Fri Apr 23, 2010 9:13 am
maybe you're must change MSS, i.e. like this:
ip firewall mangle print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; Change MSS for outgoing traffic
chain=postrouting action=change-mss new-mss=1452 tcp-flags=syn protocol=tcp src-address-list=users out-interface=pppoe-out1 tcp-mss=1453-65535