IP frag need

[Peter Pentchev]

On Wed, May 19, 2004 at 12:22:41PM +0600, Dmitry A. Bondareff wrote:
> Hello hackers!
> 
> I have two office in the Internet.
> And now I trying to make VPN between it.
> 
> I using mpd for it.
> 
> 
> Client ---> (mtu=1500) FreeBSD (mtu=1024) ========== VPN over Internet
> ======> (mtu=1024)FreeBSD (mtu=1500)---> WindowsNT
> 
> Client trying to use mounted disk from WindowsNT
> 
> 11.8.24.25 - WindowsNT
> 11.8.11.1 - FreeBSD
> 
> tcpdump info:
> 17:26:55.100097 11.8.24.25.139 > 11.8.11.1.1049: tcp 1460 (DF)
> 17:26:55.100175 11.8.11.1 > 11.8.24.25: icmp: 11.8.11.1 unreachable - need
> to frag (mtu 1024) (DF)
> 17:26:57.287737 11.8.24.25.139 > 11.8.11.1.1049: tcp 1460 (DF)
> 17:26:57.287813 11.8.11.1 > 11.8.24.25: icmp: 11.8.11.1 unreachable - need
> to frag (mtu 1024) (DF)
> 
> As you can see IP frag needed, but WindowsNT don't want to do it.
> 
> What I cat do on FreeBSD box to solve the problem ??

If you are using a recent version of mpd, try putting the following line:
  set iface enable tcpmssfix
in your bundle definition in mpd.conf.

G'luck,
Peter

-- 
Peter Pentchev	roam at ringlet.net    roam at sbnd.net    roam at FreeBSD.org
PGP key:	http://people.FreeBSD.org/~roam/roam.key.asc
Key fingerprint	FDBA FD79 C26F 3C51 C95E  DF9E ED18 B68D 1619 4553
No language can express every thought unambiguously, least of all this one.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-hackers/attachments/20040519/79a56598/attachment.bin