[Bug 242744] IPSec in transport mode between FreeBSD hosts blackholes TCP traffic

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=242744

--- Comment #22 from Victor Sudakov <vas at sibptus.ru> ---
(In reply to Eugene Grosbein from comment #8)
> Can you enable some TCP service at FreeBSD side (f.e. inetd/echo or ftpd)
> and check it out if Windows sets DF=1 for initial encrypted TCP SYN 
> when you connect from Windows to FreeBSD over such IPSec transport 
> mode configuration?

I've finally found time to do that. 192.168.3.80 is a Windows 2012 server,
192.168.3.1 is FreeBSD with daytime and ftpd services enabled. As you see from
the packet dump, all ESP packets have the DF flag set.

-- 
You are receiving this mail because:
You are the assignee for the bug.