Path MTU discovery broken in IPSec

[Bjoern A. Zeeb]

On Mon, 30 Oct 2006, Khetan Gajjar wrote:

> There are no firewall rules that are specific to the IPSec tunnels.

and no rules specific to ICMP?

> This, combined with the fact that small data transfer sessions
> across the IPSec tunnels work but small ones don't lead me to believe
> this could be a PMTU issue within the IPSec tunnel.

can you start trying with ping -s 1000 and going up to see when it
starts to fail? Try to find out exactly.

Also could you post the relevant netstat -rnW output?

-- 
Bjoern A. Zeeb				bzeeb at Zabbadoz dot NeT