\u51fa\u53d1\u70b9
\n\u5f88\u65e9\u7684\u65f6\u5019\u4e00\u76f4\u5728\u7528\u7f51\u4ef6 wndr4300 \u5237\u4e86 openwrt \u4ee5\u53ca lede \u8fd9\u79cd\u5f00\u653e\u5f0f\u7684\u8def\u7531\u7cfb\u7edf\uff0c\u4e00\u76f4\u6c89\u8ff7\u4e8e\u65e0\u754c\u6d4f\u89c8\u65e0\u6cd5\u81ea\u62d4\u3002\u56e0\u4e3a\u7b14\u8005\u6700\u8fd1\u5728
\n\u5b66\u4e60\u7684\u4e00\u4e9b\u4e1c\u897f\u6bd4\u8f83\u65b0\uff0c\u5728\u56fd\u5185\u770b\u4e0d\u5230\u8be6\u7ec6\u7684\u6587\u6863\uff0c\u80fd\u4e0a google \u5f53\u7136\u662f\u6700\u597d\u7684\u3002
\n\u8981\u6c42\u63d0\u5347
\n\u5f53\u7136\u4e0d\u80fd\u6ee1\u8db3\u4e8e\u53ef\u4ee5\u8bbf\u95ee\uff0c\u4f5c\u4e3a\u4e00\u4e2a\u5e74\u8f7b\u4eba\u5c31\u8981\u6709\u6562\u4e8e\u6298\u817e\u7684\u7cbe\u795e\u3002\u901f\u5ea6\u6162\u70b9\u7684\u8def\u7531\u5df2\u7ecf\u6ee1\u8db3\u4e0d\u4e86\u7b14\u8005\u7684\u9700\u6c42\u4e86\u3002\u521a\u597d\u524d\u51e0\u5929\u4e70\u4e86\u4e2a
\n\u6811\u8393\u6d3e3\uff0c\u4e0d\u6298\u817e\u4e0b\u4f3c\u4e4e\u6709\u70b9\u8fc7\u5206\u4e86\u554a\u3002<\/p>\n
\u5728\u6811\u8393\u6d3e\u4e0a\u642d\u5efa\u8f6f\u8def\u7531
\n\u51c6\u5907\u5de5\u5177
\n\u9700\u8981\u7684\u8bbe\u5907
\n\u7535\u8111\u4e00\u53f0
\n\u6811\u8393\u6d3e or \u5176\u4ed6linux\u5e73\u53f0
\n\u7f51\u53612\u4e2a\uff0c\u6709\u7ebf\uff0c\u65e0\u7ebf\uff0cusb\u7f51\u5361\u90fd\u884c
\n\u7f51\u7ebf\u4e00\u6839
\n\u9700\u8981\u7684\u8f6f\u4ef6
\ndnsmasq or isc-dhcp-server
\noverture or DNScrypt
\nv2ray shadowsocks or shadowsocks-rss
\n\u7f51\u7edc\u62d3\u6251<\/p>\n
\u5f00\u59cb\u52a8\u624b
\n\u914d\u7f6e\u7f51\u5361
\n\u5148\u628a\u63d0\u4f9b\u672c\u673adhcp\u670d\u52a1\u7684\u7f51\u5361\u5730\u5740\u914d\u7f6e\u597d\uff0c\u7ed9\u81ea\u5df1\u8d4b\u4e88\u4e00\u4e2a\u9759\u6001\u5730\u5740<\/p>\n
sudo vim \/etc\/network\/interfaces
\n# \u52a0\u5165\u4ee5\u4e0b\u5185\u5bb9
\nauto lo
\niface lo inet loopback
\nauto eth0
\nallow-hotplug eth0
\niface eth0 inet dhcp
\nauto eth1
\nallow-hotplug eth1
\niface eth1 inet static
\naddress 192.168.20.1
\nnetwork 192.168.20.0
\nnetmask 255.255.255.0
\nbroadcast 192.168.20.255<\/p>\n
\u89e3\u91ca\u4e0beth0 \u548ceth1 \u662f\u6211\u7684\u6811\u8393\u6d3e\u4e0a\u4e24\u5f20\u7f51\u5361\uff0c\u8fd9\u4e2a\u7f51\u5361\u540d\u5b57\u4e0d\u4e00\u5b9a\u90fd\u662f\u8fd9\u79cd\uff0c\u6839\u636e\u81ea\u5df1\u7684\u7f51\u5361\u540d\u79f0\u8fdb\u884c\u4fee\u6539\uff0c\u8f93\u5165ifconfig \u6765\u67e5
\n\u770b
