brielle
/
SRFirewall
1
0
Fork 0
Code Issues Pull Requests Releases 1 Wiki Activity

master
bbruns@gmail.com 2014-03-30 18:32:52 +00:00
parent f05113eb22
commit 56f460fede
3 changed files with 12 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
lib/iptables.inc
View File

@ -164,12 +164,14 @@ function enable_mss_clamp {
esac esac
${debug} ${DebugColor} "${FUNCNAME}: loading" ${debug} ${DebugColor} "${FUNCNAME}: loading"
if [ -e "${FWCONFIGDIR}/ipv${IPVER}/mss-clamp.conf" ]; then if [ -e "${FWCONFIGDIR}/ipv${IPVER}/mss-clamp.conf" ]; then
${debug} ${DebugColor} "${FUNCNAME}: read ${FWCONFIGDIR}/ipv${IPVER}/mss-clamp.conf successful"
while read -r interface mss type; do while read -r interface mss type; do
[[ ${interface} = \#* ]] && continue [[ ${interface} = \#* ]] && continue
[ ${mss} == "-" ] && mss="1400:1536" [[ ${mss} == "-" ]] && mss="1400:1536"
[ ${type} == "-" ] && type="${OutFilter}" [[ ${type} == "-" ]] && type="${OutFilter}"
[ ${type} == "out" ] && type="${OutFilter}" [[ ${type} == "out" ]] && type="${OutFilter}"
[ ${type} == "fwd" ] && type="${FwdFilter}" [[ ${type} == "fwd" ]] && type="${FwdFilter}"
${debug} ${DebugColor} "${FUNCNAME}: Read: ${interface} ${mss} ${type}"
${VER_IPTABLES} -A ${type} -p tcp --tcp-flags SYN,RST SYN -j TCPMSS \ ${VER_IPTABLES} -A ${type} -p tcp --tcp-flags SYN,RST SYN -j TCPMSS \
--clamp-mss-to-pmtu -o $i -m tcpmss --mss ${mss} --clamp-mss-to-pmtu -o $i -m tcpmss --mss ${mss}
done < "${FWCONFIGDIR}/ipv${IPVER}/mss-clamp.conf" done < "${FWCONFIGDIR}/ipv${IPVER}/mss-clamp.conf"