move udp to nft POSTNAT scheme

This commit is contained in:
bol-van 2024-03-15 15:45:25 +03:00
parent 1030588943
commit becd566b7f
2 changed files with 0 additions and 4 deletions

View File

@ -45,8 +45,6 @@ zapret_custom_firewall_nft()
{ {
# stop logic is not required # stop logic is not required
# do not use POSTNAT for udp first packet desync !
local POSTNAT=1
local f4 f6 local f4 f6
local first_packet_only="$nft_connbytes 1-$(first_packets_for_mode)" local first_packet_only="$nft_connbytes 1-$(first_packets_for_mode)"
local desync="mark and $DESYNC_MARK == 0" local desync="mark and $DESYNC_MARK == 0"

View File

@ -47,8 +47,6 @@ zapret_custom_firewall_nft()
{ {
# stop logic is not required # stop logic is not required
# do not use POSTNAT for udp first packet desync !
local POSTNAT=1
local f4 f6 local f4 f6
local first_packet_only="$nft_connbytes 1-$(first_packets_for_mode)" local first_packet_only="$nft_connbytes 1-$(first_packets_for_mode)"
local desync="mark and $DESYNC_MARK == 0" local desync="mark and $DESYNC_MARK == 0"