Change Details

Ability to drop [[ https://wiki.nftables.org/wiki-nftables/index.php/Matching_packet_headers#Matching_TCP.2FUDP.2FUDPlite_traffic | packets ]] by TCP MSS ``` % nft add rule inet filter input tcp flags syn tcp option maxseg size 1-500 drop ```

Ability to drop [[ https://wiki.nftables.org/wiki-nftables/index.php/Matching_packet_headers#Matching_TCP.2FUDP.2FUDPlite_traffic | packets ]] by TCP MSS size ``` % nft add rule inet filter input tcp flags syn tcp option maxseg size 1-500 drop ```

Ability to drop [[ https://wiki.nftables.org/wiki-nftables/index.php/Matching_packet_headers#Matching_TCP.2FUDP.2FUDPlite_traffic | packets ]] by TCP MSS size ``` % nft add rule inet filter input tcp flags syn tcp option maxseg size 1-500 drop ```