Re: Secure site browser access

[John Batistic <johnbat@win.co.nz>]

On Wed, 2002-10-30 at 09:23, Carlos Sousa wrote:
> On 29 Oct 2002 21:05:37 +1300 John Batistic <johnbat@win.co.nz> wrote:
> 
> > Following a new woody-XFS install I am unable to access _some_ secure
> > sites, two in particular. The same situation exists for Mozilla,
> > Konqueror and Opera and it happens before I get to password entry, just
> > loading the site.
> > 
> > One site is a credit card site, the other is a bank.
> > 
> > However, an old install on another machine works just fine.
> (snip)
> 
> Check whether ECN id turned on or off in your kernel:
> 
>    # cat /proc/sys/net/ipv4/tcp_ecn 
> 
> if you get 1, then try turning ECN off by doing
> 
>    # echo 0 > /proc/sys/net/ipv4/tcp_ecn 
> 
> and check whether you now can access the troublesome websites.
> 
> If this works, you might consider adding this line to some local
> init script to ensure ECN is turned off every time you boot the machine.
> 
> HTH.

Thank you Carlos. It is indeed the nature of my problem.
I guess that in this transition period, if it _is_ a transition period,
having CONFIG_INET_ECN enabled and tcp_ecn disabled is a convenient
solution.

Cheers
John Batistic