According to Glynn Clements: > Miquel van Smoorenburg wrote: > > > However, since M$ NT sends packets with DF on by default, > > many clueless firewall administrators block all ICMP, > > I don't quite understand the use of "since" here, i.e. why the second > line follows from the first. That is because you left out half of the sentence: since M$ NT sends packets with DF on by default, [and] many clueless firewall administrators block all ICMP, and a lot of layer4 load balancing switches are broken wrt sending ICMP_FRAG_NEEDED back to the source (like www.google.com!) ===> nobody will notice one site more being severly broken. It might not be the greatest sentence I ever constructed though which isn't surprising if you look at what time I posted it :) I recently set up a tunnel with an MTU of 1472 to link a site to the Internet, and most NT based sites (www.telefoongids.kpn-telecom.nl for example) and even www.google.com simply didn't work. Mike. - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.rutgers.edu
