In order to transparently help packet go inside a vpn/tunnel without having to solve the security problem of permiting ICMP packet getting accross a firewal... I would like to use "clamp-mss-to-pmtu" inside a bridge (firewall bridge). It would bridge every traffic, but alter the Maximum Segment of TCP connection. Before attempting this, could anybody give us a hint on the possibility for this to work... Was this attempted before (or should I ask for a "software patent" on this) :-) It sound a little bit like what a "Packet Shaper"TM does by altering windows size computation. David GLAUDE
