Re: RFC1323 problems

2007-03-06 Thread Federico Giannici
I'm behind an OpenBSD firewall, but it uses no keep state. Anyway, I tried just now to temporarily disable PF on the firewall (and in my PC too) but nothing changed. Thanks. Tim Kuhlman wrote: Are you using pf at all? This sounds similar to the issue I had with my pf rules not too long

Re: RFC1323 problems

2007-03-05 Thread Federico Giannici
If someone want to reproduce the problem, here it is the address of the web site: https://www.bancadipalermo.it/index.jsp In this first page, often (about half of times) the Sella.it Banca di Palermo image in the top left corner doesn't load. Inside the site, there are many other parts that

Re: RFC1323 problems

2007-03-05 Thread Tim Kuhlman
Are you using pf at all? This sounds similar to the issue I had with my pf rules not too long ago. In a nutshell rfc1323 defines tcp window scaling and the scaling factor only shows up in the syn packet of a tcp connection. So you have to make sure you only match state based on the syn packet (ie

Re: RFC1323 problems

2007-03-05 Thread Lars Hansson
Federico Giannici wrote: If someone want to reproduce the problem, here it is the address of the web site: https://www.bancadipalermo.it/index.jsp In this first page, often (about half of times) the Sella.it Banca di Palermo image in the top left corner doesn't load. Inside the site, there

RFC1323 problems

2007-03-04 Thread Federico Giannici
Since I upgraded my two desktops to OpenBSD i386 4.0-stable I started experiencing problems with the web site of my Bank. Often, but not always, some pages and images don't load and go in timeout. This happens with both Firefox and Konqueror. Now I just found that if I disable the RFC1323