Audion DPI Manager — user guide

Contents

• Starting
• How the window is built
• First start
• ZAPRET
• CONFIGS
• STRATEGIES
• DNS
• LISTS
• JOURNAL
• DIAGNOSTICS
• ZAPRET 2
• BYEDPI
• Command line
• What the program changes on the machine
• Where things are
• Licence and trademark
• If something is wrong

Audion DPI Manager is one window for the programs that get round traffic blocking. The main one is Zapret (the Flowseal/zapret-discord-youtube package). Beside it: zapret2 (bol-van) and ByeDPI (romanvht/ByeDPIManager).

The window works with the same files, services and registry entries as Flowseal's bat files. The service.bat menu and this window can be used alternately: they always agree.

Starting

Start Start.exe. Windows asks for permission (UAC): without administrator rights the WinDivert driver cannot be loaded, a service cannot be installed, and DNS and the hosts file cannot be changed. If you decline, nothing starts and nothing changes. The prompt comes at every start: through Start.exe, and when App\AudionDpiManager.exe is opened directly. If the program still ends up without rights (started outside the usual way and the prompt was impossible), the status line says so, and the bypass, the service and DNS will not work.

The language is taken from the system at the first start (Russian on a Russian Windows, English on any other); after RU | EN is pressed the choice is remembered. RU | EN at the top right switches the language, the moon and sun buttons the theme, a | A | A+ the font size.

How the window is built

The top row — one row of three dark pieces: the name of the program and its version on the left — the ABOUT button (press it again to go back to the application), the DPI tool switches in the middle, the language, the theme, the font and the tray glyph on the right. The height of the window is the scarcest thing the pages have, so what used to be two rows (the title, then a band of switches) is one.

The tray. While the program runs, its icon stands in the Windows tray. The glyph with an arrow down at the right end of the top row hides the window in the tray: the program and the bypass go on. A click on the tray icon brings the window back. The menu of the icon (right button; each line has its icon, the chosen tool is marked with a tangerine dot): Show the window, Start and Stop for the tool chosen on top, the switches ZAPRET, ZAPRET 2, BYEDPI, and Exit. The cross of the window still closes the program. A second start of the program from the same folder does not open a second copy: it shows the window of the one that runs.

The three big switches in the middle — ZAPRET, ZAPRET 2, BYEDPI — are not settings but a full switch of the DPI tool under the window: each has its own files, its own connection and its own meaning of the UPDATE and START buttons below. The colour of the line under the header shows which one is chosen (Zapret — blue, zapret2 — amber, ByeDPI — green). The indication is on the buttons themselves: under the name a light and the version ("what is installed": green — the version is the latest, amber — not installed or GitHub has a newer one, "1.10.3 → 1.10.4", gray — GitHub did not answer), and a green triangle by the name means "working now". Starting any of the three first stops the other two: two bypasses at once get in each other's way. The zapret service is only stopped then and stays installed.

The bottom bar — permanent buttons. On the left the tools: CONFIGS, STRATEGIES, DNS, LISTS, JOURNAL, DIAGNOSTICS. Press one and the tool opens in place of the application page; press it again (or Esc) to go back. CONFIGS and DIAGNOSTICS work with Zapret only: while ZAPRET 2 or BYEDPI is chosen on top they are gray and say «Zapret only». The others serve all three: STRATEGIES tunes a strategy for the tool chosen on top, DNS is common to Windows, JOURNAL opens on the lines of the tool chosen on top, and LISTS marks its line in the MY SITES card. On the right UPDATE | START act on the application chosen on top. A button with nothing to do is gray: UPDATE is gray when there is nothing to update, START when the application is not installed. While the application runs, START turns into STOP.

The status line above the buttons shows the last message (for 14 seconds) and, during a long operation, its name, a progress bar and STOP. JOURNAL (Ctrl+J) and F1 DOCS are beside it.

The journal records everything the program does and the output of winws.exe. One file per day in ._runtime\logs.

