(轉)redsocks2 自動代理設定
阿新 • • 發佈：2018-12-18
https://cloud.tencent.com/info/497d16afc72e0416ec60f377fd7fa246.html
redsock2 可以把一些不支援透明代理的代理伺服器重定向一下，這樣可以實現透明代理了
redsock2安裝很簡單直接make就可以了，
ubuntu需要
apt-get intsll libevent-2.0-5 libssl-dev安裝完成後，直接把 redsocks2 複製到相關目錄即可。
我這用它做閘道器， 然後測試了一下，http 和 https 不能一起走，要分開
redsocks2 配置檔案：
base { log_debug = off; log_info = off; daemon = on; redirector= iptables; } redsocks { local_ip = 192.168.1.1; local_port = 1080; ip = 192.168.1.1; port = 8787; type = http-relay; timeout = 12; autoproxy = 1; } redsocks { local_ip = 192.168.1.1; local_port = 1081; ip = 192.168.1.1; port = 8787; type = http-connect; timeout = 12; autoproxy = 1; } redsocks { local_ip = 192.168.1.1; local_port = 1090; interface = eth0; type = direct; #主要用來解決NAT問題，讓WAN可以訪問到LAN timeout = 1; autoproxy = 0; } autoproxy { no_quick_check_seconds = 300; quick_connect_timeout = 2; } ipcache { cache_size = 4; cache_file = "/home/user/conf/cache.ip"; stale_time = 7200; autosave_interval = 3600; port_check = 1; }
相關iptables 設定
#!/bin/bash iptables-restore</etc/network/iptables.up.rules iptables -t nat -N RSHTTPS iptables -t nat -A RSHTTPS -o lo -j RETURN iptables -t nat -A RSHTTPS -d 0.0.0.0/8 -j RETURN iptables -t nat -A RSHTTPS -d 10.0.0.0/8 -j RETURN iptables -t nat -A RSHTTPS -d 127.0.0.0/8 -j RETURN iptables -t nat -A RSHTTPS -d 169.254.0.0/16 -j RETURN iptables -t nat -A RSHTTPS -d 172.16.0.0/12 -j RETURN iptables -t nat -A RSHTTPS -d 172.17.0.0/12 -j RETURN iptables -t nat -A RSHTTPS -d 192.168.0.0/16 -j RETURN iptables -t nat -A RSHTTPS -d 224.0.0.0/4 -j RETURN iptables -t nat -A RSHTTPS -d 240.0.0.0/4 -j RETURN iptables -t nat -A RSHTTPS -p tcp -j REDIRECT --to-port 1081 iptables -t nat -I PREROUTING -p tcp --dport 443 -j RSHTTPS iptables -t nat -N RSHTTP iptables -t nat -A RSHTTP -o lo -j RETURN iptables -t nat -A RSHTTP -d 0.0.0.0/8 -j RETURN iptables -t nat -A RSHTTP -d 10.0.0.0/8 -j RETURN iptables -t nat -A RSHTTP -d 127.0.0.0/8 -j RETURN iptables -t nat -A RSHTTP -d 169.254.0.0/16 -j RETURN iptables -t nat -A RSHTTP -d 172.16.0.0/12 -j RETURN iptables -t nat -A RSHTTP -d 172.17.0.0/12 -j RETURN iptables -t nat -A RSHTTP -d 192.168.0.0/16 -j RETURN iptables -t nat -A RSHTTP -d 224.0.0.0/4 -j RETURN iptables -t nat -A RSHTTP -d 240.0.0.0/4 -j RETURN iptables -t nat -A RSHTTP -p tcp -j REDIRECT --to-port 1080 iptables -t nat -I PREROUTING -p tcp --dport 80 -j RSHTTP iptables -t nat -N RSDIRECT iptables -t nat -A RSDIRECT -p tcp -j REDIRECT --to-port 1090 iptables -t nat -I PREROUTING -p tcp -d 208.67.220.220 -j RSDIRECT #不加下面這條，沒辦法WAN網連線進來 iptables -t nat -I PREROUTING -p tcp -s 192.168.1.2 --sport 3389 -j RSDIRECT pkill redsocks2 redsocks2 -c /home/tool/conf/red.conf
還有另一個叫 cow 的軟體也可以實現類似效果。功能上更加強點。