Files
op-packages/luci-app-shadowsocks-rust/luasrc/model/cbi/shadowsocks/access-control.lua
T

137 lines
4.1 KiB
Lua

-- Copyright (C) 2016-2017 Jian Chang <aa65535@live.com>
-- Licensed to the public under the GNU General Public License v3.
local m, s, o
local shadowsocks = "shadowsocks"
local uci = luci.model.uci.cursor()
local nwm = require("luci.model.network").init()
local gfwroute = luci.sys.call("command -v /etc/init.d/dnsmasq-extra >/dev/null") == 0
local chnroute = gfwroute and "/etc/chinadns_chnroute.txt" or uci:get_first("chinadns", "chinadns", "chnroute")
local lan_ifaces = {}
local io = require "io"
local function ipv4_hints(callback)
local hosts = {}
uci:foreach("dhcp", "dnsmasq", function(s)
if s.leasefile and nixio.fs.access(s.leasefile) then
for e in io.lines(s.leasefile) do
mac, ip, name = e:match("^%d+ (%S+) (%S+) (%S+)")
if mac and ip then
hosts[ip] = name ~= "*" and name or mac:upper()
end
end
end
end)
uci:foreach("dhcp", "host", function(s)
for mac in luci.util.imatch(s.mac) do
if s.ip then
hosts[s.ip] = s.name or mac:upper()
end
end
end)
for ip, name in pairs(hosts) do
callback(ip, name)
end
end
for _, net in ipairs(nwm:get_networks()) do
if net:name() ~= "loopback" and string.find(net:name(), "wan") ~= 1 then
net = nwm:get_network(net:name())
local device = net and net:get_interface()
if device then
lan_ifaces[device:name()] = device:get_i18n()
end
end
end
m = Map(shadowsocks, "%s - %s" %{translate("ShadowSocks"), translate("Access Control")})
-- [[ Zone WAN ]]--
s = m:section(TypedSection, "access_control", translate("Zone WAN"))
s.anonymous = true
o = s:option(Value, "wan_bp_list", translate("Bypassed IP List"))
o:value("/dev/null", translate("NULL - As Global Proxy"))
if gfwroute then o:value("/dev/flag_gfwlist", translate("Only Proxy GFW-List")) end
if chnroute then o:value(chnroute, translate("ChinaDNS CHNRoute")) end
-- o.datatype = "or(file, '/dev/null')"
o.default = "/dev/null"
o.rmempty = false
o = s:option(DynamicList, "wan_bp_ips", translate("Bypassed IP"))
o.datatype = "ip4addr"
o.rmempty = true
o = s:option(Value, "wan_fw_list", translate("Forwarded IP List"))
o.datatype = "or(file, '/dev/null')"
o.rmempty = true
o = s:option(DynamicList, "wan_fw_ips", translate("Forwarded IP"))
o.datatype = "ip4addr"
o.rmempty = true
-- [[ Zone LAN ]]--
s = m:section(TypedSection, "access_control", translate("Zone LAN"))
s.anonymous = true
o = s:option(MultiValue, "lan_ifaces", translate("Interface"))
function o.cfgvalue(...)
local v = MultiValue.cfgvalue(...)
if v then
return v
else
local names = {}
for name, _ in pairs(lan_ifaces) do
names[#names+1] = name
end
return table.concat(names, " ")
end
end
for name, i18n in pairs(lan_ifaces) do
o:value(name, i18n)
end
o = s:option(ListValue, "lan_target", translate("Proxy Type"))
o:value("SS_SPEC_WAN_AC", translate("Normal"))
o:value("RETURN", translate("Direct"))
o:value("SS_SPEC_WAN_FW", translate("Global"))
o.rmempty = false
o = s:option(ListValue, "self_proxy", translate("Self Proxy"))
o:value("1", translate("Normal"))
o:value("0", translate("Direct"))
o:value("2", translate("Global"))
o.rmempty = false
o = s:option(Value, "ipt_ext", translate("Extra arguments"),
translate("Passes additional arguments to iptables. Use with care!"))
o:value("", translate("None"))
o:value("--dport 22:1023", translatef("Proxy port numbers %s only", "22~1023"))
o:value("-m multiport --dport 22:1023,8000:8443", translatef("Proxy port numbers %s only", "22~1023,8000~8443"))
o:value("-m multiport --dports 53,80,443,853", translatef("Proxy port numbers %s only", "53,80,443,853"))
-- [[ LAN Hosts ]]--
s = m:section(TypedSection, "lan_hosts", translate("LAN Hosts"))
s.template = "cbi/tblsection"
s.addremove = true
s.anonymous = true
o = s:option(Value, "host", translate("Host"))
ipv4_hints(function(ip, name)
o:value(ip, "%s (%s)" %{ip, name})
end)
o.datatype = "ip4addr"
o.rmempty = false
o = s:option(ListValue, "type", translate("Proxy Type"))
o:value("b", translate("Direct"))
o:value("g", translate("Global"))
o:value("n", translate("Normal"))
o.rmempty = false
o = s:option(Flag, "enable", translate("Enable"))
o.default = "1"
o.rmempty = false
return m