From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 3108 invoked by alias); 4 Jul 2011 16:08:01 -0000 Received: (qmail 3094 invoked by uid 22791); 4 Jul 2011 16:08:00 -0000 X-SWARE-Spam-Status: No, hits=-2.0 required=5.0 tests=AWL,BAYES_00,T_RP_MATCHES_RCVD X-Spam-Check-By: sourceware.org Received: from yosemite.airs.com (HELO yosemite.airs.com) (64.13.131.148) by sourceware.org (qpsmtpd/0.43rc1) with SMTP; Mon, 04 Jul 2011 16:07:46 +0000 Received: (qmail 26496 invoked by uid 10); 4 Jul 2011 16:07:45 -0000 Received: (qmail 22081 invoked by uid 500); 4 Jul 2011 16:07:40 -0000 Mail-Followup-To: overseers@sourceware.org, jan.kratochvil@redhat.com From: Ian Lance Taylor To: Jan Kratochvil Cc: overseers@sourceware.org Subject: Re: Two (active FTP + SACK) sourceware.org FTP download problems References: <20110703073206.GA20550@host1.jankratochvil.net> <20110703161330.GH26457@ednor.casa.cgf.cx> <20110703162122.GA26832@host1.jankratochvil.net> <20110703163358.GJ26457@ednor.casa.cgf.cx> <20110703164755.GA28018@host1.jankratochvil.net> <20110703181401.GA996@host1.jankratochvil.net> Date: Mon, 04 Jul 2011 16:08:00 -0000 In-Reply-To: <20110703181401.GA996@host1.jankratochvil.net> (Jan Kratochvil's message of "Sun, 3 Jul 2011 20:14:01 +0200") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Mailing-List: contact overseers-help@sourceware.org; run by ezmlm Precedence: bulk List-Id: List-Archive: List-Post: List-Help: , Sender: overseers-owner@sourceware.org X-SW-Source: 2011-q3/txt/msg00012.txt.bz2 Jan Kratochvil writes: > On Sun, 03 Jul 2011 19:05:28 +0200, Ian Lance Taylor wrote: >> Jan Kratochvil writes: >> > I do not find such workarounds as acceptable for downloads for users. >> >> What specifically do you suggest that we change on sourceware.org? > > After you have shown iptables there I no longer think there is any problem. > > >> I'm not sure if you are saying that you are going to open a ticket with >> Red Hat IT, or if you are suggesting that we do so. > > I have opened RH internal ticket INC000000306811 (all Cced Frank Eigler) for > the SACK problem. > > > The FTP active data transfer problem was a test mistake on my side, it got > firewalled by _my_ NAT server (this seems to be a RHEL bug but that is OT > here). For IPv6 or a tunnel security permission I have opened RH internal > ticket INC000000306811. > > >> In particular they seem to filter out SYN packets when some IP address >> exceeds some unknown threshold; this is painful for us at Google, since many >> people share a single outgoing NAT IP address. > > I also see this problem, opened RH internal ticket INC000000306813 for it. Great, thanks! Ian