From b2468a90953a278e191e235fec0c2da807198292 Mon Sep 17 00:00:00 2001 From: bol-van Date: Sun, 21 Sep 2025 17:53:50 +0300 Subject: [PATCH] blockcheck: change nft postnat hook from output to postrouting to fix some issues --- blockcheck.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/blockcheck.sh b/blockcheck.sh index 2bee8972..ff7b8a94 100755 --- a/blockcheck.sh +++ b/blockcheck.sh @@ -804,7 +804,7 @@ nft_scheme() make_comma_list iplist $3 nft add table inet $NFT_TABLE - nft "add chain inet $NFT_TABLE postnat { type filter hook output priority 102; }" + nft "add chain inet $NFT_TABLE postnat { type filter hook postrouting priority 102; }" nft "add rule inet $NFT_TABLE postnat meta nfproto ipv${IPV} $1 dport $2 mark and $DESYNC_MARK == 0 ip${ipver} daddr {$iplist} ct mark set ct mark or $DESYNC_MARK queue num $QNUM" # for strategies with incoming packets involved (autottl) nft "add chain inet $NFT_TABLE prenat { type filter hook prerouting priority -102; }"