diff --git a/ChangeLog b/ChangeLog index 32feea0..4deb9b3 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,7 +1,8 @@ 0.7 - Brielle Bruns - - MSS Clamp on IPv6 as well + - MSS Clamp on IPv6 + - MSS Fixes, yes, its ugly - Beginning support for bogons filtering and updater - script. + script. Does not work yet, so don't use. 0.6 - Brielle Bruns - Fixed some potential ordering issues with NAT diff --git a/rc.firewall b/rc.firewall index 7f31561..aeeddb8 100755 --- a/rc.firewall +++ b/rc.firewall @@ -203,10 +203,10 @@ if [ $IPV6 ]; then for i in $CLAMPMSSIPV6; do $IP6TABLES -A FORWARD -p tcp --tcp-flags SYN,RST SYN \ -j TCPMSS --clamp-mss-to-pmtu -o $i -m tcpmss \ - --mss 1400:1536 + --mss 1280:1536 $IP6TABLES -A OUTPUT -p tcp --tcp-flags SYN,RST SYN \ -j TCPMSS --clamp-mss-to-pmtu -o $i -m tcpmss \ - --mss 1400:1536 + --mss 1280:1536 # This is necessary to make sure that PMTU works $IP6TABLES -A OUTPUT -p icmpv6 --icmpv6-type time-exceeded \ -o $i -j ACCEPT