Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752831Ab0AUM6W (ORCPT ); Thu, 21 Jan 2010 07:58:22 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1751973Ab0AUM6V (ORCPT ); Thu, 21 Jan 2010 07:58:21 -0500 Received: from borg.medozas.de ([188.40.89.202]:60988 "EHLO borg.medozas.de" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751924Ab0AUM6U (ORCPT ); Thu, 21 Jan 2010 07:58:20 -0500 Date: Thu, 21 Jan 2010 13:58:19 +0100 (CET) From: Jan Engelhardt To: Simon Arlott cc: Patrick McHardy , William Allen Simpson , netdev , Linux Kernel Mailing List , netfilter-devel@vger.kernel.org Subject: Re: [PATCH] xt_TCPMSS: SYN packets are allowed to contain data In-Reply-To: <0b01c450344abffd72a5b1b037ee6584e6db6b82@8b5064a13e22126c1b9329f0dc35b8915774b7c3.invalid> Message-ID: References: <4B54CDE5.3070100@simon.arlott.org.uk> <4B5578A5.50705@gmail.com> <4B55D372.4020807@gmail.com> <710ab0ca79305c82013982d43250b0a1fd45824d@8b5064a13e22126c1b9329f0dc35b8915774b7c3.invalid> <4B5773C2.2010000@simon.arlott.org.uk> <4B578E59.8090203@trash.net> <0b01c450344abffd72a5b1b037ee6584e6db6b82@8b5064a13e22126c1b9329f0dc35b8915774b7c3.invalid> User-Agent: Alpine 2.01 (LSU 1266 2009-07-14) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 702 Lines: 18 On Thursday 2010-01-21 13:47, Simon Arlott wrote: > >The TCPMSS target can be applied to more than just one direction >of traffic. I'm modifying incoming traffic too, so adding the MSS >option and setting it to over 536 is wrong (although the first ICMP >error will fix it). > >Existing users use this target precisely because their hosts are >sending an unwanted MSS value, so it will never need to be added. Ah, so they should be using TCPOPTSTRIP ;-) -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/