Re: Window scaling problem?

2006-12-11 Thread Alan
On Mon, 11 Dec 2006 18:29:44 +0100
Malte Schröder <[EMAIL PROTECTED]> wrote:

> Isn't window scaling something that the tcp-stacks on both ends of the 
> connection do? AFAIK the routers and firewalls that push the packets around 
> have nothing to do with it .. but I could be wrong ;)

Correct. You've just proved you are more qualified than some firewall
product designers. Some "firewall" products like to tamper with the TCP
stream however, or are just too stupid to parse options.

Alan
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/


Re: Window scaling problem?

2006-12-11 Thread Malte Schröder
On Monday 11 December 2006 11:03, Jan Engelhardt wrote:
> Is there some test utility I can run that reliably says if there is a
> broken window scaler in the path to an arbitrary host?

Isn't window scaling something that the tcp-stacks on both ends of the 
connection do? AFAIK the routers and firewalls that push the packets around 
have nothing to do with it .. but I could be wrong ;)

BTW. I am seeing similar things when I go through a CheckPoint VPN-1 firewall.

Regards
-- 
---
Malte Schröder
[EMAIL PROTECTED]
ICQ# 68121508
---



pgpn6uPPwQwBI.pgp
Description: PGP signature


Re: Window scaling problem?

2006-12-11 Thread Jan Engelhardt

On Dec 11 2006 10:26, Benny Amorsen wrote:
>> "CP" == Cal Peake <[EMAIL PROTECTED]> writes:
>
>CP> I saw this with kernels v2.6.16, v2.6.17, and v2.6.18. Windows XP
>CP> however didn't seem to have any problems. So unless Windows
>CP> doesn't have window scaling on by default (or uses a workaround)
>CP> it could be a broken kernel.
>
>XP doesn't do Window Scaling by default, but Vista will. Hopefully
>that should flush out the old PIX's. Versions old enough to break
>Window Scaling are old enough to be insecure anyway.

Is there some test utility I can run that reliably says if there is a 
broken window scaler in the path to an arbitrary host?


-`J'
-- 
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/


Re: Window scaling problem?

2006-12-11 Thread Benny Amorsen
> "CP" == Cal Peake <[EMAIL PROTECTED]> writes:

CP> I saw this with kernels v2.6.16, v2.6.17, and v2.6.18. Windows XP
CP> however didn't seem to have any problems. So unless Windows
CP> doesn't have window scaling on by default (or uses a workaround)
CP> it could be a broken kernel.

XP doesn't do Window Scaling by default, but Vista will. Hopefully
that should flush out the old PIX's. Versions old enough to break
Window Scaling are old enough to be insecure anyway.


/Benny


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/


Re: Window scaling problem?

2006-12-11 Thread Benny Amorsen
 CP == Cal Peake [EMAIL PROTECTED] writes:

CP I saw this with kernels v2.6.16, v2.6.17, and v2.6.18. Windows XP
CP however didn't seem to have any problems. So unless Windows
CP doesn't have window scaling on by default (or uses a workaround)
CP it could be a broken kernel.

XP doesn't do Window Scaling by default, but Vista will. Hopefully
that should flush out the old PIX's. Versions old enough to break
Window Scaling are old enough to be insecure anyway.


/Benny


-
To unsubscribe from this list: send the line unsubscribe linux-kernel in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/


Re: Window scaling problem?

2006-12-11 Thread Jan Engelhardt

On Dec 11 2006 10:26, Benny Amorsen wrote:
 CP == Cal Peake [EMAIL PROTECTED] writes:

CP I saw this with kernels v2.6.16, v2.6.17, and v2.6.18. Windows XP
CP however didn't seem to have any problems. So unless Windows
CP doesn't have window scaling on by default (or uses a workaround)
CP it could be a broken kernel.

XP doesn't do Window Scaling by default, but Vista will. Hopefully
that should flush out the old PIX's. Versions old enough to break
Window Scaling are old enough to be insecure anyway.

Is there some test utility I can run that reliably says if there is a 
broken window scaler in the path to an arbitrary host?


-`J'
-- 
-
To unsubscribe from this list: send the line unsubscribe linux-kernel in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/


Re: Window scaling problem?

2006-12-11 Thread Malte Schröder
On Monday 11 December 2006 11:03, Jan Engelhardt wrote:
 Is there some test utility I can run that reliably says if there is a
 broken window scaler in the path to an arbitrary host?

Isn't window scaling something that the tcp-stacks on both ends of the 
connection do? AFAIK the routers and firewalls that push the packets around 
have nothing to do with it .. but I could be wrong ;)

BTW. I am seeing similar things when I go through a CheckPoint VPN-1 firewall.

Regards
-- 
---
Malte Schröder
[EMAIL PROTECTED]
ICQ# 68121508
---



pgpn6uPPwQwBI.pgp
Description: PGP signature


Re: Window scaling problem?

2006-12-11 Thread Alan
On Mon, 11 Dec 2006 18:29:44 +0100
Malte Schröder [EMAIL PROTECTED] wrote:

 Isn't window scaling something that the tcp-stacks on both ends of the 
 connection do? AFAIK the routers and firewalls that push the packets around 
 have nothing to do with it .. but I could be wrong ;)

Correct. You've just proved you are more qualified than some firewall
product designers. Some firewall products like to tamper with the TCP
stream however, or are just too stupid to parse options.

Alan
-
To unsubscribe from this list: send the line unsubscribe linux-kernel in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/