From df69ce1991644aee2894dae144674197b0f61b9b Mon Sep 17 00:00:00 2001 From: bol-van Date: Fri, 15 Nov 2024 20:33:53 +0300 Subject: [PATCH] blockcheck: always use additional abs split in seqovl to guarantee packet growth --- blockcheck.sh | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/blockcheck.sh b/blockcheck.sh index c3e54fc..26efd25 100755 --- a/blockcheck.sh +++ b/blockcheck.sh @@ -1232,14 +1232,19 @@ pktws_check_domain_http_bypass_() [ "$need_split" = 1 ] && { f="method+2 midsld method+2,midsld" - [ "$sec" = 0 ] || f="1 midsld sniext+1 1,midsld" + # relative markers can be anywhere, even in subsequent packets. first packet can be MTU-full. + # make additional split pos "10" to guarantee enough space for seqovl and likely to be before midsld,sniext,... + [ "$sec" = 0 ] || f="10 10,sniext+1 10,midsld" for pos in $f; do pktws_curl_test_update $1 $3 --dpi-desync=multisplit --dpi-desync-split-pos=$pos --dpi-desync-split-seqovl=1 $e && { [ "$SCANLEVEL" = quick ] && return need_wssize=0 } done - [ "$sec" != 0 ] && pktws_curl_test_update $1 $3 --dpi-desync=multisplit --dpi-desync-split-pos=2 --dpi-desync-split-seqovl=336 --dpi-desync-split-seqovl-pattern="$ZAPRET_BASE/files/fake/tls_clienthello_iana_org.bin" $e && [ "$SCANLEVEL" = quick ] && return + [ "$sec" != 0 ] && pktws_curl_test_update $1 $3 --dpi-desync=multisplit --dpi-desync-split-pos=2 --dpi-desync-split-seqovl=336 --dpi-desync-split-seqovl-pattern="$ZAPRET_BASE/files/fake/tls_clienthello_iana_org.bin" $e && { + [ "$SCANLEVEL" = quick ] && return + need_wssize=0 + } } [ "$need_disorder" = 1 ] && { if [ "$sec" = 0 ]; then