Re: strange behaviour

[Pascal Hambourg <pascal.mail@plouf.fr.eu.org>]

Cedric Blancher a écrit :
>    iptables -t mangle -A FORWARD -o ppp0 -j TCPMSS --clamp-mss-to-pmtu
TCPMSS works only on TCP packets with the SYN flag set, so the options 
"-p tcp --tcp-flags SYN,RST SYN" are required.
Also, wouldn't it be useful to do it in both directions to avoid 
fragmentation if host (b) does not use path MTU discovery ?