Fix IPv6 ULA addresses excluded from local address set

nekohasekai · nekohasekai · commit 2377e62d4a4e · 2026-01-17T20:42:31.000+08:00
The filter condition `IsGlobalUnicast() && !IsPrivate()` incorrectly excluded ULA addresses (fc00::/7) from inet6_local_address_set, causing DNS hijack to fail for IPv6 ULA addresses. Fixes: SagerNet/sing-box#3698
diff --git a/redirect_nftables_rules.go b/redirect_nftables_rules.go
@@ -103,10 +103,6 @@ func (r *autoRedirect) nftablesCreateLocalAddressSets(
 				update = true
 			}
 		}
-		localAddresses6 = common.Filter(localAddresses6, func(it netip.Prefix) bool {
-			address := it.Addr()
-			return address.IsLoopback() || address.IsGlobalUnicast() && !address.IsPrivate()
-		})
 		if len(lastAddresses) == 0 || update {
 			_, err := nftablesCreateIPSet(nft, table, 6, "inet6_local_address_set", nftables.TableFamilyIPv6, nil, localAddresses6, false, update)
 			if err != nil {

Original file line number	Diff line number	Diff line change
`@@ -103,10 +103,6 @@ func (r *autoRedirect) nftablesCreateLocalAddressSets(`
`103`	`103`	`update = true`
`104`	`104`	`}`
`105`	`105`	`}`
`106`		`- localAddresses6 = common.Filter(localAddresses6, func(it netip.Prefix) bool {`
`107`		`- address := it.Addr()`
`108`		`- return address.IsLoopback() \|\| address.IsGlobalUnicast() && !address.IsPrivate()`
`109`		`- })`
`110`	`106`	`if len(lastAddresses) == 0 \|\| update {`
`111`	`107`	`_, err := nftablesCreateIPSet(nft, table, 6, "inet6_local_address_set", nftables.TableFamilyIPv6, nil, localAddresses6, false, update)`
`112`	`108`	`if err != nil {`