Re: [squid-users] Squid and VPN, not working!!!

oh yes, i forgot the DF bit.
there is a lot of how-tos and faqs about using vpn in the internet.
i am not sure, however, if there is a general solution that can be
applied to every infrastructure.

most companies are still struggling hard with getting their vpn
products fully compatible.

i cannot help with the win2k concentrator as i didn't know there is
such a thing until now. :o).

good luck anyway.

torsten

sgcccdc@citec.qld.gov.au on 08.10.2001 23:52:33

To: aknit44@globenetcafe.net
cc: Torsten.Lange@GECITS-EU.COM, squid-users@squid-cache.org
Subject: Re: [squid-users] Squid and VPN, not working!!!
                                                                            
                                                                            
 --------------------------------------------------------------------------

Hi,

This sounds like problems with the "Do Not Fragment" bit. You can download
small things but hang on large ones. Are you behind a firewall? Does your
firewall allow ICMP outwards? When a packet with DF set hits a device that
must fragment, that device sends an ICMP 3/4 (destination unreachable,
fragmentation required). If that ICMP doesn't get through your firewall
you get the symptoms you describe.

 On Mon, 8 Oct 2001, Mark Tinka wrote:

> i have modified the MTU option in my /proc partition on the Linux, and
> i will say that there some improvement.. the only problem is that i
> can't seem to download some web sites, and some web sites fully.. for
> instance, i can only download part of the main yahoo.com page, but can
> read my e-mail on the mail.yahoo.com pages....
>
> also, i can download the cnn.com page, but it hangs when trying to
> download the main graphics.. same thing for google.com ..

Colin
Received on Tue Oct 09 2001 - 02:06:00 MDT