From 5b1c526e6a569ec9c4153b145db44e663a6a90db Mon Sep 17 00:00:00 2001 From: elwrcl Date: Tue, 31 Mar 2026 00:49:30 +0300 Subject: [PATCH] fix: zapret firewall rules --- nixos/networking/vpn/default.nix | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/nixos/networking/vpn/default.nix b/nixos/networking/vpn/default.nix index 504b65d..e92fe2b 100644 --- a/nixos/networking/vpn/default.nix +++ b/nixos/networking/vpn/default.nix @@ -26,9 +26,8 @@ networking.enableIPv6 = false; networking.firewall.extraCommands = '' - iptables -I OUTPUT -p tcp -m multiport --dports 80,443 -m connbytes --connbytes-dir=original --connbytes-mode=packets --connbytes 1:9 -j NFQUEUE --queue-num 200 --queue-bypass - iptables -I OUTPUT -p udp --dport 443 -m connbytes --connbytes-dir=original --connbytes-mode=packets --connbytes 1:9 -j NFQUEUE --queue-num 200 --queue-bypass - iptables -I OUTPUT -m mark --mark 0x40000000/0x40000000 -j RETURN + iptables -D OUTPUT -p tcp -m multiport --dports 80,443 -m connbytes --connbytes-dir=original --connbytes-mode=packets --connbytes 1:9 -j NFQUEUE --queue-num 200 --queue-bypass || true + iptables -D OUTPUT -p udp --dport 443 -m connbytes --connbytes-dir=original --connbytes-mode=packets --connbytes 1:9 -j NFQUEUE --queue-num 200 --queue-bypass || true + iptables -D OUTPUT -m mark --mark 0x40000000/0x40000000 -j RETURN || true ''; - - networking.firewalls \ No newline at end of file +}