Mirror/youtubeUnblock
1
0
Fork 0
mirror of https://github.com/Waujito/youtubeUnblock.git synced 2025-12-11 14:06:46 +03:00
Code Issues Packages Projects Releases Wiki Activity

Update firewall rules

Browse Source 
Support for all UDP ports
This commit is contained in:
Vadim Vetrov
2024-12-20 00:33:27 +03:00
parent 0a989c662a
commit add9a58af1
2 changed files with 6 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
youtubeUnblock/files/nftables.d/537-youtubeUnblock.nft
View File

@@ -2,5 +2,6 @@
# This file will be applied automatically for nftables # This file will be applied automatically for nftables
add chain inet fw4 youtubeUnblock { type filter hook postrouting priority mangle - 1; policy accept; } add chain inet fw4 youtubeUnblock { type filter hook postrouting priority mangle - 1; policy accept; }
add rule inet fw4 youtubeUnblock meta l4proto { tcp, udp } th dport 443 ct original packets < 20 counter queue num 537 bypass add rule inet fw4 youtubeUnblock tcp dport 443 ct original packets < 20 counter queue num 537 bypass
add rule inet fw4 youtubeUnblock meta l4proto udp ct original packets < 9 counter queue num 537 bypass
insert rule inet fw4 output mark and 0x8000 == 0x8000 counter accept insert rule inet fw4 output mark and 0x8000 == 0x8000 counter accept

8
youtubeUnblockEntware/files/S51youtubeUnblock
View File

@@ -94,14 +94,14 @@ _iptables()
firewall_start_v4() { firewall_start_v4() {
iptables -t mangle -N YOUTUBEUNBLOCK >/dev/null 2>&1 iptables -t mangle -N YOUTUBEUNBLOCK >/dev/null 2>&1
_iptables iptables -A YOUTUBEUNBLOCK -t mangle -p tcp --dport 443 -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:19 -j NFQUEUE --queue-num 537 --queue-bypass _iptables iptables -A YOUTUBEUNBLOCK -t mangle -p tcp --dport 443 -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:19 -j NFQUEUE --queue-num 537 --queue-bypass
_iptables iptables -A YOUTUBEUNBLOCK -t mangle -p udp --dport 443 -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:19 -j NFQUEUE --queue-num 537 --queue-bypass _iptables iptables -A YOUTUBEUNBLOCK -t mangle -p udp -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:8 -j NFQUEUE --queue-num 537 --queue-bypass
_iptables iptables -A POSTROUTING -t mangle -j YOUTUBEUNBLOCK _iptables iptables -A POSTROUTING -t mangle -j YOUTUBEUNBLOCK
_iptables iptables -I OUTPUT -m mark --mark 32768/32768 -j ACCEPT _iptables iptables -I OUTPUT -m mark --mark 32768/32768 -j ACCEPT
} }
firewall_stop_v4() { firewall_stop_v4() {
_iptables iptables -D YOUTUBEUNBLOCK -t mangle -p tcp --dport 443 -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:19 -j NFQUEUE --queue-num 537 --queue-bypass _iptables iptables -D YOUTUBEUNBLOCK -t mangle -p tcp --dport 443 -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:19 -j NFQUEUE --queue-num 537 --queue-bypass
_iptables iptables -D YOUTUBEUNBLOCK -t mangle -p udp --dport 443 -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:19 -j NFQUEUE --queue-num 537 --queue-bypass _iptables iptables -D YOUTUBEUNBLOCK -t mangle -p udp -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:8 -j NFQUEUE --queue-num 537 --queue-bypass
_iptables iptables -D POSTROUTING -t mangle -j YOUTUBEUNBLOCK _iptables iptables -D POSTROUTING -t mangle -j YOUTUBEUNBLOCK
_iptables iptables -D OUTPUT -m mark --mark 32768/32768 -j ACCEPT _iptables iptables -D OUTPUT -m mark --mark 32768/32768 -j ACCEPT
iptables -t mangle -X YOUTUBEUNBLOCK >/dev/null 2>&1 iptables -t mangle -X YOUTUBEUNBLOCK >/dev/null 2>&1
@@ -114,7 +114,7 @@ firewall_start_v6() {
ip6tables -t mangle -N YOUTUBEUNBLOCK >/dev/null 2>&1 ip6tables -t mangle -N YOUTUBEUNBLOCK >/dev/null 2>&1
_iptables ip6tables -A YOUTUBEUNBLOCK -t mangle -p tcp --dport 443 -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:19 -j NFQUEUE --queue-num 537 --queue-bypass _iptables ip6tables -A YOUTUBEUNBLOCK -t mangle -p tcp --dport 443 -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:19 -j NFQUEUE --queue-num 537 --queue-bypass
_iptables ip6tables -A YOUTUBEUNBLOCK -t mangle -p udp --dport 443 -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:19 -j NFQUEUE --queue-num 537 --queue-bypass _iptables ip6tables -A YOUTUBEUNBLOCK -t mangle -p udp -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:8 -j NFQUEUE --queue-num 537 --queue-bypass
_iptables ip6tables -A POSTROUTING -t mangle -j YOUTUBEUNBLOCK _iptables ip6tables -A POSTROUTING -t mangle -j YOUTUBEUNBLOCK
_iptables ip6tables -I OUTPUT -m mark --mark 32768/32768 -j ACCEPT _iptables ip6tables -I OUTPUT -m mark --mark 32768/32768 -j ACCEPT
} }
@@ -125,7 +125,7 @@ firewall_stop_v6() {
fi fi
_iptables ip6tables -D YOUTUBEUNBLOCK -t mangle -p tcp --dport 443 -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:19 -j NFQUEUE --queue-num 537 --queue-bypass _iptables ip6tables -D YOUTUBEUNBLOCK -t mangle -p tcp --dport 443 -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:19 -j NFQUEUE --queue-num 537 --queue-bypass
_iptables ip6tables -D YOUTUBEUNBLOCK -t mangle -p udp --dport 443 -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:19 -j NFQUEUE --queue-num 537 --queue-bypass _iptables ip6tables -D YOUTUBEUNBLOCK -t mangle -p udp -m connbytes --connbytes-dir original --connbytes-mode packets --connbytes 0:8 -j NFQUEUE --queue-num 537 --queue-bypass
_iptables ip6tables -D POSTROUTING -t mangle -j YOUTUBEUNBLOCK _iptables ip6tables -D POSTROUTING -t mangle -j YOUTUBEUNBLOCK
_iptables ip6tables -D OUTPUT -m mark --mark 32768/32768 -j ACCEPT _iptables ip6tables -D OUTPUT -m mark --mark 32768/32768 -j ACCEPT
ip6tables -t mangle -X YOUTUBEUNBLOCK >/dev/null 2>&1 ip6tables -t mangle -X YOUTUBEUNBLOCK >/dev/null 2>&1