 Andrey Petelin
|
3383ad51ec
|
fix: skip connections with DNAT status in NFT mangle chain
|
2026-06-01 12:11:14 +03:00 |
|
|
Andrey Petelin
|
c5499c5739
|
fix: support multiple server ports for hysteria2 outbounds
|
2026-05-29 15:45:13 +03:00 |
|
|
Andrey Petelin
|
29228f4520
|
fix: initialize scheme before checking security and clear fingerprint for hysteria2 (hy2) schemes
|
2026-05-29 13:58:02 +03:00 |
|
|
Andrey Petelin
|
466a18e7ea
|
docs: remove leading Markdown heading from Russian trademark guide
|
2026-05-29 10:03:43 +03:00 |
|
|
Andrey Petelin
|
a6226870b1
|
docs: Rewrite README.md to add project intro, warnings, requirements, install & support; remove outdated notes
|
2026-05-28 18:41:35 +03:00 |
|
|
Andrey Petelin
|
32e40674aa
|
docs: add trademark guidelines in English and Russian (TRADEMARK.md, TRADEMARK_RU.md)
|
2026-05-28 18:40:23 +03:00 |
|
|
Andrey Petelin
|
860ce5e416
|
fix: include UDP port range 19000-20000 in Discord nft rule
|
2026-05-14 10:23:50 +03:00 |
|
|
Andrey Petelin
|
47f829470b
|
chore: set dns_server to 77.88.8.8
|
2026-01-29 10:03:25 +03:00 |
|
|
Andrey Petelin
|
174b4778c6
|
fix: use nslookup_attempts for DNS check loop instead of nslookup_timeout
|
2026-01-28 10:45:35 +03:00 |
|
|
Andrey Petelin
|
bcd6cfe2c5
|
fix: Disable dnsmasq noresolv when restoring or using default resolvfile; ensure resolvfile is applied
|
2026-01-23 15:42:05 +03:00 |
|
|
Andrey Petelin
|
5c7e1fc4d3
|
fix: mask selector_proxy_links in podkop redaction to hide sensitive proxy selectors
|
2026-01-23 14:00:34 +03:00 |
|
|
Andrey Petelin
|
92f14cd15b
|
fix: only print colored timestamp and message when stdout is a terminal
|
2026-01-23 13:59:26 +03:00 |
|
|
Andrey Petelin
|
e6b3a14eb3
|
fix: set default log_level to "warn" when missing in settings
|
2026-01-22 19:02:15 +03:00 |
|
|
Andrey Petelin
|
1375306d33
|
feat: Add 'exclusion' connection type with direct route rule
|
2026-01-19 14:10:09 +03:00 |
|
|
Andrey Petelin
|
5c15289f32
|
fix: use fwmark/mask and bitwise meta mark comparison to correctly match packet marks
|
2026-01-14 12:09:51 +03:00 |
|
|
Andrey Petelin
|
883d502fe7
|
fix: avoid outbound traffic loop by adding NFT_OUTBOUND_MARK (0x90000) and mangle_output return rule (#248)
|
2026-01-14 08:29:13 +03:00 |
|
|
Andrey Petelin
|
712ef8a495
|
fix: replace fakeip mark 0x105 with 0x80000 to avoid conflict with mwan3 (#275)
|
2026-01-14 08:25:03 +03:00 |
|
|
Andrey Petelin
|
e43c7e74c7
|
feat: add selector proxy type support
|
2026-01-09 21:32:58 +03:00 |
|
|
Andrey Petelin
|
d55042e7cd
|
feat: Add log_level option in LuCI and use configured value for sing-box logging
|
2025-12-10 15:58:22 +03:00 |
|
|
Andrey Petelin
|
7fa2e9ffaf
|
fix: lower priority of fully_routed_ips relative to routing_excluded_ips
|
2025-12-10 14:55:23 +03:00 |
|
|
Andrey Petelin
|
8eda34ba5a
|
fix: add and source network functions, use network_get_ipaddr to obtain LAN listen IP
|
2025-12-09 13:15:58 +03:00 |
|
|
Andrey Petelin
|
c43f990749
|
fix: take first LAN IP address and strip CIDR suffix
|
2025-12-03 08:21:51 +03:00 |
|
|
Andrey Petelin
|
ece49e945e
|
fix: have service_listen_address option override automatic detection of listening IP address
|
2025-12-03 07:58:28 +03:00 |
|
|
Andrey Petelin
|
abdec3995a
|
feat: Add Hysteria2 outbound support
|
2025-11-26 19:04:46 +03:00 |
|
|
Andrey Petelin
|
80dffc5742
|
refactor: add url_get_scheme and simplify url_get_host/url_get_port using parameter expansion
|
2025-11-26 19:01:33 +03:00 |
|
|
Andrey Petelin
|
3f17448363
|
Merge branch 'main' into feat/hy2
