Re: ICMP_UNREACH_NEEDFRAG returns iface MTU instead of route?

[Gert Doering <gert%greenie.muc.de@localhost>]

Hi,

On Sat, Dec 28, 2013 at 10:55:53AM -0500, Greg Troxel wrote:
> The real question is:
> 
>   Why is it ok to decline to forward packets because they are bigger
>   than the route MTU, when the route MTU is about PMTU-D to be used for
>   locally-sourced packest?

Because IPSEC-encapsulated packets *are* locally-sourced, on the outer
header?

gert

-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             
gert%greenie.muc.de@localhost
fax: +49-89-35655025                        
gert%net.informatik.tu-muenchen.de@localhost