Hello everyone, I would like to know if it's possible to mangle a packet like this one with linux netfilter (linux kernel 5.14 or 5.15). My goal is to match the innermost ip header (23.200.208.68/10.18.102.237) and then change the mss of the tcp packet. Frame 48007: 1450 bytes on wire (11600 bits), 1450 bytes captured (11600 bits) Ethernet II, Src: LcfcHefe_32:48:cf, Dst: HewlettP_da:f5:07 Internet Protocol Version 4, Src: 10.18.46.63, Dst: 10.18.153.156 User Datagram Protocol, Src Port: 5247, Dst Port: 5248 Control And Provisioning of Wireless Access Points - Data IEEE 802.11 Data, Flags: ......F. Logical-Link Control Internet Protocol Version 4, Src: 23.200.208.68, Dst: 10.18.102.237 Transmission Control Protocol, Src Port: 443, Dst Port: 52500, Seq: 2753105, Ack: 1818, Len: 1316 Is there any way to do this? Thanks in advance Marco
