redirect: Only hijack DNS requests from local addresses

This commit is contained in:
世界 2025-04-02 15:44:43 +08:00
parent 35b5747b44
commit a8ce3838bc
No known key found for this signature in database
GPG key ID: CD109927C34A63C4
2 changed files with 33 additions and 4 deletions

View file

@ -101,7 +101,9 @@ func (r *autoRedirect) setupNFTables() error {
}
r.nftablesCreateUnreachable(nft, table, chainPreRouting)
r.nftablesCreateRedirect(nft, table, chainPreRouting)
r.nftablesCreateMark(nft, table, chainPreRouting)
if r.tunOptions.AutoRedirectMarkMode {
r.nftablesCreateMark(nft, table, chainPreRouting)
}
if r.tunOptions.AutoRedirectMarkMode {
chainPreRoutingUDP := nft.AddChain(&nftables.Chain{