MSS clamping on VPNs is necessary in both directions where it's needed. Rather than requiring setting on both ends, especially since the remote side can be some third party device where MSS clamping may not be available or not work, set in both directions here.

This commit is contained in:
Chris Buechler 2014-11-22 11:17:29 -06:00
parent b7b3f34314
commit e295e7ca44

View File

@ -414,6 +414,7 @@ function filter_generate_scrubing() {
$maxmss = $config['system']['maxmss'];
$scrubrules .= "scrub from any to <vpn_networks> max-mss {$maxmss}\n";
$scrubrules .= "scrub from <vpn_networks> to any max-mss {$maxmss}\n";
}
/* disable scrub option */
foreach ($FilterIflist as $scrubif => $scrubcfg) {