Subject: Re: kern/36309
To: None <ipf-bug-people@NetBSD.org, gnats-admin@netbsd.org,>
From: Darren Reed <darrenr@reed.wattle.id.au>
List: netbsd-bugs
Date: 05/19/2007 23:05:09
The following reply was made to PR kern/36309; it has been noted by GNATS.

From: Darren Reed <darrenr@reed.wattle.id.au>
To: Michael van Elst <mlelstv@serpens.de>
Cc: gnats-bugs@NetBSD.org
Subject: Re: kern/36309
Date: Sat, 19 May 2007 14:45:13 -0700

 Michael van Elst wrote:
 > Hi Darren,
 >
 > please see kern/36309 for my setup.
 >
 > One other problem showed up. The outgoing ICMP message from my router
 > sends out the client private address. I.e.
 >
 > | When sniffing the outgoing traffic I see ICMP messages sent to the
 > | internet host: '[client] unreachable  - need to frag (mtu 1427)'
 >
 > should read:
 >
 > | When sniffing the outgoing traffic I see ICMP messages sent to the
 > | internet host: '[P.P.P.P] unreachable  - need to frag (mtu 1427)'
 >
 > Of course then PMTU can't work on the internet host.
 >
 > Thinking about it, this is probably the only reason for the problem.
 >
 > With the older ipf PMTU did work, so mss clamping wasn't needed and
 > a too large value of 1420 didn't have any impact. Now I have go
 > down to 1392 which is small enough to avoid fragmentation.
 >   
 
 What was the previous version if ipfilter you were using?
 
 Darren