From 11ebd6f2ee77fe17f39cbaf8a544c975b9cb1484 Mon Sep 17 00:00:00 2001 From: wangyu- Date: Sun, 27 Aug 2017 03:24:11 -0700 Subject: [PATCH] Update README.md --- README.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/README.md b/README.md index f8e015e..595e8e3 100755 --- a/README.md +++ b/README.md @@ -124,6 +124,14 @@ It is suggested to use `aes128cbc` + `md5` to obtain maximum security. If you wa ### `--seq-mode` The FakeTCP mode does not behave 100% like a real tcp connection. ISPs may be able to distinguish the simulated tcp traffic from the real TCP traffic (though it's costly). seq-mode can help you change the seq increase behavior slightly. If you experience connection problems, try to change the value. +### `--lower-level` +`--lower-level` allows you to send packet at OSI level 2(link level),so that you can bypass any local iptables rules. If you have a complicated iptables rules which conflicts with udp2raw and you cant(or too lazy to) edit the iptables rules,`--lower-level` can be very useful. Try `--lower-level auto` to auto detect the parameters,you can specify it manually if `auto` fails. + +Manual format `if_name#dest_mac_adress`,ie:`eth0#00:23:45:67:89:b9`. + +### `--keep-rule` +Monitor iptables and auto re-add iptables rules(for blocking kernel tcp processing) if necessary.Especially useful when iptables rules may be cleared by other programs(for example,if you are using openwrt,everytime you changed a setting,iptables rule may be cleared and re-constructed). + ### `--conf-file` You can also load options from a configuration file in order to keep secrets away from ps command.