nixos/home/routing-common: More Disney+ IPv6 workarounds
This commit is contained in:
parent
41fd54cfad
commit
b8ee21b6e8
@ -375,6 +375,10 @@ in
|
|||||||
|
|
||||||
# MSS clamping to workaround IPv6 PMTUD being broken...
|
# MSS clamping to workaround IPv6 PMTUD being broken...
|
||||||
tcp flags syn tcp option maxseg size set rt mtu counter
|
tcp flags syn tcp option maxseg size set rt mtu counter
|
||||||
|
|
||||||
|
# More Disney+ discrimination...
|
||||||
|
# TODO: This prefix could change (random AWS block)
|
||||||
|
ip6 daddr 2600:9000:2245::/48 drop
|
||||||
}
|
}
|
||||||
chain forward {
|
chain forward {
|
||||||
${lib.my.c.as211024.nftTrust}
|
${lib.my.c.as211024.nftTrust}
|
||||||
|
@ -66,7 +66,7 @@ in
|
|||||||
-- Disney+ doesn't like our IP space...
|
-- Disney+ doesn't like our IP space...
|
||||||
function preresolve(dq)
|
function preresolve(dq)
|
||||||
local name = dq.qname:toString()
|
local name = dq.qname:toString()
|
||||||
if dq.qtype == pdns.AAAA and (string.find(name, "disneyplus") or string.find(name, "disney-plus")) then
|
if dq.qtype == pdns.AAAA and (string.find(name, "disneyplus") or string.find(name, "disney-plus") or string.find(name , "disney.api")) then
|
||||||
dq.rcode = 0
|
dq.rcode = 0
|
||||||
return true
|
return true
|
||||||
end
|
end
|
||||||
|
Loading…
Reference in New Issue
Block a user