drygdryg/zapret
1
0
Fork 0
mirror of https://github.com/bol-van/zapret.git synced 2024-11-30 05:50:53 +03:00
Code Issues Packages Projects Releases Wiki Activity

readme.eng: beautify

Browse Source
This commit is contained in:
bol-van 2022-02-06 12:39:23 +03:00
parent f05e39a527
commit 2d6f26a6c1
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
docs/readme.eng.md
View File

@ -424,7 +424,7 @@ ipv4 : Linux allows to send ipv4 fragments but standard firewall rules in OUTPUT
ipv6 : There's no way for an application to reliably send fragments without defragmentation by conntrack. ipv6 : There's no way for an application to reliably send fragments without defragmentation by conntrack.
Sometimes it works, sometimes system defragments packets. Sometimes it works, sometimes system defragments packets.
Looks like kernels <4.16 have no simple way to solve this problem. Unloading of nf_conntrack module Looks like kernels <4.16 have no simple way to solve this problem. Unloading of `nf_conntrack` module
and its dependency `nf_defrag_ipv6` helps but this severely impacts functionality. and its dependency `nf_defrag_ipv6` helps but this severely impacts functionality.
Kernels 4.16+ exclude from defragmentation untracked packets. Kernels 4.16+ exclude from defragmentation untracked packets.
See `blockcheck.sh` code for example. See `blockcheck.sh` code for example.