First start

1. Choose ZAPRET on top. If the package is missing it says "not installed" — press UPDATE: the program downloads the latest Flowseal release and installs it into the Tools\zapret-discord-youtube folder next to itself (an installed package in the old place, zapret-discord-youtube at the root, keeps working).
2. In the STRATEGY card pick a strategy. If you do not know which, general (FAKE TLS AUTO) is usually a good start.
3. Press START. The bypass runs: the "Bypass" line turns green.
4. Does not work? Open STRATEGIES, the mode READY, press START: the program checks all strategies and shows which ones open more sites.
5. A working strategy can be installed as a Windows service with AS SERVICE — then the bypass starts with the system.

Also useful: turn on a secure DNS in the DNS section — without it the provider substitutes the addresses of blocked sites and no bypass helps.

ZAPRET

STATE. The Zapret folder (another can be chosen), the version on disk and on GitHub, what runs and whether a service exists. STOP stops winws.exe (and the service if it runs); REMOVE SERVICE removes the service and the WinDivert driver completely. Under the install button stands a row of buttons that take all this down: the same STOP and REMOVE SERVICE, STOP SERVICE (the service stays installed), STOP DRIVER, REMOVE DRIVER and REMOVE ZAPRET. The WinDivert driver is shared by Zapret and zapret2: the bypasses that hold it (winws.exe, winws2.exe, the service) are stopped first, and the driver loads again at the next start (WinDivert registers itself for as long as it is loaded, so a stopped driver mostly disappears by itself). REMOVE ZAPRET stops the bypass and the service, removes the service and the driver and deletes the folder Tools\zapret-discord-youtube with your *-user.txt lists - after a question; a folder outside the program is not deleted (only the service and the driver are removed).

The update (UPDATE) works like the old Audion Zapret Updater: "the folder is there — update it, it is not — install". The archive is downloaded while Zapret still runs (without the driver GitHub may not open); then the service, winws.exe and the driver are removed; your lists\*-user.txt lists, the game filter setting, the IPSet mode and the update-check flag are carried into the new version; the old files are cleared and the new ones put in place. If the driver will not unload, the replacement is prepared for the next Windows boot. The names in the archive are checked before unpacking: a path that leads out ("..", a drive, a network path), a device name or an NTFS stream rejects the whole archive.

STRATEGY. Switch buttons, one per general*.bat file. Under them: RUN (winws.exe with all the lists, without a console window), AS SERVICE (autostart), TO THE CONFIGURATION FIELD (the parameters go to the CONFIGS section), COMMAND (the full command line, can be copied).

FILTERS. The same as the items of service.bat: Game Filter (OFF, TCP + UDP, TCP, UDP and the ports — in versions from 1.10), IPSet (NONE, LIST, ALL), the update check in the bat files. The changes take effect after the bypass is restarted — a RESTART THE BYPASS button appears beside them.

CONFIGS

CONFIGURATION FIELD. The parameters of winws.exe as text, a profile (everything up to --new) on its own line. The variables %BIN%, %LISTS%, %GameFilterTCP%, %GameFilterUDP% are filled in at the start: the configuration works from any folder and follows the game filter. Buttons: RUN, AS SERVICE, SAVE TO CACHE, CHECK (shows the command line and the missing files, starting nothing), NEW. Below are the buttons of the ready strategies: press one and its parameters land in the field. The DNS before the start chips tie a DNS mode to the configuration; it is applied before the start.

CONFIGURATION CACHE. Up to 200 entries. Everything you ran, saved or tested in STRATEGIES lands here. When the room runs out, the entry not used for the longest time goes. A star pins an entry — a pinned one never goes. If all 200 are pinned, a new one will not fit: the program says so, and you unpin or delete one. The cross deletes an entry (a pinned one after a question). CLEAR UNPINNED removes everything except the pinned ones. The search looks through the title, the strategy and the parameters. A click on a row puts it in the field, ▶ runs it at once.

The cache is kept in config\history\configs.json.

