[email protected]:~# iptables -t nat -L
Chain PREROUTING (policy ACCEPT)
target prot opt source destination

Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

Chain POSTROUTING (policy ACCEPT)
target prot opt source destination

ipstable 是这样的，求怎么解决

看看 mangle 表有没有做 masquerade

iptables -t nat -A POSTROUTING -s {ocserv 的 subnet} -o {eth0 之类的外网 interface} -j MASQUERADE ; \