Вот, приложил tcpdump, когда я пытался на auto.ru пробиться. Но разобраться в этом пока не знаю как. Где-то что-то застревает. 
 
[root@amberfs ~]# tcpdump -i eth0 
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode 
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes 
17:57:21.069964 IP 192.168.1.3.49021 > 1.0.0.0.http: S 29055040:29055040(0) win 5840 <mss 1460,sackOK,timestamp 1177187 0,nop,wscale 6> 
17:57:21.071650 IP 192.168.1.3.32789 > mygateway.ar7.domain:  1835+ PTR? 0.0.0.1.in-addr.arpa. (38) 
17:57:22.775826 IP 192.168.1.3.48987 > 1.0.0.0.http: S 4222306141:4222306141(0) win 5840 <mss 1460,sackOK,timestamp 1177614 0,nop,wscale 6> 
17:57:22.883827 IP 192.168.1.3.48989 > 1.0.0.0.http: S 4221045317:4221045317(0) win 5840 <mss 1460,sackOK,timestamp 1177641 0,nop,wscale 6> 
17:57:22.883886 IP 192.168.1.3.48990 > 1.0.0.0.http: S 4219977673:4219977673(0) win 5840 <mss 1460,sackOK,timestamp 1177641 0,nop,wscale 6> 
17:57:24.067810 IP 192.168.1.3.49021 > 1.0.0.0.http: S 29055040:29055040(0) win 5840 <mss 1460,sackOK,timestamp 1177937 0,nop,wscale 6> 
17:57:26.067744 arp who-has mygateway.ar7 tell 192.168.1.3 
17:57:26.068056 arp reply mygateway.ar7 is-at 00:11:95:95:f3:49 (oui Unknown) 
17:57:26.071810 IP 192.168.1.3.32789 > mygateway.ar7.domain:  1835+ PTR? 0.0.0.1.in-addr.arpa. (38) 
17:57:30.067745 IP 192.168.1.3.49021 > 1.0.0.0.http: S 29055040:29055040(0) win 5840 <mss 1460,sackOK,timestamp 1179437 0,nop,wscale 6> 
17:57:31.072217 IP 192.168.1.3.32789 > mygateway.ar7.domain:  31844+ PTR? 3.1.168.192.in-addr.arpa. (42) 
17:57:33.255691 IP mygateway.ar7.domain > 192.168.1.3.32789:  1835 ServFail- 0/0/0 (38) 
17:57:36.071771 IP 192.168.1.3.32789 > mygateway.ar7.domain:  31844+ PTR? 3.1.168.192.in-addr.arpa. (42) 
17:57:38.254295 arp who-has 192.168.1.3 tell mygateway.ar7 
17:57:38.254347 arp reply 192.168.1.3 is-at 00:a0:24:a8:e6:9e (oui Unknown) 
17:57:41.072176 IP 192.168.1.3.32789 > mygateway.ar7.domain:  31302+ PTR? 1.1.168.192.in-addr.arpa. (42) 
17:57:41.073807 IP mygateway.ar7.domain > 192.168.1.3.32789:  31302- 1/0/0 PTR[|domain] 
17:57:42.067628 IP 192.168.1.3.49021 > 1.0.0.0.http: S 29055040:29055040(0) win 5840 <mss 1460,sackOK,timestamp 1182437 0,nop,wscale 6> 
17:57:43.065488 IP mygateway.ar7.domain > 192.168.1.3.32789:  31844 ServFail- 0/0/0 (42) 
17:57:43.065582 IP 192.168.1.3 > mygateway.ar7: ICMP 192.168.1.3 udp port 32789 unreachable, length 78 
17:58:06.071366 IP 192.168.1.3.49021 > 1.0.0.0.http: S 29055040:29055040(0) win 5840 <mss 1460,sackOK,timestamp 1188437 0,nop,wscale 6> 
17:58:11.071266 arp who-has mygateway.ar7 tell 192.168.1.3 
17:58:11.071557 arp reply mygateway.ar7 is-at 00:11:95:95:f3:49 (oui Unknown) 
