mirrors/youtubeUnblock
1
0
Fork 0
mirror of https://github.com/Waujito/youtubeUnblock.git synced 2025-01-15 19:15:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update nftables to allow quic drop

Browse Source
This commit is contained in:
Vadim Vetrov 2024-09-14 10:58:22 +03:00
parent 9dacead2ee
commit dba6078f2c
No known key found for this signature in database
GPG Key ID: E8A308689D7A73A5
2 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
youtubeUnblock/files/luasrc/model/cbi/youtubeUnblock.lua
View File

@ -13,7 +13,9 @@ o = s:option(ListValue, "faking_strategy", "faking strategy",
<li><code>randseq</code> specifies that random sequence/acknowledgemend random will be set. This option may be handled by provider which uses conntrack with drop on invalid conntrack state firewall rule enabled. </li> <li><code>randseq</code> specifies that random sequence/acknowledgemend random will be set. This option may be handled by provider which uses conntrack with drop on invalid conntrack state firewall rule enabled. </li>
<li><code>ttl</code> specifies that packet will be invalidated after --faking-ttl=n hops. ttl is better but may cause issues if unconfigured. </li> <li><code>ttl</code> specifies that packet will be invalidated after --faking-ttl=n hops. ttl is better but may cause issues if unconfigured. </li>
<li><code>pastseq</code> is like randseq but sequence number is not random but references the packet sent in the past (before current). </li> <li><code>pastseq</code> is like randseq but sequence number is not random but references the packet sent in the past (before current). </li>
<li><code>tcp_check</code> will invalidate faking packet with invalid checksum. May be handled and dropped by some providers/TSPUs.</li></ul> <li><code>tcp_check</code> will invalidate faking packet with invalid checksum. May be handled and dropped by some providers/TSPUs.</li>
<li><code>md5sum</code> will invalidate faking packet with invalid TCP md5sum. md5sum is a TCP option which is handled by the destination server but may be skipped by TSPU.</li>
</ul>
]]) ]])
o:value("pastseq", "pastseq") o:value("pastseq", "pastseq")
o:value("randseq", "randseq") o:value("randseq", "randseq")

5
youtubeUnblock/files/nftables.d/537-youtubeUnblock.nft
View File

@ -1,5 +1,6 @@
#!/usr/sbin/nft -f #!/usr/sbin/nft -f
# This file # This file will be applied automatically for nftables
add rule inet fw4 mangle_forward tcp dport 443 ct original packets < 20 counter queue num 537 bypass add chain inet fw4 youtubeUnblock { type filter hook postrouting priority mangle - 1; policy accept; }
add rule inet fw4 youtubeUnblock meta l4proto { tcp, udp } th dport 443 ct original packets < 20 counter queue num 537 bypass
insert rule inet fw4 output mark and 0x8000 == 0x8000 counter accept insert rule inet fw4 output mark and 0x8000 == 0x8000 counter accept