firewall: Disable PMTU by default

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/man/firewall-settings.xml b/man/firewall-settings.xml
index 60626368c25df69bffed4aed366d594d21916d8d..7357f4cb481eecc90f57080ec6967dd96a81b770 100644 (file)
--- a/man/firewall-settings.xml
+++ b/man/firewall-settings.xml
@@ -216,13 +216,12 @@
 
                        <varlistentry>
                                <term>
-                                       <varname>FIREWALL_PMTU_DISCOVERY</varname> = [<emphasis>true</emphasis>|false]
+                                       <varname>FIREWALL_PMTU_DISCOVERY</varname> = [true|<emphasis>false</emphasis>]
                                </term>
 
                                <listitem>
                                        <para>
                                                Enables Path MTU Discovery.
-                                               Disable it when you are experiencing problems.
                                        </para>
                                </listitem>
                        </varlistentry>

diff --git a/src/functions/functions.constants-firewall b/src/functions/functions.constants-firewall
index d42189aae9179d8c186207744238844e5ce42363..4f7f5038a3c314d2dbf51653524d8aec7e37b78c 100644 (file)
--- a/src/functions/functions.constants-firewall
+++ b/src/functions/functions.constants-firewall
@@ -78,7 +78,7 @@ FIREWALL_USE_ECN="true"
 FIREWALL_CONFIG_PARAMS="${FIREWALL_CONFIG_PARAMS} FIREWALL_USE_ECN"
 
 # Path MTU discovery
-FIREWALL_PMTU_DISCOVERY="true"
+FIREWALL_PMTU_DISCOVERY="false"
 FIREWALL_CONFIG_PARAMS="${FIREWALL_CONFIG_PARAMS} FIREWALL_PMTU_DISCOVERY"
 
 # Default TTL