From 273d88a7744ea5638969ad3252acf518e5ec6cc2 Mon Sep 17 00:00:00 2001 From: Florian Westphal Date: Sun, 28 Nov 2021 18:25:53 +0100 Subject: extensions: tcpmss: add iptables-translate support Signed-off-by: Florian Westphal --- extensions/libxt_tcpmss.txlate | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 extensions/libxt_tcpmss.txlate (limited to 'extensions/libxt_tcpmss.txlate') diff --git a/extensions/libxt_tcpmss.txlate b/extensions/libxt_tcpmss.txlate new file mode 100644 index 00000000..d3f1b27d --- /dev/null +++ b/extensions/libxt_tcpmss.txlate @@ -0,0 +1,11 @@ +iptables-translate -A INPUT -m tcpmss --mss 42 +nft add rule ip filter INPUT tcp option maxseg size 42 counter + +iptables-translate -A INPUT -m tcpmss ! --mss 42 +nft add rule ip filter INPUT tcp option maxseg size != 42 counter + +iptables-translate -A INPUT -m tcpmss --mss 42:1024 +nft add rule ip filter INPUT tcp option maxseg size 42-1024 counter + +iptables-translate -A INPUT -m tcpmss ! --mss 1461:65535 +nft add rule ip filter INPUT tcp option maxseg size != 1461-65535 counter -- cgit v1.2.3