Skip to content

Commit

Permalink
[openwrt] update DNS DNAT comment
Browse files Browse the repository at this point in the history
  • Loading branch information
lirundong committed Dec 11, 2023
1 parent 8a4bd56 commit 85f502b
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion openwrt-builder/files/etc/nftables.d/99-sing-box.nft
Original file line number Diff line number Diff line change
Expand Up @@ -66,7 +66,7 @@ chain mangle_prerouting_custom {
type filter hook prerouting priority mangle - 1; policy accept;
# 1. Do not touch packets from direct-to-wan devices.
ether saddr @direct_macs counter return
# 2. Mark DNS packets and TProxy to sing-box's TProxy port.
# 2. Mark DNS packets, they will be DNAT to the TUN network later.
iifname $lan_devices meta l4proto {tcp, udp} th dport 53 counter meta mark set $dns_mark return
# 3. Bypass local connections.
ip daddr @local_ipv4 counter return
Expand Down

0 comments on commit 85f502b

Please sign in to comment.