Re: [Fwbuilder-discussion] Clamp MSS to MTU

[Alexander R. <ru...@tu...>]

Right click on your firewall object -> Edit -> Firewall Settings
check: CLAMP MSS to MTU


Hth, Alex!

On Tuesday 01 July 2008 11:02:22 Nicole Hähnel wrote:
> Hi,
>
> I have to add this rule in fwbuilder:
> iptables -t mangle -A POSTROUTING -p tcp -m tcp --tcp-flags SYN,RST SYN
> -j TCPMSS --clamp-mss-to-pmtu
>
> How can I add this?
>
> Activation Clamp MSS to MTU in firewall settings does not work for us.
>
> We are running strongswan vpn on our servers, and strongswan adds for
> each vpn tunnel
> a new rule with "iptables -I FORWARD 1", so every new rule pushes the
> ClampMSS rule down,
> but this rule has to be on top.
>
> Thanks!
> Nicole
>
> -------------------------------------------------------------------------
> Check out the new SourceForge.net Marketplace.
> It's the best place to buy or sell services for
> just about anything Open Source.
> http://sourceforge.net/services/buy/index.php
> _______________________________________________
> Fwbuilder-discussion mailing list
> Fwb...@li...
> https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion