Date: Wed, 2 Dec 1998 22:27:02 +0100 From: Guido van Rooij <guido@gvr.org> To: Nate Williams <nate@mt.sri.com> Cc: Daniel Eischen <eischen@vigrid.com>, dillon@apollo.backplane.com, hackers@FreeBSD.ORG, luigi@labinfo.iet.unipi.it Subject: Re: TCP bug Message-ID: <19981202222702.A23308@gvr.org> In-Reply-To: <199812022104.OAA07720@mt.sri.com>; from Nate Williams on Wed, Dec 02, 1998 at 02:04:20PM -0700 References: <199812021626.LAA27156@pcnet1.pcnet.com> <199812021636.JAA06068@mt.sri.com> <19981202215730.B23018@gvr.org> <199812022104.OAA07720@mt.sri.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Dec 02, 1998 at 02:04:20PM -0700, Nate Williams wrote: > > In my previous mail I already stated why things can go wrong if the > > www server on the internet has a badly configured packet filter. > > In your case it seems that your router is badly configured. Does it > > filter out ICMP ICMP_UNREACH_NEEDFRAG pakcets from the ethernet to > > the ouside, but not from your router to the outside? > > See my followup. I don't filter out ICMP type 3 packets, but instead > allow them. (I can't take any credit for this, it was part of the > firewall ruleset PHK gave me years ago...) Yes I saw that too late. Anyway the bottom line is that the amount of clue on the internet is realling getting so low that new developments (well..new) like path MTU discovery can no longer be used. And when you try to convince the owners of the web site to change their packet filter (because usually it is theirs that is causing the problems) you easily give up after talking to the n-th clueless person. It is my fear that the current cluelessness will have a severe impact on other new developments as well. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19981202222702.A23308>