Subject: Re: IP DF problems (again)
To: Marc Slemko <>
From: Jukka Marin <>
List: current-users
Date: 02/02/1998 14:22:37
On Sun, Feb 01, 1998 at 01:46:35PM -0700, Marc Slemko wrote:
> > 13:44:04.878280 > P 138:1598(1460) ack 373 win 8760 (DF)
> > 13:44:04.878446 > icmp: unreachable - need to frag (DF)
> The problem isn't the system, but rather that some dumb admin has decided
> to filter all ICMP.

They allowed ICMP through their firewall and now the mail message got

I still don't understand why they try to send packets of 1460 bytes with DF

BTW, what's the basic idea of DF, anyway?  The fragmented packets will be
reassembled at the receiving end, so why not allow fragmenting and let the
routers do what they have to? :-)  (A stupid question probably, but it had
to be asked.. ;)  Sure, it may affect performance with high packet losses,