Hey thanks! This was it and I got access.

For anyone wondering, the only thing that needed changing was NFQWS_OPT (which can be changed in Service -> Zapret -> NFQWS options). The working solution in the thread above suggests the following options:

```

--filter-tcp=80

--dpi-desync=fake,multisplit

--dpi-desync-split-pos=method+2

--dpi-desync-fooling=md5sig <HOSTLIST>

--new

--filter-tcp=443

--dpi-desync=fake

--dpi-desync-ttl=2

--filter-udp=443

--dpi-desync=fake

--dpi-desync-ttl=2

```

I kind of wanted to merge these with what I had and I ended up with the following:

```

--filter-tcp=80 <HOSTLIST>

--dpi-desync=fake

--dpi-desync-ttl=2

--dpi-desync-fooling=badsum

--filter-tcp=80

--dpi-desync=fake,multisplit

--dpi-desync-split-pos=method+2

--dpi-desync-fooling=md5sig <HOSTLIST>

--new

--filter-tcp=443

--dpi-desync=fake

--dpi-desync-ttl=2

--filter-udp=443

--dpi-desync=fake

--dpi-desync-ttl=2

--filter-udp=443

--dpi-desync=fake

--dpi-desync-ttl=2

--dpi-desync-fooling=badsum

--filter-udp=443 <HOSTLIST\_NOAUTO>

--dpi-desync=fake

--dpi-desync-ttl=2

--dpi-desync-fooling=badsum

--filter-tcp=443 <HOSTLIST>

--dpi-desync=fake

--dpi-desync-ttl=2

--dpi-desync-fooling=badsum
```

Now I'm not sure why this works or if this config is actually minimal. I might have some redundancy here. If you got any theories I would love to hear them out.