On Tue, Mar 19, 2002 at 07:19:25PM +0900, Takuya Satoh wrote:
> > > Hi,
> > > Does the old FTOS target zero the ECN bits?
> >
> > Quick Answer = YES
> >
> > Long Answer -> FTOS takes whatever HEX code you specify and overwrites
> > _all_ 8 bits of the TOS field. So if you only specify say 0xf0 then the
> > ECN are overwritten with 0's. make sense?
> 
> Perfectly clear, thanks.  So the FTOS target (but not the new DSCP) can be
> also used to selectively remove the ECN-enabled bit from syn packets going
> to some "bad" hosts throwing away any ECN-enabled connection (until the new
> ECN target is finished ...).

NO, you can NOT!!!  Please DON'T do this.  YOU are causing ECN blackholes
this way.

In order to work around ECN blackholes, one needs to clear the ECN bits
in the TCP header, not IP header.

> Taka

-- 
Live long and prosper
- Harald Welte / [EMAIL PROTECTED]               http://www.gnumonks.org/
============================================================================
GCS/E/IT d- s-: a-- C+++ UL++++$ P+++ L++++$ E--- W- N++ o? K- w--- O- M+ 
V-- PS++ PE-- Y++ PGP++ t+ 5-- !X !R tv-- b+++ !DI !D G+ e* h--- r++ y+(*)

Reply via email to