[Bug 242744] IPSec in transport mode between FreeBSD hosts blackholes TCP traffic

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=242744

--- Comment #17 from Victor Sudakov <vas at sibptus.ru> ---
(In reply to Eugene Grosbein from comment #16)
Eugene, could you make "no DF bit" the default behavior? Without the DF bit,
transport mode will work "out of the box" in a vanilla configuration.

If someone somewhere needs the DF flag on ESP packets, no doubt for obscure and
sinister purposes, they could reenable it for themselves.

Remember that net.inet.ipsec.dfbit=0 by default.

-- 
You are receiving this mail because:
You are the assignee for the bug.