|
2025-11-26 15:06:27 +03:00 |
|
|
Andrey Petelin
|
a862984b99
|
refactor: remove sing-box start exit check
|
2025-11-26 14:01:41 +03:00 |
|
|
Andrey Petelin
|
2831219d23
|
fix: use echolog for sing-box start failure
|
2025-11-26 13:47:12 +03:00 |
|
|
Andrey Petelin
|
71882e8a30
|
chore: restore shutdown_correctly logic
|
2025-11-26 12:14:27 +03:00 |
|
|
Andrey Petelin
|
6ec670d1f8
|
chore: restore start_main and stop_main; have reload call them instead of full start/stop
|
2025-11-26 11:56:10 +03:00 |
|
|
Andrey Petelin
|
87a7079785
|
chore: clarify and standardize argument type annotations and optional flags
|
2025-11-26 08:14:06 +03:00 |
|
|
Andrey Petelin
|
ede4849267
|
fix: reload PODKOP_CONFIG after uci commit to refresh config on shutdown
|
2025-11-25 15:05:25 +03:00 |
|
|
Andrey Petelin
|
6f48b2ec87
|
refactor: add configurable DNS/curl timeouts and retries, detect service proxy, and improve connection checks
|
2025-11-25 15:04:31 +03:00 |
|
|
Andrey Petelin
|
ab6caf23c3
|
refactor: use uci wrappers
|
2025-11-25 12:10:18 +03:00 |
|
|
Andrey Petelin
|
345a29b9b2
|
refactor: configuring dnsmasq after starting sing-box
|
2025-11-25 11:53:24 +03:00 |
|
|
Andrey Petelin
|
2a6221d2d6
|
refactor: unify source ruleset preparation and list handlers; make ruleset creation idempotent and atomic updates
|
2025-11-21 18:37:19 +03:00 |
|
|
Andrey Petelin
|
2e95e251db
|
fix: import remote plain domain and subnet lists using chunked processing
|
2025-11-16 11:21:51 +03:00 |
|
|
Andrey Petelin
|
a5d3104e89
|
chore: shorten Text List option label by removing the detailed format hint
|
2025-11-16 07:56:12 +03:00 |
|
|
Andrey Petelin
|
6f6ce2bf18
|
fix: load large plain domain/subnet lists in chunks; move ruleset logic to rulesets.sh and nft chunker to nft.sh
|
2025-11-16 07:55:44 +03:00 |
|
|
Andrey Petelin
|
6970785691
|
style: add missing semicolons to o.depends calls in luci-app-podkop settings.js
|
2025-11-06 19:20:05 +03:00 |
|
|
Andrey Petelin
|
670c1bd0d5
|
chore: correct typo "spedifying" to "specifying" in REST API secret comment
|
2025-11-06 19:18:15 +03:00 |
|
|
Andrey Petelin
|
cf465dd83a
|
fix: bind mixed proxy and Clash API to service IP (no 0.0.0.0); add YACD WAN toggle and secret key
|
2025-11-06 14:33:03 +03:00 |
|
|
Andrey Petelin
|
efbe018ca5
|
feat: Add optional secret for RESTful API to experimental.clash_api config
|
2025-11-06 14:30:42 +03:00 |
|
|
Andrey Petelin
|
302c7cdbce
|
fix: import large subnet lists in chunks into nft sets
|
2025-10-30 12:07:12 +03:00 |
|
|
Andrey Petelin
|
f871445880
|
fix: include filename in log and remove temp file on CRLF-to-LF conversion
|
2025-10-29 20:11:29 +03:00 |
|
|
Andrey Petelin
|
596788a09d
|
refactor: fetch remote JSON to temp files and parse ip_cidr into subnets; remove download_to_stream
|
2025-10-29 19:52:44 +03:00 |
|
|
Andrey Petelin
|
2c03326788
|
fix: convert Windows CRLF line endings to LF for downloaded files
|
2025-10-29 19:36:46 +03:00 |
|
|
Andrey Petelin
|
3795867f1b
|
chore: refine Russian translations for 'URLTest Testing URL' and 'URLTest Tolerance'
|
2025-10-27 14:21:51 +03:00 |
|
|
Andrey Petelin
|
007036601e
|
feat: add URLTest check interval, tolerance and testing URL options and wire them into outbound config generation
|
2025-10-27 13:17:20 +03:00 |
|
|
Andrey Petelin
|
3098683208
|
fix: mask outbound_json block and DNS/domain_resolver addresses in podkop config output
|
2025-10-25 17:27:01 +03:00 |
|
|
Andrey Petelin
|
89d0a35fce
|
fix: read routing_excluded_ips as non-boolean string with config_get instead of config_get_bool
