diff --git a/youtubeUnblock/files/nftables.d/537-youtubeUnblock.nft b/youtubeUnblock/files/nftables.d/537-youtubeUnblock.nft index a3a4687..98d819a 100644 --- a/youtubeUnblock/files/nftables.d/537-youtubeUnblock.nft +++ b/youtubeUnblock/files/nftables.d/537-youtubeUnblock.nft @@ -2,5 +2,6 @@ # This file will be applied automatically for nftables add chain inet fw4 youtubeUnblock { type filter hook postrouting priority mangle - 1; policy accept; } -add rule inet fw4 youtubeUnblock meta l4proto { tcp, udp } th dport 443 ct original packets < 20 counter queue num 537 bypass +add rule inet fw4 youtubeUnblock tcp dport 443 ct original packets < 20 counter queue num 537 bypass +add rule inet fw4 youtubeUnblock meta l4proto udp ct original packets < 9 counter queue num 537 bypass insert rule inet fw4 output mark and 0x8000 == 0x8000 counter accept diff --git a/youtubeUnblockEntware/files/S51youtubeUnblock b/youtubeUnblockEntware/files/S51youtubeUnblock index 2f8cd52..47b60c8 100755 --- a/youtubeUnblockEntware/files/S51youtubeUnblock +++ b/youtubeUnblockEntware/files/S51youtubeUnblock @@ -94,14 +94,14 @@ _iptables() firewall_start_v4() { iptables -t mangle -N YOUTUBEUNBLOCK >/dev/null 2>&1 _iptables iptables -A YOUTUBEUNBLOCK -t mangle -p tcp --dport 443 -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:19 -j NFQUEUE --queue-num 537 --queue-bypass - _iptables iptables -A YOUTUBEUNBLOCK -t mangle -p udp --dport 443 -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:19 -j NFQUEUE --queue-num 537 --queue-bypass + _iptables iptables -A YOUTUBEUNBLOCK -t mangle -p udp -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:8 -j NFQUEUE --queue-num 537 --queue-bypass _iptables iptables -A POSTROUTING -t mangle -j YOUTUBEUNBLOCK _iptables iptables -I OUTPUT -m mark --mark 32768/32768 -j ACCEPT } firewall_stop_v4() { _iptables iptables -D YOUTUBEUNBLOCK -t mangle -p tcp --dport 443 -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:19 -j NFQUEUE --queue-num 537 --queue-bypass - _iptables iptables -D YOUTUBEUNBLOCK -t mangle -p udp --dport 443 -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:19 -j NFQUEUE --queue-num 537 --queue-bypass + _iptables iptables -D YOUTUBEUNBLOCK -t mangle -p udp -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:8 -j NFQUEUE --queue-num 537 --queue-bypass _iptables iptables -D POSTROUTING -t mangle -j YOUTUBEUNBLOCK _iptables iptables -D OUTPUT -m mark --mark 32768/32768 -j ACCEPT iptables -t mangle -X YOUTUBEUNBLOCK >/dev/null 2>&1 @@ -114,7 +114,7 @@ firewall_start_v6() { ip6tables -t mangle -N YOUTUBEUNBLOCK >/dev/null 2>&1 _iptables ip6tables -A YOUTUBEUNBLOCK -t mangle -p tcp --dport 443 -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:19 -j NFQUEUE --queue-num 537 --queue-bypass - _iptables ip6tables -A YOUTUBEUNBLOCK -t mangle -p udp --dport 443 -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:19 -j NFQUEUE --queue-num 537 --queue-bypass + _iptables ip6tables -A YOUTUBEUNBLOCK -t mangle -p udp -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:8 -j NFQUEUE --queue-num 537 --queue-bypass _iptables ip6tables -A POSTROUTING -t mangle -j YOUTUBEUNBLOCK _iptables ip6tables -I OUTPUT -m mark --mark 32768/32768 -j ACCEPT } @@ -125,7 +125,7 @@ firewall_stop_v6() { fi _iptables ip6tables -D YOUTUBEUNBLOCK -t mangle -p tcp --dport 443 -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:19 -j NFQUEUE --queue-num 537 --queue-bypass - _iptables ip6tables -D YOUTUBEUNBLOCK -t mangle -p udp --dport 443 -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:19 -j NFQUEUE --queue-num 537 --queue-bypass + _iptables ip6tables -D YOUTUBEUNBLOCK -t mangle -p udp -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:8 -j NFQUEUE --queue-num 537 --queue-bypass _iptables ip6tables -D POSTROUTING -t mangle -j YOUTUBEUNBLOCK _iptables ip6tables -D OUTPUT -m mark --mark 32768/32768 -j ACCEPT ip6tables -t mangle -X YOUTUBEUNBLOCK >/dev/null 2>&1