Did your problem get resolved after changing MTU/MSS? From tcpdump it looks
like you never got syn-ack back. I would not expect it to ne MTU issue.
-----Original Message-----
From: Jiju Susmer [mailto:jijususmer@yahoo.com]
Sent: Tuesday, 20 September 2005 10:33 p.m.
To: Jiju Susmer; Sasa Rasovic; firewalls@securityfocus.com
Subject: Re: Cisco 3845 Integrated Services Router -- Browsing problem
Hi,
I have attached the dump of the trace what lead to the
fix of this problem. I had to recreate this
environment to show what all things might go wrong in
networking.
The environment here has two ISPs connected via Linux
Box as Firewall. The connction was tried to a sql
server called examplehost.
-- JS
--- Jiju Susmer <jijususmer@yahoo.com> wrote:
At last it has been confirmed as:
Its a typical cisco ios bug..the solution is to
enforce the router to handshake at 1400(mss
value).if
the mss value is set to default , the packets were
getting dropped (coz of the bug)on the internet
(and
there is no way we can trace it..a bit simple but
complicated one.|:)
-- JS
--- Sasa Rasovic <sasarasovic@hotmail.com> wrote:
I suppose you should try adjusting your MTU and
mss
of transit packets on
the public interface.
for example: ip tcp adjust-mss 1400
----- Original Message -----
From: "Jiju Susmer" <jijususmer@yahoo.com>
To: <firewalls@securityfocus.com>
Sent: Tuesday, August 30, 2005 6:30 AM
Subject: Cisco 3845 Integrated Services Router --
Browsing problem
Hi,
I have a client who installed CISCO 3845 ISR to
connect to the internet via a leading ISP. But
he
has
problem in accessing Certain sites, say
Google.com
comes fast and works fine, but yahoo, rediff etc
hangs.
One of the major features of this series router
is
Network Admission Control, but its turned off.
Content
filter is also off.
To see is not ISP problem we replaced the router
with
a lower series (2500), it worked fine with no
changes
in Workstation settings.
I know that this request doesn't belong here in
this
list, but as the members of this group are
dealing
with network, I suppose some one may have had
this
problem and can help me solving it.
Any luck?
Thanks
-- JS
____________________________________________________
Start your day with Yahoo! - make it your home
page
http://www.yahoo.com/r/hs
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam
protection around
http://mail.yahoo.com
__________________________________
Yahoo! Mail - PC Magazine Editors' Choice 2005
http://mail.yahoo.com
