![](\"https://cdn-icons-png.flaticon.com/128/5968/5968756.png\"){kind=icon}
Flowseal/zapret-discord-youtube ![](\"https://cdn-icons-png.flaticon.com/128/1384/1384060.png\"){kind=icon}
\n\n**NEW**: Ускорение Telegram Desktop - https://github.com/Flowseal/tg-ws-proxy \nАльтернатива https://github.com/bol-van/zapret-win-bundle \nТакже вы можете материально поддержать оригинального разработчика zapret [тут](https://github.com/bol-van/zapret?tab=readme-ov-file#%D0%BF%D0%BE%D0%B4%D0%B4%D0%B5%D1%80%D0%B6%D0%B0%D1%82%D1%8C-%D1%80%D0%B0%D0%B7%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D1%87%D0%B8%D0%BA%D0%B0)\n `Discord`, что может помочь, если он неожиданно перестал работать\n - **`Run Tests`** - запуск утилиты для проверки стратегий на работоспособность:\n - `Standard tests` - проверка сайтов из `utils/targets.txt`\n - `DPI checkers` - проверка DPI на различных провайдерах (Cloudflare, Amazon и др.)\n\n\n## ☑️Распространенные вопросы и проблемы\n\n### После запуска скрипта `general*` ничего не происходит\n\n- После запуска стратегии (отдельным bat файлом, не через service), должен открыться winws.exe (обход), который можно увидеть в панели задач. \nЕсли этого не произошло, то см. [#522](https://github.com/Flowseal/zapret-discord-youtube/issues/522)\n\n### Не работает телеграм (веб версия) или бесконечное \"подключение\" к голосовому чату Discord\nЗапустите **`service.bat`**, выберите пункт **`Update hosts file`**. После чего, если ваш hosts будет неактуальным, то Вам будет предложено обновить его самостоятельно: \n - Скопируйте весь текст из открывшегося блокнота\n - Откройте файл `hosts` в появившейся папке с помощью текстового редактора, открытого от имени администратора\n - Добавьте в конец файла `hosts` то, что скопировали (или замените, если до этого Вы уже добавляли подобное)\n - Сохраните и перепроверьте подключение. Если не работает - убедитесь, что файл `hosts` действительно сохранился.\n\n### Обход не работает / перестал работать\n\n> [!IMPORTANT]\n> **Стратегии со временем могут переставать работать.**\n> Определенная стратегия может работать какое-то время, но со временем она может переставать работать из-за обнаружения.\n> В репозитории представлены множество различных стратегий для обхода. Если ни одна из них вам не помогает, то вам необходимо создать новую, взяв за основу одну из представленных здесь и изменив её параметры.\n> Информацию про параметры стратегий вы можете найти [тут](https://github.com/bol-van/zapret/blob/master/docs/readme.md#nfqws).\n\n- Проверьте, чтобы не было ошибок в `service.bat` -> `Run Diagnostics`\n\n- Убедитесь, что адрес ресурса записан в списках доменов или IP\n\n- Проверьте другие стратегии (**`ALT`**/**`FAKE`** и другие)\n\n- Попробуйте полную переустановку (см. раздел ниже)\n\n- См. [#765](https://github.com/Flowseal/zapret-discord-youtube/issues/765)\n\n### Как переустановить/обновить полностью?\n- Сохраните ресурсы/данные, которые вы сами добавляли\n- Перезапустите устройство\n- `service.bat` -> `Remove Services`\n- `service.bat` -> `Run Diagnostics` (если есть ошибки - устраните их) -> в конце Y\n- Удалите папку с запретом\n- Скачайте последнюю версию [со страницы релизов](https://github.com/Flowseal/zapret-discord-youtube/releases) (`zapret-discord-youtube-...`)\n- Нажмите пкм по архиву -> свойства. Если снизу справа есть галочка разблокировать, то нажмите на неё -> применить -> ОК\n- Распакуйте в новую папку в корне диска (без спец. символов и пробелов)\n- Далее пробуйте запускать различные `general` скрипты (стратегии). Проверьте доступность интернет ресурсов - если не работают, то закрывайте программу (в панели задач иконка замочка) и пробуйте другую стратегию\n- Как найдёте рабочую стратегию, можете поставить её на автозапуск: `service.bat` -> `Install Service` -> выбираете нужную\n\n### Не работает игра/приложение с включённым запретом\n\n- Проверьте, что в service.bat `Game Filter` **`disabled`**, а `IPSet Filter` **`none`**. Иначе это может затронуть доступность ресурсов, которых вы не ожидали.