Fix zapret awg, delete packet https-dns-proxy

awg_config.sh

@@ -318,7 +318,7 @@ config_files="network
 firewall
 https-dns-proxy
 dhcp"
-URL="https://raw.githubusercontent.com/routerich/RouterichAX3000_configs/refs/heads/podkop07"
+URL="https://raw.githubusercontent.com/routerich/RouterichAX3000_configs/refs/heads/beta_zapret"
 
 checkPackageAndInstall "https-dns-proxy" "0"
 
@@ -575,7 +575,7 @@ fi
 
 path_podkop_config="/etc/config/podkop"
 path_podkop_config_backup="/root/podkop"
-URL="https://raw.githubusercontent.com/routerich/RouterichAX3000_configs/refs/heads/podkop07"
+URL="https://raw.githubusercontent.com/routerich/RouterichAX3000_configs/refs/heads/beta_zapret"
 
 if [ -f "/etc/init.d/podkop" ]; then
 	printf "Podkop installed. Reconfigured on AWG WARP and Opera Proxy? (y/n): \n"

config_files/doh-proxy

@@ -10,16 +10,16 @@ config main 'config'
 	option procd_trigger_wan6 '0'
 
 config doh-proxy
-	option resolver_url 'https://dns.google/dns-query'
+	option bootstrap_dns '94.140.14.14,94.140.15.15'
-	option bootstrap_dns '8.8.8.8,8.8.4.4'
+	option resolver_url 'https://dns.adguard-dns.com/dns-query'
 	option listen_addr '127.0.0.1'
 	option listen_port '5053'
 	option user 'nobody'
 	option group 'nogroup'
 
 config doh-proxy
-	option bootstrap_dns '94.140.14.14,94.140.15.15'
+	option resolver_url 'https://dns.google/dns-query'
-	option resolver_url 'https://dns.adguard-dns.com/dns-query'
+	option bootstrap_dns '8.8.8.8,8.8.4.4'
 	option listen_addr '127.0.0.1'
 	option listen_port '5054'
 	option user 'nobody'

config_files/podkopNew

@@ -1,54 +1,55 @@
 
-config settings 'settings'
+config main 'main'
-	option dns_type 'doh'
+	option mode 'proxy'
-	option dns_server '8.8.8.8'
-	option bootstrap_dns_server '8.8.8.8'
-	option dns_rewrite_ttl '60'
-	option enable_output_network_interface '0'
-	option enable_badwan_interface_monitoring '0'
-	option enable_yacd '0'
-	option disable_quic '1'
-	option update_interval '1d'
-	option download_lists_via_proxy '1'
-	option dont_touch_dhcp '1'
-	option config_path '/etc/sing-box/config.json'
-	option cache_path '/tmp/sing-box/cache.db'
-	option exclude_ntp '1'
-	option shutdown_correctly '0'
-	option download_lists_via_proxy_section 'main'
-	list source_network_interfaces 'br-lan'
-
-config section 'main'
-	option connection_type 'proxy'
 	option proxy_config_type 'outbound'
-	option enable_udp_over_tcp '0'
+	option domain_list_enabled '1'
-	option shutdown_correctly '1'
+	option subnets_list_enabled '0'
-	option user_domain_list_type 'text'
+	option custom_domains_list_type 'text'
-	option user_subnet_list_type 'disabled'
+	option custom_local_domains_list_enabled '0'
-	option mixed_proxy_enabled '0'
+	option custom_download_domains_list_enabled '0'
+	option custom_download_subnets_list_enabled '0'
+	option all_traffic_from_ip_enabled '0'
+	option delist_domains_enabled '0'
+	option exclude_from_ip_enabled '0'
+	option yacd '0'
+	option socks5 '0'
+	option exclude_ntp '1'
+	option quic_disable '1'
+	option dont_touch_dhcp '1'
+	option update_interval '1d'
+	option dns_type 'doh'
+	option dns_server 'dns.adguard-dns.com'
+	option split_dns_enabled '0'
+	option dns_rewrite_ttl '60'
+	option cache_file '/tmp/cache.db'
+	list iface 'br-lan'
+	option mon_restart_ifaces '0'
+	option detour '1'
 	option outbound_json '{
   "type": "http",
   "tag": "http-proxy",
   "server": "127.0.0.1",
   "server_port": 18080
 }'
-	list community_lists 'geoblock'
+	list domain_list 'geoblock'
-	list community_lists 'block'
+	list domain_list 'block'
-	list community_lists 'meta'
+	list domain_list 'meta'
-	list community_lists 'twitter'
+	list domain_list 'twitter'
-	list community_lists 'hdrezka'
+	list domain_list 'hdrezka'
-	list community_lists 'tiktok'
+	list domain_list 'google_ai'
-	list community_lists 'google_ai'
+	option custom_domains_text 'myip.com'
-	option user_domains_text 'myip.com'
+	option custom_subnets_list_enabled 'disabled'
 
-config section 'Youtube_Discord'
+config extra 'Youtube_Discord'
-	option connection_type 'vpn'
+	option mode 'vpn'
 	option interface 'awg10'
-	option domain_resolver_enabled '0'
+	option domain_list_enabled '1'
-	option user_domain_list_type 'text'
+	list domain_list 'youtube'
-	option user_subnet_list_type 'disabled'
+	list domain_list 'discord'
-	option mixed_proxy_enabled '0'
+	option custom_domains_list_type 'text'
-	list community_lists 'youtube'
+	option custom_domains_text '2ip.ru'
-	list community_lists 'discord'
+	option custom_local_domains_list_enabled '0'
-	option user_domains_text '2ip.ru amazonaws.com whatsapp.com whatsapp.net whatsapp.biz wa.me'
+	option custom_download_domains_list_enabled '0'
-	list remote_subnet_lists 'https://raw.githubusercontent.com/HybridNetworks/whatsapp-cidr/main/WhatsApp/whatsapp_cidr_ipv4.txt'
+	option custom_subnets_list_enabled 'disabled'
+	option custom_download_subnets_list_enabled '0'
+	option all_traffic_from_ip_enabled '0'

