guy keren wrote: > > On Wed, 9 Jan 2002, Ira Abramov wrote: > > > personally, my MTU is set at 1452, and also forced to re-fragment in the > > iptables: > > > > $IPTABLES -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu > > > > no idea if it helps, but it doesn't hurt :) > eli (or someone else with a similar problem) - could y'all check if you > have the MSS-handling rule, and if not - add it, and try reducing the MTU > back to 1452 on the ppp0 interface, to check if practice falls withing > these theories? i know that you don't personally care since your own > problem(s) were solved, but to get the howto fixed, we need input. i don't > have any masqueraded host at home, so i cannot make such test.
OK. I reduced it back to 1452. Then I accessed Bank Leumi. Failed. Then I applied Ira's (and Tzahi's) iptables rule. Then I re-accessed Bank Leumi. Voila! Also, I tried Manor's suggestion, and just omit the mtu, and let ppp choose its mtu. This succeeded too (tt chose 1500). However, I don't know if this is a solution, without trying it in an installation where 1452 is the right mtu; It is possible that 1500 is the default, and selected anytime there is no explicit parameters. So I guess the rule that Ira and Tzahi suggested, is the solution, and should be inserted into the HOWTO (which means that we can't avoid mentioning iptables in that HOWTO... Currently, there are only references). -- Eli Marmor [EMAIL PROTECTED] CTO, Founder Netmask (El-Mar) Internet Technologies Ltd. __________________________________________________________ Tel.: +972-9-766-1020 8 Yad-Harutzim St. Fax.: +972-9-766-1314 P.O.B. 7004 Mobile: +972-50-23-7338 Kfar-Saba 44641, Israel ================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