Size. The configuration field stretches with the height of the window: what is around it (the name, DNS, the buttons, the strategies) takes its own room and everything left goes to the field. The window opens at 1280 × 860, where all buttons of the section are in view, and on a smaller screen it is made to fit the working area. The window can be dragged larger or smaller; if it is very low the section scrolls instead of cutting buttons off.

STRATEGIES

Strategy tuning for the DPI tool chosen on top: the program tries the variants one by one by itself and shows which opens more sites. Before the tuning it counts how many sites open with no bypass at all, so a result reads as "of the blocked ones, this many opened". The sites come from the Zapret list utils\targets.txt (Discord, YouTube, Google and others), for ByeDPI from the list of its own test proxytest\domains.txt, for zapret2 from both together (it has none of its own, and on a network the quick sites of the Zapret list may all open without a bypass); when the list wanted is not there, the other one is taken. Check: QUICK (one site of each group, up to eight; for a list of two or three groups up to eight sites taken in turn from the groups; no ping) or FULL (all sites and ping). Number of variants: 8, 16, 24 or 48.

On ZAPRET — the modes (What to change):

• READY — every strategy of the package in turn. The simplest way to find one that works.
• REPEATS — changes --dpi-desync-repeats of the chosen base.
• FOOLING — changes --dpi-desync-fooling (ts, md5sig, badseq, badsum). Works only when the strategy already has the parameter.
• SPLIT — changes --dpi-desync-split-pos (1, 2, midsld, sniext+1…).
• ALL — goes through the three in turn; the best variant of each step becomes the base of the next.

Base — the strategy from ZAPRET or the text in the CONFIGS field. The rows of the result: INTO THE FIELD, RUN, AS A SERVICE, a star. Every variant tried goes to the cache with its score (in READY the five best, not all twenty).

On ZAPRET 2 24 strategies for HTTPS (TLS) from the check of the author of zapret2 — blockcheck2 in the repository bol-van/zapret2 — are tried: cuts (multisplit, multidisorder), fake packets with different foolings (fake with tcp_md5, badsum, tcp_seq, tcp_ts, ip_autottl), their combinations, fakedsplit, fakeddisorder, hostfakesplit, tcpseg. Each goes into the TLS profile of your preset of the ZAPRET 2 section in place of its --lua-desync lines; the rest of the preset (the other profiles, the filters, the files) does not change. The strategy that stands there now is tried first — you see whether anything beats it. For the time of the check the profiles by list-user.txt read it together with the sites being checked; the list itself does not change. The rows of the result: INTO THE PRESET (put the strategy into the TLS profile and save the preset) and CONNECT.

On BYEDPI the strategies of the ByeDPI Manager test are tried — proxytest\strategies.txt (60 in the package; the program keeps this file on an update, so your edits stay). For each a ciadpi.exe of its own starts on a free port, and the sites are opened through it as through a proxy; your connection and the system proxy are not touched, no administrator rights are needed. The strategy of the BYEDPI section is tried first. The rows: INTO THE PARAMETERS and CONNECT.

While a tuning of Zapret or zapret2 runs, the bypass is started and stopped for every variant — the internet may drop for seconds. A bypass that was working (winws or winws2) is stopped for the time and comes back after the tuning. STOP ends it after the current variant. A variant the DPI tool refused, or with which it stopped during the check, is shown with a red cross and the reason.

The results are sorted: more sites opened, and when equal, a shorter response time. When everything opens without a bypass too, the variants cannot be compared on this network — the program says so.

The honest limit: the check goes over HTTPS sites. Discord voice and games over UDP are not checked by it.

DNS

A bypass is powerless while the provider substitutes the DNS answers. Modes: GOOGLE, CLOUDFLARE, QUAD9, ADGUARD (AdGuard's "default" servers, 94.140.14.14 and 94.140.15.15: they also block ads, trackers and phishing sites; the servers without filters, 94.140.14.140 and 94.140.14.141, can be typed into OWN) and OWN. APPLY sets the servers (IPv4 and IPv6) on all connected adapters that have a way to the internet and turns on the encryption of the queries (DoH) if Windows can (Windows 11). Before the first change the state of the adapters is saved; RESTORE brings it back exactly: servers set by hand return (IPv4 and IPv6 each on its own), automatic ones become automatic again; DoH entries that were not there are taken out, the earlier ones get their values back. The adapter is found by its GUID, not by its number. An adapter that appeared between two changes is saved too (with its state at that moment). If something did not come back the program says so and keeps it in the backup: the button can be pressed again. A failed write is a failure: "DNS changed" appears only when the adapter really shows the new servers; if DoH encryption did not turn on, that is said too.

