[Astlinux-commits] SF.net SVN: astlinux: [1291] trunk/package

[<kr...@us...>]

Revision: 1291
          http://astlinux.svn.sourceforge.net/astlinux/?rev=1291&view=rev
Author:   krisk84
Date:     2007-10-18 12:29:58 -0700 (Thu, 18 Oct 2007)

Log Message:
-----------
maybe its better to have mss clamping in mangle...

Modified Paths:
--------------
    trunk/package/iproute2/astshape
    trunk/package/iptables/astfw

Modified: trunk/package/iproute2/astshape
===================================================================
--- trunk/package/iproute2/astshape	2007-10-18 19:24:09 UTC (rev 1290)
+++ trunk/package/iproute2/astshape	2007-10-18 19:29:58 UTC (rev 1291)
@@ -93,8 +93,8 @@
 iptables -t mangle -X astshape 2> /dev/null > /dev/null
 
 # Get POSTROUTING,OUTPUT out of our way
-iptables -t mangle -F POSTROUTING 2> /dev/null > /dev/null
-iptables -t mangle -F OUTPUT 2> /dev/null > /dev/null
+#iptables -t mangle -F POSTROUTING 2> /dev/null > /dev/null
+#iptables -t mangle -F OUTPUT 2> /dev/null > /dev/null
 
 if [ "$1" = "stop" ]
 then 

Modified: trunk/package/iptables/astfw
===================================================================
--- trunk/package/iptables/astfw	2007-10-18 19:24:09 UTC (rev 1290)
+++ trunk/package/iptables/astfw	2007-10-18 19:29:58 UTC (rev 1291)
@@ -78,7 +78,9 @@
 #Do MSS clamping if we are configured for PPPoE
 if [ "$EXTIF" = "ppp0" ]
 then
-iptables -A FORWARD -o "$EXTIF" -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
+# Not sure which one...
+# iptables -A FORWARD -o "$EXTIF" -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
+iptables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o "$EXTIF" -j TCPMSS --clamp-mss-to-pmtu
 fi
 
 #DMZ Support


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.