netdev
[Top] [All Lists]

Re: More IPSEC trouble

To: Nicolas DICHTEL <nicolas.dichtel@xxxxxxxxx>
Subject: Re: More IPSEC trouble
From: Steve Hill <steve@xxxxxxxxxxxxxxxxxxx>
Date: Thu, 10 Mar 2005 16:32:01 +0000 (GMT)
Cc: netdev@xxxxxxxxxxx
In-reply-to: <42306145.3050603@6wind.com>
References: <Pine.LNX.4.61.0503101229380.18067@sorbus2.navaho> <42306145.3050603@6wind.com>
Sender: netdev-bounce@xxxxxxxxxxx
On Thu, 10 Mar 2005, Nicolas DICHTEL wrote:

When the stack check the mtu for this packet, it doesn't know the size of
the overhead. So the total length of the packet don't include the size
of the esp or ah header. The same bug appears when you run
IPSEC in IPv4 transport mode over a 4in4 tunnel. A fix for this bug
is to allow locally the fragmentation of the packet.

I've just tried the patch and unfortunately it doesn't fix the problem. :(

- Steve Hill (BSc)
Senior Software Developer                        Email: steve@xxxxxxxxxxxx
Navaho Technologies Ltd.                           Tel: +44-870-7034015


<Prev in Thread] Current Thread [Next in Thread>