[Openswan Users] Openswan, ADSL and slow connections [SOLVED]

[Andrej Trobentar]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Paul Wouters wrote:
> 
> [...]
> 
> A few things to try:
> - lover mtu on both sides using overridemtu= if using klips
> - use TCP clamping (see archive or wiki)
> - reduce the LAN ethernet mtu's on both ends to about 1400

Hello list,

I have solved this issue with putting "fragicmp=no" in the ipsec.conf on
the firewall that is on the ADSL line! I didn't change anything else.

I had to *reboot* the firewall to get this working - simple "service
ipsec restart" didn't do it! I have also tried to do the following
things without success :

- - service ipsec stop
- - pppoe-stop
- - rebooted the ADSL modem
- - pppoe-start
- - service ipsec start

I also noticed that when you do "service ipsec stop" the module doesn't
get unloaded and you can't remove it with "rmmod ipsec" :

[root at test root]# lsmod
Module                  Size  Used by    Tainted: P
ipsec                 334368-369
[root at test root]# rmmod ipsec
ipsec: Device or resource busy
[root at test root]#

Is this so by design? Also notice the "Used" column -> -369 ?! What does
this number mean?

- --
Thanks in advice and have a nice day,

	Andrej.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFDizKaVd/NU2yFfAoRAhfbAKDoQ+dZDpGTM3rq7dDBSArIKV3XrACdHFe9
bTfWDmkcLFMs0gdrRMOMcwQ=
=yGih
-----END PGP SIGNATURE-----