diff options
Diffstat (limited to 'extensions/libxt_TCPMSS.txlate')
| -rw-r--r-- | extensions/libxt_TCPMSS.txlate | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/extensions/libxt_TCPMSS.txlate b/extensions/libxt_TCPMSS.txlate new file mode 100644 index 00000000..6a64d2ce --- /dev/null +++ b/extensions/libxt_TCPMSS.txlate @@ -0,0 +1,5 @@ +iptables-translate -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu +nft add rule ip filter FORWARD tcp flags & (syn|rst) == syn counter tcp option maxseg size set rt mtu + +iptables-translate -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 90 +nft add rule ip filter FORWARD tcp flags & (syn|rst) == syn counter tcp option maxseg size set 90 |