Re: DF reset / MSS clamp pmtu

[Thomas Lußnig <lussnig@xxxxxxx>]

Holger Burmann wrote:

> Hello !
> Windows 2000 Server drop icmp messages "fragmentation needed". I can
> only get stupid answers from Microsoft about routers who drop the packes
> - but the problem is Microsoft.
>
> So I add 
>
> iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS
> --clamp-mss-to-pmtu
>
>  
The Problem are the tcp flags i think. Since without them i never had 
the described problem.

Cu Thomas

--
Thomas Lußnig
-----------------------------------------------
smcc.net GmbH       | Tel: +49.69.260110-12
Markgrafenstr. 3    | Fax: +49.69.260110-19
60487 Frankfurt     | Web: http://smcc.net
-----------------------------------------------