https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=242744
--- Comment #22 from Victor Sudakov <v...@sibptus.ru> --- (In reply to Eugene Grosbein from comment #8) > Can you enable some TCP service at FreeBSD side (f.e. inetd/echo or ftpd) > and check it out if Windows sets DF=1 for initial encrypted TCP SYN > when you connect from Windows to FreeBSD over such IPSec transport > mode configuration? I've finally found time to do that. 192.168.3.80 is a Windows 2012 server, 192.168.3.1 is FreeBSD with daytime and ftpd services enabled. As you see from the packet dump, all ESP packets have the DF flag set. -- You are receiving this mail because: You are the assignee for the bug. _______________________________________________ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"