From: Phil Oester Date: Tue, 4 Jun 2013 05:09:27 +0000 (+0000) Subject: netfilter: xt_TCPMSS: Fix violation of RFC879 in absence of MSS option X-Git-Tag: v3.10-rc6~18^2~15^2~2 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=409b545ac10d9548929557a75ad86540f59a2c83;p=pandora-kernel.git netfilter: xt_TCPMSS: Fix violation of RFC879 in absence of MSS option The clamp-mss-to-pmtu option of the xt_TCPMSS target can cause issues connecting to websites if there was no MSS option present in the original SYN packet from the client. In these cases, it may add a MSS higher than the default specified in RFC879. Fix this by never setting a value > 536 if no MSS option was specified by the client. This closes netfilter's bugzilla #662. Signed-off-by: Phil Oester Signed-off-by: Pablo Neira Ayuso --- Reading git-diff-tree failed