[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: MTU and IPSec VPN's

To: Derek Atkins <warlord@mit.edu>
Subject: Re: MTU and IPSec VPN's
From: Michael Richardson <mcr@sandelman.ottawa.on.ca>
Date: Wed, 13 Jun 2001 20:42:07 -0400
cc: ipsec@lists.tislabs.com
In-reply-to: Your message of "13 Jun 2001 16:35:20 EDT." <sjmbsnsf793.fsf@rcn.ihtfp.org>
Sender: owner-ipsec@lists.tislabs.com


>>>>> "Derek" == Derek Atkins <warlord@mit.edu> writes:
    Derek> The real problem are 'net sites that block all ICMP messages,
    Derek> which means that they effectively disable pmtu discovery.

  Uh, since this is occuring through their VPN, if there is any
blocking of ICMPs (assuming that they are generated correctly), then it would 
be happening in their network.

]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] mcr@sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another NetBSD/notebook using, kernel hacking, security guy");  [

References:

Re: MTU and IPSec VPN's

From: Derek Atkins <warlord@mit.edu>

Prev by Date: Re: IPSEC Security Gateways & NAT
Next by Date: RE: IPSEC Security Gateways & NAT
Prev by thread: Re: MTU and IPSec VPN's
Next by thread: RE: MTU and IPSec VPN's
Index(es):
- Main
- Thread