starred/zapret.installer
1
0
Fork 0
mirror of https://github.com/Snowy-Fluffy/zapret.installer.git synced 2026-07-16 06:03:47 +03:00
Code Issues 20 Packages Projects Releases Wiki Activity

Ни одна стратегия не работает (EndeavourOS) #67

New Issue
Closed
opened 2026-02-05 19:04:17 +03:00 by OVERLORD · 7 comments
OVERLORD commented 2026-02-05 19:04:17 +03:00
Owner
Copy Link

Originally created by @aktanturgunbaev170-blip on GitHub (Dec 29, 2025).

Я уже как 3 дня сижу без запрета, так как почему все стратегии перестали работать. И да, я уже пробовал поменять хотлист, не помогает. Я уже пробовал другие форки, там всё тоже самое.

Originally created by @aktanturgunbaev170-blip on GitHub (Dec 29, 2025). Я уже как 3 дня сижу без запрета, так как почему все стратегии перестали работать. И да, я уже пробовал поменять хотлист, не помогает. Я уже пробовал другие форки, там всё тоже самое.
OVERLORD commented 2026-02-05 19:04:21 +03:00
Author
Owner
Copy Link

@aktanturgunbaev170-blip commented on GitHub (Dec 29, 2025):

если и работет, то временно. потом всё тоже самое

@aktanturgunbaev170-blip commented on GitHub (Dec 29, 2025): если и работет, то временно. потом всё тоже самое
OVERLORD commented 2026-02-05 19:04:22 +03:00
Author
Owner
Copy Link

@Slime-AU commented on GitHub (Dec 29, 2025):

у меня тоже, Mint

@Slime-AU commented on GitHub (Dec 29, 2025): у меня тоже, Mint
OVERLORD commented 2026-02-05 19:04:23 +03:00
Author
Owner
Copy Link

@desx88 commented on GitHub (Dec 30, 2025):

Походу взялись за запрет.
Пока временно в хостлист добавил cloudflareclient.com, и использую cloudflare warp.

@desx88 commented on GitHub (Dec 30, 2025): Походу взялись за запрет. Пока временно в хостлист добавил cloudflareclient.com, и использую cloudflare warp.
OVERLORD commented 2026-02-05 19:04:24 +03:00
Author
Owner
Copy Link

@Psychofit commented on GitHub (Dec 30, 2025):

Да, больше ни одна из стратегий не работает. Но у версии Flowseal, которая под винду, есть новые версии стратегии general (alt 10 и alt 11). Они работают.

@Psychofit commented on GitHub (Dec 30, 2025): Да, больше ни одна из стратегий не работает. Но у версии Flowseal, которая под винду, есть новые версии стратегии general (alt 10 и alt 11). Они работают.
OVERLORD commented 2026-02-05 19:04:25 +03:00
Author
Owner
Copy Link

@aktanturgunbaev170-blip commented on GitHub (Dec 30, 2025):

Да, больше ни одна из стратегий не работает. Но у версии Flowseal, которая под винду, есть новые версии стратегии general (alt 10 и alt 11). Они работают.

Да, но в этом zapret.installer нету их уже как 3-4 дня

@aktanturgunbaev170-blip commented on GitHub (Dec 30, 2025): > Да, больше ни одна из стратегий не работает. Но у версии Flowseal, которая под винду, есть новые версии стратегии general (alt 10 и alt 11). Они работают. Да, но в этом zapret.installer нету их уже как 3-4 дня
OVERLORD commented 2026-02-05 19:04:25 +03:00
Author
Owner
Copy Link

@desx88 commented on GitHub (Dec 31, 2025):

Скопировал стратегию из alt10. пофиксил пути к файлам. Ютуб работает - discord нет. Дальше ковырять лень. Скопировал еще папку lists из виндовой версии.

