After much trial and error I determined the cause of this problem: TCP Explicit
Congestion Notification support is built into the stock Mandrake 8.1 kernel and
is not turned off at boot time. Obviously, the root of the problem is
walgreens, etc. having bad routers (not sure why my print server was refusing
the connection as well) but Mandrake either needs to disable this in their
kernels or provide an init script that does:

echo 0 > /proc/sys/net/ipv4/tcp_ecn

Very, very nasty problem to track down.

On 31-Oct-2001 Jason Bodnar wrote:
> I upgraded to 8.1 the other day and now I can't connect to certain hosts such
> as walgreens.com, matrix.net, puc.state.tx.us or the web admin interface of
> my
> Intel printserver. 
> 
> Simply trying to telnet to any of these hosts results in a connection
> refused:
> 
> $ telnet www.walgreens.com 80
> Trying 63.73.199.22...
> telnet: Unable to connect to remote host: Connection refused
> 
> $ telnet pucsmtp.puc.state.tx.us 25
> Trying 168.39.76.245...
> telnet: Unable to connect to remote host: Connection refused
> 
> $ telnet 192.168.1.5 80
> Trying 192.168.1.5...
> telnet: Unable to connect to remote host: Connection refused
> 
> 
> A windows machine and a Mandrak 8.0 box on my internal network can get to
> these
> hosts just fine.
> 
> The only table configured is nat:
> 
> $ sudo iptables -t nat -L
> Chain PREROUTING (policy ACCEPT)
> target     prot opt source               destination         
> 
> Chain POSTROUTING (policy ACCEPT)
> target     prot opt source               destination         
> MASQUERADE  all  --  anywhere             anywhere           
> 
> Chain OUTPUT (policy ACCEPT)
> target     prot opt source               destination         
> 
> 
> The rest are empty:
> 
> $ sudo iptables -t filter -L
> Chain INPUT (policy ACCEPT)
> target     prot opt source               destination         
> 
> Chain FORWARD (policy ACCEPT)
> target     prot opt source               destination         
> 
> Chain OUTPUT (policy ACCEPT)
> target     prot opt source               destination    
> 
> $ sudo iptables -t mangle -L
> Chain PREROUTING (policy ACCEPT)
> target     prot opt source               destination         
> 
> Chain OUTPUT (policy ACCEPT)
> target     prot opt source               destination   
> 
> 
> Any ideas?
> 
> -- 
> Jason Bodnar
> [EMAIL PROTECTED]
> 

-- 
Jason Bodnar
[EMAIL PROTECTED]

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to