Hi all. I am trying to modify & send out a packet larger than MTU, using nfq_set_verdict(...., new_payload, len). len = 200, unsigned char[2000] new_payload is stripped of any null bytes after TCP header, IP total len (network short) set to 5000. However, the receiving host keeps getting only 548 bytes, as logged by tcpdump. So, does NFQUEUE has nothing to do with IP fragmentation even when listening at mangle table's PREROUTING? Will be there any positive effect, if I change IP options to DF (dont fragment)? -- cheers, Igor -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html