朽木

cd ~/openwrt/trunk/package
git clone https://github.com/madeye/shadowsocks-libev.git
git clone https://github.com/prochip/mybox.git
svn co svn://svn.openwrt.org/openwrt/branches/packages_14.07/net/multiwan
svn co svn://svn.openwrt.org/openwrt/branches/packages_14.07/net/pdnsd

config uhttpd 'main'
	list listen_http '0.0.0.0:10'
	list listen_http '[::]:10'
	#list listen_https '0.0.0.0:443'
	#list listen_https '[::]:443'
	option home '/www'
	option rfc1918_filter '1'
	option max_requests '3'
	option max_connections '100'
	option cert '/etc/uhttpd.crt'
	option key '/etc/uhttpd.key'
	option cgi_prefix '/cgi-bin'
	option script_timeout '60'
	option network_timeout '30'
	option http_keepalive '20'
	option tcp_keepalive '1'
	option ubus_prefix '/ubus'
 
config cert 'px5g'
	option days '730'
	option bits '1024'
	option country 'DE'
	option state 'Berlin'
	option location 'Berlin'
	option commonname 'OpenWrt'

config global
	option anon_swap '0'
	option anon_mount '0'
	option auto_swap '1'
	option auto_mount '1'
	option delay_root '5'
	option check_fs '0'
 
config mount
	option uuid '7bdb-42fd'
	option target '/mnt/sd'
	option fstype 'ext4'
	option enabled '1'

# Put your custom commands here that should be executed once
# the system init finished. By default this file does nothing.
 
ip link add link eth0.2 name vth1 type macvlan
ifconfig vth1 hw ether 00:18:F8:B5:E5:5E
ifconfig vth1 up
 
ip link add link eth0.2 name vth2 type macvlan
ifconfig vth2 hw ether 00:01:6C:06:A6:29
ifconfig vth2 up
 
sleep 5
/etc/init.d/multiwan restart
 
exit 0

global {
	# debug = on;
	perm_cache=1024;
	cache_dir="/var/pdnsd";
	run_as="nobody";
	server_port = 10053;
	server_ip = 127.0.0.1;
	status_ctl = on;
	query_method=tcp_only; 
	min_ttl=15m;
	max_ttl=1w;
	timeout=10;
}
 
server {
	label= "GooglePublicDNS";
	ip = "8.8.4.4";
	root_server = on;
	uptest = none;
}
 
source {
	owner=localhost;
#	serve_aliases=on;
	file="/etc/hosts";
}
 
rr {
	name=localhost;
	reverse=on;
	a=127.0.0.1;
	owner=localhost;
	soa=localhost,root.localhost,42,86400,900,86400,86400;
}

config interface 'henet'
	option proto '6in4'
	option username '用户名'
	option peeraddr '服务器IP'
	option ip6addr '2/64结尾的那串IP'
	option ip6prefix '::/64结尾的那串IP'
	option tunnelid '你的ID'
	option password '更新的KEY'
	option dns '路由的本地ipv6地址'

config interface 'wan'
	option ifname 'eth0.2'
	option proto 'pppoe'
	option username '运营商提供的宽带账号'
	option password '密码'
	option peerdns '1'
 
config interface 'wan2'
	option ifname 'vth1'
	option macaddr '00:18:F8:B5:E5:5E'
	option proto 'pppoe'
	option username '运营商提供的宽带账号'
	option password '密码'
	option peerdns '0'

config multiwan 'config'
	option enabled '1'
	option default_route 'balancer'
 
config interface 'wan'
	option health_interval '10'
	option timeout '3'
	option health_fail_retries '3'
	option health_recovery_retries '5'
	option failover_to 'wan2'
	option dns 'auto'
	option weight '5'
	option icmp_hosts 'www.baidu.com'
 
config interface 'wan2'
	option health_interval '10'
	option timeout '3'
	option health_fail_retries '3'
	option health_recovery_retries '5'
	option failover_to 'balancer'
	option dns 'auto'
	option weight '5'
	option icmp_hosts 'www.baidu.com'

{
  "server":"222.222.222.222",
  "server_port":8080,
  "password":"1111",
  "timeout":600,
  "method":"rc4-md5",
  "fast_open":false,
  "fast_open": true,
  "workers": 1
}

