PMTU options go in host config files, and don't work in combination with TCPOnly.
[wiki] / examples / fig-firewall.png
examples/fig-firewall.png