diff --git a/package/lean/UnblockNeteaseMusic/Makefile b/package/lean/UnblockNeteaseMusic/Makefile
new file mode 100644
index 0000000000..6e31863a6e
--- /dev/null
+++ b/package/lean/UnblockNeteaseMusic/Makefile
@@ -0,0 +1,62 @@
+#
+# Copyright (C) 2015-2016 OpenWrt.org
+#
+# This is free software, licensed under the GNU General Public License v3.
+#
+# licheng
+# www.maxlicheng.com
+# 2019-07-28
+#
+
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=UnblockNeteaseMusic
+PKG_VERSION:=0.20.4
+PKG_RELEASE:=1
+
+PKG_LICENSE:=MIT
+
+PKG_SOURCE_PROTO:=git
+PKG_SOURCE_URL:=https://github.com/nondanee/UnblockNeteaseMusic.git
+PKG_SOURCE_VERSION:=023a97f0e62d322a8d64c59ef3942da7c8a1b546
+
+PKG_SOURCE_SUBDIR:=$(PKG_NAME)
+PKG_SOURCE:=$(PKG_SOURCE_SUBDIR)-$(PKG_VERSION).tar.gz
+PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_SOURCE_SUBDIR)
+PKG_BUILD_PARALLEL:=1
+
+include $(INCLUDE_DIR)/package.mk
+
+define Package/$(PKG_NAME)
+	SECTION:=net
+	CATEGORY:=Network
+	TITLE:=Revive unavailable songs for Netease Cloud Music
+	DEPENDS:=+node 
+	URL:=https://github.com/nondanee/UnblockNeteaseMusic/releases
+	SUBMENU:=NeteaseMusic
+	PKGARCH:=all
+endef
+
+define Package/$(PKG_NAME)/description
+Revive unavailable songs for Netease Cloud Music
+endef
+
+define Build/Prepare
+	tar -xzvf $(DL_DIR)/$(PKG_SOURCE) -C $(PKG_BUILD_DIR)
+	mkdir -p $(PKG_BUILD_DIR)/$(PKG_NAME)
+	echo -e $(PKG_VERSION) > $(PKG_BUILD_DIR)/$(PKG_NAME)/core_ver
+	echo -e $(PKG_SOURCE_VERSION) > $(PKG_BUILD_DIR)/$(PKG_NAME)/local_ver
+endef
+
+define Build/Configure
+endef
+
+define Build/Compile
+endef
+
+define Package/$(PKG_NAME)/install
+	$(INSTALL_DIR)  $(1)/usr/share/$(PKG_NAME)
+	cp -pR $(PKG_BUILD_DIR)/$(PKG_NAME)/* $(1)/usr/share/$(PKG_NAME)
+endef
+
+$(eval $(call BuildPackage,$(PKG_NAME)))
diff --git a/package/lean/adbyby/Makefile b/package/lean/adbyby/Makefile
new file mode 100644
index 0000000000..c01afd7499
--- /dev/null
+++ b/package/lean/adbyby/Makefile
@@ -0,0 +1,70 @@
+#
+# Copyright (C) 2015-2016 OpenWrt.org
+#
+# This is free software, licensed under the GNU General Public License v3.
+#
+
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=adbyby
+PKG_VERSION:=2.7
+PKG_RELEASE:=20181023
+
+include $(INCLUDE_DIR)/package.mk
+
+define Package/$(PKG_NAME)
+	SECTION:=net
+	CATEGORY:=Network
+	TITLE:=Powerful adblock module to block ad.
+	DEPENDS:=
+	URL:=http://www.adbyby.com/
+endef
+
+define Package/$(PKG_NAME)/description
+Adbyby is a powerful adblock module to block ad,just like adblock.
+endef
+
+define Build/Prepare
+endef
+
+define Build/Configure
+endef
+
+define Build/Compile
+endef
+
+define Package/$(PKG_NAME)/install
+	$(INSTALL_DIR) $(1)/usr/share/adbyby
+	$(INSTALL_BIN) ./files/adbyby.sh $(1)/usr/share/adbyby/
+	$(INSTALL_BIN) ./files/adbybyfirst.sh $(1)/usr/share/adbyby/
+	$(INSTALL_BIN) ./files/adbybyupdate.sh $(1)/usr/share/adbyby/
+	$(INSTALL_CONF) ./files/adhook.ini $(1)/usr/share/adbyby/
+	$(INSTALL_CONF) ./files/user.action $(1)/usr/share/adbyby/
+
+	$(INSTALL_DIR) $(1)/usr/share/adbyby/data
+	$(INSTALL_DATA) ./files/data/* $(1)/usr/share/adbyby/data/
+
+	$(INSTALL_DIR) $(1)/usr/share/adbyby/doc
+	$(INSTALL_DATA) ./files/doc/* $(1)/usr/share/adbyby/doc/
+
+ifeq ($(ARCH),mipsel)
+	$(INSTALL_BIN) ./files/7620n/adbyby $(1)/usr/share/adbyby/
+endif
+ifeq ($(ARCH),mips)
+	$(INSTALL_BIN) ./files/ar71xx/adbyby $(1)/usr/share/adbyby/
+endif
+ifeq ($(ARCH),i386)
+	$(INSTALL_BIN) ./files/x86/adbyby $(1)/usr/share/adbyby/
+endif
+ifeq ($(ARCH),x86_64)
+	$(INSTALL_BIN) ./files/x86_64/adbyby $(1)/usr/share/adbyby/
+endif
+ifeq ($(ARCH),arm)
+	$(INSTALL_BIN) ./files/arm/adbyby $(1)/usr/share/adbyby/
+endif
+ifeq ($(ARCH),aarch64)
+	$(INSTALL_BIN) ./files/armv7/adbyby $(1)/usr/share/adbyby/
+endif
+endef
+
+$(eval $(call BuildPackage,$(PKG_NAME)))
diff --git a/package/lean/adbyby/files/7620n/adbyby b/package/lean/adbyby/files/7620n/adbyby
new file mode 100755
index 0000000000..39ab0a1ebc
Binary files /dev/null and b/package/lean/adbyby/files/7620n/adbyby differ
diff --git a/package/lean/adbyby/files/adbyby.sh b/package/lean/adbyby/files/adbyby.sh
new file mode 100755
index 0000000000..146a070d1b
--- /dev/null
+++ b/package/lean/adbyby/files/adbyby.sh
@@ -0,0 +1,16 @@
+#!/bin/sh
+PROG_PATH=/usr/share/adbyby
+err=0
+until [ $err -ge 5 ]; do
+	if [ -n "$(pgrep $PROG_PATH/adbyby)" ]; then
+		iptables-save | grep ADBYBY >/dev/null || \
+		/etc/init.d/adbyby add_rule
+		sleep 10
+		err=0
+	else
+		$PROG_PATH/adbyby --no-daemon &>/dev/null &
+		sleep 1
+		err=$((err+1))
+	fi
+done
+/etc/init.d/adbyby del_rule
diff --git a/package/lean/adbyby/files/adbybyfirst.sh b/package/lean/adbyby/files/adbybyfirst.sh
new file mode 100755
index 0000000000..c677d1bec1
--- /dev/null
+++ b/package/lean/adbyby/files/adbybyfirst.sh
@@ -0,0 +1,11 @@
+#!/bin/sh
+PROG_PATH=/usr/share/adbyby
+if [ -z "$(dnsmasq --version | grep no-ipset)" ]; then
+	[ $(uci get adbyby.@adbyby[-1].wan_mode) -ne 2 ] && \
+	[ $(awk -F= '/^ipset/{print $2}' $PROG_PATH/adhook.ini) -eq 1 ] && \
+	{
+		sed -i 's/adbyby_list/adbyby_wan/' /tmp/adbyby_host.conf
+		echo conf-file=/tmp/adbyby_host.conf >> /etc/dnsmasq.conf
+		/etc/init.d/dnsmasq restart
+	}
+fi
diff --git a/package/lean/adbyby/files/adbybyupdate.sh b/package/lean/adbyby/files/adbybyupdate.sh
new file mode 100755
index 0000000000..bdde944a20
--- /dev/null
+++ b/package/lean/adbyby/files/adbybyupdate.sh
@@ -0,0 +1,11 @@
+#!/bin/sh
+PROG_PATH=/usr/share/adbyby
+if [ -z "$(dnsmasq --version | grep no-ipset)" ]; then
+	[ $(uci get adbyby.@adbyby[-1].wan_mode) -ne 2 ] && \
+	[ $(awk -F= '/^ipset/{print $2}' $PROG_PATH/adhook.ini) -eq 1 ] && \
+	{
+		sed -i 's/adbyby_list/adbyby_wan/' /tmp/adbyby_host.conf
+		ipset -F adbyby_wan 2>/dev/null
+		/etc/init.d/dnsmasq restart
+	}
+fi
diff --git a/package/lean/adbyby/files/adhook.ini b/package/lean/adbyby/files/adhook.ini
new file mode 100755
index 0000000000..6a7613ea87
--- /dev/null
+++ b/package/lean/adbyby/files/adhook.ini
@@ -0,0 +1,14 @@
+[cfg]
+### 2.1 ###
+listen-address=0.0.0.0:8118
+buffer-limit=1024
+keep-alive-timeout=30
+socket-timeout=60
+### 2.5 ###
+max_client_connections=0
+### 2.6 ###
+stack_size=200
+auto_restart=0
+### 2.7 ###
+debug=0
+ipset=0
diff --git a/package/lean/adbyby/files/ar71xx/adbyby b/package/lean/adbyby/files/ar71xx/adbyby
new file mode 100755
index 0000000000..6c8edf1cb9
Binary files /dev/null and b/package/lean/adbyby/files/ar71xx/adbyby differ
diff --git a/package/lean/adbyby/files/arm/adbyby b/package/lean/adbyby/files/arm/adbyby
new file mode 100755
index 0000000000..a7da1900d9
Binary files /dev/null and b/package/lean/adbyby/files/arm/adbyby differ
diff --git a/package/lean/adbyby/files/armv7/adbyby b/package/lean/adbyby/files/armv7/adbyby
new file mode 100755
index 0000000000..98dbfbe549
Binary files /dev/null and b/package/lean/adbyby/files/armv7/adbyby differ
diff --git a/package/lean/adbyby/files/data/lazy.bin b/package/lean/adbyby/files/data/lazy.bin
new file mode 100644
index 0000000000..23e6a8d70a
Binary files /dev/null and b/package/lean/adbyby/files/data/lazy.bin differ
diff --git a/package/lean/adbyby/files/data/lazy.txt b/package/lean/adbyby/files/data/lazy.txt
new file mode 100644
index 0000000000..5d383c7114
--- /dev/null
+++ b/package/lean/adbyby/files/data/lazy.txt
@@ -0,0 +1,25 @@
+!  -----����ʱ��:  2018-10-08 23:07:52   by:xwhyc-----
+.php?ad=
+/99rejs/js
+/agetsou.js^
+/c@*!25.js|$script
+/cococ-66/$script
+/defaultts.tc.qq.com/*.ts?index=0&start=0&
+/defaultts.tc.qq.com/*.ts?index=0&start=0&end=*&ver=4
+/gg_js/
+/imgs.js?t=
+/js/adtop.js|
+/js/guanggao_gg.js?d=
+/js/sss/ad.js
+/static/js/aall.js
+/unionjs/$script
+/variety.tc.qq.com/*.mp4^*fmt=hd
+/variety.tc.qq.com/*.mp4^*fmt=shd
+/video.dispatch.tc.qq.com/*.mp4^*sdtfrom=
+/view/image/QT_HY.jpg?t=
+/view/js/slade.js|$script
+/vlive.qqvideo.tc.qq.com/*.mp4^*fmt=hd
+/vlive.qqvideo.tc.qq.com/*.mp4^*fmt=shd
+/vmind.qqvideo.tc.qq.com/*.mp4^*sdtfrom=
+/vmindhls.tc.qq.com/*ugc=0&ga=0&gv=0&start=
+/zzhzgg.js
\ No newline at end of file
diff --git a/package/lean/adbyby/files/data/rules.txt b/package/lean/adbyby/files/data/rules.txt
new file mode 100644
index 0000000000..5c44b0e8c5
--- /dev/null
+++ b/package/lean/adbyby/files/data/rules.txt
@@ -0,0 +1,15 @@
+!  ------------------------------ ADByby 自定义过滤语法简表---------------------------------
+!  --------------  规则基于abp规则，并进行了字符替换部分的扩展-----------------------------
+!  ABP规则请参考https://adblockplus.org/zh_CN/filters，下面为大致摘要
+!  "!" 为行注释符，注释行以该符号起始作为一行注释语义，用于规则描述
+!  "*" 为字符通配符，能够匹配0长度或任意长度的字符串，该通配符不能与正则语法混用。
+!  "^" 为分隔符，可以是除了字母、数字或者 _ - . % 之外的任何字符。
+!  "|" 为管线符号，来表示地址的最前端或最末端
+!  "||" 为子域通配符，方便匹配主域名下的所有子域。
+!  "~" 为排除标识符，通配符能过滤大多数广告，但同时存在误杀, 可以通过排除标识符修正误杀链接。
+!  "##" 为元素选择器标识符，后面跟需要隐藏元素的CSS样式例如 #ad_id  .ad_class
+!!  元素隐藏暂不支持全局规则和排除规则
+!! 字符替换扩展
+!  文本替换选择器标识符，后面跟需要替换的文本数据，格式：$s@模式字符串@替换后的文本@
+!  支持通配符*和？
+!  -------------------------------------------------------------------------------------------
diff --git a/package/lean/adbyby/files/data/user.txt b/package/lean/adbyby/files/data/user.txt
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/package/lean/adbyby/files/data/video.txt b/package/lean/adbyby/files/data/video.txt
new file mode 100644
index 0000000000..3991c48fc1
--- /dev/null
+++ b/package/lean/adbyby/files/data/video.txt
@@ -0,0 +1,30 @@
+!  -----����ʱ��:  2018-10-08 23:06:11   by:xwhyc-----------------------------------------------
+!  -----��淴��:http://www.adbyby.com/help.htm   QQȺ: 79547134(��), 364066294(��)��470705224(��)��534897434,438394572--------------
+
+
+!-------------------------------------------
+/showadv/
+3199.cn###ad640,[id^="ad0"]
+76fengyun.com###down_box{display:block!important;}.gggg,.ggao
+9553.com##[class="zm"]
+962.net##.show_ad,.g-962-ad
+amazon.cn##.adv-float-div
+downsx.rocks##.adbox,.Left-ad3_fixed,.google-ad2_fixed
+edu-acc.cn###doyoo_monitor
+fx678.com##[class^="adv-"]
+||76fengyun.com/body22233.js
+||76fengyun.com/file/$s@onclick="window.open('*');startWait();"@onclick="window.open(document.getElementById('downpage_link').href);startWait();"@
+||atanx.alicdn.com/t/tanxssp.js?_v=
+||biquguan.com/guan/$script
+||djv99sxoqpv11.cloudfront.net
+||jmxlaser.com
+||jump2.bdimg.com/p/$s@<div class="l_post l_post_bright j_l_post clearfix ?????????? "@<div style="display:none"@
+||nxkycx.com
+||res.jklan.cn/wp-content/themes/tt/js/system.js?ver=$s@function goto()@function xxx()@
+||tieba.com/p/$s@<div class="l_post l_post_bright j_l_post clearfix ?????????? "@<div style="display:none"@
+||ychap.com
+!-----------------------
+/qkostn.js|
+|http://mark.l.qq.com/fcgi-bin/get_video_mark_all*&strAdParam=
+!---------adbyby---------
+
diff --git a/package/lean/adbyby/files/doc/hidecss.js b/package/lean/adbyby/files/doc/hidecss.js
new file mode 100644
index 0000000000..93c21f5fe7
--- /dev/null
+++ b/package/lean/adbyby/files/doc/hidecss.js
@@ -0,0 +1 @@
+(function(global){var DOC=global.document,w3c_css=global.getComputedStyle,undef=void 0,reg_combinator=/^\s*([>+~,\s])\s*(\*|(?:[-\w*]|[^\x00-\xa0]|\\.)*)/,trimLeft=/^\s+/,trimRight=/\s+$/,reg_comma=/^\s*,\s*/,reg_sequence=/^([#\.:]|\[\s*)((?:[-\w]|[^\x00-\xa0]|\\.)+)/,reg_pseudo=/^\(\s*("([^"]*)"|'([^']*)'|[^\(\)]*(\([^\(\)]*\))?)\s*\)/,reg_attrib=/^\s*(?:(\S?=)\s*(?:(['"])(.*?)\2|(#?(?:[\w\u00c0-\uFFFF\-]|\\.)*)|)|)\s*\]/,reg_attrval=/\\([0-9a-fA-F]{2,2})/g,reg_sensitive=/^(?:title|id|name|class|for|href|src)$/,reg_backslash=/\\/g,reg_tag=/^((?:[-\w\*]|[^\x00-\xa0]|\\.)+)/,reg_parse_pseudo=/(-?)(\d*)n([-+]?\d*)/,reg_quick=/^(^|[#.])((?:[-\w]|[^\x00-\xa0]|\\.)+)$/,has_in=function(a,b){return(a in b)},dom={html:DOC.documentElement,mix:function(target,source){var args=[].slice.call(arguments),key,ride=typeof args[args.length-1]=="boolean"?args.pop():true;target=target||{};for(var i=1;source=args[i++];){for(key in source){if(ride||!has_in(key,target)){target[key]=source[key]}}}return target},rword:/[^, ]+/g,uuid:1,getUid:w3c_css?function(node){return node.uniqueNumber||(node.uniqueNumber=dom.uuid++)}:function(node){var uid=node.getAttribute("uniqueNumber");if(!uid){uid=dom.uuid++;node.setAttribute("uniqueNumber",uid)}return uid},oneObject:function(array,val){if(typeof array=="string"){array=array.match(dom.rword)||[]}var result={},value=val!==undef?val:1;for(var i=0,n=array.length;i<n;i++){result[array[i]]=value}return result}},hash_operator={"=":1,"!=":2,"|=":3,"~=":4,"^=":5,"$=":6,"*=":7},slice=Array.prototype.slice,attrURL=dom.oneObject("action,cite,codebase,data,href,longdesc,lowsrc,src,usemap",2),bools=dom["@bools"]="autofocus,autoplay,async,checked,controls,declare,disabled,defer,defaultchecked,contenteditable,ismap,loop,multiple,noshade,open,noresize,readonly,selected",boolOne=dom.oneObject(bools),fixGetAttribute,fixHasAttribute,fixById,fixByTag,filterPseudoHasExp=function(strchild,strsibling,type){return{exec:function(flags,lastResult,args){var result=[],flag_not=flags.not,child=strchild,sibling=strsibling,ofType=type,cache={},lock={},a=args.a,b=args.b,i=0,ri=0,el,found,diff,count;if(!ofType&&a===1&&b===0){return flag_not?[]:lastResult}for(var checkName=ofType?"nodeName":"nodeType",parent,pid,checkValue;el=lastResult[i++];){parent=el.parentNode;pid=dom.getUid(parent);if(!lock[pid]){count=lock[pid]=1;checkValue=ofType?el.nodeName:1;for(var node=parent[child];node;node=node[sibling]){if(node[checkName]===checkValue){pid=dom.getUid(node);cache[pid]=count++}}}diff=cache[dom.getUid(el)]-b;found=a===0?diff===0:(diff%a===0&&diff/a>=0);(found^flag_not)&&(result[ri++]=el)}return result}}},onePosition=dom.oneObject("eq,gt,lt,first,last,even,odd"),siblingCheck=function(a,b,ret){if(a===b){return ret}var cur=a.nextSibling;while(cur){if(cur===b){return -1}cur=cur.nextSibling}return 1},sortOrder1=function(a,b){if(a===b){sortOrder1.hasDuplicate=true;return 0}if(!a.compareDocumentPosition||!b.compareDocumentPosition){return a.compareDocumentPosition?-1:1}return a.compareDocumentPosition(b)&4?-1:1},sortOrder2=function(a,b){if(a===b){sortOrder2.hasDuplicate=true;return 0}var al,bl,ap=[],bp=[],aup=a.parentNode,bup=b.parentNode,cur=aup;if(aup===bup){return siblingCheck(a,b)}else{if(!aup){return -1}else{if(!bup){return 1}}}while(cur){ap.unshift(cur);cur=cur.parentNode}cur=bup;while(cur){bp.unshift(cur);cur=cur.parentNode}al=ap.length;bl=bp.length;for(var i=0;i<al&&i<bl;i++){if(ap[i]!==bp[i]){return siblingCheck(ap[i],bp[i])}}return i===al?siblingCheck(a,bp[i],-1):siblingCheck(ap[i],b,1)},_toHex=function(x,y){return String.fromCharCode(parseInt(y,16))},parse_pseudo=function(key,match){var expr=match[3]||match[2];expr=expr?expr.replace(reg_attrval,_toHex):match[1];if(!key.indexOf("nth")){expr=expr.replace(/^\+|\s*/g,"");match=(expr==="even"&&"2n"||expr==="odd"&&"2n+1"||!/\D/.test(expr)&&"0n+"+expr||expr).match(reg_parse_pseudo);return{a:(match[1]+(match[2]||1))-0,b:match[3]-0}}return expr},makeArray=function(nodes,result,flag_multi){nodes=slice.call(nodes,0);if(result){result.push.apply(result,nodes)}else{result=nodes}return flag_multi?dom.unique(result):result},getElementsByTagName=function(tagName,els,flag_xml){var method="getElementsByTagName",elems=[],uniqResult={},prefix;if(flag_xml&&tagName.indexOf(":")>0&&els.length&&els[0].lookupNamespaceURI){var arr=tagName.split(":");prefix=arr[0];tagName=arr[1];method="getElementsByTagNameNS";prefix=els[0].lookupNamespaceURI(prefix)}switch(els.length){case 0:return elems;case 1:var all=prefix?els[0][method](prefix,tagName):els[0][method](tagName);for(var i=0,ri=0,el;el=all[i++];){if(el.nodeType===1){elems[ri++]=el}}return elems;default:for(var nodes,i=0,ri=0;el=els[i++];){nodes=prefix?el[method](prefix,tagName):el[method](tagName);for(var uid,j=0,node;node=nodes[j++];){uid=dom.getUid(node);if(!uniqResult[uid]){uniqResult[uid]=elems[ri++]=node}}}return elems}},getElementsByXPath=function(xpath,context,doc){var result=[];try{if(global.DOMParser){var nodes=doc.evaluate(xpath,context,null,7,null);for(var i=0,n=nodes.snapshotLength;i<n;i++){result[i]=nodes.snapshotItem(i)}}else{nodes=context.selectNodes(xpath);for(i=0,n=nodes.length;i<n;i++){result[i]=nodes[i]}}}catch(e){return false}return result};if(trimLeft.test("\xA0")){trimLeft=/^[\s\xA0]+/;trimRight=/[\s\xA0]+$/}global.onerror=function(){return !0};dom.mix(dom,{isXML:function(el){var doc=el.ownerDocument||el;return doc.createElement("p").nodeName!==doc.createElement("P").nodeName},contains:function(a,b){if(a.compareDocumentPosition){return !!(a.compareDocumentPosition(b)&16)}else{if(a.contains){return a!==b&&(a.contains?a.contains(b):true)}}while((b=b.parentNode)){if(a===b){return true}}return false},getText:function(nodes){var ret="",elem;for(var i=0;nodes[i];i++){elem=nodes[i];if(elem.nodeType===3||elem.nodeType===4){ret+=elem.nodeValue}else{if(elem.nodeType!==8){ret+=this.getText(elem.childNodes)}}}return ret},hasDuplicate:false,unique:function(nodes){if(nodes.length<2){return nodes}var result=[],array=[],uniqResult={},node=nodes[0],index,ri=0;if(node.sourceIndex){for(var i=0,n=nodes.length;i<n;i++){node=nodes[i];index=node.sourceIndex+100000000;if(!uniqResult[index]){(array[ri++]=new String(index))._=node;uniqResult[index]=1}}array.sort();while(ri){result[--ri]=array[ri]._}return result}else{var sortOrder=node.compareDocumentPosition?sortOrder1:sortOrder2;nodes.sort(sortOrder);if(sortOrder.hasDuplicate){for(i=1,len=nodes.length;i<len;i++){if(nodes[i]===nodes[i-1]){nodes.splice(i--,1)}}}sortOrder.hasDuplicate=false;return nodes}}});(function(){var select=DOC.createElement("select"),option=select.appendChild(DOC.createElement("option"));option.setAttribute("selected","selected");option.className="x";fixGetAttribute=option.getAttribute("class")!="x";select.appendChild(DOC.createComment(""));fixByTag=select.getElementsByTagName("*").length==2;var all=DOC.getElementsByTagName("*"),node,nodeType,comments=[],i=0,j=0;while((node=all[i++])){nodeType=node.nodeType;nodeType===1?dom.getUid(node):nodeType===8?comments.push(node):0}while((node=comments[j++])){node.parentNode.removeChild(node)}fixHasAttribute=select.hasAttribute?!option.hasAttribute("selected"):true;var form=DOC.createElement("div"),id="fixId"+(+new Date),root=dom.html;form.innerHTML="<a name='"+id+"'/>";root.insertBefore(form,root.firstChild);fixById=!!DOC.getElementById(id);root.removeChild(form)})();try{slice.call(dom.html.childNodes,0)[0].nodeType}catch(e){makeArray=function(nodes,result,flag_multi){var ret=result||[],ri=ret.length;for(var i=0,el;el=nodes[i++];){ret[ri++]=el}return flag_multi?dom.unique(ret):ret}}var Icarus=dom.query=function(expr,contexts,result,lastResult,flag_xml,flag_multi,flag_dirty){result=result||[];contexts=contexts||DOC;var pushResult=makeArray;if(!contexts.nodeType){contexts=pushResult(contexts);if(!contexts.length){return result}}else{contexts=[contexts]}var rrelative=reg_combinator,rBackslash=reg_backslash,rcomma=reg_comma,context=contexts[0],doc=context.ownerDocument||context,rtag=reg_tag,flag_all,uniqResult,elems,nodes,tagName,last,ri,uid;expr=expr.replace(trimLeft,"").replace(trimRight,"");flag_xml=flag_xml!==undef?flag_xml:dom.isXML(doc);if(flag_xml&&expr==="body"&&context.body){return pushResult([context.body],result,flag_multi)}if(!flag_xml&&doc.querySelectorAll){var query=expr,fix_icarus_sqa="fix_icarus_sqa";if(contexts.length>2||doc.documentMode==8&&context.nodeType==1){if(contexts.length>2){context=doc}query="."+fix_icarus_sqa+" "+query;for(var i=0,node;node=contexts[i++];){if(node.nodeType===1){node.className=fix_icarus_sqa+" "+node.className}}}if(doc.documentMode!==8||context.nodeName.toLowerCase()!=="object"){try{return pushResult(context.querySelectorAll(query),result,flag_multi)}catch(e){}finally{if(!query.indexOf("."+fix_icarus_sqa)){for(i=0;node=contexts[i++];){if(node.nodeType===1){node.className=node.className.replace(fix_icarus_sqa+" ","")}}}}}}var match=expr.match(reg_quick);if(match){var value=match[2].replace(rBackslash,""),key=match[1];if(key==""){nodes=getElementsByTagName(value,contexts,flag_xml)}else{if(key==="."&&contexts.length===1){if(flag_xml){nodes=getElementsByXPath("//*[@class='"+value+"']",context,doc)}else{if(context.getElementsByClassName){nodes=context.getElementsByClassName(value)}}}else{if(key==="#"&&contexts.length===1){if(flag_xml){nodes=getElementsByXPath("//*[@id='"+value+"']",context,doc)}else{if(context.nodeType==Math.pow(3,2)){node=doc.getElementById(value);nodes=!node?[]:!fixById?[node]:node.getAttributeNode("id").nodeValue===value?[node]:false}}}}}if(nodes){return pushResult(nodes,result,flag_multi)}}lastResult=contexts;if(lastResult.length){loop:while(expr&&last!==expr){flag_dirty=false;elems=null;uniqResult={};if((match=expr.match(rrelative))){expr=RegExp.rightContext;elems=[];tagName=(flag_xml?match[2]:match[2].toUpperCase()).replace(rBackslash,"")||"*";i=0;ri=0;flag_all=tagName==="*";switch(match[1]){case" ":if(expr.length||match[2]){elems=getElementsByTagName(tagName,lastResult,flag_xml)}else{elems=lastResult;break loop}break;case">":while((node=lastResult[i++])){for(node=node.firstChild;node;node=node.nextSibling){if(node.nodeType===1&&(flag_all||tagName===node.nodeName)){elems[ri++]=node}}}break;case"+":while((node=lastResult[i++])){while((node=node.nextSibling)){if(node.nodeType===1){if(flag_all||tagName===node.nodeName){elems[ri++]=node}break}}}break;case"~":while((node=lastResult[i++])){while((node=node.nextSibling)){if(node.nodeType===1&&(flag_all||tagName===node.nodeName)){uid=dom.getUid(node);if(uniqResult[uid]){break}else{uniqResult[uid]=elems[ri++]=node}}}}elems=dom.unique(elems);break}}else{if((match=expr.match(rtag))){expr=RegExp.rightContext;elems=getElementsByTagName(match[1].replace(rBackslash,""),lastResult,flag_xml)}}if(expr){var arr=Icarus.filter(expr,elems,lastResult,doc,flag_xml);expr=arr[0];elems=arr[1];if(!elems){flag_dirty=true;elems=getElementsByTagName("*",lastResult,flag_xml)}if((match=expr.match(rcomma))){expr=RegExp.rightContext;pushResult(elems,result);return Icarus(expr,contexts,result,[],flag_xml,true,flag_dirty)}else{lastResult=elems}}}}if(flag_multi){if(elems.length){return pushResult(elems,result,flag_multi)}}else{if(DOC!==doc||fixByTag&&flag_dirty){for(result=[],ri=0,i=0;node=elems[i++];){if(node.nodeType===1){result[ri++]=node}}return result}}return elems},filterPseudoNoExp=function(name,isLast,isOnly){var A="for(var result=[],flag_not=A.not,node,el,tagName,i=0,ri=0,found=0;node=el=B[i++];found=0){",B="{0}while(!found&&(node=node.{1})){(node.{2}==={3})&&++found}",C="node=el;while(!found&&(node=node.previousSibling)){node.{2}==={3}&&++found}",D="!found^flag_not&&(result[ri++]=el)}return result",start=isLast?"nextSibling":"previousSibling",fills={type:["tagName=el.nodeName;",start,"nodeName","tagName"],child:["",start,"nodeType","1"]}[name],body=A+B+(isOnly?C:"")+D;return{exec:new Function("A","B",body.replace(/{(\d)}/g,function($,$1){return fills[$1]}))}};dom.mix(Icarus,{getAttribute:!fixGetAttribute?function(elem,name){return elem.getAttribute(name)||""}:function(elem,name,flag_xml){if(flag_xml){return elem.getAttribute(name)||""}name=name.toLowerCase();if(attrURL[name]){return elem.getAttribute(name,2)||""}if(elem.tagName==="INPUT"&&name=="type"){return elem.getAttribute("type")||elem.type}var attr=boolOne[name]?(elem.getAttribute(name)?name:""):(elem=elem.getAttributeNode(name))&&elem.value||"";return reg_sensitive.test(name)?attr:attr.toLowerCase()},hasAttribute:!fixHasAttribute?function(elem,name,flag_xml){return flag_xml?!!elem.getAttribute(name):elem.hasAttribute(name)}:function(elem,name){elem=elem.getAttributeNode(name.toLowerCase());return !!(elem&&(elem.specified||elem.nodeValue))},filter:function(expr,elems,lastResult,doc,flag_xml,flag_get){var rsequence=reg_sequence,rattrib=reg_attrib,rpseudo=reg_pseudo,rBackslash=reg_backslash,rattrval=reg_attrval,pushResult=makeArray,toHex=_toHex,_hash_op=hash_operator,parsePseudo=parse_pseudo,match,key,tmp;while((match=expr.match(rsequence))){expr=RegExp.rightContext;key=(match[2]||"").replace(rBackslash,"");if(!elems){if(lastResult.length===1&&lastResult[0]===doc){switch(match[1]){case"#":if(!flag_xml){tmp=doc.getElementById(key);if(!tmp){elems=[];continue}if(fixById?tmp.id===key:tmp.getAttributeNode("id").nodeValue===key){elems=[tmp];continue}}break;case":":switch(key){case"root":elems=[doc.documentElement];continue;case"link":elems=pushResult(doc.links||[]);continue}break}}elems=getElementsByTagName("*",lastResult,flag_xml)}var filter=0,flag_not=false,args;switch(match[1]){case"#":filter=["id","=",key];break;case".":filter=["class","~=",key];break;case":":tmp=Icarus.hook[key];if((match=expr.match(rpseudo))){expr=RegExp.rightContext;args=parsePseudo(key,match)}if(tmp){filter=tmp}else{if(key==="not"){flag_not=true;if(args==="*"){elems=[]}else{if(reg_tag.test(args)){tmp=[];match=flag_xml?args:args.toUpperCase();for(var i=0,ri=0,elem;elem=elems[i++];){if(match!==elem.nodeName){tmp[ri++]=elem}}elems=tmp}else{var obj=Icarus.filter(args,elems,lastResult,doc,flag_xml,true);filter=obj.filter;args=obj.args}}}else{throw"!"}}break;default:filter=[key.toLowerCase()];if((match=expr.match(rattrib))){expr=RegExp.rightContext;if(match[1]){filter[1]=match[1];filter[2]=match[3]||match[4];filter[2]=filter[2]?filter[2].replace(rattrval,toHex).replace(rBackslash,""):""}}break}if(flag_get){return{filter:filter,args:args}}if(elems.length&&filter){tmp=[];i=0;ri=0;if(typeof filter==="function"){if(onePosition[key]){args=args===undef?elems.length-1:~~args;for(;elem=elems[i];){if(filter(i++,args)^flag_not){tmp[ri++]=elem}}}else{while((elem=elems[i++])){if((!!filter(elem,args))^flag_not){tmp[ri++]=elem}}}}else{if(typeof filter.exec==="function"){tmp=filter.exec({not:flag_not,xml:flag_xml},elems,args,doc)}else{var name=filter[0],op=_hash_op[filter[1]],val=filter[2]||"",flag,attr,className;if(!flag_xml&&name==="class"&&op===4){val=" "+val+" ";while((elem=elems[i++])){className=elem.className;if(!!(className&&~(" "+className+" ").indexOf(val))^flag_not){tmp[ri++]=elem}}}else{if(!flag_xml&&op&&val&&!reg_sensitive.test(name)){val=val.toLowerCase()}if(op===4){val=" "+val+" "}while((elem=elems[i++])){if(!op){flag=Icarus.hasAttribute(elem,name,flag_xml)}else{if(val===""&&op>3){flag=false}else{attr=Icarus.getAttribute(elem,name,flag_xml);switch(op){case 1:(flag=attr===val);break;case 2:(flag=attr!==val);break;case 3:(flag=attr===val||attr.substr(0,val.length+1)===val+"-");break;case 4:(flag=attr!==""&&!!~(" "+attr+" ").indexOf(val));break;case 5:(flag=attr!==""&&!attr.indexOf(val));break;case 6:(flag=attr!==""&&attr.substr(attr.length-val.length)===val);break;case 7:(flag=attr!==""&&!!~attr.indexOf(val));break}}}if(flag^flag_not){tmp[ri++]=elem}}}}}elems=tmp}}return[expr,elems]}});Icarus.hook={root:function(el){return el===(el.ownerDocument||el.document).documentElement},"first-child":filterPseudoNoExp("child",false,false),"last-child":filterPseudoNoExp("child",true,false),"only-child":filterPseudoNoExp("child",true,true),"nth-child":filterPseudoHasExp("firstChild","nextSibling",false),link:{exec:function(flags,elems){var links=(elems[0].ownerDocument||elems[0].document).links;if(!links){return[]}var result=[],checked={},flag_not=flags.not;for(var i=0,ri=0,elem;elem=links[i++];){checked[dom.getUid(elem)]=1}for(i=0;elem=elems[i++];){if(checked[dom.getUid(elem)]^flag_not){result[ri++]=elem}}return result}},lang:{exec:function(flags,elems,arg){var result=[],reg=new RegExp("^"+arg,"i"),flag_not=flags.not;for(var tmp,i=0,ri=0,elem;elem=elems[i++];){tmp=elem;while(tmp&&!tmp.getAttribute("lang")){tmp=tmp.parentNode}tmp=!!(tmp&&reg.test(tmp.getAttribute("lang")));if(tmp^flag_not){result[ri++]=elem}}return result}},contains:{exec:function(flags,elems,arg){var res=[],flag_not=flags.not;for(var i=0,ri=0,elem;elem=elems[i++];){if(!!~((elem.innerText||elem.textContent||dom.getText([elem])).indexOf(arg))^flag_not){res[ri++]=elem}}return res}},selected:function(el){el.parentNode&&el.parentNode.selectedIndex;return el.selected===true},header:function(el){return/h\d/i.test(el.nodeName)},button:function(el){return"button"===el.type||el.nodeName==="BUTTON"},input:function(el){return/input|select|textarea|button/i.test(el.nodeName)},parent:function(el){return !!el.firstChild},has:function(el,expr){return !!dom.query(expr,[el]).length},first:function(index){return index===0},last:function(index,num){return index===num},even:function(index){return index%2===0},odd:function(index){return index%2===1},lt:function(index,num){return index<num},gt:function(index,num){return index>num},eq:function(index,num){return index===num},hidden:function(el){return(el.offsetWidth+el.offsetHeight)==0||(el.currentStyle||{}).display=="none"}};Icarus.hook.visible=function(el){return !Icarus.hook.hidden(el)};"text,radio,checkbox,file,password,submit,image,reset".replace(dom.rword,function(name){Icarus.hook[name]=function(el){return(el.getAttribute("type")||el.type)===name}});var blockCss=/(?:function|open|document|location|alert|confirm|prompt|showmodelessdialog|activexobject|xmlhttprequest|execscript|eval)\s*[(.=;]/i,checkCss=function(a,b){b=b||"visibility";return"hidden"==(w3c_css?DOC.defaultView.getComputedStyle(a,null).getPropertyValue(b):a.currentStyle[b])},removeNode=!!global.VBArray?function(){var b;return function(a){if(a&&"BODY"!=a.tagName){b=b||DOC.createElement("DIV");b.appendChild(a);b.innerHTML=""}}}():function(a){a&&a.parentNode&&"BODY"!=a.tagName&&a.parentNode.removeChild(a)},execFunc=[function(){},function(a){for(var b,c=a.length;c--;){b=a[c];checkCss(b)||(b.style.display="none",b.style.visibility="hidden")}},function(a){for(var c=a.length;c--;){removeNode(a[c])}}],execMainFunc=function(a,b){var c;try{c=dom.query(a)}catch(e){return((c=null),0)}return("function"==typeof execFunc[b]&&execFunc[b](c),c.length)},const_DOMContentLoaded="DOMContentLoaded",const_complete="complete",domReadyList=[],domisReady=0,domReady=function(fn){domisReady?fn():domReadyList.unshift(fn)},domfireReady=function(){if(!domisReady){if(!DOC.body){return setTimeout(domfireReady,32)}domisReady=1;for(var len=domReadyList.length;len--;){domReadyList[len]()}}},createCss=(function(){var style,media,self={},reg_media=/screen|all/i,splitCss=/[\[+>~:].+?/,addCss="{display:none;position:absolute;top:-1000000px;visibility:hidden}",styles=DOC.getElementsByTagName("style"),len=styles.length,new_css=function(g){for(var r=[],z=[],o,y=g.split(","),E=y.length;E--;){o=y[E];o&&(splitCss.test(o)?r:z).push(o)}z.length&&r.push(z.join());return(r.join(addCss)||"iframe")+addCss};while(len--){style=styles[len];media=style.getAttribute("media");if(media===null||reg_media.test(media)){self.style=style;break}}if(!self.style){var head=DOC.head||DOC.getElementsByTagName("head")[0];style=DOC.createElement("style");head.insertBefore(style,head.firstChild);domReady(function(){DOC.body&&DOC.body.insertBefore(style,DOC.body.firstChild)})}return style.styleSheet?function(css){style.styleSheet.cssText+=new_css(css)}:!!global.Components?function(css){style.innerHTML+=new_css(css)}:function(css){style.appendChild(DOC.createTextNode(new_css(css)))}})();if(const_complete==DOC.readyState){domfireReady()}else{if(!DOC.attachEvent){DOC.addEventListener(const_DOMContentLoaded,function(){DOC.removeEventListener(const_DOMContentLoaded,arguments.callee,false);domfireReady()},false)}else{DOC.attachEvent("onreadystatechange",function(){const_complete==DOC.readyState&&(DOC.detachEvent("onreadystatechange",arguments.callee),domfireReady())});(function(){if(domisReady){return}try{var node=new Image();node.doScroll();node=null}catch(e){setTimeout(arguments.callee,64);return}domfireReady()})()}}var AdSafe_CheckRule={regIDS:null,regSub:null,format:function(){var str=arguments[0];var regM=/\{\s*(\d+)\s*\}/,arr,temp="",xb;while((arr=regM.exec(str))!=null){xb=parseInt(arr[1]);if(isNaN(xb)||typeof(arguments[xb+1])=="undefined"){throw"��ָ������:"+arr[0]}temp+=str.substr(0,arr.index)+arguments[xb+1];str=str.substr(arr.index+arr[0].length)}temp+=str;return temp},isNullOrEmpty:function(str){var t=str;if(str.constructor==Array){t=str[0]}if(t==null||t==""){return true}return false},trim:function(str,dir){var regTrim;if(dir=="left"){regTrim=/^\s*/g}else{if(dir=="right"){regTrim=/\s*$/g}else{regTrim=/(?:^\s*|\s*$)/g}}if(str.constructor==String){str=str.replace(regTrim,"")}else{if(str.constructor==Array){for(var i=0;i<str.length;i++){str[i]=str[i].replace(regTrim,"")}}}return str},ini:function(){var strSub=":(has|not)\\(",str_i1="(?:[a-zA-Z_][\\w-]*)";var str_zifu_1=this.format('(?:"{0}"|{1})','(?:(?:\\\\\\\\)*(\\\\[^\\\\])?|[^"\\\\])*',"[^\"'\\\\]+");var str_zifu_2=this.format("(?:'{0}'|{1})","(?:(?:\\\\\\\\)*(\\\\[^\\\\])?|[^'\\\\])*","[^\"'\\\\]+");var str_zifu=this.format("(?:{0}|{1})",str_zifu_1,str_zifu_2),htmltag="(?:a|abbr|acronym|address|applet|area|article|aside|audio|b|base|basefont|bdi|bdo|big|blockquote|body|br|button|canvas|caption|center|cite|code|col|colgroup|command|datalist|dd|del|details|dfn|dialog|dir|div|dl|dt|em|embed|fieldset|figcaption|figure|font|footer|form|frame|frameset|head|header|hgroup|h1|h2|h3|h4|h5|h6|hr|html|i|iframe|img|input|ins|kbd|keygen|label|legend|li|link|map|mark|menu|meta|meter|nav|noframes|noscript|object|ol|optgroup|option|output|p|param|pre|progress|q|rp|rt|ruby|s|samp|script|section|select|small|source|span|strike|strong|style|sub|summary|sup|table|tbody|td|textarea|tfoot|th|thead|time|title|tr|track|tt|u|ul|var|video|wbr)",str_iden="(?:(?:(?:\\b"+htmltag+")?[\\.#]"+str_i1+")+|\\b"+htmltag+"\\b|\\*)",str_attr=this.format("(?:\\[\\s*{0}\\s*(?:(?:\\*|\\^|\\$|\\!)?\\=\\s*(?:{1})\\s*)?\\])",str_i1,str_zifu),str_quick=this.format("(?:\\:(?:button|input|parent|has{1}|not{1}|first|first-child|only-child|last-child|last|even|odd|lt{0}|gt{0}|eq{0}|nth-child{0}|hidden))","\\(\\s*\\d+\\s*\\)","\\([^)]+\\)"),str_alone=this.format("(?:\\s*(?:[>+]\\s*)?(?:{0}|{1}|{2})+)+",str_iden,str_attr,str_quick),str_jquerys=this.format("^{0}\\s*(?:,\\s*{0}\\s*)*$",str_alone);this.regIDS=new RegExp(str_jquerys,"i");this.regSub=new RegExp(strSub,"i")},Checking:function(str){if(this.isNullOrEmpty(str)){return false}var result=this.AloneSub(str);if(!result){return false}if(this.isNullOrEmpty(str)){return true}if(!this.CheckRules(str)){return false}return true},CheckRules:function(str){var strArr=str[0].split(",");var lst=[];for(var t=0;t<strArr.length;t++){lst.push(this.trim(strArr[t]));if(this.regIDS.test(lst.join(","))){lst=[]}}if(lst.length>0){return false}else{return true}},GetPair:function(k){var t=[],result=[],c;t.push("0");for(var i=0;i<k.length;i++){c=k.charAt(i);if(c=="("){t.push("0")}if(c==")"){t.pop()}if(t.length==0){return result.join("")}result.push(c)}return null},AloneSub:function(str){var v,v1,temp,temp1,result,hasSub=false,m=this.regSub.exec(str[0]);if(m!=null){v=str[0].substr(m.index+m[0].length);v1=[this.GetPair(v)];if(this.isNullOrEmpty(v1)){return false}temp=[v1[0]];result=this.AloneSub(v1);if(!result){return false}else{temp1=this.trim(str[0].substr(0,m.index),"right");if(temp1.length>0){var rc=str[0].charAt(temp1.length-1);if(rc==">"||rc=="+"||rc==","){if(temp1.length-1>=0){temp1=temp1.substr(0,temp1.length-1)}hasSub=true}}if(hasSub){str[0]=temp1+" "+str[0].substr(m.index+m[0].length+temp[0].length+1)}else{str[0]=str[0].substr(0,m.index)+str[0].substr(m.index+m[0].length+temp[0].length+1)}str[0]=this.trim(str[0])}if(this.isNullOrEmpty(str)){return true}return this.AloneSub(str)}else{return this.CheckRules(str)}}};var isIni=false;var checkCSSRule=function(line){if(!isIni){AdSafe_CheckRule.ini();isIni=true}var i=line.indexOf("??1");if(i>=0){line=line.substr(0,i)}line=AdSafe_CheckRule.trim(line);if(line==""){return false}return AdSafe_CheckRule.Checking([line])};global.hidecss=function(c){if(c.indexOf("??1")>-1||c.indexOf("??")<0){try{if(!checkCSSRule(c)){return}}catch(e){}}if(!c||blockCss.test(c)){return}var d=String(c).split("??"),f=parseInt(d[1],10)||1,g=d[0],l=100;var setCookie=function(name,value,expires,path,domain,secure){var curCookie=name+"="+escape(value)+((expires)?"; expires="+expires.toGMTString():"")+((path)?"; path="+path:"")+((domain)?"; domain="+domain:"")+((secure)?"; secure":"");document.cookie=curCookie};var addCookieForHours=function(name,value,path,domain,hour,secure){var t;if(hour){t=new Date();hour=isNaN(parseFloat(hour))?1:hour;t.setTime(t.getTime()+hour*3600*1000)}setCookie(name,value,t,path,domain,secure)};var deleteCookie=function(name,path,domain){document.cookie=name+"="+((path)?"; path="+path:"")+((domain)?"; domain="+domain:"")+"; expires=Thu, 01-Jan-70 00:00:01 GMT"};var clearCookie=function(path,domain,arr){var keys=[],r,reg=/([^=; ]+)=([^;]+)/g,cook=document.cookie;while((r=reg.exec(cook))!=null){keys.push(r[1])}if(keys&&keys.length>0){var _f;if(typeof arr=="undefined"||!arr){arr=[]}if(typeof arr=="string"){arr=[arr]}for(var i=keys.length-1;i--;i>=0){_f=false;for(var k=0;k<arr.length;k++){if(keys[i]==arr[k]){_f=true;break}}if(_f){continue}deleteCookie(keys[i],path,domain)}}};var checkParm=function(parm){return/^(?:\s*(?:(?:"[^"+(),]*"|null|\d+)|\[(?:\s*(?:"[^"+(),]*"|null|\d+)\s*)(?:(?:,(?:\s*(?:"[^"+(),]*"|null|\d+)\s*))*)\])\s*)(?:(?:,(?:\s*(?:(?:"[^"+(),]*"|null|\d+)|\[(?:\s*(?:"[^"+(),]*"|null|\d+)\s*)(?:(?:,(?:\s*(?:"[^"+(),]*"|null|\d+)\s*))*)\])\s*))*)$/.test(parm)};var execYC=function(method,arg){eval("try{"+method+"("+arg+");}catch(e){};")};if(f==3){eval("try{"+g+"}catch(e){}");return}if(f==4){if(!checkParm(g)){return}execYC("addCookieForHours",g);return}if(f==5){if(!checkParm(g)){return}execYC("deleteCookie",g);return}if(f==6){if(!checkParm(g)){return}execYC("clearCookie",g);return}1===f&&createCss(g);(function(){var b="$"+g,a=execMainFunc(g,f);dom[b]&&clearTimeout(dom[b]);dom[b]=null;(a||l--<0)||(dom[b]=setTimeout(arguments.callee,64))})();domReady(function(){execMainFunc(g,f)})}})(self);
\ No newline at end of file
diff --git a/package/lean/adbyby/files/update.info b/package/lean/adbyby/files/update.info
new file mode 100755
index 0000000000..c81cc9f92c
--- /dev/null
+++ b/package/lean/adbyby/files/update.info
@@ -0,0 +1,10 @@
+;���¹���url,dir,size,reverse,reverse
+http://update.adbyby.com/rule3/lazy.jpg	\data\lazy.txt	385337	4	0	
+http://update.adbyby.com/rule3/video.jpg	\data\video.txt	1028	4	0	
+http://update.adbyby.com/rule3/user.action	\user.action	512	5	0	
+http://update.adbyby.com/rule3/clean.ini	\data\clean.ini	2167	0	0	
+http://update.adbyby.com/rule3/adclear.ini	\data\adclear.ini	4901	0	0	
+https://github.com/gchangchen/suho/raw/master/adhook.dll	\adhook.dll	117248	0	0	2.4.3.2
+https://github.com/gchangchen/suho/raw/master/adhook64.dll	\adhook64.dll	142848	0	0	2.4.3.2
+https://github.com/gchangchen/suho/raw/master/adbyby.exe	\adbyby.exe	1004183	1	0	2.4.4.0
+
diff --git a/package/lean/adbyby/files/user.action b/package/lean/adbyby/files/user.action
new file mode 100755
index 0000000000..e69de29bb2
diff --git a/package/lean/adbyby/files/x86/adbyby b/package/lean/adbyby/files/x86/adbyby
new file mode 100755
index 0000000000..a3970fe2fc
Binary files /dev/null and b/package/lean/adbyby/files/x86/adbyby differ
diff --git a/package/lean/adbyby/files/x86_64/adbyby b/package/lean/adbyby/files/x86_64/adbyby
new file mode 100755
index 0000000000..5c56060635
Binary files /dev/null and b/package/lean/adbyby/files/x86_64/adbyby differ
diff --git a/package/lean/amule/Makefile b/package/lean/amule/Makefile
new file mode 100644
index 0000000000..2d66d714f3
--- /dev/null
+++ b/package/lean/amule/Makefile
@@ -0,0 +1,109 @@
+#
+# Copyright (C) 2007-2009 OpenWrt.org
+#
+# This is free software, licensed under the GNU General Public License v2.
+# See /LICENSE for more information.
+#
+
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=aMule
+PKG_VERSION:=20190827
+PKG_RELEASE:=1
+PKG_REV=2a1b092
+
+
+PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION)-r$(PKG_REV).tar.bz2
+PKG_SOURCE_SUBDIR:=$(PKG_NAME)-$(PKG_VERSION)
+PKG_SOURCE_PROTO:=git
+PKG_SOURCE_VERSION:=$(PKG_REV)
+PKG_SOURCE_URL:=https://github.com/amule-project/amule.git
+
+PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION)
+PKG_BUILD_DEPENDS:=libgd libcryptopp
+
+include $(INCLUDE_DIR)/package.mk
+include $(INCLUDE_DIR)/nls.mk
+
+define Package/amule/config
+config AMULE_CRYPTOPP_STATIC_LINKING
+	bool "Link libcryptopp statically"
+	default y
+endef
+
+define Package/amule
+  SUBMENU:=P2P
+  SECTION:=net
+  CATEGORY:=Network
+  TITLE:=A multi-platform eMule-like ed2k client
+  URL:=http://www.amule.org/
+  DEPENDS:=+libpng +libpthread +libncurses +libreadline +libwxbase +libupnp +libbfd \
+	$(ICONV_DEPENDS) $(INTL_DEPENDS) +!AMULE_CRYPTOPP_STATIC_LINKING:libcryptopp
+endef
+
+CONFIGURE_ARGS+= \
+	--disable-static \
+	--disable-rpath \
+	--with-gnu-ld \
+	--disable-ccache \
+	--disable-optimize \
+	--disable-profile \
+	--disable-monolithic \
+	--enable-amule-daemon \
+	--enable-amulecmd \
+	--enable-webserver \
+	--disable-amule-gui \
+	--disable-cas \
+	--disable-wxcas \
+	--disable-ed2k \
+	--disable-alc \
+	--disable-alcc \
+	--disable-fileview \
+	--disable-plasmamule \
+	--without-wxdebug \
+	--enable-dlp \
+	--enable-upnp \
+	--with-zlib="$(STAGING_DIR)/usr" \
+	--with-gdlib-prefix="$(STAGING_DIR)/usr" \
+	--with-libpng-prefix="$(STAGING_DIR)/usr" \
+	--with-wx-prefix="$(STAGING_DIR)/usr" \
+	--with-crypto-prefix="$(STAGING_DIR)/usr" \
+	--with-libiconv-prefix="$(ICONV_PREFIX)" \
+	--with-libintl-prefix="$(INTL_PREFIX)" \
+	--with-libupnp-prefix="$(STAGING_DIR)/usr" \
+	--without-x \
+	--disable-debug 
+
+TARGET_LDFLAGS += -liconv 
+
+
+define Build/Configure
+	cd $(PKG_BUILD_DIR) && sh ./autogen.sh
+	$(call Build/Configure/Default)
+endef
+
+ifeq ($(CONFIG_AMULE_CRYPTOPP_STATIC_LINKING),y)
+	SED_CMD:=sed
+else
+	SED_CMD:=true
+endif
+
+define Build/Compile
+	$(SED_CMD) -i 's;^CRYPTOPP_LIBS.*;CRYPTOPP_LIBS \= "$(STAGING_DIR)/usr/lib/libcryptopp.a";g' \
+		$(PKG_BUILD_DIR)/src/Makefile
+	$(MAKE) -C $(PKG_BUILD_DIR) \
+		HOSTCC="$(HOSTCC)" \
+		DESTDIR="$(PKG_INSTALL_DIR)" \
+		all
+endef
+
+define Package/amule/install
+	$(INSTALL_DIR) $(1)/usr/bin
+	$(INSTALL_DIR) $(1)/usr/share/amule/webserver
+	$(INSTALL_BIN) $(PKG_BUILD_DIR)/src/amule{cmd,d} $(1)/usr/bin/
+	$(INSTALL_BIN) $(PKG_BUILD_DIR)/src/webserver/src/amuleweb $(1)/usr/bin/
+	$(CP) $(PKG_BUILD_DIR)/src/webserver/default $(1)/usr/share/amule/webserver
+	
+endef
+
+$(eval $(call BuildPackage,amule))
diff --git a/package/lean/antileech/Makefile b/package/lean/antileech/Makefile
new file mode 100644
index 0000000000..6cece3a58d
--- /dev/null
+++ b/package/lean/antileech/Makefile
@@ -0,0 +1,58 @@
+#
+# Copyright (C) 2007-2009 OpenWrt.org
+#
+# This is free software, licensed under the GNU General Public License v2.
+# See /LICENSE for more information.
+#
+
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=antileech
+PKG_VERSION:=2.3.2
+PKG_RELEASE:=1
+
+#PKG_SOURCE:=antileech-2.3.1.tar.gz
+#PKG_SOURCE_URL:=@SF/amule
+#PKG_MD5SUM:=a892a1cc00d03e943e03434d182fe73e
+
+PKG_BUILD_DEPENDS:=libgd
+
+include $(INCLUDE_DIR)/package.mk
+include $(INCLUDE_DIR)/nls.mk
+
+define Package/antileech
+  SUBMENU:=P2P
+  SECTION:=net
+  CATEGORY:=Network
+  TITLE:=AntiLeech for amule
+  URL:=http://www.amule.org/
+  DEPENDS:=+libc +amule +libwxbase
+endef
+
+TARGET_LDFLAGS += \
+
+define Build/Prepare
+	mkdir -p $(PKG_BUILD_DIR)
+	$(CP) ./src/* $(PKG_BUILD_DIR)/
+endef
+
+define Build/Configure
+	sed -i "s:^AC_CHECK_PROG.WXCONFIG,.*::g" $(PKG_BUILD_DIR)/configure.ac
+	sed -i "s:wx-config --cppflags:$(STAGING_DIR)/usr/bin/wx-config --cppflags:g" $(PKG_BUILD_DIR)/configure.ac
+	cd $(PKG_BUILD_DIR) && sh ./autogen.sh
+	$(call Build/Configure/Default)
+endef
+
+define Build/Compile
+	$(MAKE) -k -C $(PKG_BUILD_DIR) \
+		HOSTCC="$(HOSTCC)" \
+		DESTDIR="$(PKG_INSTALL_DIR)" \
+		all install
+endef
+
+define Package/antileech/install
+	$(INSTALL_DIR) $(1)/usr/share/amule
+	$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/share/amule/libantiLeech.so $(1)/usr/share/amule
+endef
+
+$(eval $(call BuildPackage,antileech))
diff --git a/package/lean/antileech/src/CString_wx.h b/package/lean/antileech/src/CString_wx.h
new file mode 100644
index 0000000000..30bf051878
--- /dev/null
+++ b/package/lean/antileech/src/CString_wx.h
@@ -0,0 +1,63 @@
+/**
+ * Author:	Bill Lee<bill.lee.y@gmail.com>
+ * License:	GNU GPL
+ */
+//---------------------
+#ifndef CSTRING_WX_H
+#define CSTRING_WX_H
+
+//#include <wx/wx.h>
+#include <wx/string.h>
+
+class CString : public wxString{
+	public:
+		CString(){}
+		CString(wxChar c, size_t n=1): wxString(c, n){}
+		CString(const wxChar* str): wxString(str){}
+		CString(const wxString& str): wxString(str){}
+		CString(const CString& str): wxString(str){}
+		//---------------------
+		CString& operator=(const wxChar* str){
+			wxString::operator=(str);
+			return *this;
+		}
+		//operator*() from wxString;
+		size_t GetLength()const{	return Length();	}
+		wxChar GetAt(size_t nIndex)const{	return GetChar(nIndex);	}
+		//IsEmpty() from wxString;
+		CString& TrimLeft(wxChar c){
+			size_t pos = find_first_not_of(c);
+			if(pos == 0)
+				return *this;
+			erase(0, pos);
+			return *this;
+		}
+		CString& TrimRight(wxChar c){
+			size_t pos = find_last_not_of(c) + 1;
+			if(pos == Length())
+				return *this;
+			erase(pos, Length() - pos);
+			return *this;
+		}
+		CString Trim(){
+			CString ret(*this);
+			ret.wxString::Trim(false);        /* wxString::Trim(bool fromright = true) */
+			ret.wxString::Trim(true);
+			return ret;
+		}
+		//Find(wxChar) and Find(wxChar*) from wxString;
+		int Find(const CString& str)const{	return wxString::Find(str.c_str());	}
+		int ReverseFind(const wxChar c)const{	return wxString::Find(c, true);	}
+		int ReverseFind(const wxChar* str)const{	return rfind(str);	}
+		int ReverseFind(const CString& str)const{	return rfind(str);	}
+		CString Right(size_t len)const{	return wxString::Right(len);	}
+		CString Left(size_t len)const{	return wxString::Left(len);	}
+#if wxCHECK_VERSION(2, 9, 0)
+		CString Mid(size_t first, size_t count = wxString::npos)const{
+#else
+		CString Mid(size_t first, size_t count = wxSTRING_MAXLEN)const{
+#endif
+			return wxString::Mid(first, count);
+		}
+};
+#endif
diff --git a/package/lean/antileech/src/Interface.cpp b/package/lean/antileech/src/Interface.cpp
new file mode 100644
index 0000000000..7dae765842
--- /dev/null
+++ b/package/lean/antileech/src/Interface.cpp
@@ -0,0 +1,28 @@
+/*
+ * =====================================================================================
+ *
+ *       Filename:  Interface.cpp
+ *
+ *    Description:  A part of aMule DLP
+ *
+ *        Created:  2011-02-24 19:49
+ *
+ *         Author:  Bill Lee , bill.lee.y@gmail.com
+ *	
+ *	Copyright (c) 2011, Bill Lee
+ *	License: GNU General Public License
+ *
+ * =====================================================================================
+ */
+
+/* #####   HEADER FILE INCLUDES   ################################################### */
+#include "antiLeech.h"
+
+/* #####   FUNCTION DEFINITIONS  -  EXPORTED FUNCTIONS   ############################ */
+extern "C" IantiLeech* createAntiLeechInstant(){
+	return new CantiLeech;
+}
+extern "C" int destoryAntiLeechInstant(IantiLeech* ptr){
+	delete ptr;
+	return 0;
+}
diff --git a/package/lean/antileech/src/Makefile.am b/package/lean/antileech/src/Makefile.am
new file mode 100755
index 0000000000..696a1bb2a0
--- /dev/null
+++ b/package/lean/antileech/src/Makefile.am
@@ -0,0 +1,16 @@
+AUTOMAKE_OPTIONS = foreign
+
+pkgdir = $(datadir)/amule
+ACLOCAL_AMFLAGS = -I m4
+
+pkg_LTLIBRARIES = libantiLeech.la
+libantiLeech_la_CPPFLAGS = ${ANTILEECH_CPPFLAGS}
+libantiLeech_la_LDFLAGS = ${ANTILEECH_LDFLAGS} -module -avoid-version --no-la-files
+libantiLeech_la_SOURCES = \
+	antiLeech.h \
+	antiLeech_wx.h \
+	CString_wx.h \
+	antiLeech.cpp \
+	antiLeech_wx.cpp \
+	Interface.cpp
+
diff --git a/package/lean/antileech/src/antiLeech.cpp b/package/lean/antileech/src/antiLeech.cpp
new file mode 100644
index 0000000000..d3276d472f
--- /dev/null
+++ b/package/lean/antileech/src/antiLeech.cpp
@@ -0,0 +1,1599 @@
+//DLP = Dynamic Leecher Protection
+//this code is part of Xtreme-Mod
+//author: Xman
+
+//This program is free software; you can redistribute it and/or
+//modify it under the terms of the GNU General Public License
+//as published by the Free Software Foundation; either
+//version 2 of the License, or (at your option) any later version.
+//
+//This program is distributed in the hope that it will be useful,
+//but WITHOUT ANY WARRANTY; without even the implied warranty of
+//MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+//GNU General Public License for more details.
+//
+//You should have received a copy of the GNU General Public License
+//along with this program; if not, write to the Free Software
+//Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
+
+
+#include "CString_wx.h"
+#include "antiLeech.h"
+#define __declspec(var)        CantiLeech::
+#define SPECIAL_DLP_VERSION
+#define ALL_VERYCD_MOD
+
+#ifdef _DEBUG
+#define new DEBUG_NEW
+#endif
+
+//>>> eWombat [SNAFU_V3]
+LPCTSTR apszSnafuTag[]=
+{
+	_T("[DodgeBoards]"),									//0
+		_T("[DodgeBoards & DarkMule eVorteX]"),					//1
+		_T("[DarkMule v6 eVorteX]"),							//2
+		_T("[eMuleReactor]"),									//3
+		_T("[Bionic]"),											//4
+		_T("[LSD7c]"),											//5
+		_T("[0x8d] unknown Leecher - (client version:60)"),		//6
+		_T("[RAMMSTEIN]"),										//7
+		_T("[MD5 Community]"),									//8
+		_T("[new DarkMule]"),									//9
+		_T("[OMEGA v.07 Heiko]"),								//10
+		_T("[eMule v0.26 Leecher]"),							//11
+		_T("[Hunter]"),											//12
+		_T("[Bionic 0.20 Beta]"),								//13
+		_T("[Rumata (rus)(Plus v1f)]"),							//14
+		_T("[Fusspi]"),											//15
+		_T("[donkey2002]"),										//16
+		_T("[md4]"),									        //17
+		_T("[SpeedMule]"),										//18 Xman 
+		_T("[pimp]")											//19 Xman 
+		,_T("[Chinese Leecher]")								//20 SquallATF
+		//,_T("[eChanblardNext]")								//21 zz_fly
+};
+
+const DWORD CantiLeech::DLPVersion = 4405;
+
+//deactivate M$WIN-specific codes
+#if 0
+BOOL WINAPI  DllMain (
+					  HANDLE    hModule,
+					  DWORD     dwFunction,
+					  LPVOID    lpNot)
+{
+	switch (dwFunction)
+	{
+	case DLL_PROCESS_ATTACH:
+	case DLL_THREAD_ATTACH:
+	case DLL_THREAD_DETACH:
+	case DLL_PROCESS_DETACH:
+		break;
+	}
+
+	return TRUE;
+}
+
+
+void __declspec(dllexport)  TestFunc()
+{
+	::MessageBox(NULL,_T("Inside the DLL!"),_T("Nix"),0);
+}
+#endif
+
+//old versions just to keep compatible
+/* //drop old version support
+LPCTSTR __declspec(dllexport) DLPCheckModstring(LPCTSTR modversion, LPCTSTR clientversion)
+{
+	if(modversion==NULL || clientversion==NULL)
+		return NULL;
+
+	if (StrStrI(modversion,_T("Freeza"))||
+		StrStrI(modversion,_T("d-unit"))||
+		//StrStrI(modversion,_T("NOS"))|| //removed for the moment
+		StrStrI(modversion,_T("imperator"))||
+		StrStrI(modversion,_T("SpeedLoad"))||
+		StrStrI(modversion,_T("gt mod"))||
+		StrStrI(modversion,_T("egomule"))||
+		StrStrI(modversion,_T("aldo"))|| 
+		StrStrI(modversion,_T("darkmule"))||
+		StrStrI(modversion,_T("LegoLas"))||
+		StrStrI(modversion,_T("dodgethis"))|| //Updated
+		StrStrI(modversion,_T("DM-"))|| 
+		StrStrI(modversion,_T("|X|"))||
+		StrStrI(modversion,_T("eVorte"))||
+		StrStrI(modversion,_T("Mison"))||
+		StrStrI(modversion,_T("father"))||
+		StrStrI(modversion,_T("Dragon"))||
+		StrStrI(modversion,_T("booster"))|| //Temporaly added, must check the tag
+		StrStrI(modversion,_T("$motty"))||
+		StrStrI(modversion,_T("Thunder"))||
+		StrStrI(modversion,_T("BuzzFuzz"))||
+		StrStrI(modversion,_T("Speed-Unit"))|| 
+		StrStrI(modversion,_T("Killians"))||
+		StrStrI(modversion,_T("Element"))|| 
+		StrStrI(modversion,_T("§¯Å]"))||
+		StrStrI(modversion,_T("Rappi"))||
+		StrStrI(modversion,_T("EastShare")) && StrStrI(clientversion,_T("0.29"))||
+		StrStrI(modversion,_T("eChanblard v7.0")) ||
+		//StrStrI(modversion,_T("ACAT")) ||
+		StrStrI(modversion,_T("!FREEANGEL!")) ||
+		StrStrI(modversion,_T("          ")) ||
+		StrStrI(modversion,_T("Stonehenge")) ||
+		StrStrI(modversion,_T("@RAPTOR")) ||
+		StrStrI(modversion,_T("pwNd muLe")) ||
+		StrStrI(modversion,_T("HARDPAW")) ||
+		StrStrI(modversion,_T("XXL")) ||
+		StrStrI(modversion,_T("LSD")) ||			
+		StrStrI(modversion,_T("Rockesel")) || //WiZaRd
+		StrStrI(modversion,_T("Bad Donkey")) || //WiZaRd
+		StrStrI(modversion,_T("DSL-Light-Client")) || //WiZaRd
+		StrStrI(modversion,_T("Elben")) || //WiZaRd
+		StrStrI(modversion,_T("PROeMule")) || //WiZaRd
+		StrStrI(modversion,_T("OO.de")) ||	//WiZaRd		
+		StrStrI(modversion,_T("00.de")) || //WiZaRd
+		StrStrI(modversion,_T("OOde")) || //WiZaRd
+		StrStrI(modversion,_T("00de")) ||
+		StrStrI(modversion,_T("Devil")) ||
+		StrStrI(modversion,_T("Elfen")) ||
+		StrStrI(modversion,_T("Ef-mod ")) || //Xman this mod can be abused as a full leecher
+		StrStrI(modversion,_T("HARDMULE")) ||
+		StrStrI(modversion,_T("Xtreme Xtended")) || //Xman 15.08.05
+		StrStrI(modversion, _T("MirageMod"))||		 // "
+		StrStrI(modversion, _T("SpeedX"))||
+		StrStrI(modversion, _T("AIDEADSL"))||
+		StrStrI(modversion, _T("Hypnotix"))||
+		StrStrI(modversion, _T("blackviper"))||
+		StrStrI(modversion, _T("BlackAngel"))||
+		StrStrI(modversion, _T("Community"))|| 
+		StrStrI(modversion, _T("rabbit"))|| 
+		StrStrI(modversion, _T("rabb_it"))|| 
+		StrStrI(modversion, _T("Speedmule"))|| 
+		StrStrI(modversion, _T("Raptor"))|| 
+		StrStrI(modversion, _T("Hawkstar"))|| 
+		StrStrI(modversion, _T("ServerClient"))|| 
+		StrStrI(modversion, _T("Love-Angel"))|| 
+		StrStrI(modversion, _T("SuperKiller"))|| 
+		StrStrI(modversion, _T("Ultimativ"))||
+		StrStrI(modversion, _T("uptempo"))||
+		StrStrI(modversion, _T("ZamBoR"))||
+		StrStrI(modversion, _T("Arabella"))||
+		StrStrI(modversion,_T("Morph")) && (StrStrI(modversion,_T("Max")) || StrStrI(modversion,_T("+")) || StrStrI(modversion,_T("×"))) ||
+		StrStrI(modversion, _T("Morph XT"))||	//very bad mod (MPAA ?)
+		StrStrI(modversion, _T("BlueHex"))||
+		StrStrI(modversion, _T("FlowerPower"))||
+		StrStrI(modversion, _T("Fincan"))||
+		StrStrI(modversion, _T("Heartbreaker"))||
+		StrStrI(modversion, _T("Administrator"))||
+		StrStrI(modversion, _T("B@d-D3vi7"))||
+		StrStrI(modversion, _T("CryptedSpeed"))||
+		StrStrI(modversion, _T("DarkDragon"))||
+		StrStrI(modversion, _T("OS_"))||	//Xman most are found via other checks, but not all
+		_tcslen(modversion) > 0 && (StrStrI(clientversion,_T("edonkey")) || modversion[0]==_T('['))   ||  //1. donkey user with modstring, 2. modstring begins with [ this is a known leecher
+		(StrStrI(modversion, _T("Xtreme")) && StrStrI(modversion, _T("]")))  //bad Xtreme mod
+		)
+			return _T("Bad MODSTRING");
+
+	return NULL;
+}
+
+LPCTSTR __declspec(dllexport) DLPCheckUsername(LPCTSTR username)
+{
+	if(username==NULL)
+		return NULL;
+
+	if (StrStrI(username,_T("$GAM3R$"))||
+		StrStrI(username,_T("G@m3r"))||
+		StrStrI(username,_T("$WAREZ$"))||
+		//StrStrI(username,_T("RAMMSTEIN"))||//	//Xman 21.06.05 SNAFU should filter the right ones out
+		//StrStr(username,_T("toXic"))||	//Xman 19.10.05 too old
+		StrStrI(username,_T("Leecha"))||
+		StrStr(username,_T("eDevil"))|| 
+		StrStrI(username,_T("darkmule"))||
+		//StrStrI(username,_T("phArAo"))||	//Xman 19.10.05 too old
+		//StrStrI(username,_T("dodgethis"))|| //Xman 21.06.05 not seen for a long time
+		StrStrI(username,_T("Reverse"))||
+		//StrStrI(username,_T("eVortex"))|| //Xman didn't see it for a long time
+		//StrStrI(username,_T("|eVorte|X|"))||	//"
+		//StrStrI(username,_T("Chief"))|| //Xman 17.5.08 old and no more needed
+		StrStrI(username,_T("$motty"))||
+		StrStrI(username,_T("emule-speed"))||
+		StrStrI(username,_T("celinesexy"))||
+		StrStrI(username,_T("Gate-eMule"))||
+		StrStrI(username,_T("energyfaker"))||
+		StrStrI(username,_T("BuzzFuzz"))||
+		StrStrI(username,_T("Speed-Unit"))|| 
+		StrStrI(username,_T("Killians"))||
+		StrStrI(username,_T("pubsman"))||
+		StrStrI(username,_T("emule-element"))||
+		StrStrI(username,_T("00de.de"))|| 
+		StrStrI(username,_T("00de")) ||
+		StrStrI(username,_T("OO.de"))|| 
+		StrStrI(username,_T("OOde")) ||
+		StrStrI(username,_T("emule")) && StrStrI(username,_T("booster")) ||
+		StrStrI(username,_T("Rappi")) ||
+		StrStrI(username,_T("Ketamine")) ||
+		StrStrI(username,_T("HARDMULE")) ||
+		StrStrI(username,_T("emuleech")) ||
+		//Xman 15.08.05
+		StrStrI(username, _T("SchlumpMule"))|| //"
+		StrStrI(username, _T("Safty´s"))||
+		StrStrI(username, _T("UnKnOwN pOiSoN"))||
+		StrStrI(username, _T("ElfenPower"))||
+		StrStrI(username, _T("eMule Cow"))||
+		StrStrI(username, _T("Freezamule"))||
+		StrStr(username, _T("EGOmule"))||
+		StrStrI(username, _T("-=EGOist=-"))||
+		StrStrI(username, _T("FreezaVamp"))||
+		StrStrI(username, _T("Muli_Checka"))||
+		StrStr(username, _T("PrOjEcT-SaNdStOrM"))||
+		StrStr(username, _T("NotHer eDitiOn"))||
+		StrStrI(username, _T("eSl@d3vil"))||
+		StrStrI(username, _T(" AgentSmith"))||
+		StrStrI(username, _T("rabb_it"))||
+		StrStrI(username, _T("ServerClient"))||
+		StrStrI(username, _T(">>Power-Mod"))||
+		StrStr(username, _T("DM_X"))|| //darkmule
+		StrCmpI(username, _T("Muse"))==0 || //ketamine mod
+		StrStr(username, _T("ZamBoR"))||
+		StrStr(username, _T("emule.razorback3.com"))||
+
+		StrStrI(username,_T("[LSD.19"))	//Xman 21.06.2005 definitive not a good mod, with protocol bugs
+		)
+		return _T("Bad USERNAME");
+
+	//bad mods, where every second sign is
+	//enough to check two places
+
+	if(_tcslen(username) >=4 
+		&&	username[3]<=0x1F
+		&& username[1]<=0x1F
+		)
+		return _T("Leecher-Username");
+
+	return NULL;
+}
+
+LPCTSTR __declspec(dllexport) DLPCheckNameAndHash(CString username, CString& userhash)
+{
+	if(username.IsEmpty() || userhash.IsEmpty())
+		return NULL;
+
+	//community check
+	if(username.GetLength()>=7 && username.Right(1)==_T("]"))
+	{
+		//check for gamer
+		//two checks should be enough.
+		if(username.Right(6).Left(1)==userhash.Mid(5,1)
+			&& username.Right(3).Left(1)==userhash.Mid(7,1)
+			)
+			return _T("Gamers");
+		//check for snake
+		int find=username.ReverseFind(_T('['));
+		if(find>=0)
+		{
+			CString addon=username.Mid(find+1);
+			int endpos=addon.GetLength()-1;
+			for(int i=0; i<endpos;i++)
+			{
+				if( !(addon.GetAt(i)>=_T('0') && addon.GetAt(i)<=_T('9')) )
+				{
+					i=endpos+1;
+				}
+			}
+			if(i==endpos)
+				return _T("Snake");
+		}
+	}
+
+	return NULL;
+}
+*/
+//end old version ------------------------------------------
+
+bool CantiLeech::IsTypicalHex(const CString& addon)
+{
+	if(addon.GetLength()>25 || addon.GetLength()<5)
+		return false;
+	short bigalpha=0;
+	short smallalpha=0;
+	short numeric=0;
+
+	int endpos=addon.GetLength();
+	int i = 0;
+	for(i=0;i<endpos;i++)
+	{
+		if( (addon.GetAt(i)>=_T('0') && addon.GetAt(i)<=_T('9')) )
+			numeric++;
+		else if( (addon.GetAt(i)>=_T('A') && addon.GetAt(i)<=_T('F')) )
+			bigalpha++;
+		else if( (addon.GetAt(i)>=_T('a') && addon.GetAt(i)<=_T('f')) )
+			smallalpha++;
+		else
+			break;
+	}
+	if(i==endpos)
+	{
+		if(numeric>0 && 
+			(smallalpha>0 && bigalpha==0 || smallalpha==0 && bigalpha>0)
+			)
+			return true;
+	}
+	return false;
+}
+
+LPCTSTR __declspec(dllexport) DLPCheckUserhash(const PBYTE userhash)
+{
+	// No more AJ check
+	return NULL;
+}
+
+//new versions
+LPCTSTR __declspec(dllexport) DLPCheckModstring_Hard(LPCTSTR modversion, LPCTSTR clientversion)
+{
+	if(modversion==NULL || clientversion==NULL)
+		return NULL;
+
+	if(_tcsstr(clientversion, L"eMule Compat v0.26.2"))
+		return L"Flashget";
+
+	if (
+//Chinese Leecher - https://forum.emule-project.net/index.php?showtopic=134097&hl=
+		_tcsstr(modversion,L"TM0910") ||
+//Chinese Leecher - https://forum.emule-project.net/index.php?showtopic=134097&hl=
+		//StrStrI(modversion,_T("Freeza"))||
+		StrStrI(modversion,_T("FXeMule"))||
+		StrStrI(modversion,_T("FX eMule"))||
+		StrStrI(modversion,_T("RIAA"))||
+		//StrStrI(modversion,_T("d-unit"))||
+		//StrStrI(modversion,_T("NOS"))|| //removed for the moment
+		//StrStrI(modversion,_T("imperator"))||
+		StrStrI(modversion,_T("SpeedLoad"))||
+		//StrStrI(modversion,_T("gt mod"))|| //outdated
+		//StrStrI(modversion,_T("egomule"))|| //outdated
+		//StrStrI(modversion,_T("aldo"))|| //outdated
+		//StrStrI(modversion,_T("darkmule"))|| //outdated
+		//StrStrI(modversion,_T("LegoLas"))||
+		//StrStrI(modversion,_T("dodgethis"))|| //Updated
+		//StrStrI(modversion,_T("DM-"))|| 
+		//StrStrI(modversion,_T("|X|"))||
+		//StrStrI(modversion,_T("eVorte"))||
+		//StrStrI(modversion,_T("Mison"))||
+		//StrStrI(modversion,_T("father"))||
+		//StrStrI(modversion,_T("Dragon"))||
+		//StrStrI(modversion,_T("$motty"))||
+		//StrStrI(modversion,_T("Thunder"))||
+		//StrStrI(modversion,_T("BuzzFuzz"))||
+		//StrStrI(modversion,_T("Speed-Unit"))|| 
+		//StrStrI(modversion,_T("Killians"))||
+		StrStrI(modversion,_T("Element"))|| 
+		//StrStrI(modversion,_T("§¯Å]"))|| //outdated
+		StrStrI(modversion,_T("Rappi"))||
+		StrStrI(modversion,_T("EastShare")) && StrStrI(clientversion,_T("0.29"))||
+		StrStrI(modversion,_T("eChanblard v7.0")) ||
+		//StrStrI(modversion,_T("ACAT")) ||
+		//StrStrI(modversion,_T("!FREEANGEL!")) ||
+		StrStrI(modversion,_T("          ")) ||
+		//StrStrI(modversion,_T("Stonehenge")) ||
+		StrStrI(modversion,_T("@RAPTOR")) ||
+		StrStr(modversion,_T("pwNd muLe")) ||
+		StrStrI(modversion,_T("HARDPAW")) ||
+		//StrStrI(modversion,_T("XXL")) ||
+		StrStrI(modversion,_T("LSD")) ||			
+		StrStrI(modversion,_T("Bad Donkey")) || //WiZaRd
+		StrStrI(modversion,_T("DSL-Light-Client")) || //WiZaRd
+		StrStrI(modversion,_T("Elben")) || //WiZaRd
+		StrStr(modversion,_T("PROeMule")) || //WiZaRd
+		StrStrI(modversion,_T("Devil")) ||
+		StrStrI(modversion,_T("Elfen")) ||
+		StrStrI(modversion,_T("Ef-mod 2.0 ")) || //Xman this mod can be abused as a full leecher
+		StrStrI(modversion,_T("Xtreme Xtended")) || //Xman 15.08.05
+		StrStrI(modversion, _T("MirageMod"))||		 // "
+		StrStrI(modversion, _T("SpeedX"))||
+		StrStrI(modversion, _T("AIDEADSL"))||
+		StrStrI(modversion, _T("Hypnotix"))||
+		StrStrI(modversion, _T("BLACKMULE"))|| 
+		StrStrI(modversion, _T("blackviper"))||
+		StrStrI(modversion, _T("BlackAngel"))||
+		StrStrI(modversion, _T("rabbit"))|| 
+		StrStrI(modversion, _T("rabb_it"))|| 
+		StrStrI(modversion, _T("Raptor"))|| 
+		StrStrI(modversion, _T("Hawkstar"))|| 
+		StrStrI(modversion, _T("ServerClient"))|| 
+		StrStrI(modversion, _T("Love-Angel"))|| 
+		StrStrI(modversion, _T("SuperKiller"))|| 
+		StrStrI(modversion, _T("ZamBoR"))||
+		StrStrI(modversion,_T("Morph")) && (StrStrI(modversion,_T("Max")) || StrStrI(modversion,_T("+")) || StrStrI(modversion,_T("×"))) ||
+		StrStrI(modversion, _T("Morph XT"))||	//very bad mod (MPAA ?)
+		StrStrI(modversion, _T("Mørph"))||
+		StrStrI(modversion, _T("BlueHex"))||
+		StrStrI(modversion, _T("FlowerPower"))||
+		StrStrI(modversion, _T("Fincan"))||
+		StrStrI(modversion,_T("OO.de")) ||	//WiZaRd		
+		StrStrI(modversion,_T("00.de")) || //WiZaRd
+		StrStrI(modversion,_T("OOde")) || //WiZaRd
+		StrStrI(modversion,_T("00de")) ||
+		StrStrI(modversion, _T("OS_")) ||	//Xman most are found via other checks, but not all
+		StrStrI(modversion, _T("Heartbreaker"))||
+		StrStrI(modversion, _T("Arabella"))||
+		StrStrI(modversion, _T("Administrator"))||
+		StrStrI(modversion, _T("B@d-D3vi7"))||
+		StrStrI(modversion, _T("Dying Angel"))||
+		StrStrI(modversion, _T("FREAK MOD VENOM"))||
+		StrStrI(modversion, _T("CryptedSpeed"))||
+		StrStrI(modversion, _T("h34r7b34k3r"))||
+		StrStrI(modversion, _T("Exorzist"))||
+		StrStrI(modversion, _T("A.i.d.e-A.D.S.L"))||
+		StrStrI(modversion, _T("albaR"))||
+		StrStrI(modversion, _T("AngelDr"))||	//5/2006
+		StrStrI(modversion, _T("Tombstone Reloaded"))|| //5/2006
+		StrStrI(modversion, _T("Tombstone Next"))|| //10/2006
+		StrStrI(modversion, _T("pP.r8b"))|| //5/2006
+		StrStrI(modversion, _T("x0Rz!$T"))|| //E/€xorzist
+		StrStrI(modversion, _T("€xORz!§T"))||
+		_tcsstr(clientversion,_T("eMule Compat v0.40")) || //7/2006
+		_tcsstr(clientversion,_T("eMule Compat v127.")) || //8/2006
+		StrStrI(modversion, _T("No Ratio"))|| //based on scarangel 7/2006
+		StrStrI(modversion, _T("DeathAngel"))|| //based on Xtreme 8/2006
+		StrStrI(modversion, _T("PROemule"))||	//9/2006
+		StrStrI(modversion, _T("Simple Leecher"))||	//9/2006
+		StrStrI(modversion, _T("oFF *+*"))||	//10/2006
+		StrStrI(modversion, _T("0FF "))||	//6/2007
+		StrStrI(modversion, _T("SmartMuli"))||	//12/2006
+		StrStrI(modversion, _T("D10T"))||	//12/2006
+		StrStrI(modversion, _T("the fonz"))||	//12/2006
+		StrStrI(modversion, _T("TurkMule"))||	//1/2007
+		StrStrI(modversion, _T("Hyperdrive"))||	//1/2007
+		StrStrI(modversion, _T("NextEvolution"))||	//1/2007
+		StrStrI(modversion, _T("Pimp"))||	//3/2007
+		StrStrI(modversion, _T("XDP "))||	//6/2007
+		StrStrI(modversion, _T("AeOnFlux"))||	//8/2007
+		//8/2007 from dlarge:
+		StrStrI(modversion, _T("Final Fight"))|| //added dlarge
+		StrStrI(modversion, _T("Fireball"))||	//added dlarge "standart String"
+		StrStrI(modversion, _T("SunPower"))||	//added dlarge "standart String"
+		StrStrI(modversion, _T("SuperKiller"))|| //added dlarge
+		StrStrI(modversion, _T("X-Cite"))|| //added dlarge
+		StrStrI(modversion, _T("waZZa"))|| //added dlarge
+		StrStrI(modversion, _T("Merza"))|| //added dlarge
+		StrStrI(modversion, _T("K.O.T."))|| //added dlarge
+		StrStrI(modversion, _T("Licokine"))|| //added dlarge
+		StrStrI(modversion, _T("BlackStar"))|| //added dlarge
+		StrStrI(modversion, _T("nEwLoGic"))|| //added dlarge
+		//end
+		StrStrI(modversion, _T("Applejuice"))|| //6/2007 now ban instead score reduce
+//more AJ modstrings
+		StrStrI(modversion, L"Wikinger") ||
+		StrStrI(modversion, L"ROCKFORCE") ||
+		StrStrI(modversion, L"RC-ATLANTIS") ||
+//more AJ modstrings
+//zz_fly Start 
+		//modstring of XL
+		_tcsstr(modversion, _T("20071122")) || _tcsstr(modversion, _T("20080228")) ||
+		_tcsstr(modversion, _T("080620")) || _tcsstr(modversion, _T("080307")) || 
+		_tcsstr(modversion, _T("080509")) || _tcsstr(modversion, _T("20080505")) || 
+		_tcsstr(modversion, _T("v 080828")) || _tcsstr(modversion, _T("XL8828")) ||
+		_tcsstr(modversion, _T("build 11230")) || _tcsstr(modversion, _T("20080923")) ||
+		_tcsstr(modversion, _T("ZZULL")) || _tcsstr(modversion, _T("XunaLei")) || 
+		_tcsstr(modversion, _T("XunL")) || _tcsstr(modversion, _T("Xthunder")) ||
+		_tcsstr(modversion, _T("xl build")) ||
+		//end
+		_tcsstr(modversion, _T("FreeCD")) || //BitComet, changed to hardban
+		_tcsstr(modversion, _T("PlayMule")) || //PlayMule
+		( !CString(modversion).IsEmpty() && CString(modversion).Trim().IsEmpty() ) || //pruma, korean leecher, modversion is a space
+		_tcsstr(modversion,_T("VMULE")) || //israel
+		StrStrI(modversion,_T("Goop.co.il")) ||
+		StrStrI(modversion,_T("Razorback")) ||
+		StrStrI(modversion,_T("UlTiMaTiC ")) || //based on MA 3.5
+		StrStrI(modversion,_T("Peizheng")) || //gpl-breaker
+		_tcsstr(modversion,_T("amule")) || //fake version, amule never write a modstring here
+		_tcsstr(modversion,_T("Amule")) ||
+		//2010/5/29
+		_tcsstr(modversion,_T("miniMule")) || //a compatible client, but without share file option.
+		StrStrI(modversion,_T("EYE888")) || //compatible client in china, but no src
+		StrStrI(modversion,_T("WebeSo")) || //compatible client in china, but no src //Chengr28
+		(_tcsstr(modversion,_T(" 091113")) && !_tcsstr(modversion,_T("VeryCD"))) || //compatible client in china, but no src //tetris
+		StrStrI(modversion,_T("Unbuyi")) || //a client announced that it is based on a its framework, but in fact it just copy VeryCD's code //Chengr28
+		//2010/12/11
+		_tcsstr(modversion, _T("easyMule2")) || //protocol bug, lack maintaince, ban
+//zz_fly End
+		_tcsstr(modversion, _T("Neo-R")) ||
+		_tcsstr(modversion, _T("Neo-RS")) ||
+		StrStrI(modversion, _T("Apace")) ||
+		StrStrI(modversion, _T("L!()Netw0rk")) ||
+		StrStrI(modversion, _T("L!ONetwork")) ||
+		StrStrI(modversion, _T("l!onet"))||
+		StrStrI(modversion, _T("l!0net"))||
+		StrStrI(modversion, _T("lionet"))||
+		StrStrI(modversion, _T("li0net"))||
+		StrStrI(modversion, _T("li()net"))||
+		StrStrI(modversion, _T("L!()Net"))||
+		StrStrI(modversion, _T("800STER")) ||
+		StrStrI(modversion, _T("8OOSTER")) ||
+		StrStrI(modversion, _T("BOO$T")) ||
+		StrStrI(modversion, _T("B00ST")) ||
+		StrStrI(modversion, _T("T-L-N BO0ST")) || //by briandgwx
+		StrStrI(modversion, _T("T L N B O O S T")) ||	//by taz-me
+		StrStrI(modversion, _T("iberica")) ||  //by briandgwx
+//from **Riso64Bit**
+		_tcsstr(modversion, _T("Thor ")) ||
+		_tcsstr(modversion, _T("DeSfAlko")) ||
+		_tcsstr(modversion, _T("The Killer Bean")) ||
+		_tcsstr(modversion, _T("ZZ-R ")) ||
+		_tcsstr(modversion, _T("ZZ-RS ")) ||
+		_tcsstr(modversion, _T("Reptil-Crew-3")) ||
+		_tcsstr(modversion, _T("Anonymous Mod")) ||
+		StrStrI(modversion, _T("NFO.Co.iL")) ||
+		_tcsstr(modversion, _T("Down.co.il")) ||
+		_tcsstr(modversion, _T("Red Projekt")) ||
+		_tcsstr(modversion, _T("centraldivx.com")) || //no source
+		StrStrI(modversion, _T("emule.co.il")) ||
+		StrStrI(modversion, _T("Fire eMule")) ||
+		StrStrI(modversion, _T("PirateMule")) ||
+		StrStrI(modversion, _T("HighTime")) ||
+		StrStrI(modversion, _T("GPS2Crew")) ||
+		StrStrI(modversion, _T("TLN eMule")) ||
+		StrStrI(modversion, _T("DVD-RS")) ||
+		_tcsstr(modversion, _T("ZZULtimativ-R")) ||
+		_tcsstr(modversion, _T("Div eMule")) ||
+		_tcsstr(modversion, _T("Pwr eMule")) ||
+		//_tcsstr(modversion, _T("VipeR")) || //it become good
+		_tcsstr(modversion, _T("Methadone")) ||
+		_tcsstr(modversion, _T("Titandonkey")) ||
+		_tcsstr(modversion, _T("SpeedShare")) ||
+		_tcsstr(modversion, _T("Wodan")) ||
+		_tcsstr(modversion, _T("Sikombious")) ||
+		_tcsstr(modversion, _T("HyperTraxx")) ||
+		_tcsstr(modversion, _T("Div pro")) ||
+		_tcsstr(modversion, _T("GangBang")) ||
+		_tcsstr(modversion, _T("WarezFaw")) ||
+		_tcsstr(modversion, _T("Rastak")) ||
+		_tcsstr(modversion, _T("Okinawa")) ||
+		_tcsstr(modversion, _T("Hiroshima")) ||
+		_tcsstr(modversion, _T("Kamikaze")) ||
+		_tcsstr(modversion, _T("Yotoruma")) ||
+		_tcsstr(modversion, _T("Nagasaki")) ||
+		_tcsstr(modversion, _T("Addiction")) ||
+		_tcsstr(modversion, _T("Bondage")) ||
+		_tcsstr(modversion, _T("eMuleLife")) ||
+		StrStrI(modversion, _T("PP-edition")) ||
+		StrStrI(modversion, _T("ZZULtra")) ||
+		_tcsstr(modversion, _T("eMulix")) ||
+		_tcsstr(modversion, _T("BigBang")) ||
+		_tcsstr(modversion, _T("PR0 ")) || //0(zero)
+		_tcsstr(modversion, _T("PRO ")) || //o
+		_tcsstr(modversion, _T("LoCMuLe")) ||
+		_tcsstr(modversion, _T("Flux ")) ||
+		//_tcsstr(modversion, _T("Aurora")) ||
+		//_tcsstr(modversion, _T("Alias")) || //although it is the base-version of leechermods, but it has no leecher function, unban it
+		//_tcsstr(modversion, _T("R-Mod"))|| //same as Alias
+		_tcsstr(modversion, _T("UniATeam")) ||
+		StrStrI(modversion, _T("Torenkey")) ||
+		StrStrI(modversion, _T("RSVCD")) ||
+		_tcsstr(modversion, _T("BlueEarth")) ||
+		_tcsstr(modversion, _T("RocketMule")) ||
+		_tcsstr(modversion, _T("eMule 0.4")) || //some bad mods write clientversion in modstring
+		_tcsstr(modversion, _T("Emule")) ||
+		_tcsstr(modversion, _T("eMule v")) ||
+		_tcsstr(modversion, _T("OrAnGe")) ||
+		StrStrI(modversion, _T("Evil Mod")) ||
+		StrStrI(modversion, _T("StulleMule v")) || //real modstring is "StulleMule #.#", no 'v'
+		StrStrI(modversion, _T("X-Ray v")) || 
+		StrStrI(modversion, _T("Ulti F"))||
+		StrStrI(modversion, _T("ChímÊrÂ"))||
+		StrStrI(modversion, _T("ÇhïmerÀ"))||
+		StrStrI(modversion, _T("Plus Plus"))|| //some of them did not banned in bin
+		_tcsstr(modversion, _T("UMatic"))||
+		_tcsstr(modversion, _T("BRAZILINJAPAN"))|| //no source
+		StrStrI(modversion, _T("Pigpen"))||
+		_tcsstr(modversion, _T("TCMod"))||
+		StrStrI(modversion, _T("UltiMatiX"))||
+		_tcsstr(modversion, _T("Perestroika"))||
+		_tcsstr(modversion, _T("Ebola")) ||
+		StrStrI(modversion, _T("StulleMule Plus")) ||
+		_tcsstr(modversion, _T("DVD-START.COM")) ||
+		(_tcsicmp(clientversion, _T("eMule"))==0) || //the client did not send client version
+		_tcsstr(modversion, _T("Penthotal")) ||
+		_tcsstr(clientversion,_T("eMule Compat v2.1")) || //+Ultra
+		//_tcsstr(modversion, _T("TSmod")) ||
+		_tcsstr(modversion, _T("Okaemule")) ||
+		_tcsstr(modversion, _T("Okamula")) ||
+		_tcsstr(modversion, _T("Potenza")) ||
+		_tcsstr(modversion, _T("AntraX MoD")) ||
+		//_tcsstr(modversion, _T("Picapica")) ||
+		//_tcsstr(modversion, _T("PeaceMule")) ||
+		_tcsstr(modversion, _T("0.49b")) ||
+		_tcsstr(modversion, _T("0.49c")) ||
+		_tcsstr(modversion, _T("Metha")) ||
+		//_tcsstr(modversion, _T("XTreme")) || move to fake area
+		//newlines 2009/11/8
+		_tcsstr(modversion, _T("UMatiX-45a")) ||
+		StrStrI(modversion, _T("maultierpower")) || // maultier-power.com sponsorize applejuice
+		StrStrI(modversion, _T("PoWeR MoD")) ||
+		StrStrI(modversion, _T("UltiAnalyzer")) ||
+		StrStrI(modversion, _T("UBR-Mod")) ||
+		//2009/11/29
+		StrStrI(modversion, _T("UltraFast")) || //thl
+		//2010/4/4
+		_tcsstr(modversion, _T("Devils Mod")) ||
+		StrStrI(modversion, _T("-XDP-")) ||
+		//2010/6/6
+		_tcsstr(modversion, _T("Sharinghooligan")) ||
+//end
+//from XRAY antileecher start
+		StrStrI(modversion, L"SPEED EMULE") || //MyTh	
+		StrStrI(modversion, L"SPIKE2 +") || //MyTh hard leecher
+		//StrStrI(modversion, L"Adunanza") || //MyTh italian ISP-spec com user
+		StrStrI(modversion, L"Asiklar") || //MyTh apple-com
+		StrStrI(modversion, L"Shadow") || //MyTh
+		StrStrI(modversion, L"EPB") || //MyTh
+		StrStrI(modversion, L"Tyrantmule") || //MyTh
+		StrStrI(modversion, L"APRC") || //MyTh
+		StrStrI(modversion, L"Hardstyle") || //MyTh
+		StrStrI(modversion, L"pP.r12b") || //MyTh
+		StrStrI(modversion, L"Simple Life") || //MyTh
+		StrStrI(modversion, L"TYRANUS") || //MyTh
+		StrStrI(modversion, _T("[OO.de-L33CH4")) ||	//Stulle
+		( StrStrI(modversion, _T("sivka v12e8")) && StrStrI(clientversion, L"0.42e") ) || //m_nClientVersion != MAKE_CLIENT_VERSION(0, 42, 4)	// added - Stulle
+		StrStrI(modversion, L"RapCom") || //added dlarge 
+		StrStrI(modversion, L"SBI leecher") || //added dlarge 
+		StrStrI(modversion, L"TS Next Lite") || //added dlarge  
+//from XRAY antileecher end
+		StrStrI(modversion, L"Dein Modstring") || // JvA: moved up from soft because also used by Applejuice
+		StrStrI(modversion, L"Angelmule") || // JvA: no sources, no changelog, community username,...
+		StrStrI(modversion, L"TR-P2P-MoD") || // JvA: bad client
+		StrStrI(modversion, L"Esekci") || // JvA: no sources, no changelog, ...
+		StrStrI(modversion, L"MaGiX") || // default modstring if activated and unchanged
+		StrStrI(modversion, L"MorphJC") || // bad 'Justice CS' and PBF for incomplete files
+		_tcslen(modversion) > 0 && (StrStrI(clientversion,_T("edonkey")) || modversion[0]==_T('['))   ||  //1. donkey user with modstring, 2. modstring begins with [ this is a known leecher
+		(StrStrI(modversion, _T("Xtreme")) && StrStrI(modversion, _T("]")))  //bad Xtreme mod
+		)
+		return _T("Bad MODSTRING");
+	if(_tcsstr(modversion, _T("xtreme")) || _tcsstr(modversion, _T("XTreme"))) //case sensitive!
+		return _T("Fake Xtreme");
+
+//zz_fly :: fake modstring area
+//move some entries from above
+	if(((_tcsstr(modversion, _T("MorphXT v9.6")) || _tcsstr(modversion, _T("Xtreme 7")) || _tcsstr(modversion, _T("ZZUL Plus 1"))) && _tcsstr(clientversion, _T("0.48a"))) || //should not 0.48a
+		_tcsstr(modversion, _T("NetF WARP 9")) || //should be NetF WARP 0.3a.9
+		_tcsstr(modversion, _T("VeryCD 080126")) || //Fake VeryCD
+		_tcsstr(modversion, _T("VeryCD 080730")) || //Fake VeryCD
+		_tcsstr(modversion, _T("VeryCD 080509")) || //Fake VeryCD
+		_tcsstr(modversion, _T("VeryCD 080606")) || //Fake VeryCD
+		_tcsstr(modversion, _T("VeryCD 080624")) || //Fake VeryCD
+		_tcsstr(modversion, _T("VeryCD 080630")) || //Fake VeryCD
+		(_tcsstr(modversion, _T("easyMule 10")) && _tcsstr(clientversion,_T("0.48a"))) || //easymule 10#### are not based on .48a
+		(_tcsstr(modversion, _T("VeryCD 080919")) && _tcsstr(clientversion,_T("0.49b"))) //fake clientversion, should be 0.48a
+		)
+		return _T("Fake MODSTRING");
+//zz_fly :: end
+
+	//WiZaRd Bad Modstring Scheme
+	CString strMod = CString(modversion);
+	if( strMod.IsEmpty() ||
+		(strMod.Find(_T("CHN "))==0 && strMod.GetLength() > 8) ||
+		(strMod.Find(_T("Apollo"))==0) ||  //Apollo is a Portugal Mod
+		(strMod.Find(_T("sivka"))==0) ||
+		(strMod.Find(_T("aMule CVS"))==0)
+	  )
+	{
+		;//do nothing
+	}
+	else
+	{
+		if(_tcsstr(clientversion, _T("eMule v")) && (strMod.GetLength() <= 4)) //most of them are fincan
+			return L"Bad Modstring Scheme";
+		int iNumberFound = -1;
+		_TINT ch;
+		bool bBad = false;
+		bool bNotEnd = false;
+		for(int i = 0; i < strMod.GetLength() && bBad == false; ++i)
+		{
+			ch = strMod.GetAt(i); 
+			if( ch == L'.' || ch == L' ' )
+			{
+				bNotEnd = true; //these chars should not be the end of modstring
+				iNumberFound = -1; //this is a simple hack to not punish mods like TK4 or Spike2 :)
+				continue; //skip "legal" chars
+			}
+			if( ch == L'-' /*|| ch == L'+'*/ ) //connector characters, connect two string or two numbers
+			{
+				bNotEnd = true; //these chars should not be the end of modstring
+				if(iNumberFound != -1) 
+					iNumberFound++; //exclude some modstring like v#.#-a1
+				continue;
+			}
+			if( _istpunct(ch) || _istspace(ch))
+				bBad = true; //illegal punctuation or whitespace character
+			else if(_istcntrl(ch))
+				bBad = true; //control character in modstring!?
+			else
+			{
+				bNotEnd = false;
+				if( _istdigit(ch) )
+					iNumberFound = i;
+				else if ( (iNumberFound == i-1) && _istxdigit(ch) ) //abcdef is legal in the end of version number, also exclude bowlfish tk4 and so on
+				{
+					;//do nothing
+				}
+				else if(iNumberFound != -1)
+					bBad = true; //that is: number out of row, e.g. not MorphXT v11.9 but Morph11XT.9
+			}
+		}
+		if(bBad || bNotEnd)
+			return L"Bad Modstring Scheme";
+	}
+	//WiZaRd
+
+
+//Add by SDC team.
+#if defined(SPECIAL_DLP_VERSION)
+//Some Bad MODSTRING check
+	if (wcsstr(modversion, L"eMule-GIFC") || //GPL-Breaker [DragonD]
+		(wcsstr(clientversion, L"0.49c") && wcsstr(modversion, L"X-Ray 2.")) || //Fake X-Ray Mod [**Riso64Bit**]
+		(wcsstr(clientversion, L"0.48a") && wcsstr(modversion, L"MorphCA")) || //Fake MorphCA [DargonD]
+		wcsstr(modversion, L"0.50a") || //It should be a ClientVersion, not a ModString [DargonD]
+		wcsstr(clientversion, L"4.0h") || //New SpeedyP2P client
+		wcsstr(modversion, L"OS") || //GPL-Breaker [ieD2k]
+		wcsstr(modversion, L"THC") || //Fake queues client [Bill Lee]
+		wcsstr(modversion, L"EggAche") || //Custom ModString
+		wcsstr(modversion, L"DarkSky") || //Custom ModString
+		wcsstr(clientversion, L"eMule v5.6a") || //Fake official version [冰靈曦曉]
+		wcsstr(modversion, L"eMuleTorrent")) //GPL-Breaker [冰靈曦曉]
+			return L"[SDC]Bad ModString";
+#endif
+
+	return NULL;
+}
+
+LPCTSTR __declspec(dllexport) DLPCheckModstring_Soft(LPCTSTR modversion, LPCTSTR clientversion)
+{
+	if(modversion==NULL || clientversion==NULL)
+		return NULL;
+
+	if (
+		StrStrI(modversion,_T("Rockesel")) || 
+		StrStrI(modversion,_T("HARDMULE")) ||
+		StrStrI(modversion, _T("Community"))|| 
+		StrStrI(modversion,_T("IcE-MoD"))||
+		StrStrI(modversion,_T("a-eDit"))||
+		StrStrI(modversion, _T("Ultimativ"))||
+		StrStrI(modversion, _T("Ultimate"))||
+		//StrStrI(modversion, _T("Ulti F"))|| //move to hard ban
+		StrStrI(modversion, _T("Enter MoD Name"))||	
+//		StrStrI(modversion, _T("Dein Modstring"))||	// 3/2007
+		//StrStrI(modversion, _T("choose your modstring"))|| // 3/2007
+		StrStrI(modversion, _T("La tua Modstring"))||	//italian
+		//8/2007 from dlarge:
+		//StrStrI(modversion, _T("Enter Your Modstring"))|| //added dlarge
+		StrStrI(modversion, _T("Your Modstring")) ||
+		StrStrI(modversion, _T("C-E-R-E-B-R-O")) || //added dlarge
+		//end
+		StrStrI(modversion, _T("NewMule"))||
+		StrStrI(modversion, _T("smart- muli"))||
+		StrStrI(modversion, _T("TCMatic 3"))|| //1/2007  //version 3 is the public version and used as leecher
+		//StrStrI(clientversion, _T("eMule v2.0")) || //6/2007 fake Xtreme / GPL-breaker
+		StrStrI(modversion, _T("uptempo"))
+//zz_fly Start
+		||_tcsstr(clientversion, _T("eMule v0.95g")) //korea
+		||_tcsstr(clientversion, _T("eMule v0.47f"))
+		||_tcsstr(modversion, _T("Bowlfish")) //international filter, change to softban.
+		||StrStrI(modversion, _T("BLACKMULE")) //no completely source, but it seems it do not have leecher functions.
+		||_tcsstr(clientversion, _T("eMule v1.")) //ban all version number >= 1.0
+		||_tcsstr(clientversion, _T("eMule v2."))
+		//||_tcsstr(clientversion, _T("eMule v3."))
+		||_tcsstr(clientversion, _T("Shareaza v6.")) //Shareaza's current version is 2.5.2 
+		||_tcsstr(clientversion, _T("Shareaza v5."))
+		||_tcsstr(clientversion, _T("Shareaza v4."))
+		||_tcsstr(clientversion, _T("Shareaza v3."))
+		||StrStrI(modversion, _T(".COM")) //no domain name in modstring
+		||StrStrI(modversion, _T(".ORG"))
+		||StrStrI(modversion, _T(".NET"))
+		||StrStrI(modversion, _T(".BIZ"))
+		||StrStrI(modversion, _T(".INFO"))
+//zz_fly End
+		||(_tcsstr(clientversion, _T("lphant v2.01")) && _tcsstr(modversion, _T("Plus"))) //www.lphantplus.com, no src
+		)
+		return _T("Bad MODSTRING");
+
+
+//SDC Main
+#if defined(SPECIAL_DLP_VERSION)
+#if (defined(ALL_VERYCD_MOD) || defined(VERYCD_TAG))
+	if (!wcsstr(modversion, L"VeryCD 090304") && wcsstr(modversion, L"VeryCD")) //It will be checked in DLPCheckNameAndHashAndMod function.
+		return L"[SDC]All-VeryCD-Mod";
+#elif defined(VERYCD_EASYMULE_MOD)
+	if (wcsstr(modversion, L"easyMule") || //New versions
+		(wcsstr(modversion, L"VeryCD") && 
+	//Old versions released in 2007 and 2008
+		((wcsstr(modversion, L" 07") && 
+		(wcsstr(modversion, L"1109") || wcsstr(modversion, L"1207") || wcsstr(modversion, L"1229"))) || 
+		(wcsstr(modversion, L" 08") && 
+		(wcsstr(modversion, L"0125") || wcsstr(modversion, L"0202") || wcsstr(modversion, L"0227") || 
+		wcsstr(modversion, L"0320") || wcsstr(modversion, L"0401") || wcsstr(modversion, L"0506") || 
+		wcsstr(modversion, L"0514") || wcsstr(modversion, L"0701") || wcsstr(modversion, L"0701") || 
+		wcsstr(modversion, L"0722") || wcsstr(modversion, L"0815") || wcsstr(modversion, L"0905") || 
+		wcsstr(modversion, L"0905") || wcsstr(modversion, L"0928") || wcsstr(modversion, L"1015") || 
+		wcsstr(modversion, L"1023") || wcsstr(modversion, L"1023") || wcsstr(modversion, L"1113") || 
+		wcsstr(modversion, L"1121") || wcsstr(modversion, L"1122") || wcsstr(modversion, L"1205") || 
+		wcsstr(modversion, L"1218"))))))
+			return L"[SDC]VeryCD-EasyMule-Mod";
+#endif
+#endif
+
+	return NULL;
+}
+
+LPCTSTR __declspec(dllexport) DLPCheckUsername_Hard(LPCTSTR username)
+{
+	if(username==NULL)
+		return NULL;
+
+	if (
+//Chinese Leecher - https://forum.emule-project.net/index.php?showtopic=134097&hl=
+		_tcsstr(username,L"dianlei.com") ||
+		_tcsstr(username,L"[eMuleBT]") ||
+		_tcsstr(username,L"[PPMule]") ||
+		StrStrI(username,L"TUOTU") ||
+		_tcsstr(username,L"kaggo.com") ||
+		_tcsstr(username,L"[Chinfo]") ||
+		_tcsstr(username,L"vgo.21cn") ||
+//Chinese Leecher - https://forum.emule-project.net/index.php?showtopic=134097&hl=
+		//StrStrI(username,_T("$WAREZ$"))||
+		//StrStrI(username,_T("Leecha"))||
+		//StrStrI(username,_T("Reverse"))||
+		//StrStrI(username,_T("$motty"))||
+		StrStrI(username,_T("emule-speed"))||
+		StrStrI(username,_T("Intuition"))||
+		//StrStrI(username,_T("W.I.P."))|| //outdated
+		//StrStrI(username,_T("celinesexy"))||
+		//StrStrI(username,_T("Gate-eMule"))||
+		//StrStrI(username,_T("energyfaker"))||
+		//StrStrI(username,_T("BuzzFuzz"))||
+		//StrStrI(username,_T("Speed-Unit"))|| 
+		//StrStrI(username,_T("Killians"))||
+		//StrStrI(username,_T("pubsman"))||
+		StrStrI(username,_T("emule-element"))||
+		//StrStrI(username,_T("emule")) && StrStrI(username,_T("booster")) ||
+		//StrStrI(username,_T("Rappi")) ||
+		StrStrI(username,_T("Ketamine")) ||
+		StrStrI(username,_T("emuleech.com")) ||
+		//StrStrI(username, _T("SchlumpMule"))|| //"
+		//StrStrI(username, _T("Safty´s"))||
+		StrStr(username, _T("UnKnOwN pOiSoN"))||
+		//StrStrI(username, _T("ElfenPower"))||
+		//StrStrI(username, _T("eMule Cow"))||
+		//StrStrI(username, _T("Freezamule"))||
+		StrStrI(username, _T("EGOmule"))||
+		StrStrI(username, _T("-=EGOist=-"))||
+		//StrStrI(username, _T("FreezaVamp"))||
+		StrStrI(username, _T("Muli_Checka"))||
+		StrStrI(username,_T("00de.de"))|| 
+		//StrStrI(username,_T("00de")) ||
+		//StrStrI(username,_T("OO.de"))|| 
+		//StrStrI(username,_T("OOde")) ||
+		//StrStrI(username, _T("PrOjEcT-SaNdStOrM"))||
+		//StrStrI(username, _T("NotHer eDitiOn"))||
+		//StrStrI(username, _T("eSl@d3vil"))||
+		//StrStrI(username, _T(" AgentSmith"))||
+		//StrStrI(username, _T("rabb_it"))||
+		//StrStrI(username, _T("ServerClient"))||
+		StrCmpIW(username, _T("Muse"))==0 || //ketamine mod
+		//StrStr(username, _T("ZamBoR"))||
+		//StrStrI(username,_T("HARDMULE")) ||
+		StrStrI(username,_T("futurezone-reloaded")) ||
+		StrStrI(username,_T("Gate-To-Darkness.com")) ||
+		StrStrI(username,_T("Razorback")) ||
+		StrStrI(username,_T("Titanesel.tk")) ||
+		StrStrI(username,_T("bigbang.to")) ||
+		StrStrI(username,_T("leecherclients.org")) ||  //Xman 10/06
+		StrStrI(username,_T("futuremods.de")) ||  //Xman 10/06
+		StrStrI(username,_T(".::Stenoco-Zone::.")) ||
+		StrStrI(username,_T("emule-mods.cc")) || //Xman 01/07
+		StrStrI(username,_T("leecher-mod.net")) || //Xman 02/07
+		//08/2007 from dlarge:
+		StrStrI(username,_T("leecher-world.com")) || //added dlarge
+		StrStrI(username,_T("leecher.biz")) || //added dlarge
+		//end
+		//Xman 6/2007:
+//more AJ modstrings
+		//( StrStrI(username, L"[") && StrStrI(username, L"]")
+		//&& (
+			StrStrI(username, L"Applejuice") ||
+			StrStrI(username, L"Wikinger") ||
+			StrStrI(username, L"ROCKFORCE") ||
+			StrStrI(username, L"RC-ATLANTIS") ||
+			StrStrI(username, L"Fireball") ||
+			StrStrI(username, L"SunPower") ||
+		//	)
+		//) ||
+//		StrStrI(username,_T("AppleJuice")) && StrStrI(username,_T("[")) && StrStrI(username,_T("]")) ||
+		StrStrI(username, L"futuremod.de") || // JvA: apple-com adress
+//more AJ modstrings
+		StrStrI(username, L"@ Raptor") ||     //added dlarge
+		StrStrI(username, L"FUCKLW") ||         //added dlarge
+//zz_fly Start
+		_tcsstr(username,_T("a1[VeryCD]xthame")) || //XL
+		StrStrI(username,_T("Flashget")) || //FlashGet
+		_tcsstr(username,_T("http://www.net-xfer.com")) || //netxfer
+		_tcsstr(username,_T("emuIe-project.net")) || //phishing site
+		_tcsstr(username,_T("QQDownload")) || //tencent
+		_tcsstr(username,_T("[Devils][")) || //2009/12/25
+		_tcsstr(username,_T("sharing-devils")) || // leecher community
+		//2010/5/29
+		//_tcsstr(username,_T("btbbt.com")) || //community username
+		//_tcsstr(username,_T("Greendown.Cn")) || //community username //these two sites provide some modified versions. they only hacked the title and changed the default username. i think the users are innocent. unban.
+		_tcsstr(username,_T("MTVP2P")) || //community username from Chengr28
+		_tcsstr(username,_T("qobfxb")) || //community username
+		_tcsstr(username,_T("[CHN][VeryCD]QQ"))|| //QQDownload
+//zz_fly End
+		StrStrI(username, _T("lionetwork"))||
+		StrStrI(username, _T("[lionheart"))||
+		StrStrI(username, _T("li@network"))||
+		StrStrI(username, _T("l!onetwork"))||
+		StrStrI(username, _T("li()net"))||
+		StrStrI(username, _T("l!0net"))||
+		StrStrI(username, _T("L!()Network")) ||
+		StrStrI(username, _T("Li()Network")) ||
+		StrStrI(username, _T("L!0Network")) ||
+		StrStrI(username, _T("Li@Network")) ||	 
+//from **Riso64Bit**
+		_tcsstr(username, _T("FincanMod")) || //fincan
+		_tcsstr(username, _T("Finc@nMod")) ||
+		StrStrI(username, _T("titanmule")) ||
+		StrStrI(username, _T(".c0.il")) || //0, zero
+		StrStrI(username, _T("Goop.Co.il")) || //israel community
+		StrStrI(username, _T("Div.Co.il")) ||
+		StrStrI(username, _T("emule.co.il")) ||
+		StrStrI(username, _T("pwr.co.il")) ||
+		StrStrI(username, _T("nFo.Co.il")) ||
+		StrStrI(username, _T("lhnet.co.il")) ||
+		StrStrI(username, _T("ynet.co.il")) ||
+		StrStrI(username, _T("wnet.co.il")) ||
+		StrStrI(username, _T("Paf.co.il")) ||
+		StrStrI(username, _T("finder.co.il")) ||
+		StrStrI(username, _T("joop.Co.il")) ||
+		StrStrI(username, _T("Www.NFOil.com")) ||
+		StrStrI(username, _T("TLN eMule")) ||
+		StrStrI(username, _T("LHeMule")) ||
+		StrStrI(username, _T("VMULE 2007")) ||
+		StrStrI(username, _T("TLNGuest")) ||
+		StrStrI(username, _T("Div eMule 2007")) ||
+		StrStrI(username, _T("eMulePro.de.vu")) ||
+		StrStrI(username, _T("emuIe-co.net")) ||
+		StrStrI(username, _T("AE CoM UseR")) ||
+		StrStrI(username, _T("BTFaw.Com")) ||
+		StrStrI(username, _T("warezfaw")) ||
+		StrStrI(username, _T("lh.2y.net")) ||
+		//StrStrI(username, _T("viper-istraeL.Org")) ||
+		StrStrI(username, _T("[Pwr Mule]Usuario")) ||
+		StrStrI(username, _T("Www.D-iL.Net")) ||
+		StrStrI(username, _T("www.aideadsl.com")) ||
+		StrStrI(username, _T("tangot.com")) ||
+		StrStrI(username, _T("r3wlx.com")) ||
+		StrStrI(username, _T("http://yo.com")) ||
+		StrStrI(username, _T("Angel eMule")) ||
+		StrStrI(username, _T("AngelMule")) ||
+		//MyTh NOT to ban!
+		/* //they are some release groups, although some of them use bad mods, but rest of them is good one.
+		_tcsstr(username, _T("Ultimativ"))||
+		StrStrI(username, _T("gps2c.6x.to")) ||	
+		StrStrI(username, _T("maultier-power")) ||	
+		_tcsstr(username, _T("RSVCD-Forum")) ||
+		StrStrI(username, _T("rsvcd-crew")) ||
+		StrStrI(username, _T("Ulti-Board")) ||
+		_tcsstr(username, _T("R-Mod"))||
+		StrStrI(username, _T("gps2crew")) ||
+		*/
+		//StrStrI(username, _T("www.eChanblardNext.org")) ||	
+		//StrStrI(username, _T("www.e-sipa.de")) ||
+		StrStrI(username, _T("[TEC]")) || //fincan
+		StrStrI(username, _T("e-Sipa")) ||	
+		StrStrI(username, _T("emuleech")) ||
+		StrStrI(username, _T("mkp2p")) ||
+		_tcsstr(username, _T("[ CHN]")) || //a space after bracket
+		StrStrI(username, _T("PlayMule")) ||
+		StrStrI(username, _T("eDonkey2008")) ||
+		StrStrI(username, _T("Torenkey")) ||
+		//StrStrI(username, _T("sdjtuning")) ||
+		StrStrI(username, _T("RAPCOM")) ||
+		_tcsstr(username, _T("ZZULtimativ-R")) ||
+		_tcsstr(username, _T("ZZ-R ")) ||
+		StrStrI(username, _T("OFF +")) ||
+		StrStrI(username, _T("OFF+")) ||
+		StrStrI(username, _T("Ultim@tiv")) ||
+		StrStrI(username, _T("[CHN][VeryCD][Your")) ||
+		_tcsstr(username, _T("eMuleUniATeam")) ||
+		StrStrI(username, _T("mods.sub.cc")) ||
+		_tcsstr(username, _T("ExtrEMule")) ||
+		_tcsstr(username, _T("Titandonkey")) ||
+		_tcsstr(username, _T("xtmhtl [ePlus]"))|| //same name, same userhash
+		_tcsstr(username, _T("eMule Accelerator")) ||
+		//2010/4/4
+		StrStrI(username, _T("eMule Pro Ultra")) ||
+		StrStrI(username, _T("[CHN][VeryCD][username]")) || //[CHN][VeryCD][username] eMule v0.48a [xl build58]
+		//2010/5/29
+		StrStrI(username, _T("Fireb@ll")) ||
+		//2010/6/6
+		StrStrI(username, _T("monster-mod.com")) ||
+		StrStrI(username, _T("Reptil-Crew-3")) || //Reptil mod
+		StrStrI(username, _T("!Lou-Nissart!")) || //no src only BIN (kick from upload)
+
+		//all sites below are phishing sites
+		StrStrI(username, _T("www.extremule.com")) ||
+		StrStrI(username, _T("www.emuleproject.com")) ||
+		StrStrI(username, _T("bigbang-emule.de.vu")) ||
+		StrStrI(username, _T("emulenet.de.vu")) ||
+		_tcsstr(username, _T("http://emule.net")) ||
+		StrStrI(username, _T("http://emulo.net")) ||
+		StrStrI(username, _T("http://projekt.org")) ||
+		StrStrI(username, _T("CryptMule.de.vu")) ||
+		StrStrI(username, _T("titanload.to")) ||
+		StrStrI(username, _T("http://emule-projekt.net")) ||
+		StrStrI(username, _T("emuleitalianogratis.com")) ||
+		StrStrI(username, _T("http://www.official-emule.com")) ||
+		StrStrI(username, _T("emulepro.6x.to")) ||
+		//StrStrI(username, _T("power-portal")) || //MyTh NOT to ban!
+		StrStrI(username, _T("e-mule.nu")) ||
+		StrStrI(username, _T("emulesoftware.com")) ||
+		StrStrI(username, _T("emuleitaliano.com")) ||
+		StrStrI(username, _T("scaricareemule.com")) ||
+		StrStrI(username, _T("emule--it.com")) ||
+		StrStrI(username, _T("italian.eazel.com")) ||
+		StrStrI(username, _T("speed-downloading.com")) ||
+		StrStrI(username, _T("nuovaversione.com")) ||
+		StrStrI(username, _T("emuleplus.com")) ||
+		StrStrI(username, _T("emuleultra.com")) ||
+		StrStrI(username, _T("emule.org")) ||
+		StrStrI(username, _T("[emule.de v")) || //default name: [emule.de v ##]
+		StrStrI(username, _T("emule.fr")) ||
+		StrStrI(username, _T("emule.ru")) ||
+		StrStrI(username, _T("emule.com")) ||
+		StrStrI(username, _T("emule-mods.biz")) || 
+		StrStrI(username, _T("emule-projet")) ||
+		StrStrI(username, _T("maomao.eu")) ||
+		StrStrI(username, _T("donkey.com")) ||
+		StrStrI(username, _T("super4.com")) ||
+		StrStrI(username, _T("emule.cc")) ||
+		StrStrI(username, _T("emule.net")) ||
+		StrStrI(username, _T("emulegratis.net")) ||
+		//new lines 2009/11/8
+		StrStrI(username, _T("emulespeedup.de.vu")) ||
+		StrStrI(username, _T("superemule.6x.to")) ||
+		StrStrI(username, _T("emulea.com")) ||
+		StrStrI(username, _T("emule24horas.com")) ||
+		StrStrI(username, _T("emule.es")) ||
+		StrStrI(username, _T("emulext.net")) ||
+		StrStrI(username, _T("netemule.com")) ||
+		StrStrI(username, _T("gratis-emule.com")) ||
+		StrStrI(username, _T("emuleproject.com")) ||
+		StrStrI(username, _T("emuleplusplus.de")) ||
+		StrStrI(username, _T("wikingergilde")) ||
+		StrStrI(username, _T("emuleclassic.com")) ||
+		StrStrI(username, _T("mega-emule.com")) ||
+		StrStrI(username, _T("speedyp2p.com")) ||
+		StrStrI(username, _T("anubisp2p.com")) ||
+		StrStrI(username, _T("cruxp2p.com")) ||
+		StrStrI(username, _T("downloademulegratis.com")) ||
+		StrStrI(username, _T("emulegold.com")) ||
+		StrStrI(username, _T("pro-sharing.com")) ||
+		StrStrI(username, _T("turbomule ")) ||
+		StrStrI(username, _T("devhancer.com")) ||
+		StrStrI(username, _T("emulefileswap.com")) ||
+		StrStrI(username, _T("p2psharing.biz")) ||
+		StrStrI(username, _T("fastsearchbooster.biz")) ||
+		StrStrI(username, _T("emule-features.6x.to")) ||
+		StrStrI(username, _T("emule-pro.blogspot.com")) ||
+		StrStrI(username, _T("emule-ng.com")) ||
+		StrStrI(username, _T("version049c-official.com")) ||
+		StrStrI(username, _T("emule.to")) ||
+		StrStrI(username, _T("adunanza.italiazip.com")) ||
+		StrStrI(username, _T("emulesoftware.com")) ||
+		StrStrI(username, _T("phpnuke.org")) ||
+		//new lines 2009/11/29
+		StrStrI(username, _T("gratis.emule49-info.com")) ||
+		StrStrI(username, _T("emuleds.com")) ||
+		StrStrI(username, _T("scarica-emule-gratis.com")) ||
+		StrStrI(username, _T("mp3edonkeysearch.com")) ||
+		StrStrI(username, _T("mp3rocket.com")) ||
+		StrStrI(username, _T("emule-rocket.com")) ||
+		StrStrI(username, _T("MonkeyP2P")) ||
+		//new lines 2010/01/17
+		StrStrI(username, _T("http://alpha-gaming.net")) ||
+		//new lines 2010/4/4
+		StrStrI(username, _T("piolet.com")) ||
+		StrStrI(username, _T("hermesp2p.com")) ||
+		StrStrI(username, _T("shareghost.com")) ||
+		StrStrI(username, _T("zultrax.com")) ||
+		StrStrI(username, _T("getfasterp2p.com")) ||
+		StrStrI(username, _T("pro-sharing.com")) ||
+		StrStrI(username, _T("truxshare.com")) ||
+		StrStrI(username, _T("meteorshare.com")) ||
+		StrStrI(username, _T("manolito.com")) ||
+		StrStrI(username, _T("blubster.com")) ||
+		StrStrI(username, _T("fastsearchbooster.biz")) ||
+		StrStrI(username, _T("e-mule-")) || // detect any mirror simil to "e-mule-it.com"
+		StrStrI(username, _T("download-gratis-emule.com")) ||
+		StrStrI(username, _T("emule-italy.it")) ||
+		StrStrI(username, _T("e-mule.be")) ||
+		StrStrI(username, _T("official-emule")) ||
+		StrStrI(username, _T("emule-gratis.it")) ||
+		StrStrI(username, _T("devhancer")) ||
+		//2010/5/29
+		StrStrI(username, _T("dbgo.com")) ||
+		StrStrI(username, _T("net2search.com")) ||
+		//2010/6/6
+		StrStrI(username, _T("p2phood.com")) ||
+		StrStrI(username, _T("intelpeers.com")) ||
+//End
+		StrStrI(username,_T("[LSD.19"))	//Xman 21.06.2005 definitive not a good mod, with protocol bugs
+		)
+		return _T("Bad USERNAME");
+
+
+	//new ketamine
+	//if(StrStrI(username, _T("[ePlus]")) != StrRStrI(username,NULL, _T("[ePlus]"))) //old version
+	if(_tcslen(username) >=14)
+	{
+		LPCTSTR tempstr=StrStr(username, _T("[ePlus]"));
+		if(tempstr && _tcslen(tempstr)>=7)
+			if(StrStr(tempstr + 7, _T("[ePlus]")))
+				return _T("new Ketamine");
+	}
+
+//Add by SDC team.
