From 0e9582814a201a29be42d096fe36723fa16078da Mon Sep 17 00:00:00 2001 From: Aastha Gupta Date: Tue, 17 Oct 2017 02:32:09 +0530 Subject: iptables-translate: add test file for TCPMSS extension This adds test file for the recently added TCPMSS extension. Signed-off-by: Aastha Gupta Signed-off-by: Pablo Neira Ayuso --- extensions/libxt_TCPMSS.txlate | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 extensions/libxt_TCPMSS.txlate (limited to 'extensions') diff --git a/extensions/libxt_TCPMSS.txlate b/extensions/libxt_TCPMSS.txlate new file mode 100644 index 00000000..6a64d2ce --- /dev/null +++ b/extensions/libxt_TCPMSS.txlate @@ -0,0 +1,5 @@ +iptables-translate -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu +nft add rule ip filter FORWARD tcp flags & (syn|rst) == syn counter tcp option maxseg size set rt mtu + +iptables-translate -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 90 +nft add rule ip filter FORWARD tcp flags & (syn|rst) == syn counter tcp option maxseg size set 90 -- cgit v1.2.3