squid intercept � �� openwrt (Caesar Irod)

Sat, 28 Dec 2019 21:10:17 GMT

��, �� squid �� peek/splice
�� , �� nginx ��

��
[code]
#!/bin/ash
PROXY_IP=192.168.174.2
RT_TABLE=/etc/iproute2/rt_tables
CLIENT_IFACE=br-lan
FW_MARK=33

ADD_TABLE=`cat ${RT_TABLE} | grep '^200 proxy$' | wc -l`
if [ ${ADD_TABLE} = 0 ]; then
echo '200 proxy' >> ${RT_TABLE}
fi

iptables -t mangle -A PREROUTING -j ACCEPT -p tcp -m multiport --dports 80,443 -s ${PROXY_IP}
iptables -t mangle -A PREROUTING -j MARK --set-mark ${FW_MARK} -p tcp -m multiport --dports 80,443
ip rule del fwmark ${FW_MARK}
ip rule add fwmark ${FW_MARK} table proxy
ip route add default via ${PROXY_IP} dev br-lan table proxy
[/code]

��
[code]
iptables -A PREROUTING -t nat -i ens2 -p tcp --dport 80 ! -d 192.168.174.2 -j REDIRECT --to-port 3128
iptables -A PREROUTING -t nat -i ens2 -p tcp --dport 443 ! -d 192.168.174.2 -j REDIRECT --to-port 3129
[/code]

OpenForum RSS: squid intercept � ���� openwrt

squid intercept � ���� openwrt (Caesar Irod)

OpenForum RSS: squid intercept � �� openwrt

squid intercept � �� openwrt (Caesar Irod)