Hi, MSS can be clamped per route. See ip tool and LARTC howto for syntax. I'm using it with great success. devik > MSS-clamping. My pppoe client for linux can do mss clamping on every > packet that goes out and come in. Not enough control. There is an option > to do mss-clamping in iptables, however this only works in the forward > table. I can't match and control outgoing web connections, just > connections getting routed through the machine. Any ideas?