Need to frag (DF) :)

Lars Eggert larse at ISI.EDU
Mon Mar 31 07:53:34 PST 2003


On 3/31/2003 2:26 AM, Dennis S. Davidoff wrote:
[snip]
> 
> As you can see, mtu is 1392. So any attempt to open big content from
> site or download a big file will fail. tcpdump shows:
> 
> 14:13:09.876867 172.16.1.2 > 217.106.231.104: icmp: 192.168.0.168
> unreachable - need to frag (mtu 1392) (DF)
> ...and so on.

Try tcpmssd from ports, and bind it to ng0 after it comes up. It should 
diddle the MSS values in your TCP SYNs on the fly. (You may also have to 
  do something similar on the tunnel endpoint for inbound connections.)

Lars
-- 
Lars Eggert <larse at isi.edu>           USC Information Sciences Institute
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3529 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.freebsd.org/pipermail/freebsd-net/attachments/20030331/c4ecbad8/smime.bin


More information about the freebsd-net mailing list