\n\n### Античит ругается на WinDivert\n\n- Прочитайте инструкцию тут - https://github.com/bol-van/zapret-win-bundle/tree/master/windivert-hide\n\n### Требуется цифровая подпись драйвера WinDivert (Windows 7)\n\n- Замените файлы `WinDivert.dll` и `WinDivert64.sys` в папке [`bin`](./bin) на одноименные из [zapret-win-bundle/win7](https://github.com/bol-van/zapret-win-bundle/tree/master/win7)\n\n### При удалении с помощью [**`service.bat`**](./service.bat), WinDivert остается в службах\n\n1. Узнайте название службы с помощью команды, в командной строке Windows (Win+R, `cmd`):\n\n```cmd\ndriverquery | find \"Divert\"\n```\n\n2. Остановите и удалите службу командами:\n\n```cmd\nsc stop название_из_первого_шага\n\nsc delete название_из_первого_шага\n```\n\n### Не работает YouTube\n\n- Убедитесь что вы настроили Secure DNS.\n- Отключите блокировщик рекламы, известно что YouTube начал с ними бороться.\n- Пробуйте все другие стратегии (если раньше работало, но перестало).\n- См. также [#251](https://github.com/Flowseal/zapret-discord-youtube/discussions/251)\n\n### Не работает Discord\n\n- Желательно сначала узнать, на какой стратегии открывается сайт YouTube. Запустите эту стратегию.\n- Проверьте Discord в браузере: https://discord.com/app. В браузере работает? Если работает, то можете пользоваться в нём.\n- Если Discord и в браузере не работает, убедитесь что вы настроили Secure DNS, и после этого ещё раз пробуйте все стратегии. Бывает такое, что на одной стратегии YouTube работает, а Discord нет.\n- См. также [#252](https://github.com/Flowseal/zapret-discord-youtube/discussions/252)\n\n### Не нашли своей проблемы\n\n* Создайте её [тут](https://github.com/Flowseal/zapret-discord-youtube/issues)\n\n## 🗒️Добавление адресов прочих ресурсов\n\nСписок адресов для обхода можно расширить, добавляя их в:\n- **`list-general-user.txt`** для доменов (поддомены автоматически учитываются)\n- **`list-exclude-user.txt`** для исключения доменов (например, если айпи сети указан в `ipset-all.txt`, но конкретный домен из этой сети не надо фильтровать)\n- **`ipset-all.txt`** для IP и подсетей\n- **`ipset-exclude-user.txt`** для исключения IP и подсетей\n - Файлы **`*-user.txt`** автоматически создадутся при первом запуске `zapret` или `service.bat`\n\n## ⭐Поддержка проекта\n\nВы можете поддержать проект, поставив :star: этому репозиторию (сверху справа этой страницы)\n\nТакже вы можете материально поддержать оригинального разработчика zapret [тут](https://github.com/bol-van/zapret?tab=readme-ov-file#%D0%BF%D0%BE%D0%B4%D0%B4%D0%B5%D1%80%D0%B6%D0%B0%D1%82%D1%8C-%D1%80%D0%B0%D0%B7%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D1%87%D0%B8%D0%BA%D0%B0)\n\n\n \\d{3})\\s+(?\\d+)$') {\r\n $code = $matches['code']\r\n $sizeBytes = [int64]$matches['size']\r\n } elseif (($exit -eq 35) -or ($text -match \"not supported|does not support|protocol\\s+'.+'\\s+not\\s+supported|protocol\\s+.+\\s+not\\s+supported|unsupported protocol|TLS.not supported|Unrecognized option|Unknown option|unsupported option|unsupported feature|schannel|SSL\")) {\r\n $code = \"UNSUP\"\r\n } elseif ($text) {\r\n $code = \"ERR\"\r\n }\r\n\r\n $sizeKB = [math]::Round($sizeBytes / 1024, 1)\r\n $status = \"OK\"\r\n $color = \"Green\"\r\n\r\n if ($code -eq \"UNSUP\") {\r\n $status = \"UNSUPPORTED\"\r\n $color = \"Yellow\"\r\n } elseif ($exit -ne 0 -or $code -eq \"ERR\" -or $code -eq \"NA\") {\r\n $status = \"FAIL\"\r\n $color = \"Red\"\r\n }\r\n\r\n if (($sizeKB -ge $WarnMinKB) -and ($sizeKB -le $WarnMaxKB) -and ($exit -ne 0)) {\r\n $status = \"LIKELY_BLOCKED\"\r\n $color = \"Yellow\"\r\n $warned = $true\r\n }\r\n\r\n $lines += [PSCustomObject]@{\r\n TargetId = $target.Id\r\n Provider = $target.Provider\r\n TestLabel = $test.Label\r\n Code = $code\r\n SizeBytes = $sizeBytes\r\n SizeKB = $sizeKB\r\n Status = $status\r\n Color = $color\r\n Warned = $warned\r\n }\r\n }\r\n\r\n return [PSCustomObject]@{\r\n TargetId = $target.Id\r\n Provider = $target.Provider\r\n Lines = $lines\r\n Warned = $warned\r\n }\r\n }\r\n\r\n $runspaces = @()\r\n foreach ($target in $Targets) {\r\n $powershell = [powershell]::Create().AddScript($scriptBlock)\r\n [void]$powershell.AddArgument($target)\r\n [void]$powershell.AddArgument($tests)\r\n [void]$powershell.AddArgument($rangeSpec)\r\n [void]$powershell.AddArgument($TimeoutSeconds)\r\n [void]$powershell.AddArgument($WarnMinKB)\r\n [void]$powershell.AddArgument($WarnMaxKB)\r\n $powershell.RunspacePool = $runspacePool\r\n\r\n $runspaces += [PSCustomObject]@{\r\n Powershell = $powershell\r\n Handle = $powershell.BeginInvoke()\r\n }\r\n }\r\n\r\n $results = @()\r\n foreach ($rs in $runspaces) {\r\n # Wait for the runspace to complete with a small grace period beyond curl's timeout\r\n try {\r\n $waitMs = ([int]$TimeoutSeconds + 5) * 1000\r\n $handle = $rs.Handle\r\n if ($handle -and $handle.AsyncWaitHandle) {\r\n $completed = $handle.AsyncWaitHandle.WaitOne($waitMs)\r\n if (-not $completed) {\r\n Write-Host \"[WARN] Runspace for target timed out after $waitMs ms; stopping runspace...