diff --git a/scripts/starts/clash_modify.sh b/scripts/starts/clash_modify.sh index 0424b35e..493c0e20 100644 --- a/scripts/starts/clash_modify.sh +++ b/scripts/starts/clash_modify.sh @@ -37,7 +37,7 @@ dns: default-nameserver: [ $dns_resolver ] direct-nameserver: [ $dns_nameserver ] enhanced-mode: fake-ip - fake-ip-range: 28.0.0.0/8 + fake-ip-range: 198.18.0.0/15 fake-ip-range6: fc00::/16 fake-ip-filter: EOF diff --git a/scripts/starts/fw_iptables.sh b/scripts/starts/fw_iptables.sh index 57dc1f4e..8e02c0d0 100644 --- a/scripts/starts/fw_iptables.sh +++ b/scripts/starts/fw_iptables.sh @@ -88,7 +88,7 @@ start_ipt_route() { #iptables-route通用工具 else "$1" $w -t "$2" -I "$3" -p "$5" -j "$4" fi - [ "$dns_mod" = "mix" -o "$dns_mod" = "fake-ip" ] && [ "$common_ports" = "ON" ] && [ "$1" = iptables ] && "$1" $w -t "$2" -I "$3" -p "$5" -d 28.0.0.0/8 -j "$4" + [ "$dns_mod" = "mix" -o "$dns_mod" = "fake-ip" ] && [ "$common_ports" = "ON" ] && [ "$1" = iptables ] && "$1" $w -t "$2" -I "$3" -p "$5" -d 198.18.0.0/15 -j "$4" [ "$dns_mod" = "mix" -o "$dns_mod" = "fake-ip" ] && [ "$common_ports" = "ON" ] && [ "$1" = ip6tables ] && "$1" $w -t "$2" -I "$3" -p "$5" -d fc00::/16 -j "$4" } [ "$5" = "tcp" -o "$5" = "all" ] && proxy_set "$1" "$2" "$3" "$4" tcp diff --git a/scripts/starts/fw_nftables.sh b/scripts/starts/fw_nftables.sh index b805ea22..c1d5e2c9 100644 --- a/scripts/starts/fw_nftables.sh +++ b/scripts/starts/fw_nftables.sh @@ -38,12 +38,12 @@ start_nft_route() { #nftables-route通用工具 [ -z "$ports" ] && nft add rule inet shellcrash $1 tcp dport {"$mix_port, $redir_port, $tproxy_port"} return #过滤常用端口 [ -n "$PORTS" ] && { - nft add rule inet shellcrash $1 ip daddr != {28.0.0.0/8} tcp dport != {$PORTS} return - nft add rule inet shellcrash $1 ip daddr != {28.0.0.0/8} udp dport != {$PORTS} return + nft add rule inet shellcrash $1 ip daddr != {198.18.0.0/15} tcp dport != {$PORTS} return + nft add rule inet shellcrash $1 ip daddr != {198.18.0.0/15} udp dport != {$PORTS} return nft add rule inet shellcrash $1 ip6 daddr != {fc00::/16} tcp dport != {$PORTS} return nft add rule inet shellcrash $1 ip6 daddr != {fc00::/16} udp dport != {$PORTS} return } - #nft add rule inet shellcrash $1 ip saddr 28.0.0.0/8 return + #nft add rule inet shellcrash $1 ip saddr 198.18.0.0/15 return nft add rule inet shellcrash $1 ip daddr {$RESERVED_IP} return #过滤保留地址 #过滤局域网设备 [ "$1" = 'prerouting' ] && { diff --git a/scripts/starts/fw_stop.sh b/scripts/starts/fw_stop.sh index a8bb5eac..2a5d99c6 100644 --- a/scripts/starts/fw_stop.sh +++ b/scripts/starts/fw_stop.sh @@ -48,18 +48,18 @@ ckcmd iptables && { $iptable -t mangle -D OUTPUT -p udp -j shellcrash_mark_out 2>/dev/null fi #redir - $iptable -t nat -D PREROUTING -p tcp -d 28.0.0.0/8 -j shellcrash 2>/dev/null - $iptable -t nat -D OUTPUT -p tcp -d 28.0.0.0/8 -j shellcrash_out 2>/dev/null + $iptable -t nat -D PREROUTING -p tcp -d 198.18.0.0/15 -j shellcrash 2>/dev/null + $iptable -t nat -D OUTPUT -p tcp -d 198.18.0.0/15 -j shellcrash_out 2>/dev/null #vm_dns $iptable -t nat -D PREROUTING -p tcp --dport 53 -j shellcrash_vm_dns 2>/dev/null $iptable -t nat -D PREROUTING -p udp --dport 53 -j shellcrash_vm_dns 2>/dev/null #vm_redir - $iptable -t nat -D PREROUTING -p tcp -d 28.0.0.0/8 -j shellcrash_vm 2>/dev/null + $iptable -t nat -D PREROUTING -p tcp -d 198.18.0.0/15 -j shellcrash_vm 2>/dev/null #TPROXY&tun - $iptable -t mangle -D PREROUTING -p tcp -d 28.0.0.0/8 -j shellcrash_mark 2>/dev/null - $iptable -t mangle -D PREROUTING -p udp -d 28.0.0.0/8 -j shellcrash_mark 2>/dev/null - $iptable -t mangle -D OUTPUT -p tcp -d 28.0.0.0/8 -j shellcrash_mark_out 2>/dev/null - $iptable -t mangle -D OUTPUT -p udp -d 28.0.0.0/8 -j shellcrash_mark_out 2>/dev/null + $iptable -t mangle -D PREROUTING -p tcp -d 198.18.0.0/15 -j shellcrash_mark 2>/dev/null + $iptable -t mangle -D PREROUTING -p udp -d 198.18.0.0/15 -j shellcrash_mark 2>/dev/null + $iptable -t mangle -D OUTPUT -p tcp -d 198.18.0.0/15 -j shellcrash_mark_out 2>/dev/null + $iptable -t mangle -D OUTPUT -p udp -d 198.18.0.0/15 -j shellcrash_mark_out 2>/dev/null $iptable -t mangle -D PREROUTING -m mark --mark $fwmark -p tcp -j TPROXY --on-port $tproxy_port 2>/dev/null $iptable -t mangle -D PREROUTING -m mark --mark $fwmark -p udp -j TPROXY --on-port $tproxy_port 2>/dev/null #tun diff --git a/scripts/starts/singbox_modify.sh b/scripts/starts/singbox_modify.sh index 659a28d8..bf8b4c24 100644 --- a/scripts/starts/singbox_modify.sh +++ b/scripts/starts/singbox_modify.sh @@ -193,7 +193,7 @@ EOF { "tag": "dns_fakeip", "type": "fakeip", - "inet4_range": "28.0.0.0/8", + "inet4_range": "198.18.0.0/15", "inet6_range": "fc00::/16" }, { @@ -309,7 +309,7 @@ EOF "interface_name": "utun", "address": [ $ipv6_address - "28.0.0.1/30" + "198.18.0.1/15" ], "auto_route": false, "stack": "system"