From becd566b7f753688ff8a990e0880e1594569843e Mon Sep 17 00:00:00 2001 From: bol-van Date: Fri, 15 Mar 2024 15:45:25 +0300 Subject: [PATCH] move udp to nft POSTNAT scheme --- init.d/openwrt/custom-tpws4http-nfqws4https | 2 -- init.d/sysv/custom-tpws4http-nfqws4https | 2 -- 2 files changed, 4 deletions(-) diff --git a/init.d/openwrt/custom-tpws4http-nfqws4https b/init.d/openwrt/custom-tpws4http-nfqws4https index adbcba3..5515d09 100644 --- a/init.d/openwrt/custom-tpws4http-nfqws4https +++ b/init.d/openwrt/custom-tpws4http-nfqws4https @@ -45,8 +45,6 @@ zapret_custom_firewall_nft() { # stop logic is not required - # do not use POSTNAT for udp first packet desync ! - local POSTNAT=1 local f4 f6 local first_packet_only="$nft_connbytes 1-$(first_packets_for_mode)" local desync="mark and $DESYNC_MARK == 0" diff --git a/init.d/sysv/custom-tpws4http-nfqws4https b/init.d/sysv/custom-tpws4http-nfqws4https index d291026..eb818ab 100644 --- a/init.d/sysv/custom-tpws4http-nfqws4https +++ b/init.d/sysv/custom-tpws4http-nfqws4https @@ -47,8 +47,6 @@ zapret_custom_firewall_nft() { # stop logic is not required - # do not use POSTNAT for udp first packet desync ! - local POSTNAT=1 local f4 f6 local first_packet_only="$nft_connbytes 1-$(first_packets_for_mode)" local desync="mark and $DESYNC_MARK == 0"