GREAT, GUYS! IT WORKED!!!!!! I THANK YOU VERY MUCH for the help! angico. ----- Original Message ---- From: Cedric Blancher <blancher@xxxxxxxxxxxxxxxxxx> To: angico <angico@xxxxxxxxx> Cc: netfilter@xxxxxxxxxxxxxxxxxxx Sent: Monday, February 26, 2007 1:07:55 PM Subject: Re: strange behaviour Le lundi 26 février 2007 à 07:35 -0800, angico a écrit : > hi, buddys. thanks for your attention, but... > nothing works, yet. and this option "--clamp-mss-to-pmtu" just send me an error: "iptables: Invalid argument". > angico. My mistake. As Pascal stated, you have to specify a "-p tcp --tcp-flags SYN,RST SYN" as well, as TCPMSS clamping only works on TCP packets with SYN flag set: iptables -t mangle -A FORWARD -o ppp0 -p tcp \ --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu It should work better. -- http://sid.rstack.org/ PGP KeyID: 157E98EE FingerPrint: FA62226DA9E72FA8AECAA240008B480E157E98EE >> Hi! I'm your friendly neighbourhood signature virus. >> Copy me to your signature file and help me spread! ____________________________________________________________________________________ Have a burning question? Go to www.Answers.yahoo.com and get answers from real people who know.