\" -ForegroundColor Yellow\r\n try { $rs.Powershell.Stop() } catch {}\r\n }\r\n }\r\n } catch {\r\n # ignore wait errors and attempt to EndInvoke\r\n }\r\n\r\n try {\r\n $results += $rs.Powershell.EndInvoke($rs.Handle)\r\n } catch {\r\n Write-Host \"[WARN] EndInvoke failed for a runspace; treating as failure.\" -ForegroundColor Yellow\r\n $failedLine = [PSCustomObject]@{\r\n TestLabel = 'RUNSPACE'\r\n Code = 'ERR'\r\n SizeBytes = 0\r\n SizeKB = 0\r\n Status = 'FAIL'\r\n Color = 'Red'\r\n Warned = $false\r\n }\r\n $results += [PSCustomObject]@{ TargetId = 'UNKNOWN'; Provider = 'UNKNOWN'; Lines = @($failedLine); Warned = $false }\r\n }\r\n $rs.Powershell.Dispose()\r\n }\r\n $runspacePool.Close()\r\n $runspacePool.Dispose()\r\n\r\n foreach ($res in $results) {\r\n Write-Host \"`n=== $($res.TargetId) [$($res.Provider)] ===\" -ForegroundColor DarkCyan\r\n\r\n foreach ($line in $res.Lines) {\r\n $msg = \"[{0}][{1}] code={2} size={3} bytes ({4} KB) status={5}\" -f $line.TargetId, $line.TestLabel, $line.Code, $line.SizeBytes, $line.SizeKB, $line.Status\r\n Write-Host $msg -ForegroundColor $line.Color\r\n if ($line.Status -eq \"LIKELY_BLOCKED\") {\r\n Write-Host \" Pattern matches 16-20KB freeze; censor likely cutting this strategy.\" -ForegroundColor Yellow\r\n }\r\n }\r\n\r\n if (-not $res.Warned) {\r\n Write-Host \" No 16-20KB freeze pattern for this target.\" -ForegroundColor Green\r\n } else {\r\n $warnDetected = $true\r\n }\r\n }\r\n\r\n if ($warnDetected) {\r\n Write-Host \"\"\r\n Write-Host \"[WARNING] Detected possible DPI TCP 16-20 blocking on one or more targets. Consider changing strategy/SNI/IP.\" -ForegroundColor Red\r\n } else {\r\n Write-Host \"\"\r\n Write-Host \"[OK] No 16-20KB freeze pattern detected across targets.\" -ForegroundColor Green\r\n }\r\n\r\n return $results\r\n}\r\n\r\nfunction Test-ZapretServiceConflict {\r\n return [bool](Get-Service -Name \"zapret\" -ErrorAction SilentlyContinue)\r\n}\r\n\r\n# Check Admin\r\n$currentPrincipal = New-Object Security.Principal.WindowsPrincipal([Security.Principal.WindowsIdentity]::GetCurrent())\r\nif (-not $currentPrincipal.IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)) {\r\n Write-Host \"[ERROR] Run as Administrator to execute tests\" -ForegroundColor Red\r\n $hasErrors = $true\r\n} else {\r\n Write-Host \"[OK] Administrator rights detected\" -ForegroundColor Green\r\n}\r\n\r\n# Check curl\r\nif (-not (Get-Command \"curl.exe\" -ErrorAction SilentlyContinue)) {\r\n Write-Host \"[ERROR] curl.exe not found\" -ForegroundColor Red\r\n Write-Host \"Install curl or add it to PATH\" -ForegroundColor Yellow\r\n $hasErrors = $true\r\n} else {\r\n Write-Host \"[OK] curl.exe found\" -ForegroundColor Green\r\n}\r\n\r\n# Check for leftover ipset flag from previous interrupted run\r\n$ipsetFlagFile = Join-Path $rootDir \"ipset_switched.flag\"\r\nif (Test-Path $ipsetFlagFile) {\r\n Write-Host \"[INFO] Detected leftover ipset switch flag. Restoring ipset...\" -ForegroundColor Yellow\r\n Set-IpsetMode -mode \"restore\"\r\n Remove-Item -Path $ipsetFlagFile -ErrorAction SilentlyContinue\r\n}\r\n\r\n# Get original ipset status early\r\n$originalIpsetStatus = Get-IpsetStatus\r\n\r\n# Warn about ipset switching and X button behavior\r\nif ($originalIpsetStatus -ne \"any\") {\r\n Write-Host \"[INFO] Current ipset status: $originalIpsetStatus\" -ForegroundColor Cyan\r\n Write-Host \"[WARNING] Ipset will be switched to 'any' for accurate DPI tests.\" -ForegroundColor Yellow\r\n Write-Host \"[WARNING] If you close the window with the X button, ipset will NOT restore immediately.\" -ForegroundColor Yellow\r\n Write-Host \"[WARNING] It will be restored automatically on the next script run.