projects / project / firewall4.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 7392792) | patch
ruleset: apply egress MSS fixup later to apply final MTU before wire
authorAndris PE <neandris@gmail.com>
Wed, 21 Jun 2023 10:06:24 +0000 (13:06 +0300)
committerJo-Philipp Wich <jo@mein.io>
Fri, 3 Nov 2023 13:33:55 +0000 (14:33 +0100)
commit698a53354fd280aae097efe08803c0c9a10c14c2
treee2f998cfbbc7759afaa276f793715816492e1ee7tree | snapshot
parent7392792e768b4d5c373f66ec400fd4100df1b4e0commit | diff
ruleset: apply egress MSS fixup later to apply final MTU before wire

Reduce scope of MSS fixup to TCP SYN packets only and relocate the fixing
of egress MSS to the mangle/postrouting chain in order to properly apply
final known MTU size.

Fixes: openwrt/openwrt#12112
Signed-off-by: Andris PE <neandris@gmail.com>
[fix S-o-b tag, fix commit author, reword commit message]
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
root/usr/share/firewall4/templates/ruleset.uc diff | blob | history
root/usr/share/firewall4/templates/zone-mssfix.uc diff | blob | history
tests/01_configuration/01_ruleset diff | blob | history
OpenWrt nftables firewall