Reports of bad headers using TUN?

Matthew matthew at
Thu Jan 4 21:32:17 GMT 2007

Hi all,
  No go it seems. I ran this command on my director:

iptables -A OUTPUT -s <VIP> -p tcp
   -m tcp --tcp-flags SYN,RST,ACK SYN,ACK -j TCPMSS --set-mss 1440

And the POST test in the HOWTO still returns "bad request" in the browsers.

What next?


Joseph Mack NA3T wrote:
> On Wed, 3 Jan 2007, Matthew wrote:
>> Joe,
>>> properly. After you change the max packet size for packets from the 
>>> director to the Tun realserver, then the client will be sent a "needs 
>>> fragmenting" icmp packet.
>>     To clarify, does this mean I need to execute some command on the 
>> director? Or do I only apply the iptable rule on the real servers?
> director
> Joe

More information about the lvs-users mailing list