[Openswan Users] Query about the packet size

[Paul Wouters]

On Tue, 3 Feb 2009, KK Yim wrote:

> 
>             My client is using OpenSwan, which establishes a VPN with us.  The client will send some
> requests to our host by TCP and we’ll return a response to the client.  We found that if the response size
> os greater than a certain size, the client cannot get my response.  If I reduce the response size, the

try something like:

iptables -I FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS ----clamp-mss-to-pmtu

Paul