From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gbimobou@gmail.com>
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on
 sa.local.altlinux.org
X-Spam-Level: 
X-Spam-Status: No, score=-2.0 required=5.0 tests=BAYES_00,DKIM_SIGNED,
 DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM autolearn=ham autolearn_force=no
 version=3.4.1
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=from:to:subject:message-id:date:user-agent:mime-version
 :content-transfer-encoding;
 bh=3Z9NwBHQ9Oi1KitEKr0gkRRw8p+Yetb1ZBtmCzlueOc=;
 b=EqL2GCE0bJbdYNLax7DBz0QmVRRE2tnjR5oJeCp7BRZWTikhGyZdMfu2+oQMmUiP/W
 ethGxgOHatG7ocafUVzRTmy9MuTuEfzSZZr3EmeqA8cbfc7BuoVXfoB1+oxQdjN+khsF
 F8yXdzXtfSd+SwpLXBiNPRK2DDhOebRitwjJSQeTkdOD307DX/IvPnVGlbN8Mor7fqfh
 1B/umE5yEnhUYq/4XsYBqNH3DFfYH0mKTyW7xyV55C6V6Wcqqkgw0Psw9KZMv9Ig/qCW
 Sr95ln/qo/HLLGtIYHxUoONUTcsiXeQrU7ix9oSysy9sxjgNvn73yeQ/IkLMz/DTf8s7
 g94w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:from:to:subject:message-id:date:user-agent
 :mime-version:content-transfer-encoding;
 bh=3Z9NwBHQ9Oi1KitEKr0gkRRw8p+Yetb1ZBtmCzlueOc=;
 b=XNFuZ2SjL4mAChQcsQTMFE+MtGtBwFmqZSamFxWBJWWD1N5QRIEQu4dZuFJh+i8W3D
 lJ4nRnVdy4JspHUiR0B2CcMviyHe5ACR6udH+qKU4VlT7DUSYW7X6toWCW+cFiUFiNKL
 qYfMhgVCFoew3X3LL62ahKwfWA59O6vhhRkwgiEida1ifKs70iQWh4mQD3iUIOZhApPm
 6qgJywR01dnXcM6GY58pdCuQV5Cz1LMHaF+G+ejVyt6nQ+1tfEK0fdEjgNwGFo+A2rXJ
 vxx5S27Rv9Ao+tjw4jcvNg/HJ58sSG+rc+Yp8ZVSBRAO/xs0SShgh6O895zKboy2Xtg6
 yMTA==
X-Gm-Message-State: AKaTC01uk6jy2Dfuud8bypFSHTiViL1ghvA98C07MOmAflJgNcyAgi20g2AuNdsyGkot0g==
X-Received: by 10.194.248.233 with SMTP id yp9mr28538219wjc.228.1480519354229; 
 Wed, 30 Nov 2016 07:22:34 -0800 (PST)
From: "=?UTF-8?B?0JLQsNC00LjQvCDQmNC70LvQsNGA0LjQvtC90L7Qsg==?="
 <gbimobou@gmail.com>
X-Google-Original-From: =?UTF-8?B?0JLQsNC00LjQvCDQmNC70LvQsNGA0LjQvtC90L7Qsg==?=
 <gbIMoBou@gmail.com>
To: sysadmins@lists.altlinux.org
Message-ID: <0663db38-58b3-a453-245e-bf0c8f3a566f@gmail.com>
Date: Wed, 30 Nov 2016 23:22:30 +0800
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101
 Thunderbird/45.5.0
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
Subject: [Sysadmins] =?utf-8?b?INGA0YPRgtC10YAg0L3QsCBuZnRhYmxlcw==?=
X-BeenThere: sysadmins@lists.altlinux.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: ALT Linux sysadmins' discussion <sysadmins@lists.altlinux.org>
List-Id: ALT Linux sysadmins' discussion <sysadmins.lists.altlinux.org>
List-Unsubscribe: <https://lists.altlinux.org/mailman/options/sysadmins>,
 <mailto:sysadmins-request@lists.altlinux.org?subject=unsubscribe>
List-Archive: <http://lists.altlinux.org/pipermail/sysadmins>
List-Post: <mailto:sysadmins@lists.altlinux.org>
List-Help: <mailto:sysadmins-request@lists.altlinux.org?subject=help>
List-Subscribe: <https://lists.altlinux.org/mailman/listinfo/sysadmins>,
 <mailto:sysadmins-request@lists.altlinux.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Nov 2016 15:22:36 -0000
Archived-At: <http://lore.altlinux.org/sysadmins/0663db38-58b3-a453-245e-bf0c8f3a566f@gmail.com/>
List-Archive: <http://lore.altlinux.org/sysadmins/>

Пытаясь перепилить шлюз с иптаблиц на сабж, упёрся в пару неясностей в
таблице mangle:

1. Цепочка forward
TCPMSS     tcp  --  0.0.0.0/0            0.0.0.0/0            tcp
flags:0x06/0x02 TCPMSS clamp to PMTU

2. Цепочка postrouting
TTL        all  --  0.0.0.0/0            0.0.0.0/0            TTL match
TTL == 1 TTL set to 64

Может, кому-то уже удалось перевести это в правила nftables?

-- 
Мимо крокодил.
WBR, rednex CIO.
JID = <mailto:>
Skype = $local_part@<mailto:>
Viber = +7(964)103-65-67

Опции rsync -aHAX --delete мозг автоматом переводит как "удалить к чёртовой матери!"