https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=242744

--- Comment #22 from Victor Sudakov <v...@sibptus.ru> ---
(In reply to Eugene Grosbein from comment #8)
> Can you enable some TCP service at FreeBSD side (f.e. inetd/echo or ftpd)
> and check it out if Windows sets DF=1 for initial encrypted TCP SYN 
> when you connect from Windows to FreeBSD over such IPSec transport 
> mode configuration?

I've finally found time to do that. 192.168.3.80 is a Windows 2012 server,
192.168.3.1 is FreeBSD with daytime and ftpd services enabled. As you see from
the packet dump, all ESP packets have the DF flag set.

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
freebsd-net@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Reply via email to