Andre Oppermann ab48768b20 When doing IP forwarding with [FAST_]IPSEC compiled into the kernel
ip_forward() would report back a zero MTU in ICMP needfrag messages
because on a IPSEC SP lookup failure no MTU got computed.

Fix this by changing the logic to compute a new MTU in any case if
IPSEC didn't do it.

Change MTU computation logic to use egress interface MTU if available
or the next smaller MTU compared to the current packet size instead
of falling back to a very small fixed MTU.

Fix associated comment.

PR:		kern/91412
MFC after:	3 days
2006-01-24 17:57:19 +00:00
..
2005-11-24 14:17:35 +00:00
2005-10-21 16:23:01 +00:00
2005-08-26 15:27:18 +00:00
2005-11-17 12:56:40 +00:00
2006-01-24 13:38:06 +00:00
2006-01-21 10:44:34 +00:00
2006-01-23 20:10:49 +00:00
2005-08-24 02:47:16 +00:00