vidhar: nftables...

1 files changed, 3 insertions, 9 deletions

diff --git a/hosts/vidhar/ruleset.nft b/hosts/vidhar/ruleset.nft
index b73db371..b601c2be 100644
--- a/hosts/vidhar/ruleset.nft
+++ b/hosts/vidhar/ruleset.nft
@@ -129,22 +129,16 @@ table ip nat {
 
 
     oifname dsl counter masquerade
-
-
-    counter
   }
 }
 
-table inet mangle {
+table ip mss_clamp {
   chain postrouting {
     type filter hook postrouting priority mangle
     policy accept
 
 
-    oifname dsl tcp flags & syn == syn counter tcp option maxseg size set rt mtu
-    iifname dsl tcp flags & syn == syn counter tcp option maxseg size set rt mtu
-
-
-    counter
+    oifname dsl tcp flags & (syn|rst) == syn counter tcp option maxseg size set rt mtu
+    iifname dsl tcp flags & (syn|rst) == syn counter tcp option maxseg size set rt mtu
   }
 }
\ No newline at end of file