From: Herve Eychenne <rv@wallfire.org>
To: Patrick McHardy <kaber@trash.net>
Cc: Harald Welte <laforge@netfilter.org>,
Netfilter Development Mailinglist
<netfilter-devel@lists.netfilter.org>
Subject: Re: TCPMSS is not restricted to mangle table
Date: Mon, 5 Dec 2005 01:45:48 +0100 [thread overview]
Message-ID: <20051205004548.GC5617@eychenne.org> (raw)
In-Reply-To: <4393895D.1020106@trash.net>
On Mon, Dec 05, 2005 at 01:27:09AM +0100, Patrick McHardy wrote:
> I just noticed the TCPMSS target is not restricted to the
> mangle table. Any opinions about whether we should change
> this, perhaps with a warning period?
See the manpage itself... I just copy-pasted the kernel config description
(probably written by Marc Boucher?) when adding TCPMSS to the manpage
some years ago.
So look for TCPMSS, notice the given example:
iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN \
-j TCPMSS --clamp-mss-to-pmtu
and realize that most uses of TCPMSS (which I fear are not that
rare) probably occur within the filter table.
You can expect a global change to be quite difficult, I guess... :-(
Herve
--
_
(°= Hervé Eychenne
//)
v_/_ WallFire project: http://www.wallfire.org/
next prev parent reply other threads:[~2005-12-05 0:45 UTC|newest]
Thread overview: 11+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-12-05 0:27 TCPMSS is not restricted to mangle table Patrick McHardy
2005-12-05 0:45 ` Herve Eychenne [this message]
2005-12-05 1:11 ` Patrick McHardy
2005-12-06 4:30 ` Aleksandar Milivojevic
2005-12-06 5:12 ` Patrick McHardy
2006-01-03 7:05 ` Jan Engelhardt
2006-01-03 11:14 ` Patrick McHardy
2006-01-03 11:38 ` Jan Engelhardt
2006-01-06 14:32 ` Harald Welte
2005-12-05 0:55 ` Tom Eastep
2005-12-05 1:33 ` Philip Craig
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20051205004548.GC5617@eychenne.org \
--to=rv@wallfire.org \
--cc=kaber@trash.net \
--cc=laforge@netfilter.org \
--cc=netfilter-devel@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.