On Thu, 24 Apr 2008, Leonid Zeitlin wrote: > > or use IPV4OPTSTRIP for the SYN packets sent/received in this direction as > > a selective workaround for the problem. > > What is IPV4OPTSTRIP? How can I get it? It's not in standard iptables (not the > one that I have anyway), and I can't find it at the netfilter site either. It's a target extension which can be found in patch-o-matic-ng. But sorry, I mixed up: it strips off IPv4 options and not TCP options, so it'd not help. Best regards, Jozsef - E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlec@xxxxxxxxxxxxxxx PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : KFKI Research Institute for Particle and Nuclear Physics H-1525 Budapest 114, POB. 49, Hungary -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html