iptables for ss_redir+chinadns+dnsmasq

iptables

#!/bin/sh /etc/rc.common

START=95

start() {

# shadowsocks rules
iptables -t nat -N SHADOWSOCKS

# START

# google
iptables -t nat -A SHADOWSOCKS -p tcp -d 216.58.192.0/19 -j REDIRECT --to-ports 1080
iptables -t nat -A SHADOWSOCKS -p tcp -d 216.239.32.0/19 -j REDIRECT --to-ports 1080
iptables -t nat -A SHADOWSOCKS -p tcp -d 74.125.0.0/16 -j REDIRECT --to-ports 1080
iptables -t nat -A SHADOWSOCKS -p tcp -d 216.58.192.0/19 -j REDIRECT --to-ports 1080
iptables -t nat -A SHADOWSOCKS -p tcp -d 203.208.32.0/19 -j REDIRECT --to-ports 1080
iptables -t nat -A SHADOWSOCKS -p tcp -d 64.233.160.0/19 -j REDIRECT --to-ports 1080
iptables -t nat -A SHADOWSOCKS -p tcp -d 173.194.0.0/16 -j REDIRECT --to-ports 1080

# amazon related
iptables -t nat -A SHADOWSOCKS -p tcp -d 54.224.0.0/12 -j REDIRECT --to-ports 1080
iptables -t nat -A SHADOWSOCKS -p tcp -d 176.32.96.0/21 -j REDIRECT --to-ports 1080
iptables -t nat -A SHADOWSOCKS -p tcp -d 207.171.160.0/19 -j REDIRECT --to-ports 1080
iptables -t nat -A SHADOWSOCKS -p tcp -d 72.21.192.0/19 -j REDIRECT --to-ports 1080

# github.com
iptables -t nat -A SHADOWSOCKS -p tcp -d 192.30.252.0/22 -j REDIRECT --to-ports 1080

# cdn.api.twitter.com
iptables -t nat -A SHADOWSOCKS -p tcp -d 199.96.56.0/21 -j REDIRECT --to-ports 1080
iptables -t nat -A SHADOWSOCKS -p tcp -d 192.229.128.0/17 -j REDIRECT --to-ports 1080

# raw.githubusercontent.com
iptables -t nat -A SHADOWSOCKS -p tcp -d 103.245.222.0/24 -j REDIRECT --to-ports 1080

# github.io
iptables -t nat -A SHADOWSOCKS -p tcp -d 23.235.32.0/20 -j REDIRECT --to-ports 1080

# fastly.com (cdn)
iptables -t nat -A SHADOWSOCKS -p tcp -d 104.156.80.0/20 -j REDIRECT --to-ports 1080
iptables -t nat -A SHADOWSOCKS -p tcp -d 43.249.72.0/22 -j REDIRECT --to-ports 1080

# downloads.openwrt.org
iptables -t nat -A SHADOWSOCKS -p tcp -d 78.24.191.177/32 -j REDIRECT --to-ports 1080

# facebook.com
iptables -t nat -A SHADOWSOCKS -p tcp -d 66.220.144.0/20 -j REDIRECT --to-ports 1080
iptables -t nat -A SHADOWSOCKS -p tcp -d 31.13.77.0/24 -j REDIRECT --to-ports 1080

# creaders.net
iptables -t nat -A SHADOWSOCKS -p tcp -d 67.228.102.72/32 -j REDIRECT --to-ports 1080

# archive.ubuntu.com
iptables -t nat -A SHADOWSOCKS -p tcp -d 91.189.88.0/21 -j REDIRECT --to-ports 1080

# END
iptables -t nat -A SHADOWSOCKS -p tcp -j RETURN
iptables -t nat -A PREROUTING -p tcp -j SHADOWSOCKS

}

stop() {
	# shadowsocks rules
	iptables -t nat -D PREROUTING -p tcp -j SHADOWSOCKS
	iptables -t nat -F SHADOWSOCKS
	iptables -t nat -X SHADOWSOCKS
}