Correct MSS IPSEC rule insertion

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1694 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2004-10-15 19:05:34 +00:00
parent 2caf2acd88
commit 86b24f688e

View File

@ -1751,7 +1751,7 @@ setup_ipsec() {
eval local policy=\$${1}_policy
if [ "$policy" != NONE ]; then
ensurechain $1
run_iptables -A $1 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss $mss
run_iptables -I $1 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss $mss
fi
}