VPN 简单易配置的主要有pptpd和openvpn,pptp vpn 配置文档
- 如果连上VPN后能访问国内网站,不能访问国外网站则加上如下规则
- 这条规则的目的就是改变TCP MSS以适应PMTU(Path MTU)
-A FORWARD -i ppp+ -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -j TCPMSS --clamp-mss-to-pmtu
重启iptables,OK,FQ成功
/etc/sysconfig/iptables
*nat
:PREROUTING ACCEPT [53:3388]
:POSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [6:788]
-A POSTROUTING -o eth0 -j MASQUERADE
COMMIT
*filter
:INPUT ACCEPT [970:142033]
:FORWARD ACCEPT [898:421900]
:OUTPUT ACCEPT [1010:434329]
-A FORWARD -i ppp+ -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -j TCPMSS --clamp-mss-to-pmtu
COMMIT