Your own DNS. The "Own DNS" field takes one line: the IP addresses of the servers (IPv4 and IPv6) and, if needed, a DoH address (https://…), separated by spaces or commas. For example: 1.1.1.1, 1.0.0.1, https://cloudflare-dns.com/dns-query. How it is understood:

• The DoH address applies to all servers listed, so list servers of one provider.
• A DoH address alone is fine too: the program finds the servers by its name (or takes the address written in the DoH address itself).
• Windows knows only server addresses and DoH; the program names tls://, quic:// and sdns:// as unsuitable and does not take them.
• The field saves itself when you leave it. Start typing and the mode OWN turns on.
• CHECK asks every server listed, and the DoH address, a real question from this computer and shows whether and how fast they answer. It changes nothing and needs no administrator rights. A silent IPv6 server is not counted as a fault: many networks have no IPv6.

The mode OWN is also in CONFIGS among the "DNS before start" modes: a cache entry keeps its servers whole and does not depend on what the field says today.

If you have a Keenetic router, turn on "Request transit" in it.

LISTS

MY SITES. The first card of the section is the one place for the sites that must open through the bypass. On top are the ticks of ready services: YOUTUBE, DISCORD, TELEGRAM, X (TWITTER) and META: FACEBOOK, INSTAGRAM, THREADS, WHATSAPP. A tick puts in every domain of the service — the site, the pictures and videos, the short links (the lists follow itdoginfo/allow-domains); the tooltip says what is in. Below is the field for your own sites: a domain per line, subdomains are included by themselves. A tick works at once, the field on SAVE (UNDO EDIT brings back what was saved); lines that are not a domain are dropped and counted. On the first start all five services are ticked, and the domains you typed into list-general-user.txt yourself move into the field: the file keeps its comments and the sample line.

All of it is written into every DPI tool ticked with the Write into: chips (ZAPRET, ZAPRET 2, BYEDPI; ZAPRET by default) — the same way as the sets below: for Zapret into list-general-user.txt, for zapret2 into list-user.txt (as the block my-sites), for ByeDPI into hosts.txt. Under the chips each DPI tool has a line: how many domains and addresses its lists hold now (the numbers are read from the files themselves). A DPI bypass opens a site the provider cuts by its name; when a service is cut by its addresses, only a VPN helps.

LISTS FROM GITHUB. Zapret bypasses blocking only for the sites and addresses in its lists. Here ready large lists for Russia are connected; they are published on GitHub and updated every day or more often, and the program downloads them straight from there (only from raw.githubusercontent.com):

The sets are in two groups. Blocked in Russia — what Roskomnadzor cuts by DPI: the bypass is what opens them, so an enabled set is written into the lists of the DPI tools. For a VPN — not lists of what is blocked but sites that close themselves to Russian addresses and whole networks of services: a DPI bypass will not open them, they are sent through a VPN. Such a set is downloaded and kept up to date, and the buttons EXPORT IP… and EXPORT ALL… take it — for a VPN client — but it is not written into the lists of the DPI tools: that would send needless sites through the bypass. A set for a VPN that an older version of the program wrote is taken out of the lists of the DPI tools by itself at the start.

The lists of runetfreedom/russia-blocked-geoip are rebuilt every 6 hours from antifilter.download and re:filter (GPL-3.0). The two large sets (ru-blocked and domains_all) carry a warning in their tooltip: they make the lists much longer, and winws reads them at every start.

