NFS in a VPN

Jean Chouanard chouanard at PARC.XEROX.COM
Fri Dec 31 12:41:12 EST 1999


What I was referring too was *buggy* VPN implementation, which will not
re-assemble correctly these frags.
This is a bug.


On 31 December 1999 at 4:41, someone using the login of ""Golder, Fred"
<Fred.Golder at cendant.com> " wrote:
> This message is in MIME format. Since your mail reader does not understand
> this format, some or all of this message may not be legible.
>
> ------_=_NextPart_001_01BF538D.6DD711EE
> Content-Type: text/plain;
> 	charset="iso-8859-1"
>
> The fragmentation is a fact of life with a VPN and maximum sized packets.
> any tunneling type protocol has to add bytes to the packet during the
> encapsulation.  Also any data integrity scheme will have to add bytes to the
> message.  This will cause packet fragmentation, but it isn't a bug.
>
> -Fred Golder
>
> -----Original Message-----
> From: Jean Chouanard [mailto:chouanard at PARC.XEROX.COM]
> Sent: Thursday, December 30, 1999 7:29 PM
> To: VPN at SECURITYFOCUS.COM
> Subject: Re: NFS in a VPN
>
>
> It should be OK. One of the problem I found on buggy VPN implementation was
> some fragmentation issue with NFS v3.
>
> On 30 December 1999 at 8:48, someone using the login of "Ivan Fox
> <ifox100 at HOTMAIL.COM> " wrote:
> > Can we run NFS within a VPN?
> >
> > Any comments are appreciated.
> >
> > Thanks and regards,
> >
> > Ivan
> >
> > VPN is sponsored by SecurityFocus.COM
>
> VPN is sponsored by SecurityFocus.COM
>
> ------_=_NextPart_001_01BF538D.6DD711EE
> Content-Type: text/html;
> 	charset="iso-8859-1"
> Content-Transfer-Encoding: quoted-printable
>
> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
> <HTML>
> <HEAD>
> <META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
> charset=3Diso-8859-1">
> <META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
> 5.5.2448.0">
> <TITLE>RE: NFS in a VPN</TITLE>
> </HEAD>
> <BODY>
>
> <P><FONT SIZE=3D2>The fragmentation is a fact of life with a VPN and =
> maximum sized packets.&nbsp; any tunneling type protocol has to add =
> bytes to the packet during the encapsulation.&nbsp; Also any data =
> integrity scheme will have to add bytes to the message.&nbsp; This will =
> cause packet fragmentation, but it isn't a bug.</FONT></P>
>
> <P><FONT SIZE=3D2>-Fred Golder</FONT>
> </P>
>
> <P><FONT SIZE=3D2>-----Original Message-----</FONT>
> <BR><FONT SIZE=3D2>From: Jean Chouanard [<A =
> HREF=3D"mailto:chouanard at PARC.XEROX.COM">mailto:chouanard at PARC.XEROX.COM=
> </A>]</FONT>
> <BR><FONT SIZE=3D2>Sent: Thursday, December 30, 1999 7:29 PM</FONT>
> <BR><FONT SIZE=3D2>To: VPN at SECURITYFOCUS.COM</FONT>
> <BR><FONT SIZE=3D2>Subject: Re: NFS in a VPN</FONT>
> </P>
> <BR>
>
> <P><FONT SIZE=3D2>It should be OK. One of the problem I found on buggy =
> VPN implementation was</FONT>
> <BR><FONT SIZE=3D2>some fragmentation issue with NFS v3.</FONT>
> </P>
>
> <P><FONT SIZE=3D2>On 30 December 1999 at 8:48, someone using the login =
> of &quot;Ivan Fox</FONT>
> <BR><FONT SIZE=3D2>&lt;ifox100 at HOTMAIL.COM&gt; &quot; wrote:</FONT>
> <BR><FONT SIZE=3D2>&gt; Can we run NFS within a VPN?</FONT>
> <BR><FONT SIZE=3D2>&gt;</FONT>
> <BR><FONT SIZE=3D2>&gt; Any comments are appreciated.</FONT>
> <BR><FONT SIZE=3D2>&gt;</FONT>
> <BR><FONT SIZE=3D2>&gt; Thanks and regards,</FONT>
> <BR><FONT SIZE=3D2>&gt;</FONT>
> <BR><FONT SIZE=3D2>&gt; Ivan</FONT>
> <BR><FONT SIZE=3D2>&gt;</FONT>
> <BR><FONT SIZE=3D2>&gt; VPN is sponsored by SecurityFocus.COM</FONT>
> </P>
>
> <P><FONT SIZE=3D2>VPN is sponsored by SecurityFocus.COM</FONT>
> </P>
>
> </BODY>
> </HTML>
> ------_=_NextPart_001_01BF538D.6DD711EE--

VPN is sponsored by SecurityFocus.COM




More information about the VPN mailing list