5 Commits

Author SHA1 Message Date
funman300 cbb9ea49ab chore: advance launcher pointer (hook expansion)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-30 10:38:29 -07:00
funman300 669e73f285 Merge remote-tracking branch 'origin/main' 2026-06-30 10:28:33 -07:00
funman300 1b56c55016 chore: add fifa-blaze submodule (Blaze protocol emulator)
Registers the new fifa-blaze workspace as a submodule.
Milestone 1: capture stub that logs every Blaze packet to JSONL.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-26 15:26:16 -07:00
funman300 98b1b031eb chore: update openfut-launcher submodule (setcap setup step)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-26 09:20:53 -07:00
funman300 acd9efed95 fix: scope iptables NAT rule to loopback only to avoid breaking internet
The broad OUTPUT 443→8443 redirect caught all HTTPS traffic system-wide.
Scoping to -d 127.0.0.1 means only EA domains (resolved to 127.0.0.1 via
/etc/hosts) are redirected; all real internet traffic is unaffected.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-26 09:13:00 -07:00
4 changed files with 16 additions and 5 deletions
+6
View File
@@ -4,3 +4,9 @@
[submodule "openfut-bridge"]
path = openfut-bridge
url = https://git.aleshym.co/funman300/OpenFUT-Bridge.git
[submodule "openfut-launcher"]
path = openfut-launcher
url = https://git.aleshym.co/funman300/openfut-launcher.git
[submodule "fifa-blaze"]
path = fifa-blaze
url = https://git.aleshym.co/funman300/fifa-blaze.git
Submodule
+1
Submodule fifa-blaze added at eccd46f52b
+1
Submodule openfut-launcher added at 87241acc1a
+8 -5
View File
@@ -158,8 +158,8 @@ cmd_status() {
warn "Hosts entries are NOT configured (run: ./setup.sh hosts)"
fi
if sudo iptables -t nat -L OUTPUT -n 2>/dev/null | grep -q "redir ports $BRIDGE_PORT"; then
ok "NAT redirect 443→$BRIDGE_PORT is ACTIVE"
if sudo iptables -t nat -L OUTPUT -n -v 2>/dev/null | grep -q "redir ports $BRIDGE_PORT"; then
ok "NAT redirect 127.0.0.1:443→$BRIDGE_PORT is ACTIVE"
else
warn "NAT redirect is NOT active (run: ./setup.sh nat)"
fi
@@ -205,14 +205,17 @@ cmd_nat() {
ok "NAT rule already active"
return
fi
sudo iptables -t nat -A OUTPUT -p tcp --dport 443 -j REDIRECT --to-port "$BRIDGE_PORT"
ok "iptables: OUTPUT 443 → $BRIDGE_PORT"
# Scope to 127.0.0.1 only — /etc/hosts resolves EA domains to loopback, so
# only those connections match. All real internet traffic goes to non-loopback
# IPs and is never redirected.
sudo iptables -t nat -A OUTPUT -p tcp -d 127.0.0.1 --dport 443 -j REDIRECT --to-port "$BRIDGE_PORT"
ok "iptables: OUTPUT 127.0.0.1:443 → $BRIDGE_PORT"
warn "This rule is NOT persistent across reboots. Re-run './setup.sh nat' after reboot or use iptables-save."
}
cmd_unnat() {
if sudo iptables -t nat -L OUTPUT -n 2>/dev/null | grep -q "redir ports $BRIDGE_PORT"; then
sudo iptables -t nat -D OUTPUT -p tcp --dport 443 -j REDIRECT --to-port "$BRIDGE_PORT"
sudo iptables -t nat -D OUTPUT -p tcp -d 127.0.0.1 --dport 443 -j REDIRECT --to-port "$BRIDGE_PORT"
ok "Removed iptables NAT rule"
fi
}