Differences

This shows you the differences between two versions of the page.

--- advanced-firewall [2026/07/23 17:39] – [Firewall] hogwild
+++ advanced-firewall [2026/07/23 17:43] (current) – Condense, clarity for Enable TCP Syn Packets hogwild
@@ Line 21: / Line 21: @@
  \\ **Enable TCP SYN cookies:  **uses "SYN cookies" to protect the router from SYN Flood attacks.
-This encodes information from the SYN packet into the (SYN/ACK) response-a standard method for preventing SYN floods. However, its limitations may cause issues with some old TCP/IP stacks. \\
+This uses a standard method for preventing SYN floods. It encodes information from the SYN packet into the (SYN/ACK) response. Its limitations may cause issues with some old TCP/IP stacks. \\
  \\
@@ Line 43: / Line 43: @@
 **TCP MSS Clamping:**
-TCP MSS Clamping adjusts the Maximum Segment Size of forwarded TCP connections on WAN and VPN interfaces to match the discovered path MTU.
+This adjusts the Maximum Segment Size of forwarded TCP connections on WAN and VPN interfaces to match the discovered path MTU.
-This helps avoid MTU-related connection problems, especially on PPPoE links, VPN tunnels, IPv6 tunnels, or networks where ICMP fragmentation-needed messages are blocked.
+This helps avoid MTU-related connection problems, especially on PPPoE links, VPN tunnels, IPv6 tunnels, or networks with blocked ICMP fragmentation-needed messages.
 Disabling this option reduces the number of firewall rules and may slightly improve performance on low-end routers, but can cause connection stalls or TLS handshake timeouts on links with reduced MTU.

FreshTomato Wiki

User Tools

Site Tools

Differences

Page Tools