From owner-freebsd-hackers Fri Jan 4 7:45:47 2002 Delivered-To: freebsd-hackers@freebsd.org Received: from web12508.mail.yahoo.com (web12508.mail.yahoo.com [216.136.173.200]) by hub.freebsd.org (Postfix) with SMTP id 9751037B419 for ; Fri, 4 Jan 2002 07:45:43 -0800 (PST) Message-ID: <20020104154543.90114.qmail@web12508.mail.yahoo.com> Received: from [131.193.8.207] by web12508.mail.yahoo.com via HTTP; Fri, 04 Jan 2002 07:45:43 PST Date: Fri, 4 Jan 2002 07:45:43 -0800 (PST) From: Kristopher Kublinski Reply-To: d00f@d00f.com Subject: Re: path_mtu_discovery To: Peter Pentchev , freebsd-hackers@freebsd.org In-Reply-To: <20020104144821.A328@straylight.oblivion.bg> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG --- Peter Pentchev wrote: > On Fri, Jan 04, 2002 at 11:08:06AM +0100, Martin Kaeske wrote: > > Hello, > > I'm using FreeBSD-4.4-STABLE and have an OpenBSD-2.9 router to > > connect to the internet (via DSL). If i try to do a cvsup > > (cvsup.de.freebsd.org, cvsup2.de.freebsd.org, cvsup.freebsd.org) > > i'm getting a lot of "icmp: Destination unreachable, need to frag > > " messages and cvsup fails (timeout). The curious thing > > is if i disable net.inet.tcp.path_mtu_discovery or if i lower the > > MTU to 1488, everything is fine (of course). > > That's why i wanted to ask wether FreeBSD fails to lower the MTU > > (it should lower it due to the icmp messages, shouldn't it?) or > > is there any pppoe specific problem between me and the cvsup servers? > > > > Martin > > PS: AFAICS cvsup is the only problem ftp/http/nntp works fine > > You have not, by any chance, firewalled ICMP replies, have you - > either outgoing on the router, or incoming on the FreeBSD box? > > G'luck, > Peter > I have the same setup as Martin but i cant say i have the same problem. I am also blocking all incoming icmp traffic - in fact i have explicitly denied almost all incoming traffic so i do not thing that is the problem. however if you are running ipf on the openbsd machine (which i am assuming you are) you might want to check your ruleset, it sounds like you might have something in there that is causing it. Kristopher __________________________________________________ Do You Yahoo!? Send your FREE holiday greetings online! http://greetings.yahoo.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message