From mboxrd@z Thu Jan 1 00:00:00 1970 From: Joris Subject: clampmss only partially working on 2.6 kernelmode pppoe? Date: Sat, 12 Feb 2005 07:41:40 +0100 Message-ID: Reply-To: Joris Mime-Version: 1.0 Content-Transfer-Encoding: 7bit List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.netfilter.org Hi, I have linux 2.6.11-rc2 masquerading a pppoe connection (mtu: 1492) trough the kernel mode pppoe implementation. I loaded the ipt_tcpmss and ipt_TCPMSS (what's the difference?) kernel modules, and have the following iptables rule running: iptables -I FORWARD -o ppp0 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu Most internet hosts seem to be ok, but (don't laugh, it's for a family member's fade-out only!) hotmail still is a pita. (to be specific: after logging in, the inbox page served by by18fd.bay18.hotmail.msn.com never gets trough). Some hotmail submit Has someone experienced something similar? Is there a more precise test method (eg, sending a packet of a certain size to a certain host or something, or is there something specific I could look for in a network dump?) Any suggestions on how this could work?