gandc/zapret2
Template
1
0
Fork 0
mirror of https://github.com/bol-van/zapret2.git synced 2026-03-13 22:03:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

80-dns-intercept: remove DISABLE_IPVx filters

Browse Source
This commit is contained in:
bol-van
2026-01-03 19:59:51 +03:00
parent 5f5cfb434c
commit b529198f24
1 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
init.d/custom.d.examples.linux/80-dns-intercept
View File

@@ -1,4 +1,5 @@
# this custom script feeds dns response data to main nfqws2 instance
# DISABLE_IPV{4,6} filters are not used intentionally. despite of not having wan ipv6 it's possible to query LAN DNS server over local ipv6
zapret_custom_firewall()
{
@@ -11,13 +12,13 @@ zapret_custom_firewall()
# router
for lan in $lanifs; do
[ "$DISABLE_IPV4" = 1 ] || ipt_add_del $1 FORWARD -o $lan $filt $jump
[ "$DISABLE_IPV6" = 1 ] || ipt6_add_del $1 FORWARD -o $lan $filt $jump
ipt_add_del $1 FORWARD -o $lan $filt $jump
ipt6_add_del $1 FORWARD -o $lan $filt $jump
done
# dns client server
for chain in INPUT OUTPUT ; do
[ "$DISABLE_IPV4" = 1 ] || ipt_add_del $1 $chain $filt $jump
[ "$DISABLE_IPV6" = 1 ] || ipt6_add_del $1 $chain $filt $jump
ipt_add_del $1 $chain $filt $jump
ipt6_add_del $1 $chain $filt $jump
done
}