Fri Aug 13, 2004 4:34 am
Passthrough "passes" the packet to the next mangle rule.
Accept does't "passes" the packet to the next mangle rule if the packet is proceed by such a rule..
OK let me give you an example:
Lets have this set of rules:
/ip firewall mangle
add set-tos=8 action=passthrought
add tcp-mss=1400 protocol=tcp tcp-options=syn action=passthrought
then each packet will have TOS equal to 8 and each connection will have MSS equal to 1400
Let's make rules like this:
/ip firewall mangle
add set-tos=8 action=accept
add tcp-mss=1400 protocol=tcp tcp-options=syn action=passthrought
then each packet will have TOS equal to 8 , but each connection will have the MSS value wich client/server wanted
I mean this will not work: add tcp-mss=1400 protocol=tcp tcp-options=syn action=passthrought