Andrey Meshkov
Andrey Meshkov
We should probably add support for this in AGTree/tsurlfilter just for compatibility reasons then.
@maximtop we can provide special rules for that, something like this: ``` ! block start ! block end ```
IMO, formatter and linter are different things and mixing them together may be confusing. At the same time, it does not mean that AGLint cannot enforce formatting rules, it can...
The problem with the current structure in AdguardFilters is that it's hard to understand where to add a new rule unless you already have lots of experience working with it....
Tbh it seems that the bug is in lego itself, not in the script.
Yeah but that's natural for a SNI proxy, the only place where it can learn about the target endpoint is the SNI field.
The problem is that there's no other signal in a TLS connection apart from SNI that can be used to discover the target address.
@grzech0 this is a case when you redirect connections **locally** using `iptables`. Alternative way would be to parse manually `/proc/net/tcp` for connections that were redirected using iptables -t nat redirect....
I'll look into the gateway approach when I have free time, it is indeed may be very useful.
> Was wondering if I use sniproxy and forward selected domians to socks, it will be working very similar to commercially available DNS proxies. It will be pretty similar but...