Subject: Re: kern/36309
To: None <ipf-bug-people@NetBSD.org, gnats-admin@netbsd.org,>
From: Darren Reed <darrenr@reed.wattle.id.au>
List: netbsd-bugs
Date: 05/19/2007 23:05:09
The following reply was made to PR kern/36309; it has been noted by GNATS.
From: Darren Reed <darrenr@reed.wattle.id.au>
To: Michael van Elst <mlelstv@serpens.de>
Cc: gnats-bugs@NetBSD.org
Subject: Re: kern/36309
Date: Sat, 19 May 2007 14:45:13 -0700
Michael van Elst wrote:
> Hi Darren,
>
> please see kern/36309 for my setup.
>
> One other problem showed up. The outgoing ICMP message from my router
> sends out the client private address. I.e.
>
> | When sniffing the outgoing traffic I see ICMP messages sent to the
> | internet host: '[client] unreachable - need to frag (mtu 1427)'
>
> should read:
>
> | When sniffing the outgoing traffic I see ICMP messages sent to the
> | internet host: '[P.P.P.P] unreachable - need to frag (mtu 1427)'
>
> Of course then PMTU can't work on the internet host.
>
> Thinking about it, this is probably the only reason for the problem.
>
> With the older ipf PMTU did work, so mss clamping wasn't needed and
> a too large value of 1420 didn't have any impact. Now I have go
> down to 1392 which is small enough to avoid fragmentation.
>
What was the previous version if ipfilter you were using?
Darren