From 9eb6bb417b619cfac471bcd6de2687ccf9494cab Mon Sep 17 00:00:00 2001 From: Zxilly Date: Fri, 1 Sep 2023 00:22:54 +0800 Subject: [PATCH] fix: should set ct mark --- openwrt/files/ua2f.init | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/openwrt/files/ua2f.init b/openwrt/files/ua2f.init index e070aff..1fd6805 100755 --- a/openwrt/files/ua2f.init +++ b/openwrt/files/ua2f.init @@ -71,9 +71,9 @@ setup_firewall() { tcp dport 22 counter return comment "!ua2f: bypass SSH"; $([ "$handle_tls" -eq "1" ] || echo 'tcp dport 443 counter return comment "!ua2f: bypass HTTPS";') - tcp dport 80 counter mark set 44; - meta mark 43 counter return comment "!ua2f: bypass non-http stream"; - tcp dport 80 counter queue num 10010 bypass; + tcp dport 80 counter ct mark set 44; + ct mark 43 counter return comment "!ua2f: bypass non-http stream"; + ct original counter queue num 10010 bypass; } } EOF