Update of /cvsroot/routingtools/tools/rc.d
In directory sc8-pr-cvs1:/tmp/cvs-serv5407/rc.d
Modified Files:
firewall
Log Message:
- added mss clamping to forwarding rules to make big packets passing the
NAT router successfully
Index: firewall
===================================================================
RCS file: /cvsroot/routingtools/tools/rc.d/firewall,v
retrieving revision 1.24
retrieving revision 1.25
diff -C2 -d -r1.24 -r1.25
*** firewall 24 Aug 2003 12:38:43 -0000 1.24
--- firewall 23 Sep 2003 09:43:11 -0000 1.25
***************
*** 216,219 ****
--- 216,227 ----
echo -e "$rc_done"
+ # mss clamping
+
+ echo -n " mss clamping "
+
+ $IPTABLES -I FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
+
+ echo -e "$rc_done"
+
# set up kernel options
***************
*** 304,307 ****
--- 312,319 ----
#
# $Log$
+ # Revision 1.25 2003/09/23 09:43:11 hurikhan
+ # - added mss clamping to forwarding rules to make big packets passing the
+ # NAT router successfully
+ #
# Revision 1.24 2003/08/24 12:38:43 hurikhan
# - added IPSec to firewall rules
|