📝 Описание проблемы
Товарищи, Ростелеком москва, насмерть не могу настроить дискорд, недавно всё работало, но дней 5 назад улетело, приложение не открываетя, сайт работает но к голосовым каналам подключение не работает. Переносил частично 10 конфиг (general (ALT10).bat) с компа работает. Однако перенос между Zapret1 и Zapret2 не очень тривиален оказался.
...
start "zapret: %~n0" /min "%BIN%winws.exe" --wf-tcp=80,443,2053,2083,2087,2096,8443,%GameFilter% --wf-udp=443,19294-19344,50000-50100,%GameFilter% ^
--filter-udp=443 --hostlist="%LISTS%list-general.txt" --hostlist-exclude="%LISTS%list-exclude.txt" --ipset-exclude="%LISTS%ipset-exclude.txt" --dpi-desync=fake --dpi-desync-repeats=6 --dpi-desync-fake-quic="%BIN%quic_initial_www_google_com.bin" --new ^
--filter-udp=19294-19344,50000-50100 --filter-l7=discord,stun --dpi-desync=fake --dpi-desync-repeats=6 --new ^
--filter-tcp=2053,2083,2087,2096,8443 --hostlist-domains=discord.media --dpi-desync=fake --dpi-desync-repeats=6 --dpi-desync-fooling=ts --dpi-desync-fake-tls="%BIN%tls_clienthello_4pda_to.bin" --dpi-desync-fake-tls-mod=none --new ^
--filter-tcp=443 --hostlist="%LISTS%list-google.txt" --ip-id=zero --dpi-desync=fake --dpi-desync-repeats=6 --dpi-desync-fooling=ts --dpi-desync-fake-tls="%BIN%tls_clienthello_www_google_com.bin" --new ^
--filter-tcp=80,443 --hostlist="%LISTS%list-general.txt" --hostlist-exclude="%LISTS%list-exclude.txt" --ipset-exclude="%LISTS%ipset-exclude.txt" --dpi-desync=fake --dpi-desync-repeats=6 --dpi-desync-fooling=ts --dpi-desync-fake-tls="%BIN%tls_clienthello_4pda_to.bin" --dpi-desync-fake-tls-mod=none --new ^
--filter-udp=443 --ipset="%LISTS%ipset-all.txt" --hostlist-exclude="%LISTS%list-exclude.txt" --ipset-exclude="%LISTS%ipset-exclude.txt" --dpi-desync=fake --dpi-desync-repeats=6 --dpi-desync-fake-quic="%BIN%quic_initial_www_google_com.bin" --new ^
--filter-tcp=80,443,%GameFilter% --ipset="%LISTS%ipset-all.txt" --hostlist-exclude="%LISTS%list-exclude.txt" --ipset-exclude="%LISTS%ipset-exclude.txt" --dpi-desync=fake --dpi-desync-repeats=6 --dpi-desync-fooling=ts --dpi-desync-fake-tls=^! --dpi-desync-fake-tls-mod=rnd,sni=www.google.com --dpi-desync-fake-tls="%BIN%tls_clienthello_4pda_to.bin" --dpi-desync-fake-tls-mod=none --new ^
--filter-udp=%GameFilter% --ipset="%LISTS%ipset-all.txt" --ipset-exclude="%LISTS%ipset-exclude.txt" --dpi-desync=fake --dpi-desync-autottl=2 --dpi-desync-repeats=12 --dpi-desync-any-protocol=1 --dpi-desync-fake-unknown-udp="%BIN%quic_initial_www_google_com.bin" --dpi-desync-cutoff=n2
Прочитал большую часть обсуждения Zapret2 и Issues связанных с дискордом. однако решения не подошли, включение custom.d не помгло
youtube работает, прочие домены из /opt/zapret2/ipset/zapret-hosts-user.txt и /opt/zapret2/ipset/zapret-hosts-google.txt тоже открываются и доступны
/opt/zapret2/ipset/zapret-ip-exclude.txt
10.0.0.0/8
169.254.0.0/16
172.16.0.0/12
192.168.0.0/16
zapret-hosts-user-exclude.txt
127.0.0.0/8
10.0.0.0/8
172.16.0.0/12
192.168.0.0/16
169.254.0.0/16
100.64.0.0/10
::1
fc00::/7
fe80::/10
####################################
nalog.ru
gstatic.com
gosuslugi.ru
mos-gorsud.ru
gov.ru
sudrf.ru
ipstream.one
#################################### Epicgames
easy.ac
fab.com
quixel.se
quixel.com