\" -ForegroundColor Yellow\r\n}\r\n\r\n# Check if zapret service installed\r\nif (Test-ZapretServiceConflict) {\r\n Write-Host \"[ERROR] Windows service 'zapret' is installed\" -ForegroundColor Red\r\n Write-Host \" Remove the service before running tests\" -ForegroundColor Yellow\r\n Write-Host \" Open service.bat and choose 'Remove Services'\" -ForegroundColor Yellow\r\n $hasErrors = $true\r\n}\r\n\r\nif ($hasErrors) {\r\n Write-Host \"\"\r\n Write-Host \"Fix the errors above and rerun.\" -ForegroundColor Yellow\r\n Write-Host \"Press any key to exit...\" -ForegroundColor Yellow\r\n [void][System.Console]::ReadKey($true)\r\n exit 1\r\n}\r\n\r\n$dpiTargets = Build-DpiTargets -CustomUrl $dpiCustomUrl\r\n\r\n# Config\r\n$targetDir = $rootDir\r\nif (-not $targetDir) { $targetDir = Split-Path -Parent $MyInvocation.MyCommand.Path }\r\n$batFiles = Get-ChildItem -Path $targetDir -Filter \"*.bat\" | Where-Object { $_.Name -notlike \"service*\" } | Sort-Object { [Regex]::Replace($_.Name, \"(\\d+)\", { $args[0].Value.PadLeft(8, \"0\") }) }\r\n\r\n$globalResults = @()\r\n\r\n# Select top-level test type (standard vs DPI checkers)\r\nfunction Read-TestType {\r\n while ($true) {\r\n Write-Host \"\"\r\n Write-Host \"Select test type:\" -ForegroundColor Cyan\r\n Write-Host \" [1] Standard tests (HTTP/ping)\" -ForegroundColor Gray\r\n Write-Host \" [2] DPI checkers (TCP 16-20 freeze)\" -ForegroundColor Gray\r\n $choice = Read-Host \"Enter 1 or 2\"\r\n switch ($choice) {\r\n '1' { return 'standard' }\r\n '2' { return 'dpi' }\r\n default { Write-Host \"Incorrect input. Please try again.\" -ForegroundColor Yellow }\r\n }\r\n }\r\n}\r\n\r\n# Select test mode: all configs or custom subset\r\nfunction Read-ModeSelection {\r\n while ($true) {\r\n Write-Host \"\"\r\n Write-Host \"Select test run mode:\" -ForegroundColor Cyan\r\n Write-Host \" [1] All configs\" -ForegroundColor Gray\r\n Write-Host \" [2] Selected configs\" -ForegroundColor Gray\r\n $choice = Read-Host \"Enter 1 or 2\"\r\n switch ($choice) {\r\n '1' { return 'all' }\r\n '2' { return 'select' }\r\n default { Write-Host \"Incorrect input. Please try again.\" -ForegroundColor Yellow }\r\n }\r\n }\r\n}\r\n\r\nfunction Read-ConfigSelection {\r\n param([array]$allFiles)\r\n\r\n while ($true) {\r\n Write-Host \"\" \r\n Write-Host \"Available configs:\" -ForegroundColor Cyan\r\n for ($i = 0; $i -lt $allFiles.Count; $i++) {\r\n $idx = $i + 1\r\n Write-Host \" [$idx] $($allFiles[$i].Name)\" -ForegroundColor Gray\r\n }\r\n\r\n $selectionInput = Read-Host \"Enter numbers (e.g. 1,3,5) , ranges (e.g. 2-7), or mixed (e.g. 1,5-10,12). '0' for all\"\r\n $trimmed = $selectionInput.Trim()\r\n \r\n if ($trimmed -eq '0') {\r\n return $allFiles\r\n }\r\n\r\n $parts = $selectionInput -split '[,\\s]+' | Where-Object { $_ -match '^\\d+(-\\d+)?$' }\r\n if ($parts.Count -eq 0) {\r\n Write-Host \"\"\r\n Write-Host \"Invalid input format. Use numbers, ranges (1-5), or combinations (1,3-7,10). Try again.\" -ForegroundColor Yellow\r\n continue\r\n }\r\n $selectedIndices = @()\r\n $hasErrors = $false\r\n \r\n foreach ($part in $parts) {\r\n if ($part -match '^(\\d+)-(\\d+)$') {\r\n $start = [int]$matches[1]\r\n $end = [int]$matches[2]\r\n \r\n if ($start -gt $end) {\r\n Write-Host \" [WARN] Invalid range '$part' (start > end). Skipping.\" -ForegroundColor Yellow\r\n $hasErrors = $true\r\n continue\r\n }\r\n \r\n if ($start -lt 1 -or $end -gt $allFiles.Count) {\r\n Write-Host \" [WARN] Range '$part' out of bounds (valid: 1-$($allFiles.Count)). Skipping invalid parts.\" -ForegroundColor Yellow\r\n $hasErrors = $true\r\n $start = [Math]::Max($start, 1)\r\n $end = [Math]::Min($end, $allFiles.Count)\r\n }\r\n \r\n for ($i = $start; $i -le $end; $i++) {\r\n $selectedIndices += $i\r\n }\r\n } else {\r\n $num = [int]$part\r\n if ($num -ge 1 -and $num -le $allFiles.Count) {\r\n $selectedIndices += $num\r\n } else {\r\n Write-Host \" [WARN] Number '$num' out of bounds (valid: 1-$($allFiles.Count)). Skipping.\" -ForegroundColor Yellow\r\n $hasErrors = $true\r\n }\r\n }\r\n }\r\n $valid = $selectedIndices | Sort-Object -Unique | Where-Object { $_ -ge 1 -and $_ -le $allFiles.Count }\r\n if ($valid.Count -eq 0) {\r\n Write-Host \"\"\r\n Write-Host \"No valid configs selected. Try again.