blob: d3f1b27d18f4a8a0b3949976eb820c3a32ef812b (
plain)
1
2
3
4
5
6
7
8
9
10
11
|
iptables-translate -A INPUT -m tcpmss --mss 42
nft add rule ip filter INPUT tcp option maxseg size 42 counter
iptables-translate -A INPUT -m tcpmss ! --mss 42
nft add rule ip filter INPUT tcp option maxseg size != 42 counter
iptables-translate -A INPUT -m tcpmss --mss 42:1024
nft add rule ip filter INPUT tcp option maxseg size 42-1024 counter
iptables-translate -A INPUT -m tcpmss ! --mss 1461:65535
nft add rule ip filter INPUT tcp option maxseg size != 1461-65535 counter
|
