him411/UA3F
1
0
Fork 0
mirror of https://github.com/SunBK201/UA3F.git synced 2025-12-16 08:44:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: ignore zero ipid packet

Browse Source
This commit is contained in:
SunBK201 2025-12-10 18:18:04 +08:00
parent 420311ca0c
commit 9de776f21b
1 changed files with 16 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
src/internal/server/netlink/nftables.go
View File

@ -32,7 +32,7 @@ func (s *Server) nftSetup() error {
s.NftHookTCPSyn(tx, s.Nftable)
}
if s.cfg.SetIPID {
s.NftSetIP(tx, s.Nftable)
s.NftHookIP(tx, s.Nftable)
}
if err := nft.Run(context.TODO(), tx); err != nil {
@ -135,7 +135,7 @@ func (s *Server) NftHookTCPSyn(tx *knftables.Transaction, table *knftables.Table
})
}
func (s *Server) NftSetIP(tx *knftables.Transaction, table *knftables.Table) {
func (s *Server) NftHookIP(tx *knftables.Transaction, table *knftables.Table) {
chain := &knftables.Chain{
Name: "HELPER_QUEUE",
Table: table.Name,
@ -143,15 +143,25 @@ func (s *Server) NftSetIP(tx *knftables.Transaction, table *knftables.Table) {
Hook: knftables.PtrTo(knftables.PostroutingHook),
Priority: knftables.PtrTo(knftables.ManglePriority),
}
rule := &knftables.Rule{
tx.Add(chain)
if s.cfg.SetTCPInitialWindow || s.cfg.DelTCPTimestamp {
tx.Add(&knftables.Rule{
Chain: chain.Name,
Rule: knftables.Concat(
"tcp flags syn",
fmt.Sprintf("counter queue num %d bypass", s.nfqServer.QueueNum),
),
})
}
tx.Add(&knftables.Rule{
Chain: chain.Name,
Rule: knftables.Concat(
"ip id != 0",
"meta l4proto tcp",
fmt.Sprintf("counter queue num %d bypass", s.nfqServer.QueueNum),
),
}
tx.Add(chain)
tx.Add(rule)
})
}
// unused currently