mirror of
https://github.com/bol-van/zapret.git
synced 2024-11-30 05:50:53 +03:00
move udp to nft POSTNAT scheme
This commit is contained in:
parent
1030588943
commit
becd566b7f
@ -45,8 +45,6 @@ zapret_custom_firewall_nft()
|
|||||||
{
|
{
|
||||||
# stop logic is not required
|
# stop logic is not required
|
||||||
|
|
||||||
# do not use POSTNAT for udp first packet desync !
|
|
||||||
local POSTNAT=1
|
|
||||||
local f4 f6
|
local f4 f6
|
||||||
local first_packet_only="$nft_connbytes 1-$(first_packets_for_mode)"
|
local first_packet_only="$nft_connbytes 1-$(first_packets_for_mode)"
|
||||||
local desync="mark and $DESYNC_MARK == 0"
|
local desync="mark and $DESYNC_MARK == 0"
|
||||||
|
@ -47,8 +47,6 @@ zapret_custom_firewall_nft()
|
|||||||
{
|
{
|
||||||
# stop logic is not required
|
# stop logic is not required
|
||||||
|
|
||||||
# do not use POSTNAT for udp first packet desync !
|
|
||||||
local POSTNAT=1
|
|
||||||
local f4 f6
|
local f4 f6
|
||||||
local first_packet_only="$nft_connbytes 1-$(first_packets_for_mode)"
|
local first_packet_only="$nft_connbytes 1-$(first_packets_for_mode)"
|
||||||
local desync="mark and $DESYNC_MARK == 0"
|
local desync="mark and $DESYNC_MARK == 0"
|
||||||
|
Loading…
Reference in New Issue
Block a user