Browsing Problem (SPI problem ?)

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I heard no response from any microsoft official about this problem.
Right now I have my vista machine behind an eci router, I disabled the
firewall and it still doesn't work (I can only browse to certain sites - like
www.google.com) and autoupdate and other features doesn't work (timeout) as
well.

I believe that behind my router might be another firewall which I'm not
aware of, and I can't touch it's settings anyway.

Is there any workaround or any solution to this problem in the near future ?

All vista tests in my organization are being set on hold b/c of this matter...

Regards,

Dani
 
This is the workaround for SPI (if that is indeed your problem).

- Click start
- Type: cmd
- Right-click cmd.exe when it appears under Applications
- Click Run As Administrator
- Type the following: netsh int tcp set global autotuninglevel=disabled
- Press enter
- Restart your computer

If this fixes the problem, then your router is most likely ignoring your
request to disable SPI, doesn't turn it off all the way, or is in some other
way buggy.

- JB

Vista Support FAQ
http://www.jimmah.com/vista/
 
Why is it necessary to disable a fundamental feature of the external
Firewall ?
SPI - Stateful packet Inspection is surely there to prevent the majority of
packets purporting to be destinted for original internal requests...
 
Hello,

You raise a very valid point. And the answer is you probably shouldn't
disable SPI.

The reason Dan was trying to disable SPI is because of a bug in his router.
Windows Vista does alot of cool networking things that Windows XP didn't in
order to sqeeze out every last drop of performance (and in many cases this
can result in unbelievable speed increases).

Unfortunately, some routers don't handle this well, even though everything
Windows Vista does is part of the networking specs. This is especially the
case in implementations of SPI firewalls. Because this is a fault of the
router device, it has to be fixed by the router manufacturer issuing a
firmware upgrade.

In the meantime, the instructions I gave will disable the networking feature
of Vista that seems to be causing the problems with routers, enabling you to
access the internet from Vista.

- JB

Vista Support FAQ
http://www.jimmah.com/vista/
 
Do you know what exactly Vista does to cause this problem ?
SPI is relatively straightforward, so what could Vista be doing to break
it ?

Has anyone else reported a similar problem ?

How does VISTA behave when behind an ISA Firewall ?
 
The problem is related to the automatic tuning features of the Windows Vista
TCP/IP stack, primarily the way Windows Vista tunes the TCP receive window
on the fly for each TCP connection.

Since Windows has never done this before (even though it is technically
allowed for by the spec), I assume that some firewall vendors didn't program
their code to allow for this to happen, and so they got zapped.

More info on the enhancements:
http://www.microsoft.com/technet/community/columns/cableguy/cg1105.mspx


- JB

Vista Support FAQ
http://www.jimmah.com/vista/
 
Back
Top