I’m 99% sure your problem is that PMTUD does not work because you filter ICMP unconditionally. Place some rules to allow traffic with connection-state=related on top of your FW Filter rules.
I’m 99% sure your problem is that PMTUD does not work because you filter ICMP unconditionally. Place some rules to allow traffic with connection-state=related on top of your FW Filter rules.