> From what you explain i would guess for PMTU issues. Any > chance that some other > rule (in FORWARD chain) is blocking ICMP on this device? > > Regards > > Andreas > Hi Andreas, Thanks for getting back to me. No, for testing purposes I made sure that the NAT rule is the only rule in the entire system, and the default policies are set to ACCEPT etc. Regards, Ferry van Aesch