ipset-nftset: update bind option

This commit is contained in:
Nick Peng
2023-04-30 00:15:57 +08:00
parent 87e04d25b2
commit 2f18fa57f3
2 changed files with 26 additions and 0 deletions

View File

@@ -71,3 +71,16 @@ hide:
```shell
ipset-no-speed ipsetname
```
## 对特定的服务端口设置ipset和nftset
smartdns的bind参数支持设置ipset和nftset当设置了ipset和nftset的端口接收到请求后将对此端口的查询请求设置ipset和nftset。
通过如下配置可以将对于端口的查询请求全部设置到ipset中比如将第二DNS的所有查询结果放入ipset。
```shell
bind [::]:6053 -ipset [ipset] -nftset [nftset]
```
* -ipset参数选项参考ipset选项。
* -nftset选项参考nftset。

View File

@@ -71,3 +71,16 @@ Like Dnsmasq, smartdns supports ipset and nftset, which can use TPROXY to transp
```shell
ipset-no-speed ipsetname
```
## Set ipset and nftset for specific service ports
The bind parameter of smartdns supports setting ipset and nftset. When the port with ipset and nftset set receives a request, it will set ipset and nftset for the query request of this port.
Through the following configuration, all query requests for ports can be set into ipset, for example, all query results of the second DNS can be put into ipset.
```shell
bind [::]:6053 -ipset [ipset] -nftset [nftset]
```
* -ipset: Refer to ipset options for parameter options.
* -nftset: options refer to nftset.