w *1W6%1ύέοτɺૹ৴࣌ʹόΠτ *1WϦϯΫͰ͚ٛΒΕ͍ͯΔ ࠷খͷ.56 ҎԼʹͳΔΑ͏ϑϥάϝϯτԽͯ͠ૹ৴ w ͭ·Γɺ6%1ʹؔͯ͠1.56%ରࡦෆཁͳ%/4࣮͕ଟ ͍ w #*/% 6OCPVOE /4%Ͱ্هಈ࡞֬ೝࡁΈɺ,OPU%/4 JTTVFʹύονఏग़ͯ͠આಘத 1.56%ͱ6%1ΞϓϦέʔγϣϯ૬ੑ͕ѱ ͍͜ͱ͕ΒΕ͍ͯΔͨΊʢ&$.1ؔͳ͘ʣ
--tcp-flags SYN SYN \ --dport 53 -m tcpmss —-mss 1220:65535 —j TCPMSS --set-mss 1220 iptables -A INPUT -p tcp --tcp-flags SYN SYN \ --dport 53 -m tcpmss —-mss 1220:65535 -j TCPMSS —-set-mss 1220 %/4αʔόʹUDQNTTΦϓγϣϯ͕ͳͯ͘ɺ JQUBCMFT1'Ͱಉ͜͡ͱ͕Ͱ͖Δ scrub in proto tcp from any to any port 53 flags S/S max-mss 1220
΄ͱΜͲͷ%/4αʔό࣮Ͱɺ6%1ʹؔͯ͠1.56%͕ى͜Βͳ͍Α͏ͳાஔΛͯ͠ ͍Δ͕ɺͦ͏Ͱͳ͍࣮͋Δɻ#*/% /4% 6OCPVOE0,ɻ w 1.56%GPS5$1 w 6OCPVOE/4%ͰUDQNTT PS Ͱղܾͩʂ w JQUBCMFT1'ͰɺUDQNTTͱ΄΅ಉ͜͡ͱ͕Ͱ͖Δ w UDQNTTͷ࣮ɺ6%1Ͱ1.56%͕ى͜Βͳ͍Α͏ʹTPDLFUΦϓγϣϯ Λదʹઃఆ͢ΔΑ͏ɺ%/4αʔόϝʔΧʹཁΛग़ͦ͏ʂɹϝʔΧ͞Μ ࣮͍ͯͩ͘͠͞ʢ࠙ئʣ
4FSWJDFVTJOH(/6;FCSB *4$#*/%BOE'SFF#4%z 64&/*9 w .#ZFSMZFUBM l$MPTF&ODPVOUFSTPGUIF*$.15ZQF,JOE /FBS .JTTFTXJUI*$.1W1BDLFU5PP#JH 15# z 3'$ w $JTDP4ZTUFNT l)PX%PFT-PBE#BMBODJOH8PSL z IUUQ XXXDJTDPDPNDFOVTTVQQPSUEPDTJQCPSEFSHBUFXBZQSPUPDPM CHQIUNM
w τϥϑΟοΫ͕*1WͷΈͷ߹ɺ͜ͷΛઃఆ͢ΕΑ͍ ͜ͱʹͳΔ w *1WͰɺ࠷খͷ.56όΠτɻͭ·Γ࠷খͷ5$1 .44 *1Wϔομ 5$1ϔομ όΠτ w *1WͷΈɺ·ͨ*1W*1WσϡΞϧελοΫͷ߹ɺWͱW ͷ.44ͷ͏ͪখ͍͞΄͏ɺͭ·ΓΛ࠾༻͢Δ͜ͱʹͳΔ ͕ɺ͜Εখ͗ͯ͢͞ޮ͕ѱ͗͢Δ
ߟ͑ΒΕΔ w গͳ͘ͱɺ&$.1ߏʹΑΔαʔόෛՙࢄΛߦ͍ͬͯͳ͍ঢ়گͷ σϑΥϧτઃఆͷ-JOVYαʔόͱ݁Ռಉ͡ͱͳΔ w ʹൺͯΘ͔ͣʹԆ͕૿͑ΔՄೳੑ͋Δ͕ɺͦͦ%/4 PWFS5$1ࣗମͷස͕খ͍͞ͷͰʹͳΔ͜ͱͳ͍ɺͣ w ͳ͓αʔόʙΫϥΠΞϯτؒͷ1.56͕ఆͰ͖ΔڥͳΒɺͦͷ ·ͰҾ্͖͛Δ͜ͱՄೳ