\neth0 \u662f\u8fde\u63a5\u4e0a\u7ea7\u8def\u7531\u7684\uff0c\u5b83\u7684\u7f51\u6bb5\u662f192.168.10.0 \uff0c\u6211\u76f4\u63a5\u8fde\u4e0a\u5c31\u80fd\u4e0a\u7f51\u4e86\uff0c\u628a\u8fd9\u5f20\u5361\u8bbe\u7f6edhcp \uff0c\u81ea\u52a8\u4ece\u4e0a\u7ea7\u8def\u7531\u83b7\u53d6ip\uff0c\u5982\u679c
\n\u662f\u65e0\u7ebf\u7f51\u5361\u4e00\u822c\u662fwlan0
\neth1 \u662f\u672c\u673a\u7528\u6765\u63d0\u4f9b\u8def\u7531\u670d\u52a1\u7684\uff0c\u8bbe\u7f6e\u81ea\u5df1\u7684\u7f51\u6bb5\uff0c\u5e76\u4e14\u8d4b\u4e88\u81ea\u5df1\u56fa\u5b9aip
\n\u914d\u7f6e dnsmasq
\n\u9996\u5148\u5b89\u88c5 dnsmasq \u6765\u63d0\u4f9b dhcp \u548c dns \u7f13\u5b58\u670d\u52a1
\n1 sudo apt-get install dnsmasq
\n\u5b89\u88c5\u5b8c\u6210\u540e\u67e5\u770b\u5b89\u88c5\u72b6\u6001
\n\u7f16\u8f91 dnsmasq \u914d\u7f6e\u6587\u4ef6<\/p>\n
# \u4e0d\u9700\u8981\u63d0\u4f9bdhcp\u670d\u52a1\u7684\u7f51\u5361\uff0c\u4e00\u822c\u662f\u8fde\u63a5\u5916\u7f51\u7684\u90a3\u5f20\u5361
\nno-dhcp-interface=eth0
\ndhcp-range=192.168.20.10,192.168.20.100,72h
\ncache-size=102400
\nlog-facility=\/var\/log\/dnsmasq\/dnsmasq.log
\n# \u6307\u5b9a\u8fd4\u56de\u7ed9\u5ba2\u6237\u7aef\u7684ttl\u65f6\u95f4\uff0c\u4e00\u822c\u4e0d\u9700\u8981\u8bbe\u7f6e
\nmax-ttl=28800
\n# \u672c\u5730 hosts \u6587\u4ef6\u7684\u7f13\u5b58\u65f6\u95f4\uff0c\u901a\u5e38\u4e0d\u8981\u6c42\u7f13\u5b58\u672c\u5730\uff0c\u8fd9\u6837\u66f4\u6539hosts\u6587\u4ef6\u540e\u5c31\u5373\u65f6\u751f\u6548\u3002
\nlocal-ttl=360
\n# \u5bf9\u4e8e\u4e0a\u6e38\u8fd4\u56de\u7684\u503c\u6ca1\u6709ttl\u65f6\uff0cdnsmasq\u7ed9\u4e00\u4e2a\u9ed8\u8ba4\u7684ttl\uff0c\u4e00\u822c\u4e0d\u9700\u8981\u8bbe\u7f6e
\nneg-ttl=28800
\n# \u8bbe\u7f6e\u5728\u7f13\u5b58\u4e2d\u7684\u6761\u76ee\u7684\u6700\u5927 TTL\u3002
\nmax-cache-ttl=28800
\n# \u8bbe\u7f6e\u5728\u7f13\u5b58\u4e2d\u7684\u6761\u76ee\u7684\u6700\u5c0f TTL\u3002
\nmin-cache-ttl=10800
\nconf-dir=\/etc\/dnsmasq.d\/
\n\u5982\u679c\u4f60\u662f\u4f7f\u7528\u4e86isc-dhcp-server \u8fd9\u79cd\u989d\u5916\u7684 dhcp \u670d\u52a1\u5668\uff0c\u90a3\u4e48\u5c31\u628a\u4e0a\u9762<\/p>\n
no-dhcp-interface=eth0
\ndhcp-range=192.168.20.10,192.168.20.100,72h
\n\u8fd9\u4e24\u53e5\u5220\u6389\u5427\uff0c\u5982\u679c\u4e0d\u8bbe\u5b9adhcp-range dnsmasq \u9ed8\u8ba4\u662f\u4e0d\u5f00\u542f dhcp \u7684\uff0c\u7136\u540e\u8fd9\u4e48\u914d\u7f6eisc-dhcp-server
\npi@raspberrypi:~ $ dnsmasq -v
\nDnsmasq version 2.76 Copyright (c) 2000-2016 Simon Kelley
\nCompile time options: IPv6 GNU-getopt DBus i18n IDN DHCP DHCPv6 no-Lua TFTP conntrack ipset auth DNSSEC loop-detect inotify<\/p>\n
sudo vim \/etc\/dhcp\/dhcpd.conf
\n# \u6dfb\u52a0\u4ee5\u4e0b\u5185\u5bb9
\nddns-update-style none;
\ndefault-lease-time 600;
