In article <3BDF53EF.3080702@solidum.com>,
	Mike Pelley <mike@solidum.com> writes:
> Actually, I was thinking it belongs in ip_output.c, with a switch 
> (-proto3?) that could be set per route to cap the TCP MSS at the MTU for 
> that route (or interface if there is no MTU for the route) for sessions 
> initiated external to the NetBSD box.

This should work. But it must be turned off by default because it is
a violation to normal router behaviour.

	Kind regards

-- 
Matthias Scheler                                  http://scheler.de/~matthias/