[Openswan Users] Query about the packet size

Paul Wouters paul at xelerance.com
Tue Feb 3 10:30:31 EST 2009

On Tue, 3 Feb 2009, KK Yim wrote:

>             My client is using OpenSwan, which establishes a VPN with us.  The client will send some
> requests to our host by TCP and we’ll return a response to the client.  We found that if the response size
> os greater than a certain size, the client cannot get my response.  If I reduce the response size, the

try something like:

iptables -I FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS ----clamp-mss-to-pmtu


More information about the Users mailing list