config_files/podkopNewNoYoutube

@@ -1,53 +1,54 @@
 
-config settings 'settings'
+config main 'main'
-	option dns_type 'doh'
+	option mode 'proxy'
-	option dns_server '8.8.8.8'
-	option bootstrap_dns_server '8.8.8.8'
-	option dns_rewrite_ttl '60'
-	option enable_output_network_interface '0'
-	option enable_badwan_interface_monitoring '0'
-	option enable_yacd '0'
-	option disable_quic '1'
-	option update_interval '1d'
-	option download_lists_via_proxy '1'
-	option dont_touch_dhcp '1'
-	option config_path '/etc/sing-box/config.json'
-	option cache_path '/tmp/sing-box/cache.db'
-	option exclude_ntp '1'
-	option shutdown_correctly '0'
-	option download_lists_via_proxy_section 'main'
-	list source_network_interfaces 'br-lan'
-
-config section 'main'
-	option connection_type 'proxy'
 	option proxy_config_type 'outbound'
-	option enable_udp_over_tcp '0'
+	option domain_list_enabled '1'
-	option shutdown_correctly '1'
+	option subnets_list_enabled '0'
-	option user_domain_list_type 'text'
+	option custom_domains_list_type 'text'
-	option user_subnet_list_type 'disabled'
+	option custom_local_domains_list_enabled '0'
-	option mixed_proxy_enabled '0'
+	option custom_download_domains_list_enabled '0'
+	option custom_download_subnets_list_enabled '0'
+	option all_traffic_from_ip_enabled '0'
+	option delist_domains_enabled '0'
+	option exclude_from_ip_enabled '0'
+	option yacd '0'
+	option socks5 '0'
+	option exclude_ntp '1'
+	option quic_disable '1'
+	option dont_touch_dhcp '1'
+	option update_interval '1d'
+	option dns_type 'doh'
+	option dns_server 'dns.adguard-dns.com'
+	option split_dns_enabled '0'
+	option dns_rewrite_ttl '60'
+	option cache_file '/tmp/cache.db'
+	list iface 'br-lan'
+	option mon_restart_ifaces '0'
+	option detour '1'
 	option outbound_json '{
   "type": "http",
   "tag": "http-proxy",
   "server": "127.0.0.1",
   "server_port": 18080
 }'
-	list community_lists 'geoblock'
+	list domain_list 'geoblock'
-	list community_lists 'block'
+	list domain_list 'block'
-	list community_lists 'meta'
+	list domain_list 'meta'
-	list community_lists 'twitter'
+	list domain_list 'twitter'
-	list community_lists 'hdrezka'
+	list domain_list 'hdrezka'
-	list community_lists 'tiktok'
+	list domain_list 'google_ai'
-	list community_lists 'google_ai'
+	option custom_domains_text 'myip.com'
-	option user_domains_text 'myip.com'
+	option custom_subnets_list_enabled 'disabled'
 
-config section 'Discord'
+config extra 'Discord'
-	option connection_type 'vpn'
+	option mode 'vpn'
 	option interface 'awg10'
-	option domain_resolver_enabled '0'
+	option domain_list_enabled '1'
-	option user_domain_list_type 'text'
+	list domain_list 'discord'
-	option user_subnet_list_type 'disabled'
+	option custom_domains_list_type 'text'
-	option mixed_proxy_enabled '0'
+	option custom_domains_text '2ip.ru'
-	list community_lists 'discord'
+	option custom_local_domains_list_enabled '0'
-	option user_domains_text '2ip.ru amazonaws.com whatsapp.com whatsapp.net whatsapp.biz wa.me'
+	option custom_download_domains_list_enabled '0'
-	list remote_subnet_lists 'https://raw.githubusercontent.com/HybridNetworks/whatsapp-cidr/main/WhatsApp/whatsapp_cidr_ipv4.txt'
+	option custom_subnets_list_enabled 'disabled'
+	option custom_download_subnets_list_enabled '0'
+	option all_traffic_from_ip_enabled '0'

config_files/podkopNewSecond

@@ -1,44 +1,42 @@
 
-config settings 'settings'
+config main 'main'
-	option dns_type 'doh'
+	option mode 'proxy'
-	option dns_server '8.8.8.8'
-	option bootstrap_dns_server '8.8.8.8'
-	option dns_rewrite_ttl '60'
-	option enable_output_network_interface '0'
-	option enable_badwan_interface_monitoring '0'
-	option enable_yacd '0'
-	option disable_quic '1'
-	option update_interval '1d'
-	option download_lists_via_proxy '1'
-	option dont_touch_dhcp '1'
-	option config_path '/etc/sing-box/config.json'
-	option cache_path '/tmp/sing-box/cache.db'
-	option exclude_ntp '1'
-	option shutdown_correctly '0'
-	option download_lists_via_proxy_section 'main'
-	list source_network_interfaces 'br-lan'
-
-config section 'main'
-	option connection_type 'proxy'
 	option proxy_config_type 'outbound'
-	option enable_udp_over_tcp '0'
+	option domain_list_enabled '1'
-	option shutdown_correctly '1'
+	option subnets_list_enabled '0'
-	option user_domain_list_type 'text'
+	option custom_domains_list_type 'text'
-	option user_subnet_list_type 'disabled'
+	option custom_local_domains_list_enabled '0'
-	option mixed_proxy_enabled '0'
+	option custom_download_domains_list_enabled '0'
+	option custom_download_subnets_list_enabled '0'
+	option all_traffic_from_ip_enabled '0'
+	option delist_domains_enabled '0'
+	option exclude_from_ip_enabled '0'
+	option yacd '0'
+	option socks5 '0'
+	option exclude_ntp '1'
+	option quic_disable '1'
+	option dont_touch_dhcp '1'
+	option update_interval '1d'
+	option dns_type 'doh'
+	option dns_server 'dns.adguard-dns.com'
+	option split_dns_enabled '0'
+	option dns_rewrite_ttl '60'
+	option cache_file '/tmp/cache.db'
+	list iface 'br-lan'
+	option mon_restart_ifaces '0'
+	option detour '1'
 	option outbound_json '{
   "type": "http",
   "tag": "http-proxy",
   "server": "127.0.0.1",
   "server_port": 18080
 }'
-	list community_lists 'geoblock'
+	list domain_list 'geoblock'
-	list community_lists 'block'
+	list domain_list 'block'
-	list community_lists 'meta'
+	list domain_list 'meta'
-	list community_lists 'twitter'
+	list domain_list 'twitter'
-	list community_lists 'hdrezka'
+	list domain_list 'hdrezka'
-	list community_lists 'tiktok'
+	list domain_list 'google_ai'
-	list community_lists 'google_ai'
+	list domain_list 'discord'
-	list community_lists 'discord'
+	option custom_domains_text 'myip.com'
-	option user_domains_text 'myip.com amazonaws.com whatsapp.com whatsapp.net whatsapp.biz wa.me'
+	option custom_subnets_list_enabled 'disabled'
-	list remote_subnet_lists 'https://raw.githubusercontent.com/HybridNetworks/whatsapp-cidr/main/WhatsApp/whatsapp_cidr_ipv4.txt'

