From e295e7ca444fac62ba10127fa4e85875253ca399 Mon Sep 17 00:00:00 2001
From: Chris Buechler <cmb@pfsense.org>
Date: Sat, 22 Nov 2014 11:17:29 -0600
Subject: [PATCH] MSS clamping on VPNs is necessary in both directions where
 it's needed. Rather than requiring setting on both ends, especially since the
 remote side can be some third party device where MSS clamping may not be
 available or not work, set in both directions here.

---
 etc/inc/filter.inc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index 27425e441e..7fec630ad8 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -414,6 +414,7 @@ function filter_generate_scrubing() {
 			$maxmss = $config['system']['maxmss'];
 
 		$scrubrules .= "scrub from any to <vpn_networks> max-mss {$maxmss}\n";
+		$scrubrules .= "scrub from <vpn_networks> to any max-mss {$maxmss}\n";
 	}
 	/* disable scrub option */
 	foreach ($FilterIflist as $scrubif => $scrubcfg) {