shadowsocks-libev: add nft_tcp_extra/nft_udp_extra options

[feed/packages.git] / net / shadowsocks-libev / files / ss-rules / chain.uc

diff --git a/net/shadowsocks-libev/files/ss-rules/chain.uc b/net/shadowsocks-libev/files/ss-rules/chain.uc
index 00362f694d6789395bf859e66691035592b09f11..a378e770e6796c8527749a44b74a3590ff1d44d8 100644 (file)
--- a/net/shadowsocks-libev/files/ss-rules/chain.uc
+++ b/net/shadowsocks-libev/files/ss-rules/chain.uc
@@ -97,7 +97,7 @@ chain ss_rules_dst_{{ proto }} {
 
 {%   if (proto == "tcp"): %}
 chain ss_rules_forward_{{ proto }} {
-       meta l4proto tcp redirect to :{{ redir_port }};
+       meta l4proto tcp {{ o_nft_tcp_extra }} redirect to :{{ redir_port }};
 }
 {%   let local_verdict = get_local_verdict(); if (local_verdict): %}
 chain ss_rules_local_out {
@@ -112,7 +112,7 @@ chain ss_rules_local_out {
 {%     endif %}
 {%   elif (proto == "udp"): %}
 chain ss_rules_forward_{{ proto }} {
-       meta l4proto udp meta mark set 1 tproxy to :{{ redir_port }};
+       meta l4proto udp {{ o_nft_udp_extra }} meta mark set 1 tproxy to :{{ redir_port }};
 }
 {%   endif %}
 {% endif %}