Re: DF (Don't frag) issues

From: Matthew Sullivan <matthew_at_uq.edu.au>
Date: Tue, 03 May 2005 07:43:10 +1000
Andre Oppermann wrote:

> I'm at loss for an explanation.  I've recreated approximatly the same
> setup with the gif tunnel (but no IPSec) and it works just fine for me.
> Getting correct MTU back and everything.
>
> What is your IPSec setup?  Could it be that you do the IPSec on the IP
> packet first before it goes into the gif tunnel instead of the other
> way around?  That may explain this behaviour.
>
You're quite welcome to take a look - this is the first time up for me 
with FreeBSD, ipf/ipfw/pf and VPNs - to date I have used iptables and 
FreeSWAN on Linux (settled on pf).

Setup scripts for the tunnel are at:

http://scorpion.sorbs.net/ICMP/ipsec-stealth.sh.txt   (this is the VPN 
server)
http://scorpion.sorbs.net/ICMP/ipsec-oblivion.sh.txt  (this is my home 
machine where the mulitple nets are)

Regards,

-- 
Matthew Sullivan
Specialist Systems Programmer
Information Technology Services
The University of Queensland
Received on Mon May 02 2005 - 19:44:27 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:38:33 UTC