NFQWS_PORTS_TCP=80,443,2053,2083,2087,2096,8443,50000-65535
NFQWS_PORTS_UDP=443,19294-19344,50000-65535
NFQWS_TCP_PKT_OUT=9
NFQWS_TCP_PKT_IN=3
NFQWS_UDP_PKT_OUT=9
NFQWS_UDP_PKT_IN=0
NFQWS_PORTS_TCP_KEEPALIVE=
NFQWS_PORTS_UDP_KEEPALIVE=
NFQWS_OPT="
--filter-udp=443 --hostlist=/opt/zapret/ipset/zapret-hosts-user.txt --dpi-desync=fake --dpi-desync-repeats=6 --dpi-desync-fake-quic=/opt/zapret/files/fake/quic_initial_www_google_com.bin --new
^ --filter-udp=19294-19344,50000-50100 --filter-l7=discord,stun --dpi-desync=fake --dpi-desync-repeats=6 --new
^ --filter-tcp=80 --hostlist=/opt/zapret/ipset/zapret-hosts-user.txt --dpi-desync=fake,multisplit --dpi-desync-autottl=2 --dpi-desync-fooling=md5sig --new
^ --filter-tcp=2053,2083,2087,2096,8443 --hostlist-domains=discord.media --dpi-desync=multisplit --dpi-desync-split-seqovl=681 --dpi-desync-split-pos=1 --dpi-desync-split-seqovl-pattern=/opt/zapret/files/fake/tls_clienthello_www_google_com.bin --new
^ --filter-tcp=443 --hostlist=/opt/zapret/ipset/zapret-hosts-user.txt --dpi-desync=multisplit --dpi-desync-repeats=2 --dpi-desync-split-seqovl=681 --dpi-desync-split-pos=1 --dpi-desync-split-seqovl-pattern=/opt/zapret/files/fake/quic_initial_www_google_com.bin"
@desx88 commented on GitHub (Dec 31, 2025): Скопировал стратегию из alt10. пофиксил пути к файлам. Ютуб работает - discord нет. Дальше ковырять лень. Скопировал еще папку lists из виндовой версии. ``` NFQWS_PORTS_TCP=80,443,2053,2083,2087,2096,8443,50000-65535 NFQWS_PORTS_UDP=443,19294-19344,50000-65535 NFQWS_TCP_PKT_OUT=9 NFQWS_TCP_PKT_IN=3 NFQWS_UDP_PKT_OUT=9 NFQWS_UDP_PKT_IN=0 NFQWS_PORTS_TCP_KEEPALIVE= NFQWS_PORTS_UDP_KEEPALIVE= NFQWS_OPT=" --filter-udp=443 --hostlist=/opt/zapret/ipset/zapret-hosts-user.txt --dpi-desync=fake --dpi-desync-repeats=6 --dpi-desync-fake-quic=/opt/zapret/files/fake/quic_initial_www_google_com.bin --new ^ --filter-udp=19294-19344,50000-50100 --filter-l7=discord,stun --dpi-desync=fake --dpi-desync-repeats=6 --new ^ --filter-tcp=80 --hostlist=/opt/zapret/ipset/zapret-hosts-user.txt --dpi-desync=fake,multisplit --dpi-desync-autottl=2 --dpi-desync-fooling=md5sig --new ^ --filter-tcp=2053,2083,2087,2096,8443 --hostlist-domains=discord.media --dpi-desync=multisplit --dpi-desync-split-seqovl=681 --dpi-desync-split-pos=1 --dpi-desync-split-seqovl-pattern=/opt/zapret/files/fake/tls_clienthello_www_google_com.bin --new ^ --filter-tcp=443 --hostlist=/opt/zapret/ipset/zapret-hosts-user.txt --dpi-desync=multisplit --dpi-desync-repeats=2 --dpi-desync-split-seqovl=681 --dpi-desync-split-pos=1 --dpi-desync-split-seqovl-pattern=/opt/zapret/files/fake/quic_initial_www_google_com.bin" ```
OVERLORD commented 2026-02-05 19:04:26 +03:00
Author
Owner
Copy Link

