I finally found the solution: https://blue-labs.org/howto/mtu-mss.php i.e. your router needs to do mtu-clamping because microsoft seems to block all ICMP traffic (which is really defective). I thought my router did this but it turned out my iptables-command was incorrect.. the one from aforementioned website works. Cheers, - Daniel