#!/bin/bash
#copyright by hiboy
source /etc/storage/script/init.sh
ipt2socks_enable=`nvram get app_104`
[ -z $ipt2socks_enable ] && ipt2socks_enable=0 && nvram set app_104=0
transocks_enable=`nvram get app_27`
[ -z $transocks_enable ] && transocks_enable=0 && nvram set app_27=0
transocks_mode_x=`nvram get app_28`
[ -z $transocks_mode_x ] && transocks_mode_x=0 && nvram set app_28=0
ss_udp_enable=`nvram get ss_udp_enable` #udp转发  0、停用；1、启动
[ -z $ss_udp_enable ] && ss_udp_enable=0 && nvram set ss_udp_enable=0
app_114=`nvram get app_114` #0:代理本机流量; 1:跳过代理本机流量
[ -z $app_114 ] && app_114=0 && nvram set app_114=0
ss_ip46=`nvram get ss_ip46`
[ -z $ss_ip46 ] && ss_ip46=0 && nvram set ss_ip46=0
transocks_listen_address=`nvram get app_30`
transocks_listen_port=`nvram get app_31`
transocks_server="$(nvram get app_32)"
LAN_AC_IP=`nvram get LAN_AC_IP`
[ -z $LAN_AC_IP ] && LAN_AC_IP=0 && nvram set LAN_AC_IP=$LAN_AC_IP
ss_DNS_Redirect=`nvram get ss_DNS_Redirect`
ss_DNS_Redirect_IP=`nvram get ss_DNS_Redirect_IP`
[ -z "$ss_DNS_Redirect_IP" ] && ss_DNS_Redirect_IP=$lan_ipaddr
if [ "$ipt2socks_enable" != "0" ] ; then
ss_tproxy_auser=`nvram get ss_tproxy_auser`
if [ "Sh39_ipt2socks.sh" != "$ss_tproxy_auser" ] && [ "" != "$ss_tproxy_auser" ] ; then
	logger -t "【ipt2socks】" "错误！！！由于已启用 $ss_tproxy_auser 透明代理，停止启用 ipt2socks 透明代理！"
	ipt2socks_enable=0 && nvram set app_104=0
fi
/etc/storage/script/sh_ezscript.sh 3 & #更新按钮状态
cmd_log_enable=`nvram get cmd_log_enable`
cmd_name="ipt2socks"
cmd_log=""
if [ "$cmd_log_enable" = "1" ] || [ "$ipt2socks_renum" -gt "0" ] ; then
	cmd_log="$cmd_log2"
fi
fi

if [ "$ipt2socks_enable" == "1" ] ; then
[ "$transocks_enable" == "0" ] && logger -t "【transocks】" "注意！！！需要关闭 ipt2socks 后才能关闭 transocks"
[ "$transocks_enable" == "0" ] && transocks_enable=1 && nvram set app_27=1
fi
if [ ! -z "$(echo $scriptfilepath | grep -v "/tmp/script/" | grep ipt2socks)" ] && [ ! -s /tmp/script/_app20 ] ; then
	mkdir -p /tmp/script
	{ echo '#!/bin/bash' ; echo $scriptfilepath '"$@"' '&' ; } > /tmp/script/_app20
	chmod 777 /tmp/script/_app20
fi

ipt2socks_restart () {
i_app_restart "$@" -name="ipt2socks"
}

ipt2socks_get_status () {

B_restart="$ipt2socks_enable$transocks_mode_x$transocks_server$transocks_listen_address$transocks_listen_port$ss_udp_enable$app_114$(cat /etc/storage/app_22.sh | grep -v '^#' | grep -v '^$')"