How it works: the ON chip of a set is the whole gesture. An enabled set of what is blocked is written into the lists of the DPI tools ticked with the Write into: chips in the MY SITES card. For Zapret it goes as a block between two marker lines of this program (# >>> Audion DPI Manager: name | entries | date … # <<< Audion DPI Manager: name): domains go into list-general-user.txt, addresses into the real IPSet list (ipset-all.txt, or, while the IPSet mode is NONE or ALL, into its copy ipset-all.txt.backup, where the list waits). Your own lines beside them are never touched, and the blocks come out by the markers: switch a set off and the file is back byte for byte as it was. How the other two DPI tools are served is below, in "Lists for zapret2 and ByeDPI".

• Addresses work only in the IPSet mode LIST. A fresh Flowseal package is in the mode NONE. When you enable a set with addresses and the mode is different, the program asks whether to switch it: the mode is yours, it is not changed without asking. The domains of the sets work in any mode.
• The ↻ button of a set downloads it again, the icon beside it opens its repository on GitHub. UPDATE ENABLED does all enabled ones at once. The ONCE A DAY chip: while the window is open, the enabled sets older than 23 hours are downloaded by themselves (25 seconds after the start, then a check every hour). What is downloaded is checked line by line (addresses, subnets, domains), rubbish is dropped; an empty or broken answer never replaces the old list.
• After the Zapret package is updated or reinstalled, the enabled sets are written into it again. So they are after UPDATE IPSET LIST.
• REMOVE FROM DPI TOOLS takes everything this program wrote out of the lists of all DPI tools and switches the sets off, my sites too; the sets themselves stay and can be enabled again, my sites come back with a tick or SAVE.

Lists for zapret2 and ByeDPI. The same sets can be written into the other two DPI tools: turn their chips on in "Write into:" (the MY SITES card). The DPI tool must be installed; if not, the program says so and makes nothing up for it (it writes after the installation). Each DPI tool reads its lists in its own way, so it is arranged differently:

Names ciadpi does not understand (for example with an underscore) do not go into the ByeDPI file: the program says how many. An empty ipset-user.txt of zapret2 would mean "any address", so it always keeps one safe line 203.0.113.113/32 — like the mode NONE of Flowseal.

OWN LISTS · IMPORT AND EXPORT.

• IMPORT FILE… takes a .txt, .lst, .csv file (one entry per line, # is a comment) or an archive saved with EXPORT ALL. The program tells addresses from domains itself. Lines that are neither are dropped and counted. A file with the same name replaces the earlier list.
• PASTE FROM CLIPBOARD does the same with the text from the clipboard (the list "From clipboard").
• EXPORT IP… saves all addresses and subnets of the enabled sets to a text file, one per line: to take them to another program.
• EXPORT ALL… saves a .zip archive: all sets with their content, my sites (the field and the ticks) and your three lists from the Zapret package (without the blocks of the sets). The same archive comes back with IMPORT FILE, on another computer too: sets with the same name are replaced, your package lists are merged line by line with those already there.

Entries are checked like this: an address is four dotted numbers or IPv6, with a mask length or without; /0, 0.x.x.x, 127.x.x.x, 224 and above are dropped (they do only harm in an ipset). A domain is a name with a dot; case, *. and dots at the ends are removed. The sets are kept in config\history\lists\.

ZAPRET FILES — the lists of Flowseal's package: EXCEPTIONS, IP EXCEPTIONS — yours, editable; the others lie in the package and open read-only. Looking never creates files: a user list that does not exist yet shows the text service.bat would put in it.

IPSET. UPDATE IPSET LIST downloads a fresh ipset-all.txt (the sets with addresses are written into it again afterwards).

HOSTS. The hosts file fixes the web version of Telegram and the Discord voice chat. CHECK compares it with Flowseal's reference; WRITE TO HOSTS appends a block between two marker lines of this program (a copy is made in ._runtime first); REMOVE BLOCK removes exactly our block by the markers, the rest is not touched.

