[Samba] Problem over VPN

[Antony Gelberg]

> Antony Gelberg wrote:
>> Hi all,
>>
>> Samba 3.0.14, Debian Sarge.  I've asked on IRC but didn't get a
>> response.
>> I am having problems dragging files to my Samba share in Windows XP,
>> over
>> an IPSEC VPN.  The file in question is a simple small text file.  I have
>> no problem directly creating and editing a file on the share.
>>
>> Here's the log:
>>
>> [2005/09/18 21:51:05, 0] lib/util_sock.c:read_socket_with_timeout(321)
>>   read_socket_with_timeout: timeout read. read error = Connection reset
>> by
>> peer.
>> [2005/09/18 21:51:05, 0] smbd/oplock.c:oplock_break(841)
>>   oplock_break: receive_smb error (Connection reset by peer)
>>   oplock_break failed for file debian.txt (dev = 902, inode = 312405,
>> file_id = 37).
>> [2005/09/18 21:51:05, 0] smbd/oplock.c:oplock_break(931)
>>   oplock_break: client failure in break - shutting down this smbd.
>> [2005/09/18 21:51:05, 1] smbd/service.c:close_cnum(830)
>>   pulse-laptop (192.168.0.190) closed connection to service antony
>>
>> Hope someone can advise.
>>
>> Antony
>>
> Hi,
>
> this is most likely a mtu size problem.
> PMTU discovery does not work over IPSec connections,
> so you have to specify the mtu size in the ipsec connection.

Sounds very possible indeed.  When I ping with DF set, 1450 responds with
Fragmentation required but DF set, 1350 responds normally, but 1400 times
out.  I'll take it to the openswan mailing list.