[Openswan Users] ping works but others applications don't
phr at cdm.smis.ch
Thu Jan 27 21:49:03 CET 2005
I tried all of them, but nothing help. Should I try a newer kernel ? Or
openswan 2.3.0 ?
Thanks for you help
De: Paul Wouters
A: RITTER, Philippe
Cc: 'users at openswan.org'
Date: 27.01.05 20:22
Objet: RE: [Openswan Users] ping works but others applications don't
On Thu, 27 Jan 2005, RITTER, Philippe wrote:
> My client is a WinXP. I can open the vpn and ping a remote host in my
> and also with a size from 8192 bytes. I get them back.
Try changing the mtu on the windows box:
Lower the mtu to 1400.
> in my kern.log:
> kernel: pmtu discovery on SA ESP/1f0c6ebb/534c0433
> last message repeated 4 times
Oh good, it logs the message now. I wonder if the kernel people are now
implementing pmtu for ipsec. I really hope so....
On the openswan gateway you can try:
iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS
Or if that fails:
iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss
Or try using KLIPS instead of NETKEY (but KLIPS currently does not have
NAT-T on the
More information about the Users