diff options
Diffstat (limited to 'extensions/libxt_tcpmss.txlate')
| -rw-r--r-- | extensions/libxt_tcpmss.txlate | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/extensions/libxt_tcpmss.txlate b/extensions/libxt_tcpmss.txlate new file mode 100644 index 00000000..82475e67 --- /dev/null +++ b/extensions/libxt_tcpmss.txlate @@ -0,0 +1,11 @@ +iptables-translate -A INPUT -m tcpmss --mss 42 +nft 'add rule ip filter INPUT tcp option maxseg size 42 counter' + +iptables-translate -A INPUT -m tcpmss ! --mss 42 +nft 'add rule ip filter INPUT tcp option maxseg size != 42 counter' + +iptables-translate -A INPUT -m tcpmss --mss 42:1024 +nft 'add rule ip filter INPUT tcp option maxseg size 42-1024 counter' + +iptables-translate -A INPUT -m tcpmss ! --mss 1461:65535 +nft 'add rule ip filter INPUT tcp option maxseg size != 1461-65535 counter' |