improve brook support

This commit is contained in:
coolsnowwolf 2018-04-08 22:45:01 +08:00
parent 464073a27f
commit 9990e9813f

View File

@ -275,17 +275,29 @@ uci_get_by_type() {
add_rule()
{
iptables -t nat -N brook_pre
iptables -t nat -F brook_pre
iptables -t nat -A brook_pre -m set --match-set local dst -j RETURN || {
iptables -t nat -A brook_pre -d 10.0.0.0/8 -j RETURN
iptables -t nat -A brook_pre -d 127.0.0.0/8 -j RETURN
iptables -t nat -A brook_pre -d 172.16.0.0/12 -j RETURN
iptables -t nat -A brook_pre -d 192.168.0.0/16 -j RETURN
iptables -t nat -A brook_pre -d 127.0.0.0/8 -j RETURN
iptables -t nat -A brook_pre -d 224.0.0.0/3 -j RETURN
/usr/bin/ip rule add fwmark 1 lookup 100
iptables -t mangle -N brook_pre
iptables -t mangle -F brook_pre
iptables -t mangle -A brook_pre -m set --match-set local dst -j RETURN || {
iptables -t mangle -A brook_pre -d 0.0.0.0/8 -j RETURN
iptables -t mangle -A brook_pre -d 10.0.0.0/8 -j RETURN
iptables -t mangle -A brook_pre -d 127.0.0.0/8 -j RETURN
iptables -t mangle -A brook_pre -d 169.254.0.0/16 -j RETURN
iptables -t mangle -A brook_pre -d 172.16.0.0/12 -j RETURN
iptables -t mangle -A brook_pre -d 192.168.0.0/16 -j RETURN
iptables -t mangle -A brook_pre -d 224.0.0.0/4 -j RETURN
iptables -t mangle -A brook_pre -d 240.0.0.0/4 -j RETURN
iptables -t mangle -A brook_pre -d $vt_server_add -j RETURN
}
iptables -t nat -A brook_pre -d $vt_server_addr -j RETURN
iptables -t mangle -A brook_pre -j MARK --set-mark 1
iptables -t mangle -A brook_pre -j ACCEPT
iptables -t mangle -A PREROUTING -p tcp -m socket -j brook_pre
iptables -t mangle -A PREROUTING -p tcp -j TPROXY --tproxy-mark 0x1/0x1 --on-port 7070
iptables -t mangle -A PREROUTING -p udp -m socket -j brook_pre
iptables -t mangle -A PREROUTING -p udp -j TPROXY --tproxy-mark 0x1/0x1 --on-port 7070
iptables -N gameboost -t mangle
ipset -! create gameuser hash:ip maxelem 65536 2>/dev/null