ryzhov_al

Âñïîìíèë ïåðâîå âïå÷àòëåíèå ïîñëå ïåðåõîäà ñ Symbian íà Android — â ïîñëåäíåì áåç ó÷¸òíîé çàïèñè gmail äåëàòü íå÷åãî. Ïî ýòîé æå ïðè÷èíå ÿ íå ñìîã óæèòüñÿ ñ Win8: â íåé äàæå ëîêàëüíûé àêêàóíò çàâîäèòñÿ íå î÷åâèäíî, ÷åðåç îòêàç îò Live ID. Êàæäûé âòîðîé âèäæåò Metro'øíîãî èíòåðôåéñà ëîìèòñÿ â èíòåðíåò äëÿ îáíîâëåíèÿ ñâîåãî ñîäåðæèìîãî, à ñêàéï íå óñòàíîâèøü, íå ïîáûâàâ â Ìàãàçèíå ïðèëîæåíèé. Ìíå ïðàâäà íå íðàâèòñÿ îíëàéíîâûå ñåðâèñû, êîòîðûå ÿ íå ïðîñèë. Îò Ìàéêðîñîôòà ìíå íóæíà òîëüêî ðàáîòà ñêàéïà.

Ïðåäëàãàåìûé íèæå ñêðèïò áëîêèðóåò íà ðîóòåðå âñå îáðàùåíèÿ íà IP-àäðåñà, ïðèíàäëåæàùèå Ìàéêðîñîôòó, îñòàâëÿÿ ðàáîòîñïîñîáíûì òîëüêî ñêàéï. Ýòî äâà íàáîðà ipset, ïîñëåäîâàòåëüíî:

1. çàïðåùàþùèõ âñå IP Ìàéêðîñîôòà,
2. ðàçðåøàþùèõ îáðàùåíèÿ ê IP-àäðåñàì, íåîáõîäèìûì äëÿ ðàáîòû ñêàéïà.

Ôîðìèðóåì ñïèñîê ïîäñåòåé Ìàéêðîñîôòà:

Code:

wget -q -O - "http://list.iblocklist.com/?list=bt_microsoft&fileformat=p2p&archiveformat=gz" | \
    gunzip | cut -d: -f2 | grep -E "^[-0-9.]+$" > microsoft.lst

Ôîðìèðóåì ñïèñîê ip-àäðåñîâ, íåîáõîäèìûõ äëÿ ðàáîòû ñêàéïà:

Code:

opkg install bind-dig bash

Code:

#!/opt/bin/bash

for ip in $(for i in {0..20} ; do dig +short dsn$i.d.skype.net; done | sort -u | grep -E "^[1-9]")
do
  echo $ip >> skype.lst
done

Çàãðóæàåì íåîáõîäèìûå ìîäóëè ipset:

Code:

for module in ip_set ip_set_nethash ip_set_iphash ipt_set
do
    insmod $module
done

Çàâîäèì ñåòû è ïîñëåäîâàòåëüíî âíîñèì â íèõ ñôîðìèðîâàííûå ñïèñêè:

Code:

ipset -N Microsoft iptreemap
for IP in $(cat microsoft.lst)
do
    ipset -A Microsoft $IP
done

ipset -N Skype iptreemap
for IP in $(cat skype.lst)
do
    ipset -A Skype $IP
done

Îñòàëîñü äîáàâèòü ïðàâèëà iptables äëÿ áëîêèðîâêè ïåðâîãî ñïèñêà è ðàçáëîêèðîâêè âòîðîãî:

Code:

iptables -I FORWARD -m set --set Microsoft src,dst -j DROP
iptables -I FORWARD -m set --set Skype src,dst -j ACCEPT

Ïðèâåä¸ííûé âûøå ñèíòàêñèñ ipset àäàïòèðîâàí äëÿ asuswrt-merlin, äëÿ ýíòóçèàñòêîé ïðîøèâêè ïîñëåäíèå äâå ñòðî÷êè áóäóò âûãëÿäåòü òàê:

Code:

iptables -I FORWARD -m set --match-set Microsoft src,dst -j DROP
iptables -I FORWARD -m set --match-set Skype src,dst -j ACCEPT

Ãîòîâûå ñêðèïòû äëÿ ðàáîòû ñ ñîõðàíåíèåì íàñòðîåê è àâòîìàòèçèðîâàííûì ïðèìåíåíèåì ýòèõ ïðàâèë ïîñëå ïåðåçàãðóçêè ðîóòåðà\ïåðåïîäêëþ÷åíèÿ WAN ïðèâåäåíû â àðõèâå íèæå. Äëÿ åãî èñïîëüçîâàíèÿ íåîáõîäèìî â asuswrrt-merlin ðàçðåøèòü JFFS è âûïîëíèòü:

Code:

ñd /jffs
wget -O - http://files.ryzhov-al.ru/Routers/Block%20MS%2C%20enable%20Skype/block_ms_not_skype.tgz | tar -xvz