Date: Fri, 30 Dec 2005 12:11:50 +0000 From: Brian Candler <B.Candler@pobox.com> To: VANHULLEBUS Yvan <vanhu_bsd@zeninc.net> Cc: freebsd-net@freebsd.org Subject: Re: IPSEC documentation Message-ID: <20051230121150.GA14630@uk.tiscali.com> In-Reply-To: <20051229123521.GA1854@zen.inc> References: <20051228143817.GA6898@uk.tiscali.com> <001401c60bc0$a3c87e90$1200a8c0@gsicomp.on.ca> <20051228153106.GA7041@uk.tiscali.com> <20051228164339.GB3875@zen.inc> <868xu5p2ze.fsf@srvbsdnanssv.interne.kisoft-services.com> <20051229121359.GA10949@uk.tiscali.com> <20051229123521.GA1854@zen.inc>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Dec 29, 2005 at 01:35:21PM +0100, VANHULLEBUS Yvan wrote: > > As it happens this FreeBSD box is also acting as a NAT gateway using pf > > (myhost is on a private IP) and actually its external IP is also private - > > it sits behind a second NAT firewall. So maybe that's where the problem > > originates, although I really can't understand where the value of 1380 comes > > from. > > 1500 - (pppoe encapsulation ?) - ESP header - L2TP encapsulation.... Yeah, but what I don't understand is that this value was chosen by a remote webserver which is on the other side of the world, and knows nothing about the L2TP/ESP encapsulation going on locally. All it knows is that the client offered an MSS of 1360; for some reason it offered back an MSS of 1380. Weird.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20051230121150.GA14630>