Loading docs/readme.en.md +15 −1 Original line number Diff line number Diff line # zapret v71.2 # zapret v71.3 # SCAMMER WARNING Loading Loading @@ -1225,6 +1225,20 @@ Don't use `<HOSTLIST>` in highly specialized profiles. Use your own filter or ho `<HOSTLIST_NOAUTO>` marker uses standard autohostlist as usual hostlist thus disabling auto additions in this profile. If any other profile adds something this profile accepts the change automatically. ***Change loop prevention mark bit***\ `DESYNC_MARK=0x40000000` ***Change postnat scheme mark bit***\ `DESYNC_MARK_POSTNAT=0x20000000` ***If uncommented pass to zapret only packets marked with this bit***\ `#FILTER_MARK_POSTNAT=0x10000000` Bit must be set in your own rules.. * iptables - in mangle PREROUTING and mangle OUTPUT before zapret rules (iptables -I _after_ zapret rules application). * nftables - in output and prerouting hooks with priority -102 or lower. Mark criterias can be any. For example, source IP or source interface name. **tpws** socks proxy mode switch Loading Loading
docs/readme.en.md +15 −1 Original line number Diff line number Diff line # zapret v71.2 # zapret v71.3 # SCAMMER WARNING Loading Loading @@ -1225,6 +1225,20 @@ Don't use `<HOSTLIST>` in highly specialized profiles. Use your own filter or ho `<HOSTLIST_NOAUTO>` marker uses standard autohostlist as usual hostlist thus disabling auto additions in this profile. If any other profile adds something this profile accepts the change automatically. ***Change loop prevention mark bit***\ `DESYNC_MARK=0x40000000` ***Change postnat scheme mark bit***\ `DESYNC_MARK_POSTNAT=0x20000000` ***If uncommented pass to zapret only packets marked with this bit***\ `#FILTER_MARK_POSTNAT=0x10000000` Bit must be set in your own rules.. * iptables - in mangle PREROUTING and mangle OUTPUT before zapret rules (iptables -I _after_ zapret rules application). * nftables - in output and prerouting hooks with priority -102 or lower. Mark criterias can be any. For example, source IP or source interface name. **tpws** socks proxy mode switch Loading