Help me use the correct NFQWS_OPT settings from blockcheck.sh

[meraklimaymun]

Hey all,

I'm running OpenWRT on Raspberry Pi 5. I installed Zapret_70.20250505 from remittor's repo. Installed these two packages:

-luci-app-zapret_70.20250505-r1_all.ipk
-zapret_70.20250505_aarch64_cortex-a76.ipk

I also have the HTTPS DNS Proxy app installed and it's using Cloudflare DNS with DoH enabled.

I can see the Zapret GUI on Luci. It seems to have unblocked Discord on browser but it's not effective on the Windows Discord app.

I ran a blockcheck.sh on the OpenWRT (with DNS proxy disabled) and it gave me this summary:

ipv4 discord.gg curl_test_http : tpws --hostspell=hoSt
ipv4 discord.gg curl_test_http : tpws --hostpad=16384
ipv4 discord.gg curl_test_http : tpws --split-pos=method+2,midsld --fix-seg --oob
ipv4 discord.gg curl_test_http : tpws --methodspace
ipv4 discord.gg curl_test_http : nfqws --hostspell=hoSt
ipv4 discord.gg curl_test_http : nfqws --dpi-desync=fake --dpi-desync-ttl=2
ipv4 discord.gg curl_test_http : nfqws --dpi-desync=fake --dpi-desync-fooling=badsum
ipv4 discord.gg curl_test_http : nfqws --dpi-desync=fake --dpi-desync-fooling=md5sig
ipv4 discord.gg curl_test_http : nfqws --dpi-desync=fakedsplit --dpi-desync-ttl=2 --dpi-desync-split-pos=method+2
ipv4 discord.gg curl_test_http : nfqws --dpi-desync=fakedsplit --dpi-desync-fooling=badsum --dpi-desync-split-pos=method+2
ipv4 discord.gg curl_test_http : nfqws --dpi-desync=fakedsplit --dpi-desync-fooling=md5sig --dpi-desync-split-pos=method+2
ipv4 discord.gg curl_test_http : nfqws --dpi-desync=fakeddisorder --dpi-desync-ttl=2 --dpi-desync-split-pos=method+2
ipv4 discord.gg curl_test_http : nfqws --dpi-desync=fakeddisorder --dpi-desync-fooling=badsum --dpi-desync-split-pos=method+2
ipv4 discord.gg curl_test_http : nfqws --dpi-desync=fakeddisorder --dpi-desync-fooling=md5sig --dpi-desync-split-pos=method+2
ipv4 discord.gg curl_test_http : nfqws --dpi-desync=multidisorder --dpi-desync-split-pos=method+2 --dpi-desync-split-seqovl=method+1
ipv4 discord.gg curl_test_http : nfqws --dpi-desync=multidisorder --dpi-desync-split-pos=midsld --dpi-desync-split-seqovl=midsld-1
ipv4 discord.gg curl_test_http : nfqws --dpi-desync=multidisorder --dpi-desync-split-pos=method+2,midsld --dpi-desync-split-seqovl=method+1
ipv4 discord.gg curl_test_http : nfqws --dpi-desync=fake --dpi-desync-ttl=1 --dpi-desync-autottl=-1
ipv4 discord.gg curl_test_http : nfqws --dpi-desync=fake --dpi-desync-ttl=1 --dpi-desync-autottl=-2
ipv4 discord.gg curl_test_http : nfqws --dpi-desync=fake --dpi-desync-ttl=1 --dpi-desync-autottl=-3
ipv4 discord.gg curl_test_http : nfqws --dpi-desync=fake --dpi-desync-ttl=1 --dpi-desync-autottl=-4
ipv4 discord.gg curl_test_http : nfqws --dpi-desync=fake --dpi-desync-ttl=1 --dpi-desync-autottl=-5
ipv4 discord.gg curl_test_http : nfqws --dpi-desync=fakedsplit --dpi-desync-ttl=1 --dpi-desync-autottl=-1 --dpi-desync-split-pos=method+2
ipv4 discord.gg curl_test_http : nfqws --dpi-desync=fakedsplit --dpi-desync-ttl=1 --dpi-desync-autottl=-2 --dpi-desync-split-pos=method+2
ipv4 discord.gg curl_test_http : nfqws --dpi-desync=fakedsplit --dpi-desync-ttl=1 --dpi-desync-autottl=-3 --dpi-desync-split-pos=method+2
ipv4 discord.gg curl_test_http : nfqws --dpi-desync=fakedsplit --dpi-desync-ttl=1 --dpi-desync-autottl=-4 --dpi-desync-split-pos=method+2
ipv4 discord.gg curl_test_http : nfqws --dpi-desync=fakedsplit --dpi-desync-ttl=1 --dpi-desync-autottl=-5 --dpi-desync-split-pos=method+2
ipv4 discord.gg curl_test_http : nfqws --dpi-desync=fakeddisorder --dpi-desync-ttl=1 --dpi-desync-autottl=-1 --dpi-desync-split-pos=method+2
ipv4 discord.gg curl_test_http : nfqws --dpi-desync=fakeddisorder --dpi-desync-ttl=1 --dpi-desync-autottl=-2 --dpi-desync-split-pos=method+2
ipv4 discord.gg curl_test_http : nfqws --dpi-desync=fakeddisorder --dpi-desync-ttl=1 --dpi-desync-autottl=-3 --dpi-desync-split-pos=method+2
ipv4 discord.gg curl_test_http : nfqws --dpi-desync=fakeddisorder --dpi-desync-ttl=1 --dpi-desync-autottl=-4 --dpi-desync-split-pos=method+2
ipv4 discord.gg curl_test_http : nfqws --dpi-desync=fakeddisorder --dpi-desync-ttl=1 --dpi-desync-autottl=-5 --dpi-desync-split-pos=method+2
ipv4 discord.gg curl_test_https_tls12 : tpws --split-pos=2 --oob
ipv4 discord.gg curl_test_https_tls12 : tpws --split-pos=2 --oob --disorder
ipv4 discord.gg curl_test_https_tls12 : tpws --tlsrec=midsld
ipv4 discord.gg curl_test_https_tls12 : tpws --tlsrec=midsld --oob
ipv4 discord.gg curl_test_https_tls12 : tpws --tlsrec=midsld --disorder
ipv4 discord.gg curl_test_https_tls12 : tpws --tlsrec=midsld --oob --disorder
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=fake --dpi-desync-ttl=2
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=fake --dpi-desync-fooling=badsum
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=fake --dpi-desync-fooling=md5sig
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=fakedsplit --dpi-desync-ttl=2 --dpi-desync-split-pos=1
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=fakedsplit --dpi-desync-fooling=badsum --dpi-desync-split-pos=1
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=fakedsplit --dpi-desync-fooling=md5sig --dpi-desync-split-pos=1
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=fakeddisorder --dpi-desync-ttl=2 --dpi-desync-split-pos=1
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=fakeddisorder --dpi-desync-fooling=badsum --dpi-desync-split-pos=1
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=fakeddisorder --dpi-desync-fooling=md5sig --dpi-desync-split-pos=1
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=multidisorder --dpi-desync-split-pos=2 --dpi-desync-split-seqovl=1
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=multidisorder --dpi-desync-split-pos=sniext+1 --dpi-desync-split-seqovl=sniext
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=multidisorder --dpi-desync-split-pos=sniext+4 --dpi-desync-split-seqovl=sniext+3
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=multidisorder --dpi-desync-split-pos=midsld --dpi-desync-split-seqovl=midsld-1
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=multidisorder --dpi-desync-split-pos=2,midsld --dpi-desync-split-seqovl=1
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=fake --dpi-desync-ttl=1 --dpi-desync-autottl=-1
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=fake --dpi-desync-ttl=1 --dpi-desync-autottl=-2
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=fake --dpi-desync-ttl=1 --dpi-desync-autottl=-3
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=fake --dpi-desync-ttl=1 --dpi-desync-autottl=-4
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=fake --dpi-desync-ttl=1 --dpi-desync-autottl=-5
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=fakedsplit --dpi-desync-ttl=1 --dpi-desync-autottl=-1 --dpi-desync-split-pos=1
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=fakedsplit --dpi-desync-ttl=1 --dpi-desync-autottl=-2 --dpi-desync-split-pos=1
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=fakedsplit --dpi-desync-ttl=1 --dpi-desync-autottl=-3 --dpi-desync-split-pos=1
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=fakedsplit --dpi-desync-ttl=1 --dpi-desync-autottl=-4 --dpi-desync-split-pos=1
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=fakedsplit --dpi-desync-ttl=1 --dpi-desync-autottl=-5 --dpi-desync-split-pos=1
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=fakeddisorder --dpi-desync-ttl=1 --dpi-desync-autottl=-1 --dpi-desync-split-pos=1
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=fakeddisorder --dpi-desync-ttl=1 --dpi-desync-autottl=-2 --dpi-desync-split-pos=1
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=fakeddisorder --dpi-desync-ttl=1 --dpi-desync-autottl=-3 --dpi-desync-split-pos=1
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=fakeddisorder --dpi-desync-ttl=1 --dpi-desync-autottl=-4 --dpi-desync-split-pos=1
ipv4 discord.gg curl_test_https_tls12 : nfqws --dpi-desync=fakeddisorder --dpi-desync-ttl=1 --dpi-desync-autottl=-5 --dpi-desync-split-pos=1