config_files/podkopNewSecondYoutube

@@ -1,45 +1,43 @@
 
-config settings 'settings'
+config main 'main'
-	option dns_type 'doh'
+	option mode 'proxy'
-	option dns_server '8.8.8.8'
-	option bootstrap_dns_server '8.8.8.8'
-	option dns_rewrite_ttl '60'
-	option enable_output_network_interface '0'
-	option enable_badwan_interface_monitoring '0'
-	option enable_yacd '0'
-	option disable_quic '1'
-	option update_interval '1d'
-	option download_lists_via_proxy '1'
-	option dont_touch_dhcp '1'
-	option config_path '/etc/sing-box/config.json'
-	option cache_path '/tmp/sing-box/cache.db'
-	option exclude_ntp '1'
-	option shutdown_correctly '0'
-	option download_lists_via_proxy_section 'main'
-	list source_network_interfaces 'br-lan'
-
-config section 'main'
-	option connection_type 'proxy'
 	option proxy_config_type 'outbound'
-	option enable_udp_over_tcp '0'
+	option domain_list_enabled '1'
-	option shutdown_correctly '1'
+	option subnets_list_enabled '0'
-	option user_domain_list_type 'text'
+	option custom_domains_list_type 'text'
-	option user_subnet_list_type 'disabled'
+	option custom_local_domains_list_enabled '0'
-	option mixed_proxy_enabled '0'
+	option custom_download_domains_list_enabled '0'
+	option custom_download_subnets_list_enabled '0'
+	option all_traffic_from_ip_enabled '0'
+	option delist_domains_enabled '0'
+	option exclude_from_ip_enabled '0'
+	option yacd '0'
+	option socks5 '0'
+	option exclude_ntp '1'
+	option quic_disable '1'
+	option dont_touch_dhcp '1'
+	option update_interval '1d'
+	option dns_type 'doh'
+	option dns_server 'dns.adguard-dns.com'
+	option split_dns_enabled '0'
+	option dns_rewrite_ttl '60'
+	option cache_file '/tmp/cache.db'
+	list iface 'br-lan'
+	option mon_restart_ifaces '0'
+	option detour '1'
 	option outbound_json '{
   "type": "http",
   "tag": "http-proxy",
   "server": "127.0.0.1",
   "server_port": 18080
 }'
-	list community_lists 'geoblock'
+	list domain_list 'geoblock'
-	list community_lists 'block'
+	list domain_list 'block'
-	list community_lists 'meta'
+	list domain_list 'meta'
-	list community_lists 'twitter'
+	list domain_list 'twitter'
-	list community_lists 'hdrezka'
+	list domain_list 'hdrezka'
-	list community_lists 'tiktok'
+	list domain_list 'google_ai'
-	list community_lists 'google_ai'
+	list domain_list 'discord'
-	list community_lists 'youtube'
+	list domain_list 'youtube'
-	list community_lists 'discord'
+	option custom_domains_text 'myip.com'
-	option user_domains_text 'myip.com amazonaws.com whatsapp.com whatsapp.net whatsapp.biz wa.me'
+	option custom_subnets_list_enabled 'disabled'
-	list remote_subnet_lists 'https://raw.githubusercontent.com/HybridNetworks/whatsapp-cidr/main/WhatsApp/whatsapp_cidr_ipv4.txt'

config_files/podkopNewWARP

@@ -1,38 +1,36 @@
 
-config settings 'settings'
+config main 'main'
-	option dns_type 'doh'
+	option mode 'vpn'
-	option dns_server '8.8.8.8'
-	option bootstrap_dns_server '8.8.8.8'
-	option dns_rewrite_ttl '60'
-	option enable_output_network_interface '0'
-	option enable_badwan_interface_monitoring '0'
-	option enable_yacd '0'
-	option disable_quic '1'
-	option update_interval '1d'
-	option download_lists_via_proxy '1'
-	option dont_touch_dhcp '1'
-	option config_path '/etc/sing-box/config.json'
-	option cache_path '/tmp/sing-box/cache.db'
-	option exclude_ntp '1'
-	option shutdown_correctly '0'
-	option download_lists_via_proxy_section 'main'
-	list source_network_interfaces 'br-lan'
-
-config section 'main'
-	option connection_type 'vpn'
 	option interface 'awg10'
-	option enable_udp_over_tcp '0'
+	option domain_list_enabled '1'
-	option shutdown_correctly '1'
+	option subnets_list_enabled '0'
-	option user_domain_list_type 'text'
+	option custom_domains_list_type 'text'
-	option user_subnet_list_type 'disabled'
+	option custom_local_domains_list_enabled '0'
-	option mixed_proxy_enabled '0'
+	option custom_download_domains_list_enabled '0'
-	list community_lists 'block'
+	option custom_download_subnets_list_enabled '0'
-	list community_lists 'meta'
+	option all_traffic_from_ip_enabled '0'
-	list community_lists 'twitter'
+	option delist_domains_enabled '0'
-	list community_lists 'hdrezka'
+	option exclude_from_ip_enabled '0'
-	list community_lists 'tiktok'
+	option yacd '0'
-	list community_lists 'google_ai'
+	option socks5 '0'
-	list community_lists 'discord'
+	option exclude_ntp '1'
-	list community_lists 'yotube'
+	option quic_disable '1'
-	option user_domains_text 'myip.com amazonaws.com whatsapp.com whatsapp.net whatsapp.biz wa.me'
+	option dont_touch_dhcp '1'
-	list remote_subnet_lists 'https://raw.githubusercontent.com/HybridNetworks/whatsapp-cidr/main/WhatsApp/whatsapp_cidr_ipv4.txt'
+	option update_interval '1d'
+	option dns_type 'doh'
+	option dns_server 'dns.adguard-dns.com'
+	option split_dns_enabled '0'
+	option dns_rewrite_ttl '60'
+	option cache_file '/tmp/cache.db'
+	list iface 'br-lan'
+	option mon_restart_ifaces '0'
+	option detour '1'
+	list domain_list 'block'
+	list domain_list 'meta'
+	list domain_list 'twitter'
+	list domain_list 'hdrezka'
+	list domain_list 'telegram'
+	list domain_list 'discord'
+	list domain_list 'youtube'
+	option custom_domains_text 'myip.com'
+	option custom_subnets_list_enabled 'disabled'

