Anonym-tsk / nfqws-keenetic

MIT License
639 stars 50 forks source link

[BUG] не запускается после установки #17

Closed gudvindll closed 3 months ago

gudvindll commented 3 months ago

Опишите проблему Установил все по инструкции. Пробовал в качестве интерфейса провайдера и eth3 и ppp0

Модель маршрутизатора Keenetic Peak (KN-2710) Прошивка 4.1.7

Провайдер ppp

Выполните команды и приложите их вывод /opt/etc/init.d/S51nfqws restart

~ # /opt/etc/init.d/S51nfqws restart
Service NFQWS is not running
xt_multiport.ko loaded
xt_NFQUEUE.ko loaded
Loading hostlist /opt/etc/nfqws/auto.list
loading plain text list
Loaded 0 hosts from /opt/etc/nfqws/auto.list
Loading hostlist /opt/etc/nfqws/user.list
loading plain text list
Loaded 16 hosts from /opt/etc/nfqws/user.list
Loading hostlist /opt/etc/nfqws/exclude.list
loading plain text list
Loaded 14 hosts from /opt/etc/nfqws/exclude.list
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
ip6tables: No chain/target/match by that name.
ip6tables: No chain/target/match by that name.
ip6tables: No chain/target/match by that name.
Started NFQWS service
~ #

cat /opt/etc/nfqws/nfqws.conf

~ # cat /opt/etc/nfqws/nfqws.conf
# Provider network interface, e.g. eth3
# You can specify multiple interfaces separated by space, e.g. ISP_INTERFACE="eth3 nwg1"
ISP_INTERFACE="ppp0"

# All arguments here: https://github.com/bol-van/zapret (search for `nfqws` on the page)
# Try different variants, e.g. `--dpi-desync-fooling=badsum` or `--dpi-desync-fooling=md5sig,badsum`
NFQWS_ARGS="--dpi-desync=fake,disorder2 --dpi-desync-split-pos=1 --dpi-desync-ttl=6 --dpi-desync-fooling=md5sig"
NFQWS_EXTRA_ARGS="--hostlist=/opt/etc/nfqws/user.list --hostlist-auto=/opt/etc/nfqws/auto.list --hostlist-auto-debug=/opt/var/log/nfqws.log --hostlist-exclude=/opt/etc/nfqws/exclude.list"

NFQUEUE_NUM=200
IPV6_ENABLED=1
PIDFILE=/opt/var/run/nfqws.pid

ps | grep nfqws

~ # ps | grep nfqws
10558 root      5976 S    grep nfqws
~ #

iptables-save | grep 200

~ # iptables-save | grep 200
-A _NDM_IP_PROTECT -p tcp -m tcp --dport 8200 -j _NDM_SL_PROTECT
~ #

sysctl net.netfilter.nf_conntrack_checksum

~ # sysctl net.netfilter.nf_conntrack_checksum
net.netfilter.nf_conntrack_checksum = 0
~ #
Anonym-tsk commented 3 months ago

Установите пакет Netfilter

gudvindll commented 3 months ago

image нет такого пакета

Anonym-tsk commented 3 months ago

Сначала установите пакет IPv6, потом он появится