ruleset: apply egress MSS fixup later to apply final MTU before wire
[project/firewall4.git] / root / usr / share / firewall4 / templates / zone-mssfix.uc
1 {%+ if (rule.family): -%}
2 meta nfproto {{ fw4.nfproto(rule.family) }} {%+ endif -%}
3 {%+ include("zone-match.uc", { egress, rule }) -%}
4 tcp flags syn tcp option maxseg size set rt mtu {%+ if (zone.log & 2): -%}
5 log prefix "MSSFIX {{ zone.name }} out: " {%+ endif -%}
6 comment "!fw4: Zone {{ zone.name }} {{
7 fw4.nfproto(rule.family, true)
8 }} {{ egress ? "egress" : "ingress" }} MTU fixing"