j67678

##ss-redir 的 iptables 配置(透明代理)

透明代理指对客户端透明，客户端不需要进行任何设置就使用了网管设置的代理规则

创建 /etc/ss-redir.json 本地监听 7777 运行ss-redir -v -c /etc/ss-redir.json

iptables -t nat -N SHADOWSOCKS
# 在 nat 表中创建新链
iptables -t nat -A SHADOWSOCKS -p tcp --dport 23596 -j RETURN
# 23596 是 ss 代理服务器的端口，即远程 shadowsocks 服务器提供服务的端口，如果你有多个 ip 可用,但端口一致，就设置这个

Debian

cd /tmp
# 编译环境准备&安装依赖包
apt-get install --no-install-recommends build-essential autoconf libtool libssl-dev libpcre3-dev asciidoc xmlto git
# 克隆源码
git clone --recursive https://github.com/shadowsocks/shadowsocks-libev.git
# 开始编译

如何在路由器中实现透明代理？

0 互联网现状

目前整个互联网环境，被破坏最严重地部分，是 Web 服务体验。当直接破坏难以实现时，就会从流程链的上下游着手，如：DNS 污染。

其它地互联网服务类型，例如：邮件，可能小部分会受到 Web 服务上下游破坏地余震，但整体上基本不受影响。

	application: you-app-name-here
	version: 1
	runtime: python
	api_version: 1

	default_expiration: "30d"

	handlers:
	- url: /(.*\.(appcache\|manifest))
	mime_type: text/cache-manifest

	#!/usr/bin/python
	# Filename s5.py
	# Python Dynamic Socks5 Proxy
	# Usage: python s5.py 1080
	# Background Run: nohup python s5.py 1080 &
	# Email: [email protected]

	import socket, sys, select, SocketServer, struct, time

	class ThreadingTCPServer(SocketServer.ThreadingMixIn, SocketServer.TCPServer): pass

	# Change Java Runtime:
	sudo update-alternatives --config java

	# Delete Open-JDK
	sudo apt-get purge openjdk-\* icedtea-\* icedtea6-\*

	# Change fonts - remove hinting:
	http://askubuntu.com/questions/32624/ugly-fonts-in-netbeans-how-can-i-make-it-use-the-system-font

	# Change RubyMine AntiAliasing first:

	# This code goes in the WAN UP section of the Tomato GUI.
	#
	# To list the current rules on the router, issue the command:
	# iptables -t mangle -L PREROUTING
	#
	# Flush/reset all the rules to default by issuing the command:
	# iptables -t mangle -F PREROUTING
	#
	#
	# First it is necessary to disable Reverse Path Filtering on all

	[General]
	Name=Default
	Icon=..\mactray.exe.ico,0

	;【自动挂钩子进程】
	;[0:Disable] 1:Enable
	HookChildProcesses=1

	;【字体微调】
	;0:Normal 1:NoHinting 2:AutoHinting 3:Light+AutoHinting

	#!/bin/sh

	# Update latest epel
	wget http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
	sudo rpm -Uvh epel-release-6-8.noarch.rpm

	# Download and build mosh
	sudo yum -y install rpm-build rpmdevtools protobuf-compiler protobuf-devel libutempter-devel zlib-devel ncurses-devel openssh-clients perl-IO-Tty openssl-devel gcc gcc-c++
	rpmdev-setuptree
	cd ~/rpmbuild/SOURCES