Viraj Alankar wrote:> I've successfully setup tinc-1.0pre1 but I notice on my firewall
> that it requires fragmented UDP packets to be let in in order to work
> properly. Is there any way to avoid this?
[ This is true. We don't inherit the DF (Don't Fragment) flag onto the
UDP data, so path MTU discovery doesn't work. We have to fix this. ]
Yes, you can avoid this by lowering the MTU value for your tap device.
You can do it this way:
ifconfig tap0 mtu 1448
1448 is the highest value you can set so that UDP packets don't get
fragmented.
--
Ivo Timmermans
Deja moo: the feeling you've heard this bullshit before.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: not available
Url :
http://brouwer.uvt.nl/pipermail/tinc-devel/attachments/20000528/1fe00d43/attachment.pgp
