[c-nsp] SSL max MTU

[Gert Doering]

Hi,

On Fri, Jan 22, 2010 at 04:02:04PM +0300, RAZAFINDRATSIFA Rivo Tahina wrote:
> For about 2 days, we have customers connecting to secure (ssl) web 
> site can not get connected, I found that lowering the MTU can solve 
> that for end user may 1400 instead of default 1500, do ISP need to 
> change their own MTU and which value to use?

Problems with MTU hint at path MTU discovery problems - and those are
usually a consequence of overzealous ICMP blocking.

Did you, per chance, install a new firewall two days ago?

gert

-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             gert at greenie.muc.de
fax: +49-89-35655025                        gert at net.informatik.tu-muenchen.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 305 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/cisco-nsp/attachments/20100122/245a8517/attachment.bin>