ipfw and ipv6 mask/masklen

2012-06-17 Thread Jason Fesler
being part of the variable). I don't want to block out Teredo entirely (or even a specific relay entirely), as that would be overboard for my needs. So, CIDR notation prefix/length matching won't work. -- Jason Fesler, email/jabber resume: http://jfesler.com "Give a man fir

MSS rewrite / MSS clamping?

2011-02-05 Thread Jason Fesler
I'm in search of MSS clamping for FreeBSD servers; in particular, for IPv6. I'm finding pretty much nothing (except iptables..) on the net. Am I chasing wild geese? -- Jason Fesler, email/jabber resume: http://jfesler.com "Give a man fire, and he'll be warm for a day

Re: MSS rewrite / MSS clamping?

2011-02-06 Thread Jason Fesler
Thanks everyone. I'll summarize the questions I saw, in one message here: Boris Kochergin wrote: pf.conf(5) mentions a "max-mss" option for traffic normalization. Bingo. That indeed solved what I was after, and had been overlooking. For the mailing list archives, my /etc/pf.conf : | scrub