brielle
/
SRFirewall
1
0
Fork 0
Code Issues Pull Requests Releases 1 Wiki Activity

master
bbruns@gmail.com 2014-03-30 18:32:52 +00:00
parent f05113eb22
commit 56f460fede
3 changed files with 12 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
etc/ipv4/mss-clamp.conf
View File

@ -10,4 +10,4 @@
# Interface is required.
#
# interface mss size type
eth0 - -
eth0 - -

2
etc/ipv6/mss-clamp.conf
View File

@ -10,4 +10,4 @@
# Interface is required.
#
# interface mss size type
eth0 - -
eth0 - -

18
lib/iptables.inc
View File

@ -164,15 +164,17 @@ function enable_mss_clamp {
esac
${debug} ${DebugColor} "${FUNCNAME}: loading"
if [ -e "${FWCONFIGDIR}/ipv${IPVER}/mss-clamp.conf" ]; then
while read -r interface mss type; do
[[ ${interface} = \#* ]] && continue
[ ${mss} == "-" ] && mss="1400:1536"
[ ${type} == "-" ] && type="${OutFilter}"
[ ${type} == "out" ] && type="${OutFilter}"
[ ${type} == "fwd" ] && type="${FwdFilter}"
${VER_IPTABLES} -A ${type} -p tcp --tcp-flags SYN,RST SYN -j TCPMSS \
${debug} ${DebugColor} "${FUNCNAME}: read ${FWCONFIGDIR}/ipv${IPVER}/mss-clamp.conf successful"
while read -r interface mss type; do
[[ ${interface} = \#* ]] && continue
[[ ${mss} == "-" ]] && mss="1400:1536"
[[ ${type} == "-" ]] && type="${OutFilter}"
[[ ${type} == "out" ]] && type="${OutFilter}"
[[ ${type} == "fwd" ]] && type="${FwdFilter}"
${debug} ${DebugColor} "${FUNCNAME}: Read: ${interface} ${mss} ${type}"
${VER_IPTABLES} -A ${type} -p tcp --tcp-flags SYN,RST SYN -j TCPMSS \
--clamp-mss-to-pmtu -o $i -m tcpmss --mss ${mss}
done < "${FWCONFIGDIR}/ipv${IPVER}/mss-clamp.conf"
done < "${FWCONFIGDIR}/ipv${IPVER}/mss-clamp.conf"
${debug} ${DebugColor} "${FUNCNAME}: done"
else