JOURNAL

The live journal of the DPI tools: the lines winws.exe, winws2.exe and ciadpi.exe print as the program starts them, together with the events of their start and stop, from the start of the program. It is the journal of the dock at the bottom (Ctrl+J), sorted by DPI tool: the chips ALL, ZAPRET, ZAPRET 2, BYEDPI. The section opens on the chip of the tool chosen on top. MANAGER shows the journal ByeDPI Manager keeps in its own file (Tools\ByeDPI\logs\bdmanager_date.log) as it grows. FOLLOW scrolls to the new lines, COPY puts what is shown into the clipboard, CLEAR SCREEN empties the screen (the files stay), JOURNAL FILE opens the file of the day in Notepad. The output of the service and of programs that were not started by this window cannot be read: Windows does not give it out.

DIAGNOSTICS

The Run Diagnostics item of service.bat as a table: the Base Filtering Engine service, the system proxy, TCP timestamps, Adguard, Killer, Intel Connectivity, Check Point, SmartByte, the bypass files (an antivirus often removes the driver), VPN, the secure DNS, hosts, a path with Cyrillic or in OneDrive, a stray WinDivert driver, the services of other bypasses. Green — fine, blue — a tip, amber — a remark, orange — a problem. Where the program can fix it there is a button. CLEAR DISCORD CACHE closes Discord and deletes its cache (you do not have to sign in again).

Looking changes nothing. The one exception is the same as in service.bat: the program turns TCP timestamps on by itself when it starts the bypass.

ZAPRET 2

The second-generation DPI tool by bol-van: its strategies are Lua programs, winws2.exe only intercepts the traffic. UPDATE (or INSTALL in the section) downloads the release and takes out of it only what Windows needs: winws2.exe, the WinDivert driver, lua\, files\fake\, the filter samples. It all lies in Tools\zapret2. An update checks the archive and unpacks it aside, then moves the old files out of the way and puts the new ones in; if a file is in use, the previous version comes back whole. Beside the install button stand DISCONNECT, STOP DRIVER, REMOVE DRIVER (the WinDivert driver is shared with Zapret) and REMOVE ZAPRET 2: the folder Tools\zapret2 is deleted with the lists, the preset in config\zapret2 stays.

The release has no ready strategies for Windows. There is one PRESET here — the "http, https, quic" example from the zapret2 documentation — in a field you edit; it works on the domain list DOMAINS (initially YouTube and Discord). My sites and the sets from GitHub (LISTS section, the ZAPRET 2 chip) are appended to this file as blocks: here you see and edit only your own lines.

The PROFILES FOR ADDRESSES chip adds, next to every preset profile that selects traffic by list-user.txt, a twin that selects it by lists\ipset-user.txt — LISTS puts the addresses of the sets there. The twins stand after the originals: a name from the list of domains wins, an address catches what has no name (QUIC, calls). Only the profile part (--filter-…, --lua-desync…) is copied; the global options (--lua-init, --blob, --wf-…) stay in one copy. The preset is saved at once; switch the chip off and the twins are removed, the preset is back byte for byte. CHECK shows the command line and the missing files. %Z2% in the text is the Tools\zapret2 folder. START starts winws2.exe with the preset from the field (even an unsaved one; it is saved at the start). The strategy for zapret2 is picked by hand: blockcheck2 is not shipped in the Windows release.

BYEDPI

UPDATE installs the ByeDPI Manager "All in One" package into Tools\ByeDPI: the management window, ciadpi.exe, ProxiFyre and the installers of dependencies. The Manager's settings (config) and the check lists (proxytest) are not touched by an update. The archive is checked and unpacked aside first; then the files are replaced, and if one is held by another program, everything is put back as it was and the version stays the old one. Beside it stand DISCONNECT and REMOVE BYEDPI: the connection is taken down, the system proxy is put back, the Manager window and ProxiFyre of this folder are closed, the folder Tools\ByeDPI is deleted. ByeDPI has no driver (it is a proxy); Windows Packet Filter from the redist folder, if you installed it for ProxiFyre, stays in Windows - it is removed in "Apps".

