This adds test file for the recently added TCPMSS extension. Signed-off-by: Aastha Gupta <aastha.gupta4104@xxxxxxxxx> --- extensions/libxt_TCPMSS.txlate | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 extensions/libxt_TCPMSS.txlate diff --git a/extensions/libxt_TCPMSS.txlate b/extensions/libxt_TCPMSS.txlate new file mode 100644 index 0000000..6a64d2c --- /dev/null +++ b/extensions/libxt_TCPMSS.txlate @@ -0,0 +1,5 @@ +iptables-translate -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu +nft add rule ip filter FORWARD tcp flags & (syn|rst) == syn counter tcp option maxseg size set rt mtu + +iptables-translate -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 90 +nft add rule ip filter FORWARD tcp flags & (syn|rst) == syn counter tcp option maxseg size set 90 -- 2.7.4 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
