98 lines
3.3 KiB
Markdown
98 lines
3.3 KiB
Markdown
# Zapret2-RTK
|
||
Данный репозиторий является конфигом Zapret2 который скорее всего работает только под РТК. Правильная работа не гарантируется
|
||
#### Видеогайд https://x.com/SPAWNRYS_dev/status/2030239094723514521?s=20
|
||
## Параметры
|
||
### NFQWS2_ENABLE
|
||
Ставьте в состояние `1`
|
||
### NFQWS2_OPT
|
||
```
|
||
|
||
--blob=tls_4pda:@/opt/zapret2/files/fake/tls_clienthello_4pda_to.bin
|
||
--blob=quic_google:@/opt/zapret2/files/fake/quic_initial_www_google_com.bin
|
||
--blob=tls_google:@/opt/zapret2/files/fake/tls_clienthello_www_google_com.bin
|
||
--blob=stun:@/opt/zapret2/files/fake/stun.bin
|
||
--blob=tls_max:@/opt/zapret2/files/fake/tls_clienthello_max_ru.bin
|
||
|
||
--filter-udp=443
|
||
--hostlist=/opt/zapret2/ipset/zapret-hosts-user.txt
|
||
--hostlist-exclude=/opt/zapret2/ipset/zapret-hosts-user-exclude.txt
|
||
--ipset-exclude=/opt/zapret2/ipset/zapret-ip-exclude.txt
|
||
--payload=quic_initial
|
||
--lua-desync=fake:repeats=6:blob=quic_google
|
||
--new
|
||
|
||
--filter-udp=19294-19344,50000-50100
|
||
--filter-l7=quic,discord,stun
|
||
--payload=quic_initial,discord_ip_discovery,stun
|
||
--lua-desync=fake:repeats=6:blob=quic_google
|
||
--new
|
||
|
||
--filter-tcp=2053,2083,2087,2096,8443
|
||
--hostlist-domains=discord.media
|
||
--payload=http_req,tls_client_hello
|
||
--lua-desync=fake:repeats=6:tcp_ts=-600000:blob=tls_google:tls_mod=none
|
||
--new
|
||
|
||
--filter-tcp=443
|
||
--hostlist=/opt/zapret2/ipset/zapret-hosts-google.txt
|
||
--payload=http_req,tls_client_hello
|
||
--lua-desync=fake:repeats=6:tcp_ts=-600000:blob=tls_google:ip_id=zero
|
||
--new
|
||
|
||
--filter-tcp=80,443
|
||
--filter-l7=http,tls
|
||
--hostlist=/opt/zapret2/ipset/zapret-hosts-user.txt
|
||
--hostlist-exclude=/opt/zapret2/ipset/zapret-hosts-user-exclude.txt
|
||
--ipset-exclude=/opt/zapret2/ipset/zapret-ip-exclude.txt
|
||
--payload=http_req,tls_client_hello
|
||
--lua-desync=fake:repeats=6:tcp_ts=-600000:blob=tls_4pda
|
||
--lua-desync=multidisorder:pos=1,midsld
|
||
--new
|
||
|
||
--filter-udp=443
|
||
--ipset=/opt/zapret2/ipset/zapret-ip-user.txt
|
||
--hostlist-exclude=/opt/zapret2/ipset/zapret-hosts-user-exclude.txt
|
||
--ipset-exclude=/opt/zapret2/ipset/zapret-ip-exclude.txt
|
||
--payload=quic_initial
|
||
--lua-desync=fake:repeats=6:blob=quic_google
|
||
--new
|
||
|
||
--filter-tcp=80,443,8443
|
||
--filter-l7=http,tls
|
||
--ipset=/opt/zapret2/ipset/zapret-ip-user.txt
|
||
--hostlist-exclude=/opt/zapret2/ipset/zapret-hosts-user-exclude.txt
|
||
--ipset-exclude=/opt/zapret2/ipset/zapret-ip-exclude.txt
|
||
--payload=http_req,tls_client_hello
|
||
--lua-desync=fake:repeats=6:tcp_ts=-600000:blob=tls_4pda
|
||
--lua-desync=multidisorder:pos=1,midsld
|
||
--new
|
||
|
||
--filter-udp=50000-50100
|
||
--filter-l7=stun,mtproto
|
||
--payload=stun,mtproto_initial
|
||
--lua-desync=fake:blob=quic_google:repeats=6:tcp_ts=-600000
|
||
--new
|
||
|
||
--filter-tcp=80,443,1024-65535
|
||
--ipset=/opt/zapret2/ipset/zapret-ip-user.txt
|
||
--hostlist-exclude=/opt/zapret2/ipset/zapret-hosts-user-exclude.txt
|
||
--ipset-exclude=/opt/zapret2/ipset/zapret-ip-exclude.txt
|
||
--payload=tls_client_hello
|
||
--lua-desync=fake:blob=tls_4pda:repeats=6:tls_mod=rnd,sni=www.google.com:tcp_ts=-10000
|
||
--new
|
||
|
||
--filter-udp=1024-19293,19345-49999,50101-65535
|
||
--ipset=/opt/zapret2/ipset/zapret-ip-user.txt
|
||
--ipset-exclude=/opt/zapret2/ipset/zapret-ip-exclude.txt
|
||
--payload=unknown
|
||
--out-range=-d2
|
||
--lua-desync=fake:blob=quic_google:repeats=12
|
||
```
|
||
### NFQWS2_PORTS_TCP
|
||
```
|
||
80,443,2053,2083,2087,2096,8443,1024-65535
|
||
```
|
||
### NFQWS2_PORTS_UDP
|
||
```
|
||
443,19294-19344,50000-50100,1024-65535,1024-19293,19345-49999,50101-65535
|
||
``` |