[Openswan Users] openswan MTU problems

[Paul Wouters]

On Wed, 19 Oct 2005, Ernesto Alvarez wrote:

> We've been using openswan here for a project for the last few months and 
> everything was fine until we had an incident last week.

> 4. We began receiving messages like "Oct 12 19:19:26 bradbury kernel: pmtu 
> discovery on SA ESP/e5fb8ff6/c0a85015" for approximately 15 minutes.

> We're using Debian Sarge Linux, kernel 2.6.8 (using linux's own ipsec kernel 
> modules) and openswan 2.2.0. If anybody has an idea regarding the causes of 
> these events or even some ideas to check, we'd please like to hear about 
> them. If you need some logs to check any ideas you have, just ask and we'll 
> post them.

Many bugfixes have gone into the NETKEY stack since 2.6.8.

Paul