but how could you "decrease" the mtu size to "2048+"???
even on classic ethernet, these large packets will be splitted 
into small pieces, unless you are using gigabit ethernet and 
have enabled jumbo frames

On 7/2/05, George Bourozikas <george at bourozikas dot net> wrote:
> No this does not work.  The only way I have found to get IPsec VPN's to work
> with m0n0 is by decreasing the MTU until there are no fragmented packets, at
> least in the next hop (in my case ADSL).
> 
> --george
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
> 
>