mirror of
https://github.com/hak5/wifipineapple-openwrt.git
synced 2025-10-29 16:57:19 +00:00
relates connections should be mss clamped too
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@1142 3c298f89-4303-0410-b956-a3cf2f4a3e73
This commit is contained in:
parent
dcbaab0a6e
commit
c5bc7c1ccd
@ -63,8 +63,8 @@ iptables -t nat -N postrouting_rule
|
||||
# base case
|
||||
iptables -P FORWARD DROP
|
||||
iptables -A FORWARD -m state --state INVALID -j DROP
|
||||
iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
|
||||
iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
|
||||
iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
|
||||
|
||||
# allow
|
||||
iptables -A FORWARD -i br0 -o br0 -j ACCEPT
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user