panic: tcp_addoptions: TCP options too long w/ with TCP_SIGNATURE support

[Bruce M. Simpson]

Dontcha just hate broken vendor NAT?

Yes, it seems reasonable that SACK is the sacrificial victim. 
Considering folk normally configure TCP-MD5 between routers which are 
usually directly connected on the same switch, doing away with SACK 
should be fine.

Funny, I was staring at that define moments ago whilst debugging a 
totally unrelated piece of code in a different language.

Good stuff.