Sorry everybody, I ask for your precious advice again. I am switching from shorewall 4.5.6 and kernel 2.6.18 to shorewall 5.0.6 and kernel 2.6.32-573 I used mss=1538 in the in options in zones file and CLAMPMSS=yes to handle an IPSEC connection. But with the new setup the same settings don't do anything anymore! I checked it with wireshark, the settings in SYN get through untouched, while previously the MSS got changed to 1538. The same connection with the old environment works correctly. I would like to add I am using klips. What can I do? Thanks Paolo
------------------------------------------------------------------------------ Transform Data into Opportunity. Accelerate data analysis in your applications with Intel Data Analytics Acceleration Library. Click to learn more. http://pubads.g.doubleclick.net/gampad/clk?id=278785471&iu=/4140 _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
