From 49c8dfedc9990477e20468947904748ea67aa96c Mon Sep 17 00:00:00 2001 From: bol-van Date: Mon, 20 Jul 2026 19:51:18 +0300 Subject: [PATCH] init.d: extend discord media ports to 19294-19344 --- init.d/custom.d.examples.linux/50-discord-media | 6 +++--- .../windivert_part.discord_media.txt | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/init.d/custom.d.examples.linux/50-discord-media b/init.d/custom.d.examples.linux/50-discord-media index a654883..cf3e73c 100644 --- a/init.d/custom.d.examples.linux/50-discord-media +++ b/init.d/custom.d.examples.linux/50-discord-media @@ -3,7 +3,7 @@ # can override in config : NFQWS_OPT_DESYNC_DISCORD_MEDIA="${NFQWS_OPT_DESYNC_DISCORD_MEDIA:---payload=discord_ip_discovery --lua-desync=fake:blob=0x00000000000000000000000000000000:repeats=2}" -DISCORD_MEDIA_PORT_RANGE="${DISCORD_MEDIA_PORT_RANGE:-50000-50099}" +DISCORD_MEDIA_PORT_RANGE="${DISCORD_MEDIA_PORT_RANGE:-50000-50099,19294-19344}" alloc_dnum DNUM_DISCORD_MEDIA alloc_qnum QNUM_DISCORD_MEDIA @@ -21,7 +21,7 @@ zapret_custom_firewall() local DISABLE_IPV6=1 local port_range=$(replace_char - : $DISCORD_MEDIA_PORT_RANGE) - local f="-p udp --dport $port_range -m u32 --u32" + local f="-p udp -m multiport --dports $port_range -m u32 --u32" # this is simplified test to skip writing monstrous rule. instead of checking 64 bytes for zeroes only check 2 dwords for zero fw_nfqws_post $1 "$f 0>>22&0x3C@4>>16=0x52&&0>>22&0x3C@8=0x00010046&&0>>22&0x3C@16=0&&0>>22&0x3C@76=0" '' $QNUM_DISCORD_MEDIA } @@ -30,6 +30,6 @@ zapret_custom_firewall_nft() # stop logic is not required local DISABLE_IPV6=1 - local f="udp dport $DISCORD_MEDIA_PORT_RANGE udp length == 82 @ih,0,32 0x00010046 @ih,64,128 0x00000000000000000000000000000000 @ih,192,128 0x00000000000000000000000000000000 @ih,320,128 0x00000000000000000000000000000000 @ih,448,128 0x00000000000000000000000000000000" + local f="udp dport {$DISCORD_MEDIA_PORT_RANGE} udp length == 82 @ih,0,32 0x00010046 @ih,64,128 0x00000000000000000000000000000000 @ih,192,128 0x00000000000000000000000000000000 @ih,320,128 0x00000000000000000000000000000000 @ih,448,128 0x00000000000000000000000000000000" nft_fw_nfqws_post "$f" '' $QNUM_DISCORD_MEDIA } diff --git a/init.d/windivert.filter.examples/windivert_part.discord_media.txt b/init.d/windivert.filter.examples/windivert_part.discord_media.txt index 26c2014..c61bf13 100644 --- a/init.d/windivert.filter.examples/windivert_part.discord_media.txt +++ b/init.d/windivert.filter.examples/windivert_part.discord_media.txt @@ -1,5 +1,5 @@ outbound and ip and - udp.DstPort>=50000 and udp.DstPort<=50099 and + (udp.DstPort>=50000 and udp.DstPort<=50099 or udp.DstPort>=12294 and udp.DstPort<=13344) and udp.PayloadLength=74 and udp.Payload32[0]=0x00010046 and udp.Payload32[2]=0 and