| |
| config-4 [2025/02/03 01:24] – создано mirocow | config-4 [2025/09/27 22:24] (текущий) – удалено mirocow |
|---|
| <code bash> | |
| MODE=nfqws | |
| # apply fooling to http | |
| MODE_HTTP=1 | |
| # for nfqws only. support http keep alives. enable only if DPI checks for http request in any outgoing packet | |
| MODE_HTTP_KEEPALIVE=0 | |
| # apply fooling to https | |
| MODE_HTTPS=1 | |
| # apply fooling to quic | |
| MODE_QUIC=1 | |
| # none,ipset,hostlist,autohostlist | |
| MODE_FILTER=none | |
| |
| HOST_LIST="/opt/zapret/ipset" | |
| FAKE_FILES="/opt/zapret/files/fake" | |
| |
| # CHOOSE NFQWS DAEMON OPTIONS for DPI desync mode. run "nfq/nfqws --help" for option list | |
| DESYNC_MARK=0x40000000 | |
| DESYNC_MARK_POSTNAT=0x20000000 | |
| NFQWS_OPT_DESYNC="--wf-tcp=80,443 -wf-udp=443,50000-50020 \ | |
| --filter-udp=443 --hostlsit=$HOST_LIST/russia-youtubeQ.txt --dpi-desync=fake --dpi-desync-repeats=4 --dpi-desync-fake-quic=$FAKE_FILES/quic_initial_www_google_com.bin --new \ | |
| --filter-tcp=443 --hostlist=$HOST_LIST/russia-youtubeGV.txt --dpi-desync=split --dpi-desync-split-pos=1 --dpi-desync-fooling=badseq --dpi-desync-repeats=10 --dpi-desync-autottl --new \ | |
| --filter-tcp=443 --hostlist=$HOST_LIST/russia-youtube.txt --dpi-desync=fake,split2 --dpi-desync-split-seqovl=2 --dpi-desync-split-pos=3 --dpi-desync-fake-tls=$FAKE_FILES/tls_clienthello_www_google_com.bin --dpi-desync-autottl --new \ | |
| --filter-tcp=80 --hostlist=$HOST_LIST/russia-blacklist.txt --dpi-desync=fake,split2 --dpi-desync-fooling=md5sig --dpi-desync-autottl --new \ | |
| --filter-tcp=443 --hostlist=$HOST_LIST/russia-blacklist.txt --dpi-desync=fake,split2 --dpi-desync-split-seqovl=1 --dpi-desync-split-tls=sniext --dpi-desync-fake-tls=$FAKE_FILES/tls_clienthello_www_google_com.bin --dpi-desync-autottl --new \ | |
| --filter-udp=443 --hostlist=$HOST_FILES/russia-discord.txt --dpi-desync=fake --dpi-desync-udplen-increment=10 --dpi-desync-repeats=7 --dpi-desync--udplen-pattern=0xDEADBEEF --dpi-desync-fake-quic=$FAKE_FILES/quic_initial_www_google_com.bin --new \ | |
| --filter-udp=50000-50020 --dpi-desync-fake --dpi-desync-any-protocol --dpi-desync-cutoff=n2 --dpi-desync-fake-quic=$FAKE_FILES/quic_initial_google_com.bin --new \ | |
| --filter-tcp=443 --hostlist=$HOST_FILES/russia_discord.txt --dpi-desync=split --dpi-desync-split-pos=1 --dpi-desync-fooling=badseq --dpi-desync-repeats=10 --dpi-desync-autottl --new \ | |
| --dpi-desync=fake,split2 --hostlist=$HOST_LIST/autohostlist.txt --hostlist-exclude=$HOST_LIST/netrogat.txt --dpi-desync=split --dpi-desync-split-pos=1 --dpi-desync-fooling=badseq --dpi-desync-repeats=10 --dpi-desync-autottl" | |
| #NFQWS_OPT_DESYNC_HTTP= | |
| #NFQWS_OPT_DESYNC_HTTPS= | |
| #NFQWS_OPT_DESYNC_HTTP6= | |
| #NFQWS_OPT_DESYNC_HTTPS6= | |
| NFQWS_OPT_DESYNC_QUIC="" | |
| #NFQWS_OPT_DESYNC_QUIC6= | |
| |
| # CHOOSE TPWS DAEMON OPTIONS. run "tpws/tpws --help" for option list | |
| TPWS_OPT="--hostspell=HOST --split-http-req=method --split-pos=3 --oob" | |
| </code> | |