On Tue, Mar 22, 2005 at 06:59:07PM +1100, Carl Brewer wrote:
> Is there some reason why you're blocking the ICMP
                           ~~~

> type 3 code 4 packets?  See :
> 
> http://www.phildev.net/mss/mss-filter.html

I might have missed something, was there evidence that *he* is doing that?

Somthing (the d-link gadget?) might do that, which would cause the need
for mss clamping - but the common scenario where you run into this problems
is that this bogus filtering happens beyound your controll.

Ever tried to get VeriSign to change their firewall setup?
Or a customer (where you are forced to establish working communication) with
a completely clueeless network admin (that you are not in a position to get
fired)? Or an ISP with "transparent" (forced) proxy?


Martin