\nmax-lease-time 7200;
\n# \u7f51\u6bb5
\nsubnet 192.168.20.0 netmask 255.255.255.0 {
\n# DHCP \u5206\u914dip\u8303\u56f4
\nrange 192.168.20.10 192.168.20.100;
\n# DHCP \u7ed9\u63a5\u5165\u8bbe\u5907\u5206\u914d\u7684\u7f51\u5173
\noption routers 192.168.20.1;
\noption subnet-mask 255.255.255.0;
\noption broadcast-address 192.168.20.255;
\n# \u5206\u914d\u7684DNS\u670d\u52a1\u5668
\noption domain-name-servers 192.168.20.1;
\n}
\n\u5efa\u8bae\u76f4\u63a5\u7528 dnsmasq \u597d\u4e86\uff0c\u5ffd\u7565\u4e0a\u9762\u4e24\u6761\u5185\u5bb9\u5373\u53ef
\n\u6dfb\u52a0 gfwlist
\ncd
\ngit clone https:\/\/github.com\/cokebar\/gfwlist2dnsmasq.git
\ncd gfwlist2dnsmasq
\nchmod a+x gfwlist2dnsmasq.sh
\n.\/gfwlist2dnsmasq -o gfwlist.conf -s gfwlist
\nsudo cp gfwlist.conf \/etc\/dnsmasq.d\/
\n\u5728gfwlist.conf \u4e2d\u90fd\u662f\u8fd9\u6837\u7684\u5b58\u5728
\nserver=\/030buy.com\/127.0.0.1#5300
\nipset=\/030buy.com\/gfwlist
\nserver=\/0rz.tw\/127.0.0.1#5300
\nipset=\/0rz.tw\/gfwlist
\n…
\n127.0.0.1#5300 \u4ee3\u8868\u5339\u914d\u7684\u57df\u540d\u901a\u8fc7\u8fd9\u4e2a\u670d\u52a1\u5668\u548c\u7aef\u53e3\u8fdb\u884c DNS \u89e3\u6790\uff0c\u800c\u8fd9\u4e2a\u7aef\u53e3\u662f\u591a\u5c11\u53d6\u51b3\u4e8e\u4e00\u4f1a\u4f60\u7684\u9632\u6c61\u67d3 DNS \u670d\u52a1\u5668\u5f00\u542f\u7684
\n\u7aef\u53e3\uff0c\u521a\u751f\u6210\u7684\u662f 5353 \u7aef\u53e3\uff0c\u6211\u7684\u56e0\u4e3a\u88ab\u5360\u7528\u4e86\uff0c\u67e5\u627e\u5e76\u66ff\u6362\u6539\u6210 5300<\/p>\n
# \u5f00\u542fdnsmasq
\nsudo service dnsmasq start
\n# \u8bbe\u7f6e\u5f00\u673a\u81ea\u542f\u52a8
\nsudo systemctl enable dnsmasq
\n\u914d\u7f6e\u8f6c\u53d1\u670d\u52a1
\nsudo vim \/etc\/sysctl.conf
\n# \u4fee\u6539\u4e00\u9879\uff0c\u628a\u524d\u9762\u6ce8\u91ca\u53f7#\u53bb\u6389\uff0c\u6216\u8005\u81ea\u5df1\u52a0
\nnet.ipv4.ip_forward = 1
\n# \u8ba9\u4e0a\u8ff0\u4fee\u6539\u7acb\u523b\u751f\u6548
\nsysctl -p
\niptables \u5f00\u542f\u7f51\u6bb5\u5b9a\u5411\u8f6c\u53d1
\nsudo iptables -t nat -A POSTROUTING -s 192.168.20.0\/24 -o eth0 -j MASQUERADE
\n# \u4e0a\u9762\u8fd9\u6761\u547d\u4ee4\u91cd\u542f\u5c31\u6ca1\u4e86\uff0c\u5199\u5165\u6587\u4ef6\u4e2d\u4fdd\u8bc1\u957f\u671f\u6709\u6548
\nsudo vim \/etc\/rc.local
\n# \u5728 exit0 \u524d\u52a0\u5165
\niptables -t nat -A POSTROUTING -s 192.168.20.0\/24 -o eth0 -j MASQUERADE
\nok\uff0c \u81f3\u6b64\uff0c\u4e00\u4e2a\u5177\u6709\u6b63\u5e38\u529f\u80fd\u7684\u666e\u901a\u8def\u7531\u5c31\u53ef\u4ee5\u4f7f\u7528\u4e86\uff0c\u8fde\u63a5\u7684\u8bbe\u5907\u4e5f\u662f\u53ef\u4ee5\u4e0a\u7f51\u7684\u4e86
