Re: mss to pmtu clamping partially broken?

2007-07-02 Thread Krzysztof Oledzki
On Mon, 2 Jul 2007, Phil Dibowitz wrote: On Mon, Jul 02, 2007 at 09:16:57PM +0200, Krzysztof Oledzki wrote: On Mon, 2 Jul 2007, Phil Dibowitz wrote: On Mon, Jul 02, 2007 at 07:04:12PM +0200, Andreas Steinmetz wrote: Jan Engelhardt wrote: Do you really need clamping? It's a hack, since T

Re: mss to pmtu clamping partially broken?

2007-07-02 Thread Krzysztof Oledzki
On Mon, 2 Jul 2007, Phil Dibowitz wrote: On Mon, Jul 02, 2007 at 07:04:12PM +0200, Andreas Steinmetz wrote: Jan Engelhardt wrote: Do you really need clamping? It's a hack, since TCP should do MSS negotiation itself. (Of course it may happen that some routers are broken.) But usually not for

Re: mss to pmtu clamping partially broken?

2007-07-02 Thread Phil Dibowitz
On Mon, Jul 02, 2007 at 09:16:57PM +0200, Krzysztof Oledzki wrote: > > > On Mon, 2 Jul 2007, Phil Dibowitz wrote: > >> On Mon, Jul 02, 2007 at 07:04:12PM +0200, Andreas Steinmetz wrote: >>> Jan Engelhardt wrote: Do you really need clamping? It's a hack, since TCP should do MSS negotiatio

Re: mss to pmtu clamping partially broken?

2007-07-02 Thread Phil Dibowitz
On Mon, Jul 02, 2007 at 07:04:12PM +0200, Andreas Steinmetz wrote: > Jan Engelhardt wrote: > > Do you really need clamping? It's a hack, since TCP should do MSS > > negotiation > > itself. (Of course it may happen that some routers are broken.) But usually > > not > > for incoming packets. > > Y

Re: mss to pmtu clamping partially broken?

2007-07-02 Thread Andreas Steinmetz
Jan Engelhardt wrote: > Do you really need clamping? It's a hack, since TCP should do MSS negotiation > itself. (Of course it may happen that some routers are broken.) But usually > not > for incoming packets. You never know when you hit ICMP blackholes, broken routers and other evil things. Bett

Re: mss to pmtu clamping partially broken?

2007-07-02 Thread Andreas Steinmetz
Patrick McHardy wrote: > Its possible that one of your ISPs is doing clamping. You could > check on ppp0 if thats the case. Or maybe for some reason the > PMTU value for the internal host is smaller than 1500. You can > check that by doing "ip route get ". > > Oh well, thew fun with ISPs. Same p

Re: mss to pmtu clamping partially broken?

2007-06-30 Thread Jan Engelhardt
On Jun 29 2007 13:09, Andreas Steinmetz wrote: > >There seems to be a problem with mss to pmtu clamping for incoming syn >packets on reply to an outgoing connection on a ppp interface. The mss >of the outgoing syn packets is always always clamped to the pmtu, I did >check this with a target host I

Re: mss to pmtu clamping partially broken?

2007-06-29 Thread Andreas Steinmetz
Patrick McHardy wrote: > Andreas Steinmetz wrote: >> Patrick McHardy wrote: >> >>> - assuming you have ethernet internally, the PMTU from your router >>> to the internal hosts is 1500, so it won't do any clamping. >>> >> >> Yep, internal PMTU is 1500, still the incoming packets are clamped to >> 14

Re: mss to pmtu clamping partially broken?

2007-06-29 Thread Patrick McHardy
Andreas Steinmetz wrote: > Patrick McHardy wrote: > >>- assuming you have ethernet internally, the PMTU from your router >>to the internal hosts is 1500, so it won't do any clamping. >> > > > Yep, internal PMTU is 1500, still the incoming packets are clamped to > 1452 on the one line and not cla

Re: mss to pmtu clamping partially broken?

2007-06-29 Thread Andreas Steinmetz
Patrick McHardy wrote: > Andreas Steinmetz wrote: >> Patrick McHardy wrote: >> >>> Andreas Steinmetz wrote: >>> [...] The tcpdump on the client shows that the mss of the incoming syn reply packet is *NOT* clamped to the ppp interface mtu. >>> >>> You forgot to mention *how* you're cl

Re: mss to pmtu clamping partially broken?

2007-06-29 Thread Patrick McHardy
Andreas Steinmetz wrote: > Patrick McHardy wrote: > >>Andreas Steinmetz wrote: >> >>>[...] >>>The tcpdump on the client shows that the mss of the incoming syn reply >>>packet is *NOT* clamped to the ppp interface mtu. >> >> >>You forgot to mention *how* you're clamping the MSS. Using >>TCPMSS? Do

Re: mss to pmtu clamping partially broken?

2007-06-29 Thread Andreas Steinmetz
Patrick McHardy wrote: > Andreas Steinmetz wrote: >> There seems to be a problem with mss to pmtu clamping for incoming syn >> packets on reply to an outgoing connection on a ppp interface. The mss >> of the outgoing syn packets is always always clamped to the pmtu, I did >> check this with a targe

Re: mss to pmtu clamping partially broken?

2007-06-29 Thread Patrick McHardy
Andreas Steinmetz wrote: > There seems to be a problem with mss to pmtu clamping for incoming syn > packets on reply to an outgoing connection on a ppp interface. The mss > of the outgoing syn packets is always always clamped to the pmtu, I did > check this with a target host I do have access to. T

mss to pmtu clamping partially broken?

2007-06-29 Thread Andreas Steinmetz
There seems to be a problem with mss to pmtu clamping for incoming syn packets on reply to an outgoing connection on a ppp interface. The mss of the outgoing syn packets is always always clamped to the pmtu, I did check this with a target host I do have access to. The incoming syn reply to such a p