+#if defined(SPECIAL_DLP_VERSION)
+//Some Bad USERNAME check
+	if (wcsstr(username, L"VgroupTeam") || //Random ModString [doompower]
+//		wcsstr(username, L"ED2000") || //GPL-Breaker
+		wcsstr(username, L"[CHN]X_jIQ") || //P2PSearcher, old version
+		wcsstr(username, L"[CHN]sf") || //P2PSearcher, new version
+		wcsstr(username, L"[CHN]__VRom") || //P2PSearcher, new version [dark]
+		wcsstr(username, L".net «Xtreme") || //eMule -LPE-, Fake ModString
+		wcsstr(username, L"[CHN]yourname") || //Some old chinese leecher and default nickname in some QQDownload client
+		wcsstr(username, L"28881.com") || //MTVP2P(2013) [雁蝎]
+		wcsstr(username, L"[CHN]shaohan") || //Xunlei Offline Download Server and Moblie System Apps [Glasses 王子]
+		wcsstr(username, L"HubbleKadTracker")) //GPL-Breaker [冰靈曦曉]
+			return L"[SDC]Bad UserName";
+#endif
+
+	return NULL;
+}
+
+LPCTSTR __declspec(dllexport) DLPCheckUsername_Soft(LPCTSTR username)
+{
+	if(username==NULL)
+		return NULL;
+
+	if (
+		
+		//Xman 15.08.05
+		StrStrI(username, _T(">>Power-Mod"))
+		//Xman 1/2007 
+		/*
+		StrStrI(username,_T("AppleJuice [")) && StrStrI(username,_T("]")) ||
+		StrStrI(username,_T("AppleJuice Mod [")) && StrStrI(username,_T("]")) ||
+		StrStrI(username,_T("AppleJuice eMule [")) && StrStrI(username,_T("]")) //5/2007
+		*/
+//zz_fly Start korea
+		||_tcsstr(username, _T("DONKEY2007")) //korea
+		||_tcsstr(username, _T("www.Freang.com"))
+		||_tcsstr(username, _T("www.pruna.com"))
+		||_tcsstr(username, _T("[KOREA]"))
+		||_tcsstr(username, _T("superemule"))
+		||_tcsstr(username, _T("PRUNA 2008"))
+		||_tcsstr(username, _T("MOYAM"))
+		||_tcsstr(username, _T("eDonkey2009")) 
+//zz_fly End
+		)
+		return _T("Bad USERNAME");
+
+	//bad mods, where every second sign is
+	//enough to check two places
+
+	if(_tcslen(username) >=4 
+		&&	username[3]<=0x1F
+		&& username[1]<=0x1F
+		)
+		return _T("Community-Username"); //community (based on LSD or it's smasher)
+
+	if(_tcslen(username) >=4 
+		&& username[0]==_T('v')
+		&& StrStr(username, _T(":com "))
+		)
+		return _T("X-Treme");
+
+//Add by SDC team.
+#if defined(VERYCD_TAG)
+	if (StrStrIW(username, L"[VeryCD]") && 
+	//It will be checked in DLPCheckUsername_Hard function.
+		!(wcsstr(username, L"a1[VeryCD]xthame") || 
+		(StrStrIW(username, L"[CHN][VeryCD]") && (StrStrIW(username, L"[Your") || StrStrIW(username, L"[username]"))) || 
+		wcsstr(username, L"[CHN][VeryCD]QQ")))
+			return L"[SDC]VeryCD-Tag";
+#endif
+
+	return NULL;
+}
+
+LPCTSTR __declspec(dllexport) DLPCheckNameAndHashAndMod(const CString& username, const CString& userhash, const CString& modversion)
+{
+	if(username.IsEmpty() || userhash.IsEmpty())
+		return NULL;
+//zz_fly Start
+	//Fake VeryCD
+	if((_tcsstr(modversion,_T("VeryCD 071107")) || _tcsstr(modversion,_T("VeryCD 080307")) )
+		&& _tcsstr(username, _T("[CHN][VeryCD]yourname")) ) //all fake VeryCD have a default username
+		return _T("Fake VeryCD"); 
+
+	//community userhash check 
+	static const TCHAR refuserhash0[] = _T("154CE646120E96CC798C439A20D26F8D"); // (windows ue)
+	static const TCHAR refuserhash1[] = _T("455361F9D95C3CD7E6BF2192D1CB3D02"); // (windows ue)
+	static const TCHAR refuserhash2[] = _T("C8B5F41441C615FBABAD9A7E55294D01");
+	static const TCHAR refuserhash6[] = _T("A2221641460E961C8B7FF21A53FB6F6C"); //**Riso64Bit**
+	static const TCHAR refuserhash7[] = _T("888F4742450EF75F9DD8B7E53FA06FF0"); //**Riso64Bit**
+	static const TCHAR refuserhash8[] = _T("0B76CC42CB0E81B0DC6120D2BCB36FF9"); //**Riso64Bit**
+    static const TCHAR refuserhash9[] = _T("EAA383FD9E0E68538C7AC8AD15526F7A"); //**Riso64Bit**
+	static const TCHAR refuserhash10[]= _T("65C3B2E8940E582630A7F58AF9F26F9E"); //from TaiWan
+	static const TCHAR refuserhash11[]= _T("9BA09B83DC0EE78BE20280C387936F00"); //from SS1900
+	static const TCHAR refuserhash12[]= _T("C92859E4860EA0F15F7837750C886FB6"); //from SS1900
+	static const TCHAR refuserhash13[]= _T("CB42F563EE0EA7907395420CAC146FF5"); //From "qobfxb" multi user [DargonD] 
+
+
+//SDC fixed
+#if defined(SPECIAL_DLP_VERSION)
+	if (_wcsicmp(userhash, refuserhash0) == 0 || _wcsicmp(userhash, refuserhash1) == 0 || _wcsicmp(userhash, refuserhash2) == 0 || 
+		_wcsicmp(userhash, refuserhash6) == 0 || _wcsicmp(userhash, refuserhash7) == 0 || _wcsicmp(userhash, refuserhash8) == 0 || 
+		_wcsicmp(userhash, refuserhash9) == 0 || _wcsicmp(userhash, refuserhash10) == 0 || _wcsicmp(userhash, refuserhash11) == 0 || 
+		_wcsicmp(userhash, refuserhash12) == 0 || 
+	//The official refuserhash13 with NickName "qobfxb" will be checked in DLPCheckUsername_Hard function.
+		(!wcsstr(username, L"qobfxb") && _wcsicmp(userhash, refuserhash13) == 0))
+			return L"[SDC]Community UserHash";
+#else //Official
+	if(_tcsicmp(userhash,refuserhash0)==0 || _tcsicmp(userhash,refuserhash1)==0 || _tcsicmp(userhash,refuserhash2)==0 
+		|| _tcsicmp(userhash,refuserhash6)==0 || _tcsicmp(userhash,refuserhash7)==0 || _tcsicmp(userhash,refuserhash8)==0
+		|| _tcsicmp(userhash,refuserhash9)==0 || _tcsicmp(userhash,refuserhash10)==0
+		|| _tcsicmp(userhash,refuserhash11)==0 || _tcsicmp(userhash,refuserhash12)==0 || _tcsicmp(userhash,refuserhash13)==0)
+		return _T("Community Userhash");
+#endif
+
+
+	//corrupt userhash check
+	static const TCHAR refuserhash3[] = _T("00000000000E00000000000000006F00");
+	static const TCHAR refuserhash4[] = _T("FE000000000E00000000000000006F00");
+	if(_tcsicmp(userhash,refuserhash3)==0 || _tcsicmp(userhash,refuserhash4)==0)
+		return _T("Corrupt UserHash");
+
+
+//SDC fixed
+//Community Userhash check, thanks SquallATF.
+#if defined(SPECIAL_DLP_VERSION)
+	static const wchar_t RefUserHash_5[] = L"DA1CEEE05B0E5319B3B48CAED24C6F4A";
+//	static const auto RefUserHash_5(L"DA1CEEE05B0E5319B3B48CAED24C6F4A");
+	if (!wcsstr(username, L"QQDownload") && _wcsicmp(userhash, RefUserHash_5) == 0) //The official refuserhash5 with NickName "QQDownload" will be checked in DLPCheckUsername_Hard function.
+		return L"[SDC]Bad UserHash";
+#else //Official
+	static const TCHAR refuserhash5[] = _T("DA1CEEE05B0E5319B3B48CAED24C6F4A");
+	if (_tcsicmp(userhash, refuserhash5) == 0)
+		return _T("Bad Userhash");
+#endif
+
+
+//zz_fly End
+
+	//Check for aedit
+	//remark: a unmodded emule can't send a space at last sign
+	if(modversion.IsEmpty() && username.Right(1)==_T(" "))
+		return _T("AEdit");
+
+	//Check for Hex-Modstring
+	if(IsTypicalHex(modversion))
+		return _T("Hex-Modstring");
+
+	//community check
+	if(username.GetLength()>=7 && username.Right(1)==_T("]"))
+	{
+		/* no more needed
+		//check for gamer
+		//two checks should be enough.
+		if(username.Right(6).Left(1)==userhash.Mid(5,1)
+			&& username.Right(3).Left(1)==userhash.Mid(7,1)
+			)
+			return _T("old united");
+		*/
+		
+		//check for special nickaddon
+		int find=username.ReverseFind(_T('['));
+		if(find >= 0)
+		{
+			CString addon=username.Mid(find+1);
+//			int endpos=addon.GetLength()-1;
+			if(addon.GetLength()>2)
+			{
+				//check for snake //12/2006
+				/* no more needed, better detection inside Xtreme
+				for(int i=0; i<endpos;i++)
+				{
+					if( !(addon.GetAt(i)>=_T('0') && addon.GetAt(i)<=_T('9')) )
+					{
+						i=endpos+1;
+					}
+				}
+				if(i==endpos)
+					return _T("Snake");
+				*/
+			
+				//Chek for Hex (e.g. X-Treme)
+				if(IsTypicalHex(addon.Left(addon.GetLength()-1)))
+					return _T("Hex-Code-Addon");
+			}
+			//zz_fly :: start
+			if(find == username.GetLength()-6){
+				bool bFoundRandomPadding = false;
+				_TINT ch;
+				for(int i=1;i<5;i++){
+					ch = username.GetAt(find+i);
+					if( _istpunct(ch) || /*_istspace(ch) ||*/ _istcntrl(ch)){
+						bFoundRandomPadding = true;
+						break;
+					}
+				}
+				if(bFoundRandomPadding && !modversion.IsEmpty() && (username.Find(_T("http://emule-project.net ["))==0) && (find==25))
+					return _T("TLH Community"); //username like "http://emule-project.net [random]"
+				if(bFoundRandomPadding && modversion.IsEmpty() && (find==username.Find(_T('['))))
+					return _T("GhostMod"); //username has a random padding [random], it should be a mod function, but there is no modstring
+				if(bFoundRandomPadding && (username.Find(_T("Silver Surfer User"))==0) && (modversion.Find(_T("Silver"))==-1))
+					return _T("Fake Silver Surfer"); //**Riso64Bit** :: fake silver surfer
+			}
+			//zz_fly :: end
+		}
+	}
+
+	//thx cyrex
+	if(modversion.GetLength() == 10 && username.GetLength()>4 &&  StrStr(username.Right(4),_T("/]"))  && StrStr(username,_T("[SE]")))
+		return _T("Mystery ModString");
+
+
+//Add by SDC team.
+#if defined(SPECIAL_DLP_VERSION)
+//Some Community UserHash check
+	static const wchar_t SDC_RefUserHash_1[] = L"66B002DADE0E6DBEDF4FCCAA380E6FD4"; //From multi user (TW&CN) [DargonD]
+	static const wchar_t SDC_RefUserHash_2[] = L"AAEE84C0C30E247CBB99B459255D6F99"; //From NAS_01G multi user [DargonD]
+	static const wchar_t SDC_RefUserHash_3[] = L"5E02F74DBA0E8A19DBF6733F0AE66F4A"; //Community UserHash [FzH/DargonD]
+	static const wchar_t SDC_RefUserHash_4[] = L"B6491292AE0E07AC8C6045CAC2DD6F9F"; //Community UserHash [FzH/DargonD]
+	static const wchar_t SDC_RefUserHash_5[] = L"596B305E050EA842CE38DF3811216F3F"; //Community UserHash [FzH/DargonD]
+	static const wchar_t SDC_RefUserHash_6[] = L"B1798B2F620E0B676452C6E2EF706F13"; //Invalid UserHash [DargonD]
+	static const wchar_t SDC_RefUserHash_7[] = L"C1533316C00E3E0D0218843A05E46FAC"; //Invalid UserHash [DargonD]
+	static const wchar_t SDC_RefUserHash_8[] = L"FE10F3C0610E0A925B85204CE8456F42"; //Invalid UserHash [DargonD]
+	static const wchar_t SDC_RefUserHash_9[] = L"C9E61DEEF30E0360E2741C9CF1396F94"; //Invalid UserHash [DargonD]
+	static const wchar_t SDC_RefUserHash_10[] = L"559ACC89D80E90C50A7A0CD3224F6F57"; //Invalid UserHash [DargonD]
+	static const wchar_t SDC_RefUserHash_11[] = L"6AE1D2DF4B0E8707B6F6BC29E8746F0F"; //Invalid UserHash [DargonD]
+	static const wchar_t SDC_RefUserHash_12[] = L"8A537F20B80EF9AF02E59E6C087C6F6B"; //Invalid UserHash [DargonD]
+	static const wchar_t SDC_RefUserHash_13[] = L"3F44A7996F0E17D1F4B319EB58B26F64"; //Invalid UserHash [DargonD]
+	static const wchar_t SDC_RefUserHash_14[] = L"D0D897BD360EEFF329903E04990B6F86"; //Xunlei
+	static const wchar_t SDC_RefUserHash_15[] = L"36725093E00E9350F7680C871E946FD1"; //Tencent Offline Download Server UserHash [DargonD]
+	static const wchar_t SDC_RefUserHash_16[] = L"769D36987E0E313A1501967D0F146F7A"; //UserHash of Xunlei Offline Download Server and Moblie System Apps [pandaleo]
+//	static const auto SDC_RefUserHash_1(L"66B002DADE0E6DBEDF4FCCAA380E6FD4"); //From multi user (TW&CN) [DargonD]
+//	static const auto SDC_RefUserHash_2(L"AAEE84C0C30E247CBB99B459255D6F99"); //From NAS_01G multi user [DargonD]
+//	static const auto SDC_RefUserHash_3(L"5E02F74DBA0E8A19DBF6733F0AE66F4A"); //Community UserHash [FzH/DargonD]
+//	static const auto SDC_RefUserHash_4(L"B6491292AE0E07AC8C6045CAC2DD6F9F"); //Community UserHash [FzH/DargonD]
+//	static const auto SDC_RefUserHash_5(L"596B305E050EA842CE38DF3811216F3F"); //Community UserHash [FzH/DargonD]
+//	static const auto SDC_RefUserHash_6(L"B1798B2F620E0B676452C6E2EF706F13"); //Invalid UserHash [DargonD]
+//	static const auto SDC_RefUserHash_7(L"C1533316C00E3E0D0218843A05E46FAC"); //Invalid UserHash [DargonD]
+//	static const auto SDC_RefUserHash_8(L"FE10F3C0610E0A925B85204CE8456F42"); //Invalid UserHash [DargonD]
+//	static const auto SDC_RefUserHash_9(L"C9E61DEEF30E0360E2741C9CF1396F94"); //Invalid UserHash [DargonD]
+//	static const auto SDC_RefUserHash_10(L"559ACC89D80E90C50A7A0CD3224F6F57"); //Invalid UserHash [DargonD]
+//	static const auto SDC_RefUserHash_11(L"6AE1D2DF4B0E8707B6F6BC29E8746F0F"); //Invalid UserHash [DargonD]
+//	static const auto SDC_RefUserHash_12(L"8A537F20B80EF9AF02E59E6C087C6F6B"); //Invalid UserHash [DargonD]
+//	static const auto SDC_RefUserHash_13(L"3F44A7996F0E17D1F4B319EB58B26F64"); //Invalid UserHash [DargonD]
+//	static const auto SDC_RefUserHash_14(L"D0D897BD360EEFF329903E04990B6F86"); //Xunlei
+//	static const auto SDC_RefUserHash_15(L"36725093E00E9350F7680C871E946FD1"); //Tencent Offline Download Server UserHash [DargonD]
+//	static const auto SDC_RefUserHash_16(L"769D36987E0E313A1501967D0F146F7A"); //UserHash of Xunlei Offline Download Server and Moblie System Apps [pandaleo]
+	if (_wcsicmp(userhash, SDC_RefUserHash_1) == 0 || _wcsicmp(userhash, SDC_RefUserHash_2) == 0 || _wcsicmp(userhash, SDC_RefUserHash_3) == 0 || 
+		_wcsicmp(userhash, SDC_RefUserHash_4) == 0 || _wcsicmp(userhash, SDC_RefUserHash_5) == 0 || _wcsicmp(userhash, SDC_RefUserHash_6) == 0 || 
+		_wcsicmp(userhash, SDC_RefUserHash_7) == 0 || _wcsicmp(userhash, SDC_RefUserHash_8) == 0 || _wcsicmp(userhash, SDC_RefUserHash_9) == 0 || 
+		_wcsicmp(userhash, SDC_RefUserHash_10) == 0 || _wcsicmp(userhash, SDC_RefUserHash_11) == 0 || _wcsicmp(userhash, SDC_RefUserHash_12) == 0 || 
+		_wcsicmp(userhash, SDC_RefUserHash_13) == 0 || 
+		(!wcsstr(modversion, L"xl build") && _wcsicmp(userhash, SDC_RefUserHash_14) == 0) || //The SDC_RefUserHash_14 with modstring "xl build" will be checked in DLPCheckModstring_Hard function.
+		(!wcsstr(username, L"[CHN][VeryCD]QQ") && _wcsicmp(userhash, SDC_RefUserHash_15) == 0) || //The SDC_RefUserHash_15 with NickName "[CHN][VeryCD]QQ" will be checked in DLPCheckUsername_Hard function.
+		(!wcsstr(username, L"[CHN]shaohan") && _wcsicmp(userhash, SDC_RefUserHash_16) == 0)) //The SDC_RefUserHash_16 with NickName "[CHN]shaohan" will be checked in DLPCheckUsername_Hard function.
+			return L"[SDC]Community UserHash";
+#endif
+
+	if(modversion.IsEmpty())
+		return NULL;
+	
+#define NUMBERSOFSTRING 9
+	static const CString testModString[] = {_T("Xtreme"), _T("ScarAngel"), _T("Mephisto"), _T("MorphXT"), _T("EastShare"), _T("StulleMule"), /*_T("Magic Angel"),*/ _T("DreaMule"), _T("X-Mod"), _T("RaJiL")};
+	static const float testMinVer[] = {4.4f, 2.5f, 1.5f, 10.0f, 13.0f, 6.0f, /*3.0f,*/ 3.0f, 0.0f, 2.2f};
+	for(int i=0; i<NUMBERSOFSTRING; i++){
+		bool tag1 = (username.Find(_T('«') + testModString[i]) != -1);
+		if(modversion.Find(testModString[i]) != -1) {
+			float version = (float)_tstof(modversion.Right(4));
+			if(!tag1 && ((testMinVer[i] == 0.0f) || (version == 9.7f) || (version >= testMinVer[i])))
+				return _T("ModString Thief");
+		}
+		else if(tag1)
+			return _T("ModString Thief");
+	}
+
+	//doubled  «...» in the username, like "username «Xtreme #.#» «abcd»"
+	int posr1 = username.Find(_T('»'));
+	int posr2 = username.ReverseFind(_T('»'));
+	if((posr1 > 5) && (posr2 - posr1 > 5) && ((username.GetAt(posr1 - 5) == _T('«')) || (username.GetAt(posr2 - 5) == _T('«'))))
+		return _T("Bad Username Paddings");
+	//zz_fly :: end
+
+
+//SDC Main
+#if defined(SPECIAL_DLP_VERSION)
+#if (defined(ALL_VERYCD_MOD) || defined(VERYCD_TAG))
+	if (wcsstr(modversion, L"VeryCD 090304") && !wcsstr(username, L"[CHN]shaohan")) //This version has been checked before DLPCheckModstring_Soft function.
+		return L"[SDC]All-VeryCD-Mod";
+#elif defined(VERYCD_DEFAULT_NICKNAMES)
+	if (wcsstr(modversion, L"VeryCD") && 
+	//They will be checked in DLPCheckModstring_Hard function.
+		!(wcsstr(modversion, L" 08") && 
+		(wcsstr(modversion, L"0126") || wcsstr(modversion, L"0730") || wcsstr(modversion, L"0509") || 
+		wcsstr(modversion, L"0606") || wcsstr(modversion, L"0624") || wcsstr(modversion, L"0630"))) && 
+	//Default NickName in a VeryCD-EasyMule-Mod version
+		(wcsstr(username, L"easyMule.com") || 
+	//VeryCD-Mod and old VeryCD-EasyMule-Mod versions
+		((wcsstr(username, L"[CHN]") || wcsstr(username, L"[VeryCD]")) && 
+		(wcsstr(username, L"yourname") || 
+	//New VeryCD-EasyMule-Mod versions
+	//2009-07 Updated (GB2312)
+		wcsstr(username, L"我爱电驴") || 
+		wcsstr(username, L"爱分享") || 
+		wcsstr(username, L"分享快乐") || 
+		wcsstr(username, L"上传Happy") || 
+		wcsstr(username, L"爱电驴爱生活") || 
+		wcsstr(username, L"dianlv") || 
+		wcsstr(username, L"自由电驴") || 
+	//2009-07 Updated (Big5, GB2312 to Big5 codepage garbled)
+		wcsstr(username, L"扂乾萇聶") || 
+		wcsstr(username, L"乾煦砅") || 
+		wcsstr(username, L"煦砅辦氈") || 
+		wcsstr(username, L"奻換Happy") || 
+		wcsstr(username, L"乾萇聶乾汜魂") || 
+		wcsstr(username, L"赻蚕萇聶") || 
+	//2009-08 Updated (GB2312)
+		wcsstr(username, L"感谢驴友") || 
+		wcsstr(username, L"感谢分享") || 
+		wcsstr(username, L"大家一起来加速") || 
+		wcsstr(username, L"分享越多 下载越快") || 
+		wcsstr(username, L"挂机王") || 
+		wcsstr(username, L"通宵上传") || 
+		wcsstr(username, L"分享互联网") || 
+	//2009-08 Updated (Big5, GB2312 to Big5 codepage garbled)
+		wcsstr(username, L"覜郅聶衭") || 
+		wcsstr(username, L"覜郅煦砅") || 
+		wcsstr(username, L"湮模珨懂樓厒") || 
+		wcsstr(username, L"煦砅埣嗣 狟婥埣辦") || 
+		wcsstr(username, L"境儂卼") || 
+		wcsstr(username, L"籵秖奻換") || 
+		wcsstr(username, L"煦砅誑薊厙") || 
+	//2013-01 Updated
+		wcsstr(username, L"[easyMule]")))))
+			return L"[SDC]VeryCD-Default-NickNames";
+#endif
+#endif
+
+	return NULL; 
+}
+
+LPCTSTR __declspec(dllexport) DLPCheckMessageSpam(LPCTSTR messagetext)
+{
+	if(messagetext==NULL)
+		return NULL;
+
+	if(
+		_tcsstr(messagetext, _T("ZamBoR")) ||
+		_tcsstr(messagetext, _T("DI-Emule")) ||
+		_tcsstr(messagetext, _T("Join the L33cher")) ||
+		_tcsstr(messagetext, _T("eMule FX")) ||
+		_tcsstr(messagetext, _T("---> ed2k://|file|Ketamine")) ||
+		_tcsstr(messagetext, _T("robot from RIAA, you can't fight")) ||
+		_tcsstr(messagetext, _T("agent from PeerFactor, she advises you to stop")) ||
+		_tcsstr(messagetext, _T("bot from MPAA, you can't do anything against her")) ||
+		_tcsstr(messagetext, _T("[Sangue-Suga]")) || //3 /2007
+		_tcsstr(messagetext, _T("[te@m projekt")) || //5 /2007
+		_tcsstr(messagetext, _T("eMule PRO Ultra")) || //8/2007 //include ultra 1 2 3
+		_tcsstr(messagetext, _T("HyperMule")) || //8/2007
+		_tcsstr(messagetext, _T("FXeMule")) ||
+		_tcsstr(messagetext, _T("angelmule.com")) || //**Riso64Bit**
+		_tcsstr(messagetext, _T("RocketMule")) //**Riso64Bit**
+		)
+		return (_T("Spam-Message"));
+
+	if(CString(messagetext).Trim().IsEmpty())
+		return (_T("Spam-Message"));
+
+	return NULL;
+}
+
+LPCTSTR __declspec(dllexport) DLPCheckHelloTag(UINT tagnumber)
+{
+	LPCTSTR strSnafuTag=NULL;
+	switch(tagnumber)
+	{
+		case CT_UNKNOWNx12:
+		case CT_UNKNOWNx13:
+		case CT_UNKNOWNx14:
+		case CT_UNKNOWNx16:
+		case CT_UNKNOWNx17:
+		case CT_UNKNOWNxE6:			strSnafuTag=apszSnafuTag[0];break;//buffer=_T("DodgeBoards");break;
+		case CT_UNKNOWNx15:			strSnafuTag=apszSnafuTag[1];break;//buffer=_T("DodgeBoards & DarkMule |eVorte|X|");break;
+		case CT_UNKNOWNx22:			strSnafuTag=apszSnafuTag[2];break;//buffer=_T("DarkMule v6 |eVorte|X|");break;
+		case CT_UNKNOWNx5D:
+		case CT_UNKNOWNx6B:
+		case CT_UNKNOWNx6C:			strSnafuTag=apszSnafuTag[17];break;
+		case CT_UNKNOWNx74:
+		case CT_UNKNOWNx87:			strSnafuTag=apszSnafuTag[17];break;
+		case CT_UNKNOWNxF0:
+		case CT_UNKNOWNxF4:			strSnafuTag=apszSnafuTag[17];break;
+			//case CT_UNKNOWNx69:			strSnafuTag=apszSnafuTag[3];break;//buffer=_T("eMuleReactor");break;
+		case CT_UNKNOWNx79:			strSnafuTag=apszSnafuTag[4];break;//buffer=_T("Bionic");break;
+		case CT_UNKNOWNx83:			strSnafuTag=apszSnafuTag[15];break;//buffer=_T("Fusspi");break;
+		case CT_UNKNOWNx76:			
+		case CT_UNKNOWNxCD:			strSnafuTag=apszSnafuTag[16];break;//buffer=_T("www.donkey2002.to");break;
+		case CT_UNKNOWNx88:
+				strSnafuTag=apszSnafuTag[5];//[LSD7c]
+			break;
+		case CT_UNKNOWNx8c:			strSnafuTag=apszSnafuTag[5];break;//buffer=_T("[LSD7c]");break; 
+		case CT_UNKNOWNx8d:			strSnafuTag=apszSnafuTag[6];break;//buffer=_T("[0x8d] unknown Leecher - (client version:60)");break;
+		case CT_UNKNOWNx99:			strSnafuTag=apszSnafuTag[7];break;//buffer=_T("[RAMMSTEIN]");break;		//STRIKE BACK
+		case CT_UNKNOWNx97:
+		case CT_UNKNOWNx98:
+		case CT_UNKNOWNx9C:
+		case CT_UNKNOWNxDA:			strSnafuTag=apszSnafuTag[3];break;//buffer=_T("eMuleReactor");break;
+		case CT_UNKNOWNxC8:			//Xman x4
+		case CT_UNKNOWNxCE:			//Xman 20.08.05
+		case CT_UNKNOWNxCF:			//Xman 20.08.05
+		case CT_UNKNOWNx94:			//Xman 20.08.05
+		case CT_UNKNOWNxc4:			strSnafuTag=apszSnafuTag[8];break;//buffer=_T("[MD5 Community]");break;	//USED BY NEW BIONIC => 0x12 Sender
+		case CT_UNKNOWNxEC:			strSnafuTag=apszSnafuTag[18];break; //Xman x4 Speedmule
+		//case CT_FRIENDSHARING:		//STRIKE BACK
+			//break;
+		case CT_DARK:				//STRIKE BACK
+		case CT_UNKNOWNx7A:
+		case CT_UNKNOWNxCA:
+			strSnafuTag=apszSnafuTag[9];break;//buffer=_T("new DarkMule");
+		case CT_UNKNOWNx4D:
+			strSnafuTag=apszSnafuTag[19];break;// pimp my mule misuse an official tag in hello
+		case CT_UNKNOWNxD2:
+			strSnafuTag=apszSnafuTag[20];break;//SquallATF
+		//case CT_UNKNOWNx85:
+		//	strSnafuTag=apszSnafuTag[21];break;//zz_fly
+	}
+
+	return strSnafuTag;
+}
+
+LPCTSTR __declspec(dllexport) DLPCheckInfoTag(UINT tagnumber)
+{
+	LPCTSTR strSnafuTag=NULL;
+
+	switch(tagnumber)
+	{
+	case ET_MOD_UNKNOWNx12:
+	case ET_MOD_UNKNOWNx13:
+	case ET_MOD_UNKNOWNx14:
+	case ET_MOD_UNKNOWNx17:		strSnafuTag=apszSnafuTag[0];break;//("[DodgeBoards]")
+	case ET_MOD_UNKNOWNx2F:		strSnafuTag=apszSnafuTag[10];break;//buffer=_T("[OMEGA v.07 Heiko]");break;
+	case ET_MOD_UNKNOWNx36:
+	case ET_MOD_UNKNOWNx5B:
+	case ET_MOD_UNKNOWNxA6:		strSnafuTag=apszSnafuTag[11];break;//buffer=_T("eMule v0.26 Leecher");break;
+	case ET_MOD_UNKNOWNx60:		strSnafuTag=apszSnafuTag[12];break;//buffer=_T("[Hunter]");break; //STRIKE BACK
+	case ET_MOD_UNKNOWNx76:		strSnafuTag=apszSnafuTag[0];break;//buffer=_T("[DodgeBoards]");break;
+	case ET_MOD_UNKNOWNx50:		
+	case ET_MOD_UNKNOWNxB1:		
+	case ET_MOD_UNKNOWNxB4:		
+	case ET_MOD_UNKNOWNxC8:		
+	case ET_MOD_UNKNOWNxC9:		strSnafuTag=apszSnafuTag[13];break;//buffer=_T("[Bionic 0.20 Beta]");break;
+	case ET_MOD_UNKNOWNxDA:		strSnafuTag=apszSnafuTag[14];break;//buffer=_T("[Rumata (rus)(Plus v1f)]");break;
+	}
+
+	return strSnafuTag;
+}
diff --git a/package/lean/antileech/src/antiLeech.h b/package/lean/antileech/src/antiLeech.h
new file mode 100644
index 0000000000..ae333f1a3e
--- /dev/null
+++ b/package/lean/antileech/src/antiLeech.h
@@ -0,0 +1,161 @@
+#ifndef ANTILEECH_H
+#define ANTILEECH_H
+
+
+#pragma once
+
+#include "antiLeech_wx.h"
+#include "CString_wx.h"
+
+class IantiLeech 
+{
+public:
+	virtual ~IantiLeech(){};                /* Bill Lee: Not be used currently */
+	//BOOL WINAPI DllMain(HINSTANCE hinstDLL,DWORD,LPVOID);
+	virtual DWORD GetDLPVersion() = 0;
+	//old versions to keep compatible
+	/* //drop old version support
+	virtual LPCTSTR DLPCheckModstring(LPCTSTR modversion, LPCTSTR clientversion);
+	virtual LPCTSTR DLPCheckUsername(LPCTSTR username);
+	virtual LPCTSTR DLPCheckNameAndHash(CString username, CString& userhash);
+	*/
+	//new versions
+	virtual LPCTSTR DLPCheckModstring_Hard(LPCTSTR modversion, LPCTSTR clientversion) = 0;
+	virtual LPCTSTR DLPCheckModstring_Soft(LPCTSTR modversion, LPCTSTR clientversion) = 0;
+	virtual LPCTSTR DLPCheckUsername_Hard(LPCTSTR username) = 0;
+	virtual LPCTSTR DLPCheckUsername_Soft(LPCTSTR username) = 0;
+	virtual LPCTSTR DLPCheckNameAndHashAndMod(const CString& username, const CString& userhash, const CString& modversion) = 0;
+	virtual LPCTSTR DLPCheckMessageSpam(LPCTSTR messagetext) = 0;
+
+
+	virtual LPCTSTR DLPCheckUserhash(const PBYTE userhash) = 0;
+
+
+	virtual LPCTSTR DLPCheckHelloTag(UINT tagnumber) = 0;
+	virtual LPCTSTR DLPCheckInfoTag(UINT tagnumber) = 0;
+
+	//void  TestFunc();
+
+//Bill Lee: no need in interface abstract class
+//private:
+//	static bool IsTypicalHex (const CString& addon);
+};
+
+//Bill Lee: never call delete on IantiLeech, use destoryAntiLeechInstat instead.
+extern "C" IantiLeech* createAntiLeechInstant();
+extern "C" int destoryAntiLeechInstant(IantiLeech*);
+
+class CantiLeech: public IantiLeech
+{
+public:
+	//BOOL WINAPI DllMain(HINSTANCE hinstDLL,DWORD,LPVOID);
+	virtual DWORD GetDLPVersion(){	return DLPVersion;	}
+	//old versions to keep compatible
+	/* //drop old version support
+	virtual LPCTSTR DLPCheckModstring(LPCTSTR modversion, LPCTSTR clientversion);
+	virtual LPCTSTR DLPCheckUsername(LPCTSTR username);
+	virtual LPCTSTR DLPCheckNameAndHash(CString username, CString& userhash);
+	*/
+	//new versions
+	virtual LPCTSTR DLPCheckModstring_Hard(LPCTSTR modversion, LPCTSTR clientversion);
+	virtual LPCTSTR DLPCheckModstring_Soft(LPCTSTR modversion, LPCTSTR clientversion);
+	virtual LPCTSTR DLPCheckUsername_Hard(LPCTSTR username);
+	virtual LPCTSTR DLPCheckUsername_Soft(LPCTSTR username);
+	virtual LPCTSTR DLPCheckNameAndHashAndMod(const CString& username, const CString& userhash, const CString& modversion);
+	virtual LPCTSTR DLPCheckMessageSpam(LPCTSTR messagetext);
+
+
+	virtual LPCTSTR DLPCheckUserhash(const PBYTE userhash);
+
+
+	virtual LPCTSTR DLPCheckHelloTag(UINT tagnumber);
+	virtual LPCTSTR DLPCheckInfoTag(UINT tagnumber);
+
+	//void  TestFunc();
+
+private:
+	static const DWORD DLPVersion;
+	static bool IsTypicalHex (const CString& addon);
+};
+
+//<<< new tags from eMule 0.04x
+#define CT_UNKNOWNx0			0x00 // Hybrid Horde protocol
+#define CT_UNKNOWNx12			0x12 // http://www.haspepapa-welt.de (DodgeBoards)
+#define CT_UNKNOWNx13			0x13 // http://www.haspepapa-welt.de (DodgeBoards)
+#define CT_UNKNOWNx14			0x14 // http://www.haspepapa-welt.de (DodgeBoards)
+#define CT_UNKNOWNx15			0x15 // http://www.haspepapa-welt.de (DodgeBoards) & DarkMule |eVorte|X|
+#define CT_UNKNOWNx16			0x16 // http://www.haspepapa-welt.de (DodgeBoards)
+#define CT_UNKNOWNx17			0x17 // http://www.haspepapa-welt.de (DodgeBoards)
+#define CT_UNKNOWNx4D			0x4D // pimp my mule (00de)
+#define CT_UNKNOWNxE6			0xE6 // http://www.haspepapa-welt.de
+#define CT_UNKNOWNx22			0x22 // DarkMule |eVorte|X|
+#define CT_UNKNOWNx5D			0x5D // md4 
+#define CT_UNKNOWNx63			0x63 // ?
+#define CT_UNKNOWNx64			0x64 // ?
+#define CT_UNKNOWNx69			0x69 // eMuleReactor //Xman don't use this, it's webcache!
+#define CT_UNKNOWNx6B			0x6B // md4
+#define CT_UNKNOWNx6C			0x6C // md4
+#define CT_UNKNOWNx74			0x74 // md4
+#define CT_UNKNOWNx76			0x76 // www.donkey2002.to
+#define CT_UNKNOWNx79			0x79 // Bionic
+#define CT_UNKNOWNx7A			0x7A // NewDarkMule
+#define CT_UNKNOWNx83			0x83 // Fusspi
+#define CT_UNKNOWNx87			0x87 // md4
+#define CT_UNKNOWNx88			0x88 // DarkMule v6 |eVorte|X|
+#define CT_UNKNOWNx8c			0x8c // eMule v0.27c [LSD7c] 
+#define CT_UNKNOWNx8d			0x8d // unknown Leecher - (client version:60)
+#define CT_UNKNOWNx94			0x94 // 00.de community  //Xman 20.08.05
+#define CT_UNKNOWNx97			0x97 // Emulereactor Community Mod
+#define CT_UNKNOWNx98			0x98 // Emulereactor Community Mod
+#define CT_UNKNOWNx99			0x99 // eMule v0.26d [RAMMSTEIN 8b]
+#define CT_UNKNOWNx9C			0x9C // Emulereactor Community Mod
+#define CT_UNKNOWNxbb			0xbb // emule.de (client version:60)
+#define CT_UNKNOWNxc4			0xc4 //MD5 Community from new bionic - hello
+#define CT_UNKNOWNxC8			0xc8 // MD5 Community from new bionic - hello //Xman x4
+#define CT_UNKNOWNxCA			0xCA // NewDarkMule
+#define CT_UNKNOWNxCD			0xCD // www.donkey2002.to
+#define CT_UNKNOWNxCE			0xCE // FRZ community  //Xman 20.08.05
+#define CT_UNKNOWNxCF			0xCF // FRZ community  //Xman 20.08.05
+#define CT_UNKNOWNxDA			0xDA // Emulereactor Community Mod
+#define CT_UNKNOWNxEC			0xec // SpeedMule and clones	//Xman x4
+#define CT_UNKNOWNxF0			0xF0 // Emulereactor Community Mod
+#define CT_UNKNOWNxF4			0xF4 // Emulereactor Community Mod
+#define CT_UNKNOWNxD2			0xD2 // Chinese Leecher //SquallATF
+//#define CT_UNKNOWNx85			0x85 // viper-israel.org and eChanblardNext  //zz_fly, viper become good
+
+#define CT_FRIENDSHARING		0x66 //eWombat  [SNAFU]
+#define CT_DARK					0x54 //eWombat [SNAFU]
+#define FRIENDSHARING_ID 0x5F73F1A0 // Magic Key, DO NOT CHANGE!
+
+// unknown eMule tags
+#define ET_MOD_UNKNOWNx12		0x12 // http://www.haspepapa-welt.de
+#define ET_MOD_UNKNOWNx13		0x13 // http://www.haspepapa-welt.de
+#define ET_MOD_UNKNOWNx14		0x14 // http://www.haspepapa-welt.de
+#define ET_MOD_UNKNOWNx17		0x17 // http://www.haspepapa-welt.de
+#define ET_MOD_UNKNOWNx2F		0x2F // eMule v0.30 [OMEGA v.07 Heiko]
+#define ET_MOD_UNKNOWNx30		0x30 // aMule 1.2.0
+#define ET_MOD_UNKNOWNx36		0x36 // eMule v0.26
+#define ET_MOD_UNKNOWNx3C		0x3C // enkeyDev.6 / LamerzChoice 9.9a
+#define ET_MOD_UNKNOWNx41		0x41 // CrewMod (pre-release mod based on Plus) identification
+#define ET_MOD_UNKNOWNx42		0x42 // CrewMod (pre-release mod based on Plus) key verification
+#define ET_MOD_UNKNOWNx43		0x43 // CrewMod (pre-release mod based on Plus) version info
+#define ET_MOD_UNKNOWNx50		0x50 // Bionic 0.20 Beta]
+#define ET_MOD_UNKNOWNx59		0x59 // emule 0.40 / eMule v0.30 [LSD.12e]
+#define ET_MOD_UNKNOWNx5B		0x5B // eMule v0.26
+#define ET_MOD_UNKNOWNx60		0x60 // eMule v0.30a Hunter.6 + eMule v0.26
+#define ET_MOD_UNKNOWNx64		0x64 // LSD.9dT / Athlazan(0.29c)Alpha.3
+#define ET_MOD_UNKNOWNx76		0x76 // http://www.haspepapa-welt.de (DodgeBoards)
+#define ET_MOD_UNKNOWNx84		0x84 // eChanblardv3.2
+#define ET_MOD_UNKNOWNx85		0x85 // ? 
+#define ET_MOD_UNKNOWNx86		0x86 // ? 
+#define ET_MOD_UNKNOWNx93		0x93 // ?
+#define ET_MOD_UNKNOWNxA6		0xA6 // eMule v0.26
+#define ET_MOD_UNKNOWNxB1		0xB1 // Bionic 0.20 Beta]
+#define ET_MOD_UNKNOWNxB4		0xB4 // Bionic 0.20 Beta]
+#define ET_MOD_UNKNOWNxC8		0xC8 // Bionic 0.20 Beta]
+#define ET_MOD_UNKNOWNxC9		0xC9 // Bionic 0.20 Beta]
+#define ET_MOD_UNKNOWNxDA		0xDA // Rumata (rus)(Plus v1f) - leecher mod?
+//>>> eWombat [SNAFU_V3]
+
+#undef __declspec
+#endif
diff --git a/package/lean/antileech/src/antiLeech_wx.cpp b/package/lean/antileech/src/antiLeech_wx.cpp
new file mode 100644
index 0000000000..887f11e50f
--- /dev/null
+++ b/package/lean/antileech/src/antiLeech_wx.cpp
@@ -0,0 +1,25 @@
+//Author:	greensea <gs@bbxy.net>
+#include "antiLeech_wx.h" //Modified by Bill Lee.
+
+//Bug fixed by Orzogc Lee
+LPCTSTR StrStrI(LPCTSTR haystack, LPCTSTR needle){
+	//Bill Lee: allocate wchar array on the stack
+	wchar_t haystacki[512];
+	wchar_t needlei[512];
+	int i = 0;
+	do{
+		haystacki[i] = towlower(haystack[i]);
+		if(i == 511)
+			break;
+	}while(haystack[i++]); //As haystacki is allocated on the stack, it wans't set 0. So the NULL needs to be copy.
+	i = 0;
+	do{
+		needlei[i] = towlower(needle[i]);
+		if(i == 511)
+			break;
+	}while(needle[i++]);
+	const wchar_t* ret = wcsstr(haystacki, needlei);
+	if(ret != NULL)
+		ret = ret - haystacki + haystack;
+	return ret;
+}
diff --git a/package/lean/antileech/src/antiLeech_wx.h b/package/lean/antileech/src/antiLeech_wx.h
new file mode 100644
index 0000000000..8ebbd28e3a
--- /dev/null
+++ b/package/lean/antileech/src/antiLeech_wx.h
@@ -0,0 +1,54 @@
+#ifndef ANTILEECH_WX_H
+#define ANTILEECH_WX_H
+
+#include <wx/defs.h>
+#include <string.h>
+#include <wctype.h>   // for towlower()
+
+#define LPCTSTR		const wxChar* 
+#define BOOL		bool
+//#define _T(var)		wxT(var)	//defined in wxWidgets
+#define DWORD		wxUint32
+#define UINT		wxUint16
+#define WINAPI
+#define HINSTANCE
+#define LPVOID		void*
+#define PBYTE		unsigned char*
+#define TCHAR		wxChar
+#define _TINT		wxInt32
+#define SSIZE_T		ptrdiff_t
+
+#define StrCmpI _tcsicmp
+#define _tcsicmp _wcsicmp
+
+#define _istdigit(var)		iswdigit(var)
+#define _istcntrl(var)		iswcntrl(var)
+#define _istpunct(var)		iswpunct(var)
+#define _istspace(var)		iswspace(var)
+#define _istxdigit(var)		iswxdigit(var)
+inline float _tstof(const wchar_t* str){
+	wchar_t** ptail = NULL;
+	return wcstof(str, ptail);
+}
+//This function is not used. by Orzogc Lee
+//But I think there is no need to removing, linker will remove it.
+/*
+inline void tolowers(wxChar* str){
+	int i = 0;
+	do{
+		str[i] = towlower(str[i]);
+	}while(str[++i]);
+}
+*/
+#define _tcsstr(haystack, needle)	wcsstr(haystack, needle)
+#define _tcslen(var)		wcslen(var)
+#define StrStr(a, b)		wcsstr(a, b)
+#define StrStrIW(a, b)		StrStrI(a, b)
+
+LPCTSTR StrStrI(LPCTSTR haystack, LPCTSTR needle);
+//Bill Lee: I think inlining this function make no senses, because it is a very large operation.
+
+#define _wcsicmp(a, b)		wcscasecmp(a, b)
+#define StrCmpIW(a, b)		wcscasecmp(a, b)
+
+#endif
diff --git a/package/lean/antileech/src/autogen.sh b/package/lean/antileech/src/autogen.sh
new file mode 100755
index 0000000000..ddd3277f3b
--- /dev/null
+++ b/package/lean/antileech/src/autogen.sh
@@ -0,0 +1,8 @@
+mkdir -pv m4
+libtoolize
+aclocal
+aclocal -I m4
+automake --add-missing --copy
+autoconf
+
+
diff --git a/package/lean/antileech/src/configure.ac b/package/lean/antileech/src/configure.ac
new file mode 100755
index 0000000000..389e194467
--- /dev/null
+++ b/package/lean/antileech/src/configure.ac
@@ -0,0 +1,44 @@
+#                                               -*- Autoconf -*-
+# Process this file with autoconf to produce a configure script.
+# Copyright (C) 2011 Bill Lee <bill.lee.y@gmail.com>
+# License: GNU GPL v3 or any later version released by Free Software Foundation
+
+#AC_PREREQ([2.65])
+AC_INIT([antiLeech], [44], [https://github.com/persmule/amule-dlp/issues])
+AC_CONFIG_MACRO_DIR([m4])
+AM_INIT_AUTOMAKE()
+AC_CONFIG_SRCDIR([antiLeech.cpp])
+#AC_CONFIG_HEADERS([config.h])
+
+# Checks for programs.
+AC_PROG_CXX
+AC_PROG_CC
+AC_PROG_CPP
+AC_PROG_MAKE_SET
+AM_DISABLE_STATIC
+AC_PROG_LIBTOOL
+
+#Check for wx-config
+
+AC_CHECK_PROG(WXCONFIG, [wx-config], [wx-config])
+ANTILEECH_CPPFLAGS=$(wx-config --cppflags)
+
+AC_SUBST(ANTILEECH_CPPFLAGS)
+
+# Checks for libraries.
+ANTILEECH_LDFLAGS=
+
+AC_SUBST(ANTILEECH_LDFLAGS)
+
+# Checks for header files.
+AC_CHECK_HEADERS([string.h], [wx/string.h], [wx/defs.h])
+
+# Checks for typedefs, structures, and compiler characteristics.
+AC_HEADER_STDBOOL
+AC_C_INLINE
+AC_TYPE_SIZE_T
+
+# Checks for library functions.
+
+AC_CONFIG_FILES([Makefile])
+AC_OUTPUT
diff --git a/package/lean/antileech/src/sdc2amule.diff b/package/lean/antileech/src/sdc2amule.diff
new file mode 100755
index 0000000000..e08a3a75df
--- /dev/null
+++ b/package/lean/antileech/src/sdc2amule.diff
@@ -0,0 +1,61 @@
+--- antiLeech.cpp.win	2016-02-15 19:31:18.748711749 +0800
++++ antiLeech.cpp	2016-02-15 20:49:25.691484626 +0800
+@@ -17,8 +17,11 @@
+ //Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
+ 
+ 
+-#include <atlstr.h>
++#include "CString_wx.h"
+ #include "antiLeech.h"
++#define __declspec(var)        CantiLeech::
++#define SPECIAL_DLP_VERSION
++#define ALL_VERYCD_MOD
+ 
+ #ifdef _DEBUG
+ #define new DEBUG_NEW
+@@ -51,7 +54,10 @@ LPCTSTR apszSnafuTag[]=
+ 		//,_T("[eChanblardNext]")								//21 zz_fly
+ };
+ 
++const DWORD CantiLeech::DLPVersion = 4405;
+ 
++//deactivate M$WIN-specific codes
++#if 0
+ BOOL WINAPI  DllMain (
+ 					  HANDLE    hModule,
+ 					  DWORD     dwFunction,
+@@ -74,6 +80,7 @@ void __declspec(dllexport)  TestFunc()
+ {
+ 	::MessageBox(NULL,_T("Inside the DLL!"),_T("Nix"),0);
+ }
++#endif
+ 
+ //old versions just to keep compatible
+ /* //drop old version support
+@@ -285,7 +292,7 @@ LPCTSTR __declspec(dllexport) DLPCheckNa
+ */
+ //end old version ------------------------------------------
+ 
+-bool IsTypicalHex(CString& addon)
++bool CantiLeech::IsTypicalHex(const CString& addon)
+ {
+ 	if(addon.GetLength()>25 || addon.GetLength()<5)
+ 		return false;
+@@ -1244,7 +1251,7 @@ LPCTSTR __declspec(dllexport) DLPCheckUs
+ 	return NULL;
+ }
+ 
+-LPCTSTR __declspec(dllexport) DLPCheckNameAndHashAndMod(CString username, CString& userhash, CString& modversion)
++LPCTSTR __declspec(dllexport) DLPCheckNameAndHashAndMod(const CString& username, const CString& userhash, const CString& modversion)
+ {
+ 	if(username.IsEmpty() || userhash.IsEmpty())
+ 		return NULL;
+@@ -1309,7 +1316,7 @@ LPCTSTR __declspec(dllexport) DLPCheckNa
+ 
+ 	//Check for aedit
+ 	//remark: a unmodded emule can't send a space at last sign
+-	if(modversion.IsEmpty() && username.Right(1)==32)
++	if(modversion.IsEmpty() && username.Right(1)==_T(" "))
+ 		return _T("AEdit");
+ 
+ 	//Check for Hex-Modstring
diff --git a/package/lean/autocore/Makefile b/package/lean/autocore/Makefile
new file mode 100644
index 0000000000..d29a938c3b
--- /dev/null
+++ b/package/lean/autocore/Makefile
@@ -0,0 +1,35 @@
+#
+# Copyright (C) 2010-2011 OpenWrt.org
+#
+# This is free software, licensed under the GNU General Public License v2.
+# See /LICENSE for more information.
+#
+
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=autocore
+PKG_VERSION:=1
+PKG_RELEASE:=19
+
+
+include $(INCLUDE_DIR)/package.mk
+
+define Package/autocore
+  TITLE:=x86/x64 auto core loadbalance script.
+  MAINTAINER:=Lean
+  DEPENDS:=@TARGET_x86 +bc +lm-sensors +ethtool
+endef
+
+define Package/autocore/description
+A usb autoconfig hotplug script.
+endef
+
+define Build/Compile
+endef
+
+define Package/autocore/install
+	$(INSTALL_DIR) $(1)/etc/init.d
+	$(INSTALL_BIN) ./files/autocore $(1)/etc/init.d/autocore
+endef
+
+$(eval $(call BuildPackage,autocore))
diff --git a/package/lean/autocore/files/autocore b/package/lean/autocore/files/autocore
new file mode 100755
index 0000000000..f4fbc5ce69
--- /dev/null
+++ b/package/lean/autocore/files/autocore
@@ -0,0 +1,62 @@
+#!/bin/sh /etc/rc.common
+# Copyright (C) 2017 lean <coolsnowwolf@gmail.com>
+
+START=99
+
+start()
+{
+  rfc=4096  
+  cc=$(grep -c processor /proc/cpuinfo)  
+  rsfe=$(echo $cc*$rfc | bc)  
+  sysctl -w net.core.rps_sock_flow_entries=$rsfe  
+  for fileRps in $(ls /sys/class/net/eth*/queues/rx-*/rps_cpus)  
+  do
+      echo $cc > $fileRps  
+  done
+        
+  for fileRfc in $(ls /sys/class/net/eth*/queues/rx-*/rps_flow_cnt)  
+  do
+      echo $rfc > $fileRfc  
+  done
+
+  for fileRps in $(ls /sys/class/net/eth*/queues/tx-*/xps_cpus)  
+  do
+      echo $cc > $fileRps  
+  done
+  
+  a=$(cat /proc/cpuinfo | grep name | cut -f2 -d: | uniq)
+  b=$(echo -n ' : ')
+  c=$(cat /proc/cpuinfo | grep 'core id' | sort -u | wc -l)
+  d=$(echo -n ' Core ')
+  e=$(cat /proc/cpuinfo | grep 'processor' | wc -l)
+  f=$(echo -n ' Thread ')
+  g=${a}${b}${c}${d}${e}${f}
+  echo $g > /tmp/sysinfo/model
+  
+  ethtool -K eth0 rx-checksum on >/dev/null 2>&1
+  ethtool -K eth0 tx-checksum-ip-generic on >/dev/null 2>&1
+  ethtool -K eth0 tso on >/dev/null 2>&1
+  ethtool -K eth0 ufo on >/dev/null 2>&1
+  ethtool -K eth0 gso on >/dev/null 2>&1
+  
+  ethtool -K eth1 rx-checksum on >/dev/null 2>&1
+  ethtool -K eth1 tx-checksum-ip-generic on >/dev/null 2>&1
+  ethtool -K eth1 tso on >/dev/null 2>&1
+  ethtool -K eth1 ufo on >/dev/null 2>&1
+  ethtool -K eth1 gso on >/dev/null 2>&1
+  
+  ethtool -K eth2 rx-checksum on >/dev/null 2>&1
+  ethtool -K eth2 tx-checksum-ip-generic on >/dev/null 2>&1
+  ethtool -K eth2 tso on >/dev/null 2>&1
+  ethtool -K eth2 ufo on >/dev/null 2>&1
+  ethtool -K eth2 gso on >/dev/null 2>&1
+  
+  ethtool -K eth3 rx-checksum on >/dev/null 2>&1
+  ethtool -K eth3 tx-checksum-ip-generic on >/dev/null 2>&1
+  ethtool -K eth3 tso on >/dev/null 2>&1
+  ethtool -K eth3 ufo on >/dev/null 2>&1
+  ethtool -K eth3 gso on >/dev/null 2>&1
+}
+
+
+
diff --git a/package/lean/automount/Makefile b/package/lean/automount/Makefile
new file mode 100644
index 0000000000..93d756caff
--- /dev/null
+++ b/package/lean/automount/Makefile
@@ -0,0 +1,36 @@
+#
+# Copyright (C) 2010-2011 OpenWrt.org
+#
+# This is free software, licensed under the GNU General Public License v2.
+# See /LICENSE for more information.
+#
+
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=automount
+PKG_VERSION:=1
+PKG_RELEASE:=26
+PKG_ARCH:=all
+
+include $(INCLUDE_DIR)/package.mk
+
+define Package/automount
+  TITLE:=Mount autoconfig hotplug script.
+  MAINTAINER:=Lean
+  DEPENDS:=+block-mount +kmod-usb-storage +kmod-usb-storage-extras +kmod-fs-vfat +kmod-fs-ext4 +kmod-fs-exfat +ntfs-3g
+endef
+
+define Package/automount/description
+A usb autoconfig hotplug script.
+endef
+
+define Build/Compile
+endef
+
+define Package/automount/install
+	$(INSTALL_DIR) $(1)/etc/uci-defaults
+	$(INSTALL_BIN) ./files/15-automount $(1)/etc/15-automount
+	$(INSTALL_BIN) ./files/zzz-move-automount $(1)/etc/uci-defaults/zzz-move-automount
+endef
+
+$(eval $(call BuildPackage,automount))
diff --git a/package/lean/automount/files/15-automount b/package/lean/automount/files/15-automount
new file mode 100755
index 0000000000..dd518c4ecb
--- /dev/null
+++ b/package/lean/automount/files/15-automount
@@ -0,0 +1,27 @@
+#!/bin/sh
+
+# Copyright (C) 2015 OpenWrt.org
+
+# 0 yes blockdevice handles this - 1 no it is not there
+blkdev=`dirname $DEVPATH`
+basename=`basename $blkdev`
+device=`basename $DEVPATH`
+skip=`block info | sed 's/\(.*\): .*/\1/' | grep -q $device ; echo $?`
+path=$DEVPATH
+
+if [ $basename != "block" ] && [ -z "${device##sd*}" ] && [ $skip -eq 1 ]; then
+        mntpnt=$device
+        case "$ACTION" in
+                add)
+                        mkdir -p /mnt/$mntpnt
+                        chmod 777 /mnt/$mntpnt
+                        # Try to be gentle on solid state devices
+                        mount -o rw,noatime,discard /dev/$device /mnt/$mntpnt
+                ;;
+                remove)
+                        # Once the device is removed, the /dev entry disappear. We need mountpoint
+                        mountpoint=`mount |grep /dev/$device | sed 's/.* on \(.*\) type.*/\1/'`
+                        umount -l $mountpoint
+                ;;
+        esac
+fi
\ No newline at end of file
diff --git a/package/lean/automount/files/zzz-move-automount b/package/lean/automount/files/zzz-move-automount
new file mode 100755
index 0000000000..fbe094cbdd
--- /dev/null
+++ b/package/lean/automount/files/zzz-move-automount
@@ -0,0 +1,7 @@
+#!/bin/sh
+
+sleep 15
+mv /etc/15-automount /etc/hotplug.d/block/
+
+
+
diff --git a/package/lean/autosamba/Makefile b/package/lean/autosamba/Makefile
new file mode 100644
index 0000000000..b035f9bb47
--- /dev/null
+++ b/package/lean/autosamba/Makefile
@@ -0,0 +1,35 @@
+#
+# Copyright (C) 2010-2011 OpenWrt.org
+#
+# This is free software, licensed under the GNU General Public License v2.
+# See /LICENSE for more information.
+#
+
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=autosamba
+PKG_VERSION:=1
+PKG_RELEASE:=10
+PKG_ARCH:=all
+
+include $(INCLUDE_DIR)/package.mk
+
+define Package/autosamba
+  TITLE:=Samba autoconfig hotplug script.
+  MAINTAINER:=Lean
+  DEPENDS:=+luci-app-samba
+endef
+
+define Package/autosamba/description
+A hotplug script to config Samba share automatically.
+endef
+
+define Build/Compile
+endef
+
+define Package/autosamba/install
+	$(INSTALL_DIR) $(1)/etc/hotplug.d/block
+	$(INSTALL_BIN) ./files/20-smb $(1)/etc/hotplug.d/block/20-smb
+endef
+
+$(eval $(call BuildPackage,autosamba))
diff --git a/package/lean/autosamba/files/20-smb b/package/lean/autosamba/files/20-smb
new file mode 100755
index 0000000000..72e6faf751
--- /dev/null
+++ b/package/lean/autosamba/files/20-smb
@@ -0,0 +1,104 @@
+#!/bin/sh
+# 
+#   D-Team Technology Co.,Ltd. ShenZhen
+#   作者:Vic
+# 
+#
+# 警告:对着屏幕的哥们,我们允许你使用此脚本，但不允许你抹去作者的信息,请保留这段话。
+#
+. /lib/functions.sh
+. /lib/functions/service.sh
+
+global=0
+config_file="/etc/config/samba"
+
+wait_for_init() {
+    for i in `seq 30`
+    do
+        [ -e /tmp/procd.done ] || {
+            sleep 1; continue;
+        }
+        return
+    done
+}
+
+smb_handle() {
+        config_get path $1 path
+        if [  "$path" = "$2" ] ;then
+                global=1
+        fi
+}
+
+chk_en() {
+	config_get_bool autoshare $1 autoshare 1
+	[ $autoshare -eq 0 ] && exit
+}
+
+config_load samba
+config_foreach chk_en samba
+
+device=`basename $DEVPATH`
+
+case "$ACTION" in
+	add)
+	
+        case "$device" in
+                sd*) ;;
+                md*) ;;
+                hd*);;     
+                mmcblk*);;  
+                *) return;;
+        esac   
+        
+        path="/dev/$device"
+
+        wait_for_init
+
+        cat /proc/mounts | while read j
+        do
+                str=${j%% *}
+                if [ "$str" == $path ];then
+                        strr=${j#* }
+                        target=${strr%% *}
+                        global=0
+                        config_foreach smb_handle sambashare $target
+						name=${target#*/mnt/}
+
+                        if [ $global -eq 0 ] ;then
+                                echo -e "\n\nconfig sambashare" >> $config_file
+                                echo -e "\toption auto '1'" >> $config_file
+                                echo -e "\toption name '$name'" >> $config_file
+                                echo -e "\toption path '$target'" >> $config_file
+                                echo -e "\toption read_only 'no'" >> $config_file
+                                echo -e "\toption guest_ok 'yes'" >> $config_file
+                                echo -e "\toption create_mask '0666'" >> $config_file
+                                echo -e "\toption dir_mask '0777'" >> $config_file
+								echo -e "\toption device '$device'" >> $config_file
+				/etc/init.d/samba reload
+				return
+                        fi
+                fi
+        done
+	;;
+	remove)
+		i=0
+		while true
+		do
+
+			dev=`uci get samba.@sambashare[$i].device`
+			[ $? -ne 0 ] && break
+			
+			[ "$dev" = "$device" ] && {
+				auto=`uci get samba.@sambashare[$i].auto`
+				[ $auto = "1" ] && {
+					mount_dir=`uci get samba.@sambashare[$i].name`
+					uci delete samba.@sambashare[$i]
+					uci commit
+					/etc/init.d/samba reload
+					return
+				}
+			}
+			let i+=1
+		done
+	;;
+esac
diff --git a/package/lean/coremark/Makefile b/package/lean/coremark/Makefile
new file mode 100644
index 0000000000..961676c9c9
--- /dev/null
+++ b/package/lean/coremark/Makefile
@@ -0,0 +1,71 @@
+# Copyright 2018 Embedded Microprocessor Benchmark Consortium (EEMBC)
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=coremark
+PKG_RELEASE:=12
+
+PKG_SOURCE_PROTO:=git
+PKG_SOURCE_URL:=https://github.com/eembc/coremark.git
+PKG_SOURCE_VERSION:=2e9d6165f362f7071d29b7f88c6d32655e5d4a3c
+PKG_SOURCE_DATE:=2019-01-31
+
+include $(INCLUDE_DIR)/package.mk
+
+define Package/coremark
+  SECTION:=utils
+  CATEGORY:=Utilities
+  TITLE:=CoreMark Embedded Microprocessor Benchmark
+  URL:=https://github.com/eembc/coremark
+endef
+
+define Package/coremark/description
+  Embedded Microprocessor Benchmark
+endef
+
+DIR_ARCH:=linux
+
+ifeq ($(ARCH),x86_64)
+	DIR_ARCH:=linux64
+endif
+ifeq ($(ARCH),aarch64)
+	DIR_ARCH:=linux64
+endif
+
+define Build/Compile
+	$(SED) 's|EXE = .exe|EXE =|' $(PKG_BUILD_DIR)/$(DIR_ARCH)/core_portme.mak
+	mkdir $(PKG_BUILD_DIR)/$(ARCH)
+	cp -r $(PKG_BUILD_DIR)/$(DIR_ARCH)/* $(PKG_BUILD_DIR)/$(ARCH)
+	$(MAKE) XCFLAGS="-DMULTITHREAD=8 -DUSE_PTHREAD" -C $(PKG_BUILD_DIR) PORT_DIR=$(ARCH) $(MAKE_FLAGS) \
+		compile 
+endef
+
+define Package/coremark/install
+	$(INSTALL_DIR) $(1)/bin
+	$(INSTALL_BIN) $(PKG_BUILD_DIR)/coremark $(1)/bin/
+	$(INSTALL_DIR) $(1)/etc
+	$(INSTALL_BIN) ./coremark.sh $(1)/etc/
+	$(INSTALL_DIR) $(1)/etc/uci-defaults
+	$(INSTALL_BIN) ./coremark $(1)/etc/uci-defaults/xxx-coremark
+endef
+
+define Package/coremark/postinst
+#!/bin/sh
+[ -n "$${IPKG_INSTROOT}" ] || sed -i '/coremark/d' /etc/crontabs/root
+[ -n "$${IPKG_INSTROOT}" ] || echo "0 4 * * 0 /etc/coremark.sh" >> /etc/crontabs/root
+[ -n "$${IPKG_INSTROOT}" ] || crontab /etc/crontabs/root
+endef
+
+$(eval $(call BuildPackage,coremark))
diff --git a/package/lean/coremark/coremark b/package/lean/coremark/coremark
new file mode 100755
index 0000000000..8ddab7956f
--- /dev/null
+++ b/package/lean/coremark/coremark
@@ -0,0 +1,7 @@
+#!/bin/sh
+
+sed -i '/coremark/d' /etc/crontabs/root
+echo "0 4 * * 0 /etc/coremark.sh" >> /etc/crontabs/root
+crontab /etc/crontabs/root
+
+touch /etc/bench.log
\ No newline at end of file
diff --git a/package/lean/coremark/coremark.sh b/package/lean/coremark/coremark.sh
new file mode 100755
index 0000000000..6b0f9f127a
--- /dev/null
+++ b/package/lean/coremark/coremark.sh
@@ -0,0 +1,12 @@
+#!/bin/sh
+
+/bin/coremark > /tmp/coremark.log
+
+cat /tmp/coremark.log | grep "CoreMark 1.0" | cut -d  "/"  -f 1 > /etc/bench.log
+sed -i 's/CoreMark 1.0/(CpuMark/g'  /etc/bench.log
+echo " Scores)" >> /etc/bench.log
+
+if [ -f "/etc/bench.log" ]; then
+ sed -i '/coremark/d' /etc/crontabs/root
+ crontab /etc/crontabs/root
+fi
\ No newline at end of file
diff --git a/package/lean/csstidy/Makefile b/package/lean/csstidy/Makefile
new file mode 100644
index 0000000000..83f8f08026
--- /dev/null
+++ b/package/lean/csstidy/Makefile
@@ -0,0 +1,39 @@
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=csstidy
+PKG_RELEASE:=1
+
+PKG_SOURCE_PROTO:=git
+PKG_SOURCE_URL=https://github.com/jow-/csstidy-cpp.git
+PKG_SOURCE_DATE:=2018-12-20
+PKG_SOURCE_VERSION:=1d5620149ae35c0d49fb2014d4e63a23ecfb6f69
+PKG_MIRROR_HASH:=3210d475f6ae966d4dfcd3e1f7fcbf0ad9507a37878d50de015ffe795c1d160e
+
+PKG_LICENSE:=LGPL-2.1
+PKG_LICENSE_FILES:=COPYING
+
+PKG_MAINTAINER:=Jo-Philipp Wich <jo@mein.io>
+
+include $(INCLUDE_DIR)/host-build.mk
+include $(INCLUDE_DIR)/package.mk
+
+define Package/csstidy
+  SECTION:=utils
+  CATEGORY:=Utilities
+  TITLE:=CSSTidy parser and optimiser
+  DEPENDS:=+libstdcpp
+endef
+
+define Package/csstidy/install
+	$(INSTALL_DIR) $(1)/usr/bin
+	$(INSTALL_BIN) $(PKG_BUILD_DIR)/csstidy/csstidy $(1)/usr/bin/
+endef
+
+
+define Host/Install
+	$(INSTALL_DIR) $(STAGING_DIR_HOSTPKG)/bin/
+	$(INSTALL_BIN) $(HOST_BUILD_DIR)/csstidy/csstidy $(1)/bin/
+endef
+
+$(eval $(call HostBuild))
+$(eval $(call BuildPackage,csstidy))
diff --git a/package/lean/ddns-scripts_aliyun/Makefile b/package/lean/ddns-scripts_aliyun/Makefile
new file mode 100644
index 0000000000..db13f949a7
--- /dev/null
+++ b/package/lean/ddns-scripts_aliyun/Makefile
@@ -0,0 +1,72 @@
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=ddns-scripts_aliyun
+PKG_VERSION:=1.0.0
+PKG_RELEASE:=2
+
+PKG_LICENSE:=GPLv2
+PKG_MAINTAINER:=Sense <sensec@gmail.com>
+
+PKG_BUILD_PARALLEL:=1
+
+include $(INCLUDE_DIR)/package.mk
+
+define Package/$(PKG_NAME)
+	SECTION:=net
+	CATEGORY:=Network
+	SUBMENU:=IP Addresses and Names
+	TITLE:=DDNS extension for AliYun.com
+	PKGARCH:=all
+	DEPENDS:=+ddns-scripts +wget +openssl-util
+endef
+
+define Package/$(PKG_NAME)/description
+	Dynamic DNS Client scripts extension for AliYun.com
+endef
+
+define Build/Configure
+endef
+
+define Build/Compile
+	$(CP) ./*.sh $(PKG_BUILD_DIR)
+endef
+
+define Package/$(PKG_NAME)/preinst
+	#!/bin/sh
+	# if NOT run buildroot then stop service
+	[ -z "$${IPKG_INSTROOT}" ] && /etc/init.d/ddns stop >/dev/null 2>&1
+	exit 0 # suppress errors
+endef
+
+define Package/$(PKG_NAME)/install
+	$(INSTALL_DIR) $(1)/usr/lib/ddns
+	$(INSTALL_BIN) $(PKG_BUILD_DIR)/update_aliyun_com.sh $(1)/usr/lib/ddns
+endef
+
+define Package/$(PKG_NAME)/postinst
+	#!/bin/sh
+	# remove old services file entries
+	/bin/sed -i '/aliyun\.com/d' $${IPKG_INSTROOT}/etc/ddns/services >/dev/null 2>&1
+	/bin/sed -i '/aliyun\.com/d' $${IPKG_INSTROOT}/etc/ddns/services_ipv6 >/dev/null 2>&1
+	# and create new
+	printf "%s\\t\\t%s\\n" '"aliyun.com"' '"update_aliyun_com.sh"' >> $${IPKG_INSTROOT}/etc/ddns/services
+	printf "%s\\t\\t%s\\n" '"aliyun.com"' '"update_aliyun_com.sh"' >> $${IPKG_INSTROOT}/etc/ddns/services_ipv6
+	# on real system restart service if enabled
+	[ -z "$${IPKG_INSTROOT}" ] && {
+		/etc/init.d/ddns enabled && \
+			/etc/init.d/ddns start >/dev/null 2>&1
+	}
+	exit 0 # suppress errors
+endef
+
+define Package/$(PKG_NAME)/prerm
+	#!/bin/sh
+	# if NOT run buildroot then stop service
+	[ -z "$${IPKG_INSTROOT}" ] && /etc/init.d/ddns stop >/dev/null 2>&1
+	# remove services file entries
+	/bin/sed -i '/aliyun\.com/d' $${IPKG_INSTROOT}/etc/ddns/services >/dev/null 2>&1
+	/bin/sed -i '/aliyun\.com/d' $${IPKG_INSTROOT}/etc/ddns/services_ipv6 >/dev/null 2>&1
+	exit 0 # suppress errors
+endef
+
+$(eval $(call BuildPackage,$(PKG_NAME)))
diff --git a/package/lean/ddns-scripts_aliyun/update_aliyun_com.sh b/package/lean/ddns-scripts_aliyun/update_aliyun_com.sh
new file mode 100755
index 0000000000..a80cf29edf
--- /dev/null
+++ b/package/lean/ddns-scripts_aliyun/update_aliyun_com.sh
@@ -0,0 +1,246 @@
+#!/bin/sh
+#
+# 用于阿里云解析的DNS更新脚本
+# 2017-2018 Sense <sensec at gmail dot com>
+# 阿里云解析API文档 https://help.aliyun.com/document_detail/29739.html
+#
+# 本脚本由 dynamic_dns_functions.sh 内的函数 send_update() 调用
+#
+# 需要在 /etc/config/ddns 中设置的选项
+# option username - 阿里云API访问账号 Access Key ID。可通过 aliyun.com 帐号管理的 accesskeys 获取, 或者访问 https://ak-console.aliyun.com
+# option password - 阿里云API访问密钥 Access Key Secret
+# option domain   - 完整的域名。建议主机与域名之间使用 @符号 分隔，否则将以第一个 .符号 之前的内容作为主机名
+#
+
+# 检查传入参数
+[ -z "$username" ] && write_log 14 "配置错误！保存阿里云API访问账号的'用户名'不能为空"
+[ -z "$password" ] && write_log 14 "配置错误！保存阿里云API访问密钥的'密码'不能为空"
+
+# 检查外部调用工具
+[ -n "$WGET_SSL" ] || write_log 13 "使用阿里云API需要 GNU Wget 支持，请先安装"
+command -v sed >/dev/null 2>&1 || write_log 13 "使用阿里云API需要 sed 支持，请先安装"
+command -v openssl >/dev/null 2>&1 || write_log 13 "使用阿里云API需要 openssl-util 支持，请先安装"
+
+# 包含用于解析 JSON 格式返回值的函数
+. /usr/share/libubox/jshn.sh
+
+# 变量声明
+local __HOST __DOMAIN __TYPE __URLBASE __CMDBASE __URLARGS __SEPARATOR __RECID
+[ $use_https -eq 0 ] && __URLBASE="http://alidns.aliyuncs.com/" || __URLBASE="https://alidns.aliyuncs.com/"
+__SEPARATOR="&"
+
+# 从 $domain 分离主机和域名
+[ "${domain:0:2}" == "@." ] && domain="${domain/./}" # 主域名处理
+[ "$domain" == "${domain/@/}" ] && domain="${domain/./@}" # 未找到分隔符，兼容常用域名格式
+__HOST="${domain%%@*}"
+__DOMAIN="${domain#*@}"
+[ -z "$__HOST" -o "$__HOST" == "$__DOMAIN" ] && __HOST="@"
+
+# 设置记录类型
+[ $use_ipv6 -eq 0 ] && __TYPE="A" || __TYPE="AAAA"
+
+# 构造基本通信命令
+build_command() {
+	__CMDBASE="$WGET_SSL -nv -t 1 -O $DATFILE -o $ERRFILE"
+	# 绑定用于通信的主机/IP
+	if [ -n "$bind_network" ]; then
+		local bind_ip run_prog
+		[ $use_ipv6 -eq 0 ] && run_prog="network_get_ipaddr" || run_prog="network_get_ipaddr6"
+		eval "$run_prog bind_ip $bind_network" || \
+			write_log 13 "无法使用 '$run_prog $bind_network' 获取本地IP地址 - 错误代码: '$?'"
+		write_log 7 "强制使用IP '$bind_ip' 通信"
+		__CMDBASE="$__CMDBASE --bind-address=$bind_ip"
+	fi
+	# 强制设定IP版本
+	if [ $force_ipversion -eq 1 ]; then
+		[ $use_ipv6 -eq 0 ] && __CMDBASE="$__CMDBASE -4" || __CMDBASE="$__CMDBASE -6"
+	fi
+	# 设置CA证书参数
+	if [ $use_https -eq 1 ]; then
+		if [ "$cacert" = "IGNORE" ]; then
+			__CMDBASE="$__CMDBASE --no-check-certificate"
+		elif [ -f "$cacert" ]; then
+			__CMDBASE="$__CMDBASE --ca-certificate=${cacert}"
+		elif [ -d "$cacert" ]; then
+			__CMDBASE="$__CMDBASE --ca-directory=${cacert}"
+		elif [ -n "$cacert" ]; then
+			write_log 14 "在 '$cacert' 中未找到用于 HTTPS 通信的有效证书"
+		fi
+	fi
+	# 如果没有设置，禁用代理 (这可能是 .wgetrc 或环境设置错误)
+	[ -z "$proxy" ] && __CMDBASE="$__CMDBASE --no-proxy"
+}
+
+# 用于阿里云API的通信函数
+aliyun_transfer() {
+	local __PARAM=$*
+	local __CNT=0
+	local __RUNPROG __ERR PID_SLEEP
+
+	[ $# -eq 0 ] && write_log 12 "'aliyun_transfer()' 出错 - 参数数量错误"
+
+	while : ; do
+		build_Request $__PARAM
+		__RUNPROG="$__CMDBASE '${__URLBASE}?${__URLARGS}'"
+
+		write_log 7 "#> $__RUNPROG"
+		eval $__RUNPROG
+		__ERR=$?
+		[ $__ERR -eq 0 ] && return 0
+
+		write_log 3 "wget 错误代码: '$__ERR'"
+		write_log 7 "$(cat $ERRFILE)"
+
+		if [ $VERBOSE -gt 1 ]; then
+			write_log 4 "传输失败 - 详细模式: $VERBOSE - 出错后不再重试"
+			return 1
+		fi
+
+		__CNT=$(( $__CNT + 1 ))
+		[ $retry_count -gt 0 -a $__CNT -gt $retry_count ] && \
+			write_log 14 "$retry_count 次重试后传输还是失败"
+
+		write_log 4 "传输失败 - $__CNT/$retry_count 在 $RETRY_SECONDS 秒后重试"
+		sleep $RETRY_SECONDS &
+		PID_SLEEP=$!
+		wait $PID_SLEEP
+		PID_SLEEP=0
+	done
+}
+
+# 百分号编码
+percentEncode() {
+	if [ -z "${1//[A-Za-z0-9_.~-]/}" ]; then
+		echo -n "$1"
+	else
+		local string=$1; local i=0; local ret chr
+		while [ $i -lt ${#string} ]; do
+			chr=${string:$i:1}
+			[ -z "${chr#[^A-Za-z0-9_.~-]}" ] && chr=$(printf '%%%02X' "'$chr")
+			ret="$ret$chr"
+			i=$(( $i + 1 ))
+		done
+		echo -n "$ret"
+	fi
+}
+
+# 构造阿里云解析请求参数
+build_Request() {
+	local args=$*; local string
+	local HTTP_METHOD="GET"
+
+	# 添加请求参数
+	__URLARGS=
+	for string in $args; do
+		case "${string%%=*}" in
+			Format|Version|AccessKeyId|SignatureMethod|Timestamp|SignatureVersion|SignatureNonce|Signature) ;; # 过滤公共参数
+			*) __URLARGS="$__URLARGS${__SEPARATOR}"$(percentEncode "${string%%=*}")"="$(percentEncode "${string#*=}");;
+		esac
+	done
+	__URLARGS="${__URLARGS:1}"
+
+	# 附加公共参数
+	string="Format=JSON"; __URLARGS="$__URLARGS${__SEPARATOR}"$(percentEncode "${string%%=*}")"="$(percentEncode "${string#*=}")
+	string="Version=2015-01-09"; __URLARGS="$__URLARGS${__SEPARATOR}"$(percentEncode "${string%%=*}")"="$(percentEncode "${string#*=}")
+	string="AccessKeyId=$username"; __URLARGS="$__URLARGS${__SEPARATOR}"$(percentEncode "${string%%=*}")"="$(percentEncode "${string#*=}")
+	string="SignatureMethod=HMAC-SHA1"; __URLARGS="$__URLARGS${__SEPARATOR}"$(percentEncode "${string%%=*}")"="$(percentEncode "${string#*=}")
+	string="Timestamp="$(date -u '+%Y-%m-%dT%H:%M:%SZ'); __URLARGS="$__URLARGS${__SEPARATOR}"$(percentEncode "${string%%=*}")"="$(percentEncode "${string#*=}")
+	string="SignatureVersion=1.0"; __URLARGS="$__URLARGS${__SEPARATOR}"$(percentEncode "${string%%=*}")"="$(percentEncode "${string#*=}")
+	string="SignatureNonce="$(cat '/proc/sys/kernel/random/uuid'); __URLARGS="$__URLARGS${__SEPARATOR}"$(percentEncode "${string%%=*}")"="$(percentEncode "${string#*=}")
+
+	# 对请求参数进行排序，用于生成签名
+	string=$(echo -n "$__URLARGS" | sed 's/\'"${__SEPARATOR}"'/\n/g' | sort | sed ':label; N; s/\n/\'"${__SEPARATOR}"'/g; b label')
+	# 构造用于计算签名的字符串
+	string="${HTTP_METHOD}${__SEPARATOR}"$(percentEncode "/")"${__SEPARATOR}"$(percentEncode "$string")
+	# 字符串计算签名HMAC值
+	local signature=$(echo -n "$string" | openssl dgst -sha1 -hmac "${password}&" -binary)
+	# HMAC值编码成字符串，得到签名值
+	signature=$(echo -n "$signature" | openssl base64)
+
+	# 附加签名参数
+	string="Signature=$signature"; __URLARGS="$__URLARGS${__SEPARATOR}"$(percentEncode "${string%%=*}")"="$(percentEncode "${string#*=}")
+}
+
+# 添加解析记录
+add_domain() {
+	local value
+	aliyun_transfer "Action=AddDomainRecord" "DomainName=${__DOMAIN}" "RR=${__HOST}" "Type=${__TYPE}" "Value=${__IP}" || write_log 14 "服务器通信失败"
+	json_cleanup; json_load "$(cat "$DATFILE" 2> /dev/null)" >/dev/null 2>&1
+	json_get_var value "RecordId"
+	[ -z "$value" ] && write_log 14 "添加新解析记录失败"
+	write_log 7 "添加新解析记录成功"
+	return 0
+}
+
+# 修改解析记录
+update_domain() {
+	local value
+	aliyun_transfer "Action=UpdateDomainRecord" "RecordId=${__RECID}" "RR=${__HOST}" "Type=${__TYPE}" "Value=${__IP}" || write_log 14 "服务器通信失败"
+	json_cleanup; json_load "$(cat "$DATFILE" 2> /dev/null)" >/dev/null 2>&1
+	json_get_var value "RecordId"
+	[ -z "$value" ] && write_log 14 "修改解析记录失败"
+	write_log 7 "修改解析记录成功"
+	return 0
+}
+
+# 启用解析记录
+enable_domain() {
+	local value
+	aliyun_transfer "Action=SetDomainRecordStatus" "RecordId=${__RECID}" "Status=Enable" || write_log 14 "服务器通信失败"
+	json_cleanup; json_load "$(cat "$DATFILE" 2> /dev/null)" >/dev/null 2>&1
+	json_get_var value "Status"
+	[ "$value" != "Enable" ] && write_log 14 "启用解析记录失败"
+	write_log 7 "启用解析记录成功"
+	return 0
+}
+
+# 获取子域名解析记录列表
+describe_domain() {
+	local count value; local ret=0
+	aliyun_transfer "Action=DescribeSubDomainRecords" "SubDomain=${__HOST}.${__DOMAIN}" || write_log 14 "服务器通信失败"
+	write_log 7 "获取到解析记录: $(cat "$DATFILE" 2> /dev/null)" 
+	json_cleanup; json_load "$(cat "$DATFILE" 2> /dev/null)" >/dev/null 2>&1
+	json_get_var count "TotalCount"
+	if [ $count -eq 0 ]; then
+		write_log 7 "解析记录不存在"
+		ret=1
+	else
+		local i=1;
+		while [ $i -le $count ]; do
+			json_cleanup; json_load "$(cat "$DATFILE" 2> /dev/null)" >/dev/null 2>&1
+			json_select "DomainRecords" >/dev/null 2>&1
+			json_select "Record" >/dev/null 2>&1
+			json_select $i >/dev/null 2>&1
+			i=$(( $i + 1 ))
+			json_get_var value "Type"
+			if [ "$value" != "${__TYPE}" ]; then
+				write_log 7 "当前解析类型: ${__TYPE}, 获得不匹配类型: $value"
+				ret=1; continue
+			else
+				ret=0
+				json_get_var __RECID "RecordId"
+				write_log 7 "获得解析记录ID: ${__RECID}, 类型: $value"
+				json_get_var value "Locked"
+				[ $value -ne 0 ] && write_log 14 "解析记录被锁定"
+				json_get_var value "Status"
+				[ "$value" != "ENABLE" ] && ret=$(( $ret | 2 )) && write_log 7 "解析记录被禁用"
+				json_get_var value "Value"
+				[ "$value" != "${__IP}" ] && ret=$(( $ret | 4 )) && write_log 7 "地址需要修改"
+				break
+			fi
+		done
+	fi
+	return $ret
+}
+
+build_command
+describe_domain
+ret=$?
+if [ $ret -eq 1 ]; then
+	sleep 3 && add_domain
+else
+	[ $(( $ret & 2 )) -ne 0 ] && sleep 3 && enable_domain
+	[ $(( $ret & 4 )) -ne 0 ] && sleep 3 && update_domain
+fi
+
+return 0
diff --git a/package/lean/dnsforwarder/Makefile b/package/lean/dnsforwarder/Makefile
new file mode 100644
index 0000000000..5d04484c49
--- /dev/null
+++ b/package/lean/dnsforwarder/Makefile
@@ -0,0 +1,45 @@
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=dnsforwarder
+PKG_VERSION:=6.1.15
+PKG_RELEASE:=10
+
+PKG_SOURCE_PROTO:=git
+PKG_SOURCE_URL:=https://github.com/holmium/dnsforwarder.git
+PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
+PKG_SOURCE_SUBDIR:=$(PKG_NAME)-$(PKG_VERSION)
+PKG_SOURCE_VERSION:=587e61ae4d75dc976f538088b715a3c8ee26c144
+PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION)
+PKG_MAINTAINER:=Dennis <openwrt@tossp.com>
+PKG_LICENSE:=GPL-3.0
+
+include $(INCLUDE_DIR)/package.mk
+
+define Package/$(PKG_NAME)
+  SECTION:=net
+  CATEGORY:=Network
+  TITLE:=A simple DNS forwarder
+  URL:=https://github.com/holmium/dnsforwarder
+  DEPENDS:=+wget +dnsmasq-full +libpthread +coreutils-base64
+endef
+
+define Package/$(PKG_NAME)/description
+Forwarding queries to customized domains (and their subdomains) to specified servers over a specified protocol (UDP or TCP). non-standard ports are supported.
+endef
+
+CONFIGURE_ARGS += --enable-downloader=wget
+
+define Package/$(PKG_NAME)/install
+	$(INSTALL_DIR) $(1)/usr/bin
+	$(INSTALL_BIN) $(PKG_BUILD_DIR)/dnsforwarder $(1)/usr/bin/dnsforwarder	
+	$(INSTALL_DIR) $(1)/etc/init.d
+	$(INSTALL_BIN) files/etc/init.d/dnsforwarder $(1)/etc/init.d/dnsforwarder
+	$(INSTALL_DIR) $(1)/etc/config
+	$(INSTALL_CONF) files/etc/config/dnsforwarder $(1)/etc/config/dnsforwarder
+	$(INSTALL_DIR) $(1)/etc/dnsforwarder
+	$(INSTALL_CONF) files/etc/dnsforwarder/gfw.txt $(1)/etc/dnsforwarder/gfw.txt
+	$(INSTALL_DIR) $(1)/usr/share/dnsforwarder
+	$(INSTALL_BIN) files/usr/share/dnsforwarder/gfwlist.sh $(1)/usr/share/dnsforwarder/gfwlist.sh
+endef
+
+$(eval $(call BuildPackage,$(PKG_NAME)))
diff --git a/package/lean/dnsforwarder/files/etc/config/dnsforwarder b/package/lean/dnsforwarder/files/etc/config/dnsforwarder
new file mode 100644
index 0000000000..da025f7a82
--- /dev/null
+++ b/package/lean/dnsforwarder/files/etc/config/dnsforwarder
@@ -0,0 +1,79 @@
+
+config arguments
+	option enabled '0'
+	option addr '127.0.0.1:5053'
+
+config config
+	option cache 'true'
+	option cache_size '102400'
+	option cache_ignore 'false'	
+	option gfw 'true'
+	list block_ip '74.125.127.102'
+	list block_ip '74.125.155.102'
+	list block_ip '74.125.39.102'
+	list block_ip '74.125.39.113'
+	list block_ip '209.85.229.138'
+	list block_ip '128.121.126.139'
+	list block_ip '159.106.121.75'
+	list block_ip '169.132.13.103'
+	list block_ip '192.67.198.6'
+	list block_ip '202.106.1.2'
+	list block_ip '202.181.7.85'
+	list block_ip '203.161.230.171'
+	list block_ip '203.98.7.65'
+	list block_ip '207.12.88.98'
+	list block_ip '208.56.31.43'
+	list block_ip '209.145.54.50'
+	list block_ip '209.220.30.174'
+	list block_ip '209.36.73.33'
+	list block_ip '211.94.66.147'
+	list block_ip '213.169.251.35'
+	list block_ip '216.221.188.182'
+	list block_ip '216.234.179.13'
+	list block_ip '243.185.187.39'
+	list block_ip '37.61.54.158'
+	list block_ip '4.36.66.178'
+	list block_ip '46.82.174.68'
+	list block_ip '59.24.3.173'
+	list block_ip '64.33.88.161'
+	list block_ip '64.33.99.47'
+	list block_ip '64.66.163.251'
+	list block_ip '65.104.202.252'
+	list block_ip '65.160.219.113'
+	list block_ip '66.45.252.237'
+	list block_ip '69.55.52.253'
+	list block_ip '72.14.205.104'
+	list block_ip '72.14.205.99'
+	list block_ip '78.16.49.15'
+	list block_ip '8.7.198.45'
+	list block_ip '93.46.8.89'
+	list block_ip '37.61.54.158'
+	list block_ip '243.185.187.39'
+	list block_ip '190.93.247.4'
+	list block_ip '190.93.246.4'
+	list block_ip '190.93.245.4'
+	list block_ip '190.93.244.4'
+	list block_ip '65.49.2.178'
+	list block_ip '189.163.17.5'
+	list block_ip '23.89.5.60'
+	list block_ip '49.2.123.56'
+	list block_ip '54.76.135.1'
+	list block_ip '77.4.7.92'
+	list block_ip '118.5.49.6'
+	list block_ip '159.24.3.173'
+	list block_ip '188.5.4.96'
+	list block_ip '197.4.4.12'
+	list block_ip '220.250.64.24'
+	list block_ip '243.185.187.30'
+	list block_ip '249.129.46.48'
+	list block_ip '253.157.14.165'
+	option block_ipv6 'false'
+	list cache_control 'tossp.com $orig'
+	list cache_control '* fixed 3600'
+	option log 'false'
+	list udp_group '9.9.9.9,119.29.29.29,223.5.5.5,114.114.114.114 * on'
+	option block_negative_resp 'true'
+	list udp_local '0.0.0.0:5053'
+	list udp_local '[::0]:5053'
+	option domain_statistic 'false'
+
diff --git a/package/lean/dnsforwarder/files/etc/dnsforwarder/gfw.txt b/package/lean/dnsforwarder/files/etc/dnsforwarder/gfw.txt
new file mode 100644
index 0000000000..270058ad3f
--- /dev/null
+++ b/package/lean/dnsforwarder/files/etc/dnsforwarder/gfw.txt
@@ -0,0 +1,5604 @@
+# GenerationAt 2018-12-09 23:29:36
+protocol tcp
+server 8.8.8.8,8.8.4.4,1.1.1.1,1.0.0.1,208.67.222.222,208.67.220.220,209.244.0.3,209.244.0.4,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1,199.85.126.10
+proxy no
+
+
+
+030buy.com
+0rz.tw
+1-apple.com.tw
+10.tt
+1000giri.net
+100ke.org
+10conditionsoflove.com
+10musume.com
+123rf.com
+12bet.com
+12vpn.com
+12vpn.net
+138.com
+141hongkong.com
+141jj.com
+141tube.com
+1688.com.au
+173ng.com
+177pic.info
+17t17p.com
+18board.com
+18board.info
+18onlygirls.com
+18p2p.com
+18virginsex.com
+1949er.org
+1984bbs.com
+1984bbs.org
+1989report.hkja.org.hk
+1991way.com
+1998cdp.org
+1bao.org
+1dumb.com
+1e100.net
+1eew.com
+1mobile.com
+1mobile.tw
+1pondo.tv
+2-hand.info
+2000fun.com
+2008xianzhang.info
+2017.hk
+21andy.com
+21pron.com
+21sextury.com
+228.net.tw
+233abc.com
+24hrs.ca
+24smile.org
+25u.com
+2lipstube.com
+2shared.com
+2waky.com
+3-a.net
+30boxes.com
+315lz.com
+32red.com
+36rain.com
+3a5a.com
+3arabtv.com
+3boys2girls.com
+3d-game.com
+3proxy.ru
+3ren.ca
+3tui.net
+466453.com
+4bluestones.biz
+4chan.com
+4dq.com
+4everproxy.com
+4irc.com
+4mydomain.com
+4pu.com
+4rbtv.com
+4shared.com
+4sqi.net
+51.ca
+51jav.org
+51luoben.com
+5278.cc
+56cun04.jigsy.com
+5aimiku.com
+5i01.com
+5isotoi5.org
+5maodang.com
+63i.com
+64museum.org
+64tianwang.com
+64wiki.com
+66.ca
+666kb.com
+6park.com
+6parker.com
+7capture.com
+7cow.com
+8-d.com
+85cc.net
+85cc.us
+85st.com
+881903.com
+888.com
+888poker.com
+89-64.org
+89.64.charter.constitutionalism.solutions
+8news.com.tw
+8z1.net
+9001700.com
+908taiwan.org
+91porn.com
+91vps.club
+92ccav.com
+991.com
+99btgc01.com
+99cn.info
+9bis.com
+9bis.net
+a-normal-day.com
+a248.e.akamai.net
+a5.com.ru
+aamacau.com
+abc.com
+abc.net.au
+abc.pp.ru
+abc.xyz
+abchinese.com
+abclite.net
+abematv.akamaized.net
+abitno.linpie.com
+ablwang.com
+aboluowang.com
+aboutgfw.com
+abs.edu
+ac.jiruan.net
+accim.org
+aceros-de-hispania.com
+acevpn.com
+acg18.me
+acgkj.com
+acmedia365.com
+acmetoy.com
+acnw.com.au
+actfortibet.org
+actimes.com.au
+activpn.com
+aculo.us
+adcex.com
+addictedtocoffee.de
+adelaidebbs.com
+admin.recaptcha.net
+admob.com
+adpl.org.hk
+ads-twitter.com
+adsense.com
+adult-sex-games.com
+adult.friendfinder.com
+adultfriendfinder.com
+adultkeep.net
+advanscene.com
+advertfan.com
+ae.hao123.com
+ae.org
+aenhancers.com
+af.mil
+afantibbs.com
+agnesb.fr
+agoogleaday.com
+agro.hk
+ai-kan.net
+ai-wen.net
+ai.binwang.me
+ai.google
+aiph.net
+airasia.com
+airconsole.com
+airvpn.org
+aisex.com
+aiss.anws.gov.tw
+ait.org.tw
+aiweiwei.com
+aiweiweiblog.com
+akademiye.org
+akamaihd.net
+akiba-online.com
+akiba-web.com
+akow.org
+al-islam.com
+al-qimmah.net
+alabout.com
+alanhou.com
+alarab.qa
+alasbarricadas.org
+alexlur.org
+alforattv.net
+alhayat.com
+alicejapan.co.jp
+aliengu.com
+alkasir.com
+allcoin.com
+allconnected.co
+alldrawnsex.com
+allervpn.com
+allfinegirls.com
+allgirlmassage.com
+allgirlsallowed.org
+allgravure.com
+alliance.org.hk
+allinfa.com
+alljackpotscasino.com
+allmovie.com
+allowed.org
+almasdarnews.com
+almostmy.com
+alphaporno.com
+alternate-tools.com
+alternativeto.net
+altrec.com
+alvinalexander.com
+alwaysdata.com
+alwaysdata.net
+alwaysvpn.com
+am730.com.hk
+amazon.co.jp
+amazon.com
+ameblo.jp
+americangreencard.com
+americanunfinished.com
+amiblockedornot.com
+amigobbs.net
+amitabhafoundation.us
+amnesty.org
+amnesty.org.hk
+amnesty.tw
+amnestyusa.org
+amnyemachen.org
+amoiist.com
+ampproject.org
+amtb-taipei.org
+anchorfree.com
+ancsconf.org
+andfaraway.net
+android-x86.org
+android.com
+androidify.com
+androidplus.co
+andygod.com
+angelfire.com
+angularjs.org
+animecrazy.net
+animeshippuuden.com
+aniscartujo.com
+annatam.com
+anobii.com
+anontext.com
+anonymise.us
+anonymitynetwork.com
+anonymizer.com
+anpopo.com
+answering-islam.org
+anthonycalzadilla.com
+anti1984.com
+antichristendom.com
+antiwave.net
+anyporn.com
+anysex.com
+aobo.com.au
+aofriend.com
+aofriend.com.au
+aojiao.org
+aolchannels.aol.com
+aomiwang.com
+apartmentratings.com
+apartments.com
+apetube.com
+api-secure.recaptcha.net
+api-verify.recaptcha.net
+api.ai
+api.dropboxapi.com
+api.linksalpha.com
+api.proxlet.com
+api.pureapk.com
+api.recaptcha.net
+apiary.io
+apidocs.linksalpha.com
+apigee.com
+apk-dl.com
+apkdler.com
+apkmirror.com
+apkmonk.com
+apkplz.com
+apkpure.com
+aplusvpn.com
+app.box.com
+app.heywire.com
+app.smartmailcloud.com
+app.tutanota.com
+appdownloader.net
+appledaily.com
+appledaily.com.hk
+appledaily.com.tw
+appshopper.com
+appsocks.net
+appspot.com
+appsto.re
+aptoide.com
+ar.hao123.com
+archive.fo
+archive.is
+archive.li
+archive.org
+archive.today
+archives.gov
+archives.gov.tw
+arctosia.com
+areca-backup.org
+arena.taipei
+arethusa.su
+arlingtoncemetery.mil
+army.mil
+art4tibet1998.org
+artofpeacefoundation.org
+artsy.net
+asacp.org
+asahichinese.com
+asdfg.jp
+asg.to
+asia-gaming.com
+asiaharvest.org
+asianews.it
+asiansexdiary.com
+asianspiss.com
+asianwomensfilm.de
+asiatgp.com
+asiatoday.us
+askstudent.com
+askynz.net
+assembla.com
+assimp.org
+astrill.com
+atc.org.au
+atchinese.com
+atdmt.com
+atgfw.org
+athenaeizou.com
+atlanta168.com
+atlaspost.com
+atnext.com
+authorizeddns.net
+authorizeddns.org
+authorizeddns.us
+autodraw.com
+av-e-body.com
+av.com
+av.movie
+av.nightlife141.com
+avaaz.org
+avbody.tv
+avcity.tv
+avcool.com
+avdb.in
+avdb.tv
+avfantasy.com
+avgle.com
+avidemux.org
+avmo.pw
+avmoo.com
+avmoo.net
+avmoo.pw
+avoision.com
+avyahoo.com
+axureformac.com
+azerbaycan.tv
+azerimix.com
+azubu.tv
+azurewebsites.net
+b0ne.com
+babynet.com.hk
+backchina.com
+backpackers.com.tw
+backtotiananmen.com
+badiucao.com
+badjojo.com
+badoo.com
+bahamut.com.tw
+baidu.jp
+baijie.org
+bailandaily.com
+baixing.me
+bakgeekhome.tk
+banana-vpn.com
+bandwagonhost.com
+bangbrosnetwork.com
+bangchen.net
+bangyoulater.com
+bankmobilevibe.com
+bannedbook.org
+bannednews.org
+banorte.com
+baramangaonline.com
+barenakedislam.com
+barnabu.co.uk
+bartvpn.com
+bash-hackers.org
+bastillepost.com
+bayvoice.net
+bb-chat.tv
+bb.ttv.com.tw
+bbc.co.uk
+bbc.com
+bbc.in
+bbcchinese.com
+bbchat.tv
+bbci.co.uk
+bbg.gov
+bbkz.com
+bbnradio.org
+bbs-tw.com
+bbs.brockbbs.com
+bbs.cantonese.asia
+bbs.ecstart.com
+bbs.hanminzu.org
+bbs.hasi.wang
+bbs.huasing.org
+bbs.junglobal.net
+bbs.kimy.com.tw
+bbs.morbell.com
+bbs.mychat.to
+bbs.netbig.com
+bbs.ozchinese.com
+bbs.qmzdd.com
+bbs.sina.com
+bbs.skykiwi.com
+bbs.sou-tong.org
+bbs.tuitui.info
+bbsdigest.com
+bbsfeed.com
+bbsland.com
+bbsmo.com
+bbsone.com
+bbtoystore.com
+bcast.co.nz
+bcc.com.tw
+bcchinese.net
+bcex.ca
+bcmorning.com
+bdsmvideos.net
+beaconevents.com
+bebo.com
+beeg.com
+beevpn.com
+behance.net
+behindkink.com
+beijing1989.com
+beijingspring.com
+beijingzx.org
+belamionline.com
+bell.wiki
+bemywife.cc
+beric.me
+berlintwitterwall.com
+berm.co.nz
+bestforchina.org
+bestgore.com
+bestpornstardb.com
+bestvpn.com
+bestvpnanalysis.com
+bestvpnserver.com
+bestvpnservice.com
+bestvpnusa.com
+bet365.com
+betfair.com
+betternet.co
+bettervpn.com
+bettween.com
+betvictor.com
+bewww.net
+beyondfirewall.com
+bfnn.org
+bfsh.hk
+bgvpn.com
+bianlei.com
+biantailajiao.com
+biantailajiao.in
+biblesforamerica.org
+bibox.com
+bic2011.org
+big.one
+bigfools.com
+bigjapanesesex.com
+bigmoney.biz
+bignews.org
+bigsound.org
+biliworld.com
+billypan.com
+binance.com
+binux.me
+bipic.net
+bird.so
+bit-z.com
+bit.do
+bit.ly
+bitc.bme.emory.edu
+bitcointalk.org
+bitcoinworld.com
+bitfinex.com
+bitinka.com.ar
+bitmex.com
+bitshare.com
+bitsnoop.com
+bitvise.com
+bizhat.com
+bjnewlife.org
+bjs.org
+bjzc.org
+bl-doujinsouko.com
+blacklogic.com
+blackvpn.com
+blewpass.com
+blinkx.com
+blinw.com
+blip.tv
+blockcn.com
+blockless.com
+blog.calibre-ebook.com
+blog.cnyes.com
+blog.daum.net
+blog.de
+blog.exblog.co.jp
+blog.excite.co.jp
+blog.expofutures.com
+blog.fizzik.com
+blog.foolsmountain.com
+blog.fuckgfw233.org
+blog.goo.ne.jp
+blog.google
+blog.inoreader.com
+blog.istef.info
+blog.jackjia.com
+blog.jp
+blog.kangye.org
+blog.lester850.info
+blog.martinoei.com
+blog.pathtosharepoint.com
+blog.pentalogic.net
+blog.qooza.hk
+blog.ranxiang.com
+blog.sina.com.tw
+blog.sogoo.org
+blog.soylent.com
+blog.syx86.cn
+blog.syx86.com
+blog.taragana.com
+blog.tiney.com
+blog.xuite.net
+blog.youthwant.com.tw
+blog.youxu.info
+blogblog.com
+blogcatalog.com
+blogcity.me
+blogdns.org
+blogger.com
+blogimg.jp
+bloglines.com
+bloglovin.com
+blogs.icerocket.com
+blogs.libraryinformationtechnology.com
+blogs.tampabay.com
+blogs.yahoo.co.jp
+blogspot.ae
+blogspot.al
+blogspot.am
+blogspot.ba
+blogspot.be
+blogspot.bg
+blogspot.ca
+blogspot.cat
+blogspot.ch
+blogspot.cl
+blogspot.co.uk
+blogspot.com
+blogspot.com.ar
+blogspot.com.au
+blogspot.com.br
+blogspot.com.by
+blogspot.com.co
+blogspot.com.cy
+blogspot.com.ee
+blogspot.com.eg
+blogspot.com.es
+blogspot.com.mt
+blogspot.com.ng
+blogspot.com.tr
+blogspot.com.uy
+blogspot.cz
+blogspot.de
+blogspot.dk
+blogspot.fi
+blogspot.fr
+blogspot.gr
+blogspot.hk
+blogspot.hr
+blogspot.hu
+blogspot.ie
+blogspot.in
+blogspot.is
+blogspot.it
+blogspot.jp
+blogspot.kr
+blogspot.li
+blogspot.lt
+blogspot.lu
+blogspot.md
+blogspot.mk
+blogspot.mx
+blogspot.my
+blogspot.nl
+blogspot.no
+blogspot.pe
+blogspot.pt
+blogspot.qa
+blogspot.ro
+blogspot.ru
+blogspot.se
+blogspot.sg
+blogspot.si
+blogspot.sk
+blogspot.sn
+blogspot.tw
+blogspot.ug
+blogtd.net
+blogtd.org
+bloodshed.net
+bloomberg.cn
+bloomberg.com
+bloomberg.de
+bloombergview.com
+bloomfortune.com
+blueangellive.com
+bmfinn.com
+bnews.co
+bnrmetal.com
+boardreader.com
+bod.asia
+bodog88.com
+bolehvpn.net
+bolin.netfirms.com
+bonbonme.com
+bonbonsex.com
+bonfoundation.org
+bongacams.com
+boobstagram.com
+book.com.tw
+book.zi5.me
+bookepub.com
+books.com.tw
+booktopia.com.au
+boomssr.com
+bot.nu
+botanwang.com
+bowenpress.com
+boxpn.com
+boxun.com
+boxun.tv
+boxunblog.com
+boxunclub.com
+boyangu.com
+boyfriendtv.com
+boysfood.com
+boysmaster.com
+br.hao123.com
+br.st
+brainyquote.com
+brandonhutchinson.com
+braumeister.org
+bravotube.net
+brazzers.com
+break.com
+breakgfw.com
+breaking911.com
+breakingtweets.com
+breakwall.net
+briefdream.com
+briian.com
+brizzly.com
+brkmd.com
+broadbook.com
+broadpressinc.com
+brucewang.net
+brutaltgp.com
+bt2mag.com
+bt95.com
+btaia.com
+btbtav.com
+btcbank.bank
+btctrade.im
+btdigg.org
+btku.me
+btku.org
+btspread.com
+btsynckeys.com
+budaedu.org
+buddhanet.com.tw
+buddhistchannel.tv
+buffered.com
+bullog.org
+bullogger.com
+bunbunhk.com
+busayari.com
+businessinsider.com
+businessweek.com
+busu.org
+busytrade.com
+buugaa.com
+buy.yahoo.com.tw
+buzzhand.com
+buzzhand.net
+buzzorange.com
+bvpn.com
+bwh1.net
+bwsj.hk
+bx.in.th
+bx.tl
+bynet.co.il
+c-est-simple.com
+c-spanvideo.org
+c100tibet.org
+c1522.mooo.com
+c2cx.com
+cablegatesearch.net
+cachinese.com
+cacnw.com
+cactusvpn.com
+cafepress.com
+cahr.org.tw
+calameo.com
+calebelston.com
+calgarychinese.ca
+calgarychinese.com
+calgarychinese.net
+cam4.com
+cam4.jp
+cam4.sg
+camfrog.com
+cams.com
+cams.org.sg
+canadameet.com
+canalporno.com
+canyu.org
+cao.im
+caobian.info
+caochangqing.com
+cap.org.hk
+carabinasypistolas.com
+cardinalkungfoundation.org
+carfax.com
+cari.com.my
+caribbeancom.com
+carmotorshow.com
+cartoonmovement.com
+casadeltibetbcn.org
+casatibet.org.mx
+casino.williamhill.com
+casinobellini.com
+casinoking.com
+casinoriva.com
+castbox.fm
+catch22.net
+catchgod.com
+catfightpayperview.xxx
+catholic.org.hk
+catholic.org.tw
+cathvoice.org.tw
+cattt.com
+cbc.ca
+cbs.ntu.edu.tw
+cbsnews.com
+cbtc.org.hk
+cccat.cc
+cccat.co
+ccdtr.org
+cchere.com
+ccim.org
+cclife.ca
+cclife.org
+cclifefl.org
+ccthere.com
+cctmweb.net
+cctongbao.com
+ccue.ca
+ccue.com
+ccvoice.ca
+ccw.org.tw
+cdbook.org
+cdcparty.com
+cdef.org
+cdig.info
+cdjp.org
+cdn-apple.com
+cdn-images.mailchimp.com
+cdn.assets.lfpcontent.com
+cdn.helixstudios.net
+cdn.printfriendly.com
+cdn.seatguru.com
+cdn.softlayer.net
+cdn1.lp.saboom.com
+cdnews.com.tw
+cdninstagram.com
+cdp1989.org
+cdp1998.org
+cdp2006.org
+cdpa.url.tw
+cdpeu.org
+cdpusa.org
+cdpweb.org
+cdpwu.org
+cdw.com
+cecc.gov
+cellulo.info
+cenews.eu
+centauro.com.br
+centerforhumanreprod.com
+centralnation.com
+centurys.net
+certificate-transparency.org
+certificate.revocationcheck.com
+cfhks.org.hk
+cfos.de
+cftfc.com
+cgdepot.org
+cgst.edu
+ch.shvoong.com
+change.org
+changeip.name
+changeip.net
+changeip.org
+changp.com
+changsa.net
+channel8news.sg
+chaoex.com
+chapm25.com
+chatnook.com
+chaturbate.com
+chengmingmag.com
+chenguangcheng.com
+chenpokong.com
+chenpokong.net
+chenshan20042005.wordpress.com
+cherrysave.com
+chhongbi.org
+chicagoncmtv.com
+china-mmm.jp.net
+china-mmm.net
+china-mmm.sa.com
+china-review.com.ua
+china-week.com
+china.hket.com
+china.ucanews.com
+china101.com
+china18.org
+china21.com
+china21.org
+china5000.us
+chinaaffairs.org
+chinaaid.me
+chinaaid.net
+chinaaid.org
+chinaaid.us
+chinachange.org
+chinachannel.hk
+chinacitynews.be
+chinacomments.org
+chinadialogue.net
+chinadigitaltimes.net
+chinaelections.org
+chinaeweekly.com
+chinafreepress.org
+chinagate.com
+chinageeks.org
+chinagfw.org
+chinagonet.com
+chinagreenparty.org
+chinahorizon.org
+chinahush.com
+chinainperspective.com
+chinainterimgov.org
+chinalaborwatch.org
+chinalawandpolicy.com
+chinalawtranslate.com
+chinamule.com
+chinamz.org
+chinapost.com.tw
+chinapress.com.my
+chinarightsia.org
+chinasmile.net
+chinasocialdemocraticparty.com
+chinasoul.org
+chinasucks.net
+chinatimes.com
+chinatopsex.com
+chinatown.com.au
+chinatweeps.com
+chinaview.wordpress.com
+chinaway.org
+chinaworker.info
+chinaxchina.com
+chinayouth.org.hk
+chinayuanmin.org
+chinese-hermit.net
+chinese-leaders.org
+chinese-memorial.org
+chinese.donga.com
+chinese.engadget.com
+chinese.irib.ir
+chinese.soifind.com
+chinesedaily.com
+chinesedailynews.com
+chinesedemocracy.com
+chinesegay.org
+chinesen.de
+chinesenews.net.au
+chinesepen.org
+chinesetalks.net
+chineseupress.com
+chingcheong.com
+chinman.net
+chithu.org
+chn.chosun.com
+chobit.cc
+chrdnet.com
+christianfreedom.org
+christianstudy.com
+christiantimes.org.hk
+christusrex.org
+chrlawyers.hk
+chrome.com
+chromecast.com
+chromeexperiments.com
+chromercise.com
+chromestatus.com
+chromium.org
+chuang-yen.org
+chubold.com
+chubun.com
+chuizi.net
+churchinhongkong.org
+chushigangdrug.ch
+cienen.com
+cineastentreff.de
+cipfg.org
+circlethebayfortibet.org
+cirosantilli.com
+citizencn.com
+citizenlab.org
+citizenscommission.hk
+citizensradio.org
+city365.ca
+city9x.com
+citypopulation.de
+citytalk.tw
+civicparty.hk
+civildisobediencemovement.org
+civilhrfront.org
+civiliangunner.com
+civilmedia.tw
+ck101.com
+cl.d0z.net
+clarionproject.org
+classicalguitarblog.net
+clb.org.hk
+cldr.unicode.org
+cleansite.biz
+cleansite.info
+cleansite.us
+clearharmony.net
+clearsurance.com
+clearwisdom.net
+clementine-player.org
+cling.omy.sg
+clinica-tibet.ru
+clipfish.de
+cloakpoint.com
+cloud.mail.ru
+club1069.com
+cmcn.org
+cmi.org.tw
+cmp.hku.hk
+cms.gov
+cmule.com
+cmule.org
+cmx.im
+cn-proxy.com
+cn.calameo.com
+cn.dayabook.com
+cn.fmnnow.com
+cn.freeones.com
+cn.giganews.com
+cn.ibtimes.com
+cn.nytstyle.com
+cn.sandscotaicentral.com
+cn.shafaqna.com
+cn.streetvoice.com
+cn.thegay.com
+cn.uncyclopedia.wikia.com
+cn.uptodown.com
+cn.voa.mobi
+cn2.streetvoice.com
+cn6.eu
+cna.com.tw
+cnabc.com
+cnbbnews.wordpress.com
+cnd.org
+cnex.org.cn
+cnineu.com
+cnn.com
+cnnews.chosun.com
+cnpolitics.org
+cnproxy.com
+co.ng.mil
+coat.co.jp
+cochina.co
+cochina.org
+code1984.com
+codeshare.io
+codeskulptor.org
+coin2co.in
+coinegg.com
+coinex.com
+coingi.com
+coinrail.co.kr
+cointobe.com
+coinut.com
+collateralmurder.com
+collateralmurder.org
+com.google
+comefromchina.com
+comic-mega.me
+commandarms.com
+commentshk.com
+communistcrimes.org
+community.windy.com
+communitychoicecu.com
+compileheart.com
+compress.to
+connect.facebook.net
+conoha.jp
+contactmagazine.net
+contests.twilio.com
+convio.net
+coobay.com
+coolaler.com
+coolder.com
+coolloud.org.tw
+coolncute.com
+coolstuffinc.com
+corumcollege.com
+cos-moe.com
+cosmic.monar.ch
+cosplayjav.pl
+costco.com
+cotweet.com
+coursehero.com
+cpj.org
+cq99.us
+crackle.com
+crazys.cc
+crazyshit.com
+crbug.com
+crchina.org
+crd-net.org
+creaders.net
+creadersnet.com
+creativelab5.com
+crisisresponse.google
+cristyli.com
+crocotube.com
+crossfire.co.kr
+crossthewall.net
+crossvpn.net
+crrev.com
+crucial.com
+csdparty.com
+css.pixnet.in
+csuchen.de
+csw.org.uk
+ct.org.tw
+ctao.org
+ctfriend.net
+cthlo.github.io
+ctitv.com.tw
+cts.com.tw
+cuhkacs.org
+cuihua.org
+cuiweiping.net
+culture.tw
+cumlouder.com
+curvefish.com
+cusu.hk
+cutscenes.net
+cw.com.tw
+cyberghost.natado.com
+cyberghostvpn.com
+cynscribe.com
+cytode.us
+d-fukyu.com
+d100.net
+d1b183sg0nvnuh.cloudfront.net
+d1c37gjwa26taa.cloudfront.net
+d2bay.com
+d2pass.com
+d3c33hcgiwev3.cloudfront.net
+d3rhr7kgmtrq1v.cloudfront.net
+dabr.co.uk
+dabr.eu
+dabr.me
+dabr.mobi
+dadazim.com
+dadi360.com
+dafabet.com
+dafagood.com
+dafahao.com
+dafoh.org
+daftporn.com
+dagelijksestandaard.nl
+daidostup.ru
+dailidaili.com
+dailymotion.com
+dailynews.sina.com
+daiphapinfo.net
+dajiyuan.com
+dajiyuan.de
+dajiyuan.eu
+dajusha.baywords.com
+dalailama-archives.org
+dalailama.com
+dalailama.mn
+dalailama.ru
+dalailama.usc.edu
+dalailama80.org
+dalailamacenter.org
+dalailamafellows.org
+dalailamafilm.com
+dalailamafoundation.org
+dalailamahindi.com
+dalailamainaustralia.org
+dalailamajapanese.com
+dalailamaprotesters.info
+dalailamaquotes.org
+dalailamatrust.org
+dalailamavisit.org.nz
+dalailamaworld.com
+dalianmeng.org
+daliulian.org
+danbooru.donmai.us
+danke4china.net
+danwei.org
+daodu14.jigsy.com
+daolan.net
+daozhongxing.org
+darktech.org
+darktoy.net
+darpa.mil
+dastrassi.org
+data-vocabulary.org
+data.flurry.com
+data.gov.tw
+david-kilgour.com
+dawangidc.com
+daxa.cn
+daylife.com
+db.tt
+dbc.hk
+dcard.tw
+dcmilitary.com
+ddc.com.tw
+ddhw.info
+ddns.info
+ddns.me.uk
+ddns.mobi
+ddns.ms
+ddns.name
+ddns.net
+ddns.us
+de-sci.org
+deaftone.com
+debug.com
+deck.ly
+decodet.co
+deepmind.com
+deezer.com
+definebabe.com
+deja.com
+delcamp.net
+delicious.com
+demo.opera-mini.net
+democrats.org
+depositphotos.com
+derekhsu.homeip.net
+desc.se
+design.google
+desipro.de
+dessci.com
+destiny.xfiles.to
+destroy-china.jp
+deutsche-welle.de
+developers.box.net
+devio.us
+devpn.com
+dfas.mil
+dfn.org
+dharamsalanet.com
+dharmakara.net
+dhcp.biz
+diaoyuislands.org
+dictionary.goo.ne.jp
+difangwenge.org
+digiland.tw
+digisfera.com
+digitalnomadsproject.org
+diigo.com
+dilber.se
+dingchin.com.tw
+dipity.com
+directcreative.com
+discoins.com
+discordapp.com
+discordapp.net
+discuss.com.hk
+discuss4u.com
+dish.com
+disp.cc
+disqus.com
+dit-inc.us
+dizhidizhi.com
+dizhuzhishang.com
+djangosnippets.org
+djorz.com
+dl-laby.jp
+dl.box.net
+dlsite.com
+dlyoutube.com
+dm530.net
+dmcdn.net
+dmm.co.jp
+dns-dns.com
+dns-stuff.com
+dns04.com
+dns05.com
+dns1.us
+dns2.us
+dns2go.com
+dnscrypt.org
+dnset.com
+dnsrd.com
+dnssec.net
+dnvod.tv
+doctorvoice.org
+dogfartnetwork.com
+dojin.com
+dok-forum.net
+dolc.de
+dolf.org.hk
+dollf.com
+domain.club.tw
+domainhelp.search.com
+domains.google
+domaintoday.com.au
+dongtaiwang.com
+dongtaiwang.net
+dongyangjing.com
+dontfilter.us
+dontmovetochina.com
+dorjeshugden.com
+dotplane.com
+dotsub.com
+dotvpn.com
+doub.io
+dougscripts.com
+douhokanko.net
+doujincafe.com
+dowei.org
+download.aircrack-ng.org
+download.cnet.com
+download.ithome.com.tw
+dphk.org
+dpp.org.tw
+dpr.info
+dragonex.io
+dragonsprings.org
+dreamamateurs.com
+drepung.org
+drgan.net
+drmingxia.org
+dropbooks.tv
+dropbox.com
+dropboxusercontent.com
+drsunacademy.com
+drtuber.com
+dscn.info
+dsmtp.com
+dstk.dk
+dtdns.net
+dtiblog.com
+dtic.mil
+dtwang.org
+duanzhihu.com
+duck.com
+duckdns.org
+duckduckgo-owned-server.yahoo.net
+duckduckgo.com
+duckload.com
+duckmylife.com
+duga.jp
+duihua.org
+duihuahrjournal.org
+dumb1.com
+dunyabulteni.net
+duoweitimes.com
+duping.net
+duplicati.com
+dupola.com
+dupola.net
+dushi.ca
+dvdpac.com
+dvorak.org
+dw-world.com
+dw-world.de
+dw.com
+dw.de
+dwnews.com
+dwnews.net
+dynamic-dns.net
+dynamicdns.biz
+dynamicdns.co.uk
+dynamicdns.me.uk
+dynamicdns.org.uk
+dynawebinc.com
+dyndns-ip.com
+dyndns-pics.com
+dyndns.org
+dyndns.pro
+dynssl.com
+dynu.com
+dynu.net
+dynupdate.no-ip.com
+dzze.com
+e-classical.com.tw
+e-gold.com
+e-hentai.org
+e-hentaidb.com
+e-info.org.tw
+e-traderland.net
+e-zone.com.hk
+e123.hk
+earlytibet.com
+earthcam.com
+earthvpn.com
+eastern-ark.com
+easternlightning.org
+eastturkestan.com
+eastturkistan-gov.org
+eastturkistancc.org
+eastturkistangovernmentinexile.us
+easyca.ca
+easypic.com
+ebony-beauty.com
+ebook.hyread.com.tw
+ebookbrowse.com
+ebookee.com
+ebtcbank.com
+ecfa.org.tw
+echofon.com
+ecimg.tw
+ecministry.net
+economist.com
+ecsm.vs.com
+edgecastcdn.net
+edicypages.com
+edmontonchina.cn
+edmontonservice.com
+edns.biz
+edoors.com
+edubridge.com
+edupro.org
+eeas.europa.eu
+eesti.ee
+eevpn.com
+efcc.org.hk
+effers.com
+efksoft.com
+efukt.com
+eic-av.com
+eireinikotaerukai.com
+eisbb.com
+eksisozluk.com
+electionsmeter.com
+elgoog.im
+elpais.com
+eltondisney.com
+emaga.com
+emanna.com
+embr.in
+emilylau.org.hk
+empfil.com
+emule-ed2k.com
+emulefans.com
+emuparadise.me
+en.favotter.net
+en.hao123.com
+enanyang.my
+enewstree.com
+enfal.de
+engagedaily.org
+englishforeveryone.org
+englishfromengland.co.uk
+englishpen.org
+enlighten.org.tw
+entermap.com
+entnt.com
+environment.google
+epa.gov.tw
+epac.to
+episcopalchurch.org
+epochhk.com
+epochtimes-bg.com
+epochtimes-romania.com
+epochtimes.co.il
+epochtimes.co.kr
+epochtimes.com
+epochtimes.cz
+epochtimes.de
+epochtimes.fr
+epochtimes.ie
+epochtimes.it
+epochtimes.jp
+epochtimes.ru
+epochtimes.se
+epochtimestr.com
+epochweek.com
+epochweekly.com
+eporner.com
+equinenow.com
+erabaru.net
+eracom.com.tw
+eraysoft.com.tr
+erepublik.com
+erights.net
+eriversoft.com
+erktv.com
+ernestmandel.org
+erodaizensyu.com
+erodoujinlog.com
+erodoujinworld.com
+eromanga-kingdom.com
+eromangadouzin.com
+eromon.net
+eroprofile.com
+eroticsaloon.net
+eslite.com
+esmtp.biz
+esurance.com
+etaa.org.au
+etadult.com
+etaiwannews.com
+etcd.io
+etherdelta.com
+etizer.org
+etokki.com
+etools.ncol.com
+etowns.net
+etowns.org
+ettoday.net
+etvonline.hk
+eu.org
+eucasino.com
+eulam.com
+eurekavpt.com
+evchk.wikia.com
+evschool.net
+exblog.jp
+exchristian.hk
+exmo.com
+exmormon.org
+expatshield.com
+expecthim.com
+expekt.com
+experts-univers.com
+exploader.net
+expressvpn.com
+exrates.me
+extmatrix.com
+extremetube.com
+exx.com
+eyevio.jp
+eyny.com
+ezpc.tk
+ezpeer.com
+ezua.com
+fa.gov.tw
+facebook.br
+facebook.com
+facebook.design
+facebook.hu
+facebook.in
+facebook.nl
+facebook.se
+facebookquotes4u.com
+faceless.me
+facesofnyfw.com
+facesoftibetanselfimmolators.info
+fail.hk
+faith100.org
+faithfuleye.com
+faiththedog.info
+fakku.net
+falsefire.com
+falun-co.org
+falun-ny.net
+falun.caltech.edu
+falunart.org
+falunasia.info