OPEN MANAGER starts its window (strategy picking, the ProxiFyre mode for separate programs). DEPENDENCIES opens the redist folder — Windows Packet Filter and Visual C++ 2022 are needed only for ProxiFyre.

CONNECTION is a simple one: ciadpi.exe on a local port plus the Windows system proxy (socks5://127.0.0.1:port). TAKE FROM MANAGER takes the parameters and the port from its settings. On disconnect the previous proxy comes back unless another program changed it in the meantime. The default strategy is -d1 -d3+s -s6+s -d9+s -s12+s -d15+s -s20+s -d25+s -s30+s -d35+s -r1+s -S -a1 -As -d1 -d3+s -s6+s -d9+s -s12+s -d15+s -s20+s -d25+s -s30+s -d35+s -S -a1: two groups of splits and disorders at the SNI, the second (after -As) works when TLS breaks. -S (md5sig) exists only on Linux, so the program leaves it out of the command line, as ByeDPI Manager does on Windows. A settings file that still holds the default of earlier versions takes the new one; a strategy you wrote yourself is never touched.

BY LISTS — OFF, BY DOMAINS, BY ADDRESSES. ByeDPI can limit the strategy to a list: --hosts file (only these domains, subdomains included) or --ipset file (only these addresses); other traffic passes as it is. The lists are the sets from LISTS (the BYEDPI chip): the files Tools\ByeDPI\lists\hosts.txt and ipset.txt. How the program inserts the limit: ciadpi cuts its options into groups at every --auto (-A) and tests the limits of each group separately, so --hosts/--ipset is put at the head of every group — otherwise a group without the limit would keep working for all sites. A strategy that already has its own --hosts/--ipset stays as you wrote it. Domains and addresses cannot be combined: the conditions of one group add up (AND), so one mode is chosen. If the mode has no entry at all, the connection does not start and says why (ciadpi with an empty list would apply nothing). COMMAND shows the resulting command line and finds obstacles without starting anything.

Command line

Two commands run with no window, for the builder of a release (they need no administrator rights and show no UAC prompt; they end with the exit code 0 when everything asked for is done, 1 when something failed, 2 when the command is not understood):

• App\AudionDpiManager.exe --install-apps [all|zapret|zapret2|byedpi] [--force] installs what the UPDATE buttons install: Flowseal's package into Tools\zapret-discord-youtube, zapret2 into Tools\zapret2, ByeDPI Manager into Tools\ByeDPI. Without --force only what is missing or newer.
• App\AudionDpiManager.exe --reset-apps sets the installed apps back to their own defaults: the blocks of this program in Flowseal's lists, Flowseal's own *-user.txt lists and game filter, zapret2's two lists, the list files of ByeDPI, log files. The apps stay. Only what lies in the project's folder: a Flowseal package the settings point to outside the project (or a link to another folder) is not touched; links (junctions) inside a package, such as lists or utils, are not followed either: the cleaning names them and skips them.

In the builder these are the step [06] INSTALL APPS of builder_main.cmd and the first thing cleanup_project.cmd does. Then the cleanup removes Tools\ whole: the other people's apps do not go into a release, the UPDATE buttons download them. An old Flowseal folder at the root stays, and the reset is for it. The cleanup also removes config\settings.json (the program starts in Russian and the dark theme by its defaults), the history, the logs and the build folders. The cleanup installs nothing, and neither command builds the program.

ByeDPI: the parameters and the settings of the Manager

PARAMETERS… opens the list of all the options of ciadpi.exe, in the groups of its manual (connection, scope, automatic mode, bypass tricks, Linux only), each with a short explanation and the button INSERT, which puts a ready template of the option at the end of the field of parameters. The search narrows the list by a name or a word. The options that exist only on Linux are shown too, marked "does not work on Windows": the program drops them from the command line, as ByeDPI Manager does.

