dnsmasq: change priority of dns hihack rule

To aviod conflict with other programs.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3d643fcd0438e9a81bfd0b8354e2251eb01ac576)
This commit is contained in:
Tianling Shen
2025-05-05 20:40:25 +08:00
parent 17073ead85
commit 99bfa54acf

View File

@@ -1277,7 +1277,7 @@ dnsmasq_start()
config_get dns_port "$cfg" port 53
if [ "$dns_redirect" = 1 ]; then
nft add table inet dnsmasq
nft add chain inet dnsmasq prerouting "{ type nat hook prerouting priority -105; policy accept; }"
nft add chain inet dnsmasq prerouting "{ type nat hook prerouting priority -95; policy accept; }"
nft add rule inet dnsmasq prerouting "meta nfproto { ipv4, ipv6 } udp dport 53 counter redirect to :$dns_port comment \"DNSMASQ HIJACK\""
fi
}