diff options
| -rw-r--r-- | src/platform/linux/iptables.rs | 19 |
1 files changed, 0 insertions, 19 deletions
diff --git a/src/platform/linux/iptables.rs b/src/platform/linux/iptables.rs index 52d0350..fe138be 100644 --- a/src/platform/linux/iptables.rs +++ b/src/platform/linux/iptables.rs @@ -138,21 +138,6 @@ pub fn install_iptables_rules(ipt: &IPTables) -> Result<()> { 1 ).map_err(iptables_err)?; - if opt::fake_autottl() { - let synack_rule = vec![ - "-p", "tcp", - "--sport", "443", - "-m", "tcp", "--tcp-flags", "SYN,ACK", "SYN,ACK", - "-j", "NFQUEUE", "--queue-num", &q_num, "--queue-bypass", - ]; - - ipt.append("mangle", DPIBREAK_CHAIN, &synack_rule).map_err(iptables_err)?; - crate::info!("{}: add SYN/ACK learning rule on mangle/{}", ipt.cmd, DPIBREAK_CHAIN); - - ipt.insert("mangle", "INPUT", &["-j", DPIBREAK_CHAIN], 1).map_err(iptables_err)?; - crate::info!("{}: add jump to {} chain on INPUT", ipt.cmd, DPIBREAK_CHAIN); - } - ipt.append("mangle", DPIBREAK_CHAIN, &rule).map_err(iptables_err)?; crate::info!("{}: new chain {} on table mangle", ipt.cmd, DPIBREAK_CHAIN); @@ -167,10 +152,6 @@ pub fn cleanup_iptables_rules(ipt: &IPTables) -> Result<()> { crate::info!("{}: delete jump to {} from mangle/POSTROUTING", ipt.cmd, DPIBREAK_CHAIN); } - if opt::fake_autottl() && ipt.delete("mangle", "INPUT", &["-j", DPIBREAK_CHAIN]).is_ok() { - crate::info!("{}: delete jump to {} from mangle/INPUT", ipt.cmd, DPIBREAK_CHAIN); - } - if ipt.flush_chain("mangle", DPIBREAK_CHAIN).is_ok() { crate::info!("{}: flush chain {}", ipt.cmd, DPIBREAK_CHAIN); } |