[Bug 48] New: conntrack breaks udp path mtu discovery

bugzilla-daemon@netfilter.org bugzilla-daemon@netfilter.org
Thu, 13 Feb 2003 17:28:32 +0100


https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=48

           Summary: conntrack breaks udp path mtu discovery
           Product: netfilter/iptables
           Version: linux-2.4.x
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: connection tracking
        AssignedTo: laforge@netfilter.org
        ReportedBy: kaber@trash.net
                CC: netfilter-buglog@lists.netfilter.org


ip_conntrack defrags packets at PRE_ROUTING and LOCAL_OUT and refragments them
at POST_ROUTING without careing about IP_DF. packets with IP_DF|IP_MF can be
refragmented with a different size, so path mtu discovery is broken. Linux nfs
itself sends out packets with IP_DF|IP_MF.



------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.