Using IPv4 TCPMSS target with IPv6-in-IPv4



I have a braindead ISP that filters some ICMP but doesn't seem to
realise it. (Yes, I know, but choices are few. ):) With IPv4 I have to
use,

iptables -A FORWARD -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu

or large packets don't get through.

Now I'm playing with IPv6, again small packets get through and large
packets don't, so I'm guessing that exactly the same problem is
occurring. Unfortunately, the relevant gateway machines tend to run late
2.4 kernels, so ip6tables isn't offering a TCPMSS target.

But, that machine uses IPv6-in-IPv4 anyway (a route for 2000::/3 via
::192.88.99.1) so I am wondering: is there some magic that I can use to
make the IPv6 stuff use the IPv4 TCPMSS target, so I can get sensible
IPv6 connectivity without having to use a very recent kernel?

Mark.

--
Functional programming vacancy at http://www.aetion.com/
.



Relevant Pages

  • Re: Can FC5 Route/Work With IPv6 Addresses?
    ... Others have gateways which can encapsulate IPv4 packets from ... outside and allow access to their IPv6 network. ... protocols and applications which can understand and process IPv6 packets. ...
    (Fedora)
  • Re: Using IPv4 TCPMSS target with IPv6-in-IPv4
    ... again small packets get through and large ... I have not seen that the latest stable 2.6 kernels and ip6tables offer an IPv6 TCPMSS target either. ... make the IPv6 stuff use the IPv4 TCPMSS target, ...
    (comp.os.linux.networking)
  • Re: EXPERIMENTAL IPv6 decoder available in Snort
    ... > I think that there are few reasons to tunnel Ipv6 in Ipv4 ... > packets. ... Tunneling is one of the many alternatives to ... > to provide communication between Ipv6 islands through IPv4 ...
    (Focus-IDS)
  • IPv4 problems with an driver
    ... it seems like ipv4 is not workint perfectly. ... ipv6 seems to work fine though. ... 100 packets transmitted, 67 packets received, 33% packet loss ...
    (freebsd-current)
  • RE: Transfer a sending packet to upper TCP/IP protocol layer in IM
    ... He's building a gateway across an IPV4 segment. ... AFAIK, all systems that support IPv6 provide this feature anyway, so that I ... the destination NIC of IPv6 packet is the same as the destination NIC of my ... was assuming that tcpip stack can rebuild the L2 header for the encapped IPv4 ...
    (microsoft.public.development.device.drivers)