eac-cdn.com
paragon.com
spyjinx.com
3lateral.com
fortnite.com
epicgames.com
epicgames.dev
hyprsense.com
sketchfab.com
artstation.com
roborecall.com
twinmotion.com
cubicmotion.com
playparagon.com
realityscan.com
epicgamescdn.com
et.epicgames.com
ol.epicgames.com
radgametools.com
unrealengine.com
api.epicgames.dev
easyanticheat.net
shadowcomplex.com
battlebreakers.com
store.epicgames.com
capturingreality.com
unrealtournament.com
cdn1.unrealengine.com
cdn2.unrealengine.com
accounts.epicgames.com
download.epicgames.com
tracking.epicgames.com
download2.epicgames.com
download3.epicgames.com
download4.epicgames.com
metrics.ol.epicgames.com
datarouter.ol.epicgames.com
fastly-download.epicgames.com
store-content.ak.epicgames.com
static-assets-prod.epicgames.com
epicgames-download1.akamaized.net
launcher-website-prod07.ol.epicgames.com
ut-public-service-prod10.ol.epicgames.com
store-site-backend-static.ak.epicgames.com
library-service.live.use1a.on.epicgames.com
accountportal-website-prod07.ol.epicgames.com
account-public-service-prod03.ol.epicgames.com
catalog-public-service-prod06.ol.epicgames.com
friends-public-service-prod06.ol.epicgames.com
launcher-public-service-prod06.ol.epicgames.com
entitlement-public-service-prod08.ol.epicgames.com
lightswitch-public-service-prod06.ol.epicgames.com
orderprocessor-public-service-ecomprod01.ol.epicgames.com
launcherwaitingroom-public-service-prod06.ol.epicgames.com
datastorage-public-service-liveegs.live.use1a.on.epicgames.com
#################################### Steam
s.team
steam.tv
valve.net
steamcdn.com
steamcdn.net
steamstat.us
valvecdn.com
steam-api.com
steamchat.com
steamdeck.com
steam-chat.com
steamgames.com
steamgames.net
underlords.com
steamserver.net
steamstatic.com
playartifact.com
steam.cdn.on.net
steamcontent.com
steampowered.com
valvecontent.com
valvesoftware.com
valvesoftware.net
steam.cdn.webra.ru
steambroadcast.com
steamcommunity.com
cdn.steamstatic.com
cs.steampowered.com
dl.steam.clngaa.com
steam.ru.qtlglb.com
api.steampowered.com
steam.eca.qtlglb.com
steamusercontent.com
help.steampowered.com
steam.apac.qtlglb.com
steam.naeu.qtlglb.com
cdn.steamcommunity.com
gstore.val.manlaxy.com
login.steampowered.com
media.steampowered.com
partner.steamgames.com
shared.steamstatic.com
steam.cdn.orcon.net.nz
store.steampowered.com
steamcdn-a.akamaihd.net
steampipe.akamaized.net
partner.steampowered.com
steamcdn-a.akamaized.net
steamdeckusercontent.com
support.steampowered.com
checkout.steampowered.com
community.steamstatic.com
steam.cdn.slingshot.co.nz
steammobile.akamaized.net
steamstatic.akamaized.net
steamstore-a.akamaihd.net
steamvideo-a.akamaihd.net
workshop.steampowered.com
cdn.akamai.steamstatic.com
cdn.fastly.steamstatic.com
client-update.queniuqe.com
community.steampowered.com
steamdeckcdn.akamaized.net
steampipe-kr.akamaized.net
clan.fastly.steamstatic.com
steamcontent-a.akamaihd.net
steambroadcast.akamaized.net
steamcommunity.akamaized.net
store.akamai.steamstatic.com
store.fastly.steamstatic.com
scontent.steamusercontent.com
shared.fastly.steamstatic.com
steamcommunity-a.akamaihd.net
avatars.fastly.steamstatic.com
cdn.cloudflare.steamstatic.com
edge.steam-dns.top.comcast.net
steamcommunity-a.akamaized.net
steamuserimages-a.akamaihd.net
