Here's my patch to enable MSS clamping in ipnat regardless of any NAT rules; details about its usage are included in the attachment. I'd appreciate feedback from kernel hackers... - Manuel