Различия

Показаны различия между двумя версиями страницы.

--- router:zapret [2025/09/06 00:21] – mirocow
+++ router:zapret [2025/09/27 22:24] (текущий) – mirocow
@@ Строка 53: / Строка 53: @@
 WS_USER=nobody
 FWTYPE=iptables
-SET_MAXELEM=522288
+SET_MAXELEM=1048576
 IPSET_OPT="hashsize 262144 maxelem $SET_MAXELEM"
 IP2NET_OPT4="--prefix-length=22-30 --v4-threshold=3/4"
-IP2NET_OPT6="--prefix-length=56-64 --v6-threshold=5"
+IP2NET_OPT6="--prefix-length=48-64 --v6-threshold=3"
 AUTOHOSTLIST_RETRANS_THRESHOLD=3
 AUTOHOSTLIST_FAIL_THRESHOLD=3
-AUTOHOSTLIST_FAIL_TIME=60
+AUTOHOSTLIST_FAIL_TIME=30
 AUTOHOSTLIST_DEBUGLOG=0
-MDIG_THREADS=30
+MDIG_THREADS=50
 GZIP_LISTS=1
 DESYNC_MARK=0x40000000
@@ Строка 84: / Строка 84: @@
 NFQWS_UDP_PKT_OUT=$((6+$AUTOHOSTLIST_RETRANS_THRESHOLD))
 NFQWS_UDP_PKT_IN=0
-MODE_HTTP=0
+MODE_HTTP=1
-MODE_HTTPS=0
+MODE_HTTPS=1
-MODE_QUIC=0
+MODE_QUIC=1
 NFQWS_OPT="
-# youtube
+# YouTube rules
---filter-tcp=80 --dpi-desync=fake,multisplit --dpi-desync-ttl=0 --dpi-desync-fooling=badseq --hostlist=/opt/zapret/ipset/youtube_domain_list.txt --new
+--filter-tcp=80 --dpi-desync=fake,multisplit --dpi-desync-ttl=1 --hostlist=/opt/zapret/ipset/youtube_domain_list.txt --new
---filter-tcp=443 --dpi-desync=fake,multidisorder --dpi-desync-split-pos=method+2,midsld,5 --dpi-desync-ttl=0 --dpi-desync-fooling=badseq --dpi-desync-repeats=15 --dpi-desync-fake-tls=/opt/zapret/files/fake/tls_clienthello_www_google_com.bin --hostlist=/opt/zapret/ipset/youtube_domain_list.txt --new
+--filter-tcp=443 --dpi-desync=fake,multidisorder --dpi-desync-split-pos=1 --dpi-desync-ttl=1 --dpi-desync-fake-tls=/opt/zapret/files/fake/tls_clienthello_www_google_com.bin --hostlist=/opt/zapret/ipset/youtube_domain_list.txt --new
---filter-udp=443 --dpi-desync=fake --dpi-desync-repeats=15 --dpi-desync-ttl=0  --dpi-desync-any-protocol --dpi-desync-cutoff=d4 --dpi-desync-fooling=badseq --dpi-desync-fake-quic=/opt/zapret/files/fake/quic_initial_www_google_com.bin --hostlist=/opt/zapret/ipset/youtube_domain_list.txt
+#--filter-udp=443 --dpi-desync=fake --dpi-desync-ttl=1 --dpi-desync-fake-quic=/opt/zapret/files/fake/quic_initial_www_google_com.bin --hostlist=/opt/zapret/ipset/youtube_domain_list.txt
+--filter-udp=443 --dpi-desync=fake --dpi-desync-repeats=6 --dpi-desync-ttl=0 --dpi-desync-any-protocol --dpi-desync-cutoff=d4 --dpi-desync-fooling=md5sig,badsum --dpi-desync-fake-quic=/opt/zapret/files/fake/quic_initial_www_google_com.bin --hostlist=/opt/zapret/ipset/youtube_domain_list.txt
-# Other
+# Main rules
+--filter-tcp=80,443 --dpi-desync=fake --dpi-desync-ttl=0
+--filter-udp=443 --dpi-desync=fake --dpi-desync-ttl=0
 "
+NFQWS_OPT_DESYNC="--dpi-desync=fake,disorder2 --dpi-desync-split-pos=1 --dpi-desync-ttl=0 --dpi-desync-fooling=md5sig,badsum --dpi-desync-repeats=6 --dpi-desync-any-protocol --dpi-desync-cutoff=d4 --dpi-desync-fake-tls=/opt/zapret/files/fake/tls_clienthello_www_google_com.bin"
+NFQWS_OPT_DESYNC_QUIC="--dpi-desync=fake --dpi-desync-repeats=6 --dpi-desync-ttl=0 --dpi-desync-any-protocol --dpi-desync-cutoff=d4 --dpi-desync-fooling=md5sig,badsum --dpi-desync-fake-quic=/opt/zapret/files/fake/quic_initial_www_google_com.bin"
 MODE_FILTER=none
-FLOWOFFLOAD=donttouch
+FLOWOFFLOAD=disable
 IFACE_LAN=br0
 IFACE_WAN=eth0
@@ Строка 107: / Строка 112: @@
 $ echo '' > /opt/zapret/ipset/youtube_domain_list.txt
 </code>
+=== Только для теста ===
   * [[:config-default]]
-  * [[:config-2]]
-  * [[:config-3]]
-  * [[:config-4]]
 ===== NWQWS_OPT =====
@@ Строка 189: / Строка 193: @@
 nano /opt/zapret/ipset/youtube_domain_list.txt
 <code>
+youtube.com
+youtu.be
+googlevideo.com
+googleapis.com
+ggpht.com
+ytimg.com
+youtube-nocookie.com
+play.google.com
+gstatic.com
 googlevideo.com
 ggpht.com