brielle/SRFirewall
1
0
Fork 0
Code Issues Pull Requests Releases 1 Wiki Activity

Fix 'all' option for mss clamp

Browse Source
This commit is contained in:
Brie Bruns 2015-04-09 15:37:55 -06:00
parent 52e74f4b3f
commit c01a1b62e3
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
lib/iptables.inc
View File

@ -176,7 +176,7 @@ function enable_mss_clamp {
[[ ${interface} = \#* ]] && continue
[[ ${interface} = "" ]] && continue
#[[ -z ${mss} ]] && mss="-"
[[ ${mss} != "-" ]] && mss="--mss ${mss}"
[[ ${mss} != "-" ]] && mss="-m tcpmss --mss ${mss}"
[[ ${mss} == "-" ]] && mss=""
[[ -z ${type} ]] && type="-"
[[ ${type} == "-" ]] && type="${OutFilter}"
@ -189,7 +189,7 @@ function enable_mss_clamp {
[[ ${interface} == "all" ]] && interface=""
${debug} ${DebugColor} "${FUNCNAME}:${DEFAULT_COLOR} Read: ${interface} ${mss} ${type} ${msssize}"
${VER_IPTABLES} -A ${type} -p tcp --tcp-flags SYN,RST SYN -j TCPMSS \
${interface} -m tcpmss ${mss} ${msssize}
${interface} ${mss} ${msssize}
unset interface mss type msssize
done < "${FWCONFIGDIR}/ipv${IPVER}/mss-clamp.conf"