steampipe-partner.akamaized.net
steamusercontent-a.akamaihd.net
client-download.steampowered.com
community.fastly.steamstatic.com
store.cloudflare.steamstatic.com
community.cloudflare.steamstatic.com
steamcdn-a.akamaihd.net.edgesuite.net
steamcloudsweden.blob.core.windows.net
steamcommunity.cloudflare.steamstatic.com
steamcommunity-a.akamaihd.net.edgesuite.net
#################################### OpenWRT
github.com
openwrt.org
gh.openwrt.org
cdn.openwrt.org
dev.openwrt.org
git.openwrt.org
lede-project.org
wiki.openwrt.org
forum.openwrt.org
lists.openwrt.org
openwrt.gitlab.io
archive.openwrt.org
downloads.openwrt.org
fwdownloads.openwrt.org
mirror-01.infra.openwrt.org
mirror-02.infra.openwrt.org
mirror-03.infra.openwrt.org
mirror-04.infra.openwrt.org
#################################### UbisoftConnect
ubi.com
ubisoft.com
store.ubi.com
ubisoftconnect.com
connect.ubisoft.com
drops-register.ubi.com
public-ubiservices.ubi.com
ubisoftconnect.cdn.ubi.com
uplaypc-s-ubisoft.cdn.ubi.com
uplaypc-s-ubisoft-ww.cdn.ubi.com
ubisoft-orbit-savegames.s3.amazonaws.com
ubisoft-uplay-savegames.s3.amazonaws.com
#################################### Aliexpress
ae.com
ae-rus.net
alicdn.com
aestatic.net
aliexpress.ru
aliexpress.us
aliexpress.com
aliexpress-media.com
#################################### PSN
scea.com
np.scea.com
ps5update.com
psdownload.com
playstation.net
playstation.com
account.sony.com
psremoteplay.com
ps4.playstation.com
ps5.playstation.com
playstationcloud.com
psapi.playstation.net
store.playstation.com
media.playstation.com
auth.np.ac.playstation.net
sonyentertainmentnetwork.com
np.community.playstation.net
id.sonyentertainmentnetwork.com
#################################### Twitch
twitch.tv
ttvnw.net
jtvnw.net
twimg.com
m.twitch.tv
id.twitch.tv
www.twitch.tv
twitchcdn.net
ext-twitch.tv
twitchsvc.net
api.twitch.tv
gql.twitch.tv
dev.twitch.tv
live-video.net
twitch.a2z.com
chat.twitch.tv
help.twitch.tv
assets.twitch.tv
twitch-shadow.net
passport.twitch.tv
irc.chat.twitch.tv
vod-metro.twitch.tv
twitchcdn-shadow.net
static.twitchcdn.net
vod-secure.twitch.tv
irc-ws.chat.twitch.tv
pubsub-edge.twitch.tv
vod-pop-secure.twitch.tv
####################################
/opt/zapret2/ipset/zapret-hosts-user.txt
cloudflare-ech.com
dis.gd
discord-attachments-uploads-prd.storage.googleapis.com
discord.app
discord.co
discord.com
discord.design
discord.dev
discord.gift
discord.gifts
discord.gg
discord.media
discord.new
discord.store
discord.status
discord-activities.com
discordactivities.com
discordapp.com
discordapp.net
discordcdn.com
discordmerch.com
discordpartygames.com
discordsays.com
discordsez.com
yt3.ggpht.com
yt4.ggpht.com
yt3.googleusercontent.com
googlevideo.com
jnn-pa.googleapis.com
stable.dl2.discordapp.net
wide-youtube.l.google.com
youtube-nocookie.com
youtube-ui.l.google.com
youtube.com
youtubeembeddedplayer.googleapis.com
youtubekids.com
youtubei.googleapis.com
youtu.be
m.youtube.com
yt-video-upload.l.google.com
ytimg.com
ytimg.l.google.com
frankerfacez.com
ffzap.com
betterttv.net
7tv.app
7tv.io
archiveofourown.org
github.com
gcc.godbolt.org
godbolt.org
*.godbolt.org
rutor.info
mpv.io
moviesjoy.is
itch.io
t.me
tg.dev
telegra.ph
telesco.pe
telegram.me
telegram.org
telegram.com
