贴一个gfwlist2dnsmasq的Makefile，实现ss-libev更智能的分流

wuka***

可以编译到路由器里，方便运行
适用于LEDE及后续的OpenWrt-18.06

LDED的用户，请在DEPENDS:后面再添加上 +ca-bundle

1. include $(TOPDIR)/rules.mk
   
2. 
   
3. PKG_NAME:=gfwlist2dnsmasq
   
4. PKG_VERSION:=0.8.0
   
5. PKG_RELEASE:=1
   
6. PKG_REV:=d06d767ddbfefee14427ce183ec8b20afb957f5b
   
7. 
   
8. PKG_SOURCE_PROTO:=git
   
9. PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
   
10. PKG_SOURCE_SUBDIR:=$(PKG_NAME)-$(PKG_VERSION)
    
11. PKG_SOURCE_URL:=https://github.com/cokebar/gfwlist2dnsmasq.git
    
12. PKG_SOURCE_VERSION:=$(PKG_REV)
    
13. 
    
14. 
    
15. 
    
16. include $(INCLUDE_DIR)/package.mk
    
17. 
    
18. define Package/gfwlist2dnsmasq
    
19.         SECTION:=net
    
20.         CATEGORY:=Network
    
21.         TITLE:=gfwlist to dnsmasq
    
22.         URL:=https://github.com/cokebar/gfwlist2dnsmasq
    
23.         DEPENDS:=+coreutils +coreutils-base64 +curl +ca-certificates
    
24. endef
    
25. 
    
26. define Package/gfwlist2dnsmasq/description
    
27. 
    
28. endef
    
29. 
    
30. define Build/Compile
    
31. endef
    
32. 
    
33. define Package/gfwlist2dnsmasq/install
    
34.         $(INSTALL_DIR) $(1)/usr/bin
    
35.         $(INSTALL_DIR) $(1)/etc/dnsmasq.d
    
36.         $(INSTALL_BIN) $(PKG_BUILD_DIR)/gfwlist2dnsmasq.sh $(1)/usr/bin/gfwlist2dnsmasq.sh
    
37. endef
    
38. 
    
39. $(eval $(call BuildPackage,gfwlist2dnsmasq))

复制代码

使用方法：https://cokebar.info/archives/962 里面有提到一些。



下面我说一下我的方法：（适用于openwrt-18.06）


首先ssh进入路由器

1. cd /etc/dnsmasq.d

复制代码

运行 gfwlist2dnsmasq.sh
假设 ss-redir 端口为1100,ss-tunnel 端口(DNS)为1090,则命令为：

1. gfwlist2dnsmasq.sh -d 127.0.0.1 -p 1090 -s gfwlist -o /etc/dnsmasq.d/dnsmasq_gfwlist_ipset.conf

复制代码

修改/etc/firewall.user，在末尾添加如下内容：

1. #创建名为gfwlist，格式为iphash的集合
   
2. ipset -N gfwlist iphash
   
3. #匹配gfwlist中ip的nat流量均被转发到s-s端口
   
4. iptables -t nat -A PREROUTING -p tcp -m set --match-set gfwlist dst -j REDIRECT --to-port 1100
   
5. #匹配gfwlist中ip的本机流量均被转发到s-s端口
   
6. iptables -t nat -A OUTPUT -p tcp -m set --match-set gfwlist dst -j REDIRECT --to-port 1100

复制代码

配置dnsmasq

1. uci get dhcp.@dnsmasq[0].confdir

复制代码

如果返回值为 uci: Entry not found 或者其他非  /etc/dnsmasq.d 的值，则执行：

1. uci add_list dhcp.@dnsmasq[0].confdir=/etc/dnsmasq.d
   
2. uci commit dhcp

复制代码

修改/etc/sysupgrade.conf ，将/etc/dnsmasq.d/添加，以防刷新固件，/etc/dnsmasq.d/dnsmasq_gfwlist_ipset.conf文件丢失

1. ## This file contains files and directories that should
   
2. ## be preserved during an upgrade.
   
