Tom & others, te> Try setting CLAMPMSS=Yes in shorewall.conf.
No improvement in my simple tests. te:shorewall.conf.man> This option requires CONFIG_IP_NF_TARGET_TCPMSS in your kernel. Module xt_TCPMSS is present. If I'm lucky CONFIG_IP_NF_TARGET_TCPMSS is there. te:shorewall.conf.man> ... usually required when your internet connection is through PPPoE or PPTP. This is a plain old cable modem service from Shaw.ca and they insist that they haven't changed the service. The problem surfaced only last weekend around the time the Lenny system was last updated. The arrangement at UBC is similar but has no such problems. Regards, ... Peter E. ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
