[Bug 242744] IPSec in transport mode between FreeBSD hosts blackholes TCP traffic

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Sun Dec 22 08:58:36 UTC 2019


--- Comment #17 from Victor Sudakov <vas at sibptus.ru> ---
(In reply to Eugene Grosbein from comment #16)
Eugene, could you make "no DF bit" the default behavior? Without the DF bit,
transport mode will work "out of the box" in a vanilla configuration.

If someone somewhere needs the DF flag on ESP packets, no doubt for obscure and
sinister purposes, they could reenable it for themselves.

Remember that net.inet.ipsec.dfbit=0 by default.

You are receiving this mail because:
You are the assignee for the bug.

More information about the freebsd-net mailing list