Mirror/zapret
1
0
Fork 0
mirror of https://github.com/bol-van/zapret.git synced 2026-02-03 08:10:34 +03:00
Code Issues Packages Projects Releases Wiki Activity

readme: raw_before_defrag notices for traditional linux

Browse Source
This commit is contained in:
bol-van
2022-02-05 19:36:18 +03:00
parent 64ca3bf785
commit 1adad1cf77
2 changed files with 11 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
docs/readme.eng.md
View File

@@ -427,7 +427,13 @@ and its dependency nf_defrag_ipv6 helps but this severely impacts functionality.
Kernels 4.16+ exclude from defragmentation untracked packets.
See `blockcheck.sh` code for example.
Sometimes it's required to load `ip6table_raw` kernel module with parameter raw_before_defrag=1.
In openwrt module parameters are specified after module names separated by space in files located in `/etc/modules.d`
In openwrt module parameters are specified after module names separated by space in files located in `/etc/modules.d`.
In traditional linux first check if the problem actually exists using tcpdump or wireshark.
If it does check whether iptables-legacy or iptables-nft are used. If legacy create the file
/etc/modprobe.d/ip6table_raw.conf with the following content :
```
options ip6table_raw raw_before_defrag=1
```
It must be done manually, `blockcheck.sh` cannot auto fix this for you.
## tpws