nicegram.app
web.telegram.org
api.telegram.org
core.telegram.org
cdn.telegram.org
mail.telegram.org
smtp.telegram.org
pluto.web.telegram.org
venus.web.telegram.org
vesta.web.telegram.org
telegramdownload.com
hcaptcha.com
challenges.cloudflare.com
cloudflare.com
signin.aws.amazon.com
cloudfront.net
s3.amazonaws.com
awsstatic.com
console.aws.a2z.com
amazonaws.com
awsapps.com
sso.amazonaws.com
cloudfront.net
deadbydaylight.com
deadbydaylight.fandom.com
argotunnel.com
cfargotunnel.com
cfl.re
cloudflare-dns.com
cloudflare-ech.com
cloudflare-esni.com
cloudflare-gateway.com
cloudflare-quic.com
cloudflare.com
cloudflare.net
cloudflare.tv
cloudflareaccess.com
cloudflareapps.com
cloudflarebolt.com
cloudflareclient.com
cloudflareinsights.com
cloudflareok.com
cloudflarepartners.com
cloudflareportal.com
cloudflarepreview.com
cloudflareresolve.com
cloudflaressl.com
cloudflarestatus.com
cloudflarestorage.com
cloudflarestream.com
cloudflaretest.com
cloudflarewarp.com
every1dns.net
isbgpsafeyet.com
one.one.one.one
one.one.one
pacloudflare.com
pages.dev
trycloudflare.com
videodelivery.net
warp.plus
workers.dev
ubmidrupalcandd.s3-eu-west-1.amazonaws.com
j2-antiblock.s3-website.eu-west-3.amazonaws.com
fliba-title.s3-website-eu-west-1.amazonaws.com
instagram.com
archiveofourown.org
/opt/zapret2/ipset/zapret-hosts-google.txt
Шаги для воспроизведения
- Попытаться запустить discord?
✅ Ожидаемое поведение
Дискорд обновляется, приложение запускается, каналы заходят, стрим экрана работает. Работа прочих сайтов и youtube на телефоне не нарушена(Насколько я понял телефоны толкьо с IPv6 работают)
🖥️ Информация о системе
- **OpenWrt версия**: OpenWrt 24.10.4
- **Zapret версия**: Zapret2 v0.8.20260109
- **Роутер модель**: Xiaomi AX3000T
- **HTTPS DNS Proxy**: Version 2025.10.07-r1. Force DNS ports: 53 853.
✅ Используемая стратегия NFQWS
########## HTTPS
--filter-tcp=443
--in-range=-d1000
--out-range=-d1000
--lua-desync=circular:fails=1:time=300:retrans=3:nld=2
--payload=all
--lua-desync=pass
--lua-desync=syndata:strategy=1
--lua-desync=multidisorder:pos=1,midsld:strategy=1
--lua-desync=send:repeats=2:strategy=2
--lua-desync=syndata:blob=tls7:strategy=2
--lua-desync=syndata:tcp_ack=-66000:strategy=3
--lua-desync=multidisorder:pos=1,midsld:tcp_ack=-66000:strategy=3
--lua-desync=syndata:ip_autottl=-1,3-20:ip6_autottl=-1,3-20:strategy=4
--lua-desync=multidisorder:pos=1,midsld:ip_autottl=-1,3-20:ip6_autottl=-1,3-20:strategy=4
--lua-desync=syndata:blob=tls_google:strategy=5
--lua-desync=multidisorder:pos=1,midsld:strategy=5
--lua-desync=syndata:blob=tls_google:tcp_md5:strategy=6
--lua-desync=multidisorder:pos=1,midsld:tcp_md5:strategy=6
--lua-desync=syndata:blob=tls_google:tcp_ack=-66000:strategy=7
--lua-desync=multidisorder:pos=1,midsld:tcp_ack=-66000:strategy=7
--lua-desync=syndata:blob=tls_google:repeats=11:tcp_ack=-66000:tcp_ts_up:strategy=8
--lua-desync=multidisorder:pos=3:strategy=8
--lua-desync=syndata:blob=tls7:strategy=9
--lua-desync=multidisorder:pos=1,midsld:strategy=9
--lua-desync=syndata:blob=tls7:tcp_md5:strategy=10
--lua-desync=multidisorder:pos=1,midsld:tcp_md5:strategy=10
--lua-desync=syndata:blob=tls7:strategy=11
--lua-desync=multidisorder:pos=midsld-1:seqovl=1:strategy=11