i_app_get_status -name="ipt2socks" -valb="$B_restart"
}

ipt2socks_check () {

ipt2socks_get_status
if [ "$ipt2socks_enable" = "1" ] ; then
	[ ! -z "$transocks_server" ] || logger -t "【ipt2socks】" "远端服务器IP地址:未填写"
	[ $transocks_listen_address ] || logger -t "【ipt2socks】" "透明重定向的代理服务器IP地址:未填写"
	[ $transocks_listen_port ] || logger -t "【ipt2socks】" "透明重定向的代理服务器端口:未填写"
	[ ! -z "$transocks_server" ] && [ $transocks_listen_address ] && [ $transocks_listen_port ] \
	|| { logger -t "【ipt2socks】" "错误！！！请正确填写。"; needed_restart=1; ipt2socks_enable=0; }
fi
if [ "$ipt2socks_enable" != "1" ] && [ "$needed_restart" = "1" ] ; then
	[ ! -z "`pidof ipt2socks`" ] && [ "$transocks_enable" != "0" ] && transocks_enable=0 && nvram set app_27=0
	[ ! -z "`pidof ipt2socks`" ] && logger -t "【ipt2socks】" "停止 ipt2socks" && ipt2socks_close
	{ kill_ps "$scriptname" exit0; exit 0; }
fi
if [ "$ipt2socks_enable" = "1" ] ; then
	if [ "$needed_restart" = "1" ] ; then
		ipt2socks_close
		ipt2socks_start
	else
		[ -z "`pidof ipt2socks`" ] && ipt2socks_restart
	fi
fi
}

ipt2socks_keep () {
/etc/storage/script/sh_ezscript.sh 3 & #更新按钮状态
i_app_keep -name="ipt2socks" -pidof="ipt2socks" &
}

ipt2socks_close () {
kill_ps "$scriptname keep"
sed -Ei '/【transocks】|【ipt2socks】|^$/d' /tmp/script/_opt_script_check
Sh99_ss_tproxy.sh off_stop "Sh39_ipt2socks.sh"
killall transocks ipt2socks kumasocks
/etc/storage/script/sh_ezscript.sh 3 & #更新按钮状态
kill_ps "/tmp/script/_app10"
kill_ps "_tran_socks.sh"
kill_ps "/tmp/script/_app20"
kill_ps "_ipt2socks.sh"
kill_ps "$scriptname"
}

ipt2socks_start () {

check_webui_yes
i_app_get_cmd_file -name="ipt2socks" -cmd="ipt2socks" -cpath="/opt/bin/ipt2socks" -down1="$hiboyfile/ipt2socks" -down2="$hiboyfile2/ipt2socks"
tcponly='true'
gid_owner="0"
su_cmd="eval"
NUM=`iptables -m owner -h 2>&1 | grep owner | wc -l`
hash su 2>/dev/null && su_x="1"
hash su 2>/dev/null || su_x="0"
if [ "$NUM" -ge "3" ] && [ "$su_x" = "1" ] ; then
	addgroup -g 1321 ‍✈️
	adduser -G ‍✈️ -u 1321 ‍✈️ -D -S -H -s /bin/false
	sed -Ei s/1321:1321/0:1321/g /etc/passwd
	su_cmd="su ‍✈️ -s /bin/sh -c "
	gid_owner="1321"
fi
nvram set gid_owner="$gid_owner"
if [ "$ss_udp_enable" = "1" ] || [ "$app_114" = "0" ] ; then
	[ "$su_x" != "1" ] && logger -t "【ipt2socks】" "缺少 su 命令"
	[ "$NUM" -ge "3" ] || logger -t "【ipt2socks】" "缺少 iptables -m owner 模块"
	if [ "$NUM" -ge "3" ] && [ "$su_x" = "1" ] ; then
		[ "$ss_udp_enable" = "1" ] && tcponly='false'
	else
		ss_udp_enable=0
		nvram set ss_udp_enable=0
		app_114=1
		nvram set app_114=1
	fi
fi
[ "$ss_udp_enable" = "0" ] && logger -t "【ipt2socks】" "仅代理 TCP 流量"
[ "$ss_udp_enable" = "1" ] && logger -t "【ipt2socks】" "代理 TCP 和 UDP 流量"
[ "$app_114" = "0" ] && logger -t "【ipt2socks】" "启动路由自身流量走透明代理"
[ "$app_114" = "1" ] && logger -t "【ipt2socks】" "停止路由自身流量走透明代理"
ipt2socks_v="$(ipt2socks -V | awk -F ' ' '{print $2;}')"
nvram set ipt2socks_v="$ipt2socks_v"
logger -t "【ipt2socks】" "运行 ipt2socks"

#运行脚本启动/opt/bin/ipt2socks
su_cmd2="/etc/storage/app_22.sh"
eval "$su_cmd" '"cmd_name=ipt2socks && '"$su_cmd2"' $cmd_log"' &

sleep 2
i_app_keep -t -name="ipt2socks" -pidof="ipt2socks"
Sh99_ss_tproxy.sh auser_check "Sh39_ipt2socks.sh"
ss_tproxy_set "Sh39_ipt2socks.sh"
Sh99_ss_tproxy.sh on_start "Sh39_ipt2socks.sh"

#ipt2socks_get_status
eval "$scriptfilepath keep &"
exit 0
}

ss_tproxy_set() {
ss_tproxy_auser=`nvram get ss_tproxy_auser`
if [ "$1" != "$ss_tproxy_auser" ] ; then
	logger -t "【ipt2socks】" "脚本 [Sh99_ss_tproxy.sh] 当前使用者: $auser_b ，跳过 $auser_a 的运行命令"
	logger -t "【ipt2socks】" "需要停用 $auser_b 后才能使用 $auser_a 运行 [Sh99_ss_tproxy.sh] 脚本"
	return
fi
lan_ipaddr=`nvram get lan_ipaddr`
ss_tproxy_mode_x=`nvram get app_110`
[ -z $ss_tproxy_mode_x ] && ss_tproxy_mode_x=0 && nvram set app_110=0
[ "$ss_tproxy_mode_x" = "0" ] && logger -t "【ipt2socks】" "【自动】设置 ss_tproxy 配置文件，配置导入中..."
[ "$ss_tproxy_mode_x" = "1" ] && logger -t "【ipt2socks】" "【手动】设置 ss_tproxy 配置文件，跳过配置导入" && return
 # /etc/storage/app_27.sh
[ "$transocks_mode_x" == "0" ] && sstp_set mode='chnroute'
[ "$transocks_mode_x" == "1" ] && sstp_set mode='gfwlist'
[ "$transocks_mode_x" == "2" ] && sstp_set mode='global'
[ "$transocks_mode_x" == "3" ] && sstp_set mode='chnlist'
[ "$ss_ip46" = "0" ] && { sstp_set ipv4='true' ; sstp_set ipv6='false' ; }
[ "$ss_ip46" = "1" ] && { sstp_set ipv4='false' ; sstp_set ipv6='true' ; }
[ "$ss_ip46" = "2" ] && { sstp_set ipv4='true' ; sstp_set ipv6='true' ; }
[ "$ss_ip46" = "0" ] && sstp_set tproxy='false' # true:TPROXY+TPROXY; false:REDIRECT+TPROXY
[ "$ss_ip46" != "0" ] && sstp_set tproxy='true'
sstp_set tcponly="$tcponly" # true:仅代理TCP流量; false:代理TCP和UDP流量
sstp_set selfonly='false'  # true:仅代理本机流量; false:代理本机及"内网"流量
nvram set app_112="0"      #app_112 0:自动开启第三方 DNS 程序(dnsproxy) ; 1:跳过自动开启第三方 DNS 程序但是继续把DNS绑定到 8053 端口的程序
#nvram set app_113="0"      #app_113 0:使用 8053 端口查询全部 DNS 时进行 China 域名加速 ; 1:不进行 China 域名加速
sstp_set uid_owner='0' # 非 0 时进行用户ID匹配跳过代理本机流量
gid_owner="$(nvram get gid_owner)"
sstp_set gid_owner="$gid_owner" # 非 0 时进行组ID匹配跳过代理本机流量
## proxy
sstp_set proxy_all_svraddr="/opt/app/ss_tproxy/conf/proxy_all_svraddr.conf"
sstp_set proxy_svrport='1:65535'
sstp_set proxy_tcpport='1098'
sstp_set proxy_udpport='1098'
sstp_set proxy_startcmd='date'
sstp_set proxy_stopcmd='date'
## dns
wan_dnsenable_x="$(nvram get wan_dnsenable_x)"
[ "$wan_dnsenable_x" == "1" ] && DNS_china=`nvram get wan0_dns |cut -d ' ' -f1`
[ "$wan_dnsenable_x" != "1" ] && DNS_china=`nvram get wan_dns1_x |cut -d ' ' -f1`
[ -z "$DNS_china" ] && DNS_china="223.5.5.5"
sstp_set dns_direct="$DNS_china"
sstp_set dns_direct6='240C::6666'
sstp_set dns_remote='8.8.8.8#53'
sstp_set dns_remote6='::1#8053'
[ "$transocks_mode_x" == "3" ] && sstp_set dns_direct='8.8.8.8' # 回国模式
[ "$transocks_mode_x" == "3" ] && sstp_set dns_direct6='2001:4860:4860::8888' # 回国模式
[ "$transocks_mode_x" == "3" ] && sstp_set dns_remote='223.5.5.5#53' # 回国模式
[ "$transocks_mode_x" == "3" ] && sstp_set dns_remote6='240C::6666#53' # 回国模式
sstp_set dns_bind_port='8053'
## dnsmasq
sstp_set dnsmasq_bind_port='53'
sstp_set dnsmasq_conf_dir="/tmp/ss_tproxy/dnsmasq.d"
sstp_set dnsmasq_conf_file="/opt/app/ss_tproxy/dnsmasq_conf_file.txt"
sstp_set dnsmasq_conf_string="/opt/app/ss_tproxy/conf/dnsmasq_conf_string.conf"
## ipts
sstp_set lan_ipv4_ipaddr='127.0.0.1'
sstp_set ipts_set_snat='false'
sstp_set ipts_set_snat6='false'
sstp_set ipts_reddns_onstop='false'
[ "$ss_DNS_Redirect" == "1" ] && sstp_set ipts_reddns_onstart='true' # ss-tproxy start 后，是否将其它主机发至本机的 DNS 重定向至自定义 IPv4 地址
[ "$ss_DNS_Redirect" != "1" ] && sstp_set ipts_reddns_onstart='false'
sstp_set ipts_reddns_ip="$ss_DNS_Redirect_IP" # 自定义 DNS 重定向地址(只支持 IPv4 )
sstp_set ipts_proxy_dst_port_tcp="1:65535"
sstp_set ipts_proxy_dst_port_udp="1:65535"
sstp_set LAN_AC_IP="$LAN_AC_IP"
## opts
sstp_set opts_overwrite_resolv='false'
sstp_set opts_ip_for_check_net=''
## file
sstp_set file_gfwlist_txt='/opt/app/ss_tproxy/rule/gfwlist.txt'
sstp_set file_gfwlist_ext='/opt/app/ss_tproxy/gfwlist.ext'
sstp_set file_ignlist_ext='/opt/app/ss_tproxy/ignlist.ext'
sstp_set file_lanlist_ext='/etc/storage/shadowsocks_ss_spec_lan.sh'
sstp_set file_wanlist_ext='/etc/storage/shadowsocks_ss_spec_wan.sh'
sstp_set file_chnroute_txt='/opt/app/ss_tproxy/rule/chnroute.txt'
sstp_set file_chnroute6_txt='/opt/app/ss_tproxy/rule/chnroute6.txt'
sstp_set file_chnroute_set='/opt/app/ss_tproxy/chnroute.set'
sstp_set file_chnroute6_set='/opt/app/ss_tproxy/chnroute6.set'
sstp_set file_dnsserver_pid='/opt/app/ss_tproxy/.dnsserver.pid'