@FreshinS commented on GitHub (Jan 1, 2026):

Качаете сборку запрета для винды отсюда (ссылка там всегда обновляется)

https://drive.google.com/file/d/1nzKLb5F6a08b_5ASqbc-vAdEcJ81b4i6/view

Берете оттуда папку bin и lists и кидаете в /opt/zapret (должны получиться директории /opt/zapret/bin и /opt/zapret/lists)

Создаете в /opt/zapret/zapret.cfgs/configurations файл стратегии и добавляете в него этот текст

# this file is included from init scripts
# change values here

# can help in case /tmp has not enough space
#TMPDIR=/opt/zapret/tmp

# redefine user for zapret daemons. required on Keenetic
#WS_USER=nobody

# override firewall type : iptables,nftables,ipfw
FWTYPE=nftables
# nftables only : set this to 0 to use pre-nat mode. default is post-nat.
# pre-nat mode disables some bypass techniques for forwarded traffic but allows to see client IP addresses in debug log
#POSTNAT=0

# options for ipsets
# maximum number of elements in sets. also used for nft sets
SET_MAXELEM=522288
# too low hashsize can cause memory allocation errors on low RAM systems , even if RAM is enough
# too large hashsize will waste lots of RAM
IPSET_OPT="hashsize 262144 maxelem $SET_MAXELEM"
# dynamically generate additional ip. $1 = ipset/nfset/table name
#IPSET_HOOK="/etc/zapret.ipset.hook"

# options for ip2net. "-4" or "-6" auto added by ipset create script
IP2NET_OPT4="--prefix-length=22-30 --v4-threshold=3/4"
IP2NET_OPT6="--prefix-length=56-64 --v6-threshold=5"
# options for auto hostlist
AUTOHOSTLIST_RETRANS_THRESHOLD=3
AUTOHOSTLIST_FAIL_THRESHOLD=3
AUTOHOSTLIST_FAIL_TIME=60
# 1 = debug autohostlist positives to ipset/zapret-hosts-auto-debug.log
AUTOHOSTLIST_DEBUGLOG=0

# number of parallel threads for domain list resolves
MDIG_THREADS=30

# ipset/*.sh can compress large lists
GZIP_LISTS=1
# command to reload ip/host lists after update
# comment or leave empty for auto backend selection : ipset or ipfw if present
# on BSD systems with PF no auto reloading happens. you must provide your own command
# set to "-" to disable reload
#LISTS_RELOAD="pfctl -f /etc/pf.conf"

# mark bit used by nfqws to prevent loop
DESYNC_MARK=0x40000000
DESYNC_MARK_POSTNAT=0x20000000

TPWS_SOCKS_ENABLE=0
# tpws socks listens on this port on localhost and LAN interfaces
TPPORT_SOCKS=987
# use <HOSTLIST> and <HOSTLIST_NOAUTO> placeholders to engage standard hostlists and autohostlist in ipset dir
# hostlist markers are replaced to empty string if MODE_FILTER does not satisfy
# <HOSTLIST_NOAUTO> appends ipset/zapret-hosts-auto.txt as normal list
TPWS_SOCKS_OPT="
--filter-tcp=80 --methodeol <HOSTLIST> --new
--filter-tcp=443 --split-tls=sni --disorder <HOSTLIST>
"

TPWS_ENABLE=0
TPWS_PORTS=80,443
# use <HOSTLIST> and <HOSTLIST_NOAUTO> placeholders to engage standard hostlists and autohostlist in ipset dir
# hostlist markers are replaced to empty string if MODE_FILTER does not satisfy
# <HOSTLIST_NOAUTO> appends ipset/zapret-hosts-auto.txt as normal list
TPWS_OPT="
--filter-tcp=80 --methodeol <HOSTLIST> --new
--filter-tcp=443 --split-tls=sni --disorder <HOSTLIST>
"

