Re: More: Squid/Cisco trans proxy

Marc Lucke wrote:
>
> Ping works okay on those clients that have the problem, so not all ICMP is
> blocked for path discovery.

Ping and path MTU discovery uses different ICMP types. People
configuring packet filtering without knowing TCP/IP usually ends up only
enabling what they know they need, "I need to use this and that port,
and ping", forgetting the non-visible ones used by the TCP/IP suite of
protocols.

--
Henrik Nordstrom
Squid hacker