+falunau.org
+falunaz.net
+falundafa-dc.org
+falundafa-florida.org
+falundafa-nc.org
+falundafa-pa.net
+falundafa-sacramento.org
+falundafa.org
+falundafaindia.org
+falundafamuseum.org
+falungong.club
+falungong.de
+falungong.org.uk
+falunhr.org
+faluninfo.de
+faluninfo.net
+falunpilipinas.net
+falunworld.net
+familyfed.org
+famunion.com
+fan-qiang.com
+fangbinxing.com
+fangeming.com
+fangeqiang.com
+fanglizhi.info
+fangmincn.org
+fangong.forums-free.com
+fangong.org
+fangongheike.com
+fanhaodang.com
+fanqiang.tk
+fanqianghou.com
+fanqiangyakexi.net
+fanqiangzhe.com
+fanswong.com
+fanyue.info
+fapdu.com
+faproxy.com
+faqserv.com
+fartit.com
+farwestchina.com
+fast.wistia.com
+fastpic.ru
+fastssh.com
+faststone.org
+fatbtc.com
+favstar.fm
+fawanghuihui.org
+faydao.com
+fb.com
+fb.me
+fbaddins.com
+fbcdn.net
+fbsbx.com
+fbworkmail.com
+fc2.com
+fc2blog.net
+fc2china.com
+fc2cn.com
+fda.gov.tw
+fdc64.de
+fdc64.org
+fdc89.jp
+feedburner.com
+feeds.fileforum.com
+feelssh.com
+feer.com
+feifeiss.com
+feitian-california.org
+feitianacademy.org
+feministteacher.com
+fengzhenghu.com
+fengzhenghu.net
+fevernet.com
+ff.im
+fffff.at
+fflick.com
+ffvpn.com
+fgmtv.net
+fgmtv.org
+fhreports.net
+figprayer.com
+fileflyer.com
+files2me.com
+fileserve.com
+filesor.com
+fillthesquare.org
+filmingfortibet.org
+filmy.olabloga.pl
+filthdump.com
+financetwitter.com
+finchvpn.com
+findmespot.com
+findyoutube.com
+findyoutube.net
+fingerdaily.com
+finler.net
+firearmsworld.net
+firebaseio.com
+fireofliberty.org
+firetweet.io
+firstfivefollowers.com
+flagsonline.it
+flecheinthepeche.fr
+fleshbot.com
+fleursdeslettres.com
+flgg.us
+flgjustice.org
+flickr.com
+flickrhivemind.net
+flickriver.com
+fling.com
+flipboard.com
+flipkart.com
+flitto.com
+flnet.org
+flog.tw
+flyvpn.com
+flyzy2005.com
+fnac.be
+fnac.com
+fochk.org
+focustaiwan.tw
+focusvpn.com
+fofg-europe.net
+fofg.org
+fofldfradio.org
+fooooo.com
+footwiball.com
+foreignpolicy.com
+forum.baby-kingdom.com
+forum.cyberctm.com
+forum.idsam.com
+forum.my903.com
+forum.mymaji.com
+forum.omy.sg
+forum.palmislife.com
+forum.setty.com.tw
+forum.sina.com.hk
+forum.slime.com.tw
+forum.tvb.com
+forum.xinbao.de
+forum4hk.com
+fotile.me
+fourface.nodesnoop.com
+fourthinternational.org
+foxdie.us
+foxgay.com
+foxsub.com
+foxtang.com
+fpmt-osel.org
+fpmt.org
+fpmt.tw
+fpmtmexico.org
+fq.wikia.com
+fqok.org
+fqrouter.com
+franklc.com
+freakshare.com
+free-gate.org
+free-hada-now.org
+free-proxy.cz
+free-ss.site
+free-ssh.com
+free.fr
+free4u.com.ar
+freealim.com
+freebrowser.org
+freechal.com
+freechina.net
+freechina.news
+freechinaforum.org
+freechinaweibo.com
+freeddns.com
+freeddns.org
+freedomchina.info
+freedomcollection.org
+freedomhouse.org
+freedominfonetweb.wordpress.com
+freedomsherald.org
+freeforums.org
+freefq.com
+freefuckvids.com
+freegao.com
+freeilhamtohti.org
+freekwonpyong.org
+freelotto.com
+freeman2.com
+freemoren.com
+freemorenews.com
+freemuse.org
+freenet-china.org
+freenetproject.org
+freenewscn.com
+freeopenvpn.com
+freeoz.org
+freessh.us
+freetcp.com
+freetibet.net
+freetibet.org
+freetibetanheroes.org
+freeviewmovies.com
+freevpn.me
+freevpn.nl
+freewallpaper4.me
+freewebs.com
+freewechat.com
+freeweibo.com
+freewww.biz
+freewww.info
+freexinwen.com
+freeyellow.com
+freeyoutubeproxy.net
+friendfeed-media.com
+friendfeed.com
+friends-of-tibet.org
+friendsoftibet.org
+fring.com
+fringenetwork.com
+from-pr.com
+from-sd.com
+fromchinatousa.net
+frommel.net
+frontlinedefenders.org
+frootvpn.com
+fscked.org
+fsurf.com
+ftchinese.com
+ftp1.biz
+ftpserver.biz
+ftv.com.tw
+fucd.com
+fuckcnnic.net
+fuckgfw.org
+fullerconsideration.com
+fulue.com
+funf.tw
+funkyimg.com
+funp.com
+fuq.com
+furbo.org
+furhhdl.org
+furinkan.com
+furl.net
+futurechinaforum.org
+futuremessage.org
+fux.com
+fuyin.net
+fuyindiantai.org
+fuyu.org.tw
+fw.cm
+fxcm-chinese.com
+fxnetworks.com
+fzh999.com
+fzh999.net
+fzlm.com
+g-area.org
+g-queen.com
+g.co
+g6hentai.com
+gabocorp.com
+gaeproxy.com
+gaforum.org
+galaxymacau.com
+galenwu.com
+galstars.net
+game735.com
+gamebase.com.tw
+gamejolt.com
+gamer.com.tw
+gamez.com.tw
+gamousa.com
+ganges.com
+gaoming.net
+gaopi.net
+gaozhisheng.net
+gaozhisheng.org
+gardennetworks.com
+gardennetworks.org
+gartlive.com
+gate-project.com
+gate.io
+gatecoin.com
+gather.com
+gatherproxy.com
+gati.org.tw
+gaybubble.com
+gaycn.net
+gayhub.com
+gaymap.cc
+gaymenring.com
+gaytube.com
+gaywatch.com
+gazotube.com
+gcc.org.hk
+gclooney.com
+gcmasia.com
+gcpnews.com
+gcr.io
+gdbt.net
+gdzf.org
+geek-art.net
+geekerhome.com
+geekheart.info
+gekikame.com
+gelbooru.com
+geocities.co.jp
+geocities.com
+geocities.jp
+gerefoundation.org
+get.app
+get.how
+get.page
+getastrill.com
+getchu.com
+getcloak.com
+getfoxyproxy.org
+getfreedur.com
+getgom.com
+geti2p.net
+getiton.com
+getjetso.com
+getlantern.org
+getmdl.io
+getoutline.org
+getsocialscope.com
+getsync.com
+gettrials.com
+gettyimages.com
+getuploader.com
+gfbv.de
+gfgold.com.hk
+gfsale.com
+gfw.org.ua
+gfw.press
+ggpht.com
+ggssl.com
+ghostpath.com
+ghut.org
+giantessnight.com
+gifree.com
+giga-web.jp
+gigporno.ru
+girlbanker.com
+gist.github.com
+git.io
+github.com
+githubusercontent.com
+gizlen.net
+gjczz.com
+glass8.eu
+global.bing.com
+globaljihad.net
+globalmediaoutreach.com
+globalmuseumoncommunism.org
+globalrescue.net
+globaltm.org
+globalvoices.org
+globalvoicesonline.org
+globalvpn.net
+glock.com
+gloryhole.com
+glorystar.me
+gluckman.com
+glype.com
+gmail.com
+gmbd.cn
+gmhz.org
+gmll.org
+gmodules.com
+gmozomg.izihost.org
+gnci.org.hk
+go-pki.com
+go.nesnode.com
+go141.com
+goagent.biz
+goagent.codeplex.com
+goagentplus.com
+gobet.cc
+godfootsteps.org
+godns.work
+godoc.org
+godsdirectcontact.co.uk
+godsdirectcontact.org
+godsdirectcontact.org.tw
+godsimmediatecontact.com
+gogotunnel.com
+gohappy.com.tw
+gojet.krtco.com.tw
+gokbayrak.com
+golang.org
+goldbet.com
+goldbetsports.com
+goldeneyevault.com
+goldenfrog.com
+goldjizz.com
+goldstep.net
+goldwave.com
+gongm.in
+gongmeng.info
+gongminliliang.com
+gongwt.com
+goo.gl
+gooday.xyz
+gooddns.info
+goodreaders.com
+goodreads.com
+goodtv.com.tw
+goodtv.tv
+goofind.com
+google.ad
+google.ae
+google.al
+google.am
+google.as
+google.at
+google.az
+google.ba
+google.be
+google.bf
+google.bg
+google.bi
+google.bj
+google.bs
+google.bt
+google.by
+google.ca
+google.calstate.edu
+google.cat
+google.cd
+google.cf
+google.cg
+google.ch
+google.ci
+google.cl
+google.cm
+google.cn
+google.co.ao
+google.co.bw
+google.co.ck
+google.co.cr
+google.co.id
+google.co.il
+google.co.in
+google.co.jp
+google.co.ke
+google.co.kr
+google.co.ls
+google.co.ma
+google.co.mz
+google.co.nz
+google.co.th
+google.co.tz
+google.co.ug
+google.co.uk
+google.co.uz
+google.co.ve
+google.co.vi
+google.co.za
+google.co.zm
+google.co.zw
+google.com
+google.com.af
+google.com.ag
+google.com.ai
+google.com.ar
+google.com.au
+google.com.bd
+google.com.bh
+google.com.bn
+google.com.bo
+google.com.br
+google.com.bz
+google.com.co
+google.com.cu
+google.com.cy
+google.com.do
+google.com.ec
+google.com.eg
+google.com.et
+google.com.fj
+google.com.gh
+google.com.gi
+google.com.gt
+google.com.hk
+google.com.jm
+google.com.kh
+google.com.kw
+google.com.lb
+google.com.ly
+google.com.mm
+google.com.mt
+google.com.mx
+google.com.my
+google.com.na
+google.com.nf
+google.com.ng
+google.com.ni
+google.com.np
+google.com.om
+google.com.pa
+google.com.pe
+google.com.pg
+google.com.ph
+google.com.pk
+google.com.pr
+google.com.py
+google.com.qa
+google.com.sa
+google.com.sb
+google.com.sg
+google.com.sl
+google.com.sv
+google.com.tj
+google.com.tr
+google.com.tw
+google.com.ua
+google.com.uy
+google.com.vc
+google.com.vn
+google.cv
+google.cz
+google.de
+google.dj
+google.dk
+google.dm
+google.dz
+google.ee
+google.es
+google.fi
+google.fm
+google.fr
+google.ga
+google.ge
+google.gg
+google.gl
+google.gm
+google.gp
+google.gr
+google.gy
+google.hn
+google.hr
+google.ht
+google.hu
+google.ie
+google.im
+google.iq
+google.is
+google.it
+google.je
+google.jo
+google.kg
+google.ki
+google.kz
+google.la
+google.li
+google.lk
+google.lt
+google.lu
+google.lv
+google.md
+google.me
+google.mg
+google.mk
+google.ml
+google.mn
+google.ms
+google.mu
+google.mv
+google.mw
+google.ne
+google.nl
+google.no
+google.nr
+google.nu
+google.pl
+google.pn
+google.ps
+google.pt
+google.ro
+google.rs
+google.ru
+google.rw
+google.sc
+google.se
+google.sh
+google.si
+google.sk
+google.sm
+google.sn
+google.so
+google.sr
+google.st
+google.td
+google.tg
+google.tk
+google.tl
+google.tm
+google.tn
+google.to
+google.tt
+google.vg
+google.vu
+google.ws
+googleapis.cn
+googleapis.com
+googleapps.com
+googlearth.com
+googleartproject.com
+googleblog.com
+googlebot.com
+googlechinawebmaster.com
+googlecode.com
+googlecommerce.com
+googledomains.com
+googledrive.com
+googleearth.com
+googlegroups.com
+googlehosted.com
+googleideas.com
+googleinsidesearch.com
+googlelabs.com
+googlemail.com
+googlemashups.com
+googlepagecreator.com
+googleplay.com
+googleplus.com
+googlescholar.com
+googlesile.com
+googlesource.com
+googleusercontent.com
+googlevideo.com
+googleweblight.com
+googlezip.net
+gopetition.com
+goproxing.net
+goregrish.com
+gospelherald.com
+got-game.org
+gotdns.ch
+gotgeeks.com
+gotrusted.com
+gotw.ca
+gov.taipei
+gov.tw
+gr8domain.biz
+gr8name.biz
+grammaly.com
+grandtrial.org
+grangorz.org
+graphis.ne.jp
+graphql.org
+greasespot.net
+great-firewall.com
+great-roc.org
+greatfire.org
+greatfire.us7.list-manage.com
+greatfirewall.biz
+greatfirewallofchina.net
+greatfirewallofchina.org
+greatroc.org
+greatroc.tw
+greatzhonghua.org
+greenfieldbookstore.com.hk
+greenparty.org.tw
+greenpeace.com.tw
+greenpeace.org
+greenreadings.com
+greenvpn.net
+greenvpn.org
+grotty-monday.com
+groups.google.cn
+grow.google
+gs-discuss.com
+gsp.target.com
+gstatic.com
+gtricks.com
+gts-vpn.com
+gu-chu-sum.org
+guaguass.com
+guaguass.org
+guancha.org
+guaneryu.com
+guangming.com.my
+guardster.com
+guishan.org
+gumroad.com
+gun-world.net
+gunsamerica.com
+gunsandammo.com
+guo.media
+guruonline.hk
+gutteruncensored.com
+gvlib.com
+gvm.com.tw
+gvt0.com
+gvt1.com
+gvt3.com
+gwtproject.org
+gyalwarinpoche.com
+gyatsostudio.com
+gzm.tv
+gzone-anime.info
+h-china.org
+h-moe.com
+h1n1china.org
+h528.com
+h5dm.com
+h5galgame.me
+hacg.club
+hacg.in
+hacg.li
+hacg.me
+hacg.red
+hacken.cc
+hacker.org
+hackthatphone.net
+hahaxixi.github.io
+hahlo.com
+hakkatv.org.tw
+handcraftedsoftware.org
+hanunyi.com
+hao.news
+haoel.github.io
+happy-vpn.com
+haproxy.org
+hardsextube.com
+harunyahya.com
+hautelook.com
+hautelookcdn.com
+have8.com
+hbo.com
+hclips.com
+hd.stheadline.com
+hdlt.me
+hdtvb.net
+hdzog.com
+heartyit.com
+heavy-r.com
+hec.su
+hecaitou.net
+hechaji.com
+heeact.edu.tw
+hegre-art.com
+heix.pp.ru
+helloandroid.com
+helloqueer.com
+helloss.pw
+hellotxt.com
+hellouk.org
+help.linksalpha.com
+helpeachpeople.com
+helplinfen.com
+helpster.de
+helpzhuling.org
+hentai.to
+hentaitube.tv
+hentaivideoworld.com
+heqinglian.net
+heungkongdiscuss.com
+hexieshe.com
+hexieshe.xyz
+hexxeh.net
+heyzo.com
+hgseav.com
+hhdcb3office.org
+hhthesakyatrizin.org
+hi-on.org.tw
+hidden-advent.org
+hide.me
+hidecloud.com
+hidein.net
+hideipvpn.com
+hideman.net
+hideme.nl
+hidemy.name
+hidemyass.com
+hidemycomp.com
+higfw.com
+highpeakspureearth.com
+highrockmedia.com
+hihiforum.com
+hihistory.net
+hiitch.com
+hikinggfw.org
+hilive.tv
+himalayan-foundation.org
+himalayanglacier.com
+himemix.com
+himemix.net
+hitbtc.com
+hitomi.la
+hiwifi.com
+hizb-ut-tahrir.info
+hizb-ut-tahrir.org
+hizbuttahrir.org
+hjclub.info
+hk-pub.com
+hk.frienddy.com
+hk.geocities.com
+hk.gradconnection.com
+hk.hao123img.com
+hk.jiepang.com
+hk.knowledge.yahoo.com
+hk.myblog.yahoo.com
+hk.news.yahoo.com
+hk.rd.yahoo.com
+hk.search.yahoo.com
+hk.video.news.yahoo.com
+hk.yahoo.com
+hk01.com
+hk32168.com
+hka8964.wordpress.com
+hkacg.com
+hkacg.net
+hkanews.wordpress.com
+hkatvnews.com
+hkbc.net
+hkbf.org
+hkbookcity.com
+hkchurch.org
+hkci.org.hk
+hkcmi.edu
+hkcnews.com
+hkcoc.com
+hkcoc.weather.com.hk
+hkdailynews.com.hk
+hkday.net
+hkdf.org
+hkej.com
+hkepc.com
+hkfaa.com
+hkfreezone.com
+hkfront.org
+hkgolden.com
+hkgreenradio.org
+hkheadline.com
+hkheadline.comblog
+hkhkhk.com
+hkhrc.org.hk
+hkhrm.org.hk
+hkip.org.uk
+hkjc.com
+hkjp.org
+hklft.com
+hklts.org.hk
+hkptu.org
+hkreporter.com
+hkreporter.loved.hk
+hkupop.hku.hk
+hkusu.net
+hkvwet.com
+hkwcc.org.hk
+hkzone.org
+hmonghot.com
+hmv.co.jp
+hmvdigital.ca
+hmvdigital.com
+hnjhj.com
+hnntube.com
+hola.com
+hola.org
+holymountaincn.com
+holyspiritspeaks.org
+home.sina.com
+home.so-net.net.tw
+homedepot.com
+homeperversion.com
+homeservershow.com
+hongkongfp.com
+hongmeimei.com
+hongzhi.li
+hootsuite.com
+hoovers.com
+hopedialogue.org
+hopto.org
+hornygamer.com
+hornytrip.com
+hotav.tv
+hotels.cn
+hotfrog.com.tw
+hotgoo.com
+hotpornshow.com
+hotpot.hk
+hotshame.com
+hotspotshield.com
+hotvpn.com
+hougaige.com
+howtoforge.com
+hoxx.com
+hpa.gov.tw
+hqcdp.org
+hqjapanesesex.com
+hqmovies.com
+hqsbnet.wordpress.com
+hqsbonline.wordpress.com
+hrcchina.org
+hrcir.com
+hrea.org
+hrichina.org
+hrtsea.com
+hrw.org
+hrweb.org
+hsjp.net
+hsselite.com
+hst.net.tw
+hstern.net
+hstt.net
+ht.ly
+htkou.net
+htl.li
+html5rocks.com
+https443.net
+https443.org
+hua-yue.net
+huaglad.com
+huanghuagang.org
+huangyiyu.com
+huaren.us
+huaren4us.com
+huashangnews.com
+huaxia-news.com
+huaxiabao.org
+huaxin.ph
+huayuworld.org
+hudatoriq.web.id
+hudson.org
+huffingtonpost.com
+hugoroy.eu
+huhaitai.com
+huhamhire.com
+huiyi.in
+hulkshare.com
+hulu.com
+huluim.com
+humanrightsbriefing.org
+hung-ya.com
+hungerstrikeforaids.org
+huobi.com
+huobi.pro
+huobipro.com
+huping.net
+hurgokbayrak.com
+hurriyet.com.tr
+hustlercash.com
+hut2.ru
+hutianyi.net
+hutong9.net
+huyandex.com
+hwadzan.tw
+hwayue.org.tw
+hwinfo.com
+hxwk.org
+hxwq.org
+hybrid-analysis.com
+hyperrate.com
+i-cable.com
+i-part.com.tw
+i-scmp.com
+i.lithium.com
+i1.hk
+i2p2.de
+i2runner.com
+i818hk.com
+iam.soy
+iamtopone.com
+iask.bz
+iask.ca
+iav19.com
+ibiblio.org
+iblist.com
+iblogserv-f.net
+ibros.org
+ibvpn.com
+icams.com
+ice.audionow.com
+icij.org
+icl-fi.org
+icoco.com
+iconpaper.org
+icu-project.org
+id.hao123.com
+id.heroku.com
+iddddg.com
+idemocracy.asia
+identi.ca
+idiomconnection.com
+idouga.com
+idreamx.com
+idv.tw
+ieasy5.com
+ied2k.net
+ienergy1.com
+if.ttt
+ifan.cz.cc
+ifanqiang.com
+ifcss.org
+ifjc.org
+ifreewares.com
+ift.tt
+igcd.net
+igfw.net
+igfw.tech
+igmg.de
+ignitedetroit.net
+igoogle.com
+igotmail.com.tw
+igvita.com
+ihakka.net
+ihao.org
+iicns.com
+iipdigital.usembassy.gov
+ikstar.com
+ikwb.com
+illusionfactory.com
+ilove80.be
+ilovelongtoes.com
+im.tv
+im88.tw
+imageab.com
+imagefap.com
+imageflea.com
+images-gaytube.com
+images.comico.tw
+imageshack.us
+imagevenue.com
+imagezilla.net
+imb.org
+imdb.com
+img.dlsite.jp
+img.ly
+imgchili.net
+imgmega.com
+imgur.com
+imkev.com
+imlive.com
+immigration.gov.tw
+immoral.jp
+impact.org.au
+impp.mn
+in-disguise.com
+in99.org
+incapdns.net
+incloak.com
+incredibox.fr
+indiandefensenews.in
+indiemerch.com
+info-graf.fr
+initiativesforchina.org
+inkui.com
+inmediahk.net
+innermongolia.org
+inote.tw
+insecam.org
+insidevoa.com
+instagram.com
+instanthq.com
+institut-tibetain.org
+international-news.newsmagazine.asia
+internet.org
+internetdefenseleague.org
+internetfreedom.org
+internetpopculture.com
+inthenameofconfuciusmovie.com
+investigating.wordpress.com
+inxian.com
+iownyour.biz
+iownyour.org
+ipalter.com
+ipfire.org
+ipfs.io
+iphone4hongkong.com
+iphonehacks.com
+iphonetaiwan.org
+iphonix.fr
+ipicture.ru
+ipjetable.net
+ipobar.com
+ipoock.com
+iportal.me
+ippotv.com
+ipredator.se
+iptv.com.tw
+iptvbin.com
+ipvanish.com
+iredmail.org
+ironbigfools.compython.net
+ironpython.net
+ironsocket.com
+is-a-hunter.com
+is.gd
+isaacmao.com
+isasecret.com
+isgreat.org
+islahhaber.net
+islam.org.hk
+islamawareness.net
+islamhouse.com
+islamicity.com
+islamicpluralism.org
+islamtoday.net
+ismaelan.com
+ismalltits.com
+ismprofessional.net
+isohunt.com
+israbox.com
+issuu.com
+istars.co.nz
+istiqlalhewer.com
+istockphoto.com
+isunaffairs.com
+isuntv.com
+itaboo.info
+itaiwan.gov.tw
+italiatibet.org
+itasoftware.com
+itemdb.com
+ithelp.ithome.com.tw
+its.caltech.edu
+itsaol.com
+itshidden.com
+itsky.it
+itweet.net
+iu45.com
+iuhrdf.org
+iuksky.com
+ivacy.com
+iverycd.com
+ivpn.net
+ixquick.com
+ixxx.com
+iyouport.com
+izaobao.us
+izles.net
+izlesem.org
+j.mp
+ja.wikipedia.org
+jamaat.org
+jamyangnorbu.com
+jandyx.com
+janwongphoto.com
+japan-whores.com
+japanfirst.asianfreeforum.com
+japantimes.co.jp
+jav.com
+jav101.com
+jav2be.com
+jav68.tv
+javakiba.org
+javbus.com
+javfor.me
+javhd.com
+javhip.com
+javhub.net
+javhuge.com
+javlibrary.com
+javmobile.net
+javmoo.com
+javmoo.xyz
+javseen.com
+javtag.com
+javzoo.com
+jbtalks.cc
+jbtalks.com
+jbtalks.my
+jcpenney.com
+jdwsy.com
+jeanyim.com
+jetos.com
+jex.com
+jfqu36.club
+jfqu37.xyz
+jgoodies.com
+jiangweiping.com
+jiaoyou8.com
+jiehua.cz
+jieshibaobao.com
+jigglegifs.com
+jigong1024.com
+jihadintel.meforum.org
+jihadology.net
+jiji.com
+jims.net
+jinbushe.org
+jingpin.org
+jingsim.org
+jinpianwang.com
+jinroukong.com
+jinx.com
+jitouch.com
+jizzthis.com
+jjgirls.com
+jkb.cc
+jkforum.net
+jkub.com
+jma.go.jp
+jmscult.com
+joachims.org
+jobnewera.wordpress.com
+jobso.tv
+journalchretien.net
+journalofdemocracy.org
+joymiihub.com
+joyourself.com
+jp.hao123.com
+jpl.nasa.gov
+jpopforum.net
+jtvnw.net
+jubushoushen.com
+juhuaren.com
+jukujo-club.com
+juliepost.com
+juliereyc.com
+junauza.com
+june4commemoration.org
+junefourth-20.net
+jungleheart.com
+juoaa.com
+justdied.com
+justfreevpn.com
+justicefortenzin.org
+justpaste.it
+justtristan.com
+juyuange.org
+juziyue.com
+jwmusic.org
+jyxf.net
+k-doujin.net
+ka-wai.com
+kagyu.org
+kagyu.org.za
+kagyumonlam.org
+kagyunews.com.hk
+kagyuoffice.org
+kagyuoffice.org.tw
+kaiyuan.de
+kakao.com
+kalachakralugano.org
+kankan.today
+kannewyork.com
+kanshifang.com
+kantie.org
+kanzhongguo.com
+kanzhongguo.eu
+kaotic.com
+karayou.com
+karkhung.com
+karmapa-teachings.org
+karmapa.org
+kawaiikawaii.jp
+kawase.com
+kb.monitorware.com
+kba-tx.org
+kcoolonline.com
+kebrum.com
+kechara.com
+keepandshare.com
+keezmovies.com
+kendatire.com
+kendincos.net
+kenengba.com
+keontech.net
+kepard.com
+kex.com
+keycdn.com
+khabdha.org
+khatrimaza.org
+khmusic.com.tw
+kichiku-doujinko.com
+kik.com
+killwall.com
+kindleren.com
+kineox.free.fr
+kingdomsalvation.org
+kinghost.com
+kingstone.com.tw
+kink.com
+kinmen.org.tw
+kinmen.travel
+kir.jp
+kissbbao.cn
+kiwi.kz
+kk-whys.co.jp
+kkbox.com
+kknews.cc
+kmuh.org.tw
+knowledgerush.com
+kobo.com
+kobobooks.com
+kodingen.com
+kompozer.net
+konachan.com
+kone.com
+koolsolutions.com
+koornk.com
+koranmandarin.com
+korenan2.com
+ksdl.org
+ksnews.com.tw
+kspcoin.com
+ktzhk.com
+kucoin.com
+kui.name
+kun.im
+kurashsultan.com
+kurtmunger.com
+kusocity.com
+kwcg.ca
+kwongwah.com.my
+kxsw.life
+kyofun.com
+kyohk.net
+kyoyue.com
+kyzyhello.com
+kzeng.info
+la-forum.org
+labiennale.org
+ladbrokes.com
+lagranepoca.com
+lalulalu.com
+lama.com.tw
+lamayeshe.com
+lamnia.co.uk
+lamrim.com
+lanterncn.cn
+lantosfoundation.org
+laod.cn
+laogai.org
+laomiu.com
+laoyang.info
+laptoplockdown.com
+laqingdan.net
+larsgeorge.com
+lastcombat.com
+lastfm.es
+latelinenews.com
+latibet.org
+lbank.info
+ld.hao123img.com
+le-vpn.com
+leafyvpn.net
+lecloud.net
+leeao.com.cn
+lefora.com
+left21.hk
+legalporno.com
+legaltech.law.com
+legsjapan.com
+leirentv.ca
+leisurecafe.ca
+leisurepro.com
+lematin.ch
+lemonde.fr
+lenwhite.com
+lerosua.org
+lers.google
+lesoir.be
+letou.com
+letscorp.net
+lflink.com
+lflinkup.com
+lflinkup.net
+lflinkup.org
+lhakar.org
+lhasocialwork.org
+liangyou.net
+liangzhichuanmei.com
+lianyue.net
+liaowangxizang.net
+liberal.org.hk
+libertytimes.com.tw
+library.usc.cuhk.edu.hk
+lidecheng.com
+lifemiles.com
+lighten.org.tw
+lightnovel.cn
+like.com
+limiao.net
+line-apps.com
+line-scdn.net
+line.me
+line.naver.jp
+linear-abematv.akamaized.net
+linglingfa.com
+lingvodics.com
+link-o-rama.com
+linkideo.com
+linkuswell.com
+linux.org.hk
+linuxtoy.org
+lionsroar.com
+lipuman.com
+liquidvpn.com
+listentoyoutube.com
+listorious.com
+lists.w3.org
+liu-xiaobo.org
+liudejun.com
+liuhanyu.com
+liujianshu.com
+liuxiaobo.net
+liuxiaotong.com
+livecoin.net
+livedoor.jp
+liveleak.com
+livestation.com
+livestream.com
+livevideo.com
+livingonline.us
+livingstream.com
+liwangyang.com
+lizhizhuangbi.com
+lkcn.net
+llss.me
+load.to
+lobsangwangyal.com
+localdomain.ws
+localpresshk.com
+lockestek.com
+logbot.net
+login.target.com
+logiqx.com
+londonchinese.ca
+longhair.hk
+longmusic.com
+longtermly.net
+longtoes.com
+lookpic.com
+looktoronto.com
+lotsawahouse.org
+lotuslight.org.hk
+lotuslight.org.tw
+lovetvshow.com
+lpsg.com
+lrfz.com
+lrip.org
+lsd.org.hk
+lsforum.net
+lsm.org
+lsmchinese.org
+lsmkorean.org
+lsmradio.com
+lsmwebcast.com
+lsxszzg.com
+ltn.com.tw
+luke54.com
+luke54.org
+lupm.org
+lushstories.com
+luxebc.com
+lvhai.org
+lvv2.com
+lyfhk.net
+lzmtnews.org
+m-team.cc
+m.hkgalden.com
+m.me
+m.plixi.com
+m.slandr.net
+ma.hao123.com
+macgamestore.com
+macrovpn.com
+macts.com.tw
+mad-ar.ch
+madewithcode.com
+madonna-av.com
+madrau.com
+madthumbs.com
+magazines.sina.com.tw
+magic-net.info
+mahabodhi.org
+maiio.net
+mail-archive.com
+maildns.xyz
+maiplus.com
+maizhong.org
+makemymood.com
+makkahnewspaper.com
+makzhou.warehouse333.com
+malaysiakini.com
+mamingzhe.com
+manchukuo.net
+mangafox.com
+mangafox.me
+maniash.com
+manicur4ik.ru
+mansion.com
+mansionpoker.com
+manta.com
+maplew.com
+marc.info
+marguerite.su
+martau.com
+martincartoons.com
+martsangkagyuofficial.org
+maruta.be
+marxist.com
+marxist.net
+marxists.org
+mash.to
+maskedip.com
+mastodon.host
+matainja.com
+material.io
+mathable.io
+mathiew-badimon.com
+matome-plus.com
+matome-plus.net
+matsushimakaede.com
+mattwilcox.net
+maturejp.com
+maxing.jp
+mayimayi.com
+mcadforums.com
+mcaf.ee
+mcfog.com
+mcreasite.com
+md-t.org
+me.youthwant.com.tw
+meansys.com
+media.nu.nl
+media.org.hk
+mediachinese.com
+mediafire.com
+mediafreakcity.com
+medium.com
+meetav.com
+meetup.com
+mefeedia.com
+mefound.com
+mega.nz
+megaproxy.com
+megarotic.com
+megavideo.com
+megurineluka.com
+meirixiaochao.com
+meltoday.com
+meme.yahoo.com
+memehk.com
+memorybbs.com
+memri.org
+memrijttm.org
+mercyprophet.org
+meridian-trust.org
+meripet.biz
+meripet.com
+merit-times.com.tw
+meshrep.com
+mesotw.com
+messenger.com
+metacafe.com
+metarthunter.com
+meteorshowersonline.com
+metrohk.com.hk
+metrolife.ca
+metroradio.com.hk
+meyou.jp
+meyul.com
+mfxmedia.com
+mgoon.com
+mgstage.com
+mh4u.org
+mhradio.org
+michaelanti.com
+michaelmarketl.com
+microvpn.com
+middle-way.net
+mihk.hk
+mihr.com
+mihua.org
+mike.cz.cc
+mikesoltys.com
+milph.net
+milsurps.com
+mimiai.net
+mimivip.com
+mimivv.com
+mindrolling.org
+minghui-a.org
+minghui-b.org
+minghui-school.org
+minghui.or.kr
+minghui.org
+minghuiyw.wordpress.com
+mingjinglishi.com
+mingjingnews.com
+mingjingtimes.com
+mingpao.com
+mingpaocanada.com
+mingpaomonthly.com
+mingpaonews.com
+mingpaony.com
+mingpaosf.com
+mingpaotor.com
+mingpaovan.com
+mingshengbao.com
+minhhue.net
+miniforum.org
+ministrybooks.org
+minzhuhua.net
+minzhuzhanxian.com
+minzhuzhongguo.org
+miroguide.com
+mirrorbooks.com
+mist.vip
+mitao.com.tw
+mitbbs.com
+mitbbsau.com
+mixero.com
+mixpod.com
+mixx.com
+mizzmona.com
+mjib.gov.tw
+mjlsh.usc.cuhk.edu.hk
+mk5000.com
+mlcool.com
+mlzs.work
+mm-cg.com
+mmaaxx.com
+mmmca.com
+mnewstv.com
+mo.nightlife141.com
+mobatek.net
+mobile01.com
+mobileways.de
+moby.to
+mobypicture.com
+moeaic.gov.tw
+moeerolibrary.com
+mofa.gov.tw
+mofaxiehui.com
+mofos.com
+mog.com
+mohu.club
+mohu.ml
+mol.gov.tw
+molihua.org
+mondex.org
+money-link.com.tw
+moneyhome.biz
+monitorchina.org
+monster.com
+moodyz.com
+moonbbs.com
+moonbingo.com
+morningsun.org
+moroneta.com
+mos.ru
+motherless.com
+motiyun.com
+motor4ik.ru
+mousebreaker.com
+movements.org
+moviefap.com
+mp3buscador.com
+mp3ye.eu
+mpettis.com
+mpfinance.com
+mpinews.com
+mponline.hk
+mqxd.org
+mrbasic.com
+mrbonus.com
+mrface.com
+mrslove.com
+mrtweet.com
+msa-it.org
+msguancha.com
+msha.gov
+mswe1.org
+mthruf.com
+mtw.tl
+muchosucko.com
+mullvad.net
+multiply.com
+multiproxy.org
+multiupload.com
+mummysgold.com
+murmur.tw
+musicade.net
+muslimvideo.com
+muzi.com
+muzi.net
+muzu.tv
+mvdis.gov.tw
+mvg.jp
+mx.hao123.com
+mx981.com
+my-formosa.com
+my-private-network.co.uk
+my-proxy.com
+my.mail.ru
+my.opera.com
+my.pcloud.com
+my03.com
+myactimes.com
+myanniu.com
+myaudiocast.com
+myav.com.tw
+mybbs.us
+mybet.com
+myca168.com
+mycanadanow.com
+mychinamyhome.com
+mychinanet.com
+mychinanews.com
+mychinese.news
+mycnnews.com
+mycould.com
+mydad.info
+myddns.com
+myeasytv.com
+myeclipseide.com
+myforum.com.hk
+myforum.com.uk
+myfreecams.com
+myfreepaysite.com
+myfreshnet.com
+myftp.info
+myftp.name
+myiphide.com
+mykomica.org
+mylftv.com
+mymediarom.com
+mymoe.moe
+mymom.info
+mymusic.net.tw
+mynetav.net
+mynetav.org
+mynumber.org
+myparagliding.com
+mypicture.info
+mypop3.net
+mypop3.org
+mypopescu.com
+myradio.hk
+myreadingmanga.info
+mysecondarydns.com
+myshare.url.com.tw
+mysinablog.com
+mysite.verizon.net
+myspace.com
+myspacecdn.com
+mytalkbox.com
+mytizi.com
+mywww.biz
+myz.info
+naacoalition.org
+naitik.net
+nakido.com
+nakuz.com
+nalandabodhi.org
+nalandawest.org
+namgyal.org
+namgyalmonastery.org
+namsisi.com
+nanyang.com
+nanyangpost.com
+nanzao.com
+naol.ca
+naol.cc
+nat.gov.tw
+nat.moe
+national-lottery.co.uk
+nationsonline.org
+nationwide.com
+naughtyamerica.com
+navyfamily.navy.mil
+navyreserve.navy.mil
+naweeklytimes.com
+nbtvpn.com
+nccwatch.org.tw
+nch.com.tw
+ncn.org
+nde.de
+ndr.de
+ned.org
+nekoslovakia.net
+nemesis2.qx.net
+neo-miracle.com
+nepusoku.com
+net-fits.pro
+netbirds.com
+netcolony.com
+netflix.com
+netme.cc
+netsneak.com
+network54.com
+networkedblogs.com
+networktunnel.net
+neverforget8964.org
+new-3lunch.net
+new-akiba.com
+new96.ca
+newcenturymc.com
+newcenturynews.com
+newchen.com
+newgrounds.com
+newipnow.com
+newlandmagazine.com.au
+newnews.ca
+news.cnyes.com
+news.hk.msn.com
+news.hkpeanut.com
+news.msn.com.tw
+news.nationalgeographic.com
+news.now.com
+news.omy.sg
+news.seehua.com
+news.sina.com.hk
+news.sina.com.tw
+news.sinchew.com.my
+news.singtao.ca
+news.tvb.com
+news.tvbs.com.tw
+news.yahoo.com
+news100.com.tw
+newsancai.com
+newschinacomment.org
+newscn.org
+newsdetox.ca
+newsdh.com
+newspeak.cc
+newstamago.com
+newstapa.org
+newstarnet.com
+newtaiwan.com.tw
+newtalk.tw
+newyorktimes.com
+nexon.com
+next11.co.jp
+nextmag.com.tw
+nextmedia.com
+nexton-net.jp
+nexttv.com.tw
+nf.id.au
+nfjtyd.com
+nflxext.com
+nflximg.com
+nflximg.net
+nflxso.net
+nflxvideo.net
+nga.mil
+ngensis.com
+nhentai.net
+nhi.gov.tw
+nhk-ondemand.jp
+nic.cz.cc
+nic.google
+nic.gov
+nicovideo.jp
+nighost.org
+nikkei.com
+ninecommentaries.com
+ninjacloak.com
+ninjaproxy.ninja
+nintendium.com
+ninth.biz
+niusnews.com
+njactb.org
+njuice.com
+nko.navy.mil
+nlfreevpn.com
+no-ip.org
+nobel.se
+nobelprize.org
+nobodycanstop.us
+nofile.io
+nokogiri.org
+nokola.com
+noodlevpn.com
+norbulingka.org
+nordstrom.com
+nordstromimage.com
+nordstromrack.com
+nordvpn.com
+notify.dropboxapi.com
+nottinghampost.com
+novelasia.com
+now.com
+now.im
+nownews.com
+nowtorrents.com
+noypf.com
+npa.go.jp
+npa.gov.tw
+npnt.me
+nps.gov
+nradio.me
+nrk.no
+ns01.biz
+ns01.info
+ns01.us
+ns02.biz
+ns02.info
+ns02.us
+ns1.name
+ns2.name
+ns3.name
+nsc.gov.tw
+ntbk.gov.tw
+ntbna.gov.tw
+ntbt.gov.tw
+ntd.tv
+ntdtv.ca
+ntdtv.co.kr
+ntdtv.com
+ntdtv.cz
+ntdtv.org
+ntdtv.ru
+ntdtvla.com
+ntrfun.com
+ntsna.gov.tw
+nubiles.net
+nuexpo.com
+nukistream.com
+nurgo-software.com
+nusatrip.com
+nutaku.net
+nuuvem.com
+nuvid.com
+nuzcom.com
+nvdst.com
+nvquan.org
+nvtongzhisheng.org
+nwtca.org
+ny.stgloballink.com
+ny.visiontimes.com
+nyaa.eu
+nydus.ca
+nylon-angel.com
+nylonstockingsonline.com
+nyt.com
+nytchina.com
+nytcn.me
+nytco.com
+nyti.ms
+nytimes.com
+nytimes.map.fastly.net
+nytimg.com
+nytstyle.com
+nzchinese.com
+nzchinese.net.nz
+observechina.net
+obutu.com
+ocaspro.com
+occupytiananmen.com
+oclp.hk
+ocreampies.com
+ocry.com
+october-review.org
+oculus.com
+oculuscdn.com
+oex.com
+offbeatchina.com
+officeoftibet.com
+ofile.org
+ogaoga.org
+ogate.org
+oikos.com.tw
+oiktv.com
+oizoblog.com
+ok.ru
+okayfreedom.com
+okex.com
+okk.tw
+old-cat.net
+old.honeynet.org
+old.nabble.com
+olumpo.com
+olympicwatch.org
+omgili.com
+omni7.jp
+omnitalk.com
+omnitalk.org
+on.cc
+on2.com
+onapp.com
+onedrive.live.com
+onedumb.com
+onejav.com
+onion.city
+online.recoveryversion.org
+onlinecha.com
+onlineyoutube.com
+onlytweets.com
+onmoon.com
+onmoon.net
+onmypc.biz
+onmypc.info
+onmypc.net
+onmypc.org
+onmypc.us
+onthehunt.com
+ontrac.com
+oopsforum.com
+open.com.hk
+openallweb.com
+opendemocracy.net
+opendn.xyz
+openervpn.in
+openid.net
+openleaks.org
+openvpn.net
+openwebster.com
+openwrt.org.cn
+opml.radiotime.com
+opus-gaming.com
+organcare.org.tw
+organharvestinvestigation.net
+organiccrap.com
+orgasm.com
+orgfree.com
+orient-doll.com
+orientaldaily.com.my
+orn.jp
+orzistic.org
+osfoora.com
+otcbtc.com
+otnd.org
+otto.de
+otzo.com
+ourdearamy.com
+ourhobby.com
+oursogo.com
+oursteps.com.au
+oursweb.net
+ourtv.hk
+overplay.net
+oversea.istarshine.com
+ow.ly
+owl.li
+oyax.com
+oyghan.com
+ozchinese.com
+ozvoice.org
+ozxw.com
+ozyoyo.com
+pachosting.com
+pacificpoker.com
+packages.debian.org
+packetix.net
+pacopacomama.com
+padmanet.com
+page.bid.yahoo.com
+page2rss.com
+pagodabox.com
+palacemoon.com
+paldengyal.com
+paljorpublications.com
+paltalk.com
+panamapapers.sueddeutsche.de
+pandapow.co
+pandapow.net
+pandavpn-jp.com
+pandora.com
+pandora.tv
+panluan.net
+panoramio.com
+pao-pao.net
+paper.li
+paperb.us
+paradisehill.cc
+paradisepoker.com
+parkansky.com
+partycasino.com
+partypoker.com
+passion.com
+passiontimes.hk
+paste.ee
+pastebin.com
+pastie.org
+pbs.org
+pbwiki.com
+pbworks.com
+pbxes.com
+pbxes.org
+pcanywhere.net
+pcc.gov.tw
+pcdvd.com.tw
+pchome.com.tw
+pcij.org
+pcstore.com.tw
+pct.org.tw
+pdetails.com
+pdproxy.com
+pds.nasa.gov
+peace.ca
+peacefire.org
+peacehall.com
+pearlher.org
+peeasian.com
+pekingduck.org
+pemulihan.or.id
+pen.io
+penchinese.com
+penchinese.net
+pengyulong.com
+penisbot.com
+penthouse.com
+pentoy.hk
+peoplebookcafe.com
+peoplenews.tw
+peopo.org
+percy.in
+perfectgirls.net
+perfectvpn.net
+periscope.tv
+persecutionblog.com
+persiankitty.com
+pfd.org.hk
+phapluan.org
+phayul.com
+philborges.com
+philly.com
+phmsociety.org
+phncdn.com
+phobos.apple.com
+phosphation13.rssing.com
+photodharma.net
+photofocus.com
+phuquocservices.com
+picacomic.com
+picacomiccn.com
+picasaweb.com
+picidae.net
+picturedip.com
+pictures.playboy.com
+picturesocial.com
+pimg.tw
+pin-cong.com
+pin6.com
+ping.fm
+pinimg.com
+pinkrod.com
+pinoy-n.com
+pinterest.at
+pinterest.co.kr
+pinterest.co.uk
+pinterest.com
+pinterest.de
+pinterest.dk
+pinterest.fr
+pinterest.jp
+pinterest.nl
+pinterest.se
+pioneer-worker.forums-free.com
+pipii.tv
+piposay.com
+piraattilahti.org
+piring.com
+pixelqi.com
+pixiv.net
+pixnet.net
+pk.com
+pki.goog
+placemix.com
+playboy.com
+playboyplus.com
+player.fm
+playno1.com
+playpcesor.com
+plays.com.tw
+plm.org.hk
+plunder.com
+plurk.com
+plus28.com
+plusbb.com
+pmatehunter.com
+pmates.com
+po2b.com
+pobieramy.top
+podictionary.com
+pokerstars.com
+pokerstars.net
+politicalchina.org
+politicalconsultation.org
+politiscales.net
+poloniex.com
+polymer-project.org
+polymerhk.com
+popo.tw
+popvote.hk
+popyard.com
+popyard.org
+porn.com
+porn2.com
+porn5.com
+pornbase.org
+pornerbros.com
+pornhd.com
+pornhost.com
+pornhub.com
+pornhubdeutsch.net
+pornmm.net
+pornoxo.com
+pornrapidshare.com
+pornsharing.com
+pornsocket.com
+pornstarclub.com
+porntube.com
+porntubenews.com
+porntvblog.com
+pornvisit.com
+port25.biz
+portablevpn.nl
+poskotanews.com
+post01.com
+post76.com
+post852.com
+postadult.com
+postimg.org
+potvpn.com
+power.com
+powerapple.com
+powercx.com
+powerphoto.org
+prayforchina.net
+premeforwindows7.com
+premproxy.com
+presentationzen.com
+presidentlee.tw
+prestige-av.com
+pride.google
+prisoneralert.com
+pritunl.com
+privacybox.de
+private.com
+privateinternetaccess.com
+privatepaste.com
+privatetunnel.com
+privatevpn.com
+procopytips.com
+prosiben.de
+protonvpn.com
+provideocoalition.com
+provpnaccounts.com
+proxfree.com
+proxifier.com
+proxomitron.info
+proxpn.com
+proxyanonimo.es
+proxydns.com
+proxylist.org.uk
+proxynetwork.org.uk
+proxypy.net
+proxyroad.com
+proxytunnel.net
+proyectoclubes.com
+prozz.net
+psblog.name
+pscp.tv
+psiphon.ca
+psiphon.civisec.org
+psiphon3.com
+psiphontoday.com
+pts.org.tw
+ptt.cc
+pttvan.org
+pubu.com.tw
+puffinbrowser.com
+puffstore.com
+pullfolio.com
+pulse.yahoo.com
+punyu.com
+pure18.com
+pureconcepts.net
+pureinsight.org
+purepdf.com
+purevpn.com
+purplelotus.org
+pursuestar.com
+pushchinawall.com
+pussyspace.com
+putihome.org
+putlocker.com
+putty.org
+puuko.com
+pwned.com
+python.com
+python.com.tw
+pythonhackers.com
+pytorch.org
+qanote.com
+qgirl.com.tw
+qhigh.com
+qi-gong.me
+qiandao.today
+qiangyou.org
+qidian.ca
+qienkuen.org
+qiwen.lu
+qixianglu.cn
+qkshare.com
+qoos.com
+qpoe.com
+qq.co.za
+qstatus.com
+qtrac.eu
+qtweeter.com
+quannengshen.org
+quantumbooter.net
+questvisual.com
+quitccp.net
+quitccp.org
+quora.com
+quran.com
+quranexplorer.com
+qusi8.net
+qvodzy.org
+qxbbs.org
+r18.com
+ra.gg
+radicalparty.org
+radiko.jp
+radioaustralia.net.au
+radiohilight.net
+radiovaticana.org
+radiovncr.com
+rael.org
+raggedbanner.com
+raidcall.com.tw
+raidtalk.com.tw
+rainbowplan.org
+raindrop.io
+raizoji.or.jp
+ramcity.com.au
+rangwang.biz
+rangzen.com
+rangzen.net
+rangzen.org
+ranyunfei.com
+rapbull.net
+rapidgator.net
+rapidmoviez.com
+rapidvpn.com
+raremovie.cc
+raremovie.net
+raw.githubusercontent.com
+rawgit.com
+rawgithub.com
+razyboard.com
+rcam.target.com
+rcinet.ca
+rconversation.blogs.com
+rd.com
+rdio.com
+read01.com
+read100.com
+readingtimes.com.tw
+readmoo.com
+readydown.com
+realcourage.org
+realforum.zkiz.com
+realitykings.com
+realraptalk.com
+realsexpass.com
+rebatesrule.net
+recordhistory.org
+recovery.org.tw
+recoveryversion.com.tw
+red-lang.org
+redballoonsolidarity.org
+redchinacn.net
+redchinacn.org
+redd.it
+reddit.com
+redditmedia.com
+redditstatic.com
+redhotlabs.com
+redtube.com
+referer.us
+reflectivecode.com
+registry.google
+relaxbbs.com
+relay.com.tw
+releaseinternational.org
+religioustolerance.org
+renminbao.com
+renyurenquan.org
+research.jmsc.hku.hk
+resilio.com
+retweeteffect.com
+retweetist.com
+retweetrank.com
+reuters.com
+reutersmedia.net
+revleft.com
+revver.com
+rfa.org
+rfachina.com
+rfalive1.akacast.akamaistream.net
+rfamobile.org
+rfaweb.org
+rferl.org
+rfi.fr
+rfi.my
+rightbtc.com
+rigpa.org
+riku.me
+rileyguide.com
+riseup.net
+ritouki.jp
+ritter.vg
+rixcloud.com
+rixcloud.us
+rlwlw.com
+rmjdw.com
+rmjdw132.info
+roadshow.hk
+roboforex.com
+robustnessiskey.com
+rocket-inc.net
+rocksdb.org
+rojo.com
+rolia.net
+ronjoneswriter.com
+roodo.com
+rosechina.net
+rotten.com
+rsdlmonitor.com
+rsf-chinese.org
+rsf.org
+rsgamen.org
+rssmeme.com
+rtalabel.org
+rthk.hk
+rthk.org.hk
+rthklive2-lh.akamaihd.net
+rti.org.tw
+rtycminnesota.org
+ruanyifeng.com
+rukor.org
+runbtx.com
+rushbee.com
+ruten.com.tw
+rutube.ru
+ruyiseek.com
+rxhj.net
+s-cute.com
+s-dragon.org
+s1.nudezz.com
+s1heng.com
+s1s1s1.com
+s3-ap-northeast-1.amazonaws.com
+s3-ap-southeast-2.amazonaws.com
+s3.amazonaws.com
+s8forum.com
+sa.hao123.com
+sacks.com
+sacom.hk
+sadistic-v.com
+sadpanda.us
+safervpn.com
+safety.google
+saintyculture.com
+saiq.me
+sakuralive.com
+sakya.org
+salvation.org.hk
+samair.ru
+sambhota.org
+sanmin.com.tw
+sapikachu.net
+saveliuxiaobo.com
+savemedia.com
+savethedate.foo
+savetibet.de
+savetibet.fr
+savetibet.nl
+savetibet.org
+savetibet.ru
+savetibetstore.org
+savevid.com
+say2.info
+sbme.me
+sbs.com.au
+scache.vzw.com
+scache1.vzw.com
+scache2.vzw.com
+scasino.com
+schema.org
+sciencenets.com
+scieron.com
+scmp.com
+scmpchinese.com
+scramble.io
+scribd.com
+scriptspot.com
+seapuff.com
+search.aol.com
+search.disconnect.me
+search.xxx
+search.yahoo.co.jp
+searchtruth.com
+secretchina.com
+secretgarden.no
+secretsline.biz
+secure.hustler.com
+secure.logmein.com
+secure.raxcdn.com
+securetunnel.com
+securityinabox.org
+securitykiss.com
+seed4.me
+seesmic.com
+seevpn.com
+seezone.net
+sejie.com
+sellclassics.com
+sendsmtp.com
+sendspace.com
+servehttp.com
+serveuser.com
+serveusers.com
+sesawe.net
+sesawe.org
+sethwklein.net
+setn.com
+settv.com.tw
+sevenload.com
+sex-11.com
+sex.com
+sex3.com
+sex8.cc
+sexandsubmission.com
+sexbot.com
+sexhu.com
+sexhuang.com
+sexidude.com
+sexinsex.net
+sextvx.com
+sexxxy.biz
+sf.net
+sfileydy.com
+sfshibao.com
+sftindia.org
+sftuk.org
+shadeyouvpn.com
+shadow.ma
+shadowsky.xyz
+shadowsocks-r.com
+shadowsocks.asia
+shadowsocks.be
+shadowsocks.com
+shadowsocks.com.hk
+shadowsocks.org
+shadowsocks9.com
+shambalapost.com
+shambhalasun.com
+shangfang.org
+shapeservices.com
+share.dmhy.org
+share.ovi.com
+share.youthwant.com.tw
+sharebee.com
+sharecool.org
+sharpdaily.com.hk
+sharpdaily.hk
+sharpdaily.tw
+shat-tibet.com
+shattered.io
+sheikyermami.com
+shellfire.de
+shenshou.org
+shenyun.com
+shenyunperformingarts.org
+shenzhoufilm.com
+sherabgyaltsen.com
+shiatv.net
+shicheng.org
+shiksha.com
+shinychan.com
+shipcamouflage.com
+shireyishunjian.com
+shitaotv.org
+shixiao.org
+shizhao.org
+shkspr.mobi
+shodanhq.com
+shooshtime.com
+shop2000.com.tw
+shopping.com
+showbiz.omy.sg
+showhaotu.com
+showtime.jp
+shutterstock.com
+shwchurch.org
+shwchurch3.com
+siddharthasintent.org
+sidelinesnews.com
+sidelinessportseatery.com
+sierrafriendsoftibet.org
+sijihuisuo.club
+sijihuisuo.com
+sikaozhe1997.github.io
+silkbook.com
+simbolostwitter.com
+simplecd.org
+simpleproductivityblog.com
+sinchew.com.my
+singaporepools.com.sg
+singfortibet.com
+singpao.com.hk
+singtao.com
+singtaousa.com
+sino-monthly.com
+sinoants.com
+sinocast.com
+sinocism.com
+sinomontreal.ca
+sinonet.ca
+sinopitt.info
+sinoquebec.com
+sipml5.org
+sis.xxx
+sis001.com
+sis001.us
+site2unblock.com
+site90.net
+sitebro.tw
+sitekreator.com
+siteks.uk.to
+sitemaps.org
+sixth.biz
+sjrt.org
+sjum.cn
+sketchappsources.com
+skimtube.com
+skybet.com
+skyking.com.tw
+skyvegas.com
+skyxvpn.com
+slacker.com
+slaytizle.com
+sleazydream.com
+slheng.com
+slickvpn.com
+slideshare.net
+slinkset.com
+slutload.com
+slutmoonbeam.com
+slyip.com
+slyip.net
+sm-miracle.com
+smartdnsproxy.com
+smarthide.com
+smchbooks.com
+smh.com.au
+smhric.org
+smith.edu
+smyxy.org
+snapchat.com
+snaptu.com
+sndcdn.com
+sneakme.net
+snowlionpub.com
+sobees.com
+soc.mil
+socialwhale.com
+socks-proxy.net
+sockscap64.com
+sockslist.net
+socrec.org
+sod.co.jp
+sodatea.github.io
+softether-download.com
+softether.co.jp
+softether.org
+softwarebychuck.com
+softwaredownload.gitbooks.io
+sogclub.com
+sogrady.me
+soh.tw
+sohcradio.com
+sohfrance.org
+sokamonline.com
+sokmil.com
+solarsystem.nasa.gov
+solidaritetibet.org
+solidfiles.com
+somee.com
+songjianjun.com
+sonicbbs.cc
+sonidodelaesperanza.org
+sopcast.com
+sopcast.org
+sorazone.net
+sorting-algorithms.com
+sos.org
+sosreader.com
+sostibet.org
+soubory.com
+soul-plus.net
+soulcaliburhentai.net
+soumo.info
+soundcloud.com
+soundofhope.kr
+soundofhope.org
+soup.io
+soupofmedia.com
+sourceforge.net
+sourcewadio.com
+southnews.com.tw
+sowers.org.hk
+soylentnews.org
+spankbang.com
+spankingtube.com
+spankwire.com
+spb.com
+speakerdeck.com
+specxinzl.jigsy.com
+speedify.com
+spem.at
+spencertipping.com
+spendee.com
+spicevpn.com
+spideroak.com
+spike.com
+sports.williamhill.com
+spotflux.com
+spotify.com
+spreadshirt.es
+spring4u.info
+springboardplatform.com
+sprite.org
+sproutcore.com
+sproxy.info
+squirly.info
+srcf.ucam.org
+srocket.us
+ss-link.com
+ss.carryzhou.com
+ss.levyhsu.com
+ss.pythonic.life
+ss7.vzw.com
+ssglobal.co
+ssglobal.me
+ssh91.com
+ssl.webpack.de
+ssl443.org
+sspanel.net
+sspro.ml
+ssr.tools
+ssrshare.com
+sss.camp
+sstmlt.moe
+sstmlt.net
+stackoverflow.com
+stage64.hk
+standupfortibet.org
+stanford.edu
+starfishfx.com
+starp2p.com
+startpage.com
+startuplivingchina.com
+stat.gov.tw
+static-economist.com
+static.comico.tw
+static.shemalez.com
+static01.nyt.com
+staticflickr.com
+statueofdemocracy.org
+stc.com.sa
+steamcommunity.com
+steel-storm.com
+steganos.com
+steganos.net
+stepchina.com
+stephaniered.com
+sthoo.com
+stickam.com
+stickeraction.com
+stileproject.com
+sto.cc
+stoporganharvesting.org
+stoptibetcrisis.net
+storagenewsletter.com
+store.steampowered.com
+stories.google
+storify.com
+storm.mg
+stormmediagroup.com
+stoweboyd.com
+stranabg.com
+straplessdildo.com
+streamingthe.net
+streema.com
+strikingly.com
+strongvpn.com
+strongwindpress.com
+student.tw
+studentsforafreetibet.org
+stumbleupon.com
+stupidvideos.com
+subacme.rerouted.org
+successfn.com
+sugarsync.com
+sugobbs.com
+sugumiru18.com
+suissl.com
+sujiatun.wordpress.com
+sukebei.nyaa.si
+sulian.me
+summify.com
+sumrando.com
+sun1911.com
+sunmedia.ca
+sunporno.com
+sunskyforum.com
+sunta.com.tw
+sunvpn.net
+sunwinism.joinbbs.net
+suoluo.org
+supchina.com
+superfreevpn.com
+superokayama.com
+superpages.com
+supervpn.net
+superzooi.com
+suppig.net
+suprememastertv.com
+surfeasy.com
+surfeasy.com.au
+suroot.com
+surrenderat20.net
+sustainability.google
+suyangg.com
+svsfx.com
+swagbucks.com
+swissvpn.net
+switch1.jp
+switchvpn.net
+sydneytoday.com
+sylfoundation.org
+syncback.com
+synergyse.com
+sysresccd.org
+sytes.net
+szbbs.net
+szetowah.org.hk
+t-g.com
+t.co
+t.me
+t.orzdream.com
+t35.com
+t66y.com
+taa-usa.org
+taaze.tw
+tabtter.jp
+tacc.cwb.gov.tw
+tacem.org
+taconet.com.tw
+taedp.org.tw
+tafm.org
+tagwa.org.au
+tagwalk.com
+tahr.org.tw
+taipei.gov.tw
+taipeisociety.org
+taiwan-sex.com
+taiwanbible.com
+taiwancon.com
+taiwandaily.net
+taiwandc.org
+taiwanjobs.gov.tw
+taiwanjustice.com
+taiwanjustice.net
+taiwankiss.com
+taiwannation.50webs.com
+taiwannation.com
+taiwannation.com.tw
+taiwanncf.org.tw
+taiwannews.com.tw
+taiwantp.net
+taiwantt.org.tw
+taiwanus.net
+taiwanyes.com
+taiwanyes.ning.com
+talk853.com
+talkboxapp.com
+talkonly.net
+tamiaode.tk
+tanc.org
+tangben.com
+tangren.us
+taoism.net
+taolun.info
+tapanwap.com
+tapatalk.com
+tarr.uspto.gov
+tascn.com.au
+taup.net
+taweet.com
+tbcollege.org
+tbi.org.hk
+tbicn.org
+tbjyt.org
+tbpic.info
+tbrc.org
+tbs-rainbow.org
+tbsec.org
+tbskkinabalu.page.tl
+tbsmalaysia.org
+tbsn.org
+tbsseattle.org
+tbssqh.org
+tbswd.org
+tbtemple.org.uk
+tbthouston.org
+tccwonline.org
+tcewf.org
+tchrd.org
+tcnynj.org
+tcpspeed.co
+tcpspeed.com
+tcsofbc.org
+tcsovi.org
+tdm.com.mo
+teachparentstech.org
+teamamericany.com
+tech2.in.com
+techviz.net
+teck.in
+teco-hk.org
+teco-mo.org
+teddysun.com
+teeniefuck.net
+teensinasia.com
+telecomspace.com
+telegram.dog
+telegram.me
+telegram.org
+telegramdownload.com
+telegraph.co.uk
+telesco.pe
+tellme.pw
+tenacy.com
+tensorflow.org
+tenzinpalmo.com
+terminus2049.github.io
+tew.org
+textnow.me
+th.hao123.com
+thaicn.com
+thb.gov.tw
+theatrum-belli.com
+thebcomplex.com
+theblemish.com
+thebobs.com
+thebodyshop-usa.com
+thecenter.mit.edu
+thechinabeat.org
+thedalailamamovie.com
+thedw.us
+thefacebook.com
+thefrontier.hk
+thegioitinhoc.vn
+thegly.com
+thehots.info
+thehousenews.com
+thehun.net
+theinitium.com
+thenewslens.com
+thepiratebay.org
+theportalwiki.com
+thereallove.kr
+therock.net.nz
+thespeeder.com
+thestandnews.com
+thetibetcenter.org
+thetibetconnection.org
+thetibetmuseum.org
+thetibetpost.com
+thetinhat.com
+thetrotskymovie.com
+thevivekspot.com
+thewgo.org
+theync.com
+thinkingtaiwan.com
+thinkwithgoogle.com
+thisav.com
+thlib.org
+thomasbernhard.org
+thongdreams.com
+threatchaos.com
+throughnightsfire.com
+thumbzilla.com
+thywords.com
+thywords.com.tw
+tiananmenduizhi.com
+tiananmenmother.org
+tiananmenuniv.com
+tiananmenuniv.net
+tiandixing.org
+tianhuayuan.com
+tianlawoffice.com
+tianti.io
+tiantibooks.org
+tianyantong.org.cn
+tianzhu.org
+tibet-envoy.eu
+tibet-foundation.org
+tibet-house-trust.co.uk
+tibet-info.net
+tibet-initiative.de
+tibet-munich.de
+tibet.a.se
+tibet.at
+tibet.ca
+tibet.com
+tibet.fr
+tibet.net
+tibet.nu
+tibet.org
+tibet.org.tw
+tibet.sk
+tibet.to
+tibet3rdpole.org
+tibetaction.net
+tibetaid.org
+tibetalk.com
+tibetan-alliance.org
+tibetan.fr
+tibetanaidproject.org
+tibetanarts.org
+tibetanbuddhistinstitute.org
+tibetancommunity.org
+tibetancommunityuk.net
+tibetanculture.org
+tibetanfeministcollective.org
+tibetanjournal.com
+tibetanlanguage.org
+tibetanliberation.org
+tibetanpaintings.com
+tibetanphotoproject.com
+tibetanpoliticalreview.org
+tibetanreview.net
+tibetansports.org
+tibetanwomen.org
+tibetanyouth.org
+tibetanyouthcongress.org
+tibetcharity.dk
+tibetcharity.in
+tibetchild.org
+tibetcity.com
+tibetcollection.com
+tibetcorps.org
+tibetexpress.net
+tibetfocus.com
+tibetfund.org
+tibetgermany.com
+tibetgermany.de
+tibethaus.com
+tibetheritagefund.org
+tibethouse.jp
+tibethouse.org
+tibethouse.us
+tibetinfonet.net
+tibetjustice.org
+tibetkomite.dk
+tibetlibre.free.fr
+tibetmuseum.org
+tibetnetwork.org
+tibetoffice.ch
+tibetoffice.com.au
+tibetoffice.eu
+tibetoffice.org
+tibetonline.com
+tibetonline.tv
+tibetoralhistory.org
+tibetpolicy.eu
+tibetrelieffund.co.uk
+tibetsites.com
+tibetsociety.com
+tibetsun.com
+tibetsupportgroup.org
+tibetswiss.ch
+tibettelegraph.com
+tibettimes.net
+tibetwrites.org
+ticket.com.tw
+tigervpn.com
+tiltbrush.com
+timdir.com
+time.com
+times.hinet.net
+timesofindia.indiatimes.com
+timsah.com
+tineye.com
+tintuc101.com
+tiny.cc
+tinychat.com
+tinypaste.com
+tipo.gov.tw
+tistory.com
+tkcs-collins.com
+tl.gd
+tma.co.jp
+tmagazine.com
+tmdfish.com
+tmi.me
+tmpp.org
+tn1.shemalez.com
+tn2.shemalez.com
+tn3.shemalez.com
+tnaflix.com
+tngrnow.com
+tngrnow.net
+tnp.org
+to-porno.com
+togetter.com
+toh.info
+tokyo-247.com
+tokyo-hot.com
+tokyo-porn-tube.com
+tokyocn.com
+tongil.or.kr
+tono-oka.jp
+tonyyan.net
+toodoc.com
+toonel.net
+top.tv
+top81.ws
+topbtc.com
+topic.youthwant.com.tw
+topnews.in
+toppornsites.com
+topshareware.com
+topsy.com
+toptip.ca
+tor.blingblingsquad.net
+tor.cn.uptodown.com
+tor.updatestar.com
+tora.to
+torcn.com
+torguard.net
+torproject.org
+torrentprivacy.com
+torrentproject.se
+torrenty.org
+torrentz.eu
+torvpn.com
+tosh.comedycentral.com
+totalvpn.com
+toutiaoabc.com
+towngain.com
+toypark.in
+toythieves.com
+toytractorshow.com
+tparents.org
+tpi.org.tw
+tracfone.com
+traffichaus.com
+trans.wenweipo.com
+transparency.org
+treemall.com.tw
+trendsmap.com
+trialofccp.org
+trickip.net
+trickip.org
+trimondi.de
+trouw.nl
+trt.net.tr
+trtc.com.tw
+truebuddha-md.org
+trulyergonomic.com
+truth101.co.tv
+truthontour.org
+truveo.com
+tryheart.jp
+tsctv.net
+tsdr.uspto.gov
+tsemtulku.com
+tsquare.tv
+tsu.org.tw
+tsunagarumon.com
+tt-rss.org
+tt1069.com
+tttan.com
+ttvnw.net
+tu8964.com
+tubaholic.com
+tube.com
+tube8.com
+tube911.com
+tubecup.com
+tubegals.com
+tubeislam.com
+tubepornclassic.com
+tubestack.com
+tubewolf.com
+tui.orzdream.com
+tuibeitu.net
+tuidang.net
+tuidang.org
+tuidang.se
+tuitwit.com
+tumblr.com
+tumutanzi.com
+tumview.com
+tunein.com
+tunnelbear.com
+tunnelr.com
+tuo8.blue
+tuo8.cc
+tuo8.club
+tuo8.fit
+tuo8.hk
+tuo8.in
+tuo8.ninja
+tuo8.org
+tuo8.pw
+tuo8.red
+tuo8.space
+turansam.org
+turbobit.net
+turbohide.com
+turbotwitter.com
+turntable.fm
+tushycash.com
+tuvpn.com
+tuzaijidi.com
+tv.com
+tvants.com
+tvboxnow.com
+tvider.com
+tvmost.com.hk
+tvplayvideos.com
+tvunetworks.com
+tw-blog.com
+tw-npo.org
+tw.answers.yahoo.com
+tw.bid.yahoo.com
+tw.gigacircle.com
+tw.hao123.com
+tw.jiepang.com
+tw.knowledge.yahoo.com
+tw.mall.yahoo.com
+tw.mobi.yahoo.com
+tw.money.yahoo.com
+tw.myblog.yahoo.com
+tw.news.yahoo.com
+tw.streetvoice.com
+tw.tomonews.net
+tw.voa.mobi
+tw.yahoo.com
+tw01.org
+twaitter.com
+twapperkeeper.com
+twaud.io
+twavi.com
+twbbs.net.tw
+twbbs.org
+twbbs.tw
+twblogger.com
+tweepguide.com
+tweeplike.me
+tweepmag.com
+tweepml.org
+tweetbackup.com
+tweetboard.com
+tweetboner.biz
+tweetcs.com
+tweetdeck.com
+tweetedtimes.com
+tweetmylast.fm
+tweetphoto.com
+tweetrans.com
+tweetree.com
+tweets.seraph.me
+tweettunnel.com
+tweetwally.com
+tweetymail.com
+tweez.net
+twelve.today
+twerkingbutt.com
+twftp.org
+twgreatdaily.com
+twibase.com
+twibble.de
+twibbon.com
+twibs.com
+twicountry.org
+twicsy.com
+twiends.com
+twifan.com
+twiffo.com
+twiggit.org
+twilightsex.com
+twilog.org
+twimbow.com
+twimg.com
+twimg.edgesuite.net
+twindexx.com
+twip.me
+twipple.jp
+twishort.com
+twistar.cc
+twister.net.co
+twisterio.com
+twisternow.com
+twistory.net
+twit2d.com
+twitbrowser.net
+twitcause.com
+twitch.tv
+twitchcdn.net
+twitgether.com
+twitgoo.com
+twitiq.com
+twitlonger.com
+twitmania.com
+twitoaster.com
+twitonmsn.com
+twitpic.com
+twitstat.com
+twittbot.net
+twitter.com
+twitter.jp
+twitter4j.org
+twittercounter.com
+twitterfeed.com
+twittergadget.com
+twitterkr.com
+twittermail.com
+twitterrific.com
+twittertim.es
+twitthat.com
+twitturk.com
+twitturly.com
+twitvid.com
+twitzap.com
+twiyia.com
+twnorth.org.tw
+twskype.com
+twstar.net
+twt.tl
+twtkr.com
+twtr2src.ogaoga.org
+twtrland.com
+twttr.com
+twurl.nl
+twyac.org
+txxx.com
+tycool.com
+typepad.com
+u9un.com
+ub0.cc
+ubddns.org
+uberproxy.net
+uc-japan.org
+ucdc1998.org
+uchicago.edu
+uderzo.it
+udn.com
+udn.com.tw
+udnbkk.com
+uforadio.com.tw
+ufreevpn.com
+ug.m.wikipedia.org
+ugo.com
+uhdwallpapers.org
+uhrp.org
+uighur.narod.ru
+uighur.nl
+uighurbiz.net
+ukcdp.co.uk
+ukliferadio.co.uk
+uku.im
+ulike.net
+ulop.net
+ultravpn.fr
+ultraxs.com
+umich.edu
+unblock-us.com
+unblock.cn.com
+unblockdmm.com
+unblocker.yt
+unblocksit.es
+uncyclomedia.org
+uncyclopedia.hk
+uncyclopedia.tw
+underwoodammo.com
+unholyknight.com
+uni.cc
+unification.net
+unification.org.tw
+unirule.cloud
+unitedsocialpress.com
+unix100.com
+unknownspace.org
+unodedos.com
+unpo.org
+unseen.is
+untraceable.us
+uocn.org
+upcoming.yahoo.com
+updates.tdesktop.com
+upholdjustice.org
+upload4u.info
+uploaded.net
+uploaded.to
+uploadstation.com
+upmedia.mg
+upornia.com
+uproxy.org
+upwill.org
+ur7s.com
+uraban.me
+urbansurvival.com
+urchin.com
+urlborg.com
+urlparser.com
+us.to
+usacn.com
+usaip.eu
+userapi.nytlog.com
+users.skynet.be
+usfk.mil
+ushuarencity.echainhost.com
+usinfo.state.gov
+usma.edu
+usmc.mil
+usmgtcg.ning.com
+usno.navy.mil
+usocctn.com
+ustream.tv
+usunitednews.com
+usus.cc
+utopianpal.com
+uu-gg.com
+uvwxyz.xyz
+uwants.com
+uwants.net
+uyghur-j.org
+uyghur.co.uk
+uyghuramerican.org
+uyghurcanadiansociety.org
+uyghurcongress.org
+uyghurensemble.co.uk
+uyghurpen.org
+uyghurpress.com
+uyghurstudies.org
+uygur.fc2web.com
+uygur.org
+uymaarip.com
+v2ex.com
+v2ray.com
+van001.com
+van698.com
+vanemu.cn
+vanilla-jp.com
+vanpeople.com
+vansky.com
+vatn.org
+vcf-online.org
+vcfbuilder.org
+vds.rightster.com
+vegas.williamhill.com
+vegasred.com
+velkaepocha.sk
+venbbs.com
+venchina.com
+venetianmacao.com
+ventureswell.com
+veoh.com
+vermonttibet.org
+versavpn.com
+verybs.com
+vevo.com
+vft.com.tw
+viber.com
+vica.info
+victimsofcommunism.org
+vid.me
+vidble.com
+video.aol.ca
+video.aol.co.uk
+video.aol.com
+video.ap.org
+video.fdbox.com
+video.foxbusiness.com
+video.pbs.org
+video.yahoo.com
+videobam.com
+videodetective.com
+videomega.tv
+videomo.com
+videopediaworld.com
+videopress.com
+vidinfo.org
+vietdaikynguyen.com
+vijayatemple.org
+vimeo.com
+vimperator.org
+vincnd.com
+vine.co
+vinniev.com
+vip-enterprise.com
+virtualrealporn.com
+visibletweets.com
+vital247.org
+viu.com
+viu.tv
+vivahentai4u.net
+vivatube.com
+vivthomas.com
+vizvaz.com
+vjav.com
+vjmedia.com.hk
+vllcs.org
+vlog.xuite.net
+vmixcore.com
+vmpsoft.com
+vn.hao123.com
+vnet.link
+voa-11.akacast.akamaistream.net
+voacantonese.com
+voachinese.com
+voachineseblog.com
+voagd.com
+voanews.com
+voatibetan.com
+voatibetanenglish.com
+vocativ.com
+vocn.tv
+vod-abematv.akamaized.net
+vod.wwe.com
+vot.org
+vovo2000.com
+voxer.com
+voy.com
+vpn.ac
+vpn.cjb.net
+vpn.cmu.edu
+vpn.sv.cmu.edu
+vpn4all.com
+vpnaccount.org
+vpnaccounts.com
+vpnbook.com
+vpncomparison.org
+vpncoupons.com
+vpncup.com
+vpndada.com
+vpnfan.com
+vpnfire.com
+vpnfires.biz
+vpnforgame.net
+vpngate.jp
+vpngate.net
+vpngratis.net
+vpnhq.com
+vpninja.net
+vpnintouch.com
+vpnintouch.net
+vpnjack.com
+vpnmaster.com
+vpnmentor.com
+vpnpick.com
+vpnpop.com
+vpnpronet.com
+vpnreactor.com
+vpnreviewz.com
+vpnsecure.me
+vpnshazam.com
+vpnshieldapp.com
+vpnsp.com
+vpntraffic.com
+vpntunnel.com
+vpnuk.info
+vpnunlimitedapp.com
+vpnvip.com
+vpnworldwide.com
+vporn.com
+vpser.net
+vraiesagesse.net
+vrmtr.com
+vrsmash.com
+vtunnel.com
+vuku.cc
+w.idaiwan.com
+w3schools.com
+waffle1999.com
+wahas.com
+waigaobu.com
+waikeung.org
+wailaike.net
+waiwaier.com
+wallmama.com
+wallornot.org
+wallpapercasa.com
+wallproxy.com
+waltermartin.com
+waltermartin.org
+wanderinghorse.net
+wangafu.net
+wangjinbo.org
+wanglixiong.com
+wango.org
+wangruoshui.net
+want-daily.com
+wanz-factory.com
+wapedia.mobi
+warbler.iconfactory.net
+waselpro.com
+washeng.net
+watch8x.com
+watchinese.com
+watchmygf.net
+wattpad.com
+wav.tv
+waveprotocol.org
+waymo.com
+wda.gov.tw
+wdf5.com
+wearehairy.com
+wearn.com
+web.dev
+web2project.net
+webbang.net
+webevader.org
+webfreer.com
+webjb.org
+weblagu.com
+webmproject.org
+webrtc.org
+webrush.net
+webs-tv.net
+website.informer.com
+websitepulse.com
+webwarper.net
+webworkerdaily.com
+weekmag.info
+wefightcensorship.org
+wefong.com
+wego.here.com
+weiboleak.com
+weiboscope.jmsc.hku.hk
+weihuo.org
+weijingsheng.org
+weiming.info
+weiquanwang.org
+weisuo.ws
+welovecock.com
+wemigrate.org
+wengewang.com
+wengewang.org
+wenhui.ch
+wenxuecity.com
+wenyunchao.com
+wenzhao.ca
+westca.com
+westernshugdensociety.org
+westernwolves.com
+westkit.net
+westpoint.edu
+wetplace.com
+wetpussygames.com
+wexiaobo.org
+wezhiyong.org
+wezone.net
+wforum.com
+wha.la
+whatblocked.com
+whatbrowser.org
+whatsapp.com
+whatsapp.net
+whatsonweibo.com
+wheatseeds.org
+wheelockslatin.com
+whereiswerner.com
+wheretowatch.com
+whippedass.com
+whitebear.freebearblog.org
+whodns.xyz
+whoer.net
+whotalking.com
+whylover.com
+whyx.org
+widevine.com
+wikaba.com
+wiki.cnitter.com
+wiki.esu.im
+wiki.gamerp.jp
+wiki.jqueryui.com
+wiki.keso.cn
+wiki.moegirl.org
+wiki.oauth.net
+wiki.phonegap.com
+wikileaks-forum.com
+wikileaks.ch
+wikileaks.com
+wikileaks.de
+wikileaks.eu
+wikileaks.lu
+wikileaks.org
+wikileaks.pl
+wikilivres.info
+wikimapia.org
+wikiwiki.jp
+wildammo.com
+williamhill.com
+willw.net
+windowsphoneme.com
+windscribe.com
+wingamestore.com
+wingy.site
+winning11.com
+winwhispers.info
+wire.com
+wiredbytes.com
+wiredpen.com
+wisdompubs.org
+wisevid.com
+withgoogle.com
+withyoutube.com
+witnessleeteaching.com
+witopia.net
+wizcrafts.net
+wjbk.org
+wlcnew.jigsy.com
+wlx.sowiki.net
+wn.com
+wnacg.com
+wnacg.org
+wo.tc
+wo3ttt.wordpress.com
+woeser.com
+woesermiddle-way.net
+wokar.org
+wolfax.com
+woolyss.com
+woopie.jp
+woopie.tv
+wordpress.com
+workatruna.com
+workerdemo.org.hk
+workerempowerment.org
+workersthebig.net
+worldcat.org
+worldjournal.com
+worldvpn.net
+wow-life.net
+wow.com
+wowgirls.com
+wowlegacy.ml
+wowporn.com
+wowrk.com
+woxinghuiguo.com
+woyaolian.org
+wozy.in
+wp.com
+wpoforum.com
+wqyd.org
+wrchina.org
+wretch.cc
+writer.zoho.com
+wsgzao.github.io
+wsj.com
+wsj.net
+wsjhk.com
+wtbn.org
+wtfpeople.com
+wuerkaixi.com
+wufafangwen.com
+wufi.org.tw
+wuguoguang.com
+wujie.net
+wujieliulan.com
+wukangrui.net
+wuu.wikipedia.org
+wuw.red
+wuyanblog.com
+wwitv.com
+www.abclite.net
+www.ajsands.com
+www.americorps.gov
+www.antd.org
+www.aolnews.com
+www.businessinsider.com.au
+www.citizenlab.org
+www.cmoinc.org
+www.cool18.com
+www.dmm.com
+www.dwheeler.com
+www.eastturkistan.net
+www.ftchinese.com
+www.gmiddle.com
+www.gmiddle.net
+www.hustlercash.com
+www.idlcoyote.com
+www.imdb.com
+www.kindleren.com
+www.klip.me
+www.lamenhu.com
+www.lib.virginia.edu
+www.linksalpha.com
+www.m-sport.co.uk
+www.metro.taipei
+www.monlamit.org
+www.moztw.org
+www.nbc.com
+www.orchidbbs.com
+www.owind.com
+www.oxid.it
+www.powerpointninja.com
+www.s4miniarchive.com
+www.sciencemag.org
+www.shadowsocks.com
+www.shwchurch.org
+www.skype.com
+www.tablesgenerator.com
+www.taiwanonline.cc
+www.taup.org.tw
+www.thechinastory.org
+www.wan-press.org
+www.wangruowang.org
+www.websnapr.com
+www.zensur.freerk.com
+www1.american.edu
+www1.biz
+www2.ohchr.org
+www2.rocketbbs.com
+wwwhost.biz
+wzyboy.im
+x-art.com
+x-berry.com
+x-wall.org
+x.company
+x1949x.com
+x24hr.com
+x365x.com
+xa.yimg.com
+xanga.com
+xbabe.com
+xbookcn.com
+xbtce.com
+xcafe.in
+xcity.jp
+xcritic.com
+xda-developers.com
+xerotica.com
+xfinity.com
+xfm.pp.ru
+xgmyd.com
+xhamster.com
+xianba.net
+xianchawang.net
+xianjian.tw
+xianqiao.net
+xiaobaiwu.com
+xiaochuncnjp.com
+xiaod.in
+xiaohexie.com
+xiaolan.me
+xiaoma.org
+xiezhua.com
+xihua.es
+xijie.wordpress.com
+xing.com
+xinhuanet.org
+xinmiao.com.hk
+xinqimeng.over-blog.com
+xinsheng.net
+xinshijue.com
+xinyubbs.net
+xiongpian.com
+xiuren.org
+xizang-zhiye.org
+xjp.cc
+xjtravelguide.com
+xkiwi.tk
+xlfmtalk.com
+xlfmwz.info
+xm.com
+xml-training-guide.com
+xmovies.com
+xn--4gq171p.com
+xn--czq75pvv1aj5c.org
+xn--i2ru8q2qg.com
+xn--ngstr-lra8j.com
+xn--oiq.cc
+xn--p8j9a0d9c9a.xn--q9jyb4c
+xnxx.com
+xpdo.net
+xpenology.com
+xpud.org
+xrentdvd.com
+xskywalker.com
+xskywalker.net
+xtube.com
+xuchao.net
+xuchao.org
+xuehua.us
+xuzhiyong.net
+xvideo.cc
+xvideos.com
+xvideos.es
+xxbbx.com
+xxlmovies.com
+xxuz.com
+xxx.com
+xxx.xxx
+xxxfuckmom.com
+xxxx.com.au
+xxxy.biz
+xxxy.info
+xxxymovies.com
+xys.dxiong.com
+xys.org
+xysblogs.org
+xyy69.com
+xyy69.info
+yahoo.com.hk
+yakbutterblues.com
+yam.com
+yam.org.tw
+yanghengjun.com
+yangjianli.com
+yasni.co.uk
+yayabay.com
+ydy.com
+yeahteentube.com
+yecl.net
+yeelou.com
+yeeyi.com
+yegle.net
+yes-news.com
+yes.xxx
+yes123.com.tw
+yesasia.com
+yesasia.com.hk
+yespornplease.com
+yeyeclub.com
+ygto.com
+yhcw.net
+yibada.com
+yibaochina.com
+yidio.com
+yilubbs.com
+yingsuoss.com
+yinlei.org
+yipub.com
+yizhihongxing.com
+yobit.net
+yobt.com
+yobt.tv
+yogichen.org
+yolasite.com
+yomiuri.co.jp
+yong.hu
+yorkbbs.ca
+youdontcare.com
+youjizz.com
+youmaker.com
+youngpornvideos.com
+youngspiration.hk
+youpai.org
+youporn.com
+youporngay.com
+your-freedom.net
+yourepeat.com
+yourlisten.com
+yourlust.com
+yourprivatevpn.com
+yourtrap.com
+yousendit.com
+youshun12.com
+youthnetradio.org
+youtu.be
+youtube-nocookie.com
+youtube.com
+youtubecn.com
+youtubeeducation.com
+youtubegaming.com
+youversion.com
+youwin.com
+youxu.info
+yt.be
+ytht.net
+ytimg.com
+ytn.co.kr
+yuanming.net
+yuanzhengtang.org
+yulghun.com
+yunchao.net
+yuntipub.com
+yuvutu.com
+yvesgeleyn.com
+ywpw.com
+yx51.net
+yyii.org
+yzzk.com
+zacebook.com
+zalmos.com
+zannel.com
+zaobao.com
+zaobao.com.sg
+zaozon.com
+zapto.org
+zattoo.com
+zb.com
+zdnet.com.tw
+zello.com
+zengjinyan.org
+zenmate.com
+zenmate.com.ru
+zeronet.io
+zeutch.com
+zfreet.com
+zgsddh.com
+zgzcjj.net
+zh-yue.wikipedia.org
+zh.bitterwinter.org
+zh.ecdm.wikia.com
+zh.m.wikipedia.org
+zh.pokerstrategy.com
+zh.pttpedia.wikia.com
+zh.uncyclopedia.wikia.com
+zh.wikinews.org
+zh.wikipedia.org
+zh.wikisource.org
+zhanbin.net
+zhangboli.net
+zhangtianliang.com
+zhanlve.org
+zhao.1984.city
+zhao.jinhai.de
+zhenghui.org
+zhengjian.org
+zhengwunet.org
+zhenlibu.info
+zhenlibu1984.com
+zhenxiang.biz
+zhinengluyou.com
+zhongguo.ca
+zhongguorenquan.org
+zhongguotese.net
+zhongmeng.org
+zhoushuguang.com
+zhreader.com
+zhuangbi.me
+zhuanxing.cn
+zhuatieba.com
+zhuichaguoji.org
+ziddu.com
+zillionk.com
+zim.vn
+zinio.com
+ziporn.com
+zippyshare.com
+zkaip.com
+zmw.cn
+zodgame.us
+zomobo.net
+zonaeuropa.com
+zonghexinwen.com
+zonghexinwen.net
+zoogvpn.com
+zootool.com
+zoozle.net
+zorrovpn.com
+zozotown.com
+zpn.im
+zspeeder.me
+zsrhao.com
+zuo.la
+zuobiao.me
+zuola.com
+zvereff.com
+zynaima.com
+zynamics.com
+zyns.com
+zyzc9.com
+zzcartoon.com
+zzcloud.me
+zzux.com
diff --git a/package/lean/dnsforwarder/files/etc/init.d/dnsforwarder b/package/lean/dnsforwarder/files/etc/init.d/dnsforwarder
new file mode 100755
index 0000000000..4b105ba302
--- /dev/null
+++ b/package/lean/dnsforwarder/files/etc/init.d/dnsforwarder
@@ -0,0 +1,251 @@
+#!/bin/sh /etc/rc.common
+
+START=60
+
+CRON_FILE=/etc/crontabs/root
+PID_PATH=/var/run/dnsforwarder
+PID_FILE=${PID_PATH}/dns.pid
+DNSFORWARDER_CONF=/tmp/dnsforwarder.conf
+
+add_cron()
+{
+	sed -i '/dnsforwarder/d' $CRON_FILE
+	echo '*/5 * * * * /etc/init.d/dnsforwarder health' >> $CRON_FILE
+	echo '0 1 * * 0 /etc/init.d/dnsforwarder makegfwlist' >> $CRON_FILE
+	crontab $CRON_FILE
+}
+
+del_cron()
+{
+	sed -i '/dnsforwarder/d' $CRON_FILE
+	/etc/init.d/cron restart
+}
+
+fixflowoffload(){
+    dns=$(uci get flowoffload.@flow[0].dns 2>/dev/null)
+    if [ $dns -eq 1 ];  then
+        uci set flowoffload.@flow[0].dns=0 && uci commit flowoffload
+        /etc/init.d/flowoffload restart
+    fi
+}
+
+makelist() {
+    [ -z "$2" ] && return
+    local i
+    local t="$1"; shift
+    for i in "$@"
+    do
+        echo "$t $i"
+    done
+}
+
+health(){
+	rm /var/log/dnsforwarder.log.* 2>/dev/null
+	local pid=$(cat ${PID_FILE} 2>/dev/null)
+	if [ -n "${pid}" -a -d /proc/$pid ]; then
+		echo "[health] process exists ${pid}"
+	else
+		echo "[health] Dnsforwarder is not running ${pid}"
+		start
+	fi
+}
+
+
+makegfwlist(){	
+	local GFW_FILE='/etc/dnsforwarder/gfw.txt'
+	local GFW_TMP_FILE='/tmp/dnsforwarder-gfw.old'
+	local TSTIME=`date '+%Y-%m-%d %H:%M:%S'`
+	touch ${GFW_TMP_FILE}
+	cat /etc/config/gfw.list 2>/dev/null > /tmp/edf.ts
+	cat /etc/dnsmasq.ssr/gfw_base.conf 2>/dev/null | awk -F '/' '{print $2}' | sed 's/^.//g' >> /tmp/edf.ts
+	cat /etc/dnsmasq.ssr/gfw_list.conf 2>/dev/null | awk -F '/' '{print $2}' | sed 's/^.//g' >> /tmp/edf.ts
+	sort /tmp/edf.ts  | uniq > /tmp/edf.ts
+	/usr/share/dnsforwarder/gfwlist.sh -i -l -o /tmp/dnsforwarder-gfw.tmp --extra-domain-file /tmp/edf.ts
+	if [ $? != 0 ]; then
+        echo 'Failed to fetch gfwlist'		
+		logger -t  Failed to fetch gfwlist
+        return 2
+    fi
+	local gfw=$(cat /tmp/dnsforwarder-gfw.tmp)
+	echo "# GenerationAt TS_BUILD_TIME" > ${GFW_TMP_FILE}.new
+	echo "protocol tcp" >> ${GFW_TMP_FILE}.new
+	echo "server 8.8.8.8,8.8.4.4,1.1.1.1,1.0.0.1,208.67.222.222,208.67.220.220,209.244.0.3,209.244.0.4,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1,199.85.126.10" >> ${GFW_TMP_FILE}.new
+	echo -e 'proxy no\n\n\n' >> ${GFW_TMP_FILE}.new
+	echo "${gfw}" >> ${GFW_TMP_FILE}.new
+	if [ "`cat ${GFW_TMP_FILE}.new | md5sum`" == "`cat ${GFW_TMP_FILE} | md5sum`" ]; then
+		printf "[\e[32m%s\e[0m]\n" "hold"
+	else
+		cp ${GFW_TMP_FILE}.new ${GFW_TMP_FILE}
+		cp ${GFW_TMP_FILE} ${GFW_FILE}
+		sed -i "s/TS_BUILD_TIME/${TSTIME}/g" ${GFW_FILE}
+		printf "[\e[33m%s\e[0m]" "PID"
+		restart		
+	fi
+}
+
+makeconfig () {
+    config_load dnsforwarder
+
+    local log=$(uci get dnsforwarder.@config[0].log 2>/dev/null)
+    local log_size=$(uci get dnsforwarder.@config[0].log_size 2>/dev/null)
+	
+	local gfw=$(uci get dnsforwarder.@config[0].gfw 2>/dev/null)
+
+	local udp_local=$(uci -d ',' get dnsforwarder.@config[0].udp_local 2>/dev/null)
+	local udp_local_list=$(uci get dnsforwarder.@config[0].udp_local 2>/dev/null)
+	local tcp_group=$(uci get dnsforwarder.@config[0].tcp_group 2>/dev/null)
+	local udp_group=$(uci get dnsforwarder.@config[0].udp_group 2>/dev/null)
+	local group_file=$(uci get dnsforwarder.@config[0].group_file 2>/dev/null)
+	local block_ip=$(uci -d ',' get dnsforwarder.@config[0].block_ip 2>/dev/null)
+	local ip_substituting=$(uci -d ',' get dnsforwarder.@config[0].ip_substituting 2>/dev/null)
+	local block_negative_resp=$(uci get dnsforwarder.@config[0].block_negative_resp 2>/dev/null)
+	local append_host=$(uci get dnsforwarder.@config[0].append_host 2>/dev/null)
+	local block_ipv6=$(uci get dnsforwarder.@config[0].block_ipv6 2>/dev/null)
+
+	local cache=$(uci get dnsforwarder.@config[0].cache 2>/dev/null)
+	local cache_size=$(uci get dnsforwarder.@config[0].cache_size 2>/dev/null)
+	local cache_ignore=$(uci get dnsforwarder.@config[0].cache_ignore 2>/dev/null)
+	local cache_control=$(uci get dnsforwarder.@config[0].cache_control 2>/dev/null)	
+	
+	local domain_statistic=$(uci get dnsforwarder.@config[0].domain_statistic 2>/dev/null)
+	local udp_local_addr=$(uci get dnsforwarder.@arguments[0].addr 2>/dev/null)
+	udp_local_addr=${udp_local_addr/:/#}
+
+    echo "LogOn ${log}" > $DNSFORWARDER_CONF
+    if [ $log = "true" ]; then
+		rm /var/log/dnsforwarder.log.* 2>/dev/null
+		echo '' > /var/log/dnsforwarder.log
+        echo "LogFileThresholdLength ${log_size}" >> $DNSFORWARDER_CONF
+        echo "LogFileFolder /var/log" >> $DNSFORWARDER_CONF
+    fi
+	
+    [ -n "$udp_local" ] && echo "UDPLocal ${udp_local}" >> $DNSFORWARDER_CONF
+	[ -n "$udp_local_addr" ] && eval "makelist 'server=' $udp_local_addr" > /tmp/dnsmasq.dnsforwarder.conf
+	sed -i "s/ //g" /tmp/dnsmasq.dnsforwarder.conf
+
+    eval "makelist 'TCPGroup' $tcp_group" >> $DNSFORWARDER_CONF
+    eval "makelist 'UDPGroup' $udp_group" >> $DNSFORWARDER_CONF
+    eval "makelist 'GroupFile' $group_file" >> $DNSFORWARDER_CONF
+	
+	if [ $gfw = "true" ]; then
+        echo 'GroupFile /etc/dnsforwarder/gfw.txt' >> $DNSFORWARDER_CONF
+    fi
+
+    echo "BlockIP  ${block_ip}" >> $DNSFORWARDER_CONF
+    eval "makelist 'IPSubstituting' $ip_substituting" >> $DNSFORWARDER_CONF
+    echo "BlockNegativeResponse ${block_negative_resp}" >> $DNSFORWARDER_CONF
+    eval "makelist 'AppendHosts' $append_host" >> $DNSFORWARDER_CONF
+    echo "BlockIpv6WhenIpv4Exists ${block_ipv6}" >> $DNSFORWARDER_CONF
+    
+    echo "UseCache ${cache}" >> $DNSFORWARDER_CONF
+    if [ $cache = "true" ]; then
+        echo "CacheSize ${cache_size}" >> $DNSFORWARDER_CONF
+        echo "MemoryCache false" >> $DNSFORWARDER_CONF
+        echo "CacheFile /tmp/dnsforwarder.cache" >> $DNSFORWARDER_CONF
+        echo "IgnoreTTL ${cache_ignore}" >> $DNSFORWARDER_CONF
+        eval "makelist 'CacheControl' $cache_control" >> $DNSFORWARDER_CONF        
+        echo "ReloadCache true" >> $DNSFORWARDER_CONF
+        echo "OverwriteCache true" >> $DNSFORWARDER_CONF
+    fi
+	echo "DomainStatistic ${domain_statistic}" >> $DNSFORWARDER_CONF
+	if [ $domain_statistic = "true" ]; then
+		touch /tmp/dnsforwarder-statistic.html
+		mkdir -p /root/.dnsforwarder
+		rm /root/.dnsforwarder/statistic.html 2 > /dev/null
+		ln -s /tmp/dnsforwarder-statistic.html /root/.dnsforwarder/statistic.html
+		local domain_statistic_tag='<!-- TS DNSFORWARDER -->'
+		echo "DomainStatisticTempletFile /tmp/dnsforwarder-statistic.html" >> $DNSFORWARDER_CONF
+		echo "StatisticInsertionPosition ${domain_statistic_tag}" >> $DNSFORWARDER_CONF
+		echo "StatisticUpdateInterval 60" >> $DNSFORWARDER_CONF
+		echo "${domain_statistic_tag}"  > /tmp/dnsforwarder-statistic.html
+    fi
+}
+
+start()
+{
+    echo luci for dnsforwarder
+    local vt_enabled=$(uci get dnsforwarder.@arguments[0].enabled 2>/dev/null)
+    if [ $vt_enabled = 0 ]; then
+        echo dnsforwarder is not enabled
+        exit
+    fi 	
+    makeconfig
+	fixflowoffload	
+    dnsforwarder -f $DNSFORWARDER_CONF -d
+	sleep 10
+    mkdir -p ${PID_PATH}
+    pid=$(ps | awk '$5 ~ /\[dnsforwarder\]/ {print $1}')
+    echo "dnsforwarder running pid is ${pid}"
+    logger -t The pid of dnsforwarder is ${PID_FILE} ${pid}
+    echo ${pid} > ${PID_FILE}
+    /etc/init.d/dnsforwarder enable
+    local dnsmasq=$(uci get dnsforwarder.@arguments[0].dnsmasq 2>/dev/null)
+    local addr=$(uci get dnsforwarder.@arguments[0].addr 2>/dev/null)
+    [ -n "${addr}" ] && addr=${addr/:/#}
+	
+	if [ "${dnsmasq}" = "1" ]; then
+        uci delete dhcp.@dnsmasq[0].server 2>/dev/null
+        # uci add_list dhcp.@dnsmasq[0].server=$addr
+        uci delete dhcp.@dnsmasq[0].resolvfile 2>/dev/null
+        uci set dhcp.@dnsmasq[0].noresolv=1
+		uci set dhcp.@dnsmasq[0].serversfile=/tmp/dnsmasq.dnsforwarder.conf
+        uci commit dhcp        
+        /etc/init.d/dnsmasq restart
+    fi
+	add_cron
+}
+
+stop()
+{
+	del_cron
+	logger -t stopping dnsforwarder
+    local addr=$(uci get dnsforwarder.@arguments[0].addr 2>/dev/null)
+    addr=${addr/:/#}
+    uci del_list dhcp.@dnsmasq[0].server=$addr 2>/dev/null
+    uci set dhcp.@dnsmasq[0].resolvfile=/tmp/resolv.conf.auto 2>/dev/null
+    uci delete dhcp.@dnsmasq[0].noresolv 2>/dev/null
+	uci delete dhcp.@dnsmasq[0].serversfile 2>/dev/null
+    uci commit dhcp	
+    /etc/init.d/dnsmasq restart
+    [ -e ${PID_FILE} ] && {
+        pid=$(cat ${PID_FILE})
+        logger -t killing dnsforwarder pid ${pid}
+        echo killing dnsforwarder pid ${pid}
+        kill ${pid}
+        rm -f ${PID_FILE}
+    } || {
+        logger -t Cannot find dnsforwarder pid file
+    }
+}
+
+restart()
+{
+    pid=$(cat ${PID_FILE} 2>/dev/null)
+    echo Dnsforwarder pid file is ${pid}
+    [ -n "$pid" ] && {
+        echo stopping pid ${pid}
+        logger -t There is dnsforwarder pid ${pid}
+        stop
+    } || {
+        logger -t Dnsforwarder is not running	
+    }
+    sleep 7
+    local vt_enabled=$(uci get dnsforwarder.@arguments[0].enabled 2>/dev/null)
+    echo dnsforwarder status is ${vt_enabled} 
+    logger -t Dnsforwarder is initializing enabled is ${vt_enabled}
+    if [ ${vt_enabled} = 1 ]; then
+        [ -n "$pid" ] && {
+            logger -t There is dnsforwarder pid ${pid}
+            stop
+        } || {
+            logger -t Dnsforwarder is not running	
+        }
+
+        logger -t Restarting dnsforwarder
+        start
+    else
+        /etc/init.d/dnsforwarder disable
+    fi
+}
+
+EXTRA_COMMANDS="makeconfig makegfwlist health"
diff --git a/package/lean/dnsforwarder/files/usr/share/dnsforwarder/gfwlist.sh b/package/lean/dnsforwarder/files/usr/share/dnsforwarder/gfwlist.sh
new file mode 100755
index 0000000000..6b43fda8c7
--- /dev/null
+++ b/package/lean/dnsforwarder/files/usr/share/dnsforwarder/gfwlist.sh
@@ -0,0 +1,313 @@
+#/bin/sh
+
+# Name:        gfwlist2dnsmasq.sh
+# Desription:  A shell script which convert gfwlist into dnsmasq rules.
+# Version:     0.8.0 (2017.12.25)
+# Author:      Cokebar Chi
+# Website:     https://github.com/cokebar
+
+_green() {
+    printf '\033[1;31;32m'
+    printf -- "%b" "$1"
+    printf '\033[0m'
+}
+
+_red() {
+    printf '\033[1;31;31m'
+    printf -- "%b" "$1"
+    printf '\033[0m'
+}
+
+_yellow() {
+    printf '\033[1;31;33m'
+    printf -- "%b" "$1"
+    printf '\033[0m'
+}
+
+usage() {
+    cat <<-EOF
+
+Name:        gfwlist2dnsmasq.sh
+Desription:  A shell script which convert gfwlist into dnsmasq rules.
+Version:     0.8.0 (2017.12.25)
+Author:      Cokebar Chi
+Website:     https://github.com/cokebar
+
+Usage: sh gfwlist2dnsmasq.sh [options] -o FILE
+Valid options are:
+    -d, --dns <dns_ip>
+                DNS IP address for the GfwList Domains (Default: 127.0.0.1)
+    -p, --port <dns_port>
+                DNS Port for the GfwList Domains (Default: 5353)
+    -s, --ipset <ipset_name>
+                Ipset name for the GfwList domains
+                (If not given, ipset rules will not be generated.)
+    -o, --output <FILE>
+                /path/to/output_filename
+    -i, --insecure
+                Force bypass certificate validation (insecure)
+    -l, --domain-list
+                Convert Gfwlist into domain list instead of dnsmasq rules
+                (If this option is set, DNS IP/Port & ipset are not needed)
+        --exclude-domain-file <FILE>
+                Delete specific domains in the result from a domain list text file
+                Please put one domain per line
+        --extra-domain-file <FILE>
+                Include extra domains to the result from a domain list text file
+                This file will be processed after the exclude-domain-file
+                Please put one domain per line
+    -h, --help
+                Usage
+EOF
+    exit $1
+}
+
+clean_and_exit(){
+    # Clean up temp files
+    printf 'Cleaning up... '
+    rm -rf $TMP_DIR
+    _green 'Done\n\n'
+    [ $1 -eq 0 ] && _green 'Job Finished.\n\n' || _red 'Exit with Error code '$1'.\n'
+    exit $1
+}
+
+check_depends(){
+    which sed base64 curl >/dev/null
+    if [ $? != 0 ]; then
+        _red 'Error: Missing Dependency.\nPlease check whether you have the following binaries on you system:\nwhich, sed, base64, curl.\n'
+        exit 3
+    fi
+
+    SYS_KERNEL=`uname -s`
+    if [ $SYS_KERNEL = "Darwin"  -o $SYS_KERNEL = "FreeBSD" ]; then
+        BASE64_DECODE='base64 -D'
+        SED_ERES='sed -E'
+    else
+        BASE64_DECODE='base64 -d'
+        SED_ERES='sed -r'
+    fi
+}
+
+get_args(){
+    OUT_TYPE='DNSMASQ_RULES'
+    DNS_IP='127.0.0.1'
+    DNS_PORT='5353'
+    IPSET_NAME=''
+    FILE_FULLPATH=''
+    CURL_EXTARG=''
+    WITH_IPSET=0
+    EXTRA_DOMAIN_FILE=''
+    EXCLUDE_DOMAIN_FILE=''
+    IPV4_PATTERN='^((2[0-4][0-9]|25[0-5]|[01]?[0-9][0-9]?)\.){3}(2[0-4][0-9]|25[0-5]|[01]?[0-9][0-9]?)$'
+    IPV6_PATTERN='^((([0-9A-Fa-f]{1,4}:){7}([0-9A-Fa-f]{1,4}|:))|(([0-9A-Fa-f]{1,4}:){6}(:[0-9A-Fa-f]{1,4}|((25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])(\.(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])){3})|:))|(([0-9A-Fa-f]{1,4}:){5}(((:[0-9A-Fa-f]{1,4}){1,2})|:((25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])(\.(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])){3})|:))|(([0-9A-Fa-f]{1,4}:){4}(((:[0-9A-Fa-f]{1,4}){1,3})|((:[0-9A-Fa-f]{1,4})?:((25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])(\.(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])){3}))|:))|(([0-9A-Fa-f]{1,4}:){3}(((:[0-9A-Fa-f]{1,4}){1,4})|((:[0-9A-Fa-f]{1,4}){0,2}:((25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])(\.(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])){3}))|:))|(([0-9A-Fa-f]{1,4}:){2}(((:[0-9A-Fa-f]{1,4}){1,5})|((:[0-9A-Fa-f]{1,4}){0,3}:((25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])(\.(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])){3}))|:))|(([0-9A-Fa-f]{1,4}:){1}(((:[0-9A-Fa-f]{1,4}){1,6})|((:[0-9A-Fa-f]{1,4}){0,4}:((25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])(\.(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])){3}))|:))|(:(((:[0-9A-Fa-f]{1,4}){1,7})|((:[0-9A-Fa-f]{1,4}){0,5}:((25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])(\.(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])){3}))|:)))(%.+)?$'
+
+    while [ ${#} -gt 0 ]; do
+        case "${1}" in
+            --help | -h)
+                usage 0
+                ;;
+            --domain-list | -l)
+                OUT_TYPE='DOMAIN_LIST'
+                ;;
+            --insecure | -i)
+                CURL_EXTARG='--insecure'
+                ;;
+            --dns | -d)
+                DNS_IP="$2"
+                shift
+                ;;
+            --port | -p)
+                DNS_PORT="$2"
+                shift
+                ;;
+            --ipset | -s)
+                IPSET_NAME="$2"
+                shift
+                ;;
+            --output | -o)
+                OUT_FILE="$2"
+                shift
+                ;;
+            --extra-domain-file)
+                EXTRA_DOMAIN_FILE="$2"
+                shift
+                ;;
+           --exclude-domain-file)
+                EXCLUDE_DOMAIN_FILE="$2"
+                shift
+                ;;
+            *)
+                _red "Invalid argument: $1"
+                usage 1
+                ;;
+        esac
+        shift 1
+    done
+
+    # Check path & file name
+    if [ -z $OUT_FILE ]; then
+        _red 'Error: Please specify the path to the output file(using -o/--output argument).\n'
+        exit 1
+    else
+        if [ -z ${OUT_FILE##*/} ]; then
+            _red 'Error: '$OUT_FILE' is a path, not a file.\n'
+            exit 1
+        else
+            if [ ${OUT_FILE}a != ${OUT_FILE%/*}a ] && [ ! -d ${OUT_FILE%/*} ]; then
+                _red 'Error: Folder do not exist: '${OUT_FILE%/*}'\n'
+                exit 1
+            fi
+        fi
+    fi
+
+    if [ $OUT_TYPE = 'DNSMASQ_RULES' ]; then
+        # Check DNS IP
+        IPV4_TEST=$(echo $DNS_IP | grep -E $IPV4_PATTERN)
+        IPV6_TEST=$(echo $DNS_IP | grep -E $IPV6_PATTERN)
+        if [ "$IPV4_TEST" != "$DNS_IP" -a "$IPV6_TEST" != "$DNS_IP" ]; then
+            _red 'Error: Please enter a valid DNS server IP address.\n'
+            exit 1
+        fi
+
+        # Check DNS port
+        if [ $DNS_PORT -lt 1 -o $DNS_PORT -gt 65535 ]; then
+            _red 'Error: Please enter a valid DNS server port.\n'
+            exit 1
+        fi
+
+        # Check ipset name
+        if [ -z $IPSET_NAME ]; then
+            WITH_IPSET=0
+        else
+            IPSET_TEST=$(echo $IPSET_NAME | grep -E '^\w+$')
+            if [ "$IPSET_TEST" != "$IPSET_NAME" ]; then
+                _red 'Error: Please enter a valid IP set name.\n'
+                exit 1
+            else
+                WITH_IPSET=1
+            fi
+        fi
+    fi
+
+    if [ ! -z $EXTRA_DOMAIN_FILE ] && [ ! -f $EXTRA_DOMAIN_FILE ]; then
+        _yellow 'WARNING:\nExtra domain file does not exist, ignored.\n\n'
+        EXTRA_DOMAIN_FILE=''
+    fi
+
+    if [ ! -z $EXCLUDE_DOMAIN_FILE ] && [ ! -f $EXCLUDE_DOMAIN_FILE ]; then
+        _yellow 'WARNING:\nExclude domain file does not exist, ignored.\n\n'
+        EXCLUDE_DOMAIN_FILE=''
+    fi
+}
+
+
+
+process(){
+    # Set Global Var
+    BASE_URL='https://github.com/gfwlist/gfwlist/raw/master/gfwlist.txt'
+    TMP_DIR=`mktemp -d /tmp/gfwlist2dnsmasq.XXXXXX`
+    BASE64_FILE="$TMP_DIR/base64.txt"
+    GFWLIST_FILE="$TMP_DIR/gfwlist.txt"
+    DOMAIN_TEMP_FILE="$TMP_DIR/gfwlist2domain.tmp"
+    DOMAIN_FILE="$TMP_DIR/gfwlist2domain.txt"
+    CONF_TMP_FILE="$TMP_DIR/gfwlist.conf.tmp"
+    OUT_TMP_FILE="$TMP_DIR/gfwlist.out.tmp"
+
+    # Fetch GfwList and decode it into plain text
+    printf 'Fetching GfwList... '
+    local tscurl='curl -L --connect-timeout 5 -m 300 --retry 3 --retry-delay 1'
+    $tscurl $CURL_EXTARG -o$BASE64_FILE $BASE_URL \
+    || $tscurl $CURL_EXTARG -o$BASE64_FILE https://gitlab.com/gfwlist/gfwlist/raw/master/gfwlist.txt \
+    || $tscurl $CURL_EXTARG -o$BASE64_FILE https://git.tuxfamily.org/gfwlist/gfwlist.git/plain/gfwlist.txt \
+    || $tscurl $CURL_EXTARG -o$BASE64_FILE https://pagure.io/gfwlist/raw/master/f/gfwlist.txt \
+    || $tscurl $CURL_EXTARG -o$BASE64_FILE http://repo.or.cz/gfwlist.git/blob_plain/HEAD:/gfwlist.txt \
+    || $tscurl $CURL_EXTARG -o$BASE64_FILE https://bitbucket.org/gfwlist/gfwlist/raw/HEAD/gfwlist.txt \
+    || $tscurl $CURL_EXTARG -o$BASE64_FILE $BASE_URL
+    if [ $? != 0 ]; then
+        _red '\nFailed to fetch gfwlist.txt. Please check your Internet connection.\n'
+        clean_and_exit 2
+    fi
+    $BASE64_DECODE $BASE64_FILE > $GFWLIST_FILE || ( _red 'Failed to decode gfwlist.txt. Quit.\n'; clean_and_exit 2 )
+    _green 'Done.\n\n'
+
+    # Convert
+    IGNORE_PATTERN='^\!|\[|^@@|(https?://){0,1}[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+'
+    HEAD_FILTER_PATTERN='s#^(\|\|?)?(https?://)?##g'
+    TAIL_FILTER_PATTERN='s#/.*$|%2F.*$##g'
+    DOMAIN_PATTERN='([a-zA-Z0-9][-a-zA-Z0-9]*(\.[a-zA-Z0-9][-a-zA-Z0-9]*)+)'
+    HANDLE_WILDCARD_PATTERN='s#^(([a-zA-Z0-9]*\*[-a-zA-Z0-9]*)?(\.))?([a-zA-Z0-9][-a-zA-Z0-9]*(\.[a-zA-Z0-9][-a-zA-Z0-9]*)+)(\*)?#\4#g'
+
+    printf 'Converting GfwList to ' && _green $OUT_TYPE && printf ' ...\n' 
+    _yellow '\nWARNING:\nThe following lines in GfwList contain regex, and might be ignored:\n\n'
+    cat $GFWLIST_FILE | grep -n '^/.*$'
+    _yellow "\nThis script will try to convert some of the regex rules. But you should know this may not be a equivalent conversion.\nIf there's regex rules which this script do not deal with, you should add the domain manually to the list.\n\n"
+    grep -vE $IGNORE_PATTERN $GFWLIST_FILE | $SED_ERES $HEAD_FILTER_PATTERN | $SED_ERES $TAIL_FILTER_PATTERN | grep -E $DOMAIN_PATTERN | $SED_ERES $HANDLE_WILDCARD_PATTERN > $DOMAIN_TEMP_FILE
+
+    printf 'google.com\ngoogle.ad\ngoogle.ae\ngoogle.com.af\ngoogle.com.ag\ngoogle.com.ai\ngoogle.al\ngoogle.am\ngoogle.co.ao\ngoogle.com.ar\ngoogle.as\ngoogle.at\ngoogle.com.au\ngoogle.az\ngoogle.ba\ngoogle.com.bd\ngoogle.be\ngoogle.bf\ngoogle.bg\ngoogle.com.bh\ngoogle.bi\ngoogle.bj\ngoogle.com.bn\ngoogle.com.bo\ngoogle.com.br\ngoogle.bs\ngoogle.bt\ngoogle.co.bw\ngoogle.by\ngoogle.com.bz\ngoogle.ca\ngoogle.cd\ngoogle.cf\ngoogle.cg\ngoogle.ch\ngoogle.ci\ngoogle.co.ck\ngoogle.cl\ngoogle.cm\ngoogle.cn\ngoogle.com.co\ngoogle.co.cr\ngoogle.com.cu\ngoogle.cv\ngoogle.com.cy\ngoogle.cz\ngoogle.de\ngoogle.dj\ngoogle.dk\ngoogle.dm\ngoogle.com.do\ngoogle.dz\ngoogle.com.ec\ngoogle.ee\ngoogle.com.eg\ngoogle.es\ngoogle.com.et\ngoogle.fi\ngoogle.com.fj\ngoogle.fm\ngoogle.fr\ngoogle.ga\ngoogle.ge\ngoogle.gg\ngoogle.com.gh\ngoogle.com.gi\ngoogle.gl\ngoogle.gm\ngoogle.gp\ngoogle.gr\ngoogle.com.gt\ngoogle.gy\ngoogle.com.hk\ngoogle.hn\ngoogle.hr\ngoogle.ht\ngoogle.hu\ngoogle.co.id\ngoogle.ie\ngoogle.co.il\ngoogle.im\ngoogle.co.in\ngoogle.iq\ngoogle.is\ngoogle.it\ngoogle.je\ngoogle.com.jm\ngoogle.jo\ngoogle.co.jp\ngoogle.co.ke\ngoogle.com.kh\ngoogle.ki\ngoogle.kg\ngoogle.co.kr\ngoogle.com.kw\ngoogle.kz\ngoogle.la\ngoogle.com.lb\ngoogle.li\ngoogle.lk\ngoogle.co.ls\ngoogle.lt\ngoogle.lu\ngoogle.lv\ngoogle.com.ly\ngoogle.co.ma\ngoogle.md\ngoogle.me\ngoogle.mg\ngoogle.mk\ngoogle.ml\ngoogle.com.mm\ngoogle.mn\ngoogle.ms\ngoogle.com.mt\ngoogle.mu\ngoogle.mv\ngoogle.mw\ngoogle.com.mx\ngoogle.com.my\ngoogle.co.mz\ngoogle.com.na\ngoogle.com.nf\ngoogle.com.ng\ngoogle.com.ni\ngoogle.ne\ngoogle.nl\ngoogle.no\ngoogle.com.np\ngoogle.nr\ngoogle.nu\ngoogle.co.nz\ngoogle.com.om\ngoogle.com.pa\ngoogle.com.pe\ngoogle.com.pg\ngoogle.com.ph\ngoogle.com.pk\ngoogle.pl\ngoogle.pn\ngoogle.com.pr\ngoogle.ps\ngoogle.pt\ngoogle.com.py\ngoogle.com.qa\ngoogle.ro\ngoogle.ru\ngoogle.rw\ngoogle.com.sa\ngoogle.com.sb\ngoogle.sc\ngoogle.se\ngoogle.com.sg\ngoogle.sh\ngoogle.si\ngoogle.sk\ngoogle.com.sl\ngoogle.sn\ngoogle.so\ngoogle.sm\ngoogle.sr\ngoogle.st\ngoogle.com.sv\ngoogle.td\ngoogle.tg\ngoogle.co.th\ngoogle.com.tj\ngoogle.tk\ngoogle.tl\ngoogle.tm\ngoogle.tn\ngoogle.to\ngoogle.com.tr\ngoogle.tt\ngoogle.com.tw\ngoogle.co.tz\ngoogle.com.ua\ngoogle.co.ug\ngoogle.co.uk\ngoogle.com.uy\ngoogle.co.uz\ngoogle.com.vc\ngoogle.co.ve\ngoogle.vg\ngoogle.co.vi\ngoogle.com.vn\ngoogle.vu\ngoogle.ws\ngoogle.rs\ngoogle.co.za\ngoogle.co.zm\ngoogle.co.zw\ngoogle.cat\n' >> $DOMAIN_TEMP_FILE
+    printf 'Google search domains... ' && _green 'Added\n'
+
+    # Add blogspot domains
+    printf 'blogspot.ca\nblogspot.co.uk\nblogspot.com\nblogspot.com.ar\nblogspot.com.au\nblogspot.com.br\nblogspot.com.by\nblogspot.com.co\nblogspot.com.cy\nblogspot.com.ee\nblogspot.com.eg\nblogspot.com.es\nblogspot.com.mt\nblogspot.com.ng\nblogspot.com.tr\nblogspot.com.uy\nblogspot.de\nblogspot.gr\nblogspot.in\nblogspot.mx\nblogspot.ch\nblogspot.fr\nblogspot.ie\nblogspot.it\nblogspot.pt\nblogspot.ro\nblogspot.sg\nblogspot.be\nblogspot.no\nblogspot.se\nblogspot.jp\nblogspot.in\nblogspot.ae\nblogspot.al\nblogspot.am\nblogspot.ba\nblogspot.bg\nblogspot.ch\nblogspot.cl\nblogspot.cz\nblogspot.dk\nblogspot.fi\nblogspot.gr\nblogspot.hk\nblogspot.hr\nblogspot.hu\nblogspot.ie\nblogspot.is\nblogspot.kr\nblogspot.li\nblogspot.lt\nblogspot.lu\nblogspot.md\nblogspot.mk\nblogspot.my\nblogspot.nl\nblogspot.no\nblogspot.pe\nblogspot.qa\nblogspot.ro\nblogspot.ru\nblogspot.se\nblogspot.sg\nblogspot.si\nblogspot.sk\nblogspot.sn\nblogspot.tw\nblogspot.ug\nblogspot.cat\n' >> $DOMAIN_TEMP_FILE
+    printf 'Blogspot domains... ' && _green 'Added\n'
+
+    # Add twimg.edgesuite.net
+    printf 'twimg.edgesuite.net\n' >> $DOMAIN_TEMP_FILE
+    printf 'twimg.edgesuite.net... ' && _green 'Added\n'
+
+    # Delete exclude domains
+    if [ ! -z $EXCLUDE_DOMAIN_FILE ]; then
+        for line in $(cat $EXCLUDE_DOMAIN_FILE)
+        do
+            cat $DOMAIN_TEMP_FILE | grep -vF -f $EXCLUDE_DOMAIN_FILE > $DOMAIN_FILE
+        done
+        printf 'Domains in exclude domain file '$EXCLUDE_DOMAIN_FILE'... ' && _green 'Deleted\n'
+    else
+        cat $DOMAIN_TEMP_FILE > $DOMAIN_FILE
+    fi
+
+    # Add extra domains
+    if [ ! -z $EXTRA_DOMAIN_FILE ]; then
+        cat $EXTRA_DOMAIN_FILE >> $DOMAIN_FILE
+        printf 'Extra domain file '$EXTRA_DOMAIN_FILE'... ' && _green 'Added\n'
+    fi
+
+    if [ $OUT_TYPE = 'DNSMASQ_RULES' ]; then
+    # Convert domains into dnsmasq rules
+        if [ $WITH_IPSET -eq 1 ]; then
+            _green 'Ipset rules included.'
+            sort -u $DOMAIN_FILE | $SED_ERES 's#(.+)#server=/\1/'$DNS_IP'\#'$DNS_PORT'\
+ipset=/\1/'$IPSET_NAME'#g' > $CONF_TMP_FILE
+        else
+            _green 'Ipset rules not included.'
+            sort -u $DOMAIN_FILE | $SED_ERES 's#(.+)#server=/\1/'$DNS_IP'\#'$DNS_PORT'#g' > $CONF_TMP_FILE
+        fi
+
+        # Generate output file
+        echo '# dnsmasq rules generated by gfwlist' > $OUT_TMP_FILE
+        echo "# Last Updated on $(date "+%Y-%m-%d %H:%M:%S")" >> $OUT_TMP_FILE
+        echo '# ' >> $OUT_TMP_FILE
+        cat $CONF_TMP_FILE >> $OUT_TMP_FILE
+        cp $OUT_TMP_FILE $OUT_FILE
+    else
+        sort -u $DOMAIN_FILE > $OUT_TMP_FILE
+    fi
+
+    cp $OUT_TMP_FILE $OUT_FILE
+    printf '\nConverting GfwList to '$OUT_TYPE'... ' && _green 'Done\n\n'
+
+    # Clean up
+    clean_and_exit 0
+}
+
+main() {
+    if [ -z "$1" ]; then
+        usage 0
+    else
+        check_depends
+        get_args "$@"
+        _green '\nJob Started.\n\n'
+        process
+    fi
+}
+
+main "$@"
diff --git a/package/lean/dsmboot/Makefile b/package/lean/dsmboot/Makefile
new file mode 100644
index 0000000000..52322d4053
--- /dev/null
+++ b/package/lean/dsmboot/Makefile
@@ -0,0 +1,42 @@
+#
+# Copyright (C) 2015-2016 OpenWrt.org
+#
+# This is free software, licensed under the GNU General Public License v3.
+#
+
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=dsmboot
+PKG_VERSION:=5.2
+PKG_RELEASE:=5967.1
+
+include $(INCLUDE_DIR)/package.mk
+
+define Package/$(PKG_NAME)
+	SECTION:=net
+	CATEGORY:=Network
+	TITLE:=Synology DSM pxeboot from TFTP
+	DEPENDS:=
+endef
+
+define Package/$(PKG_NAME)/description
+DSM 5.2 boot from TFTP
+endef
+
+define Build/Prepare
+endef
+
+define Build/Configure
+endef
+
+define Build/Compile
+endef
+
+define Package/$(PKG_NAME)/install
+	$(INSTALL_DIR) $(1)/root
+	$(INSTALL_DATA) ./files/* $(1)/root/
+	$(INSTALL_DIR) $(1)/etc/uci-defaults
+	$(INSTALL_BIN) ./files/dsmboot $(1)/etc/uci-defaults/yyy-dsmboot
+endef
+
+$(eval $(call BuildPackage,$(PKG_NAME)))
diff --git a/package/lean/dsmboot/files/dsm.iso b/package/lean/dsmboot/files/dsm.iso
new file mode 100644
index 0000000000..e0ccabe9e7
Binary files /dev/null and b/package/lean/dsmboot/files/dsm.iso differ
diff --git a/package/lean/dsmboot/files/dsmboot b/package/lean/dsmboot/files/dsmboot
new file mode 100644
index 0000000000..38c4ddbcd0
--- /dev/null
+++ b/package/lean/dsmboot/files/dsmboot
@@ -0,0 +1,10 @@
+#!/bin/sh
+
+uci -q batch <<-EOF >/dev/null
+	set dhcp.@dnsmasq[0].enable_tftp='1'
+	set dhcp.@dnsmasq[0].dhcp_boot='pxelinux.0'
+	set dhcp.@dnsmasq[0].tftp_root='/root'
+	commit dhcp
+EOF
+
+exit 0
\ No newline at end of file
diff --git a/package/lean/dsmboot/files/menu.lst b/package/lean/dsmboot/files/menu.lst
new file mode 100644
index 0000000000..d8fa25cbc6
--- /dev/null
+++ b/package/lean/dsmboot/files/menu.lst
@@ -0,0 +1,9 @@
+default 0
+timeout 0
+fallback 0
+
+title Synology DSM
+map --mem (pd)/dsm.iso (hd32)
+map --hook
+chainloader (hd32)
+
diff --git a/package/lean/dsmboot/files/pxelinux.0 b/package/lean/dsmboot/files/pxelinux.0
new file mode 100644
index 0000000000..6bf82191d5
Binary files /dev/null and b/package/lean/dsmboot/files/pxelinux.0 differ
diff --git a/package/lean/frpc/Makefile b/package/lean/frpc/Makefile
new file mode 100644
index 0000000000..6311766802
--- /dev/null
+++ b/package/lean/frpc/Makefile
@@ -0,0 +1,70 @@
+#
+# Copyright (C) 2015-2016 OpenWrt.org
+#
+# This is free software, licensed under the GNU General Public License v3.
