Re: pf scrub max-mss question (solved)

2008-02-04 Thread Richard Green (via iPrimus)
On Tuesday 05 February 2008 07:18:34 Stuart Henderson wrote: > On 2008/02/04 18:12, Richard Green wrote: > > When when two peers on opposite sides of this firewall attempt to > > connect, a TCP SYN packet passes in from peer-1 though one interface, > > with it's MSS field set to 1360, through a bi-

Re: pf scrub max-mss question

2008-02-04 Thread Stuart Henderson
On 2008/02/04 18:12, Richard Green wrote: > When when two peers on opposite sides of this firewall attempt to connect, a > TCP SYN packet passes in from peer-1 though one interface, with it's MSS > field set to 1360, through a bi-nat rule and the above scrub rule, and exits > another interface,

Re: pf scrub max-mss question

2008-02-04 Thread Daniel Melameth
On 2/4/08, Richard Green <[EMAIL PROTECTED]> wrote: > I have this rule: > > 'scrub in all max-mss 1400' > > When when two peers on opposite sides of this firewall attempt to connect, a > TCP SYN packet passes in from peer-1 though one interface, with it's MSS > field set to 1360, through a bi-nat r