> them from the firewall). After the browser says 'connected to X' > the connections stalls. I've checked the ECN feature, and it is > not compiled in the kernel. Actually, that "connected to" pretty much guarantees it isn't the ECN problem - ECN through a buggy site would cause the syn to drop, so you'd never get the connection started. (Not that this helps...)