Sh99_ss_tproxy.sh initconfig

# 写入服务器地址
echo "" > /opt/app/ss_tproxy/conf/proxy_svraddr4.conf
echo "" > /opt/app/ss_tproxy/conf/proxy_svraddr6.conf
# SS
ss_server=`nvram get ss_server`
echo "$ss_server" > /opt/app/ss_tproxy/conf/proxy_all_svraddr.conf
# v2ray
#server_addresses=$(cat /etc/storage/v2ray_config_script.sh | tr -d ' ' | grep -Eo '"address":.+' | grep -v 8.8.8.8 | grep -v google.com | grep -v 114.114.114.114 | grep -v 119.29.29.29 | grep -v 223.5.5.5 | sed -n '1p' | cut -d':' -f2 | cut -d'"' -f2)
#echo "$server_addresses" >> /opt/app/ss_tproxy/conf/proxy_all_svraddr.conf
# clash
#grep '^  server: ' /etc/storage/app_20.sh | tr -d ' ' | sed -e 's/server://g' | sed -e 's/"\|'"'"'\| //g' | grep -v 8.8.8.8 | grep -v google.com | grep -v 114.114.114.114 | grep -v 119.29.29.29 | grep -v 223.5.5.5 >> /opt/app/ss_tproxy/conf/proxy_all_svraddr.conf
#cat /etc/storage/app_20.sh | tr -d ' ' | grep -E -o \"server\":\"\[\^\"\]+ | sed -e 's/server\|://g' | sed -e 's/"\|'"'"'\| //g' | grep -v 8.8.8.8 | grep -v google.com | grep -v 114.114.114.114 | grep -v 119.29.29.29 | grep -v 223.5.5.5 >> /opt/app/ss_tproxy/conf/proxy_all_svraddr.conf
kcptun_server=`nvram get kcptun_server`
echo "$kcptun_server" >> /opt/app/ss_tproxy/conf/proxy_all_svraddr.conf
# transocks ipt2socks 
echo "$transocks_server" | sed -e "s@ @\n@g" >> /opt/app/ss_tproxy/conf/proxy_all_svraddr.conf

