[UCIMC-Tech] no Google access for Bike Project, please help

[Josh King]

David Young wrote:
> On Wed, Sep 24, 2008 at 02:32:34PM -0500, Stuart Levy wrote:
>> On Wed, Sep 24, 2008 at 02:16:44PM -0500, Barry Isralewitz wrote:
>>> Hi,
>>>
>>>  To anyone working on the building network this week, helping with with the
>>> current servers/websites outage:
>>>
>>> Please fix Google domain access for the Bike Project shop - at least for
>>> wired ethernet and (if time) also for basement wireless ethernet.
>>
>> I tried doing a tcpdump from a Mac laptop last weekend while on the IMC net.
>> After exchanging a few packets, google sends a RST -- or at least that's the
>> way it looks on the wire.
>>
>> Is it possible this is a TCP ECN problem, where the RST isn't actually
>> coming from google but is a misfeature of the router?  What's doing the 
>> routing from IMC-net to the rest of the world -- a dedicated box, or a FreeBSD
>> host, or what?
> 
> IIRC, Josh King wrote previously that IMC has an OpenBSD/PF firewall.
> There is a harmful interaction between the firewall and TCP window
> scaling.
> 
> Dave
> 
Like Dave said, the firewall thing is a known issue. The setup of the
new firewall is near the top of my list of projects, I just happen to be
out of town at the moment. When I'm back next week I will make its setup
a priority.

-- 
Josh King
--
"I am an Anarchist not because I believe Anarchism is the final goal,
but because there is no such thing as a final goal." -Rudolf Rocker


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: OpenPGP digital signature
Url : http://lists.chambana.net/mailman/archive/imc-tech/attachments/20080924/0d21b7bb/signature.pgp