> > other tcp connections to have the normal full packet size. Enter > > MSS-clamping. My pppoe client for linux can do mss clamping on every > > packet that goes out and come in. Not enough control. There is an option > > to do mss-clamping in iptables, however this only works in the forward > > table. I can't match and control outgoing web connections, just > > Control and outgoing can be done with regular MTU settings. Just lower the > MTU size of your ppp interface and the kernel will set a lower MSS > automatically. Be VERY careful when doing it. There is too many websites blocking MTU discovery protocol and you will be no longer able to reach them. These system maintainers should be shot. :-\ Setting max MSS in route is better way .. > You can also set MTU per route. you probably wanted to say MSS here ? devik