Re: [squid-users] Transparent interception MTU issues

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Wed, 16 May 2012 14:36:06 +1200

On 16.05.2012 09:53, Daniel Niasoff wrote:
> Hi,
>
> I am accessing squid through a PPTP tunnel and have a lower MTU as a
> result.
>
> I am able to use squid ok as an explicit proxy however when trying
> transparent interception many pages timeout and don't open.
>
> I guess this is because of MTU issues.

Likely. But Please check your guesses before looking for a fix to them.

   ping -s 1499 ...

PMTU response or lost packet?

>
> I have tried "http_port 3129 intercept disable-pmtu-discovery=always"
> but to no avail.
>
> I am using 3.2.0.17.
>
> Any ideas?

If it actually is MTU issues, fix them.

  * Enable ICMP control messages to cross the network.
  * set MTU and/or MSS on the tunnel entrance to an appropriate low
value.

Amos
Received on Wed May 16 2012 - 02:36:10 MDT

This archive was generated by hypermail 2.2.0 : Wed May 23 2012 - 12:00:04 MDT