Re: [CentOS] Re: Sendmail and pmtu discovery

2008-10-28 Thread Sean Carolan
> Yes, I've dealt with these people. If they turn off all ICMP, they often > drop fragments as well, making the problem even worse. You can sometimes get > them to listen by asking them if their Internet access seems a little > "weird" in that some sites work sometimes or downloads are slow or the

Re: [CentOS] Re: Sendmail and pmtu discovery

2008-10-14 Thread Chris Boyd
On Oct 14, 2008, at 1:59 PM, Sean Carolan wrote: If you've ever dealt with with one of these paranoid Mordac-type security managers you know exactly what I'm talking about. In our case the path of least resistance was to disable pmtu discovery, and tell the customer that we've done all we poss

Re: [CentOS] Re: Sendmail and pmtu discovery

2008-10-14 Thread Ralph Angenendt
Les Mikesell wrote: > Ralph Angenendt wrote: >> >> As said, they deliberately broke their internet connection, so there isn't >> much you can do except setting your MTU to an extremely low value and >> hope that there's nothing in between which has an even lower MTU. > > It doesn't have to be extr

Re: [CentOS] Re: Sendmail and pmtu discovery

2008-10-14 Thread Sean Carolan
Thanks for the information. If I understand this correctly, the client would have to convince the owner of each and every router hop along the way to disable PMTU discovery if he insists on dropping all ICMP packets? And Scott hit the nail on the head with this comment: > Sometimes you can't be

Re: [CentOS] Re: Sendmail and pmtu discovery

2008-10-14 Thread Les Mikesell
Ralph Angenendt wrote: As said, they deliberately broke their internet connection, so there isn't much you can do except setting your MTU to an extremely low value and hope that there's nothing in between which has an even lower MTU. It doesn't have to be extremely low, it just has to be low

Re: [CentOS] Re: Sendmail and pmtu discovery

2008-10-14 Thread Ralph Angenendt
Scott Silva wrote: > on 10-14-2008 6:24 AM Ralph Angenendt spake the following: > > > So you basically broke your internet connection because of stupid > > customers? No, there isn't anything you can do on your side - > > especially if you don't know how large their MTU is set (which you > > cannot