|
|
|
|
4993
|
iptables -t nat -A PREROUTING -i $_int_if -d $_clearnet -j RETURN
|
4993
|
iptables -t nat -A PREROUTING -i $_int_if -d $_clearnet -j RETURN
|
4994
|
done
|
4994
|
done
|
4995
|
|
4995
|
|
4996
|
- #redirect all other pre-routing and output to Tor
|
|
|
|
|
4996
|
+ # Redirect all other pre-routing and output to Tor
|
4997
|
iptables -t nat -A OUTPUT -p tcp --syn -j REDIRECT --to-ports $_trans_port
|
4997
|
iptables -t nat -A OUTPUT -p tcp --syn -j REDIRECT --to-ports $_trans_port
|
4998
|
iptables -t nat -A PREROUTING -i $_int_if -p udp --dport 53 -j REDIRECT --to-ports 53
|
4998
|
iptables -t nat -A PREROUTING -i $_int_if -p udp --dport 53 -j REDIRECT --to-ports 53
|
4999
|
iptables -t nat -A PREROUTING -i $_int_if -p tcp --syn -j REDIRECT --to-ports $_trans_port
|
4999
|
iptables -t nat -A PREROUTING -i $_int_if -p tcp --syn -j REDIRECT --to-ports $_trans_port
|
|
|
|
|
5012
|
|
5012
|
|
5013
|
save_firewall_settings
|
5013
|
save_firewall_settings
|
5014
|
|
5014
|
|
|
|
5015
|
+ if ! grep -q "fs.file-max" /etc/sysctl.conf; then
|
|
|
5016
|
+ echo "fs.file-max=100000" >> /etc/sysctl.conf
|
|
|
5017
|
+ /sbin/sysctl -p
|
|
|
5018
|
+ fi
|
|
|
5019
|
+
|
5015
|
echo 'domain localdomain' > /etc/resolv.conf
|
5020
|
echo 'domain localdomain' > /etc/resolv.conf
|
5016
|
echo 'search localdomain' >> /etc/resolv.conf
|
5021
|
echo 'search localdomain' >> /etc/resolv.conf
|
5017
|
echo 'nameserver 127.0.0.1' >> /etc/resolv.conf
|
5022
|
echo 'nameserver 127.0.0.1' >> /etc/resolv.conf
|
5018
|
|
5023
|
|
5019
|
- sed -i 's|VirtualAddrNetworkIPv4*|VirtualAddrNetworkIPv4 10.192.0.0/10|g' /etc/tor/torrc
|
|
|
5020
|
if ! grep -q "VirtualAddrNetworkIPv4" /etc/tor/torrc; then
|
5024
|
if ! grep -q "VirtualAddrNetworkIPv4" /etc/tor/torrc; then
|
5021
|
echo 'VirtualAddrNetworkIPv4 10.192.0.0/10' >> /etc/tor/torrc
|
5025
|
echo 'VirtualAddrNetworkIPv4 10.192.0.0/10' >> /etc/tor/torrc
|
5022
|
fi
|
5026
|
fi
|
5023
|
|
5027
|
|
5024
|
- sed -i 's|AutomapHostsOnResolve*|AutomapHostsOnResolve 1|g' /etc/tor/torrc
|
|
|
5025
|
if ! grep -q "AutomapHostsOnResolve" /etc/tor/torrc; then
|
5028
|
if ! grep -q "AutomapHostsOnResolve" /etc/tor/torrc; then
|
5026
|
echo 'AutomapHostsOnResolve 1' >> /etc/tor/torrc
|
5029
|
echo 'AutomapHostsOnResolve 1' >> /etc/tor/torrc
|
5027
|
fi
|
5030
|
fi
|
5028
|
|
5031
|
|
5029
|
- sed -i 's|TransPort*|TransPort 9040|g' /etc/tor/torrc
|
|
|
5030
|
if ! grep -q "TransPort" /etc/tor/torrc; then
|
5032
|
if ! grep -q "TransPort" /etc/tor/torrc; then
|
5031
|
echo 'TransPort 9040' >> /etc/tor/torrc
|
5033
|
echo 'TransPort 9040' >> /etc/tor/torrc
|
5032
|
fi
|
5034
|
fi
|
|
|
|
|
5039
|
echo "TransListenAddress $LOCAL_NETWORK_STATIC_IP_ADDRESS" >> /etc/tor/torrc
|
5041
|
echo "TransListenAddress $LOCAL_NETWORK_STATIC_IP_ADDRESS" >> /etc/tor/torrc
|
5040
|
fi
|
5042
|
fi
|
5041
|
|
5043
|
|
5042
|
- sed -i 's|DNSPort*|DNSPort 53|g' /etc/tor/torrc
|
|
|
5043
|
if ! grep -q "DNSPort" /etc/tor/torrc; then
|
5044
|
if ! grep -q "DNSPort" /etc/tor/torrc; then
|
5044
|
echo 'DNSPort 53' >> /etc/tor/torrc
|
5045
|
echo 'DNSPort 53' >> /etc/tor/torrc
|
5045
|
fi
|
5046
|
fi
|