Re: [PATCH] iptables: iptables-compat translation for TCPMSS

[Pablo Neira Ayuso <pablo@netfilter.org>]

On Sun, Oct 15, 2017 at 05:01:47PM +0530, Aastha Gupta wrote:
> Since path mtu support was added, we can now add
> iptables-compat translation for TCPMSS extension.
> 
> Signed-off-by: Aastha Gupta <aastha.gupta4104@gmail.com>
> ---
>  extensions/libxt_TCPMSS.c | 12 ++++++++++++
>  1 file changed, 12 insertions(+)
> 
> diff --git a/extensions/libxt_TCPMSS.c b/extensions/libxt_TCPMSS.c
> index 4b71e44..7f65298 100644
> --- a/extensions/libxt_TCPMSS.c
> +++ b/extensions/libxt_TCPMSS.c
> @@ -91,6 +91,17 @@ static void TCPMSS_save(const void *ip, const struct xt_entry_target *target)
>  		printf(" --set-mss %u", mssinfo->mss);
>  }
>  
> +static int TCPMSS_xlate(struct xt_xlate *xl,
> +						 const struct xt_xlate_tg_params *params)
> +{
> +	const struct xt_tcpmss_info *mssinfo =
> +		(const struct xt_tcpmss_info *)params->target->data;
> +	if(mssinfo->mss == XT_TCPMSS_CLAMP_PMTU)
> +		xt_xlate_add(xl, "tcp option maxseg size set rt mtu");

Could you also translate other options in man iptables-extensions,
under the TCPMSS target extension?

BTW, please Cc netfilter-devel@vger.kernel.org in your netfilter patches.

Thanks!