1 This matches the TCP MSS (maximum segment size) field of the TCP header. You can only use this on TCP SYN or SYN/ACK packets, since the MSS is only negotiated during the TCP handshake at connection startup time.
3 .BI "[!] "--mss " value[:value]"
4 Match a given TCP MSS value or range.
git://git.onelab.eu / iptables.git / blob