From: Michael Tremer <michael.tremer@ipfire.org>
Date: Thu, 1 Mar 2018 15:22:47 +0000 (+0000)
Subject: firewall: Disable PMTU by default
X-Git-Tag: 010~151
X-Git-Url: http://git.ipfire.org/?p=people%2Fms%2Fnetwork.git;a=commitdiff_plain;h=b3a66a5c00bc4e39ce0db34e2ac96c4911b4e31a

firewall: Disable PMTU by default

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/man/firewall-settings.xml b/man/firewall-settings.xml
index 60626368..7357f4cb 100644
--- a/man/firewall-settings.xml
+++ b/man/firewall-settings.xml
@@ -216,13 +216,12 @@
 
 			<varlistentry>
 				<term>
-					<varname>FIREWALL_PMTU_DISCOVERY</varname> = [<emphasis>true</emphasis>|false]
+					<varname>FIREWALL_PMTU_DISCOVERY</varname> = [true|<emphasis>false</emphasis>]
 				</term>
 
 				<listitem>
 					<para>
 						Enables Path MTU Discovery.
-						Disable it when you are experiencing problems.
 					</para>
 				</listitem>
 			</varlistentry>
diff --git a/src/functions/functions.constants-firewall b/src/functions/functions.constants-firewall
index d42189aa..4f7f5038 100644
--- a/src/functions/functions.constants-firewall
+++ b/src/functions/functions.constants-firewall
@@ -78,7 +78,7 @@ FIREWALL_USE_ECN="true"
 FIREWALL_CONFIG_PARAMS="${FIREWALL_CONFIG_PARAMS} FIREWALL_USE_ECN"
 
 # Path MTU discovery
-FIREWALL_PMTU_DISCOVERY="true"
+FIREWALL_PMTU_DISCOVERY="false"
 FIREWALL_CONFIG_PARAMS="${FIREWALL_CONFIG_PARAMS} FIREWALL_PMTU_DISCOVERY"
 
 # Default TTL