On Wed, 4 Aug 2004, Bart De Schuymer wrote: > Due to a recent change in the bridge code, we now need a way of knowing if > a packet has been defragmented. The bridge code now checks on the packet > size and drops packets that are too big for the output port. Defragmented > packets will get refragmented later, so they shouldn't be dropped. Well.. iptables does not really care why the packet is oversized. It fragments any oversized packets. Why does the bridge need to? Regards Henrik
