On Fri, 25 Apr 2008, Jan Engelhardt wrote: > On Friday 2008-04-25 11:02, Jozsef Kadlecsik wrote: > > >On Fri, 25 Apr 2008, Leonid Zeitlin wrote: > > > >> It appears that short of writing a custom netfilter extension, there's no way > >> to turn off SACKs on a particular connection. Is this right? > > > >Yes, exactly. Actually, writing a new extension to erase any TCP option > >isn't that hard: just replace the option with noop and recalculate the > >checksum. > > There is already a TCPOPTSTRIP target. True, it was added to 2.6.25. I should have checked the facts before posting. Best regards, Jozsef - E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlec@xxxxxxxxxxxxxxx PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : KFKI Research Institute for Particle and Nuclear Physics H-1525 Budapest 114, POB. 49, Hungary -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
