diff options
author | nbd <nbd@3c298f89-4303-0410-b956-a3cf2f4a3e73> | 2009-01-02 21:58:58 +0000 |
---|---|---|
committer | nbd <nbd@3c298f89-4303-0410-b956-a3cf2f4a3e73> | 2009-01-02 21:58:58 +0000 |
commit | 8db97c0089bb54abe422c2b8b7739a670044a915 (patch) | |
tree | fffd2b84a6f3697a659115f745833d6add57dfe6 | |
parent | 6fa4f54cd4d09ae02ff41bb43fd63e4d0a74626c (diff) |
firewall: clear the MSSFIX rules
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@13826 3c298f89-4303-0410-b956-a3cf2f4a3e73
-rwxr-xr-x | package/firewall/files/uci_firewall.sh | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/package/firewall/files/uci_firewall.sh b/package/firewall/files/uci_firewall.sh index 93259fc96..579a8a6c3 100755 --- a/package/firewall/files/uci_firewall.sh +++ b/package/firewall/files/uci_firewall.sh @@ -77,6 +77,7 @@ addif() { delif() { logger "removing $1 from firewall zone $2" $IPTABLES -D input -i $1 -j zone_$2 + $IPTABLES -D zone_$2_MSSFIX -o $1 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu $IPTABLES -D zone_$2_ACCEPT -o $1 -j ACCEPT $IPTABLES -D zone_$2_DROP -o $1 -j DROP $IPTABLES -D zone_$2_REJECT -o $1 -j reject |