circumvention of twitter dpi restrictions

antizapret-nfqws.service

# etc/systemd/system/antizapret-nfqws.service

[Unit]
Description=circumvention of twitter dpi restrictions

[Service]
ExecStart=/usr/local/lib/antizapret/nfqws

[Install]
WantedBy=basic.target

nfqws

#!/bin/sh

# usr/local/lib/antizapret/nfqws

rule="
	iptables \
	-t mangle \
	-o wlp1s0 \
	-p tcp \
	-m multiport \
	--dports 80,443 \
	-m connbytes \
	--connbytes-dir=original \
	--connbytes-mode=packets \
	--connbytes 1:4 \
	-m mark ! \
	--mark 0x40000000/0x40000000 \
	-j NFQUEUE \
	--queue-num 200 \
	--queue-bypass\
"

$rule -C POSTROUTING \
	|| $rule -I POSTROUTING

nfqws --qnum=200 --dpi-desync=split2 --hostlist=/etc/antizapret/nfqws-hostlist

nfqws-hostlist

# etc/antizapret/nfqws-hostlist

twitter.com
twimg.com