[no subject]

I asked my question on the Netfilter list, and got a quick answer that
fixed my problem.  FYI, the solution follows:
----
what you need to do is lower the MSS that is being advertised by the
Windows XP machine.  on the VPN Server/Router:

        iptables -A FORWARD -p tcp --syn -s $WINXP_BOX \
          -j TCPMSS --set-mss 1400

if the problem continues--lower that 1400 until the problem disappears. i
have had to ratchet it down as low as 1330 on IPSec + WiFi setups. with
your addition of the ppp0 (pptp) MTU of 896--you may need to use
"--set-mss 850" before the Windows XP box will work properly.  another
option that may or may not work, would be to allow the VPN Server/Router
to figure this automatically (which depends on proper PMTU discovery,
which is certainly not a given these days):

        iptables -A FORWARD -p tcp --syn -s $WINXP_BOX \
          -j TCPMSS --clamp-mss-to-pmtu
----
Setting it to 850 on the router works.

Thanks,
John




</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<ul><li><strong>Follow-Ups</strong>:
<ul>
<li><strong><a name="00865" href="msg00865.html">[ale] Stumped by Slashdot and network problems</a></strong>
<ul><li><em>From:</em> jkinney at localnetsolutions.com (James P. Kinney III)</li></ul></li>
</ul></li></ul>
<!--X-Follow-Ups-End-->
<!--X-References-->
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00863.html">[ale] Lightweight Spreadsheet for Slack/Windowmaker</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00865.html">[ale] Stumped by Slashdot and network problems</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00859.html">[ale] Stumped by Slashdot and network problems</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00865.html">[ale] Stumped by Slashdot and network problems</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00864"><strong>Date</strong></a></li>
<li><a href="threads.html#00864"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>