From mboxrd@z Thu Jan 1 00:00:00 1970 From: =?ISO-8859-2?Q?M=E9sz=E1ros?= Gergely Subject: Re: Masquarede stalls? Date: Tue, 10 Aug 2004 22:22:41 +0200 Sender: netfilter-admin@lists.netfilter.org Message-ID: <20040810222241.031c79f7.monk@chello.hu> References: Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.netfilter.org Thank you ! It wooorks ! That clamp-mss magic worked for me, so I consider myself lucky. ^^ > iptables -I FORWARD -i $INTERNAL_IF -p tcp --syn -j TCPMSS --clamp-mss-to-pmtu Great! If it would be in the mangle table, i would dare to say i understand what it does, but this case ... how can it send a larger packet in a smaller one? magic :) I tried Anthony's mangle version also but something must be missing here to make it work: iptables -t mangle -A POSTROUTING -o EXTIF -j TCPMSS --clamp-mss-to-mtu iptables v1.2.9: Unknown arg `--clamp-mss-to-mtu' Mabbe modules? Or I misspelled it? However it works, so i'm happy. Thank you very much both of you, gurus ! :) If you come to Budapest, you are my guest for a beer ! 1 MonK