17:58:35.947299 IP 192.168.1.10.netbios-ssn > 192.168.1.3.57659: . 4070347324:4070347325(1) ack 4153832451 win 64968[|SMB] 
17:58:35.947442 IP 192.168.1.3.57659 > 192.168.1.10.netbios-ssn: . ack 1 win 108 <nop,nop,timestamp 1195906 56474,nop,nop,sack 1 {0:1}> 
17:58:35.947953 IP 192.168.1.3.32789 > mygateway.ar7.domain:  12935+ PTR? 10.1.168.192.in-addr.arpa. (43) 
17:58:40.946952 arp who-has 192.168.1.10 tell 192.168.1.3 
17:58:40.947179 arp reply 192.168.1.10 is-at 00:15:f2:34:2c:3f (oui Unknown) 
17:58:40.947389 IP 192.168.1.3.32789 > mygateway.ar7.domain:  12935+ PTR? 10.1.168.192.in-addr.arpa. (43) 
17:58:47.271452 IP mygateway.ar7.domain > 192.168.1.3.32789:  12935 ServFail- 0/0/0 (43) 
17:58:47.271545 IP 192.168.1.3 > mygateway.ar7: ICMP 192.168.1.3 udp port 32789 unreachable, length 79 
17:58:49.303260 IP6 fe80::2a0:24ff:fea8:e69e.mdns > ff02::fb.mdns:  0 [4q] PTR? _ftp._tcp.local.[|domain] 
17:58:49.303478 IP 192.168.1.3.mdns > 224.0.0.251.mdns:  0 [4q] PTR? _ftp._tcp.local. PTR? _sftp-ssh._tcp.local.[|domain] 
17:58:49.304454 IP 192.168.1.3.32789 > mygateway.ar7.domain:  58927+[|domain] 
17:58:52.271230 arp who-has 192.168.1.3 tell mygateway.ar7 
17:58:52.271287 arp reply 192.168.1.3 is-at 00:a0:24:a8:e6:9e (oui Unknown) 
17:58:54.070863 IP 192.168.1.3.49021 > 1.0.0.0.http: S 29055040:29055040(0) win 5840 <mss 1460,sackOK,timestamp 1200437 0,nop,wscale 6> 
17:58:54.303209 IP 192.168.1.3.32789 > mygateway.ar7.domain:  58927+[|domain] 
17:58:58.900091 IP 192.168.1.3.32790 > mygateway.ar7.domain:  19499+ AAAA? top.mail.ru. (29) 
17:58:59.070760 arp who-has mygateway.ar7 tell 192.168.1.3 
17:58:59.071057 arp reply mygateway.ar7 is-at 00:11:95:95:f3:49 (oui Unknown) 
17:58:59.117221 IP mygateway.ar7.domain > 192.168.1.3.32790:  19499 0/1/0 (79) 
17:58:59.117526 IP 192.168.1.3.32790 > mygateway.ar7.domain:  62361+ AAAA? top.mail.ru. (29) 
17:58:59.119906 IP mygateway.ar7.domain > 192.168.1.3.32790:  62361- 1/0/0 (29) 
17:58:59.120036 IP 192.168.1.3.32790 > mygateway.ar7.domain:  26589+ A? top.mail.ru. (29) 
17:58:59.121631 IP mygateway.ar7.domain > 192.168.1.3.32790:  26589- 1/0/0 A 1.0.0.0 (45) 
17:58:59.122010 IP 192.168.1.3.51264 > 1.0.0.0.http: S 132788623:132788623(0) win 5840 <mss 1460,sackOK,timestamp 1201700 0,nop,wscale 6> 
17:58:59.122127 IP 192.168.1.3.51265 > 1.0.0.0.http: S 145991208:145991208(0) win 5840 <mss 1460,sackOK,timestamp 1201700 0,nop,wscale 6> 
17:58:59.303347 IP 192.168.1.3.32790 > mygateway.ar7.domain:  61651+[|domain] 
17:59:01.503922 IP mygateway.ar7.domain > 192.168.1.3.32789:  58927 ServFail-[|domain] 
17:59:01.504009 IP 192.168.1.3 > mygateway.ar7: ICMP 192.168.1.3 udp port 32789 unreachable, length 126 
