fix: zapret firewall rules

This commit is contained in:
elwrcl committed 2026-03-31 01:15:44 +03:00
1 parent 88f3503ff4
commit 03e7bbf690
1 file changed
-9
-9
View File
@@ -34,14 +34,5 @@
iptables -D OUTPUT -p tcp -m multiport --dports 80,443 -m connbytes --connbytes-dir=original --connbytes-mode=packets --connbytes 1:9 -j NFQUEUE --queue-num 200 --queue-bypass || true iptables -D OUTPUT -p tcp -m multiport --dports 80,443 -m connbytes --connbytes-dir=original --connbytes-mode=packets --connbytes 1:9 -j NFQUEUE --queue-num 200 --queue-bypass || true
iptables -D OUTPUT -p udp --dport 443 -m connbytes --connbytes-dir=original --connbytes-mode=packets --connbytes 1:9 -j NFQUEUE --queue-num 200 --queue-bypass || true iptables -D OUTPUT -p udp --dport 443 -m connbytes --connbytes-dir=original --connbytes-mode=packets --connbytes 1:9 -j NFQUEUE --queue-num 200 --queue-bypass || true
iptables -D OUTPUT -m mark --mark 0x40000000/0x40000000 -j RETURN || true iptables -D OUTPUT -m mark --mark 0x40000000/0x40000000 -j RETURN || true
services.resolved = {
enable = true;
dnssec = "false";
domains = [ "~." ];
fallbackDns = [ "1.1.1.1" "8.8.8.8" ];
extraConfig = ''
DNS=1.1.1.1
DNSOverTLS=yes
''; '';
} }