mirror of
https://github.com/Ysurac/openmptcprouter-feeds.git
synced 2025-02-15 03:51:51 +00:00
68 lines
1.6 KiB
Bash
Executable file
68 lines
1.6 KiB
Bash
Executable file
#!/bin/sh /etc/rc.common
|
|
# Copyright (C) 2018 Ycarus (Yannick Chabanois) <ycarus@zugaina.org>
|
|
|
|
START=99
|
|
STOP=10
|
|
USE_PROCD=1
|
|
|
|
. /usr/lib/unbound/iptools.sh
|
|
|
|
_bypass_ip() {
|
|
local ip="$1"
|
|
valid_ip4=$( valid_subnet4 $ip)
|
|
valid_ip6=$( valid_subnet6 $ip)
|
|
if [ "$valid_ip4" = "ok" ]; then
|
|
ipset add ss_rules_dst_bypass $ip
|
|
elif [ "$valid_ip6" = "ok" ]; then
|
|
ipset add ss_rules6_dst_bypass $ip
|
|
fi
|
|
}
|
|
|
|
_bypass_proto() {
|
|
local proto="$1"
|
|
[ -z "$proto" ] && return
|
|
ndpi_rules="-A omr-bypass-dpi -m ndpi --$proto -j MARK --set-mark 0x539
|
|
$ndpi_rules"
|
|
}
|
|
|
|
start_service() {
|
|
ipset -q flush ss_rules_dst_bypass > /dev/null 2>&1
|
|
ipset -q --exist restore <<-EOF
|
|
create ss_rules_dst_bypass hash:net hashsize 64
|
|
EOF
|
|
|
|
config_load omr-bypass
|
|
config_list_foreach ips "ip" _bypass_ip
|
|
|
|
ip rule add prio 1 fwmark 0x539 lookup 991337 > /dev/null 2>&1
|
|
|
|
if [ "$(iptables -t mangle -L | grep 'match-set ss_rules_dst_bypass dst MARK set')" = "" ]; then
|
|
iptables-restore --noflush <<-EOF
|
|
*mangle
|
|
-A PREROUTING -m set --match-set ss_rules_dst_bypass dst -j MARK --set-mark 0x539
|
|
COMMIT
|
|
EOF
|
|
fi
|
|
|
|
iptables-save --counters | grep -v omr-bypass-dpi | iptables-restore --counters
|
|
local ndpi_rules=""
|
|
config_list_foreach dpi "proto" _bypass_proto
|
|
ndpi_rules=$(echo $ndpi_rules | awk 'NF')
|
|
if [ "$ndpi_rules" != "" ]; then
|
|
iptables-restore --noflush <<-EOF
|
|
*mangle
|
|
:omr-bypass-dpi -
|
|
-A PREROUTING -m addrtype ! --dst-type LOCAL -j omr-bypass-dpi
|
|
$ndpi_rules
|
|
COMMIT
|
|
EOF
|
|
fi
|
|
}
|
|
|
|
service_triggers() {
|
|
procd_add_reload_trigger omr-bypass shadowsocks-libev
|
|
}
|
|
|
|
reload_service() {
|
|
start
|
|
}
|