IP frag need

Dmitry A. Bondareff freebsd at mmk.ru
Mon May 24 22:08:11 PDT 2004


Hello, hackers!

Thanks for all.
Problem solved by changing access lists on Cisco Router.
ICMP was denyed by it and Windows box do not accept icmp (need to frag).
Now all works fine.

Regards,
Dmitry.

P.S. I think that mpd is good product and work fine.

> Dmitry A. Bondareff wrote:
>
> >Hello hackers!
> >
> >I have two office in the Internet.
> >And now I trying to make VPN between it.
> >
> >I using mpd for it.
> >
> >
> >Client ---> (mtu=1500) FreeBSD (mtu=1024) ========== VPN over Internet
> >======> (mtu=1024)FreeBSD (mtu=1500)---> WindowsNT
> >
> >Client trying to use mounted disk from WindowsNT
> >
> >11.8.24.25 - WindowsNT
> >11.8.11.1 - FreeBSD
> >
> >tcpdump info:
> >17:26:55.100097 11.8.24.25.139 > 11.8.11.1.1049: tcp 1460 (DF)
> >17:26:55.100175 11.8.11.1 > 11.8.24.25: icmp: 11.8.11.1 unreachable -
need
> >to frag (mtu 1024) (DF)
> >17:26:57.287737 11.8.24.25.139 > 11.8.11.1.1049: tcp 1460 (DF)
> >17:26:57.287813 11.8.11.1 > 11.8.24.25: icmp: 11.8.11.1 unreachable -
need
> >to frag (mtu 1024) (DF)
> >
> >As you can see IP frag needed, but WindowsNT don't want to do it.
> >
> >What I cat do on FreeBSD box to solve the problem ??
> >
> >Dmitry.
> >(Sorry for my English)
> >
> >_______________________________________________
> >freebsd-hackers at freebsd.org mailing list
> >http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
> >To unsubscribe, send any mail to
"freebsd-hackers-unsubscribe at freebsd.org"




More information about the freebsd-hackers mailing list