public/zapret
1
0 Fork 0
mirror of https://github.com/bol-van/zapret.git synced 2026-10-21 03:56:30 +09:00
Code Issues Actions Packages Projects Releases Wiki Activity

readme: cosmetics

Browse Source
This commit is contained in:
bol-van authored and GitHub committed 2022-01-04 13:25:23 +03:00
1 parent caad4edf5f
commit b2ad9cb594
1 file changed
+2 -2
Download Patch File Download Diff File Expand all files Collapse all files
docs/readme.eng.md
+2 -2
View File
@@ -404,9 +404,9 @@ ipv4 : Linux allows to send ipv4 fragments but standard firewall rules in OUTPUT
ipv6 : There's no way for an application to reliably send fragments without defragmentation in conntrack.
Sometimes it works, sometimes system defragments packets.
Looks like kernels <4.16 have no simple way to solve this problem. Unloading of nf_conntrack module
and its dependency nf_defrag_ipv6 helps but this severe impacts functionality.
and its dependency nf_defrag_ipv6 helps but this severely impacts functionality.
Kernels 4.16+ exclude from defragmentation untracked packets.
See blockcheck.sh code for example.
See `blockcheck.sh` code for example.
## tpws