From mboxrd@z Thu Jan 1 00:00:00 1970 From: "David S. Miller" Subject: Re: possible problem with TSO and ip_queue Date: Wed, 10 May 2006 13:30:47 -0700 (PDT) Message-ID: <20060510.133047.118385773.davem@davemloft.net> References: <20060510.130919.37497120.davem@davemloft.net> Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Cc: ccaputo@alt.net, netdev@vger.kernel.org, netfilter-devel@lists.netfilter.org Return-path: Received: from dsl027-180-168.sfo1.dsl.speakeasy.net ([216.27.180.168]:12165 "EHLO sunset.davemloft.net") by vger.kernel.org with ESMTP id S932493AbWEJUbz (ORCPT ); Wed, 10 May 2006 16:31:55 -0400 To: paul@clubi.ie In-Reply-To: Sender: netdev-owner@vger.kernel.org List-Id: netdev.vger.kernel.org From: Paul Jakma Date: Wed, 10 May 2006 21:17:33 +0100 (IST) > On Wed, 10 May 2006, David S. Miller wrote: > > > When you have a rule installed that will add MD5, just mark the > > route as not being TSO capable. > > Ah, didn't realise this could be done with netfilter. What's the > magic incantation? :) Unfortunately, you can't disable this per-route like I thought was possible, you can only disable it per-device or per-socket.