-----Original Message-----
From: Mikael Abrahamsson [mailto:swmike@swm.pp.se]
Sent: Saturday, June 23, 2001 4:16 PM
To: 'nanog@merit.edu'
Subject: RE: DDOS anecdotes

On Sat, 23 Jun 2001, Tim Devries wrote:

> FYI beware of service pack 2.  It sets the DF bit so packets cannot
> fragment.  Particularily offensive if your server is on the other side of a
> tunnel (due to the overhead).  The solution is to reduce the MTU on the box.
> Or use a different OS :)

>I thought this was standard behaviour of Microsoft OSes since at least
>Win95. I know NT does this as standard, so does Win95 and 98. Win2k does
>this standard out of the box (at least last time I checked).

I have tested it with sp1 and this behaviour does not occur.
I have not tested it without any serverice packs so you may be correct in that regard.

Tim Devries
Technical Trainer
Q9 Networks
100% Uptime