Re: [CentOS] Sendmail and pmtu discovery

2008-10-14 Thread Ralph Angenendt
Sean Carolan wrote: We have an issue with some customers who refuse to accept ICMP traffic to their mail servers. It seems that they have put Mordac, preventer of information services in charge of their firewall policy (http://en.wikipedia.org/wiki/List_of_minor_characters_in_Dilbert#Mordac).

Re: [CentOS] Sendmail and pmtu discovery

2008-10-14 Thread David Dyer-Bennet
On Tue, October 14, 2008 09:31, Kai Schaetzl wrote: Sean Carolan wrote on Tue, 14 Oct 2008 08:13:34 -0500: My mail logs are showing that customers who specifically disallow ICMP traffic have many Connection Reset entries in our logs: Could somebody explain why ICMP might play a role in mail

Re: [CentOS] Sendmail and pmtu discovery

2008-10-14 Thread Paul Bijnens
On 2008-10-14 16:31, Kai Schaetzl wrote: Sean Carolan wrote on Tue, 14 Oct 2008 08:13:34 -0500: My mail logs are showing that customers who specifically disallow ICMP traffic have many Connection Reset entries in our logs: Could somebody explain why ICMP might play a role in mail delivery?

Re: [CentOS] Sendmail and pmtu discovery

2008-10-14 Thread Kai Schaetzl
Ralph Angenendt wrote on Tue, 14 Oct 2008 17:24:08 +0200: If you don't know the smallest MTU on the path to the mail server, you might not be able to send packets over that path, especially if DF is set. But if it's not set? Shouldn't most devices have it not set? Kai -- Kai Schätzl,

Re: [CentOS] Sendmail and pmtu discovery

2008-10-14 Thread Les Mikesell
Kai Schaetzl wrote: Ralph Angenendt wrote on Tue, 14 Oct 2008 17:24:08 +0200: If you don't know the smallest MTU on the path to the mail server, you might not be able to send packets over that path, especially if DF is set. But if it's not set? Shouldn't most devices have it not set?

Re: [CentOS] Sendmail and pmtu discovery

2008-10-14 Thread nate
Kai Schaetzl wrote: Sean Carolan wrote on Tue, 14 Oct 2008 08:13:34 -0500: My mail logs are showing that customers who specifically disallow ICMP traffic have many Connection Reset entries in our logs: Could somebody explain why ICMP might play a role in mail delivery? It doesn't really. If

Re: [CentOS] Sendmail and pmtu discovery

2008-10-14 Thread David Dyer-Bennet
On Tue, October 14, 2008 12:31, Kai Schaetzl wrote: Ralph Angenendt wrote on Tue, 14 Oct 2008 17:24:08 +0200: If you don't know the smallest MTU on the path to the mail server, you might not be able to send packets over that path, especially if DF is set. But if it's not set? Shouldn't

Re: [CentOS] Sendmail and pmtu discovery

2008-10-14 Thread Ralph Angenendt
Kai Schaetzl wrote: Ralph Angenendt wrote on Tue, 14 Oct 2008 17:24:08 +0200: If you don't know the smallest MTU on the path to the mail server, you might not be able to send packets over that path, especially if DF is set. But if it's not set? Shouldn't most devices have it not set?

Re: [CentOS] Sendmail and pmtu discovery

2008-10-14 Thread Kai Schaetzl
Sean Carolan wrote on Tue, 14 Oct 2008 08:13:34 -0500: My mail logs are showing that customers who specifically disallow ICMP traffic have many Connection Reset entries in our logs: Could somebody explain why ICMP might play a role in mail delivery? Kai -- Kai Schätzl, Berlin, Germany Get

Re: [CentOS] Sendmail and pmtu discovery

2008-10-14 Thread mouss
Sean Carolan a écrit : We have an issue with some customers who refuse to accept ICMP traffic to their mail servers. It seems that they have put Mordac, preventer of information services in charge of their firewall policy

Re: [CentOS] Sendmail and pmtu discovery

2008-10-14 Thread Ralph Angenendt
Kai Schaetzl wrote: Sean Carolan wrote on Tue, 14 Oct 2008 08:13:34 -0500: My mail logs are showing that customers who specifically disallow ICMP traffic have many Connection Reset entries in our logs: Could somebody explain why ICMP might play a role in mail delivery? If you don't know

Re: [CentOS] Sendmail and pmtu discovery

2008-10-14 Thread mouss
Kai Schaetzl a écrit : Ralph Angenendt wrote on Tue, 14 Oct 2008 17:24:08 +0200: If you don't know the smallest MTU on the path to the mail server, you might not be able to send packets over that path, especially if DF is set. But if it's not set? Shouldn't most devices have it not set?