NFQWS_ENABLE=1
# redirect outgoing traffic with connbytes limiter applied in both directions.
NFQWS_PORTS_TCP=80,443,2053,2083,2087,2096,8443
NFQWS_PORTS_UDP=443,19294-19344,50000-50100
# PKT_OUT means connbytes dir original
# PKT_IN means connbytes dir reply
# this is --dpi-desync-cutoff=nX kernel mode implementation for linux. it saves a lot of CPU.
NFQWS_TCP_PKT_OUT=$((6+$AUTOHOSTLIST_RETRANS_THRESHOLD))
NFQWS_TCP_PKT_IN=3
NFQWS_UDP_PKT_OUT=$((6+$AUTOHOSTLIST_RETRANS_THRESHOLD))
NFQWS_UDP_PKT_IN=0
# redirect outgoing traffic without connbytes limiter and incoming with connbytes limiter
# normally it's needed only for stateless DPI that matches every packet in a single TCP session
# typical example are plain HTTP keep alives
# this mode can be very CPU consuming. enable with care !
#NFQWS_PORTS_TCP_KEEPALIVE=80
#NFQWS_PORTS_UDP_KEEPALIVE=
# use <HOSTLIST> and <HOSTLIST_NOAUTO> placeholders to engage standard hostlists and autohostlist in ipset dir
# hostlist markers are replaced to empty string if MODE_FILTER does not satisfy
# <HOSTLIST_NOAUTO> appends ipset/zapret-hosts-auto.txt as normal list
NFQWS_OPT="
--filter-udp=443 --hostlist="/opt/zapret/lists/list-general.txt" --hostlist-exclude="/opt/zapret/lists/list-exclude.txt" --ipset-exclude="/opt/zapret/lists/ipset-exclude.txt" --dpi-desync=fake --dpi-desync-repeats=11 --dpi-desync-fake-quic="/opt/zapret/bin/quic_initial_www_google_com.bin" --new ^
--filter-udp=19294-19344,50000-50100 --filter-l7=discord,stun --dpi-desync=fake --dpi-desync-fake-discord="/opt/zapret/bin/quic_initial_www_google_com.bin" --dpi-desync-fake-stun="/opt/zapret/bin/quic_initial_www_google_com.bin" --dpi-desync-repeats=6 --new ^
--filter-tcp=2053,2083,2087,2096,8443 --hostlist-domains=discord.media --dpi-desync=fake,multisplit --dpi-desync-split-seqovl=654 --dpi-desync-split-pos=1 --dpi-desync-fooling=ts --dpi-desync-repeats=8 --dpi-desync-split-seqovl-pattern="/opt/zapret/bin/tls_clienthello_max_ru.bin" --dpi-desync-fake-tls="/opt/zapret/bin/tls_clienthello_max_ru.bin" --new ^
--filter-tcp=443 --hostlist="/opt/zapret/lists/list-google.txt" --ip-id=zero --dpi-desync=fake,multisplit --dpi-desync-split-seqovl=681 --dpi-desync-split-pos=1 --dpi-desync-fooling=ts --dpi-desync-repeats=8 --dpi-desync-split-seqovl-pattern="/opt/zapret/bin/tls_clienthello_www_google_com.bin" --dpi-desync-fake-tls="/opt/zapret/bin/tls_clienthello_www_google_com.bin" --new ^
--filter-tcp=80,443 --hostlist="/opt/zapret/lists/list-general.txt" --hostlist-exclude="/opt/zapret/lists/list-exclude.txt" --ipset-exclude="/opt/zapret/lists/ipset-exclude.txt" --dpi-desync=fake,multisplit --dpi-desync-split-seqovl=654 --dpi-desync-split-pos=1 --dpi-desync-fooling=ts --dpi-desync-repeats=8 --dpi-desync-split-seqovl-pattern="/opt/zapret/bin/tls_clienthello_max_ru.bin" --dpi-desync-fake-tls="/opt/zapret/bin/tls_clienthello_max_ru.bin" --new ^
--filter-udp=443 --ipset="/opt/zapret/lists/ipset-all.txt" --hostlist-exclude="/opt/zapret/lists/list-exclude.txt" --ipset-exclude="/opt/zapret/lists/ipset-exclude.txt" --dpi-desync=fake --dpi-desync-repeats=11 --dpi-desync-fake-quic="/opt/zapret/bin/quic_initial_www_google_com.bin" --new ^
--filter-tcp=80,443,1024-65535 --ipset="/opt/zapret/lists/ipset-all.txt" --hostlist-exclude="/opt/zapret/lists/list-exclude.txt" --ipset-exclude="/opt/zapret/lists/ipset-exclude.txt" --dpi-desync=fake,multisplit --dpi-desync-split-seqovl=654 --dpi-desync-split-pos=1 --dpi-desync-fooling=ts --dpi-desync-repeats=8 --dpi-desync-split-seqovl-pattern="/opt/zapret/bin/tls_clienthello_max_ru.bin" --dpi-desync-fake-tls="/opt/zapret/bin/tls_clienthello_max_ru.bin" --new ^
--filter-udp=1024-65535 --ipset="/opt/zapret/lists/ipset-all.txt" --ipset-exclude="/opt/zapret/lists/ipset-exclude.txt" --dpi-desync=fake --dpi-desync-autottl=2 --dpi-desync-repeats=10 --dpi-desync-any-protocol=1 --dpi-desync-fake-unknown-udp="/opt/zapret/bin/quic_initial_www_google_com.bin" --dpi-desync-cutoff=n2
"
# none,ipset,hostlist,autohostlist
MODE_FILTER=autohostlist

