From: angico <angico@yahoo.com>
To: netfilter@lists.netfilter.org
Subject: Re: strange behaviour
Date: Mon, 26 Feb 2007 08:21:33 -0800 (PST) [thread overview]
Message-ID: <768065.25159.qm@web36815.mail.mud.yahoo.com> (raw)
GREAT, GUYS! IT WORKED!!!!!! I THANK YOU VERY MUCH for the help!
angico.
----- Original Message ----
From: Cedric Blancher <blancher@cartel-securite.fr>
To: angico <angico@yahoo.com>
Cc: netfilter@lists.netfilter.org
Sent: Monday, February 26, 2007 1:07:55 PM
Subject: Re: strange behaviour
Le lundi 26 février 2007 à 07:35 -0800, angico a écrit :
> hi, buddys. thanks for your attention, but...
> nothing works, yet. and this option "--clamp-mss-to-pmtu" just send me an error: "iptables: Invalid argument".
> angico.
My mistake.
As Pascal stated, you have to specify a "-p tcp --tcp-flags SYN,RST SYN"
as well, as TCPMSS clamping only works on TCP packets with SYN flag set:
iptables -t mangle -A FORWARD -o ppp0 -p tcp \
--tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
It should work better.
--
http://sid.rstack.org/
PGP KeyID: 157E98EE FingerPrint: FA62226DA9E72FA8AECAA240008B480E157E98EE
>> Hi! I'm your friendly neighbourhood signature virus.
>> Copy me to your signature file and help me spread!
____________________________________________________________________________________
Have a burning question?
Go to www.Answers.yahoo.com and get answers from real people who know.
next reply other threads:[~2007-02-26 16:21 UTC|newest]
Thread overview: 14+ messages / expand[flat|nested] mbox.gz Atom feed top
2007-02-26 16:21 angico [this message]
2007-02-28 17:36 ` strange behaviour Martijn Lievaart
-- strict thread matches above, loose matches on Subject: below --
2007-02-26 15:35 angico
2007-02-26 16:07 ` Cedric Blancher
2007-02-26 12:45 angico
2007-02-26 13:03 ` Askar Ali
2007-02-26 13:23 ` Silvio Fonseca
2007-02-26 14:53 ` Pascal Hambourg
2007-02-26 15:09 ` Cedric Blancher
2007-02-26 15:34 ` Pascal Hambourg
2007-02-26 16:18 ` Cedric Blancher
2007-02-26 17:43 ` Pascal Hambourg
2007-02-27 8:55 ` Cedric Blancher
2002-12-10 4:48 Strange behaviour Arindam Haldar
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=768065.25159.qm@web36815.mail.mud.yahoo.com \
--to=angico@yahoo.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.