chore: fixes and improvements

muink · Nov 12, 2024 · b3454d2 · b3454d2
1 parent 4f054f1
commit b3454d2
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/luci-app-fchomo/root/etc/fchomo/scripts/firewall_post.ut b/luci-app-fchomo/root/etc/fchomo/scripts/firewall_post.ut
@@ -154,6 +154,8 @@ chain {{ inchain }} {
 {%- function render_acl_dst(inchain, outchain): %}
 chain {{ inchain }} {
 		meta mark {{ self_mark }} counter return
+		fib daddr type { local } counter return
+		ct direction reply counter return
 
 		ip daddr @inet4_local_addr counter return
 		{% if (global_ipv6 === '1'): %}
@@ -423,7 +425,7 @@ table inet fchomo {
 	{{ render_acl_dport('tproxy_acl_dport_reroute', 'tproxy_mark', 'udp') }}
 	chain tproxy_mark {
 		{#- DNS hijack #}
-		udp dport 53 counter accept comment "!{{ cfgname }}: DNS hijack (bypass rerouter)"
+		udp dport 53 counter accept comment "!{{ cfgname }}: DNS hijack (bypass router udp)"
 
 		meta l4proto udp meta mark set {{ tproxy_mark }} counter accept
 	}