On 3/03/2013 9:40 p.m., Omid Kosari wrote:
I have kernel 3.5.0-25 so there is no need "disable-pmtu-discovery=always" in tproxy port ? Is it 100% safe . please explain more .
Nothing is that safe. Even breathing. All humans suffer from oxygen poisoning.
Please enquire of the netfilter mailing list for more on ICMP and TPROXY. I am aware they fixed several ICMP related issues found in the early TPROXY kernels. Whether there is any outstanding issues is not clear.
Amos
