Tom & others, te> Try setting CLAMPMSS=Yes in shorewall.conf. No improvement in my simple tests. te:shorewall.conf.man> This option requires CONFIG_IP_NF_TARGET_TCPMSS in your kernel. Module xt_TCPMSS is present. If I''m lucky CONFIG_IP_NF_TARGET_TCPMSS is there. te:shorewall.conf.man> ... usually required when your internet connection is through PPPoE or PPTP. This is a plain old cable modem service from Shaw.ca and they insist that they haven''t changed the service. The problem surfaced only last weekend around the time the Lenny system was last updated. The arrangement at UBC is similar but has no such problems. Regards, ... Peter E. ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
PETER EASTHOPE wrote:> > This is a plain old cable modem service from Shaw.ca > and they insist that they haven''t changed the service. > > The problem surfaced only last weekend around the > time the Lenny system was last updated. The > arrangement at UBC is similar but has no such problems.You updated an entire distribution and when there were problems, you picked Shorewall to lay it on? Not all communication problems are Shorewall problems and message size dependent problems are virtually never related to Shorewall unless they involve CLAMPMSS. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/