https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=242744
--- Comment #17 from Victor Sudakov <v...@sibptus.ru> --- (In reply to Eugene Grosbein from comment #16) Eugene, could you make "no DF bit" the default behavior? Without the DF bit, transport mode will work "out of the box" in a vanilla configuration. If someone somewhere needs the DF flag on ESP packets, no doubt for obscure and sinister purposes, they could reenable it for themselves. Remember that net.inet.ipsec.dfbit=0 by default. -- You are receiving this mail because: You are the assignee for the bug. _______________________________________________ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"