[Openswan Users] "The Internet as a big subnet" issue again

Paul Wouters paul at xelerance.com
Wed Dec 19 13:59:17 EST 2007

On Wed, 19 Dec 2007, ????? ?????? wrote:

> I managed to fix this by issuing the following on point B:
> iptables -I FORWARD -p tcp -tcp-flags SYN,RST SYN -j TCPMSS -set-mss 1300
> For some reason (may be related only to my iptables commands) this works
> only if it's last in the iptables script.

Probably, you are using more "insert" commands (-I) after this command
in that case, making rhe above iptables entry to not be the first entry.

> I'll have to figure out if it is possible to apply the rule only for
> traffic between and

Yes, you should be able to add -s and -d options to the above line.

Building and integrating Virtual Private Networks with Openswan:

More information about the Users mailing list