Closed Paxani4ek closed 2 years ago
cyborg-one
commented
2 years ago Run the commands on the command line and send the output of each one. Run commands with the nfqttl module installed, mobile data enabled, and hotspot enabled. su ip -4 route list scope global ip -4 addr list iptables -t mangle -vnL
Restart nfqttl with commands, open some site then send the output from the command line. pkill -9 nfqttl /data/adb/modules/nfqttl/nfqttl -u
Paxani4ek
commented
2 years ago 2.1.2 It seems to work, I will still test it. 2.8 did not distribute much, burned the distribution to the operator, then the entire Internet disappeared, and the mobile and via Wi-Fi stopped working. I have a module for MTS, it works fine on op7pro a 11, but it doesn't work on the new one xiaomi 11ultra id=nfqttl_v3 name=nfqttl version=v3 versionCode=3 author=Cyborg-one description=The module allows you to bypass the blocking of Internet distribution on most operators, including those that send ttl = 1 , such as MTS after the spring of 2020. Support is required from the kernel side of the ttl change technology, or nfqueue. If there is definitely no such support, the module will generate an error during installation. Change ttl for ipv4 protocol. This module set TTL 64 transition packet (iptables -t mangle -A FORWARD -j TTL --ttl-set 64). If kernel do not support TTL, but support NFQUEUE then well be set TTL users space application nfqttl, in iptables be add rule (iptables -t mangle -A FORWARD -j NFQUEUE --queue-num 201). sorry for the mistakes, using google translate
Четверг, 16 июня 2022, 12:18 +03:00 от cyborg-one @.***>: Run the commands on the command line and send the output of each one. Run commands with the nfqttl module installed, mobile data enabled, and hotspot enabled. su ip -4 route list scope global ip -4 addr list iptables -t mangle -vnL Restart nfqttl with commands, open some site then send the output from the command line. pkill -9 nfqttl /data/adb/magisk/nfqttl/nfqttl -u — Reply to this email directly, view it on GitHub , or unsubscribe . You are receiving this because you authored the thread. Message ID: <cyborg-one/nfqttl/issues/10/1157429539 @ github . com>
Павел Тараненко Отправлено из Почты Mail.ru :/ $ su :/ # su :/ # ip -4 route list scope global :/ # ip -4 addr list 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever 17: @.**_ipa0: <UP,LOWER_UP> mtu 1500 qdisc mq state UNKNOWN group default qlen 1000 inet 10.147.193.168/28 scope global rmnet_data3 valid_lft forever preferred_lft forever 29: wlan1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 3000 inet 192.168.236.206/24 brd 192.168.236.255 scope global wlan1 valid_lft forever preferred_lft forever :/ # iptables -t mangle -vnL Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 728K 1228M nfqttli all -- * 0.0.0.0/0 0.0.0.0/0
Chain INPUT (policy ACCEPT 852 packets, 607K bytes) pkts bytes target prot opt in out source destination 758K 1229M wakeupctrl_mangle_INPUT all -- 0.0.0.0/0 0.0.0.0/0 758K 1229M routectrl_mangle_INPUT all -- 0.0.0.0/0 0.0.0.0/0
