Hi Dave:
This patch uses dst_mtu instead of dst_pmtu in the various tunnel
implementations. As it is they simply ignore the IPsec overhead.
This leads to bogus MTU values inside the tunnels.
Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
BTW, we're doing lazy MTU updates in the tunnel xmit functions.
When a packet with DF set hits us and exceeds the updated MTU,
we will send an ICMP packet back which is good.
Unfortunately when a packet with DF clear hits us as we update
the MTU downwards, the packet will be silently discarded instead
of fragmented (well we will send an ICMP back to ourselves but
we already knew that MTU value :).
I presume we want to fix this, right?
Cheers,
--
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
xfrm-16
Description: Text document
|