Re: [Ipsec-tools-devel] esp_frag and linux

[Marco B. <pu...@ho...>]

Brian Candler wrote:

>On Fri, May 19, 2006 at 10:52:41AM +0100, Matthias Scheler wrote:
> > Why would it be necessary there? Large UDP packets won't be send out
> > with the DF (Don't Fragment) bit in the IP header set and will
> > therefore automatically be fragmented by a router if necessary.
>
>You'd think so, but Linux seems to be broken in this regard. It always 
>sends
>packets with the DF bit set, even UDP or ICMP packets, unless:

Did you report this behaviour to the proper mailing list (netdev)?