add tcp_mss support

Add support for the --tcp-mss flag in iptables