[Openswan Users] KLIPS or NETKEY?

[Tuomo Soini]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Paul Wouters wrote:

>> 1. Is that "bug" in NETKEY/Openswan already solved?
> 
> No. The way fragmentation/path mtu is handled is still different between
> klips and netkey.

This bug was mostly pmtu bugs on linux kernels before 2.6.10. on kernels
before that pmtu was badly broken. I haven't seen pmtu problems with
linux kernel 2.6.18.4 which is one I use.

- --
Tuomo Soini <tis at foobar.fi>
Linux and network services
+358 40 5240030
Foobar Oy <http://foobar.fi/>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFHnbhSTlrZKzwul1ERArcZAKCDeIBm7yFzBDx7dflCAQmF8FapNQCfUbGZ
HhXPL6G3pLeC7C15AZlRctQ=
=84it
-----END PGP SIGNATURE-----