I was using mullvad WireGuard configured according to their manual, everything worked fine, but now, unfortunately, mullvad is blocked in my country and I had to raise my own wireguard server.
Actually, what’s the deal, I’m having a problem when using wireguard in proxyvm. Some sites don’t work, I get tls handshake connection and nothing else.
I tried to fix it, but the forward chain does not work:
iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
The solution at this point.
Any one of these three rules separately works:
iptables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
iptables -t mangle -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
iptables -t nat -I POSTROUTING -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
Which chain should I use in this situation? Perhaps there is another solution? What is the cause of this problem?