eburet-oss/sing-tun-lx
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Reject connections to redirect listener

Browse source
This commit is contained in:
世界 2026-07-24 10:26:49 +08:00
parent add23d4844
commit 80ea96e5b4
No known key found for this signature in database
GPG key ID: CD109927C34A63C4
4 changed files with 104 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

11
redirect_nftables.go
View file

@ -123,6 +123,17 @@ func (r *autoRedirect) setupNFTables() error {
}
}
if r.redirectServer != nil {
chainInput := nft.AddChain(&nftables.Chain{
Name: "input",
Table: table,
Hooknum: nftables.ChainHookInput,
Priority: nftables.ChainPriorityFilter,
Type: nftables.ChainTypeFilter,
})
r.nftablesCreateRedirectPortReject(nft, table, chainInput)
}
chainPreRouting := nft.AddChain(&nftables.Chain{
Name: "prerouting",
Table: table,