3. 
   
4. 
   
5. # /etc/example.conf
   
6. # /etc/openvirtual**/
   
7. /etc/dnsmasq.d/

复制代码

DHCP/DNS保持默认设置即可，不需要设置DNS转发及忽略解析文件
完成后，重启路由器即可。

zsh***

不需要添加 ca-bundle？

kok***

刚刚使用OPENWRT编译  make download V=s 时出错

wangw***

谢谢楼主~虽然不知道怎么用的。

wuka***

我再贴一个 openwrt-18.06 的 luci-app-s-s-libev 汉化。请下载附件里的汉化，帖子里的关键字被修改了。

1. msgid ""
   
2. msgstr ""
   
3. "Project-Id-Version: \n"
   
4. "POT-Creation-Date: \n"
   
5. "PO-Revision-Date: \n"
   
6. "Last-Translator: Kai Wu <wukaicore@gmail.com>\n"
   
7. "Language-Team: \n"
   
8. "MIME-Version: 1.0\n"
   
9. "Content-Type: text/plain; charset=UTF-8\n"
   
10. "Content-Transfer-Encoding: 8bit\n"
    
11. "X-Generator: Poedit 1.8.11\n"
    
12. "Language: zh_CN\n"
    
13. "X-Poedit-SourceCharset: UTF-8\n"
    
14. 
    
15. msgid "Remote server"
    
16. msgstr "远程服务器"
    
17. 
    
18. msgid "Local address"
    
19. msgstr "本地地址"
    
20. 
    
21. msgid "Local port"
    
22. msgstr "本地端口"
    
23. 
    
24. msgid "Server"
    
25. msgstr "服务器"
    
26. 
    
27. msgid "Server port"
    
28. msgstr "服务器端口"
    
29. 
    
30. msgid "Method"
    
31. msgstr "加密方式"
    
32. 
    
33. msgid "Key (base64 encoding)"
    
34. msgstr "密钥（base64编码）"
    
35. 
    
36. msgid "Password"
    
37. msgstr "密码"
    
38. 
    
39. msgid "Mode of operation"
    
40. msgstr "操作模式"
    
41. 
    
42. msgid "MTU"
    
43. msgstr "MTU"
    
44. 
    
45. msgid "Timeout (sec)"
    
46. msgstr "超时（秒）"
    
47. 
    
48. msgid "Run as"
    
49. msgstr "以什么身份运行"
    
50. 
    
51. msgid "Verbose"
    
52. msgstr "详细日志"
    
53. 
    
54. msgid "IPv6 First"
    
55. msgstr "IPv6 优先"
    
56. 
    
57. msgid "Prefer IPv6 addresses when resolving names"
    
58. msgstr "解析名称时优先使用 IPv6 地址"
    
59. 
    
60. msgid "Enable TCP Fast Open"
    
61. msgstr "启用 TCP 快速打开"
    
62. 
    
63. msgid "Enable TCP_NODELAY"
    
64. msgstr "启用 TCP 无延迟"
    
65. 
    
66. msgid "Enable SO_REUSEPORT"
    
67. msgstr "启用 SO 端口复用"
    
68. 
    
69. msgid "<hidden>"
    
70. msgstr "<隐藏>"
    
71. 
    
72. msgid "<unset>"
    
73. msgstr "<未设置>"
    
74. 
    
75. msgid "Package is not installed"
    
76. msgstr "软件包未安装"
    
77. 
    
78. msgid "Install package %q" % opkg_packag"
    
79. msgstr "安装软件包 %q" % opkg_packag"
    
80. 
    
81. msgid "General Settings"
    
82. msgstr "一般设置"
    
83. 
    
84. msgid "Advanced Settings"
    
85. msgstr "高级设置"
    
86. 
    
87. msgid "Disable"
    
88. msgstr "禁用"
    
89. 
    
