API tools faq
paste
Advertisement
tzarc

OPR support

tzarc
May 25th, 2017
38
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.26 KB | None | 0 0
raw download clone embed print report
  1. openvpn-policy-routing 4.1.5-5 running on LEDE SNAPSHOT. WAN (IPv4): wan/121.211.64.1.
  2. ============================================================
  3. Dnsmasq version 2.77rc5 Copyright (c) 2000-2016 Simon Kelley
  4. Compile time options: IPv6 GNU-getopt no-DBus no-i18n no-IDN DHCP DHCPv6 no-Lua TFTP conntrack ipset auth DNSSEC no-ID loop-detect inotify
  5. ============================================================
  6. Routes/IP Rules
  7. default 10.3.10.5 128.0.0.0 UG 0 0 0 pia0
  8. default 121.211.64.1 0.0.0.0 UG 0 0 0 eth1
  9. 32758: from all fwmark 0x20000 lookup 201
  10. 32759: from all fwmark 0x10000 lookup 200
  11. table 200: default via 121.211.64.1 dev eth1
  12. table 201: default via 10.3.10.5 dev pia0
  13. ============================================================
  14. IP Tables
  15. OPR_CHAIN all -- anywhere anywhere [goto] mark match 0x0/0xff0000
  16. -N OPR_CHAIN
  17. -A OPR_CHAIN -p tcp -m multiport --dports 8621 -c 0 0 -j MARK --set-xmark 0x10000/0xff0000
  18. -A OPR_CHAIN -p tcp -m multiport --dports 6250 -c 0 0 -j MARK --set-xmark 0x10000/0xff0000
  19. -A OPR_CHAIN -p tcp -m multiport --dports 6112:6120 -c 0 0 -j MARK --set-xmark 0x10000/0xff0000
  20. -A OPR_CHAIN -p tcp -m multiport --dports 5060:5062 -c 0 0 -j MARK --set-xmark 0x10000/0xff0000
  21. -A OPR_CHAIN -p tcp -m multiport --dports 4000 -c 0 0 -j MARK --set-xmark 0x10000/0xff0000
  22. -A OPR_CHAIN -p tcp -m multiport --dports 3724 -c 0 0 -j MARK --set-xmark 0x10000/0xff0000
  23. -A OPR_CHAIN -p tcp -m multiport --dports 3478:3479 -c 0 0 -j MARK --set-xmark 0x10000/0xff0000
  24. -A OPR_CHAIN -p tcp -m multiport --dports 1119:1120 -c 6 394 -j MARK --set-xmark 0x10000/0xff0000
  25. -A OPR_CHAIN -d 202.59.96.140/32 -c 0 0 -j MARK --set-xmark 0x10000/0xff0000
  26. -A OPR_CHAIN -d 168.1.79.229/32 -c 0 0 -j MARK --set-xmark 0x10000/0xff0000
  27. -A OPR_CHAIN -d 54.252.183.5/32 -c 0 0 -j MARK --set-xmark 0x10000/0xff0000
  28. -A OPR_CHAIN -d 54.252.183.4/32 -c 0 0 -j MARK --set-xmark 0x10000/0xff0000
  29. -A OPR_CHAIN -d 210.10.208.62/32 -c 6 625 -j MARK --set-xmark 0x10000/0xff0000
  30. -A OPR_CHAIN -m set --match-set wanroute dst -c 3 313 -j MARK --set-xmark 0x10000/0xff0000
  31. -A OPR_CHAIN -m set --match-set pia0route dst -c 0 0 -j MARK --set-xmark 0x20000/0xff0000
  32. ============================================================
  33. IPv6 Tables
  34. OPR_CHAIN all anywhere anywhere [goto] mark match 0x0/0xff0000
  35. -N OPR_CHAIN
  36. ============================================================
  37. Domain-based routing settings
  38. dnsmasq.cfg02411c.ipset: /apple.com/wanroute
  39. dnsmasq.cfg02411c.ipset: /dropbox.com/dropbox-dns.com/wanroute
  40. dnsmasq.cfg02411c.ipset: /skype.com/s-msedge.net/wanroute
  41. dnsmasq.cfg02411c.ipset: /blizzard.com/battle.net/worldofwarcraft.com/wanroute
  42. dnsmasq.cfg02411c.ipset: /getflix.com.au/wanroute
  43. dnsmasq.cfg02411c.ipset: /netflix.com/nflxvideo.net/nflximg.net/wanroute
  44. ============================================================
  45. Current ipsets
  46. create wanroute hash:ip family inet hashsize 1024 maxelem 65536
  47. add wanroute 162.125.34.129
  48. create pia0route hash:ip family inet hashsize 1024 maxelem 65536
  49. create wanlist list:set size 8
  50. add wanlist wanroute
  51. create pia0list list:set size 8
  52. add pia0list pia0route
  53. ============================================================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!