update redire udp firewall rule

Author: icymind

src/renderer/lib/generator.js

@@ -403,8 +403,9 @@ class Generator {
       contents.push(genFWRulesHelper(rule))
 
       if (profile.enableRelayUDP) {
-        const udpRule = `-p udp -m set --match-set ${firewallInfo.ipset.blackSetName} dst -j REDIRECT --to-port ${udpRedirPort}`
-        contents.push(genFWRulesHelper(udpRule))
+        contents.push('ip rule add fwmark 1 lookup 100')
+        contents.push('ip route add local default dev lo table 100')
+        contents.push(`iptables -t mangle -A PREROUTING -p udp -m set --match-set ${firewallInfo.ipset.blackSetName} dst -j TPROXY --on-port ${udpRedirPort} --tproxy-mark 0x01/0x01`)
       }
 
       contents.push('# bypass whitelist')
@@ -416,8 +417,7 @@ class Generator {
       contents.push(genFWRulesHelper(rule))
 
       if (profile.enableRelayUDP) {
-        const udpRule = `-p udp -j REDIRECT --to-port ${udpRedirPort}`
-        contents.push(genFWRulesHelper(udpRule))
+        contents.push(`iptables -t mangle -A PREROUTING -p udp -j TPROXY --on-port ${udpRedirPort} --tproxy-mark 0x01/0x01`)
       }
     } else if (profile.mode === 'blacklist') {
       // 仅代理黑名单模式下, 先将白名单返回(如果自定义白名单中存在黑名单相同项, 先处理白名单符合预期)
@@ -430,17 +430,19 @@ class Generator {
       contents.push(genFWRulesHelper(rule))
 
       if (profile.enableRelayUDP) {
-        const udpRule = `-p udp -m set --match-set ${firewallInfo.ipset.blackSetName} dst -j REDIRECT --to-port ${udpRedirPort}`
-        contents.push(genFWRulesHelper(udpRule))
+        contents.push('ip rule add fwmark 1 lookup 100')
+        contents.push('ip route add local default dev lo table 100')
+        contents.push(`iptables -t mangle -A PREROUTING -p udp -m set --match-set ${firewallInfo.ipset.blackSetName} dst -j TPROXY --on-port ${udpRedirPort} --tproxy-mark 0x01/0x01`)
       }
     } else if (profile.mode === 'global') {
       contents.push('# route all traffic')
       let rule = `-p tcp -j REDIRECT --to-port ${redirPort}`
       contents.push(genFWRulesHelper(rule))
 
       if (profile.enableRelayUDP) {
-        const udpRule = `-p udp -j REDIRECT --to-port ${udpRedirPort}`
-        contents.push(genFWRulesHelper(udpRule))
+        contents.push('ip rule add fwmark 1 lookup 100')
+        contents.push('ip route add local default dev lo table 100')
+        contents.push(`iptables -t mangle -A PREROUTING -p udp -j TPROXY --on-port ${udpRedirPort} --tproxy-mark 0x01/0x01`)
       }
     }