\n\u914d\u7f6e\u65e0\u6c61\u67d3\u7684\u4e0a\u7ea7 DNS
\n\u5176\u5b9e\u591a\u6b64\u4e00\u4e3e\uff0cv2ray \u81ea\u5e26\u65e0\u6c61\u67d3dns\u670d\u52a1
\n\u5b89\u88c5 overture, \u53bb github \u4e0b\u8f7d release-binary, \u6211\u7684\u6811\u8393\u6d3e\u4e0b\u8f7d overture-linux-arm.zip
\n\u4fee\u6539\u914d\u7f6e\u6587\u4ef6 config.json
\n{
\n“BindAddress”: “:5300”,
\n“PrimaryDNS”: [
\n{
\n“Name”: “DNSPod”,
\n“Address”: “119.29.29.29:53”,
\n“Protocol”: “udp”,
\n“SOCKS5Address”: “”,
\n“Timeout”: 6,
\n“EDNSClientSubnet”: {
\n“Policy”: “disable”,
\n“ExternalIP”: “”
\n}
\n},
\n{
\n“Name”: “114”,
\n“Address”: “114.114.114.114:53”,
\n“Protocol”: “udp”,
\n“Timeout”: 6,
\n“EDNSClientSubnet”: {
\n“Policy”: “disable”,
\n“ExternalIP”: “”
\n}
\n}
\n],
\n“AlternativeDNS”: [
\n{
\n“Name”: “OpenDNS”,
\n“Address”: “208.67.222.222:443”,
\n“Protocol”: “tcp”,
\n“SOCKS5Address”: “”,
\n“Timeout”: 6,
\n“EDNSClientSubnet”: {
\n“Policy”: “disable”,
\n“ExternalIP”: “”
\n}
\n}
\n],
\n“OnlyPrimaryDNS”: false,
\n“RedirectIPv6Record”: true,
\n“IPNetworkFile”: “.\/ip_network_sample”,
\n“DomainFile”: “.\/domain_sample”,
\n“DomainBase64Decode”: true,
\n“HostsFile”: “.\/hosts_sample”,
\n“MinimumTTL”: 0,
\n“CacheSize” : 0,
\n“RejectQtype”: [255]
\n}
\n\u7136\u540e\u76f4\u63a5\u8fd0\u884c\u5c31\u884c .\/overture-linux-arm , \u8fd9\u6837\u4e0d\u80fd\u5173\u95ed\u8fd9\u6b21\u8fde\u63a5\u7684\u7ec8\u7aef\uff0c\u5426\u5219\u5c31\u5173\u95ed\u4e86\uff0c\u53ef\u4ee5\u9009\u62e9\u5f00\u4e00\u4e2a screen \u6765\u8fd0\u884c\uff0c\u6216
\n\u8005.\/overture-linux-arm &
\nDNSCrypt \u53ef\u4ee5\u4ee3\u66ff overture \u4e0d\u8fc7\u914d\u7f6e\u9ebb\u70e6\uff0c\u8bfb\u8005\u53ef\u4ee5\u81ea\u884c\u7814\u7a76\uff0c\u529f\u80fd\u66f4\u52a0\u5f3a\u5927\u7a33\u5b9a
\n\u914d\u7f6e v2ray
\n\u5148\u53bb\u5b89\u88c5 v2ray<\/p>\n
wget https:\/\/install.direct\/go.sh
\nsudo bash go.sh
\nsudo vim \/etc\/v2ray\/config.json
\n\u5ba2\u6237\u7aef\u914d\u7f6e\u51fa\u4e00\u4e2asocks5\u4ee3\u7406\u7aef\u53e3 8080 (\u4ee5\u5907\u4e0d\u65f6\u4e4b\u9700)\u3001\u4e00\u4e2a\u900f\u660e\u4ee3\u7406\u7aef\u53e3 1080
\n{
\n“log”: {
\n“access”: “\/var\/log\/v2ray\/access.log”,
\n“error”: “\/var\/log\/v2ray\/error.log”,
\n“loglevel”: “warning”
\n},
\n“inbound”: {
\n“port”: 8080,
\n“listen”: “192.168.20.1”,
\n“protocol”: “socks”,
\n“settings”: {
\n“auth”: “noauth”,
\n“udp”: false
\n}
\n},<\/p>\n
“inboundDetour”: [
\n{
\n“protocol”: “dokodemo-door”,
\n“port”:1080,
\n“settings”:{
\n“network”: “tcp,udp”,
\n“timeout”: 30,
\n“followRedirect”: true
