init: do not hook prerouting SYN,ACK in desync mode

This commit is contained in:
bol-van 2020-02-02 17:31:50 +03:00
parent 10a190a5c6
commit e04037952d
2 changed files with 0 additions and 8 deletions

View File

@ -304,13 +304,9 @@ zapret_apply_firewall()
fw_nfqws_post "--dport 80" "--dport 80" $QNUM
;;
nfqws_all_desync|nfqws_hostlist_desync)
rule="-m multiport --sports 80,443 $synack"
fw_nfqws_pre "$rule" "$rule" $QNUM
fw_nfqws_post "$desync" "$desync" $QNUM
;;
nfqws_ipset_desync)
rule="-m multiport --sports 80,443 $synack"
fw_nfqws_pre "$rule $ipset_zapret src" "$rule $ipset_zapret6 src" $QNUM
fw_nfqws_post "$desync $ipset_zapret dst" "$desync $ipset_zapret6 dst" $QNUM
;;
custom)

View File

@ -423,13 +423,9 @@ zapret_do_firewall()
fw_nfqws_post $1 "--dport 80" "--dport 80" $QNUM
;;
nfqws_all_desync|nfqws_hostlist_desync)
rule="-m multiport --sports 80,443 $synack"
fw_nfqws_pre $1 "$rule" "$rule" $QNUM
fw_nfqws_post $1 "$desync" "$desync" $QNUM
;;
nfqws_ipset_desync)
rule="-m multiport --sports 80,443 $synack"
fw_nfqws_pre $1 "$rule $ipset_zapret src" "$rule $ipset_zapret6 src" $QNUM
fw_nfqws_post $1 "$desync $ipset_zapret dst" "$desync $ipset_zapret6 dst" $QNUM
;;
custom)