NFS in a VPN
Ronald Ng
rng at NETSCREEN.COM
Fri Dec 31 14:50:05 EST 1999
Fragmentation could also be mishandled by a badly written application. My
.02.
----- Original Message -----
From: "Jean Chouanard" <chouanard at PARC.XEROX.COM>
To: <VPN at SECURITYFOCUS.COM>
Sent: Friday, December 31, 1999 9:41 AM
Subject: Re: NFS in a VPN
> What I was referring too was *buggy* VPN implementation, which will not
> re-assemble correctly these frags.
> This is a bug.
>
>
> On 31 December 1999 at 4:41, someone using the login of ""Golder, Fred"
> <Fred.Golder at cendant.com> " wrote:
> > This message is in MIME format. Since your mail reader does not
understand
> > this format, some or all of this message may not be legible.
> >
> > ------_=_NextPart_001_01BF538D.6DD711EE
> > Content-Type: text/plain;
> > charset="iso-8859-1"
> >
> > The fragmentation is a fact of life with a VPN and maximum sized
packets.
> > any tunneling type protocol has to add bytes to the packet during the
> > encapsulation. Also any data integrity scheme will have to add bytes to
the
> > message. This will cause packet fragmentation, but it isn't a bug.
> >
> > -Fred Golder
> >
> > -----Original Message-----
> > From: Jean Chouanard [mailto:chouanard at PARC.XEROX.COM]
> > Sent: Thursday, December 30, 1999 7:29 PM
> > To: VPN at SECURITYFOCUS.COM
> > Subject: Re: NFS in a VPN
> >
> >
> > It should be OK. One of the problem I found on buggy VPN implementation
was
> > some fragmentation issue with NFS v3.
> >
> > On 30 December 1999 at 8:48, someone using the login of "Ivan Fox
> > <ifox100 at HOTMAIL.COM> " wrote:
> > > Can we run NFS within a VPN?
> > >
> > > Any comments are appreciated.
> > >
> > > Thanks and regards,
> > >
> > > Ivan
> > >
> > > VPN is sponsored by SecurityFocus.COM
> >
> > VPN is sponsored by SecurityFocus.COM
> >
> > ------_=_NextPart_001_01BF538D.6DD711EE
> > Content-Type: text/html;
> > charset="iso-8859-1"
> > Content-Transfer-Encoding: quoted-printable
> >
> > <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
> > <HTML>
> > <HEAD>
> > <META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
> > charset=3Diso-8859-1">
> > <META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
> > 5.5.2448.0">
> > <TITLE>RE: NFS in a VPN</TITLE>
> > </HEAD>
> > <BODY>
> >
> > <P><FONT SIZE=3D2>The fragmentation is a fact of life with a VPN and =
> > maximum sized packets. any tunneling type protocol has to add =
> > bytes to the packet during the encapsulation. Also any data =
> > integrity scheme will have to add bytes to the message. This will
=
> > cause packet fragmentation, but it isn't a bug.</FONT></P>
> >
> > <P><FONT SIZE=3D2>-Fred Golder</FONT>
> > </P>
> >
> > <P><FONT SIZE=3D2>-----Original Message-----</FONT>
> > <BR><FONT SIZE=3D2>From: Jean Chouanard [<A =
> >
HREF=3D"mailto:chouanard at PARC.XEROX.COM">mailto:chouanard at PARC.XEROX.COM=
> > </A>]</FONT>
> > <BR><FONT SIZE=3D2>Sent: Thursday, December 30, 1999 7:29 PM</FONT>
> > <BR><FONT SIZE=3D2>To: VPN at SECURITYFOCUS.COM</FONT>
> > <BR><FONT SIZE=3D2>Subject: Re: NFS in a VPN</FONT>
> > </P>
> > <BR>
> >
> > <P><FONT SIZE=3D2>It should be OK. One of the problem I found on buggy =
> > VPN implementation was</FONT>
> > <BR><FONT SIZE=3D2>some fragmentation issue with NFS v3.</FONT>
> > </P>
> >
> > <P><FONT SIZE=3D2>On 30 December 1999 at 8:48, someone using the login =
> > of "Ivan Fox</FONT>
> > <BR><FONT SIZE=3D2><ifox100 at HOTMAIL.COM> " wrote:</FONT>
> > <BR><FONT SIZE=3D2>> Can we run NFS within a VPN?</FONT>
> > <BR><FONT SIZE=3D2>></FONT>
> > <BR><FONT SIZE=3D2>> Any comments are appreciated.</FONT>
> > <BR><FONT SIZE=3D2>></FONT>
> > <BR><FONT SIZE=3D2>> Thanks and regards,</FONT>
> > <BR><FONT SIZE=3D2>></FONT>
> > <BR><FONT SIZE=3D2>> Ivan</FONT>
> > <BR><FONT SIZE=3D2>></FONT>
> > <BR><FONT SIZE=3D2>> VPN is sponsored by SecurityFocus.COM</FONT>
> > </P>
> >
> > <P><FONT SIZE=3D2>VPN is sponsored by SecurityFocus.COM</FONT>
> > </P>
> >
> > </BODY>
> > </HTML>
> > ------_=_NextPart_001_01BF538D.6DD711EE--
>
> VPN is sponsored by SecurityFocus.COM
VPN is sponsored by SecurityFocus.COM
More information about the VPN
mailing list