Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I was going through this article on iptables and there the author said that:

It's important to turn off ECN (explicit congestion notification) so that Internet communications will work properly.

Why do we need to disable the ECN?

share|improve this question
That article is for the 2.4 kernel version. Maybe it's a bit dated? – Mat Sep 13 '11 at 16:38
up vote 6 down vote accepted

There used to be a lot of broken routers out there that would drop any packets with the ECN bits set. I remember trying it and experiencing this personally. This site gives you a taste of how things used to be, particularly the "8% of the internet unreachable!" link. It's of roughly the same vintage as the article you linked; as Mat pointed out, the article describes Linux 2.4, and 2.6 was released in 2003...

Even now, years later, I wouldn't be too surprised to hear of broken routers still out there given that ECN still ships disabled on major platforms (see wikipedia). So you could turn on ECN, forget about it entirely, and later be unable to visit some site without knowing why.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.