From 76cbcf57ebad33518f7b7b1fe662ab8d6da9d40f Mon Sep 17 00:00:00 2001
From: bol-van <none@none.none>
Date: Sun, 3 Mar 2024 09:27:28 +0300
Subject: [PATCH] nft always use PRENAT mode for quic

---
 common/nft.sh | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/common/nft.sh b/common/nft.sh
index 4bff36a..20e1a3a 100644
--- a/common/nft.sh
+++ b/common/nft.sh
@@ -645,6 +645,7 @@ zapret_apply_firewall_rules_nft()
 			;;
 		nfqws)
 			local POSTNAT_SAVE=$POSTNAT
+
 			POSTNAT=1
 			# quite complex but we need to minimize nfqws processes to save RAM
 			get_nfqws_qnums qn qns qn6 qns6
@@ -690,8 +691,8 @@ zapret_apply_firewall_rules_nft()
 					nft_fw_reverse_nfqws_rule6 "$f6" $qns6
 				fi
 			fi
-			POSTNAT=$POSTNAT_SAVE
 
+			POSTNAT=0
 			get_nfqws_qnums_quic qn qn6
 			if [ -n "$qn" ]; then
 				f4=
@@ -707,6 +708,8 @@ zapret_apply_firewall_rules_nft()
 				nft_filter_apply_ipset_target6 f6
 				nft_fw_nfqws_post6 "$f6 $desync" $qn6
 			fi
+
+			POSTNAT=$POSTNAT_SAVE
 			;;
 		custom)
 	    		existf zapret_custom_firewall_nft && zapret_custom_firewall_nft