Can't connect to some websites

anon121 · 06-02-2013, 05:20 AM

Hello,

I performed a fresh Archlinux install a couple of days ago. Everything is fine, no hardware errors, the package manager and curl work like a charm, but web browsers get stuck while connecting to some websites.

I tried with elinks, chromium and firefox and they get stuck on SSL negotiation or "waiting for <website>" for very long times.
Installed the whole thing again. Same issue.

Just tested with:

Code:

openssl s_client -connect facebook.com:443
openssl s_client -connect google.com:443

Seems to work fine, I can GET with no problems.

Then tested with:

Code:

wget --debug -O - https://facebook.com

It gets stuck to "Initializing SSL handshake" and after a couple of minutes the connection is closed with error message "Unable to establish SSL connection."

The system date and time are correct, the system is up to date, used the latest install image available at http://archlinux.org, installed following the install guide from the Archlinux wiki.
All tests performed as root.

I've also installed Windows 8: no network problems. Checked the MTU: looks correct. dmesg does not report anything strange.

Some sites get stuck only at first and then send data at normal speed. Some others instead don't work at all.

DaRkBoDoM · 06-02-2013, 01:38 PM

Have you tried temporarly disabling IPv6?

anon121 · 06-02-2013, 05:45 PM

Yeah. Also tried disabling TCP window scaling and ECN.

The strange thing is that websites work at first, but after a couple of seconds the connection slows down and blocks the next requests, as if the server doesn't respond. This happens with the web browsers only, because the package manager works well (over HTTP) even after the browsers stop working..

DaRkBoDoM · 06-02-2013, 05:57 PM

Weird QOS settings?

I think you'll have to use tcpdump to solve the mistery.

anon121 · 06-04-2013, 02:24 PM

Can't see anything strange from the output of tcpdump.

Just noticed that if I connect over TOR, the issue is not present. Other computers connecting from my LAN don't suffer from this problem (those machines run Win8 and Archlinux also).

John VV · 06-04-2013, 05:37 PM

Are the other machines using the same dns service ?

i like Google
8.8.8.8 and 8.8.4.4
and have ipv6 disabled for dns with dhcp ,set to IP address ONLY .

dustball · 06-05-2013, 01:33 AM

Create /etc/resolv.conf.head containing following:

Code:

nameserver 8.8.8.8
nameserver 8.8.4.4

Both are (as John already said) Google's DNS servers. I had the same issue for quite some time and tested everything. Network cards, wiring, routers... in the end it was the DNS itself. Sometimes your router doesn't receive correct DNS server updates from your IP and those can stick quite a while (more than half a year, at least by that time I got the idea that the DNS is wrong and then changed it).

DaRkBoDoM · 06-05-2013, 04:55 AM

Quote:

Originally Posted by icecoder

Can't see anything strange from the output of tcpdump.

If the connection is behaving this way, there should be somethign almost for sure. Maybe some missing RST, dopped package, or who knows...

anon121 · 06-05-2013, 02:14 PM

Actually I've already checked DNS. Checked again (always with google DNS servers), same issue. The problem persists even when connecting to local web servers (even when using IP addresses, so no DNS issue).

Here is the output of

Code:

tcpdump -i wlp11s1 -p "ip host 192.168.1.236"

for a connection I've made with facebook. The page has been loaded but the result is malformed (CSS not correctly downloaded, AJAX calls still pending)

http://pastebin.com/02tMFFHN

John VV · 06-05-2013, 04:27 PM

Quote:

Just noticed that if I connect over TOR,

so tor "*.onion" pages are working
is this with the "tor browser" or the firefox "tor button "

and FB in firefox is malformed
is this the current ff21 or the ff17 "extended life "

have you made sure that libssl is installed ? ( should be )

is the very last adobe flash installed ? 11.2
or are you using the not very well working opensource version ?
( to see type into the FF addressbar

Code:

about:plugins
--- or for a menu ---
about:about

anon121 · 06-06-2013, 04:51 AM

Quote:

Originally Posted by John VV

so tor "*.onion" pages are working
is this with the "tor browser" or the firefox "tor button "

and FB in firefox is malformed
is this the current ff21 or the ff17 "extended life "

have you made sure that libssl is installed ? ( should be )

is the very last adobe flash installed ? 11.2
or are you using the not very well working opensource version ?
( to see type into the FF addressbar

Code:

about:plugins
--- or for a menu ---
about:about

I connected to normal websites (not .onion ones) with chromium (same browser, along with firefox, which is giving me the problem) which has the latest flash version included..

libssl is installed.

DaRkBoDoM · 06-06-2013, 05:04 AM

The TCP dump, shows that DNS is proxied by router, that also handles local zone.
You are right: the https stream looks normal.

I'm starting to think we are looking in the wrong direction.
What's the model of you network card?

DaRkBoDoM · 06-06-2013, 05:08 AM

Also, please grab lastest ubuntu Live CD and tell us if it does work

anon121 · 06-06-2013, 08:18 PM

Tried with Ubuntu live. Same problem.
The problem appeared as I changed the motherboard (not sure if can be related to that, since Windows doesn't suffer from the issue).

The model is: TL-WN551G (TP-LINK). I used this same network adapter with the old mobo and OS and worked perfectly.