From: Peter Sawatzki 

Geo,

The same problem ("blackhole router") was what terrorized me some
time ago when a VPN Admin of one of the VPNs we connected trough decided to
block ICMP fragmentation bit (type 3 subtype 4 or some such): you could do
an initial connect to the terminal session but receive a blank, black
screen. The interesting thing: you could open a second session while this
session was "hanging" without problem. Maybe this is a workaround
for your Terminal Sessions too!

Peter

In article , georger{at}nls.net says...
> from the lists:
>
> After installing the update in Microsoft Security Bulletin MS05-019 on
> two servers at a customer site, we are no longer able to connect via VPN
> to terminal services on those servers.  (Other servers that did not have
> the security bulletins from last Tuesday installed can connect via VPN.)
>
> After many hours over two days working with Microsoft Product Support
> Services, we discovered that forcing the MTU size down allowed the
> client to connect to terminal services.  Today Microsoft PSS reported
> the they have confirmed that there is a problem with ICMP messages being
> incorrectly discarded (other have opened PSS cases about this issue).
> This could be why the MTU size is not being set correctly.
>
> There will be an update to the patch in MS05-019, but as of this time,
> that update is not available.  A Microsoft KB article is being written
> and has been assigned the number KB898060, but as to this time, that
> article is not publicly available.
>
> I will be uninstalling the update for Security Bulletin MS05-019 from
> our customers servers this evening and waiting for the corrected patch
> before reinstalling it.
>
> --
> Darryl J. Roberts, MCSE, MCP+I, CompTIA CTT+, CSSA
> Software Engineering Unlimited, IT Professional Services Consultancy
> Ventura, CA, USA
>
>
>
>
>

--- BBBS/NT v4.01 Flag-5