Re: [Fwd: [Bug 3397] New: Network connections hang going through an OpenBSD firewall]

[Vladimir <vlists@xxxxxxx>]

David S. Miller wrote:

> OpenBSD packet filter is busted, and the maintainer of
> it claims this is not a bug.
>
> That changes in 2.6.6 didn't "break" things, it enabled a
> feature in TCP that OpenBSD stateless TCP connection tracking
> cannot handle, and old TCP feature in fact, window scaling.
>
> See here for more info:
>
> http://lwn.net/Articles/92727/
Thanks. We were able to fix our firewall so things work properly now. 
The problem is that this is "insidious" since it is not immediately 
apparent what the problem is especially since it tends to work with all 
other OSes except Linux with 2.6.6+.
I will note this on the bug I submitted and close it.

Thanks a lot,

Vladimir Vuksan