From: Oleg I. Vdovikin Date: Sun, 5 Jun 2005 06:20:09 +0000 (+0000) Subject: relates connections should be mss clamped too X-Git-Url: http://207.154.207.93/?a=commitdiff_plain;h=c5bc7c1ccdad4862764e94dd780b386d52da69c9;p=15.05%2Fopenwrt.git relates connections should be mss clamped too git-svn-id: svn://svn.openwrt.org/openwrt/trunk@1142 3c298f89-4303-0410-b956-a3cf2f4a3e73 --- diff --git a/openwrt/target/default/target_skeleton/etc/init.d/S45firewall b/openwrt/target/default/target_skeleton/etc/init.d/S45firewall index 072f411a9f..8f9b9404e5 100755 --- a/openwrt/target/default/target_skeleton/etc/init.d/S45firewall +++ b/openwrt/target/default/target_skeleton/etc/init.d/S45firewall @@ -63,8 +63,8 @@ iptables -t nat -N postrouting_rule # base case iptables -P FORWARD DROP iptables -A FORWARD -m state --state INVALID -j DROP - iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu + iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT # allow iptables -A FORWARD -i br0 -o br0 -j ACCEPT