IP tunnel MTU

Tim Franklin tim at pelican.org
Tue Oct 30 10:01:50 UTC 2012


>> Certainly fixing all the buggy host stacks, firewall and compliance devices to realize that ICMP isn't bad won't be hard.
>
> Wait till you get started on "fixing" the "security" consultants.

Ack.  I've yet to come across a *device* that doesn't deal properly with "packet too big".  Lots (and lots and lots) of "security" people, one or two applications, but no devices.

Regards,
Tim.





More information about the NANOG mailing list