\" -ForegroundColor Yellow\r\n continue\r\n }\r\n\r\n # Checker\r\n Write-Host \"Selected configs: $($valid -join ', ')\" -ForegroundColor Green\r\n if ($hasErrors) {\r\n Write-Host \"Some entries were skipped due to errors (see warnings above).\" -ForegroundColor Yellow\r\n }\r\n \r\n return $valid | ForEach-Object { $allFiles[$_ - 1] }\r\n }\r\n}\r\n\r\nwhile ($true) {\r\n $globalResults = @()\r\n$testType = Read-TestType\r\n$mode = Read-ModeSelection\r\nif ($mode -eq 'select') {\r\n $selected = Read-ConfigSelection -allFiles $batFiles\r\n $batFiles = @($selected)\r\n}\r\n\r\n# Load targets once for standard mode\r\n$targetList = @()\r\n$maxNameLen = 10\r\nif ($testType -eq 'standard') {\r\n $targetsFile = Join-Path $utilsDir \"targets.txt\"\r\n $rawTargets = New-OrderedDict\r\n if (Test-Path $targetsFile) {\r\n Get-Content $targetsFile | ForEach-Object {\r\n if ($_ -match '^\\s*(\\w+)\\s*=\\s*\"(.+)\"\\s*$') {\r\n Add-OrSet -dict $rawTargets -key $matches[1] -val $matches[2]\r\n }\r\n }\r\n }\r\n\r\n if ($rawTargets.Count -eq 0) {\r\n Write-Host \"[INFO] targets.txt missing or empty. Using defaults.\" -ForegroundColor Gray\r\n Add-OrSet $rawTargets \"Discord Main\" \"https://discord.com\"\r\n Add-OrSet $rawTargets \"Discord Gateway\" \"https://gateway.discord.gg\"\r\n Add-OrSet $rawTargets \"Discord CDN\" \"https://cdn.discordapp.com\"\r\n Add-OrSet $rawTargets \"Discord Updates\" \"https://updates.discord.com\"\r\n Add-OrSet $rawTargets \"YouTube Web\" \"https://www.youtube.com\"\r\n Add-OrSet $rawTargets \"YouTube Short\" \"https://youtu.be\"\r\n Add-OrSet $rawTargets \"YouTube Image\" \"https://i.ytimg.com\"\r\n Add-OrSet $rawTargets \"YouTube Video Redirect\" \"https://redirector.googlevideo.com\"\r\n Add-OrSet $rawTargets \"Google Main\" \"https://www.google.com\"\r\n Add-OrSet $rawTargets \"Google Gstatic\" \"https://www.gstatic.com\"\r\n Add-OrSet $rawTargets \"Cloudflare Web\" \"https://www.cloudflare.com\"\r\n Add-OrSet $rawTargets \"Cloudflare CDN\" \"https://cdnjs.cloudflare.com\"\r\n Add-OrSet $rawTargets \"Cloudflare DNS 1.1.1.1\" \"PING:1.1.1.1\"\r\n Add-OrSet $rawTargets \"Cloudflare DNS 1.0.0.1\" \"PING:1.0.0.1\"\r\n Add-OrSet $rawTargets \"Google DNS 8.8.8.8\" \"PING:8.8.8.8\"\r\n Add-OrSet $rawTargets \"Google DNS 8.8.4.4\" \"PING:8.8.4.4\"\r\n Add-OrSet $rawTargets \"Quad9 DNS 9.9.9.9\" \"PING:9.9.9.9\"\r\n } else {\r\n Write-Host \"\"\r\n Write-Host \"[INFO] Loaded targets from targets.txt\" -ForegroundColor Gray\r\n Write-Host \"[INFO] Targets loaded: $($rawTargets.Count)\" -ForegroundColor Gray\r\n }\r\n\r\n foreach ($key in $rawTargets.Keys) {\r\n $targetList += Convert-Target -Name $key -Value $rawTargets[$key]\r\n }\r\n\r\n $maxNameLen = ($targetList | ForEach-Object { $_.Name.Length } | Measure-Object -Maximum).Maximum\r\n if (-not $maxNameLen -or $maxNameLen -lt 10) { $maxNameLen = 10 }\r\n}\r\n\r\n# Ensure we have configs to run\r\nif (-not $batFiles -or $batFiles.Count -eq 0) {\r\n Write-Host \"[ERROR] No general*.bat files found\" -ForegroundColor Red\r\n Write-Host \"Press any key to exit...\" -ForegroundColor Yellow\r\n [void][System.Console]::ReadKey($true)\r\n exit 1\r\n}\r\n\r\n# Stop winws\r\nfunction Stop-Zapret {\r\n Get-Process -Name \"winws\" -ErrorAction SilentlyContinue | Stop-Process -Force\r\n}\r\n\r\n# Capture/restore running winws instances to return user ipset/config\r\nfunction Get-WinwsSnapshot {\r\n try {\r\n return Get-CimInstance Win32_Process -Filter \"Name='winws.exe'\" |\r\n Select-Object ProcessId, CommandLine, ExecutablePath\r\n } catch {\r\n return @()\r\n }\r\n}\r\n\r\nfunction Restore-WinwsSnapshot {\r\n param($snapshot)\r\n\r\n if (-not $snapshot -or $snapshot.Count -eq 0) { return }\r\n\r\n $current = @()\r\n try { $current = (Get-WinwsSnapshot).CommandLine } catch { $current = @() }\r\n\r\n Write-Host \"[INFO] Restoring previously running winws instances...