On Mon, 2003-09-22 at 13:00, Martin Josefsson wrote: > Could you please apply the attached patch and reproduce it again? > It's just a small patch that enables a little debugging for this. Very odd - I am seeing ICMPs generated:- # /usr/sbin/tcpdump -n -i eth0 icmp tcpdump: listening on eth0 15:26:12.146557 192.168.50.119 > 172.16.28.33: icmp: 10.0.2.2 unreachable - need to frag (mtu 1450) [tos 0xc0] but no extra chatter in dmesg despite ensuring dmesg -n is turned up. Checking the module object file shows the extra log messages in there, so its not me doing something completely silly. Putting a iptables -t mangle -A FORWARD -p tcp --syn -j TCPMSS \ --clamp-mss-to-pmtu in appears to fix things for me. Nigel. -- [ Nigel Metheringham Nigel.Metheringham@xxxxxxxxxxxxxxxxxx ] [ - Comments in this message are my own and not ITO opinion/policy - ]