Chain FORWARD (policy ACCEPT 241 packets, 55917 bytes) pkts bytes target prot opt in out source destination 2696 601K tetherctrl_mangle_FORWARD all -- 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT 996 packets, 122K bytes) pkts bytes target prot opt in out source destination 367K 292M nfqttlo all -- 0.0.0.0/0 0.0.0.0/0
Chain POSTROUTING (policy ACCEPT 1282 packets, 193K bytes) pkts bytes target prot opt in out source destination 538K 302M qcom_htimer_POSTROUTING all -- 0.0.0.0/0 0.0.0.0/0 538K 302M oem_mangle_post all -- 0.0.0.0/0 0.0.0.0/0 538K 302M bw_mangle_POSTROUTING all -- 0.0.0.0/0 0.0.0.0/0 538K 302M idletimer_mangle_POSTROUTING all -- 0.0.0.0/0 0.0.0.0/0 538K 302M qcom_qos_reset_POSTROUTING all -- 0.0.0.0/0 0.0.0.0/0 538K 302M qcom_qos_filter_POSTROUTING all -- 0.0.0.0/0 0.0.0.0/0
Chain bw_mangle_POSTROUTING (1 references) pkts bytes target prot opt in out source destination 0 0 RETURN all -- ipsec+ 0.0.0.0/0 0.0.0.0/0 0 0 RETURN all -- 0.0.0.0/0 0.0.0.0/0 policy match dir out pol ipsec 538K 302M MARK all -- 0.0.0.0/0 0.0.0.0/0 MARK and 0xffefffff 0 0 RETURN all -- 0.0.0.0/0 0.0.0.0/0 owner UID match 1029 538K 302M all -- * 0.0.0.0/0 0.0.0.0/0 match bpf pinned /sys/fs/bpf/prog_netd_skfilter_egress_xtbpf
Chain idletimer_mangle_POSTROUTING (1 references) pkts bytes target prot opt in out source destination 5565 672K IDLETIMER all -- * rmnet_data3 0.0.0.0/0 0.0.0.0/0 timeout:10 label:0 send_nl_msg
Chain nfqttli (1 references) pkts bytes target prot opt in out source destination 1434 253K ACCEPT all -- lo 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- tun+ 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- tap+ 0.0.0.0/0 0.0.0.0/0 13 4851 ACCEPT all -- 0.0.0.0/0 240.0.0.0/4 3151 1130K ACCEPT all -- 0.0.0.0/0 224.0.0.0/4 0 0 ACCEPT all -- 0.0.0.0/0 255.255.255.255 0 0 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:1900 0 0 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:5353 46693 91M NFQUEUE all -- 0.0.0.0/0 0.0.0.0/0 TTL match TTL == 1 NFQUEUE num 6464 2048 473K NFQUEUE all -- 0.0.0.0/0 0.0.0.0/0 TTL match TTL == 64 NFQUEUE num 6464 14 1092 NFQUEUE all -- * 0.0.0.0/0 0.0.0.0/0 TTL match TTL == 128 NFQUEUE num 6464
Chain nfqttlo (1 references) pkts bytes target prot opt in out source destination 3038 706K ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 TTL match TTL != 64 312K 287M NFQUEUE all -- wlan+ 0.0.0.0/0 !192.168.0.0/16 NFQUEUE num 6464 0 0 NFQUEUE all -- tiwlan+ 0.0.0.0/0 !192.168.0.0/16 NFQUEUE num 6464 0 0 NFQUEUE all -- ra+ 0.0.0.0/0 !192.168.0.0/16 NFQUEUE num 6464 0 0 NFQUEUE all -- bt-pan+ 0.0.0.0/0 !192.168.0.0/16 NFQUEUE num 6464 0 0 NFQUEUE all -- * bnep+ 0.0.0.0/0 !192.168.0.0/16 NFQUEUE num 6464
Chain nm_mdmprxy_icmp_pkt_marker (0 references) pkts bytes target prot opt in out source destination
Chain nm_mdmprxy_mark_prov_chain (1 references) pkts bytes target prot opt in out source destination 9 936 nm_mdmprxy_pkt_skmark udp -- 0.0.0.0/0 0.0.0.0/0 socket --transparent --nowildcard --restore-skmark 0 0 nm_mdmprxy_pkt_skmark tcp -- 0.0.0.0/0 0.0.0.0/0 socket --transparent --nowildcard --restore-skmark
Chain nm_mdmprxy_mngl_post (0 references) pkts bytes target prot opt in out source destination 410 55620 MARK all -- 0.0.0.0/0 0.0.0.0/0 mark match 0xf0002 MARK and 0x0