--lua-desync=syndata:blob=tls_vk_kyber:tcp_md5:strategy=12
--lua-desync=multidisorder:pos=1,midsld:tcp_md5:strategy=12
--lua-desync=syndata:blob=tls_vk_kyber:tcp_md5:strategy=13
--lua-desync=multidisorder:pos=4:repeats=10:tcp_md5:strategy=13
--lua-desync=syndata:strategy=14
--lua-desync=multidisorder:pos=1,host+2,sld+2,sld+5,sniext+1,sniext+2,endhost-2:seqovl=1:strategy=14
--lua-desync=syndata:tcp_md5:strategy=15
--lua-desync=multidisorder:pos=midsld,midsld+2:seqovl=1:tcp_md5:strategy=15
########## HTTP
--new
--filter-l7=http
--filter-tcp=80
--in-range=-d1000
--out-range=-d1000
--lua-desync=circular:fails=1:time=300:retrans=3:nld=2
--payload=http_req
--lua-desync=pass:strategy=1
--lua-desync=http_methodeol:strategy=2
--lua-desync=http_methodeol:strategy=3
--lua-desync=multisplit:pos=host+1:strategy=3
--lua-desync=http_methodeol:strategy=4
--lua-desync=multisplit:pos=host+5:strategy=4
--lua-desync=fake:blob=fake_default_http:repeats=10:ip_ttl=1:ip6_ttl=1:badsum:tcp_md5:strategy=5
--lua-desync=http_methodeol:strategy=5
--lua-desync=multisplit:pos=1,host+1,midsld:oob:strategy=5
--lua-desync=fake:blob=fake_default_http:repeats=10:ip_ttl=1:ip6_ttl=1:badsum:strategy=6
--lua-desync=http_methodeol:strategy=6
--lua-desync=multisplit:pos=1,host+1,midsld:strategy=6
--lua-desync=hostfakesplit:host=google.com:midhost=midsld:strategy=7
--lua-desync=hostfakesplit:host=yandex.ru:midhost=midsld:strategy=8
########## QUIC
--new
--filter-l7=quic
--filter-udp=443
--in-range=-d100
--out-range=-d100
--lua-desync=circular:fails=1:time=300:retrans=3:nld=2
--payload=quic_initial
--lua-desync=fake:blob=quic_google:repeats=6:payload=all:out_range=-n2:strategy=1
--lua-desync=fake:blob=quic_google:repeats=6:payload=all:strategy=2
--lua-desync=fake:blob=quic_google:repeats=3:payload=all:strategy=3
--lua-desync=fake:blob=quic_google:repeats=2:payload=all:out_range=-n2:strategy=4
--lua-desync=fake:blob=quic_google:repeats=4:payload=all:out_range=-d10:strategy=5
--lua-desync=fake:blob=quic_google:repeats=6:payload=all:out_range=-d3:strategy=6
--lua-desync=fake:blob=0x00000000000000000000000000000000:repeats=2:payload=all:out_range=-d10:strategy=7
--lua-desync=fake:blob=0x00:payload=all:out_range=-d10:strategy=8
--lua-desync=fake:blob=fake_default_udp:payload=all:out_range=-d10:strategy=9
--lua-desync=fake:blob=fake_default_udp:repeats=6:payload=all:out_range=-d10:strategy=10
--lua-desync=fake:blob=fake_default_udp:repeats=6:payload=all:out_range=-d3:strategy=11
--lua-desync=fake:blob=fake_default_udp:repeats=8:payload=all:out_range=-d3:strategy=12
--lua-desync=fake:blob=fake_default_udp:repeats=8:payload=all:out_range=-d4:strategy=13
--lua-desync=fake:blob=fake_default_udp:repeats=6:payload=all:out_range=-n4:strategy=14
--lua-desync=fake:blob=fake_default_udp:payload=all:out_range=-n3:strategy=15
########## Games UDP
--new
--filter-l7=unknown
--filter-udp=444-65535
--in-range=-d100
--out-range=-d100
--lua-desync=circular:fails=1:time=300:retrans=3:nld=2
--payload=all
--lua-desync=fake:blob=quic_google:repeats=6:payload=all:out_range=-n2:strategy=1
--lua-desync=fake:blob=quic_google:repeats=6:payload=all:strategy=2
--lua-desync=fake:blob=quic_google:repeats=3:payload=all:strategy=3
--lua-desync=fake:blob=quic_google:repeats=2:payload=all:out_range=-n2:strategy=4
