Date: Mon, 23 May 2005 20:22:34 +0200 From: Jeremie Le Hen <jeremie@le-hen.org> To: dave baukus <dbaukus@chiaro.com> Cc: freebsd-net@freebsd.org, Jeremie Le Hen <jeremie@le-hen.org> Subject: Re: ICMP need to frag Message-ID: <20050523182234.GB850@obiwan.tataz.chchile.org> In-Reply-To: <4291E3BB.8030207@chiaro.com> References: <20050522201748.GJ850@obiwan.tataz.chchile.org> <20050522232847.GL850@obiwan.tataz.chchile.org> <4291E3BB.8030207@chiaro.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi Dave, > > - Why does Path MTU Discovery doesn't work here ? I'm pretty > > sure that the ICMP Need-To-Frag packets are not filtered since > > I am able to see them outgoing from the Ethernet network card > > on the RELENG_4 router. > > > > Does SSH use IPSEC AH ? > Just guessing here, but maybe the problems is (from icmp_input()): > > /* > * XXX if the packet contains [IPv4 AH TCP], we can't make a > * notification to TCP layer. > */ > ctlfunc = inetsw[ip_protox[icp->icmp_ip.ip_p]].pr_ctlinput; > if (ctlfunc) > (*ctlfunc)(code, (struct sockaddr *)&icmpsrc, > (void *)&icp->icmp_ip); What do you mean in "does SSH use IPSec AH ?" ? I've never heard of such a thing. I think the code you pasted refers to IPSec transport mode, but I'm afraid that it's not related to my problem of Path MTU Discovery not working. Regards, -- Jeremie Le Hen < jeremie at le-hen dot org >< ttz at chchile dot org >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050523182234.GB850>