mirror of
https://github.com/bol-van/zapret.git
synced 2025-04-19 13:32:58 +03:00
51 lines
1.8 KiB
Plaintext
51 lines
1.8 KiB
Plaintext
# this file is included from init scripts
|
|
# change values here
|
|
|
|
# can help in case /tmp has not enough space
|
|
#TMPDIR=/opt/zapret/tmp
|
|
|
|
# options for ipsets
|
|
# too low hashsize can cause memory allocation errors on low RAM systems , even if RAM is enough
|
|
# too large hashsize will waste lots of RAM
|
|
IPSET_OPT="hashsize 262144 maxelem 2097152"
|
|
|
|
# options for ip2net. "-4" or "-6" auto added by ipset create script
|
|
IP2NET_OPT4="--prefix-length=22-30 --v4-threshold=3/4"
|
|
IP2NET_OPT6="--prefix-length=56-64 --v6-threshold=5"
|
|
|
|
# CHOOSE OPERATION MODE
|
|
# use nfqws : nfqws_all_desync nfqws_ipset_desync nfqws_hostlist_desync
|
|
# use tpws : tpws_ipset tpws_ipset_https tpws_all tpws_all_https tpws_hostlist
|
|
# no daemon, just ipset : ipset
|
|
# custom mode : custom . should modify init script and add your own code
|
|
MODE=tpws_ipset_https
|
|
|
|
# CHOOSE NFQWS DAEMON OPTIONS for DPI desync mode. run "nfq/nfqws --help" for option list
|
|
DESYNC_MARK=0x40000000
|
|
NFQWS_OPT_DESYNC="--dpi-desync=fake --dpi-desync-ttl=0 --dpi-desync-fooling=badsum --dpi-desync-fwmark=$DESYNC_MARK"
|
|
|
|
# CHOOSE TPWS DAEMON OPTIONS. run "tpws/tpws --help" for option list
|
|
TPWS_OPT_HTTP="--hostspell=HOST --split-http-req=method"
|
|
TPWS_OPT_HTTPS="--split-pos=3"
|
|
|
|
# for routers based on desktop linux only. has not effect in openwrt.
|
|
# CHOOSE LAN and WAN NETWORK INTERFACES
|
|
# or leave them commented if its not router
|
|
#IFACE_LAN=eth0
|
|
#IFACE_WAN=eth1
|
|
|
|
# should init scripts apply firewall rules ?
|
|
# set to 0 if firewall control system is present
|
|
# openwrt uses fw3 firewall , init never touch fw
|
|
INIT_APPLY_FW=1
|
|
|
|
# do not work with ipv4
|
|
#DISABLE_IPV4=1
|
|
# do not work with ipv6
|
|
DISABLE_IPV6=1
|
|
|
|
# select which init script will be used to get ip or host list
|
|
# possible values : get_user.sh get_antizapret.sh get_combined.sh get_reestr.sh get_hostlist.sh
|
|
# comment if not required
|
|
GETLIST=get_antifilter_ipsmart.sh
|