/ip firewall mangle add action=change-mss chain=forward new-mss=clamp-to-pmtu out-interface=wireguard protocol=tcp tcp-flags=syn