17:59:02.122769 IP 192.168.1.3.51264 > 1.0.0.0.http: S 132788623:132788623(0) win 5840 <mss 1460,sackOK,timestamp 1202450 0,nop,wscale 6> 
17:59:02.122829 IP 192.168.1.3.51265 > 1.0.0.0.http: S 145991208:145991208(0) win 5840 <mss 1460,sackOK,timestamp 1202450 0,nop,wscale 6> 
17:59:04.302773 IP 192.168.1.3.32790 > mygateway.ar7.domain:  61651+[|domain] 
17:59:08.122703 IP 192.168.1.3.51264 > 1.0.0.0.http: S 132788623:132788623(0) win 5840 <mss 1460,sackOK,timestamp 1203950 0,nop,wscale 6> 
17:59:08.122763 IP 192.168.1.3.51265 > 1.0.0.0.http: S 145991208:145991208(0) win 5840 <mss 1460,sackOK,timestamp 1203950 0,nop,wscale 6> 
17:59:09.303503 IP 192.168.1.3.32790 > mygateway.ar7.domain:  55075+ PTR? 251.0.0.224.in-addr.arpa. (42) 
17:59:11.434416 IP mygateway.ar7.domain > 192.168.1.3.32790:  61651 ServFail-[|domain] 
17:59:14.302665 IP 192.168.1.3.32790 > mygateway.ar7.domain:  55075+ PTR? 251.0.0.224.in-addr.arpa. (42) 
17:59:20.122575 IP 192.168.1.3.51264 > 1.0.0.0.http: S 132788623:132788623(0) win 5840 <mss 1460,sackOK,timestamp 1206950 0,nop,wscale 6> 
17:59:20.122635 IP 192.168.1.3.51265 > 1.0.0.0.http: S 145991208:145991208(0) win 5840 <mss 1460,sackOK,timestamp 1206950 0,nop,wscale 6> 
17:59:20.594515 IP mygateway.ar7.domain > 192.168.1.3.32790:  55075 ServFail- 0/0/0 (42) 
17:59:20.594608 IP 192.168.1.3 > mygateway.ar7: ICMP 192.168.1.3 udp port 32790 unreachable, length 78 
17:59:44.126327 IP 192.168.1.3.51264 > 1.0.0.0.http: S 132788623:132788623(0) win 5840 <mss 1460,sackOK,timestamp 1212950 0,nop,wscale 6> 
17:59:44.126389 IP 192.168.1.3.51265 > 1.0.0.0.http: S 145991208:145991208(0) win 5840 <mss 1460,sackOK,timestamp 1212950 0,nop,wscale 6> 
17:59:49.126228 arp who-has mygateway.ar7 tell 192.168.1.3 
17:59:49.126550 arp reply mygateway.ar7 is-at 00:11:95:95:f3:49 (oui Unknown) 
18:00:32.125823 IP 192.168.1.3.51264 > 1.0.0.0.http: S 132788623:132788623(0) win 5840 <mss 1460,sackOK,timestamp 1224950 0,nop,wscale 6> 
18:00:32.125887 IP 192.168.1.3.51265 > 1.0.0.0.http: S 145991208:145991208(0) win 5840 <mss 1460,sackOK,timestamp 1224950 0,nop,wscale 6> 
18:00:35.958580 IP 192.168.1.10.netbios-ssn > 192.168.1.3.57659: . 0:1(1) ack 1 win 64968[|SMB] 
18:00:35.958725 IP 192.168.1.3.57659 > 192.168.1.10.netbios-ssn: . ack 1 win 108 <nop,nop,timestamp 1225908 56474,nop,nop,sack 1 {0:1}> 
18:00:37.125715 arp who-has mygateway.ar7 tell 192.168.1.3 
18:00:37.126031 arp reply mygateway.ar7 is-at 00:11:95:95:f3:49 (oui Unknown) 
18:00:40.957676 arp who-has 192.168.1.10 tell 192.168.1.3 
18:00:40.957905 arp reply 192.168.1.10 is-at 00:15:f2:34:2c:3f (oui Unknown) 
 
75 packets captured 
150 packets received by filter 
0 packets dropped by kernel 
[root@amberfs ~]#