summaryrefslogtreecommitdiff
path: root/inventory/host_vars
diff options
context:
space:
mode:
authorChristian Pointner <equinox@spreadspace.org>2020-03-03 15:24:21 +0100
committerChristian Pointner <equinox@spreadspace.org>2020-03-03 15:24:21 +0100
commite43e909fdfb3035150b15ba830710d542ba459bb (patch)
tree4562c435e8f9f76aa4d767bfb6da75c353a26383 /inventory/host_vars
parentelevate router: added lte uplink (diff)
ele-router: clamp-mss-to-pmtu
Diffstat (limited to 'inventory/host_vars')
-rw-r--r--inventory/host_vars/ele-router.yml1
1 files changed, 1 insertions, 0 deletions
diff --git a/inventory/host_vars/ele-router.yml b/inventory/host_vars/ele-router.yml
index c58815de..a2afe07b 100644
--- a/inventory/host_vars/ele-router.yml
+++ b/inventory/host_vars/ele-router.yml
@@ -383,6 +383,7 @@ openwrt_mixin:
iptables -A INPUT -i "wg-emc" -p icmp -j ACCEPT
iptables -A INPUT -i "wg-emc" -p tcp --dport {{ ansible_port }} -j ACCEPT
iptables -A INPUT -i "wg-emc" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
+ iptables -A FORWARD -o "wg-emc" -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
# all internal zones
for zone in {{ network_internal_zone_names | join(' ') }}; do