Zapret not work on Flint 2

[Jarvis]

Hi everyone,

I am trying to set up Zapret on my GL-MT6000 (Flint 2) to bypass ISP restrictions in Turkey. However, despite finding a working strategy with the test script, I still cannot access blocked websites in practice.

My Setup:

• Device: GL-MT6000 (Flint 2)

• Firmware: Latest Stable (4.x)

• Package: Zapret (standard installation via opkg/curl)

What I have tried so far:

1. Blockcheck Results: I ran /opt/zapret/blockcheck.sh via SSH. It found several working strategies.

• Result: nfqws --dpi-desync=fake --dpi-desync-fooling=md5sig returns OK.

2. Configuration: I entered this exact strategy into the NFQWS_OPT field in the config file.

3. Network Acceleration: I have disabled "Network Acceleration" (Hardware Offloading) in the GL.iNet panel, as I know this bypasses the CPU/NFQWS.

4. AdGuard Home: I disabled "Handle Client Requests" to ensure traffic goes through the router's firewall/iptables chain first.

5. IPv6: Disabled system-wide.

The Problem:

Even after applying the strategy that blockcheck confirms as working, and restarting the service/firewall, my browser still fails to load blocked sites (e.g., Discord).

Is there a specific firewall rule, nftables quirk, or kernel module issue specific to the MediaTek Filogic (MT6000) target that prevents Zapret from modifying the packets effectively?

Any advice would be appreciated.

[admon]

If you need software like this, I would recommend using vanilla OpenWrt instead. The GL firmware will change a lot of firewall + routing rules, so it's painful to maintain a stable router while using software like this. Ofc you will loose the GL GUI then.

For installing OpenWrt, look here: Testing to determine if you are a bot!