just some comments and to test the new signing machinery ...

2019-01-23 14:50:54 -08:00 · 2019-01-23 14:50:54 -08:00 · c3df5d6f12
parent a1d5439422
commit c3df5d6f12
1 changed files with 2 additions and 0 deletions
--- a/files/firewall
+++ b/files/firewall
@ -65,6 +65,8 @@ case $1 in
        iptables -A FORWARD -i ipmigw1 -m state --state ESTABLISHED,RELATED      -j ACCEPT
        iptables -A FORWARD -i ipmigw1 -j DROP

+       ## this may only be needed on edge in some cases. needs to be tweaked once we have a network again spaning multiple regions
+	#iptables -t mangle -A FORWARD -p tcp -m tcp -o usw1 --tcp-flags SYN,RST SYN -m tcpmss --mss 1437:10000 -j TCPMSS --set-mss 1436

       #special tables
        iptables -t mangle -F