De SPI firewall probeert je te beschermen tegen DoS aanvallen. Blijkbaar wordt soms niet altijd correct gezien welke data door jezelf zijn aangevraagd. Zie dit topic.
Some users have reported that image queries to sites such as Google Image Search, Google Maps and Bing do not display results in Snow Leopard. This is because of overaggressive "SYN Flood" protection in the firewalls of some third party routers.When image results are to be displayed, Safari and Firefox make multiple simultaneous connections to the host to retrieve them. This is usually faster than downloading one and moving on to the next and on and on.
Safari in Mac OS X Snow Leopard may make as many as sixteen simultaneous connections to the Google image server's HTTP port within 0.0043 second to retrieve the data; in Mac OS X Leopard it may be as few as eight.
Some consumer-level SPI firewalls misinterpret the attempt to open that many simultaneous connections to one server as a "SYN flood" and block the traffic. Not good, especially when the connections are being made from your machine to an outside host, so the firewall is effectively blocking you from perpetrating what it thinks is a SYN flood.
Some Flickr users have experienced a similar issue.
If your router allows configuration of its SPI firewall, you may be able to solve this problem if it has a setting labeled something like:
Maximum incomplete TCP/UDP sessions number from same host
On those routers, this setting is often set to a default of "10"; simply increasing this value to a much higher value - many have had good luck with "20" - will allow accesses to work as desired and will also allow some room for possible future expansion in the number of simultaneous queries made.
If your router does not offer such a setting, there's no solution other than to disable the firewall.
Note that any operating system - Linux, Solaris, even perhaps Windows 7 - could trigger the same problem. You can even generate the same issue in Windows XP by applying "speed tweaks" such as this.
(Some explanation from Microsoft is available as well.)
In short, it's a bad assumption made on the part of the SPI firewall's designers, not by Apple.
Gast
