brielle/SRFirewall
1
0
Fork 0
Code Issues Pull Requests Releases1 Wiki Activity

Fix 'all' option for mss clamp

Browse Source
This commit is contained in:
Brie Bruns 2015-04-09 15:37:55 -06:00
parent 52e74f4b3f
commit c01a1b62e3
1 changed files with 2 additions and 2 deletions

4
lib/iptables.inc

@ -176,7 +176,7 @@ function enable_mss_clamp {
[[ ${interface} = \#* ]] && continue [[ ${interface} = \#* ]] && continue
[[ ${interface} = "" ]] && continue [[ ${interface} = "" ]] && continue
#[[ -z ${mss} ]] && mss="-" #[[ -z ${mss} ]] && mss="-"
[[ ${mss} != "-" ]] && mss="--mss ${mss}" [[ ${mss} != "-" ]] && mss="-m tcpmss --mss ${mss}"
[[ ${mss} == "-" ]] && mss="" [[ ${mss} == "-" ]] && mss=""
[[ -z ${type} ]] && type="-" [[ -z ${type} ]] && type="-"
[[ ${type} == "-" ]] && type="${OutFilter}" [[ ${type} == "-" ]] && type="${OutFilter}"
@ -189,7 +189,7 @@ function enable_mss_clamp {
[[ ${interface} == "all" ]] && interface="" [[ ${interface} == "all" ]] && interface=""
${debug} ${DebugColor} "${FUNCNAME}:${DEFAULT_COLOR} Read: ${interface} ${mss} ${type} ${msssize}" ${debug} ${DebugColor} "${FUNCNAME}:${DEFAULT_COLOR} Read: ${interface} ${mss} ${type} ${msssize}"
${VER_IPTABLES} -A ${type} -p tcp --tcp-flags SYN,RST SYN -j TCPMSS \ ${VER_IPTABLES} -A ${type} -p tcp --tcp-flags SYN,RST SYN -j TCPMSS \
${interface} -m tcpmss ${mss} ${msssize} ${interface} ${mss} ${msssize}
unset interface mss type msssize unset interface mss type msssize
done < "${FWCONFIGDIR}/ipv${IPVER}/mss-clamp.conf" done < "${FWCONFIGDIR}/ipv${IPVER}/mss-clamp.conf"