Jump to content

This is the support site for Andrews & Arnold Ltd, a UK Internet provider. Information on these pages is generally for our customers but may be useful to others, enjoy!

Router:Linux: Difference between revisions

tcpfix / MSS clamp functionality
(IPv6 configuration)
(tcpfix / MSS clamp functionality)
 
You can check connectivity with a cron job, and add a stanza to /etc/network/interfaces to connect at boot.
 
=== Extra configuration ===
 
You will find at this point that most web sites work, but some few don't - they just freeze on loading or during initial SSL negotiation. This is because they are blocking ICMP, which is ''stupid'' - in part because they are then unable to indicate or respond to the need to fragment large packets. You can get round it by limiting the maximum packet size for TCP: set TCPfix on your clueless control panel, or on the router:
 
<pre>
iptables -t mangle -F FORWARD
iptables -t mangle -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1452
</pre>
 
== IPv6 ==
4

edits