From 85f502ba28f07c88febc984e73bbbf9c3b418dd7 Mon Sep 17 00:00:00 2001 From: lirundong Date: Mon, 11 Dec 2023 15:49:12 +0800 Subject: [PATCH] [openwrt] update DNS DNAT comment --- openwrt-builder/files/etc/nftables.d/99-sing-box.nft | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/openwrt-builder/files/etc/nftables.d/99-sing-box.nft b/openwrt-builder/files/etc/nftables.d/99-sing-box.nft index 2b6ee30..a30c370 100644 --- a/openwrt-builder/files/etc/nftables.d/99-sing-box.nft +++ b/openwrt-builder/files/etc/nftables.d/99-sing-box.nft @@ -66,7 +66,7 @@ chain mangle_prerouting_custom { type filter hook prerouting priority mangle - 1; policy accept; # 1. Do not touch packets from direct-to-wan devices. ether saddr @direct_macs counter return - # 2. Mark DNS packets and TProxy to sing-box's TProxy port. + # 2. Mark DNS packets, they will be DNAT to the TUN network later. iifname $lan_devices meta l4proto {tcp, udp} th dport 53 counter meta mark set $dns_mark return # 3. Bypass local connections. ip daddr @local_ipv4 counter return