[nftables v0.9.2 | kernel 4.19.93] MSS clamping rule possible in the inet family table?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



WIKI [1] stipulates the rule in the ip family table, perhaps logical since it applies to IPv4 only, It is however possible to include the rule in the inet family table?

Having it implemented in

table inet filter {
 chain input               { oif pppoe-wan tcp flags syn tcp option maxseg size set 1400; }
}

does not throw an error but it does not work either.

Then tried instead (inet family)

{ oif pppoe-wan ip protocol tcp flags syn tcp option maxseg size set 1400; }
{ oif pppoe-wan ip protocol tcp flags syn ip protocol tcp option maxseg size set 1400; }

But either throwing

Error: syntax error, unexpected flags, expecting newline or semicolon.

What am I missing to get this to work in the inet family table?

____
[1] https://wiki.nftables.org/wiki-nftables/index.php/Mangle_TCP_options





[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux