mirrors/zapret
0
0
Fork 0
mirror of https://github.com/bol-van/zapret.git synced 2025-07-02 03:23:05 +00:00
Code

init.d: openwrt-minimal: redirect https connections to another port

Browse Source
This commit is contained in:
Ivan Davydov 2025-06-12 13:25:12 +03:00
parent 32cfee705a
commit ad9f95044d
2 changed files with 10 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
init.d/openwrt-minimal/tpws/etc/firewall.user
View File

@ -1,5 +1,6 @@
DISABLE_IPV6=0 DISABLE_IPV6=0
TP_PORT=900 TP_PORT=900
TP_PORT_SSL=901
TP_USER=daemon TP_USER=daemon
EXCLUDE4="10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 169.254.0.0/16 127.0.0.0/8" EXCLUDE4="10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 169.254.0.0/16 127.0.0.0/8"
@ -25,7 +26,7 @@ redirect_port()
redirect() redirect()
{ {
redirect_port 80 $TP_PORT redirect_port 80 $TP_PORT
redirect_port 443 $TP_PORT redirect_port 443 $TP_PORT_SSL
} }
for IPTABLES in $IPTS; do for IPTABLES in $IPTS; do

12
init.d/openwrt-minimal/tpws/etc/nftables.d/90-tpws.nft
View File

@ -8,11 +8,15 @@ set tpws_exclude6 {
} }
chain tpws_pre { chain tpws_pre {
type nat hook prerouting priority dstnat; policy accept; type nat hook prerouting priority dstnat; policy accept;
tcp dport {80,443} ip daddr != @tpws_exclude4 redirect to :900 tcp dport 80 ip daddr != @tpws_exclude4 redirect to :900
tcp dport {80,443} ip6 daddr != @tpws_exclude6 redirect to :900 tcp dport 443 ip daddr != @tpws_exclude4 redirect to :901
tcp dport 80 ip6 daddr != @tpws_exclude4 redirect to :900
tcp dport 443 ip6 daddr != @tpws_exclude6 redirect to :901
} }
chain tpws_out { chain tpws_out {
type nat hook output priority -100; policy accept; type nat hook output priority -100; policy accept;
tcp dport {80,443} skuid != daemon ip daddr != @tpws_exclude4 redirect to :900 tcp dport 80 skuid != daemon ip daddr != @tpws_exclude4 redirect to :900
tcp dport {80,443} skuid != daemon ip6 daddr != @tpws_exclude6 redirect to :900 tcp dport 443 skuid != daemon ip daddr != @tpws_exclude4 redirect to :901
tcp dport 80 skuid != daemon ip6 daddr != @tpws_exclude6 redirect to :900
tcp dport 443 skuid != daemon ip6 daddr != @tpws_exclude6 redirect to :901
} }