On Opnsense (Freebsd) I'm running Openconnect in client mode. I get this unusual error: LZS decompression failed: File too large. Related debug output: X-DTLS-CipherSuite: PSK-NEGOTIATE X-CSTP-Base-MTU: 1406 X-CSTP-MTU: 1340 DTLS option X-DTLS-DPD : 90 DTLS option X-DTLS-Port : 22 DTLS option X-DTLS-Rekey-Time : 172838 DTLS option X-DTLS-Rekey-Method : ssl DTLS MTU reduced to 1322 Established DTLS connection (using OpenSSL). Ciphersuite PSK-AES256-CBC-SHA. Initiating IPv4 MTU detection (min=661, max=1322) No change in MTU after detection (was 1322) DNS-queries and ping work (= small packets), but browsing the web I get packet loss during the TLS-connection setup. Ergo, HTTPS websites won't open. I think the server may be sending packets that are too large? On my Macbook the Openconnect interface MTU is 1340 opposed to 1322 on Opnsense. Is there some kind of MTU mismatch going on between client (Opnsense) and server? Regards, Jeroen