# openwrt only : donttouch,none,software,hardware
FLOWOFFLOAD=donttouch

# openwrt: specify networks to be treated as LAN. default is "lan"
#OPENWRT_LAN="lan lan2 lan3"
# openwrt: specify networks to be treated as WAN. default wans are interfaces with default route
#OPENWRT_WAN4="wan vpn"
#OPENWRT_WAN6="wan6 vpn6"

# for routers based on desktop linux and macos. has no effect in openwrt.
# CHOOSE LAN and optinally WAN/WAN6 NETWORK INTERFACES
# or leave them commented if its not router
# it's possible to specify multiple interfaces like this : IFACE_LAN="eth0 eth1 eth2"
# if IFACE_WAN6 is not defined it take the value of IFACE_WAN
#IFACE_LAN=
#IFACE_WAN=
#IFACE_WAN6="ipsec0 wireguard0 he_net"

# should start/stop command of init scripts apply firewall rules ?
# not applicable to openwrt with firewall3+iptables
INIT_APPLY_FW=1
# firewall apply hooks
#INIT_FW_PRE_UP_HOOK="/etc/firewall.zapret.hook.pre_up"
#INIT_FW_POST_UP_HOOK="/etc/firewall.zapret.hook.post_up"
#INIT_FW_PRE_DOWN_HOOK="/etc/firewall.zapret.hook.pre_down"
#INIT_FW_POST_DOWN_HOOK="/etc/firewall.zapret.hook.post_down"

# do not work with ipv4
#DISABLE_IPV4=1
# do not work with ipv6
DISABLE_IPV6=1

# select which init script will be used to get ip or host list
# possible values : get_user.sh get_antizapret.sh get_combined.sh get_reestr.sh get_hostlist.sh
# comment if not required
#GETLIST=

Если что то в будущем сломается берете последнюю стратегию из архива которая работает на Винде. Копируете флаги запуска запрета из батника и добавляете их в NFQWS_OPT в стратегию выше. Заменяете %GameFilter% на 1024-65535, %BIN% на /opt/zapret/bin/ и %LISTS% на /opt/zapret/lists/

