Re: ICMP need to frag

From: Jeremie Le Hen (jeremie_at_le-hen.org)
Date: 05/23/05

  • Next message: Darren Pilgrim: "RE: iwi driver: Probes but no association (FreeBSD5.4)."
    Date: Mon, 23 May 2005 20:22:34 +0200
    To: dave baukus <dbaukus@chiaro.com>
    
    

    Hi Dave,

    > > - Why does Path MTU Discovery doesn't work here ? I'm pretty
    > > sure that the ICMP Need-To-Frag packets are not filtered since
    > > I am able to see them outgoing from the Ethernet network card
    > > on the RELENG_4 router.
    > >
    >
    > Does SSH use IPSEC AH ?
    > Just guessing here, but maybe the problems is (from icmp_input()):
    >
    > /*
    > * XXX if the packet contains [IPv4 AH TCP], we can't make a
    > * notification to TCP layer.
    > */
    > ctlfunc = inetsw[ip_protox[icp->icmp_ip.ip_p]].pr_ctlinput;
    > if (ctlfunc)
    > (*ctlfunc)(code, (struct sockaddr *)&icmpsrc,
    > (void *)&icp->icmp_ip);

    What do you mean in "does SSH use IPSec AH ?" ? I've never heard of
    such a thing. I think the code you pasted refers to IPSec transport
    mode, but I'm afraid that it's not related to my problem of Path MTU
    Discovery not working.

    Regards,

    -- 
    Jeremie Le Hen
    < jeremie at le-hen dot org >< ttz at chchile dot org >
    _______________________________________________
    freebsd-net@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-net
    To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
    

  • Next message: Darren Pilgrim: "RE: iwi driver: Probes but no association (FreeBSD5.4)."

    Relevant Pages

    • ICMP need to frag
      ... The attached tcpdump trace comes from the Ethernet side of the RELENG_4 ... this trace is a screen reattachement through ssh which hangs during ... Jeremie Le Hen ... < jeremie at le-hen dot org>< ttz at chchile dot org> ...
      (freebsd-net)
    • Re: IPsec vs SSH (Was Re: in.telnetd vulnerability??)
      ... Subject: IPsec vs SSH ... right, the user authentication part is not much of an issue, because the network is fairly secure, ie who is accessing it and such. ... >for protecting the traffic on route, but it is really just telnet on some ...
      (Focus-SUN)
    • Re: Frage zu Ports
      ... > mir einen SSH Tunnel oder IPSec vorstellen. ... Endpunkten aufgemacht. ... Bei IPSec kann ich da (echt VPN) zwei Netzwerke ...
      (microsoft.public.de.security.netzwerk.sicherheit)
    • IPsec vs SSH (Was Re: in.telnetd vulnerability??)
      ... Subject: IPsec vs SSH ... IPsec is about protecting verything on the network and isn't about user ...
      (Focus-SUN)
    • Re: automatic cipher ("none") selection?
      ... KL> encrypted paths? ... KL> have IPsec, there's no reason for me to expend the processor time ... KL> encrypt the SSH session. ... the protections afforded by SSH and IPSec do not have the same ...
      (comp.security.ssh)