MikroTik

So last night we installed out brand new ccr1072 and all seemed well, al my public ips assigned to users were able to ping the internet and the addresses could be pinged from the internet.

This morning few users started to complain about https sites not working, all the complaining users had a static ip assigned to them using a EoIP tunnel.

That tunnels is bridged with the wan port on the ccr1072, http works fine but as soon as you try and access https it times out.

then I have a few new users that have their ips assigned using l2tp and that ones is working 100%

All firewall rules and bridge filters has been disabled.

Any idea why only the eoip tunnels would act up like this?

It seems like the issue was MTU related.

I added a mangle rule to change the mss to 1488 for the 2 ip subnets having issues and so far it seems to have fixed the problem

Thank your for reporting how you solved the issue!