Это старая версия документа!

MODE=nfqws
# apply fooling to http
MODE_HTTP=1
# for nfqws only. support http keep alives. enable only if DPI checks for http request in any outgoing packet
MODE_HTTP_KEEPALIVE=0
# apply fooling to https
MODE_HTTPS=1
# apply fooling to quic
MODE_QUIC=1
# none,ipset,hostlist,autohostlist
MODE_FILTER=none
 
HOST_LIST="/opt/zapret/ipset"
FAKE_FILES="/opt/zapret/files/fake"
 
# CHOOSE NFQWS DAEMON OPTIONS for DPI desync mode. run "nfq/nfqws --help" for option list
DESYNC_MARK=0x40000000
DESYNC_MARK_POSTNAT=0x20000000
NFQWS_OPT_DESYNC="--wf-tcp=80,443 -wf-udp=443,50000-50020 \
--filter-udp=443 --hostlsit=$HOST_LIST/russia-youtubeQ.txt --dpi-desync=fake --dpi-desync-repeats=4 --dpi-desync-fake-quic=$FAKE_FILES/quic_initial_www_google_com.bin --new \
--filter-tcp=443 --hostlist=$HOST_LIST/russia-youtubeGV.txt --dpi-desync=split --dpi-desync-split-pos=1 --dpi-desync-fooling=badseq --dpi-desync-repeats=10 --dpi-desync-autottl --new \
--filter-tcp=443 --hostlist=$HOST_LIST/russia-youtube.txt --dpi-desync=fake,split2 --dpi-desync-split-seqovl=2 --dpi-desync-split-pos=3 --dpi-desync-fake-tls=$FAKE_FILES/tls_clienthello_www_google_com.bin --dpi-desync-autottl --new \
--filter-tcp=80 --hostlist=$HOST_LIST/russia-blacklist.txt --dpi-desync=fake,split2 --dpi-desync-fooling=md5sig --dpi-desync-autottl --new \
--filter-tcp=443 --hostlist=$HOST_LIST/russia-blacklist.txt --dpi-desync=fake,split2 --dpi-desync-split-seqovl=1 --dpi-desync-split-tls=sniext --dpi-desync-fake-tls=$FAKE_FILES/tls_clienthello_www_google_com.bin --dpi-desync-autottl --new \
--filter-udp=443 --hostlist=$HOST_FILES/russia-discord.txt --dpi-desync=fake --dpi-desync-udplen-increment=10 --dpi-desync-repeats=7 --dpi-desync--udplen-pattern=0xDEADBEEF --dpi-desync-fake-quic=$FAKE_FILES/quic_initial_www_google_com.bin --new \
--filter-udp=50000-50020 --dpi-desync-fake --dpi-desync-any-protocol --dpi-desync-cutoff=n2 --dpi-desync-fake-quic=$FAKE_FILES/quic_initial_google_com.bin --new \
--filter-tcp=443 --hostlist=$HOST_FILES/russia_discord.txt --dpi-desync=split --dpi-desync-split-pos=1 --dpi-desync-fooling=badseq --dpi-desync-repeats=10 --dpi-desync-autottl --new \
--dpi-desync=fake,split2 --hostlist=$HOST_LIST/autohostlist.txt --hostlist-exclude=$HOST_LIST/netrogat.txt --dpi-desync=split --dpi-desync-split-pos=1 --dpi-desync-fooling=badseq --dpi-desync-repeats=10 --dpi-desync-autottl"
#NFQWS_OPT_DESYNC_HTTP=
#NFQWS_OPT_DESYNC_HTTPS=
#NFQWS_OPT_DESYNC_HTTP6=
#NFQWS_OPT_DESYNC_HTTPS6=
NFQWS_OPT_DESYNC_QUIC=""
#NFQWS_OPT_DESYNC_QUIC6=
 
# CHOOSE TPWS DAEMON OPTIONS. run "tpws/tpws --help" for option list
TPWS_OPT="--hostspell=HOST --split-http-req=method --split-pos=3 --oob"