it has to be mtu or firewall