mirror of https://github.com/bol-van/zapret/
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
25 lines
871 B
25 lines
871 B
TPPORT_HTTP=1188
|
|
TPPORT_HTTPS=1189
|
|
TPWS_USER=daemon
|
|
IPT_FILTER_HTTP="-p tcp --dport 80 -m set --match-set zapret dst"
|
|
IPT_FILTER_HTTPS="-p tcp --dport 443 -m set --match-set zapret dst"
|
|
|
|
ipt()
|
|
{
|
|
iptables -C $@ 2>/dev/null || iptables -I $@
|
|
}
|
|
|
|
. /lib/functions/network.sh
|
|
network_find_wan wan_iface
|
|
|
|
for ext_iface in $wan_iface; do
|
|
network_get_device DEVICE $ext_iface
|
|
|
|
ipt OUTPUT -t nat -o $DEVICE -m owner ! --uid-owner $TPWS_USER $IPT_FILTER_HTTP -j DNAT --to 127.0.0.1:$TPPORT_HTTP
|
|
ipt OUTPUT -t nat -o $DEVICE -m owner ! --uid-owner $TPWS_USER $IPT_FILTER_HTTPS -j DNAT --to 127.0.0.1:$TPPORT_HTTPS
|
|
done
|
|
|
|
network_get_device DEVICE lan
|
|
sysctl -w net.ipv4.conf.$DEVICE.route_localnet=1
|
|
ipt prerouting_lan_rule -t nat $IPT_FILTER_HTTP -j DNAT --to 127.0.0.1:$TPPORT_HTTP
|
|
ipt prerouting_lan_rule -t nat $IPT_FILTER_HTTPS -j DNAT --to 127.0.0.1:$TPPORT_HTTPS
|
|
|