Zapret2-RTK

Данный репозиторий является конфигом Zapret2 который скорее всего работает только под РТК. Правильная работа не гарантируется

Видеогайд https://x.com/SPAWNRYS_dev/status/2030239094723514521?s=20

Параметры

NFQWS2_ENABLE

Ставьте в состояние 1

NFQWS2_OPT

--blob=tls_4pda:@/opt/zapret2/files/fake/tls_clienthello_4pda_to.bin
--blob=quic_google:@/opt/zapret2/files/fake/quic_initial_www_google_com.bin
--blob=tls_google:@/opt/zapret2/files/fake/tls_clienthello_www_google_com.bin
--blob=stun:@/opt/zapret2/files/fake/stun.bin
--blob=tls_max:@/opt/zapret2/files/fake/tls_clienthello_max_ru.bin

--filter-udp=443
--hostlist=/opt/zapret2/ipset/zapret-hosts-user.txt
--hostlist-exclude=/opt/zapret2/ipset/zapret-hosts-user-exclude.txt
--ipset-exclude=/opt/zapret2/ipset/zapret-ip-exclude.txt
--payload=quic_initial
--lua-desync=fake:repeats=6:blob=quic_google
--new

--filter-udp=19294-19344,50000-50100
--filter-l7=quic,discord,stun
--payload=quic_initial,discord_ip_discovery,stun
--lua-desync=fake:repeats=6:blob=quic_google
--new

--filter-tcp=2053,2083,2087,2096,8443
--hostlist-domains=discord.media
--payload=http_req,tls_client_hello
--lua-desync=fake:repeats=6:tcp_ts=-600000:blob=tls_google:tls_mod=none
--new

--filter-tcp=443
--hostlist=/opt/zapret2/ipset/zapret-hosts-google.txt
--payload=http_req,tls_client_hello
--lua-desync=fake:repeats=6:tcp_ts=-600000:blob=tls_google:ip_id=zero
--new

--filter-tcp=80,443
--filter-l7=http,tls
--hostlist=/opt/zapret2/ipset/zapret-hosts-user.txt
--hostlist-exclude=/opt/zapret2/ipset/zapret-hosts-user-exclude.txt
--ipset-exclude=/opt/zapret2/ipset/zapret-ip-exclude.txt
--payload=http_req,tls_client_hello
--lua-desync=fake:repeats=6:tcp_ts=-600000:blob=tls_4pda
--lua-desync=multidisorder:pos=1,midsld
--new

--filter-udp=443
--ipset=/opt/zapret2/ipset/zapret-ip-user.txt
--hostlist-exclude=/opt/zapret2/ipset/zapret-hosts-user-exclude.txt
--ipset-exclude=/opt/zapret2/ipset/zapret-ip-exclude.txt
--payload=quic_initial
--lua-desync=fake:repeats=6:blob=quic_google
--new

--filter-tcp=80,443,8443
--filter-l7=http,tls
--ipset=/opt/zapret2/ipset/zapret-ip-user.txt
--hostlist-exclude=/opt/zapret2/ipset/zapret-hosts-user-exclude.txt
--ipset-exclude=/opt/zapret2/ipset/zapret-ip-exclude.txt
--payload=http_req,tls_client_hello
--lua-desync=fake:repeats=6:tcp_ts=-600000:blob=tls_4pda
--lua-desync=multidisorder:pos=1,midsld
--new

--filter-udp=50000-50100
--filter-l7=stun,mtproto
--payload=stun,mtproto_initial
--lua-desync=fake:blob=quic_google:repeats=6:tcp_ts=-600000
--new

--filter-tcp=80,443,1024-65535
--ipset=/opt/zapret2/ipset/zapret-ip-user.txt
--hostlist-exclude=/opt/zapret2/ipset/zapret-hosts-user-exclude.txt
--ipset-exclude=/opt/zapret2/ipset/zapret-ip-exclude.txt
--payload=tls_client_hello
--lua-desync=fake:blob=tls_4pda:repeats=6:tls_mod=rnd,sni=www.google.com:tcp_ts=-10000
--new

--filter-udp=1024-19293,19345-49999,50101-65535
--ipset=/opt/zapret2/ipset/zapret-ip-user.txt
--ipset-exclude=/opt/zapret2/ipset/zapret-ip-exclude.txt
--payload=unknown
--out-range=-d2
--lua-desync=fake:blob=quic_google:repeats=12

NFQWS2_PORTS_TCP

80,443,2053,2083,2087,2096,8443,1024-65535

NFQWS2_PORTS_UDP

443,19294-19344,50000-50100,1024-65535,1024-19293,19345-49999,50101-65535