:) I already thought of that. It doesn't help. I dropped it all the way to 512 (!) and the symptom continued.
FWIW, when I try to reach one of those sites, the SYN gets sent and no ACK is ever returned. I pulled a major update on the system, and the situation has improved, but there are still a LOT of sites that won't work. The do work fine with the proxy though... I suspect that it's the ISP. Bell's pretty well known for playing dumb games like that. I'm going to try and talk the people into switching to another DSL provider.