ctucx.git: nixfiles

ctucx' nixfiles

commit 47979a9d53e4353da1ed97a29a73cf660606003b
parent 872dae8cbe5f914428d463b7d321ad8e7d13f815
Author: Katja (ctucx) <git@ctu.cx>
Date: Wed, 1 Jan 2025 14:27:25 +0100

machines/briefkasten/router: add mtu mss clamping

1 file changed, 2 insertions(+), 0 deletions(-)
M
machines/briefkasten/router/ruleset.nft
|
2
++
diff --git a/machines/briefkasten/router/ruleset.nft b/machines/briefkasten/router/ruleset.nft
@@ -42,6 +42,8 @@ table inet firewall {
         type filter hook forward priority 0;
         policy drop;
 
+        tcp flags syn tcp option maxseg size set rt mtu
+
         # Allow traffic from established and related packets.
         ct state established,related accept