« Отговор #17 -: Dec 16, 2016, 16:13 »
iptables -t mangle -A FORWARD -o ppp0 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
iptables -A FORWARD -t mangle -p tcp --tcp-flags SYN,RST SYN -m tcpmss --mss 1400:1536 -j TCPMSS --clamp-mss-to-pmtu
това което написаха и пробвах няма интернет по този начин
Last login: Fri Dec 16 16:47:57 2016 from **.**.***.59
user@****:~$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: enp1s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether e8:94:f6:08:b2:fc brd ff:ff:ff:ff:ff:ff
inet 192.168.0.1/32 scope global enp1s0
valid_lft forever preferred_lft forever
inet6 fe80::ea94:f6ff:fe08:b2fc/64 scope link
valid_lft forever preferred_lft forever
3: enp4s5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN group default qlen 1000
link/ether 00:10:a7:27:58:36 brd ff:ff:ff:ff:ff:ff
inet6 fe80::210:a7ff:fe27:5836/64 scope link
valid_lft forever preferred_lft forever
4: ppp0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1492 qdisc pfifo_fast state UNKNOWN group default qlen 3
link/ppp
inet **.209.***.** peer **.209.168.1/32 scope global ppp0
valid_lft forever preferred_lft forever
user@*****:~$ ip r
default dev ppp0 scope link
**.209.***.1 dev ppp0 proto kernel scope link src **.209.169.26
192.168.0.2 dev enp1s0 scope link
root@*****:/home/user# iptables -t nat -nvL
Chain PREROUTING (policy ACCEPT 79754 packets, 5984K bytes)
pkts bytes target prot opt in out source destination
Chain INPUT (policy ACCEPT 49938 packets, 2955K bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 5260 packets, 314K bytes)
pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 5260 packets, 314K bytes)
pkts bytes target prot opt in out source destination
21869 2113K MASQUERADE all -- * ppp0 192.168.0.0/24 0.0.0.0/0