From: Andy Furniss <andyqos@ukfsn.org>
To: Jan Engelhardt <jengelh@medozas.de>
Cc: John Lister <john.lister@kickstone.co.uk>,
Richard Thornton <richie.thornton@gmail.com>,
netfilter@vger.kernel.org
Subject: Re: Having trouble properly configuring my firewall
Date: Tue, 24 Apr 2012 14:13:31 +0100 [thread overview]
Message-ID: <4F96A6FB.5030309@ukfsn.org> (raw)
In-Reply-To: <alpine.LNX.2.01.1204241233040.8267@frira.zrqbmnf.qr>
Jan Engelhardt wrote:
> On Tuesday 2012-04-24 10:49, John Lister wrote:
>>> 8-A FORWARD -o ppp0 -p tcp -m tcp --tcp-flags SYN,RST SYN -m tcpmss
>>> --mss 1400:65495 -j TCPMSS --clamp-mss-to-pmtu
>
> One does not really need TCPMSS, for there is PMTUD.
Hmm, did someone mend the internet for pppoe users, or maybe I
misunderstand what you mean.
-m tcpmss --mss 1400:65495
looks redundant. I suppose you really need to assess your own situation
in any case (I had an ISP once that for a while caused 64k mtu on ppp).
next prev parent reply other threads:[~2012-04-24 13:13 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2012-04-24 8:09 Having trouble properly configuring my firewall Richard Thornton
2012-04-24 8:49 ` John Lister
2012-04-24 10:34 ` Jan Engelhardt
2012-04-24 13:13 ` Andy Furniss [this message]
2012-04-24 17:09 ` Humberto Jucá
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4F96A6FB.5030309@ukfsn.org \
--to=andyqos@ukfsn.org \
--cc=jengelh@medozas.de \
--cc=john.lister@kickstone.co.uk \
--cc=netfilter@vger.kernel.org \
--cc=richie.thornton@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.