Bypass bridge traffic in TProxy and simplify subscription refresh

2026-07-11 19:48:04 +03:00
parent 198669694c
commit 457dd912d1
3 changed files with 3 additions and 6 deletions
--- a/entrypoint.sh
+++ b/entrypoint.sh
@@ -101,6 +101,7 @@ setup_tproxy() {
  ipt -t mangle -N "$TPROXY_CHAIN"
  ipt -t mangle -A "$TPROXY_CHAIN" -m addrtype --dst-type LOCAL -j RETURN
  ipt -t mangle -A "$TPROXY_CHAIN" -m mark --mark "$TPROXY_MARK" -j RETURN
+  ipt -t mangle -A "$TPROXY_CHAIN" -i 'br-+' -j RETURN

  # Private/local destinations stay reachable; every intercepted public packet goes to VPN.
  for cidr in $BYPASS_CIDRS; do