\" -ForegroundColor DarkGray\r\n foreach ($p in $snapshot) {\r\n if (-not $p.ExecutablePath) { continue }\r\n\r\n # Skip if an identical command line is already active\r\n if ($current -and $current -contains $p.CommandLine) { continue }\r\n\r\n $exe = $p.ExecutablePath\r\n $processArgs = \"\"\r\n if ($p.CommandLine) {\r\n $quotedExe = '\"' + $exe + '\"'\r\n if ($p.CommandLine.StartsWith($quotedExe)) {\r\n $processArgs = $p.CommandLine.Substring($quotedExe.Length).Trim()\r\n } elseif ($p.CommandLine.StartsWith($exe)) {\r\n $processArgs = $p.CommandLine.Substring($exe.Length).Trim()\r\n }\r\n }\r\n\r\n Start-Process -FilePath $exe -ArgumentList $processArgs -WorkingDirectory (Split-Path $exe -Parent) -WindowStyle Minimized | Out-Null\r\n }\r\n}\r\n\r\n$env:NO_UPDATE_CHECK = \"1\"\r\n$originalWinws = Get-WinwsSnapshot\r\n\r\nWrite-Host \"\"\r\nWrite-Host \"============================================================\" -ForegroundColor Cyan\r\nWrite-Host \" ZAPRET CONFIG TESTS\" -ForegroundColor Cyan\r\nWrite-Host \" Mode: $($testType.ToUpper())\" -ForegroundColor Cyan\r\nWrite-Host \" Total configs: $($batFiles.Count.ToString().PadLeft(2))\" -ForegroundColor Cyan\r\nWrite-Host \"============================================================\" -ForegroundColor Cyan\r\n\r\ntry {\r\n # Save original ipset status and switch to 'any' for accurate DPI tests\r\n if (($originalIpsetStatus -ne \"any\") -and ($testType -eq 'dpi')) {\r\n Write-Host \"[WARNING] Ipset is in '$originalIpsetStatus' mode. Switching to 'any' for accurate DPI tests...\" -ForegroundColor Yellow\r\n Set-IpsetMode -mode \"any\"\r\n # Create flag file to indicate ipset was switched\r\n \"\" | Out-File -FilePath $ipsetFlagFile -Encoding UTF8\r\n }\r\n Write-Host \"[WARNING] Tests may take several minutes to complete. Please wait...\" -ForegroundColor Yellow\r\n\r\n $configNum = 0\r\n foreach ($file in $batFiles) {\r\n $configNum++\r\n Write-Host \"\"\r\n Write-Host \"------------------------------------------------------------\" -ForegroundColor DarkCyan\r\n Write-Host \" [$configNum/$($batFiles.Count)] $($file.Name)\" -ForegroundColor Yellow\r\n Write-Host \"------------------------------------------------------------\" -ForegroundColor DarkCyan\r\n \r\n # Cleanup\r\n Stop-Zapret\r\n \r\n # Start config\r\n Write-Host \" > Starting config...\" -ForegroundColor Cyan\r\n $proc = Start-Process -FilePath \"cmd.exe\" -ArgumentList \"/c `\"$($file.FullName)`\"\" -WorkingDirectory $targetDir -PassThru -WindowStyle Minimized\r\n \r\n # Wait init\r\n Start-Sleep -Seconds 5\r\n \r\n if ($testType -eq 'standard') {\r\n $curlTimeoutSeconds = 5\r\n\r\n # Parallel target checks via runspace pool (faster than jobs)\r\n $maxParallel = 8\r\n $runspacePool = [runspacefactory]::CreateRunspacePool(1, $maxParallel)\r\n $runspacePool.Open()\r\n\r\n $scriptBlock = {\r\n param($t, $curlTimeoutSeconds)\r\n\r\n $httpPieces = @()\r\n\r\n if ($t.Url) {\r\n $tests = @(\r\n @{ Label = \"HTTP\"; Args = @(\"--http1.1\") },\r\n @{ Label = \"TLS1.2\"; Args = @(\"--tlsv1.2\", \"--tls-max\", \"1.2\") },\r\n @{ Label = \"TLS1.3\"; Args = @(\"--tlsv1.3\", \"--tls-max\", \"1.3\") }\r\n )\r\n\r\n $baseArgs = @(\"-I\", \"-s\", \"-m\", $curlTimeoutSeconds, \"-o\", \"NUL\", \"-w\", \"%{http_code}\", \"--show-error\")\r\n foreach ($test in $tests) {\r\n try {\r\n $curlArgs = $baseArgs + $test.Args\r\n $stderr = $null\r\n $output = & curl.exe @curlArgs $t.Url 2>&1 | ForEach-Object {\r\n if ($_ -is [System.Management.Automation.ErrorRecord]) {\r\n $stderr += $_.Exception.Message + \" \"\r\n } else {\r\n $_\r\n }\r\n }\r\n $httpCode = ($output | Out-String).Trim()\r\n \r\n $dnsHijack = ($stderr -match \"Could not resolve host|certificate|SSL certificate problem|self[- ]?signed|certificate verify failed|unable to get local issuer certificate\") \r\n if ($dnsHijack) {\r\n $httpPieces += \"$($test.Label):SSL \"\r\n continue\r\n }\r\n \r\n $unsupported = (($LASTEXITCODE -eq 35) -or ($stderr -match \"does not support|not supported|protocol\\s+'?.+'?\\s+not\\s+supported|unsupported protocol|TLS.*not supported|Unrecognized option|Unknown option|unsupported option|unsupported feature|schannel\"))\r\n if ($unsupported) {\r\n $httpPieces += \"$($test.Label):UNSUP\"\r\n continue\r\n }\r\n\r\n $ok = ($LASTEXITCODE -eq 0)\r\n if ($ok) {\r\n $httpPieces += \"$($test.Label):OK \"\r\n } else {\r\n $httpPieces += \"$($test.Label):ERROR\"\r\n }\r\n } catch {\r\n $httpPieces += \"$($test.Label):ERROR\"\r\n }\r\n }\r\n }\r\n\r\n $pingResult = \"n/a\"\r\n if ($t.PingTarget) {\r\n try {\r\n $pings = Test-Connection -ComputerName $t.PingTarget -Count 3 -ErrorAction Stop\r\n $avg = ($pings | Measure-Object -Property ResponseTime -Average).Average\r\n $pingResult = \"{0:N0} ms\" -f $avg\r\n } catch {\r\n $pingResult = \"Timeout\"\r\n }\r\n }\r\n\r\n return (New-Object PSObject -Property @{\r\n Name = $t.Name\r\n HttpTokens = $httpPieces\r\n PingResult = $pingResult\r\n IsUrl = [bool]$t.Url\r\n })\r\n }\r\n\r\n $runspaces = @()\r\n foreach ($target in $targetList) {\r\n $ps = [powershell]::Create().AddScript($scriptBlock)\r\n [void]$ps.AddArgument($target)\r\n [void]$ps.AddArgument($curlTimeoutSeconds)\r\n $ps.RunspacePool = $runspacePool\r\n\r\n $runspaces += [PSCustomObject]@{\r\n Powershell = $ps\r\n Handle = $ps.BeginInvoke()\r\n }\r\n }\r\n\r\n $script:currentLine = \" > Running tests...