A POSTROUTING -o pppoe-wan -m comment -comment "!fw3" -j zone_wan_postrouting A POSTROUTING -o br-lan -m comment -comment "!fw3" -j zone_lan_postrouting A POSTROUTING -m comment -comment "!fw3: Custom postrouting rule chain" -j postrouting_rule A OUTPUT ! -d 127.0.0.0/8 -m addrtype -dst-type LOCAL -j DOCKER A OUTPUT -d 127.0.0.1/32 -p udp -m udp -dport 53 -m owner ! -uid-owner 65534 -m comment -comment "OpenClash DNS Hijack" -j REDIRECT -to-ports 7874 A OUTPUT -d 127.0.0.1/32 -p tcp -m tcp -dport 53 -m owner ! -uid-owner 65534 -m comment -comment "OpenClash DNS Hijack" -j REDIRECT -to-ports 7874 A PREROUTING -i docker0 -m comment -comment "!fw3" -j zone_docker_prerouting A PREROUTING -i ipsec0 -m comment -comment "!fw3" -j zone_ipsecserver_prerouting A PREROUTING -i tun0 -m comment -comment "!fw3" -j zone_vpn_prerouting A PREROUTING -i eth1 -m comment -comment "!fw3" -j zone_wan_prerouting A PREROUTING -i pppoe-wan -m comment -comment "!fw3" -j zone_wan_prerouting A PREROUTING -i br-lan -m comment -comment "!fw3" -j zone_lan_prerouting A PREROUTING -m comment -comment "!fw3: Custom prerouting rule chain" -j prerouting_rule A PREROUTING -m addrtype -dst-type LOCAL -j DOCKER A PREROUTING -p tcp -m tcp -dport 53 -j REDIRECT -to-ports 53 A PREROUTING -p udp -m udp -dport 53 -j REDIRECT -to-ports 53 A PREROUTING -p udp -m udp -dport 53 -j openclash_dns_redirect
A PREROUTING -p tcp -m tcp -dport 53 -j openclash_dns_redirect A PREROUTING -d 8.8.8.8/32 -p tcp -m comment -comment "OpenClash Google DNS Hijack" -m tcp -dport 53 -j REDIRECT -to-ports 7892
A PREROUTING -d 8.8.4.4/32 -p tcp -m comment -comment "OpenClash Google DNS Hijack" -m tcp -dport 53 -j REDIRECT -to-ports 7892 LOG_OUT "Tip: Start Add Custom Firewall Rules." # Add your custom firewall rules here, they will be added after the end of the OpenClash iptables rules # This script is called by /etc/init.d/openclash 当前配置文件: /etc/openclash/config/Nexitally.yaml 运行权限: 4428: cap_dac_override,cap_net_bind_service,cap_net_admin,cap_net_raw,cap_sys_ptrace,cap_sys_resource=eip
0 kommentar(er)
