>The following code, with my patch, is from the netbsd 1.5 branch's
>netinet/ip_input.c:ip_forward().  It is how ip_forward() handles an error 
>from ip_output() that the packet has an sp policy, the DF bit set and is too 
>large for the tunnel's MTU.  This code may have a bug in looking up
>ro->ro_rt->rt_ifp->if_mtu' and not looking at the per-route MTU in reentry's 
>rt_rmx.
>
>(In case of bad line wrapping, it is included inline and as an attachment.)

	thanks, the diff looks correct.

itojun