As it turns out, the following iptables line will "jiggle the handle" on
the problem and will clamp mss to pmtu:
iptables -t mangle -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS
--clamp-mss-to-pmtu
I confirmed with tcpdump that the mss came down to the proper number.
On Tue, Apr 15, 2014 at 1:52 PM, Darren Ginter <[email protected]> wrote:
> Can you confirm my gre1 mss clamping spell?
>
> iptables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o gre1
> -j TCPMSS --set-mss 1374
>
------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and their
applications. Written by three acclaimed leaders in the field,
this first edition is now available. Download your free book today!
http://p.sf.net/sfu/NeoTech
_______________________________________________
opennhrp-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/opennhrp-devel
