[elrepo-devel] ip6t_TCPMSS is missing in kernel

[Akemi Yagi]

On Sun, Jul 17, 2011 at 9:55 AM, David Ranch <elrepo at trinnet.net> wrote:
>
> Hello Michael,
>
> You are running ip6tables v1.3.5 but MSS clamping wasn't added until
> 1.3.8.  Do a search for "mss" in the changelog and you'll find it:
>
>     http://ftp.netfilter.org/pub/iptables/changes-iptables-1.3.8.txt
>
> The current stable version of iptables and ip6tables is 1.4.11.
>
> --David

Ah, so Phil's guess was right.

RHEL/CentOS/SL-6 has iptables-1.4.7-3.el6. Also the el6 kernel has the
xt_TCPMSS(ip6t_TCPMSS) module. If upgrading to the el6 OS is the
option for you, Michel, that would be the easiest solution.

Akemi