From: Felix Fietkau <nbd@openwrt.org>
Date: Fri, 2 Jan 2009 21:58:58 +0000 (+0000)
Subject: firewall: clear the MSSFIX rules
X-Git-Tag: reboot~24887
X-Git-Url: http://git.lede-project.org./?a=commitdiff_plain;h=c7ff578b9fd7e11ca05a5d5c9db2ea4dbb0f1e7b;p=openwrt%2Fstaging%2Fxback.git

firewall: clear the MSSFIX rules

SVN-Revision: 13826
---

diff --git a/package/firewall/files/uci_firewall.sh b/package/firewall/files/uci_firewall.sh
index 93259fc962..579a8a6c3a 100755
--- a/package/firewall/files/uci_firewall.sh
+++ b/package/firewall/files/uci_firewall.sh
@@ -77,6 +77,7 @@ addif() {
 delif() {
 	logger "removing $1 from firewall zone $2"
 	$IPTABLES -D input -i $1 -j zone_$2
+	$IPTABLES -D zone_$2_MSSFIX -o $1 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
 	$IPTABLES -D zone_$2_ACCEPT -o $1 -j ACCEPT
 	$IPTABLES -D zone_$2_DROP -o $1 -j DROP
 	$IPTABLES -D zone_$2_REJECT -o $1 -j reject