On Tue, 24 Jan 2023, to...@tuxteam.de wrote:
On Tue, Jan 24, 2023 at 06:41:56PM +0000, Tim Woodall wrote:
On Mon, 23 Jan 2023, Celejar wrote:
Thank you - the plot thickens [...]
It's depressingly common to find people who block icmp for 'security
reasons'. While you can mostly get away with that in ipv4, ipv6 breaks
catastrophically without at least some working icmp.
IPv4, too, does funny things when dropping ICMP. Path MTU discovery,
breaks, for one.
Indeed. Hence the --clamp-mss-to-pmtu magic in iptables.