+#
+
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=frpc
+PKG_VERSION:=0.27.0
+PKG_RELEASE:=1
+
+ifeq ($(ARCH),mipsel)
+	FRPC_ARCH:=mipsle
+endif
+ifeq ($(ARCH),mips)
+	FRPC_ARCH:=mips
+endif
+ifeq ($(ARCH),i386)
+	FRPC_ARCH:=386
+endif
+ifeq ($(ARCH),x86_64)
+	FRPC_ARCH:=amd64
+endif
+ifeq ($(ARCH),arm)
+	FRPC_ARCH:=arm
+endif
+ifeq ($(ARCH),aarch64)
+	FRPC_ARCH:=arm64
+endif
+
+PKG_LICENSE:=Apache-2.0
+
+PKG_SOURCE_URL:=https://github.com/fatedier/frp/releases/download/v$(PKG_VERSION)
+PKG_SOURCE:=frp_$(PKG_VERSION)_linux_$(FRPC_ARCH).tar.gz
+PKG_BUILD_DIR:=$(BUILD_DIR)/frp_$(PKG_VERSION)_linux_$(FRPC_ARCH)
+PKG_HASH:=skip
+
+include $(INCLUDE_DIR)/package.mk
+
+define Package/$(PKG_NAME)
+	SECTION:=net
+	CATEGORY:=Network
+	TITLE:=FRPC Client
+	DEPENDS:=
+	URL:=https://github.com/fatedier/frp/releases
+endef
+
+
+
+define Package/$(PKG_NAME)/description
+frp is a fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet
+endef
+
+define Build/Prepare
+	$(PKG_UNPACK)
+endef
+
+define Build/Configure
+endef
+
+define Build/Compile
+endef
+
+define Package/$(PKG_NAME)/install
+	$(INSTALL_DIR) $(1)/usr/bin
+	$(INSTALL_BIN) $(PKG_BUILD_DIR)/frpc $(1)/usr/bin/
+endef
+
+$(eval $(call BuildPackage,$(PKG_NAME)))
\ No newline at end of file
diff --git a/package/lean/ipset-lists/Makefile b/package/lean/ipset-lists/Makefile
new file mode 100644
index 0000000000..3045efd908
--- /dev/null
+++ b/package/lean/ipset-lists/Makefile
@@ -0,0 +1,48 @@
+#
+# Copyright (c) 2015 Justin Liu
+# Author: Justin Liu <rssnsj@gmail.com>
+#
+
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=ipset-lists
+PKG_VERSION:=20181104
+PKG_RELEASE:=1
+
+PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION)
+
+include $(INCLUDE_DIR)/package.mk
+
+define Package/ipset-lists
+  CATEGORY:=Network
+  TITLE:=Service for IPSET address tables
+  MAINTAINER:=Justin Liu <rssnsj@gmail.com>
+  DEPENDS:=+ipset
+endef
+
+define Package/ipset-lists/conffiles
+/etc/gfwlist/china-banned
+endef
+
+define Build/Prepare
+	mkdir -p $(PKG_BUILD_DIR)
+endef
+
+define Build/Compile/Default
+
+endef
+Build/Compile = $(Build/Compile/Default)
+
+define Package/ipset-lists/install
+	$(CP) -a files/* $(1)/
+endef
+
+define Package/ipset-lists/postinst
+#!/bin/sh
+if [ -e /etc/openwrt_release ]; then
+	/etc/init.d/ipset.sh restart
+	/etc/init.d/ipset.sh enable || :
+fi
+endef
+
+$(eval $(call BuildPackage,ipset-lists))
diff --git a/package/lean/ipset-lists/files/etc/gfwlist/china-banned b/package/lean/ipset-lists/files/etc/gfwlist/china-banned
new file mode 100755
index 0000000000..fcc0f577b1
--- /dev/null
+++ b/package/lean/ipset-lists/files/etc/gfwlist/china-banned
@@ -0,0 +1,4801 @@
+0rz.tw
+0to255.com
+1000giri.net
+100ke.org
+10conditionsoflove.com
+10musume.com
+123rf.com
+12bet.com
+12vpn.com
+12vpn.net
+141hongkong.com
+141tube.com
+1688.com.au
+173ng.com
+177pic.info
+17t17p.com
+18onlygirls.com
+18virginsex.com
+1949er.org
+1984bbs.com
+1984bbs.org
+1989report.hkja.org.hk
+1998cdp.org
+1bao.org
+1dumb.com
+1e100.net
+1eew.com
+1mobile.com
+1pondo.tv
+2000fun.com
+2008xianzhang.info
+2017.hk
+21andy.com
+21pron.com
+21sextury.com
+228.net.tw
+247realmedia.com
+24hrs.ca
+24smile.org
+25u.com
+2-hand.info
+2lipstube.com
+2mdn.net
+2shared.com
+2waky.com
+301works.org
+30boxes.com
+315lz.com
+32red.com
+365singles.com.ar
+36rain.com
+3a5a.com
+3-a.net
+3arabtv.com
+3boys2girls.com
+3d-game.com
+3ren.ca
+3tui.net
+4bluestones.biz
+4chan.org
+4dq.com
+4everproxy.com
+4irc.com
+4mydomain.com
+4pu.com
+4rbtv.com
+4shared.com
+4sq.com
+4tern.com
+51.ca
+51luoben.com
+56cun04.jigsy.com
+5aimiku.com
+5i01.com
+5isotoi5.org
+5maodang.com
+63i.com
+64museum.org
+64tianwang.com
+64wiki.com
+666kb.com
+66.ca
+6park.com
+7capture.com
+7cow.com
+85cc.net
+85st.com
+881903.com
+888.com
+888poker.com
+89-64.org
+8-d.com
+8news.com.tw
+8z1.net
+9001700.com
+91porn.com
+92ccav.com
+991.com
+99btgc01.com
+99cn.info
+9bis.com
+9bis.net
+9city.me
+a248.e.akamai.net
+a5.com.ru
+aamacau.com
+abc.com
+abchinese.com
+abc.pp.ru
+abc.xyz
+abitno.linpie.com
+ablwang.com
+aboluowang.com
+aboutgfw.com
+abs.edu
+accim.org
+aceros-de-hispania.com
+acevpn.com
+acg18.me
+acgkj.com
+ac.jiruan.net
+acmetoy.com
+ac.playstation.net
+actimes.com.au
+activpn.com
+aculo.us
+addictedtocoffee.de
+admob.com
+adorama.com
+adpl.org.hk
+adultfriendfinder.com
+adultkeep.net
+adult-sex-games.com
+advanscene.com
+advertfan.com
+ae.hao123.com
+aenhancers.com
+ae.org
+afantibbs.com
+af.mil
+agnesb.fr
+agoogleaday.com
+ai-kan.net
+aiph.net
+airconsole.com
+airvpn.org
+aisex.com
+ait.org.tw
+aiweiweiblog.com
+aiweiwei.com
+ai-wen.net
+ajaxplorer.info
+akamaihd.net
+akiba-online.com
+akiba-web.com
+alabout.com
+alanhou.com
+alasbarricadas.org
+alexlur.org
+alforattv.net
+alhayat.com
+aliengu.com
+alien-ufos.com
+aliyun.com
+alkasir.com
+allaboutalpha.com
+allconnected.co
+alldrawnsex.com
+allfinegirls.com
+allgirlsallowed.org
+alliance.org.hk
+allinfa.com
+allinfo.com
+alljackpotscasino.com
+allmovie.com
+all-that-is-interesting.com
+almostmy.com
+alphaporno.com
+al-qimmah.net
+alternate-tools.com
+altrec.com
+alvinalexander.com
+alwaysdata.com
+alwaysdata.net
+alwaysvpn.com
+am730.com.hk
+amazonaws.com
+ameblo.jp
+americangreencard.com
+americanunfinished.com
+amiblockedornot.com
+amigobbs.net
+amitabhafoundation.us
+amnesty.org
+amnesty.tw
+amnestyusa.org
+amnyemachen.org
+amoiist.com
+ampproject.org
+amzs.me
+analyze-v.com
+anchorfree.com
+ancsconf.org
+andfaraway.net
+android.com
+androidify.com
+android-x86.org
+angularjs.org
+animecrazy.net
+animeshippuuden.com
+aniscartujo.com
+anobii.com
+anontext.com
+anonymitynetwork.com
+anonymizer.com
+a-normal-day.com
+anpopo.com
+answering-islam.org
+anthonycalzadilla.com
+anti.anti.cnn.googlepages.com
+antidrm.hpg.ig.com.br
+antiwave.net
+anysex.com
+aobo.com.au
+aofriend.com
+aofriend.com.au
+aojiao.org
+aolchannels.aol.com
+aomiwang.com
+apetube.com
+apiary.io
+apidocs.linksalpha.com
+apigee.com
+api.linksalpha.com
+api.proxlet.com
+api.supertweet.net
+apk-dl.com
+apkpure.com
+app.box.com
+app.heywire.com
+appledaily.com
+appledaily.com.tw
+apps.hloli.net
+appsocks.net
+appspot.com
+appsto.re
+archive.is
+archive.org
+archives.gov
+arctosia.com
+areca-backup.org
+arena.taipei
+arethusa.su
+ar.hao123.com
+arlingtoncemetery.mil
+army.mil
+arstechnica.com
+art4tibet1998.org
+artofpeacefoundation.org
+art-or-porn.com
+artsy.net
+asacp.org
+asahichinese.com
+asdfg.jp
+asg.to
+asiafriendfinder.com
+asia-gaming.com
+asiaharvest.org
+asianews.it
+asiansexdiary.com
+asianspiss.com
+asianwomensfilm.de
+asiatgp.com
+askstudent.com
+askynz.net
+assembla.com
+astonmartinnews.com
+astrill.com
+atchinese.com
+atc.org.au
+atdmt.com
+atgfw.org
+athenaeizou.com
+atj.org.tw
+atlaspost.com
+atnext.com
+authorizeddns.net
+authorizeddns.org
+authorizeddns.us
+autoproxy.org
+avaaz.org
+avcity.tv
+avcool.com
+avdb.in
+avdb.tv
+avfantasy.com
+avidemux.org
+avmoo.com
+avmoo.net
+avmoo.pw
+avmo.pw
+av.nightlife141.com
+avoision.com
+avyahoo.com
+awardwinningfjords.com
+axureformac.com
+azerbaycan.tv
+azerimix.com
+azubu.tv
+b0ne.com
+babynet.com.hk
+backchina.com
+backpackers.com.tw
+backtotiananmen.com
+badassjs.com
+badjojo.com
+badoo.com
+baidu.jp
+bailandaily.com
+baixing.me
+bakgeekhome.tk
+banana-vpn.com
+bandwagonhost.com
+bangbrosnetwork.com
+bangchen.net
+bangyoulater.com
+bannedbook.org
+bannednews.org
+barenakedislam.com
+barnabu.co.uk
+barracuda.com
+bartvpn.com
+basetimesheightdividedby2.com
+bayvoice.net
+bbcchinese.com
+bbc.com
+bbc.co.uk
+bb-chat.tv
+bbchat.tv
+bbci.co.uk
+bbcimg.co.uk
+bbc.in
+bbg.gov
+bbnradio.org
+bbs2.newsgroup.la
+bbs.brockbbs.com
+bbs.ecstart.com
+bbsfeed.com
+bbs.hasi.wang
+bbs.kimy.com.tw
+bbsland.com
+bbsmo.com
+bbs.morbell.com
+bbs.mychat.to
+bbs.netbig.com
+bbs.newsgroup.la
+bbsone.com
+bbs.qmzdd.com
+bbs.sina.com
+bbs.skykiwi.com
+bbs.sou-tong.org
+bbs.tuitui.info
+bbs-tw.com
+bbtoystore.com
+bb.ttv.com.tw
+bcast.co.nz
+bcc.com.tw
+bcchinese.net
+bcmorning.com
+bdsmvideos.net
+bd.zhe.la
+beaconevents.com
+bebo.com
+beeg.com
+beevpn.com
+behindkink.com
+beijing1989.com
+beijingspring.com
+belamionline.com
+bell.wiki
+bemywife.cc
+benjaminste.in
+beric.me
+berlintwitterwall.com
+berm.co.nz
+bestforchina.org
+bestvpn.com
+bestvpnserver.com
+bestvpnservice.com
+bestvpnusa.com
+bet365.com
+beta.iset.com.tw
+beta.usejump.com
+betfair.com
+bettervpn.com
+bettween.com
+betvictor.com
+bewww.net
+beyondfirewall.com
+bfnn.org
+bfsh.hk
+bgvpn.com
+biantailajiao.com
+biantailajiao.in
+biblesforamerica.org
+bic2011.org
+bigfools.com
+bigjapanesesex.com
+bigmoney.biz
+bignews.org
+bigsound.org
+bill2-software.com
+billywr.com
+bill.zhong.pp.ru
+bipic.net
+bitcointalk.org
+bit.do
+bit.ly
+bitly.com
+bitshare.com
+bitsnoop.com
+bizhat.com
+bjnewlife.org
+bjzc.org
+blacklogic.com
+blackvpn.com
+bl-doujinsouko.com
+blinkx.com
+blinw.com
+blip.tv
+blockcn.com
+blog.birdhouseapp.com
+blogblog.com
+blog.boxcar.io
+blog.calibre-ebook.com
+blogcatalog.com
+blogcity.me
+blog.cnyes.com
+blog.davidziegler.net
+blog.dayoneapp.com
+blog.de
+blog.dribbble.com
+blog.exblog.co.jp
+blog.excite.co.jp
+blog.expofutures.com
+blog.fizzik.com
+blog.foolsmountain.com
+blogger.com
+blog.gowalla.com
+blog.hotpotato.com
+blog.ifttt.com
+blogimg.jp
+blog.inoreader.com
+blog.instapaper.com
+blog.iphone-dev.org
+blog.istef.info
+blog.jackjia.com
+blog.joeyrobert.org
+blog.jp
+blog.kangye.org
+blog.kickstarter.com
+blog.kl.am
+blog.klip.me
+blog.lester850.info
+blog.lightbox.com
+bloglines.com
+bloglovin.com
+blog.martinoei.com
+blog.mongodb.org
+blog.openinkpot.org
+blog.palm.com
+blog.path.com
+blog.pathtosharepoint.com
+blog.pentalogic.net
+blog.pikchur.com
+blog.pilotmoon.com
+blog.redren.com
+blog.rockmelt.com
+blog.romanandreg.com
+blog.s135.com
+blogs.icerocket.com
+blog.sogoo.org
+blog.sparrowmailapp.com
+blogspot.com
+blogspot.co.uk
+blogspot.de
+blogspot.fr
+blogspot.in
+blogspot.jp
+blogs.tampabay.com
+blogs.yahoo.co.jp
+blog.syx86.cn
+blog.syx86.com
+blog.taragana.com
+blogtd.net
+blogtd.org
+blog.tiney.com
+blog.topify.com
+blog.usa.gov
+blog.xuite.net
+blog.youthwant.com.tw
+bloodshed.net
+bloomberg.cn
+bloomberg.com
+bloomberg.de
+bloombergview.com
+bloomfortune.com
+blueangellive.com
+bmediaasia.com
+bmfinn.com
+bnrmetal.com
+boardreader.com
+bobulate.com
+bod.asia
+bodog88.com
+bolehvpn.net
+bolin.netfirms.com
+bonbonme.com
+bonbonsex.com
+bongacams.com
+bonjourlesgeeks.com
+boobstagram.com
+book.com.tw
+bookepub.com
+books.com.tw
+bookshelfporn.com
+book.zi5.me
+botanwang.com
+bot.nu
+bowenpress.com
+boxpn.com
+boxunblog.com
+boxunclub.com
+boxun.com
+boxun.tv
+boyangu.com
+boyfriendtv.com
+boysfood.com
+boysmaster.com
+bralio.com
+branch.com
+brandonhutchinson.com
+braumeister.org
+bravotube.net
+brazzers.com
+break.com
+breakgfw.com
+breakingtweets.com
+breakwall.net
+br.hao123.com
+briefdream.com
+brightcove.com
+brightkite.com
+brizzly.com
+broadbook.com
+broadpressinc.com
+br.st
+brucewang.net
+brutaltgp.com
+bt2mag.com
+bt95.com
+btaia.com
+bt.byr.cn
+btdigg.org
+btku.me
+btku.org
+bt.neu6.edu.cn
+btrd.net
+btspread.com
+budaedu.org
+buddhistchannel.tv
+buffered.com
+bugclub.org
+builtwithbootstrap.com
+bullogger.com
+bullog.org
+bunbunhk.com
+busayari.com
+businesstimes.com.cn
+businessweek.com
+busytrade.com
+buugaa.com
+buy.yahoo.com.tw
+buzzhand.com
+buzzhand.net
+buzzurl.jp
+bwbx.io
+bwsj.hk
+bx.tl
+c100tibet.org
+c1522.mooo.com
+cablegatesearch.net
+cachinese.com
+cacnw.com
+cactusvpn.com
+cafepress.com
+cahr.org.tw
+calameo.com
+calebelston.com
+calgarychinese.ca
+calgarychinese.com
+calgarychinese.net
+cam4.com
+cam4.jp
+cam4.sg
+camfrog.com
+cams.com
+cams.org.sg
+canadameet.com
+canyu.org
+caobian.info
+caochangqing.com
+cao.im
+cap.org.hk
+carabinasypistolas.com
+cardinalkungfoundation.org
+carfax.com
+caribbeancom.com
+cari.com.my
+carmotorshow.com
+cartoonmovement.com
+casadeltibetbcn.org
+casatibet.org.mx
+casinobellini.com
+casinoking.com
+casinoriva.com
+casino.williamhill.com
+catch22.net
+catfightpayperview.xxx
+catholic.org.hk
+catholic.org.tw
+cathvoice.org.tw
+cattt.com
+cbc.ca
+cbs.ntu.edu.tw
+cbtc.org.hk
+cc9007.spaces.live.com
+ccavtop10.com
+cccat.cc
+ccdtr.org
+cchere.com
+ccim.org
+cclife.ca
+cclifefl.org
+cclife.org
+ccthere.com
+cctongbao.com
+ccue.ca
+ccue.com
+ccvoice.ca
+ccw.org.tw
+cdbook.org
+cdd.me
+cdef.org
+cdig.info
+cdjp.org
+cdn1.lp.saboom.com
+cdnews.com.tw
+cdn.helixstudios.net
+cdninstagram.com
+cdn.printfriendly.com
+cdn.softlayer.net
+cdp1989.org
+cdp1998.org
+cdp2006.org
+cdpa.url.tw
+cdpeu.org
+cdp.sinica.edu.tw
+cdpusa.org
+cdpweb.org
+cdpwu.org
+cdw.com
+cecc.gov
+cellulo.info
+cenci.tk
+cenews.eu
+centauro.com.br
+centerforhumanreprod.com
+centralnation.com
+centurys.net
+certificate.revocationcheck.com
+certificate-transparency.org
+c-est-simple.com
+cfhks.org.hk
+cftfc.com
+cgdepot.org
+cgst.edu
+chandoo.org
+changeip.name
+changeip.net
+changeip.org
+change.org
+changp.com
+changsa.net
+chaos.e-spacy.com
+chapm25.com
+chartbeat.net
+chatnook.com
+chaturbate.com
+chengmingmag.com
+chenguangcheng.com
+chenpokong.com
+chenpokong.net
+chenyehao.spaces.live.com
+cherrysave.com
+chevronwp7.com
+chhongbi.org
+chicagoncmtv.com
+china101.com
+china18.org
+china21.com
+china21.org
+china5000.us
+chinaaffairs.org
+chinaaid.me
+chinaaid.net
+chinaaid.org
+chinaaid.us
+chinachange.org
+chinachannel.hk
+chinacitynews.be
+chinacomments.org
+chinadialogue.net
+chinadigitaltimes.net
+chinaelections.org
+chinaeweekly.com
+chinafreepress.org
+chinagate.com
+chinageeks.org
+chinagfw.org
+chinagreenparty.org
+china-green-party.spaces.live.com
+china.hket.com
+chinahorizon.org
+chinahush.com
+chinainperspective.com
+chinainperspective.net
+chinainperspective.org
+chinainterimgov.org
+chinalaborwatch.org
+chinalawandpolicy.com
+chinalawtranslate.com
+china-mmm.jp.net
+china-mmm.net
+china-mmm.sa.com
+chinamule.com
+chinamz.org
+chinapress.com.my
+chinarightsia.org
+chinasocialdemocraticparty.com
+chinaso.com
+chinasoul.org
+chinasucks.net
+chinatimes.com
+chinatopsex.com
+chinatown.com.au
+chinatweeps.com
+chinaway.org
+china-week.com
+chinaworker.info
+chinaxchina.com
+chinayouth.org.hk
+chinayuanmin.org
+chinesedaily.com
+chinesedailynews.com
+chinesedemocracy.com
+chinese.engadget.com
+chinesegay.org
+chinese-hermit.net
+chinese.irib.ir
+chinese-leaders.org
+chinese-memorial.org
+chinesen.de
+chinesenewsnet.com
+chinesepen.org
+chinese.soifind.com
+chinesetalks.net
+chingcheong.com
+chinman.net
+chithu.org
+chn.chosun.com
+chrdnet.com
+chrispederick.com
+chrispederick.net
+christianfreedom.org
+christianstudy.com
+christiantimes.org.hk
+christusrex.org
+chrlawyers.hk
+chrlcg-hk.org
+chromeadblock.com
+chromecast.com
+chrome.com
+chromeexperiments.com
+chromercise.com
+chromestatus.com
+chromium.org
+ch.shvoong.com
+chuang-yen.org
+chubun.com
+chuizi.net
+cineastentreff.de
+cipfg.org
+circlethebayfortibet.org
+citizenlab.org
+citizenscommission.hk
+citizensradio.org
+city365.ca
+city9x.com
+civicparty.hk
+civilhrfront.org
+civiliangunner.com
+civilmedia.tw
+cjb.net
+ck101.com
+classicalguitarblog.net
+clb.org.hk
+cl.d0z.net
+cleansite.biz
+cleansite.info
+cleansite.us
+clearharmony.net
+clearwisdom.net
+clementine-player.org
+clientsfromhell.net
+cling.omy.sg
+clinica-tibet.ru
+clipfish.de
+cl.ly
+cloakpoint.com
+cloudfront.net
+club1069.com
+cmi.org.tw
+cmp.hku.hk
+cms.gov
+cmule.com
+cmule.org
+cn2.streetvoice.com
+cn6.eu
+cnabc.com
+cna.com.tw
+cnavista.com.tw
+cn.dayabook.com
+cnd.org
+cnex.org.cn
+cn.fmnnow.com
+cn.freeones.com
+cn.ibtimes.com
+cnineu.com
+cnn.com
+cn.nytstyle.com
+cnpolitics.org
+cn-proxy.com
+cnproxy.com
+cn.sandscotaicentral.com
+cn.shafaqna.com
+cn.streetvoice.com
+cn.uncyclopedia.wikia.com
+cn.voa.mobi
+coat.co.jp
+cochina.co
+cochina.org
+cocoapods.org
+cocoa.zonble.net
+code1984.com
+codeboxapp.com
+codeshare.io
+codeskulptor.org
+collateralmurder.com
+collateralmurder.org
+comefromchina.com
+com.google
+comic-mega.me
+commandarms.com
+commentshk.com
+communistcrimes.org
+communitychoicecu.com
+compileheart.com
+compress.to
+co.ng.mil
+conoyo.com
+contactmagazine.net
+contests.twilio.com
+convio.net
+conviva.com
+coobay.com
+cookingtothegoodlife.com
+coolaler.com
+coolder.com
+coolloud.org.tw
+coolncute.com
+corpus4u.org
+corumcollege.com
+cos-moe.com
+cotweet.com
+couchdbwiki.com
+coveringweb.com
+cpj.org
+crackle.com
+crchina.org
+crd-net.org
+creaders.net
+creadersnet.com
+cristyli.com
+crocotube.com
+crossfire.co.kr
+crossthewall.net
+csdparty.com
+c-spanvideo.org
+css.pixnet.in
+csuchen.de
+ctao.org
+ctfriend.net
+ctitv.com.tw
+cts.com.tw
+cubicle17.com
+cuhkacs.org
+cuihua.org
+cuiweiping.net
+culture.tw
+cumlouder.com
+curvefish.com
+cusu.hk
+cw.com.tw
+cyanogenmod.org
+cyberghost.natado.com
+cyberghostvpn.com
+cydia.ifuckgfw.com
+cynscribe.com
+cytode.us
+d100.net
+d2bay.com
+dabr.co.uk
+dabr.eu
+dabr.me
+dabr.mobi
+dadazim.com
+dadi360.com
+dafagood.com
+dafahao.com
+daidostup.ru
+dailidaili.com
+dailymotion.com
+dailynews.sina.com
+daiphapinfo.net
+dajiyuan.com
+dajiyuan.de
+dajiyuan.eu
+dajusha.baywords.com
+dalailama80.org
+dalailama-archives.org
+dalailamacenter.org
+dalailama.com
+dalailamafellows.org
+dalailamafilm.com
+dalailamafoundation.org
+dalailamahindi.com
+dalailamainaustralia.org
+dalailamajapanese.com
+dalailama.mn
+dalailamaprotesters.info
+dalailamaquotes.org
+dalailama.ru
+dalailamatrust.org
+dalailama.usc.edu
+dalailamavisit.org.nz
+dalailamaworld.com
+dalianmeng.org
+daliulian.org
+danke4china.net
+danwei.org
+daodu14.jigsy.com
+daolan.net
+darktech.org
+darktoy.net
+darpa.mil
+dastrassi.org
+data-vocabulary.org
+date.fm
+david-kilgour.com
+davidslog.com
+daxa.cn
+dayaarmongol.ning.com
+daylife.com
+db.tt
+dcard.tw
+dcmilitary.com
+ddc.com.tw
+ddhw.info
+ddns.info
+ddns.me.uk
+ddns.mobi
+ddns.ms
+ddns.name
+ddns.net
+ddns.us
+deaftone.com
+deck.ly
+decodet.co
+deepmind.com
+default.secureserver.net
+definebabe.com
+deja.com
+delcamp.net
+delicious.com
+democrats.org
+demo.opera-mini.net
+derekhsu.homeip.net
+de-sci.org
+desc.se
+designerol.com
+desipro.de
+dessci.com
+destiny.xfiles.to
+destroy-china.jp
+deutsche-welle.de
+dev102.com
+developers.box.net
+deviantart.com
+deviantart.net
+devio.us
+devpn.com
+dfas.mil
+dfn.org
+dharamsalanet.com
+dharmakara.net
+dhcp.biz
+diaoyuislands.org
+digisfera.com
+digitalnomadsproject.org
+diigo.com
+dilber.se
+dipity.com
+directcreative.com
+discuss4u.com
+discuss.com.hk
+dish.com
+disp.cc
+disqus.com
+dit-inc.us
+dizhidizhi.com
+dizhuzhishang.com
+djangosnippets.org
+djorz.com
+dl.box.net
+dl-laby.jp
+dl.playstation.net
+dlsite.com
+dmcdn.net
+dmm.co.jp
+dns04.com
+dns05.com
+dns1.us
+dns2go.com
+dns2.us
+dnscrypt.org
+dns-dns.com
+dnset.com
+dnsrd.com
+dnssec.net
+dns-stuff.com
+docstoc.com
+doctorvoice.org
+dojin.com
+dok-forum.net
+dolc.de
+dolf.org.hk
+dollf.com
+domain.club.tw
+domainhelp.search.com
+domains.google
+domaintoday.com.au
+dongde.com
+dongtaiwang.com
+dongtaiwang.net
+dongyangjing.com
+dontfilter.us
+dontmovetochina.com
+dorjeshugden.com
+dotheyfolloweachother.com
+dotplane.com
+dotsub.com
+doubleaf.com
+doubleclick.net
+dougscripts.com
+doujincafe.com
+dowei.org
+download.aircrack-ng.org
+download.ithome.com.tw
+download.syniumsoftware.com
+doxygen.org
+dphk.org
+dpp.org.tw
+dpr.info
+dragonsprings.org
+draw.io
+dreammask.org
+drepung.org
+drewolanoff.com
+drgan.net
+drmingxia.org
+dropbox.com
+dropboxusercontent.com
+drsunacademy.com
+drtuber.com
+dscn.info
+dsmtp.com
+dstk.dk
+dtdns.net
+dtiblog.com
+dtic.mil
+dtiserv2.com
+dtwang.org
+duanzhihu.com
+duckdns.org
+duckduckgo.com
+duckload.com
+duckmylife.com
+duga.jp
+duihuahrjournal.org
+duihua.org
+dumb1.com
+duoweitimes.com
+duping.net
+duplicati.com
+dupola.com
+dupola.net
+dushi.ca
+dvorak.org
+dw.com
+dw.de
+dwnews.com
+dwnews.net
+dw-world.com
+dw-world.de
+dy24k.info
+dynamicdns.biz
+dynamicdns.co.uk
+dynamicdns.me.uk
+dynamic-dns.net
+dynamicdns.org.uk
+dynawebinc.com
+dyndns.org
+dyndns.pro
+dynssl.com
+dzze.com
+e123.hk
+eamonnbrennan.com
+earlytibet.com
+earthcam.com
+earthquake.usgs.gov
+earthvpn.com
+eastern-ark.com
+easternlightning.org
+eastturkestan.com
+eastturkistancc.org
+eastturkistangovernmentinexile.us
+eastturkistan-gov.org
+easyca.ca
+easypic.com
+easy-share.com
+ebony-beauty.com
+ebookbrowse.com
+ebookee.com
+ebook.hyread.com.tw
+ecfa.org.tw
+echofon.com
+e-classical.com.tw
+ecministry.net
+economist.com
+edgecastcdn.net
+edicypages.com
+edmontonchina.cn
+edmontonservice.com
+edns.biz
+edoors.com
+edubridge.com
+edupro.org
+eesti.ee
+eevpn.com
+efcc.org.hk
+effers.com
+efksoft.com
+efmoe.com
+efukt.com
+e-gold.com
+eic-av.com
+e-info.org.tw
+eisbb.com
+eksisozluk.com
+electionsmeter.com
+elephantvpn.com
+elgoog.im
+elpais.com
+eltondisney.com
+emacsblog.org
+embr.in
+emilylau.org.hk
+emory.edu
+empfil.com
+emule-ed2k.com
+emulefans.com
+emuparadise.me
+enewstree.com
+enfal.de
+en.favotter.net
+englishforeveryone.org
+englishfromengland.co.uk
+englishpen.org
+en.hao123.com
+enlighten.org.tw
+entermap.com
+entnt.com
+epac.to
+episcopalchurch.org
+epochhk.com
+epochtimes-bg.com
+epochtimes.co.il
+epochtimes.co.kr
+epochtimes.com
+epochtimes.cz
+epochtimes.de
+epochtimes.fr
+epochtimes.ie
+epochtimes.it
+epochtimes.jp
+epochtimes-romania.com
+epochtimes.ru
+epochtimes.se
+epochtimestr.com
+epochweek.com
+epochweekly.com
+eporner.com
+equinenow.com
+erabaru.net
+eraysoft.com.tr
+erepublik.com
+erepublik.net
+erights.net
+eriversoft.com
+erktv.com
+ernestmandel.org
+erodaizensyu.com
+erodoujinworld.com
+eromangadouzin.com
+eromanga-kingdom.com
+eromon.net
+eroprofile.com
+eroticsaloon.net
+esmtp.biz
+etaa.org.au
+etaiwannews.com
+etizer.org
+etokki.com
+etools.ncol.com
+etowns.net
+etowns.org
+e-traderland.net
+ettoday.net
+etvonline.hk
+eucasino.com
+eulam.com
+eu.org
+evchk.wikia.com
+eventful.com
+everyday-carry.com
+evschool.net
+exblog.jp
+exchristian.hk
+exmormon.org
+expatshield.com
+expekt.com
+experts-univers.com
+exploader.net
+expressvpn.com
+extmatrix.com
+extremetube.com
+eyespirit.info
+eyevio.jp
+eyny.com
+ezpc.tk
+ezpeer.com
+ezua.com
+facebook.br
+facebook.com
+facebook.design
+facebook.hu
+facebook.in
+facebook.net
+facebook.nl
+facebookquotes4u.com
+facebook.se
+faceless.me
+facesofnyfw.com
+facesoftibetanselfimmolators.info
+fail.hk
+faith100.org
+faithfuleye.com
+faiththedog.info
+fakku.net
+falsefire.com
+falunart.org
+falunasia.info
+falun.caltech.edu
+falun-co.org
+falundafa-dc.org
+falundafa-florida.org
+falundafaindia.org
+falundafamuseum.org
+falundafa-nc.org
+falundafa.org
+falundafa-pa.net
+falungong.de
+falungong.org.uk
+falunhr.org
+faluninfo.de
+faluninfo.net
+falun-ny.net
+falunpilipinas.net
+falunworld.net
+familyfed.org
+famunion.com
+fangbinxing.com
+fangeming.com
+fanglizhi.info
+fangmincn.org
+fangong.forums-free.com
+fangongheike.com
+fangong.org
+fan-qiang.com
+fanqianghou.com
+fanqiang.tk
+fanqiangyakexi.net
+fanqiangzhe.com
+fanswong.com
+fanyue.info
+fapdu.com
+faproxy.com
+faqserv.com
+fartit.com
+farwestchina.com
+farxian.com
+fastpic.ru
+fastssh.com
+faststone.org
+fast.wistia.com
+favorious.com
+favstar.fm
+fawanghuihui.org
+faydao.com
+fbcdn.net
+fb.com
+fb.me
+fbsbx.com
+fc2blog.net
+fc2china.com
+fc2cn.com
+fc2.com
+fdc89.jp
+feedbooks.mobi
+feedburner.com
+feeds.fileforum.com
+feedzshare.com
+feelssh.com
+feer.com
+feifeiss.com
+feitianacademy.org
+feitian-california.org
+felixcat.net
+feministteacher.com
+fengzhenghu.com
+fengzhenghu.net
+fetchvideo.com
+fevernet.com
+fffff.at
+ff.im
+fflick.com
+fgmtv.net
+fgmtv.org
+fhreports.net
+filefactory.com
+fileflyer.com
+files2me.com
+fileserve.com
+filesor.com
+fillthesquare.org
+filmingfortibet.org
+filthdump.com
+finalion.jp
+financetwitter.com
+finchvpn.com
+findbook.tw
+findmespot.com
+findmima.com
+fingerdaily.com
+finler.net
+firefoxfan.cc
+fireofliberty.org
+firetweet.io
+firstfivefollowers.com
+flagsonline.it
+flecheinthepeche.fr
+fleshbot.com
+fleursdeslettres.com
+flgg.us
+flickr.com
+flickrhivemind.net
+flightcaster.com
+fling.com
+flipboard.com
+flipkart.com
+flitto.com
+flnet.org
+flowerofhappiness.spaces.live.com
+fochk.org
+focustaiwan.tw
+focusvpn.com
+fofg-europe.net
+fofg.org
+fofldfradio.org
+fooooo.com
+footwiball.com
+forum4hk.com
+forum.baby-kingdom.com
+forum.cyberctm.com
+forum.idsam.com
+forum.iset.com.tw
+forum.my903.com
+forum.mymaji.com
+forum.newsgroup.la
+forum.omy.sg
+forum.palmislife.com
+forum.setty.com.tw
+forum.sina.com.hk
+forum.slime.com.tw
+forum.tvb.com
+fotile.me
+fotop.net
+fourface.nodesnoop.com
+fourthinternational.org
+foxdie.us
+foxgay.com
+foxsub.com
+foxtang.com
+fpmtmexico.org
+fpmt.org
+fpmt-osel.org
+fpmt.tw
+fqok.org
+fqrouter.com
+franklc.com
+freakshare.com
+fredwilson.vc
+free4u.com.ar
+freealim.com
+freebrowser.org
+freechal.com
+freechina.net
+freeddns.com
+freedomchina.info
+freedomhouse.org
+freedomsherald.org
+freeforums.org
+freefq.com
+free.fr
+freefuckvids.com
+freegao.com
+freegateget.googlepages.com
+free-gate.org
+free-hada-now.org
+freeilhamtohti.org
+freelotto.com
+freeman2.com
+freemoren.com
+freemorenews.com
+freenet-china.org
+freenetproject.org
+freenewscn.com
+freeopenvpn.com
+freeoz.org
+free-ssh.com
+freessh.us
+freetcp.com
+freetibetanheroes.org
+freetibet.net
+freetibet.org
+freeviewmovies.com
+freevpn.me
+freevpn.nl
+freewallpaper4.me
+freewebs.com
+freeweibo.com
+freewww.biz
+freewww.info
+freexinwen.com
+freeyellow.com
+freeyoutubeproxy.net
+friendfeed.com
+friendfeed-media.com
+friends-of-tibet.org
+friendsoftibet.org
+fring.com
+fringenetwork.com
+fromchinatousa.net
+frommel.net
+frontlinedefenders.org
+fscked.org
+fsurf.com
+ftchinese.com
+ftp1.biz
+ftpserver.biz
+fucd.com
+fuckcnnic.net
+fuckgfw.com
+fuckgfw.org
+fullerconsideration.com
+fulue.com
+funf.tw
+funkyimg.com
+funp.com
+fuq.com
+furbo.org
+furhhdl.org
+furinkan.com
+furl.net
+futurechinaforum.org
+futureme.org
+futuremessage.org
+fux.com
+fuyindiantai.org
+fuyin.net
+fuyu.org.tw
+fw.cm
+fxnetworks.com
+fzh999.com
+fzh999.net
+fzlm.com
+g6hentai.com
+gabocorp.com
+gaeproxy.com
+gaforum.org
+galaxymacau.com
+galenwu.com
+galstars.net
+game735.com
+gamebase.com.tw
+gamejolt.com
+gamer.com.tw
+gamez.com.tw
+gamousa.com
+ganges.com
+gaoming.net
+gaopi.net
+gaozhisheng.net
+gaozhisheng.org
+gardennetworks.com
+gardennetworks.org
+gartlive.com
+gather.com
+gati.org.tw
+gaybubble.com
+gaycn.net
+gaymap.cc
+gaytube.com
+gazotube.com
+gcc.org.hk
+gclooney.com
+g.co
+gcpnews.com
+gcr.io
+gdbt.net
+gdzf.org
+geek-art.net
+geekerhome.com
+geekheart.info
+geekmade.co.uk
+geekmanuals.com
+g.e-hentai.org
+gelbooru.com
+generesis.com
+genuitec.com
+geocities.co.jp
+geocities.com
+geocities.jp
+geohot.com
+geometrictools.com
+gerefoundation.org
+getchu.com
+getcloak.com
+getcloudapp.com
+get-digital-help.com
+getfoxyproxy.org
+getfreedur.com
+getgom.com
+get.how
+getiton.com
+getjetso.com
+getlantern.org
+getmdl.io
+getsmartlinks.com
+getsocialscope.com
+gettrials.com
+gettyimages.com
+getuploader.com
+gfbv.de
+gfgold.com.hk
+gfsale.com
+gfw.org.ua
+gfw.press
+ggpht.com
+ggssl.com
+ghost.org
+ghostpath.com
+ghut.org
+giga-web.jp
+gigporno.ru
+gimpshop.com
+girlbanker.com
+github.com
+git.io
+git-scm.com
+givemesomethingtoread.com
+gizlen.net
+gjczz.com
+glass8.eu
+glennhilton.com
+globaljihad.net
+globalmediaoutreach.com
+globalmuseumoncommunism.org
+globalrescue.net
+globaltm.org
+globalvoicesonline.org
+glock.com
+gloryhole.com
+glype.com
+gmail.com
+gmbd.cn
+gmhz.org
+gmll.org
+gmodules.com
+gmozomg.izihost.org
+gnci.org.hk
+go141.com
+goagent.biz
+goagent.codeplex.com
+goagentplus.com
+gobet.cc
+godfootsteps.org
+godns.work
+godoc.org
+godsdirectcontact.co.uk
+godsdirectcontact.org
+godsdirectcontact.org.tw
+godsimmediatecontact.com
+gogotunnel.com
+gohappy.com.tw
+gojet.krtco.com.tw
+gokbayrak.com
+golang.org
+goldbet.com
+goldbetsports.com
+goldenfrog.com
+goldstep.net
+goldwave.com
+gongmeng.info
+gongm.in
+gongminliliang.com
+gongwt.com
+gooddns.info
+goodreaders.com
+goodreads.com
+goodtv.com.tw
+goodtv.tv
+goofind.com
+goo.gl
+googleadservices.com
+google.ae
+google.am
+google-analytics.com
+googleapis.com
+googleapps.com
+googleartproject.com
+google.as
+googleblog.com
+googlebot.com
+googlecapital.com
+google.cat
+google.cd
+google.ci
+googlecode.com
+google.co.id
+google.co.jp
+google.co.kr
+google.com
+google.co.ma
+google.com.hk
+googlecommerce.com
+google.com.sg
+google.com.tw
+google.com.uk
+google.co.uk
+google.de
+google.dj
+google.dk
+googledomains.com
+googledrive.com
+googleearth.com
+google.es
+google.fi
+google.fm
+google.fr
+google.gg
+googlegroups.com
+googlehosted.com
+googleideas.com
+google.ie
+google.is
+google.it
+googlelabs.com
+googlemail.com
+google.ms
+google.nl
+google.no
+google.nu
+googleplay.com
+googleplus.com
+google.ro
+google.sc
+googlesile.com
+google.sk
+google.sm
+googlesource.com
+googlesyndication.com
+googletagmanager.com
+googletagservices.com
+google.tk
+google.to
+google.tt
+googleusercontent.com
+googlevideo.com
+google.vu
+google.ws
+googlezip.net
+gopetition.com
+go-pki.com
+goproxing.net
+gospelherald.com
+got-game.org
+gotgeeks.com
+gotrusted.com
+gotw.ca
+gov.tw
+gpass1.com
+g-queen.com
+gr8domain.biz
+gr8name.biz
+grammaly.com
+grandtrial.org
+grangorz.org
+graphis.ne.jp
+gravatar.com
+graylog2.org
+greasespot.net
+greatfire.org
+greatfire.us7.list-manage.com
+greatfirewall.biz
+great-firewall.com
+greatfirewallofchina.net
+greatfirewallofchina.org
+great-roc.org
+greatroc.org
+greatroc.tw
+greatzhonghua.org
+greenfieldbookstore.com.hk
+greenparty.org.tw
+greenpeace.com.tw
+greenpeace.org
+greenvpn.net
+greenvpn.org
+groups.google.cn
+gs-discuss.com
+gseeker.com
+gstatic.com
+gtricks.com
+guancha.org
+guardster.com
+gu-chu-sum.org
+gufeng521.spaces.live.com
+guishan.org
+gunsamerica.com
+gunsandammo.com
+gun-world.net
+guomin.us
+guruonline.hk
+gutteruncensored.com
+gvlib.com
+gvm.com.tw
+gvt0.com
+gvt1.com
+gvt3.com
+gwtproject.org
+gyalwarinpoche.com
+gyatsostudio.com
+gzm.tv
+gzone-anime.info
+h1n1china.org
+h5dm.com
+h5galgame.me
+hacg.club
+hacg.in
+hacg.li
+hacg.red
+hacken.cc
+hackthatphone.net
+hahlo.com
+hakkatv.org.tw
+hanunyi.com
+haosou.com
+happy-vpn.com
+hardsextube.com
+harunyahya.com
+hasaowall.com
+hautelookcdn.com
+hautelook.com
+have8.com
+haygo.com
+h-china.org
+hdtvb.net
+hdzog.com
+heartyit.com
+hecaitou.net
+hechaji.com
+hec.su
+heeact.edu.tw
+hegre-art.com
+heix.pp.ru
+heiyo.info
+helloandroid.com
+hellonewyork.us
+helloqueer.com
+hellotxt.com
+hellouk.org
+helpeachpeople.com
+helplinfen.com
+help.linksalpha.com
+help.opera.com
+helpster.de
+helpzhuling.org
+hen.bao.li
+hentai.to
+hentaitube.tv
+hentaivideoworld.com
+heqinglian.net
+here4news.com
+heungkongdiscuss.com
+hexxeh.net
+heyzo.com
+hgseav.com
+hhdcb3office.org
+hidden-advent.org
+hidecloud.com
+hideipvpn.com
+hideman.net
+hide.me
+hideme.nl
+hidemyass.com
+hidemycomp.com
+higfw.com
+highpeakspureearth.com
+highrockmedia.com
+hihiforum.com
+hihistory.net
+hiitch.com
+hikinggfw.org
+hilive.tv
+himalayan-foundation.org
+himalayanglacier.com
+himemix.com
+himemix.net
+hi-on.org.tw
+hitomi.la
+hizb-ut-tahrir.info
+hizb-ut-tahrir.org
+hizbuttahrir.org
+hjclub.info
+hk01.com
+hk32168.com
+hkatvnews.com
+hkbc.net
+hkbf.org
+hkbookcity.com
+hkchurch.org
+hkcmi.edu
+hkcoc.com
+hkcoc.weather.com.hk
+hkdailynews.com.hk
+hkday.net
+hkdf.org
+hkej.com
+hkepc.com
+hkfaa.com
+hkfreezone.com
+hkfront.org
+hkgolden.com
+hkgreenradio.org
+hk.hao123img.com
+hkheadline.com
+hkhkhk.com
+hkhrc.org.hk
+hkhrm.org.hk
+hkip.org.uk
+hkjc.com
+hk.jiepang.com
+hkjp.easyweb.hk
+hkjp.org
+hk.knowledge.yahoo.com
+hklft.com
+hklts.org.hk
+hk.myblog.yahoo.com
+hk.news.yahoo.com
+hkptu.org
+hk-pub.com
+hk.rd.yahoo.com
+hkreporter.com
+hkreporter.loved.hk
+hk.search.yahoo.com
+hkupop.hku.hk
+hkusu.net
+hk.video.news.yahoo.com
+hkvwet.com
+hkwcc.org.hk
+hk.yahoo.com
+hkzone.org
+h-moe.com
+hmvdigital.ca
+hmvdigital.com
+hnjhj.com
+hnntube.com
+hola.com
+hola.org
+holymountaincn.com
+holyspiritspeaks.org
+holz.byethost8.com
+homedepot.com
+homeperversion.com
+homeservershow.com
+home.sina.com
+home.so-net.net.tw
+honeonet.spaces.live.com
+hongkongfp.com
+hongmeimei.com
+hongzhi.li
+hootsuite.com
+hoovers.com
+hopto.org
+hornygamer.com
+hotav.tv
+hotfrog.com.tw
+hotgoo.com
+hotpornshow.com
+hotpot.hk
+hotshame.com
+hotspotshield.com
+hotvpn.com
+hougaige.com
+howtoforge.com
+hqcdp.org
+hqjapanesesex.com
+hqmovies.com
+hrcchina.org
+hrcir.com
+hrea.org
+hrichina.org
+hrweb.org
+hrw.org
+hsjp.net
+hsselite.com
+hstern.net
+hst.net.tw
+hstt.net
+htkou.net
+htl.li
+ht.ly
+html5rocks.com
+htmldog.com
+https443.net
+https443.org
+huaglad.com
+huajiadi.spaces.live.com
+huanghuagang.org
+huangyiyu.com
+huaren.us
+huaxiabao.org
+huaxia-news.com
+huaxin.ph
+hua-yue.net
+huayuworld.org
+hudatoriq.web.id
+hugoroy.eu
+huhaitai.com
+huhamhire.com
+huiyi.in
+hujiachina.spaces.live.com
+hulkshare.com
+hulu.com
+huluim.com
+humanities.uchicago.edu
+humanrightsbriefing.org
+hungerstrikeforaids.org
+hung-ya.com
+huping.net
+hurgokbayrak.com
+hurriyet.com.tr
+hustlercash.com
+hut2.ru
+hutianyi.net
+hutong9.net
+huyandex.com
+hwayue.org.tw
+hwinfo.com
+hxwq.org
+hybrid-analysis.com
+hyperrate.com
+hypeshell.com
+i1.hk
+i2p2.de
+i2runner.com
+i818hk.com
+ialmostlaugh.com
+iam.soy
+iask.bz
+iask.ca
+iav19.com
+ibiblio.org
+iblist.com
+iblogserv-f.net
+ibros.org
+ibvpn.com
+i-cable.com
+icams.com
+icij.org
+icl-fi.org
+icoco.com
+iconpaper.org
+icu-project.org
+idemocracy.asia
+identi.ca
+id.hao123.com
+idiomconnection.com
+idouga.com
+idreamx.com
+idv.tw
+ieasynews.net
+ied2k.net
+ieemdai.spaces.live.com
+ienergy1.com
+ifan.cz.cc
+ifanqiang.com
+ifanr.com
+ifcss.org
+ifjc.org
+ifreewares.com
+ift.tt
+igcd.net
+igfw.net
+igmg.de
+ignitedetroit.net
+igoogle.com
+igotmail.com.tw
+igvita.com
+ihakka.net
+iicns.com
+ikwb.com
+illusionfactory.com
+ilove80.be
+ilovelongtoes.com
+im88.tw
+imageab.com
+imagefap.com
+imageflea.com
+images.comico.tw
+imageshack.us
+imagevenue.com
+imagezilla.net
+imb.org
+imgchili.net
+img.ly
+imkev.com
+imlive.com
+immoral.jp
+impact.org.au
+impp.mn
+imrworldwide.com
+im.tv
+in99.org
+incapdns.net
+incloak.com
+incredibox.fr
+indiandefensenews.in
+indiemerch.com
+in-disguise.com
+info-graf.fr
+initiativesforchina.org
+inkui.com
+inmediahk.net
+innermongolia.org
+inote.tw
+insecam.org
+instagram.com
+instanthq.com
+institut-tibetain.org
+interestinglaugh.com
+interfaceaddiction.com
+internationalrivers.org
+internetdefenseleague.org
+internetfreedom.org
+internetpopculture.com
+inxian.com
+iownyour.biz
+iownyour.org
+ipalter.com
+i-part.com.tw
+ipcf.org.tw
+iphone4hongkong.com
+iphonehacks.com
+iphonetaiwan.org
+iphonix.fr
+ipicture.ru
+ipjetable.net
+ipobar.com
+iportal.me
+ippotv.com
+ipredator.se
+iptorrents.com
+iptv.com.tw
+ipvanish.com
+iredmail.org
+ironbigfools.compython.net
+ironicsoftware.com
+ironpython.net
+isaacmao.com
+isasecret.com
+is.gd
+isgreat.org
+islamhouse.com
+islamicity.com
+islamicpluralism.org
+islam.org.hk
+islamtoday.net
+ismaelan.com
+ismalltits.com
+ismprofessional.net
+isohunt.com
+israbox.com
+istars.co.nz
+istiqlalhewer.com
+istockphoto.com
+isunaffairs.com
+isuntv.com
+itaboo.info
+italiatibet.org
+itasoftware.com
+itemdb.com
+ithelp.ithome.com.tw
+itsaol.com
+itshidden.com
+itsky.it
+itweet.net
+iu45.com
+iuhrdf.org
+iuksky.com
+ivacy.com
+iverycd.com
+ivpn.net
+ixquick.com
+ixxx.com
+iyouport.com
+izaobao.us
+izlesem.org
+izles.net
+jamaat.org
+jamyangnorbu.com
+janwongphoto.com
+japan-whores.com
+jav68.tv
+javakiba.org
+javbus.com
+javfor.me
+javhip.com
+javhub.net
+javhuge.com
+javlibrary.com
+javmoo.com
+javmoo.xyz
+javseen.com
+javtag.com
+javzoo.com
+jayparkinsonmd.com
+jbtalks.cc
+jbtalks.com
+jbtalks.my
+jcpenney.com
+jdwsy.com
+jeanyim.com
+jetos.com
+jgoodies.com
+jiangweiping.com
+jiaoyou8.com
+jiehua.cz
+jieshibaobao.com
+jigong1024.com
+jike.com
+jimoparty.com
+jinbushe.org
+jingpin.org
+jingsim.org
+jinpianwang.com
+jitouch.com
+jizzthis.com
+jjgirls.com
+jkb.cc
+jkforum.net
+jkub.com
+jma.go.jp
+j.mp
+joachims.org
+jobso.tv
+joeedelman.com
+journalchretien.net
+journalofdemocracy.org
+joymiihub.com
+jp.hao123.com
+jpl.nasa.gov
+jpopforum.net
+juhuaren.com
+juliepost.com
+juliereyc.com
+junauza.com
+june4commemoration.org
+junefourth-20.net
+jungleheart.com
+justdied.com
+justfreevpn.com
+justicefortenzin.org
+justpaste.it
+justtristan.com
+juyuange.org
+juziyue.com
+jwmusic.org
+jyxf.net
+jyzj.waqn.com
+k2.xrea.com
+kagyuoffice.org
+kagyuoffice.org.tw
+kaiyuan.de
+kakao.com
+kankan.today
+kannewyork.com
+kanshifang.com
+kanzhongguo.com
+kanzhongguo.eu
+kaotic.com
+karayou.com
+karkhung.com
+karmapa.org
+karmapa-teachings.org
+kat.cr
+ka-wai.com
+kawaiikawaii.jp
+kba-tx.org
+kcoolonline.com
+kcsoftwares.com
+kebrum.com
+kechara.com
+keepandshare.com
+kendincos.net
+kenengba.com
+keontech.net
+kepard.com
+keycdn.com
+khabdha.org
+khatrimaza.org
+khmusic.com.tw
+kichiku-doujinko.com
+killwall.com
+kindleren.com
+kingdomsalvation.org
+kinghost.com
+kingstone.com.tw
+kink.com
+kir.jp
+kissbbao.cn
+kissyoutube.com
+kiwi.kz
+kk-whys.co.jp
+knowledgerush.com
+kodingen.com
+kompozer.net
+konachan.com
+koolsolutions.com
+koornk.com
+koranmandarin.com
+ksnews.com.tw
+kt.kcome.org
+ktzhk.com
+kui.name
+kun.im
+kurashsultan.com
+kurtmunger.com
+kusocity.com
+kusos.com
+kwcg.ca
+kwongwah.com.my
+kyohk.net
+kyoyue.com
+kzeng.info
+labiennale.org
+ladbrokes.com
+la-forum.org
+lagranepoca.com
+lalulalu.com
+lamayeshe.com
+lamnia.co.uk
+lamrim.com
+lanterncn.cn
+lantosfoundation.org
+laod.cn
+laogai.org
+laomiu.com
+laoyang.info
+laptoplockdown.com
+laqingdan.net
+larsgeorge.com
+lastcombat.com
+lastfm.es
+latelinenews.com
+latibet.org
+latimesblogs.latimes.com
+lazarsearlymusic.com
+ld.hao123img.com
+leafyvpn.net
+leecheukyan.org
+lefora.com
+left21.hk
+legalporno.com
+legaltech.law.com
+leirentv.ca
+leisurecafe.ca
+leisurepro.com
+lematin.ch
+lemonde.fr
+lenwhite.com
+lerosua.org
+lesoir.be
+lesscss.org
+letscorp.net
+le-vpn.com
+lflink.com
+lflinkup.com
+lflinkup.net
+lflinkup.org
+lhakar.org
+lhasocialwork.org
+liangyou.net
+liansi.org
+lianyue.net
+liaowangxizang.net
+liberal.org.hk
+libertytimes.com.tw
+lich355.megabyet.net
+lidecheng.com
+life.fly4ever.me
+lighten.org.tw
+like.com
+limiao.net
+line.me
+linglingfa.com
+lingvodics.com
+linkideo.com
+linkuswell.com
+linuxconfig.org
+linux-engineer.net
+linux.org.hk
+linuxreviews.org
+linuxtoy.org
+lionsroar.com
+lipuman.com
+listentoyoutube.com
+list.ly
+listorious.com
+lists.debian.org
+lists.w3.org
+littlebigdetails.com
+liudejun.com
+liuhanyu.com
+liujianshu.com
+liu.lu
+liuxiaotong.com
+livedoor.jp
+liveleak.com
+livestation.com
+livestream.com
+livevideo.com
+livingonline.us
+livingstream.com
+liwangyang.com
+lizhizhuangbi.com
+lkcn.net
+load.to
+lobsangwangyal.com
+localdomain.ws
+localpresshk.com
+lockdown.com
+lockestek.com
+lofi.e-hentai.org
+logbot.net
+logiqx.com
+logmike.com
+londonchinese.ca
+london.neighborhoodr.com
+longhair.hk
+longmusic.com
+longtermly.net
+longtoes.com
+lookatgame.com
+lookingglasstheatre.org
+lookpic.com
+looktoronto.com
+lotuslight.org.hk
+lotuslight.org.tw
+lovequicksilver.com
+lovesphinx.tk
+lovetvshow.com
+lpsg.com
+lrfz.com
+lrip.org
+lsd.org.hk
+lsforum.net
+lsmchinese.org
+lsmkorean.org
+lsm.org
+lsmwebcast.com
+lsxszzg.com
+ltn.com.tw
+lua.org
+lua-users.org
+luke54.com
+luke54.org
+lupm.org
+lushstories.com
+luxebc.com
+lvhai.org
+lvv2.com
+lyfhk.net
+lyricsquote.com
+macgamestore.com
+macrovpn.com
+macts.com.tw
+mad-ar.ch
+madewithcode.com
+madmenunbuttoned.com
+madonna-av.com
+madthumbs.com
+magic-net.info
+mahabodhi.org
+ma.hao123.com
+maiio.net
+mail-archive.com
+maildns.xyz
+maiplus.com
+maizhong.org
+makemymood.com
+makzhou.warehouse333.com
+malaysiakini.com
+mangafox.com
+mangafox.me
+maniash.com
+manicur4ik.ru
+mansion.com
+mansionpoker.com
+maplew.com
+marc.info
+marco.org
+marguerite.su
+marines.mil
+markmilian.com
+martau.com
+martincartoons.com
+martsangkagyuofficial.org
+maruta.be
+marxist.com
+marxist.net
+marxists.org
+mashable.com
+mash.to
+maskedip.com
+matainja.com
+mathable.io
+mathiew-badimon.com
+matome-plus.com
+matome-plus.net
+matsushimakaede.com
+mattwilcox.net
+maturejp.com
+maxgif.com
+maxing.jp
+mayimayi.com
+mcadforums.com
+mcaf.ee
+mcfog.com
+mcreasite.com
+md-t.org
+mediachinese.com
+mediafire.com
+mediafreakcity.com
+media.org.hk
+medium.com
+meetup.com
+mefeedia.com
+mefound.com
+megaporn.com
+megaproxy.com
+megarotic.com
+megavideo.com
+megurineluka.com
+meirixiaochao.com
+melon-peach.com
+meltoday.com
+memedia.cn
+memehk.com
+meme.yahoo.com
+memorybbs.com
+memrijttm.org
+memri.org
+mercyprophet.org
+meridian-trust.org
+meripet.biz
+meripet.com
+merit-times.com.tw
+meshrep.com
+mesotw.com
+messenger.com
+metacafe.com
+metarthunter.com
+meteorshowersonline.com
+metrolife.ca
+metroradio.com.hk
+meyou.jp
+meyul.com
+mfxmedia.com
+mgoon.com
+mgstage.com
+mh4u.org
+m.hkgalden.com
+mhradio.org
+michaelanti.com
+michaelmarketl.com
+middle-way.net
+mihk.hk
+mihr.com
+mihua.org
+mike.cz.cc
+mikesoltys.com
+milph.net
+milsurps.com
+mimiai.net
+mimivip.com
+mimivv.com
+mindrolling.org
+minghui-a.org
+minghui-b.org
+minghui.org
+minghui.or.kr
+minghui-school.org
+mingjinglishi.com
+mingjingnews.com
+mingjingtimes.com
+mingpaocanada.com
+mingpao.com
+mingpaomonthly.com
+mingpaonews.com
+mingpaony.com
+mingpaosf.com
+mingpaotor.com
+mingpaovan.com
+mingshengbao.com
+minhhue.net
+miniforum.org
+minimalmac.com
+mininova.org
+ministrybooks.org
+minzhuhua.net
+minzhuzhanxian.com
+minzhuzhongguo.org
+miroguide.com
+mirrorbooks.com
+mitao.com.tw
+mitbbs.com
+mixedmedialabs.com
+mixero.com
+mixpod.com
+mixx.com
+mizzmona.com
+mk5000.com
+mlcool.com
+mmaaxx.com
+m.me
+mmmca.com
+mobatek.net
+mobile01.com
+mobileways.de
+mobypicture.com
+moby.to
+modfetish.com
+moeerolibrary.com
+mofaxiehui.com
+mofos.com
+mog.com
+molihua.org
+mondex.org
+moneyhome.biz
+mo.nightlife141.com
+monitorchina.org
+monster.com
+moodyz.com
+moonbbs.com
+morningsun.org
+moroneta.com
+motherless.com
+motor4ik.ru
+m.oulove.org
+mousebreaker.com
+movabletype.com
+movements.org
+moviefap.com
+mp3buscador.com
+mp3ye.eu
+mpettis.com
+mpfinance.com
+mpinews.com
+m.plixi.com
+mponline.hk
+mrbasic.com
+mrbonus.com
+mrdoob.com
+mrface.com
+mrslove.com
+mrtweet.com
+msguancha.com
+m.slandr.net
+mswe1.org
+m-team.cc
+mthruf.com
+m.tweete.net
+mtw.tl
+muchosucko.com
+mullvad.net
+multiply.com
+multiproxy.org
+multiupload.com
+mummysgold.com
+muouju.com
+murmur.tw
+muselinks.co.jp
+musicade.net
+muslimvideo.com
+muzi.com
+muzi.net
+muzu.tv
+mvg.jp
+mx981.com
+mx.hao123.com
+my03.com
+myactimes.com
+my-addr.com
+myaudiocast.com
+myav.com.tw
+mybbs.us
+myboooks.googlepages.com
+myca168.com
+mychinamyhome.com
+mychinanet.com
+mychinanews.com
+mycnnews.com
+mydad.info
+myddns.com
+myeasytv.com
+myeclipseide.com
+my-formosa.com
+myforum.com.hk
+myforum.com.uk
+myfreecams.com
+myfreepaysite.com
+myfreshnet.com
+myftp.info
+myftp.name
+my.keso.cn
+mykomica.org
+mylftv.com
+my.mail.ru
+mymom.info
+mymusic.net.tw
+mynetav.net
+mynetav.org
+mynumber.org
+myopenid.com
+my.opera.com
+myparagliding.com
+mypicture.info
+mypop3.net
+mypop3.org
+mypopescu.com
+my-private-network.co.uk
+my-proxy.com
+mysecondarydns.com
+myshare.url.com.tw
+mysinablog.com
+myspace.com
+mytalkbox.com
+mytizi.com
+mywww.biz
+myz.info
+naacoalition.org
+naitik.net
+nakido.com
+nalandabodhi.org
+nalandawest.org
+namgyalmonastery.org
+namgyal.org
+namsisi.com
+nanyang.com
+nanyangpost.com
+nanzao.com
+naol.ca
+national-lottery.co.uk
+nationwide.com
+naughtyamerica.com
+navicat.com
+navigeaters.com
+navy.mil
+nbtvpn.com
+nccwatch.org.tw
+nch.com.tw
+ncn.org
+nde.de
+ndr.de
+ned.org
+nekoslovakia.net
+netbirds.com
+netcolony.com
+netflix.com
+netme.cc
+netsneak.com
+network54.com
+networkedblogs.com
+neverforget8964.org
+new-3lunch.net
+new96.ca
+new-akiba.com
+newcenturymc.com
+newcenturynews.com
+newchen.com
+newgrounds.com
+newipnow.com
+newlandmagazine.com.au
+newnews.ca
+news100.com.tw
+newsancai.com
+news.atebits.com
+newscn.org
+news.cnyes.com
+newsdh.com
+news.ghostery.com
+news.hk.msn.com
+news.hkpeanut.com
+newsminer.com
+news.msn.com.tw
+news.now.com
+news.omy.sg
+newspeak.cc
+newspp.org
+news.sina.com.hk
+news.sinchew.com.my
+news.singtao.ca
+newstamago.com
+newstapa.org
+newstarnet.com
+news.tvbs.com.tw
+newtaiwan.com.tw
+newtalk.tw
+newyorktimes.com
+nexon.com
+next11.co.jp
+nextmag.com.tw
+nextmedia.com
+nexton-net.jp
+nexttv.com.tw
+nf.id.au
+nga.mil
+ngensis.com
+nhentai.net
+nic.cz.cc
+nic.google
+nicovideo.tw
+nighost.org
+ninecommentaries.com
+ninjacloak.com
+ninjaproxy.ninja
+nintendium.com
+nintendowifi.net
+ninth.biz
+niusnews.com
+njactb.org
+njuice.com
+nlfreevpn.com
+nobelprize.org
+nobel.se
+nobodycanstop.us
+no-ip.org
+nokogiri.org
+nokola.com
+noobbox.com
+noodlevpn.com
+norbulingka.org
+nordstrom.com
+nordstromimage.com
+nordstromrack.com
+nordvpn.com
+notes.alexdong.com
+nottinghampost.com
+novelasia.com
+nownews.com
+nowtorrents.com
+noypf.com
+npa.go.jp
+npnt.me
+nps.gov
+nrk.no
+ns01.biz
+ns01.info
+ns01.us
+ns02.biz
+ns02.info
+ns02.us
+ns1.name
+ns2.name
+ns3.name
+ntd.tv
+ntdtv.ca
+ntdtv.co
+ntdtv.co.kr
+ntdtv.com
+ntdtv.cz
+ntdtvla.com
+ntdtv.org
+ntdtv.ru
+ntrfun.com
+nubiles.net
+nuexpo.com
+nukistream.com
+nurgo-software.com
+nusatrip.com
+nuuvem.com
+nuvid.com
+nuzcom.com
+nvquan.org
+nwtca.org
+nyaa.eu
+nyaa.se
+nydus.ca
+nylon-angel.com
+nylonstockingsonline.com
+nysingtao.com
+ny.stgloballink.com
+nytco.com
+nyt.com
+nytimes.com
+nytimg.com
+ny.visiontimes.com
+nzchinese.com
+nzchinese.net.nz
+observechina.net
+obutu.com
+ocaspro.com
+occupytiananmen.com
+oclp.hk
+ocreampies.com
+ocry.com
+october-review.org
+oculus.com
+offbeatchina.com
+officeoftibet.com
+ogaoga.org
+oikos.com.tw
+oiktv.com
+oizoblog.com
+okayfreedom.com
+okk.tw
+old-cat.net
+old.nabble.com
+olumpo.com
+olympicwatch.org
+omgili.com
+omni7.jp
+omnitalk.com
+omnitalk.org
+on2.com
+on.cc
+onedrive.live.com
+onedumb.com
+one.xthost.info
+onion.city
+onlinecha.com
+online.recoveryversion.org
+onlineyoutube.com
+onlylady.cn
+onmoon.com
+onmoon.net
+onmypc.biz
+onmypc.info
+onmypc.net
+onmypc.org
+onmypc.us
+onthehunt.com
+ontrac.com
+oopsforum.com
+ooyala.com
+openallweb.com
+open.com.hk
+opendemocracy.net
+opendn.xyz
+openervpn.in
+openid.net
+openleaks.org
+openvpn.net
+openvpn.org
+openwebster.com
+opml.radiotime.com
+opnir.com
+organcare.org.tw
+organharvestinvestigation.net
+organiccrap.com
+orgfree.com
+orientaldaily.com.my
+orient-doll.com
+orn.jp
+orzistic.org
+osfoora.com
+otnd.org
+otto.de
+otzo.com
+ourdearamy.com
+ourhobby.com
+oursogo.com
+oursteps.com.au
+oursweb.net
+ourtv.hk
+overlapr.com
+overplay.net
+oversea.istarshine.com
+owl.li
+ow.ly
+oyax.com
+ozchinese.com
+ozxw.com
+ozyoyo.com
+pachosting.com
+pacificpoker.com
+packages.debian.org
+packetix.net
+pacopacomama.com
+padmanet.com
+page2rss.com
+page.bid.yahoo.com
+pagodabox.com
+paint.net
+palacemoon.com
+paldengyal.com
+paljorpublications.com
+paltalk.com
+panacom.co.jp
+panamapapers.sueddeutsche.de
+pandapow.net
+pandavpn-jp.com
+pandora.com
+pandora.tv
+panluan.net
+panoramio.com
+pao-pao.net
+paperb.us
+paper.li
+paper-replika.com
+parade.com
+paradisepoker.com
+parislemon.com
+parkansky.com
+partycasino.com
+partypoker.com
+passion.com
+passiontimes.hk
+pastebin.com
+pastie.org
+pbs.org
+pbwiki.com
+pbworks.com
+pbxes.com
+pbxes.org
+pcanywhere.net
+pcdiscuss.com
+pcdvd.com.tw
+pchome.com.tw
+pcij.org
+pct.org.tw
+pcworld.com
+pdetails.com
+pdproxy.com
+pds.nasa.gov
+peace.ca
+peacefire.org
+peacehall.com
+pearlher.org
+peeasian.com
+peerpong.com
+pekingduck.org
+pemulihan.or.id
+penchinese.com
+penchinese.net
+pengyulong.com
+pen.io
+penisbot.com
+penthouse.com
+peoplebookcafe.com
+peoplenews.tw
+peopo.org
+percy.in
+perfectgirls.net
+perfectvpn.net
+perfspot.com
+perlhowto.com
+persecutionblog.com
+pfd.org.hk
+phapluan.org
+phayul.com
+philborges.com
+philly.com
+phncdn.com
+phosphation13.rssing.com
+photodharma.net
+photofocus.com
+photos.dailyme.com
+photo.utom.us
+phuquocservices.com
+picasaweb.com
+picidae.net
+picturesocial.com
+pidown.com
+pign.net
+pimg.tw
+pin6.com
+ping.fm
+pinoy-n.com
+pioneer-worker.forums-free.com
+piposay.com
+piraattilahti.org
+piring.com
+pixanalytics.com
+pixelqi.com
+pixfs.net
+pixnet.cc
+pixnet.net
+pixplug.in
+pk.com
+placemix.com
+planetsuzy.org
+playboy.com
+playboyplus.com
+playno1.com
+playpcesor.com
+plays.com.tw
+plm.org.hk
+plunder.com
+plurk.com
+plurktop.mmdays.com
+plus28.com
+plusbb.com
+pmatehunter.com
+pmates.com
+po2b.com
+podictionary.com
+pokerstars.com
+pokerstars.net
+politicalchina.org
+politicalconsultation.org
+polymerhk.com
+polymer-project.org
+popo.tw
+popvote.hk
+popyard.com
+popyard.org
+porn2.com
+porn5.com
+pornbase.org
+porn.com
+pornerbros.com
+pornhd.com
+pornhost.com
+pornhub.com
+pornmm.net
+pornoxo.com
+pornrapidshare.com
+pornsharing.com
+pornstarclub.com
+porntube.com
+porntubenews.com
+porntvblog.com
+pornvisit.com
+port25.biz
+portablevpn.nl
+portis21.spaces.live.com
+pose.com
+poskotanews.com
+post852.com
+postadult.com
+post.anyu.org
+posterous.com
+postimg.org
+post.ly
+power.com
+powercx.com
+powerphoto.org
+prayforchina.net
+premeforwindows7.com
+presentationzen.com
+prestige-av.com
+previewshots.com
+prisoneralert.com
+pritunl.com
+privacybox.de
+privateinternetaccess.com
+privatepaste.com
+privatetunnel.com
+privatevpn.com
+procopytips.com
+program-think.spaces.live.com
+prosiben.de
+provideocoalition.com
+provpnaccounts.com
+proxfree.com
+proxifier.com
+proxomitron.info
+proxpn.com
+proxyanonimo.es
+proxydns.com
+proxylist.org.uk
+proxynetwork.org.uk
+proxy.org
+proxypy.net
+proxyroad.com
+proxytunnel.net
+proyectoclubes.com
+prozz.net
+psblog.name
+psiphon3.com
+psiphon.ca
+psiphon.civisec.org
+pts.org.tw
+ptt.cc
+pttvan.org
+pubu.com.tw
+puffinbrowser.com
+puffstore.com
+pullfolio.com
+pulse.yahoo.com
+pure18.com
+pureconcepts.net
+pureinsight.org
+purepdf.com
+purevpn.com
+purplelotus.org
+pussyspace.com
+putihome.org
+putlocker.com
+putty.org
+puuko.com
+pwned.com
+python.com
+python.com.tw
+qanote.com
+qgirl.com.tw
+qhigh.com
+qidian.ca
+qienkuen.org
+qi-gong.me
+qiwen.lu
+qixianglu.cn
+qkshare.com
+qoos.com
+qpoe.com
+qq.co.za
+qstatus.com
+qtrac.eu
+qtweeter.com
+quadedge.com
+questvisual.com
+quitccp.net
+quitccp.org
+quran.com
+quranexplorer.com
+qusi8.net
+qvodzy.org
+qxbbs.org
+r18.com
+radicalparty.org
+radiko.jp
+radioaustralia.net.au
+radiohilight.net
+radiovaticana.org
+radiovncr.com
+rael.org
+ra.gg
+raggedbanner.com
+raidcall.com.tw
+raidtalk.com.tw
+raizoji.or.jp
+rangwang.biz
+rangzen.com
+rangzen.net
+rangzen.org
+ranyunfei.com
+rapbull.net
+rapidmoviez.com
+rapidshare8.com
+rapidsharedata.com
+rapidvpn.com
+raremovie.cc
+raremovie.net
+rayfme.com
+razyboard.com
+rcinet.ca
+rconversation.blogs.com
+rd.com
+rdio.com
+read100.com
+readingtimes.com.tw
+readmoo.com
+readydown.com
+realcourage.org
+realforum.zkiz.com
+realraptalk.com
+rebatesrule.net
+recaptcha.net
+recordhistory.org
+recovery.org.tw
+recoveryversion.com.tw
+redchinacn.net
+redchinacn.org
+redhotlabs.com
+redtube.com
+referer.us
+reflectivecode.com
+registry.google
+relaxbbs.com
+relay.com.tw
+releaseinternational.org
+religioustolerance.org
+renminbao.com
+renyurenquan.org
+retweeteffect.com
+retweetist.com
+retweetrank.com
+reuters.com
+revleft.com
+revsci.net
+revver.com
+rfachina.com
+rfamobile.org
+rfa.org
+rfaweb.org
+rferl.org
+rfi.fr
+rhcloud.com
+rigpa.org
+riku.me
+rileyguide.com
+ritouki.jp
+rlwlw.com
+rmjdw132.info
+rmjdw.com
+rnw.nl
+roadshow.hk
+robtex.com
+robustnessiskey.com
+rocket-inc.net
+rocmp.org
+roc-taiwan.org
+rojo.com
+rolia.net
+ronjoneswriter.com
+roodo.com
+rosechina.net
+rotten.com
+rsf-chinese.org
+rsf.org
+rsgamen.org
+rssmeme.com
+rtalabel.org
+rthk.hk
+rthk.org.hk
+rti.org.tw
+rtycminnesota.org
+ruanyifeng.com
+rukor.org
+rushbee.com
+rutube.ru
+ruyiseek.com
+rxhj.net
+s1heng.com
+s1.nudezz.com
+s1s1s1.com
+s8forum.com
+sacom.hk
+sadistic-v.com
+sadpanda.us
+safervpn.com
+sa.hao123.com
+saiq.me
+sakuralive.com
+sakya.org
+salvation.org.hk
+samair.ru
+sambhota.org
+sammyjs.org
+samsoff.es
+sandnoble.com
+sankaizok.com
+sanmin.com.tw
+sapikachu.net
+savemedia.com
+savetibet.de
+savetibet.fr
+savetibet.nl
+savetibet.org
+savetibet.ru
+savevid.com
+say2.info
+sbme.me
+scanscout.com
+scasino.com
+schema.org
+sciencenets.com
+scieron.com
+scihub.org
+scmpchinese.com
+scmp.com
+scorecardresearch.com
+scramble.io
+scribd.com
+scriptspot.com
+s-cute.com
+s-dragon.org
+seapuff.com
+search.aol.com
+search.disconnect.me
+searchtruth.com
+secretchina.com
+secretgarden.no
+secretsline.biz
+secure.hustler.com
+secure.logmein.com
+securetunnel.com
+secure.wikimedia.org
+securitykiss.com
+seesmic.com
+seevpn.com
+seezone.net
+sejie.com
+sellclassics.com
+sendoid.com
+sendsmtp.com
+sendspace.com
+serveuser.com
+serveusers.com
+sesawe.net
+sesawe.org
+sethwklein.net
+setn.com
+sevenload.com
+sex-11.com
+sex3.com
+sex8.cc
+sexandsubmission.com
+sexbot.com
+sex.com
+sexhuang.com
+sexhu.com
+sexidude.com
+sexinsex.net
+sextvx.com
+sexxxy.biz
+sfileydy.com
+sfshibao.com
+sftindia.org
+sftuk.org
+shadow.ma
+shadowsky.xyz
+shadowsocks.com
+shadowsocks.org
+shahamat-english.com
+shambhalasun.com
+shangfang.org
+shapeservices.com
+sharebee.com
+sharecool.org
+share.ovi.com
+share.skype.com
+share.youthwant.com.tw
+sharkdolphin.com
+sharpdaily.com.hk
+sharpdaily.hk
+sharpdaily.tw
+shat-tibet.com
+shaunthesheep.com
+sheikyermami.com
+shellfire.de
+shellmix.com
+shenshou.org
+shenyun.com
+shenyunperformingarts.org
+shenzhoufilm.com
+sherabgyaltsen.com
+shiatv.net
+shicheng.org
+shinychan.com
+shipcamouflage.com
+shitaotv.org
+shixiao.org
+shizhao.org
+shkspr.mobi
+shodanhq.com
+shop2000.com.tw
+shopping.com
+showbiz.omy.sg
+showhaotu.com
+showtime.jp
+shutterstock.com
+shwchurch3.com
+shwchurch.org
+sidelinesnews.com
+sidelinessportseatery.com
+sijihuisuo.club
+sijihuisuo.com
+simplecd.me
+simplecd.org
+simpleproductivityblog.com
+sina.com.tw
+singaporepools.com.sg
+singfortibet.com
+singpao.com.hk
+singtao.com
+singularitys.spaces.live.com
+sinoants.com
+sinocast.com
+sinocism.com
+sino-monthly.com
+sinomontreal.ca
+sinonet.ca
+sinopitt.info
+sinoquebec.com
+sis001.com
+sis001.us
+sis.xxx
+site90.net
+sitebro.tw
+sitekreator.com
+siteks.uk.to
+site.locql.com
+sitemaps.org
+sites.google.com
+sitetag.us
+sixth.biz
+siyi123123123.spaces.live.com
+sjrt.org
+sjum.cn
+sketchappsources.com
+skimtube.com
+skybet.com
+skyvegas.com
+slacker.com
+slavasoft.com
+slaytizle.com
+slheng.com
+slickvpn.com
+slideshare.net
+slinkset.com
+slutload.com
+slyip.com
+slyip.net
+smartdnsproxy.com
+smchbooks.com
+smhric.org
+smyxy.org
+snapchat.com
+snaptu.com
+sndcdn.com
+sneakme.net
+snooper.co.uk
+snowlionpub.com
+sobees.com
+socialwhale.com
+sockscap64.com
+sockslist.net
+soc.mil
+so.com
+socrec.org
+sod.co.jp
+softether.co.jp
+softether-download.com
+softether.org
+softwarebychuck.com
+softwaredownload.gitbooks.io
+so-ga.net
+sogclub.com
+sogou.com
+sogrady.me
+sohcradio.com
+sohfrance.org
+soh.tw
+sokamonline.com
+solarsystem.nasa.gov
+solozorro.tk
+somee.com
+so-news.com
+songjianjun.com
+sonicbbs.cc
+sonidodelaesperanza.org
+sopcast.com
+sopcast.org
+sorazone.net
+sorting-algorithms.com
+soso.com
+sos.org
+sostibet.org
+soubory.com
+soulcaliburhentai.net
+soul-plus.net
+soumo.info
+soundcloud.com
+soundofhope.kr
+soundofhope.org
+soup.io
+soupofmedia.com
+sourceforge.net
+sourcewadio.com
+southnews.com.tw
+sowers.org.hk
+space-scape.com
+spankbang.com
+spankwire.com
+spb.com
+speakerdeck.com
+speckleapp.com
+specxinzl.jigsy.com
+speedpluss.org
+spem.at
+spencertipping.com
+spicevpn.com
+spike.com
+spinejs.com
+sports.williamhill.com
+spotflux.com
+spotify.com
+spring4u.info
+springboardplatform.com
+sprite.org
+sproutcore.com
+sproxy.info
+squarespace.com
+squirly.info
+srcf.ucam.org
+srocket.us
+ssh91.com
+ssl443.org
+sspro.ml
+sss.camp
+sstatic.net
+sstmlt.net
+stage64.hk
+standupfortibet.org
+starfishfx.com
+starp2p.com
+startpage.com
+statcounter.com
+state168.com
+static.comico.tw
+static.digg.com
+static-economist.com
+staticflickr.com
+statueofdemocracy.org
+status.twhirl.org
+stc.com.sa
+steel-storm.com
+stepchina.com
+stephaniered.com
+sthoo.com
+stickam.com
+stickeraction.com
+stileproject.com
+sto.cc
+stonegames.net
+stoneip.info
+stoptibetcrisis.net
+storagenewsletter.com
+stories.google
+storify.com
+stormmediagroup.com
+storm.mg
+stoweboyd.com
+stranabg.com
+streamingthe.net
+strongvpn.com
+strongwindpress.com
+studentsforafreetibet.org
+student.tw
+stuffimreading.com
+stuffimreading.net
+stumbleupon.com
+stupidvideos.com
+subacme.rerouted.org
+sublexical.spaces.live.com
+sufeng.org
+sugarsync.com
+sugobbs.com
+suissl.com
+summify.com
+sumrando.com
+sun1911.com
+sunmedia.ca
+sunporno.com
+sunskyforum.com
+sunvpn.net
+suoluo.org
+superpages.com
+supervpn.net
+suprememastertv.com
+surfeasy.com
+surfeasy.com.au
+suroot.com
+surrenderat20.net
+suyangg.com
+svwind.com
+swagbucks.com
+sweux.com
+swift-tools.net
+swissvpn.net
+switch1.jp
+switchvpn.net
+sydneytoday.com
+sylfoundation.org
+syncback.com
+synergyse.com
+sysadmin1138.net
+sysresccd.org
+sytes.net
+szbbs.net
+szetowah.org.hk
+t35.com
+t66y.com
+t88.ca
+taa-usa.org
+taaze.tw
+tabtter.jp
+tacem.org
+taconet.com.tw
+taedp.org.tw
+tafaward.com
+tafm.org
+tagwalk.com
+tagwa.org.au
+tahr.org.tw
+taipeisociety.org
+taiwanbible.com
+taiwancon.com
+taiwandaily.net
+taiwandc.org
+taiwanembassy.org
+taiwanjustice.com
+taiwankiss.com
+taiwannation.50webs.com
+taiwannation.com
+taiwannation.com.tw
+taiwanncf.org.tw
+taiwannews.com.tw
+taiwan-sex.com
+taiwantoday.tw
+taiwantp.net
+taiwantt.org.tw
+taiwanus.net
+taiwanyes.com
+taiwanyes.ning.com
+talk853.com
+talkboxapp.com
+talkonly.net
+tamiaode.tk
+tanc.org
+tangben.com
+tangren.us
+taoism.net
+taolun.info
+tap11.com
+tapanwap.com
+target.com
+tascn.com.au
+taup.net
+taweet.com
+tbcollege.org
+tbicn.org
+tbi.org.hk
+tbjyt.org
+tbpic.info
+tbsec.org
+tbskkinabalu.page.tl
+tbsmalaysia.org
+tbsn.org
+tbs-rainbow.org
+tbsseattle.org
+tbssqh.org
+tbswd.org
+tbtemple.org.uk
+tbthouston.org
+tccwonline.org
+tcewf.org
+tchrd.org
+tcnynj.org
+t.co
+teamamericany.com
+teamseesmic.com
+teashark.com
+techlifeweb.com
+techparaiso.com
+teck.in
+teeniefuck.net
+teensinasia.com
+telecomspace.com
+telegramdownload.com
+telegram.org
+telegraph.co.uk
+tenacy.com
+tensorflow.org
+tew.org
+thaicn.com
+theampfactory.com
+theappleblog.com
+theatrum-belli.com
+thebcomplex.com
+theblemish.com
+thebobs.com
+thebodyshop-usa.com
+thecenter.mit.edu
+thechinabeat.org
+thedailywh.at
+thedalailamamovie.com
+thedieline.com
+thedw.us
+thegatesnotes.com
+thegly.com
+thehots.info
+thehousenews.com
+thehungrydudes.com
+thehun.net
+theinitium.com
+theinternetwishlist.com
+thelifeyoucansave.com
+thelius.org
+thenewslens.com
+thepiratebay.org
+thepiratebay.se
+theportalwiki.com
+theqii.info
+thereallove.kr
+therock.net.nz
+thesartorialist.com
+thespeeder.com
+thestandnews.com
+thetibetcenter.org
+thetibetconnection.org
+thetibetmuseum.org
+thetibetpost.com
+thetrotskymovie.com
+thevivekspot.com
+thewgo.org
+th.hao123.com
+thinkingtaiwan.com
+thinkwithgoogle.com
+thisav.com
+thisiswhyyouarefat.com
+thkphoto.com
+thlib.org
+thomasbernhard.org
+threatchaos.com
+throughnightsfire.com
+thumbzilla.com
+thywords.com
+thywords.com.tw
+tiananmenduizhi.com
+tiananmenmother.org
+tiananmenuniv.com
+tiananmenuniv.net
+tiandixing.org
+tianhuayuan.com
+tianlawoffice.com
+tiantibooks.org
+tianti.io
+tianzhu.org
+tibet3rdpole.org
+tibetaction.net
+tibetaid.org
+tibetalk.com
+tibetanaidproject.org
+tibetan-alliance.org
+tibetanarts.org
+tibetanbuddhistinstitute.org
+tibetancommunityuk.net
+tibetanculture.org
+tibetanfeministcollective.org
+tibetan.fr
+tibetanlanguage.org
+tibetanliberation.org
+tibetanpaintings.com
+tibetanphotoproject.com
+tibetanpoliticalreview.org
+tibetanreview.net
+tibetanwomen.org
+tibetanyouthcongress.org
+tibetanyouth.org
+tibet.a.se
+tibet.at
+tibet.ca
+tibetcharity.dk
+tibetcharity.in
+tibetchild.org
+tibetcity.com
+tibetcollection.com
+tibet.com
+tibetcorps.org
+tibet-envoy.eu
+tibetexpress.net
+tibetfocus.com
+tibet-foundation.org
+tibet.fr
+tibetfund.org
+tibetgermany.com
+tibetgermany.de
+tibethaus.com
+tibetheritagefund.org
+tibethouse.jp
+tibethouse.org
+tibet-house-trust.co.uk
+tibethouse.us
+tibet-info.net
+tibetinfonet.net
+tibet-initiative.de
+tibetjustice.org
+tibetkomite.dk
+tibet-munich.de
+tibetmuseum.org
+tibet.net
+tibetnetwork.org
+tibet.nu
+tibetoffice.ch
+tibetoffice.com.au
+tibetoffice.eu
+tibetoffice.org
+tibetonline.com
+tibetonline.tv
+tibetoralhistory.org
+tibet.org
+tibet.org.tw
+tibetpolicy.eu
+tibetrelieffund.co.uk
+tibetsites.com
+tibetsociety.com
+tibetsun.com
+tibetsupportgroup.org
+tibetswiss.ch
+tibettelegraph.com
+tibettimes.net
+tibet.to
+tibetwrites.org
+ticket.com.tw
+tidyread.com
+tiltbrush.com
+timdir.com
+time.com
+times.hinet.net
+timsah.com
+tintuc101.com
+tiny.cc
+tinychat.com
+tinypaste.com
+tinypng.com
+tistory.com
+tjholowaychuk.com
+tkcs-collins.com
+tkforum.tk
+tma.co.jp
+tmagazine.com
+tmdfish.com
+tmi.me
+tmpp.org
+tnaflix.com
+t.neolee.cn
+tngrnow.com
+tngrnow.net
+tnp.org
+togetter.com
+toh.info
+tokyo-247.com
+tokyocn.com
+tokyo-hot.com
+tokyo-porn-tube.com
+tomayko.com
+tomsc.com
+tongil.or.kr
+tono-oka.jp
+tonyyan.net
+toodoc.com
+toonel.net
+top81.ws
+topic.youthwant.com.tw
+topnews.in
+to-porno.com
+topshare.us
+topshareware.com
+topstyle4.com
+topsy.com
+toptip.ca
+tora.to
+tor.blingblingsquad.net
+torcn.com
+torguard.net
+torproject.org
+torrentcrazy.com
+torrentprivacy.com
+torrentproject.se
+torrenty.org
+torrentz.eu
+tor.updatestar.com
+torvpn.com
+t.orzdream.com
+tosh.comedycentral.com
+totalvpn.com
+touch99.com
+toutfr.com
+towngain.com
+toypark.in
+toythieves.com
+toytractorshow.com
+tparents.org
+tpi.org.tw
+traffichaus.com
+transgressionism.org
+translate.google.cn
+transparency.org
+travelinlocal.com
+treemall.com.tw
+trendsmap.com
+trialofccp.org
+trickip.net
+trickip.org
+tripod.com
+trouw.nl
+trtc.com.tw
+trt.net.tr
+truebuddha-md.org
+trulyergonomic.com
+trustedbi.com
+truth101.co.tv
+truthcn.com
+truthontour.org
+truveo.com
+tsctv.net
+tsdr.uspto.gov
+tsemtulku.com
+tsquare.tv
+tsunagarumon.com
+tsu.org.tw
+tt1069.com
+tt-rss.org
+tttan.com
+tu8964.com
+tuanzt.com
+tubaholic.com
+tube8.com
+tube911.com
+tubecao.com
+tube.com
+tubecup.com
+tubegals.com
+tubeislam.com
+tubewolf.com
+tuidang.net
+tuidang.org
+tuidang.se
+tui.orzdream.com
+tuitwit.com
+tumblr.awflasher.com
+tumblr.com
+tumblweed.org
+tumutanzi.com
+tunein.com
+tunnelbear.com
+tuo8.cc
+tuo8.club
+tuo8.fit
+tuo8.hk
+tuo8.in
+tuo8.ninja
+tuo8.org
+tuo8.pw
+turansam.org
+turbobit.net
+turbohide.com
+turbotwitter.com
+turningtorso.com
+turntable.fm
+tushycash.com
+tuvpn.com
+tuxtraining.com
+tuzaijidi.com
+tvants.com
+tvboxnow.com
+tv.com
+tvider.com
+tv-intros.com
+tvmost.com.hk
+tvplayvideos.com
+tvunetworks.com
+tw01.org
+twaitter.com
+twapperkeeper.com
+twa.sh
+twaud.io
+twbbs.net.tw
+twbbs.org
+twbbs.tw
+twblogger.com
+tweepguide.com
+tweeplike.me
+tweepmag.com
+tweepml.org
+tweetbackup.com
+tweetboard.com
+tweetboner.biz
+tweetdeck.com
+tweetedtimes.com
+tweetmeme.com
+tweetmylast.fm
+tweetphoto.com
+tweetrans.com
+tweetree.com
+tweettunnel.com
+tweetwally.com
+tweetymail.com
+twerkingbutt.com
+twftp.org
+tw.gigacircle.com
+tw.hao123.com
+twibase.com
+twibble.de
+twibbon.com
+twibs.com
+twicsy.com
+twiends.com
+twifan.com
+twiffo.com
+twiggit.org
+twilightsex.com
+twilog.org
+twimbow.com
+twimg.com
+twimg.edgesuite.net
+twindexx.com
+twip.me
+twipple.jp
+twishort.com
+twistar.cc
+twisterio.com
+twister.net.co
+twisternow.com
+twistory.net
+twit2d.com
+twitbrowser.net
+twitcause.com
+twitese.spaces.live.com
+twitgether.com
+twitgoo.com
+twitiq.com
+twitlonger.com
+twitmania.com
+twitoaster.com
+twitonmsn.com
+twitpic.com
+twitreferral.com
+twitstat.com
+twittbot.net
+twitter4j.org
+twitter.com
+twittercounter.com
+twitterfeed.com
+twittergadget.com
+twitter.jp
+twitterkr.com
+twittermail.com
+twitterrific.com
+twittertim.es
+twitthat.com
+twitturk.com
+twitturly.com
+twitvid.com
+twitzap.com
+twiyia.com
+tw.jiepang.com
+tw.knowledge.yahoo.com
+tw.mall.yahoo.com
+tw.mobi.yahoo.com
+tw.myblog.yahoo.com
+tw.news.yahoo.com
+twnorth.org.tw
+tw-npo.org
+tw.rd.yahoo.com
+twreg.info
+twstar.net
+tw.streetvoice.com
+twt.fm
+twtkr.com
+tw.tomonews.net
+twtrland.com
+twt.tl
+twttr.com
+twurl.nl
+tw.voa.mobi
+twyac.org
+tw.yahoo.com
+txxx.com
+tycool.com
+tynsoe.org
+typepad.com
+tzangms.com
+ub0.cc
+ubddns.org
+uberproxy.net
+ucdc1998.org
+uc-japan.org
+uderzo.it
+udn.com
+uforadio.com.tw
+ufreevpn.com
+ugo.com
+uhdwallpapers.org
+uhrp.org
+uighurbiz.net
+uighur.narod.ru
+uighur.nl
+ukcdp.co.uk
+ukliferadio.co.uk
+ulike.net
+ultravpn.fr
+ultraxs.com
+unblock.cn.com
+unblockdmm.com
+unblocksit.es
+unblock-us.com
+uncyclomedia.org
+uncyclopedia.hk
+uncyclopedia.info
+uncyclopedia.tw
+underwoodammo.com
+unholyknight.com
+uni.cc
+unicode.org
+unification.net
+unification.org.tw
+uniteddaily.com.my
+unitedsocialpress.com
+unix100.com
+unknownspace.org
+unodedos.com
+unpo.org
+untraceable.us
+uocn.org
+upcoming.yahoo.com
+update.playstation.net
+upholdjustice.org
+upload4u.info
+uploaded.to
+uploadstation.com
+upload.wikimedia.org
+upornia.com
+uproxy.org
+upwill.org
+ur7s.com
+urbansurvival.com
+urlborg.com
+urlparser.com
+usacn.com
+usaip.eu
+userapi.nytlog.com
+usfk.mil
+usinfo.state.gov
+usma.edu
+usmc.mil
+us.to
+ustream.tv
+usus.cc
+utopianpal.com
+uu-gg.com
+uushare.com
+uvwxyz.xyz
+uwants.com
+uwants.net
+uyghuramerican.org
+uyghurcanadiansociety.org
+uyghurcongress.org
+uyghur.co.uk
+uyghurensemble.co.uk
+uyghur-j.org
+uyghurpen.org
+uyghurpress.com
+uyghurstudies.org
+uygur.org
+v2ex.com
+v2ray.com
+v70.us
+vaayoo.com
+value-domain.com
+van001.com
+van698.com
+vanemu.cn
+vanilla-jp.com
+vanpeople.com
+vansky.com
+vapurl.com
+vatn.org
+vcfbuilder.org
+vcf-online.org
+veempiire.com
+vegasred.com
+vegas.williamhill.com
+velkaepocha.sk
+venbbs.com
+venchina.com
+ventureswell.com
+veoh.com
+verizon.net
+vermonttibet.org
+versavpn.com
+verybs.com
+vevo.com
+vft.com.tw
+viber.com
+vica.info
+victimsofcommunism.org
+vidble.com
+video.aol.ca
+video.aol.com
+video.aol.co.uk
+video.ap.org
+videobam.com
+videodetective.com
+video.fdbox.com
+video.foxbusiness.com
+videomega.tv
+videomo.com
+videopediaworld.com
+video.tiscali.it
+video.yahoo.com
+vid.me
+vidoemo.com
+vietdaikynguyen.com
+views.fm
+vijayatemple.org
+viki.com
+vimeocdn.com
+vimeo.com
+vimgolf.com
+vimperator.org
+vincnd.com
+vinniev.com
+visibletweets.com
+vital247.org
+viu.com
+vivahentai4u.net
+vivatube.com
+vivthomas.com
+vizvaz.com
+vjmedia.com.hk
+vllcs.org
+vlog.xuite.net
+vmixcore.com
+vn.hao123.com
+voa-11.akacast.akamaistream.net
+voacantonese.com
+voachineseblog.com
+voachinese.com
+voagd.com
+voanews.com
+voatibetan.com
+voatibetanenglish.com
+vocativ.com
+vocn.tv
+vot.org
+vovo2000.com
+voxer.com
+voy.com
+vpn4all.com
+vpnaccount.org
+vpnbook.com
+vpncoupons.com
+vpndada.com
+vpnfan.com
+vpnfire.com
+vpnforgame.net
+vpngate.jp
+vpngate.net
+vpngratis.net
+vpnhq.com
+vpninja.net
+vpnmaster.com
+vpnpick.com
+vpnpop.com
+vpnpronet.com
+vpnreactor.com
+vpnreviewz.com
+vpnsecure.me
+vpnsp.com
+vpntunnel.com
+vpnuk.info
+vpnunlimitedapp.com
+vpnvip.com
+vporn.com
+vpser.net
+vraiesagesse.net
+v-state.org
+vtunnel.com
+vuku.cc
+w3schools.com
+waffle1999.com
+wahas.com
+waigaobu.com
+waikeung.org
+waiwaier.com
+wallornot.org
+wallpapercasa.com
+wallproxy.com
+wallproxy.com.cn
+waltermartin.com
+waltermartin.org
+wanderinghorse.net
+wangafu.net
+wangjinbo.org
+wanglixiong.com
+wango.org
+wangruoshui.net
+wangyi64.spaces.live.com
+want-daily.com
+wanz-factory.com
+wapedia.mobi
+warbler.iconfactory.net
+waselpro.com
+washeng.net
+watchinese.com
+watchmygf.net
+wattpad.com
+waveprotocol.org
+wav.tv
+wdf5.com
+wearehairy.com
+wearn.com
+web2project.net
+webbang.net
+webevader.org
+webfee.tk
+webfreer.com
+webjb.org
+weblagu.com
+webmproject.org
+webrtc.org
+webrush.net
+webshots.com
+website.informer.com
+websitepulse.com
+webs-tv.net
+webwarper.net
+webworkerdaily.com
+weeewooo.net
+weekmag.info
+wefightcensorship.org
+wefong.com
+weibo.com
+weiboleak.com
+weiboscope.jmsc.hku.hk
+weigegebyc.dreamhosters.com
+weijingsheng.org
+weiming.info
+weiquanwang.org
+weisuo.ws
+wellplacedpixels.com
+welovecock.com
+wemigrate.org
+wengewang.com
+wengewang.org
+wenhui.ch
+wenku.com
+wenxuecity.com
+wenyunchao.com
+wenyunchao.spaces.live.com
+wepn.info
+westca.com
+westernshugdensociety.org
+westernwolves.com
+westkit.net
+westpoint.edu
+wetplace.com
+wetpussygames.com
+wexiaobo.org
+wezhiyong.org
+wezone.net
+wforum.com
+wha.la
+whatblocked.com
+whatbrowser.org
+wheatseeds.org
+wheelockslatin.com
+whereiswerner.com
+wheretowatch.com
+whippedass.com
+whitebear.freebearblog.org
+whodns.xyz
+whotalking.com
+whydidyoubuymethat.com
+whylover.com
+whyx.org
+w.idaiwan.com
+wikaba.com
+wiki.cnitter.com
+wiki.gamerp.jp
+wiki.jqueryui.com
+wiki.keso.cn
+wikileaks.ch
+wikileaks.de
+wikileaks.eu
+wikileaks-forum.com
+wikileaks.lu
+wikileaks.org
+wikileaks.pl
+wikilivres.info
+wikimapia.org
+wikimedia.org.mo
+wiki.moegirl.org
+wikinet.org
+wiki.oauth.net
+wikipedia.org
+wiki.phonegap.com
+wikiwiki.jp
+wikkii.com
+wildammo.com
+williamlong.spaces.live.com
+willw.net
+windowsphoneme.com
+wingamestore.com
+winning11.com
+winwhispers.info
+wiredbytes.com
+wiredpen.com
+wireshark.org
+wisdompubs.org
+wisevid.com
+withgoogle.com
+witnessleeteaching.com
+witopia.net
+wizcrafts.net
+wjbk.org
+wlcnew.jigsy.com
+wlx.sowiki.net
+wnacg.com
+wn.com
+woeser.com
+wokar.org
+wolfax.com
+womensrightsofchina.org
+woopie.jp
+woopie.tv
+wordboner.com
+wordpress.com
+wordsandturds.com
+w.org
+workatruna.com
+workerdemo.org.hk
+workersthebig.net
+worldcat.org
+worldjournal.com
+worldvpn.net
+worstthingieverate.com
+wo.tc
+wow.com
+wowgirls.com
+wowlegacy.ml
+wow-life.net
+wowporn.com
+woxinghuiguo.com
+woyaolian.org
+wozy.in
+wp.com
+wpoforum.com
+wqlhw.com
+wqyd.org
+wrchina.org
+wretch.cc
+writer.zoho.com
+wsgzao.github.io
+wsj.com
+wsjhk.com
+wsj.net
+wtbn.org
+wtfpeople.com
+wuala.com
+wuerkaixi.com
+wufafangwen.com
+wufi.org.tw
+wuguoguang.com
+wujieliulan.com
+wujie.net
+wukangrui.net
+wwitv.com
+www1.biz
+www.6v6dota.com
+www.ajsands.com
+www.americorps.gov
+www.antd.org
+www.aolnews.com
+www.bulbous.freeserve.co.uk
+www.cmoinc.org
+www.dfanning.com
+www.dw.com
+www.dwheeler.com
+www.freetibet.org
+www.getyouram.com
+www.gmiddle.com
+www.gmiddle.net
+www.goldenmelody.com.tw
+wwwhost.biz
+www.idlcoyote.com
+www.klip.me
+www.lamenhu.com
+www.linksalpha.com
+www.loiclemeur.com
+www.monlamit.org
+www.moztw.org
+www.m-sport.co.uk
+www.mycould.com
+www.orchidbbs.com
+www.owind.com
+www.oxid.it
+www.powerpointninja.com
+www.s4miniarchive.com
+www.stackfile.com
+www.supertweet.net
+www.taup.org.tw
+www.tiffanyarment.com
+www.tv.com
+www.urbanoutfitters.com
+www.vegorpedersen.com
+www.vpncup.com
+www.wangruowang.org
+www.wan-press.org
+www.websnapr.com
+www.wet123.com
+www.zaurus.org.uk
+wzyboy.im
+x1949x.com
+x24hr.com
+x365x.com
+xanga.com
+x-art.com
+xa.yimg.com
+xbabe.com
+x-berry.com
+xbookcn.com
+xcafe.in
+xcity.jp
+xcritic.com
+xerotica.com
+xfinity.com
+xfm.pp.ru
+xgmyd.com
+xh4n.cn
+xhamster.com
+xianchawang.net
+xianjian.tw
+xianqiao.net
+xiaochuncnjp.com
+xiaod.in
+xiaohexie.com
+xiaolan.me
+xiaoma.org
+xiezhua.com
+xihua.es
+xing.com
+xinhuanet.org
+xinmiao.com.hk
+xinqimeng.over-blog.com
+xinsheng.net
+xinshijue.com
+xinyubbs.net
+xiongpian.com
+xiuren.org
+xizang-zhiye.org
+xjp.cc
+xjtravelguide.com
+xlfmtalk.com
+xlfmwz.info
+xml-training-guide.com
+xmovies.com
+xmusic.fm
+xn--4gq171p.com
+xn--p8j9a0d9c9a.xn--q9jyb4c
+xnxx.com
+xpdo.net
+xpud.org
+xrentdvd.com
+xskywalker.com
+xtube.com
+xuchao.net
+xuchao.org
+xuzhiyong.net
+xuzhuoer.com
+xvedios.com
+xvideo.cc
+xvideos.com
+xvideos.es
+x-wall.org
+xxbbx.com
+xxlmovies.com
+xxuz.com
+xxx.com
+xxxfuckmom.com
+xxxx.com.au
+xxxy.biz
+xxxy.info
+xxxymovies.com
+xysblogs.org
+xys.dxiong.com
+xys.org
+xyy69.com
+xyy69.info
+yahoo.cn
+yahoo.com.hk
+yakbutterblues.com
+yam.com
+yam.org.tw
+yanghengjun.com
+yanghengjun.spaces.live.com
+yangjianli.com
+yasni.co.uk
+yasukuni.or.jp
+ydy.com
+yeahteentube.com
+yecl.net
+yeelou.com
+yeeyi.com
+yegle.net
+yes123.com.tw
+yesasia.com
+yesasia.com.hk
+yes-news.com
+yes.xxx
+yezimary.spaces.live.com
+yfrog.com
+ygto.com
+yhcw.net
+yibada.com
+yibaochina.com
+yidio.com
+yilubbs.com
+yingsuoss.com
+yi.org
+yipub.com
+yobt.com
+yogichen.org
+yong.hu
+yorkbbs.ca
+youdao.com
+youdontcare.com
+youjizz.com
+youmaker.com
+youpai.org
+youporn.com
+youporngay.com
+yourepeat.com
+your-freedom.net
+yourlisten.com
+yourlust.com
+yourprivatevpn.com
+yourtrap.com
+yousendit.com
+youshun12.com
+youthbao.com
+youthnetradio.org
+youtu.be
+youtubecn.com
+youtube.com
+youtubeeducation.com
+youtube-nocookie.com
+youversion.com
+youxu.info
+ytht.net
+ytimg.com
+yuanming.net
+yuanzhengtang.org
+yulghun.com
+yunchao.net
+yuvutu.com
+yvesgeleyn.com
+yx51.net
+yyii.org
+yymaya.com
+yzzk.com
+zacebook.com
+zalmos.com
+zannel.com
+zaobao.com
+zaobao.com.sg
+zaozon.com
+zapto.org
+zarias.com
+zattoo.com
+zdnet.com.tw
+zello.com
+zengjinyan.org
+zengjinyan.spaces.live.com
+zeutch.com
+zfreet.com
+zgsddh.com
+zgzcjj.net
+zhanbin.net
+zhangboli.net
+zhangtianliang.com
+zhao.1984.city
+zhao.jinhai.de
+zhenghui.org
+zhengwunet.org
+zhenlibu1984.com
+zhenlibu.info
+zhenxiang.biz
+zhinengluyou.com
+zhllg.spaces.live.com
+zh.netlog.com
+zhonggtuotese.net
+zhongguo.ca
+zhongguorenquan.org
+zhongguotese.net
+zhongmeng.org
+zhongsou.com
+zh.pokerstrategy.com
+zhreader.com
+zh-tw.justin.tv
+zhuanxing.cn
+zhuatieba.com
+zhuichaguoji.org
+zh.uncyclopedia.wikia.com
+zh.wikinews.org
+zh.wikisource.org
+zh.wikivoyage.org
+zh.wiktionary.org
+ziddu.com
+zillionk.com
+zinio.com
+ziplib.com
+ziporn.com
+zkaip.com
+zmw.cn
+zomobo.net
+zonaeuropa.com
+zonghexinwen.com
+zonghexinwen.net
+zootool.com
+zoozle.net
+zozotown.com
+zshare.net
+zsrhao.com
+zuobiao.me
+zuo.la
+zuola.com
+zvereff.com
+zynaima.com
+zynamics.com
+zyns.com
+zyzc9.com
+zyzg.us
+zzcartoon.com
+zzux.com
diff --git a/package/lean/ipset-lists/files/etc/gfwlist/unblock-youku b/package/lean/ipset-lists/files/etc/gfwlist/unblock-youku
new file mode 100755
index 0000000000..9306dcefd2
--- /dev/null
+++ b/package/lean/ipset-lists/files/etc/gfwlist/unblock-youku
@@ -0,0 +1,95 @@
+v.youku.com
+api.youku.com
+v2.tudou.com
+www.tudou.com
+s.plcloud.music.qq.com
+i.y.qq.com
+hot.vrs.sohu.com
+live.tv.sohu.com
+pad.tv.sohu.com
+my.tv.sohu.com
+hot.vrs.letv.com
+data.video.qiyi.com
+cache.video.qiyi.com
+cache.vip.qiyi.com
+vv.video.qq.com
+tt.video.qq.com
+ice.video.qq.com
+tjsa.video.qq.com
+a10.video.qq.com
+xyy.video.qq.com
+vcq.video.qq.com
+vsh.video.qq.com
+vbj.video.qq.com
+bobo.video.qq.com
+flvs.video.qq.com
+bkvv.video.qq.com
+info.zb.qq.com
+geo.js.kankan.xunlei.com
+web-play.pptv.com
+web-play.pplive.cn
+dyn.ugc.pps.tv
+v.pps.tv
+inner.kandian.com
+ipservice.163.com
+so.open.163.com
+zb.s.qq.com
+ip.kankan.xunlei.com
+vxml.56.com
+music.sina.com.cn
+play.baidu.com
+v.iask.com
+tv.weibo.com
+wtv.v.iask.com
+video.sina.com.cn
+www.yinyuetai.com
+api.letv.com
+live.gslb.letv.com
+static.itv.letv.com
+ip.apps.cntv.cn
+vdn.apps.cntv.cn
+vdn.live.cntv.cn
+vip.sports.cntv.cn
+a.play.api.3g.youku.com
+i.play.api.3g.youku.com
+api.3g.youku.com
+tv.api.3g.youku.com
+play.api.3g.youku.com
+play.api.3g.tudou.com
+tv.api.3g.tudou.com
+api.3g.tudou.com
+api.tv.sohu.com
+access.tv.sohu.com
+iface.iqiyi.com
+iface2.iqiyi.com
+cache.m.iqiyi.com
+dynamic.app.m.letv.com
+dynamic.meizi.app.m.letv.com
+dynamic.search.app.m.letv.com
+dynamic.live.app.m.letv.com
+listso.m.areainfo.ppstream.com
+epg.api.pptv.com
+play.api.pptv.com
+m.letv.com
+interface.bilibili.com
+3g.music.qq.com
+mqqplayer.3g.qq.com
+proxy.music.qq.com
+proxymc.qq.com
+ip2.kugou.com
+ip.kugou.com
+client.api.ttpod.com
+mobi.kuwo.cn
+mobilefeedback.kugou.com
+tingapi.ting.baidu.com
+music.baidu.com
+serviceinfo.sdk.duomi.com
+music.163.com
+www.xiami.com
+spark.api.xiami.com
+iplocation.geo.qiyi.com
+sns.video.qq.com
+v5.pc.duomi.com
+tms.is.ysten.com
+internal.check.duokanbox.com
+openapi.youku.com
diff --git a/package/lean/ipset-lists/files/etc/init.d/ipset.sh b/package/lean/ipset-lists/files/etc/init.d/ipset.sh
new file mode 100755
index 0000000000..55f82273b4
--- /dev/null
+++ b/package/lean/ipset-lists/files/etc/init.d/ipset.sh
@@ -0,0 +1,29 @@
+#!/bin/sh /etc/rc.common
+# Copyright (C) 2014 Justin Liu <rssnsj@gmail.com>
+
+START=21
+
+start()
+{
+	local file
+	for file in /etc/ipset/*; do
+		[ -f $file ] || continue
+		ipset restore < $file
+	done
+}
+
+stop()
+{
+	local file
+	for file in /etc/ipset/*; do
+		[ -f $file ] || continue
+		ipset destroy `basename $file`
+	done
+}
+
+restart()
+{
+	stop >/dev/null 2>&1
+	start
+}
+
diff --git a/package/lean/ipset-lists/files/etc/ipset/china b/package/lean/ipset-lists/files/etc/ipset/china
new file mode 100755
index 0000000000..ee3d3cc8b9
--- /dev/null
+++ b/package/lean/ipset-lists/files/etc/ipset/china
@@ -0,0 +1,8265 @@
+create china hash:net family inet hashsize 1024 maxelem 65536
+add china 1.0.1.0/24 
+add china 1.0.2.0/23 
+add china 1.0.8.0/21 
+add china 1.0.32.0/19 
+add china 1.1.0.0/24 
+add china 1.1.2.0/23 
+add china 1.1.4.0/22 
+add china 1.1.8.0/24 
+add china 1.1.9.0/24 
+add china 1.1.10.0/23 
+add china 1.1.12.0/22 
+add china 1.1.16.0/20 
+add china 1.1.32.0/19 
+add china 1.2.0.0/23 
+add china 1.2.2.0/24 
+add china 1.2.4.0/24 
+add china 1.2.5.0/24 
+add china 1.2.6.0/23 
+add china 1.2.8.0/24 
+add china 1.2.9.0/24 
+add china 1.2.10.0/23 
+add china 1.2.12.0/22 
+add china 1.2.16.0/20 
+add china 1.2.32.0/19 
+add china 1.2.64.0/18 
+add china 1.3.0.0/16 
+add china 1.4.1.0/24 
+add china 1.4.2.0/23 
+add china 1.4.4.0/24 
+add china 1.4.5.0/24 
+add china 1.4.6.0/23 
+add china 1.4.8.0/21 
+add china 1.4.16.0/20 
+add china 1.4.32.0/19 
+add china 1.4.64.0/18 
+add china 1.8.0.0/16 
+add china 1.10.0.0/21 
+add china 1.10.8.0/23 
+add china 1.10.11.0/24 
+add china 1.10.12.0/22 
+add china 1.10.16.0/20 
+add china 1.10.32.0/19 
+add china 1.10.64.0/18 
+add china 1.12.0.0/14 
+add china 1.24.0.0/13 
+add china 1.45.0.0/16 
+add china 1.48.0.0/15 
+add china 1.50.0.0/16 
+add china 1.51.0.0/16 
+add china 1.56.0.0/13 
+add china 1.68.0.0/14 
+add china 1.80.0.0/13 
+add china 1.88.0.0/14 
+add china 1.92.0.0/15 
+add china 1.94.0.0/15 
+add china 1.116.0.0/15 
+add china 1.118.0.0/16 
+add china 1.119.0.0/17 
+add china 1.119.128.0/17 
+add china 1.180.0.0/14 
+add china 1.184.0.0/15 
+add china 1.188.0.0/14 
+add china 1.192.0.0/13 
+add china 1.202.0.0/15 
+add china 1.204.0.0/14 
+add china 14.0.0.0/21 
+add china 14.0.12.0/22 
+add china 14.1.0.0/22 
+add china 14.1.24.0/22 
+add china 14.1.96.0/22 
+add china 14.1.108.0/22 
+add china 14.16.0.0/12 
+add china 14.102.128.0/22 
+add china 14.102.156.0/22 
+add china 14.102.180.0/22 
+add china 14.103.0.0/16 
+add china 14.104.0.0/13 
+add china 14.112.0.0/12 
+add china 14.130.0.0/15 
+add china 14.134.0.0/15 
+add china 14.144.0.0/12 
+add china 14.192.60.0/22 
+add china 14.192.76.0/22 
+add china 14.196.0.0/15 
+add china 14.204.0.0/15 
+add china 14.208.0.0/12 
+add china 27.0.128.0/22 
+add china 27.0.132.0/22 
+add china 27.0.160.0/22 
+add china 27.0.164.0/22 
+add china 27.0.188.0/22 
+add china 27.0.204.0/22 
+add china 27.0.208.0/22 
+add china 27.0.212.0/22 
+add china 27.8.0.0/13 
+add china 27.16.0.0/12 
+add china 27.34.232.0/21 
+add china 27.36.0.0/14 
+add china 27.40.0.0/13 
+add china 27.50.40.0/21 
+add china 27.50.128.0/17 
+add china 27.54.72.0/21 
+add china 27.54.152.0/21 
+add china 27.54.192.0/18 
+add china 27.98.208.0/20 
+add china 27.98.224.0/19 
+add china 27.99.128.0/17 
+add china 27.103.0.0/16 
+add china 27.106.128.0/18 
+add china 27.106.204.0/22 
+add china 27.109.32.0/19 
+add china 27.109.124.0/22 
+add china 27.112.0.0/18 
+add china 27.112.80.0/20 
+add china 27.112.112.0/22 
+add china 27.112.116.0/22 
+add china 27.113.128.0/18 
+add china 27.115.0.0/17 
+add china 27.116.44.0/22 
+add china 27.121.72.0/21 
+add china 27.121.120.0/21 
+add china 27.123.232.0/22 
+add china 27.128.0.0/15 
+add china 27.131.220.0/22 
+add china 27.144.0.0/16 
+add china 27.148.0.0/14 
+add china 27.152.0.0/13 
+add china 27.184.0.0/13 
+add china 27.192.0.0/11 
+add china 27.224.0.0/14 
+add china 36.0.0.0/22 
+add china 36.0.8.0/21 
+add china 36.0.16.0/20 
+add china 36.0.32.0/19 
+add china 36.0.64.0/18 
+add china 36.0.128.0/17 
+add china 36.1.0.0/16 
+add china 36.4.0.0/14 
+add china 36.16.0.0/12 
+add china 36.32.0.0/14 
+add china 36.36.0.0/16 
+add china 36.37.0.0/19 
+add china 36.37.36.0/23 
+add china 36.37.39.0/24 
+add china 36.37.40.0/21 
+add china 36.37.48.0/20 
+add china 36.40.0.0/13 
+add china 36.48.0.0/15 
+add china 36.51.0.0/16 
+add china 36.56.0.0/13 
+add china 36.96.0.0/11 
+add china 36.128.0.0/10 
+add china 36.192.0.0/11 
+add china 36.248.0.0/14 
+add china 36.254.0.0/16 
+add china 36.255.116.0/22 
+add china 36.255.128.0/22 
+add china 36.255.164.0/22 
+add china 36.255.172.0/22 
+add china 36.255.176.0/22 
+add china 36.255.220.0/22 
+add china 39.0.0.0/24 
+add china 39.0.2.0/23 
+add china 39.0.4.0/22 
+add china 39.0.8.0/21 
+add china 39.0.16.0/20 
+add china 39.0.32.0/19 
+add china 39.0.64.0/18 
+add china 39.0.128.0/17 
+add china 39.64.0.0/11 
+add china 39.96.0.0/13 
+add china 39.104.0.0/14 
+add china 39.108.0.0/16 
+add china 39.128.0.0/10 
+add china 40.72.0.0/15 
+add china 40.125.128.0/17 
+add china 40.126.64.0/18 
+add china 42.0.0.0/22 
+add china 42.0.8.0/21 
+add china 42.0.16.0/21 
+add china 42.0.24.0/22 
+add china 42.0.32.0/19 
+add china 42.0.128.0/17 
+add china 42.1.0.0/19 
+add china 42.1.32.0/20 
+add china 42.1.48.0/21 
+add china 42.1.56.0/22 
+add china 42.1.128.0/17 
+add china 42.4.0.0/14 
+add china 42.48.0.0/15 
+add china 42.50.0.0/16 
+add china 42.51.0.0/16 
+add china 42.52.0.0/14 
+add china 42.56.0.0/14 
+add china 42.62.0.0/17 
+add china 42.62.128.0/19 
+add china 42.62.160.0/20 
+add china 42.62.180.0/22 
+add china 42.62.184.0/21 
+add china 42.63.0.0/16 
+add china 42.80.0.0/15 
+add china 42.83.64.0/20 
+add china 42.83.80.0/22 
+add china 42.83.88.0/21 
+add china 42.83.96.0/19 
+add china 42.83.128.0/17 
+add china 42.84.0.0/14 
+add china 42.88.0.0/13 
+add china 42.96.64.0/19 
+add china 42.96.96.0/21 
+add china 42.96.108.0/22 
+add china 42.96.112.0/20 
+add china 42.96.128.0/17 
+add china 42.97.0.0/16 
+add china 42.99.0.0/18 
+add china 42.99.64.0/19 
+add china 42.99.96.0/20 
+add china 42.99.112.0/22 
+add china 42.99.120.0/21 
+add china 42.100.0.0/14 
+add china 42.120.0.0/15 
+add china 42.122.0.0/16 
+add china 42.123.0.0/19 
+add china 42.123.36.0/22 
+add china 42.123.40.0/21 
+add china 42.123.48.0/20 
+add china 42.123.64.0/18 
+add china 42.123.128.0/17 
+add china 42.128.0.0/12 
+add china 42.156.0.0/19 
+add china 42.156.36.0/22 
+add china 42.156.40.0/21 
+add china 42.156.48.0/20 
+add china 42.156.64.0/18 
+add china 42.156.128.0/17 
+add china 42.157.0.0/16 
+add china 42.158.0.0/16 
+add china 42.159.0.0/16 
+add china 42.160.0.0/12 
+add china 42.176.0.0/13 
+add china 42.184.0.0/15 
+add china 42.186.0.0/16 
+add china 42.187.0.0/18 
+add china 42.187.64.0/19 
+add china 42.187.96.0/20 
+add china 42.187.112.0/21 
+add china 42.187.120.0/22 
+add china 42.187.128.0/17 
+add china 42.192.0.0/15 
+add china 42.194.0.0/21 
+add china 42.194.8.0/22 
+add china 42.194.12.0/22 
+add china 42.194.16.0/20 
+add china 42.194.32.0/19 
+add china 42.194.64.0/18 
+add china 42.194.128.0/17 
+add china 42.195.0.0/16 
+add china 42.196.0.0/14 
+add china 42.201.0.0/17 
+add china 42.202.0.0/15 
+add china 42.204.0.0/14 
+add china 42.208.0.0/12 
+add china 42.224.0.0/12 
+add china 42.240.0.0/17 
+add china 42.240.128.0/17 
+add china 42.242.0.0/15 
+add china 42.244.0.0/14 
+add china 42.248.0.0/13 
+add china 43.224.12.0/22 
+add china 43.224.24.0/22 
+add china 43.224.44.0/22 
+add china 43.224.52.0/22 
+add china 43.224.56.0/22 
+add china 43.224.64.0/22 
+add china 43.224.68.0/22 
+add china 43.224.72.0/22 
+add china 43.224.80.0/22 
+add china 43.224.100.0/22 
+add china 43.224.144.0/22 
+add china 43.224.160.0/22 
+add china 43.224.176.0/22 
+add china 43.224.184.0/22 
+add china 43.224.200.0/22 
+add china 43.224.204.0/22 
+add china 43.224.208.0/22 
+add china 43.224.212.0/22 
+add china 43.224.216.0/22 
+add china 43.224.240.0/22 
+add china 43.225.76.0/22 
+add china 43.225.84.0/22 
+add china 43.225.120.0/22 
+add china 43.225.124.0/22 
+add china 43.225.140.0/22 
+add china 43.225.172.0/22 
+add china 43.225.180.0/22 
+add china 43.225.208.0/22 
+add china 43.225.216.0/22 
+add china 43.225.220.0/22 
+add china 43.225.224.0/22 
+add china 43.225.228.0/22 
+add china 43.225.232.0/22 
+add china 43.225.236.0/22 
+add china 43.225.240.0/22 
+add china 43.225.244.0/22 
+add china 43.225.252.0/22 
+add china 43.226.32.0/22 
+add china 43.226.36.0/22 
+add china 43.226.40.0/22 
+add china 43.226.44.0/22 
+add china 43.226.48.0/22 
+add china 43.226.52.0/22 
+add china 43.226.56.0/22 
+add china 43.226.60.0/22 
+add china 43.226.64.0/22 
+add china 43.226.68.0/22 
+add china 43.226.72.0/22 
+add china 43.226.76.0/22 
+add china 43.226.80.0/22 
+add china 43.226.84.0/22 
+add china 43.226.88.0/22 
+add china 43.226.92.0/22 
+add china 43.226.96.0/22 
+add china 43.226.100.0/22 
+add china 43.226.104.0/22 
+add china 43.226.108.0/22 
+add china 43.226.112.0/22 
+add china 43.226.116.0/22 
+add china 43.226.120.0/22 
+add china 43.226.128.0/22 
+add china 43.226.132.0/22 
+add china 43.226.136.0/22 
+add china 43.226.140.0/22 
+add china 43.226.144.0/22 
+add china 43.226.148.0/22 
+add china 43.226.152.0/22 
+add china 43.226.156.0/22 
+add china 43.226.160.0/22 
+add china 43.226.164.0/22 
+add china 43.226.168.0/22 
+add china 43.226.172.0/22 
+add china 43.226.176.0/22 
+add china 43.226.180.0/22 
+add china 43.226.184.0/22 
+add china 43.226.188.0/22 
+add china 43.226.192.0/22 
+add china 43.226.196.0/22 
+add china 43.226.200.0/22 
+add china 43.226.204.0/22 
+add china 43.226.208.0/22 
+add china 43.226.212.0/22 
+add china 43.226.236.0/22 
+add china 43.226.240.0/22 
+add china 43.226.244.0/22 
+add china 43.226.248.0/22 
+add china 43.226.252.0/22 
+add china 43.227.0.0/22 
+add china 43.227.4.0/22 
+add china 43.227.8.0/22 
+add china 43.227.32.0/22 
+add china 43.227.36.0/22 
+add china 43.227.40.0/22 
+add china 43.227.44.0/22 
+add china 43.227.48.0/22 
+add china 43.227.52.0/22 
+add china 43.227.56.0/22 
+add china 43.227.60.0/22 
+add china 43.227.64.0/22 
+add china 43.227.68.0/22 
+add china 43.227.72.0/22 
+add china 43.227.76.0/22 
+add china 43.227.80.0/22 
+add china 43.227.84.0/22 
+add china 43.227.88.0/22 
+add china 43.227.92.0/22 
+add china 43.227.96.0/22 
+add china 43.227.100.0/22 
+add china 43.227.104.0/22 
+add china 43.227.136.0/22 
+add china 43.227.140.0/22 
+add china 43.227.144.0/22 
+add china 43.227.152.0/22 
+add china 43.227.156.0/22 
+add china 43.227.160.0/22 
+add china 43.227.164.0/22 
+add china 43.227.168.0/22 
+add china 43.227.172.0/22 
+add china 43.227.176.0/22 
+add china 43.227.180.0/22 
+add china 43.227.188.0/22 
+add china 43.227.192.0/22 
+add china 43.227.196.0/22 
+add china 43.227.200.0/22 
+add china 43.227.204.0/22 
+add china 43.227.208.0/22 
+add china 43.227.212.0/22 
+add china 43.227.216.0/22 
+add china 43.227.220.0/22 
+add china 43.227.232.0/22 
+add china 43.227.248.0/22 
+add china 43.227.252.0/22 
+add china 43.228.0.0/22 
+add china 43.228.4.0/22 
+add china 43.228.8.0/22 
+add china 43.228.12.0/22 
+add china 43.228.16.0/22 
+add china 43.228.20.0/22 
+add china 43.228.24.0/22 
+add china 43.228.28.0/22 
+add china 43.228.32.0/22 
+add china 43.228.36.0/22 
+add china 43.228.40.0/22 
+add china 43.228.44.0/22 
+add china 43.228.48.0/22 
+add china 43.228.52.0/22 
+add china 43.228.56.0/22 
+add china 43.228.60.0/22 
+add china 43.228.64.0/22 
+add china 43.228.68.0/22 
+add china 43.228.76.0/22 
+add china 43.228.100.0/22 
+add china 43.228.116.0/22 
+add china 43.228.120.0/22 
+add china 43.228.132.0/22 
+add china 43.228.136.0/22 
+add china 43.228.148.0/22 
+add china 43.228.152.0/22 
+add china 43.228.188.0/22 
+add china 43.229.16.0/22 
+add china 43.229.40.0/22 
+add china 43.229.48.0/22 
+add china 43.229.56.0/22 
+add china 43.229.96.0/22 
+add china 43.229.120.0/22 
+add china 43.229.136.0/22 
+add china 43.229.140.0/22 
+add china 43.229.144.0/22 
+add china 43.229.168.0/22 
+add china 43.229.172.0/22 
+add china 43.229.176.0/22 
+add china 43.229.180.0/22 
+add china 43.229.184.0/22 
+add china 43.229.188.0/22 
+add china 43.229.192.0/22 
+add china 43.229.196.0/22 
+add china 43.229.216.0/22 
+add china 43.229.220.0/22 
+add china 43.229.232.0/22 
+add china 43.229.236.0/22 
+add china 43.230.20.0/22 
+add china 43.230.32.0/22 
+add china 43.230.68.0/22 
+add china 43.230.72.0/22 
+add china 43.230.84.0/22 
+add china 43.230.124.0/22 
+add china 43.230.136.0/22 
+add china 43.230.168.0/22 
+add china 43.230.220.0/22 
+add china 43.230.224.0/22 
+add china 43.230.228.0/22 
+add china 43.230.232.0/22 
+add china 43.230.236.0/22 
+add china 43.230.240.0/22 
+add china 43.230.244.0/22 
+add china 43.230.248.0/22 
+add china 43.230.252.0/22 
+add china 43.231.32.0/22 
+add china 43.231.36.0/22 
+add china 43.231.40.0/22 
+add china 43.231.44.0/22 
+add china 43.231.80.0/22 
+add china 43.231.84.0/22 
+add china 43.231.88.0/22 
+add china 43.231.92.0/22 
+add china 43.231.96.0/22 
+add china 43.231.100.0/22 
+add china 43.231.104.0/22 
+add china 43.231.108.0/22 
+add china 43.231.136.0/22 
+add china 43.231.140.0/22 
+add china 43.231.144.0/22 
+add china 43.231.148.0/22 
+add china 43.231.152.0/22 
+add china 43.231.156.0/22 
+add china 43.231.160.0/22 
+add china 43.231.164.0/22 
+add china 43.231.168.0/22 
+add china 43.231.172.0/22 
+add china 43.231.176.0/22 
+add china 43.231.180.0/22 
+add china 43.236.0.0/22 
+add china 43.236.4.0/22 
+add china 43.236.8.0/22 
+add china 43.236.12.0/22 
+add china 43.236.16.0/22 
+add china 43.236.20.0/22 
+add china 43.236.24.0/22 
+add china 43.236.28.0/22 
+add china 43.236.32.0/22 
+add china 43.236.36.0/22 
+add china 43.236.40.0/22 
+add china 43.236.44.0/22 
+add china 43.236.48.0/22 
+add china 43.236.52.0/22 
+add china 43.236.56.0/22 
+add china 43.236.60.0/22 
+add china 43.236.64.0/22 
+add china 43.236.68.0/22 
+add china 43.236.72.0/22 
+add china 43.236.76.0/22 
+add china 43.236.80.0/22 
+add china 43.236.84.0/22 
+add china 43.236.88.0/22 
+add china 43.236.92.0/22 
+add china 43.236.96.0/22 
+add china 43.236.100.0/22 
+add china 43.236.104.0/22 
+add china 43.236.108.0/22 
+add china 43.236.112.0/22 
+add china 43.236.116.0/22 
+add china 43.236.120.0/22 
+add china 43.236.124.0/22 
+add china 43.236.128.0/22 
+add china 43.236.132.0/22 
+add china 43.236.136.0/22 
+add china 43.236.140.0/22 
+add china 43.236.144.0/22 
+add china 43.236.148.0/22 
+add china 43.236.152.0/22 
+add china 43.236.156.0/22 
+add china 43.236.160.0/22 
+add china 43.236.164.0/22 
+add china 43.236.168.0/22 
+add china 43.236.172.0/22 
+add china 43.236.176.0/22 
+add china 43.236.180.0/22 
+add china 43.236.184.0/22 
+add china 43.236.188.0/22 
+add china 43.236.192.0/22 
+add china 43.236.196.0/22 
+add china 43.236.200.0/22 
+add china 43.236.204.0/22 
+add china 43.236.208.0/22 
+add china 43.236.212.0/22 
+add china 43.236.216.0/22 
+add china 43.236.220.0/22 
+add china 43.236.224.0/22 
+add china 43.236.228.0/22 
+add china 43.236.232.0/22 
+add china 43.236.236.0/22 
+add china 43.236.240.0/22 
+add china 43.236.244.0/22 
+add china 43.236.248.0/22 
+add china 43.236.252.0/22 
+add china 43.237.0.0/22 
+add china 43.237.4.0/22 
+add china 43.237.8.0/22 
+add china 43.237.12.0/22 
+add china 43.237.16.0/22 
+add china 43.237.20.0/22 
+add china 43.237.24.0/22 
+add china 43.237.28.0/22 
+add china 43.237.32.0/22 
+add china 43.237.36.0/22 
+add china 43.237.40.0/22 
+add china 43.237.44.0/22 
+add china 43.237.48.0/22 
+add china 43.237.52.0/22 
+add china 43.237.56.0/22 
+add china 43.237.60.0/22 
+add china 43.237.64.0/22 
+add china 43.237.68.0/22 
