diff options
authorPatrick McHardy <>2005-12-05 01:22:50 +0000
committerPatrick McHardy <>2005-12-05 01:22:50 +0000
commitdbbcf273e98f9efff9e644cf98207a3eac6fc63a (patch)
parent72bd87e13b76818f5c690a9097080123ff698bc2 (diff)
Add note that TCPMSS is only valid in the mangle table (not true today, but maybe someday)
1 files changed, 4 insertions, 1 deletions
diff --git a/extensions/ b/extensions/
index da1bce2d..30668b02 100644
--- a/extensions/
+++ b/extensions/
@@ -3,6 +3,9 @@ the maximum size for that connection (usually limiting it to your
outgoing interface's MTU minus 40). Of course, it can only be used
in conjunction with
.BR "-p tcp" .
+It is only valid in the
+.BR mangle
This target is used to overcome criminally braindead ISPs or servers
which block ICMP Fragmentation Needed packets. The symptoms of this
@@ -25,7 +28,7 @@ ssh works fine, but scp hangs after initial handshaking.
Workaround: activate this option and add a rule to your firewall
configuration like:
- iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN \\
+ iptables -t mangle -A FORWARD -p tcp --tcp-flags SYN,RST SYN \\
-j TCPMSS --clamp-mss-to-pmtu