fraud-bridge

Введение fraud-bridge помогает обходить строгие ограничения цензуры, блокирующие прямые TCP- или UDP-соединения, путем создания туннелей через ICMP, NTP или DNS поверх IPv4 или IPv6. Он автоматически изменяет опцию MSS TCP для получения не фрагментированного потока пакетов известного как...

EUVD-2026-71297

In the Linux kernel, the following vulnerability has been resolved: tcp: clamp route advmss to TCPMINMSS tcpselectinitialwindow assumes that callers never pass an MSS smaller than 1, but route-derived advmss values can violate that assumption. A too-small explicit RTAXADVMSS is one way to get...

SUSE CVE-2026-72502

In the Linux kernel, the following vulnerability has been resolved: tcp: ipv6: clamp default adverting MSS to avoid GSOBYFRAGS 0xFFFF When MTU is large, ip6defaultadvmss can return IPV6MAXPLEN 65535. This is interpreted by TCP as mssclamp, allowing the MSS to reach 65535. However, 0xFFFF is also...

SDWAN doesn't support "MSS Clamping" in PPPoE Internet Service (Before version 11.3.1), that causes some external web pages can't be loaded

When users access internet web servers through SDWAN Internet Service. Meanwhile, the Internet Service is a PPPoE Link.The internet access may fail when load some pages...