mirror of
https://github.com/pfsense/pfsense.git
synced 2025-10-26 11:38:35 +00:00
MSS clamping on VPNs is necessary in both directions where it's needed. Rather than requiring setting on both ends, especially since the remote side can be some third party device where MSS clamping may not be available or not work, set in both directions here.
This commit is contained in:
parent
b7b3f34314
commit
e295e7ca44
@ -414,6 +414,7 @@ function filter_generate_scrubing() {
|
||||
$maxmss = $config['system']['maxmss'];
|
||||
|
||||
$scrubrules .= "scrub from any to <vpn_networks> max-mss {$maxmss}\n";
|
||||
$scrubrules .= "scrub from <vpn_networks> to any max-mss {$maxmss}\n";
|
||||
}
|
||||
/* disable scrub option */
|
||||
foreach ($FilterIflist as $scrubif => $scrubcfg) {
|
||||
|
||||
Loading…
Reference in New Issue
Block a user