+add china 43.237.72.0/22 
+add china 43.237.76.0/22 
+add china 43.237.80.0/22 
+add china 43.237.84.0/22 
+add china 43.237.88.0/22 
+add china 43.237.92.0/22 
+add china 43.237.96.0/22 
+add china 43.237.100.0/22 
+add china 43.237.104.0/22 
+add china 43.237.108.0/22 
+add china 43.237.112.0/22 
+add china 43.237.116.0/22 
+add china 43.237.120.0/22 
+add china 43.237.124.0/22 
+add china 43.237.128.0/22 
+add china 43.237.132.0/22 
+add china 43.237.136.0/22 
+add china 43.237.140.0/22 
+add china 43.237.144.0/22 
+add china 43.237.148.0/22 
+add china 43.237.152.0/22 
+add china 43.237.156.0/22 
+add china 43.237.160.0/22 
+add china 43.237.164.0/22 
+add china 43.237.168.0/22 
+add china 43.237.172.0/22 
+add china 43.237.176.0/22 
+add china 43.237.180.0/22 
+add china 43.237.184.0/22 
+add china 43.237.188.0/22 
+add china 43.237.192.0/22 
+add china 43.237.196.0/22 
+add china 43.237.200.0/22 
+add china 43.237.204.0/22 
+add china 43.237.208.0/22 
+add china 43.237.212.0/22 
+add china 43.237.216.0/22 
+add china 43.237.220.0/22 
+add china 43.237.224.0/22 
+add china 43.237.228.0/22 
+add china 43.237.232.0/22 
+add china 43.237.236.0/22 
+add china 43.237.240.0/22 
+add china 43.237.244.0/22 
+add china 43.237.248.0/22 
+add china 43.237.252.0/22 
+add china 43.238.0.0/22 
+add china 43.238.4.0/22 
+add china 43.238.8.0/22 
+add china 43.238.12.0/22 
+add china 43.238.16.0/22 
+add china 43.238.20.0/22 
+add china 43.238.24.0/22 
+add china 43.238.28.0/22 
+add china 43.238.32.0/22 
+add china 43.238.36.0/22 
+add china 43.238.40.0/22 
+add china 43.238.44.0/22 
+add china 43.238.48.0/22 
+add china 43.238.52.0/22 
+add china 43.238.56.0/22 
+add china 43.238.60.0/22 
+add china 43.238.64.0/22 
+add china 43.238.68.0/22 
+add china 43.238.72.0/22 
+add china 43.238.76.0/22 
+add china 43.238.80.0/22 
+add china 43.238.84.0/22 
+add china 43.238.88.0/22 
+add china 43.238.92.0/22 
+add china 43.238.96.0/22 
+add china 43.238.100.0/22 
+add china 43.238.104.0/22 
+add china 43.238.108.0/22 
+add china 43.238.112.0/22 
+add china 43.238.116.0/22 
+add china 43.238.120.0/22 
+add china 43.238.124.0/22 
+add china 43.238.128.0/22 
+add china 43.238.132.0/22 
+add china 43.238.136.0/22 
+add china 43.238.140.0/22 
+add china 43.238.144.0/22 
+add china 43.238.148.0/22 
+add china 43.238.152.0/22 
+add china 43.238.156.0/22 
+add china 43.238.160.0/22 
+add china 43.238.164.0/22 
+add china 43.238.168.0/22 
+add china 43.238.172.0/22 
+add china 43.238.176.0/22 
+add china 43.238.180.0/22 
+add china 43.238.184.0/22 
+add china 43.238.188.0/22 
+add china 43.238.192.0/22 
+add china 43.238.196.0/22 
+add china 43.238.200.0/22 
+add china 43.238.204.0/22 
+add china 43.238.208.0/22 
+add china 43.238.212.0/22 
+add china 43.238.216.0/22 
+add china 43.238.220.0/22 
+add china 43.238.224.0/22 
+add china 43.238.228.0/22 
+add china 43.238.232.0/22 
+add china 43.238.236.0/22 
+add china 43.238.240.0/22 
+add china 43.238.244.0/22 
+add china 43.238.248.0/22 
+add china 43.238.252.0/22 
+add china 43.239.0.0/22 
+add china 43.239.4.0/22 
+add china 43.239.8.0/21 
+add china 43.239.16.0/22 
+add china 43.239.20.0/22 
+add china 43.239.24.0/22 
+add china 43.239.28.0/22 
+add china 43.239.32.0/22 
+add china 43.239.36.0/22 
+add china 43.239.40.0/22 
+add china 43.239.44.0/22 
+add china 43.239.48.0/22 
+add china 43.239.116.0/22 
+add china 43.239.120.0/22 
+add china 43.239.172.0/22 
+add china 43.239.176.0/22 
+add china 43.240.0.0/22 
+add china 43.240.48.0/22 
+add china 43.240.56.0/22 
+add china 43.240.60.0/22 
+add china 43.240.68.0/22 
+add china 43.240.72.0/22 
+add china 43.240.76.0/22 
+add china 43.240.84.0/22 
+add china 43.240.124.0/22 
+add china 43.240.128.0/22 
+add china 43.240.132.0/22 
+add china 43.240.136.0/22 
+add china 43.240.156.0/22 
+add china 43.240.160.0/22 
+add china 43.240.164.0/22 
+add china 43.240.168.0/22 
+add china 43.240.172.0/22 
+add china 43.240.176.0/22 
+add china 43.240.180.0/22 
+add china 43.240.184.0/22 
+add china 43.240.188.0/22 
+add china 43.240.192.0/22 
+add china 43.240.196.0/22 
+add china 43.240.200.0/22 
+add china 43.240.204.0/22 
+add china 43.240.208.0/22 
+add china 43.240.212.0/22 
+add china 43.240.216.0/22 
+add china 43.240.220.0/22 
+add china 43.240.236.0/22 
+add china 43.240.240.0/22 
+add china 43.240.244.0/22 
+add china 43.240.248.0/22 
+add china 43.240.252.0/22 
+add china 43.241.0.0/22 
+add china 43.241.4.0/22 
+add china 43.241.8.0/22 
+add china 43.241.12.0/22 
+add china 43.241.16.0/22 
+add china 43.241.20.0/22 
+add china 43.241.48.0/22 
+add china 43.241.76.0/22 
+add china 43.241.80.0/22 
+add china 43.241.84.0/22 
+add china 43.241.88.0/22 
+add china 43.241.92.0/22 
+add china 43.241.112.0/22 
+add china 43.241.168.0/22 
+add china 43.241.172.0/22 
+add china 43.241.176.0/22 
+add china 43.241.180.0/22 
+add china 43.241.184.0/22 
+add china 43.241.196.0/22 
+add china 43.241.208.0/22 
+add china 43.241.212.0/22 
+add china 43.241.216.0/22 
+add china 43.241.220.0/22 
+add china 43.241.224.0/22 
+add china 43.241.228.0/22 
+add china 43.241.232.0/22 
+add china 43.241.236.0/22 
+add china 43.241.240.0/22 
+add china 43.241.248.0/22 
+add china 43.241.252.0/22 
+add china 43.242.8.0/22 
+add china 43.242.12.0/22 
+add china 43.242.16.0/22 
+add china 43.242.20.0/22 
+add china 43.242.24.0/22 
+add china 43.242.28.0/22 
+add china 43.242.44.0/22 
+add china 43.242.48.0/22 
+add china 43.242.52.0/22 
+add china 43.242.56.0/22 
+add china 43.242.60.0/22 
+add china 43.242.64.0/22 
+add china 43.242.72.0/22 
+add china 43.242.76.0/22 
+add china 43.242.80.0/22 
+add china 43.242.84.0/22 
+add china 43.242.88.0/22 
+add china 43.242.92.0/22 
+add china 43.242.96.0/22 
+add china 43.242.144.0/22 
+add china 43.242.148.0/22 
+add china 43.242.152.0/22 
+add china 43.242.156.0/22 
+add china 43.242.160.0/22 
+add china 43.242.164.0/22 
+add china 43.242.168.0/22 
+add china 43.242.180.0/22 
+add china 43.242.188.0/22 
+add china 43.242.192.0/22 
+add china 43.242.196.0/22 
+add china 43.242.204.0/22 
+add china 43.242.216.0/22 
+add china 43.242.220.0/22 
+add china 43.242.252.0/22 
+add china 43.243.4.0/22 
+add china 43.243.8.0/22 
+add china 43.243.12.0/22 
+add china 43.243.16.0/22 
+add china 43.243.24.0/22 
+add china 43.243.88.0/22 
+add china 43.243.128.0/22 
+add china 43.243.136.0/22 
+add china 43.243.144.0/22 
+add china 43.243.148.0/22 
+add china 43.243.156.0/22 
+add china 43.243.168.0/22 
+add china 43.243.180.0/22 
+add china 43.243.188.0/22 
+add china 43.243.228.0/22 
+add china 43.243.232.0/22 
+add china 43.243.244.0/22 
+add china 43.246.0.0/22 
+add china 43.246.4.0/22 
+add china 43.246.8.0/22 
+add china 43.246.12.0/22 
+add china 43.246.16.0/22 
+add china 43.246.20.0/22 
+add china 43.246.24.0/22 
+add china 43.246.28.0/22 
+add china 43.246.32.0/22 
+add china 43.246.36.0/22 
+add china 43.246.40.0/22 
+add china 43.246.44.0/22 
+add china 43.246.48.0/22 
+add china 43.246.52.0/22 
+add china 43.246.56.0/22 
+add china 43.246.60.0/22 
+add china 43.246.64.0/22 
+add china 43.246.68.0/22 
+add china 43.246.72.0/22 
+add china 43.246.76.0/22 
+add china 43.246.80.0/22 
+add china 43.246.84.0/22 
+add china 43.246.88.0/22 
+add china 43.246.92.0/22 
+add china 43.246.96.0/22 
+add china 43.246.112.0/22 
+add china 43.246.212.0/22 
+add china 43.246.228.0/22 
+add china 43.247.4.0/22 
+add china 43.247.8.0/22 
+add china 43.247.44.0/22 
+add china 43.247.48.0/22 
+add china 43.247.68.0/22 
+add china 43.247.76.0/22 
+add china 43.247.84.0/22 
+add china 43.247.88.0/22 
+add china 43.247.92.0/22 
+add china 43.247.96.0/22 
+add china 43.247.100.0/22 
+add china 43.247.108.0/22 
+add china 43.247.112.0/22 
+add china 43.247.148.0/22 
+add china 43.247.152.0/22 
+add china 43.247.176.0/22 
+add china 43.247.180.0/22 
+add china 43.247.184.0/22 
+add china 43.247.188.0/22 
+add china 43.247.196.0/22 
+add china 43.247.200.0/22 
+add china 43.247.204.0/22 
+add china 43.247.208.0/22 
+add china 43.247.212.0/22 
+add china 43.247.216.0/22 
+add china 43.247.220.0/22 
+add china 43.247.224.0/22 
+add china 43.247.228.0/22 
+add china 43.247.232.0/22 
+add china 43.247.236.0/22 
+add china 43.247.240.0/22 
+add china 43.247.244.0/22 
+add china 43.247.248.0/22 
+add china 43.247.252.0/22 
+add china 43.248.0.0/22 
+add china 43.248.4.0/22 
+add china 43.248.20.0/22 
+add china 43.248.28.0/22 
+add china 43.248.48.0/22 
+add china 43.248.76.0/22 
+add china 43.248.80.0/22 
+add china 43.248.84.0/22 
+add china 43.248.88.0/22 
+add china 43.248.92.0/22 
+add china 43.248.96.0/22 
+add china 43.248.100.0/22 
+add china 43.248.104.0/22 
+add china 43.248.108.0/22 
+add china 43.248.112.0/22 
+add china 43.248.116.0/22 
+add china 43.248.120.0/22 
+add china 43.248.124.0/22 
+add china 43.248.128.0/22 
+add china 43.248.132.0/22 
+add china 43.248.136.0/22 
+add china 43.248.140.0/22 
+add china 43.248.144.0/22 
+add china 43.248.148.0/22 
+add china 43.248.176.0/22 
+add china 43.248.180.0/22 
+add china 43.248.184.0/22 
+add china 43.248.188.0/22 
+add china 43.248.192.0/22 
+add china 43.248.196.0/22 
+add china 43.248.200.0/22 
+add china 43.248.204.0/22 
+add china 43.248.208.0/22 
+add china 43.248.228.0/22 
+add china 43.248.232.0/22 
+add china 43.248.244.0/22 
+add china 43.249.0.0/22 
+add china 43.249.4.0/22 
+add china 43.249.8.0/22 
+add china 43.249.24.0/22 
+add china 43.249.120.0/22 
+add china 43.249.132.0/22 
+add china 43.249.136.0/22 
+add china 43.249.144.0/22 
+add china 43.249.148.0/22 
+add china 43.249.152.0/22 
+add china 43.249.156.0/22 
+add china 43.249.160.0/22 
+add china 43.249.164.0/22 
+add china 43.249.168.0/22 
+add china 43.249.192.0/22 
+add china 43.249.236.0/22 
+add china 43.250.4.0/22 
+add china 43.250.12.0/22 
+add china 43.250.16.0/22 
+add china 43.250.20.0/22 
+add china 43.250.28.0/22 
+add china 43.250.32.0/22 
+add china 43.250.36.0/22 
+add china 43.250.72.0/22 
+add china 43.250.96.0/22 
+add china 43.250.100.0/22 
+add china 43.250.104.0/22 
+add china 43.250.108.0/22 
+add china 43.250.112.0/22 
+add china 43.250.116.0/22 
+add china 43.250.128.0/22 
+add china 43.250.144.0/22 
+add china 43.250.148.0/22 
+add china 43.250.160.0/22 
+add china 43.250.168.0/22 
+add china 43.250.172.0/22 
+add china 43.250.176.0/22 
+add china 43.250.200.0/22 
+add china 43.250.212.0/22 
+add china 43.250.216.0/22 
+add china 43.250.220.0/22 
+add china 43.250.236.0/22 
+add china 43.250.244.0/22 
+add china 43.251.4.0/22 
+add china 43.251.8.0/22 
+add china 43.251.12.0/22 
+add china 43.251.36.0/22 
+add china 43.251.100.0/22 
+add china 43.251.116.0/22 
+add china 43.251.192.0/22 
+add china 43.251.232.0/22 
+add china 43.251.236.0/22 
+add china 43.251.244.0/22 
+add china 43.252.40.0/22 
+add china 43.252.48.0/22 
+add china 43.252.56.0/22 
+add china 43.252.224.0/22 
+add china 43.254.0.0/22 
+add china 43.254.4.0/22 
+add china 43.254.8.0/22 
+add china 43.254.24.0/22 
+add china 43.254.36.0/22 
+add china 43.254.44.0/22 
+add china 43.254.52.0/22 
+add china 43.254.64.0/22 
+add china 43.254.72.0/22 
+add china 43.254.84.0/22 
+add china 43.254.88.0/22 
+add china 43.254.92.0/22 
+add china 43.254.100.0/22 
+add china 43.254.104.0/22 
+add china 43.254.112.0/22 
+add china 43.254.116.0/22 
+add china 43.254.128.0/22 
+add china 43.254.136.0/22 
+add china 43.254.140.0/22 
+add china 43.254.144.0/22 
+add china 43.254.148.0/22 
+add china 43.254.152.0/22 
+add china 43.254.156.0/22 
+add china 43.254.168.0/22 
+add china 43.254.172.0/22 
+add china 43.254.180.0/22 
+add china 43.254.184.0/22 
+add china 43.254.188.0/22 
+add china 43.254.192.0/22 
+add china 43.254.196.0/22 
+add china 43.254.200.0/22 
+add china 43.254.208.0/22 
+add china 43.254.220.0/22 
+add china 43.254.224.0/22 
+add china 43.254.228.0/22 
+add china 43.254.232.0/22 
+add china 43.254.236.0/22 
+add china 43.254.240.0/22 
+add china 43.254.248.0/22 
+add china 43.254.252.0/22 
+add china 43.255.0.0/22 
+add china 43.255.4.0/22 
+add china 43.255.8.0/22 
+add china 43.255.16.0/22 
+add china 43.255.48.0/22 
+add china 43.255.64.0/22 
+add china 43.255.68.0/22 
+add china 43.255.72.0/22 
+add china 43.255.76.0/22 
+add china 43.255.84.0/22 
+add china 43.255.96.0/22 
+add china 43.255.108.0/22 
+add china 43.255.144.0/22 
+add china 43.255.168.0/22 
+add china 43.255.176.0/22 
+add china 43.255.184.0/22 
+add china 43.255.192.0/22 
+add china 43.255.200.0/22 
+add china 43.255.204.0/22 
+add china 43.255.208.0/22 
+add china 43.255.212.0/22 
+add china 43.255.224.0/22 
+add china 43.255.228.0/22 
+add china 43.255.232.0/22 
+add china 43.255.244.0/22 
+add china 45.40.192.0/18 
+add china 45.65.16.0/22 
+add china 45.65.20.0/22 
+add china 45.65.24.0/22 
+add china 45.65.28.0/22 
+add china 45.112.132.0/22 
+add china 45.112.188.0/22 
+add china 45.112.208.0/22 
+add china 45.112.212.0/22 
+add china 45.112.216.0/22 
+add china 45.112.220.0/22 
+add china 45.112.228.0/22 
+add china 45.112.232.0/22 
+add china 45.112.236.0/22 
+add china 45.113.12.0/22 
+add china 45.113.16.0/22 
+add china 45.113.20.0/22 
+add china 45.113.24.0/22 
+add china 45.113.28.0/22 
+add china 45.113.40.0/22 
+add china 45.113.52.0/22 
+add china 45.113.56.0/22 
+add china 45.113.72.0/22 
+add china 45.113.144.0/22 
+add china 45.113.148.0/22 
+add china 45.113.168.0/22 
+add china 45.113.176.0/22 
+add china 45.113.184.0/22 
+add china 45.113.200.0/22 
+add china 45.113.204.0/22 
+add china 45.113.208.0/22 
+add china 45.113.212.0/22 
+add china 45.113.216.0/22 
+add china 45.113.220.0/22 
+add china 45.113.240.0/22 
+add china 45.113.252.0/22 
+add china 45.114.0.0/22 
+add china 45.114.12.0/22 
+add china 45.114.32.0/22 
+add china 45.114.40.0/22 
+add china 45.114.52.0/22 
+add china 45.114.96.0/22 
+add china 45.114.104.0/22 
+add china 45.114.108.0/22 
+add china 45.114.124.0/22 
+add china 45.114.136.0/22 
+add china 45.114.196.0/22 
+add china 45.114.200.0/22 
+add china 45.114.228.0/22 
+add china 45.114.252.0/22 
+add china 45.115.44.0/22 
+add china 45.115.100.0/22 
+add china 45.115.120.0/22 
+add china 45.115.132.0/22 
+add china 45.115.144.0/22 
+add china 45.115.156.0/22 
+add china 45.115.164.0/22 
+add china 45.115.200.0/22 
+add china 45.115.212.0/22 
+add china 45.115.228.0/22 
+add china 45.115.236.0/22 
+add china 45.115.244.0/22 
+add china 45.115.248.0/22 
+add china 45.116.12.0/22 
+add china 45.116.16.0/22 
+add china 45.116.24.0/22 
+add china 45.116.32.0/22 
+add china 45.116.36.0/22 
+add china 45.116.52.0/22 
+add china 45.116.96.0/22 
+add china 45.116.100.0/22 
+add china 45.116.140.0/22 
+add china 45.116.152.0/22 
+add china 45.116.208.0/22 
+add china 45.117.8.0/22 
+add china 45.117.20.0/22 
+add china 45.117.68.0/22 
+add china 45.117.124.0/22 
+add china 45.117.252.0/22 
+add china 45.119.52.0/22 
+add china 45.119.60.0/22 
+add china 45.119.64.0/22 
+add china 45.119.68.0/22 
+add china 45.119.72.0/22 
+add china 45.119.104.0/22 
+add china 45.119.116.0/22 
+add china 45.119.232.0/22 
+add china 45.120.100.0/22 
+add china 45.120.140.0/22 
+add china 45.120.164.0/22 
+add china 45.120.220.0/22 
+add china 45.120.240.0/22 
+add china 45.121.20.0/22 
+add china 45.121.52.0/22 
+add china 45.121.64.0/22 
+add china 45.121.68.0/22 
+add china 45.121.72.0/22 
+add china 45.121.92.0/22 
+add china 45.121.96.0/22 
+add china 45.121.104.0/22 
+add china 45.121.172.0/22 
+add china 45.121.176.0/22 
+add china 45.121.212.0/22 
+add china 45.121.240.0/22 
+add china 45.121.244.0/22 
+add china 45.121.248.0/22 
+add china 45.121.252.0/22 
+add china 45.122.0.0/22 
+add china 45.122.4.0/22 
+add china 45.122.8.0/22 
+add china 45.122.12.0/22 
+add china 45.122.16.0/22 
+add china 45.122.20.0/22 
+add china 45.122.24.0/22 
+add china 45.122.28.0/22 
+add china 45.122.32.0/22 
+add china 45.122.36.0/22 
+add china 45.122.40.0/22 
+add china 45.122.60.0/22 
+add china 45.122.64.0/22 
+add china 45.122.68.0/22 
+add china 45.122.72.0/22 
+add china 45.122.76.0/22 
+add china 45.122.80.0/22 
+add china 45.122.84.0/22 
+add china 45.122.88.0/22 
+add china 45.122.92.0/22 
+add china 45.122.96.0/21 
+add china 45.122.104.0/22 
+add china 45.122.108.0/22 
+add china 45.122.112.0/22 
+add china 45.122.116.0/22 
+add china 45.122.160.0/22 
+add china 45.122.164.0/22 
+add china 45.122.168.0/22 
+add china 45.122.172.0/22 
+add china 45.122.176.0/22 
+add china 45.122.180.0/22 
+add china 45.122.184.0/22 
+add china 45.122.188.0/22 
+add china 45.122.192.0/22 
+add china 45.122.196.0/22 
+add china 45.122.200.0/22 
+add china 45.122.204.0/22 
+add china 45.122.208.0/22 
+add china 45.122.212.0/22 
+add china 45.122.216.0/22 
+add china 45.123.28.0/22 
+add china 45.123.32.0/22 
+add china 45.123.36.0/22 
+add china 45.123.44.0/22 
+add china 45.123.48.0/22 
+add china 45.123.52.0/22 
+add china 45.123.56.0/22 
+add china 45.123.60.0/22 
+add china 45.123.64.0/22 
+add china 45.123.68.0/22 
+add china 45.123.72.0/22 
+add china 45.123.76.0/22 
+add china 45.123.80.0/22 
+add china 45.123.84.0/22 
+add china 45.123.88.0/22 
+add china 45.123.120.0/22 
+add china 45.123.128.0/22 
+add china 45.123.132.0/22 
+add china 45.123.136.0/22 
+add china 45.123.148.0/22 
+add china 45.123.152.0/22 
+add china 45.123.156.0/22 
+add china 45.123.164.0/22 
+add china 45.123.168.0/22 
+add china 45.123.172.0/22 
+add china 45.123.176.0/22 
+add china 45.123.180.0/22 
+add china 45.123.184.0/22 
+add china 45.123.204.0/22 
+add china 45.123.212.0/22 
+add china 45.123.224.0/22 
+add china 45.123.228.0/22 
+add china 45.123.232.0/22 
+add china 45.123.236.0/22 
+add china 45.123.240.0/22 
+add china 45.123.244.0/22 
+add china 45.123.248.0/22 
+add china 45.123.252.0/22 
+add china 45.124.0.0/22 
+add china 45.124.20.0/22 
+add china 45.124.28.0/22 
+add china 45.124.32.0/22 
+add china 45.124.36.0/22 
+add china 45.124.44.0/22 
+add china 45.124.68.0/22 
+add china 45.124.76.0/22 
+add china 45.124.80.0/22 
+add china 45.124.100.0/22 
+add china 45.124.124.0/22 
+add china 45.124.172.0/22 
+add china 45.124.176.0/22 
+add china 45.124.208.0/22 
+add china 45.124.248.0/22 
+add china 45.124.252.0/22 
+add china 45.125.12.0/22 
+add china 45.125.16.0/22 
+add china 45.125.24.0/22 
+add china 45.125.28.0/22 
+add china 45.125.32.0/22 
+add china 45.125.44.0/22 
+add china 45.125.52.0/22 
+add china 45.125.56.0/22 
+add china 45.125.76.0/22 
+add china 45.125.80.0/22 
+add china 45.125.84.0/22 
+add china 45.125.88.0/22 
+add china 45.125.92.0/22 
+add china 45.125.96.0/22 
+add china 45.125.100.0/22 
+add china 45.125.104.0/22 
+add china 45.125.136.0/22 
+add china 45.126.48.0/22 
+add china 45.126.52.0/22 
+add china 45.126.100.0/22 
+add china 45.126.108.0/22 
+add china 45.126.112.0/22 
+add china 45.126.116.0/22 
+add china 45.126.120.0/22 
+add china 45.126.212.0/22 
+add china 45.126.220.0/22 
+add china 45.127.8.0/22 
+add china 45.127.12.0/22 
+add china 45.127.96.0/22 
+add china 45.127.116.0/22 
+add china 45.127.124.0/22 
+add china 45.127.128.0/22 
+add china 45.127.144.0/22 
+add china 45.127.148.0/22 
+add china 45.127.156.0/22 
+add china 45.127.216.0/22 
+add china 45.248.8.0/22 
+add china 45.248.80.0/22 
+add china 45.248.84.0/22 
+add china 45.248.88.0/22 
+add china 45.248.96.0/22 
+add china 45.248.100.0/22 
+add china 45.248.104.0/22 
+add china 45.248.108.0/22 
+add china 45.248.128.0/22 
+add china 45.248.132.0/22 
+add china 45.248.204.0/22 
+add china 45.248.208.0/22 
+add china 45.248.212.0/22 
+add china 45.248.216.0/22 
+add china 45.248.220.0/22 
+add china 45.248.224.0/22 
+add china 45.248.228.0/22 
+add china 45.248.232.0/22 
+add china 45.248.236.0/22 
+add china 45.248.240.0/22 
+add china 45.248.244.0/22 
+add china 45.248.248.0/22 
+add china 45.248.252.0/22 
+add china 45.249.0.0/22 
+add china 45.249.4.0/22 
+add china 45.249.12.0/22 
+add china 45.249.16.0/22 
+add china 45.249.20.0/22 
+add china 45.249.24.0/22 
+add china 45.249.28.0/22 
+add china 45.249.32.0/22 
+add china 45.249.36.0/22 
+add china 45.249.92.0/22 
+add china 45.249.112.0/22 
+add china 45.249.180.0/22 
+add china 45.249.188.0/22 
+add china 45.249.192.0/22 
+add china 45.249.196.0/22 
+add china 45.249.200.0/22 
+add china 45.249.204.0/22 
+add china 45.249.208.0/22 
+add china 45.249.212.0/22 
+add china 45.250.12.0/22 
+add china 45.250.16.0/22 
+add china 45.250.28.0/22 
+add china 45.250.32.0/22 
+add china 45.250.36.0/22 
+add china 45.250.40.0/22 
+add china 45.250.76.0/22 
+add china 45.250.80.0/22 
+add china 45.250.84.0/22 
+add china 45.250.88.0/22 
+add china 45.250.92.0/22 
+add china 45.250.96.0/22 
+add china 45.250.104.0/22 
+add china 45.250.108.0/22 
+add china 45.250.112.0/22 
+add china 45.250.116.0/22 
+add china 45.250.120.0/22 
+add china 45.250.124.0/22 
+add china 45.250.128.0/22 
+add china 45.250.132.0/22 
+add china 45.250.136.0/22 
+add china 45.250.140.0/22 
+add china 45.250.144.0/22 
+add china 45.250.148.0/22 
+add china 45.250.152.0/22 
+add china 45.250.164.0/22 
+add china 45.250.180.0/22 
+add china 45.250.184.0/22 
+add china 45.250.188.0/22 
+add china 45.250.192.0/22 
+add china 45.251.0.0/22 
+add china 45.251.8.0/22 
+add china 45.251.16.0/22 
+add china 45.251.20.0/22 
+add china 45.251.52.0/22 
+add china 45.251.84.0/22 
+add china 45.251.88.0/22 
+add china 45.251.92.0/22 
+add china 45.251.96.0/22 
+add china 45.251.100.0/22 
+add china 45.251.120.0/22 
+add china 45.251.124.0/22 
+add china 45.251.136.0/22 
+add china 45.251.140.0/22 
+add china 45.251.144.0/22 
+add china 45.251.148.0/22 
+add china 45.251.152.0/22 
+add china 45.251.156.0/22 
+add china 45.251.160.0/22 
+add china 45.251.164.0/22 
+add china 45.251.168.0/22 
+add china 45.251.172.0/22 
+add china 45.251.176.0/22 
+add china 45.251.180.0/22 
+add china 45.251.184.0/22 
+add china 45.251.188.0/22 
+add china 45.251.192.0/22 
+add china 45.251.196.0/22 
+add china 45.251.200.0/22 
+add china 45.251.204.0/22 
+add china 45.251.208.0/22 
+add china 45.251.212.0/22 
+add china 45.251.216.0/22 
+add china 45.251.220.0/22 
+add china 45.251.224.0/22 
+add china 45.251.240.0/22 
+add china 45.252.0.0/22 
+add china 45.252.4.0/22 
+add china 45.252.8.0/22 
+add china 45.252.12.0/22 
+add china 45.252.16.0/22 
+add china 45.252.20.0/22 
+add china 45.252.24.0/22 
+add china 45.252.28.0/22 
+add china 45.252.32.0/22 
+add china 45.252.36.0/22 
+add china 45.252.40.0/22 
+add china 45.252.44.0/22 
+add china 45.252.48.0/22 
+add china 45.252.60.0/22 
+add china 45.252.84.0/22 
+add china 45.252.88.0/22 
+add china 45.252.92.0/22 
+add china 45.252.96.0/22 
+add china 45.252.100.0/22 
+add china 45.252.104.0/22 
+add china 45.252.108.0/22 
+add china 45.252.112.0/22 
+add china 45.252.116.0/22 
+add china 45.252.120.0/22 
+add china 45.252.124.0/22 
+add china 45.252.128.0/22 
+add china 45.252.132.0/22 
+add china 45.252.136.0/22 
+add china 45.252.140.0/22 
+add china 45.252.144.0/22 
+add china 45.252.148.0/22 
+add china 45.252.152.0/22 
+add china 45.252.156.0/22 
+add china 45.252.160.0/22 
+add china 45.252.164.0/22 
+add china 45.252.168.0/22 
+add china 45.252.172.0/22 
+add china 45.252.176.0/22 
+add china 45.252.192.0/22 
+add china 45.252.196.0/22 
+add china 45.252.200.0/22 
+add china 45.252.204.0/22 
+add china 45.252.208.0/22 
+add china 45.252.212.0/22 
+add china 45.252.216.0/22 
+add china 45.252.220.0/22 
+add china 45.252.224.0/22 
+add china 45.252.228.0/22 
+add china 45.252.232.0/22 
+add china 45.253.0.0/22 
+add china 45.253.4.0/22 
+add china 45.253.8.0/22 
+add china 45.253.12.0/22 
+add china 45.253.16.0/22 
+add china 45.253.20.0/22 
+add china 45.253.24.0/22 
+add china 45.253.28.0/22 
+add china 45.253.32.0/22 
+add china 45.253.36.0/22 
+add china 45.253.40.0/22 
+add china 45.253.44.0/22 
+add china 45.253.48.0/22 
+add china 45.253.52.0/22 
+add china 45.253.56.0/22 
+add china 45.253.60.0/22 
+add china 45.253.64.0/22 
+add china 45.253.68.0/22 
+add china 45.253.72.0/22 
+add china 45.253.76.0/22 
+add china 45.253.80.0/22 
+add china 45.253.84.0/22 
+add china 45.253.92.0/22 
+add china 45.253.96.0/22 
+add china 45.253.100.0/22 
+add china 45.253.104.0/22 
+add china 45.253.108.0/22 
+add china 45.253.112.0/22 
+add china 45.253.116.0/22 
+add china 45.253.120.0/22 
+add china 45.253.132.0/22 
+add china 45.253.136.0/22 
+add china 45.253.140.0/22 
+add china 45.253.144.0/22 
+add china 45.253.148.0/22 
+add china 45.253.152.0/22 
+add china 45.253.156.0/22 
+add china 45.253.160.0/22 
+add china 45.253.164.0/22 
+add china 45.253.168.0/22 
+add china 45.253.172.0/22 
+add china 45.253.176.0/22 
+add china 45.253.180.0/22 
+add china 45.253.184.0/22 
+add china 45.253.188.0/22 
+add china 45.253.192.0/22 
+add china 45.253.196.0/22 
+add china 45.253.200.0/22 
+add china 45.253.204.0/22 
+add china 45.253.208.0/22 
+add china 45.253.212.0/22 
+add china 45.253.216.0/22 
+add china 45.253.220.0/22 
+add china 45.253.224.0/22 
+add china 45.253.228.0/22 
+add china 45.253.232.0/22 
+add china 45.253.236.0/22 
+add china 45.253.240.0/22 
+add china 45.253.244.0/22 
+add china 45.253.248.0/22 
+add china 45.253.252.0/22 
+add china 45.254.0.0/22 
+add china 45.254.4.0/22 
+add china 45.254.8.0/22 
+add china 45.254.12.0/22 
+add china 45.254.16.0/22 
+add china 45.254.20.0/22 
+add china 45.254.24.0/22 
+add china 45.254.28.0/22 
+add china 45.254.40.0/22 
+add china 45.254.48.0/22 
+add china 45.254.52.0/22 
+add china 45.254.56.0/22 
+add china 45.254.60.0/22 
+add china 45.254.64.0/22 
+add china 45.254.68.0/22 
+add china 45.254.72.0/22 
+add china 45.254.76.0/22 
+add china 45.254.80.0/22 
+add china 45.254.84.0/22 
+add china 45.254.88.0/22 
+add china 45.254.92.0/22 
+add china 45.254.96.0/22 
+add china 45.254.100.0/22 
+add china 45.254.104.0/22 
+add china 45.254.108.0/22 
+add china 45.254.112.0/22 
+add china 45.254.116.0/22 
+add china 45.254.120.0/22 
+add china 45.254.124.0/22 
+add china 45.254.128.0/22 
+add china 45.254.132.0/22 
+add china 45.254.136.0/22 
+add china 45.254.140.0/22 
+add china 45.254.144.0/22 
+add china 45.254.148.0/22 
+add china 45.254.152.0/22 
+add china 45.254.156.0/22 
+add china 45.254.160.0/22 
+add china 45.254.164.0/22 
+add china 45.254.168.0/22 
+add china 45.254.172.0/22 
+add china 45.254.176.0/22 
+add china 45.254.180.0/22 
+add china 45.254.184.0/22 
+add china 45.254.188.0/22 
+add china 45.254.192.0/22 
+add china 45.254.196.0/22 
+add china 45.254.200.0/22 
+add china 45.254.204.0/22 
+add china 45.254.208.0/22 
+add china 45.254.212.0/22 
+add china 45.254.216.0/22 
+add china 45.254.220.0/22 
+add china 45.254.224.0/22 
+add china 45.254.228.0/22 
+add china 45.254.236.0/22 
+add china 45.254.240.0/22 
+add china 45.254.248.0/22 
+add china 45.255.0.0/22 
+add china 45.255.4.0/22 
+add china 45.255.8.0/22 
+add china 45.255.12.0/22 
+add china 45.255.16.0/22 
+add china 45.255.20.0/22 
+add china 45.255.24.0/22 
+add china 45.255.28.0/22 
+add china 45.255.32.0/22 
+add china 45.255.36.0/22 
+add china 45.255.40.0/22 
+add china 45.255.44.0/22 
+add china 45.255.48.0/22 
+add china 45.255.52.0/22 
+add china 45.255.56.0/22 
+add china 45.255.60.0/22 
+add china 45.255.64.0/22 
+add china 45.255.68.0/22 
+add china 45.255.72.0/22 
+add china 45.255.76.0/22 
+add china 45.255.80.0/22 
+add china 45.255.84.0/22 
+add china 45.255.88.0/22 
+add china 45.255.92.0/22 
+add china 45.255.96.0/22 
+add china 45.255.100.0/22 
+add china 45.255.104.0/22 
+add china 45.255.108.0/22 
+add china 45.255.112.0/22 
+add china 45.255.116.0/22 
+add china 45.255.120.0/22 
+add china 45.255.124.0/22 
+add china 45.255.132.0/22 
+add china 45.255.136.0/22 
+add china 45.255.140.0/22 
+add china 45.255.144.0/22 
+add china 45.255.148.0/22 
+add china 45.255.152.0/22 
+add china 45.255.156.0/22 
+add china 45.255.160.0/22 
+add china 45.255.164.0/22 
+add china 45.255.168.0/22 
+add china 45.255.172.0/22 
+add china 45.255.176.0/22 
+add china 45.255.180.0/22 
+add china 45.255.184.0/22 
+add china 45.255.188.0/22 
+add china 45.255.192.0/22 
+add china 45.255.196.0/22 
+add china 45.255.200.0/22 
+add china 45.255.204.0/22 
+add china 45.255.208.0/22 
+add china 45.255.212.0/22 
+add china 45.255.216.0/22 
+add china 45.255.220.0/22 
+add china 45.255.224.0/22 
+add china 45.255.228.0/22 
+add china 45.255.232.0/22 
+add china 45.255.236.0/22 
+add china 45.255.240.0/22 
+add china 45.255.244.0/22 
+add china 45.255.248.0/22 
+add china 47.92.0.0/14 
+add china 47.96.0.0/11 
+add china 49.4.0.0/14 
+add china 49.51.0.0/16 
+add china 49.52.0.0/14 
+add china 49.64.0.0/11 
+add china 49.112.0.0/13 
+add china 49.120.0.0/14 
+add china 49.128.0.0/24 
+add china 49.128.2.0/23 
+add china 49.128.4.0/22 
+add china 49.140.0.0/15 
+add china 49.152.0.0/14 
+add china 49.208.0.0/15 
+add china 49.210.0.0/15 
+add china 49.220.0.0/14 
+add china 49.232.0.0/14 
+add china 49.239.0.0/18 
+add china 49.239.192.0/18 
+add china 49.246.224.0/19 
+add china 52.80.0.0/15 
+add china 52.82.0.0/15 
+add china 52.130.0.0/15 
+add china 54.222.0.0/15 
+add china 58.14.0.0/15 
+add china 58.16.0.0/16 
+add china 58.17.0.0/17 
+add china 58.17.128.0/17 
+add china 58.18.0.0/16 
+add china 58.19.0.0/16 
+add china 58.20.0.0/16 
+add china 58.21.0.0/16 
+add china 58.22.0.0/15 
+add china 58.24.0.0/15 
+add china 58.30.0.0/15 
+add china 58.32.0.0/13 
+add china 58.40.0.0/15 
+add china 58.42.0.0/16 
+add china 58.43.0.0/16 
+add china 58.44.0.0/14 
+add china 58.48.0.0/13 
+add china 58.56.0.0/15 
+add china 58.58.0.0/16 
+add china 58.59.0.0/17 
+add china 58.59.128.0/17 
+add china 58.60.0.0/14 
+add china 58.65.232.0/21 
+add china 58.66.0.0/15 
+add china 58.68.128.0/17 
+add china 58.82.0.0/17 
+add china 58.83.0.0/17 
+add china 58.83.128.0/17 
+add china 58.87.64.0/18 
+add china 58.99.128.0/17 
+add china 58.100.0.0/15 
+add china 58.116.0.0/14 
+add china 58.128.0.0/13 
+add china 58.144.0.0/16 
+add china 58.154.0.0/15 
+add china 58.192.0.0/15 
+add china 58.194.0.0/15 
+add china 58.196.0.0/15 
+add china 58.198.0.0/15 
+add china 58.200.0.0/13 
+add china 58.208.0.0/12 
+add china 58.240.0.0/15 
+add china 58.242.0.0/15 
+add china 58.244.0.0/15 
+add china 58.246.0.0/15 
+add china 58.248.0.0/13 
+add china 59.32.0.0/13 
+add china 59.40.0.0/15 
+add china 59.42.0.0/16 
+add china 59.43.0.0/16 
+add china 59.44.0.0/14 
+add china 59.48.0.0/16 
+add china 59.49.0.0/17 
+add china 59.49.128.0/17 
+add china 59.50.0.0/16 
+add china 59.51.0.0/17 
+add china 59.51.128.0/17 
+add china 59.52.0.0/14 
+add china 59.56.0.0/14 
+add china 59.60.0.0/15 
+add china 59.62.0.0/15 
+add china 59.64.0.0/14 
+add china 59.68.0.0/14 
+add china 59.72.0.0/15 
+add china 59.74.0.0/15 
+add china 59.76.0.0/16 
+add china 59.77.0.0/16 
+add china 59.78.0.0/15 
+add china 59.80.0.0/15 
+add china 59.82.0.0/15 
+add china 59.107.0.0/17 
+add china 59.107.128.0/17 
+add china 59.108.0.0/15 
+add china 59.110.0.0/15 
+add china 59.151.0.0/17 
+add china 59.152.16.0/22 
+add china 59.152.20.0/22 
+add china 59.152.24.0/22 
+add china 59.152.28.0/22 
+add china 59.152.32.0/22 
+add china 59.152.36.0/22 
+add china 59.152.64.0/22 
+add china 59.152.68.0/22 
+add china 59.152.72.0/22 
+add china 59.152.76.0/22 
+add china 59.152.112.0/22 
+add china 59.152.116.0/22 
+add china 59.153.4.0/22 
+add china 59.153.32.0/22 
+add china 59.153.60.0/22 
+add china 59.153.64.0/22 
+add china 59.153.68.0/22 
+add china 59.153.72.0/22 
+add china 59.153.92.0/22 
+add china 59.153.116.0/22 
+add china 59.153.136.0/22 
+add china 59.153.152.0/22 
+add china 59.153.156.0/22 
+add china 59.153.164.0/22 
+add china 59.153.168.0/22 
+add china 59.153.172.0/22 
+add china 59.153.176.0/22 
+add china 59.153.180.0/22 
+add china 59.153.184.0/22 
+add china 59.153.188.0/22 
+add china 59.153.192.0/22 
+add china 59.155.0.0/16 
+add china 59.172.0.0/15 
+add china 59.174.0.0/15 
+add china 59.191.0.0/17 
+add china 59.191.240.0/20 
+add china 59.192.0.0/10 
+add china 60.0.0.0/13 
+add china 60.8.0.0/15 
+add china 60.10.0.0/16 
+add china 60.11.0.0/16 
+add china 60.12.0.0/16 
+add china 60.13.0.0/18 
+add china 60.13.64.0/18 
+add china 60.13.128.0/17 
+add china 60.14.0.0/15 
+add china 60.16.0.0/13 
+add china 60.24.0.0/14 
+add china 60.28.0.0/15 
+add china 60.30.0.0/16 
+add china 60.31.0.0/16 
+add china 60.55.0.0/16 
+add china 60.63.0.0/16 
+add china 60.160.0.0/15 
+add china 60.162.0.0/15 
+add china 60.164.0.0/15 
+add china 60.166.0.0/15 
+add china 60.168.0.0/13 
+add china 60.176.0.0/12 
+add china 60.194.0.0/15 
+add china 60.200.0.0/14 
+add china 60.204.0.0/16 
+add china 60.205.0.0/16 
+add china 60.206.0.0/15 
+add china 60.208.0.0/13 
+add china 60.216.0.0/15 
+add china 60.218.0.0/15 
+add china 60.220.0.0/14 
+add china 60.232.0.0/15 
+add china 60.235.0.0/16 
+add china 60.245.128.0/17 
+add china 60.247.0.0/16 
+add china 60.252.0.0/16 
+add china 60.253.128.0/17 
+add china 60.255.0.0/16 
+add china 61.4.80.0/22 
+add china 61.4.84.0/22 
+add china 61.4.88.0/21 
+add china 61.4.176.0/20 
+add china 61.8.160.0/20 
+add china 61.14.212.0/22 
+add china 61.14.216.0/22 
+add china 61.14.220.0/22 
+add china 61.14.240.0/22 
+add china 61.14.244.0/22 
+add china 61.28.0.0/20 
+add china 61.28.16.0/20 
+add china 61.28.32.0/19 
+add china 61.28.64.0/18 
+add china 61.29.128.0/18 
+add china 61.29.192.0/19 
+add china 61.29.224.0/20 
+add china 61.29.240.0/20 
+add china 61.45.128.0/18 
+add china 61.45.224.0/20 
+add china 61.47.128.0/18 
+add china 61.48.0.0/14 
+add china 61.52.0.0/15 
+add china 61.54.0.0/16 
+add china 61.55.0.0/16 
+add china 61.87.192.0/18 
+add china 61.128.0.0/15 
+add china 61.130.0.0/15 
+add china 61.132.0.0/16 
+add china 61.133.0.0/17 
+add china 61.133.128.0/17 
+add china 61.134.0.0/18 
+add china 61.134.64.0/19 
+add china 61.134.96.0/19 
+add china 61.134.128.0/18 
+add china 61.134.192.0/18 
+add china 61.135.0.0/16 
+add china 61.136.0.0/18 
+add china 61.136.64.0/18 
+add china 61.136.128.0/17 
+add china 61.137.0.0/17 
+add china 61.137.128.0/17 
+add china 61.138.0.0/18 
+add china 61.138.64.0/18 
+add china 61.138.128.0/18 
+add china 61.138.192.0/18 
+add china 61.139.0.0/17 
+add china 61.139.128.0/18 
+add china 61.139.192.0/18 
+add china 61.140.0.0/14 
+add china 61.144.0.0/14 
+add china 61.148.0.0/15 
+add china 61.150.0.0/15 
+add china 61.152.0.0/16 
+add china 61.153.0.0/16 
+add china 61.154.0.0/15 
+add china 61.156.0.0/16 
+add china 61.157.0.0/16 
+add china 61.158.0.0/17 
+add china 61.158.128.0/17 
+add china 61.159.0.0/18 
+add china 61.159.64.0/18 
+add china 61.159.128.0/17 
+add china 61.160.0.0/16 
+add china 61.161.0.0/18 
+add china 61.161.64.0/18 
+add china 61.161.128.0/17 
+add china 61.162.0.0/16 
+add china 61.163.0.0/16 
+add china 61.164.0.0/16 
+add china 61.165.0.0/16 
+add china 61.166.0.0/16 
+add china 61.167.0.0/16 
+add china 61.168.0.0/16 
+add china 61.169.0.0/16 
+add china 61.170.0.0/15 
+add china 61.172.0.0/14 
+add china 61.176.0.0/16 
+add china 61.177.0.0/16 
+add china 61.178.0.0/16 
+add china 61.179.0.0/16 
+add china 61.180.0.0/17 
+add china 61.180.128.0/17 
+add china 61.181.0.0/16 
+add china 61.182.0.0/16 
+add china 61.183.0.0/16 
+add china 61.184.0.0/14 
+add china 61.188.0.0/16 
+add china 61.189.0.0/17 
+add china 61.189.128.0/17 
+add china 61.190.0.0/15 
+add china 61.232.0.0/14 
+add china 61.236.0.0/15 
+add china 61.240.0.0/14 
+add china 62.234.0.0/16 
+add china 68.79.0.0/18 
+add china 69.230.192.0/18 
+add china 69.231.128.0/18 
+add china 69.234.192.0/18 
+add china 69.235.128.0/18 
+add china 71.131.192.0/18 
+add china 71.132.0.0/18 
+add china 71.136.64.0/18 
+add china 71.137.0.0/18 
+add china 81.68.0.0/14 
+add china 82.156.0.0/15 
+add china 94.191.0.0/17 
+add china 101.0.0.0/22 
+add china 101.1.0.0/22 
+add china 101.2.172.0/22 
+add china 101.4.0.0/14 
+add china 101.16.0.0/12 
+add china 101.32.0.0/14 
+add china 101.36.0.0/17 
+add china 101.36.128.0/17 
+add china 101.37.0.0/16 
+add china 101.38.0.0/15 
+add china 101.40.0.0/13 
+add china 101.48.0.0/15 
+add china 101.50.8.0/22 
+add china 101.50.12.0/22 
+add china 101.50.56.0/22 
+add china 101.52.0.0/16 
+add china 101.53.100.0/22 
+add china 101.54.0.0/16 
+add china 101.55.224.0/21 
+add china 101.64.0.0/13 
+add china 101.72.0.0/14 
+add china 101.76.0.0/15 
+add china 101.78.0.0/22 
+add china 101.78.32.0/19 
+add china 101.80.0.0/12 
+add china 101.96.0.0/21 
+add china 101.96.8.0/22 
+add china 101.96.16.0/20 
+add china 101.96.128.0/17 
+add china 101.99.96.0/19 
+add china 101.101.64.0/19 
+add china 101.101.100.0/24 
+add china 101.101.102.0/23 
+add china 101.101.104.0/21 
+add china 101.101.112.0/20 
+add china 101.102.64.0/19 
+add china 101.102.100.0/23 
+add china 101.102.102.0/24 
+add china 101.102.104.0/21 
+add china 101.102.112.0/20 
+add china 101.104.0.0/14 
+add china 101.110.64.0/19 
+add china 101.110.96.0/20 
+add china 101.110.116.0/22 
+add china 101.110.120.0/21 
+add china 101.120.0.0/14 
+add china 101.124.0.0/15 
+add china 101.126.0.0/16 
+add china 101.128.0.0/22 
+add china 101.128.8.0/21 
+add china 101.128.16.0/20 
+add china 101.128.32.0/19 
+add china 101.129.0.0/16 
+add china 101.130.0.0/15 
+add china 101.132.0.0/14 
+add china 101.144.0.0/12 
+add china 101.192.0.0/14 
+add china 101.196.0.0/16 
+add china 101.197.0.0/16 
+add china 101.198.0.0/15 
+add china 101.200.0.0/15 
+add china 101.203.128.0/19 
+add china 101.203.160.0/21 
+add china 101.203.172.0/22 
+add china 101.203.176.0/20 
+add china 101.204.0.0/14 
+add china 101.224.0.0/13 
+add china 101.232.0.0/15 
+add china 101.234.64.0/21 
+add china 101.234.76.0/22 
+add china 101.234.80.0/20 
+add china 101.234.96.0/19 
+add china 101.236.0.0/14 
+add china 101.240.0.0/14 
+add china 101.244.0.0/14 
+add china 101.248.0.0/15 
+add china 101.251.0.0/22 
+add china 101.251.8.0/21 
+add china 101.251.16.0/20 
+add china 101.251.32.0/19 
+add china 101.251.64.0/18 
+add china 101.251.128.0/17 
+add china 101.252.0.0/15 
+add china 101.254.0.0/16 
+add china 103.1.8.0/22 
+add china 103.1.20.0/22 
+add china 103.1.24.0/22 
+add china 103.1.72.0/22 
+add china 103.1.88.0/22 
+add china 103.1.168.0/22 
+add china 103.2.108.0/22 
+add china 103.2.156.0/22 
+add china 103.2.164.0/22 
+add china 103.2.200.0/22 
+add china 103.2.204.0/22 
+add china 103.2.208.0/22 
+add china 103.2.212.0/22 
+add china 103.3.84.0/22 
+add china 103.3.88.0/22 
+add china 103.3.92.0/22 
+add china 103.3.96.0/22 
+add china 103.3.100.0/22 
+add china 103.3.104.0/22 
+add china 103.3.108.0/22 
+add china 103.3.112.0/22 
+add china 103.3.116.0/22 
+add china 103.3.120.0/22 
+add china 103.3.124.0/22 
+add china 103.3.128.0/22 
+add china 103.3.132.0/22 
+add china 103.3.136.0/22 
+add china 103.3.140.0/22 
+add china 103.3.148.0/22 
+add china 103.3.152.0/22 
+add china 103.3.156.0/22 
+add china 103.4.56.0/22 
+add china 103.4.168.0/22 
+add china 103.4.184.0/22 
+add china 103.4.224.0/22 
+add china 103.5.36.0/22 
+add china 103.5.52.0/22 
+add china 103.5.56.0/22 
+add china 103.5.152.0/22 
+add china 103.5.168.0/22 
+add china 103.5.192.0/22 
+add china 103.5.252.0/22 
+add china 103.6.76.0/22 
+add china 103.6.108.0/22 
+add china 103.6.220.0/22 
+add china 103.6.228.0/22 
+add china 103.7.4.0/22 
+add china 103.7.28.0/22 
+add china 103.7.140.0/22 
+add china 103.7.212.0/22 
+add china 103.7.216.0/22 
+add china 103.7.220.0/22 
+add china 103.8.0.0/22 
+add china 103.8.4.0/22 
+add china 103.8.8.0/22 
+add china 103.8.32.0/22 
+add china 103.8.52.0/22 
+add china 103.8.68.0/22 
+add china 103.8.108.0/22 
+add china 103.8.156.0/22 
+add china 103.8.200.0/22 
+add china 103.8.204.0/22 
+add china 103.8.220.0/22 
+add china 103.9.8.0/22 
+add china 103.9.24.0/22 
+add china 103.9.108.0/22 
+add china 103.9.152.0/22 
+add china 103.9.192.0/22 
+add china 103.9.248.0/22 
+add china 103.9.252.0/22 
+add china 103.10.0.0/22 
+add china 103.10.16.0/22 
+add china 103.10.84.0/22 
+add china 103.10.140.0/22 
+add china 103.11.16.0/22 
+add china 103.11.168.0/22 
+add china 103.11.180.0/22 
+add china 103.12.32.0/22 
+add china 103.12.68.0/22 
+add china 103.12.92.0/22 
+add china 103.12.136.0/22 
+add china 103.12.184.0/22 
+add china 103.12.232.0/22 
+add china 103.13.12.0/22 
+add china 103.13.72.0/23 
+add china 103.13.124.0/22 
+add china 103.13.144.0/22 
+add china 103.13.196.0/22 
+add china 103.13.220.0/22 
+add china 103.13.244.0/22 
+add china 103.14.32.0/22 
+add china 103.14.84.0/22 
+add china 103.14.100.0/22 
+add china 103.14.132.0/22 
+add china 103.14.136.0/22 
+add china 103.14.156.0/22 
+add china 103.14.240.0/22 
+add china 103.15.4.0/22 
+add china 103.15.8.0/22 
+add china 103.15.16.0/22 
+add china 103.15.96.0/22 
+add china 103.15.200.0/22 
+add china 103.16.52.0/22 
+add china 103.16.80.0/22 
+add china 103.16.84.0/22 
+add china 103.16.88.0/22 
+add china 103.16.108.0/22 
+add china 103.16.124.0/22 
+add china 103.17.40.0/22 
+add china 103.17.64.0/22 
+add china 103.17.120.0/22 
+add china 103.17.136.0/22 
+add china 103.17.160.0/22 
+add china 103.17.204.0/22 
+add china 103.17.228.0/22 
+add china 103.18.192.0/22 
+add china 103.18.208.0/22 
+add china 103.18.212.0/22 
+add china 103.18.224.0/22 
+add china 103.19.0.0/22 
+add china 103.19.12.0/22 
+add china 103.19.40.0/22 
+add china 103.19.44.0/22 
+add china 103.19.64.0/22 
+add china 103.19.68.0/22 
+add china 103.19.72.0/22 
+add china 103.19.232.0/22 
+add china 103.20.12.0/22 
+add china 103.20.32.0/22 
+add china 103.20.44.0/22 
+add china 103.20.68.0/22 
+add china 103.20.112.0/22 
+add china 103.20.128.0/22 
+add china 103.20.160.0/22 
+add china 103.20.248.0/22 
+add china 103.21.112.0/22 
+add china 103.21.116.0/22 
+add china 103.21.136.0/22 
+add china 103.21.140.0/22 
+add china 103.21.176.0/22 
+add china 103.21.208.0/22 
+add china 103.21.240.0/22 
+add china 103.22.0.0/22 
+add china 103.22.4.0/22 
+add china 103.22.8.0/22 
+add china 103.22.12.0/22 
+add china 103.22.16.0/22 
+add china 103.22.20.0/22 
+add china 103.22.24.0/22 
+add china 103.22.28.0/22 
+add china 103.22.32.0/22 
+add china 103.22.36.0/22 
+add china 103.22.40.0/22 
+add china 103.22.44.0/22 
+add china 103.22.48.0/22 
+add china 103.22.52.0/22 
+add china 103.22.56.0/22 
+add china 103.22.60.0/22 
+add china 103.22.64.0/22 
+add china 103.22.68.0/22 
+add china 103.22.72.0/22 
+add china 103.22.76.0/22 
+add china 103.22.80.0/22 
+add china 103.22.84.0/22 
+add china 103.22.88.0/22 
+add china 103.22.92.0/22 
+add china 103.22.100.0/22 
+add china 103.22.104.0/22 
+add china 103.22.108.0/22 
+add china 103.22.112.0/22 
+add china 103.22.116.0/22 
+add china 103.22.120.0/22 
+add china 103.22.124.0/22 
+add china 103.22.188.0/22 
+add china 103.22.228.0/22 
+add china 103.22.252.0/22 
+add china 103.23.8.0/22 
+add china 103.23.56.0/22 
+add china 103.23.160.0/22 
+add china 103.23.164.0/22 
+add china 103.23.176.0/22 
+add china 103.23.228.0/22 
+add china 103.24.24.0/22 
+add china 103.24.116.0/22 
+add china 103.24.128.0/22 
+add china 103.24.144.0/22 
+add china 103.24.176.0/22 
+add china 103.24.184.0/22 
+add china 103.24.220.0/22 
+add china 103.24.228.0/22 
+add china 103.24.248.0/22 
+add china 103.24.252.0/22 
+add china 103.25.8.0/23 
+add china 103.25.20.0/22 
+add china 103.25.24.0/22 
+add china 103.25.28.0/22 
+add china 103.25.32.0/22 
+add china 103.25.36.0/22 
+add china 103.25.40.0/22 
+add china 103.25.48.0/22 
+add china 103.25.64.0/22 
+add china 103.25.68.0/22 
+add china 103.25.148.0/22 
+add china 103.25.156.0/22 
+add china 103.25.216.0/22 
+add china 103.26.0.0/22 
+add china 103.26.64.0/22 
+add china 103.26.76.0/22 
+add china 103.26.132.0/22 
+add china 103.26.156.0/22 
+add china 103.26.160.0/22 
+add china 103.26.228.0/22 
+add china 103.26.240.0/22 
+add china 103.27.4.0/22 
+add china 103.27.12.0/22 
+add china 103.27.24.0/22 
+add china 103.27.56.0/22 
+add china 103.27.96.0/22 
+add china 103.27.184.0/22 
+add china 103.27.208.0/22 
+add china 103.27.212.0/22 
+add china 103.27.240.0/22 
+add china 103.28.4.0/22 
+add china 103.28.8.0/22 
+add china 103.28.184.0/22 
+add china 103.28.204.0/22 
+add china 103.28.212.0/22 
+add china 103.29.16.0/22 
+add china 103.29.128.0/22 
+add china 103.29.132.0/22 
+add china 103.29.136.0/22 
+add china 103.30.20.0/22 
+add china 103.30.96.0/22 
+add china 103.30.148.0/22 
+add china 103.30.200.0/22 
+add china 103.30.228.0/22 
+add china 103.30.236.0/22 
+add china 103.31.0.0/22 
+add china 103.31.48.0/22 
+add china 103.31.52.0/22 
+add china 103.31.56.0/22 
+add china 103.31.60.0/22 
+add china 103.31.64.0/22 
+add china 103.31.68.0/22 
+add china 103.31.148.0/22 
+add china 103.31.160.0/22 
+add china 103.31.168.0/22 
+add china 103.31.200.0/22 
+add china 103.31.236.0/22 
+add china 103.32.0.0/22 
+add china 103.32.4.0/22 
+add china 103.32.8.0/22 
+add china 103.32.12.0/22 
+add china 103.32.16.0/22 
+add china 103.32.20.0/22 
+add china 103.32.24.0/22 
+add china 103.32.28.0/22 
+add china 103.32.32.0/22 
+add china 103.32.36.0/22 
+add china 103.32.40.0/22 
+add china 103.32.44.0/22 
+add china 103.32.48.0/22 
+add china 103.32.52.0/22 
+add china 103.32.56.0/22 
+add china 103.32.60.0/22 
+add china 103.32.64.0/22 
+add china 103.32.68.0/22 
+add china 103.32.72.0/22 
+add china 103.32.76.0/22 
+add china 103.32.80.0/22 
+add china 103.32.84.0/22 
+add china 103.32.88.0/22 
+add china 103.32.92.0/22 
+add china 103.32.96.0/22 
+add china 103.32.100.0/22 
+add china 103.32.104.0/22 
+add china 103.32.108.0/22 
+add china 103.32.112.0/22 
+add china 103.32.116.0/22 
+add china 103.32.120.0/22 
+add china 103.32.124.0/22 
+add china 103.32.128.0/22 
+add china 103.32.132.0/22 
+add china 103.32.136.0/22 
+add china 103.32.140.0/22 
+add china 103.32.144.0/22 
+add china 103.32.148.0/22 
+add china 103.32.152.0/22 
+add china 103.32.156.0/22 
+add china 103.32.160.0/22 
+add china 103.32.164.0/22 
+add china 103.32.168.0/22 
+add china 103.32.172.0/22 
+add china 103.32.176.0/22 
+add china 103.32.180.0/22 
+add china 103.32.184.0/22 
+add china 103.32.188.0/22 
+add china 103.32.192.0/22 
+add china 103.32.196.0/22 
+add china 103.32.200.0/22 
+add china 103.32.204.0/22 
+add china 103.32.208.0/22 
+add china 103.32.212.0/22 
+add china 103.32.216.0/22 
+add china 103.32.220.0/22 
+add china 103.32.224.0/22 
+add china 103.32.228.0/22 
+add china 103.32.232.0/22 
+add china 103.32.236.0/22 
+add china 103.32.240.0/22 
+add china 103.32.244.0/22 
+add china 103.32.248.0/22 
+add china 103.32.252.0/22 
+add china 103.33.0.0/22 
+add china 103.33.4.0/22 
+add china 103.33.8.0/22 
+add china 103.33.12.0/22 
+add china 103.33.16.0/22 
+add china 103.33.20.0/22 
+add china 103.33.24.0/22 
+add china 103.33.28.0/22 
+add china 103.33.32.0/22 
+add china 103.33.36.0/22 
+add china 103.33.40.0/22 
+add china 103.33.44.0/22 
+add china 103.33.48.0/22 
+add china 103.33.52.0/22 
+add china 103.33.56.0/22 
+add china 103.33.60.0/22 
+add china 103.33.64.0/22 
+add china 103.33.68.0/22 
+add china 103.33.72.0/22 
+add china 103.33.76.0/22 
+add china 103.33.80.0/22 
+add china 103.33.84.0/22 
+add china 103.33.88.0/22 
+add china 103.33.92.0/22 
+add china 103.33.96.0/22 
+add china 103.33.100.0/22 
+add china 103.33.104.0/22 
+add china 103.33.108.0/22 
+add china 103.33.112.0/22 
+add china 103.33.116.0/22 
+add china 103.33.120.0/22 
+add china 103.33.124.0/22 
+add china 103.33.128.0/22 
+add china 103.33.132.0/22 
+add china 103.33.136.0/22 
+add china 103.33.140.0/22 
+add china 103.33.144.0/22 
+add china 103.33.148.0/22 
+add china 103.33.152.0/22 
+add china 103.33.156.0/22 
+add china 103.33.160.0/22 
+add china 103.33.164.0/22 
+add china 103.33.168.0/22 
+add china 103.33.172.0/22 
+add china 103.33.176.0/22 
+add china 103.33.180.0/22 
+add china 103.33.184.0/22 
+add china 103.33.188.0/22 
+add china 103.33.192.0/22 
+add china 103.33.196.0/22 
+add china 103.33.200.0/22 
+add china 103.33.204.0/22 
+add china 103.33.208.0/22 
+add china 103.33.212.0/22 
+add china 103.33.216.0/22 
+add china 103.33.220.0/22 
+add china 103.33.224.0/22 
+add china 103.33.228.0/22 
+add china 103.33.232.0/22 
+add china 103.33.236.0/22 
+add china 103.33.240.0/22 
+add china 103.33.244.0/22 
+add china 103.33.248.0/22 
+add china 103.33.252.0/22 
+add china 103.34.0.0/22 
+add china 103.34.4.0/22 
+add china 103.34.8.0/22 
+add china 103.34.12.0/22 
+add china 103.34.16.0/22 
+add china 103.34.20.0/22 
+add china 103.34.24.0/22 
+add china 103.34.28.0/22 
+add china 103.34.32.0/22 
+add china 103.34.36.0/22 
+add china 103.34.40.0/22 
+add china 103.34.44.0/22 
+add china 103.34.48.0/22 
+add china 103.34.52.0/22 
+add china 103.34.56.0/22 
+add china 103.34.60.0/22 
+add china 103.34.64.0/22 
+add china 103.34.68.0/22 
+add china 103.34.72.0/22 
+add china 103.34.76.0/22 
+add china 103.34.80.0/22 
+add china 103.34.84.0/22 
+add china 103.34.88.0/22 
+add china 103.34.92.0/22 
+add china 103.34.96.0/22 
+add china 103.34.100.0/22 
+add china 103.34.104.0/22 
+add china 103.34.108.0/22 
+add china 103.34.112.0/22 
+add china 103.34.116.0/22 
+add china 103.34.120.0/22 
+add china 103.34.124.0/22 
+add china 103.34.128.0/22 
+add china 103.34.132.0/22 
+add china 103.34.136.0/22 
+add china 103.34.140.0/22 
+add china 103.34.144.0/22 
+add china 103.34.148.0/22 
+add china 103.34.152.0/22 
+add china 103.34.156.0/22 
+add china 103.34.160.0/22 
+add china 103.34.164.0/22 
+add china 103.34.168.0/22 
+add china 103.34.172.0/22 
+add china 103.34.176.0/22 
+add china 103.34.180.0/22 
+add china 103.34.184.0/22 
+add china 103.34.188.0/22 
+add china 103.34.192.0/22 
+add china 103.34.196.0/22 
+add china 103.34.200.0/22 
+add china 103.34.204.0/22 
+add china 103.34.208.0/22 
+add china 103.34.212.0/22 
+add china 103.34.216.0/22 
+add china 103.34.220.0/22 
+add china 103.34.224.0/22 
+add china 103.34.228.0/22 
+add china 103.34.232.0/22 
+add china 103.34.236.0/22 
+add china 103.34.240.0/22 
+add china 103.34.244.0/22 
+add china 103.34.248.0/22 
+add china 103.34.252.0/22 
+add china 103.35.0.0/22 
+add china 103.35.4.0/22 
+add china 103.35.8.0/22 
+add china 103.35.12.0/22 
+add china 103.35.16.0/22 
+add china 103.35.20.0/22 
+add china 103.35.24.0/22 
+add china 103.35.28.0/22 
+add china 103.35.32.0/22 
+add china 103.35.36.0/22 
+add china 103.35.40.0/22 
+add china 103.35.44.0/22 
+add china 103.35.48.0/22 
+add china 103.35.104.0/22 
+add china 103.35.116.0/22 
+add china 103.35.180.0/22 
+add china 103.35.200.0/22 
+add china 103.35.220.0/22 
+add china 103.36.20.0/22 
+add china 103.36.28.0/22 
+add china 103.36.36.0/22 
+add china 103.36.56.0/22 
+add china 103.36.60.0/22 
+add china 103.36.64.0/22 
+add china 103.36.72.0/22 
+add china 103.36.96.0/22 
+add china 103.36.132.0/22 
+add china 103.36.136.0/22 
+add china 103.36.160.0/22 
+add china 103.36.164.0/22 
+add china 103.36.168.0/22 
+add china 103.36.172.0/22 
+add china 103.36.176.0/22 
+add china 103.36.180.0/22 
+add china 103.36.184.0/22 
+add china 103.36.188.0/22 
+add china 103.36.192.0/22 
+add china 103.36.196.0/22 
+add china 103.36.200.0/22 
+add china 103.36.204.0/22 
+add china 103.36.208.0/22 
+add china 103.36.212.0/22 
+add china 103.36.216.0/22 
+add china 103.36.220.0/22 
+add china 103.36.224.0/22 
+add china 103.36.228.0/22 
+add china 103.36.232.0/22 
+add china 103.36.236.0/22 
+add china 103.36.240.0/22 
+add china 103.36.244.0/22 
+add china 103.37.0.0/22 
+add china 103.37.12.0/22 
+add china 103.37.16.0/22 
+add china 103.37.24.0/22 
+add china 103.37.44.0/22 
+add china 103.37.52.0/22 
+add china 103.37.56.0/22 
+add china 103.37.72.0/22 
+add china 103.37.100.0/22 
+add china 103.37.104.0/22 
+add china 103.37.124.0/22 
+add china 103.37.136.0/22 
+add china 103.37.140.0/22 
+add china 103.37.144.0/22 
+add china 103.37.148.0/22 
+add china 103.37.152.0/22 
+add china 103.37.156.0/22 
+add china 103.37.160.0/22 
+add china 103.37.164.0/22 
+add china 103.37.172.0/22 
+add china 103.37.176.0/22 
+add china 103.37.188.0/22 
+add china 103.37.208.0/22 
+add china 103.37.212.0/22 
+add china 103.37.216.0/22 
+add china 103.37.220.0/22 
+add china 103.37.248.0/22 
+add china 103.37.252.0/22 
+add china 103.38.0.0/22 
+add china 103.38.32.0/22 
+add china 103.38.40.0/22 
+add china 103.38.44.0/22 
+add china 103.38.56.0/22 
+add china 103.38.76.0/22 
+add china 103.38.84.0/22 
+add china 103.38.92.0/22 
+add china 103.38.96.0/22 
+add china 103.38.116.0/22 
+add china 103.38.132.0/22 
+add china 103.38.140.0/22 
+add china 103.38.224.0/22 
+add china 103.38.228.0/22 
+add china 103.38.232.0/22 
+add china 103.38.252.0/22 
+add china 103.39.16.0/22 
+add china 103.39.64.0/22 
+add china 103.39.88.0/22 
+add china 103.39.100.0/22 
+add china 103.39.104.0/22 
+add china 103.39.108.0/22 
+add china 103.39.160.0/22 
+add china 103.39.164.0/22 
+add china 103.39.168.0/22 
+add china 103.39.172.0/22 
+add china 103.39.176.0/22 
+add china 103.39.180.0/22 
+add china 103.39.184.0/22 
+add china 103.39.188.0/22 
+add china 103.39.200.0/22 
+add china 103.39.204.0/22 
+add china 103.39.208.0/22 
+add china 103.39.212.0/22 
+add china 103.39.216.0/22 
+add china 103.39.220.0/22 
+add china 103.39.224.0/22 
+add china 103.39.228.0/22 
+add china 103.39.232.0/22 
+add china 103.40.12.0/22 
+add china 103.40.16.0/22 
+add china 103.40.20.0/22 
+add china 103.40.24.0/22 
+add china 103.40.28.0/22 
+add china 103.40.32.0/22 
+add china 103.40.36.0/22 
+add china 103.40.40.0/22 
+add china 103.40.44.0/22 
+add china 103.40.88.0/22 
+add china 103.40.100.0/22 
+add china 103.40.112.0/22 
+add china 103.40.192.0/22 
+add china 103.40.212.0/22 
+add china 103.40.220.0/22 
+add china 103.40.228.0/22 
+add china 103.40.232.0/22 
+add china 103.40.236.0/22 
+add china 103.40.240.0/22 
+add china 103.40.244.0/22 
+add china 103.40.248.0/22 
+add china 103.40.252.0/22 
+add china 103.41.0.0/22 
+add china 103.41.16.0/22 
+add china 103.41.52.0/22 
+add china 103.41.140.0/22 
+add china 103.41.148.0/22 
+add china 103.41.152.0/22 
+add china 103.41.160.0/22 
+add china 103.41.164.0/22 
+add china 103.41.220.0/22 
+add china 103.41.224.0/22 
+add china 103.41.228.0/22 
+add china 103.41.232.0/22 
+add china 103.42.8.0/22 
+add china 103.42.24.0/22 
+add china 103.42.28.0/22 
+add china 103.42.32.0/22 
+add china 103.42.64.0/22 
+add china 103.42.68.0/22 
+add china 103.42.76.0/22 
+add china 103.42.104.0/22 
+add china 103.42.180.0/22 
+add china 103.42.232.0/22 
+add china 103.43.16.0/22 
+add china 103.43.84.0/22 
+add china 103.43.96.0/22 
+add china 103.43.100.0/22 
+add china 103.43.104.0/22 
+add china 103.43.124.0/22 
+add china 103.43.184.0/22 
+add china 103.43.192.0/22 
+add china 103.43.196.0/22 
+add china 103.43.208.0/22 
+add china 103.43.220.0/22 
+add china 103.43.224.0/22 
+add china 103.43.232.0/22 
+add china 103.43.240.0/22 
+add china 103.44.56.0/22 
+add china 103.44.80.0/22 
+add china 103.44.88.0/22 
+add china 103.44.120.0/22 
+add china 103.44.124.0/22 
+add china 103.44.132.0/22 
+add china 103.44.144.0/22 
+add china 103.44.168.0/22 
+add china 103.44.176.0/22 
+add china 103.44.180.0/22 
+add china 103.44.184.0/22 
+add china 103.44.188.0/22 
+add china 103.44.192.0/22 
+add china 103.44.196.0/22 
+add china 103.44.200.0/22 
+add china 103.44.204.0/22 
+add china 103.44.224.0/22 
+add china 103.44.236.0/22 
+add china 103.44.240.0/22 
+add china 103.44.244.0/22 
+add china 103.44.248.0/22 
+add china 103.44.252.0/22 
+add china 103.45.0.0/22 
+add china 103.45.4.0/22 
+add china 103.45.8.0/22 
+add china 103.45.12.0/22 
+add china 103.45.16.0/22 
+add china 103.45.20.0/22 
+add china 103.45.24.0/22 
+add china 103.45.28.0/22 
+add china 103.45.32.0/22 
+add china 103.45.36.0/22 
+add china 103.45.40.0/22 
+add china 103.45.44.0/22 
+add china 103.45.48.0/22 
+add china 103.45.52.0/22 
+add china 103.45.56.0/22 
+add china 103.45.60.0/22 
+add china 103.45.72.0/22 
+add china 103.45.76.0/22 
+add china 103.45.80.0/22 
+add china 103.45.84.0/22 
+add china 103.45.88.0/22 
+add china 103.45.92.0/22 
+add china 103.45.96.0/22 
+add china 103.45.100.0/22 
+add china 103.45.104.0/22 
+add china 103.45.108.0/22 
+add china 103.45.112.0/22 
+add china 103.45.116.0/22 
+add china 103.45.120.0/22 
+add china 103.45.124.0/22 
+add china 103.45.128.0/22 
+add china 103.45.132.0/22 
+add china 103.45.136.0/22 
+add china 103.45.140.0/22 
+add china 103.45.144.0/22 
+add china 103.45.148.0/22 
+add china 103.45.152.0/22 
+add china 103.45.156.0/22 
+add china 103.45.160.0/22 
+add china 103.45.164.0/22 
+add china 103.45.168.0/22 
+add china 103.45.172.0/22 
+add china 103.45.176.0/22 
+add china 103.45.180.0/22 
+add china 103.45.184.0/22 
+add china 103.45.188.0/22 
+add china 103.45.192.0/22 
+add china 103.45.196.0/22 
+add china 103.45.200.0/22 
+add china 103.45.204.0/22 
+add china 103.45.208.0/22 
+add china 103.45.212.0/22 
+add china 103.45.216.0/22 
+add china 103.45.220.0/22 
+add china 103.45.224.0/22 
+add china 103.45.248.0/22 
+add china 103.46.0.0/22 
+add china 103.46.12.0/22 
+add china 103.46.16.0/22 
+add china 103.46.20.0/22 
+add china 103.46.24.0/22 
+add china 103.46.28.0/22 
+add china 103.46.32.0/22 
+add china 103.46.36.0/22 
+add china 103.46.40.0/22 
+add china 103.46.44.0/22 
+add china 103.46.48.0/22 
+add china 103.46.52.0/22 
+add china 103.46.56.0/22 
+add china 103.46.60.0/22 
+add china 103.46.64.0/22 
+add china 103.46.68.0/22 
+add china 103.46.72.0/22 
+add china 103.46.76.0/22 
+add china 103.46.80.0/22 
+add china 103.46.84.0/22 
+add china 103.46.88.0/22 
+add china 103.46.92.0/22 
+add china 103.46.96.0/22 
+add china 103.46.100.0/22 
+add china 103.46.104.0/22 
+add china 103.46.108.0/22 
+add china 103.46.112.0/22 
+add china 103.46.116.0/22 
+add china 103.46.120.0/22 
+add china 103.46.124.0/22 
+add china 103.46.128.0/22 
+add china 103.46.132.0/22 
+add china 103.46.136.0/22 
+add china 103.46.152.0/22 
+add china 103.46.156.0/22 
+add china 103.46.160.0/22 
+add china 103.46.164.0/22 
+add china 103.46.168.0/22 
+add china 103.46.172.0/22 
+add china 103.46.176.0/22 
+add china 103.46.180.0/22 
+add china 103.46.244.0/22 
+add china 103.46.248.0/22 
+add china 103.47.4.0/22 
+add china 103.47.20.0/22 
+add china 103.47.36.0/22 
+add china 103.47.40.0/22 
+add china 103.47.48.0/22 
+add china 103.47.80.0/22 
+add china 103.47.96.0/22 
+add china 103.47.108.0/22 
+add china 103.47.116.0/22 
+add china 103.47.120.0/22 
+add china 103.47.136.0/22 
+add china 103.47.140.0/22 
+add china 103.47.212.0/22 
+add china 103.48.20.0/22 
+add china 103.48.52.0/22 
+add china 103.48.92.0/22 
+add china 103.48.144.0/22 
+add china 103.48.148.0/22 
+add china 103.48.152.0/22 
+add china 103.48.156.0/22 
+add china 103.48.202.0/23 
+add china 103.48.216.0/22 
+add china 103.48.220.0/22 
+add china 103.48.224.0/22 
+add china 103.48.228.0/22 
+add china 103.48.232.0/22 
+add china 103.48.236.0/22 
+add china 103.48.240.0/22 
+add china 103.48.244.0/22 
+add china 103.49.12.0/22 
+add china 103.49.20.0/22 
+add china 103.49.72.0/22 
+add china 103.49.76.0/22 
+add china 103.49.92.0/22 
+add china 103.49.96.0/22 
+add china 103.49.108.0/22 
+add china 103.49.128.0/22 
+add china 103.49.176.0/22 
+add china 103.49.180.0/22 
+add china 103.49.196.0/22 
+add china 103.49.248.0/22 
+add china 103.50.36.0/22 
+add china 103.50.44.0/22 
+add china 103.50.48.0/22 
+add china 103.50.52.0/22 
+add china 103.50.56.0/22 
+add china 103.50.60.0/22 
+add china 103.50.64.0/22 
+add china 103.50.68.0/22 
+add china 103.50.72.0/22 
+add china 103.50.108.0/22 
+add china 103.50.112.0/22 
+add china 103.50.116.0/22 
+add china 103.50.120.0/22 
+add china 103.50.124.0/22 
+add china 103.50.132.0/22 
+add china 103.50.136.0/22 
+add china 103.50.140.0/22 
+add china 103.50.172.0/22 
+add china 103.50.176.0/22 
+add china 103.50.180.0/22 
+add china 103.50.184.0/22 
+add china 103.50.188.0/22 
+add china 103.50.192.0/22 
+add china 103.50.196.0/22 
+add china 103.50.200.0/22 
+add china 103.50.220.0/22 
+add china 103.50.224.0/22 
+add china 103.50.228.0/22 
+add china 103.50.232.0/22 
+add china 103.50.236.0/22 
+add china 103.50.240.0/22 
+add china 103.50.244.0/22 
+add china 103.50.248.0/22 
+add china 103.52.40.0/22 
+add china 103.52.72.0/22 
+add china 103.52.76.0/22 
+add china 103.52.80.0/22 
+add china 103.52.84.0/22 
+add china 103.52.96.0/22 
+add china 103.52.100.0/22 
+add china 103.52.104.0/22 
+add china 103.52.160.0/22 
+add china 103.52.164.0/22 
+add china 103.52.172.0/22 
+add china 103.52.176.0/22 
+add china 103.52.184.0/22 
+add china 103.52.196.0/22 
+add china 103.53.4.0/22 
+add china 103.53.64.0/22 
+add china 103.53.68.0/22 
+add china 103.53.92.0/22 
+add china 103.53.100.0/22 
+add china 103.53.124.0/22 
+add china 103.53.128.0/22 
+add china 103.53.132.0/22 
+add china 103.53.136.0/22 
+add china 103.53.140.0/22 
+add china 103.53.144.0/22 
+add china 103.53.180.0/22 
+add china 103.53.204.0/22 
+add china 103.53.208.0/22 
+add china 103.53.212.0/22 
+add china 103.53.216.0/22 
+add china 103.53.236.0/22 
+add china 103.53.248.0/22 
+add china 103.54.8.0/22 
+add china 103.54.48.0/22 
+add china 103.54.60.0/22 
+add china 103.54.160.0/22 
+add china 103.54.164.0/22 
+add china 103.54.212.0/22 
+add china 103.54.240.0/22 
+add china 103.55.24.0/22 
+add china 103.55.80.0/22 
+add china 103.55.120.0/22 
+add china 103.55.152.0/22 
+add china 103.55.172.0/22 
+add china 103.55.204.0/22 
+add china 103.55.208.0/22 
+add china 103.55.228.0/22 
+add china 103.55.236.0/22 
+add china 103.56.8.0/22 
+add china 103.56.16.0/22 
+add china 103.56.20.0/22 
+add china 103.56.32.0/22 
+add china 103.56.52.0/22 
+add china 103.56.56.0/22 
+add china 103.56.60.0/22 
+add china 103.56.72.0/22 
+add china 103.56.76.0/22 
+add china 103.56.140.0/22 
+add china 103.56.152.0/22 
+add china 103.56.184.0/22 
+add china 103.56.200.0/22 
+add china 103.57.12.0/22 
+add china 103.57.52.0/22 
+add china 103.57.56.0/22 
+add china 103.57.76.0/22 
+add china 103.57.136.0/22 
+add china 103.57.196.0/22 
+add china 103.58.24.0/22 
+add china 103.59.76.0/22 
+add china 103.59.100.0/22 
+add china 103.59.112.0/22 
+add china 103.59.116.0/22 
+add china 103.59.120.0/22 
+add china 103.59.124.0/22 
+add china 103.59.128.0/22 
+add china 103.59.148.0/22 
+add china 103.59.164.0/22 
+add china 103.60.32.0/22 
+add china 103.60.44.0/22 
+add china 103.60.164.0/22 
+add china 103.60.228.0/22 
+add china 103.60.236.0/22 
+add china 103.61.60.0/22 
+add china 103.61.104.0/22 
+add china 103.61.140.0/22 
+add china 103.61.152.0/22 
+add china 103.61.156.0/22 
+add china 103.61.160.0/22 
+add china 103.61.172.0/22 
+add china 103.61.176.0/22 
+add china 103.61.184.0/22 
+add china 103.61.188.0/22 
+add china 103.62.24.0/22 
+add china 103.62.52.0/22 
+add china 103.62.72.0/22 
+add china 103.62.76.0/22 
+add china 103.62.80.0/22 
+add china 103.62.84.0/22 
+add china 103.62.88.0/22 
+add china 103.62.96.0/22 
+add china 103.62.100.0/22 
+add china 103.62.104.0/22 
+add china 103.62.108.0/22 
+add china 103.62.112.0/22 
+add china 103.62.116.0/22 
+add china 103.62.120.0/22 
+add china 103.62.124.0/22 
+add china 103.62.128.0/22 
+add china 103.62.132.0/22 
+add china 103.62.156.0/22 
+add china 103.62.160.0/22 
+add china 103.62.164.0/22 
+add china 103.62.168.0/22 
+add china 103.62.172.0/22 
+add china 103.62.176.0/22 
+add china 103.62.180.0/22 
+add china 103.62.184.0/22 
+add china 103.62.188.0/22 
+add china 103.62.192.0/22 
+add china 103.62.204.0/22 
+add china 103.62.208.0/22 
+add china 103.62.212.0/22 
+add china 103.62.216.0/22 
+add china 103.62.220.0/22 
+add china 103.62.224.0/22 
+add china 103.63.32.0/22 
+add china 103.63.36.0/22 
+add china 103.63.40.0/22 
+add china 103.63.44.0/22 
+add china 103.63.48.0/22 
+add china 103.63.52.0/22 
+add china 103.63.56.0/22 
+add china 103.63.60.0/22 
+add china 103.63.64.0/22 
+add china 103.63.68.0/22 
+add china 103.63.72.0/22 
+add china 103.63.76.0/22 
+add china 103.63.80.0/22 
+add china 103.63.84.0/22 
+add china 103.63.88.0/22 
+add china 103.63.140.0/22 
+add china 103.63.144.0/22 
+add china 103.63.152.0/22 
+add china 103.63.160.0/22 
+add china 103.63.164.0/22 
+add china 103.63.168.0/22 
+add china 103.63.172.0/22 
+add china 103.63.176.0/22 
+add china 103.63.180.0/22 
+add china 103.63.184.0/22 
+add china 103.63.192.0/22 
+add china 103.63.196.0/22 
+add china 103.63.200.0/22 
+add china 103.63.204.0/22 
+add china 103.63.208.0/22 
+add china 103.63.240.0/22 
+add china 103.63.244.0/22 
+add china 103.63.248.0/22 
+add china 103.63.252.0/22 
+add china 103.64.0.0/22 
+add china 103.64.4.0/22 
+add china 103.64.24.0/22 
+add china 103.64.28.0/22 
+add china 103.64.32.0/22 
+add china 103.64.36.0/22 
+add china 103.64.40.0/22 
+add china 103.64.44.0/22 
+add china 103.64.48.0/22 
+add china 103.64.52.0/22 
+add china 103.64.56.0/22 
+add china 103.64.60.0/22 
+add china 103.64.64.0/22 
+add china 103.64.68.0/22 
+add china 103.64.72.0/22 
+add china 103.64.76.0/22 
+add china 103.64.80.0/22 
+add china 103.64.84.0/22 
+add china 103.64.88.0/22 
+add china 103.64.92.0/22 
+add china 103.64.96.0/22 
+add china 103.64.100.0/22 
+add china 103.64.104.0/22 
+add china 103.64.108.0/22 
+add china 103.64.112.0/22 
+add china 103.64.116.0/22 
+add china 103.64.120.0/22 
+add china 103.64.124.0/22 
+add china 103.64.140.0/22 
+add china 103.64.144.0/22 
+add china 103.64.152.0/22 
+add china 103.64.156.0/22 
+add china 103.64.160.0/22 
+add china 103.64.164.0/22 
+add china 103.64.168.0/22 
+add china 103.64.172.0/22 
+add china 103.64.176.0/22 
+add china 103.64.180.0/22 
+add china 103.64.184.0/22 
+add china 103.64.188.0/22 
+add china 103.64.192.0/22 
+add china 103.64.196.0/22 
+add china 103.64.200.0/22 
+add china 103.64.204.0/22 
+add china 103.64.208.0/22 
+add china 103.64.212.0/22 
+add china 103.64.216.0/22 
+add china 103.64.220.0/22 
+add china 103.64.224.0/22 
+add china 103.64.228.0/22 
+add china 103.64.232.0/22 
+add china 103.64.236.0/22 
+add china 103.64.240.0/22 
+add china 103.64.244.0/22 
+add china 103.64.248.0/22 
+add china 103.64.252.0/22 
+add china 103.65.0.0/22 
+add china 103.65.4.0/22 
+add china 103.65.8.0/22 
+add china 103.65.12.0/22 
+add china 103.65.16.0/22 
+add china 103.65.36.0/22 
+add china 103.65.40.0/22 
+add china 103.65.48.0/22 
+add china 103.65.52.0/22 
+add china 103.65.56.0/22 
+add china 103.65.60.0/22 
+add china 103.65.64.0/22 
+add china 103.65.68.0/22 
+add china 103.65.72.0/22 
+add china 103.65.76.0/22 
+add china 103.65.80.0/22 
+add china 103.65.84.0/22 
+add china 103.65.88.0/22 
+add china 103.65.92.0/22 
+add china 103.65.100.0/22 
+add china 103.65.104.0/22 
+add china 103.65.108.0/22 
+add china 103.65.112.0/22 
+add china 103.65.144.0/22 
+add china 103.65.148.0/22 
+add china 103.65.152.0/22 
+add china 103.65.156.0/22 
+add china 103.65.160.0/22 
+add china 103.65.164.0/22 
+add china 103.65.168.0/22 
+add china 103.65.172.0/22 
+add china 103.66.32.0/22 
+add china 103.66.40.0/22 
+add china 103.66.92.0/22 
+add china 103.66.108.0/22 
+add china 103.66.200.0/22 
+add china 103.66.216.0/22 
+add china 103.66.240.0/22 
+add china 103.66.244.0/22 
+add china 103.66.248.0/22 
+add china 103.66.252.0/22 
+add china 103.67.0.0/22 
+add china 103.67.4.0/22 
+add china 103.67.8.0/22 
+add china 103.67.100.0/22 
+add china 103.67.104.0/22 
+add china 103.67.108.0/22 
+add china 103.67.112.0/22 
+add china 103.67.116.0/22 
+add china 103.67.120.0/22 
+add china 103.67.124.0/22 
+add china 103.67.128.0/22 
+add china 103.67.132.0/22 
+add china 103.67.136.0/22 
+add china 103.67.140.0/22 
+add china 103.67.144.0/22 
+add china 103.67.148.0/22 
+add china 103.67.172.0/22 
+add china 103.67.192.0/22 
+add china 103.67.212.0/22 
+add china 103.67.252.0/22 
+add china 103.68.64.0/22 
+add china 103.68.88.0/22 
+add china 103.68.100.0/22 
+add china 103.68.128.0/22 
+add china 103.68.192.0/22 
+add china 103.69.16.0/22 
+add china 103.69.116.0/22 
+add china 103.69.132.0/22 
+add china 103.69.152.0/22 
+add china 103.69.212.0/22 
+add china 103.70.8.0/22 
+add china 103.70.148.0/22 
+add china 103.70.184.0/22 
+add china 103.70.220.0/22 
+add china 103.70.224.0/22 
+add china 103.70.236.0/22 
+add china 103.70.252.0/22 
+add china 103.71.0.0/22 
+add china 103.71.32.0/22 
+add china 103.71.48.0/22 
+add china 103.71.68.0/22 
+add china 103.71.72.0/22 
+add china 103.71.80.0/22 
+add china 103.71.84.0/22 
+add china 103.71.88.0/22 
+add china 103.71.120.0/22 
+add china 103.71.124.0/22 
+add china 103.71.128.0/22 
+add china 103.71.144.0/22 
+add china 103.71.196.0/22 
+add china 103.71.200.0/22 
+add china 103.71.232.0/22 
+add china 103.72.12.0/22 
+add china 103.72.16.0/22 
+add china 103.72.20.0/22 
+add china 103.72.24.0/22 
+add china 103.72.28.0/22 
+add china 103.72.32.0/22 
+add china 103.72.36.0/22 
+add china 103.72.40.0/22 
+add china 103.72.44.0/22 
+add china 103.72.48.0/22 
+add china 103.72.52.0/22 
+add china 103.72.112.0/22 
+add china 103.72.116.0/22 
+add china 103.72.120.0/22 
+add china 103.72.124.0/22 
+add china 103.72.128.0/22 
+add china 103.72.132.0/22 
+add china 103.72.144.0/22 
+add china 103.72.148.0/22 
+add china 103.72.172.0/22 
+add china 103.72.180.0/22 
+add china 103.72.224.0/22 
+add china 103.72.228.0/22 
+add china 103.72.232.0/22 
+add china 103.72.236.0/22 
+add china 103.72.240.0/22 
+add china 103.72.244.0/22 
+add china 103.72.248.0/22 
+add china 103.72.252.0/22 
+add china 103.73.0.0/22 
+add china 103.73.4.0/22 
+add china 103.73.8.0/22 
+add china 103.73.12.0/22 
+add china 103.73.16.0/22 
+add china 103.73.20.0/22 
+add china 103.73.24.0/22 
+add china 103.73.28.0/22 
+add china 103.73.48.0/22 
+add china 103.73.88.0/22 
+add china 103.73.96.0/22 
+add china 103.73.116.0/22 
+add china 103.73.120.0/22 
+add china 103.73.128.0/22 
+add china 103.73.132.0/22 
+add china 103.73.136.0/22 
+add china 103.73.140.0/22 
+add china 103.73.144.0/22 
+add china 103.73.168.0/22 
+add china 103.73.176.0/22 
+add china 103.73.204.0/22 
+add china 103.73.208.0/22 
+add china 103.73.240.0/22 
+add china 103.73.244.0/22 
+add china 103.73.248.0/22 
+add china 103.74.24.0/22 
+add china 103.74.28.0/22 
+add china 103.74.32.0/22 
+add china 103.74.36.0/22 
+add china 103.74.40.0/22 
+add china 103.74.44.0/22 
+add china 103.74.48.0/22 
+add china 103.74.56.0/22 
+add china 103.74.60.0/22 
+add china 103.74.80.0/22 
+add china 103.74.124.0/22 
+add china 103.74.148.0/22 
+add china 103.74.152.0/22 
+add china 103.74.156.0/22 
+add china 103.74.204.0/22 
+add china 103.74.232.0/22 
+add china 103.75.16.0/22 
+add china 103.75.88.0/22 
+add china 103.75.92.0/22 
+add china 103.75.104.0/22 
+add china 103.75.108.0/22 
+add china 103.75.112.0/22 
+add china 103.75.120.0/22 
+add china 103.75.128.0/22 
+add china 103.75.144.0/22 
+add china 103.75.152.0/22 
+add china 103.75.236.0/24 
+add china 103.76.60.0/22 
+add china 103.76.64.0/22 
+add china 103.76.68.0/22 
+add china 103.76.72.0/22 
+add china 103.76.84.0/22 
+add china 103.76.92.0/22 
+add china 103.76.104.0/22 
+add china 103.76.216.0/22 
+add china 103.76.220.0/22 
+add china 103.76.224.0/22 
+add china 103.77.28.0/22 
+add china 103.77.52.0/22 
+add china 103.77.56.0/22 
+add china 103.77.72.0/22 
+add china 103.77.88.0/22 
+add china 103.77.92.0/22 
+add china 103.77.132.0/22 
+add china 103.77.148.0/22 
+add china 103.77.220.0/22 
+add china 103.78.56.0/22 
+add china 103.78.60.0/22 
+add china 103.78.64.0/22 
+add china 103.78.68.0/22 
+add china 103.78.124.0/22 
+add china 103.78.172.0/22 
+add china 103.78.176.0/22 
+add china 103.78.196.0/22 
+add china 103.78.228.0/22 
+add china 103.79.24.0/22 
+add china 103.79.28.0/22 
+add china 103.79.36.0/22 
+add china 103.79.40.0/22 
+add china 103.79.44.0/22 
+add china 103.79.52.0/22 
+add china 103.79.56.0/22 
+add china 103.79.60.0/22 
+add china 103.79.64.0/22 
+add china 103.79.68.0/22 
+add china 103.79.80.0/22 
+add china 103.79.84.0/22 
+add china 103.79.120.0/22 
+add china 103.79.136.0/22 
+add china 103.79.188.0/22 
+add china 103.79.192.0/22 
+add china 103.79.196.0/22 
+add china 103.79.200.0/22 
+add china 103.79.204.0/22 
+add china 103.79.208.0/22 
+add china 103.79.212.0/22 
+add china 103.79.240.0/22 
+add china 103.80.24.0/22 
+add china 103.80.28.0/22 
+add china 103.80.44.0/22 
+add china 103.80.72.0/22 
+add china 103.80.176.0/22 
+add china 103.80.180.0/22 
+add china 103.80.184.0/22 
+add china 103.80.192.0/22 
+add china 103.80.200.0/22 
+add china 103.80.232.0/22 
+add china 103.81.4.0/22 
+add china 103.81.8.0/22 
+add china 103.81.16.0/22 
+add china 103.81.20.0/22 
+add china 103.81.44.0/22 
+add china 103.81.48.0/22 
+add china 103.81.96.0/22 
+add china 103.81.120.0/22 
+add china 103.81.148.0/22 
+add china 103.81.164.0/22 
+add china 103.81.168.0/22 
+add china 103.81.183.0/24 
+add china 103.81.184.0/22 
+add china 103.81.200.0/22 
+add china 103.81.232.0/22 
+add china 103.82.52.0/22 
+add china 103.82.60.0/22 
+add china 103.82.68.0/22 
+add china 103.82.84.0/22 
+add china 103.82.104.0/22 
+add china 103.82.224.0/22 
+add china 103.82.236.0/22 
+add china 103.83.44.0/22 
+add china 103.83.52.0/22 
+add china 103.83.60.0/22 
+add china 103.83.64.0/22 
+add china 103.83.72.0/22 
+add china 103.83.112.0/22 
+add china 103.83.120.0/22 
+add china 103.83.180.0/22 
+add china 103.84.0.0/22 
+add china 103.84.12.0/22 
+add china 103.84.16.0/22 
+add china 103.84.20.0/22 
+add china 103.84.24.0/22 
+add china 103.84.28.0/22 
+add china 103.84.48.0/22 
+add china 103.84.64.0/22 
+add china 103.84.72.0/22 
+add china 103.84.92.0/22 
+add china 103.84.108.0/22 
+add china 103.84.136.0/22 
+add china 103.85.20.0/22 
+add china 103.85.24.0/22 
+add china 103.85.44.0/22 
+add china 103.85.48.0/22 
+add china 103.85.84.0/22 
+add china 103.85.136.0/22 
+add china 103.85.144.0/22 
+add china 103.85.164.0/22 
+add china 103.85.168.0/22 
+add china 103.85.172.0/22 
+add china 103.85.176.0/22 
+add china 103.85.224.0/22 
+add china 103.86.28.0/22 
+add china 103.86.32.0/22 
+add china 103.86.44.0/22 
+add china 103.86.60.0/22 
+add china 103.86.68.0/22 
+add china 103.86.80.0/22 
+add china 103.86.84.0/22 
+add china 103.86.88.0/22 
+add china 103.86.204.0/22 
+add china 103.86.208.0/22 
+add china 103.86.212.0/22 
+add china 103.86.216.0/22 
+add china 103.86.220.0/22 
+add china 103.86.224.0/22 
+add china 103.86.228.0/22 
+add china 103.86.232.0/22 
+add china 103.86.236.0/22 
+add china 103.86.240.0/22 
+add china 103.86.244.0/22 
+add china 103.86.248.0/22 
+add china 103.86.252.0/22 
+add china 103.87.0.0/22 
+add china 103.87.4.0/22 
+add china 103.87.20.0/22 
+add china 103.87.32.0/22 
+add china 103.87.72.0/22 
+add china 103.87.96.0/22 
+add china 103.87.132.0/22 
+add china 103.87.180.0/22 
+add china 103.87.224.0/22 
+add china 103.88.4.0/22 
+add china 103.88.8.0/22 
+add china 103.88.12.0/22 
+add china 103.88.16.0/22 
+add china 103.88.20.0/22 
+add china 103.88.32.0/22 
+add china 103.88.36.0/22 
+add china 103.88.60.0/22 
+add china 103.88.64.0/22 
+add china 103.88.72.0/22 
+add china 103.88.96.0/22 
+add china 103.88.100.0/22 
+add china 103.88.164.0/22 
+add china 103.88.176.0/22 
+add china 103.88.184.0/22 
+add china 103.88.188.0/22 
+add china 103.88.212.0/22 
+add china 103.89.28.0/22 
+add china 103.89.96.0/22 
+add china 103.89.100.0/22 
+add china 103.89.104.0/22 
+add china 103.89.108.0/22 
+add china 103.89.112.0/22 
+add china 103.89.116.0/22 
+add china 103.89.148.0/22 
+add china 103.89.172.0/22 
+add china 103.89.184.0/22 
+add china 103.89.188.0/22 
+add china 103.89.192.0/22 
+add china 103.89.196.0/22 
+add china 103.89.200.0/22 
+add china 103.89.204.0/22 
+add china 103.89.208.0/22 
+add china 103.89.212.0/22 
+add china 103.89.216.0/22 
+add china 103.89.220.0/22 
+add china 103.89.224.0/22 
+add china 103.89.228.0/22 
+add china 103.90.52.0/22 
+add china 103.90.92.0/22 
+add china 103.90.100.0/22 
+add china 103.90.104.0/22 
+add china 103.90.108.0/22 
+add china 103.90.112.0/22 
+add china 103.90.116.0/22 
+add china 103.90.120.0/22 
+add china 103.90.124.0/22 
+add china 103.90.128.0/22 
+add china 103.90.132.0/22 
+add china 103.90.152.0/22 
+add china 103.90.168.0/22 
+add china 103.90.173.0/24 
+add china 103.90.176.0/22 
+add china 103.90.188.0/22 
+add china 103.90.192.0/22 
+add china 103.91.36.0/22 
+add china 103.91.40.0/22 
+add china 103.91.108.0/22 
+add china 103.91.152.0/22 
+add china 103.91.176.0/22 
+add china 103.91.200.0/22 
+add china 103.91.208.0/22 
+add china 103.91.212.0/22 
+add china 103.91.219.0/24 
+add china 103.91.236.0/22 
+add china 103.91.252.0/22 
+add china 103.92.0.0/22 
+add china 103.92.4.0/22 
+add china 103.92.8.0/22 
+add china 103.92.12.0/22 
+add china 103.92.48.0/22 
+add china 103.92.52.0/22 
+add china 103.92.56.0/22 
+add china 103.92.60.0/22 
+add china 103.92.64.0/22 
+add china 103.92.68.0/22 
+add china 103.92.72.0/22 
+add china 103.92.76.0/22 
+add china 103.92.80.0/22 
+add china 103.92.86.0/24 
+add china 103.92.88.0/22 
+add china 103.92.108.0/22 
+add china 103.92.124.0/22 
+add china 103.92.128.0/24 
+add china 103.92.132.0/22 
+add china 103.92.156.0/22 
+add china 103.92.164.0/22 
+add china 103.92.168.0/22 
+add china 103.92.172.0/22 
+add china 103.92.176.0/22 
+add china 103.92.180.0/22 
+add china 103.92.184.0/22 
+add china 103.92.188.0/22 
+add china 103.92.192.0/22 
+add china 103.92.236.0/22 
+add china 103.92.240.0/22 
+add china 103.92.244.0/22 
+add china 103.92.248.0/22 
+add china 103.92.252.0/22 
+add china 103.93.0.0/22 
+add china 103.93.4.0/22 
+add china 103.93.28.0/22 
+add china 103.93.76.0/22 
+add china 103.93.84.0/22 
+add china 103.93.121.0/24 
+add china 103.93.152.0/22 
+add china 103.93.180.0/22 
+add china 103.93.204.0/22 
+add china 103.94.12.0/22 
+add china 103.94.20.0/22 
+add china 103.94.28.0/22 
+add china 103.94.32.0/22 
+add china 103.94.36.0/22 
+add china 103.94.40.0/22 
+add china 103.94.44.0/22 
+add china 103.94.72.0/22 
+add china 103.94.88.0/22 
+add china 103.94.116.0/22 
+add china 103.94.160.0/22 
+add china 103.94.180.0/22 
+add china 103.94.200.0/22 
+add china 103.95.28.0/22 
+add china 103.95.52.0/22 
+add china 103.95.64.0/22 
+add china 103.95.68.0/22 
+add china 103.95.88.0/22 
+add china 103.95.92.0/22 
+add china 103.95.116.0/22 
+add china 103.95.128.0/22 
+add china 103.95.136.0/22 
+add china 103.95.140.0/22 
+add china 103.95.144.0/22 
+add china 103.95.152.0/22 
+add china 103.95.207.0/24 
+add china 103.95.216.0/22 
+add china 103.95.220.0/22 
+add china 103.95.224.0/22 
+add china 103.95.236.0/22 
+add china 103.95.240.0/22 
+add china 103.95.244.0/22 
+add china 103.95.248.0/22 
+add china 103.95.252.0/22 
+add china 103.96.0.0/22 
+add china 103.96.8.0/22 
+add china 103.96.80.0/22 
+add china 103.96.124.0/22 
+add china 103.96.136.0/22 
+add china 103.96.140.0/24 
+add china 103.96.148.0/22 
+add china 103.96.152.0/22 
+add china 103.96.156.0/22 
+add china 103.96.160.0/22 
+add china 103.96.164.0/22 
+add china 103.96.168.0/22 
+add china 103.96.172.0/22 
+add china 103.96.176.0/22 
+add china 103.96.180.0/22 
+add china 103.96.184.0/22 
+add china 103.96.188.0/22 
+add china 103.96.192.0/22 
+add china 103.96.196.0/22 
+add china 103.96.200.0/22 
+add china 103.96.204.0/22 
+add china 103.96.208.0/22 
+add china 103.96.212.0/22 
+add china 103.96.216.0/22 
+add china 103.97.8.0/22 
+add china 103.97.12.0/22 
+add china 103.97.16.0/22 
+add china 103.97.20.0/22 
+add china 103.97.24.0/22 
+add china 103.97.28.0/22 
+add china 103.97.32.0/22 
+add china 103.97.36.0/22 
+add china 103.97.40.0/22 
+add china 103.97.56.0/22 
+add china 103.97.60.0/22 
+add china 103.97.64.0/22 
+add china 103.97.68.0/22 
+add china 103.97.72.0/22 
+add china 103.97.80.0/22 
+add china 103.97.112.0/22 
+add china 103.97.116.0/22 
+add china 103.97.128.0/22 
+add china 103.97.144.0/22 
+add china 103.97.148.0/22 
+add china 103.97.188.0/22 
+add china 103.97.192.0/22 
+add china 103.97.224.0/22 
+add china 103.97.228.0/23 
+add china 103.98.28.0/23 
+add china 103.98.40.0/22 
+add china 103.98.44.0/22 
+add china 103.98.48.0/22 
+add china 103.98.56.0/22 
+add china 103.98.80.0/22 
+add china 103.98.88.0/22 
+add china 103.98.92.0/22 
+add china 103.98.96.0/22 
+add china 103.98.100.0/22 
+add china 103.98.124.0/22 
+add china 103.98.136.0/22 
+add china 103.98.140.0/22 
+add china 103.98.144.0/22 
+add china 103.98.164.0/22 
+add china 103.98.168.0/22 
+add china 103.98.180.0/22 
+add china 103.98.196.0/22 
+add china 103.98.216.0/22 
+add china 103.98.220.0/22 
+add china 103.98.224.0/22 
+add china 103.98.228.0/22 
+add china 103.98.232.0/22 
+add china 103.98.240.0/22 
+add china 103.98.244.0/22 
+add china 103.98.248.0/22 
+add china 103.98.252.0/22 
+add china 103.99.40.0/23 
+add china 103.99.52.0/22 
+add china 103.99.56.0/22 
+add china 103.99.60.0/22 
+add china 103.99.76.0/22 
+add china 103.99.104.0/22 
+add china 103.99.116.0/22 
+add china 103.99.120.0/22 
+add china 103.99.152.0/22 
+add china 103.99.220.0/22 
+add china 103.99.232.0/22 
+add china 103.99.236.0/22 
+add china 103.100.0.0/22 
+add china 103.100.32.0/22 
+add china 103.100.40.0/22 
+add china 103.100.48.0/22 
+add china 103.100.52.0/22 
+add china 103.100.56.0/22 
+add china 103.100.60.0/22 
+add china 103.100.64.0/22 
+add china 103.100.68.0/22 
+add china 103.100.88.0/22 
+add china 103.100.116.0/22 
+add china 103.100.140.0/22 
+add china 103.100.144.0/22 
+add china 103.100.236.0/22 
+add china 103.100.240.0/22 
+add china 103.100.248.0/22 
+add china 103.100.252.0/22 
+add china 103.101.4.0/22 
+add china 103.101.8.0/22 
+add china 103.101.12.0/22 
+add china 103.101.28.0/22 
+add china 103.101.60.0/22 
+add china 103.101.120.0/22 
+add china 103.101.124.0/22 
+add china 103.101.144.0/22 
+add china 103.101.148.0/22 
+add china 103.101.153.0/24 
+add china 103.101.180.0/22 
+add china 103.101.184.0/22 
+add china 103.102.76.0/22 
+add china 103.102.80.0/22 
+add china 103.102.168.0/22 
+add china 103.102.172.0/22 
+add china 103.102.180.0/22 
+add china 103.102.184.0/22 
+add china 103.102.188.0/22 
+add china 103.102.192.0/22 
+add china 103.102.196.0/22 
+add china 103.102.200.0/22 
+add china 103.102.208.0/22 
+add china 103.102.212.0/22 
+add china 103.103.12.0/22 
+add china 103.103.16.0/22 
+add china 103.103.36.0/22 
+add china 103.103.68.0/22 
+add china 103.103.72.0/22 
+add china 103.103.176.0/22 
+add china 103.103.188.0/22 
+add china 103.103.200.0/22 
+add china 103.103.204.0/22 
+add china 103.103.220.0/22 
+add china 103.103.224.0/22 
+add china 103.103.228.0/22 
+add china 103.103.232.0/22 
+add china 103.103.248.0/22 
+add china 103.103.252.0/22 
+add china 103.104.0.0/22 
+add china 103.104.4.0/22 
+add china 103.104.36.0/22 
+add china 103.104.40.0/22 
+add china 103.104.64.0/22 
+add china 103.104.104.0/22 
+add china 103.104.152.0/22 
+add china 103.104.168.0/22 
+add china 103.104.172.0/22 
+add china 103.104.188.0/22 
+add china 103.104.198.0/23 
+add china 103.104.252.0/22 
+add china 103.105.0.0/22 
+add china 103.105.4.0/22 
+add china 103.105.12.0/22 
+add china 103.105.16.0/22 
+add china 103.105.23.0/24 
+add china 103.105.56.0/22 
+add china 103.105.60.0/22 
+add china 103.105.116.0/22 
+add china 103.105.132.0/22 
+add china 103.105.180.0/22 
+add china 103.105.184.0/22 
+add china 103.105.200.0/22 
+add china 103.105.204.0/22 
+add china 103.105.220.0/22 
+add china 103.106.36.0/22 
+add china 103.106.40.0/22 
+add china 103.106.44.0/22 
+add china 103.106.60.0/22 
+add china 103.106.68.0/22 
+add china 103.106.96.0/22 
+add china 103.106.120.0/22 
+add china 103.106.128.0/22 
+add china 103.106.132.0/22 
+add china 103.106.160.0/22 
+add china 103.106.188.0/22 
+add china 103.106.196.0/22 
+add china 103.106.202.0/23 
+add china 103.106.212.0/22 
+add china 103.106.244.0/22 
+add china 103.106.252.0/22 
+add china 103.107.0.0/22 
+add china 103.107.8.0/24 
+add china 103.107.28.0/22 
+add china 103.107.32.0/22 
+add china 103.107.44.0/22 
+add china 103.107.72.0/22 
+add china 103.107.108.0/22 
+add china 103.107.164.0/22 
+add china 103.107.168.0/22 
+add china 103.107.188.0/22 
+add china 103.107.192.0/22 
+add china 103.107.208.0/22 
+add china 103.107.212.0/22 
+add china 103.107.216.0/22 
+add china 103.107.220.0/22 
+add china 103.108.52.0/22 
+add china 103.108.64.0/22 
+add china 103.108.160.0/22 
+add china 103.108.164.0/22 
+add china 103.108.184.0/23 
+add china 103.108.188.0/23 
+add china 103.108.192.0/22 
+add china 103.108.196.0/22 
+add china 103.108.208.0/22 
+add china 103.108.212.0/22 
+add china 103.108.224.0/22 
+add china 103.108.244.0/22 
+add china 103.108.251.0/24 
+add china 103.109.20.0/22 
+add china 103.109.48.0/22 
+add china 103.109.88.0/22 
+add china 103.109.106.0/23 
+add china 103.109.248.0/22 
+add china 103.110.32.0/22 
+add china 103.110.80.0/23 
+add china 103.110.92.0/22 
+add china 103.110.100.0/22 
+add china 103.110.116.0/22 
+add china 103.110.127.0/24 
+add china 103.110.128.0/23 
+add china 103.110.131.0/24 
+add china 103.110.132.0/22 
+add china 103.110.136.0/22 
+add china 103.110.152.0/22 
+add china 103.110.156.0/22 
+add china 103.110.188.0/22 
+add china 103.110.204.0/22 
+add china 103.111.38.0/23 
+add china 103.111.64.0/22 
+add china 103.111.172.0/22 
+add china 103.111.252.0/22 
+add china 103.112.28.0/22 
+add china 103.112.68.0/22 
+add china 103.112.72.0/22 
+add china 103.112.88.0/22 
+add china 103.112.92.0/22 
+add china 103.112.96.0/22 
+add china 103.112.108.0/22 
+add china 103.112.112.0/22 
+add china 103.112.116.0/22 
+add china 103.112.140.0/22 
+add china 103.112.172.0/22 
+add china 103.112.184.0/22 
+add china 103.112.208.0/22 
+add china 103.113.4.0/22 
+add china 103.113.92.0/22 
+add china 103.113.144.0/22 
+add china 103.113.220.0/22 
+add china 103.113.232.0/22 
+add china 103.113.236.0/22 
+add china 103.114.4.0/22 
+add china 103.114.28.0/22 
+add china 103.114.68.0/22 
+add china 103.114.72.0/22 
+add china 103.114.100.0/22 
+add china 103.114.132.0/22 
+add china 103.114.148.0/22 
+add china 103.114.156.0/22 
+add china 103.114.176.0/22 
+add china 103.114.212.0/22 
+add china 103.114.236.0/22 
+add china 103.114.240.0/22 
+add china 103.115.16.0/22 
+add china 103.115.40.0/22 
+add china 103.115.44.0/22 
+add china 103.115.48.0/22 
+add china 103.115.52.0/22 
+add china 103.115.56.0/22 
+add china 103.115.60.0/22 
+add china 103.115.64.0/22 
+add china 103.115.68.0/22 
+add china 103.115.92.0/22 
+add china 103.115.120.0/22 
+add china 103.115.148.0/22 
+add china 103.115.204.0/23 
+add china 103.115.248.0/22 
+add china 103.116.20.0/22 
+add china 103.116.40.0/22 
+add china 103.116.64.0/22 
+add china 103.116.72.0/22 
+add china 103.116.76.0/22 
+add china 103.116.92.0/22 
+add china 103.116.120.0/22 
+add china 103.116.128.0/22 
+add china 103.116.132.0/23 
+add china 103.116.148.0/22 
+add china 103.116.184.0/22 
+add china 103.116.206.0/23 
+add china 103.116.220.0/22 
+add china 103.116.224.0/22 
+add china 103.116.228.0/22 
+add china 103.117.16.0/22 
+add china 103.117.72.0/22 
+add china 103.117.88.0/22 
+add china 103.117.132.0/22 
+add china 103.117.136.0/22 
+add china 103.117.188.0/22 
+add china 103.117.220.0/22 
+add china 103.118.19.0/24 
+add china 103.118.36.0/22 
+add china 103.118.52.0/22 
+add china 103.118.56.0/22 
+add china 103.118.60.0/22 
+add china 103.118.64.0/22 
+add china 103.118.68.0/22 
+add china 103.118.72.0/22 
+add china 103.118.88.0/22 
+add china 103.118.173.0/24 
+add china 103.118.192.0/22 
+add china 103.118.196.0/22 
+add china 103.118.200.0/22 
+add china 103.118.204.0/22 
+add china 103.118.208.0/22 
+add china 103.118.212.0/22 
+add china 103.118.216.0/22 
+add china 103.118.220.0/22 
+add china 103.118.240.0/22 
+add china 103.118.244.0/22 
+add china 103.118.248.0/22 
+add china 103.118.252.0/22 
+add china 103.119.0.0/22 
+add china 103.119.12.0/22 
+add china 103.119.16.0/22 
+add china 103.119.28.0/22 
+add china 103.119.44.0/22 
+add china 103.119.104.0/22 
+add china 103.119.115.0/24 
+add china 103.119.156.0/22 
+add china 103.119.180.0/22 
+add china 103.119.200.0/22 
+add china 103.119.224.0/22 
+add china 103.120.52.0/22 
+add china 103.120.72.0/22 
+add china 103.120.76.0/24 
+add china 103.120.88.0/22 
+add china 103.120.96.0/22 
+add china 103.120.100.0/22 
+add china 103.120.140.0/22 
+add china 103.120.196.0/22 
+add china 103.120.224.0/22 
+add china 103.121.52.0/22 
+add china 103.121.92.0/22 
+add china 103.121.160.0/22 
+add china 103.121.164.0/22 
+add china 103.121.250.0/24 
+add china 103.121.252.0/22 
+add china 103.122.48.0/22 
+add china 103.122.176.0/22 
+add china 103.122.192.0/22 
+add china 103.122.240.0/22 
+add china 103.123.4.0/22 
+add china 103.123.56.0/22 
+add china 103.123.88.0/22 
+add china 103.123.92.0/22 
+add china 103.123.116.0/22 
+add china 103.123.160.0/22 
+add china 103.123.176.0/22 
+add china 103.123.200.0/22 
+add china 103.123.204.0/22 
+add china 103.123.208.0/22 
+add china 103.123.212.0/22 
+add china 103.129.52.0/22 
+add china 103.129.148.0/22 
+add china 103.192.0.0/22 
+add china 103.192.4.0/22 
+add china 103.192.8.0/22 
+add china 103.192.12.0/22 
+add china 103.192.16.0/22 
+add china 103.192.20.0/22 
+add china 103.192.24.0/22 
+add china 103.192.28.0/22 
+add china 103.192.48.0/22 
+add china 103.192.52.0/22 
+add china 103.192.56.0/22 
+add china 103.192.84.0/22 
+add china 103.192.88.0/22 
+add china 103.192.92.0/22 
+add china 103.192.96.0/22 
+add china 103.192.100.0/22 
+add china 103.192.104.0/22 
+add china 103.192.108.0/22 
+add china 103.192.112.0/22 
+add china 103.192.128.0/22 
+add china 103.192.132.0/22 
+add china 103.192.136.0/22 
+add china 103.192.140.0/22 
+add china 103.192.144.0/22 
+add china 103.192.164.0/22 
+add china 103.192.188.0/22 
+add china 103.192.208.0/22 
+add china 103.192.212.0/22 
+add china 103.192.216.0/22 
+add china 103.192.252.0/22 
+add china 103.193.40.0/22 
+add china 103.193.44.0/22 
+add china 103.193.120.0/22 
+add china 103.193.124.0/22 
+add china 103.193.140.0/22 
+add china 103.193.144.0/22 
+add china 103.193.148.0/22 
+add china 103.193.160.0/22 
+add china 103.193.188.0/22 
+add china 103.193.192.0/22 
+add china 103.193.212.0/22 
+add china 103.193.216.0/22 
+add china 103.193.220.0/22 
+add china 103.193.224.0/22 
+add china 103.193.228.0/22 
+add china 103.193.232.0/22 
+add china 103.193.236.0/22 
+add china 103.193.240.0/22 
+add china 103.194.16.0/22 
+add china 103.195.104.0/22 
+add china 103.195.112.0/22 
+add china 103.195.136.0/22 
+add china 103.195.148.0/22 
+add china 103.195.152.0/22 
+add china 103.195.160.0/22 
+add china 103.195.192.0/22 
+add china 103.196.60.0/22 
+add china 103.196.64.0/22 
+add china 103.196.72.0/22 
+add china 103.196.88.0/22 
+add china 103.196.92.0/22 
+add china 103.196.96.0/22 
+add china 103.196.168.0/22 
+add china 103.196.204.0/22 
+add china 103.197.180.0/22 
+add china 103.197.228.0/22 
+add china 103.198.20.0/22 
+add china 103.198.60.0/22 
+add china 103.198.64.0/22 
+add china 103.198.72.0/22 
+add china 103.198.124.0/22 
+add china 103.198.156.0/22 
+add china 103.198.180.0/22 
+add china 103.198.196.0/22 
+add china 103.198.200.0/22 
+add china 103.198.216.0/22 
+add china 103.198.220.0/22 
+add china 103.198.224.0/22 
+add china 103.198.228.0/22 
+add china 103.198.232.0/22 
+add china 103.198.236.0/22 
+add china 103.198.240.0/22 
+add china 103.198.244.0/22 
+add china 103.199.164.0/22 
+add china 103.199.196.0/22 
+add china 103.199.228.0/22 
+add china 103.199.248.0/22 
+add china 103.199.252.0/22 
+add china 103.200.28.0/22 
+add china 103.200.32.0/22 
+add china 103.200.52.0/22 
+add china 103.200.64.0/22 
+add china 103.200.68.0/22 
+add china 103.200.136.0/22 
+add china 103.200.140.0/22 
+add china 103.200.144.0/22 
+add china 103.200.148.0/22 
+add china 103.200.152.0/22 
