Skip site navigation (1)Skip section navigation (2)
Date:      19 Mar 1999 00:25:14 +0000
From:      Terry Glanfield <terry@program-products.co.uk>
To:        schmitt@penta.ufrgs.br, freebsd-questions@freebsd.org, freebsd-hacker@freebsd.org
Subject:   Re: SKIP and NAT, I got it.
Message-ID:  <ehfrifhqt.fsf@program-products.co.uk>
In-Reply-To: schmitt@penta.ufrgs.br's message of "17 Mar 99 20:13:07 GMT"
References:  <36F00CD3.163F743E@penta.ufrgs.br>

next in thread | previous in thread | raw e-mail | index | archive | help

schmitt@penta.ufrgs.br (Marcelo) writes:
> Problem
>     The firewall has to notify with icmp 3.4 (packet needed
> fragmentation) computers which want to send packets bigger than 1366
> bytes, because the MTU of the external interface is modified by skip. It
> 
> notifies when the connection is destined to Internet, but it doesnīt
> when the packet is destined to the tunnel. So I had to alter MTU in
> every workstation of my network. Thatīs very bad.
> 
>     What I would like to know is why the packet is first encapsulated by
> skip and only after that the system finds out that it canīt be
> transmitted because of MTU.

Damn, my testing never used packets >512.  I'm hitting the same
problem now.

Can anyone tell me how to manually fragment a packet?  I'll try to
hack it into skip but I'm a little out of my depth here.

Terry.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?ehfrifhqt.fsf>