profile issues

[NubleX]

leaking traffic when switching personalities

[NubleX]

The real culprit is the hardcoded --set-mss 1460. WireGuard has ~1420 MTU, so its inner MSS needs to be ~1380. Clamping to 1460 on VPN-bound traffic makes packets oversize and they get dropped.

The fix is --clamp-mss-to-pmtu, which clamps MSS to whatever the actual path supports — 1460 on physical wlan0, 1380 on wg0-mullvad. WireGuard behavior stays intact, and the persona still affects what Mullvad's server sees on the inner packet.