Clear (DF) +iptables.

This is a discussion on Clear (DF) +iptables. within the Linux Networking forums, part of the Linux Forums category; hallo all, anybody know how clear (DF) - dont fragment by iptables from packets ? R, -- e.mail use: http://myemail.notlong....


Go Back   Usenet Forums > Linux Forums > Linux Networking

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 03-04-2004
328.28.00
 
Posts: n/a
Default Clear (DF) +iptables.

hallo all,
anybody know how clear (DF) - dont fragment by iptables
from packets ?

R,
--

e.mail use: http://myemail.notlong.com gg:328.28.00

Reply With Quote
  #2 (permalink)  
Old 03-05-2004
TroyC
 
Posts: n/a
Default Re: Clear (DF) +iptables.

328.28.00 wrote:

> hallo all,
> anybody know how clear (DF) - dont fragment by iptables
> from packets ?
>
> R,


The prob is that if you clear the DF bit, you have to ensure that each
packet has a unique IP-ID.

maybe a better bet would be to change the max seg size:::
iptables -I FORWARD -s SS.SS.SS.SS/NM -d DD.DD.DD.DD/NM -p tcp --tcp-flags
SYN,RST SYN -j TCPMSS --set-mss 1400

hth,
TroyC
--
---------
No bits were hurt during this transmission.


----== Posted via Newsfeed.Com - Unlimited-Uncensored-Secure Usenet News==----
http://www.newsfeed.com The #1 Newsgroup Service in the World! >100,000 Newsgroups
---= 19 East/West-Coast Specialized Servers - Total Privacy via Encryption =---
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




All times are GMT +1. The time now is 10:49 PM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0