From: <hur...@us...> - 2003-09-23 09:43:16
|
Update of /cvsroot/routingtools/tools/rc.d In directory sc8-pr-cvs1:/tmp/cvs-serv5407/rc.d Modified Files: firewall Log Message: - added mss clamping to forwarding rules to make big packets passing the NAT router successfully Index: firewall =================================================================== RCS file: /cvsroot/routingtools/tools/rc.d/firewall,v retrieving revision 1.24 retrieving revision 1.25 diff -C2 -d -r1.24 -r1.25 *** firewall 24 Aug 2003 12:38:43 -0000 1.24 --- firewall 23 Sep 2003 09:43:11 -0000 1.25 *************** *** 216,219 **** --- 216,227 ---- echo -e "$rc_done" + # mss clamping + + echo -n " mss clamping " + + $IPTABLES -I FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu + + echo -e "$rc_done" + # set up kernel options *************** *** 304,307 **** --- 312,319 ---- # # $Log$ + # Revision 1.25 2003/09/23 09:43:11 hurikhan + # - added mss clamping to forwarding rules to make big packets passing the + # NAT router successfully + # # Revision 1.24 2003/08/24 12:38:43 hurikhan # - added IPSec to firewall rules |