This target will strip TCP options off a TCP packet. (It will actually replace them by NO-OPs.) As such, you will need to add the \fB\-p tcp\fP parameters. .TP \fB\-\-strip\-options\fP \fIoption\fP[\fB,\fP\fIoption\fP...] Strip the given option(s). The options may be specified by TCP option number or by symbolic name. The list of recognized options can be obtained by calling iptables with \fB\-j TCPOPTSTRIP \-h\fP.