fix: kdeconnect autostart, zapret firewall rules

nixos/networking/vpn/default.nix

@@ -4,7 +4,6 @@
   # you can make this true if you have problems with zapret
   services.cloudflare-warp.enable = false;
 
-  # Zapret
   services.zapret = {
     enable = true;
     params = [
@@ -12,16 +11,12 @@
       "--dpi-desync=fake,multisplit"
       "--dpi-desync-split-pos=method+2"
       "--dpi-desync-fooling=md5sig"
-
       "--new"
-
       "--filter-tcp=443"
       "--dpi-desync=fake,multidisorder"
       "--dpi-desync-split-pos=1,midsld"
       "--dpi-desync-fooling=badseq,md5sig"
-
       "--new"
-
       "--filter-udp=443"
       "--dpi-desync=fake"
       "--dpi-desync-repeats=6"
@@ -29,4 +24,11 @@
   };
 
   networking.enableIPv6 = false;
-}
+
+  networking.firewall.extraCommands = ''
+    iptables -I OUTPUT -p tcp -m multiport --dports 80,443 -m connbytes --connbytes-dir=original --connbytes-mode=packets --connbytes 1:9 -j NFQUEUE --queue-num 200 --queue-bypass
+    iptables -I OUTPUT -p udp --dport 443 -m connbytes --connbytes-dir=original --connbytes-mode=packets --connbytes 1:9 -j NFQUEUE --queue-num 200 --queue-bypass
+    iptables -I OUTPUT -m mark --mark 0x40000000/0x40000000 -j RETURN
+  '';
+
+  networking.firewals