From b2ad9cb594094262bc9bc1b9bd402de8c3cea024 Mon Sep 17 00:00:00 2001 From: bol-van Date: Tue, 4 Jan 2022 13:25:23 +0300 Subject: [PATCH] readme: cosmetics --- docs/readme.eng.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/readme.eng.md b/docs/readme.eng.md index 1af7c83..b294793 100644 --- a/docs/readme.eng.md +++ b/docs/readme.eng.md @@ -404,9 +404,9 @@ ipv4 : Linux allows to send ipv4 fragments but standard firewall rules in OUTPUT ipv6 : There's no way for an application to reliably send fragments without defragmentation in conntrack. Sometimes it works, sometimes system defragments packets. Looks like kernels <4.16 have no simple way to solve this problem. Unloading of nf_conntrack module -and its dependency nf_defrag_ipv6 helps but this severe impacts functionality. +and its dependency nf_defrag_ipv6 helps but this severely impacts functionality. Kernels 4.16+ exclude from defragmentation untracked packets. -See blockcheck.sh code for example. +See `blockcheck.sh` code for example. ## tpws