Re: Transparent proxies and PMTUD on the (WWW) server side

[Carson Gaspar <carson () taltos org>]

If an ALG supports transparent proxying, enables PMTUD, and does not 
intercept ICMP must fragment, the ALG is broken. File a high priority 
trouble ticket with your vendor.

In the mean time, the _only_ sane thing to do is disable PMTUD, if you have 
that much access to the underlying OS.

--
Carson




_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards