# nf_conntrack_tcp_no_window_check is 0 by default, set it to 1 net.netfilter.nf_conntrack_tcp_no_window_check=1