There are so many options here and I couldn't figure out which ones to type in NFQWS_OPT text box in the Zapret settings menu. Can anyone help me?

I'm talking about here.

Also I noticed when installing Zapret on the terminal from bol-van's source, it asks me if I want to use tls1.2 and tls1.3. But those options don't exist when you install zapret by uploading .ipk files to openwrt . Looking at these results I notice some of them have tls12 written. Does that mean i need tls1.2 installed and need to install zapret via terminal?

[Eptiy]

First, you should be fine using remittor's package, but I suggest you read through the instruction anyway. And installing zapret via terminal wouldn't hurt, so it's worth a try.

Second, I can't quite remember the blockcheck usage process, but I'm pretty sure that it stops checking the strategies right after it finds a working one, so you shouldn't have to end up with that many of them. Anyways, http equals tcp=80, https_tls12 equals tcp=443, quic equals udp=443. For example: line curl_test_http : nfqws --dpi-desync=multidisorder --dpi-desync-split-pos=midsld --dpi-desync-split-seqovl=midsld-1 means you should put arguments after "nfqws" in GUI's line starting with "filter-tcp=80". (It's not exactly a line there, it seems like every argument has to be written in a new string. You'll have to refer to remittor's repository on this question).

Third, you don't test tpws unless you know what you're doing it for. In most cases tpws is no help and is an only measure in cases, when you have no other options (nfqws. winws). Nfqws has more options and is more preferable. Testing them both will just waste your time.