Jan Engelhardt wrote:
I am not exactly sure why 'minlen' only needed to be 40 bytes sizeof(iph)+tcphdr; does not the IP header must fit entirely into the MTU?
No, the sender is responsible for taking option sizes into account. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html