Re: Transparent interception MTU issues

[Amos Jeffries <squid3@xxxxxxxxxxxxx>]

On 16.05.2012 09:53, Daniel Niasoff wrote:
> Hi,
>
> I am accessing squid through a PPTP tunnel and have a lower MTU as a 
> result.
>
> I am able to use squid ok as an explicit proxy however when trying
> transparent interception many pages timeout and don't open.
>
> I guess this is because of MTU issues.

Likely. But Please check your guesses before looking for a fix to them.

  ping -s 1499 ...

PMTU response or lost packet?

> I have tried "http_port 3129 intercept disable-pmtu-discovery=always"
> but to no avail.
>
> I am using 3.2.0.17.
>
> Any ideas?

If it actually is MTU issues, fix them.

 * Enable ICMP control messages to cross the network.
 * set MTU and/or MSS on the tunnel entrance to an appropriate low 
value.

Amos