+add china 103.200.156.0/22 
+add china 103.200.160.0/22 
+add china 103.200.164.0/22 
+add china 103.200.168.0/22 
+add china 103.200.172.0/22 
+add china 103.200.176.0/22 
+add china 103.200.180.0/22 
+add china 103.200.184.0/22 
+add china 103.200.188.0/22 
+add china 103.200.192.0/22 
+add china 103.200.220.0/22 
+add china 103.200.224.0/22 
+add china 103.200.228.0/22 
+add china 103.200.232.0/22 
+add china 103.200.236.0/22 
+add china 103.200.240.0/22 
+add china 103.200.244.0/22 
+add china 103.200.248.0/22 
+add china 103.200.252.0/22 
+add china 103.201.0.0/22 
+add china 103.201.4.0/22 
+add china 103.201.8.0/22 
+add china 103.201.12.0/22 
+add china 103.201.16.0/22 
+add china 103.201.20.0/22 
+add china 103.201.28.0/22 
+add china 103.201.32.0/22 
+add china 103.201.36.0/22 
+add china 103.201.40.0/22 
+add china 103.201.44.0/22 
+add china 103.201.48.0/22 
+add china 103.201.52.0/22 
+add china 103.201.56.0/22 
+add china 103.201.60.0/22 
+add china 103.201.64.0/22 
+add china 103.201.76.0/22 
+add china 103.201.80.0/22 
+add china 103.201.84.0/22 
+add china 103.201.88.0/22 
+add china 103.201.92.0/22 
+add china 103.201.96.0/22 
+add china 103.201.100.0/22 
+add china 103.201.104.0/22 
+add china 103.201.108.0/22 
+add china 103.201.112.0/22 
+add china 103.201.116.0/22 
+add china 103.201.120.0/22 
+add china 103.201.152.0/22 
+add china 103.201.156.0/22 
+add china 103.201.160.0/22 
+add china 103.201.164.0/22 
+add china 103.201.168.0/22 
+add china 103.201.172.0/22 
+add china 103.201.176.0/22 
+add china 103.201.180.0/22 
+add china 103.201.184.0/22 
+add china 103.201.188.0/22 
+add china 103.201.192.0/22 
+add china 103.201.196.0/22 
+add china 103.201.200.0/22 
+add china 103.201.204.0/22 
+add china 103.201.208.0/22 
+add china 103.201.212.0/22 
+add china 103.201.216.0/22 
+add china 103.201.220.0/22 
+add china 103.201.224.0/22 
+add china 103.201.228.0/22 
+add china 103.201.232.0/22 
+add china 103.201.236.0/22 
+add china 103.201.240.0/22 
+add china 103.201.244.0/22 
+add china 103.201.248.0/22 
+add china 103.201.252.0/22 
+add china 103.202.0.0/22 
+add china 103.202.4.0/22 
+add china 103.202.8.0/22 
+add china 103.202.12.0/22 
+add china 103.202.16.0/22 
+add china 103.202.20.0/22 
+add china 103.202.24.0/22 
+add china 103.202.28.0/22 
+add china 103.202.32.0/22 
+add china 103.202.36.0/22 
+add china 103.202.40.0/22 
+add china 103.202.44.0/22 
+add china 103.202.56.0/22 
+add china 103.202.60.0/22 
+add china 103.202.64.0/22 
+add china 103.202.68.0/22 
+add china 103.202.72.0/22 
+add china 103.202.76.0/22 
+add china 103.202.80.0/22 
+add china 103.202.84.0/22 
+add china 103.202.88.0/22 
+add china 103.202.92.0/22 
+add china 103.202.96.0/22 
+add china 103.202.100.0/22 
+add china 103.202.104.0/22 
+add china 103.202.108.0/22 
+add china 103.202.112.0/22 
+add china 103.202.116.0/22 
+add china 103.202.120.0/22 
+add china 103.202.124.0/22 
+add china 103.202.128.0/22 
+add china 103.202.132.0/22 
+add china 103.202.136.0/22 
+add china 103.202.140.0/22 
+add china 103.202.144.0/22 
+add china 103.202.152.0/22 
+add china 103.202.156.0/22 
+add china 103.202.160.0/22 
+add china 103.202.164.0/22 
+add china 103.202.168.0/22 
+add china 103.202.172.0/22 
+add china 103.202.176.0/22 
+add china 103.202.180.0/22 
+add china 103.202.184.0/22 
+add china 103.202.188.0/22 
+add china 103.202.192.0/22 
+add china 103.202.196.0/22 
+add china 103.202.200.0/21 
+add china 103.202.212.0/22 
+add china 103.202.228.0/22 
+add china 103.202.236.0/22 
+add china 103.202.240.0/22 
+add china 103.202.244.0/22 
+add china 103.202.248.0/22 
+add china 103.202.252.0/22 
+add china 103.203.0.0/22 
+add china 103.203.4.0/22 
+add china 103.203.8.0/22 
+add china 103.203.12.0/22 
+add china 103.203.16.0/22 
+add china 103.203.20.0/22 
+add china 103.203.24.0/22 
+add china 103.203.28.0/22 
+add china 103.203.32.0/22 
+add china 103.203.52.0/22 
+add china 103.203.56.0/22 
+add china 103.203.96.0/22 
+add china 103.203.100.0/22 
+add china 103.203.104.0/22 
+add china 103.203.108.0/22 
+add china 103.203.112.0/22 
+add china 103.203.116.0/22 
+add china 103.203.120.0/22 
+add china 103.203.124.0/22 
+add china 103.203.128.0/22 
+add china 103.203.140.0/22 
+add china 103.203.164.0/22 
+add china 103.203.168.0/22 
+add china 103.203.192.0/22 
+add china 103.203.200.0/22 
+add china 103.203.212.0/22 
+add china 103.203.216.0/22 
+add china 103.204.24.0/22 
+add china 103.204.72.0/22 
+add china 103.204.88.0/22 
+add china 103.204.112.0/22 
+add china 103.204.136.0/22 
+add china 103.204.140.0/22 
+add china 103.204.144.0/22 
+add china 103.204.148.0/22 
+add china 103.204.152.0/22 
+add china 103.204.196.0/22 
+add china 103.204.232.0/22 
+add china 103.204.236.0/22 
+add china 103.205.4.0/22 
+add china 103.205.8.0/22 
+add china 103.205.40.0/22 
+add china 103.205.44.0/22 
+add china 103.205.52.0/22 
+add china 103.205.108.0/22 
+add china 103.205.116.0/22 
+add china 103.205.120.0/22 
+add china 103.205.136.0/22 
+add china 103.205.162.0/24 
+add china 103.205.188.0/22 
+add china 103.205.192.0/22 
+add china 103.205.196.0/22 
+add china 103.205.200.0/22 
+add china 103.205.236.0/22 
+add china 103.205.248.0/22 
+add china 103.205.252.0/22 
+add china 103.206.0.0/22 
+add china 103.206.44.0/22 
+add china 103.206.108.0/22 
+add china 103.206.148.0/22 
+add china 103.207.48.0/22 
+add china 103.207.104.0/22 
+add china 103.207.164.0/22 
+add china 103.207.184.0/22 
+add china 103.207.188.0/22 
+add china 103.207.192.0/22 
+add china 103.207.196.0/22 
+add china 103.207.200.0/22 
+add china 103.207.204.0/22 
+add china 103.207.208.0/22 
+add china 103.207.212.0/22 
+add china 103.207.220.0/22 
+add china 103.207.228.0/22 
+add china 103.207.232.0/22 
+add china 103.208.12.0/22 
+add china 103.208.16.0/22 
+add china 103.208.28.0/22 
+add china 103.208.40.0/22 
+add china 103.208.44.0/22 
+add china 103.208.48.0/22 
+add china 103.208.148.0/22 
+add china 103.209.112.0/22 
+add china 103.209.136.0/22 
+add china 103.209.200.0/22 
+add china 103.209.208.0/22 
+add china 103.209.216.0/22 
+add china 103.210.0.0/22 
+add china 103.210.20.0/22 
+add china 103.210.96.0/22 
+add china 103.210.156.0/22 
+add china 103.210.160.0/22 
+add china 103.210.164.0/22 
+add china 103.210.168.0/22 
+add china 103.210.172.0/22 
+add china 103.210.176.0/22 
+add china 103.210.180.0/22 
+add china 103.210.184.0/22 
+add china 103.210.188.0/22 
+add china 103.210.216.0/22 
+add china 103.211.44.0/22 
+add china 103.211.96.0/22 
+add china 103.211.100.0/22 
+add china 103.211.156.0/22 
+add china 103.211.164.0/22 
+add china 103.211.192.0/22 
+add china 103.211.220.0/22 
+add china 103.211.224.0/22 
+add china 103.211.248.0/22 
+add china 103.212.0.0/22 
+add china 103.212.4.0/22 
+add china 103.212.8.0/22 
+add china 103.212.12.0/22 
+add china 103.212.32.0/22 
+add china 103.212.44.0/22 
+add china 103.212.48.0/22 
+add china 103.212.84.0/22 
+add china 103.212.100.0/22 
+add china 103.212.104.0/22 
+add china 103.212.108.0/22 
+add china 103.212.148.0/22 
+add china 103.212.164.0/22 
+add china 103.212.196.0/22 
+add china 103.212.200.0/22 
+add china 103.212.228.0/22 
+add china 103.212.252.0/22 
+add china 103.213.40.0/22 
+add china 103.213.44.0/22 
+add china 103.213.48.0/22 
+add china 103.213.52.0/22 
+add china 103.213.56.0/22 
+add china 103.213.60.0/22 
+add china 103.213.64.0/22 
+add china 103.213.68.0/22 
+add china 103.213.72.0/22 
+add china 103.213.76.0/22 
+add china 103.213.80.0/22 
+add china 103.213.84.0/22 
+add china 103.213.88.0/22 
+add china 103.213.92.0/22 
+add china 103.213.96.0/22 
+add china 103.213.132.0/22 
+add china 103.213.136.0/22 
+add china 103.213.140.0/22 
+add china 103.213.144.0/22 
+add china 103.213.148.0/22 
+add china 103.213.152.0/22 
+add china 103.213.156.0/22 
+add china 103.213.160.0/22 
+add china 103.213.164.0/22 
+add china 103.213.168.0/22 
+add china 103.213.172.0/22 
+add china 103.213.176.0/22 
+add china 103.213.180.0/22 
+add china 103.213.184.0/22 
+add china 103.213.188.0/22 
+add china 103.213.248.0/22 
+add china 103.214.32.0/22 
+add china 103.214.48.0/22 
+add china 103.214.84.0/22 
+add china 103.214.168.0/22 
+add china 103.214.212.0/22 
+add china 103.214.240.0/22 
+add china 103.214.244.0/22 
+add china 103.215.28.0/22 
+add china 103.215.32.0/22 
+add china 103.215.36.0/22 
+add china 103.215.44.0/22 
+add china 103.215.48.0/22 
+add china 103.215.100.0/22 
+add china 103.215.104.0/22 
+add china 103.215.108.0/22 
+add china 103.215.116.0/22 
+add china 103.215.120.0/22 
+add china 103.215.140.0/22 
+add china 103.215.184.0/22 
+add china 103.215.228.0/22 
+add china 103.216.4.0/22 
+add china 103.216.8.0/22 
+add china 103.216.12.0/22 
+add china 103.216.16.0/22 
+add china 103.216.20.0/22 
+add china 103.216.24.0/22 
+add china 103.216.28.0/22 
+add china 103.216.32.0/22 
+add china 103.216.36.0/22 
+add china 103.216.40.0/22 
+add china 103.216.44.0/22 
+add china 103.216.64.0/22 
+add china 103.216.108.0/22 
+add china 103.216.136.0/22 
+add china 103.216.152.0/22 
+add china 103.216.224.0/22 
+add china 103.216.228.0/22 
+add china 103.216.240.0/22 
+add china 103.216.244.0/22 
+add china 103.216.248.0/22 
+add china 103.216.252.0/22 
+add china 103.217.0.0/22 
+add china 103.217.4.0/22 
+add china 103.217.8.0/22 
+add china 103.217.12.0/22 
+add china 103.217.16.0/22 
+add china 103.217.20.0/22 
+add china 103.217.24.0/22 
+add china 103.217.28.0/22 
+add china 103.217.32.0/22 
+add china 103.217.36.0/22 
+add china 103.217.40.0/22 
+add china 103.217.44.0/22 
+add china 103.217.48.0/22 
+add china 103.217.52.0/22 
+add china 103.217.56.0/22 
+add china 103.217.60.0/22 
+add china 103.217.168.0/22 
+add china 103.217.180.0/22 
+add china 103.217.184.0/22 
+add china 103.217.188.0/22 
+add china 103.217.192.0/22 
+add china 103.217.196.0/22 
+add china 103.217.200.0/22 
+add china 103.217.204.0/22 
+add china 103.218.0.0/22 
+add china 103.218.8.0/22 
+add china 103.218.12.0/22 
+add china 103.218.16.0/22 
+add china 103.218.20.0/22 
+add china 103.218.28.0/22 
+add china 103.218.32.0/22 
+add china 103.218.36.0/22 
+add china 103.218.40.0/22 
+add china 103.218.44.0/22 
+add china 103.218.48.0/22 
+add china 103.218.52.0/22 
+add china 103.218.56.0/22 
+add china 103.218.60.0/22 
+add china 103.218.64.0/22 
+add china 103.218.68.0/22 
+add china 103.218.72.0/22 
+add china 103.218.76.0/22 
+add china 103.218.80.0/22 
+add china 103.218.84.0/22 
+add china 103.218.88.0/22 
+add china 103.218.92.0/22 
+add china 103.218.184.0/22 
+add china 103.218.192.0/22 
+add china 103.218.196.0/22 
+add china 103.218.200.0/22 
+add china 103.218.204.0/22 
+add china 103.218.208.0/22 
+add china 103.218.212.0/22 
+add china 103.218.216.0/22 
+add china 103.219.24.0/22 
+add china 103.219.28.0/22 
+add china 103.219.32.0/22 
+add china 103.219.36.0/22 
+add china 103.219.64.0/22 
+add china 103.219.84.0/22 
+add china 103.219.88.0/22 
+add china 103.219.92.0/22 
+add china 103.219.96.0/22 
+add china 103.219.100.0/22 
+add china 103.219.176.0/22 
+add china 103.219.184.0/22 
+add china 103.220.48.0/22 
+add china 103.220.52.0/22 
+add china 103.220.56.0/22 
+add china 103.220.60.0/22 
+add china 103.220.64.0/22 
+add china 103.220.92.0/22 
+add china 103.220.96.0/22 
+add china 103.220.100.0/22 
+add china 103.220.104.0/22 
+add china 103.220.108.0/22 
+add china 103.220.116.0/22 
+add china 103.220.120.0/22 
+add china 103.220.124.0/22 
+add china 103.220.128.0/22 
+add china 103.220.132.0/22 
+add china 103.220.136.0/22 
+add china 103.220.140.0/22 
+add china 103.220.144.0/22 
+add china 103.220.148.0/22 
+add china 103.220.152.0/22 
+add china 103.220.160.0/22 
+add china 103.220.164.0/22 
+add china 103.220.168.0/22 
+add china 103.220.172.0/22 
+add china 103.220.176.0/22 
+add china 103.220.180.0/22 
+add china 103.220.184.0/22 
+add china 103.220.188.0/22 
+add china 103.220.192.0/22 
+add china 103.220.196.0/22 
+add china 103.220.200.0/22 
+add china 103.220.240.0/22 
+add china 103.220.244.0/22 
+add china 103.220.248.0/22 
+add china 103.220.252.0/22 
+add china 103.221.0.0/22 
+add china 103.221.4.0/22 
+add china 103.221.8.0/22 
+add china 103.221.12.0/22 
+add china 103.221.16.0/22 
+add china 103.221.20.0/22 
+add china 103.221.24.0/22 
+add china 103.221.28.0/22 
+add china 103.221.32.0/22 
+add china 103.221.36.0/22 
+add china 103.221.40.0/22 
+add china 103.221.44.0/22 
+add china 103.221.48.0/22 
+add china 103.221.88.0/22 
+add china 103.221.92.0/22 
+add china 103.221.96.0/22 
+add china 103.221.100.0/22 
+add china 103.221.104.0/22 
+add china 103.221.108.0/22 
+add china 103.221.112.0/22 
+add china 103.221.116.0/22 
+add china 103.221.120.0/22 
+add china 103.221.124.0/22 
+add china 103.221.128.0/22 
+add china 103.221.132.0/22 
+add china 103.221.136.0/22 
+add china 103.221.140.0/22 
+add china 103.221.144.0/22 
+add china 103.221.148.0/22 
+add china 103.221.152.0/22 
+add china 103.221.156.0/22 
+add china 103.221.160.0/22 
+add china 103.221.164.0/22 
+add china 103.221.168.0/22 
+add china 103.221.172.0/22 
+add china 103.221.176.0/22 
+add china 103.221.180.0/22 
+add china 103.221.184.0/22 
+add china 103.221.188.0/22 
+add china 103.221.192.0/22 
+add china 103.221.196.0/22 
+add china 103.221.200.0/22 
+add china 103.221.204.0/22 
+add china 103.222.0.0/22 
+add china 103.222.4.0/22 
+add china 103.222.8.0/22 
+add china 103.222.12.0/22 
+add china 103.222.16.0/22 
+add china 103.222.24.0/22 
+add china 103.222.28.0/22 
+add china 103.222.32.0/22 
+add china 103.222.36.0/22 
+add china 103.222.40.0/22 
+add china 103.222.44.0/22 
+add china 103.222.48.0/22 
+add china 103.222.52.0/22 
+add china 103.222.56.0/22 
+add china 103.222.60.0/22 
+add china 103.222.64.0/22 
+add china 103.222.68.0/22 
+add china 103.222.72.0/22 
+add china 103.222.76.0/22 
+add china 103.222.80.0/22 
+add china 103.222.84.0/22 
+add china 103.222.88.0/22 
+add china 103.222.92.0/22 
+add china 103.222.96.0/22 
+add china 103.222.100.0/22 
+add china 103.222.104.0/22 
+add china 103.222.108.0/22 
+add china 103.222.112.0/22 
+add china 103.222.116.0/22 
+add china 103.222.120.0/22 
+add china 103.222.124.0/22 
+add china 103.222.128.0/22 
+add china 103.222.132.0/22 
+add china 103.222.136.0/22 
+add china 103.222.140.0/22 
+add china 103.222.144.0/22 
+add china 103.222.148.0/22 
+add china 103.222.152.0/22 
+add china 103.222.156.0/22 
+add china 103.222.160.0/22 
+add china 103.222.164.0/22 
+add china 103.222.168.0/22 
+add china 103.222.172.0/22 
+add china 103.222.176.0/22 
+add china 103.222.180.0/22 
+add china 103.222.184.0/22 
+add china 103.222.188.0/22 
+add china 103.222.192.0/22 
+add china 103.222.196.0/22 
+add china 103.222.200.0/22 
+add china 103.222.204.0/22 
+add china 103.222.208.0/22 
+add china 103.222.212.0/22 
+add china 103.222.216.0/22 
+add china 103.222.220.0/22 
+add china 103.222.224.0/22 
+add china 103.222.228.0/22 
+add china 103.222.232.0/22 
+add china 103.222.240.0/22 
+add china 103.222.244.0/22 
+add china 103.223.16.0/22 
+add china 103.223.20.0/22 
+add china 103.223.24.0/22 
+add china 103.223.28.0/22 
+add china 103.223.32.0/22 
+add china 103.223.36.0/22 
+add china 103.223.40.0/22 
+add china 103.223.44.0/22 
+add china 103.223.48.0/22 
+add china 103.223.52.0/22 
+add china 103.223.56.0/22 
+add china 103.223.60.0/22 
+add china 103.223.64.0/22 
+add china 103.223.68.0/22 
+add china 103.223.72.0/22 
+add china 103.223.76.0/22 
+add china 103.223.80.0/22 
+add china 103.223.84.0/22 
+add china 103.223.88.0/22 
+add china 103.223.92.0/22 
+add china 103.223.96.0/22 
+add china 103.223.100.0/22 
+add china 103.223.104.0/22 
+add china 103.223.108.0/22 
+add china 103.223.112.0/22 
+add china 103.223.116.0/22 
+add china 103.223.120.0/22 
+add china 103.223.124.0/22 
+add china 103.223.128.0/22 
+add china 103.223.132.0/22 
+add china 103.223.140.0/22 
+add china 103.223.144.0/22 
+add china 103.223.148.0/22 
+add china 103.223.152.0/22 
+add china 103.223.156.0/22 
+add china 103.223.160.0/22 
+add china 103.223.164.0/22 
+add china 103.223.168.0/22 
+add china 103.223.172.0/22 
+add china 103.223.176.0/22 
+add china 103.223.180.0/22 
+add china 103.223.188.0/22 
+add china 103.223.192.0/22 
+add china 103.223.196.0/22 
+add china 103.223.200.0/22 
+add china 103.223.204.0/22 
+add china 103.223.208.0/22 
+add china 103.223.212.0/22 
+add china 103.223.216.0/22 
+add china 103.223.220.0/22 
+add china 103.223.224.0/22 
+add china 103.223.228.0/22 
+add china 103.223.232.0/22 
+add china 103.223.236.0/22 
+add china 103.223.240.0/22 
+add china 103.223.244.0/22 
+add china 103.223.248.0/22 
+add china 103.223.252.0/22 
+add china 103.224.0.0/22 
+add china 103.224.40.0/22 
+add china 103.224.44.0/22 
+add china 103.224.60.0/22 
+add china 103.224.80.0/22 
+add china 103.224.220.0/22 
+add china 103.224.224.0/22 
+add china 103.224.228.0/22 
+add china 103.224.232.0/22 
+add china 103.225.84.0/22 
+add china 103.226.16.0/22 
+add china 103.226.40.0/22 
+add china 103.226.56.0/22 
+add china 103.226.60.0/22 
+add china 103.226.80.0/22 
+add china 103.226.132.0/22 
+add china 103.226.156.0/22 
+add china 103.226.180.0/22 
+add china 103.226.196.0/22 
+add china 103.227.48.0/22 
+add china 103.227.72.0/22 
+add china 103.227.76.0/22 
+add china 103.227.80.0/22 
+add china 103.227.100.0/22 
+add china 103.227.120.0/22 
+add china 103.227.132.0/22 
+add china 103.227.136.0/22 
+add china 103.227.196.0/22 
+add china 103.227.204.0/22 
+add china 103.227.212.0/22 
+add china 103.227.228.0/22 
+add china 103.228.12.0/22 
+add china 103.228.28.0/22 
+add china 103.228.68.0/22 
+add china 103.228.88.0/22 
+add china 103.228.128.0/22 
+add china 103.228.136.0/22 
+add china 103.228.160.0/22 
+add china 103.228.176.0/22 
+add china 103.228.204.0/22 
+add china 103.228.208.0/22 
+add china 103.228.228.0/22 
+add china 103.228.232.0/22 
+add china 103.229.20.0/22 
+add china 103.229.60.0/22 
+add china 103.229.136.0/22 
+add china 103.229.148.0/22 
+add china 103.229.172.0/22 
+add china 103.229.212.0/22 
+add china 103.229.216.0/22 
+add china 103.229.220.0/22 
+add china 103.229.228.0/22 
+add china 103.229.236.0/22 
+add china 103.229.240.0/22 
+add china 103.230.0.0/22 
+add china 103.230.28.0/22 
+add china 103.230.44.0/22 
+add china 103.230.96.0/22 
+add china 103.230.196.0/22 
+add china 103.230.200.0/22 
+add china 103.230.204.0/22 
+add china 103.230.212.0/22 
+add china 103.230.236.0/22 
+add china 103.231.16.0/22 
+add china 103.231.20.0/22 
+add china 103.231.64.0/22 
+add china 103.231.68.0/22 
+add china 103.231.144.0/22 
+add china 103.231.180.0/22 
+add china 103.231.184.0/22 
+add china 103.231.244.0/22 
+add china 103.232.4.0/22 
+add china 103.232.144.0/22 
+add china 103.232.188.0/22 
+add china 103.232.212.0/22 
+add china 103.233.4.0/22 
+add china 103.233.44.0/22 
+add china 103.233.52.0/22 
+add china 103.233.104.0/22 
+add china 103.233.128.0/22 
+add china 103.233.136.0/22 
+add china 103.233.228.0/22 
+add china 103.234.0.0/22 
+add china 103.234.20.0/22 
+add china 103.234.56.0/22 
+add china 103.234.128.0/22 
+add china 103.234.172.0/22 
+add china 103.234.180.0/22 
+add china 103.234.244.0/22 
+add china 103.235.16.0/22 
+add china 103.235.48.0/22 
+add china 103.235.56.0/22 
+add china 103.235.60.0/22 
+add china 103.235.80.0/22 
+add china 103.235.84.0/22 
+add china 103.235.128.0/22 
+add china 103.235.132.0/22 
+add china 103.235.136.0/22 
+add china 103.235.140.0/22 
+add china 103.235.144.0/22 
+add china 103.235.148.0/22 
+add china 103.235.184.0/22 
+add china 103.235.192.0/22 
+add china 103.235.200.0/22 
+add china 103.235.220.0/22 
+add china 103.235.224.0/22 
+add china 103.235.228.0/22 
+add china 103.235.232.0/22 
+add china 103.235.236.0/22 
+add china 103.235.240.0/22 
+add china 103.235.244.0/22 
+add china 103.235.248.0/22 
+add china 103.235.252.0/22 
+add china 103.236.0.0/22 
+add china 103.236.4.0/22 
+add china 103.236.8.0/22 
+add china 103.236.12.0/22 
+add china 103.236.16.0/22 
+add china 103.236.20.0/22 
+add china 103.236.24.0/22 
+add china 103.236.28.0/22 
+add china 103.236.32.0/22 
+add china 103.236.36.0/22 
+add china 103.236.40.0/22 
+add china 103.236.44.0/22 
+add china 103.236.48.0/22 
+add china 103.236.52.0/22 
+add china 103.236.56.0/22 
+add china 103.236.60.0/22 
+add china 103.236.64.0/22 
+add china 103.236.68.0/22 
+add china 103.236.72.0/22 
+add china 103.236.76.0/22 
+add china 103.236.80.0/22 
+add china 103.236.84.0/22 
+add china 103.236.88.0/22 
+add china 103.236.92.0/22 
+add china 103.236.96.0/22 
+add china 103.236.120.0/22 
+add china 103.236.184.0/22 
+add china 103.236.220.0/22 
+add china 103.236.232.0/22 
+add china 103.236.240.0/22 
+add china 103.236.244.0/22 
+add china 103.236.248.0/22 
+add china 103.236.252.0/22 
+add china 103.237.0.0/22 
+add china 103.237.4.0/22 
+add china 103.237.8.0/22 
+add china 103.237.12.0/22 
+add china 103.237.24.0/22 
+add china 103.237.28.0/22 
+add china 103.237.68.0/22 
+add china 103.237.88.0/22 
+add china 103.237.152.0/22 
+add china 103.237.176.0/22 
+add china 103.237.180.0/22 
+add china 103.237.184.0/22 
+add china 103.237.188.0/22 
+add china 103.237.192.0/22 
+add china 103.237.196.0/22 
+add china 103.237.200.0/22 
+add china 103.237.204.0/22 
+add china 103.237.208.0/22 
+add china 103.237.212.0/22 
+add china 103.237.216.0/22 
+add china 103.237.220.0/22 
+add china 103.237.224.0/22 
+add china 103.237.228.0/22 
+add china 103.237.232.0/22 
+add china 103.237.236.0/22 
+add china 103.237.240.0/22 
+add china 103.237.244.0/22 
+add china 103.237.248.0/22 
+add china 103.237.252.0/22 
+add china 103.238.0.0/22 
+add china 103.238.4.0/22 
+add china 103.238.16.0/22 
+add china 103.238.20.0/22 
+add china 103.238.24.0/22 
+add china 103.238.28.0/22 
+add china 103.238.32.0/22 
+add china 103.238.36.0/22 
+add china 103.238.40.0/22 
+add china 103.238.44.0/22 
+add china 103.238.48.0/22 
+add china 103.238.52.0/22 
+add china 103.238.56.0/22 
+add china 103.238.88.0/22 
+add china 103.238.92.0/22 
+add china 103.238.96.0/22 
+add china 103.238.132.0/22 
+add china 103.238.140.0/22 
+add china 103.238.144.0/22 
+add china 103.238.160.0/22 
+add china 103.238.164.0/22 
+add china 103.238.168.0/22 
+add china 103.238.172.0/22 
+add china 103.238.176.0/22 
+add china 103.238.180.0/22 
+add china 103.238.184.0/22 
+add china 103.238.188.0/22 
+add china 103.238.196.0/22 
+add china 103.238.204.0/22 
+add china 103.238.252.0/22 
+add china 103.239.0.0/22 
+add china 103.239.44.0/22 
+add china 103.239.68.0/22 
+add china 103.239.96.0/22 
+add china 103.239.152.0/22 
+add china 103.239.156.0/22 
+add china 103.239.176.0/22 
+add china 103.239.180.0/22 
+add china 103.239.184.0/22 
+add china 103.239.192.0/22 
+add china 103.239.196.0/22 
+add china 103.239.204.0/22 
+add china 103.239.208.0/22 
+add china 103.239.224.0/22 
+add china 103.239.244.0/22 
+add china 103.240.16.0/22 
+add china 103.240.36.0/22 
+add china 103.240.72.0/22 
+add china 103.240.84.0/22 
+add china 103.240.124.0/22 
+add china 103.240.156.0/22 
+add china 103.240.172.0/22 
+add china 103.240.188.0/22 
+add china 103.240.244.0/22 
+add china 103.241.12.0/22 
+add china 103.241.72.0/22 
+add china 103.241.92.0/22 
+add china 103.241.96.0/22 
+add china 103.241.160.0/22 
+add china 103.241.184.0/22 
+add china 103.241.188.0/22 
+add china 103.241.220.0/22 
+add china 103.242.64.0/22 
+add china 103.242.128.0/22 
+add china 103.242.132.0/22 
+add china 103.242.160.0/22 
+add china 103.242.168.0/22 
+add china 103.242.172.0/22 
+add china 103.242.176.0/22 
+add china 103.242.200.0/22 
+add china 103.242.212.0/22 
+add china 103.242.220.0/22 
+add china 103.242.240.0/22 
+add china 103.243.136.0/22 
+add china 103.243.252.0/22 
+add china 103.244.16.0/22 
+add china 103.244.58.0/23 
+add china 103.244.60.0/22 
+add china 103.244.64.0/22 
+add china 103.244.68.0/22 
+add china 103.244.72.0/22 
+add china 103.244.76.0/22 
+add china 103.244.80.0/22 
+add china 103.244.84.0/22 
+add china 103.244.116.0/22 
+add china 103.244.164.0/22 
+add china 103.244.232.0/22 
+add china 103.244.252.0/22 
+add china 103.245.23.0/24 
+add china 103.245.52.0/22 
+add china 103.245.60.0/22 
+add china 103.245.80.0/22 
+add china 103.245.124.0/22 
+add china 103.245.128.0/22 
+add china 103.246.8.0/22 
+add china 103.246.12.0/22 
+add china 103.246.120.0/22 
+add china 103.246.124.0/22 
+add china 103.246.132.0/22 
+add china 103.246.152.0/22 
+add china 103.246.156.0/22 
+add china 103.247.168.0/22 
+add china 103.247.172.0/22 
+add china 103.247.176.0/22 
+add china 103.247.200.0/22 
+add china 103.247.212.0/22 
+add china 103.248.0.0/23 
+add china 103.248.64.0/22 
+add china 103.248.100.0/22 
+add china 103.248.124.0/22 
+add china 103.248.152.0/22 
+add china 103.248.168.0/22 
+add china 103.248.192.0/22 
+add china 103.248.212.0/22 
+add china 103.248.220.0/22 
+add china 103.248.224.0/22 
+add china 103.249.8.0/22 
+add china 103.249.12.0/22 
+add china 103.249.52.0/22 
+add china 103.249.104.0/22 
+add china 103.249.128.0/22 
+add china 103.249.136.0/22 
+add china 103.249.144.0/22 
+add china 103.249.164.0/22 
+add china 103.249.168.0/22 
+add china 103.249.172.0/22 
+add china 103.249.176.0/22 
+add china 103.249.188.0/22 
+add china 103.249.192.0/22 
+add china 103.249.244.0/22 
+add china 103.249.252.0/22 
+add china 103.250.32.0/22 
+add china 103.250.104.0/22 
+add china 103.250.124.0/22 
+add china 103.250.180.0/22 
+add china 103.250.192.0/22 
+add china 103.250.216.0/22 
+add china 103.250.224.0/22 
+add china 103.250.236.0/22 
+add china 103.250.248.0/22 
+add china 103.250.252.0/22 
+add china 103.251.32.0/22 
+add china 103.251.36.0/22 
+add china 103.251.84.0/22 
+add china 103.251.96.0/22 
+add china 103.251.124.0/22 
+add china 103.251.128.0/22 
+add china 103.251.160.0/22 
+add china 103.251.192.0/22 
+add china 103.251.204.0/22 
+add china 103.251.236.0/22 
+add china 103.251.240.0/22 
+add china 103.252.28.0/22 
+add china 103.252.36.0/22 
+add china 103.252.64.0/22 
+add china 103.252.96.0/22 
+add china 103.252.104.0/22 
+add china 103.252.172.0/22 
+add china 103.252.204.0/22 
+add china 103.252.208.0/22 
+add china 103.252.232.0/22 
+add china 103.252.248.0/22 
+add china 103.253.4.0/22 
+add china 103.253.60.0/22 
+add china 103.253.204.0/22 
+add china 103.253.220.0/22 
+add china 103.253.224.0/22 
+add china 103.253.232.0/22 
+add china 103.254.8.0/22 
+add china 103.254.20.0/22 
+add china 103.254.64.0/22 
+add china 103.254.68.0/22 
+add china 103.254.72.0/22 
+add china 103.254.76.0/22 
+add china 103.254.112.0/22 
+add china 103.254.176.0/22 
+add china 103.254.188.0/22 
+add china 103.254.196.0/24 
+add china 103.254.220.0/22 
+add china 103.255.56.0/22 
+add china 103.255.68.0/22 
+add china 103.255.88.0/22 
+add china 103.255.92.0/22 
+add china 103.255.136.0/22 
+add china 103.255.140.0/22 
+add china 103.255.184.0/22 
+add china 103.255.200.0/22 
+add china 103.255.212.0/22 
+add china 103.255.228.0/22 
+add china 106.0.0.0/24 
+add china 106.0.2.0/23 
+add china 106.0.4.0/22 
+add china 106.0.8.0/21 
+add china 106.0.16.0/20 
+add china 106.0.44.0/22 
+add china 106.0.64.0/18 
+add china 106.2.0.0/15 
+add china 106.4.0.0/14 
+add china 106.8.0.0/15 
+add china 106.11.0.0/16 
+add china 106.12.0.0/14 
+add china 106.16.0.0/12 
+add china 106.32.0.0/12 
+add china 106.48.0.0/15 
+add china 106.50.0.0/16 
+add china 106.52.0.0/14 
+add china 106.56.0.0/13 
+add china 106.74.0.0/16 
+add china 106.75.0.0/16 
+add china 106.80.0.0/12 
+add china 106.108.0.0/14 
+add china 106.112.0.0/13 
+add china 106.120.0.0/13 
+add china 106.224.0.0/12 
+add china 109.244.0.0/16 
+add china 110.6.0.0/15 
+add china 110.16.0.0/14 
+add china 110.34.40.0/22 
+add china 110.34.44.0/22 
+add china 110.40.0.0/14 
+add china 110.44.12.0/22 
+add china 110.44.144.0/20 
+add china 110.48.0.0/16 
+add china 110.51.0.0/16 
+add china 110.52.0.0/15 
+add china 110.56.0.0/13 
+add china 110.64.0.0/15 
+add china 110.72.0.0/15 
+add china 110.75.0.0/17 
+add china 110.75.128.0/19 
+add china 110.75.160.0/19 
+add china 110.75.192.0/18 
+add china 110.76.0.0/19 
+add china 110.76.32.0/19 
+add china 110.76.132.0/22 
+add china 110.76.156.0/22 
+add china 110.76.184.0/22 
+add china 110.76.192.0/18 
+add china 110.77.0.0/17 
+add china 110.80.0.0/13 
+add china 110.88.0.0/14 
+add china 110.92.68.0/22 
+add china 110.93.32.0/19 
+add china 110.94.0.0/15 
+add china 110.96.0.0/11 
+add china 110.152.0.0/14 
+add china 110.156.0.0/15 
+add china 110.165.32.0/19 
+add china 110.166.0.0/15 
+add china 110.172.192.0/18 
+add china 110.173.0.0/19 
+add china 110.173.32.0/20 
+add china 110.173.64.0/19 
+add china 110.173.96.0/19 
+add china 110.173.192.0/19 
+add china 110.176.0.0/13 
+add china 110.184.0.0/13 
+add china 110.192.0.0/11 
+add china 110.228.0.0/14 
+add china 110.232.32.0/19 
+add china 110.236.0.0/15 
+add china 110.240.0.0/12 
+add china 111.0.0.0/10 
+add china 111.66.0.0/16 
+add china 111.67.192.0/20 
+add china 111.68.64.0/19 
+add china 111.72.0.0/13 
+add china 111.85.0.0/16 
+add china 111.91.192.0/19 
+add china 111.92.248.0/22 
+add china 111.92.252.0/22 
+add china 111.112.0.0/15 
+add china 111.114.0.0/15 
+add china 111.116.0.0/15 
+add china 111.118.200.0/21 
+add china 111.119.64.0/18 
+add china 111.119.128.0/19 
+add china 111.120.0.0/14 
+add china 111.124.0.0/16 
+add china 111.126.0.0/15 
+add china 111.128.0.0/11 
+add china 111.160.0.0/13 
+add china 111.170.0.0/16 
+add china 111.172.0.0/14 
+add china 111.176.0.0/13 
+add china 111.186.0.0/15 
+add china 111.192.0.0/12 
+add china 111.208.0.0/14 
+add china 111.212.0.0/14 
+add china 111.221.28.0/24 
+add china 111.221.128.0/17 
+add china 111.222.0.0/16 
+add china 111.223.4.0/22 
+add china 111.223.8.0/22 
+add china 111.223.12.0/22 
+add china 111.223.16.0/22 
+add china 111.223.240.0/22 
+add china 111.223.248.0/22 
+add china 111.224.0.0/14 
+add china 111.228.0.0/14 
+add china 111.235.96.0/19 
+add china 111.235.156.0/22 
+add china 111.235.160.0/19 
+add china 112.0.0.0/10 
+add china 112.64.0.0/15 
+add china 112.66.0.0/15 
+add china 112.73.0.0/16 
+add china 112.74.0.0/15 
+add china 112.80.0.0/13 
+add china 112.88.0.0/13 
+add china 112.96.0.0/15 
+add china 112.98.0.0/15 
+add china 112.100.0.0/14 
+add china 112.109.128.0/17 
+add china 112.111.0.0/16 
+add china 112.112.0.0/14 
+add china 112.116.0.0/15 
+add china 112.122.0.0/15 
+add china 112.124.0.0/14 
+add china 112.128.0.0/14 
+add china 112.132.0.0/16 
+add china 112.137.48.0/21 
+add china 112.192.0.0/14 
+add china 112.224.0.0/11 
+add china 113.0.0.0/13 
+add china 113.8.0.0/15 
+add china 113.11.192.0/19 
+add china 113.12.0.0/14 
+add china 113.16.0.0/15 
+add china 113.18.0.0/16 
+add china 113.21.232.0/22 
+add china 113.21.236.0/22 
+add china 113.24.0.0/14 
+add china 113.31.0.0/16 
+add china 113.44.0.0/14 
+add china 113.48.0.0/14 
+add china 113.52.160.0/19 
+add china 113.52.228.0/22 
+add china 113.54.0.0/15 
+add china 113.56.0.0/15 
+add china 113.58.0.0/16 
+add china 113.59.0.0/17 
+add china 113.59.224.0/22 
+add china 113.62.0.0/15 
+add china 113.64.0.0/11 
+add china 113.96.0.0/12 
+add china 113.112.0.0/13 
+add china 113.120.0.0/13 
+add china 113.128.0.0/15 
+add china 113.130.96.0/20 
+add china 113.130.112.0/21 
+add china 113.132.0.0/14 
+add china 113.136.0.0/13 
+add china 113.194.0.0/15 
+add china 113.197.100.0/22 
+add china 113.200.0.0/15 
+add china 113.202.0.0/16 
+add china 113.204.0.0/14 
+add china 113.208.96.0/19 
+add china 113.208.128.0/17 
+add china 113.209.0.0/16 
+add china 113.212.0.0/18 
+add china 113.212.100.0/22 
+add china 113.212.184.0/21 
+add china 113.213.0.0/17 
+add china 113.214.0.0/15 
+add china 113.218.0.0/15 
+add china 113.220.0.0/14 
+add china 113.224.0.0/12 
+add china 113.240.0.0/13 
+add china 113.248.0.0/14 
+add china 114.28.0.0/16 
+add china 114.31.64.0/22 
+add china 114.31.68.0/22 
+add china 114.54.0.0/15 
+add china 114.60.0.0/14 
+add china 114.64.0.0/14 
+add china 114.68.0.0/16 
+add china 114.79.64.0/18 
+add china 114.80.0.0/12 
+add china 114.96.0.0/13 
+add china 114.104.0.0/14 
+add china 114.110.0.0/20 
+add china 114.110.64.0/18 
+add china 114.111.0.0/19 
+add china 114.111.160.0/19 
+add china 114.112.0.0/14 
+add china 114.116.0.0/16 
+add china 114.117.0.0/16 
+add china 114.118.0.0/16 
+add china 114.119.0.0/17 
+add china 114.119.128.0/18 
+add china 114.119.192.0/21 
+add china 114.119.200.0/22 
+add china 114.119.204.0/22 
+add china 114.119.208.0/20 
+add china 114.119.224.0/19 
+add china 114.132.0.0/16 
+add china 114.135.0.0/16 
+add china 114.138.0.0/15 
+add china 114.141.64.0/21 
+add china 114.141.80.0/22 
+add china 114.141.84.0/22 
+add china 114.141.128.0/18 
+add china 114.196.0.0/15 
+add china 114.198.248.0/21 
+add china 114.208.0.0/14 
+add china 114.212.0.0/15 
+add china 114.214.0.0/16 
+add china 114.215.0.0/16 
+add china 114.216.0.0/13 
+add china 114.224.0.0/12 
+add china 114.240.0.0/12 
+add china 115.24.0.0/14 
+add china 115.28.0.0/15 
+add china 115.31.64.0/22 
+add china 115.31.68.0/22 
+add china 115.31.72.0/22 
+add china 115.31.76.0/22 
+add china 115.32.0.0/14 
+add china 115.42.56.0/22 
+add china 115.44.0.0/15 
+add china 115.46.0.0/16 
+add china 115.47.0.0/16 
+add china 115.48.0.0/12 
+add china 115.69.64.0/20 
+add china 115.84.0.0/18 
+add china 115.84.192.0/19 
+add china 115.85.192.0/18 
+add china 115.100.0.0/14 
+add china 115.104.0.0/14 
+add china 115.120.0.0/14 
+add china 115.124.16.0/20 
+add china 115.148.0.0/14 
+add china 115.152.0.0/15 
+add china 115.154.0.0/15 
+add china 115.156.0.0/15 
+add china 115.158.0.0/16 
+add china 115.159.0.0/16 
+add china 115.166.64.0/19 
+add china 115.168.0.0/14 
+add china 115.172.0.0/14 
+add china 115.180.0.0/15 
+add china 115.182.0.0/16 
+add china 115.183.0.0/16 
+add china 115.187.0.0/22 
+add china 115.187.4.0/22 
+add china 115.187.8.0/22 
+add china 115.187.12.0/22 
+add china 115.190.0.0/15 
+add china 115.192.0.0/11 
+add china 115.224.0.0/12 
+add china 116.0.8.0/21 
+add china 116.0.24.0/21 
+add china 116.1.0.0/16 
+add china 116.2.0.0/15 
+add china 116.4.0.0/14 
+add china 116.8.0.0/14 
+add china 116.13.0.0/16 
+add china 116.16.0.0/12 
+add china 116.50.0.0/20 
+add china 116.52.0.0/14 
+add china 116.56.0.0/15 
+add china 116.58.128.0/20 
+add china 116.58.208.0/20 
+add china 116.60.0.0/14 
+add china 116.66.0.0/17 
+add china 116.66.176.0/22 
+add china 116.68.136.0/22 
+add china 116.68.140.0/22 
+add china 116.68.176.0/22 
+add china 116.68.180.0/22 
+add china 116.69.0.0/16 
+add china 116.70.0.0/17 
+add china 116.76.0.0/15 
+add china 116.78.0.0/15 
+add china 116.85.0.0/16 
+add china 116.89.144.0/20 
+add china 116.89.240.0/22 
+add china 116.90.80.0/20 
+add china 116.90.184.0/21 
+add china 116.95.0.0/16 
+add china 116.112.0.0/14 
+add china 116.116.0.0/15 
+add china 116.128.0.0/10 
+add china 116.192.0.0/16 
+add china 116.193.16.0/20 
+add china 116.193.32.0/19 
+add china 116.193.152.0/22 
+add china 116.193.164.0/22 
+add china 116.193.176.0/21 
+add china 116.194.0.0/15 
+add china 116.196.0.0/16 
+add china 116.197.160.0/22 
+add china 116.197.164.0/22 
+add china 116.198.0.0/16 
+add china 116.199.0.0/17 
+add china 116.199.128.0/19 
+add china 116.204.0.0/17 
+add china 116.204.132.0/22 
+add china 116.205.0.0/16 
+add china 116.206.92.0/22 
+add china 116.206.100.0/22 
+add china 116.206.176.0/22 
+add china 116.207.0.0/16 
+add china 116.208.0.0/14 
+add china 116.212.160.0/20 
+add china 116.213.44.0/22 
+add china 116.213.64.0/18 
+add china 116.213.128.0/17 
+add china 116.214.32.0/19 
+add china 116.214.64.0/20 
+add china 116.214.128.0/17 
+add china 116.215.0.0/16 
+add china 116.216.0.0/14 
+add china 116.224.0.0/12 
+add china 116.242.0.0/15 
+add china 116.244.0.0/15 
+add china 116.246.0.0/15 
+add china 116.248.0.0/15 
+add china 116.251.64.0/18 
+add china 116.252.0.0/15 
+add china 116.254.104.0/22 
+add china 116.254.108.0/22 
+add china 116.254.128.0/17 
+add china 116.255.128.0/17 
+add china 117.8.0.0/13 
+add china 117.21.0.0/16 
+add china 117.22.0.0/15 
+add china 117.24.0.0/13 
+add china 117.32.0.0/13 
+add china 117.40.0.0/14 
+add china 117.44.0.0/15 
+add china 117.48.0.0/14 
+add china 117.53.48.0/20 
+add china 117.53.176.0/20 
+add china 117.57.0.0/16 
+add china 117.58.0.0/17 
+add china 117.59.0.0/16 
+add china 117.60.0.0/14 
+add china 117.64.0.0/13 
+add china 117.72.0.0/15 
+add china 117.74.64.0/20 
+add china 117.74.80.0/20 
+add china 117.74.128.0/17 
+add china 117.75.0.0/16 
+add china 117.76.0.0/14 
+add china 117.80.0.0/12 
+add china 117.100.0.0/15 
+add china 117.103.16.0/20 
+add china 117.103.40.0/21 
+add china 117.103.72.0/21 
+add china 117.103.128.0/20 
+add china 117.104.168.0/21 
+add china 117.106.0.0/15 
+add china 117.112.0.0/13 
+add china 117.120.64.0/18 
+add china 117.120.128.0/17 
+add china 117.121.0.0/17 
+add china 117.121.128.0/18 
+add china 117.121.192.0/21 
+add china 117.122.128.0/17 
+add china 117.124.0.0/14 
+add china 117.128.0.0/10 
+add china 118.24.0.0/15 
+add china 118.26.0.0/19 
+add china 118.26.32.0/20 
+add china 118.26.48.0/21 
+add china 118.26.56.0/21 
+add china 118.26.64.0/18 
+add china 118.26.128.0/17 
+add china 118.28.0.0/15 
+add china 118.30.0.0/16 
+add china 118.31.0.0/16 
+add china 118.64.0.0/15 
+add china 118.66.0.0/16 
+add china 118.67.112.0/20 
+add china 118.72.0.0/13 
+add china 118.80.0.0/15 
+add china 118.84.0.0/15 
+add china 118.88.32.0/19 
+add china 118.88.64.0/18 
+add china 118.88.128.0/17 
+add china 118.89.0.0/16 
+add china 118.91.240.0/20 
+add china 118.102.16.0/20 
+add china 118.102.32.0/21 
+add china 118.103.164.0/22 
+add china 118.103.168.0/22 
+add china 118.103.172.0/22 
+add china 118.103.176.0/22 
+add china 118.107.180.0/22 
+add china 118.112.0.0/13 
+add china 118.120.0.0/14 
+add china 118.124.0.0/15 
+add china 118.126.0.0/16 
+add china 118.127.128.0/19 
+add china 118.132.0.0/14 
+add china 118.144.0.0/14 
+add china 118.178.0.0/16 
+add china 118.180.0.0/14 
+add china 118.184.0.0/17 
+add china 118.184.128.0/17 
+add china 118.186.0.0/15 
+add china 118.188.0.0/16 
+add china 118.190.0.0/16 
+add china 118.191.0.0/16 
+add china 118.192.0.0/16 
+add china 118.193.0.0/20 
+add china 118.193.32.0/19 
+add china 118.193.64.0/20 
+add china 118.193.96.0/19 
+add china 118.193.128.0/17 
+add china 118.194.0.0/17 
+add china 118.194.128.0/17 
+add china 118.195.0.0/17 
+add china 118.195.128.0/17 
+add china 118.196.0.0/14 
+add china 118.202.0.0/15 
+add china 118.204.0.0/14 
+add china 118.212.0.0/16 
+add china 118.213.0.0/16 
+add china 118.215.192.0/18 
+add china 118.224.0.0/14 
+add china 118.228.0.0/15 
+add china 118.230.0.0/16 
+add china 118.239.0.0/16 
+add china 118.242.0.0/16 
+add china 118.244.0.0/14 
+add china 118.248.0.0/13 
+add china 119.0.0.0/15 
+add china 119.2.0.0/19 
+add china 119.2.128.0/17 
+add china 119.3.0.0/16 
+add china 119.4.0.0/14 
+add china 119.8.0.0/16 
+add china 119.10.0.0/17 
+add china 119.15.136.0/21 
+add china 119.16.0.0/16 
+add china 119.18.192.0/20 
+add china 119.18.208.0/21 
+add china 119.18.224.0/20 
+add china 119.18.240.0/20 
+add china 119.19.0.0/16 
+add china 119.20.0.0/14 
+add china 119.27.64.0/18 
+add china 119.27.128.0/19 
+add china 119.27.160.0/19 
+add china 119.27.192.0/18 
+add china 119.28.0.0/15 
+add china 119.30.48.0/20 
+add china 119.31.192.0/19 
+add china 119.32.0.0/14 
+add china 119.36.0.0/16 
+add china 119.37.0.0/17 
+add china 119.37.128.0/18 
+add china 119.37.192.0/18 
+add china 119.38.0.0/17 
+add china 119.38.128.0/18 
+add china 119.38.192.0/20 
+add china 119.38.208.0/20 
+add china 119.38.224.0/19 
+add china 119.39.0.0/16 
+add china 119.40.0.0/18 
+add china 119.40.64.0/20 
+add china 119.40.128.0/17 
+add china 119.41.0.0/16 
+add china 119.42.0.0/19 
+add china 119.42.52.0/22 
+add china 119.42.128.0/21 
+add china 119.42.136.0/21 
+add china 119.42.224.0/19 
+add china 119.44.0.0/15 
+add china 119.48.0.0/13 
+add china 119.57.0.0/16 
+add china 119.58.0.0/16 
+add china 119.59.128.0/17 
+add china 119.60.0.0/16 
+add china 119.61.0.0/16 
+add china 119.62.0.0/16 
+add china 119.63.32.0/19 
+add china 119.75.208.0/20 
+add china 119.78.0.0/15 
+add china 119.80.0.0/16 
+add china 119.82.208.0/20 
+add china 119.84.0.0/14 
+add china 119.88.0.0/14 
+add china 119.96.0.0/13 
+add china 119.108.0.0/15 
+add china 119.112.0.0/13 
+add china 119.120.0.0/13 
+add china 119.128.0.0/12 
+add china 119.144.0.0/14 
+add china 119.148.160.0/20 
+add china 119.148.176.0/20 
+add china 119.151.192.0/18 
+add china 119.160.200.0/21 
+add china 119.161.120.0/22 
+add china 119.161.124.0/22 
+add china 119.161.128.0/17 
+add china 119.162.0.0/15 
+add china 119.164.0.0/14 
+add china 119.176.0.0/12 
+add china 119.232.0.0/15 
+add china 119.235.128.0/18 
+add china 119.248.0.0/14 
+add china 119.252.96.0/21 
+add china 119.252.240.0/20 
+add china 119.253.0.0/16 
+add china 119.254.0.0/15 
+add china 120.0.0.0/12 
+add china 120.24.0.0/14 
+add china 120.30.0.0/16 
+add china 120.31.0.0/16 
+add china 120.32.0.0/13 
+add china 120.40.0.0/14 
+add china 120.44.0.0/14 
+add china 120.48.0.0/15 
+add china 120.52.0.0/16 
+add china 120.53.0.0/16 
+add china 120.54.0.0/15 
+add china 120.64.0.0/14 
+add china 120.68.0.0/14 
+add china 120.72.32.0/19 
+add china 120.72.128.0/17 
+add china 120.76.0.0/14 
+add china 120.80.0.0/13 
+add china 120.88.8.0/21 
+add china 120.90.0.0/15 
+add china 120.92.0.0/16 
+add china 120.94.0.0/16 
+add china 120.95.0.0/16 
+add china 120.128.0.0/14 
+add china 120.132.0.0/17 
+add china 120.132.128.0/17 
+add china 120.133.0.0/16 
+add china 120.134.0.0/15 
+add china 120.136.16.0/22 
+add china 120.136.20.0/22 
+add china 120.136.128.0/18 
+add china 120.137.0.0/17 
+add china 120.143.128.0/19 
+add china 120.192.0.0/10 
+add china 121.0.8.0/21 
+add china 121.0.16.0/20 
+add china 121.4.0.0/15 
+add china 121.8.0.0/13 
+add china 121.16.0.0/13 
+add china 121.24.0.0/14 
+add china 121.28.0.0/15 
+add china 121.30.0.0/16 
+add china 121.31.0.0/16 
+add china 121.32.0.0/14 
+add china 121.36.0.0/16 
+add china 121.37.0.0/16 
+add china 121.38.0.0/15 
+add china 121.40.0.0/14 
+add china 121.46.0.0/18 
+add china 121.46.76.0/22 
+add china 121.46.128.0/17 
+add china 121.47.0.0/16 
+add china 121.48.0.0/15 
+add china 121.50.8.0/21 
+add china 121.51.0.0/16 
+add china 121.52.160.0/19 
+add china 121.52.208.0/20 
+add china 121.52.224.0/19 
+add china 121.54.176.0/21 
+add china 121.54.188.0/22 
+add china 121.55.0.0/18 
+add china 121.56.0.0/15 
+add china 121.58.0.0/17 
+add china 121.58.136.0/21 
+add china 121.58.144.0/20 
+add china 121.58.160.0/21 
+add china 121.59.0.0/16 
+add china 121.60.0.0/14 
+add china 121.68.0.0/14 
+add china 121.76.0.0/15 
+add china 121.79.128.0/18 
+add china 121.89.0.0/16 
+add china 121.100.128.0/17 
+add china 121.101.0.0/18 
+add china 121.101.208.0/20 
+add china 121.192.0.0/16 
+add china 121.193.0.0/16 
+add china 121.194.0.0/15 
+add china 121.196.0.0/14 
+add china 121.200.192.0/21 
+add china 121.201.0.0/16 
+add china 121.204.0.0/14 
+add china 121.224.0.0/12 
+add china 121.248.0.0/14 
+add china 121.255.0.0/16 
+add china 122.0.64.0/18 
+add china 122.0.128.0/17 
+add china 122.4.0.0/14 
+add china 122.8.0.0/16 
+add china 122.9.0.0/16 
+add china 122.10.128.0/22 
+add china 122.10.132.0/23 
+add china 122.10.134.0/23 
+add china 122.10.136.0/23 
+add china 122.10.138.0/23 
+add china 122.10.140.0/22 
+add china 122.10.144.0/20 
+add china 122.10.160.0/19 
+add china 122.10.192.0/18 
+add china 122.11.0.0/17 
+add china 122.12.0.0/16 
+add china 122.13.0.0/16 
+add china 122.14.0.0/17 
+add china 122.14.128.0/18 
+add china 122.14.192.0/18 
+add china 122.48.0.0/16 
+add china 122.49.0.0/18 
+add china 122.51.0.0/16 
+add china 122.64.0.0/11 
+add china 122.96.0.0/15 
+add china 122.102.0.0/20 
+add china 122.102.64.0/20 
+add china 122.102.80.0/20 
+add china 122.112.0.0/18 
+add china 122.112.64.0/18 
+add china 122.112.128.0/17 
+add china 122.113.0.0/16 
+add china 122.114.0.0/16 
+add china 122.115.0.0/17 
+add china 122.115.128.0/19 
+add china 122.115.160.0/19 
+add china 122.115.192.0/19 
+add china 122.115.224.0/19 
+add china 122.119.0.0/16 
+add china 122.128.100.0/22 
+add china 122.128.120.0/21 
+add china 122.136.0.0/13 
+add china 122.144.128.0/17 
+add china 122.152.192.0/18 
+add china 122.156.0.0/14 
+add china 122.188.0.0/14 
+add china 122.192.0.0/14 
+add china 122.198.0.0/16 
+add china 122.200.40.0/22 
+add china 122.200.44.0/22 
+add china 122.200.64.0/18 
+add china 122.201.48.0/20 
+add china 122.204.0.0/14 
+add china 122.224.0.0/12 
+add china 122.240.0.0/13 
+add china 122.248.24.0/21 
+add china 122.248.48.0/20 
+add china 122.255.64.0/21 
+add china 123.0.128.0/18 
+add china 123.4.0.0/14 
+add china 123.8.0.0/13 
+add china 123.49.128.0/17 
+add china 123.50.160.0/19 
+add china 123.52.0.0/14 
+add china 123.56.0.0/15 
+add china 123.58.0.0/20 
+add china 123.58.16.0/20 
+add china 123.58.32.0/19 
+add china 123.58.64.0/19 
+add china 123.58.96.0/19 
+add china 123.58.128.0/18 
+add china 123.58.192.0/19 
+add china 123.58.224.0/20 
+add china 123.58.240.0/20 
+add china 123.59.0.0/16 
+add china 123.60.0.0/16 
+add china 123.61.0.0/16 
+add china 123.62.0.0/16 
+add china 123.64.0.0/11 
+add china 123.96.0.0/15 
+add china 123.98.0.0/17 
+add china 123.99.128.0/17 
+add china 123.100.0.0/19 
+add china 123.101.0.0/16 
+add china 123.103.0.0/17 
+add china 123.108.128.0/20 
+add china 123.108.208.0/20 
+add china 123.112.0.0/12 
+add china 123.128.0.0/13 
+add china 123.136.80.0/20 
+add china 123.137.0.0/16 
+add china 123.138.0.0/15 
+add china 123.144.0.0/14 
+add china 123.148.0.0/16 
+add china 123.149.0.0/16 
+add china 123.150.0.0/15 
+add china 123.152.0.0/13 
+add china 123.160.0.0/14 
+add china 123.164.0.0/14 
+add china 123.168.0.0/14 
+add china 123.172.0.0/15 
+add china 123.174.0.0/15 
+add china 123.176.60.0/22 
+add china 123.176.80.0/20 
+add china 123.177.0.0/16 
+add china 123.178.0.0/15 
+add china 123.180.0.0/14 
+add china 123.184.0.0/14 
+add china 123.188.0.0/14 
+add china 123.196.0.0/15 
+add china 123.199.128.0/17 
+add china 123.206.0.0/15 
+add china 123.232.0.0/14 
+add china 123.242.0.0/17 
+add china 123.242.192.0/22 
+add china 123.242.196.0/22 
+add china 123.244.0.0/14 
+add china 123.249.0.0/16 
+add china 123.254.96.0/22 
+add china 123.254.100.0/22 
+add china 124.6.64.0/18 
+add china 124.14.0.0/15 
+add china 124.16.0.0/15 
+add china 124.20.0.0/16 
+add china 124.21.0.0/20 
+add china 124.21.16.0/20 
+add china 124.21.32.0/19 
+add china 124.21.64.0/18 
+add china 124.21.128.0/17 
+add china 124.22.0.0/15 
+add china 124.28.192.0/18 
+add china 124.29.0.0/17 
+add china 124.31.0.0/16 
+add china 124.40.112.0/20 
+add china 124.40.128.0/18 
+add china 124.40.192.0/19 
+add china 124.40.240.0/22 
+add china 124.42.0.0/17 
+add china 124.42.128.0/17 
+add china 124.47.0.0/18 
+add china 124.64.0.0/15 
+add china 124.66.0.0/17 
+add china 124.67.0.0/16 
+add china 124.68.0.0/14 
+add china 124.72.0.0/16 
+add china 124.73.0.0/16 
+add china 124.74.0.0/15 
+add china 124.76.0.0/14 
+add china 124.88.0.0/16 
+add china 124.89.0.0/17 
+add china 124.89.128.0/17 
+add china 124.90.0.0/15 
+add china 124.92.0.0/14 
+add china 124.108.8.0/21 
+add china 124.108.40.0/21 
+add china 124.109.96.0/21 
+add china 124.112.0.0/15 
+add china 124.114.0.0/15 
+add china 124.116.0.0/16 
+add china 124.117.0.0/16 
+add china 124.118.0.0/15 
+add china 124.126.0.0/15 
+add china 124.128.0.0/13 
+add china 124.147.128.0/17 
+add china 124.150.137.0/24 
+add china 124.151.0.0/16 
+add china 124.152.0.0/16 
+add china 124.160.0.0/16 
+add china 124.161.0.0/16 
+add china 124.162.0.0/16 
+add china 124.163.0.0/16 
+add china 124.164.0.0/14 
+add china 124.172.0.0/15 
+add china 124.174.0.0/15 
+add china 124.192.0.0/15 
+add china 124.196.0.0/16 
+add china 124.200.0.0/13 
+add china 124.220.0.0/14 
+add china 124.224.0.0/16 
+add china 124.225.0.0/16 
+add china 124.226.0.0/15 
+add china 124.228.0.0/14 
+add china 124.232.0.0/15 
+add china 124.234.0.0/15 
+add china 124.236.0.0/14 
+add china 124.240.0.0/17 
+add china 124.240.128.0/18 
+add china 124.242.0.0/16 
+add china 124.243.192.0/18 
+add china 124.248.0.0/17 
+add china 124.249.0.0/16 
+add china 124.250.0.0/15 
+add china 124.254.0.0/18 
+add china 125.31.192.0/18 
+add china 125.32.0.0/16 
+add china 125.33.0.0/16 
+add china 125.34.0.0/16 
+add china 125.35.0.0/17 
+add china 125.35.128.0/17 
+add china 125.36.0.0/14 
+add china 125.40.0.0/13 
+add china 125.58.128.0/17 
+add china 125.61.128.0/17 
+add china 125.62.0.0/18 
+add china 125.64.0.0/13 
+add china 125.72.0.0/16 
+add china 125.73.0.0/16 
+add china 125.74.0.0/15 
+add china 125.76.0.0/17 
+add china 125.76.128.0/17 
+add china 125.77.0.0/16 
+add china 125.78.0.0/15 
+add china 125.80.0.0/13 
+add china 125.88.0.0/13 
+add china 125.96.0.0/15 
+add china 125.98.0.0/16 
+add china 125.104.0.0/13 
+add china 125.112.0.0/12 
+add china 125.169.0.0/16 
+add china 125.171.0.0/16 
+add china 125.208.0.0/18 
+add china 125.210.0.0/16 
+add china 125.211.0.0/16 
+add china 125.213.0.0/17 
+add china 125.214.96.0/19 
+add china 125.215.0.0/18 
+add china 125.216.0.0/15 
+add china 125.218.0.0/16 
+add china 125.219.0.0/16 
+add china 125.220.0.0/15 
+add china 125.222.0.0/15 
+add china 125.254.128.0/18 
+add china 125.254.192.0/18 
+add china 128.108.0.0/16 
+add china 129.28.0.0/16 
+add china 129.204.0.0/16 
+add china 129.211.0.0/16 
+add china 132.232.0.0/16 
+add china 134.175.0.0/16 
+add china 137.59.59.0/24 
+add china 137.59.88.0/22 
+add china 139.5.56.0/22 
+add china 139.5.60.0/22 
+add china 139.5.80.0/22 
+add china 139.5.92.0/22 
+add china 139.5.108.0/22 
+add china 139.5.128.0/22 
+add china 139.5.160.0/22 
+add china 139.5.192.0/22 
+add china 139.5.204.0/22 
+add china 139.5.208.0/22 
+add china 139.5.212.0/22 
+add china 139.5.244.0/22 
+add china 139.9.0.0/16 
+add china 139.129.0.0/16 
+add china 139.148.0.0/16 
+add china 139.155.0.0/16 
+add china 139.159.0.0/16 
+add china 139.170.0.0/16 
+add china 139.176.0.0/16 
+add china 139.183.0.0/16 
+add china 139.186.0.0/16 
+add china 139.189.0.0/16 
+add china 139.196.0.0/14 
+add china 139.200.0.0/13 
+add china 139.208.0.0/13 
+add china 139.217.0.0/16 
+add china 139.219.0.0/16 
+add china 139.220.0.0/15 
+add china 139.224.0.0/16 
+add china 139.226.0.0/15 
+add china 140.75.0.0/16 
+add china 140.143.0.0/16 
+add china 140.179.0.0/16 
+add china 140.205.0.0/16 
+add china 140.206.0.0/15 
+add china 140.210.0.0/16 
+add china 140.224.0.0/16 
+add china 140.237.0.0/16 
+add china 140.240.0.0/16 
+add china 140.243.0.0/16 
+add china 140.246.0.0/16 
+add china 140.249.0.0/16 
+add china 140.250.0.0/16 
+add china 140.255.0.0/16 
+add china 144.0.0.0/16 
+add china 144.7.0.0/16 
+add china 144.12.0.0/16 
+add china 144.48.8.0/22 
+add china 144.48.64.0/22 
+add china 144.48.88.0/22 
+add china 144.48.156.0/22 
+add china 144.48.180.0/22 
+add china 144.48.184.0/22 
+add china 144.48.204.0/22 
+add china 144.48.208.0/22 
+add china 144.48.212.0/22 
+add china 144.48.220.0/22 
+add china 144.48.252.0/22 
+add china 144.52.0.0/16 
+add china 144.123.0.0/16 
+add china 144.255.0.0/16 
+add china 146.56.192.0/18 
+add china 146.196.56.0/22 
+add china 146.196.68.0/22 
+add china 146.196.72.0/22 
+add china 146.196.92.0/22 
+add china 146.196.112.0/22 
+add china 146.196.116.0/22 
+add china 146.196.124.0/22 
+add china 148.70.0.0/16 
+add china 150.0.0.0/16 
+add china 150.115.0.0/16 
+add china 150.121.0.0/16 
+add china 150.122.0.0/16 
+add china 150.129.136.0/22 
+add china 150.129.192.0/22 
+add china 150.129.216.0/22 
+add china 150.129.252.0/22 
+add china 150.138.0.0/15 
+add china 150.158.0.0/16 
+add china 150.223.0.0/16 
+add china 150.242.0.0/22 
+add china 150.242.4.0/22 
+add china 150.242.8.0/22 
+add china 150.242.28.0/22 
+add china 150.242.44.0/22 
+add china 150.242.48.0/22 
+add china 150.242.52.0/22 
+add china 150.242.56.0/22 
+add china 150.242.76.0/22 
+add china 150.242.80.0/22 
+add china 150.242.92.0/22 
+add china 150.242.96.0/22 
+add china 150.242.112.0/22 
+add china 150.242.116.0/22 
+add china 150.242.120.0/22 
+add china 150.242.152.0/22 
+add china 150.242.156.0/22 
+add china 150.242.160.0/22 
+add china 150.242.164.0/22 
+add china 150.242.168.0/22 
+add china 150.242.184.0/22 
+add china 150.242.188.0/22 
+add china 150.242.192.0/22 
+add china 150.242.212.0/22 
+add china 150.242.224.0/22 
+add china 150.242.228.0/22 
+add china 150.242.232.0/22 
+add china 150.242.236.0/22 
+add china 150.242.240.0/22 
+add china 150.242.244.0/22 
+add china 150.242.248.0/22 
+add china 150.255.0.0/16 
+add china 152.104.128.0/17 
+add china 152.136.0.0/16 
+add china 153.0.0.0/16 
+add china 153.3.0.0/16 
+add china 153.34.0.0/15 
+add china 153.36.0.0/15 
+add china 153.99.0.0/16 
+add china 153.101.0.0/16 
+add china 153.118.0.0/15 
+add china 154.8.128.0/17 
+add china 157.0.0.0/16 
+add china 157.18.0.0/16 
+add china 157.61.0.0/16 
+add china 157.119.0.0/22 
+add china 157.119.8.0/22 
+add china 157.119.12.0/22 
+add china 157.119.16.0/22 
+add china 157.119.28.0/22 
+add china 157.119.68.0/22 
+add china 157.119.112.0/22 
+add china 157.119.132.0/22 
+add china 157.119.136.0/22 
+add china 157.119.140.0/22 
+add china 157.119.144.0/22 
+add china 157.119.148.0/22 
+add china 157.119.152.0/22 
+add china 157.119.156.0/22 
+add china 157.119.160.0/22 
+add china 157.119.164.0/22 
+add china 157.119.172.0/22 
+add china 157.119.192.0/22 
+add china 157.119.196.0/22 
+add china 157.119.240.0/22 
+add china 157.119.252.0/22 
+add china 157.122.0.0/16 
+add china 157.148.0.0/16 
+add china 157.156.0.0/16 
+add china 157.255.0.0/16 
+add china 159.75.0.0/16 
+add china 159.226.0.0/16 
+add china 160.19.208.0/22 
+add china 160.19.212.0/22 
+add china 160.19.216.0/22 
+add china 160.20.48.0/22 
+add china 160.202.60.0/22 
+add china 160.202.148.0/22 
+add china 160.202.152.0/22 
+add china 160.202.168.0/22 
+add china 160.202.212.0/22 
+add china 160.202.216.0/22 
+add china 160.202.220.0/22 
+add china 160.202.224.0/22 
+add china 160.202.228.0/22 
+add china 160.202.232.0/22 
+add china 160.202.236.0/22 
+add china 160.202.240.0/22 
+add china 160.202.244.0/22 
+add china 160.202.248.0/22 
+add china 160.202.252.0/22 
+add china 160.238.64.0/22 
+add china 161.189.0.0/16 
+add china 161.207.0.0/16 
+add china 162.14.0.0/16 
+add china 162.105.0.0/16 
+add china 163.0.0.0/16 
+add china 163.47.4.0/22 
+add china 163.53.0.0/22 
+add china 163.53.4.0/22 
+add china 163.53.8.0/22 
+add china 163.53.12.0/22 
+add china 163.53.36.0/22 
+add china 163.53.40.0/22 
+add china 163.53.44.0/22 
+add china 163.53.48.0/22 
+add china 163.53.52.0/22 
+add china 163.53.56.0/22 
+add china 163.53.60.0/22 
+add china 163.53.64.0/22 
+add china 163.53.88.0/22 
+add china 163.53.92.0/22 
+add china 163.53.96.0/22 
+add china 163.53.100.0/22 
+add china 163.53.104.0/22 
+add china 163.53.108.0/22 
+add china 163.53.112.0/22 
+add china 163.53.116.0/22 
+add china 163.53.120.0/22 
+add china 163.53.124.0/22 
+add china 163.53.128.0/22 
+add china 163.53.132.0/22 
+add china 163.53.136.0/22 
+add china 163.53.160.0/22 
+add china 163.53.164.0/22 
+add china 163.53.168.0/22 
+add china 163.53.172.0/22 
+add china 163.53.188.0/22 
+add china 163.53.220.0/22 
+add china 163.53.240.0/22 
+add china 163.125.0.0/16 
+add china 163.142.0.0/16 
+add china 163.177.0.0/16 
+add china 163.179.0.0/16 
+add china 163.204.0.0/16 
+add china 164.52.0.0/17 
+add china 166.111.0.0/16 
+add china 167.139.0.0/16 
+add china 167.189.0.0/16 
+add china 167.220.244.0/22 
+add china 168.160.0.0/16 
+add china 170.179.0.0/16 
+add china 171.8.0.0/13 
+add china 171.34.0.0/15 
+add china 171.36.0.0/14 
+add china 171.40.0.0/13 
+add china 171.80.0.0/14 
+add china 171.84.0.0/14 
+add china 171.88.0.0/13 
+add china 171.104.0.0/13 
+add china 171.112.0.0/14 
+add china 171.116.0.0/14 
+add china 171.120.0.0/13 
+add china 171.208.0.0/12 
+add china 172.81.192.0/18 
+add china 175.0.0.0/12 
+add china 175.16.0.0/13 
+add china 175.24.0.0/14 
+add china 175.30.0.0/15 
+add china 175.42.0.0/15 
+add china 175.44.0.0/16 
+add china 175.46.0.0/15 
+add china 175.48.0.0/12 
+add china 175.64.0.0/11 
+add china 175.102.0.0/16 
+add china 175.106.128.0/17 
+add china 175.111.144.0/22 
+add china 175.111.148.0/22 
+add china 175.111.152.0/22 
+add china 175.111.156.0/22 
+add china 175.111.160.0/22 
+add china 175.111.164.0/22 
+add china 175.111.168.0/22 
+add china 175.111.172.0/22 
+add china 175.111.184.0/22 
+add china 175.146.0.0/15 
+add china 175.148.0.0/14 
+add china 175.152.0.0/14 
+add china 175.158.96.0/22 
+add china 175.160.0.0/12 
+add china 175.176.156.0/22 
+add china 175.176.176.0/22 
+add china 175.176.188.0/22 
+add china 175.176.192.0/22 
+add china 175.178.0.0/16 
+add china 175.184.128.0/18 
+add china 175.185.0.0/16 
+add china 175.186.0.0/15 
+add china 175.188.0.0/14 
+add china 180.76.0.0/16 
+add china 180.77.0.0/16 
+add china 180.78.0.0/15 
+add china 180.84.0.0/15 
+add china 180.86.0.0/16 
+add china 180.88.0.0/14 
+add china 180.94.56.0/21 
+add china 180.94.96.0/20 
+add china 180.94.120.0/22 
+add china 180.94.124.0/22 
+add china 180.95.128.0/17 
+add china 180.96.0.0/11 
+add china 180.129.128.0/17 
+add china 180.130.0.0/16 
+add china 180.136.0.0/13 
+add china 180.148.16.0/21 
+add china 180.148.152.0/21 
+add china 180.148.216.0/21 
+add china 180.148.224.0/19 
+add china 180.149.128.0/19 
+add china 180.149.236.0/22 
+add china 180.150.160.0/19 
+add china 180.152.0.0/13 
+add china 180.160.0.0/12 
+add china 180.178.112.0/22 
+add china 180.178.116.0/22 
+add china 180.178.192.0/18 
+add china 180.184.0.0/14 
+add china 180.188.0.0/17 
+add china 180.189.148.0/22 
+add china 180.200.252.0/22 
+add china 180.201.0.0/16 
+add china 180.202.0.0/15 
+add china 180.208.0.0/15 
+add china 180.210.212.0/22 
+add china 180.210.224.0/19 
+add china 180.212.0.0/15 
+add china 180.222.224.0/19 
+add china 180.223.0.0/16 
+add china 180.233.0.0/18 
+add china 180.233.64.0/19 
+add china 180.233.144.0/22 
+add china 180.235.64.0/19 
+add china 180.235.112.0/22 
+add china 180.235.136.0/22 
+add china 182.16.144.0/22 
+add china 182.16.148.0/22 
+add china 182.16.192.0/19 
+add china 182.18.0.0/17 
+add china 182.23.184.0/21 
+add china 182.23.200.0/21 
+add china 182.32.0.0/12 
+add china 182.48.96.0/19 
+add china 182.49.0.0/16 
+add china 182.50.0.0/20 
+add china 182.50.112.0/20 
+add china 182.51.0.0/16 
+add china 182.54.0.0/17 
+add china 182.54.244.0/22 
+add china 182.61.0.0/16 
+add china 182.80.0.0/14 
+add china 182.84.0.0/14 
+add china 182.88.0.0/14 
+add china 182.92.0.0/16 
+add china 182.96.0.0/12 
+add china 182.112.0.0/12 
+add china 182.128.0.0/12 
+add china 182.144.0.0/13 
+add china 182.157.0.0/16 
+add china 182.160.64.0/19 
+add china 182.174.0.0/15 
+add china 182.200.0.0/13 
+add china 182.236.128.0/17 
+add china 182.237.24.0/22 
+add china 182.237.28.0/22 
+add china 182.238.0.0/16 
+add china 182.239.0.0/19 
+add china 182.240.0.0/13 
+add china 182.254.0.0/16 
+add china 182.255.36.0/22 
+add china 182.255.60.0/22 
+add china 183.0.0.0/10 
+add china 183.64.0.0/13 
+add china 183.78.160.0/22 
+add china 183.78.164.0/22 
+add china 183.78.180.0/22 
+add china 183.81.172.0/22 
+add china 183.81.180.0/22 
+add china 183.84.0.0/15 
+add china 183.91.128.0/22 
+add china 183.91.136.0/21 
+add china 183.91.144.0/20 
+add china 183.92.0.0/14 
+add china 183.128.0.0/11 
+add china 183.160.0.0/13 
+add china 183.168.0.0/15 
+add china 183.170.0.0/16 
+add china 183.172.0.0/14 
+add china 183.182.0.0/19 
+add china 183.184.0.0/13 
+add china 183.192.0.0/10 
+add china 188.131.128.0/17 
+add china 192.55.46.0/24 
+add china 192.55.68.0/22 
+add china 192.102.204.0/23 
+add china 192.124.154.0/24 
+add china 192.140.128.0/22 
+add china 192.140.132.0/22 
+add china 192.140.136.0/22 
+add china 192.140.156.0/22 
+add china 192.140.160.0/22 
+add china 192.140.164.0/22 
+add china 192.140.168.0/22 
+add china 192.140.172.0/22 
+add china 192.140.176.0/22 
+add china 192.140.180.0/22 
+add china 192.140.184.0/22 
+add china 192.140.188.0/22 
+add china 192.140.192.0/22 
+add china 192.140.196.0/22 
+add china 192.140.200.0/22 
+add china 192.140.204.0/22 
+add china 192.140.208.0/22 
+add china 192.140.212.0/22 
+add china 192.144.128.0/17 
+add china 193.112.0.0/16 
+add china 198.175.100.0/22 
+add china 202.0.100.0/23 
+add china 202.0.122.0/23 
+add china 202.0.176.0/22 
+add china 202.3.128.0/23 
+add china 202.4.128.0/19 
+add china 202.4.252.0/22 
+add china 202.5.208.0/22 
+add china 202.5.212.0/22 
+add china 202.5.216.0/22 
+add china 202.6.6.0/23 
+add china 202.6.66.0/23 
+add china 202.6.72.0/23 
+add china 202.6.87.0/24 
+add china 202.6.88.0/23 
+add china 202.6.92.0/23 
+add china 202.6.103.0/24 
+add china 202.6.108.0/24 
+add china 202.6.110.0/23 
+add china 202.6.114.0/24 
+add china 202.6.176.0/20 
+add china 202.8.0.0/24 
+add china 202.8.2.0/23 
+add china 202.8.4.0/23 
+add china 202.8.12.0/24 
+add china 202.8.24.0/24 
+add china 202.8.77.0/24 
+add china 202.8.128.0/19 
+add china 202.8.192.0/20 
+add china 202.9.32.0/24 
+add china 202.9.34.0/23 
+add china 202.9.48.0/23 
+add china 202.9.51.0/24 
+add china 202.9.52.0/23 
+add china 202.9.54.0/24 
+add china 202.9.57.0/24 
+add china 202.9.58.0/23 
+add china 202.10.64.0/20 
+add china 202.10.112.0/22 
+add china 202.10.116.0/22 
+add china 202.10.120.0/22 
+add china 202.10.124.0/22 
+add china 202.12.1.0/24 
+add china 202.12.2.0/24 
+add china 202.12.17.0/24 
+add china 202.12.18.0/24 
+add china 202.12.19.0/24 
+add china 202.12.72.0/24 
+add china 202.12.84.0/23 
+add china 202.12.96.0/24 
+add china 202.12.98.0/23 
+add china 202.12.106.0/24 
+add china 202.12.111.0/24 
+add china 202.12.116.0/24 
+add china 202.14.64.0/23 
+add china 202.14.69.0/24 
+add china 202.14.73.0/24 
+add china 202.14.74.0/23 
+add china 202.14.76.0/24 
+add china 202.14.78.0/23 
+add china 202.14.88.0/24 
+add china 202.14.97.0/24 
+add china 202.14.104.0/23 
+add china 202.14.108.0/23 
+add china 202.14.111.0/24 
+add china 202.14.114.0/23 
+add china 202.14.118.0/23 
+add china 202.14.124.0/23 
+add china 202.14.127.0/24 
+add china 202.14.129.0/24 
+add china 202.14.135.0/24 
+add china 202.14.136.0/24 
+add china 202.14.149.0/24 
+add china 202.14.151.0/24 
+add china 202.14.157.0/24 
+add china 202.14.158.0/23 
+add china 202.14.169.0/24 
+add china 202.14.170.0/23 
+add china 202.14.172.0/22 
+add china 202.14.176.0/24 
+add china 202.14.184.0/23 
+add china 202.14.208.0/23 
+add china 202.14.213.0/24 
+add china 202.14.219.0/24 
+add china 202.14.220.0/24 
+add china 202.14.222.0/23 
+add china 202.14.225.0/24 
+add china 202.14.226.0/23 
+add china 202.14.231.0/24 
+add china 202.14.235.0/24 
+add china 202.14.236.0/23 
+add china 202.14.238.0/24 
+add china 202.14.239.0/24 
+add china 202.14.246.0/24 
+add china 202.14.251.0/24 
+add china 202.20.66.0/24 
+add china 202.20.79.0/24 
+add china 202.20.87.0/24 
+add china 202.20.88.0/23 
+add china 202.20.90.0/24 
+add china 202.20.94.0/23 
+add china 202.20.114.0/24 
+add china 202.20.117.0/24 
+add china 202.20.120.0/24 
+add china 202.20.125.0/24 
+add china 202.20.126.0/24 
+add china 202.20.127.0/24 
+add china 202.21.48.0/22 
+add china 202.21.52.0/22 
+add china 202.21.56.0/22 
+add china 202.21.60.0/22 
+add china 202.21.131.0/24 
+add china 202.21.132.0/24 
+add china 202.21.141.0/24 
+add china 202.21.142.0/24 
+add china 202.21.147.0/24 
+add china 202.21.148.0/24 
+add china 202.21.150.0/23 
+add china 202.21.152.0/23 
+add china 202.21.154.0/24 
+add china 202.21.156.0/24 
+add china 202.22.248.0/22 
+add china 202.22.252.0/22 
+add china 202.27.12.0/24 
+add china 202.27.14.0/24 
+add china 202.27.136.0/23 
+add china 202.36.226.0/24 
+add china 202.38.0.0/23 
+add china 202.38.2.0/23 
+add china 202.38.8.0/21 
+add china 202.38.48.0/20 
+add china 202.38.64.0/19 
+add china 202.38.96.0/19 
+add china 202.38.128.0/23 
+add china 202.38.130.0/23 
+add china 202.38.132.0/23 
+add china 202.38.134.0/24 
+add china 202.38.135.0/24 
+add china 202.38.136.0/23 
+add china 202.38.138.0/24 
+add china 202.38.140.0/23 
+add china 202.38.142.0/23 
+add china 202.38.146.0/23 
+add china 202.38.149.0/24 
+add china 202.38.150.0/23 
+add china 202.38.152.0/23 
+add china 202.38.154.0/23 
+add china 202.38.156.0/24 
+add china 202.38.158.0/23 
+add china 202.38.160.0/23 
+add china 202.38.164.0/22 
+add china 202.38.168.0/23 
+add china 202.38.170.0/24 
+add china 202.38.171.0/24 
+add china 202.38.176.0/23 
+add china 202.38.184.0/21 
+add china 202.38.192.0/18 
+add china 202.40.4.0/23 
+add china 202.40.7.0/24 
+add china 202.40.15.0/24 
+add china 202.40.135.0/24 
+add china 202.40.136.0/24 
+add china 202.40.140.0/24 
+add china 202.40.143.0/24 
+add china 202.40.144.0/23 
+add china 202.40.150.0/24 
+add china 202.40.155.0/24 
+add china 202.40.156.0/24 
+add china 202.40.158.0/23 
+add china 202.40.162.0/24 
+add china 202.41.8.0/23 
+add china 202.41.11.0/24 
+add china 202.41.12.0/23 
+add china 202.41.128.0/24 
+add china 202.41.130.0/23 
+add china 202.41.152.0/21 
+add china 202.41.192.0/24 
+add china 202.41.196.0/22 
+add china 202.41.200.0/22 
+add china 202.41.240.0/20 
+add china 202.43.76.0/22 
+add china 202.43.144.0/20 
+add china 202.44.16.0/20 
+add china 202.44.48.0/22 
+add china 202.44.67.0/24 
+add china 202.44.74.0/24 
+add china 202.44.97.0/24 
+add china 202.44.129.0/24 
+add china 202.44.132.0/23 
+add china 202.44.146.0/23 
+add china 202.45.0.0/23 
+add china 202.45.2.0/24 
+add china 202.45.15.0/24 
+add china 202.45.16.0/20 
+add china 202.46.16.0/23 
+add china 202.46.18.0/24 
+add china 202.46.20.0/23 
+add china 202.46.32.0/19 
+add china 202.46.128.0/24 
+add china 202.46.224.0/20 
+add china 202.47.82.0/23 
+add china 202.47.96.0/22 
+add china 202.47.100.0/22 
+add china 202.47.104.0/22 
+add china 202.47.108.0/22 
+add china 202.47.126.0/24 
+add china 202.47.128.0/24 
+add china 202.47.130.0/23 
+add china 202.52.33.0/24 
+add china 202.52.34.0/24 
+add china 202.52.47.0/24 
+add china 202.52.143.0/24 
+add china 202.53.140.0/24 
+add china 202.53.143.0/24 
+add china 202.57.192.0/22 
+add china 202.57.196.0/22 
+add china 202.57.200.0/22 
+add china 202.57.204.0/22 
+add china 202.57.212.0/22 
+add china 202.57.216.0/22 
+add china 202.57.240.0/20 
+add china 202.58.0.0/24 
+add china 202.58.104.0/22 
+add china 202.58.112.0/22 
+add china 202.59.0.0/24 
+add china 202.59.1.0/24 
+add china 202.59.212.0/22 
+add china 202.59.236.0/24 
+add china 202.59.240.0/24 
+add china 202.60.48.0/21 
+add china 202.60.96.0/21 
+add china 202.60.112.0/20 
+add china 202.60.132.0/22 
+add china 202.60.136.0/21 
+add china 202.60.144.0/20 
+add china 202.61.68.0/22 
+add china 202.61.76.0/22 
+add china 202.61.88.0/22 
+add china 202.61.123.0/24 
+add china 202.61.127.0/24 
+add china 202.62.112.0/22 
+add china 202.62.248.0/22 
+add china 202.62.252.0/24 
+add china 202.62.255.0/24 
+add china 202.63.80.0/24 
+add china 202.63.81.0/24 
+add china 202.63.82.0/23 
+add china 202.63.84.0/22 
+add china 202.63.88.0/21 
+add china 202.63.160.0/19 
+add china 202.63.248.0/22 
+add china 202.63.253.0/24 
+add china 202.65.0.0/21 
+add china 202.65.8.0/23 
+add china 202.65.96.0/22 
+add china 202.65.100.0/22 
+add china 202.65.104.0/22 
+add china 202.65.108.0/22 
+add china 202.66.168.0/22 
+add china 202.67.0.0/22 
+add china 202.69.4.0/22 
+add china 202.69.16.0/20 
+add china 202.70.0.0/19 
+add china 202.70.96.0/20 
+add china 202.70.192.0/20 
+add china 202.71.32.0/22 
+add china 202.71.36.0/22 
+add china 202.71.40.0/22 
+add china 202.71.44.0/22 
+add china 202.72.40.0/21 
+add china 202.72.80.0/20 
+add china 202.72.112.0/22 
+add china 202.72.116.0/22 
+add china 202.72.120.0/22 
+add china 202.72.124.0/22 
+add china 202.73.128.0/22 
+add china 202.73.240.0/22 
+add china 202.73.244.0/22 
+add china 202.73.248.0/22 
+add china 202.73.252.0/22 
+add china 202.74.8.0/21 
+add china 202.74.36.0/24 
+add china 202.74.42.0/24 
+add china 202.74.52.0/24 
+add china 202.74.80.0/20 
+add china 202.74.232.0/22 
+add china 202.74.254.0/23 
+add china 202.75.208.0/20 
+add china 202.75.252.0/22 
+add china 202.76.252.0/22 
+add china 202.77.80.0/21 
+add china 202.77.92.0/22 
+add china 202.78.8.0/21 
+add china 202.79.224.0/21 
+add china 202.79.248.0/22 
+add china 202.80.192.0/21 
+add china 202.80.200.0/21 
+add china 202.81.0.0/22 
+add china 202.81.176.0/22 
+add china 202.81.180.0/22 
+add china 202.81.184.0/22 
+add china 202.81.188.0/22 
+add china 202.83.252.0/22 
+add china 202.84.0.0/22 
+add china 202.84.4.0/22 
+add china 202.84.8.0/21 
+add china 202.84.16.0/23 
+add china 202.84.22.0/24 
+add china 202.84.24.0/21 
+add china 202.85.208.0/20 
+add china 202.86.249.0/24 
+add china 202.86.252.0/22 
+add china 202.87.80.0/20 
+add china 202.88.32.0/22 
+add china 202.89.8.0/21 
+add china 202.89.96.0/22 
+add china 202.89.108.0/22 
+add china 202.89.119.0/24 
+add china 202.89.232.0/21 
+add china 202.90.0.0/22 
+add china 202.90.16.0/22 
+add china 202.90.20.0/22 
+add china 202.90.24.0/22 
+add china 202.90.28.0/22 
+add china 202.90.37.0/24 
+add china 202.90.96.0/22 
+add china 202.90.100.0/22 
+add china 202.90.104.0/22 
+add china 202.90.108.0/22 
+add china 202.90.112.0/20 
+add china 202.90.193.0/24 
+add china 202.90.196.0/24 
+add china 202.90.205.0/24 
+add china 202.90.224.0/20 
+add china 202.91.0.0/22 
+add china 202.91.36.0/22 
+add china 202.91.96.0/20 
+add china 202.91.128.0/22 
+add china 202.91.176.0/20 
+add china 202.91.224.0/19 
+add china 202.92.0.0/22 
+add china 202.92.8.0/21 
+add china 202.92.48.0/20 
+add china 202.92.252.0/22 
+add china 202.93.0.0/22 
+add china 202.93.252.0/22 
+add china 202.94.74.0/24 
+add china 202.94.81.0/24 
+add china 202.94.92.0/22 
+add china 202.95.240.0/21 
+add china 202.95.252.0/22 
+add china 202.96.0.0/18 
+add china 202.96.64.0/21 
+add china 202.96.72.0/21 
+add china 202.96.80.0/20 
+add china 202.96.96.0/21 
+add china 202.96.104.0/21 
+add china 202.96.112.0/20 
+add china 202.96.128.0/21 
+add china 202.96.136.0/21 
+add china 202.96.144.0/20 
+add china 202.96.160.0/21 
+add china 202.96.168.0/21 
+add china 202.96.176.0/20 
+add china 202.96.192.0/21 
+add china 202.96.200.0/21 
+add china 202.96.208.0/20 
+add china 202.96.224.0/21 
+add china 202.96.232.0/21 
+add china 202.96.240.0/20 
+add china 202.97.0.0/21 
+add china 202.97.8.0/21 
+add china 202.97.16.0/20 
+add china 202.97.32.0/19 
+add china 202.97.64.0/19 
+add china 202.97.96.0/20 
+add china 202.97.112.0/20 
+add china 202.97.128.0/18 
+add china 202.97.192.0/19 
+add china 202.97.224.0/21 
+add china 202.97.232.0/21 
+add china 202.97.240.0/20 
+add china 202.98.0.0/21 
+add china 202.98.8.0/21 
+add china 202.98.16.0/20 
+add china 202.98.32.0/21 
+add china 202.98.40.0/21 
+add china 202.98.48.0/20 
+add china 202.98.64.0/19 
+add china 202.98.96.0/21 
+add china 202.98.104.0/21 
+add china 202.98.112.0/20 
+add china 202.98.128.0/19 
+add china 202.98.160.0/21 
+add china 202.98.168.0/21 
+add china 202.98.176.0/20 
+add china 202.98.192.0/21 
+add china 202.98.200.0/21 
+add china 202.98.208.0/20 
+add china 202.98.224.0/21 
+add china 202.98.232.0/21 
+add china 202.98.240.0/20 
+add china 202.99.0.0/18 
+add china 202.99.64.0/19 
+add china 202.99.96.0/21 
+add china 202.99.104.0/21 
+add china 202.99.112.0/20 
+add china 202.99.128.0/19 
+add china 202.99.160.0/21 
+add china 202.99.168.0/21 
+add china 202.99.176.0/20 
+add china 202.99.192.0/21 
+add china 202.99.200.0/21 
+add china 202.99.208.0/20 
+add china 202.99.224.0/21 
+add china 202.99.232.0/21 
+add china 202.99.240.0/20 
+add china 202.100.0.0/21 
+add china 202.100.8.0/21 
+add china 202.100.16.0/20 
+add china 202.100.32.0/19 
+add china 202.100.64.0/21 
+add china 202.100.72.0/21 
+add china 202.100.80.0/20 
+add china 202.100.96.0/21 
+add china 202.100.104.0/21 
+add china 202.100.112.0/20 
+add china 202.100.128.0/21 
+add china 202.100.136.0/21 
+add china 202.100.144.0/20 
+add china 202.100.160.0/21 
+add china 202.100.168.0/21 
+add china 202.100.176.0/20 
+add china 202.100.192.0/21 
+add china 202.100.200.0/21 
+add china 202.100.208.0/20 
+add china 202.100.224.0/19 
+add china 202.101.0.0/18 
+add china 202.101.64.0/19 
+add china 202.101.96.0/19 
+add china 202.101.128.0/18 
+add china 202.101.192.0/19 
+add china 202.101.224.0/21 
+add china 202.101.232.0/21 
+add china 202.101.240.0/20 
+add china 202.102.0.0/19 
+add china 202.102.32.0/19 
+add china 202.102.64.0/18 
+add china 202.102.128.0/21 
+add china 202.102.136.0/21 
+add china 202.102.144.0/20 
+add china 202.102.160.0/19 
+add china 202.102.192.0/21 
+add china 202.102.200.0/21 
+add china 202.102.208.0/20 
+add china 202.102.224.0/21 
+add china 202.102.232.0/21 
+add china 202.102.240.0/20 
+add china 202.103.0.0/21 
+add china 202.103.8.0/21 
+add china 202.103.16.0/20 
+add china 202.103.32.0/19 
+add china 202.103.64.0/19 
+add china 202.103.96.0/21 
+add china 202.103.104.0/21 
+add china 202.103.112.0/20 
+add china 202.103.128.0/18 
+add china 202.103.192.0/19 
+add china 202.103.224.0/21 
+add china 202.103.232.0/21 
+add china 202.103.240.0/20 
+add china 202.104.0.0/15 
+add china 202.106.0.0/16 
+add china 202.107.0.0/17 
+add china 202.107.128.0/17 
+add china 202.108.0.0/16 
+add china 202.109.0.0/16 
+add china 202.110.0.0/18 
+add china 202.110.64.0/18 
+add china 202.110.128.0/18 
+add china 202.110.192.0/18 
+add china 202.111.0.0/17 
+add china 202.111.128.0/19 
+add china 202.111.160.0/19 
+add china 202.111.192.0/18 
+add china 202.112.0.0/16 
+add china 202.113.0.0/20 
+add china 202.113.16.0/20 
+add china 202.113.32.0/19 
+add china 202.113.64.0/18 
+add china 202.113.128.0/18 
+add china 202.113.192.0/19 
+add china 202.113.224.0/20 
+add china 202.113.240.0/20 
+add china 202.114.0.0/19 
+add china 202.114.32.0/19 
+add china 202.114.64.0/18 
+add china 202.114.128.0/17 
+add china 202.115.0.0/19 
+add china 202.115.32.0/19 
+add china 202.115.64.0/18 
+add china 202.115.128.0/17 
+add china 202.116.0.0/19 
+add china 202.116.32.0/20 
+add china 202.116.48.0/20 
+add china 202.116.64.0/19 
+add china 202.116.96.0/19 
+add china 202.116.128.0/17 
+add china 202.117.0.0/18 
+add china 202.117.64.0/18 
+add china 202.117.128.0/17 
+add china 202.118.0.0/19 
+add china 202.118.32.0/19 
+add china 202.118.64.0/18 
+add china 202.118.128.0/17 
+add china 202.119.0.0/19 
+add china 202.119.32.0/19 
+add china 202.119.64.0/20 
+add china 202.119.80.0/20 
+add china 202.119.96.0/19 
+add china 202.119.128.0/17 
+add china 202.120.0.0/18 
+add china 202.120.64.0/18 
+add china 202.120.128.0/17 
+add china 202.121.0.0/16 
+add china 202.122.0.0/21 
+add china 202.122.32.0/21 
+add china 202.122.64.0/19 
+add china 202.122.112.0/21 
+add china 202.122.120.0/21 
+add china 202.122.128.0/24 
+add china 202.122.132.0/24 
+add china 202.123.96.0/20 
+add china 202.123.116.0/22 
+add china 202.123.120.0/22 
+add china 202.124.16.0/21 
+add china 202.124.24.0/22 
+add china 202.125.107.0/24 
+add china 202.125.109.0/24 
+add china 202.125.112.0/20 
+add china 202.125.176.0/20 
+add china 202.127.0.0/23 
+add china 202.127.2.0/24 
+add china 202.127.3.0/24 
+add china 202.127.4.0/24 
+add china 202.127.5.0/24 
+add china 202.127.6.0/23 
+add china 202.127.12.0/22 
+add china 202.127.16.0/20 
+add china 202.127.40.0/21 
+add china 202.127.48.0/20 
+add china 202.127.112.0/20 
+add china 202.127.128.0/20 
+add china 202.127.144.0/20 
+add china 202.127.160.0/21 
+add china 202.127.192.0/23 
+add china 202.127.194.0/23 
+add china 202.127.196.0/22 
+add china 202.127.200.0/21 
+add china 202.127.208.0/24 
+add china 202.127.209.0/24 
+add china 202.127.212.0/22 
+add china 202.127.216.0/21 
+add china 202.127.224.0/19 
+add china 202.129.208.0/24 
+add china 202.130.0.0/19 
+add china 202.130.39.0/24 
+add china 202.130.224.0/19 
+add china 202.131.16.0/21 
+add china 202.131.48.0/20 
+add china 202.131.208.0/20 
+add china 202.133.32.0/20 
+add china 202.134.58.0/24 
+add china 202.134.128.0/20 
+add china 202.134.208.0/22 
+add china 202.134.212.0/22 
+add china 202.134.216.0/22 
+add china 202.134.220.0/22 
+add china 202.136.48.0/20 
+add china 202.136.208.0/20 
+add china 202.136.224.0/20 
+add china 202.136.248.0/22 
+add china 202.137.231.0/24 
+add china 202.140.140.0/22 
+add china 202.140.144.0/22 
+add china 202.140.148.0/22 
+add china 202.140.152.0/22 
+add china 202.140.156.0/22 
+add china 202.141.160.0/19 
+add china 202.142.16.0/20 
+add china 202.143.4.0/22 
+add china 202.143.16.0/20 
+add china 202.143.32.0/20 
+add china 202.143.56.0/21 
+add china 202.143.100.0/22 
+add china 202.143.104.0/22 
+add china 202.144.196.0/22 
+add china 202.146.160.0/20 
+add china 202.146.186.0/24 
+add china 202.146.188.0/22 
+add china 202.146.196.0/22 
+add china 202.146.200.0/21 
+add china 202.147.144.0/20 
+add china 202.148.32.0/20 
+add china 202.148.64.0/19 
+add china 202.148.96.0/19 
+add china 202.149.32.0/19 
+add china 202.149.160.0/19 
+add china 202.149.224.0/19 
+add china 202.150.16.0/20 
+add china 202.150.32.0/20 
+add china 202.150.56.0/22 
+add china 202.150.192.0/20 
+add china 202.150.224.0/19 
+add china 202.151.0.0/22 
+add china 202.151.33.0/24 
+add china 202.151.128.0/19 
+add china 202.152.176.0/20 
+add china 202.153.0.0/22 
+add china 202.153.7.0/24 
+add china 202.153.48.0/20 
+add china 202.157.192.0/19 
+add china 202.158.160.0/19 
+add china 202.158.242.0/24 
+add china 202.160.140.0/22 
+add china 202.160.156.0/22 
+add china 202.160.176.0/20 
+add china 202.162.67.0/24 
+add china 202.162.75.0/24 
+add china 202.164.0.0/20 
+add china 202.164.96.0/19 
+add china 202.165.176.0/20 
+add china 202.165.208.0/20 
+add china 202.165.239.0/24 
+add china 202.165.240.0/23 
+add china 202.165.243.0/24 
+add china 202.165.245.0/24 
+add china 202.165.251.0/24 
+add china 202.165.252.0/22 
+add china 202.166.224.0/19 
+add china 202.168.80.0/22 
+add china 202.168.128.0/22 
+add china 202.168.132.0/22 
+add china 202.168.136.0/22 
+add china 202.168.140.0/22 
+add china 202.168.160.0/20 
+add china 202.168.176.0/20 
+add china 202.170.128.0/19 
+add china 202.170.216.0/21 
+add china 202.170.224.0/19 
+add china 202.171.216.0/21 
+add china 202.171.232.0/24 
+add china 202.171.235.0/24 
+add china 202.172.0.0/22 
+add china 202.172.7.0/24 
+add china 202.173.0.0/22 
+add china 202.173.6.0/24 
+add china 202.173.8.0/21 
+add china 202.173.112.0/22 
+add china 202.173.224.0/19 
+add china 202.174.64.0/20 
+add china 202.174.124.0/22 
+add china 202.176.224.0/19 
+add china 202.179.160.0/22 
+add china 202.179.164.0/22 
+add china 202.179.168.0/22 
+add china 202.179.172.0/22 
+add china 202.179.240.0/20 
+add china 202.180.128.0/19 
+add china 202.180.208.0/21 
+add china 202.181.8.0/22 
+add china 202.181.28.0/22 
+add china 202.181.112.0/20 
+add china 202.182.32.0/20 
+add china 202.182.192.0/19 
+add china 202.189.0.0/18 
+add china 202.189.80.0/20 
+add china 202.189.184.0/21 
+add china 202.191.0.0/24 
+add china 202.191.68.0/22 
+add china 202.191.72.0/21 
+add china 202.191.80.0/20 
+add china 202.192.0.0/13 
+add china 202.200.0.0/14 
+add china 202.204.0.0/14 
+add china 203.0.4.0/22 
+add china 203.0.10.0/23 
+add china 203.0.18.0/24 
+add china 203.0.24.0/24 
+add china 203.0.42.0/23 
+add china 203.0.45.0/24 
+add china 203.0.46.0/23 
+add china 203.0.81.0/24 
+add china 203.0.82.0/23 
+add china 203.0.90.0/23 
+add china 203.0.96.0/23 
+add china 203.0.104.0/21 
+add china 203.0.114.0/23 
+add china 203.0.122.0/24 
+add china 203.0.128.0/24 
+add china 203.0.130.0/23 
+add china 203.0.132.0/22 
+add china 203.0.137.0/24 
+add china 203.0.142.0/24 
+add china 203.0.144.0/24 
+add china 203.0.146.0/24 
+add china 203.0.148.0/24 
+add china 203.0.150.0/23 
+add china 203.0.152.0/24 
+add china 203.0.177.0/24 
+add china 203.0.224.0/24 
+add china 203.1.4.0/22 
+add china 203.1.18.0/24 
+add china 203.1.26.0/23 
+add china 203.1.65.0/24 
+add china 203.1.66.0/23 
+add china 203.1.70.0/23 
+add china 203.1.76.0/23 
+add china 203.1.90.0/24 
+add china 203.1.97.0/24 
+add china 203.1.98.0/23 
+add china 203.1.100.0/22 
+add china 203.1.108.0/24 
+add china 203.1.253.0/24 
+add china 203.1.254.0/24 
+add china 203.2.64.0/21 
+add china 203.2.73.0/24 
+add china 203.2.112.0/21 
+add china 203.2.126.0/23 
+add china 203.2.140.0/24 
+add china 203.2.150.0/24 
+add china 203.2.152.0/22 
+add china 203.2.156.0/23 
+add china 203.2.160.0/21 
+add china 203.2.180.0/23 
+add china 203.2.196.0/23 
+add china 203.2.209.0/24 
+add china 203.2.214.0/23 
+add china 203.2.226.0/23 
+add china 203.2.229.0/24 
+add china 203.2.236.0/23 
+add china 203.3.68.0/24 
+add china 203.3.72.0/23 
+add china 203.3.75.0/24 
+add china 203.3.80.0/21 
+add china 203.3.96.0/22 
+add china 203.3.105.0/24 
+add china 203.3.112.0/21 
+add china 203.3.120.0/24 
+add china 203.3.123.0/24 
+add china 203.3.135.0/24 
+add china 203.3.139.0/24 
+add china 203.3.143.0/24 
+add china 203.4.132.0/23 
+add china 203.4.134.0/24 
+add china 203.4.151.0/24 
+add china 203.4.152.0/22 
+add china 203.4.174.0/23 
+add china 203.4.180.0/24 
+add china 203.4.186.0/24 
+add china 203.4.205.0/24 
+add china 203.4.208.0/22 
+add china 203.4.227.0/24 
+add china 203.4.230.0/23 
+add china 203.5.4.0/23 
+add china 203.5.7.0/24 
+add china 203.5.8.0/23 
+add china 203.5.11.0/24 
+add china 203.5.21.0/24 
+add china 203.5.22.0/24 
+add china 203.5.44.0/24 
+add china 203.5.46.0/23 
+add china 203.5.52.0/22 
+add china 203.5.56.0/23 
+add china 203.5.60.0/23 
+add china 203.5.114.0/23 
+add china 203.5.118.0/24 
+add china 203.5.120.0/24 
+add china 203.5.172.0/24 
+add china 203.5.180.0/23 
+add china 203.5.182.0/24 
+add china 203.5.185.0/24 
+add china 203.5.186.0/24 
+add china 203.5.188.0/23 
+add china 203.5.190.0/24 
+add china 203.5.195.0/24 
+add china 203.5.214.0/23 
+add china 203.5.218.0/23 
+add china 203.6.131.0/24 
+add china 203.6.136.0/24 
+add china 203.6.138.0/23 
+add china 203.6.142.0/24 
+add china 203.6.150.0/23 
+add china 203.6.157.0/24 
+add china 203.6.159.0/24 
+add china 203.6.224.0/20 
+add china 203.6.248.0/23 
+add china 203.7.129.0/24 
+add china 203.7.138.0/23 
+add china 203.7.147.0/24 
+add china 203.7.150.0/23 
+add china 203.7.158.0/24 
+add china 203.7.192.0/23 
+add china 203.7.200.0/24 
+add china 203.8.0.0/24 
+add china 203.8.8.0/24 
+add china 203.8.23.0/24 
+add china 203.8.24.0/21 
+add china 203.8.70.0/24 
+add china 203.8.82.0/24 
+add china 203.8.86.0/23 
+add china 203.8.91.0/24 
+add china 203.8.110.0/23 
+add china 203.8.115.0/24 
+add china 203.8.166.0/23 
+add china 203.8.169.0/24 
+add china 203.8.173.0/24 
+add china 203.8.184.0/24 
+add china 203.8.186.0/23 
+add china 203.8.190.0/23 
+add china 203.8.192.0/24 
+add china 203.8.197.0/24 
+add china 203.8.198.0/23 
+add china 203.8.203.0/24 
+add china 203.8.209.0/24 
+add china 203.8.210.0/23 
+add china 203.8.212.0/22 
+add china 203.8.217.0/24 
+add china 203.8.220.0/24 
+add china 203.9.32.0/24 
+add china 203.9.36.0/23 
+add china 203.9.57.0/24 
+add china 203.9.63.0/24 
+add china 203.9.65.0/24 
+add china 203.9.70.0/23 
+add china 203.9.72.0/24 
+add china 203.9.75.0/24 
+add china 203.9.76.0/23 
+add china 203.9.96.0/22 
+add china 203.9.100.0/23 
+add china 203.9.108.0/24 
+add china 203.9.158.0/24 
+add china 203.10.34.0/24 
+add china 203.10.56.0/24 
+add china 203.10.74.0/23 
+add china 203.10.84.0/22 
+add china 203.10.88.0/24 
+add china 203.10.95.0/24 
+add china 203.10.125.0/24 
+add china 203.11.70.0/24 
+add china 203.11.76.0/22 
+add china 203.11.82.0/24 
+add china 203.11.84.0/22 
+add china 203.11.100.0/22 
+add china 203.11.109.0/24 
+add china 203.11.117.0/24 
+add china 203.11.122.0/24 
+add china 203.11.126.0/24 
+add china 203.11.136.0/22 
+add china 203.11.141.0/24 
+add china 203.11.142.0/23 
+add china 203.11.180.0/22 
+add china 203.11.208.0/22 
+add china 203.12.16.0/24 
+add china 203.12.19.0/24 
+add china 203.12.24.0/24 
+add china 203.12.57.0/24 
+add china 203.12.65.0/24 
+add china 203.12.66.0/24 
+add china 203.12.70.0/23 
+add china 203.12.87.0/24 
+add china 203.12.88.0/21 
+add china 203.12.100.0/23 
+add china 203.12.103.0/24 
+add china 203.12.114.0/24 
+add china 203.12.118.0/24 
+add china 203.12.130.0/24 
+add china 203.12.137.0/24 
+add china 203.12.196.0/22 
+add china 203.12.200.0/21 
+add china 203.12.211.0/24 
+add china 203.12.219.0/24 
+add china 203.12.226.0/24 
+add china 203.12.240.0/22 
+add china 203.13.18.0/24 
+add china 203.13.24.0/24 
+add china 203.13.44.0/23 
+add china 203.13.80.0/21 
+add china 203.13.88.0/23 
+add china 203.13.92.0/22 
+add china 203.13.173.0/24 
+add china 203.13.224.0/23 
+add china 203.13.227.0/24 
+add china 203.13.233.0/24 
+add china 203.14.24.0/22 
+add china 203.14.33.0/24 
+add china 203.14.56.0/24 
+add china 203.14.61.0/24 
+add china 203.14.62.0/24 
+add china 203.14.104.0/24 
+add china 203.14.114.0/23 
+add china 203.14.118.0/24 
+add china 203.14.162.0/24 
+add china 203.14.184.0/21 
+add china 203.14.192.0/24 
+add china 203.14.194.0/23 
+add china 203.14.214.0/24 
+add china 203.14.231.0/24 
+add china 203.14.246.0/24 
+add china 203.15.0.0/20 
+add china 203.15.20.0/23 
+add china 203.15.22.0/24 
+add china 203.15.87.0/24 
+add china 203.15.88.0/23 
+add china 203.15.105.0/24 
+add china 203.15.112.0/21 
+add china 203.15.130.0/23 
+add china 203.15.149.0/24 
+add china 203.15.151.0/24 
+add china 203.15.156.0/22 
+add china 203.15.174.0/24 
+add china 203.15.227.0/24 
+add china 203.15.232.0/21 
+add china 203.15.240.0/23 
+add china 203.15.246.0/24 
+add china 203.16.10.0/24 
+add china 203.16.12.0/23 
+add china 203.16.16.0/21 
+add china 203.16.27.0/24 
+add china 203.16.38.0/24 
+add china 203.16.49.0/24 
+add china 203.16.50.0/23 
+add china 203.16.58.0/24 
+add china 203.16.63.0/24 
+add china 203.16.133.0/24 
+add china 203.16.161.0/24 
+add china 203.16.162.0/24 
+add china 203.16.186.0/23 
+add china 203.16.228.0/24 
+add china 203.16.238.0/24 
+add china 203.16.240.0/24 
+add china 203.16.245.0/24 
+add china 203.17.2.0/24 
+add china 203.17.18.0/24 
+add china 203.17.28.0/24 
+add china 203.17.39.0/24 
+add china 203.17.56.0/24 
+add china 203.17.74.0/23 
+add china 203.17.88.0/23 
+add china 203.17.136.0/24 
+add china 203.17.164.0/24 
+add china 203.17.187.0/24 
+add china 203.17.190.0/23 
+add china 203.17.231.0/24 
+add china 203.17.233.0/24 
+add china 203.17.248.0/24 
+add china 203.17.249.0/24 
+add china 203.17.255.0/24 
+add china 203.18.2.0/23 
+add china 203.18.4.0/24 
+add china 203.18.7.0/24 
+add china 203.18.31.0/24 
+add china 203.18.37.0/24 
+add china 203.18.48.0/23 
+add china 203.18.52.0/24 
+add china 203.18.72.0/22 
+add china 203.18.80.0/23 
+add china 203.18.87.0/24 
+add china 203.18.100.0/23 
+add china 203.18.105.0/24 
+add china 203.18.107.0/24 
+add china 203.18.110.0/24 
+add china 203.18.129.0/24 
+add china 203.18.131.0/24 
+add china 203.18.132.0/23 
+add china 203.18.144.0/24 
+add china 203.18.153.0/24 
+add china 203.18.199.0/24 
+add china 203.18.208.0/24 
+add china 203.18.211.0/24 
+add china 203.18.215.0/24 
+add china 203.19.1.0/24 
+add china 203.19.18.0/24 
+add china 203.19.24.0/24 
+add china 203.19.30.0/24 
+add china 203.19.32.0/21 
+add china 203.19.41.0/24 
+add china 203.19.44.0/23 
+add china 203.19.46.0/24 
+add china 203.19.58.0/24 
+add china 203.19.60.0/23 
+add china 203.19.64.0/24 
+add china 203.19.68.0/24 
+add china 203.19.72.0/24 
+add china 203.19.101.0/24 
+add china 203.19.111.0/24 
+add china 203.19.131.0/24 
+add china 203.19.133.0/24 
+add china 203.19.144.0/24 
+add china 203.19.147.0/24 
+add china 203.19.149.0/24 
+add china 203.19.156.0/24 
+add china 203.19.176.0/24 
+add china 203.19.178.0/23 
+add china 203.19.208.0/24 
+add china 203.19.228.0/22 
+add china 203.19.233.0/24 
+add china 203.19.242.0/24 
+add china 203.19.248.0/23 
+add china 203.19.255.0/24 
+add china 203.20.17.0/24 
+add china 203.20.40.0/23 
+add china 203.20.44.0/24 
+add china 203.20.48.0/24 
+add china 203.20.61.0/24 
+add china 203.20.65.0/24 
+add china 203.20.84.0/23 
+add china 203.20.89.0/24 
+add china 203.20.106.0/23 
+add china 203.20.115.0/24 
+add china 203.20.117.0/24 
+add china 203.20.118.0/23 
+add china 203.20.122.0/24 
+add china 203.20.126.0/23 
+add china 203.20.135.0/24 
+add china 203.20.136.0/21 
+add china 203.20.150.0/24 
+add china 203.20.230.0/24 
+add china 203.20.232.0/24 
+add china 203.20.236.0/24 
+add china 203.21.0.0/23 
+add china 203.21.2.0/24 
+add china 203.21.8.0/24 
+add china 203.21.10.0/24 
+add china 203.21.18.0/24 
+add china 203.21.33.0/24 
+add china 203.21.34.0/24 
+add china 203.21.41.0/24 
+add china 203.21.44.0/24 
+add china 203.21.68.0/24 
+add china 203.21.82.0/24 
+add china 203.21.96.0/22 
+add china 203.21.124.0/24 
+add china 203.21.136.0/23 
+add china 203.21.145.0/24 
+add china 203.21.206.0/24 
+add china 203.22.24.0/24 
+add china 203.22.28.0/23 
+add china 203.22.31.0/24 
+add china 203.22.68.0/24 
+add china 203.22.76.0/24 
+add china 203.22.78.0/24 
+add china 203.22.84.0/24 
+add china 203.22.87.0/24 
+add china 203.22.92.0/22 
+add china 203.22.99.0/24 
+add china 203.22.106.0/24 
+add china 203.22.122.0/23 
+add china 203.22.131.0/24 
+add china 203.22.163.0/24 
+add china 203.22.166.0/24 
+add china 203.22.170.0/24 
+add china 203.22.176.0/21 
+add china 203.22.194.0/24 
+add china 203.22.242.0/23 
+add china 203.22.245.0/24 
+add china 203.22.246.0/24 
+add china 203.22.252.0/23 
+add china 203.23.0.0/24 
+add china 203.23.47.0/24 
+add china 203.23.61.0/24 
+add china 203.23.62.0/23 
+add china 203.23.73.0/24 
+add china 203.23.85.0/24 
+add china 203.23.92.0/22 
+add china 203.23.98.0/24 
+add china 203.23.107.0/24 
+add china 203.23.112.0/24 
+add china 203.23.130.0/24 
+add china 203.23.140.0/23 
+add china 203.23.172.0/24 
+add china 203.23.182.0/24 
+add china 203.23.186.0/23 
+add china 203.23.192.0/24 
+add china 203.23.197.0/24 
+add china 203.23.198.0/24 
+add china 203.23.204.0/22 
+add china 203.23.224.0/24 
+add china 203.23.226.0/23 
+add china 203.23.228.0/22 
+add china 203.23.249.0/24 
+add china 203.23.251.0/24 
+add china 203.24.13.0/24 
+add china 203.24.18.0/24 
+add china 203.24.27.0/24 
+add china 203.24.43.0/24 
+add china 203.24.56.0/24 
+add china 203.24.58.0/24 
+add china 203.24.67.0/24 
+add china 203.24.74.0/24 
+add china 203.24.79.0/24 
+add china 203.24.80.0/23 
+add china 203.24.84.0/23 
+add china 203.24.86.0/24 
+add china 203.24.90.0/24 
+add china 203.24.111.0/24 
+add china 203.24.112.0/24 
+add china 203.24.116.0/24 
+add china 203.24.122.0/23 
+add china 203.24.145.0/24 
+add china 203.24.152.0/23 
+add china 203.24.157.0/24 
+add china 203.24.161.0/24 
+add china 203.24.167.0/24 
+add china 203.24.186.0/23 
+add china 203.24.199.0/24 
+add china 203.24.202.0/24 
+add china 203.24.212.0/23 
+add china 203.24.217.0/24 
+add china 203.24.219.0/24 
+add china 203.24.244.0/24 
+add china 203.25.19.0/24 
+add china 203.25.20.0/23 
+add china 203.25.46.0/24 
+add china 203.25.48.0/21 
+add china 203.25.64.0/23 
+add china 203.25.91.0/24 
+add china 203.25.99.0/24 
+add china 203.25.100.0/24 
+add china 203.25.106.0/24 
+add china 203.25.131.0/24 
+add china 203.25.135.0/24 
+add china 203.25.138.0/24 
+add china 203.25.147.0/24 
+add china 203.25.153.0/24 
+add china 203.25.154.0/23 
+add china 203.25.164.0/24 
