Carl Brewer wrote:
I've dropped the MTU on both endpoints down to 1440 and it seems to be working now. I'm curious to know if there's a better way than hardcoding the MTU on the endpoints. I don't think I'm blocking ICMP, but one of the endpoints is running loonucks and I can't get my head around ip[chains/tables] to get it to allow whatever ICMP traffic is required to change MTUs.
Well the *easiset* way to do it is to use the state engine in iptables, and ipfilter. How is this an iptables thing on the ipf list? Anyway, see the link I posted... it has commands for nearly every firewall we know of. Sunscreen coming soon.
Anyway, if you don't like suing the state stuff, then your next option is to allow in ICMP type 3 code 4 everywhere. ANd we have examples of that on the site too.
The link, one more time is:
http://home.earthlink.net/~jaymzh666/mss/
--
Phil Dibowitz [EMAIL PROTECTED]
Freeware and Technical Pages Insanity Palace of Metallica
http://home.earthlink.net/~jaymzh666/ http://www.ipom.com/
"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
- Benjamin Franklin, 1759
