config zapret2 'main'
	option enabled '1'
	option debug '0'
	option desync_mark '0x40000000'
	option desync_mark_postnat '0x20000000'
	option nfqws_ports_tcp '80,443'
	option nfqws_ports_udp '443'
	option postnat '1'
	option nfqws_tcp_pkt_out '25'
	option nfqws_tcp_pkt_in '5'
	option custom_scripts '1'
	option qnum '300'
	option autohostlist_debug '0'
	option autohostlist_retrans_threshold '3'
	option autohostlist_fail_threshold '3'
	option autohostlist_fail_time '60'
	option lua_gc '600'

config list 'list_hosts_user'
	option path '/opt/zapret2/ipset/zapret_hosts_user.txt'

config list 'list_hosts_user_exclude'
	option path '/opt/zapret2/ipset/zapret_hosts_user_exclude.txt'

config list 'list_hosts_youtube'
	option path '/opt/zapret2/ipset/zapret_hosts_youtube.txt'

config blob 'blob_tls_clienthello_www_google_com'
	option path '/opt/zapret2/files/fake/tls_clienthello_www_google_com.bin'
	option enabled '1'

config blob 'blob_tls_clienthello_t2_ru'
	option path '/opt/zapret2/files/fake/tls_clienthello_t2_ru.bin'
	option enabled '1'

config blob 'blob_tls_clienthello_vk_com'
	option path '/opt/zapret2/files/fake/tls_clienthello_vk_com.bin'
	option enabled '1'

config blob 'blob_tls_clienthello_gosuslugi_ru'
	option path '/opt/zapret2/files/fake/tls_clienthello_gosuslugi_ru.bin'
	option enabled '1'

config strategy 'youtube'
	option port '443'
	option protocol 'tcp'
	list filter_l3 'ipv4'
	list filter_l7 'tls'
	list hostlist 'list_hosts_youtube'
	option script '--out-range=-s34228
--in-range=-s5556 --lua-desync=circular:fails=2:maxtime=60
--in-range=x
--payload=tls_client_hello
--lua-desync=fake:blob=0x0F0F0F0F:tcp_seq=-10000:tcp_ack=-66000:badsum:strategy=1
--lua-desync=fake:blob=blob_tls_clienthello_www_google_com:optional:tcp_seq=-10000:tcp_ack=-66000:badsum:tls_mod=rnd,dupsid,sni=ggpht.com:strategy=1
--lua-desync=multisplit:pos=2,sld:seqovl=620:seqovl_pattern=blob_tls_clienthello_www_google_com:strategy=1
--lua-desync=fake:blob=0x00000000:tcp_ack=-66000:strategy=2
--lua-desync=fake:blob=blob_tls_clienthello_www_google_com:tls_mod=rnd,dupsid,rndsni,padencap:tcp_ack=-66000:strategy=2
--lua-desync=multisplit:pos=2,endhost:strategy=2
--lua-desync=multisplit:pos=1:seqovl=681:seqovl_pattern=blob_tls_clienthello_www_google_com:ip_id=zero:strategy=3
--lua-desync=multisplit:pos=1,sniext+1:seqovl=1:strategy=4
--lua-desync=multisplit:seqovl=681:seqovl_pattern=blob_tls_clienthello_www_google_com:strategy=5
--lua-desync=fake:blob=blob_tls_clienthello_www_google_com:tcp_seq=0:tcp_ack=-66000:badsum:tls_mod=rnd,dupsid,sni=fonts.google.com:strategy=6
--lua-desync=fake:blob=0x0F0F0F0F:tcp_seq=0:tcp_ack=-66000:badsum:tls_mod=none:strategy=6
--lua-desync=fakeddisorder:pos=10,midsld:seqovl=336:seqovl_pattern=blob_tls_clienthello_gosuslugi_ru:pattern=blob_tls_clienthello_vk_com:tcp_seq=0:tcp_ack=-66000:badsum:strategy=6
--lua-desync=multidisorder:pos=7,sld+1:strategy=7
--lua-desync=multidisorder:pos=1,midsld,endhost-1:strategy=8
--lua-desync=fake:blob=0x00000000:tcp_seq=-10000:tcp_ack=-66000:repeats=2:strategy=9
--lua-desync=fake:blob=fake_default_tls:tcp_seq=-10000:tcp_ack=-66000:repeats=2:tls_mod=rnd,dupsid,sni=www.google.com:strategy=9
--lua-desync=multisplit:pos=1,midsld:strategy=9
--lua-desync=multidisorder:pos=1,midsld:strategy=10
--lua-desync=multisplit:pos=1,2:seqovl=4:seqovl_pattern=blob_tls_clienthello_www_google_com:strategy=11
--lua-desync=multidisorder:pos=2,5,105,host+5,sld-1,endsld-5,endsld:strategy=12
--lua-desync=fake:blob=0x0F0F0F0F:badsum:tcp_seq=-10000:tcp_ack=-66000:strategy=13
--lua-desync=fake:blob=blob_tls_clienthello_www_google_com:badsum:tcp_seq=-10000:tcp_ack=-66000:tls_mod=rnd,dupsid,sni=ggpht.com:strategy=13
--lua-desync=multisplit:pos=2,sld:seqovl=2108:seqovl_pattern=blob_tls_clienthello_www_google_com:strategy=13
--lua-desync=hostfakesplit:midhost=host-2:host=rzd.ru:tcp_seq=0:tcp_ack=-66000:badsum:strategy=14:final'