config_files/podkopNewWARPNoYoutube

@@ -1,37 +1,35 @@
 
-config settings 'settings'
+config main 'main'
-	option dns_type 'doh'
+	option mode 'vpn'
-	option dns_server '8.8.8.8'
-	option bootstrap_dns_server '8.8.8.8'
-	option dns_rewrite_ttl '60'
-	option enable_output_network_interface '0'
-	option enable_badwan_interface_monitoring '0'
-	option enable_yacd '0'
-	option disable_quic '1'
-	option update_interval '1d'
-	option download_lists_via_proxy '1'
-	option dont_touch_dhcp '1'
-	option config_path '/etc/sing-box/config.json'
-	option cache_path '/tmp/sing-box/cache.db'
-	option exclude_ntp '1'
-	option shutdown_correctly '0'
-	option download_lists_via_proxy_section 'main'
-	list source_network_interfaces 'br-lan'
-
-config section 'main'
-	option connection_type 'vpn'
 	option interface 'awg10'
-	option enable_udp_over_tcp '0'
+	option domain_list_enabled '1'
-	option shutdown_correctly '1'
+	option subnets_list_enabled '0'
-	option user_domain_list_type 'text'
+	option custom_domains_list_type 'text'
-	option user_subnet_list_type 'disabled'
+	option custom_local_domains_list_enabled '0'
-	option mixed_proxy_enabled '0'
+	option custom_download_domains_list_enabled '0'
-	list community_lists 'block'
+	option custom_download_subnets_list_enabled '0'
-	list community_lists 'meta'
+	option all_traffic_from_ip_enabled '0'
-	list community_lists 'twitter'
+	option delist_domains_enabled '0'
-	list community_lists 'hdrezka'
+	option exclude_from_ip_enabled '0'
-	list community_lists 'tiktok'
+	option yacd '0'
-	list community_lists 'google_ai'
+	option socks5 '0'
-	list community_lists 'discord'
+	option exclude_ntp '1'
-	option user_domains_text 'myip.com amazonaws.com whatsapp.com whatsapp.net whatsapp.biz wa.me'
+	option quic_disable '1'
-	list remote_subnet_lists 'https://raw.githubusercontent.com/HybridNetworks/whatsapp-cidr/main/WhatsApp/whatsapp_cidr_ipv4.txt'
+	option dont_touch_dhcp '1'
+	option update_interval '1d'
+	option dns_type 'doh'
+	option dns_server 'dns.adguard-dns.com'
+	option split_dns_enabled '0'
+	option dns_rewrite_ttl '60'
+	option cache_file '/tmp/cache.db'
+	list iface 'br-lan'
+	option mon_restart_ifaces '0'
+	option detour '1'
+	list domain_list 'block'
+	list domain_list 'meta'
+	list domain_list 'twitter'
+	list domain_list 'hdrezka'
+	list domain_list 'telegram'
+	list domain_list 'discord'
+	option custom_domains_text 'myip.com'
+	option custom_subnets_list_enabled 'disabled'

config_files/stubby

@@ -1,86 +0,0 @@
-
-config stubby 'global'
-	option manual '0'
-	list dns_transport 'GETDNS_TRANSPORT_TLS'
-	option tls_authentication '1'
-	option tls_query_padding_blocksize '128'
-	option appdata_dir '/var/lib/stubby'
-	option edns_client_subnet_private '1'
-	option idle_timeout '10000'
-	option round_robin_upstreams '0'
-	list listen_address '127.0.0.1@5453'
-	list listen_address '0::1@5453'
-	list trigger 'wan'
-	list trigger 'wan6'
-	list trigger 'pppoe'
-	list trigger 'l2tp'
-	list trigger 'pptp'
-	list trigger 'modem'
-	list trigger 'wwan'
-	list trigger 'wwan0'
-	option log_level '0'
-
-config resolver
-	option address '8.8.8.8'
-	option tls_auth_name 'dns.google'
-
-config resolver
-	option address '94.140.14.14'
-	option tls_auth_name 'dns.adguard.com'
-
-config resolver
-	option address '94.140.14.15'
-	option tls_auth_name 'dns.adguard.com'
-
-config resolver
-	option address '2a10:50c0::ad1:ff'
-	option tls_auth_name 'dns.adguard.com'
-
-config resolver
-	option address '2a10:50c0::ad2:ff'
-	option tls_auth_name 'dns.adguard.com'
-
-config resolver
-	option address '1.1.1.1'
-	option tls_auth_name 'cloudflare-dns.com'
-
-config resolver
-	option address '2001:4860:4860::8888'
-	option tls_auth_name 'dns.google'
-
-config resolver
-	option address '2606:4700:4700::1111'
-	option tls_auth_name 'cloudflare-dns.com'
-
-config resolver
-	option address '8.8.4.4'
-	option tls_auth_name 'dns.google'
-
-config resolver
-	option address '1.0.0.1'
-	option tls_auth_name 'cloudflare-dns.com'
-
-config resolver
-	option address '2001:4860:4860::8844'
-	option tls_auth_name 'dns.google'
-
-config resolver
-	option address '2606:4700:4700::1001'
-	option tls_auth_name 'cloudflare-dns.com'
-
-config resolver
-	option address '9.9.9.9'
-	option tls_auth_name 'dns.quad9.net'
-
-config resolver
-	option address '149.112.112.112'
-	option tls_auth_name 'dns.quad9.net'
-
-config resolver
-	option address '2620:fe::fe'
-	option tls_auth_name 'dns.quad9.net'
-
-config resolver
-	option address '2620:fe::9'
-	option tls_auth_name 'dns.quad9.net'
-

