brielle
/
Firewall-SOSDG
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Changing out PMTU clamping iptables rule, suspect it may be 

a problem.
master
bruns@2mbit.com 2009-08-14 23:57:10 +00:00
parent aac492d288
commit 10a4d89d3c
1 changed files with 10 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
rc.firewall
View File

@ -32,13 +32,17 @@ done
echo -ne "\n" echo -ne "\n"
if [ $CLAMPMSS ]; then if [ $CLAMPMSS ]; then
$IPTABLES -t mangle -o $CLAMPMSS -A FORWARD -p tcp \ echo "Clamping MSS to PMTU..."
--tcp-flags SYN,RST SYN -m tcpmss --mss 1400:1536 \ iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS \
-j TCPMSS --clamp-mss-to-pmtu --clamp-mss-to-pmtu
$IPTABLES -t mangle -o $CLAMPMSS -A OUTPUT -p tcp \ #$IPTABLES -t mangle -o $CLAMPMSS -A FORWARD -p tcp \
--tcp-flags SYN,RST SYN -m tcpmss --mss 1400:1536 \ # --tcp-flags SYN,RST SYN -m tcpmss --mss 1400:1536 \
-j TCPMSS --clamp-mss-to-pmtu # -j TCPMSS --clamp-mss-to-pmtu
#$IPTABLES -t mangle -o $CLAMPMSS -A OUTPUT -p tcp \
# --tcp-flags SYN,RST SYN -m tcpmss --mss 1400:1536 \
# -j TCPMSS --clamp-mss-to-pmtu
fi fi
echo -en "\n" echo -en "\n"