Re: IPv6 TCP sessions hangs when using PF keep state

[Anthony Mallet <anthony.mallet%laas.fr@localhost>]

On Tuesday, at 12:59, Lars Schotte wrote:
| PF is dropping fragments, because it's explicitly telling the other
| side not to fragment packets using the DF flag.

AFAIK, there is no DF bit in IPv6 since it is implicit. And anyway this will
not prevent the other side from sending its own fragmented packets if it so
desires.

| i even got a link for you:
| http://www.netbsd.org/docs/network/pppoe/#clamping

Thanks for the link. npf has a max-mss parameter extension as well. I wanted to
first understand whether I misconfigured something before hacking the packets :)