[squid-users] Re: tproxy and disable-pmtu-discovery=always

2013-03-03 Thread Omid Kosari 
I have kernel 3.5.0-25 so there is no need disable-pmtu-discovery=always in
tproxy port ?
Is it 100% safe . please explain more .



--
View this message in context: 
http://squid-web-proxy-cache.1019090.n4.nabble.com/tproxy-and-disable-pmtu-discovery-always-tp3753485p4658810.html
Sent from the Squid - Users mailing list archive at Nabble.com.

Re: [squid-users] Re: tproxy and disable-pmtu-discovery=always

2013-03-03 Thread Amos Jeffries 

On 3/03/2013 9:40 p.m., Omid Kosari wrote:

I have kernel 3.5.0-25 so there is no need disable-pmtu-discovery=always in
tproxy port ?
Is it 100% safe . please explain more .


Nothing is that safe. Even breathing. All humans suffer from oxygen 
poisoning.


Please enquire of the netfilter mailing list for more on ICMP and 
TPROXY. I am aware they fixed several ICMP related issues found in the 
early TPROXY kernels. Whether there is any outstanding issues is not clear.


Amos