This still sounds very much like an MTU problem, especially with the
unresponded ACKs.  You might explore clamping the MTU through the VPN.
You didn't say what VPN client you're using, but if you use a robust VPN
system such as OpenVPN you have control over the MTU of packets sent
through the tunnel.

In OpenVPN, the --tun-mtu, --fragment and --mssfix options are available
to help tune packet size through your tunnel.

I highly recommend OpenVPN.  It's easy to set up, robust, secure and
runs on both Unix-like systems (Linux, BSD, Mac OS-X) and Windows.

On Wed, 2008-01-09 at 20:00 +0100, Oliver Schad wrote:
> Am Mittwoch, 9. Januar 2008 05:50 schrieb mir Nestor Camacho III:
> > Now, what the problem is...I vpn (over ssl, to a Juniper device) to my
> > job. What I am seeing is when I finally connect I can ping hosts
> > internal to my work network, but when I try to initiate a connection
> > (ssh, http, rdp, etc) I get no where. It just hangs on trying to
> > establish the connections.
> [...]
> > Now the kicker! I boot up on the same computer using Ubuntu live cd and
> > import the same firewall rules and everything works as it should!
> 
> Same routing table, same interface configurations (ip, netmask, mtu), same 
> packet filter config, same vpn client version, same vpn client config, same 
> vpn gateway?
> 
> Regards
> Oli

-- 
Lindsay Haisley       | "In an open world,    |     PGP public key
FMP Computer Services |    who needs Windows  |      available at
512-259-1190          |      or Gates"        | http://pubkeys.fmp.com
http://www.fmp.com    |                       |

-- 
[email protected] mailing list

Reply via email to