install_easy: keenetic warning

common/base.sh

@@ -146,6 +146,8 @@ linux_get_subsys()
 	INIT=$(basename "$INIT")
 	if [ -f "/etc/openwrt_release" ] && [ "$INIT" = "procd" ] ; then
 		SUBSYS=openwrt
+	elif [ -x "/bin/ndm" ] ; then
+		SUBSYS=keenetic
 	else
 		# generic linux
 		SUBSYS=

common/installer.sh

@@ -125,6 +125,7 @@ check_system()
 		echo easy installer only supports Linux and MacOS. check readme.txt for supported systems and manual setup info.
 		exitp 5
 	fi
+	linux_get_subsys
 	echo system is based on $SYSTEM
 	[ -n "$info" ] && echo $info
 }

install_easy.sh

@@ -163,6 +163,16 @@ select_mode_https()
 }
 select_mode_quic()
 {
+	[ "$SUBSYS" = "keenetic" ] && {
+		echo
+		echo "WARNING ! Keenetic is not officially supported by zapret."
+		echo "WARNING ! This firmware requires additional manual iptables setup to support udp desync properly."
+		echo "WARNING ! Keenetic uses proprietary ndmmark to limit MASQUERADE."
+		echo "WARNING ! Desynced packets may go outside without MASQUERADE with LAN source ip."
+		echo "WARNING ! To fix this you need to add additional MASQUERADE rule to iptables nat table."
+		echo "WARNING ! Installer WILL NOT fix it for you automatically."
+		echo "WARNING ! If you cannot understand what it is all about - do not enable QUIC."
+	}
 	[ "$MODE" != "filter" ] && [ "$MODE" != "tpws-socks" ] && [ "$MODE" != "tpws" ] && {
 		echo
 		ask_yes_no_var MODE_QUIC "enable quic support"