Chain nm_mdmprxy_mngl_pre (1 references) pkts bytes target prot opt in out source destination
Chain nm_mdmprxy_mngl_pre_ex (1 references) pkts bytes target prot opt in out source destination
Chain nm_mdmprxy_mngl_pre_spi (1 references) pkts bytes target prot opt in out source destination
Chain nm_mdmprxy_mngl_pre_tee (0 references) pkts bytes target prot opt in out source destination
Chain nm_mdmprxy_pkt_forwarder (1 references) pkts bytes target prot opt in out source destination
Chain nm_mdmprxy_pkt_marker (0 references) pkts bytes target prot opt in out source destination 677K 1137M CONNMARK all -- 0.0.0.0/0 0.0.0.0/0 CONNMARK restore 677K 1137M nm_mdmprxy_mngl_pre all -- 0.0.0.0/0 0.0.0.0/0 677K 1137M nm_mdmprxy_mark_prov_chain all -- 0.0.0.0/0 0.0.0.0/0 677K 1137M nm_mdmprxy_mngl_pre_spi all -- 0.0.0.0/0 0.0.0.0/0 677K 1137M nm_mdmprxy_mngl_pre_ex all -- 0.0.0.0/0 0.0.0.0/0 0 0 MARK udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:7275 MARK set 0xf0002 0 0 MARK tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:5060 MARK set 0xf0002 0 0 MARK udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:5060 MARK set 0xf0002 410 55620 nm_mdmprxy_pkt_forwarder all -- 0.0.0.0/0 0.0.0.0/0 mark match 0xf0002 0 0 DROP !icmp -- 0.0.0.0/0 0.0.0.0/0 mark match 0xf0002
Chain nm_mdmprxy_pkt_skmark (2 references) pkts bytes target prot opt in out source destination 9 936 RETURN all -- 0.0.0.0/0 0.0.0.0/0
Chain oem_mangle_post (1 references) pkts bytes target prot opt in out source destination
Chain qcom_htimer_POSTROUTING (1 references) pkts bytes target prot opt in out source destination
Chain qcom_qos_filter_POSTROUTING (1 references) pkts bytes target prot opt in out source destination
Chain qcom_qos_reset_POSTROUTING (1 references) pkts bytes target prot opt in out source destination 52309 5356K MARK all -- * rmnet_data+ 0.0.0.0/0 0.0.0.0/0 MARK and 0x0
Chain routectrl_mangle_INPUT (1 references) pkts bytes target prot opt in out source destination 0 0 MARK all -- rmnet_data0 0.0.0.0/0 0.0.0.0/0 MARK xset 0xf0001/0xffefffff 0 0 MARK all -- rmnet_data1 0.0.0.0/0 0.0.0.0/0 MARK xset 0xf007b/0xffefffff 207 40600 MARK all -- wlan1 0.0.0.0/0 0.0.0.0/0 MARK xset 0x30063/0xffefffff 5217 5244K MARK all -- rmnet_data3 0.0.0.0/0 0.0.0.0/0 MARK xset 0x3007d/0xffefffff
Chain tc_idletimer (0 references) pkts bytes target prot opt in out source destination
Chain tc_wmm (0 references) pkts bytes target prot opt in out source destination
Chain tetherctrl_mangle_FORWARD (1 references) pkts bytes target prot opt in out source destination 639 37988 TCPMSS tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:0x02/0x02 TCPMSS clamp to PMTU
Chain wakeupctrl_mangle_INPUT (1 references) pkts bytes target prot opt in out source destination :/ #
