Cedric Blancher a écrit :
iptables -t mangle -A FORWARD -o ppp0 -j TCPMSS --clamp-mss-to-pmtu
TCPMSS works only on TCP packets with the SYN flag set, so the options "-p tcp --tcp-flags SYN,RST SYN" are required. Also, wouldn't it be useful to do it in both directions to avoid fragmentation if host (b) does not use path MTU discovery ?
