1*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -m tcpmss --mss 42 2*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT tcp option maxseg size 42 counter' 3*a71a9546SAutomerger Merge Worker 4*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -m tcpmss ! --mss 42 5*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT tcp option maxseg size != 42 counter' 6*a71a9546SAutomerger Merge Worker 7*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -m tcpmss --mss 42:1024 8*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT tcp option maxseg size 42-1024 counter' 9*a71a9546SAutomerger Merge Worker 10*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -m tcpmss ! --mss 1461:65535 11*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT tcp option maxseg size != 1461-65535 counter' 12