透明代理的配置

  1. (base) afu@debian:~$ sudo iptables -t nat -A OUTPUT -d shanghai.liuwenwen.net -j RETURN
  2. (base) afu@debian:~$ sudo iptables -t nat -A OUTPUT -d 10.0.0.0/8 -j RETURN
  3. (base) afu@debian:~$ sudo iptables -t nat -A OUTPUT -d 192.168.0.0/16 -j RETURN
  4. (base) afu@debian:~$ sudo iptables -t nat -A OUTPUT -d 127.0.0.0/8 -j RETURN
  5. (base) afu@debian:~$ sudo iptables -t nat -A OUTPUT -p tcp -j REDIRECT --to-ports 10054
  6. (base) afu@debian:~$ sudo iptables -t nat -F
  7. (base) afu@debian:~$ sudo iptables -t mangle -F
  8. (base) afu@debian:~$ sudo iptables -t raw -F
  1. base {
  3.     // debug: connection progress & client list on SIGUSR1
  4.     log_debug = on;
  6.     // info: start and end of client session
  7.     log_info = on;
  9.     /* possible `log' values are:
  10.      *   stderr
  11.      *   "file:/path/to/file"
  12.      *   syslog:FACILITY  facility is any of "daemon", "local0"..."local7"
  13.      */
  14.     log = stderr;
  15.     // log = "file:/path/to/file";
  16.     // log = "syslog:local7";
  18.     // detach from console
  19.     daemon = off;
  21.     /* Change uid, gid and root directory, these options require root
  22.      * privilegies on startup.
  23.      * Note, your chroot may requre /etc/localtime if you write log to syslog.
  24.      * Log is opened before chroot & uid changing.
  25.      */
  26.     // user = nobody;
  27.     // group = nobody;
  28.     // chroot = "/var/chroot";
  30.     /* possible `redirector' values are:
  31.      *   iptables   - for Linux
  32.      *   ipf        - for FreeBSD
  33.      *   pf         - for OpenBSD
  34.      *   generic    - some generic redirector that MAY work
  35.      */
  36.     redirector = iptables;
  37. }
  39. redsocks {
  40.     /* `local_ip' defaults to 127.0.0.1 for security reasons,
  41.      * use 0.0.0.0 if you want to listen on every interface.
  42.      * `local_*' are used as port to redirect to.
  43.      */
  44.     local_ip = 127.0.0.1;
  45.     local_port = 10054;   //记住这个端口,这个是redsocks运行的端口
  47.     // listen() queue length. Default value is SOMAXCONN and it should be
  48.     // good enough for most of us.
  49.     // listenq = 128; // SOMAXCONN equals 128 on my Linux box.
  51.     // `max_accept_backoff` is a delay to retry `accept()` after accept
  52.     // failure (e.g. due to lack of file descriptors). It's measured in
  53.     // milliseconds and maximal value is 65535. `min_accept_backoff` is
  54.     // used as initial backoff value and as a damper for `accept() after
  55.     // close()` logic.
  56.     // min_accept_backoff = 100;
  57.     // max_accept_backoff = 60000;
  59.     // `ip' and `port' are IP and tcp-port of proxy-server
  60.     // You can also use hostname instead of IP, only one (random)
  61.     // address of multihomed host will be used.
  62.     ip = 127.0.0.1; //这个是代-理服务器的端口,如果你本地运行shadows,需要将ip设置为127.0.0.1
  63.     port = 8899; //编辑这个端口值,修改为本地shadowsocks运行的端口
  65.     // known types: socks4, socks5, http-connect, http-relay
  66.     type = socks5;
  68.     // login = "foobar";
  69.     // password = "baz";
  70. }
  72. redudp {
  73.     // `local_ip' should not be 0.0.0.0 as it's also used for outgoing
  74.     // packets that are sent as replies - and it should be fixed
  75.     // if we want NAT to work properly.
  76.     local_ip = 127.0.0.1;
  77.     local_port = 10055;
  79.     // `ip' and `port' of socks5 proxy server.
  80.     ip = 127.0.0.1;
  81.     port = 1080;
  83.     // redsocks knows about two options while redirecting UDP packets at
  84.     // linux: TPROXY and REDIRECT.  TPROXY requires more complex routing
  85.     // configuration and fresh kernel (>= 2.6.37 according to squid
  86.     // developers[1]) but has hack-free way to get original destination
  87.     // address, REDIRECT is easier to configure, but requires `dest_ip` and
  88.     // `dest_port` to be set, limiting packet redirection to single
  89.     // destination.
  90.     // [1] http://wiki.squid-cache.org/Features/Tproxy4
  91.     dest_ip = 8.8.8.8;
  92.     dest_port = 53;
  94.     udp_timeout = 30;
  95.     udp_timeout_stream = 180;
  96. }
  99. // you can add more `redsocks' and `redudp' sections if you need.