From 6441fa9a5f8fa303469822aa3e79b863de1ab9c5 Mon Sep 17 00:00:00 2001
From: Ermal <eri@pfsense.org>
Date: Tue, 3 Aug 2010 17:35:50 +0000
Subject: Resolves #787. Present an option to enable a scrub rule for <vpns>
 target to limit the mss to specified value.

---
 etc/inc/filter.inc | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'etc')

diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index a417d07..dbe2b4d 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -391,6 +391,14 @@ function filter_configure_sync() {
 function filter_generate_scrubing() {
 	global $config, $FilterIflist;
 	$scrubrules = "";
+
+	if (isset($config['system']['maxmss_enable'])) {
+		$maxmss = 1420;
+		if (!empty($config['system']['maxmss']))
+			$maxmss = $config['system']['maxmss'];
+
+		$scrubrules .= "scrub in from any to <vpns> max-mss {$maxmss}\n";
+	}
 	/* disable scrub option */
 	foreach ($FilterIflist as $scrubif => $scrubcfg) {
 		if(isset($scrubcfg['virtual']))
-- 
cgit v1.1