Odd issue with two SNATed Firewalls and Wireless router

Taylor, Grant gtaylor at riverviewtech.net
Wed Aug 24 17:40:58 CEST 2005


> most of the mail comes down .... it seems to break when transmissions
> are over +-600 KB)

Try using the TCPMSS target to limit the MSS (Maximum (TCP) Segment Size) value to be at least as small as your path MSS.

Hint:

iptables -t filter -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu



Grant. . . .



More information about the netfilter mailing list