90. msgid "Bind address"
    
91. msgstr "绑定地址"
    
92. 
    
93. msgid "The address ss-server will initiate connection from"
    
94. msgstr "地址 ss-server 将启动连接"
    
95. 
    
96. msgid ""
    
97. "Instances of s-s-libev components, e.g. ss-local, ss-redir, ss-"
    
98. "tunnel, ss-server, etc. To enable an instance it is required to enable both "
    
99. "the instance itself and the remote server it refers to."
    
100. msgstr ""
     
101. "s-s-libev 组件的实例，例如 ss-local，ss-redir，ss-tunnel，ss-server "
     
102. "等。要启用实例，需要启用实例本身和它所引用的远程服务器。"
     
103. 
     
104. msgid "Tunnel address"
     
105. msgstr "隧道地址"
     
106. 
     
107. msgid "The address ss-tunnel will forward traffic to"
     
108. msgstr "地址 ss-tunnel 将转发流量"
     
109. 
     
110. msgid "Local Instances"
     
111. msgstr "本地实例"
     
112. 
     
113. msgid "Name"
     
114. msgstr "名称"
     
115. 
     
116. msgid "Overview"
     
117. msgstr "概况"
     
118. 
     
119. msgid "Running"
     
120. msgstr "运行中"
     
121. 
     
122. msgid "Enable/Disable"
     
123. msgstr "启用/禁用"
     
124. 
     
125. msgid "Disabled"
     
126. msgstr "已禁用"
     
127. 
     
128. msgid "Enabled"
     
129. msgstr "已启用"
     
130. 
     
131. msgid "Redir Rules"
     
132. msgstr "运行规则"
     
133. 
     
134. msgid ""
     
135. "On this page you can configure how traffics are to be forwarded to ss-redir "
     
136. "instances. If enabled, packets will first have their src ip addresses checked "
     
137. "against <em>Src ip/net bypass</em>, <em>Src ip/net forward</em>, <em>Src ip/"
     
138. "net checkdst</em> and if none matches <em>Src default</em> will give the "
     
139. "default action to be taken. If the prior check results in action "
     
140. "<em>checkdst</em>, packets will continue to have their dst addresses checked."
     
141. msgstr ""
     
142. "在此页面上，您可以配置如何将流量转发到 ss-redir 实例。 如果启用，数据包首先会"
     
143. "根据 <em>源 ip/net 旁路</em>，<em>源 ip/net 转发</em>，<em>源 ip/net checkdst"
     
144. "</em>，如果没有匹配 <em>缺省源</em>会给出默认的操作。 如果先前的检查导致 <em>"
     
145. "checkdst</em>动作，数据包将继续检查其目标地址。"
     
146. 
     
147. msgid "Source Settings"
     
148. msgstr "源设置"
     
149. 
     
150. msgid "Destination Settings"
     
151. msgstr "目标设置"
     
152. 
     
153. msgid "ss-redir for TCP"
     
154. msgstr "ss-redir 用于 TCP"
     
155. 
     
156. msgid "ss-redir for UDP"
     
157. msgstr "ss-redir 用于 UDP"
     
158. 
     
159. msgid "Local-out default"
     
160. msgstr "本地输出默认值"
     
161. 
     
162. msgid "Default action for locally generated TCP packets"
     
163. msgstr "本地生成的 TCP 数据包的默认操作"
     
164. 
     
165. msgid "Ingress interfaces"
     
166. msgstr "进入接口"
     
167. 
     
168. msgid "Only apply rules on packets from these network interfaces"
     
169. msgstr "仅对来自这些网络接口的数据包应用规则"
     
170. 
     
171. msgid "Extra arguments"
     
172. msgstr "额外参数"
     
173. 
     
174. msgid "Passes additional arguments to iptables. Use with care!"
     
175. msgstr "传递到 iptables 的额外参数。小心使用！"
     
176. 
     
177. msgid "Src ip/net bypass"
     
178. msgstr "源 ip/net 旁路"
     
179. 
     