#!/bin/sh /etc/rc.common
# Copyright (C) 2006-2011 OpenWrt.org
 
START=95
 
SERVICE_USE_PID=1
SERVICE_WRITE_PID=1
SERVICE_DAEMONIZE=1
 
start() {
    service_start /usr/bin/ss-local -c /etc/shadowsocks.d/shadowsocks.json -l "8888" --fast-open
    service_start /usr/bin/ss-redir -c /etc/shadowsocks.d/shadowsocks.json -l "10080"
}
 
stop() {
    service_stop /usr/bin/ss-local
    service_stop /usr/bin/ss-redir
}

conf-dir=/etc/dnsmasq.d

#Facebook
server=/.facebook.com/.facebook.net/.fbcdn.net/.thefacebook.com/.akamaihd.net/127.0.0.1#10053
ipset=/.facebook.com/.facebook.net/.fbcdn.net/.thefacebook.com/fbcdn-profile-a.akamaihd.net/fbcdn-sphotos-a.akamaihd.net/outwall
 
#Twitter
server=/.twitter.com/.twitter4j.org/.twittercounter.com/.twitterfeed.com/.twittergadget.com/.twitterkr.com/.twittermail.com/.twittertim.es/.t.co/.twimg.com/.tinypic.com/.yfrog.com/.bitly.com/.mobilepicture.com/127.0.0.1#10053
ipset=/.twitter.com/.twitter4j.org/.twittercounter.com/.twitterfeed.com/.twittergadget.com/.twitterkr.com/.twittermail.com/.twittertim.es/.t.co/.twimg.com/.tinypic.com/.yfrog.com/.bitly.com/api.mobilepicture.com/outwall

ipset -N outwall iphash
iptables -t nat -A PREROUTING -p tcp -m set --match-set outwall dst -j REDIRECT --to-port 10080

#ADblock
bogus-nxdomain=218.30.64.194
#Taobao
address=/s8.taobao.com/127.0.0.1
address=/s.click.taobao.com/127.0.0.1
#Baidu
address=/pos.baidu.com/127.0.0.1
address=/cpro.baidustatic.com/127.0.0.1
address=/cpro.baidu.com/127.0.0.1
address=/cb.baidu.com/127.0.0.1
address=/cbjs.baidu.com/127.0.0.1
address=/drmcmm.baidu.com/127.0.0.1
address=/duiwai.baidu.com/127.0.0.1
address=/eiv.baidu.com/127.0.0.1
address=/spcode.baidu.com/127.0.0.1
address=/baidutv.baidu.com/127.0.0.1
address=/bar.baidu.com/127.0.0.1
#popup
address=/100tjs.com/127.0.0.1
address=/114zhaofang.com/127.0.0.1
address=/116b.com/127.0.0.1
address=/234y.com/127.0.0.1
address=/arpg2.com/127.0.0.1
address=/game3896.com/127.0.0.1
address=/gelo.tw/127.0.0.1
address=/resmkt.dipan.com/127.0.0.1
address=/web.7k7k.com/127.0.0.1
address=/xp3366.com/127.0.0.1
address=/xp9365.com/127.0.0.1
#Union
address=/.allyes.com/127.0.0.1
address=/.cnxad.com/127.0.0.1
address=/.cnxad.net/127.0.0.1
address=/.unionsky.cn/127.0.0.1
address=/.unionsky2.cn/127.0.0.1
address=/.keyrun.cn/127.0.0.1
address=/.keytui.com/127.0.0.1
address=/.100fenlm.cn/127.0.0.1
address=/.chanet.com.cn/127.0.0.1
address=/.doubleclick.net/127.0.0.1
address=/p.tanx.com/127.0.0.1
#Other
address=/atm.youku.com/127.0.0.1
address=/hudong.pl.youku.com/127.0.0.1

server{
    listen 80;
    location / {
        root   /mnt/sd/www/;
        index  index.html index.htm;
    }
}

#!/bin/sh /etc/rc.common
# Copyright (C) 2016 XiuMu.org
START=90
 
boot() {
	return 0
}
 
start() {
	/usr/sbin/vlmcsd -p /var/run/kms.pid -l syslog -L 0.0.0.0 -P 1688
}
 
stop() {
	kill -9 `cat /var/run/kms.pid`
}

/etc/init.d/kms enable
/etc/init.d/kms start