On Wed, Jul 10, 2019 at 12:05:57PM +0200, Fernando Fernandez Mancera wrote: > Now synproxy sends the mss value set by the user on client syn-ack packet > instead of the mss value that client announced. Applied to nf.git, thanks Fernando. Could you also make a backport of this patch? Use kernel 5.1 as reference, you should take Ibrahim's patch and adapt it to place the mss_encode in the synproxy_options.