3 ms·

What's that suggestion?

• LinuxBender 4y ago
  To save myself some typing, here [1] is an example I used a while back that could be applied to ssh, or https or all ports if one was so daring. Ensure time is taken to watch tcpdump of your own connections so that the MSS range is set to something that allows your traffic. Look for my comment in that thread. Most legit non-vpn traffic will have an MSS of 1460. Most bots in asia have an MSS of 1398. Most in Russia 1424. Some Cisco devices are 1454. Qualys TLS test uses 1380. A majority of bots use masscan to find open ports and masscan does not even bother to set an MSS at all so any range will block them. Be sure to run the tcpdump example in that thread for a while and open a second terminal to see your own SYN MSS size from both your workstation and from your phone if using a phone to SSH. [1] - https://news.ycombinator.com/item?id=33129508 https://news.ycombinator.com/item?id=33129508