[Openswan Users] [patch] bug 393: Aggressive mode doesn't work with NAT-T, rejects NAT-D payload

[Paul Wouters]

On Thu, 15 Feb 2007, Martin Koller wrote:

> BTW: With my workaround, I get a connection established, but the data transfer
> afterwards is very unreliable, e.g. small files can be downloaded, large
> files simply stop transferring; or the news client retrieves the news headers
> and very small postings, but large messages I can not download - it simply
> does not communicate until a timeout. No errors in the logfiles even with
> klipsdebug, plutodebug = all

That sounds like an unrelated MTU issue.

Try playing around with lowering the MTU on both sides, and/or tcp clamping.

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155