From 8fd44fc65830aa1279220d9114887f237f2e912b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=D0=90=D0=BD=D1=82=D0=BE=D0=BD?= Date: Sat, 7 Feb 2026 22:02:22 +0300 Subject: [PATCH] minor fix for mangle tables in entrypoint.sh --- APP_PROFILER/entrypoint.sh | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/APP_PROFILER/entrypoint.sh b/APP_PROFILER/entrypoint.sh index 80b2ec7..55500ae 100644 --- a/APP_PROFILER/entrypoint.sh +++ b/APP_PROFILER/entrypoint.sh @@ -11,10 +11,11 @@ fi # sysctl -w net.ipv4.ip_forward=1 || true # NAT MASQUERADE -iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE +iptables -t nat -A POSTROUTING -i tun* -o eth0 -j MASQUERADE # MSS Clamping (Path MTU Tuning) -iptables -I FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu +iptables -t mangle -A FORWARD -i tun* -o eth0-p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu +iptables -t mangle -A FORWARD -o tun* -i eth0-p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu # Ensure /run exists for PID files mkdir -p /run