[elrepo-devel] ip6t_TCPMSS is missing in kernel

[Michel van Dop]

Hello!

Thanks for let me using your new kernel from your group. I
am using CentOs 5.6 the had very old kernel i a need new kernel for use
IPv6 firewall script. 

So i use now 2.6.39-2.el5.elrepo and IPv6 works
but only little thinks go wrong on IPv6.
I get this warning when i start
arno-iptables firewall 2.0.0b 

Enabling setting the maximum packet size
via MSS
/sbin/ip6tables -A FORWARD -o eth0 -p tcp --tcp-flags SYN,RST
SYN -j TCPMSS --clamp-mss-to-pmtu
ERROR (2): ip6tables v1.3.5: Unknown
arg `--clamp-mss-to-pmtu'
Try `ip6tables -h' or 'ip6tables --help' for
more information.
/sbin/ip6tables -A OUTPUT -o eth0 -p tcp --tcp-flags
SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
ERROR (2): ip6tables v1.3.5:
Unknown arg `--clamp-mss-to-pmtu'
Try `ip6tables -h' or 'ip6tables
--help' for more information.

I ask the maker of the firewall what the
problem he anwser:
ip6t_TCPMSS is missing (I assume you forgot to enable
it when you compiled your kernel). It's no biggy, that's for sure but in
case you would like to use SET_MSS for IPv6, one should build the
module...

Is this correct? What can i do?  
The firewall script is
here... http://rocky.eld.leidenuniv.nl/joomla/ [1] it works very good on
IPv4 for many years. But time change and we need to go IPv6 support.

Best regards, 
Michel van Dop 

Links:
------
[1]
http://rocky.eld.leidenuniv.nl/joomla/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.elrepo.org/pipermail/elrepo-devel/attachments/20110714/8c8b9e11/attachment.html>