\"\r\n Write-Host $script:currentLine -ForegroundColor DarkGray\r\n\r\n $targetResults = @()\r\n foreach ($rs in $runspaces) {\r\n try {\r\n $waitMs = ([int]$curlTimeoutSeconds + 5) * 1000\r\n $handle = $rs.Handle\r\n if ($handle -and $handle.AsyncWaitHandle) {\r\n $completed = $handle.AsyncWaitHandle.WaitOne($waitMs)\r\n if (-not $completed) {\r\n Write-Host \"[WARN] Runspace for target timed out after $waitMs ms; stopping runspace...\" -ForegroundColor Yellow\r\n try { $rs.Powershell.Stop() } catch {}\r\n }\r\n }\r\n } catch {\r\n # ignore\r\n }\r\n\r\n try {\r\n $targetResults += $rs.Powershell.EndInvoke($rs.Handle)\r\n } catch {\r\n Write-Host \"[WARN] EndInvoke failed for a runspace; treating as failure.\" -ForegroundColor Yellow\r\n $targetResults += [PSCustomObject]@{ Name = 'UNKNOWN'; HttpTokens = @('HTTP:ERROR'); PingResult = 'Timeout'; IsUrl = $true }\r\n }\r\n $rs.Powershell.Dispose()\r\n }\r\n\r\n $runspacePool.Close()\r\n $runspacePool.Dispose()\r\n\r\n $targetLookup = @{}\r\n foreach ($res in $targetResults) { $targetLookup[$res.Name] = $res }\r\n\r\n foreach ($target in $targetList) {\r\n $res = $targetLookup[$target.Name]\r\n if (-not $res) { continue }\r\n\r\n Write-Host \" $($target.Name.PadRight($maxNameLen)) \" -NoNewline\r\n\r\n if ($res.IsUrl -and $res.HttpTokens) {\r\n foreach ($tok in $res.HttpTokens) {\r\n $tokColor = \"Green\"\r\n if ($tok -match \"UNSUP\") { $tokColor = \"Yellow\" }\r\n elseif ($tok -match \"SSL\") { $tokColor = \"Red\" }\r\n elseif ($tok -match \"ERR\") { $tokColor = \"Red\" }\r\n Write-Host \" $tok\" -NoNewline -ForegroundColor $tokColor\r\n }\r\n Write-Host \" | Ping: \" -NoNewline -ForegroundColor DarkGray\r\n if ($res.PingResult -eq \"Timeout\") {\r\n $pingColor = \"Yellow\"\r\n } else {\r\n $pingColor = \"Cyan\"\r\n }\r\n Write-Host \"$($res.PingResult)\" -NoNewline -ForegroundColor $pingColor\r\n Write-Host \"\"\r\n } else {\r\n # Ping-only target\r\n Write-Host \" Ping: \" -NoNewline -ForegroundColor DarkGray\r\n if ($res.PingResult -eq \"Timeout\") {\r\n $pingColor = \"Red\"\r\n } else {\r\n $pingColor = \"Cyan\"\r\n }\r\n Write-Host \"$($res.PingResult)\" -ForegroundColor $pingColor\r\n }\r\n\r\n }\r\n\r\n $globalResults += @{ Config = $file.Name; Type = 'standard'; Results = $targetResults }\r\n } else {\r\n Write-Host \" > Running DPI checkers...\" -ForegroundColor DarkGray\r\n $dpiResults = Invoke-DpiSuite -Targets $dpiTargets -TimeoutSeconds $dpiTimeoutSeconds -RangeBytes $dpiRangeBytes -WarnMinKB $dpiWarnMinKB -WarnMaxKB $dpiWarnMaxKB -MaxParallel $dpiMaxParallel\r\n $globalResults += @{ Config = $file.Name; Type = 'dpi'; Results = $dpiResults }\r\n }\r\n \r\n # Stop\r\n Stop-Zapret\r\n if (-not $proc.HasExited) { Stop-Process -Id $proc.Id -Force -ErrorAction SilentlyContinue }\r\n}\r\n\r\n Write-Host \"\"\r\n Write-Host \"All tests finished.\" -ForegroundColor Green\r\n\r\n # Analytics\r\n $analytics = @{}\r\n foreach ($res in $globalResults) {\r\n if ($res.Type -eq 'standard') {\r\n foreach ($targetRes in $res.Results) {\r\n $config = $res.Config\r\n if (-not $analytics.ContainsKey($config)) { $analytics[$config] = @{ OK = 0; ERROR = 0; UNSUP = 0; PingOK = 0; PingFail = 0 } }\r\n if ($targetRes.IsUrl) {\r\n foreach ($tok in $targetRes.HttpTokens) {\r\n if ($tok -match \"OK\") { $analytics[$config].OK++ }\r\n elseif ($tok -match \"SSL\") { $analytics[$config].ERROR++ }\r\n elseif ($tok -match \"ERROR\") { $analytics[$config].ERROR++ }\r\n elseif ($tok -match \"UNSUP\") { $analytics[$config].UNSUP++ }\r\n }\r\n }\r\n if ($targetRes.PingResult -ne \"Timeout\" -and $targetRes.PingResult -ne \"n/a\") { $analytics[$config].PingOK++ } else { $analytics[$config].PingFail++ }\r\n }\r\n } elseif ($res.Type -eq 'dpi') {\r\n foreach ($targetRes in $res.Results) {\r\n $config = $res.Config\r\n if (-not $analytics.ContainsKey($config)) { $analytics[$config] = @{ OK = 0; FAIL = 0; UNSUPPORTED = 0; LIKELY_BLOCKED = 0 } }\r\n foreach ($line in $targetRes.Lines) {\r\n if ($line.Status -eq \"OK\") { $analytics[$config].OK++ }\r\n elseif ($line.Status -eq \"FAIL\") { $analytics[$config].FAIL++ }\r\n elseif ($line.Status -eq \"UNSUPPORTED\") { $analytics[$config].UNSUPPORTED++ }\r\n elseif ($line.Status -eq \"LIKELY_BLOCKED\") { $analytics[$config].LIKELY_BLOCKED++ }\r\n }\r\n }\r\n }\r\n }\r\n\r\n Write-Host \"\"\r\n Write-Host \"=== ANALYTICS ===\" -ForegroundColor Cyan\r\n foreach ($config in $analytics.Keys) {\r\n $a = $analytics[$config]\r\n if ($a.ContainsKey('PingOK')) {\r\n Write-Host \"$config : HTTP OK: $($a.OK), ERR: $($a.ERROR), UNSUP: $($a.UNSUP), Ping OK: $($a.PingOK), Fail: $($a.PingFail)\" -ForegroundColor Yellow\r\n } else {\r\n Write-Host \"$config : OK: $($a.OK), FAIL: $($a.FAIL), UNSUP: $($a.UNSUPPORTED), BLOCKED: $($a.LIKELY_BLOCKED)\" -ForegroundColor Yellow\r\n }\r\n }\r\n\r\n # Determine best strategy\r\n $bestConfig = $null\r\n $maxScore = 0\r\n $maxPing = -1\r\n foreach ($config in $analytics.Keys) {\r\n $a = $analytics[$config]\r\n $score = $a.OK\r\n $pingScore = 0\r\n if ($a.ContainsKey('PingOK')) {\r\n $pingScore = $a.PingOK\r\n }\r\n if ($score -gt $maxScore) {\r\n $maxScore = $score\r\n $maxPing = $pingScore\r\n $bestConfig = $config\r\n } elseif ($score -eq $maxScore) {\r\n if ($pingScore -gt $maxPing) {\r\n $maxPing = $pingScore\r\n $bestConfig = $config\r\n }\r\n }\r\n }\r\n Write-Host \"\"\r\n Write-Host \"Best config: $bestConfig\" -ForegroundColor Green\r\n Write-Host \"\"\r\n\r\n # Save to file\r\n $dateStr = Get-Date -Format \"yyyy-MM-dd_HH-mm-ss\"\r\n $resultFile = Join-Path $resultsDir \"test_results_$dateStr.txt\"\r\n # Clear file\r\n \"\" | Out-File $resultFile -Encoding UTF8\r\n foreach ($res in $globalResults) {\r\n $config = $res.Config\r\n $type = $res.Type\r\n $results = $res.Results\r\n Add-Content $resultFile \"Config: $config (Type: $type)\"\r\n if ($type -eq 'standard') {\r\n foreach ($targetRes in $results) {\r\n $name = $targetRes.Name\r\n $http = $targetRes.HttpTokens -join ' '\r\n $ping = $targetRes.PingResult\r\n Add-Content $resultFile \" $name : $http | Ping: $ping\"\r\n }\r\n } elseif ($type -eq 'dpi') {\r\n foreach ($targetRes in $results) {\r\n $id = $targetRes.TargetId\r\n $provider = $targetRes.Provider\r\n Add-Content $resultFile \" Target: $id ($provider)\"\r\n foreach ($line in $targetRes.Lines) {\r\n $test = $line.TestLabel\r\n $code = $line.Code\r\n $size = $line.SizeKB\r\n $status = $line.Status\r\n Add-Content $resultFile \" ${test}: code=${code} size=${size} KB status=${status}\"\r\n }\r\n }\r\n }\r\n Add-Content $resultFile \"\"\r\n }\r\n\r\n # Add analytics\r\n Add-Content $resultFile \"=== ANALYTICS ===\"\r\n foreach ($config in $analytics.Keys) {\r\n $a = $analytics[$config]\r\n if ($a.ContainsKey('PingOK')) {\r\n Add-Content $resultFile \"$config : HTTP OK: $($a.OK), ERR: $($a.ERROR), UNSUP: $($a.UNSUP), Ping OK: $($a.PingOK), Fail: $($a.PingFail)\"\r\n } else {\r\n Add-Content $resultFile \"$config : OK: $($a.OK), FAIL: $($a.FAIL), UNSUP: $($a.UNSUPPORTED), BLOCKED: $($a.LIKELY_BLOCKED)\"\r\n }\r\n }\r\n\r\n Add-Content $resultFile \"Best strategy: $bestConfig\"\r\n\r\n Write-Host \"Results saved to $resultFile\" -ForegroundColor Green\r\n\r\n} catch {\r\n Write-Host \"[ERROR] An error occurred during tests. Restoring ipset...\" -ForegroundColor Red\r\n if ($originalIpsetStatus -and $originalIpsetStatus -ne \"any\") {\r\n Set-IpsetMode -mode \"restore\"\r\n }\r\n Remove-Item -Path $ipsetFlagFile -ErrorAction SilentlyContinue\r\n} finally {\r\n Stop-Zapret\r\n Restore-WinwsSnapshot -snapshot $originalWinws\r\n if ($originalIpsetStatus -ne \"any\") {\r\n Write-Host \"[INFO] Restoring original ipset mode...\" -ForegroundColor DarkGray\r\n Set-IpsetMode -mode \"restore\"\r\n }\r\n Remove-Item -Path $ipsetFlagFile -ErrorAction SilentlyContinue\r\n}\r\n\r\n Write-Host \"Press any key to close...\" -ForegroundColor Yellow\r\n [void][System.Console]::ReadKey($true)\r\n exit\r\n}\r\n"
}
]