config_files/youtubeUnblock

@@ -19,7 +19,7 @@ config section
 	option frag_sni_faked '0'
 	option frag_middle_sni '1'
 	option frag_sni_pos '1'
-	option seg2delay '3'
+	option seg2delay '0'
 	option fk_winsize '0'
 	option synfake '0'
 	option sni_detection 'parse'

config_files/youtubeUnblockSecond

@@ -19,7 +19,7 @@ config section
 	option frag_sni_faked '0'
 	option frag_middle_sni '1'
 	option frag_sni_pos '1'
-	option seg2delay '3'
+	option seg2delay '0'
 	option fk_winsize '0'
 	option synfake '0'
 	option sni_detection 'parse'

config_files/youtubeUnblockSecondDiscord

@@ -19,7 +19,7 @@ config section
 	option frag_sni_faked '0'
 	option frag_middle_sni '1'
 	option frag_sni_pos '1'
-	option seg2delay '3'
+	option seg2delay '0'
 	option fk_winsize '0'
 	option synfake '0'
 	option sni_detection 'parse'

config_files/zapret

@@ -20,7 +20,6 @@ config main 'config'
 	option NFQWS_ENABLE '1'
 	option DESYNC_MARK '0x40000000'
 	option DESYNC_MARK_POSTNAT '0x20000000'
-	option FILTER_MARK '	'
 	option NFQWS_PORTS_TCP '80,443'
 	option NFQWS_PORTS_UDP '443'
 	option NFQWS_TCP_PKT_OUT '9'
@@ -30,26 +29,27 @@ config main 'config'
 	option NFQWS_PORTS_TCP_KEEPALIVE '0'
 	option NFQWS_PORTS_UDP_KEEPALIVE '0'
 	option NFQWS_OPT '
---filter-tcp=443
+--filter-tcp=80 <HOSTLIST>
---dpi-desync=fake,fakeddisorder
+--dpi-desync=fake,fakedsplit
---dpi-desync-split-pos=10,midsld
+--dpi-desync-autottl=2
---dpi-desync-fake-tls=/opt/zapret/files/fake/tls_clienthello_www_google_com.bin
+--dpi-desync-fooling=badsum
---dpi-desync-fake-tls-mod=rnd,dupsid,sni=fonts.google.com
---dpi-desync-fake-tls=0x0F0F0F0F
---dpi-desync-fake-tls-mod=none
---dpi-desync-fakedsplit-pattern=/opt/zapret/files/fake/tls_clienthello_vk_com.bin
---dpi-desync-split-seqovl=336
---dpi-desync-split-seqovl-pattern=/opt/zapret/files/fake/tls_clienthello_gosuslugi_ru.bin
---dpi-desync-fooling=badseq,badsum
---dpi-desync-badseq-increment=0
---hostlist=/opt/zapret/ipset/zapret-hosts-google.txt
-<HOSTLIST>
 --new
---filter-udp=443
+--filter-tcp=443
---dpi-desync=fake
---dpi-desync-repeats=4
---dpi-desync-fake-quic=/opt/zapret/files/fake/quic_initial_www_google_com.bin
 --hostlist=/opt/zapret/ipset/zapret-hosts-google.txt
-<HOSTLIST>
+--dpi-desync=multidisorder
+--dpi-desync-split-pos=1,midsld
+--new
+--filter-udp=443 --hostlist=/opt/zapret/ipset/zapret-hosts-google.txt
+--dpi-desync=fake
+--dpi-desync-repeats=11
+--dpi-desync-fake-quic=/opt/zapret/files/fake/quic_initial_www_google_com.bin
+--new
+--filter-udp=443 <HOSTLIST_NOAUTO>
+--dpi-desync=fake
+--dpi-desync-repeats=11
+--new
+--filter-tcp=443 <HOSTLIST>
+--dpi-desync=multidisorder
+--dpi-desync-split-pos=1,sniext+1,host+1,midsld-2,midsld,midsld+2,endhost-1
 '
 

config_files/zapret-hosts-user-exclude.txt

@@ -1,18 +0,0 @@
-127.0.0.0/8
-10.0.0.0/8
-172.16.0.0/12
-192.168.0.0/16
-169.254.0.0/16
-::1
-fc00::/7
-fe80::/10
-play.google.com
-android.com
-google-analytics.com
-gstatic.com
-gvt1.com
-dl.google.com
-dl-ssl.google.com
-android.clients.google.com
-gvt2.com
-gvt3.com

configure_zaprets.sh

@@ -1,6 +1,6 @@
 #!/bin/sh
 
-URL="https://raw.githubusercontent.com/routerich/RouterichAX3000_configs/refs/heads/podkop07"
+URL="https://raw.githubusercontent.com/routerich/RouterichAX3000_configs/refs/heads/beta_zapret"
 DIR="/etc/config"
 DIR_BACKUP="/root/backup"
 config_files="dhcp

off_configure_zaprets.sh

@@ -1,6 +1,6 @@
 #!/bin/sh
 
-URL="https://raw.githubusercontent.com/routerich/RouterichAX3000_configs/refs/heads/podkop07"
+URL="https://raw.githubusercontent.com/routerich/RouterichAX3000_configs/refs/heads/beta_zapret"
 DIR="/etc/config"
 DIR_BACKUP="/root/backup"
 config_files="dhcp

run_universal_config.sh

@@ -7,10 +7,10 @@ findVersion="24.10.2"
 
