17362ce57c
It may take a long time waiting for a new tag, so backport these important bug fixes for now. While at it, added 3 new options provided by upstream, and deprecated the usage of `$(AUTORELEASE)`. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
37 lines
1.3 KiB
Diff
37 lines
1.3 KiB
Diff
From 0db405f50fd652d494f2066fc5e47c41666c96db Mon Sep 17 00:00:00 2001
|
|
From: Xiaoxu Guo <ftiasch0@gmail.com>
|
|
Date: Thu, 4 Aug 2022 16:32:42 +0800
|
|
Subject: [PATCH] cleaned up
|
|
|
|
---
|
|
service/core/iptables/tproxy.go | 5 ++---
|
|
1 file changed, 2 insertions(+), 3 deletions(-)
|
|
|
|
--- a/core/iptables/tproxy.go
|
|
+++ b/core/iptables/tproxy.go
|
|
@@ -124,7 +124,6 @@ ip6tables -w 2 -t mangle -A TP_PRE -p ud
|
|
|
|
ip6tables -w 2 -t mangle -A TP_RULE -j CONNMARK --restore-mark
|
|
ip6tables -w 2 -t mangle -A TP_RULE -m mark --mark 0x40/0xc0 -j RETURN
|
|
-ip6tables -w 2 -t mangle -A TP_RULE -m mark --mark 0x40/0xc0 -j RETURN
|
|
ip6tables -w 2 -t mangle -A TP_RULE -i br+ -j RETURN
|
|
ip6tables -w 2 -t mangle -A TP_RULE -i docker+ -j RETURN
|
|
ip6tables -w 2 -t mangle -A TP_RULE -i veth+ -j RETURN
|
|
@@ -159,7 +158,7 @@ ip6tables -w 2 -t mangle -A TP_MARK -j C
|
|
|
|
func (t *tproxy) GetCleanCommands() Setter {
|
|
commands := `
|
|
-ip rule del fwmark 0x40/0xc0 table 100
|
|
+ip rule del fwmark 0x40/0xc0 table 100
|
|
ip route del local 0.0.0.0/0 dev lo table 100
|
|
|
|
iptables -w 2 -t mangle -F TP_OUT
|
|
@@ -175,7 +174,7 @@ iptables -w 2 -t mangle -X TP_MARK
|
|
`
|
|
if IsIPv6Supported() {
|
|
commands += `
|
|
-ip -6 rule del fwmark 0x40/0xc0 table 100
|
|
+ip -6 rule del fwmark 0x40/0xc0 table 100
|
|
ip -6 route del local ::/0 dev lo table 100
|
|
|
|
ip6tables -w 2 -t mangle -F TP_OUT
|