# unused dns upstream
# nserver 2606:4700:4700::1001
nscache 65536
nscache6 65536
# windows
# service
# linux
# daemon
auth iponly
# target filter
deny * * 127.0.0.1,192.168.0.0/16,fe80::/64
# port filter, 80,443,5222-5228 only
deny * * * 1-79,81-442,444-5221,5229-65535 HTTP,HTTP_CONNECT
# source filter
allow * 192.168.1.0/24,fe80::/64
# dont ask passwd
deny *
# linux: -s0 to disable splice. -olSO_REUSEADDR,SO_REUSEPORT
# linux: listen on ipv6 may need -olIPV6_V6ONLY
proxy -p8886 -64 -a -ocTCP_NODELAY -osTCP_NODELAY -i0.0.0.0 -e0.0.0.0 -e::
proxy -p8886 -64 -a -ocTCP_NODELAY -osTCP_NODELAY -i:: -e0.0.0.0 -e::
