mirror of
https://github.com/bol-van/zapret.git
synced 2024-11-26 20:20:53 +03:00
nft always use PRENAT mode for quic
This commit is contained in:
parent
913c5de521
commit
76cbcf57eb
@ -645,6 +645,7 @@ zapret_apply_firewall_rules_nft()
|
|||||||
;;
|
;;
|
||||||
nfqws)
|
nfqws)
|
||||||
local POSTNAT_SAVE=$POSTNAT
|
local POSTNAT_SAVE=$POSTNAT
|
||||||
|
|
||||||
POSTNAT=1
|
POSTNAT=1
|
||||||
# quite complex but we need to minimize nfqws processes to save RAM
|
# quite complex but we need to minimize nfqws processes to save RAM
|
||||||
get_nfqws_qnums qn qns qn6 qns6
|
get_nfqws_qnums qn qns qn6 qns6
|
||||||
@ -690,8 +691,8 @@ zapret_apply_firewall_rules_nft()
|
|||||||
nft_fw_reverse_nfqws_rule6 "$f6" $qns6
|
nft_fw_reverse_nfqws_rule6 "$f6" $qns6
|
||||||
fi
|
fi
|
||||||
fi
|
fi
|
||||||
POSTNAT=$POSTNAT_SAVE
|
|
||||||
|
|
||||||
|
POSTNAT=0
|
||||||
get_nfqws_qnums_quic qn qn6
|
get_nfqws_qnums_quic qn qn6
|
||||||
if [ -n "$qn" ]; then
|
if [ -n "$qn" ]; then
|
||||||
f4=
|
f4=
|
||||||
@ -707,6 +708,8 @@ zapret_apply_firewall_rules_nft()
|
|||||||
nft_filter_apply_ipset_target6 f6
|
nft_filter_apply_ipset_target6 f6
|
||||||
nft_fw_nfqws_post6 "$f6 $desync" $qn6
|
nft_fw_nfqws_post6 "$f6 $desync" $qn6
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
POSTNAT=$POSTNAT_SAVE
|
||||||
;;
|
;;
|
||||||
custom)
|
custom)
|
||||||
existf zapret_custom_firewall_nft && zapret_custom_firewall_nft
|
existf zapret_custom_firewall_nft && zapret_custom_firewall_nft
|
||||||
|
Loading…
Reference in New Issue
Block a user