~挑战默认fakeip6的数值,并将fakeip变量化

This commit is contained in:
juewuy
2026-10-24 14:14:00 +08:00
parent 783453aabf
commit 529d16fa75
6 changed files with 27 additions and 24 deletions
+5 -5
View File
@@ -47,12 +47,12 @@ start_nft_route() { #nftables-route通用工具
[ -z "$ports" ] && nft add rule inet shellcrash $1 tcp dport {"$mix_port, $redir_port, $tproxy_port"} return
#过滤常用端口
[ -n "$PORTS" ] && {
nft add rule inet shellcrash $1 ip daddr != {198.18.0.0/15} tcp dport != {$PORTS} return
nft add rule inet shellcrash $1 ip daddr != {198.18.0.0/15} udp dport != {$PORTS} return
nft add rule inet shellcrash $1 ip6 daddr != {fc00::/16} tcp dport != {$PORTS} return
nft add rule inet shellcrash $1 ip6 daddr != {fc00::/16} udp dport != {$PORTS} return
nft add rule inet shellcrash $1 ip daddr != {$fakeip4} tcp dport != {$PORTS} return
nft add rule inet shellcrash $1 ip daddr != {$fakeip4} udp dport != {$PORTS} return
nft add rule inet shellcrash $1 ip6 daddr != {$fakeip6} tcp dport != {$PORTS} return
nft add rule inet shellcrash $1 ip6 daddr != {$fakeip6} udp dport != {$PORTS} return
}
#nft add rule inet shellcrash $1 ip saddr 198.18.0.0/15 return
#nft add rule inet shellcrash $1 ip saddr $fakeip4 return
nft add rule inet shellcrash $1 ip daddr {$RESERVED_IP} return #过滤保留地址
#过滤局域网设备
[ "$1" = 'prerouting' ] && {