I have an Ubuntu 20 machine as an internet gateway with two WANs ens160 and ens192. I switch the default route on the gateway like ip r re 0/0 dev160(or ens192)
and the clients on the LAN access the web without any problem. But if I want to let a specific user through the specified WAN, such as
ip ru add from 192.168.3.60 lookup 100
ip r a 0/0 dev ens192 t 100
client 192.168.3.60
has an issue accessing some web resources like images, looks like a TCP MSS problem, but iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -o ens192 -j TCPMSS --clamp-mss-to-pmtu
can't fix it.
Can anyone offer some help?
0 Answers