update nftable rules #1

yangliu · Jul 20, 2021 · b695723 · b695723
1 parent e655531
commit b695723
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/scripts/setup-tun.sh b/scripts/setup-tun.sh
@@ -118,8 +118,8 @@ table ip clash {
         
         ip protocol != { tcp, udp } accept
         
-        udp dport 53 dnat $FORWARD_DNS_REDIRECT
-        tcp dport 53 dnat $FORWARD_DNS_REDIRECT
+        ip daddr \$LOCAL_SUBNET udp dport 53 dnat $FORWARD_DNS_REDIRECT
+        ip daddr \$LOCAL_SUBNET tcp dport 53 dnat $FORWARD_DNS_REDIRECT
     }
 }
 EOF
@@ -157,8 +157,8 @@ table ip clash {
         meta cgroup $BYPASS_CGROUP_CLASSID_AGH accept
 
         ip daddr 127.0.0.0/8 accept
-        udp dport 53 dnat $FORWARD_DNS_REDIRECT
-        tcp dport 53 dnat $FORWARD_DNS_REDIRECT
+        ip daddr \$LOCAL_SUBNET udp dport 53 dnat $FORWARD_DNS_REDIRECT
+        ip daddr \$LOCAL_SUBNET tcp dport 53 dnat $FORWARD_DNS_REDIRECT
 
         ip daddr \$LOCAL_SUBNET accept
         ip protocol tcp redirect to :$redir_port