about network congestion, resulting in fewer dropped packets
and increased network performance.  This option adds ECN support to
the Linux kernel, as well as a sysctl (/proc/sys/net/ipv4/tcp_ecn)
which allows ECN support to be disabled at runtime.
Note that, on the Internet, there are many broken firewalls which
refuse connections from ECN-enabled machines, and it may be a while
before these firewalls are fixed.  Until then, to access a site
behind such a firewall (some of which are major sites, at the time
of this writing) you will have to disable this option, either by
saying N now or by using the sysctl.
If in doubt, say N.

in belgium there's at leat one site (www.planetinternet.be) that i
couldn't get access to with ecn in the kernel. i can access  google.be
however.

regards,
stijn


>
> Austin
> On Thu, May 16, 2002 at 08:13:55PM +0700, Kheli wrote:
> >
> > Maybe you can tell us what is your configuration For NATing your local
> > Network. Probably, you have made mistake.
> > Are you connecting to Internet using Dial-up connection?
> > Can you tell me what type of connection do you have ?
> >
> > -----Original Message-----
> > From: Austin Morgan [mailto:admorgan@xxxxxxxxxxxxxxxxxxx]
> > Sent: 16 Mei 2002 18:27
> > To: suse-security@xxxxxxxx
> > Subject: Re: [suse-security] Strange Web Behavior
> >
> > Yes, as far as I can tell I can access every site except google.com.  I
> > also thought that it was packet forwarding, but then I should at least
> > have something logged, or I should not be able to access any web pages
> > not on my local network.
> >
> > Austin
> > On Thu, May 16, 2002 at 07:12:24AM +0200, Raymond Leach wrote:
> > > Hi
> > >
> > > Sounds like packet forwarding is not working. Can the machines behind
> > the firewall access any other sites.
> > >
> > > Ray
> > >
> > > 02/05/15 17:37:07, Austin Morgan <admorgan@xxxxxxxxxxxxxxxxxxx> wrote:
> > >
> > > >I am using an gateway on my network with NAT and firewall.
> > Everything
> > > >seems to work fine, but I am not able to connect to google.com.  This
> > is
> > > >very strange because for the past 1 1/2 years I have been using this
> > > >system I have not had a problem with it.  I discovered that if I ssh
> > > >into the firewall and use lynx that I can access google and run
> > > >searches, but none of the computers behind the firewall can.  There
> > are
> > > >no logs saying that the firewall is droping anything and the DNS
> > reports
> > > >an accurate ip address.  Does anyone have any suggestions as to what
> > > >might be happening?
> > > >--
> > > > __  __  ____ ____
> > > >|  \/  |/ ___/ ___|  Austin Morgan
> > > >| |\/| | |   \___ \  Morgan Computer Services
> > > >| |  | | |___ ___) | 479-857-1189
> > > >|_|  |_|\____|____/  www.morgancomputers.net
> > > >
> > > >
> > > >--
> > > >To unsubscribe, e-mail: suse-security-unsubscribe@xxxxxxxx
> > > >For additional commands, e-mail: suse-security-help@xxxxxxxx
> > > >Security-related bug reports go to security@xxxxxxx, not here
> > > >
> > > ----------------------------------------
> > > Ray Leach (Technical Network Specialist)
> > > Knowledge Factory
> > > www: http://www.knowledgefactory.co.za
> > > Tel: +27-11-445-8100 Direct: 445-8263
> > > Fax: +27-11-445-8101
> > > "No matter where you go, there you are."
> > > ----------------------------------------
> > >
> > >
> > > --
> > > To unsubscribe, e-mail: suse-security-unsubscribe@xxxxxxxx
> > > For additional commands, e-mail: suse-security-help@xxxxxxxx
> > > Security-related bug reports go to security@xxxxxxx, not here
> > >
> >
> > --
> >  __  __  ____ ____
> > |  \/  |/ ___/ ___|  Austin Morgan
> > | |\/| | |   \___ \  Morgan Computer Services
> > | |  | | |___ ___) | 479-857-1189
> > |_|  |_|\____|____/  www.morgancomputers.net
> >
> >
> > --
> > To unsubscribe, e-mail: suse-security-unsubscribe@xxxxxxxx
> > For additional commands, e-mail: suse-security-help@xxxxxxxx
> > Security-related bug reports go to security@xxxxxxx, not here
> >
> >
>
> --
>  __  __  ____ ____
> |  \/  |/ ___/ ___|  Austin Morgan
> | |\/| | |   \___ \  Morgan Computer Services
> | |  | | |___ ___) | 479-857-1189
> |_|  |_|\____|____/  www.morgancomputers.net
>
>
> --
> To unsubscribe, e-mail: suse-security-unsubscribe@xxxxxxxx
> For additional commands, e-mail: suse-security-help@xxxxxxxx
> Security-related bug reports go to security@xxxxxxx, not here
>