hacker07/NeoTachyon
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

Use wildcard listener for TPROXY inbound

Browse Source
This commit is contained in:
ushan0v
2026-06-10 06:24:16 +03:00
parent 34baa1c49f
commit 2135dce035
3 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
podkop/files/usr/lib/constants.sh
+1 -1
View File
@@ -45,7 +45,7 @@ SB_FAKEIP_RULESET_DNS_RULE_TAG="fakeip-ruleset-dns-rule-tag"
SB_SERVICE_FAKEIP_DNS_RULE_TAG="service-fakeip-dns-rule-tag"
# Inbounds
SB_TPROXY_INBOUND_TAG="tproxy-in"
SB_TPROXY_INBOUND_ADDRESS="127.0.0.1"
SB_TPROXY_INBOUND_ADDRESS="0.0.0.0"
SB_TPROXY_INBOUND_PORT=1602
SB_DNS_INBOUND_TAG="dns-in"
SB_DNS_INBOUND_ADDRESS="127.0.0.42"
podkop/files/usr/lib/rules_nft_runtime.sh
+2 -2
View File
@@ -404,8 +404,8 @@ create_nft_rules() {
nft add rule inet "$NFT_TABLE_NAME" mangle iifname "@$NFT_INTERFACE_SET_NAME" ip daddr "$SB_FAKEIP_INET4_RANGE" meta l4proto tcp meta mark set "$NFT_FAKEIP_MARK" counter
nft add rule inet "$NFT_TABLE_NAME" mangle iifname "@$NFT_INTERFACE_SET_NAME" ip daddr "$SB_FAKEIP_INET4_RANGE" meta l4proto udp meta mark set "$NFT_FAKEIP_MARK" counter
nft add rule inet "$NFT_TABLE_NAME" proxy meta mark \& "$NFT_FAKEIP_MARK" == "$NFT_FAKEIP_MARK" meta l4proto tcp tproxy ip to 127.0.0.1:1602 counter
nft add rule inet "$NFT_TABLE_NAME" proxy meta mark \& "$NFT_FAKEIP_MARK" == "$NFT_FAKEIP_MARK" meta l4proto udp tproxy ip to 127.0.0.1:1602 counter
nft add rule inet "$NFT_TABLE_NAME" proxy meta mark \& "$NFT_FAKEIP_MARK" == "$NFT_FAKEIP_MARK" meta l4proto tcp tproxy ip to :"$SB_TPROXY_INBOUND_PORT" counter
nft add rule inet "$NFT_TABLE_NAME" proxy meta mark \& "$NFT_FAKEIP_MARK" == "$NFT_FAKEIP_MARK" meta l4proto udp tproxy ip to :"$SB_TPROXY_INBOUND_PORT" counter
nft add rule inet "$NFT_TABLE_NAME" mangle_output ip daddr "@$NFT_LOCALV4_SET_NAME" return
nft add rule inet "$NFT_TABLE_NAME" mangle_output meta mark "$NFT_OUTBOUND_MARK" counter return
podkop/files/usr/lib/status_diagnostics.sh
+1 -1
View File
@@ -1319,7 +1319,7 @@ check_sing_box() {
port_53_ok=1
fi
if netstat -ln 2> /dev/null | status_diagnostics_ucode stdin-contains "127.0.0.1:1602"; then
if netstat -ln 2> /dev/null | grep -Eq "(^|[[:space:]])(127\\.0\\.0\\.1|0\\.0\\.0\\.0):$SB_TPROXY_INBOUND_PORT([[:space:]]|$)"; then
port_1602_ok=1
fi