IPv6 readyNote: This archive passes through spamassassin. Every mail marked with the subject "*****SPAM*****" has exceed a certain threshold of spam-like behaviour.

[Users] Fragmentation question again: not solved

From: Stephen J. Bevan (stephen_at_dino.dnsalias.com)
Date: Tue Jul 23 2002 - 01:03:07 CEST


Shishir Mondal writes:
> Any idea what it really happening? Well, I'm totally lost about it;
> what can happen with "ping" application...? Does FreeS/WAN stops
> realleambling packets if it sees the "DF" bit set, which is set by
> ping in my machine as a default, ...

Put FreeS/WAN on two boxes and do a FreeS/WAN<->FreeS/WAN test with
packets larger than the MTU. If that fails then submit a bug report
including barfs of both sides and tcpdumps on both sides. If the test
passes then it would tend to imply the problem is with your IP/IPsec
stack not correctly fragmenting packets. Alternately run your IPsec
against OpenBSD or FreeBSD/NetBSD and see if you have fragmentation
problems with those IPsec implementations. If your code works fine
with those but fails with FreeS/WAN then include that information in a
bug report. If it fails with those IPsec implementations then the
ball is back in your court.
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users



This archive was generated by hypermail 2.1.3 : Mon Jul 29 2002 - 05:20:25 CEST