config list 'list_hosts_auto'
	option path '/opt/zapret2/ipset/zapret_hosts_auto.txt'

config blob 'blob_tls_clienthello_vk_com_kyber'
	option path '/opt/zapret2/files/fake/tls_clienthello_vk_com_kyber.bin'
	option enabled '0'

config blob 'blob_tls_clienthello_rutracker_org_kyber'
	option path '/opt/zapret2/files/fake/tls_clienthello_rutracker_org_kyber.bin'
	option enabled '0'

config blob 'blob_sip'
	option path '/opt/zapret2/files/fake/sip.bin'
	option enabled '0'

config blob 'blob_quic_3'
	option path '/opt/zapret2/files/fake/quic_3.bin'
	option enabled '0'

config blob 'blob_stun'
	option path '/opt/zapret2/files/fake/stun.bin'
	option enabled '0'

config blob 'blob_dtls_clienthello_w3_org'
	option path '/opt/zapret2/files/fake/dtls_clienthello_w3_org.bin'
	option enabled '0'

config blob 'blob_discord_ip_discovery_with_port'
	option path '/opt/zapret2/files/fake/discord-ip-discovery-with-port.bin'
	option enabled '0'

config blob 'blob_zero_512'
	option path '/opt/zapret2/files/fake/zero_512.bin'
	option enabled '0'

config blob 'blob_quic_initial_rr1___sn_xguxaxjvh_n8me_googlevideo_com_kyber_1'
	option path '/opt/zapret2/files/fake/quic_initial_rr1---sn-xguxaxjvh-n8me_googlevideo_com_kyber_1.bin'
	option enabled '0'

config blob 'blob_dht_get_peers'
	option path '/opt/zapret2/files/fake/dht_get_peers.bin'
	option enabled '0'

config blob 'blob_tls_clienthello_escapefromtarkov_com'
	option path '/opt/zapret2/files/fake/tls_clienthello_escapefromtarkov_com.bin'
	option enabled '0'

config blob 'blob_quic_initial_vk_com'
	option path '/opt/zapret2/files/fake/quic_initial_vk_com.bin'
	option enabled '0'

config blob 'blob_wireguard_initiation'
	option path '/opt/zapret2/files/fake/wireguard_initiation.bin'
	option enabled '0'

config blob 'blob_tls_clienthello_sberbank_ru'
	option path '/opt/zapret2/files/fake/tls_clienthello_sberbank_ru.bin'
	option enabled '0'

config blob 'blob_discord_ip_discovery_without_port'
	option path '/opt/zapret2/files/fake/discord-ip-discovery-without-port.bin'
	option enabled '0'

config blob 'blob_wireguard_response'
	option path '/opt/zapret2/files/fake/wireguard_response.bin'
	option enabled '0'

config blob 'blob_quic_short_header'
	option path '/opt/zapret2/files/fake/quic_short_header.bin'
	option enabled '0'

config blob 'blob_quic_initial_rutracker_org'
	option path '/opt/zapret2/files/fake/quic_initial_rutracker_org.bin'
	option enabled '0'

config blob 'blob_isakmp_initiator_request'
	option path '/opt/zapret2/files/fake/isakmp_initiator_request.bin'
	option enabled '0'

config blob 'blob_quic_initial_www_google_com'
	option path '/opt/zapret2/files/fake/quic_initial_www_google_com.bin'
	option enabled '0'

config blob 'blob_rdp'
	option path '/opt/zapret2/files/fake/rdp.bin'
	option enabled '0'

config blob 'blob_quic_4'
	option path '/opt/zapret2/files/fake/quic_4.bin'
	option enabled '0'

config blob 'blob_quic_initial_rutracker_org_kyber_2'
	option path '/opt/zapret2/files/fake/quic_initial_rutracker_org_kyber_2.bin'
	option enabled '0'

config blob 'blob_quic_initial_facebook_com'
	option path '/opt/zapret2/files/fake/quic_initial_facebook_com.bin'
	option enabled '0'

config blob 'blob_tls_clienthello_www_4pda_to'
	option path '/opt/zapret2/files/fake/tls_clienthello_www_4pda_to.bin'
	option enabled '1'

config blob 'blob_quic_initial_rr1___sn_xguxaxjvh_n8me_googlevideo_com_kyber_2'
	option path '/opt/zapret2/files/fake/quic_initial_rr1---sn-xguxaxjvh-n8me_googlevideo_com_kyber_2.bin'
	option enabled '0'

config blob 'blob_zero_1024'
	option path '/opt/zapret2/files/fake/zero_1024.bin'
	option enabled '0'

config blob 'blob_quic_initial_facebook_com_quiche'
	option path '/opt/zapret2/files/fake/quic_initial_facebook_com_quiche.bin'
	option enabled '0'