|
2025-10-24 15:32:35 +03:00 |
|
|
Andrey Petelin
|
1bc4494b11
|
fix: disable auto_detect_interface when output_network_interface is specified
|
2025-10-23 12:05:42 +03:00 |
|
|
Andrey Petelin
|
7598717f8b
|
chore: Update UDP-over-TCP option label and description to clarify SOCKS/Shadowsocks applicability
|
2025-10-21 14:24:24 +03:00 |
|
|
Andrey Petelin
|
7f68dd8463
|
chore: remove comments support for proxy url
|
2025-10-21 13:25:07 +03:00 |
|
|
Andrey Petelin
|
df14943368
|
feat: pass default interface to sing-box route
|
2025-10-21 09:24:44 +03:00 |
|
|
Andrey Petelin
|
8a4a43e732
|
feat: add optional default_interface parameter and include it in route when provided
|
2025-10-21 09:23:29 +03:00 |
|
|
Andrey Petelin
|
e80ed79650
|
feat: enable UDP-over-TCP (mode 2) for SOCKS outbound when udp_over_tcp=1 and split args for readability
|
2025-10-20 18:16:07 +03:00 |
|
|
Andrey Petelin
|
d842a562d5
|
feat: add socks4/socks4a/socks5 outbound support
|
2025-10-20 18:09:15 +03:00 |
|
|
Andrey Petelin
|
1972fa0289
|
refactor: rename enable_shadowsocks_udp_over_tcp to enable_udp_over_tcp in config and script
|
2025-10-20 18:03:13 +03:00 |
|
|
Andrey Petelin
|
f10d6f64c1
|
chore: rename SOCKS5 outbound function/comments to generic SOCKS
|
2025-10-20 18:02:34 +03:00 |
|
|
Andrey Petelin
|
a740660d51
|
chore: add SOCKS proxy examples to String-example.md
|
2025-10-20 18:00:21 +03:00 |
|
|
Andrey Petelin
|
33a9a11b47
|
chore: standardize log messages and severities
|
2025-10-20 14:58:45 +03:00 |
|
|
Andrey Petelin
|
253e583f9a
|
fix: read dont_touch_dhcp from "settings" section instead of "main"
|
2025-10-19 17:23:49 +03:00 |
|
|
Andrey Petelin
|
377317cc0d
|
chore: extract outbound section check into _check_outbound_section and call it via config_foreach
|
2025-10-19 17:19:59 +03:00 |
|
|
Andrey Petelin
|
db4009bf0a
|
refactor: use get_first_outbound_section to determine outbound tag, remove SB_MAIN_OUTBOUND_TAG constant
|
2025-10-19 17:17:50 +03:00 |
|
|
Andrey Petelin
|
37df3d3b1b
|
refactor: create outbound validation into has_outbound_section and check all sections
|
2025-10-19 16:53:21 +03:00 |
|
|
Andrey Petelin
|
fc05a11a75
|
feat: honor download_lists_via_proxy and use its outbound section as detour tag for rule set
|
2025-10-14 18:22:46 +03:00 |
|
|
Andrey Petelin
|
2441cb1a16
|
fix: replace config_get_bool with config_get for community/local/remote list options in podkop script
|
2025-10-14 18:19:57 +03:00 |
|
|
Andrey Petelin
|
aa8346b78f
|
Merge remote-tracking branch 'origin/rc/7.x.x' into rc/7.x.x
|
2025-10-14 18:19:48 +03:00 |
|
|
Andrey Petelin
|
b2de5e80ed
|
feat: honor download_lists_via_proxy setting and use its outbound section for service mixed inbound routing
|
2025-10-14 18:12:12 +03:00 |
|
|
Andrey Petelin
|
01ede9c8d9
|
refactor: restructure podkop config
|
2025-10-10 20:14:53 +03:00 |
|
|
Andrey Petelin
|
93f8c8606a
|
fix: Use connection_type instead of mode for option dependencies in podkop section.js
|
2025-10-10 20:14:51 +03:00 |
|
|
Andrey Petelin
|
7be99ab308
|
refactor: rename 'ss_uot' to 'enable_shadowsocks_udp_over_tcp'
|
2025-10-10 20:14:49 +03:00 |
|
|
Andrey Petelin
|
cf07d54683
|
refactor: rename 'procd_reload_delay' to 'badwan_reload_delay'
|
2025-10-10 20:14:35 +03:00 |
|
|
Andrey Petelin
|
5554b1009d
|
refactor: rename 'restart_ifaces' to 'badwan_monitored_interfaces'
|
2025-10-10 20:14:34 +03:00 |
|
|
Andrey Petelin
|
959ea16d9f
|
refactor: rename 'mon_restart_ifaces' to 'enable_badwan_interface_monitoring'
