mirror of
https://github.com/bol-van/zapret.git
synced 2024-11-29 21:40:52 +03:00
init.d: openwrt-minimal disable ipv6 instructions
This commit is contained in:
parent
5f60131f9f
commit
2914da35d6
@ -1732,6 +1732,7 @@ install_easy.sh автоматизирует ручные варианты пр
|
|||||||
Скопируйте бинарник tpws подходящей архитектуры в /usr/bin/tpws.
|
Скопируйте бинарник tpws подходящей архитектуры в /usr/bin/tpws.
|
||||||
Установите права на файлы : chmod 755 /etc/init.d/tpws /usr/bin/tpws
|
Установите права на файлы : chmod 755 /etc/init.d/tpws /usr/bin/tpws
|
||||||
Отредактируйте /etc/config/tpws
|
Отредактируйте /etc/config/tpws
|
||||||
|
Если не нужен ipv6, отредактируйте /etc/nftables.d/90-tpws.nft и закомментируйте строки с редиректом ipv6.
|
||||||
/etc/init.d/tpws enable
|
/etc/init.d/tpws enable
|
||||||
/etc/init.d/tpws start
|
/etc/init.d/tpws start
|
||||||
fw4 restart
|
fw4 restart
|
||||||
@ -1759,6 +1760,7 @@ opkg install iptables-mod-extra
|
|||||||
Скопируйте бинарник tpws подходящей архитектуры в /usr/bin/tpws.
|
Скопируйте бинарник tpws подходящей архитектуры в /usr/bin/tpws.
|
||||||
Установите права на файлы : chmod 755 /etc/init.d/tpws /usr/bin/tpws
|
Установите права на файлы : chmod 755 /etc/init.d/tpws /usr/bin/tpws
|
||||||
Отредактируйте /etc/config/tpws
|
Отредактируйте /etc/config/tpws
|
||||||
|
Если не нужен ipv6, отредактируйте /etc/firewall.user и установите там DISABLE_IPV6=1.
|
||||||
/etc/init.d/tpws enable
|
/etc/init.d/tpws enable
|
||||||
/etc/init.d/tpws start
|
/etc/init.d/tpws start
|
||||||
fw3 restart
|
fw3 restart
|
||||||
|
@ -11,6 +11,7 @@ Copy everything from tpws directory to the root of the router.
|
|||||||
Copy tpws binary for your architecture to /usr/bin/tpws
|
Copy tpws binary for your architecture to /usr/bin/tpws
|
||||||
Set proper access rights : chmod 755 /etc/init.d/tpws /usr/bin/tpws
|
Set proper access rights : chmod 755 /etc/init.d/tpws /usr/bin/tpws
|
||||||
EDIT /etc/config/tpws
|
EDIT /etc/config/tpws
|
||||||
|
If you don't want ipv6 : edit /etc/nftables.d and comment lines with ipv6 redirect
|
||||||
/etc/init.d/tpws enable
|
/etc/init.d/tpws enable
|
||||||
/etc/init.d/tpws start
|
/etc/init.d/tpws start
|
||||||
fw4 restart
|
fw4 restart
|
||||||
@ -39,6 +40,7 @@ Copy everything from tpws directory to the root of the router.
|
|||||||
Copy tpws binary for your architecture to /usr/bin/tpws
|
Copy tpws binary for your architecture to /usr/bin/tpws
|
||||||
Set proper access rights : chmod 755 /etc/init.d/tpws /usr/bin/tpws
|
Set proper access rights : chmod 755 /etc/init.d/tpws /usr/bin/tpws
|
||||||
EDIT /etc/config/tpws
|
EDIT /etc/config/tpws
|
||||||
|
If you don't want ipv6 : edit /etc/firewall.user and set DISABLE_IPV6=1
|
||||||
/etc/init.d/tpws enable
|
/etc/init.d/tpws enable
|
||||||
/etc/init.d/tpws start
|
/etc/init.d/tpws start
|
||||||
fw3 restart
|
fw3 restart
|
||||||
|
@ -1,8 +1,11 @@
|
|||||||
|
DISABLE_IPV6=0
|
||||||
TP_PORT=900
|
TP_PORT=900
|
||||||
TP_USER=daemon
|
TP_USER=daemon
|
||||||
|
|
||||||
EXCLUDE4="10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 169.254.0.0/16"
|
EXCLUDE4="10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 169.254.0.0/16"
|
||||||
EXCLUDE6="fc00::/7 fe80::/10"
|
EXCLUDE6="fc00::/7 fe80::/10"
|
||||||
|
IPTS="iptables ip6tables"
|
||||||
|
[ "$DISABLE_IPV6" = 1 ] && IPTS=iptables
|
||||||
|
|
||||||
exists()
|
exists()
|
||||||
{
|
{
|
||||||
@ -25,22 +28,22 @@ redirect()
|
|||||||
redirect_port 443 $TP_PORT
|
redirect_port 443 $TP_PORT
|
||||||
}
|
}
|
||||||
|
|
||||||
for IPTABLES in iptables ip6tables; do
|
for IPTABLES in $IPTS; do
|
||||||
$IPTABLES -t nat -N tpws 2>/dev/null
|
$IPTABLES -t nat -N tpws 2>/dev/null
|
||||||
$IPTABLES -t nat -F tpws
|
$IPTABLES -t nat -F tpws
|
||||||
redirect
|
redirect
|
||||||
done
|
done
|
||||||
|
|
||||||
for net in $EXCLUDE4
|
for net in $EXCLUDE4; do
|
||||||
do
|
|
||||||
iptables -t nat -I tpws -d $net -j RETURN
|
iptables -t nat -I tpws -d $net -j RETURN
|
||||||
done
|
done
|
||||||
for net in $EXCLUDE6
|
[ "$DISABLE_IPV6" = 1 ] || {
|
||||||
do
|
for net in $EXCLUDE6; do
|
||||||
ip6tables -t nat -I tpws -d $net -j RETURN
|
ip6tables -t nat -I tpws -d $net -j RETURN
|
||||||
done
|
done
|
||||||
|
}
|
||||||
|
|
||||||
for IPTABLES in iptables ip6tables; do
|
for IPTABLES in $IPTS; do
|
||||||
ipt PREROUTING -t nat -j tpws
|
ipt PREROUTING -t nat -j tpws
|
||||||
ipt OUTPUT -t nat -m owner ! --uid-owner $TP_USER -j tpws
|
ipt OUTPUT -t nat -m owner ! --uid-owner $TP_USER -j tpws
|
||||||
done
|
done
|
||||||
|
Loading…
Reference in New Issue
Block a user