On Mon, Feb 25, 2002 at 12:58:54PM +0100, Martin Devera wrote: > > > other tcp connections to have the normal full packet size. Enter > > > MSS-clamping. My pppoe client for linux can do mss clamping on every > > > packet that goes out and come in. Not enough control. There is an option > > > to do mss-clamping in iptables, however this only works in the forward > > > table. I can't match and control outgoing web connections, just > > > > Control and outgoing can be done with regular MTU settings. Just lower the > > MTU size of your ppp interface and the kernel will set a lower MSS > > automatically. > > Be VERY careful when doing it. There is too many websites blocking > MTU discovery protocol and you will be no longer able to reach them. > These system maintainers should be shot. :-\ > Setting max MSS in route is better way .. Not for locally generated packets - if you lower MTU, MSS will get set too. Regards, bert -- http://www.PowerDNS.com Versatile DNS Software & Services http://www.tk the dot in .tk http://lartc.org Linux Advanced Routing & Traffic Control HOWTO