shadowsocks

iptables-rules

@@ -4,6 +4,7 @@
 -A PREROUTING -i ${RAILGUN_INTERFACE} -p tcp -m addrtype --dst-type LOCAL -m set --match-set ports1 dst -j REDIRECT --to-ports 3128
 -A PREROUTING -i ${RAILGUN_INTERFACE} -p tcp -m addrtype --dst-type LOCAL -m set --match-set ports2 dst -j REDIRECT --to-ports 3129
 -A PREROUTING -i ${RAILGUN_INTERFACE} -p tcp -m addrtype --dst-type LOCAL -m set --match-set ports3 dst -j REDIRECT --to-ports 1080
+-A PREROUTING -i ${RAILGUN_INTERFACE} -p tcp -m addrtype --dst-type LOCAL -m set --match-set ports4 dst -j REDIRECT --to-ports 1081
 -A PREROUTING -i ${RAILGUN_INTERFACE} -p tcp -m addrtype --dst-type LOCAL -j REDIRECT --to-ports 3100
 # socks5 dns hack
 -A OUTPUT -o ${RAILGUN_INTERFACE} -p udp --dport 53 -m owner --uid-owner proxy -j REDIRECT --to-ports 53

start.sh

@@ -11,6 +11,7 @@ echo 'ipset...'
 ipset create -exist ports1 bitmap:port range 10000-32767
 ipset create -exist ports2 bitmap:port range 10000-32767
 ipset create -exist ports3 bitmap:port range 10000-32767
+ipset create -exist ports4 bitmap:port range 10000-32767
 ipset create -exist block_ip hash:ip
 
 echo 'iptables...'