 if echo "$DESCRIPTION" | grep -qi -- "$findKey" && printf '%s\n%s\n' "$findVersion" "$VERSION" | sort -V | tail -n1 | grep -qx -- "$VERSION"; then
 	printf "\033[32;1mThis new firmware. Running new scprit...\033[0m\n"
-	wget --no-check-certificate -O /tmp/universal_config_new_podkop.sh https://raw.githubusercontent.com/routerich/RouterichAX3000_configs/refs/heads/podkop07/universal_config_new_podkop.sh && chmod +x /tmp/universal_config_new_podkop.sh && /tmp/universal_config_new_podkop.sh $1 $2
+	wget --no-check-certificate -O /tmp/universal_config_new_podkop.sh https://raw.githubusercontent.com/routerich/RouterichAX3000_configs/refs/heads/beta_zapret/universal_config_new_podkop.sh && chmod +x /tmp/universal_config_new_podkop.sh && /tmp/universal_config_new_podkop.sh $1 $2
 else
 	printf "\033[32;1mThis old firmware.\nRecommendation, upgrade firmware to actual release...\nSleep 5 sec...\033[0m\n"
 	sleep 5
 	printf "\033[32;1mRunning old scprit...\033[0m\n"
-	wget --no-check-certificate -O /tmp/universal_config.sh https://raw.githubusercontent.com/routerich/RouterichAX3000_configs/refs/heads/podkop07/universal_config.sh && chmod +x /tmp/universal_config.sh && /tmp/universal_config.sh $1 $2
+	wget --no-check-certificate -O /tmp/universal_config.sh https://raw.githubusercontent.com/routerich/RouterichAX3000_configs/refs/heads/beta_zapret/universal_config.sh && chmod +x /tmp/universal_config.sh && /tmp/universal_config.sh $1 $2
 fi

universal_config.sh

@@ -661,7 +661,7 @@ firewall
 https-dns-proxy
 youtubeUnblock
 dhcp"
-URL="https://raw.githubusercontent.com/routerich/RouterichAX3000_configs/refs/heads/podkop07"
+URL="https://raw.githubusercontent.com/routerich/RouterichAX3000_configs/refs/heads/beta_zapret"
 
 checkPackageAndInstall "https-dns-proxy" "0"
 
@@ -793,7 +793,7 @@ fi
 isWorkOperaProxy=0
 printf "\033[32;1mCheck opera proxy...\033[0m\n"
 service sing-box restart
-curl --proxy http://127.0.0.1:18080 ipinfo.io/ip
+sing-box tools fetch ifconfig.co -D /etc/sing-box/
 if [ $? -eq 0 ]; then
 	printf "\033[32;1mOpera proxy well work...\033[0m\n"
 	isWorkOperaProxy=1
@@ -1045,13 +1045,11 @@ do
 
 		if [ "$is_manual_input_parameters" = "n" ]; then
 			I=0
-			WARP_ENDPOINT_HOSTS="engage.cloudflareclient.com 162.159.192.1 162.159.192.2 162.159.192.4 162.159.195.1 162.159.195.4 188.114.96.1 188.114.96.23 188.114.96.50 188.114.96.81"
+			WARP_ENDPOINT="engage.cloudflareclient.com:500 engage.cloudflareclient.com:1701 engage.cloudflareclient.com:2408 engage.cloudflareclient.com:3138 engage.cloudflareclient.com:4500 162.159.192.4:500 162.159.192.4:1701 162.159.192.4:2408 162.159.192.4:3138 162.159.192.4:4500"
-			WARP_ENDPOINT_PORTS="500 1701 2408 3138 4500"
+			for element in $WARP_ENDPOINT; do
-			for element in $WARP_ENDPOINT_HOSTS; do
-				EndpointIP="$element"
-				for element2 in $WARP_ENDPOINT_PORTS; do
 				I=$(( $I + 1 ))
-					EndpointPort="$element2"
+				EndpointIP="${element%%:*}"
+				EndpointPort="${element##*:}"
 				uci set network.@${CONFIG_NAME}[-1].endpoint_host=$EndpointIP
 				uci set network.@${CONFIG_NAME}[-1].endpoint_port=$EndpointPort
 				uci commit network
@@ -1059,25 +1057,20 @@ do
 				ifdown $INTERFACE_NAME
 				# Включаем интерфейс
 				ifup $INTERFACE_NAME
-					printf "\033[33;1mIter #$I: Check Endpoint WARP $element:$element2. Wait up AWG WARP 10 second...\033[0m\n"
+				printf "\033[33;1mIter #$I: Check Endpoint WARP $element. Wait up AWG WARP 10 second...\033[0m\n"
 				sleep 10
 				
 				pingAddress="8.8.8.8"
 				if ping -c 1 -I $INTERFACE_NAME $pingAddress >/dev/null 2>&1
 				then
-						printf "\033[32;1m	Endpoint WARP $element:$element2 work...\033[0m\n"
+					printf "\033[32;1m	Endpoint WARP $element work...\033[0m\n"
 					isExit=1
 					break
 				else
-						printf "\033[31;1m	Endpoint WARP $element:$element2 not work...\033[0m\n"
+					printf "\033[31;1m	Endpoint WARP $element not work...\033[0m\n"
 					isExit=0
 				fi
 			done
-				if [ "$isExit" = "1" ]
-				then
-					break
-				fi
-			done
 		else
 			# Отключаем интерфейс
 			ifdown $INTERFACE_NAME
@@ -1143,7 +1136,7 @@ service odhcpd restart
 
 path_podkop_config="/etc/config/podkop"
 path_podkop_config_backup="/root/podkop"
-URL="https://raw.githubusercontent.com/routerich/RouterichAX3000_configs/refs/heads/podkop07"
+URL="https://raw.githubusercontent.com/routerich/RouterichAX3000_configs/refs/heads/beta_zapret"
 
 messageComplete=""
 

universal_config_new_podkop.sh

@@ -612,31 +612,54 @@ encoded_code="IyEvYmluL3NoCgojINCn0YLQtdC90LjQtSDQvNC+0LTQtdC70Lgg0LjQtyDRhNCw0L
 eval "$(echo "$encoded_code" | base64 --decode)"
 
