* [PATCH] iptables: add test file for TCPMSS extension
@ 2017-10-16 21:02 Aastha Gupta
2017-10-17 11:56 ` Pablo Neira Ayuso
0 siblings, 1 reply; 3+ messages in thread
From: Aastha Gupta @ 2017-10-16 21:02 UTC (permalink / raw)
To: outreachy-kernel, Pablo Neira Ayuso, netfilter-devel; +Cc: Aastha Gupta
This adds test file for the recently added TCPMSS extension.
Signed-off-by: Aastha Gupta <aastha.gupta4104@gmail.com>
---
extensions/libxt_TCPMSS.txlate | 5 +++++
1 file changed, 5 insertions(+)
create mode 100644 extensions/libxt_TCPMSS.txlate
diff --git a/extensions/libxt_TCPMSS.txlate b/extensions/libxt_TCPMSS.txlate
new file mode 100644
index 0000000..6a64d2c
--- /dev/null
+++ b/extensions/libxt_TCPMSS.txlate
@@ -0,0 +1,5 @@
+iptables-translate -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
+nft add rule ip filter FORWARD tcp flags & (syn|rst) == syn counter tcp option maxseg size set rt mtu
+
+iptables-translate -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 90
+nft add rule ip filter FORWARD tcp flags & (syn|rst) == syn counter tcp option maxseg size set 90
--
2.7.4
^ permalink raw reply related [flat|nested] 3+ messages in thread
* Re: [PATCH] iptables: add test file for TCPMSS extension
2017-10-16 21:02 [PATCH] iptables: add test file for TCPMSS extension Aastha Gupta
@ 2017-10-17 11:56 ` Pablo Neira Ayuso
2017-10-17 12:00 ` Pablo Neira Ayuso
0 siblings, 1 reply; 3+ messages in thread
From: Pablo Neira Ayuso @ 2017-10-17 11:56 UTC (permalink / raw)
To: Aastha Gupta; +Cc: outreachy-kernel, netfilter-devel
On Tue, Oct 17, 2017 at 02:32:09AM +0530, Aastha Gupta wrote:
> This adds test file for the recently added TCPMSS extension.
I'm taking this last version, it doesn't say v4 but looking at timing,
it is the last one you have submitted.
Applied, thanks. If there is anything you need to fix, send me a
follow up patch.
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [PATCH] iptables: add test file for TCPMSS extension
2017-10-17 11:56 ` Pablo Neira Ayuso
@ 2017-10-17 12:00 ` Pablo Neira Ayuso
0 siblings, 0 replies; 3+ messages in thread
From: Pablo Neira Ayuso @ 2017-10-17 12:00 UTC (permalink / raw)
To: Aastha Gupta; +Cc: outreachy-kernel, netfilter-devel
On Tue, Oct 17, 2017 at 01:56:28PM +0200, Pablo Neira Ayuso wrote:
> On Tue, Oct 17, 2017 at 02:32:09AM +0530, Aastha Gupta wrote:
> > This adds test file for the recently added TCPMSS extension.
>
> I'm taking this last version, it doesn't say v4 but looking at timing,
> it is the last one you have submitted.
>
> Applied, thanks. If there is anything you need to fix, send me a
> follow up patch.
Oh, I understand, this is the test file. Other patches add the
translation.
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2017-10-17 12:00 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2017-10-16 21:02 [PATCH] iptables: add test file for TCPMSS extension Aastha Gupta
2017-10-17 11:56 ` Pablo Neira Ayuso
2017-10-17 12:00 ` Pablo Neira Ayuso
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).