drygdryg/zapret
1
0
Fork 0
mirror of https://github.com/bol-van/zapret.git synced 2025-04-19 05:22:58 +03:00
Code Issues Packages Projects Releases Wiki Activity

readme: hostlist filtering minor fixes

Browse Source
This commit is contained in:
bol-van 2020-02-03 13:56:57 +03:00
parent 7c418a11f8
commit c7360e98b7
2 changed files with 5 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
docs/readme.eng.txt
View File

@ -327,8 +327,7 @@ zapret-hosts-user-exclude.txt can contain domains, ipv4 and ipv6 addresses or su
Domain name filtering
---------------------
An alternative to ipset is to use tpws with a list of domains.
tpws can only read one hostlist.
An alternative to ipset is to use tpws or nfqws with a list of domains. Only one list is supported.
Enter the blocked domains to ipset/zapret-hosts-users.txt. Remove ipset/zapret-hosts.txt.gz.
Then the init script will run tpws with the zapret-hosts-users.txt list.
@ -336,11 +335,11 @@ Then the init script will run tpws with the zapret-hosts-users.txt list.
Other option ( Roskomnadzor list - get_hostlist.sh ) is russian specific.
You can write your own replacement for get_hostlist.sh.
When filtering by domain name, tpws should run without filtering by ipset.
All http traffic goes through tpws, and it decides whether to use manipulation depending on the Host: field in the http request.
When filtering by domain name, daemons should run without filtering by ipset.
All traffic goes through daemon, and it decides whether to use manipulation depending on the Host: field in the http request.
This creates an increased load on the system.
The domain search itself works very quickly, the load is connected with pumping the amount of data through the process.
When using large regulator lists estimate the amount of RAM on the router!
When using large regulator lists estimate the amount of RAM on the router !
Choosing parameters
-------------------

2
docs/readme.txt
View File

@ -516,7 +516,7 @@ ip2net
----------------------------
Альтернативой ipset является использование tpws или nfqws (только для атаки десинхронизации) со списком доменов.
tpws может читать только один hostlist.
Может быть только один hostlist.
Поддерживаются 2 варианта :
1) Внесите домены для дурения в ipset/zapret-hosts-users.txt. Удалите ipset/zapret-hosts.txt.gz.