mirror of
https://github.com/gnu4cn/ccna60d.git
synced 2024-05-21 04:55:00 +08:00
20160916, openwrt-shadowsocks
This commit is contained in:
Peng Hailin
parent
4914724787
commit
50ec0c7920
shadowsocks
30
shadowsocks/shadowsocks
Executable file
30
shadowsocks/shadowsocks
Executable file
@ -0,0 +1,30 @@
|
||||
#!/bin/sh /etc/rc.common
|
||||
|
||||
# Author: https://github.com/softwaredownload/openwrt-fanqiang
|
||||
# Date: 2015-12
|
||||
|
||||
START=95
|
||||
|
||||
SERVICE_USE_PID=1
|
||||
SERVICE_WRITE_PID=1
|
||||
SERVICE_DAEMONIZE=1
|
||||
|
||||
start() {
|
||||
sed -i 's/114.114.114.114/127.0.0.1#3210/' /etc/dnsmasq.d/gfwlist.conf
|
||||
/etc/init.d/dnsmasq restart
|
||||
|
||||
service_start /usr/bin/ss-redir -b 0.0.0.0 -c /etc/shadowsocks.json -f /var/run/shadowsocks.pid
|
||||
service_start /usr/bin/ss-tunnel -b 0.0.0.0 -c /etc/shadowsocks.json -l 3210 -L 8.8.8.8:53 -u
|
||||
/usr/bin/shadowsocks-firewall
|
||||
}
|
||||
|
||||
stop() {
|
||||
sed -i 's/127.0.0.1#3210/114.114.114.114/' /etc/dnsmasq.d/gfwlist.conf
|
||||
/etc/init.d/dnsmasq restart
|
||||
|
||||
service_stop /usr/bin/ss-redir
|
||||
service_stop /usr/bin/ss-tunnel
|
||||
killall ss-redir
|
||||
killall ss-tunnel
|
||||
/etc/init.d/firewall restart
|
||||
}
|
||||
90
shadowsocks/shadowsocks-firewall
Executable file
90
shadowsocks/shadowsocks-firewall
Executable file
@ -0,0 +1,90 @@
|
||||
#!/bin/sh
|
||||
|
||||
# Author: https://github.com/softwaredownload/openwrt-fanqiang
|
||||
# Date: 2015-12-23
|
||||
|
||||
#create a new chain named SHADOWSOCKS
|
||||
iptables -t nat -N SHADOWSOCKS
|
||||
iptables -t nat -N SHADOWSOCKS_WHITELIST
|
||||
|
||||
# Ignore your shadowsocks server's addresses
|
||||
# It's very IMPORTANT, just be careful.
|
||||
|
||||
iptables -t nat -A SHADOWSOCKS -d 198.98.125.165 -j RETURN
|
||||
|
||||
#for hulu.com
|
||||
iptables -t nat -A SHADOWSOCKS -p tcp --dport 1935 -j REDIRECT --to-ports 7654
|
||||
iptables -t nat -A SHADOWSOCKS -p udp --dport 1935 -j REDIRECT --to-ports 7654
|
||||
|
||||
# Ignore LANs IP address
|
||||
iptables -t nat -A SHADOWSOCKS -d 0.0.0.0/8 -j RETURN
|
||||
iptables -t nat -A SHADOWSOCKS -d 10.0.0.0/8 -j RETURN
|
||||
iptables -t nat -A SHADOWSOCKS -d 127.0.0.0/8 -j RETURN
|
||||
iptables -t nat -A SHADOWSOCKS -d 169.254.0.0/16 -j RETURN
|
||||
iptables -t nat -A SHADOWSOCKS -d 172.16.0.0/12 -j RETURN
|
||||
iptables -t nat -A SHADOWSOCKS -d 192.168.0.0/16 -j RETURN
|
||||
iptables -t nat -A SHADOWSOCKS -d 224.0.0.0/4 -j RETURN
|
||||
iptables -t nat -A SHADOWSOCKS -d 240.0.0.0/4 -j RETURN
|
||||
|
||||
# Check whitelist
|
||||
iptables -t nat -A SHADOWSOCKS -j SHADOWSOCKS_WHITELIST
|
||||
iptables -t nat -A SHADOWSOCKS -m mark --mark 1 -j RETURN
|
||||
|
||||
# Anything else should be redirected to shadowsocks's local port
|
||||
iptables -t nat -A SHADOWSOCKS -p tcp -j REDIRECT --to-ports 7654
|
||||
# Apply the rules
|
||||
iptables -t nat -A PREROUTING -p tcp -j SHADOWSOCKS
|
||||
|
||||
# Ignore China IP address
|
||||
for white_ip in `cat /etc/chinadns_chnroute.txt`;
|
||||
do
|
||||
iptables -t nat -A SHADOWSOCKS_WHITELIST -d "${white_ip}" -j MARK --set-mark 1
|
||||
done
|
||||
|
||||
# Ignore Asia IP address
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 1.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 14.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 27.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 36.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 39.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 42.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 49.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 58.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 59.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 60.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 61.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 101.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 103.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 106.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 110.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 111.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 112.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 113.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 114.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 115.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 116.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 117.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 118.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 119.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 120.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 121.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 122.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 123.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 124.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 125.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 126.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 169.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 175.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 180.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 182.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 183.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 202.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 203.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 210.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 211.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 218.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 219.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 220.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 221.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 222.0.0.0/8 -j MARK --set-mark 1
|
||||
#iptables -t nat -A SHADOWSOCKS_WHITELIST -d 223.0.0.0/8 -j MARK --set-mark 1
|
||||
Loading…
Reference in New Issue
Block a user