bugzilla-daemon at netfilter.org
2016-Mar-20 17:05 UTC
[Bug 1058] New: Add clamp MSS to MTU
https://bugzilla.netfilter.org/show_bug.cgi?id=1058
Bug ID: 1058
Summary: Add clamp MSS to MTU
Product: nftables
Version: unspecified
Hardware: All
OS: All
Status: NEW
Severity: enhancement
Priority: P5
Component: nft
Assignee: pablo at netfilter.org
Reporter: luminarior at gmail.com
Please, add analog for nft to the following command in iptables:
iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS
--clamp-mss-to-pmtu
It's useful to set on router for sites which don't support Path MTU
Discovery
mechanism correctly and in networks behind PPPoE etc.
--
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20160320/07de55d8/attachment.html>
https://bugzilla.netfilter.org/show_bug.cgi?id=1058
ddd <luminarior at gmail.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |luminarior at gmail.com
--
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20160320/1e3543cb/attachment.html>
https://bugzilla.netfilter.org/show_bug.cgi?id=1058
Simon Gomizelj <simon at vodik.xyz> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |simon at vodik.xyz
--
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20161212/53d9cefa/attachment.html>
https://bugzilla.netfilter.org/show_bug.cgi?id=1058
Oleksandr Natalenko <oleksandr at natalenko.name> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |oleksandr at natalenko.name
--
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20170520/dfdc6063/attachment.html>
https://bugzilla.netfilter.org/show_bug.cgi?id=1058
Nils S. <me at lochnair.net> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |me at lochnair.net
--
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20170802/19b27d5e/attachment.html>
https://bugzilla.netfilter.org/show_bug.cgi?id=1058
5bbcc2f9 at opayq.com changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |5bbcc2f9 at opayq.com
--
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20170806/2f58cd2a/attachment.html>
https://bugzilla.netfilter.org/show_bug.cgi?id=1058 --- Comment #1 from 5bbcc2f9 at opayq.com --- *** Bug 1165 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20170806/68233836/attachment.html>
https://bugzilla.netfilter.org/show_bug.cgi?id=1058
Florian Westphal <fw at strlen.de> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |fw at strlen.de
Assignee|pablo at netfilter.org |fw at strlen.de
Status|NEW |ASSIGNED
--- Comment #2 from Florian Westphal <fw at strlen.de> ---
kernel patches to add tcp option write support have been posted here:
https://patchwork.ozlabs.org/patch/799166/
Patches for userspace will follow once kernel changes have been accepted.
--
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20170808/618b9953/attachment.html>
https://bugzilla.netfilter.org/show_bug.cgi?id=1058
Florian Westphal <fw at strlen.de> changed:
What |Removed |Added
----------------------------------------------------------------------------
Resolution|--- |FIXED
Status|ASSIGNED |RESOLVED
--- Comment #3 from Florian Westphal <fw at strlen.de> ---
Added in Linux 4.14:
tcp flags syn tcp option maxseg size set 1400
tcp flags syn tcp option maxseg size set rt mtu
--
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20180226/1acd9c96/attachment.html>
Reasonably Related Threads
- [Bug 1165] New: Feature Request - Clamp MTU to MSS
- [Bug 1228] New: [REGRESSION] nft cannot load big set anymore
- 4.14: WARNING: CPU: 4 PID: 2895 at block/blk-mq.c:1144 with virtio-blk (also 4.12 stable)
- 4.14: WARNING: CPU: 4 PID: 2895 at block/blk-mq.c:1144 with virtio-blk (also 4.12 stable)
- 4.14: WARNING: CPU: 4 PID: 2895 at block/blk-mq.c:1144 with virtio-blk (also 4.12 stable)