cwx/op-packages
1
0 Fork 0
mirror of https://github.com/kiddin9/op-packages.git synced 2026-11-02 04:03:56 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

🔥 Sync 2026-07-31 20:41:05

Browse Source
This commit is contained in:
github-actions[bot] committed 2026-07-31 20:41:05 +08:00
1 parent d1ded93052
commit 3692297595
20 files changed
+253 -86
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

luci-app-easytier/root/etc/init.d/easytier
+14 -11
View File
@@ -626,17 +626,20 @@ EOF
procd_set_param respawn
procd_close_instance
if [ ! -z "$socks_port" ] ; then
echo "$(date '+%Y-%m-%d %H:%M:%S') easytier : 添加防火墙规则 easytier_socks5 放行端口 ${socks_port} " >>/tmp/easytier.log
uci -q delete firewall.easytier_socks5
uci set firewall.easytier_socks5=rule
uci set firewall.easytier_socks5.name="easytier_socks5"
uci set firewall.easytier_socks5.target="ACCEPT"
uci set firewall.easytier_socks5.src="wan"
uci set firewall.easytier_socks5.proto="tcp"
uci set firewall.easytier_socks5.dest_port="$socks_port"
uci set firewall.easytier_socks5.enabled="1"
fi
# 不再自动放行 SOCKS5 端口到 WAN —— 无认证 SOCKS5 代理暴露给公网有严重安全风险
# 如需公网访问，请手动在 LuCI 防火墙页面添加规则
# 如需恢复自动放行，去掉下面各行行首的 # 即可
# if [ ! -z "$socks_port" ] ; then
# echo "$(date '+%Y-%m-%d %H:%M:%S') easytier : 添加防火墙规则 easytier_socks5 放行端口 ${socks_port} " >>/tmp/easytier.log
# uci -q delete firewall.easytier_socks5
# uci set firewall.easytier_socks5=rule
# uci set firewall.easytier_socks5.name="easytier_socks5"
# uci set firewall.easytier_socks5.target="ACCEPT"
# uci set firewall.easytier_socks5.src="wan"
# uci set firewall.easytier_socks5.proto="tcp"
# uci set firewall.easytier_socks5.dest_port="$socks_port"
# uci set firewall.easytier_socks5.enabled="1"
# fi
if [ "$listenermode" = "ON" ] || [ "$etcmd" = "web" ] ; then
if [ -z "$tcp_port" ] && [ -z "$ws_port" ] && [ -z "$wss_port" ] && [ -z "$wg_port" ] ; then
tcp_port="11010"
luci-app-easytier/root/usr/share/easytier/firewall.sh
+3 -1
View File
@@ -36,7 +36,9 @@ set_firewall_rules() {
[ -n "$wss_port" ] && add_firewall_rule "easytier_wss" "tcp" "$wss_port" "EasyTier WSS"
[ -n "$wg_port" ] && add_firewall_rule "easytier_wg" "udp" "$wg_port" "EasyTier WG"
[ -n "$quic_port" ] && add_firewall_rule "easytier_quic" "tcp udp" "$quic_port" "EasyTier QUIC"
[ -n "$socks_port" ] && add_firewall_rule "easytier_socks5" "tcp" "$socks_port" "EasyTier SOCKS5"
# 不再自动放行 SOCKS5 端口到 WAN —— 无认证 SOCKS5 代理暴露给公网有严重安全风险
# 如需恢复自动放行，去掉下面一行行首的 # 即可
# [ -n "$socks_port" ] && add_firewall_rule "easytier_socks5" "tcp" "$socks_port" "EasyTier SOCKS5"
}
# 设置网络接口