mirror of
https://github.com/bol-van/zapret.git
synced 2024-12-06 00:14:43 +03:00
19 lines
796 B
Plaintext
19 lines
796 B
Plaintext
|
TPPORT=1188
|
||
|
TPWS_USER=daemon
|
||
|
|
||
|
. /lib/functions/network.sh
|
||
|
|
||
|
network_find_wan wan_iface
|
||
|
|
||
|
for ext_iface in $wan_iface; do
|
||
|
network_get_device DEVICE $ext_iface
|
||
|
# DNAT for local traffic
|
||
|
iptables -t nat -C OUTPUT -p tcp --dport 80 -o $DEVICE -m owner ! --uid-owner $TPWS_USER -m set --match-set zapret dst -j DNAT --to 127.0.0.1:$TPPORT ||
|
||
|
iptables -t nat -I OUTPUT -p tcp --dport 80 -o $DEVICE -m owner ! --uid-owner $TPWS_USER -m set --match-set zapret dst -j DNAT --to 127.0.0.1:$TPPORT
|
||
|
|
||
|
done
|
||
|
|
||
|
sysctl -w net.ipv4.conf.br-lan.route_localnet=1
|
||
|
iptables -t nat -C prerouting_lan_rule -p tcp --dport 80 -m set --match-set zapret dst -j DNAT --to 127.0.0.1:$TPPORT ||
|
||
|
iptables -t nat -I prerouting_lan_rule -p tcp --dport 80 -m set --match-set zapret dst -j DNAT --to 127.0.0.1:$TPPORT
|