PMTU options go in host config files, and don't work in combination with TCPOnly.
[wiki] / examples / fig-on-firewall.png
examples/fig-on-firewall.png