mirror of
https://github.com/coolsnowwolf/lede.git
synced 2025-04-18 17:33:31 +00:00
improve brook support
This commit is contained in:
parent
464073a27f
commit
9990e9813f
@ -275,17 +275,29 @@ uci_get_by_type() {
|
||||
|
||||
add_rule()
|
||||
{
|
||||
iptables -t nat -N brook_pre
|
||||
iptables -t nat -F brook_pre
|
||||
iptables -t nat -A brook_pre -m set --match-set local dst -j RETURN || {
|
||||
iptables -t nat -A brook_pre -d 10.0.0.0/8 -j RETURN
|
||||
iptables -t nat -A brook_pre -d 127.0.0.0/8 -j RETURN
|
||||
iptables -t nat -A brook_pre -d 172.16.0.0/12 -j RETURN
|
||||
iptables -t nat -A brook_pre -d 192.168.0.0/16 -j RETURN
|
||||
iptables -t nat -A brook_pre -d 127.0.0.0/8 -j RETURN
|
||||
iptables -t nat -A brook_pre -d 224.0.0.0/3 -j RETURN
|
||||
/usr/bin/ip rule add fwmark 1 lookup 100
|
||||
iptables -t mangle -N brook_pre
|
||||
iptables -t mangle -F brook_pre
|
||||
iptables -t mangle -A brook_pre -m set --match-set local dst -j RETURN || {
|
||||
iptables -t mangle -A brook_pre -d 0.0.0.0/8 -j RETURN
|
||||
iptables -t mangle -A brook_pre -d 10.0.0.0/8 -j RETURN
|
||||
iptables -t mangle -A brook_pre -d 127.0.0.0/8 -j RETURN
|
||||
iptables -t mangle -A brook_pre -d 169.254.0.0/16 -j RETURN
|
||||
iptables -t mangle -A brook_pre -d 172.16.0.0/12 -j RETURN
|
||||
iptables -t mangle -A brook_pre -d 192.168.0.0/16 -j RETURN
|
||||
iptables -t mangle -A brook_pre -d 224.0.0.0/4 -j RETURN
|
||||
iptables -t mangle -A brook_pre -d 240.0.0.0/4 -j RETURN
|
||||
iptables -t mangle -A brook_pre -d $vt_server_add -j RETURN
|
||||
}
|
||||
iptables -t nat -A brook_pre -d $vt_server_addr -j RETURN
|
||||
|
||||
iptables -t mangle -A brook_pre -j MARK --set-mark 1
|
||||
iptables -t mangle -A brook_pre -j ACCEPT
|
||||
|
||||
iptables -t mangle -A PREROUTING -p tcp -m socket -j brook_pre
|
||||
iptables -t mangle -A PREROUTING -p tcp -j TPROXY --tproxy-mark 0x1/0x1 --on-port 7070
|
||||
|
||||
iptables -t mangle -A PREROUTING -p udp -m socket -j brook_pre
|
||||
iptables -t mangle -A PREROUTING -p udp -j TPROXY --tproxy-mark 0x1/0x1 --on-port 7070
|
||||
|
||||
iptables -N gameboost -t mangle
|
||||
ipset -! create gameuser hash:ip maxelem 65536 2>/dev/null
|
||||
|
Loading…
Reference in New Issue
Block a user