A way to drop TCP RST packets on Merlin firmware?

[sanke1]

Is there a script which will drop or ignore TCP RST packets because most ISPs here block random websites arbitrarily without court orders. For example m.telegram.com or mega.nz. They are legit sites but they are blocked by ISP's transparent proxy which intercepts my queries, adds TCP RST packet and sends them back to me. I get Peer Reset Error. There are few softwares on Widnows which drop TCP RST packets and make all websites accessible, however, I am wondering if this is something that can be done on router level as well?

 

[ColinTaylor]

Something like this in a firewall-start script?

iptables -I FORWARD -i $(nvram get wan0_ifname) -p tcp -m tcp --tcp-flags RST RST -j DROP

I'd wonder whether this might cause problems for you in the long run. If you're dropping all RST packets including legitimate ones then I suppose it's possible that your router or PC might become incapable of creating new connections.

 

[sanke1]

True. Can this break any websites?

 

[ColinTaylor]

Can this break any websites?

I can't think why it would, but that's something you would need to check for yourself.