# this file is included from init scripts

# change values here

# can help in case /tmp has not enough space

#TMPDIR=/opt/zapret/tmp

# options for ipsets

# too low hashsize can cause memory allocation errors on low RAM systems , even if RAM is enough

# too large hashsize will waste lots of RAM

IPSET_OPT="hashsize 262144 maxelem 2097152"

# options for ip2net. "-4" or "-6" auto added by ipset create script

IP2NET_OPT4="--prefix-length=22-30 --v4-threshold=3/4"

IP2NET_OPT6="--prefix-length=56-64 --v6-threshold=5"

# CHOOSE OPERATION MODE

# use nfqws : nfqws_ipset nfqws_ipset_https nfqws_all nfqws_all_https

# use tpws : tpws_ipset tpws_ipset_https tpws_all tpws_all_https tpws_hostlist

# no daemon, just ipset : ipset

# custom mode : custom . should modify init script and add your own code

MODE=tpws_ipset_https

# CHOOSE NFQWS DAEMON OPTIONS. run "nfq/nfqws --help" for option list

NFQWS_OPT="--wsize=3 --hostspell=HOST"

# CHOOSE TPWS DAEMON OPTIONS. run "tpws/tpws --help" for option list

TPWS_OPT_HTTP="--hostspell=HOST --split-http-req=method"

TPWS_OPT_HTTPS="--split-pos=3"

# for routers based on desktop linux only. has not effect in openwrt.

# CHOSE NETWORK INTERFACE BEHIND NAT (LAN)

# or leave it commented if its not router

#SLAVE_ETH=eth0

# should init scripts apply firewall rules ?

# set to 0 if firewall control system is present

# openwrt uses fw3 firewall , init never touch fw

INIT_APPLY_FW=1

# do not work with ipv4

#DISABLE_IPV4=1

# do not work with ipv6

DISABLE_IPV6=1

# select which init script will be used to get ip or host list

# possible values : get_user.sh get_antizapret.sh get_combined.sh get_reestr.sh get_hostlist.sh

# comment if not required

GETLIST=get_antifilter_ipsmart.sh