Re: [22/*] [NETFILTER] Use correct IPsec MTU in TCPMSS

netdev

Re: [22/*] [NETFILTER] Use correct IPsec MTU in TCPMSS

To:	Ludo Stellingwerff <ludo@xxxxxxxxxxxxx>
Subject:	Re: [22/*] [NETFILTER] Use correct IPsec MTU in TCPMSS
From:	Patrick McHardy <kaber@xxxxxxxxx>
Date:	Sun, 20 Mar 2005 19:22:34 +0100
Cc:	netdev@xxxxxxxxxxx
In-reply-to:	<423DBCCE.8090006@xxxxxxxxxxxxx>
References:	<20050314102614.GA9610@xxxxxxxxxxxxxxxxxxx> <20050314105313.GA21001@xxxxxxxxxxxxxxxxxxx> <20050314111002.GA29156@xxxxxxxxxxxxxxxxxxx> <20050315091904.GA6256@xxxxxxxxxxxxxxxxxxx> <20050315095837.GA7130@xxxxxxxxxxxxxxxxxxx> <20050318090310.GA28443@xxxxxxxxxxxxxxxxxxx> <20050318091129.GA28658@xxxxxxxxxxxxxxxxxxx> <20050318104013.57d65e99.davem@xxxxxxxxxxxxx> <423D9ADA.6050407@xxxxxxxxx> <423DA58D.4050406@xxxxxxxxxxxxx> <20050320171707.GE4201@xxxxxxxxxxxxxxxxx> <423DB7B7.1070604@xxxxxxxxx> <423DBCCE.8090006@xxxxxxxxxxxxx>
Sender:	netdev-bounce@xxxxxxxxxxx
User-agent:	Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.7.5) Gecko/20050106 Debian/1.7.5-1

Ludo Stellingwerff wrote:

I'm hoping that using the fwmark as a selector can provide a workable
solution for both mine and Lennert's problem, any many more related
situations. Netfilter has a (almost) complete range of selectors.
e.g. Lennerts problem could be solved using a combination of the
"realm" match of iptables, in combination with a fwmark for SPD matching.


Routing of local packets is done before the first netfilter hook
is called, but I forgot about ip_route_me_harder(). So you're right,
the realm can be translated to nfmark values using iptables.

Regards
Patrick

[More with this subject...]

<Prev in Thread]	Current Thread	[Next in Thread>
*Re: [26/] [NET] Kill dst_pmtu/dst_path_metric*, (continued)* *Re: [26/] [NET] Kill dst_pmtu/dst_path_metric*, David S. Miller* *Re: [25/] [NET] Kill unnecessary uses of dst_path_metric*, David S. Miller* *Re: [24/] [IPSEC] Get ttl from child instead of path*, David S. Miller* *Re: [23/] [IPV4] Kill remaining unnecessary uses of dst_pmtu*, David S. Miller* *Re: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, David S. Miller* *Re: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, Patrick McHardy* *Re: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, Ludo Stellingwerff* *Re: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, Lennert Buytenhek* *Re: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, Patrick McHardy* *Re: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, Ludo Stellingwerff* *Re: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, Patrick McHardy* <= *Re: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, jamal* *Re: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, Patrick McHardy* *Extending xfrm_selector (Was: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS)*, Herbert Xu* *Re: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, David S. Miller* *Re: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, Patrick McHardy* Netfilter+IPsec, Patrick McHardy Re: Netfilter+IPsec, David S. Miller Re: Netfilter+IPsec, Herbert Xu Re: Netfilter+IPsec, Patrick McHardy *Re: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, Herbert Xu*

Previous by Date:	*Re: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, Ludo Stellingwerff*
Next by Date:	Re: dummy as IMQ replacement, jamal
Previous by Thread:	*Re: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, Ludo Stellingwerff*
Next by Thread:	*Re: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, jamal*
Indexes:	[Date] [Thread] [Top] [All Lists]