1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
|
diff --git a/scripts/99-clash.rules b/scripts/99-clash.rules
index a73d507..9d77338 100644
--- a/scripts/99-clash.rules
+++ b/scripts/99-clash.rules
@@ -1,2 +1,2 @@
-SUBSYSTEM=="net",ENV{INTERFACE}=="utun",ACTION=="add",RUN+="/usr/lib/clash/setup-tun.sh"
-SUBSYSTEM=="net",ENV{INTERFACE}=="utun",ACTION=="remove",RUN+="/usr/lib/clash/clean-tun.sh"
+SUBSYSTEM=="net",ENV{INTERFACE}=="utun",ACTION=="add",RUN+="/usr/share/clash/setup-tun.sh"
+SUBSYSTEM=="net",ENV{INTERFACE}=="utun",ACTION=="remove",RUN+="/usr/share/clash/clean-tun.sh"
diff --git a/scripts/bypass-proxy b/scripts/bypass-proxy
index 606c4f1..cab10be 100755
--- a/scripts/bypass-proxy
+++ b/scripts/bypass-proxy
@@ -1,5 +1,5 @@
#!/bin/bash
-bypass-proxy-pid $$ 2>&1 > /dev/null
+/usr/share/clash/bypass-proxy-pid $$ 2>&1 > /dev/null
exec "$@"
diff --git a/scripts/clash-default b/scripts/clash-default
index 7bc4ca8..4f4f6a6 100644
--- a/scripts/clash-default
+++ b/scripts/clash-default
@@ -10,5 +10,7 @@ NETFILTER_MARK=114514
IPROUTE2_TABLE_ID=114
# dns redirect
-FORWARD_DNS_REDIRECT=1.0.0.1:53
+FORWARD_DNS_REDIRECT=198.18.0.2:53
+# local subnet
+LOCAL_SUBNET="{127.0.0.0/8, 224.0.0.0/4, 192.168.0.0/16, 10.0.0.0/8, 172.16.0.0/12}"
diff --git a/scripts/clash.service b/scripts/clash.service
index 18fa5fc..e333382 100644
--- a/scripts/clash.service
+++ b/scripts/clash.service
@@ -1,12 +1,12 @@
[Unit]
Description=A rule based proxy tunnel
-After=network-online.target nftables.service iptabels.service
+After=network-online.target nftables.service
[Service]
Type=simple
LimitNOFILE=65535
-ExecStartPre=/usr/lib/clash/setup-cgroup.sh
-ExecStart=/usr/bin/bypass-proxy /usr/bin/clash -d /srv/clash
+ExecStartPre=+/usr/share/clash/setup-cgroup.sh
+ExecStart=/usr/share/clash/bypass-proxy /usr/bin/clash -d /etc/clash
[Install]
WantedBy=multi-user.target
diff --git a/scripts/setup-tun.sh b/scripts/setup-tun.sh
index 2c1a601..5587a1e 100755
--- a/scripts/setup-tun.sh
+++ b/scripts/setup-tun.sh
@@ -8,8 +8,6 @@ ip rule del fwmark "$NETFILTER_MARK" lookup "$IPROUTE2_TABLE_ID" > /dev/null 2>
ip rule add fwmark "$NETFILTER_MARK" lookup "$IPROUTE2_TABLE_ID"
nft -f - << EOF
-define LOCAL_SUBNET = {127.0.0.0/8, 224.0.0.0/4, 192.168.0.0/16, 10.0.0.0/8, 172.16.0.0/12}
-
table clash
flush table clash
@@ -20,7 +18,7 @@ table clash {
ip protocol != { tcp, udp } accept
meta cgroup $BYPASS_CGROUP_CLASSID accept
- ip daddr \$LOCAL_SUBNET accept
+ ip daddr $LOCAL_SUBNET accept
ct state new ct mark set $NETFILTER_MARK
ct mark $NETFILTER_MARK mark set $NETFILTER_MARK
@@ -32,7 +30,7 @@ table clash {
ip protocol != { tcp, udp } accept
iif utun accept
- ip daddr \$LOCAL_SUBNET accept
+ ip daddr $LOCAL_SUBNET accept
mark set $NETFILTER_MARK
}
|