mptcp/openmptcprouter-feeds
1
0
Fork 0
mirror of https://github.com/Ysurac/openmptcprouter-feeds.git synced 2025-03-09 15:40:03 +00:00
Code Issues Releases Wiki Activity

Add DPI support to OMR-Bypass

Browse source
This commit is contained in:
Ycarus 2018-06-22 10:50:17 +02:00
parent dfbba31e1d
commit d90d5ea374
11 changed files with 181 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

33
luci-app-omr-bypass/root/etc/init.d/omr-bypass
View file

@ -1,13 +1,25 @@
#!/bin/sh /etc/rc.common
# Copyright (C) 2018 Ycarus (Yannick Chabanois) <ycarus@zugaina.org>
START=90
START=99
STOP=10
USE_PROCD=1
_bypass_ip() {
local ip="$1"
ipset add ss_rules_dst_bypass $ip
valid_ip4=$( valid_subnet4 $ip)
valid_ip6=$( valid_subnet6 $ip)
if [ "$valid_ip4" = "ok" ]; then
ipset add ss_rules_dst_bypass $ip
elif [ "$valid_ip6" = "ok" ]; then
ipset add ss_rules6_dst_bypass $ip
fi
}
_bypass_proto() {
local proto="$1"
ndpi_rules="-A omr-bypass-dpi -m ndpi --$proto -j MARK --set-mark 0x539
$ndpi_rules"
}
start_service() {
@ -20,13 +32,28 @@ start_service() {
config_list_foreach ips "ip" _bypass_ip
ip rule add prio 1 fwmark 0x539 lookup 991337 > /dev/null 2>&1
if [ "$(iptables -t mangle -L | grep 'mark 0x539')" = "" ]; then
if [ "$(iptables -t mangle -L | grep 'MARK set 0x539')" = "" ]; then
iptables-restore --noflush <<-EOF
*mangle
-A PREROUTING -m set --match-set ss_rules_dst_bypass dst -j MARK --set-mark 0x539
COMMIT
EOF
fi
iptables-save --counters | grep -v omr-bypass-dpi | iptables-restore --counters
local ndpi_rules=""
config_list_foreach dpi "proto" _bypass_proto
ndpi_rules=$(echo $ndpi_rules | awk 'NF')
if [ "$ndpi_rules" != "" ]; then
iptables-restore --noflush <<-EOF
*mangle
:omr-bypass-dpi -
-A PREROUTING -m addrtype ! --dst-type LOCAL -j omr-bypass-dpi
$ndpi_rules
COMMIT
EOF
fi
}
service_triggers() {