+add china 203.25.166.0/24 
+add china 203.25.174.0/23 
+add china 203.25.180.0/24 
+add china 203.25.182.0/24 
+add china 203.25.191.0/24 
+add china 203.25.199.0/24 
+add china 203.25.200.0/24 
+add china 203.25.202.0/23 
+add china 203.25.208.0/20 
+add china 203.25.229.0/24 
+add china 203.25.235.0/24 
+add china 203.25.236.0/24 
+add china 203.25.242.0/24 
+add china 203.26.12.0/24 
+add china 203.26.34.0/24 
+add china 203.26.49.0/24 
+add china 203.26.50.0/24 
+add china 203.26.55.0/24 
+add china 203.26.56.0/23 
+add china 203.26.60.0/24 
+add china 203.26.65.0/24 
+add china 203.26.68.0/24 
+add china 203.26.76.0/24 
+add china 203.26.80.0/24 
+add china 203.26.84.0/24 
+add china 203.26.97.0/24 
+add china 203.26.102.0/23 
+add china 203.26.115.0/24 
+add china 203.26.116.0/24 
+add china 203.26.129.0/24 
+add china 203.26.143.0/24 
+add china 203.26.144.0/24 
+add china 203.26.148.0/23 
+add china 203.26.154.0/24 
+add china 203.26.158.0/23 
+add china 203.26.170.0/24 
+add china 203.26.173.0/24 
+add china 203.26.176.0/24 
+add china 203.26.185.0/24 
+add china 203.26.202.0/23 
+add china 203.26.210.0/24 
+add china 203.26.214.0/24 
+add china 203.26.222.0/24 
+add china 203.26.224.0/24 
+add china 203.26.228.0/24 
+add china 203.26.232.0/24 
+add china 203.27.0.0/24 
+add china 203.27.10.0/24 
+add china 203.27.15.0/24 
+add china 203.27.16.0/24 
+add china 203.27.20.0/24 
+add china 203.27.22.0/23 
+add china 203.27.40.0/24 
+add china 203.27.45.0/24 
+add china 203.27.53.0/24 
+add china 203.27.65.0/24 
+add china 203.27.66.0/24 
+add china 203.27.81.0/24 
+add china 203.27.88.0/24 
+add china 203.27.102.0/24 
+add china 203.27.109.0/24 
+add china 203.27.117.0/24 
+add china 203.27.121.0/24 
+add china 203.27.122.0/23 
+add china 203.27.125.0/24 
+add china 203.27.200.0/24 
+add china 203.27.202.0/24 
+add china 203.27.233.0/24 
+add china 203.27.241.0/24 
+add china 203.27.250.0/24 
+add china 203.28.10.0/24 
+add china 203.28.12.0/24 
+add china 203.28.33.0/24 
+add china 203.28.34.0/23 
+add china 203.28.43.0/24 
+add china 203.28.44.0/24 
+add china 203.28.54.0/24 
+add china 203.28.56.0/24 
+add china 203.28.73.0/24 
+add china 203.28.74.0/24 
+add china 203.28.76.0/24 
+add china 203.28.86.0/24 
+add china 203.28.88.0/24 
+add china 203.28.112.0/24 
+add china 203.28.131.0/24 
+add china 203.28.136.0/24 
+add china 203.28.140.0/24 
+add china 203.28.145.0/24 
+add china 203.28.165.0/24 
+add china 203.28.169.0/24 
+add china 203.28.170.0/24 
+add china 203.28.178.0/23 
+add china 203.28.185.0/24 
+add china 203.28.187.0/24 
+add china 203.28.196.0/24 
+add china 203.28.226.0/23 
+add china 203.28.239.0/24 
+add china 203.29.2.0/24 
+add china 203.29.8.0/23 
+add china 203.29.13.0/24 
+add china 203.29.14.0/24 
+add china 203.29.28.0/24 
+add china 203.29.46.0/24 
+add china 203.29.57.0/24 
+add china 203.29.61.0/24 
+add china 203.29.63.0/24 
+add china 203.29.69.0/24 
+add china 203.29.73.0/24 
+add china 203.29.81.0/24 
+add china 203.29.90.0/24 
+add china 203.29.95.0/24 
+add china 203.29.100.0/24 
+add china 203.29.103.0/24 
+add china 203.29.112.0/24 
+add china 203.29.120.0/22 
+add china 203.29.182.0/23 
+add china 203.29.187.0/24 
+add china 203.29.189.0/24 
+add china 203.29.190.0/24 
+add china 203.29.205.0/24 
+add china 203.29.210.0/24 
+add china 203.29.217.0/24 
+add china 203.29.227.0/24 
+add china 203.29.231.0/24 
+add china 203.29.233.0/24 
+add china 203.29.234.0/24 
+add china 203.29.248.0/24 
+add china 203.29.254.0/23 
+add china 203.30.16.0/23 
+add china 203.30.25.0/24 
+add china 203.30.27.0/24 
+add china 203.30.29.0/24 
+add china 203.30.66.0/24 
+add china 203.30.81.0/24 
+add china 203.30.87.0/24 
+add china 203.30.111.0/24 
+add china 203.30.121.0/24 
+add china 203.30.123.0/24 
+add china 203.30.152.0/24 
+add china 203.30.156.0/24 
+add china 203.30.162.0/24 
+add china 203.30.173.0/24 
+add china 203.30.175.0/24 
+add china 203.30.187.0/24 
+add china 203.30.194.0/24 
+add china 203.30.217.0/24 
+add china 203.30.220.0/24 
+add china 203.30.222.0/24 
+add china 203.30.232.0/23 
+add china 203.30.235.0/24 
+add china 203.30.240.0/23 
+add china 203.30.246.0/24 
+add china 203.30.250.0/23 
+add china 203.31.45.0/24 
+add china 203.31.46.0/24 
+add china 203.31.49.0/24 
+add china 203.31.51.0/24 
+add china 203.31.54.0/23 
+add china 203.31.69.0/24 
+add china 203.31.72.0/24 
+add china 203.31.80.0/24 
+add china 203.31.85.0/24 
+add china 203.31.97.0/24 
+add china 203.31.105.0/24 
+add china 203.31.106.0/24 
+add china 203.31.108.0/23 
+add china 203.31.124.0/24 
+add china 203.31.162.0/24 
+add china 203.31.174.0/24 
+add china 203.31.177.0/24 
+add china 203.31.181.0/24 
+add china 203.31.187.0/24 
+add china 203.31.189.0/24 
+add china 203.31.204.0/24 
+add china 203.31.220.0/24 
+add china 203.31.222.0/23 
+add china 203.31.225.0/24 
+add china 203.31.229.0/24 
+add china 203.31.248.0/23 
+add china 203.31.253.0/24 
+add china 203.32.20.0/24 
+add china 203.32.48.0/23 
+add china 203.32.56.0/24 
+add china 203.32.60.0/24 
+add china 203.32.62.0/24 
+add china 203.32.68.0/23 
+add china 203.32.76.0/24 
+add china 203.32.81.0/24 
+add china 203.32.84.0/23 
+add china 203.32.95.0/24 
+add china 203.32.102.0/24 
+add china 203.32.105.0/24 
+add china 203.32.130.0/24 
+add china 203.32.133.0/24 
+add china 203.32.140.0/24 
+add china 203.32.152.0/24 
+add china 203.32.186.0/23 
+add china 203.32.192.0/24 
+add china 203.32.196.0/24 
+add china 203.32.203.0/24 
+add china 203.32.204.0/23 
+add china 203.32.212.0/24 
+add china 203.33.4.0/24 
+add china 203.33.7.0/24 
+add china 203.33.8.0/21 
+add china 203.33.21.0/24 
+add china 203.33.26.0/24 
+add china 203.33.32.0/24 
+add china 203.33.63.0/24 
+add china 203.33.64.0/24 
+add china 203.33.67.0/24 
+add china 203.33.68.0/24 
+add china 203.33.73.0/24 
+add china 203.33.79.0/24 
+add china 203.33.100.0/24 
+add china 203.33.122.0/24 
+add china 203.33.129.0/24 
+add china 203.33.131.0/24 
+add china 203.33.145.0/24 
+add china 203.33.156.0/24 
+add china 203.33.158.0/23 
+add china 203.33.174.0/24 
+add china 203.33.185.0/24 
+add china 203.33.200.0/24 
+add china 203.33.202.0/23 
+add china 203.33.204.0/24 
+add china 203.33.206.0/23 
+add china 203.33.214.0/23 
+add china 203.33.224.0/23 
+add china 203.33.226.0/24 
+add china 203.33.233.0/24 
+add china 203.33.243.0/24 
+add china 203.33.250.0/24 
+add china 203.34.4.0/24 
+add china 203.34.21.0/24 
+add china 203.34.27.0/24 
+add china 203.34.39.0/24 
+add china 203.34.48.0/23 
+add china 203.34.54.0/24 
+add china 203.34.56.0/23 
+add china 203.34.67.0/24 
+add china 203.34.69.0/24 
+add china 203.34.76.0/24 
+add china 203.34.92.0/24 
+add china 203.34.106.0/24 
+add china 203.34.113.0/24 
+add china 203.34.147.0/24 
+add china 203.34.150.0/24 
+add china 203.34.152.0/23 
+add china 203.34.161.0/24 
+add china 203.34.162.0/24 
+add china 203.34.187.0/24 
+add china 203.34.192.0/21 
+add china 203.34.204.0/22 
+add china 203.34.232.0/24 
+add china 203.34.240.0/24 
+add china 203.34.242.0/24 
+add china 203.34.245.0/24 
+add china 203.34.251.0/24 
+add china 203.55.2.0/23 
+add china 203.55.4.0/24 
+add china 203.55.10.0/24 
+add china 203.55.13.0/24 
+add china 203.55.22.0/24 
+add china 203.55.30.0/24 
+add china 203.55.93.0/24 
+add china 203.55.101.0/24 
+add china 203.55.109.0/24 
+add china 203.55.110.0/24 
+add china 203.55.116.0/23 
+add china 203.55.119.0/24 
+add china 203.55.128.0/23 
+add china 203.55.146.0/23 
+add china 203.55.192.0/24 
+add china 203.55.196.0/24 
+add china 203.55.218.0/23 
+add china 203.55.221.0/24 
+add china 203.55.224.0/24 
+add china 203.56.1.0/24 
+add china 203.56.4.0/24 
+add china 203.56.12.0/24 
+add china 203.56.24.0/24 
+add china 203.56.38.0/24 
+add china 203.56.40.0/24 
+add china 203.56.46.0/24 
+add china 203.56.48.0/21 
+add china 203.56.68.0/23 
+add china 203.56.82.0/23 
+add china 203.56.84.0/23 
+add china 203.56.95.0/24 
+add china 203.56.110.0/24 
+add china 203.56.121.0/24 
+add china 203.56.161.0/24 
+add china 203.56.169.0/24 
+add china 203.56.172.0/23 
+add china 203.56.175.0/24 
+add china 203.56.183.0/24 
+add china 203.56.185.0/24 
+add china 203.56.187.0/24 
+add china 203.56.192.0/24 
+add china 203.56.198.0/24 
+add china 203.56.201.0/24 
+add china 203.56.208.0/23 
+add china 203.56.210.0/24 
+add china 203.56.214.0/24 
+add china 203.56.216.0/24 
+add china 203.56.227.0/24 
+add china 203.56.228.0/24 
+add china 203.56.231.0/24 
+add china 203.56.232.0/24 
+add china 203.56.240.0/24 
+add china 203.56.252.0/24 
+add china 203.56.254.0/24 
+add china 203.57.5.0/24 
+add china 203.57.6.0/24 
+add china 203.57.12.0/23 
+add china 203.57.28.0/24 
+add china 203.57.39.0/24 
+add china 203.57.46.0/24 
+add china 203.57.58.0/24 
+add china 203.57.61.0/24 
+add china 203.57.66.0/24 
+add china 203.57.69.0/24 
+add china 203.57.70.0/23 
+add china 203.57.73.0/24 
+add china 203.57.90.0/24 
+add china 203.57.101.0/24 
+add china 203.57.109.0/24 
+add china 203.57.123.0/24 
+add china 203.57.157.0/24 
+add china 203.57.200.0/24 
+add china 203.57.202.0/24 
+add china 203.57.206.0/24 
+add china 203.57.222.0/24 
+add china 203.57.224.0/20 
+add china 203.57.246.0/23 
+add china 203.57.249.0/24 
+add china 203.57.253.0/24 
+add china 203.57.254.0/23 
+add china 203.62.2.0/24 
+add china 203.62.131.0/24 
+add china 203.62.139.0/24 
+add china 203.62.161.0/24 
+add china 203.62.197.0/24 
+add china 203.62.228.0/22 
+add china 203.62.234.0/24 
+add china 203.62.246.0/24 
+add china 203.76.160.0/22 
+add china 203.76.168.0/22 
+add china 203.76.208.0/22 
+add china 203.76.212.0/22 
+add china 203.76.216.0/22 
+add china 203.76.240.0/22 
+add china 203.76.244.0/22 
+add china 203.77.180.0/22 
+add china 203.78.48.0/20 
+add china 203.78.156.0/22 
+add china 203.79.0.0/20 
+add china 203.79.32.0/20 
+add china 203.80.4.0/23 
+add china 203.80.32.0/20 
+add china 203.80.57.0/24 
+add china 203.80.129.0/24 
+add china 203.80.132.0/22 
+add china 203.80.136.0/21 
+add china 203.80.144.0/20 
+add china 203.81.0.0/21 
+add china 203.81.16.0/20 
+add china 203.81.244.0/22 
+add china 203.82.0.0/23 
+add china 203.82.16.0/21 
+add china 203.82.112.0/22 
+add china 203.82.116.0/22 
+add china 203.82.120.0/22 
+add china 203.82.124.0/22 
+add china 203.82.224.0/22 
+add china 203.82.228.0/22 
+add china 203.82.232.0/22 
+add china 203.82.236.0/22 
+add china 203.83.0.0/22 
+add china 203.83.8.0/22 
+add china 203.83.12.0/22 
+add china 203.83.56.0/21 
+add china 203.83.224.0/20 
+add china 203.86.0.0/19 
+add china 203.86.32.0/19 
+add china 203.86.64.0/20 
+add china 203.86.80.0/20 
+add china 203.86.96.0/19 
+add china 203.86.250.0/24 
+add china 203.86.254.0/23 
+add china 203.88.32.0/19 
+add china 203.88.192.0/19 
+add china 203.89.0.0/22 
+add china 203.89.8.0/21 
+add china 203.89.100.0/22 
+add china 203.89.133.0/24 
+add china 203.89.136.0/22 
+add china 203.89.144.0/24 
+add china 203.90.0.0/22 
+add china 203.90.8.0/22 
+add china 203.90.12.0/22 
+add china 203.90.128.0/19 
+add china 203.90.160.0/19 
+add china 203.90.192.0/19 
+add china 203.91.32.0/19 
+add china 203.91.96.0/20 
+add china 203.91.120.0/21 
+add china 203.92.0.0/22 
+add china 203.92.6.0/24 
+add china 203.92.160.0/19 
+add china 203.93.0.0/22 
+add china 203.93.4.0/22 
+add china 203.93.8.0/24 
+add china 203.93.9.0/24 
+add china 203.93.10.0/23 
+add china 203.93.12.0/22 
+add china 203.93.16.0/20 
+add china 203.93.32.0/19 
+add china 203.93.64.0/18 
+add china 203.93.128.0/21 
+add china 203.93.136.0/22 
+add china 203.93.140.0/24 
+add china 203.93.141.0/24 
+add china 203.93.142.0/23 
+add china 203.93.144.0/20 
+add china 203.93.160.0/19 
+add china 203.93.192.0/18 
+add china 203.94.0.0/22 
+add china 203.94.4.0/22 
+add china 203.94.8.0/21 
+add china 203.94.16.0/20 
+add china 203.95.0.0/21 
+add china 203.95.96.0/20 
+add china 203.95.112.0/20 
+add china 203.95.128.0/18 
+add china 203.95.200.0/22 
+add china 203.95.204.0/22 
+add china 203.95.208.0/22 
+add china 203.95.224.0/19 
+add china 203.99.8.0/21 
+add china 203.99.16.0/20 
+add china 203.99.80.0/20 
+add china 203.100.32.0/20 
+add china 203.100.48.0/21 
+add china 203.100.58.0/24 
+add china 203.100.60.0/24 
+add china 203.100.63.0/24 
+add china 203.100.80.0/20 
+add china 203.100.96.0/19 
+add china 203.100.192.0/20 
+add china 203.104.32.0/20 
+add china 203.105.96.0/19 
+add china 203.105.128.0/19 
+add china 203.107.0.0/17 
+add china 203.110.160.0/19 
+add china 203.110.208.0/20 
+add china 203.110.232.0/23 
+add china 203.110.234.0/24 
+add china 203.114.80.0/22 
+add china 203.114.84.0/22 
+add china 203.114.88.0/22 
+add china 203.114.92.0/22 
+add china 203.114.244.0/22 
+add china 203.118.192.0/19 
+add china 203.118.241.0/24 
+add china 203.118.248.0/22 
+add china 203.119.24.0/21 
+add china 203.119.32.0/22 
+add china 203.119.80.0/22 
+add china 203.119.85.0/24 
+add china 203.119.113.0/24 
+add china 203.119.114.0/23 
+add china 203.119.116.0/22 
+add china 203.119.120.0/21 
+add china 203.119.128.0/17 
+add china 203.123.58.0/24 
+add china 203.128.32.0/19 
+add china 203.128.96.0/19 
+add china 203.128.224.0/21 
+add china 203.129.8.0/21 
+add china 203.130.32.0/19 
+add china 203.132.32.0/19 
+add china 203.134.240.0/21 
+add china 203.135.96.0/20 
+add china 203.135.112.0/20 
+add china 203.135.160.0/20 
+add china 203.142.219.0/24 
+add china 203.142.224.0/19 
+add china 203.144.96.0/19 
+add china 203.145.0.0/19 
+add china 203.148.0.0/18 
+add china 203.148.64.0/20 
+add china 203.148.80.0/22 
+add china 203.148.86.0/23 
+add china 203.149.92.0/22 
+add china 203.152.64.0/19 
+add china 203.152.128.0/19 
+add china 203.153.0.0/22 
+add china 203.156.192.0/18 
+add china 203.158.16.0/21 
+add china 203.160.52.0/22 
+add china 203.160.104.0/21 
+add china 203.160.129.0/24 
+add china 203.160.192.0/19 
+add china 203.161.0.0/22 
+add china 203.161.180.0/24 
+add china 203.161.183.0/24 
+add china 203.161.192.0/19 
+add china 203.166.160.0/19 
+add china 203.167.28.0/22 
+add china 203.168.0.0/19 
+add china 203.170.58.0/23 
+add china 203.171.0.0/22 
+add china 203.171.208.0/24 
+add china 203.171.224.0/20 
+add china 203.174.4.0/24 
+add china 203.174.6.0/24 
+add china 203.174.7.0/24 
+add china 203.174.96.0/19 
+add china 203.175.128.0/19 
+add china 203.175.192.0/18 
+add china 203.176.0.0/18 
+add china 203.176.64.0/19 
+add china 203.176.168.0/21 
+add china 203.184.80.0/20 
+add china 203.185.189.0/24 
+add china 203.187.160.0/19 
+add china 203.189.0.0/23 
+add china 203.189.6.0/23 
+add china 203.189.112.0/22 
+add china 203.189.192.0/19 
+add china 203.189.232.0/22 
+add china 203.189.240.0/22 
+add china 203.190.96.0/20 
+add china 203.190.249.0/24 
+add china 203.191.0.0/23 
+add china 203.191.2.0/24 
+add china 203.191.5.0/24 
+add china 203.191.7.0/24 
+add china 203.191.16.0/20 
+add china 203.191.64.0/18 
+add china 203.191.133.0/24 
+add china 203.191.144.0/21 
+add china 203.191.152.0/21 
+add china 203.192.0.0/19 
+add china 203.193.224.0/19 
+add china 203.194.120.0/21 
+add china 203.195.64.0/19 
+add china 203.195.112.0/21 
+add china 203.195.128.0/17 
+add china 203.196.0.0/21 
+add china 203.196.8.0/21 
+add china 203.196.28.0/22 
+add china 203.201.181.0/24 
+add china 203.201.182.0/24 
+add china 203.202.236.0/22 
+add china 203.205.64.0/19 
+add china 203.205.128.0/17 
+add china 203.207.64.0/20 
+add china 203.207.80.0/21 
+add china 203.207.88.0/22 
+add china 203.207.92.0/22 
+add china 203.207.96.0/20 
+add china 203.207.112.0/20 
+add china 203.207.128.0/18 
+add china 203.207.192.0/21 
+add china 203.207.200.0/21 
+add china 203.207.208.0/20 
+add china 203.207.224.0/19 
+add china 203.208.0.0/20 
+add china 203.208.16.0/22 
+add china 203.208.32.0/19 
+add china 203.209.224.0/19 
+add china 203.212.0.0/20 
+add china 203.212.80.0/20 
+add china 203.215.232.0/21 
+add china 203.217.164.0/22 
+add china 203.222.192.0/20 
+add china 203.223.0.0/20 
+add china 203.223.16.0/21 
+add china 210.2.0.0/20 
+add china 210.2.16.0/20 
+add china 210.5.0.0/19 
+add china 210.5.56.0/21 
+add china 210.5.128.0/20 
+add china 210.5.144.0/20 
+add china 210.7.56.0/22 
+add china 210.7.60.0/22 
+add china 210.12.0.0/18 
+add china 210.12.64.0/18 
+add china 210.12.128.0/18 
+add china 210.12.192.0/18 
+add china 210.13.0.0/18 
+add china 210.13.64.0/18 
+add china 210.13.128.0/17 
+add china 210.14.64.0/19 
+add china 210.14.112.0/20 
+add china 210.14.128.0/19 
+add china 210.14.160.0/19 
+add china 210.14.192.0/19 
+add china 210.14.224.0/19 
+add china 210.15.0.0/19 
+add china 210.15.32.0/19 
+add china 210.15.64.0/19 
+add china 210.15.96.0/19 
+add china 210.15.128.0/18 
+add china 210.16.104.0/22 
+add china 210.16.128.0/18 
+add china 210.21.0.0/17 
+add china 210.21.128.0/17 
+add china 210.22.0.0/16 
+add china 210.23.32.0/19 
+add china 210.25.0.0/16 
+add china 210.26.0.0/15 
+add china 210.28.0.0/14 
+add china 210.32.0.0/14 
+add china 210.36.0.0/14 
+add china 210.40.0.0/13 
+add china 210.51.0.0/16 
+add china 210.52.0.0/18 
+add china 210.52.64.0/18 
+add china 210.52.128.0/17 
+add china 210.53.0.0/17 
+add china 210.53.128.0/17 
+add china 210.56.192.0/19 
+add china 210.72.0.0/17 
+add china 210.72.128.0/19 
+add china 210.72.160.0/19 
+add china 210.72.192.0/18 
+add china 210.73.0.0/19 
+add china 210.73.32.0/19 
+add china 210.73.64.0/18 
+add china 210.73.128.0/17 
+add china 210.74.0.0/19 
+add china 210.74.32.0/19 
+add china 210.74.64.0/19 
+add china 210.74.96.0/19 
+add china 210.74.128.0/19 
+add china 210.74.160.0/19 
+add china 210.74.192.0/18 
+add china 210.75.0.0/16 
+add china 210.76.0.0/19 
+add china 210.76.32.0/19 
+add china 210.76.64.0/18 
+add china 210.76.128.0/17 
+add china 210.77.0.0/16 
+add china 210.78.0.0/19 
+add china 210.78.32.0/19 
+add china 210.78.64.0/18 
+add china 210.78.128.0/19 
+add china 210.78.160.0/19 
+add china 210.78.192.0/18 
+add china 210.79.64.0/18 
+add china 210.79.224.0/19 
+add china 210.82.0.0/15 
+add china 210.87.128.0/20 
+add china 210.87.144.0/20 
+add china 210.87.160.0/19 
+add china 210.185.192.0/18 
+add china 210.192.96.0/19 
+add china 211.64.0.0/14 
+add china 211.68.0.0/15 
+add china 211.70.0.0/15 
+add china 211.80.0.0/16 
+add china 211.81.0.0/16 
+add china 211.82.0.0/16 
+add china 211.83.0.0/16 
+add china 211.84.0.0/15 
+add china 211.86.0.0/15 
+add china 211.88.0.0/16 
+add china 211.89.0.0/16 
+add china 211.90.0.0/15 
+add china 211.92.0.0/15 
+add china 211.94.0.0/15 
+add china 211.96.0.0/15 
+add china 211.98.0.0/16 
+add china 211.99.0.0/18 
+add china 211.99.64.0/19 
+add china 211.99.96.0/19 
+add china 211.99.128.0/17 
+add china 211.100.0.0/16 
+add china 211.101.0.0/18 
+add china 211.101.64.0/18 
+add china 211.101.128.0/17 
+add china 211.102.0.0/16 
+add china 211.103.0.0/17 
+add china 211.103.128.0/17 
+add china 211.136.0.0/14 
+add china 211.140.0.0/15 
+add china 211.142.0.0/17 
+add china 211.142.128.0/17 
+add china 211.143.0.0/16 
+add china 211.144.0.0/15 
+add china 211.146.0.0/16 
+add china 211.147.0.0/16 
+add china 211.148.0.0/14 
+add china 211.152.0.0/15 
+add china 211.154.0.0/16 
+add china 211.155.0.0/18 
+add china 211.155.64.0/19 
+add china 211.155.96.0/19 
+add china 211.155.128.0/17 
+add china 211.156.0.0/14 
+add china 211.160.0.0/14 
+add china 211.164.0.0/14 
+add china 212.64.0.0/17 
+add china 212.129.128.0/17 
+add china 216.250.108.0/22 
+add china 218.0.0.0/16 
+add china 218.1.0.0/16 
+add china 218.2.0.0/15 
+add china 218.4.0.0/15 
+add china 218.6.0.0/16 
+add china 218.7.0.0/16 
+add china 218.8.0.0/15 
+add china 218.10.0.0/16 
+add china 218.11.0.0/16 
+add china 218.12.0.0/16 
+add china 218.13.0.0/16 
+add china 218.14.0.0/15 
+add china 218.16.0.0/14 
+add china 218.20.0.0/16 
+add china 218.21.0.0/17 
+add china 218.21.128.0/17 
+add china 218.22.0.0/15 
+add china 218.24.0.0/15 
+add china 218.26.0.0/16 
+add china 218.27.0.0/16 
+add china 218.28.0.0/15 
+add china 218.30.0.0/15 
+add china 218.56.0.0/14 
+add china 218.60.0.0/15 
+add china 218.62.0.0/17 
+add china 218.62.128.0/17 
+add china 218.63.0.0/16 
+add china 218.64.0.0/15 
+add china 218.66.0.0/16 
+add china 218.67.0.0/17 
+add china 218.67.128.0/17 
+add china 218.68.0.0/15 
+add china 218.70.0.0/15 
+add china 218.72.0.0/14 
+add china 218.76.0.0/15 
+add china 218.78.0.0/15 
+add china 218.80.0.0/14 
+add china 218.84.0.0/14 
+add china 218.88.0.0/13 
+add china 218.96.0.0/15 
+add china 218.98.0.0/17 
+add china 218.98.128.0/18 
+add china 218.98.192.0/19 
+add china 218.98.224.0/19 
+add china 218.99.0.0/16 
+add china 218.100.88.0/21 
+add china 218.100.96.0/19 
+add china 218.100.128.0/17 
+add china 218.104.0.0/17 
+add china 218.104.128.0/19 
+add china 218.104.160.0/19 
+add china 218.104.192.0/21 
+add china 218.104.200.0/21 
+add china 218.104.208.0/20 
+add china 218.104.224.0/19 
+add china 218.105.0.0/16 
+add china 218.106.0.0/15 
+add china 218.108.0.0/16 
+add china 218.109.0.0/16 
+add china 218.185.192.0/19 
+add china 218.185.240.0/21 
+add china 218.192.0.0/16 
+add china 218.193.0.0/16 
+add china 218.194.0.0/16 
+add china 218.195.0.0/16 
+add china 218.196.0.0/14 
+add china 218.200.0.0/14 
+add china 218.204.0.0/15 
+add china 218.206.0.0/15 
+add china 218.240.0.0/14 
+add china 218.244.0.0/15 
+add china 218.246.0.0/15 
+add china 218.249.0.0/16 
+add china 219.72.0.0/16 
+add china 219.82.0.0/16 
+add china 219.83.128.0/17 
+add china 219.90.68.0/22 
+add china 219.90.72.0/22 
+add china 219.90.76.0/22 
+add china 219.128.0.0/12 
+add china 219.144.0.0/14 
+add china 219.148.0.0/16 
+add china 219.149.0.0/17 
+add china 219.149.128.0/18 
+add china 219.149.192.0/18 
+add china 219.150.0.0/19 
+add china 219.150.32.0/19 
+add china 219.150.64.0/19 
+add china 219.150.96.0/20 
+add china 219.150.112.0/20 
+add china 219.150.128.0/17 
+add china 219.151.0.0/19 
+add china 219.151.32.0/19 
+add china 219.151.64.0/18 
+add china 219.151.128.0/17 
+add china 219.152.0.0/15 
+add china 219.154.0.0/15 
+add china 219.156.0.0/15 
+add china 219.158.0.0/17 
+add china 219.158.128.0/17 
+add china 219.159.0.0/18 
+add china 219.159.64.0/18 
+add china 219.159.128.0/17 
+add china 219.216.0.0/15 
+add china 219.218.0.0/15 
+add china 219.220.0.0/16 
+add china 219.221.0.0/16 
+add china 219.222.0.0/15 
+add china 219.224.0.0/15 
+add china 219.226.0.0/16 
+add china 219.227.0.0/16 
+add china 219.228.0.0/15 
+add china 219.230.0.0/15 
+add china 219.232.0.0/14 
+add china 219.236.0.0/15 
+add china 219.238.0.0/15 
+add china 219.242.0.0/15 
+add china 219.244.0.0/14 
+add china 220.101.192.0/18 
+add china 220.112.0.0/14 
+add china 220.152.128.0/17 
+add china 220.154.0.0/15 
+add china 220.158.240.0/22 
+add china 220.160.0.0/11 
+add china 220.192.0.0/15 
+add china 220.194.0.0/15 
+add china 220.196.0.0/14 
+add china 220.200.0.0/13 
+add china 220.231.0.0/18 
+add china 220.231.128.0/17 
+add china 220.232.64.0/18 
+add china 220.234.0.0/16 
+add china 220.242.0.0/15 
+add china 220.247.136.0/21 
+add china 220.248.0.0/14 
+add china 220.252.0.0/16 
+add china 221.0.0.0/15 
+add china 221.2.0.0/16 
+add china 221.3.0.0/17 
+add china 221.3.128.0/17 
+add china 221.4.0.0/16 
+add china 221.5.0.0/17 
+add china 221.5.128.0/17 
+add china 221.6.0.0/16 
+add china 221.7.0.0/19 
+add china 221.7.32.0/19 
+add china 221.7.64.0/19 
+add china 221.7.96.0/19 
+add china 221.7.128.0/17 
+add china 221.8.0.0/15 
+add china 221.10.0.0/16 
+add china 221.11.0.0/17 
+add china 221.11.128.0/18 
+add china 221.11.192.0/19 
+add china 221.11.224.0/19 
+add china 221.12.0.0/17 
+add china 221.12.128.0/18 
+add china 221.13.0.0/18 
+add china 221.13.64.0/19 
+add china 221.13.96.0/19 
+add china 221.13.128.0/17 
+add china 221.14.0.0/15 
+add china 221.122.0.0/15 
+add china 221.128.128.0/17 
+add china 221.129.0.0/16 
+add china 221.130.0.0/15 
+add china 221.133.224.0/19 
+add china 221.136.0.0/16 
+add china 221.137.0.0/16 
+add china 221.172.0.0/14 
+add china 221.176.0.0/13 
+add china 221.192.0.0/15 
+add china 221.194.0.0/16 
+add china 221.195.0.0/16 
+add china 221.196.0.0/15 
+add china 221.198.0.0/16 
+add china 221.199.0.0/19 
+add china 221.199.32.0/20 
+add china 221.199.48.0/20 
+add china 221.199.64.0/18 
+add china 221.199.128.0/18 
+add china 221.199.192.0/20 
+add china 221.199.224.0/19 
+add china 221.200.0.0/14 
+add china 221.204.0.0/15 
+add china 221.206.0.0/16 
+add china 221.207.0.0/18 
+add china 221.207.64.0/18 
+add china 221.207.128.0/17 
+add china 221.208.0.0/14 
+add china 221.212.0.0/16 
+add china 221.213.0.0/16 
+add china 221.214.0.0/15 
+add china 221.216.0.0/13 
+add china 221.224.0.0/13 
+add china 221.232.0.0/14 
+add china 221.236.0.0/15 
+add china 221.238.0.0/16 
+add china 221.239.0.0/17 
+add china 221.239.128.0/17 
+add china 222.16.0.0/15 
+add china 222.18.0.0/15 
+add china 222.20.0.0/15 
+add china 222.22.0.0/16 
+add china 222.23.0.0/16 
+add china 222.24.0.0/15 
+add china 222.26.0.0/15 
+add china 222.28.0.0/14 
+add china 222.32.0.0/11 
+add china 222.64.0.0/13 
+add china 222.72.0.0/15 
+add china 222.74.0.0/16 
+add china 222.75.0.0/16 
+add china 222.76.0.0/14 
+add china 222.80.0.0/15 
+add china 222.82.0.0/16 
+add china 222.83.0.0/17 
+add china 222.83.128.0/17 
+add china 222.84.0.0/16 
+add china 222.85.0.0/17 
+add china 222.85.128.0/17 
+add china 222.86.0.0/15 
+add china 222.88.0.0/15 
+add china 222.90.0.0/15 
+add china 222.92.0.0/14 
+add china 222.125.0.0/16 
+add china 222.126.128.0/17 
+add china 222.128.0.0/14 
+add china 222.132.0.0/14 
+add china 222.136.0.0/13 
+add china 222.160.0.0/15 
+add china 222.162.0.0/16 
+add china 222.163.0.0/19 
+add china 222.163.32.0/19 
+add china 222.163.64.0/18 
+add china 222.163.128.0/17 
+add china 222.168.0.0/15 
+add china 222.170.0.0/15 
+add china 222.172.0.0/17 
+add china 222.172.128.0/17 
+add china 222.173.0.0/16 
+add china 222.174.0.0/15 
+add china 222.176.0.0/13 
+add china 222.184.0.0/13 
+add china 222.192.0.0/14 
+add china 222.196.0.0/15 
+add china 222.198.0.0/16 
+add china 222.199.0.0/16 
+add china 222.200.0.0/14 
+add china 222.204.0.0/15 
+add china 222.206.0.0/15 
+add china 222.208.0.0/13 
+add china 222.216.0.0/15 
+add china 222.218.0.0/16 
+add china 222.219.0.0/16 
+add china 222.220.0.0/15 
+add china 222.222.0.0/15 
+add china 222.240.0.0/13 
+add china 222.248.0.0/16 
+add china 222.249.0.0/17 
+add china 222.249.128.0/19 
+add china 222.249.160.0/20 
+add china 222.249.176.0/20 
+add china 222.249.192.0/18 
+add china 223.0.0.0/15 
+add china 223.2.0.0/15 
+add china 223.4.0.0/14 
+add china 223.8.0.0/13 
+add china 223.20.0.0/15 
+add china 223.27.184.0/22 
+add china 223.29.208.0/22 
+add china 223.29.252.0/22 
+add china 223.64.0.0/11 
+add china 223.96.0.0/12 
+add china 223.112.0.0/14 
+add china 223.116.0.0/15 
+add china 223.120.128.0/17 
+add china 223.121.128.0/17 
+add china 223.122.0.0/15 
+add china 223.124.0.0/14 
+add china 223.128.0.0/15 
+add china 223.144.0.0/12 
+add china 223.160.0.0/14 
+add china 223.166.0.0/15 
+add china 223.192.0.0/15 
+add china 223.198.0.0/15 
+add china 223.201.0.0/16 
+add china 223.202.0.0/15 
+add china 223.208.0.0/14 
+add china 223.212.0.0/15 
+add china 223.214.0.0/15 
+add china 223.220.0.0/15 
+add china 223.223.176.0/20 
+add china 223.223.192.0/20 
+add china 223.240.0.0/13 
+add china 223.248.0.0/14 
+add china 223.252.128.0/17 
+add china 223.254.0.0/16 
+add china 223.255.0.0/17 
+add china 223.255.236.0/22 
+add china 223.255.252.0/23 
diff --git a/package/lean/ipset-lists/files/etc/ipset/local b/package/lean/ipset-lists/files/etc/ipset/local
new file mode 100755
index 0000000000..9c1df02ce7
--- /dev/null
+++ b/package/lean/ipset-lists/files/etc/ipset/local
@@ -0,0 +1,6 @@
+create local hash:net family inet hashsize 1024 maxelem 65536
+add local 10.0.0.0/8
+add local 127.0.0.0/8
+add local 172.16.0.0/12
+add local 192.168.0.0/16
+add local 224.0.0.0/3
diff --git a/package/lean/ipset-lists/po/zh_CN/gfwlist.po b/package/lean/ipset-lists/po/zh_CN/gfwlist.po
new file mode 100644
index 0000000000..7ce2c1e8d6
--- /dev/null
+++ b/package/lean/ipset-lists/po/zh_CN/gfwlist.po
@@ -0,0 +1,9 @@
+msgid ""
+msgstr "Content-Type: text/plain; charset=UTF-8"
+
+msgid "Domain Lists Settings"
+msgstr "域名列表设置"
+
+msgid "Domain Lists"
+msgstr "域名列表"
+
diff --git a/package/lean/ipset-lists/tools/Makefile b/package/lean/ipset-lists/tools/Makefile
new file mode 100644
index 0000000000..f415b20529
--- /dev/null
+++ b/package/lean/ipset-lists/tools/Makefile
@@ -0,0 +1,3 @@
+update:
+	./gen-china-routes.sh > ../files/etc/ipset/china
+	./gen-gfwlist.sh > ../files/etc/gfwlist/china-banned
diff --git a/package/lean/ipset-lists/tools/base-gfwlist.txt b/package/lean/ipset-lists/tools/base-gfwlist.txt
new file mode 100644
index 0000000000..75277f6c01
--- /dev/null
+++ b/package/lean/ipset-lists/tools/base-gfwlist.txt
@@ -0,0 +1,2941 @@
+0rz.tw
+0to255.com
+10musume.com
+123rf.com
+12bet.com
+12vpn.com
+141hongkong.com
+173ng.com
+1984bbs.com
+1984bbs.org
+1-apple.com.tw
+1bao.org
+1eew.com
+1pondo.tv
+2000fun.com
+2008xianzhang.info
+21andy.com
+247realmedia.com
+24smile.org
+2-hand.info
+2mdn.net
+2shared.com
+301works.org
+315lz.com
+32red.com
+365singles.com.ar
+36rain.com
+4bluestones.biz
+4chan.org
+4pppc.gov.tw
+4shared.com
+4sq.com
+51.ca
+5i01.com
+5maodang.com
+64tianwang.com
+64wiki.com
+666kb.com
+6park.com
+7capture.com
+881903.com
+888.com
+89-64.org
+9001700.com
+91porn.com
+921.gov.tw
+92ccav.com
+9bis.com
+9bis.net
+9city.me
+a5.com.ru
+abc.pp.ru
+abitno.linpie.com
+ablwang.com
+aboluowang.com
+aboutgfw.com
+acgkj.com
+ac.jiruan.net
+ac.playstation.net
+actimes.com.au
+aculo.us
+ad1.nownews.com
+addictedtocoffee.de
+ads.backchina.com
+adultfriendfinder.com
+adultkeep.net
+advanscene.com
+advertfan.com
+aec.gov.tw
+aenhancers.com
+af.mil
+aftygh.gov.tw
+aide.gov.tw
+aiph.net
+aisex.com
+ait.org.tw
+aiweiweiblog.com
+aiweiwei.com
+ajaxplorer.info
+akamaihd.net
+akiba-online.com
+alabout.com
+alasbarricadas.org
+alexlur.org
+aliengu.com
+aliyun.com
+alkasir.com
+allaboutalpha.com
+allgirlsallowed.org
+alliance.org.hk
+allinfa.com
+allinfo.com
+allmovie.com
+allonlinux.free.fr
+all-that-is-interesting.com
+al-qimmah.net
+alternate-tools.com
+altrec.com
+alvinalexander.com
+alwaysdata.com
+alwaysdata.net
+am730.com.hk
+amazonaws.com
+ameblo.jp
+americangreencard.com
+amiblockedornot.com
+amnesty.org
+amnestyusa.org
+amoiist.com
+amzs.me
+analyze-v.com
+anchorfree.com
+andfaraway.net
+android.com
+angularjs.org
+animecrazy.net
+anobii.com
+anontext.com
+anonymizer.com
+a-normal-day.com
+answering-islam.org
+anthonycalzadilla.com
+anti.anti.cnn.googlepages.com
+antidrm.hpg.ig.com.br
+antiwave.net
+aobo.com.au
+aolchannels.aol.com
+aomiwang.com
+apetube.com
+apiary.io
+apidocs.linksalpha.com
+apigee.com
+api.linksalpha.com
+api.proxlet.com
+api.supertweet.net
+app.heywire.com
+app.hkatvnews.com
+appledaily.com
+appledaily.com.tw
+apps.hloli.net
+appspot.com
+archive.is
+archive.org
+arctosia.com
+areca-backup.org
+army.mil
+arte.gov.tw
+art-or-porn.com
+artsy.net
+asahichinese.com
+asdfg.jp
+asiafriendfinder.com
+asiaharvest.org
+asianews.it
+asianwomensfilm.de
+askstudent.com
+askynz.net
+assembla.com
+astonmartinnews.com
+atchinese.com
+atc.org.au
+atgfw.org
+atj.org.tw
+atlaspost.com
+atnext.com
+autoproxy.org
+avaaz.org
+avdb.in
+avidemux.org
+avoision.com
+awardwinningfjords.com
+axureformac.com
+babynet.com.hk
+backchina.com
+backpackers.com.tw
+badassjs.com
+badoo.com
+baidu.jp
+baixing.me
+bannedbook.org
+barnabu.co.uk
+basetimesheightdividedby2.com
+bayvoice.net
+bbcchinese.com
+bbc.com
+bbc.co.uk
+bbci.co.uk
+bbcimg.co.uk
+bbc.in
+bbg.gov
+bbs2.newsgroup.la
+bbs.ecstart.com
+bbsfeed.com
+bbs.kimy.com.tw
+bbsland.com
+bbs.morbell.com
+bbs.mychat.to
+bbs.newsgroup.la
+bbs.ozchinese.com
+bbs.qmzdd.com
+bbs.sina.com
+bbs.skykiwi.com
+bbs.tuitui.info
+bb.ttv.com.tw
+bcc.com.tw
+bcchinese.net
+bdhr.gov.tw
+bd.zhe.la
+bebo.com
+beeg.com
+beijing1989.com
+beijingspring.com
+benjaminste.in
+berlintwitterwall.com
+bestforchina.org
+bestvpnservice.com
+bet365.com
+beta.iset.com.tw
+beta.usejump.com
+betfair.com
+bettween.com
+betvictor.com
+bewww.net
+beyondfirewall.com
+bfnn.org
+biantailajiao.com
+biantailajiao.in
+bigfools.com
+bignews.org
+bigsound.org
+bill2-software.com
+billywr.com
+bill.zhong.pp.ru
+bipic.net
+bitcointalk.org
+bit.ly
+bitly.com
+bitshare.com
+bjzc.org
+blinkx.com
+blinw.com
+blip.tv
+blockcn.com
+blog.birdhouseapp.com
+blog.bitly.com
+blogblog.com
+blog.boxcar.io
+blogcatalog.com
+blog.davidziegler.net
+blog.dayoneapp.com
+blog.de
+blog.dribbble.com
+blog.exblog.co.jp
+blog.expofutures.com
+blog.fizzik.com
+blog.foolsmountain.com
+blogger.com
+blog.gowalla.com
+blog.hotpotato.com
+blog.ifttt.com
+blogimg.jp
+blog.instagram.com
+blog.instapaper.com
+blog.iphone-dev.org
+blog.istef.info
+blog.jackjia.com
+blog.joeyrobert.org
+blog.kangye.org
+blog.kickstarter.com
+blog.kl.am
+blog.klip.me
+blog.lester850.info
+blog.lightbox.com
+bloglines.com
+bloglovin.com
+blog.mongodb.org
+blog.openinkpot.org
+blog.palm.com
+blog.path.com
+blog.pathtosharepoint.com
+blog.pchome.com.tw
+blog.pentalogic.net
+blog.pikchur.com
+blog.pilotmoon.com
+blog.redren.com
+blog.rockmelt.com
+blog.romanandreg.com
+blog.s135.com
+blogs.icerocket.com
+blog.sina.com.tw
+blog.sogoo.org
+blog.sparrowmailapp.com
+blogspot.com
+blogspot.co.uk
+blogspot.de
+blogspot.fr
+blogspot.in
+blogspot.jp
+blogs.tampabay.com
+blog.summify.com
+blogs.yahoo.co.jp
+blog.syx86.cn
+blog.syx86.com
+blog.taragana.com
+blogtd.net
+blogtd.org
+blog.tiney.com
+blog.topify.com
+blog.usa.gov
+blog.xuite.net
+blog.youthwant.com.tw
+blog.youxu.info
+bloodshed.net
+bloomberg.cn
+bloomberg.com
+bloomberg.de
+bloomfortune.com
+bmediaasia.com
+bnrmetal.com
+boardreader.com
+bobulate.com
+bolin.netfirms.com
+bonbonme.com
+bonjourlesgeeks.com
+boobstagram.com
+books.com.tw
+bookshelfporn.com
+botanwang.com
+bot.nu
+bowenpress.com
+boxunblog.com
+boxunclub.com
+boxun.com
+boxun.tv
+bralio.com
+branch.com
+brandonhutchinson.com
+braumeister.org
+break.com
+breakingtweets.com
+briefdream.com
+brightcove.com
+brightkite.com
+brizzly.com
+broadbook.com
+br.st
+brucewang.net
+bt95.com
+btdigg.org
+btrd.net
+budaedu.org
+bugclub.org
+builtwithbootstrap.com
+bullogger.com
+bullog.org
+businesstimes.com.cn
+businessweek.com
+buugaa.com
+buy.yahoo.com.tw
+buzzurl.jp
+bwbx.io
+bwsj.hk
+bx.tl
+c1522.mooo.com
+cacnw.com
+cactusvpn.com
+cafepress.com
+cahr.org.tw
+calameo.com
+calebelston.com
+cams.com
+cams.org.sg
+canadameet.com
+canyu.org
+caobian.info
+caochangqing.com
+cao.im
+cari.com.my
+catch22.net
+catfightpayperview.xxx
+catholic.org.hk
+catholic.org.tw
+cbs.ntu.edu.tw
+cc9007.spaces.live.com
+ccavtop10.com
+ccdtr.org
+ccim.org
+cclife.org
+ccthere.com
+cctongbao.com
+ccue.ca
+ccue.com
+cdig.info
+cdjp.org
+cdnews.com.tw
+cdn.printfriendly.com
+cdp1998.org
+cdp2006.org
+cdp.sinica.edu.tw
+cdpusa.org
+cdpweb.org
+cdpwu.org
+cdw.com
+cecc.gov
+cellulo.info
+cenci.tk
+cenews.eu
+centralnation.com
+centurys.net
+c-est-simple.com
+cfhks.org.hk
+cftfc.com
+cgdepot.org
+chandoo.org
+change.org
+changp.com
+chaos.e-spacy.com
+chapm25.com
+chartbeat.net
+chaturbate.com
+chccc.gov.tw
+chengmingmag.com
+chenguangcheng.com
+chenpokong.com
+chenyehao.spaces.live.com
+cherrysave.com
+chevronwp7.com
+chicagoncmtv.com
+china101.com
+china21.com
+china21.org
+china5000.us
+chinaaffairs.org
+chinaaid.me
+chinaaid.net
+chinaaid.org
+chinaaid.us
+chinachange.org
+chinachannel.hk
+chinacomments.org
+chinadigitaltimes.net
+chinaeweekly.com
+chinafreepress.org
+chinagate.com
+chinageeks.org
+chinagfw.org
+chinagreenparty.org
+china-green-party.spaces.live.com
+chinahush.com
+chinainperspective.com
+chinainperspective.net
+chinainperspective.org
+chinainterimgov.org
+chinalawandpolicy.com
+chinalawtranslate.com
+chinamule.com
+chinamz.org
+chinarightsia.org
+chinasocialdemocraticparty.com
+chinaso.com
+chinasoul.org
+chinatimes.com
+chinatweeps.com
+chinaway.org
+china-week.com
+chinaworker.info
+chinaxchina.com
+chinayouth.org.hk
+chinayuanmin.org
+chinesedailynews.com
+chinese.engadget.com
+chinese-hermit.net
+chinese-memorial.org
+chinesen.de
+chinesenewsnet.com
+chinesepen.org
+chinese.rnw.nl
+chinese.soifind.com
+chinesetalks.net
+chinese.wsj.com
+chingcheong.com
+chn.chosun.com
+chrispederick.com
+chrispederick.net
+christianstudy.com
+christiantimes.org.hk
+christusrex.org
+chrlawyers.hk
+chrlcg-hk.org
+chromeadblock.com
+chrome.com
+ch.shvoong.com
+chubun.com
+chuizi.net
+chukuang.gov.tw
+circlethebayfortibet.org
+citizenlab.org
+citizensradio.org
+city9x.com
+civicparty.hk
+civilhrfront.org
+civilmedia.tw
+cjb.net
+ck101.com
+classicalguitarblog.net
+clb.org.hk
+cl.d0z.net
+clientsfromhell.net
+clipfish.de
+cl.ly
+cloudfront.net
+club.backchina.com
+cms.gov
+cmule.com
+cn2.streetvoice.com
+cna.com.tw
+cnavista.com.tw
+cn.calameo.com
+cn.dayabook.com
+cnd.org
+cn.fmnnow.com
+cn.ibtimes.com
+cnn.com
+cn.news.cnyes.com
+cn.streetvoice.com
+cn.uncyclopedia.wikia.com
+cn.voa.mobi
+cochina.org
+cocoapods.org
+cocoa.zonble.net
+code1984.com
+codeboxapp.com
+codeshare.io
+collateralmurder.com
+collateralmurder.org
+comefromchina.com
+comnews.gio.gov.tw
+compileheart.com
+connectedchina.reuters.com
+connect.facebook.net
+conoyo.com
+contactmagazine.net
+contests.twilio.com
+conviva.com
+cookingtothegoodlife.com
+coolaler.com
+coolder.com
+coolloud.org.tw
+corpus4u.org
+corumcollege.com
+cotweet.com
+couchdbwiki.com
+coveringweb.com
+cp-house.gov.tw
+cpj.org
+crackle.com
+crd-net.org
+creaders.net
+cromotc.nat.gov.tw
+crossthewall.net
+csdparty.com
+c-spanvideo.org
+css.pixnet.in
+csuchen.de
+cts.com.tw
+cubicle17.com
+cuhkacs.org
+cuihua.org
+cuiweiping.net
+culture.tw
+curvefish.com
+cwb.gov.tw
+cyanogenmod.org
+cyberghost.natado.com
+cyberghostvpn.com
+cycab.gov.tw
+cydia.ifuckgfw.com
+cynscribe.com
+cytode.us
+dabr.co.uk
+dabr.me
+dabr.mobi
+dadazim.com
+dadi360.com
+dafagood.com
+dafahao.com
+dailidaili.com
+dailymotion.com
+dailynews.sina.com
+dajiyuan.com
+dajiyuan.eu
+dajusha.baywords.com
+dalailama.com
+dalailama.ru
+dalailamaworld.com
+dalianmeng.org
+danke4china.net
+danwei.org
+daolan.net
+dapu-house.gov.tw
+darpa.mil
+date.fm
+davidslog.com
+daxa.cn
+dayaarmongol.ning.com
+daylife.com
+ddc.com.tw
+deck.ly
+default.secureserver.net
+delcamp.net
+delicious.com
+democrats.org
+demo.opera-mini.net
+derekhsu.homeip.net
+de-sci.org
+designerol.com
+destiny.xfiles.to
+deutsche-welle.de
+dev102.com
+developers.box.net
+deviantart.com
+deviantart.net
+devio.us
+devpn.com
+dfas.mil
+df.gov.tw
+diaoyuislands.org
+digitalnomadsproject.org
+diigo.com
+dimitrik.free.fr
+dipity.com
+directcreative.com
+discuss.com.hk
+disp.cc
+dit-inc.us
+dizhidizhi.com
+djangosnippets.org
+dl.box.net
+dl-laby.jp
+dl.playstation.net
+dlsite.com
+dmcdn.net
+dmtip.gov.tw
+dns2go.com
+dnscrypt.org
+docstoc.com
+dojin.com
+dok-forum.net
+dolc.de
+dollf.com
+domain.club.tw
+domainhelp.search.com
+dongde.com
+dongtaiwang.com
+dongtaiwang.net
+dongyangjing.com
+dontfilter.us
+dontmovetochina.com
+dotheyfolloweachother.com
+dotplane.com
+dotsub.com
+doubleaf.com
+doubleclick.net
+dougscripts.com
+dowei.org
+download.syniumsoftware.com
+doxygen.org
+dphk.org
+dpp.org.tw
+drewolanoff.com
+drgan.net
+dropbox.com
+dropboxusercontent.com
+drsunacademy.com
+drtuber.com
+dscn.info
+dtiblog.com
+dtic.mil
+dtiserv2.com
+duckduckgo.com
+duckload.com
+duckmylife.com
+duihuahrjournal.org
+duihua.org
+duoweitimes.com
+duping.net
+duplicati.com
+dupola.com
+dupola.net
+dvorak.org
+dw.de
+dwnews.com
+dwnews.net
+dw-world.com
+dw-world.de
+dy24k.info
+dynawebinc.com
+dyndns.org
+dzze.com
+e123.hk
+eamonnbrennan.com
+earthquake.usgs.gov
+easy-share.com
+ebookbrowse.com
+ebookee.com
+echofon.com
+ecministry.net
+edicypages.com
+edoors.com
+edubridge.com
+eevpn.com
+efcc.org.hk
+efksoft.com
+efmoe.com
+e-gold.com
+eic-av.com
+e-info.org.tw
+electionsmeter.com
+elpais.com
+eltondisney.com
+emacsblog.org
+embr.in
+emory.edu
+emule-ed2k.com
+emuparadise.me
+enewstree.com
+en.favotter.net
+englishfromengland.co.uk
+entermap.com
+en.wikipedia.org
+epochtimes-bg.com
+epochtimes.co.il
+epochtimes.co.kr
+epochtimes.com
+epochtimes.de
+epochtimes.fr
+epochtimes.ie
+epochtimes.jp
+epochtimes-romania.com
+epochtimes.ru
+epochtimes.se
+epochtimestr.com
+epochweekly.com
+erabaru.net
+erepublik.com
+erepublik.net
+erights.net
+eriversoft.com
+ernestmandel.org
+etaiwannews.com
+etizer.org
+etools.ncol.com
+e-traderland.net
+etraining.gov.tw
+ettoday.net
+evchk.wikia.com
+eventful.com
+everyday-carry.com
+exblog.jp
+expatshield.com
+exploader.net
+extremetube.com
+eyespirit.info
+eyevio.jp
+eyny.com
+ezpc.tk
+ezpeer.com
+facebook.com
+facebook.net
+facesofnyfw.com
+fail.hk
+faiththedog.info
+fakku.net
+falsefire.com
+falunart.org
+falundafamuseum.org
+falundafa.org
+falunhr.org
+famunion.com
+fangbinxing.com
+fangeming.com
+fanglizhi.info
+fangongheike.com
+fangong.org
+fan-qiang.com
+fanqianghou.com
+fanqiangyakexi.net
+fanswong.com
+fanyue.info
+fapdu.com
+farwestchina.com
+farxian.com
+fastpic.ru
+faststone.org
+favorious.com
+favstar.fm
+fawanghuihui.org
+faydao.com
+fbcdn.net
+fb.com
+fb.me
+fbsbx.com
+fc2china.com
+fc2.com
+f.cl.ly
+fdc89.jp
+feedbooks.mobi
+feedburner.com
+feeds2.feedburner.com
+feeds.feedburner.com
+feedzshare.com
+feelssh.com
+feer.com
+felixcat.net
+feministteacher.com
+fengzhenghu.com
+fetchvideo.com
+ff.im
+fflick.com
+fgmtv.net
+fgmtv.org
+filefactory.com
+files2me.com
+fileserve.com
+fillthesquare.org
+finalion.jp
+findbook.tw
+finler.net
+fireofliberty.org
+firstfivefollowers.com
+flecheinthepeche.fr
+fleshbot.com
+flickr.com
+flickrhivemind.net
+flightcaster.com
+flowerofhappiness.spaces.live.com
+focustaiwan.tw
+focusvpn.com
+fofg.org
+fooooo.com
+footwiball.com
+forum.baby-kingdom.com
+forum.cyberctm.com
+forum.idsam.com
+forum.iset.com.tw
+forum.my903.com
+forum.mymaji.com
+forum.newsgroup.la
+forum.nownews.com
+forum.omy.sg
+forum.palmislife.com
+forum.pchome.com.tw
+forum.setty.com.tw
+forum.sina.com.hk
+forum.slime.com.tw
+forum.tvb.com
+forum.yorkbbs.ca
+fotop.net
+fourface.nodesnoop.com
+fourthinternational.org
+foxdie.us
+foxsub.com
+foxtang.com
+fqrouter.com
+franklc.com
+freakshare.com
+fredwilson.vc
+free4u.com.ar
+freealim.com
+freechal.com
+freedomhouse.org
+free.fr
+freegao.com
+freegateget.googlepages.com
+free-gate.org
+free-hada-now.org
+freelotto.com
+freeman2.com
+freemoren.com
+freemorenews.com
+freenet-china.org
+freenetproject.org
+freenewscn.com
+freeopenvpn.com
+freeoz.org
+free-ssh.com
+freessh.us
+freetibet.org
+freevpn.nl
+freewallpaper4.me
+freewebs.com
+freeweibo.com
+freexinwen.com
+freeyoutubeproxy.net
+friendfeed.com
+friendfeed-media.com
+fring.com
+fringenetwork.com
+frommel.net
+frontlinedefenders.org
+fscked.org
+fsurf.com
+ftchinese.com
+fuckcnnic.net
+fuckgfw.com
+fuckgfw.org
+fulue.com
+funf.tw
+funp.com
+furinkan.com
+furl.net
+futurechinaforum.org
+futureme.org
+futuremessage.org
+fuyin.net
+fw.cm
+fxnetworks.com
+fzh999.com
+fzh999.net
+gabocorp.com
+gaeproxy.com
+gaeproxy.googlecode.com
+galenwu.com
+game735.com
+gamebase.com.tw
+gamer.com.tw
+gamez.com.tw
+ganges.com
+gaoming.net
+gaopi.net
+gaozhisheng.net
+gaozhisheng.org
+gardennetworks.com
+gardennetworks.org
+gartlive.com
+gather.com
+gaymap.cc
+gazotube.com
+gcc.org.hk
+gclooney.com
+g.co
+gcpnews.com
+gdbt.net
+gdzf.org
+geek-art.net
+geekerhome.com
+geekmade.co.uk
+geekmanuals.com
+generesis.com
+genuitec.com
+geocities.co.jp
+geocities.com
+geocities.jp
+geohot.com
+geometrictools.com
+getchu.com
+getcloudapp.com
+get-digital-help.com
+getfoxyproxy.org
+getfreedur.com
+getiton.com
+getjetso.com
+getlantern.org
+getsmartlinks.com
+getsocialscope.com
+gfwinterceptor.googlecode.com
+gfw.org.ua
+ggpht.com
+ggssl.com
+ghost.org
+ghut.org
+giga-web.jp
+gigporno.ru
+gimpshop.com
+girlbanker.com
+github.com
+git-scm.com
+givemesomethingtoread.com
+glennhilton.com
+globaljihad.net
+globalmuseumoncommunism.org
+globalrescue.net
+globalvoicesonline.org
+gmail.com
+gmbd.cn
+gmhz.org
+gmodules.com
+gmozomg.izihost.org
+gnci.org.hk
+goagent.biz
+goagent.googlecode.com
+goagentplus.com
+godfootsteps.org
+golang.org
+goldbetsports.com
+goldwave.com
+gongmeng.info
+gongm.in
+gongminliliang.com
+gongwt.com
+goodreaders.com
+goodreads.com
+goofind.com
+goo.gl
+googleadservices.com
+google-analytics.com
+googleapis.com
+googlecode.com
+google.co.jp
+google.com
+google.com.hk
+google.com.sg
+google.com.tw
+google.com.uk
+googledomains.com
+googledrive.com
+googleearth.com
+googlehosted.com
+googlelabs.com
+googlemail.com
+googleplus.com
+googlesile.com
+googlesource.com
+googlesyndication.com
+googletagmanager.com
+googletagservices.com
+googleusercontent.com
+googlevideo.com
+gopetition.com
+gospelherald.com
+gov.tw
+gpass1.com
+grandtrial.org
+graphis.ne.jp
+gravatar.com
+graylog2.org
+grb.gov.tw
+greatfire.org
+greatfirewall.biz
+great-firewall.com
+greatfirewallofchina.net
+greatfirewallofchina.org
+great-roc.org
+greatroc.org
+greatroc.tw
+greatzhonghua.org
+greenparty.org.tw
+greenvpn.net
+gs-discuss.com
+gseeker.com
+gsn-cert.nat.gov.tw
+gstatic.com
+gtap.googlecode.com
+gtricks.com
+guancha.org
+gufeng521.spaces.live.com
+guishan.org
+gunsamerica.com
+gun-world.net
+guomin.us
+gutteruncensored.com
+gvm.com.tw
+gyalwarinpoche.com
+gysd.nyc.gov.tw
+gzm.tv
+gzone-anime.info
+h1n1china.org
+hacken.cc
+hackthatphone.net
+hahlo.com
+hakkatv.org.tw
+hanunyi.com
+hardsextube.com
+hasaowall.com
+have8.com
+haygo.com
+hcc.gov.tw
+hchcc.gov.tw
+h-china.org
+hdtvb.net
+heartyit.com
+hecaitou.net
+hechaji.com
+heix.pp.ru
+heiyo.info
+helloandroid.com
+hellonewyork.us
+helloqueer.com
+hellotxt.com
+hellouk.org
+helpeachpeople.com
+helplinfen.com
+help.linksalpha.com
+help.opera.com
+helpzhuling.org
+hen.bao.li
+hengchuen.gov.tw
+heqinglian.net
+here4news.com
+heungkongdiscuss.com
+hgseav.com
+hidden-advent.org
+hidecloud.com
+hideipvpn.com
+hidemyass.com
+higfw.com
+highrockmedia.com
+hihiforum.com
+hihistory.net
+hiitch.com
+hikinggfw.org
+himemix.com
+himemix.net
+hjclub.info
+hk32168.com
+hkbc.net
+hkbf.org
+hkchurch.org
+hkdailynews.com.hk
+hkday.net
+hkej.com
+hkepc.com
+hkfront.org
+hk.geocities.com
+hkgolden.com
+hkgreenradio.org
+hkg.westkit.net
+hkheadline.com
+hkhkhk.com
+hkjc.com
+hk.jiepang.com
+hkjp.easyweb.hk
+hkjp.org
+hk.knowledge.yahoo.com
+hk.myblog.yahoo.com
+hk.news.yahoo.com
+hkptu.org
+hk-pub.com
+hk.rd.yahoo.com
+hkreporter.com
+hkreporter.loved.hk
+hk.search.yahoo.com
+hk.video.news.yahoo.com
+hkwcc.org.hk
+hk.yahoo.com
+hkzone.org
+hnjhj.com
+hola.com
+holyspiritspeaks.org
+holz.byethost8.com
+homeservershow.com
+home.sina.com
+home.so-net.net.tw
+honeonet.spaces.live.com
+hongmeimei.com
+hongzhi.li
+hootsuite.com
+hotpot.hk
+hotshame.com
+hotspotshield.com
+hougaige.com
+howtoforge.com
+hqcdp.org
+hrcir.com
+hrichina.org
+hrw.org
+hsinchu-cc.gov.tw
+hsjp.net
+hsselite.com
+htkou.net
+htl.li
+ht.ly
+htmldog.com
+huaglad.com
+huajiadi.spaces.live.com
+huanghuagang.org
+huaren.us
+huaxia-news.com
+huaxin.ph
+hua-yue.net
+hudatoriq.web.id
+hugoroy.eu
+huhamhire.com
+hujiachina.spaces.live.com
+hulu.com
+huluim.com
+humanities.uchicago.edu
+hungerstrikeforaids.org
+hung-ya.com
+huping.net
+hutianyi.net
+hutong9.net
+hwinfo.com
+hyperrate.com
+hypeshell.com
+i1.hk
+i2runner.com
+ialmostlaugh.com
+iask.bz
+iask.ca
+ibiblio.org
+iblogserv-f.net
+ibros.org
+icij.org
+icl-fi.org
+iconpaper.org
+icu-project.org
+idemocracy.asia
+identi.ca
+idiomconnection.com
+idouga.com
+idv.tw
+ieasynews.net
+ied2k.net
+ieemdai.spaces.live.com
+ifan.cz.cc
+ifanqiang.com
+ifanr.com
+ifcss.org
+ifjc.org
+igfw.net
+ignitedetroit.net
+igvita.com
+ihakka.net
+iicns.com
+illusionfactory.com
+ilove80.be
+im88.tw
+imageflea.com
+imagesblog.gio.gov.tw
+imageshack.us
+imagevenue.com
+imagezilla.net
+ime.baidu.jp
+img.ly
+imkev.com
+imlive.com
+immigration.gov.tw
+imrworldwide.com
+im.tv
+incredibox.fr
+iner.gov.tw
+initiativesforchina.org
+inmediahk.net
+innermongolia.org
+instagram.com
+interestinglaugh.com
+interfaceaddiction.com
+internationalrivers.org
+internetdefenseleague.org
+internetfreedom.org
+internetpopculture.com
+inxian.com
+iphone4hongkong.com
+iphonehacks.com
+iphonix.fr
+ipicture.ru
+ipobar.com
+ippotv.com
+iptorrents.com
+ipvanish.com
+iredmail.org
+ironbigfools.compython.net
+ironicsoftware.com
+ironpython.net
+isaacmao.com
+isgreat.org
+islamicity.com
+islam.org.hk
+ismprofessional.net
+isohunt.com
+israbox.com
+istockphoto.com
+isunaffairs.com
+isuntv.com
+itaboo.info
+ithelp.ithome.com.tw
+itrc.gov.tw
+itshidden.com
+itweet.net
+iu45.com
+iverycd.com
+ixquick.com
+izaobao.us
+izles.net
+japan-whores.com
+jayparkinsonmd.com
+jbtalks.cc
+jbtalks.com
+jbtalks.my
+jeanyim.com
+jgoodies.com
+jiaoyou8.com
+jiehua.cz
+jieshibaobao.com
+jike.com
+jimoparty.com
+jinbushe.org
+jingpin.org
+jitouch.com
+jkforum.net
+j.mp
+joachims.org
+jobso.tv
+joeedelman.com
+journalofdemocracy.org
+jpopforum.net
+juliereyc.com
+junauza.com
+junefourth-20.net
+justfreevpn.com
+justtristan.com
+juziyue.com
+jwmusic.org
+jyxf.net
+jyzj.waqn.com
+k2.xrea.com
+kagyuoffice.org.tw
+kaiyuan.de
+kakao.com
+kanzhongguo.com
+kanzhongguo.eu
+karayou.com
+ka-wai.com
+kcsoftwares.com
+kechara.com
+keepandshare.com
+kendincos.net
+kenengba.com
+keontech.net
+khcc.gov.tw
+khms.gov.tw
+khmusic.com.tw
+killwall.com
+kineox.free.fr
+kingdomsalvation.org
+kinghost.com
+kingstone.com.tw
+kissbbao.cn
+kissyoutube.com
+kk.gov.tw
+klccab.gov.tw
+klra.gov.tw
+klsio.gov.tw
+kmh.gov.tw
+kmseh.gov.tw
+knowledgerush.com
+kodingen.com
+kompozer.net
+koolsolutions.com
+koornk.com
+kt.kcome.org
+kui.name
+kun.im
+kurtmunger.com
+kusocity.com
+kwongwah.com.my
+kyohk.net
+kzeng.info
+labiennale.org
+ladbrokes.com
+la-forum.org
+lagranepoca.com
+lalulalu.com
+laogai.org
+laomiu.com
+laoyang.info
+laptoplockdown.com
+laqingdan.net
+larsgeorge.com
+lastfm.es
+latelinenews.com
+latimesblogs.latimes.com
+lazarsearlymusic.com
+leecheukyan.org
+legaltech.law.com
+lematin.ch
+lemonde.fr
+lenwhite.com
+lerosua.org
+lesoir.be
+lesscss.org
+letscorp.net
+liansi.org
+lianyue.net
+liaowangxizang.net
+liberal.org.hk
+libertytimes.com.tw
+lich355.megabyet.net
+lidecheng.com
+life.fly4ever.me
+limiao.net
+line.me
+linglingfa.com
+lingvodics.com
+linkideo.com
+linuxconfig.org
+linux-engineer.net
+linuxreviews.org
+linuxtoy.org
+lipuman.com
+listentoyoutube.com
+list.ly
+listorious.com
+lists.debian.org
+lists.w3.org
+littlebigdetails.com
+liudejun.com
+liuhanyu.com
+liujianshu.com
+liu.lu
+liuxiaotong.com
+liveleak.com
+livestation.com
+livestream.com
+livevideo.com
+livingonline.us
+livingstream.com
+lizhizhuangbi.com
+lkcn.net
+localpresshk.com
+lockdown.com
+lockestek.com
+logbot.net
+logiqx.com
+logmike.com
+log.riku.me
+london.neighborhoodr.com
+longhair.hk
+longtermly.net
+lookatgame.com
+lookingglasstheatre.org
+lookpic.com
+lotuslight.org.tw
+lovequicksilver.com
+lovesphinx.tk
+lrfz.com
+lsd.org.hk
+lsforum.net
+lsmchinese.org
+lsmkorean.org
+lsm.org
+lsxszzg.com
+lua.org
+lua-users.org
+lungtanhr.gov.tw
+luntan.zaobao.com
+lupm.org
+lushstories.com
+lvhai.org
+lyricsquote.com
+mad-ar.ch
+madmenunbuttoned.com
+magazines.sina.com.tw
+maiio.net
+mail-archive.com
+maiplus.com
+makemymood.com
+makzhou.warehouse333.com
+malaysiakini.com
+marc.info
+marco.org
+marguerite.su
+marines.mil
+markmilian.com
+martau.com
+martincartoons.com
+maruta.be
+marxist.com
+marxist.net
+marxists.org
+mashable.com
+mash.to
+matainja.com
+mathiew-badimon.com
+matsu-news.gov.tw
+matsushimakaede.com
+maxgif.com
+mayimayi.com
+mcadforums.com
+mcfog.com
+md-t.org
+mediafire.com
+meetup.com
+mefeedia.com
+megaporn.com
+megarotic.com
+megavideo.com
+megurineluka.com
+meirixiaochao.com
+melon-peach.com
+memedia.cn
+meme.yahoo.com
+memrijttm.org
+merit-times.com.tw
+mesotw.com
+metacafe.com
+meteorshowersonline.com
+metrolife.ca
+mgoon.com
+mgstage.com
+mh4u.org
+mhradio.org
+michaelanti.com
+michaelmarketl.com
+middle-way.net
+mihk.hk
+mihua.org
+mike.cz.cc
+mimivip.com
+minghui.org
+minghui-school.org
+mingjinglishi.com
+mingjingnews.com
+mingpaocanada.com
+mingpao.com
+mingpaomonthly.com
+mingpaonews.com
+mingpaony.com
+mingpaosf.com
+mingpaotor.com
+mingpaovan.com
+minimalmac.com
+mininova.org
+minzhuhua.net
+minzhuzhongguo.org
+miroguide.com
+mirrorbooks.com
+mitbbs.com
+mixedmedialabs.com
+mixero.com
+mixpod.com
+mixx.com
+mizzmona.com
+mk5000.com
+mlcool.com
+mmaaxx.com
+mmmca.com
+mobatek.net
+mobile01.com
+mobileways.de
+mobypicture.com
+moby.to
+modfetish.com
+moe.gov.tw
+mog.com
+molihua.org
+mondex.org
+monitorchina.org
+moonriver7.files.wordpress.com
+morningsun.org
+m.oulove.org
+movabletype.com
+moviefap.com
+mp3ye.eu
+mpettis.com
+mpfinance.com
+mpinews.com
+m.plixi.com
+mrdoob.com
+mrtweet.com
+msguancha.com
+m.slandr.net
+m-team.cc
+mthruf.com
+m.tweete.net
+mtw.tl
+multiply.com
+multiproxy.org
+multiupload.com
+muouju.com
+muselinks.co.jp
+music.jwmusic.org
+muzi.com
+muzi.net
+muzu.tv
+mvdis.gov.tw
+mx981.com
+myactimes.com
+my-addr.com
+myaudiocast.com
+myav.com.tw
+my.backchina.com
+myboooks.googlepages.com
+mychinamyhome.com
+myeclipseide.com
+myforum.com.hk
+myforum.com.uk
+myfreshnet.com
+my.keso.cn
+myopenid.com
+my.opera.com
+mypaper.pchome.com.tw
+myparagliding.com
+mypopescu.com
+my-proxy.com
+myshare.url.com.tw
+mysinablog.com
+myspace.com
+myvlog.im.tv
+naacoalition.org
+naitik.net
+nakido.com
+namsisi.com
+nanyang.com
+nanyangpost.com
+nanzao.com
+naol.ca
+national-lottery.co.uk
+navicat.com
+navigeaters.com
+navy.mil
+nccwatch.org.tw
+ncdr.nat.gov.tw
+nch.com.tw
+ncn.org
+ncree.gov.tw
+nde.de
+ndr.de
+nekoslovakia.net
+nerch.gov.tw
+ner.gov.tw
+nerhl.gov.tw
+nertt.gov.tw
+netcolony.com
+netflix.com
+netme.cc
+networkedblogs.com
+neverforget8964.org
+new-3lunch.net
+new-akiba.com
+newcenturymc.com
+newcenturynews.com
+newchen.com
+newgrounds.com
+newlandmagazine.com.au
+news100.com.tw
+newsancai.com
+news.atebits.com
+news.backchina.com
+news.bbc.co.uk
+newscn.org
+news.cnyes.com
+newsforums.bbc.co.uk
+news.ghostery.com
+news.google.com.hk
+newsminer.com
+news.msn.com.tw
+news.omy.sg
+news.pchome.com.tw
+newspeak.cc
+newspp.org
+news.sina.com.hk
+news.sina.com.tw
+news.singtao.ca
+newstapa.org
+newtaiwan.com.tw
+newtalk.tw
+newyorktimes.com
+nexton-net.jp
+nexttv.com.tw
+nf.id.au
+nga.mil
+ngensis.com
+nhri.gov.tw
+nic.cz.cc
+nici.nat.gov.tw
+nicovideo.tw
+nict.gov.tw
+nighost.org
+nintendium.com
+nintendowifi.net
+njactb.org
+njuice.com
+nlfreevpn.com
+nmh.gov.tw
+nmmba.gov.tw
+nmp.gov.tw
+nmtl.gov.tw
+nmvttc.gov.tw
+nobelprize.org
+nobel.se
+nobodycanstop.us
+nokogiri.org
+nokola.com
+noobbox.com
+notes.alexdong.com
+novelasia.com
+nownews.com
+nowtorrents.com
+noypf.com
+npa.go.jp
+npm.gov.tw
+nps.gov
+nrk.no
+nsc.gov.tw
+nspo.gov.tw
+nstm.gov.tw
+ntdmh.gov.tw
+ntdtv.ca
+ntdtv.co
+ntdtv.com
+ntdtv.org
+ntdtv.ru
+ntl.gov.tw
+ntsec.gov.tw
+ntuh.gov.tw
+nuexpo.com
+nurgo-software.com
+nuvid.com
+nuzcom.com
+nvquan.org
+nvri.gov.tw
+nydus.ca
+nysingtao.com
+nytco.com
+nyt.com
+nytimes.com
+nytimg.com
+nzchinese.net.nz
+observechina.net
+oclp.hk
+october-review.org
+offbeatchina.com
+ogaoga.org
+oikos.com.tw
+oiktv.com
+oizoblog.com
+okayfreedom.com
+old-cat.net
+old.nabble.com
+olumpo.com
+olympicwatch.org
+omgili.com
+omnitalk.com
+on.cc
+one.xthost.info
+onlylady.cn
+onmoon.com
+onmoon.net
+oopsforum.com
+ooyala.com
+open.com.hk
+opendemocracy.net
+openid.net
+openleaks.org
+openvpn.net
+openvpn.org
+openwebster.com
+opml.radiotime.com
+opnir.com
+orientaldaily.com.my
+orient-doll.com
+orn.jp
+orzistic.org
+osfoora.com
+ourdearamy.com
+oursogo.com
+oursteps.com.au
+overlapr.com
+owl.li
+ow.ly
+oyax.com
+ozchinese.com
+ozyoyo.com
+pabp.gov.tw
+pacificpoker.com
+packages.debian.org
+packetix.net
+page2rss.com
+page.bid.yahoo.com
+pagodabox.com
+paint.net
+palacemoon.com
+pandora.com
+pandora.tv
+panluan.net
+panoramio.com
+pao-pao.net
+paperb.us
+paper.li
+paper-replika.com
+parade.com
+parislemon.com
+pastebin.com
+pastie.org
+patehr.gov.tw
+pbs.org
+pbwiki.com
+pbworks.com
+pbxes.com
+pbxes.org
+pcdiscuss.com
+pcdvd.com.tw
+pchome.com.tw
+pct.org.tw
+pcworld.com
+pdetails.com
+pdproxy.com
+peacefire.org
+peacehall.com
+peeasian.com
+peerpong.com
+pekingduck.org
+penchinese.com
+penchinese.net
+pengyulong.com
+penthouse.com
+peopo.org
+percy.in
+perfectgirls.net
+perfectvpn.net
+perfspot.com
+perlhowto.com
+pet.gov.tw
+philly.com
+photofocus.com
+photos.dailyme.com
+photo.utom.us
+phuquocservices.com
+picasaweb.google.com
+picidae.net
+picturesocial.com
+pictures.playboy.com
+pidown.com
+pign.net
+pimg.tw
+pin6.com
+ping.fm
+pinoy-n.com
+pioneer-worker.forums-free.com
+piring.com
+pixanalytics.com
+pixelqi.com
+pixfs.net
+pixnet.cc
+pixnet.net
+pixplug.in
+pk.com
+placemix.com
+planetsuzy.org
+playboy.com
+plays.com.tw
+plm.org.hk
+plunder.com
+plurk.com
+plurktop.mmdays.com
+plus28.com
+plusbb.com
+pmates.com
+po2b.com
+podictionary.com
+pokerstars.com
+politicalchina.org
+popvote.hk
+popyard.com
+popyard.org
+porn2.com
+pornbase.org
+porn.com
+pornhub.com
+pornmm.net
+pornoxo.com
+pornrapidshare.com
+pornstarclub.com
+porntube.com
+pornvisit.com
+portis21.spaces.live.com
+pose.com
+postadult.com
+post.anyu.org
+posterous.com
+post.ly
+powerapple.com
+power.com
+powercx.com
+prayforchina.net
+premeforwindows7.com
+presentationzen.com
+president.gov.tw
+prestige-av.com
+previewshots.com
+privacybox.de
+privateinternetaccess.com
+privatepaste.com
+privatetunnel.com
+procopytips.com
+program-think.spaces.live.com
+prosiben.de
+provideocoalition.com
+proxifier.com
+proxomitron.info
+proxy.org
+proxypy.net
+proxyroad.com
+prozz.net
+psblog.name
+psiphon.ca
+psiphon.civisec.org
+pts.org.tw
+ptt.cc
+pubu.com.tw
+puffinbrowser.com
+puffstore.com
+pullfolio.com
+pulse.yahoo.com
+pure18.com
+pureconcepts.net
+purepdf.com
+purevpn.com
+putlocker.com
+puttycm.free.fr
+pwned.com
+python.com
+python.com.tw
+qanote.com
+qidian.ca
+qienkuen.org
+qi-gong.me
+qiwen.lu
+qixianglu.cn
+qkshare.com
+qoos.com
+qq.co.za
+qstatus.com
+qtrac.eu
+qtweeter.com
+quadedge.com
+qusi8.net
+qvodzy.org
+qxbbs.org
+radicalparty.org
+radioaustralia.net.au
+radiovaticana.org
+radiovncr.com
+raidcall.com.tw
+rangzen.org
+ranyunfei.com
+rapbull.net
+rapidshare8.com
+rapidsharedata.com
+rayfme.com
+rcinet.ca
+rconversation.blogs.com
+rdio.com
+read100.com
+readingtimes.com.tw
+readmoo.com
+realraptalk.com
+recordhistory.org
+redchinacn.org
+redtube.com
+referer.us
+reflectivecode.com
+relaxbbs.com
+renminbao.com
+renyurenquan.org
+retweeteffect.com
+retweetist.com
+retweetrank.com
+revleft.com
+revsci.net
+revver.com
+rfachina.com
+rfamobile.org
+rfa.org
+rferl.org
+rfi.fr
+rhcloud.com
+riku.me
+rileyguide.com
+rlwlw.com
+rmjdw.com
+rnw.nl
+robtex.com
+robustnessiskey.com
+rocmp.org
+rojo.com
+ronjoneswriter.com
+roodo.com
+rotten.com
+rsf-chinese.org
+rsf.org
+rssmeme.com
+rthk.hk
+rthk.org.hk
+rti.org.tw
+ruanyifeng.com
+rushbee.com
+rutube.ru
+ruyiseek.com
+rxhj.net
+s1heng.com
+s8forum.com
+sacom.hk
+sadpanda.us
+saiq.me
+salvation.org.hk
+samair.ru
+sammyjs.org
+samsoff.es
+sandnoble.com
+sankaizok.com
+sanmin.com.tw
+sapikachu.net
+savemedia.com
+savetibet.de
+savetibet.fr
+savetibet.nl
+savetibet.org
+savetibet.ru
+savevid.com
+say2.info
+scanscout.com
+scmpchinese.com
+scmp.com
+scorecardresearch.com
+scribd.com
+scriptspot.com
+seapuff.com
+secretchina.com
+secretgarden.no
+secure.wikimedia.org
+securitykiss.com
+seesmic.com
+seevpn.com
+seezone.net
+sejie.com
+sendoid.com
+sendspace.com
+sesawe.net
+sesawe.org
+sethwklein.net
+sevenload.com
+sex-11.com
+sex3.com
+sex8.cc
+sexandsubmission.com
+sex.com
+sexhuang.com
+sexhu.com
+sexinsex.net
+sfileydy.com
+shadow.ma
+shadowsocks.org
+shahamat-english.com
+shangfang.org
+shapeservices.com
+sharebee.com
+sharecool.org
+share.ovi.com
+share.skype.com
+share.youthwant.com.tw
+sharkdolphin.com
+sharpdaily.com.hk
+sharpdaily.hk
+shaunthesheep.com
+sheikyermami.com
+shellmix.com
+shenshou.org
+shenyunperformingarts.org
+shenzhoufilm.com
+shifeike.blog125.fc2blog.net
+shinychan.com
+shitaotv.org
+shixiao.org
+shizhao.org
+shkspr.mobi
+shodanhq.com
+shopping.com
+showbiz.omy.sg
+showtime.jp
+shwchurch3.com
+sidelinesnews.com
+sidelinessportseatery.com
+simplecd.me
+simplecd.org
+simpleproductivityblog.com
+sina.com.tw
+singtao.com
+singularitys.spaces.live.com
+sinoants.com
+sinocast.com
+sinocism.com
+sino-monthly.com
+sinomontreal.ca
+sinonet.ca
+sinopitt.info
+sinoquebec.com
+sis001.com
+sis001.us
+sis.xxx
+site90.net
+sitebro.tw
+siteks.uk.to
+site.locql.com
+sitemaps.org
+sites.google.com
+sitetag.us
+siyi123123123.spaces.live.com
+skimtube.com
+skybet.com
+skyvegas.com
+slacker.com
+slavasoft.com
+slheng.com
+slickvpn.com
+slideshare.net
+slinkset.com
+slutload.com
+smhric.org
+snapchat.com
+snaptu.com
+sndcdn.com
+sneakme.net
+snooper.co.uk
+sobees.com
+socialwhale.com
+sockslist.net
+so.com
+sod.co.jp
+softether.co.jp
+softether-download.com
+softether.org
+softwarebychuck.com
+so-ga.net
+sogclub.com
+sogou.com
+sogrady.me
+sohcradio.com
+sohfrance.org
+soh.tw
+sokamonline.com
+solozorro.tk
+somee.com
+so-news.com
+songjianjun.com
+sonidodelaesperanza.org
+sopcast.com
+sopcast.org
+sorting-algorithms.com
+soso.com
+soumo.info
+soundcloud.com
+soundofhope.kr
+soundofhope.org
+soupofmedia.com
+sourceforge.net
+southnews.com.tw
+sowers.org.hk
+space-scape.com
+spankwire.com
+spb.com
+speckleapp.com
+speedpluss.org
+spencertipping.com
+spinejs.com
+sports.williamhill.com
+spotify.com
+sproutcore.com
+squarespace.com
+srcf.ucam.org
+ssh91.com
+sshtunnel.googlecode.com
+sstatic.net
+stag.gov.tw
+standupfortibet.org
+starp2p.com
+startpage.com
+statcounter.com
+state168.com
+static.apple.nextmedia.com
+static.digg.com
+staticflickr.com
+static.nownews.com
+static.soup.io
+static.typepad.com
+status.twhirl.org
+stdtime.gov.tw
+steel-storm.com
+sthoo.com
+stickam.com
+stickeraction.com
+stonegames.net
+stoneip.info
+stoptibetcrisis.net
+storagenewsletter.com
+stoweboyd.com
+streamingthe.net
+strongvpn.com
+student.tw
+stuffimreading.com
+stuffimreading.net
+stupidvideos.com
+subacme.rerouted.org
+sublexical.spaces.live.com
+sufeng.org
+sugarsync.com
+summify.com
+sun1911.com
+suoluo.org
+surfeasy.com.au
+svwind.com
+sweux.com
+swift-tools.net
+s.xiaod.in
+sydneytoday.com
+sylfoundation.org
+syncback.com
+sysadmin1138.net
+sysresccd.org
+sytes.net
+szbbs.net
+szetowah.org.hk
+t35.com
+t66y.com
+taa-usa.org
+tabtter.jp
+tacem.org
+tafaward.com
+tagwalk.com
+taipei.gov.tw
+taipeisociety.org
+taitung-house.gov.tw
+taiwandaily.net
+taiwankiss.com
+taiwannation.50webs.com
+taiwannation.com
+taiwannation.com.tw
+taiwannews.com.tw
+taiwan-sex.com
+taiwantt.org.tw
+taiwanus.net
+taiwanyes.com
+taiwanyes.ning.com
+tamiaode.tk
+tanc.org
+tangben.com
+taolun.info
+taoyuan.gov.tw
+tap11.com
+target.com
+taweet.com
+tax.nat.gov.tw
+tbpic.info
+tbsec.org
+tbsn.org
+tbsseattle.org
+tchb.gov.tw
+tchrd.org
+t.co
+tcsac.gov.tw
+teamseesmic.com
+teashark.com
+techlifeweb.com
+techparaiso.com
+telecomspace.com
+telegraph.co.uk
+tenacy.com
+thbstc.gov.tw
+theampfactory.com
+theappleblog.com
+theatrum-belli.com
+thebcomplex.com
+theblemish.com
+thebodyshop-usa.com
+thechinabeat.org
+thedailywh.at
+thedieline.com
+thedw.us
+thegatesnotes.com
+thehots.info
+thehousenews.com
+thehungrydudes.com
+thehun.net
+theinternetwishlist.com
+thelifeyoucansave.com
+thelius.org
+thepiratebay.org
+thepiratebay.se
+theqii.info
+thereallove.kr
+thesartorialist.com
+thespeeder.com
+the-sun.on.cc
+thetibetpost.com
+thetrotskymovie.com
+thevivekspot.com
+thewgo.org
+thisav.com
+thisiswhyyouarefat.com
+thkphoto.com
+thomasbernhard.org
+threatchaos.com
+throughnightsfire.com
+t.huhaitai.com
+thumbzilla.com
+thywords.com
+tiananmenmother.org
+tiananmenuniv.com
+tiananmenuniv.net
+tiandixing.org
+tianhuayuan.com
+tiantibooks.org
+tianzhu.org
+tibetalk.com
+tibetanyouthcongress.org
+tibet.at
+tibet.com
+tibetcorps.org
+tibetfund.org
+tibetjustice.org
+tibet.net
+tibetoffice.org
+tibetonline.com
+tibetonline.tv
+tibet.org.tw
+tibetsun.com
+tibetwrites.org
+tidyread.com
+time.com
+times.hinet.net
+tinychat.com
+tinypaste.com
+tinypng.com
+tistory.com
+tjholowaychuk.com
+tkcs-collins.com
+tkforum.tk
+t.kun.im
+tmagazine.com
+tmi.me
+tnaflix.com
+tncsec.gov.tw
+t.neolee.cn
+togetter.com
+tokyo-247.com
+tokyocn.com
+tokyo-hot.com
+tomayko.com
+tomsc.com
+tono-oka.jp
+tonyyan.net
+toodoc.com
+toonel.net
+topic.youthwant.com.tw
+topnews.in
+topshare.us
+topshareware.com
+topstyle4.com
+topsy.com
+tora.to
+tor.blingblingsquad.net
+torproject.org
+torrentcrazy.com
+torrentproject.se
+tor.updatestar.com
+torvpn.com
+t.orzdream.com
+tosh.comedycentral.com
+touch99.com
+toutfr.com
+tpde.aide.gov.tw
+tphcc.gov.tw
+tpi.org.tw
+transgressionism.org
+transparency.org
+travelinlocal.com
+trendsmap.com
+trialofccp.org
+tripod.com
+trouw.nl
+trtc.com.tw
+trt.net.tr
+trulyergonomic.com
+trustedbi.com
+truth101.co.tv
+truthcn.com
+truveo.com
+tsctv.net
+tsemtulku.com
+tsquare.tv
+tsunagarumon.com
+tt1069.com
+tttan.com
+tuanzt.com
+tube8.com
+tubecao.com
+tube.com
+tubewolf.com
+tuidang.net
+tuidang.org
+tui.orzdream.com
+tuite.googlecode.com
+tumblr.awflasher.com
+tumblweed.org
+tumutanzi.com
+tunein.com
+tunnelbear.com
+turbobit.net
+turbotwitter.com
+turningtorso.com
+turntable.fm
+tuxtraining.com
+tvants.com
+tvboxnow.com
+tv.com
+tvider.com
+tv-intros.com
+tv.on.cc
+tvunetworks.com
+twapperkeeper.com
+twa.sh
+twaud.io
+twbbs.net.tw
+twbbs.org
+twbbs.tw
+twblogger.com
+tweepguide.com
+tweeplike.me
+tweepmag.com
+tweepml.org
+tweetbackup.com
+tweetboard.com
+tweetboner.biz
+tweetdeck.com
+tweetedtimes.com
+tweetmeme.com
+tweetmylast.fm
+tweetphoto.com
+tweetrans.com
+tweetree.com
+tweetwally.com
+tweetymail.com
+twftp.org
+twibase.com
+twibble.de
+twibbon.com
+twibs.com
+twicsy.com
+twifan.com
+twiffo.com
+twiggit.org
+twilog.org
+twimbow.com
+twimg.com
+twimg.edgesuite.net
+tw.img.nextmedia.com
+twindexx.com
+twipple.jp
+twistar.cc
+twisternow.com
+twistory.net
+twit2d.com
+twitbrowser.net
+twitcause.com
+twitese.spaces.live.com
+twitgether.com
+twitgoo.com
+twitiq.com
+twitlonger.com
+twitoaster.com
+twitonmsn.com
+twitpic.com
+twitreferral.com
+twitstat.com
+twittbot.net
+twitter4j.org
+twitter.com
+twittercounter.com
+twitterfeed.com
+twittergadget.com
+twitter.jp
+twitterkr.com
+twittermail.com
+twittertim.es
+twitthat.com
+twitturk.com
+twitturly.com
+twitvid.com
+twitzap.com
+twiyia.com
+tw.jiepang.com
+tw.myblog.yahoo.com
+tw.news.yahoo.com
+tw-npo.org
+tw.rd.yahoo.com
+twreg.info
+twstar.net
+tw.streetvoice.com
+twt.fm
+twtkr.com
+twtr2src.ogaoga.org
+twtrland.com
+twt.tl
+twttr.com
+twurl.nl
+tw.voa.mobi
+twyac.org
+tw.yahoo.com
+tycool.com
+tynsoe.org
+typepad.com
+tzangms.com
+ub0.cc
+uberproxy.net
+ucdc1998.org
+uderzo.it
+udn.com
+ufreevpn.com
+ugo.com
+uhrp.org
+uighurbiz.net
+ukliferadio.co.uk
+ulike.net
+ultravpn.fr
+ultraxs.com
+unblock.cn.com
+unblocksit.es
+uncyclomedia.org
+uncyclopedia.info
+uncyclopedia.tw
+unholyknight.com
+uni.cc
+unicode.org
+uniteddaily.com.my
+unix100.com
+unknownspace.org
+unpo.org
+uocn.org
+upcoming.yahoo.com
+update.playstation.net
+upload4u.info
+upload.backchina.com
+uploaded.to
+uploadstation.com
+upload.wikimedia.org
+urlborg.com
+urlparser.com
+usacn.com
+usfk.mil
+usinfo.state.gov
+usmc.mil
+us.to
+ustream.tv
+usus.cc
+uushare.com
+uwants.com
+uwants.net
+uyghurcongress.org
+uygur.org
+v70.us
+vaayoo.com
+value-domain.com
+van698.com
+vanemu.cn
+vanilla-jp.com
+vansky.com
+vapurl.com
+vatn.org
+vcfbuilder.org
+vcf-online.org
+veempiire.com
+velkaepocha.sk
+venbbs.com
+venchina.com
+ventureswell.com
+veoh.com
+verizon.net
+verybs.com
+vevo.com
+vft.com.tw
+vghks.gov.tw
+vghtc.gov.tw
+vghtpe.gov.tw
+video.aol.ca
+video.aol.com
+video.aol.co.uk
+video.ap.org
+videobam.com
+video.fdbox.com
+video.foxbusiness.com
+videomo.com
+video.tiscali.it
+video.yahoo.com
+vidoemo.com
+views.fm
+viki.com
+vimeocdn.com
+vimeo.com
+vimgolf.com
+vimperator.org
+vincnd.com
+vinniev.com
+vllcs.org
+vlog.xuite.net
+vmixcore.com
+voacantonese.com
+voachineseblog.com
+voachinese.com
+voagd.com
+voanews.com
+voatibetan.com
+vocn.tv
+vot.org
+vpnbook.com
+vpnfire.com
+vpngate.jp
+vpngate.net
+vpnpop.com
+vpnpronet.com
+v-state.org
+vtunnel.com
+w3schools.com
+waffle1999.com
+wahas.com
+waigaobu.com
+waikeung.org
+waiwaier.com
+wallornot.org
+wallpapercasa.com
+wanderinghorse.net
+wanfang.gov.tw
+wangafu.net
+wangjinbo.org
+wanglixiong.com
+wangruoshui.net
+wangyi64.spaces.live.com
+want-daily.com
+wapedia.mobi
+washeng.net
+watchmygf.net
+wattpad.com
+wdf5.com
+wearn.com
+web2project.net
+webbang.net
+webfee.tk
+weblagu.com
+webmproject.org
+webshots.com
+websitepulse.com
+webs-tv.net
+webworkerdaily.com
+weeewooo.net
+weekmag.info
+wefong.com
+weiboleak.com
+weigegebyc.dreamhosters.com
+weijingsheng.org
+weiming.info
+weiquanwang.org
+weisuo.ws
+wellplacedpixels.com
+wengewang.com
+wengewang.org
+wenhui.ch
+wenku.com
+wenxuecity.com
+wenyunchao.com
+wenyunchao.spaces.live.com
+wepn.info
+westca.com
+westernwolves.com
+wetplace.com
+wetpussygames.com
+wexiaobo.org
+wezhiyong.org
+wezone.net
+wforum.com
+whatblocked.com
+whereiswerner.com
+whippedass.com
+whitebear.freebearblog.org
+whydidyoubuymethat.com
+whylover.com
+whyx.org
+w.idaiwan.com
+wiki.cnitter.com
+wiki.jqueryui.com
+wiki.keso.cn
+wikileaks.ch
+wikileaks.de
+wikileaks.eu
+wikileaks.lu
+wikileaks.org
+wikileaks.pl
+wikilivres.info
+wikimapia.org
+wikimedia.org.mo
+wiki.moegirl.org
+wikinet.org
+wiki.oauth.net
+wikipedia.org
+wiki.phonegap.com
+wikiwiki.jp
+wikkii.com
+williamlong.spaces.live.com
+willw.net
+windowsphoneme.com
+winwhispers.info
+wiredbytes.com
+wiredpen.com
+wireshark.org
+wisevid.com
+witnessleeteaching.com
+witopia.net
+wlx.sowiki.net
+woeser.com
+wolfax.com
+womenbusiness.nyc.gov.tw
+womensrightsofchina.org
+woopie.jp
+woopie.tv
+wordboner.com
+wordpress.com
+wordsandturds.com
+w.org
+workatruna.com
+worldcat.org
+worldjournal.com
+worstthingieverate.com
+wo.tc
+wowlegacy.ml
+wow-life.net
+woxinghuiguo.com
+wozy.in
+wp.com
+wpoforum.com
+wqlhw.com
+wqyd.org
+wrchina.org
+wretch.cc
+writer.zoho.com
+wsj.com
+wsj.net
+wtfpeople.com
+wuala.com
+wuerkaixi.com
+wufi.org.tw
+wuguoguang.com
+wujieliulan.com
+wujie.net
+wukangrui.net
+wwitv.com
+www.6v6dota.com
+www.ajsands.com
+www.antd.org
+www.aolnews.com
+www.bulbous.freeserve.co.uk
+www.cmoinc.org
+www.dfanning.com
+www.dwheeler.com
+www.eulam.com
+www.exblog.jp
+www.forum4hk.com
+www.freetibet.org
+www.getyouram.com
+www.goldenmelody.com.tw
+www.idlcoyote.com
+www.immigration.gov.tw
+www.klip.me
+www.kodingen.com
+www.linksalpha.com
+www.loiclemeur.com
+www.macrovpn.com
+www.monlamit.org
+www.moztw.org
+www.mycould.com
+www.ned.org
+www.nownews.com
+www.orchidbbs.com
+www.owind.com
+www.oxid.it
+www.parkansky.com
+www.powerpointninja.com
+www.rnw.nl
+www.somee.com
+www.stackfile.com
+www.supertweet.net
+www.tiffanyarment.com
+www.tripod.com
+www.tv.com
+www.twtrland.com
+www.typepad.com
+www.urbanoutfitters.com
+www.vegorpedersen.com
+www.voy.com
+www.vpncup.com
+www.wangruowang.org
+www.wan-press.org
+www.wet123.com
+www.zaurus.org.uk
+wzyboy.im
+x1949x.com
+x365x.com
+xanga.com
+x-art.com
+xa.yimg.com
+xbabe.com
+xbookcn.com
+xcafe.in
+xcritic.com
+xfm.pp.ru
+xgmyd.com
+xh4n.cn
+xhamster.com
+xiaochuncnjp.com
+xiaohexie.com
+xiaoma.org
+xiezhua.com
+xing.com
+xinhuanet.org
+xinmiao.com.hk
+xinqimeng.over-blog.com
+xinsheng.net
+xinshijue.com
+xinyubbs.net
+xizang-zhiye.org
+xjp.cc
+xml-training-guide.com
+xmovies.com
+xmusic.fm
+xnxx.com
+xpdo.net
+xpud.org
+xskywalker.com
+xtube.com
+xuchao.net
+xuchao.org
+xuzhiyong.net
+xuzhuoer.com
+xvedios.com
+xvideos.com
+x-wall.org
+xxbbx.com
+x.xcity.jp
+xxxx.com.au
+xysblogs.org
+xys.dxiong.com
+xys.org
+xyy69.com
+xyy69.info
+yahoo.cn
+yahoo.com.hk
+yam.com
+yanghengjun.spaces.live.com
+yasni.co.uk
+yasukuni.or.jp
+yatsen.gov.tw
+ydy.com
+yeelou.com
+yeeyi.com
+yegle.net
+yezimary.spaces.live.com
+yfrog.com
+yhcw.net
+yidio.com
+yilubbs.com
+yi.org
+yipub.com
+ym.backchina.com
+yogichen.org
+yong.hu
+yorkbbs.ca
+youdao.com
+youjizz.com
+youmaker.com
+youpai.org
+youporn.com
+your-freedom.net
+yousendit.com
+youthbao.com
+youthnetradio.org
+youtu.be
+youtubecn.com
+youtube.com
+youtube-nocookie.com
+youversion.com
+youxu.info
+ytht.net
+ytimg.com
+yuanming.net
+yuming.flnet.org
+yunchao.net
+yvesgeleyn.com
+yvtc.gov.tw
+yx51.net
+yyii.org
+yymaya.com
+yzzk.com
+zacebook.com
+zannel.com
+zaobao.com
+zaobao.com.sg
+zaozon.com
+zarias.com
+zattoo.com
+zdnet.com.tw
+zengjinyan.org
+zengjinyan.spaces.live.com
+zeutch.com
+zgzcjj.net
+zhanbin.net
+zhao.jinhai.de
+zhenghui.org
+zhenlibu.info
+zhinengluyou.com
+zhllg.spaces.live.com
+zh.m.wikipedia.org
+zh.netlog.com
+zhonggtuotese.net
+zhongguotese.net
+zhongmeng.org
+zhongsou.com
+zh.pokerstrategy.com
+zhreader.com
+zh-tw.justin.tv
+zhuichaguoji.org
+zh.uncyclopedia.wikia.com
+zh.wikinews.org
+zh.wikipedia.org
+zh.wikisource.org
+ziddu.com
+zillionk.com
+zinio.com
+ziplib.com
+zkaip.com
+zmw.cn
+zomobo.net
+zonaeuropa.com
+zootool.com
+zoozle.net
+zozotown.com
+zshare.net
+zsrhao.com
+zuo.la
+zuola.com
+zvereff.com
+zyzc9.com
+zyzg.us
diff --git a/package/lean/ipset-lists/tools/gen-china-routes.sh b/package/lean/ipset-lists/tools/gen-china-routes.sh
new file mode 100755
index 0000000000..632ddcbdf3
--- /dev/null
+++ b/package/lean/ipset-lists/tools/gen-china-routes.sh
@@ -0,0 +1,85 @@
+#!/bin/bash -e
+
+#
+# Script for generating China IPv4 route table by merging APNIC.net data and IPIP.net data
+#
+
+china_routes_ipip()
+{
+	[ -f ipip.txt ] || wget -4 https://cdn.jsdelivr.net/gh/17mon/china_ip_list/china_ip_list.txt -O ipip.txt >&2 || exit 1
+	cat ipip.txt | xargs netmask | awk '{print $1}'
+}
+
+china_routes_apnic()
+{
+	[ -f apnic.txt ] || wget -4 http://ftp.apnic.net/stats/apnic/delegated-apnic-latest -O apnic.txt >&2 || exit 1
+
+	cat apnic.txt | awk -F'|' -vc=CN '
+function tobits(c) { for(n=0; c>=2; c/=2) n++; return 32-n; }
+$2==c&&$3=="ipv4" { printf("%s/%d\n", $4, tobits($5)) }' |
+		xargs netmask | awk '{print $1}'
+}
+
+china_routes_merged()
+{
+	[ -x ./ipv4-merger ] || gcc ipv4_merger.c -o ipv4-merger >&2
+
+	china_routes_apnic > china.apnic
+	china_routes_ipip > china.ipip
+
+	# Merge them together
+	cat china.apnic china.ipip | ./ipv4-merger | sed 's/\-/:/g' |
+		xargs netmask | awk '{print $1}' | awk -F/ '$2<=24' > china.merged
+
+	cat china.merged
+}
+
+# $1: ipset name
+convert_routes_to_ipset()
+{
+	local ipset_name="$1"
+	echo "create $ipset_name hash:net family inet hashsize 1024 maxelem 65536"
+	awk -vt="$ipset_name" '{ printf("add %s %s\n", t, $0) }'
+}
+
+
+generate_china_ipset()
+{
+	china_routes_merged | convert_routes_to_ipset china
+}
+
+generate_inverted_china_routes()
+{
+	(
+		china_routes_merged
+		echo 0.0.0.0/8 10.0.0.0/8 100.64.0.0/10 127.0.0.0/8 172.16.0.0/12 192.168.0.0/16 224.0.0.0/3
+	) |
+	xargs netmask -r | awk '{print $1}' |
+	awk -F- '
+function iptoint(ip) { split(ip,arr,"."); n=0; for(i=1;i<=4;i++) n=n*256+arr[i]; return n; }
+function inttoip(n) { a=int(n/16777216); b=int(n%16777216/65536); c=int(n%65536/256); d=n%256; return a "." b "." c "." d; }
+BEGIN { st=0 }
+{ x=st; y=iptoint($1); st=iptoint($2)+1; if(y>x) { print inttoip(x) ":" inttoip(y-1); } }' |
+	xargs netmask | awk '{print $1}'
+}
+
+
+##
+case "$1" in
+	"")
+		generate_china_ipset
+		;;
+	-c)
+		china_routes_merged
+		;;
+	-r)
+		generate_inverted_china_routes
+		;;
+	*)
+		echo "Usage:"
+		echo " $0                   generate China routes in ipset format"
+		echo " $0 -c                generate China routes in IP/prefix format"
+		echo " $0 -r                generate invert China routes"
+		;;
+	*)
+esac
diff --git a/package/lean/ipset-lists/tools/gen-gfwlist.sh b/package/lean/ipset-lists/tools/gen-gfwlist.sh
new file mode 100755
index 0000000000..74db4205e6
--- /dev/null
+++ b/package/lean/ipset-lists/tools/gen-gfwlist.sh
@@ -0,0 +1,29 @@
+#!/bin/sh -e
+
+generate_china_banned()
+{
+	if [ ! -f gfwlist.txt ]; then
+		wget https://cdn.jsdelivr.net/gh/gfwlist/gfwlist/gfwlist.txt -O gfwlist.b64 >&2
+		cat gfwlist.b64 | base64 -d > gfwlist.txt
+		rm -f gfwlist.b64
+	fi
+
+	cat gfwlist.txt base-gfwlist.txt | sort -u |
+		sed 's#!.\+##; s#|##g; s#@##g; s#http:\/\/##; s#https:\/\/##;' |
+		sed '/\*/d; /apple\.com/d; /sina\.cn/d; /sina\.com\.cn/d; /baidu\.com/d; /qq\.com/d' |
+		sed '/^[0-9]\+\.[0-9]\+\.[0-9]\+\.[0-9]\+$/d' |
+		grep '^[0-9a-zA-Z\.-]\+$' | grep '\.' | sed 's#^\.\+##' | rev | sort -u |
+		awk '
+BEGIN { prev = "________"; }  {
+	cur = $0;
+	if (index(cur, prev) == 1 && substr(cur, 1 + length(prev) ,1) == ".") {
+	} else {
+		print cur;
+		prev = cur;
+	}
+}' | rev | sort -u
+
+}
+
+generate_china_banned
+
diff --git a/package/lean/ipset-lists/tools/ipv4_merger.c b/package/lean/ipset-lists/tools/ipv4_merger.c
new file mode 100644
index 0000000000..0af85ced18
--- /dev/null
+++ b/package/lean/ipset-lists/tools/ipv4_merger.c
@@ -0,0 +1,339 @@
+#include <stdlib.h>
+#include <stdio.h>
+#include <string.h>
+#include <errno.h>
+
+typedef u_int32_t u32;
+typedef int bool;
+#define true  1
+#define false 0
+typedef unsigned gfp_t;
+
+static inline char *ipv4_hltos(u32 u, char *s)
+{
+	static char ss[20];
+	if (!s)
+		s = ss;
+	sprintf(s, "%d.%d.%d.%d",
+		(int)(u >> 24) & 0xff, (int)(u >> 16) & 0xff,
+		(int)(u >> 8) & 0xff, (int)u & 0xff );
+	return s;
+}
+
+static inline u32 ipv4_stohl(const char *s)
+{
+	int u[4];
+	if (sscanf(s, "%d.%d.%d.%d", &u[0], &u[1], &u[2], &u[3]) == 4) {
+		return  (((u32)u[0] & 0xff) << 24) |
+				(((u32)u[1] & 0xff) << 16) |
+				(((u32)u[2] & 0xff) << 8) |
+				(((u32)u[3] & 0xff));
+	} else
+		return 0xffffffff;
+}
+
+static inline bool is_ipv4_addr(const char *s)
+{
+	int u[4];
+	if (sscanf(s, "%d.%d.%d.%d", &u[0], &u[1], &u[2], &u[3]) == 4)
+		return true;
+	else
+		return false;
+}
+
+
+struct ipv4_range {
+	u32 start;
+	u32 end;
+};
+
+struct sa_open_data {
+	struct ipv4_range *tmp_base;
+	size_t tmp_size;
+	size_t tmp_length;
+	int    errors;
+};
+
+static int __touch_tmp_base(struct sa_open_data *od, gfp_t gfp)
+{
+	if (!od->tmp_base) {
+		/**
+		 * Allocate a temporary table with twice the size of the previous
+		 *  table or at least 100, on which new entries can be inserted.
+		 */
+		if (od->tmp_size < 100)
+			od->tmp_size = 100;
+		od->tmp_base = (struct ipv4_range *)malloc(
+			sizeof(struct ipv4_range) * od->tmp_size /*, gfp*/ );
+		if (!od->tmp_base) {
+			fprintf(stderr,
+				"salist: cannot allocate the temporary list for enlarging it.\n");
+			return -ENOMEM;
+		}
+		od->tmp_length = 0;
+	}
+	return 0;
+}
+
+static int ipv4_list_add_range(struct sa_open_data *od, u32 start,
+		u32 end, gfp_t gfp)
+{
+	struct ipv4_range *cur;
+	int ret;
+	
+	/* Ignore a new range if it or a larger range already exists */
+	//if (salist_check_ipv4(od->table, start, end))
+	//	return 0;
+	
+	if ((ret = __touch_tmp_base(od, gfp)) < 0)
+		return ret;
+	
+	/* Check if the size is efficient. Enlarge it if needed. */
+	if (od->tmp_length + 1 >= od->tmp_size) {
+		size_t old_size = od->tmp_size;
+		struct ipv4_range *old_base = od->tmp_base;
+		
+		od->tmp_size *= 2;
+		od->tmp_base = (struct ipv4_range *)realloc(od->tmp_base,
+				sizeof(struct ipv4_range) * od->tmp_size);
+		if (!od->tmp_base) {
+			od->tmp_size = old_size;
+			od->tmp_base = old_base;
+			return -ENOMEM;
+		}
+	}
+	
+	cur = &od->tmp_base[od->tmp_length++];
+	cur->start = start;
+	cur->end = end;
+	
+	return 0;
+}
+
+static inline int ipv4_list_add_netmask(struct sa_open_data *od,
+		u32 net, u32 net_mask, gfp_t gfp)
+{
+	u32 start = net & net_mask;
+	u32 end = net | ~net_mask;
+	
+	return ipv4_list_add_range(od, start, end, gfp);
+}
+
+static int ipv4_list_add_net(struct sa_open_data *od, u32 net,
+		int net_bits, gfp_t gfp)
+{
+	u32 net_mask;
+
+	if(net_bits == 0)
+		net_mask = 0x00000000;
+	else
+		net_mask = ~(((u32)1 << (32 - net_bits)) - 1);
+	//printf("%d: %08x, %08x\n", net_bits, net_mask, net_size);
+
+	return ipv4_list_add_netmask(od, net, net_mask, gfp);
+}
+
+static int salist_cmd_parse(struct sa_open_data *od, char *cmd, gfp_t gfp)
+{
+	char *a1 = NULL, *a2 = NULL;
+	char *sep;
+	char sc;
+	int n = 32;
+
+	/* Case 3: Append an item */
+	
+	/* Check IP description part: network segment or range? */
+	if ((sep = strchr(cmd, '/'))) { }
+	else if ((sep = strchr(cmd, '-'))) { }
+	else if ((sep = strchr(cmd, ':'))) { }
+	
+	if (sep) {
+		/* Describes a subnet or range. */
+		sc = *sep;
+		*sep = '\0';
+
+		a1 = cmd;
+		a2 = sep + 1;
+
+		if (*a2 == '\0') {
+			fprintf(stderr, "Nothing after '%c'.\n", sc);
+			return -EINVAL;
+		}
+	} else {
+		/* Describes a single IP. */
+		sc = '\0';
+		a1 = cmd;
+	}
+	
+	switch (sc) {
+	case '/':
+		/* 10.10.20.0/24 */
+		/* ------------------------------------ */
+		if (is_ipv4_addr(a2)) {
+			ipv4_list_add_netmask(od, ipv4_stohl(a1), ipv4_stohl(a2), gfp);
+		} else {
+			sscanf(a2, "%d", &n);
+			ipv4_list_add_net(od, ipv4_stohl(a1), n, gfp);
+		}
+		/* ------------------------------------ */
+		break;
+	case ':':
+	case '-':
+		/* 10.10.20.0-10.20.0.255 */
+		/* ------------------------------------ */
+		ipv4_list_add_range(od, ipv4_stohl(a1), ipv4_stohl(a2), gfp);
+		/* ------------------------------------ */
+		break;
+	default:
+		if (is_ipv4_addr(a1)) {
+			/* Single IP address. */
+			u32 ip = ipv4_stohl(a1);
+			/* ------------------------------------ */
+			ipv4_list_add_range(od, ip, ip, gfp);
+			/* ------------------------------------ */
+		} else {
+			fprintf(stderr, "Invalid IP address '%s'.\n", a1);
+			return -EINVAL;
+		}
+		break;
+	}
+	return 0;
+}
+
+static int ipv4_range_sort_cmp(const void *a, const void *b)
+{
+	struct ipv4_range *ra = (struct ipv4_range *)a;
+	struct ipv4_range *rb = (struct ipv4_range *)b;
+	
+	if (ra->start > rb->start) {
+		return 1;
+	} else if (ra->start < rb->start) {
+		return -1;
+	} else if (ra->end > rb->end) {
+		return 1;
+	} else if (ra->end < rb->end) {
+		return -1;
+	} else {
+		return 0;
+	}
+}
+
+static void ipv4_range_swap(void *a, void *b, int size)
+{
+	struct ipv4_range *ra = (struct ipv4_range *)a;
+	struct ipv4_range *rb = (struct ipv4_range *)b;
+	struct ipv4_range tmp;
+	tmp = *ra;
+	*ra = *rb;
+	*rb = tmp;
+}
+
+static struct sa_open_data *salist_open(void)
+{
+	struct sa_open_data *od = NULL;
+
+	od = (struct sa_open_data *)malloc(sizeof(*od));
+	if (!od) {
+		fprintf(stderr, "salist: cannot allocate sa_open_data.\n");
+		return NULL;
+	}
+	memset(od, 0, sizeof(*od));
+	od->errors = 0;
+
+	return od;
+}
+
+static int salist_close(struct sa_open_data *od)
+{
+	size_t ri, wi;
+	struct ipv4_range *old_base;
+
+	/* Flush the table if any modification has been done */
+	if (od->tmp_base) {
+		/* Sort the table and merge entries as many as possible. */
+		if (od->tmp_length >= 2) {
+			qsort(od->tmp_base, od->tmp_length, sizeof(struct ipv4_range),
+				ipv4_range_sort_cmp);
+			
+			for (wi = 0, ri = 1; ri < od->tmp_length; ri++) {
+				/* NOTICE: 0xffffffff + 1 ? */
+				if (od->tmp_base[wi].end == (u32)(-1)) {
+					/* Nothing */
+				} else if (od->tmp_base[ri].start <= od->tmp_base[wi].end + 1) {
+					/* The two ranges overlap, so merge the 2nd to the 1st one */
+					if (od->tmp_base[ri].end > od->tmp_base[wi].end)
+						od->tmp_base[wi].end = od->tmp_base[ri].end;
+				} else {
+					wi++;
+					if (wi < ri)
+						od->tmp_base[wi] = od->tmp_base[ri];
+				}
+			}
+			
+			od->tmp_length = wi + 1;
+		}
+		
+		/* Reduce the size */
+		if (od->tmp_length < od->tmp_size) {
+			struct ipv4_range *__tmp = od->tmp_base;
+			od->tmp_base = (struct ipv4_range *)malloc(
+				sizeof(struct ipv4_range) * (od->tmp_length ? od->tmp_length : 1));
+			if (od->tmp_base) {
+				memcpy(od->tmp_base, __tmp,
+					sizeof(struct ipv4_range) * od->tmp_length);
+				free(__tmp);
+			} else {
+				fprintf(stderr, "[%s:%d] Failed to allocate temporary table.\n",
+					__FUNCTION__, __LINE__);
+				/* If failed to allocate new memory, do not reduce it. */
+				od->tmp_base = __tmp;
+			}
+		}
+
+		/* Dump the table instead */
+	}
+	
+	if (od->errors) {
+		fprintf(stderr, "[%s] %d errors detected during table operation.\n",
+				__FUNCTION__, od->errors);
+	}
+
+	return 0;
+}
+
+static void sa_open_data_dump(struct sa_open_data *od)
+{
+	size_t i;
+	char s1[20], s2[20];
+
+	for (i = 0; i < od->tmp_length; i++) {
+		printf("%s-%s\n", ipv4_hltos(od->tmp_base[i].start, s1),
+			ipv4_hltos(od->tmp_base[i].end, s2));
+	}
+}
+
+int main(int argc, char *argv[])
+{
+	struct sa_open_data *od;
+	char lbuf[128];
+
+	od = salist_open();
+
+	while (fgets(lbuf, sizeof(lbuf), stdin)) {
+		size_t llen = strlen(lbuf);
+		if (llen > 0 && lbuf[llen - 1] == '\n')
+			lbuf[--llen] = '\0';
+		if (llen > 0 && lbuf[llen - 1] == '\r')
+			lbuf[--llen] = '\0';
+		if (llen == 0)
+			continue;
+		salist_cmd_parse(od, lbuf, 0);
+	}
+
+	salist_close(od);
+
+	sa_open_data_dump(od);
+
+	return 0;
+}
+
diff --git a/package/lean/ipv6-helper/Makefile b/package/lean/ipv6-helper/Makefile
new file mode 100644
index 0000000000..8be88ca5b7
--- /dev/null
+++ b/package/lean/ipv6-helper/Makefile
@@ -0,0 +1,56 @@
+#
+# Copyright (C) 2015 OpenWrt-dist
+#
+# This is free software, licensed under the GNU General Public License v3.
+# See /LICENSE for more information.
+#
+
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=ipv6helper
+PKG_VERSION:=1.0
+PKG_RELEASE:=1
+
+PKG_LICENSE:=GPLv3
+PKG_LICENSE_FILES:=LICENSE
+PKG_MAINTAINER:=LEAN
+
+PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)
+
+include $(INCLUDE_DIR)/package.mk
+
+define Package/ipv6helper
+	SECTION:=ipv6
+	TITLE:=IPv6 Helper and Dynamic Update he.net of ip
+	PKGARCH:=all
+	DEPENDS:=+luci-proto-ipv6 +wget +ip6tables +kmod-ipt-nat6 +odhcpd-ipv6only +odhcp6c +6in4
+endef
+
+define Package/ipv6helper/description
+	IPv6 Helper and Dynamic Update he.net of ip
+endef
+
+define Build/Prepare
+endef
+
+define Build/Configure
+endef
+
+define Build/Compile
+endef
+
+define Package/ipv6helper/postinst
+#!/bin/sh
+if [ -z "$${IPKG_INSTROOT}" ]; then
+	chmod 755 /etc/hotplug.d/iface/60-6in4 >/dev/null 2>&1
+fi
+exit 0
+endef
+
+define Package/ipv6helper/install
+	$(INSTALL_DIR) $(1)/etc/hotplug.d/iface
+	$(INSTALL_BIN) ./files/root/etc/hotplug.d/iface/60-6in4 $(1)/etc/hotplug.d/iface/60-6in4
+endef
+
+
+$(eval $(call BuildPackage,ipv6helper))
diff --git a/package/lean/ipv6-helper/files/root/etc/hotplug.d/iface/60-6in4 b/package/lean/ipv6-helper/files/root/etc/hotplug.d/iface/60-6in4
new file mode 100755
index 0000000000..270aad1f90
--- /dev/null
+++ b/package/lean/ipv6-helper/files/root/etc/hotplug.d/iface/60-6in4
@@ -0,0 +1,12 @@
+#!/bin/sh
+. /lib/functions.sh
+if [ "$ACTION" != "ifup" ]; then
+    exit
+fi
+config_load network
+config_get tunnelid $INTERFACE tunnelid
+config_get username $INTERFACE username
+config_get password $INTERFACE password
+if [ "$tunnelid" != "" ]; then
+    wget -O - https://$username:$password@ipv4.tunnelbroker.net/nic/update?hostname=$tunnelid --no-check-certificate
+fi
diff --git a/package/lean/k3-brcmfmac4366c-firmware/Makefile b/package/lean/k3-brcmfmac4366c-firmware/Makefile
new file mode 100644
index 0000000000..479628dc06
--- /dev/null
+++ b/package/lean/k3-brcmfmac4366c-firmware/Makefile
@@ -0,0 +1,42 @@
+#
+# Copyright (C) 2015-2016 OpenWrt.org
+#
+# This is free software, licensed under the GNU General Public License v3.
+#
+
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=k3wifi
+PKG_VERSION:=1
+PKG_RELEASE:=1
+
+include $(INCLUDE_DIR)/package.mk
+
+define Package/$(PKG_NAME)
+	TITLE:=k3wifi
+	DEPENDS:=
+	URL:=http://www.k3wifi.com/
+endef
+
+define Package/$(PKG_NAME)/description
+  k3wifi fw
+endef
+
+define Build/Prepare
+endef
+
+define Build/Configure
+endef
+
+define Build/Compile
+endef
+
+
+define Package/$(PKG_NAME)/install
+	$(INSTALL_DIR) $(1)/lib
+	$(INSTALL_DIR) $(1)/lib/firmware
+	$(INSTALL_DIR) $(1)/lib/firmware/brcm
+	$(INSTALL_DATA) ./files/lib/firmware/brcm/brcmfmac4366c-pcie.bin $(1)/lib/firmware/brcm/brcmfmac4366c-pcie.bin
+endef
+
+$(eval $(call BuildPackage,$(PKG_NAME)))
diff --git a/package/lean/k3-brcmfmac4366c-firmware/files/lib/firmware/brcm/brcmfmac4366c-pcie.bin b/package/lean/k3-brcmfmac4366c-firmware/files/lib/firmware/brcm/brcmfmac4366c-pcie.bin
new file mode 100644
index 0000000000..203ce98f02
Binary files /dev/null and b/package/lean/k3-brcmfmac4366c-firmware/files/lib/firmware/brcm/brcmfmac4366c-pcie.bin differ
diff --git a/package/lean/libcryptopp/Makefile b/package/lean/libcryptopp/Makefile
new file mode 100644
index 0000000000..60ea74ddcd
--- /dev/null
+++ b/package/lean/libcryptopp/Makefile
@@ -0,0 +1,61 @@
+#
+# Copyright (C) 2009-2012 OpenWrt.org
+#
+# This is free software, licensed under the GNU General Public License v2.
+# See /LICENSE for more information.
+#
+
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=libcryptopp
+PKG_VERSION:=8.2.0
+PKG_RELEASE:=1
+
+PKG_SOURCE:=cryptopp$(subst .,,$(PKG_VERSION)).zip
+PKG_SOURCE_URL:=http://www.cryptopp.com/
+PKG_MD5SUM:=8a8bcb436af83e16d2227bd4ac642243
+
+PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)/$(PKG_NAME)-$(PKG_VERSION)
+
+CMAKE_INSTALL:=1
+
+include $(INCLUDE_DIR)/package.mk
+include $(INCLUDE_DIR)/cmake.mk
+
+define Package/libcryptopp
+  SECTION:=libs
+  CATEGORY:=Libraries
+  DEPENDS:=+libpthread +libstdcpp
+  TITLE:=Crypto++ is library for creating C++ programs which use cryptographic algorithms
+  URL:=http://packages.debian.org/sid/libcrypto++-dev
+endef
+
+define Package/package/libcryptopp
+  Crypto++ is library for creating C++ programs which use cryptographic algorithms.
+  The library uses a Pipes & Filters architecture with heavy use of templates and
+  abstract base classes.
+endef
+
+CMAKE_OPTIONS += -DCMAKE_CXX_FLAGS="$(FPIC)"
+CMAKE_OPTIONS += -DBUILD_STATIC=ON
+CMAKE_OPTIONS += -DBUILD_SHARED=ON
+
+UNPACK_CMD=cd $(PKG_BUILD_DIR) && unzip "$(DL_DIR)/$(PKG_SOURCE)"
+define Build/Prepare
+	[ ! -f $(BUILD_DIR)/$(PKG_NAME)/CRYPTOPP_8_2_0.zip ] && wget https://github.com/noloader/cryptopp-cmake/archive/CRYPTOPP_8_2_0.zip -O $(BUILD_DIR)/$(PKG_NAME)/CRYPTOPP_8_2_0.zip && unzip -o $(BUILD_DIR)/$(PKG_NAME)/CRYPTOPP_8_2_0.zip -d $(BUILD_DIR)/$(PKG_NAME) && cd $(BUILD_DIR)/$(PKG_NAME)/cryptopp-cmake-CRYPTOPP_8_2_0 && cp CMakeLists.txt cryptopp-config.cmake $(PKG_BUILD_DIR)
+	$(Build/Prepare/Default)
+	cd $(PKG_BUILD_DIR) && rm -f GNUmakefile GNUmakefile-cross
+endef
+define Build/InstallDev
+	$(INSTALL_DIR) $(1)/usr/include/cryptopp
+	$(CP) $(PKG_INSTALL_DIR)/usr/include/cryptopp/* $(1)/usr/include/cryptopp/
+	$(INSTALL_DIR) $(1)/usr/lib
+	$(CP) $(PKG_INSTALL_DIR)/usr/lib/libcryptopp.{a,so*} $(1)/usr/lib/
+endef
+
+define Package/libcryptopp/install
+	$(INSTALL_DIR) $(1)/usr/lib
+	$(CP) $(PKG_INSTALL_DIR)/usr/lib/libcryptopp.so* $(1)/usr/lib/
+endef
+
+$(eval $(call BuildPackage,libcryptopp))
diff --git a/package/lean/libidn2/Makefile b/package/lean/libidn2/Makefile
new file mode 100644
index 0000000000..c023b5298d
--- /dev/null
+++ b/package/lean/libidn2/Makefile
@@ -0,0 +1,93 @@
+#
+# Copyright (C) 2017-2018 Daniel Engberg <daniel.engberg.lists@pyret.net>
+#
+# This is free software, licensed under the GNU General Public License v2.
+# See /LICENSE for more information.
+#
+
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=libidn2
+PKG_VERSION:=2.0.4
+PKG_RELEASE:=1
+PKG_MAINTAINER:=Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
+PKG_LICENSE:=GPL-2.0-or-later LGPL-3.0-or-later
+PKG_LICENSE_FILES:=COPYING COPYINGv2 COPYING.LESSERv3
+
+PKG_SOURCE_URL:=@GNU/libidn
+PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
+PKG_HASH:=644b6b03b285fb0ace02d241d59483d98bc462729d8bb3608d5cad5532f3d2f0
+
+PKG_INSTALL:=1
+
+include $(INCLUDE_DIR)/package.mk
+include $(INCLUDE_DIR)/nls.mk
+
+define Package/idn2/Default
+  SECTION:=net
+  CATEGORY:=Network
+  URL:=http://www.gnu.org/software/libidn/
+endef
+
+define Package/idn2/Default/description
+  Libidn2 is a free software implementation of IDNA2008,
+  Punycode and TR46 in library form. It contains
+  functionality to convert internationalized domain
+  names to and from ASCII Compatible Encoding (ACE),
+  following the IDNA2008 and TR46 standards.