|
2025-10-10 20:14:32 +03:00 |
|
|
Andrey Petelin
|
63ef31a318
|
refactor: rename 'detour' to 'download_lists_via_proxy'
|
2025-10-10 20:14:30 +03:00 |
|
|
Andrey Petelin
|
3b586aeccb
|
refactor: rename 'quic_disabled' to 'disable_quic'
|
2025-10-10 20:14:27 +03:00 |
|
|
Andrey Petelin
|
4c32e12ec2
|
refactor: rename 'yacd' to 'enable_yacd'
|
2025-10-10 20:14:26 +03:00 |
|
|
Andrey Petelin
|
ee5954b139
|
refactor: rename 'iface' to 'source_network_interfaces'
|
2025-10-10 20:14:23 +03:00 |
|
|
Andrey Petelin
|
aa857e7f27
|
refactor: rename config key 'mode' to 'connection_type'
|
2025-10-10 20:14:21 +03:00 |
|
|
Andrey Petelin
|
e484717582
|
chore: improve wording and capitalization of settings UI labels and descriptions
|
2025-10-10 20:14:19 +03:00 |
|
|
Andrey Petelin
|
a764b57cbe
|
refactor: use list presence instead of *_enabled flags, simplify UI texts/placeholders, remove mixed inbound tag
|
2025-10-10 20:14:17 +03:00 |
|
|
Andrey Petelin
|
d555edf0f4
|
refactor: rename all_traffic_ip to fully_routed_ips, remove all_traffic_from_ip_enabled flag, update handlers
|
2025-10-10 20:14:15 +03:00 |
|
|
Andrey Petelin
|
9e029cb2da
|
feat: Add mixed proxy per section with UI port option and sing-box integration
|
2025-10-10 20:14:13 +03:00 |
|
|
Andrey Petelin
|
44eb58b31e
|
refactor: switch UCI lookups from 'main' to 'settings', add routing_excluded_ips and relocate update_interval in UI
|
2025-10-10 20:14:10 +03:00 |
|
|
Andrey Petelin
|
b02a590c67
|
refactor: Pass 'section' to config_foreach so outbound handler iterates only the correct sections
|
2025-10-10 20:14:08 +03:00 |
|
|
Andrey Petelin
|
fa905c9bfe
|
refactor: remove legacy migration logic; make migration() a no-op
|
2025-10-10 20:14:05 +03:00 |
|
|
Andrey Petelin
|
4e6af370f4
|
i18n: update Russian translations for additional settings and related messages
|
2025-10-07 18:42:34 +03:00 |
|
|
Andrey Petelin
|
eaf95af015
|
fix: sort input files before processing in xgettext.sh to ensure consistent POT generation
|
2025-10-07 18:12:46 +03:00 |
|
|
Andrey Petelin
|
76bb22fbf7
|
fix: update shebang to env bash and add strict mode for safer script execution in xgettext.sh
|
2025-10-07 18:12:14 +03:00 |
|
|
Andrey Petelin
|
444ac97a74
|
feat: enable Clash API with YACD or online mode in podkop configuration
|
2025-10-07 01:07:48 +03:00 |
|
|
Andrey Petelin
|
83a746a554
|
feat: conditionally include external_ui in clash_api config if external_ui path is provided
|
2025-10-07 01:07:48 +03:00 |
|
|
Andrey Petelin
|
8ef01fd3dd
|
fix: resolve domain resolver DNS server address before IPv4 validation in VPN and DNS configuration sections
|
2025-10-03 16:07:24 +03:00 |
|
|
Andrey Petelin
|
4694743cb9
|
fix: correct Russian translation for "works on router" in podkop.po file
|
2025-10-03 14:08:25 +03:00 |
|
|
Andrey Petelin
|
e3286fc6ce
|
fix: pass outbound tag to security and transport functions for accurate config updates
|
2025-10-03 14:03:36 +03:00 |
|
|
Andrey Petelin
|
aa9a3c2452
|
feat: add Trojan proxy support (#172)
|
2025-10-03 13:40:16 +03:00 |
|
|
Andrey Petelin
|
0645b8b368
|
feat: add function to append Trojan outbound to sing-box JSON configuration
|
2025-10-03 12:19:45 +03:00 |
|
|
Andrey Petelin
|
a685a60db8
|
refactor: rename VLESS-specific functions to generic outbound transport and TLS setters
|
2025-10-03 11:45:00 +03:00 |
|
|
Andrey Petelin
|
2a27868ce7
|
chore: update String-example.md with detailed Shadowsocks, VLESS, and Trojan protocol examples and configurations
|
2025-10-03 11:35:18 +03:00 |
|