diff --git a/scripts/start.sh b/scripts/start.sh index df6388e..996cb47 100644 --- a/scripts/start.sh +++ b/scripts/start.sh @@ -58,7 +58,7 @@ setconfig() { #脚本配置工具 ckcmd() { #检查命令是否存在 command -v sh >/dev/null 2>&1 && command -v "$1" >/dev/null 2>&1 || type "$1" >/dev/null 2>&1 } -ckgeo() { #查找及下载Geo数据文件 +ckgeo() { #查找及下载Geo数据文件 find --help 2>&1 | grep -q size && find_para=' -size +20' #find命令兼容 [ -z "$(find "$BINDIR"/"$1" "$find_para" 2>/dev/null)" ] && { if [ -n "$(find "$CRASHDIR"/"$1" "$find_para" 2>/dev/null)" ]; then @@ -751,7 +751,10 @@ EOF "type": "tun", "tag": "tun-in", "interface_name": "utun", - "inet4_address": "172.19.0.1/30", + "address": [ + "172.72.0.1/30", + "fdfe:dcba:9876::1/126" + ], "auto_route": false, "stack": "system", "sniff": true, @@ -960,6 +963,7 @@ start_ipt_route() { #iptables-route通用工具 #将所在链指定流量指向shellcrash表 $1 $w -t $2 -I $3 -p $5 $ports -j $4 [ "$dns_mod" != "redir_host" ] && [ "$common_ports" = "已开启" ] && [ "$1" = iptables ] && $1 $w -t $2 -I $3 -p $5 -d 198.18.0.0/16 -j $4 + [ "$dns_mod" != "redir_host" ] && [ "$common_ports" = "已开启" ] && [ "$1" = ip6tables ] && $1 $w -t $2 -I $3 -p $5 -d fc00::/16 -j $4 } [ "$5" = "tcp" -o "$5" = "all" ] && proxy_set $1 $2 $3 $4 tcp [ "$5" = "udp" -o "$5" = "all" ] && proxy_set $1 $2 $3 $4 udp @@ -1186,7 +1190,7 @@ start_nft_route() { #nftables-route通用工具 nft add rule inet shellcrash $1 tcp dport 53 return nft add rule inet shellcrash $1 udp dport 53 return #过滤常用端口 - [ -n "$PORTS" ] && nft add rule inet shellcrash $1 tcp dport != {$PORTS} ip daddr != {198.18.0.0/16} return + [ -n "$PORTS" ] && nft add rule inet shellcrash $1 tcp dport != {$PORTS} ip daddr != {198.18.0.0/16} ip6 daddr != {fc00::/16} return #防回环 nft add rule inet shellcrash $1 meta mark $routing_mark return nft add rule inet shellcrash $1 meta skgid 7890 return @@ -1657,7 +1661,7 @@ EOF compare "$TMPDIR"/shellcrash_pac "$BINDIR"/ui/pac [ "$?" = 0 ] && rm -rf "$TMPDIR"/shellcrash_pac || mv -f "$TMPDIR"/shellcrash_pac "$BINDIR"/ui/pac } -core_check() { #检查及下载内核文件 +core_check() { #检查及下载内核文件 [ -n "$(tar --help 2>&1 | grep -o 'no-same-owner')" ] && tar_para='--no-same-owner' #tar命令兼容 [ -n "$(find --help 2>&1 | grep -o size)" ] && find_para=' -size +2000' #find命令兼容 tar_core() {