drygdryg/zapret
1
0
Fork 0
mirror of https://github.com/bol-van/zapret.git synced 2024-11-26 20:20:53 +03:00
Code Issues Packages Projects Releases Wiki Activity

nft always use PRENAT mode for quic

Browse Source
This commit is contained in:
bol-van 2024-03-03 09:27:28 +03:00
parent 913c5de521
commit 76cbcf57eb
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
common/nft.sh
View File

@ -645,6 +645,7 @@ zapret_apply_firewall_rules_nft()
;;
nfqws)
local POSTNAT_SAVE=$POSTNAT
POSTNAT=1
# quite complex but we need to minimize nfqws processes to save RAM
get_nfqws_qnums qn qns qn6 qns6
@ -690,8 +691,8 @@ zapret_apply_firewall_rules_nft()
nft_fw_reverse_nfqws_rule6 "$f6" $qns6
fi
fi
POSTNAT=$POSTNAT_SAVE
POSTNAT=0
get_nfqws_qnums_quic qn qn6
if [ -n "$qn" ]; then
f4=
@ -707,6 +708,8 @@ zapret_apply_firewall_rules_nft()
nft_filter_apply_ipset_target6 f6
nft_fw_nfqws_post6 "$f6 $desync" $qn6
fi
POSTNAT=$POSTNAT_SAVE
;;
custom)
existf zapret_custom_firewall_nft && zapret_custom_firewall_nft