MANAGER SETTINGS shows and changes the settings file of ByeDPI Manager (Tools\ByeDPI\config\settings.json), the same the tabs of its window show: the routing (OFF, PROXIFYRE, SYSTEM PROXY), the LAN, the list of programs for ProxiFyre (a process name, an exe or a folder per line; the buttons FILE… and FOLDER… add them), and what its window does (connect at start, start minimized, minimize to tray). SAVE TO MANAGER writes only these keys, everything else in the file (language, hotkey, history of strategies) stays. GIVE TO MANAGER in the connection card writes the parameters and the port from the fields into the same file; TAKE FROM MANAGER does the opposite. The Manager reads its file when it starts and writes it when it closes, so its window must be closed while you save here: the program refuses to write while it is open. The connection of this section does not use the routing settings; running programs through ProxiFyre, picking strategies and the autostart with Windows are done by the Manager window itself (OPEN MANAGER).

What the program changes on the machine

• Starts and stops winws.exe / winws2.exe / ciadpi.exe; starting one stops the others.
• Installs and removes the zapret service, stops and deletes the WinDivert driver (by buttons). Deletes the folders of the installed tools (the REMOVE buttons, after a question).
• Turns TCP timestamps on (netsh interface tcp set global timestamps=enabled).
• Changes the DNS of the adapters (the DNS section) and the system proxy (BYEDPI → CONNECT). Both come back with buttons.
• Appends a block to hosts (LISTS → WRITE TO HOSTS) after a backup; the block is removed by a button.
• Writes my sites and the enabled sets of lists into the lists of the chosen DPI tools (LISTS → MY SITES → "Write into"): for Zapret and zapret2 as blocks between marker lines (list-general-user.txt and the IPSet list of the package; Tools\zapret2\lists\list-user.txt and ipset-user.txt), for ByeDPI as files of its own, Tools\ByeDPI\lists\hosts.txt and ipset.txt. The blocks come out by the markers. It changes the IPSet mode only with your consent; the zapret2 preset only with the PROFILES FOR ADDRESSES chip, and the ByeDPI mode "by lists" only by your choice.
• Deletes the Discord cache and the services of other bypasses — only by their own buttons and after a question.

All of it is written to the journal. Nothing runs on the Windows scheduler. The program goes to the network only for versions, releases and lists on GitHub and — on your CHECK button in the DNS section — to the servers you named yourself. Once a day, while the window is open, it downloads the enabled sets of lists again; the ONCE A DAY chip in LISTS turns that off.

Where things are

• Start.exe → App\AudionDpiManager.exe — the program.
• Tools\zapret-discord-youtube — the Flowseal package (another folder can be chosen; a folder of that name at the root, where versions before 1.6.0 kept it, is used while the new place is empty).
• Tools\zapret2, Tools\ByeDPI — installed by their sections on a button.
• config\settings.json — the language, the theme, the font, the Zapret folder, your own DNS. config\history\ — the cache of configurations, the copies of DNS and the proxy; config\history\lists\ — the sets of lists (their texts and sets.json with the switches). config\zapret2\preset.txt — your preset. LICENSE and NOTICE — the licence and the notice.
• ._runtime\ — journals, downloads, the cache of GitHub's answers, copies of hosts.

Licence and trademark

Audion DPI Manager © 2026 Tensionix is distributed under the Apache License 2.0 (the full text is the file LICENSE, the notice is NOTICE; both open from buttons in the ABOUT section). "Audion" and the Audion mark are trademarks of the author: the Apache 2.0 licence (section 6) does not give the right to use this name and mark, and a copy or a changed version of the program must not be presented as Audion. Third-party programs (Flowseal, zapret2, ByeDPI, WinDivert) and their lists are downloaded from GitHub by your button and stay under their own licences.

If something is wrong

• "The program is running without administrator rights". Close the window and start Start.exe.
• The bypass started and stopped at once. The journal has the reason: usually a list file is missing or an antivirus removed the driver. DIAGNOSTICS shows the second.
• The driver will not unload during an update. The replacement is set for the next Windows boot; reboot.
• Nothing opens after a DNS change. DNS → RESTORE.
• An antivirus complains about WinDivert. It is a false alarm; add the Zapret folder to the exclusions.