Problem accessing https://my.procurve.com/profile/index.aspx (ACK is over the upper bound)

Jan Engelhardt jengelh at computergmbh.de
Sun Jul 1 15:51:17 CEST 2007


On Jul 1 2007 05:01, Krzysztof Oledzki wrote:
>>
>> > Setting net.ipv4.netfilter.ip_conntrack_tcp_be_liberal solves the problem,
>> > but this is not a right fix and now the main question is: was this ACK
>> > really over the upper bound since when
>> > net.ipv4.netfilter.ip_conntrack_tcp_be_liberal is enabled it is possible to
>> > access this page (of course with many netfilter warnings that "ACK is over
>> > the upper bound").
>
> Found this:
>
> http://groups.google.pl/group/fa.openbsd.tech/browse_frm/thread/e27c7363b2c636b5/01ba6e0fa873cf42
>
> Sounds familiar - it seems that there may be a crappy OpenBSD firewall lurking
> somewhere along the path. :(

Question... does the problem also go away if you leave
net.ipv4.netfilter.ip_conntrack_tcp_be_liberal as previously and instead set
net.ipv4.tcp_sack = 0?


	Jan
-- 



More information about the netfilter-devel mailing list