--lua-desync=fake:blob=quic_google:repeats=4:payload=all:out_range=-d10:strategy=5
--lua-desync=fake:blob=quic_google:repeats=6:payload=all:out_range=-d3:strategy=6
--lua-desync=fake:blob=0x00000000000000000000000000000000:repeats=2:payload=all:out_range=-d10:strategy=7
--lua-desync=fake:blob=0x00:payload=all:out_range=-d10:strategy=8
--lua-desync=fake:blob=fake_default_udp:payload=all:out_range=-d10:strategy=9
--lua-desync=fake:blob=fake_default_udp:repeats=6:payload=all:out_range=-d10:strategy=10
--lua-desync=fake:blob=fake_default_udp:repeats=6:payload=all:out_range=-d3:strategy=11
--lua-desync=fake:blob=fake_default_udp:repeats=8:payload=all:out_range=-d3:strategy=12
--lua-desync=fake:blob=fake_default_udp:repeats=8:payload=all:out_range=-d4:strategy=13
--lua-desync=fake:blob=fake_default_udp:repeats=6:payload=all:out_range=-n4:strategy=14
--lua-desync=fake:blob=fake_default_udp:payload=all:out_range=-n3:strategy=15
########## Discord Voice
--new
--filter-l7=discord
--filter-udp=50000-65535
--in-range=-d100
--out-range=-d100
--lua-desync=circular:fails=1:time=300:retrans=3:nld=2
--payload=discord_ip_discovery
--lua-desync=fake:blob=0x00000000000000000000000000000000:repeats=2:out_range=-d10:strategy=1
--lua-desync=fake:blob=0x00:out_range=-d10:strategy=2
--lua-desync=fake:blob=quic_google:repeats=6:out_range=-d3:strategy=3
--lua-desync=fake:blob=quic_google:repeats=10:out_range=-n5:strategy=4
--lua-desync=fake:blob=quic_google:out_range=-n4:strategy=5
--lua-desync=fake:blob=quic1:out_range=-d2:strategy=6
--lua-desync=fake:blob=0x00:repeats=4:out_range=-d10:strategy=7
--lua-desync=fake:blob=0x00:repeats=6:out_range=-d10:strategy=8
--lua-desync=fake:blob=fake_default_udp:out_range=-d10:strategy=9
--lua-desync=fake:blob=fake_default_udp:repeats=6:out_range=-d10:strategy=10
--lua-desync=fake:blob=fake_default_udp:repeats=6:out_range=-d3:strategy=11
--lua-desync=fake:blob=fake_default_udp:repeats=8:out_range=-d3:strategy=12
--lua-desync=fake:blob=fake_default_udp:repeats=8:out_range=-d4:strategy=13
--lua-desync=fake:blob=fake_default_udp:repeats=6:out_range=-n4:strategy=14
--lua-desync=fake:blob=fake_default_udp:out_range=-n3:strategy=15
--lua-desync=fake:blob=0x00:repeats=4:ip_autottl=0,3-20:ip6_autottl=0,3-20:out_range=-d10:strategy=16
--lua-desync=fake:blob=0x00:repeats=6:out_range=-n2:strategy=17
--lua-desync=fake:blob=quic_google:out_range=-n2:strategy=18
--lua-desync=fake:blob=quic_test:out_range=-d2:strategy=19
--lua-desync=send:repeats=2:ip_autottl=0,3-20:strategy=20
--lua-desync=fake:blob=fake_default_udp:ip_autottl=0,3-20:out_range=-d10:strategy=20
--lua-desync=send:repeats=2:ip6_autottl=0,3-20:strategy=21
--lua-desync=fake:blob=fake_default_udp:ip6_autottl=0,3-20:out_range=-d10:strategy=21
--lua-desync=fake:blob=fake_default_udp:repeats=11:out_range=-d5:strategy=22
########## STUN
--new
--filter-l7=stun
--filter-udp=3478,19302
--in-range=-d100
--out-range=-d100
--lua-desync=circular:fails=1:time=300:retrans=3:nld=2
--payload=stun,discord_ip_discovery
--lua-desync=fake:blob=quic_vk:repeats=6:strategy=1
--lua-desync=fake:blob=0x00:strategy=2
--lua-desync=fake:blob=fake_default_udp:repeats=6:strategy=3
