Re: IPsec and Path MTU

[Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>]

On Thu, Jun 17, 2004 at 04:14:03PM -0700, David S. Miller wrote:
> On Fri, 18 Jun 2004 09:12:41 +1000
> Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> wrote:
> 
> > In my case, the ICMP message is not coming from the remote IPsec gateway
> > or a router in front of it.  It's coming from a host behind it.  So
> > the original IP header is in the ICMP message, in the clear.
> 
> Remote gateway is supposed to encapsulate the ICMP message and send it
> back to the other gateway isn't it?

We are the other gateway :) Yes, I'm talking about what happens to
that ICMP message once we decapsulate it.
-- 
Visit Openswan at http://www.openswan.org/
Email:  Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt