|
|
输入该命令后会出现以上图片提示您输入你自己SS相关配置(如果连以上的英文提示都看不懂，那就别配置此方案了，TAT)
|
|
输入 yes or no 来确认SS配置信息是否正确，如果输入y将继续进行下一步，输入n将终止命令重新开始配置SS
|
2.选择方案
|
以上图片是我选择GFWLIST方案的
|
如果选择CHNROUTES方案，所以输入了y,否则反之
|
3.配置防污染注意！这两种方案二选一
|
A.(推荐)开启UDP转发(请确认是否支持UDP转发):
|
B.不开启UDP转发:
|
|
如果选择B方案不开启UDP转发，所以输入n,否则反之
|
注意！如果命令运行的过程中出现错误，说明已经加载请不用担心:
|
insmod: can't insert '/lib/modules/2.6.22.19/kernel/net/ipv4/netfilter/ip_set.ko': File exists
|
以上步骤完成后基本可以浏览被Q的网站了，如果没有请您检查一下自己的配置是否正确
|
<<<<<<<<<<<<<<<<<<<<<<<<<<>><>>>>>>>>>>>>>>>>>>>>>>>>>>4.加入开机启动项加入自动启动init选项，Administration >> Scripts >> init选项写入/jffs/SS/SS run
|
加入自动启动init选项，Administration >> Scripts >> init选项写入/jffs/SS/SS ipset
|
注意！各个init选项的脚本顺序(必须按照次顺序)
|
|
|
|
mount -o bind /jffs/opt /opt
|
/jffs/SS/SS run
|
|
|
/jffs/SS/SS ipset
|
|
|
加入自动启动init选项，Administration >> Scripts >> Firewall选项写入/jffs/SS/SS rules
|
-------------------------------------挂载U盘加入开机启动项-------------------------------------加入自动启动 USB and NAS >> USB Support >> Run after mounting选项写入/tmp/mnt/sda1/SS/SS run
|
加入自动启动 USB and NAS >> USB Support >> Run after mounting选项写入/tmp/mnt/sda1/SS/SS ipset
|
注意！各个Run after mounting选项的脚本顺序(必须按照次顺序)
|
|
|
|
mount -o -bind /tmp/mnt/sda1/opt /opt
|
/tmp/mnt/sda1/SS/SS run
|
|
|
/tmp/mnt/sda1/SS/SS ipset
|
|
|
|
|
加入自动启动init选项，Administration >> Scripts >> Firewall选项写入/tmp/mnt/sda1/SS/SS rules
|
---------------------------------------------------------------------------------------------------5.加入计划任务定时更新chnroutes自己指定一个更新时间，这里就不作过多说明！
|
|
|
|
|
/jffs/SS/SS update_chnroutes
|
|
|
|
|
挂载U盘执行方式
|
|
|
|
/tmp/mnt/sda1/SS/SS update_chnroutes
|
|
|
|
|
6.重启7.配置守护ss-redir进程Administration >> Scheduler >> Custom 1-2 分别写入该计划任务命令
|
a.检测命令
|
|
|
/jffs/SS/SS check
|
|
|
挂载U盘执行方式
|
|
|
/tmp/mnt/sda1/SS/SS check
|
|
|
|
b.清理监控日志命令
|
|
|
|
echo "" > /var/log/SS_watchdog.log
|
echo "" > /var/log/chinadns_watchdog.log
|
|
|
|
|
|
|
(可选)加速Tomato路由器的DNS解析说明:此操作步骤有些复杂，没有些基础的，建议请您绕过，还有此教程只针对方案一！
|
1.下载安装pdnsd和配置pdnsd启动脚本
|
安装pdnsd按照里面所提供的文件夹路径复制到相应的文件夹
|
创建启动脚本
|
S26pdnsd
|
|
#!/bin/sh
|
|
DAEMON=/usr/sbin/pdnsd
|
PID_FILE=/var/run/$NAME.pid
|
CACHEDIR=/var/pdnsd
|
CACHE=$CACHEDIR/pdnsd.cache
|
|
if ! test -f "$CACHE"; then
|
mkdir -p `dirname $CACHE`
|
dd if=/dev/zero of="$CACHE" bs=1 count=4 2> /dev/null
|
chown -R $USER.$GROUP $CACHEDIR
|
touch /var/log/pdnsd.lock
|
fi
|
|
ENABLED=yes
|
PROCS=pdnsd
|
ARGS="-c /opt/etc/pdnsd.conf -p /var/run/pdnsd.pid"
|
PREARGS=""
|
DESC=$PROCS
|
PATH=/opt/sbin:/opt/bin:/opt/usr/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
|
|
. /opt/etc/init.d/rc.func
|
|
|
|
|
2. 修改ChinaDNS解析
|
|
|
|
ARGS=".......-s 114.114.114.114,208.67.222.222:443"
|
|
改成
|
|
|
|
ARGS=".......-s 114.114.114.114,127.0.0.1:1053
|
|
|
3. 配置pdnsd.conf
|
|
|
|
global {
|
perm_cache=2048;
|
cache_dir="/var/pdnsd";
|
# pid_file = /var/run/pdnsd.pid;
|
run_as="nobody";
|
server_port = 1053;
|
server_ip = 127.0.0.1; # Use eth0 here if you want to allow other
|
status_ctl = on;
|
# machines on your network to query pdnsd.
|
status_ctl = on;
|
# paranoid=on; # This option reduces the chance of cache poisoning
|
# but may make pdnsd less efficient, unfortunately.
|
query_method=tcp_only;
|
min_ttl=6h; # Retain cached entries at least 15 minutes.
|
max_ttl=1w; # One week.
|
timeout=10; # Global timeout option (10 seconds).
|
# neg_domain_pol=on;
|
# udpbufsize=1024; # Upper limit on the size of UDP messages.
|
}
|
|
# The following section is most appropriate if you have a fixed connection to
|
# the Internet and an ISP which provides good DNS servers.
|
server {
|
label= "google";
|
ip = 208.67.222.222,208.67.220.220; # Put your ISP's DNS-server address(es) here.
|
# port = 5353;
|
# proxy_only=on; # Do not query any name servers beside your ISP's.
|
# This may be necessary if you are behind some
|
# kind of firewall and cannot receive replies
|
# from outside name servers.
|
# timeout=4; # Server timeout; this may be much shorter
|
|
root_server = on; # that the global timeout option.
|
uptest= none; # Test if the network interface is active.
|
# interface=eth0; # The name of the interface to check.
|
# interval=10m; # Check every 10 minutes.
|
# purge_cache=off; # Keep stale cache entries in case the ISP's
|
# DNS servers go offline.
|
# edns_query=yes; # Use EDNS for outgoing queries to allow UDP messages
|
# larger than 512 bytes. May cause trouble with some
|
# legacy systems.
|
# exclude=.thepiratebay.org, # If your ISP censors certain names, you may
|
# .thepiratebay.se, # want to exclude them here, and provide an
|
# .piratebay.org, # alternative server section below that will
|
# .piratebay.se; # successfully resolve the names.
|
}
|
|
|
|
|
4. 修改dnsmasq的配置
|
|
5. 添加开机启动项
|
注意！各个init选项的脚本顺序(必须按照次顺序)
|
|
|
mount -o bind /jffs/opt /opt
|
/opt/etc/init.d/S26pdnsd start
|
/jffs/SS/SS run
|
/jffs/SS/SS ipset
|
|
|
|
6. 修改SS脚本
|
注释掉图示的几处:
|
|
|
7. 重启路由器
|
效果图:
|
|
方案二1.设置SS透明代理下载SS.zip
|
注意！解压缩该脚本放在/jffs/SS目录下(按照以上教程挂载U盘，应放在/tmp/mnt/sda1/SS)，然后执行该命令
|
|
|
|
chmod +x /jffs/SS/SS
|
|
|
/jffs/SS/SS set_up
|
|
|
|
挂载U盘执行方式
|
|
|
|
| chmod +x /tmp/mnt/sda1/SS/SS |
/1 
苏公网安备 32050502000499号
窥视卡
雷达卡
发表于 2015-11-12 14:45:39
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
千斤顶
显身卡
覆盖安装的文件文章下面会提供)
楼主