--lua-desync=fake:blob=quic_google:repeats=9:ip_autottl=2,3-20:ip6_autottl=2,3-20:payload=unknown:strategy=4
########### DISCORD TRY FIX
--filter-tcp=443
--filter-l7=tls
--hostlist=/opt/zapret/ipset/zapret-hosts-google.txt
--payload=tls_client_hello
--lua-desync=multisplit:pos=1,sniext+1:seqovl=1
--new
--filter-tcp=443
--filter-l7=tls
--hostlist-exclude=/opt/zapret/ipset/zapret-hosts-user-exclude.txt
--payload=tls_client_hello
--lua-desync=hostfakesplit:host=rzd.ru:midhost=host-2:badsum:tcp_ack=-66000:tcp_ts_up
--new
--filter-udp=19294-19344,50000-50100
--filter-l7=discord,stun
--lua-desync=fake:blob=quic_google:repeats=6
--new
--filter-tcp=2053,2083,2087,2096,8443
--filter-l7=tls
--hostlist-domains=discord.media
--payload=tls_client_hello
--lua-desync=multisplit:pos=2:seqovl=652:seqovl_pattern=tls_ch_google
--new
--filter-udp=1024-19293,19345-49999,50101-65535
--out-range=-d2
--lua-desync=fake:blob=quic_google
⚙️ Конфигурация
config main 'config'
option run_on_boot '1'
option FWTYPE 'nftables'
option POSTNAT '1'
option FLOWOFFLOAD 'none'
option INIT_APPLY_FW '1'
option DISABLE_IPV4 '0'
option DISABLE_IPV6 '0'
option FILTER_TTL_EXPIRED_ICMP '1'
option MODE_FILTER 'autohostlist'
option DISABLE_CUSTOM '1'
option WS_USER 'daemon'
option DAEMON_LOG_ENABLE '1'
option DAEMON_LOG_FILE '/tmp/zapret2+<DAEMON_NAME>+<DAEMON_IDNUM>+<DAEMON_CFGNAME>.log'
option AUTOHOSTLIST_INCOMING_MAXSEQ '4096'
option AUTOHOSTLIST_RETRANS_MAXSEQ '32768'
option AUTOHOSTLIST_RETRANS_THRESHOLD '3'
option AUTOHOSTLIST_FAIL_THRESHOLD '3'
option AUTOHOSTLIST_FAIL_TIME '60'
option AUTOHOSTLIST_UDP_IN '1'
option AUTOHOSTLIST_UDP_OUT '4'
option AUTOHOSTLIST_DEBUGLOG '0'
option NFQWS2_ENABLE '1'
option DESYNC_MARK '0x40000000'
option DESYNC_MARK_POSTNAT '0x20000000'
option FILTER_MARK ' '
option NFQWS2_PORTS_TCP '80,443,2053,2083,2087,2096,8443'
option NFQWS2_PORTS_UDP '443,444-65535,50000-65535,3478,19302,19294-19344,50000-50100,1024-19293,19345-49999,50101-65535'
option NFQWS2_TCP_PKT_OUT '9'
option NFQWS2_TCP_PKT_IN '3'
option NFQWS2_UDP_PKT_OUT '9'
option NFQWS2_UDP_PKT_IN '0'
option NFQWS2_PORTS_TCP_KEEPALIVE '0'
option NFQWS2_PORTS_UDP_KEEPALIVE '0'
option NFQWS2_OPT '
📝 Описание проблемы
Товарищи, Ростелеком москва, насмерть не могу настроить дискорд, недавно всё работало, но дней 5 назад улетело, приложение не открываетя, сайт работает но к голосовым каналам подключение не работает. Переносил частично 10 конфиг (general (ALT10).bat) с компа работает. Однако перенос между Zapret1 и Zapret2 не очень тривиален оказался.
Прочитал большую часть обсуждения Zapret2 и Issues связанных с дискордом. однако решения не подошли, включение custom.d не помгло
youtube работает, прочие домены из /opt/zapret2/ipset/zapret-hosts-user.txt и /opt/zapret2/ipset/zapret-hosts-google.txt тоже открываются и доступны
/opt/zapret2/ipset/zapret-ip-exclude.txt
zapret-hosts-user-exclude.txt
/opt/zapret2/ipset/zapret-hosts-user.txt
/opt/zapret2/ipset/zapret-hosts-google.txt
Шаги для воспроизведения
✅ Ожидаемое поведение
Дискорд обновляется, приложение запускается, каналы заходят, стрим экрана работает. Работа прочих сайтов и youtube на телефоне не нарушена(Насколько я понял телефоны толкьо с IPv6 работают)
🖥️ Информация о системе
✅ Используемая стратегия NFQWS
⚙️ Конфигурация