fix: complete Telegram routing, AmneziaWG action support & flowtable bypass
- nft/apply.uc: add 'awg' and 'warp' to action_captures_traffic so nftables creates priority sets for AmneziaWG / Cloudflare WARP sections. - nft/apply.uc: insert flowtable bypass in fw4 forward for marked TPROXY packets so OpenWrt flow offloading doesn't hijack proxied connections. - singbox/generator_routes.uc: include official Telegram IP CIDRs in route rules for telegram community list so direct IP connections match sing-box rules.
This commit is contained in:
@@ -1139,6 +1139,16 @@ function add_combined_route_for_section(config, section) {
|
||||
let ensured = ensure_community_ruleset(config, section_name, as_string(community));
|
||||
push(rule_set_tags, ensured.tag);
|
||||
push(dns_rule_set_tags, ensured.tag);
|
||||
if (as_string(community) == "telegram") {
|
||||
let tg_cidrs = [
|
||||
"149.154.160.0/20", "91.108.4.0/22", "91.108.8.0/22",
|
||||
"91.108.12.0/22", "91.108.16.0/22", "91.108.56.0/22",
|
||||
"5.28.192.0/18", "91.105.192.0/23", "95.161.64.0/20",
|
||||
"185.76.151.0/24", "194.221.0.0/16"
|
||||
];
|
||||
for (let cidr in tg_cidrs)
|
||||
push(ip_cidr, cidr);
|
||||
}
|
||||
}
|
||||
for (let reference in connections.rule_sets(section)) {
|
||||
let ensured = ensure_custom_ruleset(config, as_string(reference));
|
||||
|
||||
Reference in New Issue
Block a user