mirrors/zapret
1
0
Fork 0
mirror of https://github.com/bol-van/zapret.git synced 2024-12-23 23:04:23 +00:00
Code Issues Packages Projects Releases Wiki Activity

readme.eng.md : minor fix

Browse Source
This commit is contained in:
bol-van 2024-03-02 17:58:18 +03:00
parent e8969c43cd
commit f5c3517363
1 changed files with 0 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
docs/readme.eng.md
View File

@ -259,13 +259,6 @@ add tcp option **MD5 signature**. All of them have their own disadvantages :
Can fail if inbound and outbound paths are not symmetric.
special knowledge what you are doing. Blockcheck can find a strategy with 'datanoack'
but it will not work with forwarded traffic unless POSTNAT mode is enabled.
POSTNAT mode brings some limits. No desync of the first UDP packet is possible (QUIC, for example).
That's why it's disabled by default. To enable write POSTNAT_ALL=1 to config.
Works only with nftables and from the system with an external IP address.
`--dpi-desync-fooling` takes multiple comma separated values.
For fake,rst,rstack modes original packet can be sent after the fake one or just dropped.