From mboxrd@z Thu Jan 1 00:00:00 1970 From: Philip Craig Subject: Re: TCPMSS is not restricted to mangle table Date: Mon, 05 Dec 2005 11:33:03 +1000 Message-ID: <439398CF.2020802@snapgear.com> References: <4393895D.1020106@trash.net> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: Harald Welte , Netfilter Development Mailinglist Return-path: To: Patrick McHardy In-Reply-To: <4393895D.1020106@trash.net> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-devel-bounces@lists.netfilter.org Errors-To: netfilter-devel-bounces@lists.netfilter.org List-Id: netfilter-devel.vger.kernel.org On 12/05/2005 10:27 AM, Patrick McHardy wrote: > I just noticed the TCPMSS target is not restricted to the > mangle table. Any opinions about whether we should change > this, perhaps with a warning period? The historical reason for this is that originally the mangle table only had PREROUTING and OUTPUT hooks, and so you couldn't clamp forwarded packets in the mangle table (since it needs the outgoing interface). The majority of existing scripts and documentation still reference the filter table. So changing this will affect most of its users. So I think update the official documentation for consistency, but leave the code how it is.