🌴 Sync 2026-03-05 23:51:42

luci-app-jederproxy/root/lib/functions/jederproxy.fw3.sh

@@ -0,0 +1,29 @@
+FIREWALL_INCLUDE="/usr/share/jederproxy/firewall_include.lua"
+
+log() {
+    logger -st jederproxy[$$] -p4 "$@"
+}
+
+setup_firewall() {
+    log "Setting ipset rules..."
+    lua /usr/share/jederproxy/gen_ipset_rules.lua | ipset -! restore
+
+    log "Generating firewall rules..."
+    /usr/bin/lua ${FIREWALL_INCLUDE} enable > $(uci get firewall.xray.path)
+
+    log "Triggering firewall restart..."
+    /etc/init.d/firewall reload 2>/dev/null
+}
+
+flush_firewall() {
+    log "Flushing firewall rules..."
+    /usr/bin/lua ${FIREWALL_INCLUDE} flush > $(uci get firewall.xray.path)
+
+    log "Triggering firewall restart..."
+    /etc/init.d/firewall reload 2>/dev/null
+
+    log "Flushing ipset rules..."
+    for setname in $(ipset -n list | grep "tp_spec"); do
+        ipset -! destroy $setname
+    done
+}

luci-app-jederproxy/root/lib/functions/jederproxy.fw4.sh

@@ -0,0 +1,27 @@
+FIREWALL_INCLUDE="/usr/share/jederproxy/firewall_include.ut"
+
+log() {
+    logger -st jederproxy[$$] -p4 "$@"
+}
+
+setup_firewall() {
+    ip route add local default dev lo table 100
+    ip rule  add fwmark 0x2333        table 100
+
+    log "Generating firewall4 rules..."
+    /usr/bin/utpl ${FIREWALL_INCLUDE} > /var/etc/jederproxy/firewall_include.nft
+
+    log "Triggering firewall4 reload..."
+    /etc/init.d/firewall reload 2>/dev/null
+}
+
+flush_firewall() {
+    ip rule  del   table 100
+    ip route flush table 100
+
+    log "Flushing firewall4 rules..."
+    rm /var/etc/jederproxy/firewall_include.nft 2>/dev/null || log ".. but fw4 rule file not exists"
+
+    log "Triggering firewall4 reload..."
+    /etc/init.d/firewall reload 2>/dev/null
+}