Re: [squid-users] Re: tproxy and "disable-pmtu-discovery=always"

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Mon, 04 Mar 2013 15:59:52 +1300

On 3/03/2013 9:40 p.m., Omid Kosari wrote:
> I have kernel 3.5.0-25 so there is no need "disable-pmtu-discovery=always" in
> tproxy port ?
> Is it 100% safe . please explain more .

Nothing is that safe. Even breathing. All humans suffer from oxygen
poisoning.

Please enquire of the netfilter mailing list for more on ICMP and
TPROXY. I am aware they fixed several ICMP related issues found in the
early TPROXY kernels. Whether there is any outstanding issues is not clear.

Amos
Received on Mon Mar 04 2013 - 03:00:04 MST

This archive was generated by hypermail 2.2.0 : Mon Mar 04 2013 - 12:00:04 MST