Date: Tue, 10 May 2005 01:25:00 +0200 From: Emanuel Strobl <Emanuel.strobl@gmx.net> To: freebsd-questions@freebsd.org Cc: Frank de Bot <freebsd@searchy.nl> Subject: Re: ipfw + natd => some sites won't work :-S Message-ID: <200505100125.03078@harrymail> In-Reply-To: <427FEFF8.2080006@searchy.nl> References: <427FE73C.5080408@searchy.net> <200505100111.28366@harrymail> <427FEFF8.2080006@searchy.nl>
next in thread | previous in thread | raw e-mail | index | archive | help
--nextPart6952308.g4oUmputqt Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Am Dienstag, 10. Mai 2005 01:19 schrieb Frank de Bot: > Emanuel Strobl wrote: > > The problem is the same: IP-IP tunneling reduces TCPs mss which the > > linux box doesn't fix. ICMP will work of course, TCP with full payload > > won't. I don't knwo how/why you tunnle IP into IP on that linux box, > > but that's the point where you have to dig. > > > > Good luck, > > > > -Harry > > Which tunnel forms don't experience the reducing of mss? I've chosen for Hm, I don't have that handy in my mind right now. I had to look for some=20 RFCs but it's quiet late here in germany, if I knew it by rote I'd tell=20 you. I have similar configurations with IPSec without that problem (IPSec=20 (ESP) is another protocol parallel to IP, not a IP in IP tunnel) =2DHarry > a ipip tunnel because it was a tunnen solutions which seemed to be the > most simple. Once I got that working I was planning to change it to VPN > or IPSec tunnel. > I got my reason for having that tunnel between the boxes (Server 2 is a > server far apart from Server 1) > > > Frank > > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" --nextPart6952308.g4oUmputqt Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (FreeBSD) iD8DBQBCf/FPBylq0S4AzzwRAmraAJ0agieYJecFyEosHEYUUlMeVyz3RwCeKMZ7 yk3ukcOznQBADdi9KKm839s= =aefJ -----END PGP SIGNATURE----- --nextPart6952308.g4oUmputqt--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200505100125.03078>