Re: ipfw nat and smaller wan mtu

2022-12-07 Thread John Hay
Hi, Adding this patch does make it work for me. There might be better ways to do it. I have tested with ping and ssh. In ping's case, ping reported: frag needed and DF set (MTU 1392) In ssh's case I could see with tcpdump that the "need to frag (mtu 1392)" was sent back and the next packet's

ipfw nat and smaller wan mtu

2022-12-07 Thread John Hay
Hi, What would the proper ipfw rules be to make nat work and properly get the icmp too big packets back to a local host if the wan interface needs a smaller mtu? I'm using a FreeBSD machine as router/firewall, but its wan interface needs a smaller mtu (1392) than the default ethernet mtu. I have