mirror of
https://github.com/bol-van/zapret.git
synced 2025-05-25 11:40:49 +05:00
doc works
This commit is contained in:
parent
696167509a
commit
4572799750
@ -284,6 +284,7 @@ Fakes are separate generated by nfqws packets carrying false information for DPI
|
|||||||
This mode may break NAT and may not work with iptables if masquerade is used, even from the router itself.
|
This mode may break NAT and may not work with iptables if masquerade is used, even from the router itself.
|
||||||
Works with nftables properly. Likely requires external IP address (some ISPs pass these packets through their NAT).
|
Works with nftables properly. Likely requires external IP address (some ISPs pass these packets through their NAT).
|
||||||
* **autottl** tries to automatically guess hop count to the server and compute TTL by adding some delta value that can be positive or negative.
|
* **autottl** tries to automatically guess hop count to the server and compute TTL by adding some delta value that can be positive or negative.
|
||||||
|
Positive deltas must be preceeded by unary `+` sign. Deltas without any unary sign are treated negative for old versions compatibility reasons.
|
||||||
This tech relies on well known TTL default values used by OS : 64,128,255.
|
This tech relies on well known TTL default values used by OS : 64,128,255.
|
||||||
nfqws needs first incoming packet to see it's TTL. You must redirect it too.
|
nfqws needs first incoming packet to see it's TTL. You must redirect it too.
|
||||||
If resulting value TTL is outside the range (min,max) then its normalized to min or max.
|
If resulting value TTL is outside the range (min,max) then its normalized to min or max.
|
||||||
|
Loading…
x
Reference in New Issue
Block a user