summaryrefslogtreecommitdiffstats
path: root/extensions/libxt_tcpmss.txlate
blob: 82475e67029dbe3a69b9cc4480d89825fa3ea284 (plain)
1
2
3
4
5
6
7
8
9
10
11
iptables-translate -A INPUT -m tcpmss --mss 42
nft 'add rule ip filter INPUT tcp option maxseg size 42 counter'

iptables-translate -A INPUT -m tcpmss ! --mss 42
nft 'add rule ip filter INPUT tcp option maxseg size != 42 counter'

iptables-translate -A INPUT -m tcpmss --mss 42:1024
nft 'add rule ip filter INPUT tcp option maxseg size 42-1024 counter'

iptables-translate -A INPUT -m tcpmss ! --mss 1461:65535
nft 'add rule ip filter INPUT tcp option maxseg size != 1461-65535 counter'