eburet-oss/sing-tun-lx
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Skip generate nftables output chain if lo in excluded interface list

Browse source
This commit is contained in:
世界 2024-06-17 13:29:56 +08:00
parent 85f5f2dd58
commit 1048b277ea
No known key found for this signature in database
GPG key ID: CD109927C34A63C4
1 changed files with 35 additions and 32 deletions
Download patch file Download diff file Expand all files Collapse all files

3
redirect_nftables.go
View file

@ -42,6 +42,8 @@ func (r *autoRedirect) setupNFTables() error {
return err return err
} }
skipOutput := len(r.tunOptions.IncludeInterface) > 0 && !common.Contains(r.tunOptions.IncludeInterface, "lo") || common.Contains(r.tunOptions.ExcludeInterface, "lo")
if !skipOutput {
chainOutput := nft.AddChain(&nftables.Chain{ chainOutput := nft.AddChain(&nftables.Chain{
Name: "output", Name: "output",
Table: table, Table: table,
@ -80,6 +82,7 @@ func (r *autoRedirect) setupNFTables() error {
Data: nftablesIfname(r.tunOptions.Name), Data: nftablesIfname(r.tunOptions.Name),
}) })
} }
}
chainPreRouting := nft.AddChain(&nftables.Chain{ chainPreRouting := nft.AddChain(&nftables.Chain{
Name: "prerouting", Name: "prerouting",