VPN olmaksizin tum sitelere giris (Pasif/Aktif DPI blokaji) (14. sayfa)

install netfilter-spooftcp Ubuntu
#	open terminal

##
#	install depencies
$ sudo apt-get install libxtables-dev xtables-addons-common git

#	clone git
$ git clonehttps://github.com/LGA1150/netfilter-spooftcp

#	cd
$ cd netfilter-spooftcp

##
#	edit Makefile
sudo nano Makefile
	Home/$USERNAME$/netfilter-spooftcp
	
#	replace Makefile's first line with second
install -m 0644 libxt_SPOOFTCP.so /lib/xtables
install -m 0644 libxt_SPOOFTCP.so /usr/lib/x86_64-linux-gnu/xtables/

#	unblank this line
#install -m 0644 libxt_SPOOFTCP.ko /lib/modules/$(VERSION)/kernel/net/netfilter/
install -m 0644 libxt_SPOOFTCP.ko /lib/modules/$(VERSION)/kernel/net/netfilter/
#	Ctrl+O and press ENTER to save, escape with Ctrl+X to exit

#	install
$ sudo make
$ sudo make install

//	no need to use
//#	$ sudo insmod xt_SPOOFTCP.ko

##
#	check status
$ iptables -j SPOOFTCP --help

//	no need to use
//#	save modules
//$sudo nano /etc/modules
//#	add this line and save
//xt_SPOOFTCP
//#	if needen hosts can be edited to access certain websites
//$sudo nano /etc/hosts
//#	as example
//103.102.166.224 wikipedia.orgwww.wikipedia.org

##
#	iptables rules flushes every restart
#	in order to save rules
#	1.	save & reload rules by terminal
#	Save rules to /etc/iptables/iptables.rules
$ sudo iptables-save > /etc/iptables/iptables.minee

#	You can then restore those rules when you need to:
$ sudo iptables-restore < /etc/iptables/iptables.minee

#	2.	save & reload rules by iptables-persistent
#	Install iptables-persistent
$ sudo apt-get install iptables-persistent

#	netfilter-persistent settings
$ sudo netfilter-persistent save
$ sudo netfilter-persistent reload

#	for deleting rules
sudo iptables -t mangle -D..

##
#	for adding rules
#	examples
###
www.wikipedia.org
208.80.154.224
sudo iptables -t mangle -A POSTROUTING -d 91.198.0.0/16 -p tcp --dport 443 --syn -j SPOOFTCP --ttl 14 --tcp-flags PSH,ACK --delay 5 --payload-length 1 --md5 --ts
###
imgur.com
151.101.20.193
sudo iptables -t mangle -A POSTROUTING -d 151.101.0.0/16 -p tcp --dport 443 --syn -j SPOOFTCP --ttl 14 --tcp-flags PSH,ACK --delay 5 --payload-length 1 --md5 --ts
###
pastebin.com
104.22.2.84
sudo iptables -t mangle -A POSTROUTING -d 104.22.0.0/16 -p tcp --dport 443 --syn -j SPOOFTCP --ttl 14 --tcp-flags PSH,ACK --delay 5 --payload-length 1 --md5 --ts

sudo iptables -t mangle -A POSTROUTING -d 66.254.0.0/16 -p tcp --dport 443 --syn -j SPOOFTCP --ttl 14 --tcp-flags PSH,ACK --delay 5 --payload-length 1 --md5 --ts
sudo iptables -t mangle -A POSTROUTING -d 69.16.0.0/16 -p tcp --dport 443 --syn -j SPOOFTCP --ttl 14 --tcp-flags PSH,ACK --delay 5 --payload-length 1 --md5 --ts
sudo iptables -t mangle -A POSTROUTING -d 72.21.0.0/16 -p tcp --dport 443 --syn -j SPOOFTCP --ttl 14 --tcp-flags PSH,ACK --delay 5 --payload-length 1 --md5 --ts
sudo iptables -t mangle -A POSTROUTING -d 152.195.0.0/16 -p tcp --dport 443 --syn -j SPOOFTCP --ttl 14 --tcp-flags PSH,ACK --delay 5 --payload-length 1 --md5 --ts
sudo iptables -t mangle -A POSTROUTING -d 64.210.0.0/16 -p tcp --dport 443 --syn -j SPOOFTCP --ttl 14 --tcp-flags PSH,ACK --delay 5 --payload-length 1 --md5 --ts
###
install+netfilter-spooftcp+Ubuntu+censorship+L7+DPI

@ECHO OFF
PUSHD "%~dp0"
set _arch=x86
IF "%PROCESSOR_ARCHITECTURE%"=="AMD64" (set _arch=x86_64)
IF DEFINED PROCESSOR_ARCHITEW6432 (set _arch=x86_64)
PUSHD "%_arch%"

start "" goodbyedpi.exe -1 --set-ttl 5

POPD
POPD

ipset create spooftcp_bypass nethash
ipset add spooftcp_bypass 0.0.0.0/8
ipset add spooftcp_bypass 10.0.0.0/8
ipset add spooftcp_bypass 192.168.0.0/16
iptables -t mangle  -A POSTROUTING  -m set ! --match-set spooftcp_bypass dst -p tcp --dport 80 --tcp-flags FIN,SYN,RST,ACK SYN -j SPOOFTCP --ttl 5 --tcp-flags PSH,ACK --delay 15 --payload-length 1 --corrupt-seq --md5 --ts --masq
iptables -t mangle  -A POSTROUTING  -m set ! --match-set spooftcp_bypass dst -p tcp --dport 443 --tcp-flags FIN,SYN,RST,ACK SYN -j SPOOFTCP --ttl 5 --tcp-flags PSH,ACK --delay 15 --payload-length 1 --corrupt-seq --md5 --ts --masq