mirror of
https://github.com/openwrt/packages.git
synced 2026-10-20 02:24:56 +04:00
Stan Grishin
9c739e6d31
Maintainer: me Compile tested: x86_64, Dell EMC Edge620, OpenWrt 25.12.1 Run tested: x86_64, Dell EMC Edge620, OpenWrt 25.12.1 Description: Robustify nftables notrack generation - Bump PKG_RELEASE to 4. - Add install rule to create /usr/share/nftables.d/ruleset-post. files/etc/init.d/https-dns-proxy: - Check if 'nft' command exists before generating rules. - Add robust error handling for directory creation and file writing. - Log errors when directory creation or file writing fails. tests/run_tests.sh: - Add test case for 'nft' binary absence, confirming no-op behavior. - Add test case for mkdir failure during notrack rule generation. Signed-off-by: Stan Grishin <stangri@melmac.ca>
35 lines
1.0 KiB
Plaintext
35 lines
1.0 KiB
Plaintext
config main 'config'
|
|
option canary_domains_icloud '1'
|
|
option canary_domains_mozilla '1'
|
|
option dnsmasq_config_update '*'
|
|
option force_dns '1'
|
|
option notrack_dns '1'
|
|
list force_dns_port '53'
|
|
list force_dns_port '853'
|
|
# ports listed below are used by some
|
|
# of the dnscrypt-proxy v1 resolvers
|
|
# list force_dns_port '553'
|
|
# list force_dns_port '1443'
|
|
# list force_dns_port '4343'
|
|
# list force_dns_port '4434'
|
|
# list force_dns_port '5443'
|
|
# list force_dns_port '8443'
|
|
list force_dns_src_interface 'lan'
|
|
option procd_trigger_wan6 '0'
|
|
option heartbeat_domain 'heartbeat.mossdef.org'
|
|
option heartbeat_sleep_timeout '10'
|
|
option heartbeat_wait_timeout '10'
|
|
option user 'nobody'
|
|
option group 'nogroup'
|
|
option listen_addr '127.0.0.1'
|
|
|
|
config https-dns-proxy
|
|
option bootstrap_dns '1.1.1.1,1.0.0.1'
|
|
option resolver_url 'https://cloudflare-dns.com/dns-query'
|
|
option listen_port '5053'
|
|
|
|
config https-dns-proxy
|
|
option bootstrap_dns '8.8.8.8,8.8.4.4'
|
|
option resolver_url 'https://dns.google/dns-query'
|
|
option listen_port '5054'
|