[Openswan Users] ICMP Type 3, Code 4, MTU 0?

[Peter McGill]

fragicmp=no seems to have eliminated the problem, thanks.

Peter McGill
Software Developer / Network Administrator
Gra Ham Energy Limited
----- Original Message ----- 
From: "Paul Wouters" <paul at xelerance.com>
To: "Peter McGill" <petermcgill at goco.net>
Cc: <users at openswan.org>
Sent: Sunday, April 16, 2006 7:24 PM
Subject: Re: [Openswan Users] ICMP Type 3, Code 4, MTU 0?


> On Thu, 13 Apr 2006, Peter McGill wrote:
>
>> Windows receives ICMP Type 3 (Destination Unreachable), Code 4 (Must
>> Fragment), MTU 0
>> Windows adjusts the routes (presumably to lower the MTU)
>> Contivity Client complains about route change and disconnects (for 
>> security)
>> sheridan (Linux) appears to be generating the ICMP messages.
>> They first show up on sheridan's eth0 interface, but not on the ipsec0
>> interface.
>> I have upgraded both the Kernel and OpenSWAN on sheridan since the last 
>> known
>> successful operation.
>
> Can you try adding fragicmp=no? Or change 
> /proc/sys/net/ipv4/ip_no_pmtu_disc to 1?
>
> Paul
> -- 
> Building and integrating Virtual Private Networks with Openswan:
> http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155