180. msgid "Bypass ss-redir for packets with src address in this list"
     
181. msgstr "在此列表中绕过具有源地址的数据包的 ss-redir"
     
182. 
     
183. msgid "Src ip/net forward"
     
184. msgstr "源 ip/net 转发"
     
185. 
     
186. msgid "Forward through ss-redir for packets with src address in this list"
     
187. msgstr "通过 ss-redir 转发此列表中带有源地址的数据包"
     
188. 
     
189. msgid "Src ip/net checkdst"
     
190. msgstr "源 ip/net checkdst"
     
191. 
     
192. msgid ""
     
193. "Continue to have dst address checked for packets with src address in this list"
     
194. msgstr "继续在此列表中检查具有源地址的数据包的目标地址"
     
195. 
     
196. msgid "Src default"
     
197. msgstr "缺省源"
     
198. 
     
199. msgid ""
     
200. "Default action for packets whose src address do not match any of the src ip/"
     
201. "net list"
     
202. msgstr "源地址不匹配任何 源 ip/net 列表 的数据包的默认操作"
     
203. 
     
204. msgid "Dst ip/net bypass"
     
205. msgstr "目标 ip/net 旁路"
     
206. 
     
207. msgid "Bypass ss-redir for packets with dst address in this list"
     
208. msgstr "对于列表中具有目标地址的数据包，绕过 ss-redir"
     
209. 
     
210. msgid "Dst ip/net forward"
     
211. msgstr "目标 ip/net 转发"
     
212. 
     
213. msgid "Forward through ss-redir for packets with dst address in this list"
     
214. msgstr "通过 ss-redir 转发此列表中具有目标地址的数据包"
     
215. 
     
216. msgid "Dst ip/net bypass file"
     
217. msgstr "目标 ip/net 旁路文件"
     
218. 
     
219. msgid ""
     
220. "File containing ip/net for the purposes as with <em>Dst ip/net bypass</em>"
     
221. msgstr "包含 ip/net 的文件与<em>目标 ip/net 旁路</em>的用途相同"
     
222. 
     
223. msgid "Dst ip/net forward file"
     
224. msgstr "目标 ip/net 转发文件"
     
225. 
     
226. msgid ""
     
227. "File containing ip/net for the purposes as with <em>Dst ip/net forward</em>"
     
228. msgstr "包含 ip/net 的文件与<em>目标 ip/net 转发</em>的用途相同"
     
229. 
     
230. msgid "Dst default"
     
231. msgstr "缺省目的"
     
232. 
     
233. msgid ""
     
234. "Default action for packets whose dst address do not match any of the dst ip "
     
235. "list"
     
236. msgstr "目标地址不匹配任何 目标 ip 列表 的数据包的默认操作"
     
237. 
     
238. msgid "Install package iptables-mod-conntrack-extra"
     
239. msgstr "安装软件包 iptables-mod-conntrack-extra"
     
240. 
     
241. msgid "Forward recentrst"
     
242. msgstr "转发 recentrst"
     
243. 
     
244. msgid ""
     
245. "Forward those packets whose dst have recently sent to us multiple tcp-rst"
     
246. msgstr "转发目标最近发送给我们多个 tcp-rst 的数据包"
     
247. 
     
248. msgid "Remote Servers"
     
249. msgstr "远程服务器"
     
250. 
     
251. msgid ""
     
252. "Definition of remote s-s servers. Disable any of them will also "
     
253. "disable instances refering to it."
     
254. msgstr ""
     
255. "远程 s-s 服务器的定义。禁用它们中的任何一个都会禁用引用它的实例。"

复制代码

wuka***

zshwq5 发表于 2018-6-13 19:04
不需要添加 ca-bundle？

谢谢提醒，我刚刚在说明里附上说明了。

ssg***

顶，这个高级！

mxw***

老哥这个不好吧！参考了飞羽的教材也要说一下出处

suf***

这个好，要好好学习一下。。