 #проверка и установка пакетов AmneziaWG
-#install_awg_packages
+install_awg_packages
-
-#opkg remove zapret luci-app-zapret
-#rm -r /opt/zapret
 
 checkPackageAndInstall "jq" "1"
 checkPackageAndInstall "curl" "1"
 checkPackageAndInstall "unzip" "1"
+#checkPackageAndInstall "sing-box" "1"
 checkPackageAndInstall "opera-proxy" "1"
 checkPackageAndInstall "zapret" "1"
-opkg remove --force-removal-of-dependent-packages "sing-box"
 
-findVersion="1.12.0"
+###########
-if opkg list-installed | grep "^sing-box-tiny" && printf '%s\n%s\n' "$findVersion" "$VERSION" | sort -V | tail -n1 | grep -qx -- "$VERSION"; then
-	printf "\033[32;1mInstalled new sing-box-tiny. Running scprit...\033[0m\n"
-else
-	printf "\033[32;1mInstalled old sing-box-tiny or not install sing-box-tiny. Reinstall sing-box-tiny...\033[0m\n"
 manage_package "podkop" "enable" "stop"
-	opkg remove --force-removal-of-dependent-packages "sing-box-tiny"
+
-	checkPackageAndInstall "sing-box-tiny" "1"
+PACKAGE="sing-box"
+REQUIRED_VERSION="1.11.15"
+
+INSTALLED_VERSION=$(opkg list-installed | grep "^$PACKAGE" | cut -d ' ' -f 3)
+if [ -n "$INSTALLED_VERSION" ] && [ "$INSTALLED_VERSION" != "$REQUIRED_VERSION" ]; then
+    echo "Version package $PACKAGE not equal $REQUIRED_VERSION. Removed packages..."
+	opkg remove --force-removal-of-dependent-packages $PACKAGE
 fi
 
-opkg upgrade amneziawg-tools
+INSTALLED_VERSION=$(opkg list-installed | grep "^$PACKAGE")
-opkg upgrade kmod-amneziawg
+if [ -z "$INSTALLED_VERSION" ]; then
-opkg upgrade luci-app-amneziawg
+	PACK_NAME="sing-box"
+	AWG_DIR="/tmp/$PACK_NAME"
+	SINGBOX_FILENAME="sing-box_1.11.15_openwrt_aarch64_cortex-a53.ipk"
+	BASE_URL="https://github.com/SagerNet/sing-box/releases/download/v1.11.15/"
+	DOWNLOAD_URL="${BASE_URL}${SINGBOX_FILENAME}"
+	mkdir -p "$AWG_DIR"
+	#echo $DOWNLOAD_URL
+
+	wget -O "$AWG_DIR/$SINGBOX_FILENAME" "$DOWNLOAD_URL"
+	if [ $? -eq 0 ]; then
+		echo "$PACK_NAME file downloaded successfully"
+	else
+		echo "Error downloading $PACK_NAME. Please, install $PACK_NAME manually and run the script again"
+		exit 1
+	fi
+			
+	opkg install "$AWG_DIR/$SINGBOX_FILENAME"
+	if [ $? -eq 0 ]; then
+		echo "$PACK_NAME file installing successfully"
+	else
+		echo "Error installing $PACK_NAME. Please, install $PACK_NAME manually and run the script again"
+		exit 1
+	fi
+fi
+###########
 
 opkg upgrade zapret
 opkg upgrade luci-app-zapret
@@ -653,31 +676,32 @@ else
 	[ -f /etc/config/dhcp-opkg ] && cp /etc/config/dhcp /etc/config/dhcp-old && mv /etc/config/dhcp-opkg /etc/config/dhcp
 fi
 
+#проверяем установлени ли пакет https-dns-proxy
+if opkg list-installed | grep -q https-dns-proxy; then
+	echo "Packet https-dns-proxy not installed..."
+else
+	echo "Delete packet https-dns-proxy..."
+	opkg remove https-dns-proxy
+fi
+
 printf "Setting confdir dnsmasq\n"
 uci set dhcp.@dnsmasq[0].confdir='/tmp/dnsmasq.d'
 uci commit dhcp
 
 DIR="/etc/config"
-DIR_BACKUP="/root/backup5"
+DIR_BACKUP="/root/backup4"
 config_files="network
 firewall
 doh-proxy
 zapret
 dhcp
-dns-failsafe-proxy
+dns-failsafe-proxy"
-stubby"
+URL="https://raw.githubusercontent.com/routerich/RouterichAX3000_configs/refs/heads/beta_zapret"
-URL="https://raw.githubusercontent.com/routerich/RouterichAX3000_configs/refs/heads/podkop07"
 
 checkPackageAndInstall "luci-app-dns-failsafe-proxy" "1"
 checkPackageAndInstall "luci-i18n-stubby-ru" "1"
 checkPackageAndInstall "luci-i18n-doh-proxy-ru" "1"
 
-#проверяем установлени ли пакет https-dns-proxy
-if opkg list-installed | grep -q https-dns-proxy; then
-	echo "Delete packet https-dns-proxy..."
-	opkg remove --force-removal-of-dependent-packages "https-dns-proxy"
-fi
-
 if [ ! -d "$DIR_BACKUP" ]
 then
     echo "Backup files..."
@@ -690,7 +714,7 @@ then
 
 	for file in $config_files
 	do
-		if [ "$file" == "doh-proxy" ] || [ "$file" == "dns-failsafe-proxy" ] || [ "$file" == "stubby" ]
+		if [ "$file" == "doh-proxy" ] || [ "$file" == "dns-failsafe-proxy" ]
 		then 
 		  wget -O "$DIR/$file" "$URL/config_files/$file" 
 		fi
@@ -773,13 +797,12 @@ opkg upgrade luci-app-zapret
 manage_package "zapret" "enable" "start"
 wget -O "/etc/config/zapret" "$URL/config_files/zapret"
 wget -O "/opt/zapret/ipset/zapret-hosts-user.txt" "$URL/config_files/zapret-hosts-user.txt"
-wget -O "/opt/zapret/ipset/zapret-hosts-user-exclude.txt" "$URL/config_files/zapret-hosts-user-exclude.txt"
 wget -O "/opt/zapret/init.d/openwrt/custom.d/50-stun4all" "$URL/config_files/50-stun4all"
+wget -O "/opt/zapret/init.d/openwrt/custom.d/50-wg4all" "$URL/config_files/50-wg4all"
 chmod +x "/opt/zapret/init.d/openwrt/custom.d/50-stun4all"
-sh /opt/zapret/sync_config.sh
+chmod +x "/opt/zapret/init.d/openwrt/custom.d/50-wg4all"
 
