> Well, I just quickly checked both sites you mentioned. No problem from > my little ol' dial-up account. > > Anyway, how the firewall responds to what it believes to be a malformed > packet is specific to the config. One just out 'n out drops it, while > another says 'Screw that junk, you're out of here!' (i.e. rejects). > > 'Course I don't know that's the problem. I think it's called ECN, you > might check your system.
echo 0 >/proc/sys/net/ipv4/tcp_ecn fixes the problem, thanks.