qi-hardware/openwrt-xburst
1
0
Fork 0
mirror of git://projects.qi-hardware.com/openwrt-xburst.git synced 2024-11-27 18:17:32 +02:00
Code

relates connections should be mss clamped too

Browse Source 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@1142 3c298f89-4303-0410-b956-a3cf2f4a3e73
This commit is contained in:
oleg 2005-06-05 06:20:09 +00:00
parent 933cf2babf
commit 8f1086e5c9
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
target/default/target_skeleton/etc/init.d/S45firewall
View File

@ -63,8 +63,8 @@ iptables -t nat -N postrouting_rule
# base case
iptables -P FORWARD DROP
iptables -A FORWARD -m state --state INVALID -j DROP
iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
# allow
iptables -A FORWARD -i br0 -o br0 -j ACCEPT