diff --git a/podkop/files/usr/bin/podkop b/podkop/files/usr/bin/podkop index 6cd1f90..7422e35 100755 --- a/podkop/files/usr/bin/podkop +++ b/podkop/files/usr/bin/podkop @@ -282,8 +282,6 @@ create_nft_rules() { log "Create nft table" nft_create_table "$NFT_TABLE_NAME" - nft_init_interfaces_set - log "Create localv4 set" nft_create_ipv4_set "$NFT_TABLE_NAME" "$NFT_LOCALV4_SET_NAME" nft add element inet "$NFT_TABLE_NAME" localv4 '{ @@ -325,7 +323,7 @@ create_nft_rules() { nft add rule inet "$NFT_TABLE_NAME" mangle_output ip daddr "@$NFT_COMMON_SET_NAME" meta l4proto tcp meta mark set 0x105 counter nft add rule inet "$NFT_TABLE_NAME" mangle_output ip daddr "@$NFT_COMMON_SET_NAME" meta l4proto udp meta mark set 0x105 counter nft add rule inet "$NFT_TABLE_NAME" mangle_output ip daddr "$SB_FAKEIP_INET4_RANGE" meta l4proto tcp meta mark set 0x105 counter - nft add rule inet "$NFT_TABLE_NAME" mangle_output ip daddr "$SB_FAKEIP_INET4_RANGE" meta l4proto tcp meta mark set 0x105 counter + nft add rule inet "$NFT_TABLE_NAME" mangle_output ip daddr "$SB_FAKEIP_INET4_RANGE" meta l4proto udp meta mark set 0x105 counter local exclude_ntp config_get_bool exclude_ntp "settings" "exclude_ntp" "0"