mptcp/openmptcprouter-feeds
1
0
Fork 0
mirror of https://github.com/Ysurac/openmptcprouter-feeds.git synced 2025-03-09 15:40:03 +00:00
Code Issues Releases Wiki Activity

Better iptables rules for omr-bypass

Browse source
This commit is contained in:
Ycarus 2018-10-22 15:44:36 +02:00
parent 469830a076
commit 06a28d4227
7 changed files with 50 additions and 59 deletions
Download patch file Download diff file Expand all files Collapse all files

9
shadowsocks-libev/files/shadowsocks-libev.init
View file

@ -308,20 +308,12 @@ start_service() {
config_foreach ss_xxx "$cfgtype" "$cfgtype"
done
rules_up
#ss_rules
#ss_rules6
[ -f /etc/init.d/omr-bypass ] && /etc/init.d/omr-bypass restart
# Add rule to match traffic marked by firewall for bypass
ip rule add prio 1 fwmark 0x539 lookup 991337 > /dev/null 2>&1
}
stop_service() {
#local bin="$ss_bindir/ss-rules"
#[ -x "$bin" ] && "$bin" -f
#local bin6="$ss_bindir/ss-rules6"
#[ -x "$bin6" ] && "$bin6" -f
rules_down
[ -f /etc/init.d/omr-bypass ] && /etc/init.d/omr-bypass restart
rm -rf "$ss_confdir"
}
@ -344,6 +336,7 @@ rules_up() {
done
ss_rules
ss_rules6
[ -f /etc/init.d/omr-bypass ] && /etc/init.d/omr-bypass restart
}
rules_down() {

9
shadowsocks-libev/files/ss-rules.defaults
View file

@ -9,12 +9,3 @@ uci get "$s" >/dev/null || {
commit firewall
EOF
}
#s=firewall.ss_rules6
#uci get "$s" >/dev/null || {
# uci batch <<-EOF
# set $s=include
# set $s.path=/etc/firewall.ss-rules6
# set $s.reload=1
# commit firewall
# EOF
#}

4
shadowsocks-libev/files/ss-rules6
View file

@ -174,7 +174,7 @@ ss_rules6_iptchains_init_tcp() {
-A ss_rules6_local_out -m set --match-set ss_rules6_dst_bypass dst -j RETURN
-A ss_rules6_local_out -m set --match-set ss_rules6_dst_bypass_all dst -j RETURN
-A ss_rules6_local_out -m set --match-set ss_rules6_dst_bypass_ dst -j RETURN
-A ss_rules6_local_out -m mark ! --mark 0 -j RETURN
-A ss_rules6_local_out -m mark --mark 0x539 -j RETURN
-A ss_rules6_local_out -p tcp $o_ipt_extra -j $local_target -m comment --comment "local_default: $o_local_default"
COMMIT
EOF
@ -234,7 +234,7 @@ ss_rules6_iptchains_init_() {
-A ss_rules6_pre_src -m set --match-set ss_rules6_dst_bypass_all dst -j MARK --set-mark 0x539
-A ss_rules6_pre_src -m set --match-set ss_rules6_dst_bypass_all dst -j RETURN
-A ss_rules6_pre_src -m set --match-set ss_rules6_dst_bypass dst -j RETURN
-A ss_rules6_pre_src -m mark ! --mark 0 -j RETURN
-A ss_rules6_pre_src -m mark --mark 0x539 -j RETURN
-A ss_rules6_dst -m set --match-set ss_rules6_dst_bypass_all dst -j RETURN
-A ss_rules6_dst -m set --match-set ss_rules6_dst_bypass dst -j RETURN
-A ss_rules6_pre_src -p $proto $o_ipt_extra -j ss_rules6_src