brielle
/
Firewall-SOSDG
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Changing out PMTU clamping iptables rule, suspect it may be 

a problem.
master
bruns@2mbit.com 2009-08-14 23:57:10 +00:00
parent aac492d288
commit 10a4d89d3c
1 changed files with 10 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
rc.firewall
View File

@ -32,13 +32,17 @@ done
echo -ne "\n"
if [ $CLAMPMSS ]; then
$IPTABLES -t mangle -o $CLAMPMSS -A FORWARD -p tcp \
--tcp-flags SYN,RST SYN -m tcpmss --mss 1400:1536 \
-j TCPMSS --clamp-mss-to-pmtu
echo "Clamping MSS to PMTU..."
iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS \
--clamp-mss-to-pmtu
$IPTABLES -t mangle -o $CLAMPMSS -A OUTPUT -p tcp \
--tcp-flags SYN,RST SYN -m tcpmss --mss 1400:1536 \
-j TCPMSS --clamp-mss-to-pmtu
#$IPTABLES -t mangle -o $CLAMPMSS -A FORWARD -p tcp \
# --tcp-flags SYN,RST SYN -m tcpmss --mss 1400:1536 \
# -j TCPMSS --clamp-mss-to-pmtu
#$IPTABLES -t mangle -o $CLAMPMSS -A OUTPUT -p tcp \
# --tcp-flags SYN,RST SYN -m tcpmss --mss 1400:1536 \
# -j TCPMSS --clamp-mss-to-pmtu
fi
echo -en "\n"