Arno IPTables firewall: error 4294967295

gbowden · 05-31-2007, 03:48 AM

Using the latest version of Arno's iptables firewall I get this error:

Code:

Enabling setting the maximum packet size via MSS
iptables: Unknown error 4294967295
iptables: Unknown error 4294967295

I looked in the firewall script and the following lines are causing the error to appear:

Code:

iptables -A FORWARD -o eth0 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu

iptables -A OUTPUT -o eth0 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu

iptables v1.3.5, Slackware 11, Kernel Version 2.6.21.3.

Any help is appreciated,

Regards,

Greg

peter_robb · 05-31-2007, 07:55 AM

The TCPMSS target works in the mangle table.. and is only useful for outgoing packets, so specify an outgoing interface as well.

http://iptables-tutorial.frozentux.n...l#TCPMSSTARGET

gbowden · 05-31-2007, 08:31 AM

I recompiled my kernel with CONFIG_IP_NF_TARGET_NETMAP=m and loaded the ipt_NETMAP module and it's working again now, thanks.