>> >> Maybe run a ping to a destination which you are having problems
>> >> with, then reproduce the problem (with the network idle
>> >> otherwise). You should see ping packets dropped only then.
>> >>
>> >> You can also ping with increasing packet sizes (see ping --help)
>> >> and see when the packet becomes too big for path MTU. But instead
>> >> lowering your MTU then, you should allow icmp-fragmentation-needed
>> >> come through reliably. Lowering MTU only makes sense to stop
>> >> overly fragmentation in the first place and optimize for a
>> >> specific packet path (like traffic through one or multiple VPN
>> >> tunnels) where fragmentation would otherwise increase latency a
>> >> lot, or where icmp-frag-needed does not correctly work.
>> >
>> >
>> > I'll try pinging today once the issue pops up.
>> I'm seeing the issue again as usual but ping response times come back
>> normal at about 50ms.  I'll keep trying.
> Not sure if this came after or before switching your router to modem
> mode... But if it happened before and is solved now, your router really
> doesn't well with icmp packets or has problems with mss clamping / pmtu.

I did not try pinging before switching the device from router to modem.

BTW, I read that setting CLAMPMSS=Yes in shorewall.conf is a necessity
when using PPPoE but my connection is working fine without that
setting.  Should I set it anyway?

- Grant

Reply via email to