Blocks all WAN access whenever PassWall2 or a standalone Xray/Sing-box instance is down or has crashed. Uses a persistent nftables rule enforced by fw4 and a procd watchdog service that reacts within ~1 second on clean stop/start and within 5 seconds on a crash.
Boot