From owner-freebsd-net@FreeBSD.ORG Tue Jan 18 13:40:25 2011 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id EC11B106566B for ; Tue, 18 Jan 2011 13:40:25 +0000 (UTC) (envelope-from artem@aws-net.org.ua) Received: from lazy.aws-net.org.ua (lazy.aws-net.org.ua [IPv6:2a00:1db0:20::828:140]) by mx1.freebsd.org (Postfix) with ESMTP id 55D5C8FC12 for ; Tue, 18 Jan 2011 13:40:25 +0000 (UTC) Received: from rainbow.vl.net.ua (rainbow.vl.net.ua [188.230.120.215]) (authenticated bits=0) by lazy.aws-net.org.ua (8.14.3/8.14.3) with ESMTP id p0IDeHnf066136 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=OK) for ; Tue, 18 Jan 2011 15:40:23 +0200 (EET) (envelope-from artem@aws-net.org.ua) Message-ID: <4D359841.50306@aws-net.org.ua> Date: Tue, 18 Jan 2011 15:40:17 +0200 From: Artyom Viklenko Organization: Art&Co. User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; ru-RU; rv:1.9.2.11) Gecko/20101025 Thunderbird/3.1.5 MIME-Version: 1.0 To: freebsd-net@freebsd.org References: <71EEB2EA-3F48-4850-AB9C-92E47ED72D99@Chaos1.DE> In-Reply-To: <71EEB2EA-3F48-4850-AB9C-92E47ED72D99@Chaos1.DE> Content-Type: text/plain; charset=KOI8-U; format=flowed Content-Transfer-Encoding: 8bit X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.2.5 (lazy.aws-net.org.ua [188.230.120.140]); Tue, 18 Jan 2011 15:40:23 +0200 (EET) Subject: Re: RESOLVED: Re: 8.1 Box does not react on ICMP "unreachable - need to frag" X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jan 2011 13:40:26 -0000 18.01.2011 14:23, Axel Rau пишет: > > Am 18.01.2011 um 11:00 schrieb Axel Rau: > >> The DB server returns its query results successfully until an >> oversized message is being sent (with "DF" set), which the GW2 refuses >> with an ICMP "unreachable - need to frag (mtu 1492) > I could convince the firewall to defragment the packet itself. (-; > This was a pf issue (I mixed up option "set reassemble" and filteropt > "fragment"). > > I'm still looking for an answer to question 1: >> 1. Shouldn't DB2 fragment and resend the packet? Generally - yes. Make sure DB2 got ICMP need-frag message and it not blocked. Also, check sysctl variable 'net.inet.tcp.path_mtu_discovery'. Hope this helps. :) -- Sincerely yours, Artyom Viklenko. ------------------------------------------------------- artem@aws-net.org.ua | http://www.aws-net.org.ua/~artem artem@viklenko.net | JID: artem@jabber.aws-net.org.ua FreeBSD: The Power to Serve - http://www.freebsd.org