auto-redirect: Let fw4 take precedence over prerouting

This commit is contained in:
世界 2024-10-08 20:54:52 +08:00
parent 9e1969527e
commit 059f5b6aaf
No known key found for this signature in database
GPG key ID: CD109927C34A63C4

View file

@ -88,7 +88,7 @@ func (r *autoRedirect) setupNFTables() error {
Name: "prerouting",
Table: table,
Hooknum: nftables.ChainHookPrerouting,
Priority: nftables.ChainPriorityMangle,
Priority: nftables.ChainPriorityRef(*nftables.ChainPriorityNATDest + 1),
Type: nftables.ChainTypeNAT,
})
err = r.nftablesCreateExcludeRules(nft, table, chainPreRouting)
@ -104,7 +104,7 @@ func (r *autoRedirect) setupNFTables() error {
Name: "prerouting_udp",
Table: table,
Hooknum: nftables.ChainHookPrerouting,
Priority: nftables.ChainPriorityRef(*nftables.ChainPriorityMangle + 1),
Priority: nftables.ChainPriorityRef(*nftables.ChainPriorityNATDest + 2),
Type: nftables.ChainTypeFilter,
})
if r.enableIPv4 {