From a9d3616d216f804c70fdb814318cf04a7c4b0946 Mon Sep 17 00:00:00 2001 From: Ycarus Date: Sat, 7 Jul 2018 21:15:36 +0200 Subject: [PATCH] Fix ShadowSocks IPv6 rules --- shadowsocks-libev/files/ss-rules | 1 + shadowsocks-libev/files/ss-rules6 | 5 +++-- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/shadowsocks-libev/files/ss-rules b/shadowsocks-libev/files/ss-rules index 31d1d6db8..37b069b61 100755 --- a/shadowsocks-libev/files/ss-rules +++ b/shadowsocks-libev/files/ss-rules @@ -1,6 +1,7 @@ #!/bin/sh -e # # Copyright (C) 2017 Yousong Zhou +# Copyright (C) 2018 Ycarus (Yannick Chabanois) # # The design idea was derived from ss-rules by Jian Chang # diff --git a/shadowsocks-libev/files/ss-rules6 b/shadowsocks-libev/files/ss-rules6 index 2b80f24b2..2335e72e2 100755 --- a/shadowsocks-libev/files/ss-rules6 +++ b/shadowsocks-libev/files/ss-rules6 @@ -52,7 +52,8 @@ EOF } o_dst_bypass_=" - FE80::/10 + fe80::/10 + fd00::/8 " o_src_default=bypass o_dst_default=bypass @@ -168,8 +169,8 @@ ss_rules6_iptchains_init_tcp() { *nat :ss_rules6_local_out - -I OUTPUT 1 -p tcp -j ss_rules6_local_out - -A ss_rules6_local_out -m set --match-set ss_rules6_dst_bypass_ dst -j RETURN -A ss_rules6_local_out -m set --match-set ss_rules6_dst_bypass dst -j RETURN + -A ss_rules6_local_out -m set --match-set ss_rules6_dst_bypass_ dst -j RETURN -A ss_rules6_local_out -m mark --mark 0x539 -j RETURN -A ss_rules6_local_out -p tcp $o_ipt_extra -j $local_target -m comment --comment "local_default: $o_local_default" COMMIT