Browse Source

blockcheck: change nft postnat hook from output to postrouting to fix some issues

master
bol-van 6 days ago
parent
commit
b2468a9095
  1. 2
      blockcheck.sh

2
blockcheck.sh

@ -804,7 +804,7 @@ nft_scheme()
make_comma_list iplist $3
nft add table inet $NFT_TABLE
nft "add chain inet $NFT_TABLE postnat { type filter hook output priority 102; }"
nft "add chain inet $NFT_TABLE postnat { type filter hook postrouting priority 102; }"
nft "add rule inet $NFT_TABLE postnat meta nfproto ipv${IPV} $1 dport $2 mark and $DESYNC_MARK == 0 ip${ipver} daddr {$iplist} ct mark set ct mark or $DESYNC_MARK queue num $QNUM"
# for strategies with incoming packets involved (autottl)
nft "add chain inet $NFT_TABLE prenat { type filter hook prerouting priority -102; }"

Loading…
Cancel
Save