config blob 'blob_quic_initial_rr2___sn_gvnuxaxjvh_o8ge_googlevideo_com'
	option path '/opt/zapret2/files/fake/quic_initial_rr2---sn-gvnuxaxjvh-o8ge_googlevideo_com.bin'
	option enabled '0'

config blob 'blob_zero_256'
	option path '/opt/zapret2/files/fake/zero_256.bin'
	option enabled '0'

config blob 'blob_quic_initial_rutracker_org_kyber_1'
	option path '/opt/zapret2/files/fake/quic_initial_rutracker_org_kyber_1.bin'
	option enabled '0'

config blob 'blob_http_iana_org'
	option path '/opt/zapret2/files/fake/http_iana_org.bin'
	option enabled '0'

config blob 'blob_tls_clienthello_iana_org'
	option path '/opt/zapret2/files/fake/tls_clienthello_iana_org.bin'
	option enabled '0'

config blob 'blob_dht_find_node'
	option path '/opt/zapret2/files/fake/dht_find_node.bin'
	option enabled '0'

config blob 'blob_tls_clienthello_iana_org_bigsize'
	option path '/opt/zapret2/files/fake/tls_clienthello_iana_org_bigsize.bin'
	option enabled '0'

config blob 'blob_tls_clienthello_www_max_ru'
	option path '/opt/zapret2/files/fake/tls_clienthello_www_max_ru.bin'
	option enabled '1'

config strategy 'default'
	option enabled '0'
	option port '443'
	option protocol 'tcp'
	list filter_l3 'ipv4'
	list filter_l7 'tls'
	list hostlist_exclude 'list_hosts_user_exclude'
	option script '--out-range=-s34228
--in-range=-s5556 --lua-desync=circular:fails=2:maxtime=60
--in-range=x
--payload=tls_client_hello
--lua-desync=fake:blob=blob_tls_clienthello_www_max_ru:tcp_ts=-600000:repeats=8:strategy=1
--lua-desync=multisplit:pos=1:seqovl=654:seqovl_pattern=blob_tls_clienthello_www_max_ru:strategy=1
--lua-desync=fake:blob=blob_tls_clienthello_t2_ru:tls_mod=rnd,dupsid,sni=m.ok.ru:badsum:tcp_seq=-10000:strategy=2
--lua-desync=fake:blob=0x0F0F0F0F:tls_mod=none:badsum:tcp_seq=-10000:strategy=2
--lua-desync=fakeddisorder:pos=10,midsld:pattern=blob_tls_clienthello_vk_com:seqovl=336:seqovl_pattern=blob_tls_clienthello_gosuslugi_ru:badsum:tcp_seq=-10000:strategy=2
--lua-desync=fake:blob=fake_default_tls:tcp_seq=10000000:tcp_ack=-66000:repeats=2:tls_mod=rnd,dupsid,sni=fonts.google.com:strategy=3
--lua-desync=multidisorder:pos=1:seqovl=681:seqovl_pattern=blob_tls_clienthello_www_google_com:strategy=3
--lua-desync=fake:blob=blob_tls_clienthello_www_google_com:tcp_seq=0:tcp_ack=-66000:badsum:tls_mod=rnd,dupsid,sni=fonts.google.com:strategy=4
--lua-desync=fake:blob=0x0F0F0F0F:tcp_seq=0:tcp_ack=-66000:badsum:tls_mod=none:strategy=4
--lua-desync=fakeddisorder:pos=10,midsld:seqovl=336:seqovl_pattern=blob_tls_clienthello_gosuslugi_ru:pattern=blob_tls_clienthello_vk_com:tcp_seq=0:tcp_ack=-66000:badsum:strategy=4
--lua-desync=fake:blob=blob_tls_clienthello_t2_ru:tcp_seq=0:tcp_ack=-66000:badsum:tls_mod=rnd,dupsid,sni=m.ok.ru:strategy=5
--lua-desync=fake:blob=0x0F0F0F0F:tcp_seq=0:tcp_ack=-66000:badsum:tls_mod=none:strategy=5
--lua-desync=fakeddisorder:pos=10,midsld:seqovl=336:seqovl_pattern=blob_tls_clienthello_gosuslugi_ru:pattern=blob_tls_clienthello_vk_com:tcp_seq=0:tcp_ack=-66000:badsum:strategy=5
--lua-desync=multisplit:pos=1:seqovl=582:seqovl_pattern=blob_tls_clienthello_www_4pda_to:strategy=6
--lua-desync=fake:blob=blob_tls_clienthello_www_max_ru:tcp_seq=0:tcp_ack=-66000:badsum:tls_mod=rnd,dupsid:strategy=7
--lua-desync=fake:blob=0x0F0F0F0F:tcp_seq=0:tcp_ack=-66000:badsum:tls_mod=none:strategy=7
--lua-desync=fakeddisorder:pos=10,midsld:pattern=blob_tls_clienthello_vk_com:tcp_seq=0:tcp_ack=-66000:badsum:strategy=7
--lua-desync=hostfakesplit:midhost=host-2:host=rzd.ru:tcp_seq=0:tcp_ack=-66000:badsum:strategy=8:final'
