auto-redirect: Let fw4 take precedence over prerouting

SagerNet · Oct 11, 2024 · 06d32a6 · 06d32a6
1 parent 9ba70c3
commit 06d32a6
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/redirect_nftables.go b/redirect_nftables.go
@@ -88,7 +88,7 @@ func (r *autoRedirect) setupNFTables() error {
 		Name:     "prerouting",
 		Table:    table,
 		Hooknum:  nftables.ChainHookPrerouting,
-		Priority: nftables.ChainPriorityMangle,
+		Priority: nftables.ChainPriorityRef(*nftables.ChainPriorityNATDest + 1),
 		Type:     nftables.ChainTypeNAT,
 	})
 	err = r.nftablesCreateExcludeRules(nft, table, chainPreRouting)
@@ -104,7 +104,7 @@ func (r *autoRedirect) setupNFTables() error {
 			Name:     "prerouting_udp",
 			Table:    table,
 			Hooknum:  nftables.ChainHookPrerouting,
-			Priority: nftables.ChainPriorityRef(*nftables.ChainPriorityMangle + 1),
+			Priority: nftables.ChainPriorityRef(*nftables.ChainPriorityNATDest + 2),
 			Type:     nftables.ChainTypeFilter,
 		})
 		if r.enableIPv4 {