--- ./net/ipv4/netfilter/ip_conntrack_standalone.c.orig Sat Oct 25 20:43:32 2003 +++ ./net/ipv4/netfilter/ip_conntrack_standalone.c Tue Oct 28 23:16:56 2003 @@ -198,6 +198,9 @@ if (ip_confirm(hooknum, pskb, in, out, okfn) != NF_ACCEPT) return NF_DROP; + if ((*pskb)->sk && (*pskb)->sk->sk_route_caps&NETIF_F_TSO) + return NF_ACCEPT; + /* Local packets are never produced too large for their interface. We degfragment them at LOCAL_OUT, however, so we have to refragment them here. */