-- :/ $ su :/ # su :/ # ip -4 route list scope global :/ # ip -4 addr list 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever 17: @.**_ipa0: <UP,LOWER_UP> mtu 1500 qdisc mq state UNKNOWN group default qlen 1000 inet 10.166.189.96/26 scope global rmnet_data3 valid_lft forever preferred_lft forever 27: wlan1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 3000 inet 192.168.8.202/24 brd 192.168.8.255 scope global wlan1 valid_lft forever preferred_lft forever :/ # iptables -t managle -vnL iptables v1.8.7 (legacy): can't initialize iptables table `managle': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded. 3|:/ # iptables -t mangle -vnL Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 30596 34M nfqttli all -- * 0.0.0.0/0 0.0.0.0/0
Chain INPUT (policy ACCEPT 55 packets, 22228 bytes) pkts bytes target prot opt in out source destination 38007 34M wakeupctrl_mangle_INPUT all -- 0.0.0.0/0 0.0.0.0/0 38007 34M routectrl_mangle_INPUT all -- 0.0.0.0/0 0.0.0.0/0
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 465 205K tetherctrl_mangle_FORWARD all -- 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 31801 10M nfqttlo all -- 0.0.0.0/0 0.0.0.0/0
Chain POSTROUTING (policy ACCEPT 186 packets, 24023 bytes) pkts bytes target prot opt in out source destination 35926 10M qcom_htimer_POSTROUTING all -- 0.0.0.0/0 0.0.0.0/0 35926 10M oem_mangle_post all -- 0.0.0.0/0 0.0.0.0/0 35926 10M bw_mangle_POSTROUTING all -- 0.0.0.0/0 0.0.0.0/0 35926 10M idletimer_mangle_POSTROUTING all -- 0.0.0.0/0 0.0.0.0/0 35926 10M qcom_qos_reset_POSTROUTING all -- 0.0.0.0/0 0.0.0.0/0 35926 10M qcom_qos_filter_POSTROUTING all -- 0.0.0.0/0 0.0.0.0/0
Chain bw_mangle_POSTROUTING (1 references) pkts bytes target prot opt in out source destination 0 0 RETURN all -- ipsec+ 0.0.0.0/0 0.0.0.0/0 0 0 RETURN all -- 0.0.0.0/0 0.0.0.0/0 policy match dir out pol ipsec 35926 10M MARK all -- 0.0.0.0/0 0.0.0.0/0 MARK and 0xffefffff 0 0 RETURN all -- 0.0.0.0/0 0.0.0.0/0 owner UID match 1029 35926 10M all -- * 0.0.0.0/0 0.0.0.0/0 match bpf pinned /sys/fs/bpf/prog_netd_skfilter_egress_xtbpf
Chain idletimer_mangle_POSTROUTING (1 references) pkts bytes target prot opt in out source destination 946 99903 IDLETIMER all -- * rmnet_data3 0.0.0.0/0 0.0.0.0/0 timeout:10 label:0 send_nl_msg
Chain nfqttli (1 references) pkts bytes target prot opt in out source destination 30596 34M NFQUEUE all -- 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 6464
Chain nfqttlo (1 references) pkts bytes target prot opt in out source destination 31801 10M NFQUEUE all -- 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 6464
Chain nm_mdmprxy_icmp_pkt_marker (0 references) pkts bytes target prot opt in out source destination
Chain nm_mdmprxy_mark_prov_chain (1 references) pkts bytes target prot opt in out source destination 1 104 nm_mdmprxy_pkt_skmark udp -- 0.0.0.0/0 0.0.0.0/0 socket --transparent --nowildcard --restore-skmark 0 0 nm_mdmprxy_pkt_skmark tcp -- 0.0.0.0/0 0.0.0.0/0 socket --transparent --nowildcard --restore-skmark
Chain nm_mdmprxy_mngl_post (0 references) pkts bytes target prot opt in out source destination 5 1168 MARK all -- 0.0.0.0/0 0.0.0.0/0 mark match 0xf0002 MARK and 0x0
Chain nm_mdmprxy_mngl_pre (1 references) pkts bytes target prot opt in out source destination
Chain nm_mdmprxy_mngl_pre_ex (1 references) pkts bytes target prot opt in out source destination
Chain nm_mdmprxy_mngl_pre_spi (1 references) pkts bytes target prot opt in out source destination