# 链接配置文件
rm -f /opt/app/ss_tproxy/wanlist.ext
rm -f /opt/app/ss_tproxy/lanlist.ext
ln -sf /etc/storage/shadowsocks_ss_spec_wan.sh /opt/app/ss_tproxy/wanlist.ext
ln -sf /etc/storage/shadowsocks_ss_spec_lan.sh /opt/app/ss_tproxy/lanlist.ext
[ ! -s /opt/app/ss_tproxy/wanlist.ext ] && cp -f /etc/storage/shadowsocks_ss_spec_wan.sh /opt/app/ss_tproxy/wanlist.ext
[ ! -s /opt/app/ss_tproxy/lanlist.ext ] && cp -f /etc/storage/shadowsocks_ss_spec_lan.sh /opt/app/ss_tproxy/lanlist.ext
logger -t "【ipt2socks】" "【自动】设置 ss_tproxy 配置文件，完成配置导入"
}

initconfig () {
	app_22="/etc/storage/app_22.sh"
	if [ ! -f "$app_22" ] || [ ! -s "$app_22" ] || [ -z "$(cat $app_22 | grep "tcp_tproxy")" ] || [ -z "$(cat $app_22 | grep '\-b 0.0.0.0 -l')" ] ; then
cat > "/etc/storage/app_22.sh" <<-\VVR
#!/bin/bash
lan_ipaddr=`nvram get lan_ipaddr`
transocks_listen_address=`nvram get app_30`
transocks_listen_port=`nvram get app_31`
ss_ip46=`nvram get ss_ip46` ; tp_set="" ; tcp_tproxy="" ; [ "$ss_ip46" = "0" ] && tcp_tproxy="-R" ;
[ "$ss_ip46" = "0" ] && tp_set="-4" ; [ "$ss_ip46" = "1" ] && tp_set="-6" ;
killall transocks ipt2socks

/opt/bin/ipt2socks -b 0.0.0.0 -l 1098 -s $transocks_listen_address -p $transocks_listen_port $tcp_tproxy $tp_set &

VVR
	fi


}

initconfig

update_app () {
mkdir -p /opt/app/ipt2socks
if [ "$1" = "update_asp" ] ; then
	rm -rf /opt/app/ipt2socks/Advanced_Extensions_ipt2socks.asp
fi
if [ "$1" = "del" ] ; then
	rm -rf /opt/app/ipt2socks/Advanced_Extensions_ipt2socks.asp
	[ -f /opt/bin/ipt2socks ] && rm -f /opt/bin/ipt2socks /opt/opt_backup/bin/ipt2socks
fi

initconfig

# 加载程序配置页面
if [ ! -f "/opt/app/ipt2socks/Advanced_Extensions_ipt2socks.asp" ] || [ ! -s "/opt/app/ipt2socks/Advanced_Extensions_ipt2socks.asp" ] ; then
	wgetcurl.sh /opt/app/ipt2socks/Advanced_Extensions_ipt2socks.asp "$hiboyfile/Advanced_Extensions_ipt2socksasp" "$hiboyfile2/Advanced_Extensions_ipt2socksasp"
fi
umount /www/Advanced_Extensions_app20.asp
mount --bind /opt/app/ipt2socks/Advanced_Extensions_ipt2socks.asp /www/Advanced_Extensions_app20.asp
# 更新程序启动脚本

[ "$1" = "del" ] && /etc/storage/www_sh/ipt2socks del &
}

case $ACTION in
start)
	ipt2socks_close
	ipt2socks_check
	;;
check)
	ipt2socks_check
	;;
stop)
	ipt2socks_close
	;;
updateapp20)
	ipt2socks_restart o
	[ "$ipt2socks_enable" = "1" ] && nvram set ipt2socks_status="updateipt2socks" && logger -t "【ipt2socks】" "重启" && ipt2socks_restart
	[ "$ipt2socks_enable" != "1" ] && nvram set ipt2socks_v="" && logger -t "【ipt2socks】" "更新" && update_app del
	;;
update_app)
	update_app
	;;
update_asp)
	update_app update_asp
	;;
keep)
	#ipt2socks_check
	ipt2socks_keep
	;;
initconfig)
	initconfig
	;;
*)
	ipt2socks_check
	;;
esac