Loading docs/readme.en.md +7 −4 Original line number Diff line number Diff line Loading @@ -1225,16 +1225,19 @@ Don't use `<HOSTLIST>` in highly specialized profiles. Use your own filter or ho `<HOSTLIST_NOAUTO>` marker uses standard autohostlist as usual hostlist thus disabling auto additions in this profile. If any other profile adds something this profile accepts the change automatically. ***Change loop prevention mark bit***\ Change loop prevention mark bit `DESYNC_MARK=0x40000000` ***Change postnat scheme mark bit***\ Change postnat scheme mark bit `DESYNC_MARK_POSTNAT=0x20000000` ***If uncommented pass to zapret only packets marked with this bit***\ If uncommented pass to zapret only packets marked with this bit `#FILTER_MARK_POSTNAT=0x10000000` Bit must be set in your own rules.. Bit must be set in your own rules. * iptables - in mangle PREROUTING and mangle OUTPUT before zapret rules (iptables -I _after_ zapret rules application). * nftables - in output and prerouting hooks with priority -102 or lower. Loading Loading
docs/readme.en.md +7 −4 Original line number Diff line number Diff line Loading @@ -1225,16 +1225,19 @@ Don't use `<HOSTLIST>` in highly specialized profiles. Use your own filter or ho `<HOSTLIST_NOAUTO>` marker uses standard autohostlist as usual hostlist thus disabling auto additions in this profile. If any other profile adds something this profile accepts the change automatically. ***Change loop prevention mark bit***\ Change loop prevention mark bit `DESYNC_MARK=0x40000000` ***Change postnat scheme mark bit***\ Change postnat scheme mark bit `DESYNC_MARK_POSTNAT=0x20000000` ***If uncommented pass to zapret only packets marked with this bit***\ If uncommented pass to zapret only packets marked with this bit `#FILTER_MARK_POSTNAT=0x10000000` Bit must be set in your own rules.. Bit must be set in your own rules. * iptables - in mangle PREROUTING and mangle OUTPUT before zapret rules (iptables -I _after_ zapret rules application). * nftables - in output and prerouting hooks with priority -102 or lower. Loading