\n}
\n},
\n{
\n“protocol”: “dokodemo-door”,
\n“port”:5300,
\n“settings”:{
\n“address”:”8.8.8.8″,
\n“port”:53,
\n“network”: “udp”,
\n“timeout”: 30,
\n“followRedirect”: false
\n}
\n}
\n],
\n“outbound”: {
\n“protocol”: “vmess”,
\n“settings”: {
\n“vnext”: [
\n{
\n“address”: “yourserver.com”,
\n“port”: 12345,
\n“users”: [
\n{
\n“id”: “1sb4165e-1234-4310-9d57-a8a2994r5e0d”,
\n“alterId”: 32,
\n“security”: “auto”
\n}
\n]
\n}
\n]
\n},
\n“streamSettings”:{
\n“network”:”kcp”,
\n“kcpSettings”: {
\n“mtu”: 1350,
\n“tti”: 20,
\n“uplinkCapacity”: 5,
\n“downlinkCapacity”: 100,
\n“congestion”: false,
\n“readBufferSize”: 1,
\n“writeBufferSize”: 1,
\n“header”: {
\n“type”: “none”
\n}
\n}
\n},
\n“mux”: {
\n“enabled”: true
\n}
\n},
\n“outboundDetour”: [
\n{
\n“protocol”: “freedom”,
\n“settings”: {},
\n“tag”: “direct”
\n}
\n],
\n“dns”: {
\n“servers”: [
\n“8.8.8.8”,
\n“localhost”
\n]
\n}
\n}
\niptables \u548c ipset \u8bbe\u7f6e
\nsudo apt-get install ipset
\nsudo ipset -N gfwlist iphash
\nsudo iptables -t nat -A PREROUTING -p tcp -m set –match-set gfwlist dst -j REDIRECT –to-port 1080
\nsudo iptables -t nat -A OUTPUT -p tcp -m set –match-set gfwlist dst -j REDIRECT –to-port 1080
\n# \u628a\u8def\u7531\u914d\u7f6e\u5199\u5165\u6587\u4ef6\u4e2d\uff0c\u957f\u4e45\u4fdd\u5b58
\nsudo vim \/etc\/rc.local
\n# \u5728exit0\u524d\u628a\u8fd9\u4e09\u53e5\u52a0\u4e0a
\nipset -N gfwlist iphash
\niptables -t nat -A PREROUTING -p tcp -m set –match-set gfwlist dst -j REDIRECT –to-port 1080
\niptables -t nat -A OUTPUT -p tcp -m set –match-set gfwlist dst -j REDIRECT –to-port 1080
\n\u5f00\u542f\u65e0\u9650\u5236\u7684\u4e16\u754c<\/p>\n
sudo service v2ray start
\n# \u628a v2ray \u8bbe\u7f6e\u4e3a\u5f00\u673a\u81ea\u542f\u52a8
\nsudo systemctl enable v2ray
\n\u6548\u679c\u5c55\u793a<\/p>\n
housirvipdeiMac:~ housirvip$ dig www.google.com
\n; <<>> DiG 9.8.3-P1 <<>> www.google.com
\n;; global options: +cmd
\n;; Got answer:
\n;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23438
\n;; ?ags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
\n;; QUESTION SECTION:
\n;www.google.com. IN A
\n;; ANSWER SECTION:
\nwww.google.com. 1978 IN A 172.217.26.36
\n;; Query time: 17 msec
\n;; SERVER: 192.168.20.1#53(192.168.20.1)
\n;; WHEN: Thu Aug 17 23:59:10 2017
\n;; MSG SIZE rcvd: 48
\n1\/12\/2018 \u5728\u6811\u8393\u6d3e\u4e0a\u642d\u5efa\u8f6f\u8def\u7531 | NiceSite
\nhttp:\/\/blog.nicesite.win\/2017\/08\/16\/soft-router\/ 11\/12
\n# linux # \u6811\u8393\u6d3e # \u8f6f\u8def\u7531<\/p>\n","protected":false},"excerpt":{"rendered":"