@FreshinS commented on GitHub (Jan 1, 2026): Качаете сборку запрета для винды отсюда (ссылка там всегда обновляется) https://drive.google.com/file/d/1nzKLb5F6a08b_5ASqbc-vAdEcJ81b4i6/view Берете оттуда папку bin и lists и кидаете в /opt/zapret (должны получиться директории /opt/zapret/bin и /opt/zapret/lists) Создаете в /opt/zapret/zapret.cfgs/configurations файл стратегии и добавляете в него этот текст ``` # this file is included from init scripts # change values here # can help in case /tmp has not enough space #TMPDIR=/opt/zapret/tmp # redefine user for zapret daemons. required on Keenetic #WS_USER=nobody # override firewall type : iptables,nftables,ipfw FWTYPE=nftables # nftables only : set this to 0 to use pre-nat mode. default is post-nat. # pre-nat mode disables some bypass techniques for forwarded traffic but allows to see client IP addresses in debug log #POSTNAT=0 # options for ipsets # maximum number of elements in sets. also used for nft sets SET_MAXELEM=522288 # too low hashsize can cause memory allocation errors on low RAM systems , even if RAM is enough # too large hashsize will waste lots of RAM IPSET_OPT="hashsize 262144 maxelem $SET_MAXELEM" # dynamically generate additional ip. $1 = ipset/nfset/table name #IPSET_HOOK="/etc/zapret.ipset.hook" # options for ip2net. "-4" or "-6" auto added by ipset create script IP2NET_OPT4="--prefix-length=22-30 --v4-threshold=3/4" IP2NET_OPT6="--prefix-length=56-64 --v6-threshold=5" # options for auto hostlist AUTOHOSTLIST_RETRANS_THRESHOLD=3 AUTOHOSTLIST_FAIL_THRESHOLD=3 AUTOHOSTLIST_FAIL_TIME=60 # 1 = debug autohostlist positives to ipset/zapret-hosts-auto-debug.log AUTOHOSTLIST_DEBUGLOG=0 # number of parallel threads for domain list resolves MDIG_THREADS=30 # ipset/*.sh can compress large lists GZIP_LISTS=1 # command to reload ip/host lists after update # comment or leave empty for auto backend selection : ipset or ipfw if present # on BSD systems with PF no auto reloading happens. you must provide your own command # set to "-" to disable reload #LISTS_RELOAD="pfctl -f /etc/pf.conf" # mark bit used by nfqws to prevent loop DESYNC_MARK=0x40000000 DESYNC_MARK_POSTNAT=0x20000000 TPWS_SOCKS_ENABLE=0 # tpws socks listens on this port on localhost and LAN interfaces TPPORT_SOCKS=987 # use <HOSTLIST> and <HOSTLIST_NOAUTO> placeholders to engage standard hostlists and autohostlist in ipset dir # hostlist markers are replaced to empty string if MODE_FILTER does not satisfy # <HOSTLIST_NOAUTO> appends ipset/zapret-hosts-auto.txt as normal list TPWS_SOCKS_OPT=" --filter-tcp=80 --methodeol <HOSTLIST> --new --filter-tcp=443 --split-tls=sni --disorder <HOSTLIST> " TPWS_ENABLE=0 TPWS_PORTS=80,443 # use <HOSTLIST> and <HOSTLIST_NOAUTO> placeholders to engage standard hostlists and autohostlist in ipset dir # hostlist markers are replaced to empty string if MODE_FILTER does not satisfy # <HOSTLIST_NOAUTO> appends ipset/zapret-hosts-auto.txt as normal list TPWS_OPT=" --filter-tcp=80 --methodeol <HOSTLIST> --new --filter-tcp=443 --split-tls=sni --disorder <HOSTLIST> " NFQWS_ENABLE=1 # redirect outgoing traffic with connbytes limiter applied in both directions. NFQWS_PORTS_TCP=80,443,2053,2083,2087,2096,8443 NFQWS_PORTS_UDP=443,19294-19344,50000-50100 # PKT_OUT means connbytes dir original # PKT_IN means connbytes dir reply # this is --dpi-desync-cutoff=nX kernel mode implementation for linux. it saves a lot of CPU. NFQWS_TCP_PKT_OUT=$((6+$AUTOHOSTLIST_RETRANS_THRESHOLD)) NFQWS_TCP_PKT_IN=3 NFQWS_UDP_PKT_OUT=$((6+$AUTOHOSTLIST_RETRANS_THRESHOLD)) NFQWS_UDP_PKT_IN=0 # redirect outgoing traffic without connbytes limiter and incoming with connbytes limiter # normally it's needed only for stateless DPI that matches every packet in a single TCP session # typical example are plain HTTP keep alives # this mode can be very CPU consuming. enable with care ! #NFQWS_PORTS_TCP_KEEPALIVE=80 #NFQWS_PORTS_UDP_KEEPALIVE= # use <HOSTLIST> and <HOSTLIST_NOAUTO> placeholders to engage standard hostlists and autohostlist in ipset dir # hostlist markers are replaced to empty string if MODE_FILTER does not satisfy # <HOSTLIST_NOAUTO> appends ipset/zapret-hosts-auto.txt as normal list NFQWS_OPT=" --filter-udp=443 --hostlist="/opt/zapret/lists/list-general.txt" --hostlist-exclude="/opt/zapret/lists/list-exclude.txt" --ipset-exclude="/opt/zapret/lists/ipset-exclude.txt" --dpi-desync=fake --dpi-desync-repeats=11 --dpi-desync-fake-quic="/opt/zapret/bin/quic_initial_www_google_com.bin" --new ^ --filter-udp=19294-19344,50000-50100 --filter-l7=discord,stun --dpi-desync=fake --dpi-desync-fake-discord="/opt/zapret/bin/quic_initial_www_google_com.bin" --dpi-desync-fake-stun="/opt/zapret/bin/quic_initial_www_google_com.bin" --dpi-desync-repeats=6 --new ^ --filter-tcp=2053,2083,2087,2096,8443 --hostlist-domains=discord.media --dpi-desync=fake,multisplit --dpi-desync-split-seqovl=654 --dpi-desync-split-pos=1 --dpi-desync-fooling=ts --dpi-desync-repeats=8 --dpi-desync-split-seqovl-pattern="/opt/zapret/bin/tls_clienthello_max_ru.bin" --dpi-desync-fake-tls="/opt/zapret/bin/tls_clienthello_max_ru.bin" --new ^ --filter-tcp=443 --hostlist="/opt/zapret/lists/list-google.txt" --ip-id=zero --dpi-desync=fake,multisplit --dpi-desync-split-seqovl=681 --dpi-desync-split-pos=1 --dpi-desync-fooling=ts --dpi-desync-repeats=8 --dpi-desync-split-seqovl-pattern="/opt/zapret/bin/tls_clienthello_www_google_com.bin" --dpi-desync-fake-tls="/opt/zapret/bin/tls_clienthello_www_google_com.bin" --new ^ --filter-tcp=80,443 --hostlist="/opt/zapret/lists/list-general.txt" --hostlist-exclude="/opt/zapret/lists/list-exclude.txt" --ipset-exclude="/opt/zapret/lists/ipset-exclude.txt" --dpi-desync=fake,multisplit --dpi-desync-split-seqovl=654 --dpi-desync-split-pos=1 --dpi-desync-fooling=ts --dpi-desync-repeats=8 --dpi-desync-split-seqovl-pattern="/opt/zapret/bin/tls_clienthello_max_ru.bin" --dpi-desync-fake-tls="/opt/zapret/bin/tls_clienthello_max_ru.bin" --new ^ --filter-udp=443 --ipset="/opt/zapret/lists/ipset-all.txt" --hostlist-exclude="/opt/zapret/lists/list-exclude.txt" --ipset-exclude="/opt/zapret/lists/ipset-exclude.txt" --dpi-desync=fake --dpi-desync-repeats=11 --dpi-desync-fake-quic="/opt/zapret/bin/quic_initial_www_google_com.bin" --new ^ --filter-tcp=80,443,1024-65535 --ipset="/opt/zapret/lists/ipset-all.txt" --hostlist-exclude="/opt/zapret/lists/list-exclude.txt" --ipset-exclude="/opt/zapret/lists/ipset-exclude.txt" --dpi-desync=fake,multisplit --dpi-desync-split-seqovl=654 --dpi-desync-split-pos=1 --dpi-desync-fooling=ts --dpi-desync-repeats=8 --dpi-desync-split-seqovl-pattern="/opt/zapret/bin/tls_clienthello_max_ru.bin" --dpi-desync-fake-tls="/opt/zapret/bin/tls_clienthello_max_ru.bin" --new ^ --filter-udp=1024-65535 --ipset="/opt/zapret/lists/ipset-all.txt" --ipset-exclude="/opt/zapret/lists/ipset-exclude.txt" --dpi-desync=fake --dpi-desync-autottl=2 --dpi-desync-repeats=10 --dpi-desync-any-protocol=1 --dpi-desync-fake-unknown-udp="/opt/zapret/bin/quic_initial_www_google_com.bin" --dpi-desync-cutoff=n2 " # none,ipset,hostlist,autohostlist MODE_FILTER=autohostlist # openwrt only : donttouch,none,software,hardware FLOWOFFLOAD=donttouch # openwrt: specify networks to be treated as LAN. default is "lan" #OPENWRT_LAN="lan lan2 lan3" # openwrt: specify networks to be treated as WAN. default wans are interfaces with default route #OPENWRT_WAN4="wan vpn" #OPENWRT_WAN6="wan6 vpn6" # for routers based on desktop linux and macos. has no effect in openwrt. # CHOOSE LAN and optinally WAN/WAN6 NETWORK INTERFACES # or leave them commented if its not router # it's possible to specify multiple interfaces like this : IFACE_LAN="eth0 eth1 eth2" # if IFACE_WAN6 is not defined it take the value of IFACE_WAN #IFACE_LAN= #IFACE_WAN= #IFACE_WAN6="ipsec0 wireguard0 he_net" # should start/stop command of init scripts apply firewall rules ? # not applicable to openwrt with firewall3+iptables INIT_APPLY_FW=1 # firewall apply hooks #INIT_FW_PRE_UP_HOOK="/etc/firewall.zapret.hook.pre_up" #INIT_FW_POST_UP_HOOK="/etc/firewall.zapret.hook.post_up" #INIT_FW_PRE_DOWN_HOOK="/etc/firewall.zapret.hook.pre_down" #INIT_FW_POST_DOWN_HOOK="/etc/firewall.zapret.hook.post_down" # do not work with ipv4 #DISABLE_IPV4=1 # do not work with ipv6 DISABLE_IPV6=1 # select which init script will be used to get ip or host list # possible values : get_user.sh get_antizapret.sh get_combined.sh get_reestr.sh get_hostlist.sh # comment if not required #GETLIST= ``` Если что то в будущем сломается берете последнюю стратегию из архива которая работает на Винде. Копируете флаги запуска запрета из батника и добавляете их в NFQWS_OPT в стратегию выше. Заменяете %GameFilter% на 1024-65535, %BIN% на /opt/zapret/bin/ и %LISTS% на /opt/zapret/lists/
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
enhancement
invalid
pull-request
Mirrored from GitHub Pull Request
 question
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
OVERLORD
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/zapret.installer#67
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?