[strongSwan] Some sites don't load or timeout because of IP fragmentation problems

[Noel Kuntze]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Okay, then that's not it.

Are there still fragments and ICMP messages from the gateway to the HTTP servers?

Mit freundlichen Grüßen/Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658

Am 09.03.2015 um 15:34 schrieb Tobias Brunner:
>> You use modular loading, so you need to set that in the
>> file /etc/strongswan.d/charon/kernel-netlink.conf.
>
> That's actually not the case.  The .conf files in the
> strongswan.d/charon folder are simply included in the top-level
> strongswan.conf file (as can be seen in the snippet Mark posted).
> So it's perfectly fine to set options there (or in any of the included
> file).
>
> Regards,
> Tobias

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCAAGBQJU/cLRAAoJEDg5KY9j7GZYhUcP/RX02a/4i0QrdC5AYp/bfdlv
Bmfftw8eGoByhzEdOR5o5Vwz+1d+qs/JdoO2vWyiTuu9Ygc5oTL4rR4JVHShej5M
T0ZOnr2Q0P6vwFn9iR8nS0GDluPsYmSqA1/gF/l7+8/IfuJa3x6rMUhFOrUM0ny4
+OLZAKKu5B0sbxuFuSvcpqTqrw4Xy+EWReB1z3tH07NhF8ERyJpZmQmTYvp/K576
cHMo034K4WwEFBQTQLaxsb++tiCoHVFKmuHYG52/pRFgfGGAFo6EmndAfa+lFooG
58igezSqQdtfj2MhpGKQczIT5o7Jo3p1hs5/65TzklaS0/LmgQx5708viSBwdReD
AXpUwi/oMpSyv6UJ6LGitwEjLOrrOgkqvySqHIdM5Cz8S8+PMAe2ZGs1HrJn4VAH
Sm8qVDyZCO/SeuI5tp955crAUNNmhH9nHJFESligGJwA0+g8mjc5d1tNifylgiL5
+FNbypatf0PSunkTXKbTwtP/foLTnF3N7XNNMYV0NwNuG1i8U5em4I9uCBJ7Qve6
aJ/ux3h45JeqZQnkj2xQcAVHy8kTsahRHb2fbO7yUHFM3kSumfd7D5TdwGrIK4Db
izmx7Kgy6r1PB9c5vpyvI2OsZkw+iUil6Ew7uDgUX+HDA3H8Ca4ZZ9SuV96vl21q
nWfA9hU/24+dsS6atC7w
=8egX
-----END PGP SIGNATURE-----