[Shorewall-users] Re (2): FTP and etc.

[PETER E. <pea...@sh...>]

Tom & others,

te> Try setting CLAMPMSS=Yes in shorewall.conf.

No improvement in my simple tests.

te:shorewall.conf.man> This option  requires  
CONFIG_IP_NF_TARGET_TCPMSS  in your kernel.

Module xt_TCPMSS is present.  If I'm lucky 
CONFIG_IP_NF_TARGET_TCPMSS is there.

te:shorewall.conf.man> ... usually required when your 
internet connection is through PPPoE or PPTP. 

This is a plain old cable modem service from Shaw.ca  
and they insist that they haven't changed the service.

The problem surfaced only last weekend around the 
time the Lenny system was last updated.  The 
arrangement at UBC is similar but has no such problems.

Regards,              ... Peter E.