webistes not connecting - not ECN?

[Linux Frank]

Hi guys,

Got a nasty, and I'm not sure what the problem is.

I run Mozilla on FC 2, and cannot access some sites. However the output of /proc/sys/net/ipv4/tcp_ecn is 0. Which is meant to fix this problem, but it does not. So I don't think it is that. Although in that file /proc/sys/net/ipv4/tcp_ecn.filter is = 1, would this cause it? I tried changing it with vim to 0 but this did not change anything. However I might have needed to restart a service or something. I don't know. I tried disabling my firewall with the GUI tool, and that did not seem to fix anything, I assume I don't need to restart any service in this case.

Okay so the thing that will probably give the most clues. Sites I can visit, CNN.com, BBC.co.uk, google.com, redhat.com, Sites I cannot visit, Voidmain.is-a-geek.net, linuxiso.org, linuxmail.org, lycos mail, Yahoo mail (well I can visit the login screen but go not further), groklaw.net. In fact the key is that if it is a mail or forum site I can't get in. Konquerer exhibits the same issue. The status bar says connecting to voidmain.is-a-geek.net, and there is an initial package sent (light on modem flashes a couple of time) but then the whole thing waits until I get the unable to connect message.

Thanks is advance for any help that can be offered. I am not near the machine until this evening, where I will have to boot from knoppix to get to this site.

[Void Main]

Are you running any type of filter (proxy/adblock/etc)? Can you nslookup, ping, and traceroute these sites? If you can do all of the above and you don't have any filtering going on could you do a capture with Ethereal and send it to me? To do this you can fire up ethereal after making a connection, start a capture by clicking the "capture" menu and click "start". Next to the "Filter" button type in "host voidmain.is-a-geek.net" and click OK. Then go to my site in your browser until you get the failure and then stop the capture and save it as a tcpdump capture with any filename you choose, then upload it to my ftp server and I can take a look at it.

Also, FYI on changing /proc variables. Just echo the value to the variable you want to change rather than using "vi" on it:

# echo 0 > /proc/sys/net/ipv4/tcp_ecn.filter

Also note that this change is *not* permanent. If you want to make it permanent you should add it to your /etc/sysctl.conf or add the "echo" command above to one of your startup scripts (/etc/rc.d/rc.local is a good one).

[Linux Frank]

Hmm, curiouser and curiouser said Frank.

So I just got an e-mail from the future wife, and she sent it from her account at linuxmail, from her account on the machine. So maybe there was some kind of security related issue with the Boston lines, or something. Any way I'll go home tonight and see what I can find out. I don't like the fact that anything changes, without my knowing what or why. That was why I dumped the major proprietary OS.

I'll see what happens when I get home. Maybe I forgot to restart a service or something with all the changes, I was trying to configure net access, and had a hard time because of this issue.

This is a fresh install of FC2 (my first fedora and it rocks), been waiting a long time for this one. Mandrake just lost out to Fedora.

Thanks.

[Void Main]

The interesting thing to me is that this only happens on URLs with "mail" and "forum" in them. That seems to not be a kernel issue but either a resolution issue or a filtering issue.

BTW, I like FC2 as well, however I am finding that it has *way* more issues as far as bugs/broken than FC1 had. Most of the problems I have run in to are kernel 2.6.x related. I guess when such radical changes are made throughout the entire distro this should be somewhat expected. Hopefully the updates will come rapidly to resolve all of the issues, and the 3rd party driver vendors put out new drivers for their proprietary hardware.

[byrdman]

what kind of issues are you having with the 2.6.x kernel?

[Linux Frank]

resolution issue?

possible considering this

netcraft blog

[Void Main]

resolution issue?

possible considering this

netcraft blog

Well, an nslookup/ping/traceroute will help determine where the problem actually is.

[Void Main]

what kind of issues are you having with the 2.6.x kernel?

Well, now that I think about it I have really only had one issue that I can blame *directly* on the kernel and that is 1394 module support (firewire for my video camera). If I compile and instll the 1394 modules the system locks up on boot. This is documented and I don't believe it's fixed yet. I think they say it only locks when kudzu is run but I'm not running kudzu on boot so I think it's worse than they are stating.

I have a few other kernel "related" issues like the current nVidia driver doesn't work with the Fedora shipped kernel because of them using a 4K stack rather than an 8K stack. nVidia should be coming out with new drivers soon. Another issue is with the madwifi drivers. If I don't load the modules in a certain way the system will lock up (including if I just have the modules installed in the kernel modules tree (/lib/modules/kernver/net/)). Those are the major ones that have bit me.

[Linux Frank]

Well at home, I am, and I find everything is working. Without the problem I can't try to fix it - hate these sorts of problems.

If it happens again I'll perfom the checks and let you know.

Thanks.

[Void Main]

You wouldn't happen to be running Squid and the Ad Zapper script would you? I just had a similar problem that turned out to have started when my update-zapper script ran last night. I ran it again today and restarted Squid and now all is back to normal. I only see one line different from the bad redirect script and the good one:

Bad line:

Code: Select all

AD http://*www*.|)journalregister.com/circads/*.jpg


Good line:

Code: Select all

AD http://(www*.|)journalregister.com/circads/*.jpg


[byrdman]

Because right when I was upgrading my laptop to the 2.6.x kernel, I was reading the forums. And it was a good thing I did not order the firewire port on my laptop!!! And Void knows how many times I have had linux on my laptop!!!!!!!!
Thanks Void!!!
I say we set up a donation for Void through PayPay!!! Who is with me??

[Void Main]

Heh heh, actually having the firewire port would have been just fine, you just wouldn't have been able to use it because firewire support is disabled. Had you recompiled your kernel with firewire support it probably would have locked up on you which is why it is disabled by default. :)

[Linux Frank]

Aaaaarrggghhh.

So I found out why I have all these website issues, why it took forever to download FC2. Some bright spark decided to put the frame used for drying clothes next to the couch. Folded up it fits between couch and wall, nicely. In so doing they have hit the telephone cable. Probably only a dent in one of the wires, but what do you know, replace the cable and suddenly lighting fast connection again, and completely stable connection to my Modem - comparatively speaking of course.

You would think these people would have more sense.

This appears to be the route of all my problems, and a few nagging issues I have had with the connection for a while.

This does not explain why the secure sites had a problem, predominantly, but it has cured the issue. I still have to leave things going for a week to test, might have to download a distribution to check we are all up to par

It would appear I was trying to solve the wrong issue. The slow downloads and unstable connection only became really obvious a couple of days ago. Ironically I was talking to Verizon, when it suddenly hit me where the problem was. I was staring at the plug socket before it finally clicked into place. Sometimes I can be really slow on the uptake.

Sorry to waste your efforts on something so bitingly obvious - would you believe I test and repair electronic equipment for a living - yes it is scary, you could be using equipment I tested or fixed -bwahahahah

[Void Main]

Heh heh. That's funny!