aboutsummaryrefslogtreecommitdiff
path: root/src/main.rs
diff options
context:
space:
mode:
Diffstat (limited to 'src/main.rs')
-rw-r--r--src/main.rs22
1 files changed, 18 insertions, 4 deletions
diff --git a/src/main.rs b/src/main.rs
index 096748c..6219d5e 100644
--- a/src/main.rs
+++ b/src/main.rs
@@ -136,19 +136,33 @@ fn filter() -> Result<()> {
let deny_any_to_isolated = Rule::new(&forward)?.oface("eth0.30")?.drop();
batch.add(&deny_any_to_isolated, MsgType::Add);
- let clamp_mss_inbound = Rule::new(&forward)?
+ let clamp_mss_inbound4 = Rule::new(&forward)?
.iface("rsppp0")?
.protocol(Protocol::TCP)
.syn()?
.clamp_mss_to_pmtu();
- batch.add(&clamp_mss_inbound, MsgType::Add);
+ batch.add(&clamp_mss_inbound4, MsgType::Add);
- let clamp_mss_outbound = Rule::new(&forward)?
+ let clamp_mss_inbound6 = Rule::new(&forward)?
+ .iface("he6in4")?
+ .protocol(Protocol::TCP)
+ .syn()?
+ .clamp_mss_to_pmtu();
+ batch.add(&clamp_mss_inbound6, MsgType::Add);
+
+ let clamp_mss_outbound4 = Rule::new(&forward)?
.oface("rsppp0")?
.protocol(Protocol::TCP)
.syn()?
.clamp_mss_to_pmtu();
- batch.add(&clamp_mss_outbound, MsgType::Add);
+ batch.add(&clamp_mss_outbound4, MsgType::Add);
+
+ let clamp_mss_outbound6 = Rule::new(&forward)?
+ .oface("he6in4")?
+ .protocol(Protocol::TCP)
+ .syn()?
+ .clamp_mss_to_pmtu();
+ batch.add(&clamp_mss_outbound6, MsgType::Add);
let allow_established = Rule::new(&forward)?.established()?.accept();
batch.add(&allow_established, MsgType::Add);