Re: The IPv4 Internet MTU

[Gert Doering <gert@space.net>]

Hi,

On Fri, Oct 12, 2007 at 10:02:32AM -0700, james woodyatt wrote:
> I'd hate to be repetitive and boring, but I'm shocked-- SHOCKED! I  
> say-- to learn that stateful packet filtering is the root cause of so  
> many problems for application transport.

Actually the problem has nothing to do with stateful packet filtering
(except where the firewall doesn't get it right), but much more with

  - stupid admins "ICMP is so evil, we must forbid it"
  - broken IP mangling devices, like load balancers or NATs, that cannot 
    correctly handle incoming ICMP packet-too-big packets.

Gert Doering
        -- NetMaster
-- 
Total number of prefixes smaller than registry allocations:  122119

SpaceNet AG                        Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14          Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                   HRB: 136055 (AG Muenchen)
Tel: +49 (89) 32356-444            USt-IdNr.: DE813185279