From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <vlkut_alt@list.ru>
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on sa.int.altlinux.org
X-Spam-Level: 
X-Spam-Status: No, score=-2.6 required=5.0 tests=BAYES_00,SPF_PASS
	autolearn=ham version=3.2.5
Message-ID: <4B18D127.9040302@list.ru>
Date: Fri, 04 Dec 2009 13:06:47 +0400
From: Vladimir V Kutyavin <vlkut_alt@list.ru>
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US;
	rv:1.9.1.5pre) Gecko/20091019 Thunderbird/3.0pre
MIME-Version: 1.0
To: ALT Linux sysadmin discuss <sysadmins@lists.altlinux.org>
References: <E1NFAjH-0007V2-00.salomatin-ru-mail-ru@f209.mail.ru>
In-Reply-To: <E1NFAjH-0007V2-00.salomatin-ru-mail-ru@f209.mail.ru>
Content-Type: text/plain; charset=KOI8-R
Content-Transfer-Encoding: 8bit
X-Spam: Not detected
X-Mras: Ok
Subject: Re: [Sysadmins]
 =?koi8-r?b?68/X3sXHIDUuMCAtINPU0sHOzs8g0sHCz9TBxdQg?=
 =?koi8-r?b?TkFUIN7F0sXaIHBwcG9l?=
X-BeenThere: sysadmins@lists.altlinux.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: ALT Linux sysadmin discuss <sysadmins@lists.altlinux.org>
List-Id: ALT Linux sysadmin discuss <sysadmins.lists.altlinux.org>
List-Unsubscribe: <https://lists.altlinux.org/mailman/options/sysadmins>,
	<mailto:sysadmins-request@lists.altlinux.org?subject=unsubscribe>
List-Archive: <http://lists.altlinux.org/pipermail/sysadmins>
List-Post: <mailto:sysadmins@lists.altlinux.org>
List-Help: <mailto:sysadmins-request@lists.altlinux.org?subject=help>
List-Subscribe: <https://lists.altlinux.org/mailman/listinfo/sysadmins>,
	<mailto:sysadmins-request@lists.altlinux.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Dec 2009 09:07:03 -0000
Archived-At: <http://lore.altlinux.org/sysadmins/4B18D127.9040302@list.ru/>
List-Archive: <http://lore.altlinux.org/sysadmins/>

30.11.2009 22:12, Владимир Саломатин пишет:
> mtu 1492
> Эффект в целом точно такой же как бывает, когда MTU меньше.
>   
icmp не глушите?
> iptables -t mangle -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
> Не срабатывает.
>   
В качестве крайней меры попробуйте так:
iptables -t mangle -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS
--set-mss 256