tcp-mss clamp to manual MTU. pmtu doesn't work in PREROUTING