Hello!
My question is how to overwrite MSS value in SYN packets?
I have read http://www.openbsd.org/faq/pf/ and found
scrub option.
My current rule is:
scrub all no-df max-mss 1400 random-id fragment reassemble
but it's not doing what I expect. It does packet fragmentation,
and I want actual mss rewriting for outgoing SYN packets.
Something like
iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1400
in linux.
Any ideas?
