Запускаю zapret для обхода блокировок, при запуске инит-скрипта выдаёт ошибку:
Starting daemon 1: /usr/bin/zapret/tpws/tpws --bind-addr=127.0.0.127 --port=988 --hostspell=HOST --split-http-req=method --split-pos=3 --oob
Applying nftables
Creating ip list table (firewall type nftables)
setting high oom kill priority
Error: Could not process rule: Operation not supported
add table inet zapret
^^^^^^^^^^^^^^^^^^^^^^
Error: Could not process rule: Operation not supported
add table inet zapret
^^^^^^^^^^^^^^^^^^^^^^
/dev/stdin:1:17-22: Error: No such file or directory
add chain inet zapret dnat_output { type nat hook output priority -101; }
^^^^^^
/dev/stdin:3:17-22: Error: No such file or directory
add chain inet zapret dnat_pre { type nat hook prerouting priority -101; }
^^^^^^
/dev/stdin:5:17-22: Error: No such file or directory
add chain inet zapret forward { type filter hook forward priority -1; }
^^^^^^
/dev/stdin:7:17-22: Error: No such file or directory
add chain inet zapret input { type filter hook input priority -1; }
^^^^^^
/dev/stdin:9:17-22: Error: No such file or directory
add chain inet zapret flow_offload
^^^^^^
/dev/stdin:11:17-22: Error: No such file or directory
add chain inet zapret localnet_protect
^^^^^^
/dev/stdin:16:17-22: Error: No such file or directory
add chain inet zapret postrouting { type filter hook postrouting priority 99; }
^^^^^^
/dev/stdin:18:17-22: Error: No such file or directory
add chain inet zapret postnat { type filter hook postrouting priority 101; }
^^^^^^
/dev/stdin:20:17-22: Error: No such file or directory
add chain inet zapret prerouting { type filter hook prerouting priority -99; }
^^^^^^
/dev/stdin:22:17-22: Error: No such file or directory
add chain inet zapret prenat { type filter hook prerouting priority -101; }
^^^^^^
/dev/stdin:1:16-21: Error: No such file or directory
flush set inet zapret wanif
^^^^^^
/dev/stdin:2:16-21: Error: No such file or directory
flush set inet zapret wanif6
^^^^^^
/dev/stdin:3:16-21: Error: No such file or directory
flush set inet zapret lanif
^^^^^^
/dev/stdin:4:18-23: Error: No such file or directory
add element inet zapret lanif { "wlp3s0" }
^^^^^^
Adding nftables ipv4 rule for tpws (port 988) : tcp dport {80,443}
Error: datatype mismatch, expected user ID, expression has type Internet protocol
add rule inet zapret dnat_output skuid != tcp dport {80,443} ip daddr != @nozapret dnat ip to 127.0.0.127:988
~~~~~ ^^^
Error: No such file or directory
add rule inet zapret dnat_pre iifname @lanif tcp dport {80,443} ip daddr != @nozapret dnat ip to 127.0.0.127:988
^^^^^^
Error: Could not process rule: Operation not supported
возникает, когда выполняется nft add table inet zapret. Пробовал эту команду вручную запускать от рута же — та же ошибка.strace -fy — nft add table inet zapret
конфиг ядра
Может, в ядре чего не хватает? Дистр CRUX, ядро самосборное, 6.10.2.
До этого никогда не имел дел ни с iptables, ни с nftables.