Browse Source

doc works

master
bol-van 4 days ago
parent
commit
84e75b0f28
  1. 11
      docs/readme.en.md

11
docs/readme.en.md

@ -1225,16 +1225,19 @@ Don't use `<HOSTLIST>` in highly specialized profiles. Use your own filter or ho
`<HOSTLIST_NOAUTO>` marker uses standard autohostlist as usual hostlist thus disabling auto additions in this profile.
If any other profile adds something this profile accepts the change automatically.
***Change loop prevention mark bit***\
Change loop prevention mark bit
`DESYNC_MARK=0x40000000`
***Change postnat scheme mark bit***\
Change postnat scheme mark bit
`DESYNC_MARK_POSTNAT=0x20000000`
***If uncommented pass to zapret only packets marked with this bit***\
If uncommented pass to zapret only packets marked with this bit
`#FILTER_MARK_POSTNAT=0x10000000`
Bit must be set in your own rules..
Bit must be set in your own rules.
* iptables - in mangle PREROUTING and mangle OUTPUT before zapret rules (iptables -I _after_ zapret rules application).
* nftables - in output and prerouting hooks with priority -102 or lower.

Loading…
Cancel
Save