BOX_EXTERNAL should be added to PREROUTING chain only once (#88)

taamarin · Jan 30, 2024 · 43ae9cd · 43ae9cd
1 parent 68352db
commit 43ae9cd
Showing 1 changed file with 0 additions and 2 deletions.
diff --git a/box/scripts/box.iptables b/box/scripts/box.iptables
@@ -383,8 +383,6 @@ start_tproxy() {
       fi
     done
   fi
-  # Append the BOX_EXTERNAL chain to the PREROUTING chain
-  ${iptables} -t mangle -A PREROUTING -j BOX_EXTERNAL
 
   ${iptables} -t mangle -A BOX_EXTERNAL -p tcp -i lo -j TPROXY --on-port "${tproxy_port}" --tproxy-mark "${fwmark}"
   ${iptables} -t mangle -A BOX_EXTERNAL -p udp -i lo -j TPROXY --on-port "${tproxy_port}" --tproxy-mark "${fwmark}"