summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authornbd <nbd@3c298f89-4303-0410-b956-a3cf2f4a3e73>2009-01-02 21:58:58 +0000
committernbd <nbd@3c298f89-4303-0410-b956-a3cf2f4a3e73>2009-01-02 21:58:58 +0000
commit8db97c0089bb54abe422c2b8b7739a670044a915 (patch)
treefffd2b84a6f3697a659115f745833d6add57dfe6
parent6fa4f54cd4d09ae02ff41bb43fd63e4d0a74626c (diff)
firewall: clear the MSSFIX rules
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@13826 3c298f89-4303-0410-b956-a3cf2f4a3e73
-rwxr-xr-xpackage/firewall/files/uci_firewall.sh1
1 files changed, 1 insertions, 0 deletions
diff --git a/package/firewall/files/uci_firewall.sh b/package/firewall/files/uci_firewall.sh
index 93259fc96..579a8a6c3 100755
--- a/package/firewall/files/uci_firewall.sh
+++ b/package/firewall/files/uci_firewall.sh
@@ -77,6 +77,7 @@ addif() {
delif() {
logger "removing $1 from firewall zone $2"
$IPTABLES -D input -i $1 -j zone_$2
+ $IPTABLES -D zone_$2_MSSFIX -o $1 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
$IPTABLES -D zone_$2_ACCEPT -o $1 -j ACCEPT
$IPTABLES -D zone_$2_DROP -o $1 -j DROP
$IPTABLES -D zone_$2_REJECT -o $1 -j reject