diff options
| author | Christian Poessinger <christian@poessinger.com> | 2022-12-17 08:27:39 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-12-17 08:27:39 +0100 |
| commit | a5068f5a7292320f34c7fae42daca79b71aef6ed (patch) | |
| tree | 58d8eaba99e21db9df5a735b8376eb5049f816cf /interface-definitions | |
| parent | 89100cee64d41591b602d6f61980f21c278e6851 (diff) | |
| parent | 7709663c61f988cc60444fa932164f4931dfa7e3 (diff) | |
| download | vyos-1x-a5068f5a7292320f34c7fae42daca79b71aef6ed.tar.gz vyos-1x-a5068f5a7292320f34c7fae42daca79b71aef6ed.zip | |
Merge pull request #1557 from initramfs/equuleus-fix-tcp-mss
firewall: T4709: fix firewall MSS clamping issues
Diffstat (limited to 'interface-definitions')
| -rw-r--r-- | interface-definitions/firewall-options.xml.in | 24 |
1 files changed, 20 insertions, 4 deletions
diff --git a/interface-definitions/firewall-options.xml.in b/interface-definitions/firewall-options.xml.in index 8d9225a9a..1bcee2011 100644 --- a/interface-definitions/firewall-options.xml.in +++ b/interface-definitions/firewall-options.xml.in @@ -20,24 +20,40 @@ <leafNode name="adjust-mss"> <properties> <help>Adjust MSS for IPv4 transit packets</help> + <completionHelp> + <list>clamp-mss-to-pmtu</list> + </completionHelp> <valueHelp> - <format>500-1460</format> + <format>clamp-mss-to-pmtu</format> + <description>Automatically sets the MSS to the proper value</description> + </valueHelp> + <valueHelp> + <format>536-65535</format> <description>TCP Maximum segment size in bytes</description> </valueHelp> <constraint> - <validator name="numeric" argument="--range 500-1460"/> + <validator name="numeric" argument="--range 536-65535"/> + <regex>(clamp-mss-to-pmtu)</regex> </constraint> </properties> </leafNode> <leafNode name="adjust-mss6"> <properties> <help>Adjust MSS for IPv6 transit packets</help> + <completionHelp> + <list>clamp-mss-to-pmtu</list> + </completionHelp> + <valueHelp> + <format>clamp-mss-to-pmtu</format> + <description>Automatically sets the MSS to the proper value</description> + </valueHelp> <valueHelp> - <format>1280-1492</format> + <format>1220-65535</format> <description>TCP Maximum segment size in bytes</description> </valueHelp> <constraint> - <validator name="numeric" argument="--range 1280-1492"/> + <validator name="numeric" argument="--range 1220-65535"/> + <regex>(clamp-mss-to-pmtu)</regex> </constraint> </properties> </leafNode> |