1
0
Fork 0
mirror of https://github.com/Ysurac/openmptcprouter-feeds.git synced 2025-03-09 15:40:03 +00:00

Add LuCI interface to bypass hosts

This commit is contained in:
Ycarus 2018-04-07 22:13:33 +02:00
parent 1a6ce527be
commit 0a1b3f2f97
7 changed files with 116 additions and 0 deletions

View file

@ -295,6 +295,8 @@ start_service() {
done
ss_rules
ss_rules6
# Add rule to match traffic marked by firewall for bypass
ip rule add prio 1 fwmark 0x539 lookup 991337
}
stop_service() {

View file

@ -156,6 +156,15 @@ ss_rules_ipset_mkadd() {
ss_rules_iptchains_init() {
ss_rules_iptchains_init_tcp
ss_rules_iptchains_init_udp
ss_rules_iptchains_init_mark
}
ss_rules_iptchains_init_mark() {
iptables-restore --noflush <<-EOF
*mangle
-A OUTPUT -m set --match-set ss_rules_dst_bypass dst -j MARK --set-mark 0x539
COMMIT
EOF
}
ss_rules_iptchains_init_tcp() {

View file

@ -139,8 +139,18 @@ ss_rules6_ipset_mkadd() {
ss_rules6_iptchains_init() {
ss_rules6_iptchains_init_tcp
ss_rules6_iptchains_init_udp
ss_rules6_iptchains_init_mark
}
ss_rules_iptchains_init_mark() {
iptables-restore --noflush <<-EOF
*mangle
-A OUTPUT -m set --match-set ss_rules6_dst_bypass dst -j MARK --set-mark 0x539
COMMIT
EOF
}
ss_rules6_iptchains_init_tcp() {
local local_target