Chain nm_mdmprxy_mngl_pre_tee (0 references) pkts bytes target prot opt in out source destination
Chain nm_mdmprxy_pkt_forwarder (1 references) pkts bytes target prot opt in out source destination
Chain nm_mdmprxy_pkt_marker (0 references) pkts bytes target prot opt in out source destination 4314 1443K CONNMARK all -- 0.0.0.0/0 0.0.0.0/0 CONNMARK restore 4314 1443K nm_mdmprxy_mngl_pre all -- 0.0.0.0/0 0.0.0.0/0 4314 1443K nm_mdmprxy_mark_prov_chain all -- 0.0.0.0/0 0.0.0.0/0 4314 1443K nm_mdmprxy_mngl_pre_spi all -- 0.0.0.0/0 0.0.0.0/0 4314 1443K nm_mdmprxy_mngl_pre_ex all -- 0.0.0.0/0 0.0.0.0/0 0 0 MARK udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:7275 MARK set 0xf0002 0 0 MARK tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:5060 MARK set 0xf0002 0 0 MARK udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:5060 MARK set 0xf0002 5 1168 nm_mdmprxy_pkt_forwarder all -- 0.0.0.0/0 0.0.0.0/0 mark match 0xf0002 0 0 DROP !icmp -- 0.0.0.0/0 0.0.0.0/0 mark match 0xf0002
Chain nm_mdmprxy_pkt_skmark (2 references) pkts bytes target prot opt in out source destination 1 104 RETURN all -- 0.0.0.0/0 0.0.0.0/0
Chain oem_mangle_post (1 references) pkts bytes target prot opt in out source destination
Chain qcom_htimer_POSTROUTING (1 references) pkts bytes target prot opt in out source destination
Chain qcom_qos_filter_POSTROUTING (1 references) pkts bytes target prot opt in out source destination
Chain qcom_qos_reset_POSTROUTING (1 references) pkts bytes target prot opt in out source destination 28438 3443K MARK all -- * rmnet_data+ 0.0.0.0/0 0.0.0.0/0 MARK and 0x0
Chain routectrl_mangle_INPUT (1 references) pkts bytes target prot opt in out source destination 0 0 MARK all -- rmnet_data0 0.0.0.0/0 0.0.0.0/0 MARK xset 0xf0001/0xffefffff 0 0 MARK all -- rmnet_data2 0.0.0.0/0 0.0.0.0/0 MARK xset 0xf0065/0xffefffff 314 71073 MARK all -- wlan1 0.0.0.0/0 0.0.0.0/0 MARK xset 0x30063/0xffefffff 419 131K MARK all -- rmnet_data3 0.0.0.0/0 0.0.0.0/0 MARK xset 0x30067/0xffefffff
Chain tc_idletimer (0 references) pkts bytes target prot opt in out source destination
Chain tc_wmm (0 references) pkts bytes target prot opt in out source destination
Chain tetherctrl_mangle_FORWARD (1 references) pkts bytes target prot opt in out source destination 96 5664 TCPMSS tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:0x02/0x02 TCPMSS clamp to PMTU
Chain wakeupctrl_mangle_INPUT (1 references) pkts bytes target prot opt in out source destination :/ # pkill -9 nfqttl :/ # /data/adb/magisk/nfqttl/nfqttl -u /system/bin/sh: /data/adb/magisk/nfqttl/nfqttl: inaccessible or not found 127|:/ # pkill -9 nfqttl /data/adb/magisk/nfqttl/nfqttl -u pkill: Missing argument to -u (see "pkill --help") 1|:/ #
cyborg-one
commented
2 years ago /data/adb/magisk/nfqttl/nfqttl -u
I have edited my post. /data/adb/modules/nfqttl/nfqttl -u
2.1.2 It seems to work, I will still test it.
Any way, it looks like you found a solution to your problem.
Paxani4ek
commented
2 years ago for beer
Please, help. Xiaomi 11 ultra , a12 Xiaomi eu 22.6.9 . Does not fix TTL or the Internet does not work at all.