mpd problem

[Mile]

Hi,

I have a FreeBSD computer acting as gateway to windows clients....
Some sites like msn.com, opera.com, hp.com, najdi.si .... dont work on LAN... because of MTU problem.

If i set MTU to 1492 instead of default 1500 then this sites work! (on windows)

(If i use userland pppoe then everything works without setting MTU on LAN. (itself has an option mssfixup).)

I tried with adding "set iface enable tcpmssfix" to mpd.conf as described in mpd documentation, but it still doesnt work...
msn.com and opera.com work now... but others dont.

mpd.conf (Version 3.18)
default:
        load PPPoE

PPPoE:
        new -i ng0 PPPoE PPPoE
        set iface addrs 1.1.1.1 2.2.2.2
        set iface route default
        set iface disable on-demand
        set iface idle 0
        set bundle disable multilink
        set bundle authname xxx
        set link no acfcomp protocomp
        set link disable pap chap
        set link accept chap
        set link mtu 1492
        set link keep-alive 10 60
        set ipcp yes vjcomp
        set ipcp ranges 0.0.0.0/0 0.0.0.0/0
        set iface enable tcpmssfix
        open iface


natd.conf
interface ng0
dynamic yes
use_sockets yes


ipfw
#natd
/sbin/ipfw 15 add divert natd all from any to any via ng0


sysctl.conf
security.bsd.see_other_uids=0
security.bsd.see_other_gids=0
security.bsd.unprivileged_read_msgbuf=0
net.inet.tcp.blackhole=2
net.inet.udp.blackhole=1
vm.swap_idle_enabled=1
kern.ipc.maxsockbuf=2097152
kern.ipc.somaxconn=2048
kern.maxfiles=65536
kern.maxfilesperproc=32768
net.inet.tcp.rfc1323=0
net.inet.tcp.delayed_ack=0
net.inet.tcp.sendspace=32768
net.inet.tcp.recvspace=32768
net.inet.udp.recvspace=32768
net.inet.udp.maxdgram=57344
net.local.stream.recvspace=32768
net.local.stream.sendspace=32768
net.inet.icmp.drop_redirect=1
net.inet.icmp.log_redirect=1
net.inet.ip.redirect=1
net.inet6.ip6.redirect=0
net.inet.ip.sourceroute=1
net.inet.ip.accept_sourceroute=1
net.link.ether.inet.max_age=1200
net.inet.icmp.bmcastecho=0
#net.inet.tcp.drop_synfin=1
net.inet.ip.fw.verbose=1

If you need any more info please contact me.


thanks,
Brane