Hi On Wed, 14 Aug 2013 19:34:25 +0200, Bernhard Schmidt > Your description sounds suspiciously like a Path-MTU discovery issue. > Without TLS the server will never send a large packet towards you, but > when you enable TLS it has to send its certificate, which is often > larger than 1500 Bytes. So pMTU happens. Either pMTU discovery towards > your host is generally broken (which I doubt since you said you were > able to contact other hosts), or they broke pMTU discovery on their > side, i.e. by filtering ICMP.
BINGO!
This ISP had in the past problems with IPV6 and the MTU,
they where filtering the ICMP6 Packet Too Big, but after much
complains they fix it.
I assumed that they fixed for all connections and as nothing
else failled, i was suspecting a ipv6+tls problem of their mail
server, but now is clear that SMTP still have this problem
> ip -6 route add 2001:8a0:2104:ff:212:55:154:44/128 via <gateway> dev
> <dev> mtu 1280
Yep, this fix the problem. Testing i can see that the max MTU
is 1320.
well, i will write a new complain reporting the problem to
then.
thanks for the help
higuita
--
Naturally the common people don't want war... but after all it is the
leaders of a country who determine the policy, and it is always a
simple matter to drag the people along, whether it is a democracy, or
a fascist dictatorship, or a parliament, or a communist dictatorship.
Voice or no voice, the people can always be brought to the bidding of
the leaders. That is easy. All you have to do is tell them they are
being attacked, and denounce the pacifists for lack of patriotism and
exposing the country to danger. It works the same in every country.
-- Hermann Goering, Nazi and war criminal, 1883-1946
signature.asc
Description: PGP signature
