Опишите проблему
Не знаю связано или нет но после обновления прошивки до KeeneticOS 4.2 Beta 4 перестало работать
Модель маршрутизатора
kn 1011
Провайдер
Укажите вашего провайдера и тип подключения (ppp/ethernet/...)
Rostelecom
Ethernet / PPPoE
Выполните команды и приложите их выводopkg info nfqws-keenetic
Package: nfqws-keenetic
Version: 2.1.2
Depends: iptables
Status: install user installed
Section: net
Architecture: all
Size: 469008
Filename: nfqws-keenetic_2.1.2_all_entware.ipk
Conffiles:
/opt/etc/nfqws/nfqws.conf 7cd5e4e527f4418d42987544b6e7003a83e9face665739c2d967d1a8b6042e16
/opt/etc/nfqws/user.list 209e09786d508f45a63f72596d728697a9c70c5bbfabd8d3fc1bf267307d4084
/opt/etc/nfqws/auto.list e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
/opt/etc/nfqws/exclude.list 57b5e33196908b3b76004679bb800bcf2eb5a41ee82e4d5048c6fd32a0524834
Installed-Time: 1726593047
/opt/etc/init.d/S51nfqws restart
Stopping NFQWS service...
Loading hostlist /opt/etc/nfqws/auto.list
loading plain text list
Loaded 8 hosts from /opt/etc/nfqws/auto.list
Loading hostlist /opt/etc/nfqws/user.list
loading plain text list
Loaded 16 hosts from /opt/etc/nfqws/user.list
Loading hostlist /opt/etc/nfqws/exclude.list
loading plain text list
Loaded 22 hosts from /opt/etc/nfqws/exclude.list
Loading hostlist /opt/etc/nfqws/auto.list
loading plain text list
Loaded 8 hosts from /opt/etc/nfqws/auto.list
Loading hostlist /opt/etc/nfqws/user.list
loading plain text list
Loaded 16 hosts from /opt/etc/nfqws/user.list
Loading hostlist /opt/etc/nfqws/exclude.list
loading plain text list
Loaded 22 hosts from /opt/etc/nfqws/exclude.list
Started NFQWS service
cat /opt/etc/nfqws/nfqws.conf
# Provider network interface, e.g. eth3
# You can specify multiple interfaces separated by space, e.g. ISP_INTERFACE="ppp0"
ISP_INTERFACE="ppp0"
# All arguments here: https://github.com/bol-van/zapret (search for `nfqws` on the page)
# Try different variants
NFQWS_ARGS="--dpi-desync=disorder2 --dpi-desync-split-pos=1 --dpi-desync-ttl=6 --dpi-desync-fooling=md5sig,badseq --wssize=1:6"
#NFQWS_ARGS="--dpi-desync=fake,disorder2 --dpi-desync-split-pos=1 --dpi-desync-ttl=12 --dpi-desync-fooling=badseq"
#NFQWS_ARGS="--dpi-desync=fake,disorder2 --dpi-desync-split-pos=1 --dpi-desync-ttl=6 --dpi-desync-fooling=md5sig,badsum"
#NFQWS_ARGS="--dpi-desync=fake,split2 --dpi-desync-ttl=0 --dpi-desync-fooling=md5sig"
#NFQWS_ARGS="--dpi-desync=fake,split --dpi-desync-ttl=7 --dpi-desync-fooling=md5sig"
NFQWS_ARGS_QUIC="--dpi-desync=fake --dpi-desync-repeats=6 --dpi-desync-cutoff=d4 --dpi-desync-fooling=badsum"
# auto - automatically detects blocked resources and adds them to the auto.list
NFQWS_EXTRA_ARGS="--hostlist=/opt/etc/nfqws/user.list --hostlist-auto=/opt/etc/nfqws/auto.list --hostlist-auto-debug=/opt/var/log/nfqws.log --hostlist-exclude=/opt/etc/nfqws/exclude.list"
# list - applies rules only to domains in the user.list
#NFQWS_EXTRA_ARGS="--hostlist=/opt/etc/nfqws/user.list"
# all - applies rules to all traffic except domains from exclude.list
#NFQWS_EXTRA_ARGS="--hostlist-exclude=/opt/etc/nfqws/exclude.list"
# IPv6 support
IPV6_ENABLED=1
# HTTP support
HTTP_ENABLED=0
# QUIC support
QUIC_ENABLED=1
# Syslog logging level (0 - silent, 1 - debug)
LOG_LEVEL=0
NFQUEUE_NUM=200
NFQUEUE_NUM_QUIC=210
ps | grep nfqws
2891 nobody 560 S /opt/usr/bin/nfqws --daemon --user=nobody --qnum=200
2893 nobody 560 S /opt/usr/bin/nfqws --daemon --user=nobody --qnum=210
3033 root 5400 S grep nfqws
iptables-save | grep 200
-A POSTROUTING -o ppp0 -p tcp -m tcp --dport 443 -m connbytes --connbytes 1:8 --connbytes-mode packets --connbytes-dir original -m mark ! --mark 0x40000000/0x40000000 -j NFQUEUE --queue-num 200 --queue-bypass
Опишите проблему Не знаю связано или нет но после обновления прошивки до KeeneticOS 4.2 Beta 4 перестало работать
Модель маршрутизатора kn 1011
Провайдер Укажите вашего провайдера и тип подключения (ppp/ethernet/...) Rostelecom Ethernet / PPPoE
Выполните команды и приложите их вывод
opkg info nfqws-keenetic
/opt/etc/init.d/S51nfqws restart
cat /opt/etc/nfqws/nfqws.conf
ps | grep nfqws
iptables-save | grep 200
sysctl net.netfilter.nf_conntrack_checksum