mirror of
https://github.com/shadowsocks/shadowsocks-libev.git
synced 2026-10-18 03:26:48 +00:00
104 lines
2.4 KiB
Plaintext
104 lines
2.4 KiB
Plaintext
ss-nat(1)
|
|
=========
|
|
|
|
NAME
|
|
----
|
|
ss-nat - helper script to setup NAT rules for transparent proxy
|
|
|
|
SYNOPSIS
|
|
--------
|
|
// Generated by scripts/gen_cli_docs.py from src/ss-nat; do not edit this section.
|
|
|
|
*ss-nat* [-s <server_ip>] [-l <local_port>] [-S <server_ip>] [-L <local_port>]
|
|
[-i <ip_list_file>] [-I <interface>] [-e <extra_options>] [-a <lan_ips>] [-b
|
|
<wan_ips>] [-w <wan_ips>] [-o] [-u] [-U] [-f] [-h]
|
|
|
|
DESCRIPTION
|
|
-----------
|
|
*shadowsocks-c* is a lightweight and secure socks5 proxy.
|
|
It is a port of the original shadowsocks created by clowwindy.
|
|
*shadowsocks-c* is written in pure C and takes advantage of libuv to
|
|
achieve both high performance and low resource consumption.
|
|
|
|
`ss-nat`(1) sets up NAT rules for `ss-redir`(1) to provide traffic redirection.
|
|
It requires netfilter's NAT module and `iptables`(8).
|
|
For more information, check out `shadowsocks-libev`(8) and the following
|
|
'EXAMPLE' section.
|
|
|
|
OPTIONS
|
|
-------
|
|
// Generated by scripts/gen_cli_docs.py from src/ss-nat; do not edit this section.
|
|
|
|
This section lists options across supported builds. Platform and feature
|
|
restrictions are noted below; not every option is effective on every platform.
|
|
|
|
-s <server_ip>::
|
|
IP address of shadowsocks remote server
|
|
|
|
-l <local_port>::
|
|
Port number of shadowsocks local server
|
|
|
|
-S <server_ip>::
|
|
IP address of shadowsocks remote UDP server
|
|
|
|
-L <local_port>::
|
|
Port number of shadowsocks local UDP server
|
|
|
|
-i <ip_list_file>::
|
|
a file whose content is bypassed ip list
|
|
|
|
-I <interface>::
|
|
Set the LAN interface for NAT rules. The default is eth0.
|
|
|
|
-e <extra_options>::
|
|
Extra options for iptables
|
|
|
|
-a <lan_ips>::
|
|
LAN IP of access control, need a prefix to define access control mode
|
|
|
|
-b <wan_ips>::
|
|
WAN IP of will be bypassed
|
|
|
|
-w <wan_ips>::
|
|
WAN IP of will be forwarded
|
|
|
|
-o::
|
|
Apply the rules to the OUTPUT chain
|
|
|
|
-u::
|
|
Enable udprelay mode, TPROXY is required
|
|
|
|
-U::
|
|
Enable udprelay mode, using different IP and ports for TCP and UDP
|
|
|
|
-f::
|
|
Flush the rules
|
|
|
|
-h::
|
|
Show this help message and exit
|
|
|
|
EXAMPLE
|
|
-------
|
|
`ss-nat` requires `iptables`(8). Here is an example:
|
|
|
|
....
|
|
# Enable NAT rules for shadowsocks,
|
|
# with both TCP and UDP redirection enabled,
|
|
# and applied for both PREROUTING and OUTPUT chains
|
|
root@Wrt:~# ss-nat -s 192.168.1.100 -l 1080 -u -o
|
|
|
|
# Disable and flush all NAT rules for shadowsocks
|
|
root@Wrt:~# ss-nat -f
|
|
....
|
|
|
|
SEE ALSO
|
|
--------
|
|
`ss-local`(1),
|
|
`ss-server`(1),
|
|
`ss-tunnel`(1),
|
|
`ss-manager`(1),
|
|
`shadowsocks-libev`(8),
|
|
`iptables`(8),
|
|
/etc/shadowsocks-libev/config.json
|
|
|