From cac587b2718e55d207f5c7fc326e8a4260e53ada Mon Sep 17 00:00:00 2001
From: bol-van <none@none.none>
Date: Fri, 22 Mar 2024 18:26:00 +0300
Subject: [PATCH] install_easy: keenetic warning

---
 common/base.sh      |  2 ++
 common/installer.sh |  1 +
 install_easy.sh     | 10 ++++++++++
 3 files changed, 13 insertions(+)

diff --git a/common/base.sh b/common/base.sh
index 75cb3cb..b6c82c4 100644
--- a/common/base.sh
+++ b/common/base.sh
@@ -146,6 +146,8 @@ linux_get_subsys()
 	INIT=$(basename "$INIT")
 	if [ -f "/etc/openwrt_release" ] && [ "$INIT" = "procd" ] ; then
 		SUBSYS=openwrt
+	elif [ -x "/bin/ndm" ] ; then
+		SUBSYS=keenetic
 	else
 		# generic linux
 		SUBSYS=
diff --git a/common/installer.sh b/common/installer.sh
index 893109e..1077ac5 100644
--- a/common/installer.sh
+++ b/common/installer.sh
@@ -125,6 +125,7 @@ check_system()
 		echo easy installer only supports Linux and MacOS. check readme.txt for supported systems and manual setup info.
 		exitp 5
 	fi
+	linux_get_subsys
 	echo system is based on $SYSTEM
 	[ -n "$info" ] && echo $info
 }
diff --git a/install_easy.sh b/install_easy.sh
index ee691f6..469acef 100755
--- a/install_easy.sh
+++ b/install_easy.sh
@@ -163,6 +163,16 @@ select_mode_https()
 }
 select_mode_quic()
 {
+	[ "$SUBSYS" = "keenetic" ] && {
+		echo
+		echo "WARNING ! Keenetic is not officially supported by zapret."
+		echo "WARNING ! This firmware requires additional manual iptables setup to support udp desync properly."
+		echo "WARNING ! Keenetic uses proprietary ndmmark to limit MASQUERADE."
+		echo "WARNING ! Desynced packets may go outside without MASQUERADE with LAN source ip."
+		echo "WARNING ! To fix this you need to add additional MASQUERADE rule to iptables nat table."
+		echo "WARNING ! Installer WILL NOT fix it for you automatically."
+		echo "WARNING ! If you cannot understand what it is all about - do not enable QUIC."
+	}
 	[ "$MODE" != "filter" ] && [ "$MODE" != "tpws-socks" ] && [ "$MODE" != "tpws" ] && {
 		echo
 		ask_yes_no_var MODE_QUIC "enable quic support"