 manage_package "podkop" "enable" "stop"
-manage_package "youtubeUnblock" "disable" "stop"
 service zapret restart
 
 isWorkZapret=0
@@ -827,7 +850,7 @@ fi
 isWorkOperaProxy=0
 printf "\033[32;1mCheck opera proxy...\033[0m\n"
 service sing-box restart
-curl --proxy http://127.0.0.1:18080 ipinfo.io/ip
+sing-box tools fetch ifconfig.co -D /etc/sing-box/
 if [ $? -eq 0 ]; then
 	printf "\033[32;1mOpera proxy well work...\033[0m\n"
 	isWorkOperaProxy=1
@@ -1015,11 +1038,6 @@ do
 		uci set network.${INTERFACE_NAME}.awg_h2=$H2
 		uci set network.${INTERFACE_NAME}.awg_h3=$H3
 		uci set network.${INTERFACE_NAME}.awg_h4=$H4
-		if [ -z "$I1" ] 
-		then
-			I1="<b 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>"
-		fi
-		uci set network.${INTERFACE_NAME}.awg_i1="$I1"
 		uci set network.${INTERFACE_NAME}.nohostroute='1'
 		
 		uci set network.@${CONFIG_NAME}[-1].description="${INTERFACE_NAME}_peer"
@@ -1084,13 +1102,11 @@ do
 
 		if [ "$is_manual_input_parameters" = "n" ]; then
 			I=0
-			WARP_ENDPOINT_HOSTS="engage.cloudflareclient.com 162.159.192.1 162.159.192.2 162.159.192.4 162.159.195.1 162.159.195.4 188.114.96.1 188.114.96.23 188.114.96.50 188.114.96.81"
+			WARP_ENDPOINT="engage.cloudflareclient.com:500 engage.cloudflareclient.com:1701 engage.cloudflareclient.com:2408 engage.cloudflareclient.com:3138 engage.cloudflareclient.com:4500 162.159.192.4:500 162.159.192.4:1701 162.159.192.4:2408 162.159.192.4:3138 162.159.192.4:4500"
-			WARP_ENDPOINT_PORTS="500 1701 2408 3138 4500"
+			for element in $WARP_ENDPOINT; do
-			for element in $WARP_ENDPOINT_HOSTS; do
-				EndpointIP="$element"
-				for element2 in $WARP_ENDPOINT_PORTS; do
 				I=$(( $I + 1 ))
-					EndpointPort="$element2"
+				EndpointIP="${element%%:*}"
+				EndpointPort="${element##*:}"
 				uci set network.@${CONFIG_NAME}[-1].endpoint_host=$EndpointIP
 				uci set network.@${CONFIG_NAME}[-1].endpoint_port=$EndpointPort
 				uci commit network
@@ -1098,25 +1114,20 @@ do
 				ifdown $INTERFACE_NAME
 				# Включаем интерфейс
 				ifup $INTERFACE_NAME
-					printf "\033[33;1mIter #$I: Check Endpoint WARP $element:$element2. Wait up AWG WARP 10 second...\033[0m\n"
+				printf "\033[33;1mIter #$I: Check Endpoint WARP $element. Wait up AWG WARP 10 second...\033[0m\n"
 				sleep 10
 				
 				pingAddress="8.8.8.8"
 				if ping -c 1 -I $INTERFACE_NAME $pingAddress >/dev/null 2>&1
 				then
-						printf "\033[32;1m	Endpoint WARP $element:$element2 work...\033[0m\n"
+					printf "\033[32;1m	Endpoint WARP $element work...\033[0m\n"
 					isExit=1
 					break
 				else
-						printf "\033[31;1m	Endpoint WARP $element:$element2 not work...\033[0m\n"
+					printf "\033[31;1m	Endpoint WARP $element not work...\033[0m\n"
 					isExit=0
 				fi
 			done
-				if [ "$isExit" = "1" ]
-				then
-					break
-				fi
-			done
 		else
 			# Отключаем интерфейс
 			ifdown $INTERFACE_NAME
@@ -1182,7 +1193,7 @@ service odhcpd restart
 
 path_podkop_config="/etc/config/podkop"
 path_podkop_config_backup="/root/podkop"
-URL="https://raw.githubusercontent.com/routerich/RouterichAX3000_configs/refs/heads/podkop07"
+URL="https://raw.githubusercontent.com/routerich/RouterichAX3000_configs/refs/heads/beta_zapret"
 
 messageComplete=""
 
@@ -1269,7 +1280,7 @@ case $varByPass in
 esac
 
 PACKAGE="podkop"
-REQUIRED_VERSION="v0.7.10-r1"
+REQUIRED_VERSION="v0.4.11-r1"
 
 INSTALLED_VERSION=$(opkg list-installed | grep "^$PACKAGE" | cut -d ' ' -f 3)
 if [ -n "$INSTALLED_VERSION" ] && [ "$INSTALLED_VERSION" != "$REQUIRED_VERSION" ]; then
@@ -1295,9 +1306,9 @@ else
 	if [ "$is_install_podkop" = "y" ] || [ "$is_install_podkop" = "Y" ]; then
 		DOWNLOAD_DIR="/tmp/podkop"
 		mkdir -p "$DOWNLOAD_DIR"
-		podkop_files="podkop-v0.7.10-r1-all.ipk
+		podkop_files="podkop_v0.4.11-r1_all.ipk
-			luci-app-podkop-v0.7.10-r1-all.ipk
+			luci-app-podkop_v0.4.11-r1_all.ipk
-			luci-i18n-podkop-ru-0.7.10.ipk"
+			luci-i18n-podkop-ru_0.4.11.ipk"
 		for file in $podkop_files
 		do
 			echo "Download $file..."