From: "m0n0" <mono at gmitec dot com>

>> Path MTU discovery doesn't work properly over IPsec VPN's in m0n0wall.
>> Try dropping your client system's MTU to 1400 and see if that fixes
>> it.  It almost certainly will.

> Yes this fix works! Thanks!
> But, will m0n0wall fix about this problem in the future? Or this is a 
> limitation that can't be solved?

This is not a m0n0wall problem.  MTU path discovery is supposed to be done 
at the client.  On Windows it is broken.  This causes problems in any case 
where header information takes some of the 1500.  I have seen many offices 
where several systems can not get to many web sites...

                        Lee