ryzhov_al

Âñïîìíèë ïåðâîå âïå÷àòëåíèå ïîñëå ïåðåõîäà ñ Symbian íà Android — â ïîñëåäíåì áåç ó÷¸òíîé çàïèñè gmail äåëàòü íå÷åãî. Ïî ýòîé æå ïðè÷èíå ÿ íå ñìîã óæèòüñÿ ñ Win8: â íåé äàæå ëîêàëüíûé àêêàóíò çàâîäèòñÿ íå î÷åâèäíî, ÷åðåç îòêàç îò Live ID. Êàæäûé âòîðîé âèäæåò Metro'øíîãî èíòåðôåéñà ëîìèòñÿ â èíòåðíåò äëÿ îáíîâëåíèÿ ñâîåãî ñîäåðæèìîãî, à ñêàéï íå óñòàíîâèøü, íå ïîáûâàâ â Ìàãàçèíå ïðèëîæåíèé. Ìíå ïðàâäà íå íðàâèòñÿ îíëàéíîâûå ñåðâèñû, êîòîðûå ÿ íå ïðîñèë. Îò Ìàéêðîñîôòà ìíå íóæíà òîëüêî ðàáîòà ñêàéïà.

Ïðåäëàãàåìûé íèæå ñêðèïò áëîêèðóåò íà ðîóòåðå âñå îáðàùåíèÿ íà IP-àäðåñà, ïðèíàäëåæàùèå Ìàéêðîñîôòó, îñòàâëÿÿ ðàáîòîñïîñîáíûì òîëüêî ñêàéï. Ýòî äâà [URL="http://wl500g.info/showthread.php?30870"]íàáîðà ipset[/URL], ïîñëåäîâàòåëüíî:
[LIST=1][*]çàïðåùàþùèõ âñå IP Ìàéêðîñîôòà,[*]ðàçðåøàþùèõ îáðàùåíèÿ ê IP-àäðåñàì, íåîáõîäèìûì äëÿ ðàáîòû ñêàéïà.[/LIST]
Ôîðìèðóåì ñïèñîê ïîäñåòåé Ìàéêðîñîôòà:
[CODE]wget -q -O - "http://list.iblocklist.com/?list=bt_microsoft&fileformat=p2p&archiveformat=gz" | \
gunzip | cut -d: -f2 | grep -E "^[-0-9.]+$" > microsoft.lst[/CODE]
Ôîðìèðóåì ñïèñîê ip-àäðåñîâ, íåîáõîäèìûõ äëÿ ðàáîòû ñêàéïà:
[CODE]opkg install bind-dig bash[/CODE]
[CODE]#!/opt/bin/bash

for ip in $(for i in {0..20} ; do dig +short dsn$i.d.skype.net; done | sort -u | grep -E "^[1-9]")
do
echo $ip >> skype.lst
done[/CODE]
Çàãðóæàåì íåîáõîäèìûå ìîäóëè ipset:
[CODE]for module in ip_set ip_set_nethash ip_set_iphash ipt_set
do
insmod $module
done[/CODE]
Çàâîäèì ñåòû è ïîñëåäîâàòåëüíî âíîñèì â íèõ ñôîðìèðîâàííûå ñïèñêè:
[CODE]ipset -N Microsoft iptreemap
for IP in $(cat microsoft.lst)
do
ipset -A Microsoft $IP
done

ipset -N Skype iptreemap
for IP in $(cat skype.lst)
do
ipset -A Skype $IP
done[/CODE]
Îñòàëîñü äîáàâèòü ïðàâèëà iptables äëÿ áëîêèðîâêè ïåðâîãî ñïèñêà è ðàçáëîêèðîâêè âòîðîãî:
[CODE]iptables -I FORWARD -m set --set Microsoft src,dst -j DROP
iptables -I FORWARD -m set --set Skype src,dst -j ACCEPT[/CODE]

Ïðèâåä¸ííûé âûøå ñèíòàêñèñ ipset àäàïòèðîâàí äëÿ asuswrt-merlin, äëÿ ýíòóçèàñòêîé ïðîøèâêè ïîñëåäíèå äâå ñòðî÷êè áóäóò âûãëÿäåòü òàê:
[CODE]iptables -I FORWARD -m set --match-set Microsoft src,dst -j DROP
iptables -I FORWARD -m set --match-set Skype src,dst -j ACCEPT[/CODE]

Ãîòîâûå ñêðèïòû äëÿ ðàáîòû ñ ñîõðàíåíèåì íàñòðîåê è àâòîìàòèçèðîâàííûì ïðèìåíåíèåì ýòèõ ïðàâèë ïîñëå ïåðåçàãðóçêè ðîóòåðà\ïåðåïîäêëþ÷åíèÿ WAN ïðèâåäåíû â àðõèâå íèæå. Äëÿ åãî èñïîëüçîâàíèÿ íåîáõîäèìî â asuswrrt-merlin ðàçðåøèòü JFFS è âûïîëíèòü:
[CODE]ñd /jffs
wget -O - http://files.ryzhov-al.ru/Routers/Block%20MS%2C%20enable%20Skype/block_ms_not_skype.tgz | tar -xvz[/CODE]