iptables -t nat -A POSTROUTING -o eth0,wlan0 -j MASQUERADE
iptables -t mangle -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu



# /etc/hostapd/hostapd.conf
interface=uap0
driver=nl80211
ssid=ap.an.net
hw_mode=g
ieee80211n=1 
ht_capab=[HT40-][SHORT-GI-40] 
channel=6
# macaddr_acl=0
macaddr_acl=1
accept_mac_file=/etc/hostapd/hostapd.accept
wmm_enabled=1
auth_algs=1
ignore_broadcast_ssid=0
# ignore_broadcast_ssid=1 # hidden
wpa=2
wpa_psk_file=/etc/hostapd/hostapd.wpa_psk
# wpa_passphrase=15042011
wpa_key_mgmt=WPA-PSK
wpa_pairwise=TKIP
rsn_pairwise=CCMP

auto lo
iface lo inet loopback

iface eth0 inet manual

iface default inet manual

auto wlan0

allow-hotplug wlan0
iface wlan0 inet static
address 192.168.1.46/24
gateway 192.168.1.1
broadcast 192.168.1.255
name_server 192.168.1.1
    wpa-conf /etc/wpa_supplicant/wpa_supplicant.conf

auto uap0

iface uap0 inet static

address 192.168.55.1/24
broadcast 192.168.55.255

pre-up iptables-restore < /etc/network/iptables.rules

#pre-up  iw phy phy0 interface add "$IFACE" type __ap	|| true
#up      ifup "$IFACE"	|| true

pre-up  iw phy phy0 interface add uap0 type __ap	|| true
up      ifup uap0	|| true


# /etc/dnsmasq.conf
pid-file=/var/run/dnsmasq/dnsmasq.pid
log-facility=/var/log/dnsmasq.log
user=dnsmasq
group=dnsmasq
no-resolv
no-poll
stop-dns-rebind
clear-on-reload
bind-interfaces
domain-needed
bogus-priv
interface=uap0
no-dhcp-interface=lo,wlan0
listen-address=127.0.0.1, 192.168.0.1, 192.168.1.1, 192.168.4.1
dhcp-range=192.168.55.10,192.168.55.100,12h
dhcp-option=2,255.255.255.0
dhcp-option=3,192.168.55.1