diff options
| author | Jo-Philipp Wich <jow@openwrt.org> | 2011-10-29 18:02:45 +0000 |
|---|---|---|
| committer | Jo-Philipp Wich <jow@openwrt.org> | 2011-10-29 18:02:45 +0000 |
| commit | 50a22f4f9e981c910c9559c1ee6fc0dab2b52c3d (patch) | |
| tree | 56fc2738798df78d8b8575ea5236a3f04b3d2d64 /package/firewall/files/lib/core_interface.sh | |
| parent | 0a84f6a74e3e4edabf28ac15199f9b7e8ba6de19 (diff) | |
| download | upstream-50a22f4f9e981c910c9559c1ee6fc0dab2b52c3d.tar.gz upstream-50a22f4f9e981c910c9559c1ee6fc0dab2b52c3d.tar.bz2 upstream-50a22f4f9e981c910c9559c1ee6fc0dab2b52c3d.zip | |
firewall: relocate TCPMSS rules into mangle table, add code to selectively clear them out again
SVN-Revision: 28669
Diffstat (limited to 'package/firewall/files/lib/core_interface.sh')
| -rw-r--r-- | package/firewall/files/lib/core_interface.sh | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/package/firewall/files/lib/core_interface.sh b/package/firewall/files/lib/core_interface.sh index 84e07e0e25..8023e7fb8d 100644 --- a/package/firewall/files/lib/core_interface.sh +++ b/package/firewall/files/lib/core_interface.sh @@ -96,7 +96,9 @@ fw_configure_interface() { fw $action $mode f ${chain}_REJECT reject $ { -o "$ifname" $onet } fw $action $mode f ${chain}_REJECT reject $ { -i "$ifname" $inet } - fw $action $mode f ${chain}_MSSFIX TCPMSS $ { -o "$ifname" -p tcp --tcp-flags SYN,RST SYN --clamp-mss-to-pmtu $onet } + [ "$(uci_get_state firewall core "${zone}_tcpmss")" == 1 ] && \ + fw $action $mode m ${chain}_MSSFIX TCPMSS $ \ + { -o "$ifname" -p tcp --tcp-flags SYN,RST SYN --clamp-mss-to-pmtu $onet } fw $action $mode f input ${chain} $ { -i "$ifname" $inet } fw $action $mode f forward ${chain}_forward $ { -i "$ifname" $inet } |