I have a strange problem, where some clients see the website on my server and some do not. It is not about the iptables, and seems to be not about tcp wrapper. Still it is something within the box. More details: - the problem is only with some clients, with no geographical connection between them; other clients see the website just fine - the problem-clients get timeout with their browser - they get timeout also when they try a numerical ip address - but they see another machine in the same subnet just fine (when they browse by ip number), so the problem has to be inside this webserver box, right? - port 80 (not ssl) Switching off iptables does not help. The files hosts.allow and hosts.deny are empty, so I guess it's not the tcp wrapper. I am out of things to test. Any ideas? - Jussi Hirvi -- Jussi Hirvi * Green Spot Topeliuksenkatu 15 C * 00250 Helsinki * Finland Tel. +358 9 493 981 * Mobile +358 40 771 2098 (only sms) jussi.hirvi at greenspot.fi * http://www.greenspot.fi
Is one of your dns servers broken? On Thu, May 06, 2010 at 09:31:22PM +0300, Jussi Hirvi wrote:> I have a strange problem, where some clients see the website on my > server and some do not. It is not about the iptables, and seems to be > not about tcp wrapper. Still it is something within the box. > > More details: > - the problem is only with some clients, with no geographical connection > between them; other clients see the website just fine > - the problem-clients get timeout with their browser > - they get timeout also when they try a numerical ip address > - but they see another machine in the same subnet just fine (when they > browse by ip number), so the problem has to be inside this webserver > box, right? > - port 80 (not ssl) > > Switching off iptables does not help. The files hosts.allow and > hosts.deny are empty, so I guess it's not the tcp wrapper. > > I am out of things to test. Any ideas? > > - Jussi Hirvi
On Thu, 6 May 2010, Jussi Hirvi wrote:> I have a strange problem, where some clients see the website on my > server and some do not. It is not about the iptables, and seems to be > not about tcp wrapper. Still it is something within the box. > > More details: > - the problem is only with some clients, with no geographical connection > between them; other clients see the website just fineA while back, I remember there was a problem with TCP window scaling that would impact only some clients in a way that you describe: http://lwn.net/Articles/92727/ -- Paul Heinlein <> heinlein at madboa.com <> http://www.madboa.com/