Skip to content

Commit 20f91cb

Browse files
author
bol-van
committed
doc works
1 parent 4becc07 commit 20f91cb

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

docs/readme.en.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1379,6 +1379,10 @@ With other values or if the parameter is commented out, the rules will not be ap
13791379
This is useful if you have a firewall management system, in the settings of which you should tie the rules.
13801380
Not applicable to `OpenWRT` if used with `firewall3+iptables`.
13811381

1382+
`FILTER_TTL_EXPIRED_ICMP=1` blocks icmp time exceeded messages in response to connections handled by nfqws.
1383+
Linux closes socket if it receives this icmp in response to SYN packet. Similar mechanism exists for datagram sockets.
1384+
It's better to disable this if you do not expect problems caused by icmp.
1385+
13821386
The following settings are not relevant for openwrt :
13831387

13841388
If your system works as a router, then you need to enter the names of the internal and external interfaces:

0 commit comments

Comments
 (0)