+endef
+
+define Package/idn2
+  $(call Package/idn2/Default)
+  SUBMENU:=IP Addresses and Names
+  TITLE:=GNU IDN2 (Internationalized Domain Name) tool
+  DEPENDS:=+libidn2
+endef
+
+define Package/idn2/description
+$(call Package/idn2/Default/description)
+
+  Command line tool using libidn2
+
+endef
+
+define Package/libidn2
+  SECTION:=libs
+  CATEGORY:=Libraries
+  DEPENDS:=+libunistring $(ICONV_DEPENDS) $(INTL_DEPENDS)
+  TITLE:=International domain name library (IDNA2008, Punycode and TR46)
+  URL:=https://www.gnu.org/software/libidn/#libidn2
+endef
+
+define Package/libidn2/description
+$(call Package/idn2/Default/description)
+
+  Library only package
+
+endef
+
+CONFIGURE_ARGS += \
+	--disable-rpath \
+	--disable-doc
+
+define Build/InstallDev
+	$(INSTALL_DIR) $(1)/usr/include
+	$(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/include/idn2.h $(1)/usr/include
+	$(INSTALL_DIR) $(1)/usr/lib
+	$(CP) $(PKG_INSTALL_DIR)/usr/lib/*.{la,so}* $(1)/usr/lib/
+	$(INSTALL_DIR) $(1)/usr/lib/pkgconfig
+	$(CP) $(PKG_INSTALL_DIR)/usr/lib/pkgconfig/libidn2.pc $(1)/usr/lib/pkgconfig/
+endef
+
+define Package/idn2/install
+	$(INSTALL_DIR) $(1)/usr/bin
+	$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/* $(1)/usr/bin/
+endef
+
+define Package/libidn2/install
+	$(INSTALL_DIR) $(1)/usr/lib/
+	$(CP) $(PKG_INSTALL_DIR)/usr/lib/*.so* $(1)/usr/lib/
+endef
+
+$(eval $(call BuildPackage,idn2))
+$(eval $(call BuildPackage,libidn2))
diff --git a/package/lean/luci-app-accesscontrol/Makefile b/package/lean/luci-app-accesscontrol/Makefile
new file mode 100644
index 0000000000..1da4e9dfc9
--- /dev/null
+++ b/package/lean/luci-app-accesscontrol/Makefile
@@ -0,0 +1,18 @@
+
+# Copyright (C) 2016 Openwrt.org
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI Access Control Configuration
+LUCI_DEPENDS:=
+LUCI_PKGARCH:=all
+PKG_NAME:=luci-app-accesscontrol
+PKG_VERSION:=1
+PKG_RELEASE:=11
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
diff --git a/package/lean/luci-app-accesscontrol/luasrc/controller/mia.lua b/package/lean/luci-app-accesscontrol/luasrc/controller/mia.lua
new file mode 100644
index 0000000000..38dc02a264
--- /dev/null
+++ b/package/lean/luci-app-accesscontrol/luasrc/controller/mia.lua
@@ -0,0 +1,18 @@
+module("luci.controller.mia",package.seeall)
+
+function index()
+	if not nixio.fs.access("/etc/config/mia")then
+		return
+	end
+
+	entry({"admin","services","mia"},cbi("mia"),_("Internet Access Schedule Control"),30).dependent=true
+	entry({"admin","services","mia","status"},call("act_status")).leaf=true
+
+end
+
+function act_status()
+  local e={}
+	e.running=luci.sys.call("iptables -L INPUT |grep MIA >/dev/null")==0
+  luci.http.prepare_content("application/json")
+  luci.http.write_json(e)
+end
diff --git a/package/lean/luci-app-accesscontrol/luasrc/model/cbi/mia.lua b/package/lean/luci-app-accesscontrol/luasrc/model/cbi/mia.lua
new file mode 100644
index 0000000000..cf850ec0f5
--- /dev/null
+++ b/package/lean/luci-app-accesscontrol/luasrc/model/cbi/mia.lua
@@ -0,0 +1,66 @@
+
+a=Map("mia",translate("Internet Access Schedule Control"),translate("Access Schedule Control Settins"))
+a:section(SimpleSection).template  = "mia/mia_status"
+
+t=a:section(TypedSection,"basic")
+t.anonymous=true
+
+e=t:option(Flag,"enable",translate("Enabled"))
+e.rmempty=false
+
+e=t:option(Flag,"strict",translate("Strict Mode"))
+e.rmempty=false
+e.description = translate("Strict Mode will degrade CPU performance, but it can achieve better results")
+
+t=a:section(TypedSection,"macbind",translate("Client Rules"))
+t.template="cbi/tblsection"
+t.anonymous=true
+t.addremove=true
+
+e=t:option(Flag,"enable",translate("√"))
+e.rmempty=false
+e.default="1"
+
+e=t:option(Value,"macaddr",translate("MAC address (Computer Name)"))
+e.rmempty=true
+luci.sys.net.mac_hints(function(t,a)
+e:value(t,"%s (%s)"%{t,a})
+end)
+
+e=t:option(Value,"timeon",translate("Start time"))
+e.default="00:00"
+e.optional=false
+
+e=t:option(Value,"timeoff",translate("End time"))
+e.default="23:59"
+e.optional=false
+
+e=t:option(Flag,"z1",translate("Mon"))
+e.rmempty=true
+e.default=1
+
+e=t:option(Flag,"z2",translate("Tue"))
+e.rmempty=true
+e.default=1
+
+e=t:option(Flag,"z3",translate("Wed"))
+e.rmempty=true
+e.default=1
+
+e=t:option(Flag,"z4",translate("Thu"))
+e.rmempty=true
+e.default=1
+
+e=t:option(Flag,"z5",translate("Fri"))
+e.rmempty=true
+e.default=1
+
+e=t:option(Flag,"z6",translate("Sat"))
+e.rmempty=true
+e.default=1
+
+e=t:option(Flag,"z7",translate("Sun"))
+e.rmempty=true
+e.default=1
+
+return a
diff --git a/package/lean/luci-app-accesscontrol/luasrc/view/mia/mia_status.htm b/package/lean/luci-app-accesscontrol/luasrc/view/mia/mia_status.htm
new file mode 100644
index 0000000000..c971ee3c30
--- /dev/null
+++ b/package/lean/luci-app-accesscontrol/luasrc/view/mia/mia_status.htm
@@ -0,0 +1,22 @@
+<script type="text/javascript">//<![CDATA[
+XHR.poll(3, '<%=url([[admin]], [[services]], [[mia]], [[status]])%>', null,
+	function(x, data) {
+		var tb = document.getElementById('mia_status');
+		if (data && tb) {
+			if (data.running) {
+				var links = '<em><b><font color=green><%:Internet Access Schedule Control%> <%:RUNNING%></font></b></em>';
+				tb.innerHTML = links;
+			} else {
+				tb.innerHTML = '<em><b><font color=red><%:Internet Access Schedule Control%> <%:NOT RUNNING%></font></b></em>';
+			}
+		}
+	}
+);
+//]]>
+</script>
+<style>.mar-10 {margin-left: 50px; margin-right: 10px;}</style>
+<fieldset class="cbi-section">
+	<p id="mia_status">
+		<em><%:Collecting data...%></em>
+	</p>
+</fieldset>
diff --git a/package/lean/luci-app-accesscontrol/po/zh-cn/mia.po b/package/lean/luci-app-accesscontrol/po/zh-cn/mia.po
new file mode 100644
index 0000000000..cc976522b5
--- /dev/null
+++ b/package/lean/luci-app-accesscontrol/po/zh-cn/mia.po
@@ -0,0 +1,52 @@
+msgid "Internet Access Schedule Control"
+msgstr "上网时间控制"
+
+msgid "Access Schedule Control Settins"
+msgstr "设置客户端禁止访问互联网的时间"
+
+msgid "General switch"
+msgstr "开启/关闭"
+
+msgid "Strict Mode"
+msgstr "严格模式"
+
+msgid "Strict Mode will degrade CPU performance, but it can achieve better results"
+msgstr "严格模式会损耗部分CPU资源，但可以按照时间规则立即拦截数据包，效果更好"
+
+msgid "Client Rules"
+msgstr "客户端规则"
+
+msgid "Description"
+msgstr "描述"
+
+msgid "MAC address (Computer Name)"
+msgstr "MAC 地址 (主机名)"
+
+msgid "Start time"
+msgstr "开始时间"
+
+msgid "End time"
+msgstr "结束时间"
+
+msgid "Mon"
+msgstr "一"
+
+msgid "Tue"
+msgstr "二"
+
+msgid "Wed"
+msgstr "三"
+
+msgid "Thu"
+msgstr "四"
+
+msgid "Fri"
+msgstr "五"
+
+msgid "Sat"
+msgstr "六"
+
+msgid "Sun"
+msgstr "日"
+
+
diff --git a/package/lean/luci-app-accesscontrol/root/etc/config/mia b/package/lean/luci-app-accesscontrol/root/etc/config/mia
new file mode 100644
index 0000000000..0c4c4f6bcd
--- /dev/null
+++ b/package/lean/luci-app-accesscontrol/root/etc/config/mia
@@ -0,0 +1,3 @@
+
+config basic
+	option enable '0'
diff --git a/package/lean/luci-app-accesscontrol/root/etc/init.d/mia b/package/lean/luci-app-accesscontrol/root/etc/init.d/mia
new file mode 100755
index 0000000000..7a84f51f94
--- /dev/null
+++ b/package/lean/luci-app-accesscontrol/root/etc/init.d/mia
@@ -0,0 +1,88 @@
+#!/bin/sh /etc/rc.common
+#
+# Copyright (C) 2015 OpenWrt-dist
+#
+# This is free software, licensed under the GNU General Public License v3.
+# See /LICENSE for more information.
+#
+
+START=30
+
+CONFIG=mia
+
+uci_get_by_type() {
+	local index=0
+	if [ -n $4 ]; then
+		index=$4
+	fi
+	local ret=$(uci get $CONFIG.@$1[$index].$2 2>/dev/null)
+	echo ${ret:=$3}
+}
+
+add_rule(){
+for i in $(seq 0 100)
+do
+	local enable=$(uci_get_by_type macbind enable '' $i)
+	local macaddr=$(uci_get_by_type macbind macaddr '' $i)
+	local timeon=$(uci_get_by_type macbind timeon '' $i)
+	local timeoff=$(uci_get_by_type macbind timeoff '' $i)
+	local z1=$(uci_get_by_type macbind z1 '' $i)
+	local z2=$(uci_get_by_type macbind z2 '' $i)
+	local z3=$(uci_get_by_type macbind z3 '' $i)
+	local z4=$(uci_get_by_type macbind z4 '' $i)
+	local z5=$(uci_get_by_type macbind z5 '' $i)
+	local z6=$(uci_get_by_type macbind z6 '' $i)
+	local z7=$(uci_get_by_type macbind z7 '' $i)
+	[ "$z1" == "1" ] && Z1="Mon,"
+	[ "$z2" == "1" ] && Z2="Tue,"
+	[ "$z3" == "1" ] && Z3="Wed,"
+	[ "$z4" == "1" ] && Z4="Thu,"
+	[ "$z5" == "1" ] && Z5="Fri,"
+	[ "$z6" == "1" ] && Z6="Sat,"
+	[ "$z7" == "1" ] && Z7="Sun"
+	if [ -z $enable ] || [ -z $macaddr ] || [ -z $timeoff ] || [ -z $timeon ]; then
+		break
+	fi
+	if [ "$enable" == "1" ]; then
+		iptables -t filter -I MIA  -m mac --mac-source $macaddr -m time --kerneltz --timestart $timeon --timestop $timeoff --weekdays $Z1$Z2$Z3$Z4$Z5$Z6$Z7 -j DROP
+	fi
+	for n in $(seq 1 7)
+	do
+		unset "Z$n"
+	done
+done
+}
+
+del_rule(){
+	type=$1
+	blackMacAdd=$(iptables -t nat -L $type | grep -w RETURN | grep -w "MAC" | awk '{print $7}')
+	[ -n "$blackMacAdd" ] && {
+		for macaddrb in $blackMacAdd
+		do
+			iptables -t nat -D $type -m mac --mac-source $macaddrb -j RETURN
+		done
+	}
+}
+
+start(){
+  stop
+	enable=$(uci get mia.@basic[0].enable)
+	[ $enable -eq 0 ] && exit 0
+  iptables -t filter -N MIA
+  iptables -I INPUT -p udp --dport 53 -m comment --comment "Rule For Control" -j MIA
+  iptables -I INPUT -p tcp --dport 53 -m comment --comment "Rule For Control" -j MIA
+  iptables -t nat -A PREROUTING -p udp --dport 53 -j REDIRECT --to-ports 53 -m comment --comment "Rule For Control"
+  iptables -t nat -A PREROUTING -p tcp --dport 53 -j REDIRECT --to-ports 53 -m comment --comment "Rule For Control"
+  strict=$(uci get mia.@basic[0].strict)
+  [ $strict -eq 1 ] && iptables -t filter -I FORWARD -m comment --comment "Rule For Control" -j MIA
+  add_rule 
+}
+stop(){
+  iptables -t filter -D FORWARD -m comment --comment "Rule For Control" -j MIA 2>/dev/null
+  iptables -D INPUT -p udp --dport 53 -m comment --comment "Rule For Control" -j MIA 2>/dev/null
+  iptables -D INPUT -p tcp --dport 53 -m comment --comment "Rule For Control" -j MIA 2>/dev/null
+  iptables -t nat -D PREROUTING -p udp --dport 53 -j REDIRECT --to-ports 53 -m comment --comment "Rule For Control" 2>/dev/null
+  iptables -t nat -D PREROUTING -p tcp --dport 53 -j REDIRECT --to-ports 53 -m comment --comment "Rule For Control" 2>/dev/null
+  iptables -t filter -F MIA 2>/dev/null
+  iptables -t filter -X MIA 2>/dev/null
+}
diff --git a/package/lean/luci-app-accesscontrol/root/etc/mia.include b/package/lean/luci-app-accesscontrol/root/etc/mia.include
new file mode 100755
index 0000000000..4d7859f315
--- /dev/null
+++ b/package/lean/luci-app-accesscontrol/root/etc/mia.include
@@ -0,0 +1 @@
+/etc/init.d/mia restart
\ No newline at end of file
diff --git a/package/lean/luci-app-accesscontrol/root/etc/uci-defaults/mia b/package/lean/luci-app-accesscontrol/root/etc/uci-defaults/mia
new file mode 100755
index 0000000000..e0d2c31334
--- /dev/null
+++ b/package/lean/luci-app-accesscontrol/root/etc/uci-defaults/mia
@@ -0,0 +1,17 @@
+#!/bin/sh
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@mia[-1]
+	add ucitrack mia
+	set ucitrack.@mia[-1].init=mia
+	commit ucitrack
+	delete firewall.mia
+	set firewall.mia=include
+	set firewall.mia.type=script
+	set firewall.mia.path=/etc/mia.include
+	set firewall.mia.reload=1
+	commit firewall
+EOF
+
+rm -f /tmp/luci-indexcache
+exit 0
\ No newline at end of file
diff --git a/package/lean/luci-app-adbyby-plus/Makefile b/package/lean/luci-app-adbyby-plus/Makefile
new file mode 100644
index 0000000000..a1fe276522
--- /dev/null
+++ b/package/lean/luci-app-adbyby-plus/Makefile
@@ -0,0 +1,18 @@
+# Copyright (C) 2016 Openwrt.org
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI support for Adbyby
+LUCI_DEPENDS:=+adbyby +wget +ipset +coreutils +coreutils-nohup +dnsmasq-full
+LUCI_PKGARCH:=all
+PKG_NAME:=luci-app-adbyby-plus
+PKG_VERSION:=2.0
+PKG_RELEASE:=41
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
diff --git a/package/lean/luci-app-adbyby-plus/luasrc/controller/adbyby.lua b/package/lean/luci-app-adbyby-plus/luasrc/controller/adbyby.lua
new file mode 100644
index 0000000000..9d986d344b
--- /dev/null
+++ b/package/lean/luci-app-adbyby-plus/luasrc/controller/adbyby.lua
@@ -0,0 +1,18 @@
+
+module("luci.controller.adbyby", package.seeall)
+
+function index()
+	if not nixio.fs.access("/etc/config/adbyby") then
+		return
+	end
+	
+	entry({"admin", "services", "adbyby"}, cbi("adbyby"), _("ADBYBY Plus +"), 10).dependent = true
+	entry({"admin","services","adbyby","status"},call("act_status")).leaf=true
+end
+
+function act_status()
+  local e={}
+  e.running=luci.sys.call("pgrep adbyby >/dev/null")==0
+  luci.http.prepare_content("application/json")
+  luci.http.write_json(e)
+end
diff --git a/package/lean/luci-app-adbyby-plus/luasrc/model/cbi/adbyby.lua b/package/lean/luci-app-adbyby-plus/luasrc/model/cbi/adbyby.lua
new file mode 100644
index 0000000000..dd90786acf
--- /dev/null
+++ b/package/lean/luci-app-adbyby-plus/luasrc/model/cbi/adbyby.lua
@@ -0,0 +1,174 @@
+
+local NXFS = require "nixio.fs"
+local SYS  = require "luci.sys"
+local HTTP = require "luci.http"
+local DISP = require "luci.dispatcher"
+
+local DL = SYS.exec("head -1 /usr/share/adbyby/data/lazy.txt | awk -F' ' '{print $3,$4}'")
+local DV = SYS.exec("head -1 /usr/share/adbyby/data/video.txt | awk -F' ' '{print $3,$4}'")
+local NR = SYS.exec("grep -v '^!' /usr/share/adbyby/data/rules.txt | wc -l")
+local NU = SYS.exec("cat /usr/share/adbyby/data/user.txt | wc -l")
+local UD = SYS.exec("cat /tmp/adbyby.updated 2>/dev/null")
+local ND = SYS.exec("cat /usr/share/adbyby/dnsmasq.adblock | wc -l")
+
+m = Map("adbyby")
+m.title	= translate("Adbyby Plus +")
+m.description = translate("Adbyby Plus + can filter all kinds of banners, popups, video ads, and prevent tracking, privacy theft and a variety of malicious websites<br /><font color=\"red\">Plus + version combination mode can operation with Adblock Plus Host，filtering ads without losing bandwidth</font>")
+
+m:section(SimpleSection).template  = "adbyby/adbyby_status"
+
+s = m:section(TypedSection, "adbyby")
+s.anonymous = true
+
+s:tab("basic",  translate("Base Setting"))
+
+o = s:taboption("basic", Flag, "enable")
+o.title = translate("Enable")
+o.default = 0
+o.rmempty = false
+
+o = s:taboption("basic", ListValue, "wan_mode")
+o.title = translate("Running Mode")
+o:value("0", translate("Global Mode（The slowest, the best effects）"))
+o:value("1", translate("Plus + Mode（Filter domain name list and blacklist website.Recommended）"))
+o:value("2", translate("No filter Mode (Must set in Client Filter Mode Settings manually)"))
+o.default = 1
+o.rmempty = false
+
+mem = s:taboption("basic", Flag, "mem_mode")
+mem.title = translate("RAM Running Mode")
+mem.default = 1
+mem.rmempty = false
+mem.description = translate("Running Adbyby in RAM.More speed,less disk consumption")
+
+
+o = s:taboption("basic", Button, "restart")
+o.title = translate("Adbyby and Rule state")
+o.inputtitle = translate("Restart Adbyby")
+o.description = string.format("<strong>Last Update Checked：</strong> %s<br /><strong>Lazy Rule：</strong>%s <br /><strong>Video Rule：</strong>%s", UD, DL, DV) 
+o.inputstyle = "reload"
+o.write = function()
+	SYS.call("nohup sh /usr/share/adbyby/adupdate.sh > /tmp/adupdate.log 2>&1 &")
+	SYS.call("sleep 4")
+	HTTP.redirect(DISP.build_url("admin", "services", "adbyby"))
+end
+
+s:tab("advanced", translate("Advance Setting"))
+
+o = s:taboption("advanced", Flag, "cron_mode")
+o.title = translate("Update the rule at 6 a.m. every morning and restart adbyby")
+o.default = 0
+o.rmempty = false
+o.description = translate(string.format("<strong><font color=blue>Adblock Plus Host List：</font></strong> %s Lines<br /><br />", ND))
+
+updatead = s:taboption("advanced", Button, "updatead", translate("Manually force update<br />Adblock Plus Host List"), translate("Note: It needs to download and convert the rules. The background process may takes 60-120 seconds to run. <br / > After completed it would automatically refresh, please do not duplicate click!"))
+updatead.inputtitle = translate("Manually force update")
+updatead.inputstyle = "apply"
+updatead.write = function()
+	SYS.call("nohup sh /usr/share/adbyby/adblock.sh > /tmp/adupdate.log 2>&1 &")
+end
+
+o = s:taboption("advanced", Flag, "block_ios")
+o.title = translate("Block Apple iOS OTA update")
+o.default = 0
+o.rmempty = false
+
+s:tab("help",  translate("Plus+ Domain List"))
+
+local conf = "/usr/share/adbyby/adhost.conf"
+o = s:taboption("help", TextValue, "conf")
+o.description = translate("（!）Note that you should fill to the domain name ONLY. For example, http://www.baidu.com only needs to write to baidu.com. One line for each")
+o.rows = 13
+o.wrap = "off"
+o.cfgvalue = function(self, section)
+	return NXFS.readfile(conf) or ""
+end
+o.write = function(self, section, value)
+	NXFS.writefile(conf, value:gsub("\r\n", "\n"))
+	--SYS.call("/etc/init.d/adbyby restart")
+end
+
+s:tab("esc",  translate("Bypass Domain List"))
+
+local escconf = "/usr/share/adbyby/adesc.conf"
+o = s:taboption("esc", TextValue, "escconf")
+o.description = translate("（!）Will Never filter these Domain")
+o.rows = 13
+o.wrap = "off"
+o.cfgvalue = function(self, section)
+	return NXFS.readfile(escconf) or ""
+end
+o.write = function(self, section, value)
+	NXFS.writefile(escconf, value:gsub("\r\n", "\n"))
+	--SYS.call("/etc/init.d/adbyby restart")
+end
+
+s:tab("black",  translate("Black Domain List"))
+
+local blackconf = "/usr/share/adbyby/adblack.conf"
+o = s:taboption("black", TextValue, "blackconf")
+o.description = translate("（!）Will Always block these Domain")
+o.rows = 13
+o.wrap = "off"
+o.cfgvalue = function(self, section)
+	return NXFS.readfile(blackconf) or ""
+end
+o.write = function(self, section, value)
+	NXFS.writefile(blackconf, value:gsub("\r\n", "\n"))
+	--SYS.call("/etc/init.d/adbyby restart")
+end
+
+s:tab("block",  translate("Black IP List"))
+
+local blockconf = "/usr/share/adbyby/blockip.conf"
+o = s:taboption("block", TextValue, "blockconf")
+o.description = translate("（!）Will Always block these IP")
+o.rows = 13
+o.wrap = "off"
+o.cfgvalue = function(self, section)
+	return NXFS.readfile(blockconf) or " "
+end
+o.write = function(self, section, value)
+	NXFS.writefile(blockconf, value:gsub("\r\n", "\n"))
+	--SYS.call("/etc/init.d/adbyby restart")
+end
+
+s:tab("user", translate("User-defined Rule"))
+
+local file = "/usr/share/adbyby/rules.txt"
+o = s:taboption("user", TextValue, "rules")
+o.description = translate("Each line of the beginning exclamation mark is considered an annotation.")
+o.rows = 13
+o.wrap = "off"
+o.cfgvalue = function(self, section)
+	return NXFS.readfile(file) or ""
+end
+o.write = function(self, section, value)
+	NXFS.writefile(file, value:gsub("\r\n", "\n"))
+end
+
+t=m:section(TypedSection,"acl_rule",translate("<strong>Client Filter Mode Settings</strong>"),
+translate("Filter mode settings can be set to specific LAN clients ( <font color=blue> No filter , Global filter </font> ) . Does not need to be set by default."))
+t.template="cbi/tblsection"
+t.sortable=true
+t.anonymous=true
+t.addremove=true
+
+e=t:option(Value,"ipaddr",translate("IP Address"))
+e.width="40%"
+e.datatype="ip4addr"
+e.placeholder="0.0.0.0/0"
+luci.ip.neighbors({ family = 4 }, function(entry)
+	if entry.reachable then
+		e:value(entry.dest:string())
+	end
+end)
+
+e=t:option(ListValue,"filter_mode",translate("Filter Mode"))
+e.width="40%"
+e.default="disable"
+e.rmempty=false
+e:value("disable",translate("No filter"))
+e:value("global",translate("Global filter"))
+
+return m
diff --git a/package/lean/luci-app-adbyby-plus/luasrc/view/adbyby/adbyby_status.htm b/package/lean/luci-app-adbyby-plus/luasrc/view/adbyby/adbyby_status.htm
new file mode 100644
index 0000000000..8191b63a65
--- /dev/null
+++ b/package/lean/luci-app-adbyby-plus/luasrc/view/adbyby/adbyby_status.htm
@@ -0,0 +1,22 @@
+<script type="text/javascript">//<![CDATA[
+XHR.poll(3, '<%=url([[admin]], [[services]], [[adbyby]], [[status]])%>', null,
+	function(x, data) {
+		var tb = document.getElementById('adbyby_status');
+		if (data && tb) {
+			if (data.running) {
+				var links = '<em><b><font color=green>Adbyby Plus+ <%:RUNNING%></font></b></em>';
+				tb.innerHTML = links;
+			} else {
+				tb.innerHTML = '<em><b><font color=red>Adbyby Plus+ <%:NOT RUNNING%></font></b></em>';
+			}
+		}
+	}
+);
+//]]>
+</script>
+<style>.mar-10 {margin-left: 50px; margin-right: 10px;}</style>
+<fieldset class="cbi-section">
+	<p id="adbyby_status">
+		<em><%:Collecting data...%></em>
+	</p>
+</fieldset>
\ No newline at end of file
diff --git a/package/lean/luci-app-adbyby-plus/po/zh-cn/adbyby.po b/package/lean/luci-app-adbyby-plus/po/zh-cn/adbyby.po
new file mode 100644
index 0000000000..b0842860c6
--- /dev/null
+++ b/package/lean/luci-app-adbyby-plus/po/zh-cn/adbyby.po
@@ -0,0 +1,125 @@
+msgid "ADBYBY Plus +"
+msgstr "广告屏蔽大师 Plus+"
+
+msgid "<strong><font color=\"green\">Adbyby Plus + is Running</font></strong>"
+msgstr "<strong><font color=\"green\">广告屏蔽大师 Plus + 正在运行</font></strong>"
+
+msgid "<strong><font color=\"red\">Adbyby Plus + is Not Running</font></strong>"
+msgstr "<strong><font color=\"red\">广告屏蔽大师 Plus + 没有运行</font></strong>"
+
+msgid "Adbyby Plus + can filter all kinds of banners, popups, video ads, and prevent tracking, privacy theft and a variety of malicious websites<br /><font color=\"red\">Plus + version combination mode can operation with Adblock Plus Host，filtering ads without losing bandwidth</font>"
+msgstr "广告屏蔽大师 Plus + 可以全面过滤各种横幅、弹窗、视频广告，同时阻止跟踪、隐私窃取及各种恶意网站<br /><font color=\"red\">Plus + 版本可以和 Adblock Plus Host 结合方式运行，过滤广告不损失带宽</font>"
+
+msgid "Adbyby Plus +"
+msgstr "广告屏蔽大师 Plus+"
+
+msgid "Base Setting"
+msgstr "基本设置"
+
+msgid "Running Mode"
+msgstr "运行模式"
+
+msgid "Global Mode（The slowest, the best effects）"
+msgstr "全局模式（最慢, 效果最好）"
+
+msgid "Plus + Mode（Filter domain name list and blacklist website.Recommended）"
+msgstr "Plus + 模式（只过滤列表内域名结合ABP名单。推荐！）"
+
+msgid "No filter Mode (Must set in Client Filter Mode Settings manually)"
+msgstr "手动代理模式（必须手动设置浏览器代理，或者客户端过滤模式设置）"
+
+msgid "Transparent proxy"
+msgstr "透明代理"
+
+msgid "Click to disable"
+msgstr "点击关闭"
+
+msgid "Click to enable"
+msgstr "点击开启"
+
+msgid "Adbyby and Rule state"
+msgstr "规则状态"
+
+msgid "Restart Adbyby"
+msgstr "重启Adbyby"
+
+msgid "Plus+ Domain List"
+msgstr "Plus+ 模式过滤的域名"
+
+msgid "Bypass Domain List"
+msgstr "域名白名单"
+
+msgid "Black Domain List"
+msgstr "域名黑名单"
+
+msgid "Black IP List"
+msgstr "IP黑名单"
+
+
+msgid "Advance Setting"
+msgstr "高级设置"
+
+msgid "Update the rule at 6 a.m. every morning and restart adbyby"
+msgstr "每天凌晨6点更新规则并重启"
+
+msgid "Manually force update<br />Adblock Plus Host List"
+msgstr "手动强制更新<br />Adblock Plus Host List"
+
+msgid "Manually force update"
+msgstr "手动强制更新"
+
+msgid "Block Apple iOS OTA update"
+msgstr "拦截 Apple iOS 的OTA更新"
+
+msgid "RAM Running Mode"
+msgstr "内存运行模式"
+
+msgid "Running Adbyby in RAM.More speed,less disk consumption"
+msgstr "在内存中运行Adbyby。更快的速度，更少的存储空间损耗"
+
+
+msgid "User-defined Rule"
+msgstr "用户自定义规则"
+
+msgid "<strong>Client Filter Mode Settings</strong>"
+msgstr "<strong>客户端过滤模式设置</strong>"
+
+msgid "Filter mode settings can be set to specific LAN clients ( <font color=blue> No filter , Global filter </font> ) . Does not need to be set by default."
+msgstr "可以为局域网客户端分别设置不同的过滤模式 ( <font color=blue> 不过滤 , 全局过滤 </font> ) 。默认无需设置"
+
+msgid "IP Address"
+msgstr "IP地址"
+
+msgid "Filter Mode"
+msgstr "过滤模式"
+
+msgid "（!）Note that you should fill to the domain name ONLY. For example, http://www.baidu.com only needs to write to baidu.com. One line for each"
+msgstr "这些域名在 Plus 模式中会被过滤。你需要要填写域名即可，例如  http://www.baidu.com，你写 baidu.com 即可。每行一个域名"
+
+msgid "（!）Will Never filter these Domain"
+msgstr "永不过滤白名单内的域名（所有模式中生效）"
+
+msgid "（!）Will Always block these Domain"
+msgstr "拦截黑名单内的域名（所有模式中生效）"
+
+msgid "（!）Will Always block these IP"
+msgstr "拦截黑名单内的IP地址（所有模式中生效）"
+
+msgid "Each line of the beginning exclamation mark is considered an annotation."
+msgstr "每行一条规则，感叹号开头的被认为是注释"
+
+msgid "<strong><font color=blue>Adblock Plus Host List：</font></strong>"
+msgstr "<strong><font color=blue>Adblock Plus Host 列表：</font></strong>"
+
+msgid "Note: It needs to download and convert the rules. The background process may takes 60-120 seconds to run. <br / > After completed it would automatically refresh, please do not duplicate click!"
+msgstr "注意：需要下载并转换规则。后台进程可能需要60-120秒运行。完成后会自动刷新，请不要重复点击！"
+
+msgid "No filter"
+msgstr "不过滤"
+
+msgid "Global filter"
+msgstr "全局过滤"
+
+msgid "Update adbyby rules form official website first"
+msgstr "优先从官方网站更新规则"
+
diff --git a/package/lean/luci-app-adbyby-plus/root/etc/config/adbyby b/package/lean/luci-app-adbyby-plus/root/etc/config/adbyby
new file mode 100644
index 0000000000..d2afc6ed75
--- /dev/null
+++ b/package/lean/luci-app-adbyby-plus/root/etc/config/adbyby
@@ -0,0 +1,11 @@
+
+config adbyby
+	option daemon '2'
+	option lan_mode '0'
+	option cron_mode '1'
+	option block_ios '0'
+	option enable '0'
+	option wan_mode '1'
+	option mem_mode '1'
+	option update_source '1'
+
diff --git a/package/lean/luci-app-adbyby-plus/root/etc/init.d/adbyby b/package/lean/luci-app-adbyby-plus/root/etc/init.d/adbyby
new file mode 100755
index 0000000000..87121d1f5a
--- /dev/null
+++ b/package/lean/luci-app-adbyby-plus/root/etc/init.d/adbyby
@@ -0,0 +1,222 @@
+#!/bin/sh /etc/rc.common
+
+START=99
+STOP=10
+
+EXTRA_COMMANDS="add_rule del_rule reload_rule"
+PROG_PATH=/usr/share/adbyby
+DATA_PATH=$PROG_PATH/data
+WAN_FILE=/var/etc/dnsmasq-adbyby.d/03-adbyby-ipset.conf
+CRON_FILE=/etc/crontabs/root
+CONFIG=adbyby
+ipt_n="iptables -t nat"
+
+
+get_config()
+{
+	config_get_bool enable $1 enable
+	config_get_bool cron_mode $1 cron_mode
+	config_get wan_mode $1 wan_mode
+	config_get_bool block_ios $1 block_ios 0
+	config_get_bool mem_mode $1 mem_mode 1
+}
+
+add_rules()
+{
+	rm -f $DATA_PATH/user.bin
+	grep -v ^! $PROG_PATH/rules.txt > $DATA_PATH/user.txt
+	cp $PROG_PATH/rules.txt $DATA_PATH/rules.txt
+}
+
+
+add_cron()
+{
+	if [ $cron_mode -eq 1 ]; then
+    sed -i '/adblock.sh/d' $CRON_FILE
+		echo '0 6 * * * /usr/share/adbyby/adblock.sh > /tmp/adupdate.log 2>&1' >> $CRON_FILE
+		crontab $CRON_FILE
+	fi
+}
+
+del_cron()
+{
+	sed -i '/adblock.sh/d' $CRON_FILE
+	/etc/init.d/cron restart
+}
+
+ip_rule()
+{
+
+  ipset -N adbyby_esc hash:ip
+  $ipt_n -A ADBYBY -m set --match-set adbyby_esc dst -j RETURN
+    
+	for i in $(seq 0 100)
+	do
+		local ip=$(uci_get_by_type acl_rule ipaddr '' $i)
+		local mode=$(uci_get_by_type acl_rule filter_mode '' $i)
+		case "$mode" in
+		disable)
+			$ipt_n -A ADBYBY -s $ip -j RETURN
+			;;
+		global)
+			$ipt_n -A ADBYBY -s $ip -p tcp -j REDIRECT --to-ports 8118
+			$ipt_n -A ADBYBY -s $ip -j RETURN
+			;;
+		esac
+	done
+	
+	
+	
+	case $wan_mode in
+		0)
+			;;
+		1)
+      ipset -N adbyby_wan hash:ip
+			$ipt_n -A ADBYBY -m set ! --match-set adbyby_wan dst -j RETURN
+			;;
+		2)
+			$ipt_n -I ADBYBY -j RETURN
+			;;
+	esac
+	
+	echo "create blockip hash:net family inet hashsize 1024 maxelem 65536" > /tmp/blockip.ipset
+  awk '!/^$/&&!/^#/{printf("add blockip %s'" "'\n",$0)}' /usr/share/adbyby/blockip.conf >> /tmp/blockip.ipset
+  ipset -! restore < /tmp/blockip.ipset 2>/dev/null
+  iptables -I FORWARD -m set --match-set blockip dst -j DROP
+  iptables -I OUTPUT -m set --match-set blockip dst -j DROP
+}
+
+add_dns()
+{
+		mkdir -p /var/etc/dnsmasq-adbyby.d
+    mkdir -p /tmp/dnsmasq.d
+    awk '!/^$/&&!/^#/{printf("ipset=/%s/'"adbyby_esc"'\n",$0)}' $PROG_PATH/adesc.conf > /var/etc/dnsmasq-adbyby.d/06-dnsmasq.esc
+    awk '!/^$/&&!/^#/{printf("address=/%s/'"0.0.0.0"'\n",$0)}' $PROG_PATH/adblack.conf > /var/etc/dnsmasq-adbyby.d/07-dnsmasq.black
+		cat > /tmp/dnsmasq.d/dnsmasq-adbyby.conf <<EOF
+conf-dir=/var/etc/dnsmasq-adbyby.d
+EOF
+    
+	local var=1
+		if [ $wan_mode -eq 1 ]; then
+		awk '!/^$/&&!/^#/{printf("ipset=/%s/'"adbyby_wan"'\n",$0)}' $PROG_PATH/adhost.conf > $WAN_FILE
+		if ls /var/etc/dnsmasq-adbyby.d/* >/dev/null 2>&1; then
+      mkdir -p /tmp/dnsmasq.d
+      cp /usr/share/adbyby/dnsmasq.adblock /var/etc/dnsmasq-adbyby.d/04-dnsmasq.adblock
+      cp /usr/share/adbyby/dnsmasq.ads /var/etc/dnsmasq-adbyby.d/05-dnsmasq.ads
+	  fi
+	fi
+	
+   sed -i '/mesu.apple.com/d' /etc/dnsmasq.conf && [ $block_ios -eq 1 ] && echo 'address=/mesu.apple.com/0.0.0.0' >> /etc/dnsmasq.conf
+}
+
+del_dns()
+{
+		rm -f /tmp/dnsmasq.d/dnsmasq-adbyby.conf
+		rm -f /var/etc/dnsmasq-adbyby.d/*
+		rm -f /tmp/adbyby_host.conf
+}
+
+
+add_rule()
+{
+	$ipt_n -N ADBYBY
+	$ipt_n -A ADBYBY -d 0.0.0.0/8 -j RETURN
+	$ipt_n -A ADBYBY -d 10.0.0.0/8 -j RETURN
+	$ipt_n -A ADBYBY -d 127.0.0.0/8 -j RETURN
+	$ipt_n -A ADBYBY -d 169.254.0.0/16 -j RETURN
+	$ipt_n -A ADBYBY -d 172.16.0.0/12 -j RETURN
+	$ipt_n -A ADBYBY -d 192.168.0.0/16 -j RETURN
+	$ipt_n -A ADBYBY -d 224.0.0.0/4 -j RETURN
+	$ipt_n -A ADBYBY -d 240.0.0.0/4 -j RETURN
+	ip_rule
+	$ipt_n -A ADBYBY -p tcp -j REDIRECT --to-ports 8118
+	$ipt_n -I PREROUTING -p tcp --dport 80 -j ADBYBY
+}
+
+del_rule()
+{
+	$ipt_n -D PREROUTING -p tcp --dport 80 -j ADBYBY 2>/dev/null
+	$ipt_n -F ADBYBY 2>/dev/null
+	$ipt_n -X ADBYBY 2>/dev/null
+	iptables -D FORWARD -m set --match-set blockip dst -j DROP 2>/dev/null
+	iptables -D OUTPUT -m set --match-set blockip dst -j DROP 2>/dev/null
+	ipset -F adbyby_esc 2>/dev/null
+	ipset -X adbyby_esc 2>/dev/null
+	ipset -F adbyby_wan 2>/dev/null
+	ipset -X adbyby_wan 2>/dev/null
+	ipset -F blockip 2>/dev/null
+	ipset -X blockip 2>/dev/null
+}
+
+reload_rule()
+{
+	config_load adbyby
+	config_foreach get_config adbyby
+	del_rule
+	iptables-save | grep ADBYBY >/dev/null || \
+	add_rule
+}
+
+start()
+{
+	config_load adbyby
+	config_foreach get_config adbyby
+	[ $enable -eq 0 ] && exit 0
+	add_cron
+	if [ $mem_mode -eq 1 ]; then
+    echo "start mem mode"
+    if mount | grep adbyby >/dev/null 2>&1; then
+      echo "has mount"
+    else
+      echo "mount adbyby"
+      [ ! -d "/tmp/adbyby" ]  && mkdir -p /tmp/adbyby && cp -a $PROG_PATH/data /tmp/adbyby/
+      mount --bind /tmp/adbyby/data $PROG_PATH/data
+    fi
+    /usr/share/adbyby/admem.sh &
+  else
+    /usr/share/adbyby/adupdate.sh &
+	fi
+	echo "add adbyby rules"
+	add_rules
+	$PROG_PATH/adbyby &>/dev/null &
+	add_dns
+	iptables-save | grep ADBYBY >/dev/null || \
+	add_rule
+	/etc/init.d/dnsmasq restart
+}
+
+stop()
+{
+  config_load adbyby
+	config_foreach get_config adbyby
+	del_rule
+	del_cron
+	del_dns
+	killall -q adbyby
+	if [ $mem_mode -eq 1 ]; then
+    echo "stop mem mode"
+    if mount | grep adbyby >/dev/null 2>&1; then
+      echo "umount adbyby"
+      umount /usr/share/adbyby/data
+    fi
+	fi
+	kill -9 $(ps | grep admem.sh | grep -v grep | awk '{print $1}') >/dev/null 2>&1 
+	/etc/init.d/dnsmasq restart
+}
+
+
+uci_get_by_name() {
+	local ret=$(uci get $CONFIG.$1.$2 2>/dev/null)
+	echo ${ret:=$3}
+}
+
+uci_get_by_type() {
+	local index=0
+	if [ -n $4 ]; then
+	
+		index=$4
+	fi
+	local ret=$(uci get $CONFIG.@$1[$index].$2 2>/dev/null)
+	echo ${ret:=$3}
+}
+
diff --git a/package/lean/luci-app-adbyby-plus/root/etc/ppp/ip-up.d/adrulesup.sh b/package/lean/luci-app-adbyby-plus/root/etc/ppp/ip-up.d/adrulesup.sh
new file mode 100755
index 0000000000..2325452eb5
--- /dev/null
+++ b/package/lean/luci-app-adbyby-plus/root/etc/ppp/ip-up.d/adrulesup.sh
@@ -0,0 +1,3 @@
+#!/bin/sh
+
+sleep 40 && /etc/init.d/adbyby restart
diff --git a/package/lean/luci-app-adbyby-plus/root/etc/uci-defaults/adbyby b/package/lean/luci-app-adbyby-plus/root/etc/uci-defaults/adbyby
new file mode 100755
index 0000000000..30d429cb8d
--- /dev/null
+++ b/package/lean/luci-app-adbyby-plus/root/etc/uci-defaults/adbyby
@@ -0,0 +1,30 @@
+#!/bin/sh
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@adbyby[-1]
+	add ucitrack adbyby
+	set ucitrack.@adbyby[-1].init=adbyby
+	commit ucitrack
+	delete firewall.adbyby
+	set firewall.adbyby=include
+	set firewall.adbyby.type=script
+	set firewall.adbyby.path=/usr/share/adbyby/firewall.include
+	set firewall.adbyby.reload=1
+	delete firewall.adblock
+  add firewall rule
+  rename firewall.@rule[-1]="adblock"
+  set firewall.@rule[-1].name="adblock"
+  set firewall.@rule[-1].target="DROP"
+  set firewall.@rule[-1].src="wan"
+  set firewall.@rule[-1].proto="tcp"
+  set firewall.@rule[-1].dest_port="8118"
+	commit firewall
+EOF
+
+mkdir -p /etc/dnsmasq.d
+
+/etc/init.d/adbyby stop
+/etc/init.d/adbyby enable
+
+rm -f /tmp/luci-indexcache
+exit 0
diff --git a/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/adblack.conf b/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/adblack.conf
new file mode 100644
index 0000000000..a532f5825b
--- /dev/null
+++ b/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/adblack.conf
@@ -0,0 +1,14 @@
+gvod.aiseejapp.atianqi.com
+stat.pandora.xiaomi.com
+upgrade.mishop.pandora.xiaomi.com
+logonext.tv.kuyun.com
+config.kuyun.com
+mishop.pandora.xiaomi.com
+dvb.pandora.xiaomi.com
+api.ad.xiaomi.com
+de.pandora.xiaomi.com
+data.mistat.xiaomi.com
+jellyfish.pandora.xiaomi.com
+gallery.pandora.xiaomi.com
+o2o.api.xiaomi.com
+bss.pandora.xiaomi.com
diff --git a/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/adblock.sh b/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/adblock.sh
new file mode 100755
index 0000000000..0d9264cfe7
--- /dev/null
+++ b/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/adblock.sh
@@ -0,0 +1,14 @@
+#!/bin/sh
+
+rm -f /tmp/dnsmasq.adblock
+
+wget-ssl --no-check-certificate -O- https://easylist-downloads.adblockplus.org/easylistchina+easylist.txt | grep ^\|\|[^\*]*\^$ | sed -e 's:||:address\=\/:' -e 's:\^:/0\.0\.0\.0:' > /tmp/dnsmasq.adblock
+if [ -s "/tmp/dnsmasq.adblock" ];then
+	sed -i '/youku.com/d' /tmp/dnsmasq.adblock
+	if ( ! cmp -s /tmp/dnsmasq.adblock /usr/share/adbyby/dnsmasq.adblock );then
+		mv /tmp/dnsmasq.adblock /usr/share/adbyby/dnsmasq.adblock	
+	fi	
+fi
+
+sh /usr/share/adbyby/adupdate.sh
+sleep 10 && /etc/init.d/adbyby restart
diff --git a/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/adesc.conf b/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/adesc.conf
new file mode 100644
index 0000000000..c5898a1288
--- /dev/null
+++ b/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/adesc.conf
@@ -0,0 +1,3 @@
+weixin.qq.com
+qpic.cn
+imtt.qq.com
diff --git a/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/adhost.conf b/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/adhost.conf
new file mode 100644
index 0000000000..5f4f1a124e
--- /dev/null
+++ b/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/adhost.conf
@@ -0,0 +1,68 @@
+cbjs.baidu.com
+list.video.baidu.com
+nsclick.baidu.com
+play.baidu.com
+sclick.baidu.com
+tieba.baidu.com
+baidustatic.com
+bdimg.com
+bdstatic.com
+share.baidu.com
+hm.baidu.com
+v.baidu.com
+cpro.baidu.com
+1000fr.net
+atianqi.com
+56.com
+v-56.com
+acfun.com
+acfun.tv
+baofeng.com
+baofeng.net
+cntv.cn
+hoopchina.com.cn
+funshion.com
+fun.tv
+hitvs.cn
+hljtv.com
+iqiyi.com
+qiyi.com
+agn.aty.sohu.com
+itc.cn
+kankan.com
+ku6.com
+letv.com
+letvcloud.com
+letvimg.com
+pplive.cn
+pps.tv
+ppsimg.com
+pptv.com
+www.qq.com
+l.qq.com
+v.qq.com
+video.sina.com.cn
+tudou.com
+wasu.cn
+analytics-union.xunlei.com
+kankan.xunlei.com
+youku.com
+hunantv.com
+ifeng.com
+renren.com
+mediav.com
+cnbeta.com
+mydrivers.com
+168f.info
+doubleclick.net
+126.net
+sohu.com
+right.com.cn
+50bang.org
+you85.cn
+jiuzhilan.com
+googles.com
+cnbetacdn.com
+ptqy.gitv.tv
+admaster.com.cn
+serving-sys.com
diff --git a/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/admem.sh b/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/admem.sh
new file mode 100755
index 0000000000..a7905d67b0
--- /dev/null
+++ b/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/admem.sh
@@ -0,0 +1,36 @@
+#!/bin/sh
+
+if [ ! -f "/tmp/adbyby.updated" ];then
+  touch /tmp/adbyby.mem
+  wget_ok="0"
+  while [ "$wget_ok" = "0" ] 
+    do 
+    wget-ssl --spider --quiet --tries=1 --timeout=3 www.baidu.com
+    if [ "$?" == "0" ]; then
+      wget_ok="1"
+      touch /tmp/lazy.txt && wget-ssl --no-check-certificate -t 1 -T 10 -O /tmp/lazy.txt https://coding.net/u/adbyby/p/xwhyc-rules/git/raw/master/lazy.txt
+      touch /tmp/video.txt && wget-ssl --no-check-certificate -t 1 -T 10 -O /tmp/video.txt https://coding.net/u/adbyby/p/xwhyc-rules/git/raw/master/video.txt
+      
+      touch /tmp/local-md5.json && md5sum /tmp/lazy.txt /tmp/video.txt > /tmp/local-md5.json
+      touch /tmp/md5.json && wget-ssl --no-check-certificate -t 1 -T 10 -O /tmp/md5.json https://coding.net/u/adbyby/p/xwhyc-rules/git/raw/master/md5.json
+      
+      lazy_local=$(grep 'lazy' /tmp/local-md5.json | awk -F' ' '{print $1}')
+      video_local=$(grep 'video' /tmp/local-md5.json | awk -F' ' '{print $1}')  
+      lazy_online=$(sed  's/":"/\n/g' /tmp/md5.json  |  sed  's/","/\n/g' | sed -n '2p')
+      video_online=$(sed  's/":"/\n/g' /tmp/md5.json  |  sed  's/","/\n/g' | sed -n '4p')
+      
+      if [ "$lazy_online"x == "$lazy_local"x -a "$video_online"x == "$video_local"x ]; then
+          echo "adbyby rules MD5 OK!"
+          mv /tmp/lazy.txt /usr/share/adbyby/data/lazy.txt
+          mv /tmp/video.txt /usr/share/adbyby/data/video.txt
+          echo $(date +%F) > /tmp/adbyby.updated
+          logger "adbyby mem mode rules updated!"
+      fi    
+    else
+      sleep 10
+    fi
+   done
+   rm -f /tmp/adbyby.mem /tmp/lazy.txt /tmp/video.txt /tmp/local-md5.json /tmp/md5.json
+   rm -f /usr/share/adbyby/data/*.bak
+   sleep 10 && /etc/init.d/adbyby restart
+fi
diff --git a/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/adupdate.sh b/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/adupdate.sh
new file mode 100755
index 0000000000..743ccc0934
--- /dev/null
+++ b/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/adupdate.sh
@@ -0,0 +1,30 @@
+#!/bin/sh
+
+rm -f /usr/share/adbyby/data/*.bak
+
+touch /tmp/local-md5.json && md5sum /usr/share/adbyby/data/lazy.txt /usr/share/adbyby/data/video.txt > /tmp/local-md5.json
+touch /tmp/md5.json && wget-ssl --no-check-certificate -t 1 -T 10 -O /tmp/md5.json https://coding.net/u/adbyby/p/xwhyc-rules/git/raw/master/md5.json
+
+lazy_local=$(grep 'lazy' /tmp/local-md5.json | awk -F' ' '{print $1}')
+video_local=$(grep 'video' /tmp/local-md5.json | awk -F' ' '{print $1}')  
+lazy_online=$(sed  's/":"/\n/g' /tmp/md5.json  |  sed  's/","/\n/g' | sed -n '2p')
+video_online=$(sed  's/":"/\n/g' /tmp/md5.json  |  sed  's/","/\n/g' | sed -n '4p')
+
+if [ "$lazy_online"x != "$lazy_local"x -o "$video_online"x != "$video_local"x ]; then
+    echo "MD5 not match! Need update!"
+    touch /tmp/lazy.txt && wget-ssl --no-check-certificate -t 1 -T 10 -O /tmp/lazy.txt https://coding.net/u/adbyby/p/xwhyc-rules/git/raw/master/lazy.txt
+    touch /tmp/video.txt && wget-ssl --no-check-certificate -t 1 -T 10 -O /tmp/video.txt https://coding.net/u/adbyby/p/xwhyc-rules/git/raw/master/video.txt
+    touch /tmp/local-md5.json && md5sum /tmp/lazy.txt /tmp/video.txt > /tmp/local-md5.json
+    lazy_local=$(grep 'lazy' /tmp/local-md5.json | awk -F' ' '{print $1}')
+    video_local=$(grep 'video' /tmp/local-md5.json | awk -F' ' '{print $1}')
+    if [ "$lazy_online"x == "$lazy_local"x -a "$video_online"x == "$video_local"x ]; then
+      echo "New rules MD5 match!"
+      mv /tmp/lazy.txt /usr/share/adbyby/data/lazy.txt
+      mv /tmp/video.txt /usr/share/adbyby/data/video.txt
+      echo $(date +"%Y-%m-%d %H:%M:%S") > /tmp/adbyby.updated
+     fi
+else
+     echo "MD5 match! No need to update!"
+fi
+
+rm -f /tmp/lazy.txt /tmp/video.txt /tmp/local-md5.json /tmp/md5.json
diff --git a/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/blockip.conf b/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/blockip.conf
new file mode 100644
index 0000000000..55cb84b536
--- /dev/null
+++ b/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/blockip.conf
@@ -0,0 +1 @@
+2.2.2.2
diff --git a/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/dnsmasq.adblock b/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/dnsmasq.adblock
new file mode 100755
index 0000000000..6f0950609e
--- /dev/null
+++ b/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/dnsmasq.adblock
@@ -0,0 +1,940 @@
+address=/a.youdao.com/0.0.0.0
+address=/adrs.sdo.com/0.0.0.0
+address=/hiad.myweb.hinet.net/0.0.0.0
+address=/log.interest.mix.sina.com.cn/0.0.0.0
+address=/tuiguang.178.com/0.0.0.0
+address=/0xxd.com/0.0.0.0
+address=/104.195.62.12/0.0.0.0
+address=/111.175.219.7/0.0.0.0
+address=/111111qb.com/0.0.0.0
+address=/112.124.98.75/0.0.0.0
+address=/116.55.227.242/0.0.0.0
+address=/122.227.254.195/0.0.0.0
+address=/123hala.com/0.0.0.0
+address=/139.159.32.82/0.0.0.0
+address=/182.92.81.104/0.0.0.0
+address=/1l1.cc/0.0.0.0
+address=/201071.com/0.0.0.0
+address=/2012ui.com/0.0.0.0
+address=/211.167.105.131/0.0.0.0
+address=/220.115.251.25/0.0.0.0
+address=/221.204.213.222/0.0.0.0
+address=/2m2n.com/0.0.0.0
+address=/360baidus.com/0.0.0.0
+address=/365bibi.com/0.0.0.0
+address=/365safego.com/0.0.0.0
+address=/366safego.com/0.0.0.0
+address=/36pn.com/0.0.0.0
+address=/3g.990.net/0.0.0.0
+address=/52kmk.com/0.0.0.0
+address=/58.215.179.159/0.0.0.0
+address=/61.152.223.15/0.0.0.0
+address=/68665565.com/0.0.0.0
+address=/6dvip.com/0.0.0.0
+address=/71sem.com/0.0.0.0
+address=/77power.com/0.0.0.0
+address=/7wen.cn/0.0.0.0
+address=/7xz3.com/0.0.0.0
+address=/81c.cn/0.0.0.0
+address=/85tgw.com/0.0.0.0
+address=/88rpg.net/0.0.0.0
+address=/892155.com/0.0.0.0
+address=/91ysa.com/0.0.0.0
+address=/91zgm.com/0.0.0.0
+address=/9377co.com/0.0.0.0
+address=/9377os.com/0.0.0.0
+address=/a907907.com/0.0.0.0
+address=/ad000000.com/0.0.0.0
+address=/adm-cnzz.net/0.0.0.0
+address=/ads.uc.cn/0.0.0.0
+address=/ajaxcdn.org/0.0.0.0
+address=/aliyuncss.com/0.0.0.0
+address=/aliyunxin.com/0.0.0.0
+address=/amazingmagics.com/0.0.0.0
+address=/aralego.com/0.0.0.0
+address=/at98.com/0.0.0.0
+address=/cangnews.com/0.0.0.0
+address=/caob5.info/0.0.0.0
+address=/cb.baidu.com/0.0.0.0
+address=/cbjs.baidu.com/0.0.0.0
+address=/cnxad.net/0.0.0.0
+address=/cnzz.com.so/0.0.0.0
+address=/code668.com/0.0.0.0
+address=/cpcv.cc/0.0.0.0
+address=/cpms.cc/0.0.0.0
+address=/cpro.baidu.com/0.0.0.0
+address=/cpro.baidustatic.com/0.0.0.0
+address=/cpv6.com/0.0.0.0
+address=/cpva.cc/0.0.0.0
+address=/crdrjs.info/0.0.0.0
+address=/csqiulong.com/0.0.0.0
+address=/ctsywy.com/0.0.0.0
+address=/cyacc.com/0.0.0.0
+address=/czpush.com/0.0.0.0
+address=/dashet.com/0.0.0.0
+address=/datafastguru.info/0.0.0.0
+address=/dou777.com/0.0.0.0
+address=/drmcmm.baidu.com/0.0.0.0
+address=/duiwai.baidu.com/0.0.0.0
+address=/dvr8.com/0.0.0.0
+address=/dw998.com/0.0.0.0
+address=/dxssiyi.com/0.0.0.0
+address=/e701.net/0.0.0.0
+address=/e70123.com/0.0.0.0
+address=/e708.net/0.0.0.0
+address=/e719.net/0.0.0.0
+address=/ecuc123.net/0.0.0.0
+address=/eiv.baidu.com/0.0.0.0
+address=/f1190.com/0.0.0.0
+address=/f6ce.com/0.0.0.0
+address=/f70123.com/0.0.0.0
+address=/fd7c.com/0.0.0.0
+address=/fjmeyer.com/0.0.0.0
+address=/fu68.com/0.0.0.0
+address=/fv99.com/0.0.0.0
+address=/gf108.com/0.0.0.0
+address=/gf1352.com/0.0.0.0
+address=/gm682.com/0.0.0.0
+address=/guduopu.com/0.0.0.0
+address=/gzmjnx.cn/0.0.0.0
+address=/gzqudou.com/0.0.0.0
+address=/hao123rt.com/0.0.0.0
+address=/haohaowan8.com/0.0.0.0
+address=/haolew.com/0.0.0.0
+address=/hfjuki.com/0.0.0.0
+address=/hmp33.com/0.0.0.0
+address=/hr44.com/0.0.0.0
+address=/humanding.com/0.0.0.0
+address=/i3818.com/0.0.0.0
+address=/ihualun.com/0.0.0.0
+address=/img80.net/0.0.0.0
+address=/jczzjx.com/0.0.0.0
+address=/jdlhg.com/0.0.0.0
+address=/jhzl001.com/0.0.0.0
+address=/jiyou2014.com/0.0.0.0
+address=/jk939.com/0.0.0.0
+address=/jlssbz.com/0.0.0.0
+address=/jnrsjm.com/0.0.0.0
+address=/johtzj.com/0.0.0.0
+address=/jwqj.net/0.0.0.0
+address=/jxjzny.com/0.0.0.0
+address=/keyyou.net/0.0.0.0
+address=/kingwam.com/0.0.0.0
+address=/kmadou.com/0.0.0.0
+address=/ku9377.com/0.0.0.0
+address=/lajizhan.org/0.0.0.0
+address=/le4le.com/0.0.0.0
+address=/lishuanghao.com/0.0.0.0
+address=/lzmm8.com/0.0.0.0
+address=/mainbx.com/0.0.0.0
+address=/mathads.com/0.0.0.0
+address=/mlt01.com/0.0.0.0
+address=/moodoocrv.com.cn/0.0.0.0
+address=/mscimg.com/0.0.0.0
+address=/nextcps.com/0.0.0.0
+address=/niuxgame77.com/0.0.0.0
+address=/notice.uchome.manyou.com/0.0.0.0
+address=/oikxlcv.wang/0.0.0.0
+address=/okm918.com/0.0.0.0
+address=/p3tt.com/0.0.0.0
+address=/pdsjycm.com/0.0.0.0
+address=/pos.baidu.com/0.0.0.0
+address=/qiqiww.com/0.0.0.0
+address=/qucaigg.com/0.0.0.0
+address=/re.taotaosou.com/0.0.0.0
+address=/ruxianke.com/0.0.0.0
+address=/rwjfs.com/0.0.0.0
+address=/sgbfjs.info/0.0.0.0
+address=/sharedaddomain.com/0.0.0.0
+address=/show.kc.taotaosou.com/0.0.0.0
+address=/si9377.com/0.0.0.0
+address=/socdm.com/0.0.0.0
+address=/spcode.baidu.com/0.0.0.0
+address=/sstc360.com/0.0.0.0
+address=/t70123.com/0.0.0.0
+address=/taat00889.com/0.0.0.0
+address=/tad.suning.com/0.0.0.0
+address=/tc600.com/0.0.0.0
+address=/tdayi.com/0.0.0.0
+address=/tg.1155t.cn/0.0.0.0
+address=/toourbb.com/0.0.0.0
+address=/ubmcmm.baidustatic.com/0.0.0.0
+address=/uoyrsd.com/0.0.0.0
+address=/v707070.com/0.0.0.0
+address=/victorjx.com/0.0.0.0
+address=/w65p.com/0.0.0.0
+address=/wdzsb.com.cn/0.0.0.0
+address=/winvestern.com.cn/0.0.0.0
+address=/wqsph.net/0.0.0.0
+address=/ws341.com/0.0.0.0
+address=/xa9t.com/0.0.0.0
+address=/xabaitai.com/0.0.0.0
+address=/xchgx.com/0.0.0.0
+address=/xcy8.com/0.0.0.0
+address=/xtxa.net/0.0.0.0
+address=/xxad.cc/0.0.0.0
+address=/xzyituo.com/0.0.0.0
+address=/yk0712.com/0.0.0.0
+address=/ymcqb.com/0.0.0.0
+address=/yqw88.com/0.0.0.0
+address=/yule8.net/0.0.0.0
+address=/yyp17.com/0.0.0.0
+address=/zgksb.com/0.0.0.0
+address=/zgunion.cn/0.0.0.0
+address=/zp22938576.com/0.0.0.0
+address=/120.27.34.156/0.0.0.0
+address=/122.228.236.165/0.0.0.0
+address=/125.46.61.28/0.0.0.0
+address=/192.184.10.171/0.0.0.0
+address=/218.65.30.232/0.0.0.0
+address=/27.255.67.120/0.0.0.0
+address=/32345sf.com/0.0.0.0
+address=/360safego.com/0.0.0.0
+address=/3dm.huya.com/0.0.0.0
+address=/5y9nfpes.52pk.com/0.0.0.0
+address=/654mmm.com/0.0.0.0
+address=/6d245gxt.52pk.com/0.0.0.0
+address=/7mad.7m.cn/0.0.0.0
+address=/801.tianyaui.com/0.0.0.0
+address=/86file.megajoy.com/0.0.0.0
+address=/8jkx.com/0.0.0.0
+address=/96.43.97.243/0.0.0.0
+address=/a-m-s.poco.cn/0.0.0.0
+address=/a.baomihua.com/0.0.0.0
+address=/a.xizi.com/0.0.0.0
+address=/a2.b310.com/0.0.0.0
+address=/a4.yeshj.com/0.0.0.0
+address=/a5.yeshj.com/0.0.0.0
+address=/a6.hujiang.com/0.0.0.0
+address=/abc.hkepc.com/0.0.0.0
+address=/acsystem.wasu.cn/0.0.0.0
+address=/ad.17173.com/0.0.0.0
+address=/ad.bjmama.net/0.0.0.0
+address=/adadmin.house365.com/0.0.0.0
+address=/add.dz19.net/0.0.0.0
+address=/adf.dahe.cn/0.0.0.0
+address=/adhome.1fangchan.com/0.0.0.0
+address=/adk.funshion.com/0.0.0.0
+address=/adm.265g.com/0.0.0.0
+address=/adm.72zx.com/0.0.0.0
+address=/adm.86wan.com/0.0.0.0
+address=/adm.bbcss.com/0.0.0.0
+address=/adm.funshion.com/0.0.0.0
+address=/adm.jjj8.cn/0.0.0.0
+address=/adm.qzbbs.com/0.0.0.0
+address=/adm.xmfish.com/0.0.0.0
+address=/adm.zbinfo.net/0.0.0.0
+address=/adm.zzfish.cn/0.0.0.0
+address=/admd.yam.com/0.0.0.0
+address=/adnetpub.yaolan.com/0.0.0.0
+address=/adp.cnool.net/0.0.0.0
+address=/adpub.yaolan.com/0.0.0.0
+address=/adpubs.yaolan.com/0.0.0.0
+address=/adsclick.yx.js.cn/0.0.0.0
+address=/adspending01.bwnet.com.tw/0.0.0.0
+address=/afp.chinanews.com/0.0.0.0
+address=/afp.wasu.cn/0.0.0.0
+address=/afpcreative.wasu.cn/0.0.0.0
+address=/ai.bioon.com/0.0.0.0
+address=/aid.chinayk.com/0.0.0.0
+address=/am.6park.com/0.0.0.0
+address=/am.szhome.com/0.0.0.0
+address=/app.acm.dzwww.com/0.0.0.0
+address=/as.sinahk.net/0.0.0.0
+address=/ashow.pcpop.com/0.0.0.0
+address=/bb345.com/0.0.0.0
+address=/besc.baidustatic.com/0.0.0.0
+address=/biz.gexing.com/0.0.0.0
+address=/biz.weibo.com/0.0.0.0
+address=/btn.onlylady.com/0.0.0.0
+address=/btn.pchome.net/0.0.0.0
+address=/business.92wy.com/0.0.0.0
+address=/by.7avz.com/0.0.0.0
+address=/cacafly.net/0.0.0.0
+address=/cachead.com/0.0.0.0
+address=/cdn.wdlm.cn/0.0.0.0
+address=/chidir.com/0.0.0.0
+address=/cps.okbuy.com/0.0.0.0
+address=/d.107788.com/0.0.0.0
+address=/d.taomato.com/0.0.0.0
+address=/d0.xcar.com.cn/0.0.0.0
+address=/dd.xdnice.com/0.0.0.0
+address=/de.as.pptv.com/0.0.0.0
+address=/dfad.dfdaily.com/0.0.0.0
+address=/dg.073img.com/0.0.0.0
+address=/doubleclick.tv002.com/0.0.0.0
+address=/dvs.china.com/0.0.0.0
+address=/dvser.china.com/0.0.0.0
+address=/e.yycqc.com/0.0.0.0
+address=/eap.big5.enorth.com.cn/0.0.0.0
+address=/eap.enorth.com.cn/0.0.0.0
+address=/ebp.renren.com/0.0.0.0
+address=/ecma.bdimg.com/0.0.0.0
+address=/ecmb.bdimg.com/0.0.0.0
+address=/fun.ynet.com/0.0.0.0
+address=/g.gxorg.com/0.0.0.0
+address=/g.hsw.cn/0.0.0.0
+address=/g.ousns.net/0.0.0.0
+address=/g1.0573ren.com/0.0.0.0
+address=/g2.ousns.net/0.0.0.0
+address=/ganjituiguang.ganji.com/0.0.0.0
+address=/gdt.qq.com/0.0.0.0
+address=/get.766.com/0.0.0.0
+address=/gg.0598yu.com/0.0.0.0
+address=/gg.18183.com/0.0.0.0
+address=/gg.cs090.com/0.0.0.0
+address=/gg.gao7.com/0.0.0.0
+address=/gg.kugou.com/0.0.0.0
+address=/gg.sonhoo.com/0.0.0.0
+address=/gg.yxdown.com/0.0.0.0
+address=/ggg.zj.com/0.0.0.0
+address=/ggw.gusuwang.com/0.0.0.0
+address=/ggw.watertu.com/0.0.0.0
+address=/ggyq.xdkb.net/0.0.0.0
+address=/go.hangzhou.com.cn/0.0.0.0
+address=/goto.www.iciba.com/0.0.0.0
+address=/gqgc.sz.zj.cn/0.0.0.0
+address=/groupa.onlylady.com/0.0.0.0
+address=/gsspcln.jp/0.0.0.0
+address=/gt.yy.com/0.0.0.0
+address=/guess.h.qhimg.com/0.0.0.0
+address=/haxiu.miaotiao.com/0.0.0.0
+address=/hdad.baike.com/0.0.0.0
+address=/hiad.vmall.com/0.0.0.0
+address=/hz.shouyoutv.com/0.0.0.0
+address=/hzhyhm.com/0.0.0.0
+address=/i.syasn.com/0.0.0.0
+address=/iads.xinmin.cn/0.0.0.0
+address=/idcot.com/0.0.0.0
+address=/ifx.aifang.com/0.0.0.0
+address=/image.6park.com/0.0.0.0
+address=/image.9duw.com/0.0.0.0
+address=/image.hh010.com/0.0.0.0
+address=/image.lepan.cc/0.0.0.0
+address=/images.chinaz.com/0.0.0.0
+address=/images.gxsky.com/0.0.0.0
+address=/img.3sjt.com/0.0.0.0
+address=/img.9duw.com/0.0.0.0
+address=/img1.126.net/0.0.0.0
+address=/img2.126.net/0.0.0.0
+address=/img2.www.fmdisk.com/0.0.0.0
+address=/inte.sogou.com/0.0.0.0
+address=/iwanad.baidu.com/0.0.0.0
+address=/j.6avz.com/0.0.0.0
+address=/j.7avz.com/0.0.0.0
+address=/ja.gamersky.com/0.0.0.0
+address=/jmsyzj.com/0.0.0.0
+address=/js-1.pchome.net/0.0.0.0
+address=/js.duotegame.com/0.0.0.0
+address=/js.leshen.com/0.0.0.0
+address=/js.pub.tom.com/0.0.0.0
+address=/js.youxi369.com/0.0.0.0
+address=/jxad.jx163.com/0.0.0.0
+address=/knnwdyou.com/0.0.0.0
+address=/leiqun.snxyf.com/0.0.0.0
+address=/life.e0575.com/0.0.0.0
+address=/lingdian98.com/0.0.0.0
+address=/link.fobshanghai.com/0.0.0.0
+address=/lxting.com/0.0.0.0
+address=/m.aty.sohu.com/0.0.0.0
+address=/manads.static.olcdn.com/0.0.0.0
+address=/manage.wdfans.cn/0.0.0.0
+address=/market.178.com/0.0.0.0
+address=/market.21cn.com/0.0.0.0
+address=/market.duowan.com/0.0.0.0
+address=/media.cheshi-img.com/0.0.0.0
+address=/money.qz828.com/0.0.0.0
+address=/myad.toocle.com/0.0.0.0
+address=/ok.432kkk.com/0.0.0.0
+address=/p.szonline.net/0.0.0.0
+address=/p.zol-img.com.cn/0.0.0.0
+address=/p4p.sina.com.cn/0.0.0.0
+address=/p8u.hinet.net/0.0.0.0
+address=/panda.kdnet.net/0.0.0.0
+address=/pcs1.app.joy.cn/0.0.0.0
+address=/phpad.cqnews.net/0.0.0.0
+address=/pic.0597kk.com/0.0.0.0
+address=/pic.111cn.net/0.0.0.0
+address=/pic.2u.com.cn/0.0.0.0
+address=/pic.ea3w.com/0.0.0.0
+address=/pic.fengniao.com/0.0.0.0
+address=/pic.taian.com/0.0.0.0
+address=/pic.xgo-img.com.cn/0.0.0.0
+address=/playad.xjmg.com/0.0.0.0
+address=/poster.weather.com.cn/0.0.0.0
+address=/pp.7060.la/0.0.0.0
+address=/pro.iweihai.cn/0.0.0.0
+address=/pub.funshion.com/0.0.0.0
+address=/pub.mop.com/0.0.0.0
+address=/publicize.liao1.com/0.0.0.0
+address=/publish.ad.youth.cn/0.0.0.0
+address=/res.hunantv.com/0.0.0.0
+address=/rh.qq.com/0.0.0.0
+address=/same.chinadaily.com.cn/0.0.0.0
+address=/same.eastmoney.com/0.0.0.0
+address=/same.stockstar.com/0.0.0.0
+address=/sc.tom.com/0.0.0.0
+address=/sgg.southcn.com/0.0.0.0
+address=/share.gzdsw.com/0.0.0.0
+address=/shenleyuni.com/0.0.0.0
+address=/shows.21cn.com/0.0.0.0
+address=/so.6949.com/0.0.0.0
+address=/sss.sege.xxx/0.0.0.0
+address=/static.yujiehenaishang.com/0.0.0.0
+address=/sub.powerapple.com/0.0.0.0
+address=/super.cat898.com/0.0.0.0
+address=/super.kdnet.net/0.0.0.0
+address=/synacast.com/0.0.0.0
+address=/tf.360.cn/0.0.0.0
+address=/tg.delnapb.com/0.0.0.0
+address=/tk.504pk.com/0.0.0.0
+address=/tp.sgcn.com/0.0.0.0
+address=/u.63kc.com/0.0.0.0
+address=/u.cnzol.com/0.0.0.0
+address=/union.china.com.cn/0.0.0.0
+address=/untitled.dwstatic.com/0.0.0.0
+address=/up.hiao.com/0.0.0.0
+address=/v-56.com/0.0.0.0
+address=/vas.funshion.com/0.0.0.0
+address=/vupload.duowan.com/0.0.0.0
+address=/web.900.la/0.0.0.0
+address=/xc.macd.cn/0.0.0.0
+address=/xs.houyi.baofeng.net/0.0.0.0
+address=/yktj.yzz.cn/0.0.0.0
+address=/zo66.com/0.0.0.0
+address=/zt2088.com/0.0.0.0
+address=/146.148.85.61/0.0.0.0
+address=/hdapp1003-a.akamaihd.net/0.0.0.0
+address=/hdapp1008-a.akamaihd.net/0.0.0.0
+address=/hdsrc-a.akamaihd.net/0.0.0.0
+address=/46.165.197.153/0.0.0.0
+address=/46.165.197.231/0.0.0.0
+address=/74.117.182.77/0.0.0.0
+address=/78.140.131.214/0.0.0.0
+address=/clkrev.com/0.0.0.0
+address=/a.livesportmedia.eu/0.0.0.0
+address=/a.ucoz.net/0.0.0.0
+address=/a.watershed-publishing.com/0.0.0.0
+address=/a04296f070c0146f314d-0dcad72565cb350972beb3666a86f246.r50.cf5.rackcdn.com/0.0.0.0
+address=/ad.about.co.kr/0.0.0.0
+address=/ad.accessmediaproductions.com/0.0.0.0
+address=/ad.bitmedia.io/0.0.0.0
+address=/ad.flux.com/0.0.0.0
+address=/ad.foxnetworks.com/0.0.0.0
+address=/ad.icasthq.com/0.0.0.0
+address=/ad.idgtn.net/0.0.0.0
+address=/ad.jamba.net/0.0.0.0
+address=/ad.livere.co.kr/0.0.0.0
+address=/ad.mail.ru/0.0.0.0
+address=/ad.mesomorphosis.com/0.0.0.0
+address=/ad.openmultimedia.biz/0.0.0.0
+address=/ad.outsidehub.com/0.0.0.0
+address=/ad.pickple.net/0.0.0.0
+address=/ad.proxy.sh/0.0.0.0
+address=/ad.r.worldssl.net/0.0.0.0
+address=/ad.rambler.ru/0.0.0.0
+address=/ad.reklamport.com/0.0.0.0
+address=/ad.sensismediasmart.com.au/0.0.0.0
+address=/ad.smartclip.net/0.0.0.0
+address=/ad.spielothek.so/0.0.0.0
+address=/ad.vidaroo.com/0.0.0.0
+address=/ad.winningpartner.com/0.0.0.0
+address=/add.bugun.com.tr/0.0.0.0
+address=/adingo.jp.eimg.jp/0.0.0.0
+address=/adn.ebay.com/0.0.0.0
+address=/adplus.goo.mx/0.0.0.0
+address=/ads.mp.mydas.mobi/0.0.0.0
+address=/adscaspion.appspot.com/0.0.0.0
+address=/adss.dotdo.net/0.0.0.0
+address=/adz.zwee.ly/0.0.0.0
+address=/aff.eteachergroup.com/0.0.0.0
+address=/aff.marathonbet.com/0.0.0.0
+address=/aff.svjump.com/0.0.0.0
+address=/affil.mupromo.com/0.0.0.0
+address=/affiliateprogram.keywordspy.com/0.0.0.0
+address=/affiliates.allposters.com/0.0.0.0
+address=/affiliatesmedia.sbobet.com/0.0.0.0
+address=/affiliation.fotovista.com/0.0.0.0
+address=/agenda.complex.com/0.0.0.0
+address=/airpushmarketing.s3.amazonaws.com/0.0.0.0
+address=/ais.abacast.com/0.0.0.0
+address=/analytics.disneyinternational.com/0.0.0.0
+address=/ard.ihookup.com/0.0.0.0
+address=/award.sitekeuring.net/0.0.0.0
+address=/b.babylon.com/0.0.0.0
+address=/b.livesport.eu/0.0.0.0
+address=/b92.putniktravel.com/0.0.0.0
+address=/banner.101xp.com/0.0.0.0
+address=/banner.3ddownloads.com/0.0.0.0
+address=/banner.europacasino.com/0.0.0.0
+address=/banner.telefragged.com/0.0.0.0
+address=/banner.titancasino.com/0.0.0.0
+address=/bl.wavecdn.de/0.0.0.0
+address=/blamads-assets.s3.amazonaws.com/0.0.0.0
+address=/bluhostedbanners.blucigs.com/0.0.0.0
+address=/box.anchorfree.net/0.0.0.0
+address=/btr.domywife.com/0.0.0.0
+address=/c.netu.tv/0.0.0.0
+address=/cas.clickability.com/0.0.0.0
+address=/cash.neweramediaworks.com/0.0.0.0
+address=/cerebral.typn.com/0.0.0.0
+address=/cjmooter.xcache.kinxcdn.com/0.0.0.0
+address=/clarity.abacast.com/0.0.0.0
+address=/click.eyk.net/0.0.0.0
+address=/clickstrip.6wav.es/0.0.0.0
+address=/connect.summit.co.uk/0.0.0.0
+address=/content.livesportmedia.eu/0.0.0.0
+address=/cpm.amateurcommunity.de/0.0.0.0
+address=/creatives.inmotionhosting.com/0.0.0.0
+address=/creatives.summitconnect.co.uk/0.0.0.0
+address=/d13czkep7ax7nj.cloudfront.net/0.0.0.0
+address=/d140sbu1b1m3h0.cloudfront.net/0.0.0.0
+address=/d15565yqt7pv7r.cloudfront.net/0.0.0.0
+address=/d15gt9gwxw5wu0.cloudfront.net/0.0.0.0
+address=/d17f2fxw547952.cloudfront.net/0.0.0.0
+address=/d19972r8wdpby8.cloudfront.net/0.0.0.0
+address=/d1ade4ciw4bqyc.cloudfront.net/0.0.0.0
+address=/d1cl1sqtf3o420.cloudfront.net/0.0.0.0
+address=/d1d95giojjkirt.cloudfront.net/0.0.0.0
+address=/d1ep3cn6qx0l3z.cloudfront.net/0.0.0.0
+address=/d1ey3fksimezm4.cloudfront.net/0.0.0.0
+address=/d1fo96xm8fci0r.cloudfront.net/0.0.0.0
+address=/d1gojtoka5qi10.cloudfront.net/0.0.0.0
+address=/d1k74lgicilrr3.cloudfront.net/0.0.0.0
+address=/d1noellhv8fksc.cloudfront.net/0.0.0.0
+address=/d1pcttwib15k25.cloudfront.net/0.0.0.0
+address=/d1pdpbxj733bb1.cloudfront.net/0.0.0.0
+address=/d1spb7fplenrp4.cloudfront.net/0.0.0.0
+address=/d1vbm0eveofcle.cloudfront.net/0.0.0.0
+address=/d1zgderxoe1a.cloudfront.net/0.0.0.0
+address=/d23guct4biwna6.cloudfront.net/0.0.0.0
+address=/d23nyyb6dc29z6.cloudfront.net/0.0.0.0
+address=/d25ruj6ht8bs1.cloudfront.net/0.0.0.0
+address=/d25xkbr68qqtcn.cloudfront.net/0.0.0.0
+address=/d26dzd2k67we08.cloudfront.net/0.0.0.0
+address=/d26j9bp9bq4uhd.cloudfront.net/0.0.0.0
+address=/d26wy0pxd3qqpv.cloudfront.net/0.0.0.0
+address=/d27jt7xr4fq3e8.cloudfront.net/0.0.0.0
+address=/d287x05ve9a63s.cloudfront.net/0.0.0.0
+address=/d29r6igjpnoykg.cloudfront.net/0.0.0.0
+address=/d2anfhdgjxf8s1.cloudfront.net/0.0.0.0
+address=/d2b2x1ywompm1b.cloudfront.net/0.0.0.0
+address=/d2b65ihpmocv7w.cloudfront.net/0.0.0.0
+address=/d2bgg7rjywcwsy.cloudfront.net/0.0.0.0
+address=/d2cxkkxhecdzsq.cloudfront.net/0.0.0.0
+address=/d2d2lbvq8xirbs.cloudfront.net/0.0.0.0
+address=/d2dxgm96wvaa5j.cloudfront.net/0.0.0.0
+address=/d2gpgaupalra1d.cloudfront.net/0.0.0.0
+address=/d2gtlljtkeiyzd.cloudfront.net/0.0.0.0
+address=/d2gz6iop9uxobu.cloudfront.net/0.0.0.0
+address=/d2hap2bsh1k9lw.cloudfront.net/0.0.0.0
+address=/d2ipklohrie3lo.cloudfront.net/0.0.0.0
+address=/d2mic0r0bo3i6z.cloudfront.net/0.0.0.0
+address=/d2mq0uzafv8ytp.cloudfront.net/0.0.0.0
+address=/d2nlytvx51ywh9.cloudfront.net/0.0.0.0
+address=/d2o307dm5mqftz.cloudfront.net/0.0.0.0
+address=/d2oallm7wrqvmi.cloudfront.net/0.0.0.0
+address=/d2omcicc3a4zlg.cloudfront.net/0.0.0.0
+address=/d2pgy8h4i30on1.cloudfront.net/0.0.0.0
+address=/d2plxos94peuwp.cloudfront.net/0.0.0.0
+address=/d2r359adnh3sfn.cloudfront.net/0.0.0.0
+address=/d2s64zaa9ua7uv.cloudfront.net/0.0.0.0
+address=/d2tgev5wuprbqq.cloudfront.net/0.0.0.0
+address=/d2tnimpzlb191i.cloudfront.net/0.0.0.0
+address=/d2ubicnllnnszy.cloudfront.net/0.0.0.0
+address=/d2ue9k1rhsumed.cloudfront.net/0.0.0.0
+address=/d2v4glj2m8yzg5.cloudfront.net/0.0.0.0
+address=/d2v9ajh2eysdau.cloudfront.net/0.0.0.0
+address=/d2vt6q0n0iy66w.cloudfront.net/0.0.0.0
+address=/d2yhukq7vldf1u.cloudfront.net/0.0.0.0
+address=/d2z1smm3i01tnr.cloudfront.net/0.0.0.0
+address=/d31807xkria1x4.cloudfront.net/0.0.0.0
+address=/d32pxqbknuxsuy.cloudfront.net/0.0.0.0
+address=/d33f10u0pfpplc.cloudfront.net/0.0.0.0
+address=/d33otidwg56k90.cloudfront.net/0.0.0.0
+address=/d34obr29voew8l.cloudfront.net/0.0.0.0
+address=/d34rdvn2ky3gnm.cloudfront.net/0.0.0.0
+address=/d37kzqe5knnh6t.cloudfront.net/0.0.0.0
+address=/d38pxm3dmrdu6d.cloudfront.net/0.0.0.0
+address=/d38r21vtgndgb1.cloudfront.net/0.0.0.0
+address=/d39xqloz8t5a6x.cloudfront.net/0.0.0.0
+address=/d3bvcf24wln03d.cloudfront.net/0.0.0.0
+address=/d3dphmosjk9rot.cloudfront.net/0.0.0.0
+address=/d3f9mcik999dte.cloudfront.net/0.0.0.0
+address=/d3fzrm6pcer44x.cloudfront.net/0.0.0.0
+address=/d3irruagotonpp.cloudfront.net/0.0.0.0
+address=/d3iwjrnl4m67rd.cloudfront.net/0.0.0.0
+address=/d3lvr7yuk4uaui.cloudfront.net/0.0.0.0
+address=/d3lzezfa753mqu.cloudfront.net/0.0.0.0
+address=/d3m41swuqq4sv5.cloudfront.net/0.0.0.0
+address=/d3nvrqlo8rj1kw.cloudfront.net/0.0.0.0
+address=/d3p9ql8flgemg7.cloudfront.net/0.0.0.0
+address=/d3pkae9owd2lcf.cloudfront.net/0.0.0.0
+address=/d3q2dpprdsteo.cloudfront.net/0.0.0.0
+address=/d3qszud4qdthr8.cloudfront.net/0.0.0.0
+address=/d3t2wca0ou3lqz.cloudfront.net/0.0.0.0
+address=/d3t9ip55bsuxrf.cloudfront.net/0.0.0.0
+address=/d3tdefw8pwfkbk.cloudfront.net/0.0.0.0
+address=/d3vc1nm9xbncz5.cloudfront.net/0.0.0.0
+address=/d5pvnbpawsaav.cloudfront.net/0.0.0.0
+address=/d6bdy3eto8fyu.cloudfront.net/0.0.0.0
+address=/d8qy7md4cj3gz.cloudfront.net/0.0.0.0
+address=/dal9hkyfi0m0n.cloudfront.net/0.0.0.0
+address=/dart.clearchannel.com/0.0.0.0
+address=/dasfdasfasdf.no-ip.info/0.0.0.0
+address=/data.neuroxmedia.com/0.0.0.0
+address=/dbam.dashbida.com/0.0.0.0
+address=/ddwht76d9jvfl.cloudfront.net/0.0.0.0
+address=/dew9ckzjyt2gn.cloudfront.net/0.0.0.0
+address=/dff7tx5c2qbxc.cloudfront.net/0.0.0.0
+address=/display.digitalriver.com/0.0.0.0
+address=/disy2s34euyqm.cloudfront.net/0.0.0.0
+address=/dizixdllzznrf.cloudfront.net/0.0.0.0
+address=/djlf5xdlz7m8m.cloudfront.net/0.0.0.0
+address=/dkd69bwkvrht1.cloudfront.net/0.0.0.0
+address=/dkdwv3lcby5zi.cloudfront.net/0.0.0.0
+address=/dl392qndlveq0.cloudfront.net/0.0.0.0
+address=/dl5v5atodo7gn.cloudfront.net/0.0.0.0
+address=/dlupv9uqtjlie.cloudfront.net/0.0.0.0
+address=/dm0acvguygm9h.cloudfront.net/0.0.0.0
+address=/dm8srf206hien.cloudfront.net/0.0.0.0
+address=/dp51h10v6ggpa.cloudfront.net/0.0.0.0
+address=/dpsq2uzakdgqz.cloudfront.net/0.0.0.0
+address=/dq2tgxnc2knif.cloudfront.net/0.0.0.0
+address=/dqhi3ea93ztgv.cloudfront.net/0.0.0.0
+address=/dr8pk6ovub897.cloudfront.net/0.0.0.0
+address=/duct5ntjian71.cloudfront.net/0.0.0.0
+address=/dvf2u7vwmkr5w.cloudfront.net/0.0.0.0
+address=/dvt4pepo9om3r.cloudfront.net/0.0.0.0
+address=/dx5qvhwg92mjd.cloudfront.net/0.0.0.0
+address=/dxq6c0tx3v6mm.cloudfront.net/0.0.0.0
+address=/dxqd86uz345mg.cloudfront.net/0.0.0.0
+address=/dy48bnzanqw0v.cloudfront.net/0.0.0.0
+address=/dycpc40hvg4ki.cloudfront.net/0.0.0.0
+address=/dyl3p6so5yozo.cloudfront.net/0.0.0.0
+address=/epowernetworktrackerimages.s3.amazonaws.com/0.0.0.0
+address=/euwidget.imshopping.com/0.0.0.0
+address=/events.kalooga.com/0.0.0.0
+address=/ext.theglobalweb.com/0.0.0.0
+address=/feeds.logicbuy.com/0.0.0.0
+address=/ft.pnop.com/0.0.0.0
+address=/gateway.fortunelounge.com/0.0.0.0
+address=/gateways.s3.amazonaws.com/0.0.0.0
+address=/geo.connexionsecure.com/0.0.0.0
+address=/geobanner.friendfinder.com/0.0.0.0
+address=/geobanner.passion.com/0.0.0.0
+address=/gfaf-banners.s3.amazonaws.com/0.0.0.0
+address=/homad-global-configs.schneevonmorgen.com/0.0.0.0
+address=/im.ov.yahoo.co.jp/0.0.0.0
+address=/ima3vpaid.appspot.com/0.0.0.0
+address=/indieclick.3janecdn.com/0.0.0.0
+address=/inskin.vo.llnwd.net/0.0.0.0
+address=/k2team.kyiv.ua/0.0.0.0
+address=/mads.aol.com/0.0.0.0
+address=/marketing.888.com/0.0.0.0
+address=/mb.zam.com/0.0.0.0
+address=/mozo-widgets.f2.com.au/0.0.0.0
+address=/network.aufeminin.com/0.0.0.0
+address=/network.business.com/0.0.0.0
+address=/oclasrv.comindex-2.htmlapu.php/0.0.0.0
+address=/odin.goo.mx/0.0.0.0
+address=/on.maxspeedcdn.com/0.0.0.0
+address=/ox-i.cordillera.tv/0.0.0.0
+address=/partner.bargaindomains.com/0.0.0.0
+address=/partner.catchy.com/0.0.0.0
+address=/partner.premiumdomains.com/0.0.0.0
+address=/partnerads.ysm.yahoo.com/0.0.0.0
+address=/partnerads1.ysm.yahoo.com/0.0.0.0
+address=/partners.fshealth.com/0.0.0.0
+address=/partners.optiontide.com/0.0.0.0
+address=/partners.rochen.com/0.0.0.0
+address=/partners.sportingbet.com.au/0.0.0.0
+address=/partners.vouchedfor.co.uk/0.0.0.0
+address=/partners.xpertmarket.com/0.0.0.0
+address=/priceinfo.comuv.com/0.0.0.0
+address=/promos.fling.com/0.0.0.0
+address=/promote.pair.com/0.0.0.0
+address=/promotions.iasbet.com/0.0.0.0
+address=/pub.betclick.com/0.0.0.0
+address=/pubs.hiddennetwork.com/0.0.0.0
+address=/rack.bauermedia.co.uk/0.0.0.0
+address=/res3.feedsportal.com/0.0.0.0
+address=/revealads.appspot.com/0.0.0.0
+address=/rotabanner.kulichki.net/0.0.0.0
+address=/rotator.tradetracker.net/0.0.0.0
+address=/s-yoolk-banner-assets.yoolk.com/0.0.0.0
+address=/s-yoolk-billboard-assets.yoolk.com/0.0.0.0
+address=/secretmedia.s3.amazonaws.com/0.0.0.0
+address=/servedby.keygamesnetwork.com/0.0.0.0
+address=/sitescout-video-cdn.edgesuite.net/0.0.0.0
+address=/slot.union.ucweb.com/0.0.0.0
+address=/smart.styria-digital.com/0.0.0.0
+address=/squarespace.evyy.net/0.0.0.0
+address=/stats.hosting24.com/0.0.0.0
+address=/stats.sitesuite.org/0.0.0.0
+address=/stuff-nzwhistleout.s3.amazonaws.com/0.0.0.0
+address=/survey.g.doubleclick.net/0.0.0.0
+address=/syndication.jsadapi.com/0.0.0.0
+address=/syndication1.viraladnetwork.net/0.0.0.0
+address=/tap.more-results.net/0.0.0.0
+address=/ti.tradetracker.net/0.0.0.0
+address=/track.bcvcmedia.com/0.0.0.0
+address=/twinplan.com/0.0.0.0
+address=/vendor1.fitschigogerl.com/0.0.0.0
+address=/web-jp.ad-v.jp/0.0.0.0
+address=/whistleout.s3.amazonaws.com/0.0.0.0
+address=/widget.crowdignite.com/0.0.0.0
+address=/widget.kelkoo.com/0.0.0.0
+address=/widget.raaze.com/0.0.0.0
+address=/widget.searchschoolsnetwork.com/0.0.0.0
+address=/widget.shopstyle.com.au/0.0.0.0
+address=/widget.solarquotes.com.au/0.0.0.0
+address=/widgets.realestate.com.au/0.0.0.0
+address=/wtpn.twenga.co.uk/0.0.0.0
+address=/wtpn.twenga.de/0.0.0.0
+address=/yb.torchbrowser.com/0.0.0.0
+address=/yeas.yahoo.co.jp/0.0.0.0
+address=/zapads.zapak.com/0.0.0.0
+address=/zeus.qj.net/0.0.0.0
+address=/iadc.qwapi.com/0.0.0.0
+address=/d1nmk7iw7hajjn.cloudfront.net/0.0.0.0
+address=/ad.duga.jp/0.0.0.0
+address=/ad.iloveinterracial.com/0.0.0.0
+address=/ads.videosz.com/0.0.0.0
+address=/affiliates.thrixxx.com/0.0.0.0
+address=/ard.sweetdiscreet.com/0.0.0.0
+address=/bannershotlink.perfectgonzo.com/0.0.0.0
+address=/blaaaa12.googlecode.com/0.0.0.0
+address=/br.blackfling.com/0.0.0.0
+address=/br.fling.com/0.0.0.0
+address=/br.realitykings.com/0.0.0.0
+address=/cpm.amateurcommunity.com/0.0.0.0
+address=/dailyvideo.securejoin.com/0.0.0.0
+address=/desk.cmix.org/0.0.0.0
+address=/feeds.videosz.com/0.0.0.0
+address=/ff.nsg.org.ua/0.0.0.0
+address=/freexxxvideoclip.aebn.net/0.0.0.0
+address=/geo.cliphunter.com/0.0.0.0
+address=/geo.frtya.com/0.0.0.0
+address=/geobanner.adultfriendfinder.com/0.0.0.0
+address=/geobanner.alt.com/0.0.0.0
+address=/geobanner.socialflirt.com/0.0.0.0
+address=/partners.pornerbros.com/0.0.0.0
+address=/s1magnettvcom.maynemyltf.netdna-cdn.com/0.0.0.0
+address=/surv.xbizmedia.com/0.0.0.0
+address=/sweet.game-rust.ru/0.0.0.0
+address=/widgets.comcontent.net/0.0.0.0
+address=/widgetssec.cam-content.com/0.0.0.0
+address=/a.cdngeek.net/0.0.0.0
+address=/a.clipconverter.cc/0.0.0.0
+address=/a.giantrealm.com/0.0.0.0
+address=/a.i-sgcm.com/0.0.0.0
+address=/a.kat.cr/0.0.0.0
+address=/a.kickass.to/0.0.0.0
+address=/a.lolwot.com/0.0.0.0
+address=/ac2.msn.com/0.0.0.0
+address=/access.njherald.com/0.0.0.0
+address=/ad.cooks.com/0.0.0.0
+address=/ad.digitimes.com.tw/0.0.0.0
+address=/ad.directmirror.com/0.0.0.0
+address=/ad.download.cnet.com/0.0.0.0
+address=/ad.evozi.com/0.0.0.0
+address=/ad.fnnews.com/0.0.0.0
+address=/ad.jamster.com/0.0.0.0
+address=/ad.lyricswire.com/0.0.0.0
+address=/ad.mangareader.net/0.0.0.0
+address=/ad.newegg.com/0.0.0.0
+address=/ad.pandora.tv/0.0.0.0
+address=/ad.reachlocal.com/0.0.0.0
+address=/ad.search.ch/0.0.0.0
+address=/ad.services.distractify.com/0.0.0.0
+address=/adcitrus.com/0.0.0.0
+address=/addirector.vindicosuite.com/0.0.0.0
+address=/adds.weatherology.com/0.0.0.0
+address=/adlink.shopsafe.co.nz/0.0.0.0
+address=/admeta.vo.llnwd.net/0.0.0.0
+address=/ads-rolandgarros.com/0.0.0.0
+address=/ads.pof.com/0.0.0.0
+address=/ads.yahoo.com/0.0.0.0
+address=/ads.zynga.com/0.0.0.0
+address=/adsatt.abcnews.starwave.com/0.0.0.0
+address=/adsatt.espn.starwave.com/0.0.0.0
+address=/adshare.freedocast.com/0.0.0.0
+address=/adsor.openrunner.com/0.0.0.0
+address=/adss.yahoo.com/0.0.0.0
+address=/adstil.indiatimes.com/0.0.0.0
+address=/adtest.theonion.com/0.0.0.0
+address=/advertise.twitpic.com/0.0.0.0
+address=/advice-ads-cdn.vice.com/0.0.0.0
+address=/adx.kat.ph/0.0.0.0
+address=/aff.lmgtfy.com/0.0.0.0
+address=/ajnad.aljazeera.net/0.0.0.0
+address=/amz.steamprices.com/0.0.0.0
+address=/analytics.mmosite.com/0.0.0.0
+address=/as.inbox.com/0.0.0.0
+address=/asd.projectfreetv.so/0.0.0.0
+address=/avpa.dzone.com/0.0.0.0
+address=/b.localpages.com/0.0.0.0
+address=/b.thefile.me/0.0.0.0
+address=/ba.ccm2.net/0.0.0.0
+address=/ba.kioskea.net/0.0.0.0
+address=/banner.automotiveworld.com/0.0.0.0
+address=/banner.itweb.co.za/0.0.0.0
+address=/banners.beevpn.com/0.0.0.0
+address=/banners.beted.com/0.0.0.0
+address=/banners.clubworldgroup.com/0.0.0.0
+address=/banners.expressindia.com/0.0.0.0
+address=/banners.i-comers.com/0.0.0.0
+address=/banners.itweb.co.za/0.0.0.0
+address=/banners.playocio.com/0.0.0.0
+address=/beap.gemini.yahoo.com/0.0.0.0
+address=/bizanti.youwatch.org/0.0.0.0
+address=/bnrs.ilm.ee/0.0.0.0
+address=/bwp.theinsider.com.com/0.0.0.0
+address=/cadvv.heraldm.com/0.0.0.0
+address=/cadvv.koreaherald.com/0.0.0.0
+address=/canvas.thenextweb.com/0.0.0.0
+address=/click.livedoor.com/0.0.0.0
+address=/clicks.superpages.com/0.0.0.0
+address=/cnetwidget.creativemark.co.uk/0.0.0.0
+address=/collector.viki.io/0.0.0.0
+address=/creatives.livejasmin.com/0.0.0.0
+address=/d.annarbor.com/0.0.0.0
+address=/d.businessinsider.com/0.0.0.0
+address=/d.gossipcenter.com/0.0.0.0
+address=/d.thelocal.com/0.0.0.0
+address=/dads.new.digg.com/0.0.0.0
+address=/dailydeals.amarillo.com/0.0.0.0
+address=/dailydeals.augustachronicle.com/0.0.0.0
+address=/dailydeals.brainerddispatch.com/0.0.0.0
+address=/dailydeals.lubbockonline.com/0.0.0.0
+address=/dailydeals.onlineathens.com/0.0.0.0
+address=/dailydeals.savannahnow.com/0.0.0.0
+address=/dcad.watersoul.com/0.0.0.0
+address=/deals.ledgertranscript.com/0.0.0.0
+address=/digdug.divxnetworks.com/0.0.0.0
+address=/display.superbay.net/0.0.0.0
+address=/dontblockme.modaco.com/0.0.0.0
+address=/ehow.com/media/ad.html/0.0.0.0
+address=/eva.ucas.com/0.0.0.0
+address=/fan.twitch.tv/0.0.0.0
+address=/fimserve.ign.com/0.0.0.0
+address=/findnsave.idahostatesman.com/0.0.0.0
+address=/g.brothersoft.com/0.0.0.0
+address=/gameads.digyourowngrave.com/0.0.0.0
+address=/geoshopping.nzherald.co.nz/0.0.0.0
+address=/get.thefile.me/0.0.0.0
+address=/gfx.infomine.com/0.0.0.0
+address=/green.virtual-nights.com/0.0.0.0
+address=/hejban.youwatch.org/0.0.0.0
+address=/ibanners.empoweredcomms.com.au/0.0.0.0
+address=/iframe.travel.yahoo.com/0.0.0.0
+address=/imads.rediff.com/0.0.0.0
+address=/kat-ads.torrenticity.com/0.0.0.0
+address=/keepthelighton.vpsboard.com/0.0.0.0
+address=/kermit.macnn.com/0.0.0.0
+address=/life.imagepix.org/0.0.0.0
+address=/ll.a.hulu.com/0.0.0.0
+address=/londonprivaterentals.standard.co.uk/0.0.0.0
+address=/looky.hyves.org/0.0.0.0
+address=/lw2.gamecopyworld.com/0.0.0.0
+address=/mads.dailymail.co.uk/0.0.0.0
+address=/marketingsolutions.yahoo.com/0.0.0.0
+address=/mb.hockeybuzz.com/0.0.0.0
+address=/mealsandsteals.sandiego6.com/0.0.0.0
+address=/media-delivery.armorgames.com/0.0.0.0
+address=/media-mgmt.armorgames.com/0.0.0.0
+address=/mediamgr.ugo.com/0.0.0.0
+address=/nest.youwatch.org/0.0.0.0
+address=/netspidermm.indiatimes.com/0.0.0.0
+address=/network.sofeminine.co.uk/0.0.0.0
+address=/noram.srv.ysm.yahoo.com/0.0.0.0
+address=/oas.autotrader.co.uk/0.0.0.0
+address=/oas.skyscanner.net/0.0.0.0
+address=/oasc07.citywire.co.uk/0.0.0.0
+address=/oascentral.chron.com/0.0.0.0
+address=/oascentral.hosted.ap.org/0.0.0.0
+address=/oascentral.newsmax.com/0.0.0.0
+address=/ox-d.rantsports.com/0.0.0.0
+address=/ox-d.sbnation.com/0.0.0.0
+address=/ox-d.wetransfer.com/0.0.0.0
+address=/ox.furaffinity.net/0.0.0.0
+address=/partners-z.com/0.0.0.0
+address=/photo.net/equipment/pg-160/0.0.0.0
+address=/player.1800coupon.com/0.0.0.0
+address=/player.1stcreditrepairs.com/0.0.0.0
+address=/player.800directories.com/0.0.0.0
+address=/player.accoona.com/0.0.0.0
+address=/player.alloutwedding.com/0.0.0.0
+address=/player.insuranceandhealth.com/0.0.0.0
+address=/pmm.people.com.cn/0.0.0.0
+address=/pop-over.powered-by.justplayzone.com/0.0.0.0
+address=/prerollads.ign.com/0.0.0.0
+address=/promo.fileforum.com/0.0.0.0
+address=/rad.microsoft.com/0.0.0.0
+address=/rad.msn.com/0.0.0.0
+address=/red.bayimg.net/0.0.0.0
+address=/redvase.bravenet.com/0.0.0.0
+address=/richmedia.yimg.com/0.0.0.0
+address=/roia.com/0.0.0.0
+address=/rpt.anchorfree.net/0.0.0.0
+address=/searchignited.com/0.0.0.0
+address=/sebar.thand.info/0.0.0.0
+address=/shoppingpartners2.futurenet.com/0.0.0.0
+address=/sponsors.s2ki.com/0.0.0.0
+address=/sponsors.webosroundup.com/0.0.0.0
+address=/srv.thespacereporter.com/0.0.0.0
+address=/storewidget.pcauthority.com.au/0.0.0.0
+address=/stream.heavenmedia.net/0.0.0.0
+address=/tanzanite.infomine.com/0.0.0.0
+address=/targetedinfo.com/0.0.0.0
+address=/targetedtopic.com/0.0.0.0
+address=/thejesperbay.com/0.0.0.0
+address=/themis.yahoo.com/0.0.0.0
+address=/tmcs.net/0.0.0.0
+address=/tom.itv.com/0.0.0.0
+address=/tracking.hostgator.com/0.0.0.0
+address=/ua.badongo.com/0.0.0.0
+address=/uimserv.net/0.0.0.0
+address=/unicast.ign.com/0.0.0.0
+address=/unicast.msn.com/0.0.0.0
+address=/verdict.abc.go.com/0.0.0.0
+address=/vice-ads-cdn.vice.com/0.0.0.0
+address=/w.homes.yahoo.net/0.0.0.0
+address=/webmaster.extabit.com/0.0.0.0
+address=/widget.directory.dailycommercial.com/0.0.0.0
+address=/x.castanet.net/0.0.0.0
+address=/yea.uploadimagex.com/0.0.0.0
+address=/yesbeby.whies.info/0.0.0.0
+address=/yrt7dgkf.exashare.com/0.0.0.0
+address=/ysm.yahoo.com/0.0.0.0
+address=/zads.care2.com/0.0.0.0
+address=/a.eporner.com/0.0.0.0
+address=/a.heavy-r.com/0.0.0.0
+address=/a.killergram-girls.com/0.0.0.0
+address=/ad.eporner.com/0.0.0.0
+address=/ad.slutload.com/0.0.0.0
+address=/ad.thisav.com/0.0.0.0
+address=/ad.userporn.com/0.0.0.0
+address=/ads.xxxbunker.com/0.0.0.0
+address=/affiliates.goodvibes.com/0.0.0.0
+address=/banner1.pornhost.com/0.0.0.0
+address=/banners.cams.com/0.0.0.0
+address=/bob.crazyshit.com/0.0.0.0
+address=/brcache.madthumbs.com/0.0.0.0
+address=/creatives.cliphunter.com/0.0.0.0
+address=/creatives.pichunter.com/0.0.0.0
+address=/dot.eporner.com/0.0.0.0
+address=/dot2.eporner.com/0.0.0.0
+address=/exit.macandbumble.com/0.0.0.0
+address=/lw1.cdmediaworld.com/0.0.0.0
+address=/m2.xhamster.com/0.0.0.0
+address=/partners.xhamster.com/0.0.0.0
+address=/pr-static.empflix.com/0.0.0.0
+address=/pr-static.tnaflix.com/0.0.0.0
+address=/r.radikal.ru/0.0.0.0
+address=/rev.fapdu.com/0.0.0.0
+address=/site.img.4tube.com/0.0.0.0
+address=/static.kinghost.com/0.0.0.0
+address=/x.eroticity.net/0.0.0.0
+address=/x.vipergirls.to/0.0.0.0
diff --git a/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/dnsmasq.ads b/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/dnsmasq.ads
new file mode 100755
index 0000000000..ec1a221896
--- /dev/null
+++ b/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/dnsmasq.ads
@@ -0,0 +1,4 @@
+address=/p.tanx.com/0.0.0.0
+address=/googlesyndication.com/0.0.0.0
+address=/linkvans.com/0.0.0.0
+server=/valf.atm.youku.com/114.114.114.114
diff --git a/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/dnsmasq.esc b/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/dnsmasq.esc
new file mode 100755
index 0000000000..6cfd870566
--- /dev/null
+++ b/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/dnsmasq.esc
@@ -0,0 +1,3 @@
+ipset=/weixin.qq.com/adbyby_wan
+ipset=/qpic.cn/adbyby_wan
+ipset=/imtt.qq.com/adbyby_wan
diff --git a/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/firewall.include b/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/firewall.include
new file mode 100755
index 0000000000..4dcec1e26f
--- /dev/null
+++ b/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/firewall.include
@@ -0,0 +1,16 @@
+#!/bin/sh
+
+if [ -f /tmp/blockip.ipset ];then
+
+adbyby_enable=$(uci get adbyby.@adbyby[0].enable)
+
+if [ $adbyby_enable -eq 1 ]; then
+	if pidof adbyby>/dev/null; then
+	  /etc/init.d/adbyby reload_rule
+	 else
+	   /etc/init.d/adbyby restart
+  fi
+fi
+
+fi
+
diff --git a/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/rules.txt b/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/rules.txt
new file mode 100644
index 0000000000..5c44b0e8c5
--- /dev/null
+++ b/package/lean/luci-app-adbyby-plus/root/usr/share/adbyby/rules.txt
@@ -0,0 +1,15 @@
+!  ------------------------------ ADByby 自定义过滤语法简表---------------------------------
+!  --------------  规则基于abp规则，并进行了字符替换部分的扩展-----------------------------
+!  ABP规则请参考https://adblockplus.org/zh_CN/filters，下面为大致摘要
+!  "!" 为行注释符，注释行以该符号起始作为一行注释语义，用于规则描述
+!  "*" 为字符通配符，能够匹配0长度或任意长度的字符串，该通配符不能与正则语法混用。
+!  "^" 为分隔符，可以是除了字母、数字或者 _ - . % 之外的任何字符。
+!  "|" 为管线符号，来表示地址的最前端或最末端
+!  "||" 为子域通配符，方便匹配主域名下的所有子域。
+!  "~" 为排除标识符，通配符能过滤大多数广告，但同时存在误杀, 可以通过排除标识符修正误杀链接。
+!  "##" 为元素选择器标识符，后面跟需要隐藏元素的CSS样式例如 #ad_id  .ad_class
+!!  元素隐藏暂不支持全局规则和排除规则
+!! 字符替换扩展
+!  文本替换选择器标识符，后面跟需要替换的文本数据，格式：$s@模式字符串@替换后的文本@
+!  支持通配符*和？
+!  -------------------------------------------------------------------------------------------
diff --git a/package/lean/luci-app-amule/Makefile b/package/lean/luci-app-amule/Makefile
new file mode 100644
index 0000000000..bd1e1e63c9
--- /dev/null
+++ b/package/lean/luci-app-amule/Makefile
@@ -0,0 +1,15 @@
+# Copyright (C) 2016 Openwrt.org
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI support for Amule
+LUCI_DEPENDS:=+amule
+LUCI_PKGARCH:=all
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
diff --git a/package/lean/luci-app-amule/luasrc/controller/amule.lua b/package/lean/luci-app-amule/luasrc/controller/amule.lua
new file mode 100644
index 0000000000..1728c4eaaf
--- /dev/null
+++ b/package/lean/luci-app-amule/luasrc/controller/amule.lua
@@ -0,0 +1,160 @@
+--[[
+LuCI - Lua Configuration Interface - amule support
+
+Copyright 2016 maz-1 <ohmygod19993@gmail.com>
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+]]--
+
+module("luci.controller.amule", package.seeall)
+local uci     = luci.model.uci.cursor()
+local configdir = uci:get("amule", "main", "config_dir")
+
+function index()
+	if not nixio.fs.access("/etc/config/amule") then
+		return
+	end
+
+	entry({"admin", "nas"}, firstchild(), "NAS", 45).dependent = false
+        
+	local page = entry({"admin", "nas", "amule"}, cbi("amule"), _("aMule Settings"))
+	page.dependent = true
+	entry( {"admin", "nas", "amule", "logview"}, call("logread") ).leaf = true
+	entry( {"admin", "nas", "amule", "status"}, call("get_pid") ).leaf = true
+	entry( {"admin", "nas", "amule", "amulecmd"}, call("amulecmd") ).leaf = true
+	entry( {"admin", "nas", "amule", "startstop"}, post("startstop") ).leaf = true
+	entry( {"admin", "nas", "amule", "down_kad"}, post("down_kad") ).leaf = true
+	entry( {"admin", "nas", "amule", "down_ed2k"}, post("down_ed2k") ).leaf = true
+
+end
+
+-- called by XHR.get from detail_logview.htm
+function logread()
+	-- read application settings
+	local uci     = luci.model.uci.cursor()
+	local logdir  = uci:get("amule", "main", "config_dir") or "/var/run/amule"
+	uci:unload("amule")
+
+	local ldata=nixio.fs.readfile(logdir .. "/logfile")
+	if not ldata or #ldata == 0 then
+		ldata="_nodata_"
+	end
+	luci.http.write(ldata)
+end
+
+-- called by XHR.get from detail_startstop.htm
+function startstop()
+	local pid = get_pid(true)
+	if pid > 0 then
+		luci.sys.call("/etc/init.d/amule stop")
+		nixio.nanosleep(1)		-- sleep a second
+		if nixio.kill(pid, 0) then	-- still running
+			nixio.kill(pid, 9)	-- send SIGKILL
+		end
+		pid = 0
+	else
+		luci.sys.call("/etc/init.d/amule start")
+		nixio.nanosleep(1)		-- sleep a second
+		pid = tonumber(luci.sys.exec("pidof amuled")) or 0 
+		if pid > 0 and not nixio.kill(pid, 0) then
+			pid = 0		-- process did not start
+		end
+	end
+	luci.http.write(tostring(pid))	-- HTTP needs string not number
+end
+
+function down_kad()
+	url = uci:get("amule", "main", "kad_nodes_url")
+        data_path = configdir .. "/nodes.dat"
+        proto = string.gsub(url, "://%S*", "")
+        proto_opt = ( proto == "https" ) and " --no-check-certificate" or ""
+        cmd = "wget -O /tmp/down_nodes.dat \"" .. url .. "\"" .. proto_opt ..
+                " && cat /tmp/down_nodes.dat > " .. "\"" .. data_path .. "\""
+        luci.sys.call(cmd)
+end
+
+function down_ed2k()
+	url = uci:get("amule", "main", "ed2k_servers_url")
+	data_path = configdir .. "/server.met"
+        proto = string.gsub(url, "://%S*", "")
+        proto_opt = ( proto == "https" ) and " --no-check-certificate" or ""
+        cmd = "wget -O /tmp/down_server.met \"" .. url .. "\"" .. proto_opt ..
+                " && cat /tmp/down_server.met > " .. "\"" .. data_path .. "\""
+        luci.sys.call(cmd)
+end
+
+-- called by XHR.poll from detail_startstop.htm
+-- and from lua (with parameter "true")
+function get_pid(from_lua)
+	local pid_amuled = tonumber(luci.sys.exec("pidof amuled")) or 0 
+        local amuled_stat =false
+	if pid_amuled > 0 and not nixio.kill(pid_amuled, 0) then
+		pid_amuled = 0
+	end
+        
+        if pid_amuled > 0 then
+            amuled_stat =true
+        else
+            amuled_stat =false
+        end
+        
+	local pid_amuleweb = tonumber(luci.sys.exec("pidof amuleweb")) or 0 
+        local amuleweb_stat = false
+	if pid_amuleweb > 0 and not nixio.kill(pid_amuleweb, 0) then
+		pid_amuleweb = 0
+	end
+        
+        if pid_amuleweb > 0 then
+            amuleweb_stat =true
+        else
+            amuleweb_stat =false
+        end
+        
+	local status = {
+		amuled = amuled_stat,
+		amuled_pid = pid_amuled,
+		amuleweb = amuleweb_stat
+	}
+        
+	if from_lua then
+		return pid_amuled
+	else
+		luci.http.prepare_content("application/json")
+		luci.http.write_json(status)	
+	end
+end
+
+
+function amulecmd()
+	local re =""
+	local rv   = { }
+	local cmd = luci.http.formvalue("cmd")
+	local full_cmd = "HOME=\""..configdir.. "\" /usr/bin/amulecmd".." -c \""..cmd.."\" 2>&1"
+
+	local shellpipe = io.popen(full_cmd,"rw")
+	re = shellpipe:read("*a")
+	shellpipe:close()
+	if not re then 
+		re=""
+	end
+	
+	re = string.gsub(re, "This is amulecmd %S*\n", "")
+	re = string.gsub(re, "Creating client%S*\n", "")
+	re = string.gsub(re, "Succeeded! Connection established to aMule %S*\n", "")
+	
+	re = string.gsub(re, "\n", "\r\n")
+	
+	rv[#rv+1]=re
+	
+	if #rv > 0 then
+		luci.http.prepare_content("application/json")
+		luci.http.write_json(rv)
+				return
+	end
+
+	luci.http.status(404, "No such device")
+end
diff --git a/package/lean/luci-app-amule/luasrc/model/cbi/amule.lua b/package/lean/luci-app-amule/luasrc/model/cbi/amule.lua
new file mode 100644
index 0000000000..b18138f85d
--- /dev/null
+++ b/package/lean/luci-app-amule/luasrc/model/cbi/amule.lua
@@ -0,0 +1,456 @@
+--[[
+LuCI - Lua Configuration Interface - Aria2 support
+
+Copyright 2016 maz-1 <ohmygod19993@gmail.com>
+]]--
+
+local sys  = require "luci.sys"
+local util = require "luci.util"
+local uci = require "luci.model.uci".cursor()
+
+ptype = {
+	"socks5",
+	"socks4",
+	"http",
+	"socks4a",
+}
+
+whocan = {
+	"anyone",
+	"friends",
+	"nobody",
+}
+
+function titlesplit(Value)
+    return "<p style=\"font-size:20px;font-weight:bold;color: DodgerBlue\">" .. translate(Value) .. "</p>"
+end
+
+m = Map("amule", translate("aMule"), translate("aMule is a ED2K/KAD client for all platforms.") .. "<br/><a href=\"https://github.com/maz-1\">luci interface by maz-1</a>")
+
+m:section(SimpleSection).template  = "amule/overview_status"
+
+s = m:section(TypedSection, "amule", translate("aMule Settings"))
+s.addremove = false
+s.anonymous = true
+
+s:tab("general", translate("General"))
+s:tab("connection", translate("Connections"))
+s:tab("server", translate("Server"))
+s:tab("path_and_file", translate("Path And File"))
+s:tab("security", translate("Security"))
+s:tab("remote", translate("External Control"))
+s:tab("template", translate("Edit Template"))
+s:tab("logview", translate("Log File Viewer"))
+s:tab("amulecmd", translate("aMule command"))
+
+-- GENERAL --
+
+o = s:taboption("general", Flag, "enabled", translate("Enabled"))
+o.rmempty = false
+
+user = s:taboption("general", ListValue, "runasuser", translate("Run daemon as user"))
+local p_user
+for _, p_user in util.vspairs(util.split(sys.exec("cat /etc/passwd | cut -f 1 -d :"))) do
+        user:value(p_user)
+end
+
+o = s:taboption("general", Value, "config_dir", translate("Configuration directory"))
+o.rmempty = false
+o.placeholder = "/var/run/amule"
+
+o = s:taboption("general", Value, "mem_percentage", translate("Memory Limit"), translate("Percentage"))
+o.rmempty = false
+o.placeholder = "50"
+o.datatype = "range(1, 99)"
+
+o = s:taboption("general", Value, "nick", translate("Nickname"))
+o.placeholder = "http://www.aMule.org"
+
+o = s:taboption("general", Value, "max_upload", translate("Max upload speed"), translate("Unlimited when set to 0"))
+o.datatype = "uinteger"
+o.rmempty = false
+o.placeholder = "0"
+
+o = s:taboption("general", Value, "max_download", translate("Max download speed"), translate("Unlimited when set to 0"))
+o.datatype = "uinteger"
+o.rmempty = false
+o.placeholder = "0"
+
+o = s:taboption("general", Value, "slot_allocation", translate("Slot allocation"))
+o.datatype = "uinteger"
+o.rmempty = false
+o.placeholder = "2"
+
+o = s:taboption("general", Value, "max_connections", translate("Max connections"))
+o.datatype = "uinteger"
+o.rmempty = false
+o.placeholder = "500"
+
+o = s:taboption("general", Value, "max_sources_per_file", translate("Max sources per file"))
+o.datatype = "uinteger"
+o.rmempty = false
+o.placeholder = "300"
+
+-- CONNECTIONS --
+
+o = s:taboption("connection", Value, "port", translate("TCP port"))
+o.datatype = "port"
+o.rmempty = false
+o.placeholder = "4662"
+
+o = s:taboption("connection", Flag, "udp_enable", translate("Enable UDP port"))
+o.rmempty = false
+
+o = s:taboption("connection", Value, "udp_port", translate("UDP port"))
+o.datatype = "port"
+o.rmempty = false
+o.placeholder = "4672"
+
+o = s:taboption("connection", Flag, "upnp_enabled", translate("Enable UPnP"))
+o.rmempty = false
+
+o = s:taboption("connection", Value, "upnp_tcp_port", translate("UPnP TCP port"))
+o.datatype = "port"
+o.rmempty = false
+o.placeholder = "50000"
+
+o = s:taboption("connection", Value, "address", translate("Bind Address"), translate("Leave blank to bind all"))
+o.datatype = "ip4addr"
+o.rmempty = true
+
+o = s:taboption("connection", Flag, "auto_connect", translate("Automatically connect"))
+o.rmempty = false
+
+o = s:taboption("connection", Flag, "reconnect", translate("Automatically reconnect"))
+o.rmempty = false
+
+o = s:taboption("connection", Flag, "connect_to_kad", translate("Connect to Kad network"))
+o.rmempty = false
+
+o = s:taboption("connection", Flag, "connect_to_ed2k", translate("Connect to ED2K network"))
+o.rmempty = false
+
+s:taboption("connection", DummyValue,"titlesplit1" ,titlesplit(translate("Proxy Configuration")))
+
+o = s:taboption("connection", Flag, "proxy_enable_proxy", translate("Enable proxy"))
+o.rmempty = false
+
+o = s:taboption("connection", ListValue, "proxy_type", translate("Proxy type"))
+for i,v in ipairs(ptype) do
+	o:value(v)
+end
+o.rmempty = false
+
+o = s:taboption("connection", Value, "proxy_name", translate("Proxy name"))
+o.rmempty = true
+
+o = s:taboption("connection", Value, "proxy_port", translate("Proxy port"))
+o.datatype = "port"
+o.rmempty = true
+
+o = s:taboption("connection", Flag, "proxy_enable_password", translate("Proxy requires authentication"))
+o.rmempty = true
+
+o = s:taboption("connection", Value, "proxy_user", translate("Proxy user"))
+--o:depends("proxy_enable_password", "1")
+o.rmempty = true
+
+o = s:taboption("connection", Value, "proxy_password", translate("Proxy password"))
+o.password = true
+o.rmempty = true
+
+-- SERVER --
+
+o = s:taboption("server", Value, "kad_nodes_url", translate("Kad Nodes Url"), "<input type=\"button\" size=\"0\" title=\"" 
+    .. translate("Download now") .. "\" onclick=\"onclick_down_kad(this.id)\" "
+    .. "value=\"&#10597;&#10597;&#10597;\" "
+    .. "style=\"font-weight:bold;text-decoration:overline;\""
+    .. "/>")
+o.rmempty = false
+o.placeholder = "http://upd.emule-security.org/nodes.dat"
+
+o = s:taboption("server", Value, "ed2k_servers_url", translate("Ed2k Servers List Url"), "<input type=\"button\" size=\"0\" title=\"" 
+    .. translate("Download now") .. "\" onclick=\"onclick_down_ed2k(this.id)\" "
+    .. "value=\"&#10597;&#10597;&#10597;\" "
+    .. "style=\"font-weight:bold;text-decoration:overline;\""
+    .. "/>")
+o.rmempty = false
+o.placeholder = "http://upd.emule-security.org/server.met"
+
+o = s:taboption("server", Flag, "remove_dead_server", translate("Remove Dead Server"))
+o.rmempty = false
+
+o = s:taboption("server", Value, "dead_server_retry", translate("Dead Server Retry"))
+--o:depends("remove_dead_server", "1")
+o.datatype = "uinteger"
+o.rmempty = false
+o.placeholder = "3"
+o.default = "3"
+
+o = s:taboption("server", Flag, "add_server_list_from_server", translate("Update server list when connecting to a server"))
+o.rmempty = false
+
+o = s:taboption("server", Flag, "add_server_list_from_client", translate("Update server list when a client connects"))
+o.rmempty = false
+
+o = s:taboption("server", Flag, "scoresystem", translate("Use priority system"))
+o.rmempty = false
+
+o = s:taboption("server", Flag, "smart_id_check", translate("Use smart LowID check on connect"))
+o.rmempty = false
+
+o = s:taboption("server", Flag, "safe_server_connect", translate("Safe connect"))
+o.rmempty = false
+
+o = s:taboption("server", Flag, "auto_connect_static_only", translate("Auto connect to servers in static list only"))
+o.rmempty = false
+
+o = s:taboption("server", Flag, "manual_high_prio", translate("Set manually added servers to high priority"))
+o.rmempty = false
+
+o = s:taboption("server", Flag, "serverlist", translate("Auto update server list at startup"), translate("addresses.dat file"))
+o.rmempty = false
+
+addr = s:taboption("server", Value, "addresses", translate("Server addresses"), 
+                        translate("Content of addresses.dat. One address per line"))
+addr:depends("serverlist", "1")
+addr.template = "cbi/tvalue"
+addr.rows = 5
+addr.rmempty = true
+function addr.cfgvalue(self, section)
+	return nixio.fs.readfile("/etc/amule/addresses.dat")
+end
+
+function addr.write(self, section, value)
+	value = value:gsub("\r\n?", "\n")
+	nixio.fs.writefile("//etc/amule/addresses.dat", value)
+end
+
+-- PATH AND FILE --
+
+o = s:taboption("path_and_file", Value, "temp_dir", translate("Temporary directory"))
+o.rmempty = false
+o.placeholder = "/var/run/amule/.aMule/Temp"
+
+o = s:taboption("path_and_file", Value, "incoming_dir", translate("Incoming directory"))
+o.rmempty = false
+o.placeholder = "/var/run/amule/.aMule/Incoming"
+
+
+shareddir = s:taboption("path_and_file", Value, "shareddir", translate("Shared directory"), 
+                translate("Content of shareddir.dat. One directory per line"))
+shareddir.template = "cbi/tvalue"
+shareddir.titleref = luci.dispatcher.build_url("admin", "system", "fstab")
+shareddir.rows = 5
+shareddir.rmempty = true
+function shareddir.cfgvalue(self, section)
+	return nixio.fs.readfile("/etc/amule/shareddir.dat")
+end
+
+function shareddir.write(self, section, value)
+	value = value:gsub("\r\n?", "\n")
+	nixio.fs.writefile("//etc/amule/shareddir.dat", value)
+end
+
+o = s:taboption("path_and_file", Flag, "ich", translate("Intelligent corruption handling (I.C.H.)"))
+o.rmempty = false
+
+o = s:taboption("path_and_file", Flag, "a_ich_trust", translate("Advanced I.C.H trusts every hash (not recommended)"))
+o.rmempty = false
+
+o = s:taboption("path_and_file", Flag, "add_new_files_paused", translate("Add files to download in pause mode"))
+o.rmempty = false
+
+o = s:taboption("path_and_file", Flag, "dap_pref", translate("Add files to download with auto priority"))
+o.rmempty = false
+
+o = s:taboption("path_and_file", Flag, "start_next_file", translate("Start next paused file when a file completes"))
+o.rmempty = false
+
+o = s:taboption("path_and_file", Flag, "start_next_file_same_cat", translate("Start next paused file from the same category"))
+o:depends("start_next_file", "1")
+o.rmempty = true
+
+o = s:taboption("path_and_file", Flag, "start_next_file_alpha", translate("Start next paused file in alphabetic order"))
+o:depends("start_next_file", "1")
+o.rmempty = true
+
+o = s:taboption("path_and_file", Flag, "allocate_full_file", translate("Preallocate disk space for new files"))
+o.rmempty = false
+
+o = s:taboption("path_and_file", Value, "min_free_disk_space", translate("Minimum free disk space. in Mbytes"))
+o.datatype = "uinteger"
+o.placeholder = "1"
+o.rmempty = false
+
+o = s:taboption("path_and_file", Flag, "use_src_seed", translate("Save 10 sources on rare files (< 20 sources)"))
+o.rmempty = false
+
+o = s:taboption("path_and_file", Flag, "uap_pref", translate("Add new shares with auto priority"))
+o.rmempty = false
+
+
+-- SECURITY --
+
+
+o = s:taboption("security", Flag, "use_sec_ident", translate("Use secure user identification"))
+o.rmempty = false
+
+o = s:taboption("security", Flag, "is_crypt_layer_requested", translate("Use obfuscation for outgoing connections"))
+o.rmempty = false
+
+o = s:taboption("security", Flag, "is_client_crypt_layer_required", translate("Accept only obfuscation connections"))
+o.rmempty = false
+
+o = s:taboption("security", ListValue, "see_share", translate("Who can see my shared files"))
+for i,v in ipairs(whocan) do
+	o:value(v)
+end
+o.rmempty = false
+
+s:taboption("security", DummyValue,"titlesplit2" ,titlesplit(translate("IP Filter Configuration")))
+
+shareddir = s:taboption("security", Value, "ipfilter_static", translate("Static IP list for filtering"), 
+                translate("Content of ipfilter_static.dat"))
+shareddir.template = "cbi/tvalue"
+shareddir.titleref = luci.dispatcher.build_url("admin", "system", "fstab")
+shareddir.rows = 5
+shareddir.rmempty = true
+function shareddir.cfgvalue(self, section)
+	return nixio.fs.readfile("/etc/amule/ipfilter_static.dat")
+end
+
+function shareddir.write(self, section, value)
+	value = value:gsub("\r\n?", "\n")
+	nixio.fs.writefile("//etc/amule/ipfilter_static.dat", value)
+end
+
+o = s:taboption("security", Flag, "ip_filter_clients", translate("Filter clients by IP"))
+o.rmempty = false
+
+o = s:taboption("security", Flag, "ip_filter_servers", translate("Filter servers by IP"))
+o.rmempty = false
+
+o = s:taboption("security", Value, "ip_filter_url", translate("IP filter list URL"))
+o.rmempty = true
+
+o = s:taboption("security", Flag, "ip_filter_auto_load", translate("Auto-update ipfilter at startup"))
+o.rmempty = false
+
+o = s:taboption("security", Value, "filter_level", translate("Filtering Level"))
+o.datatype = "range(1, 255)"
+o.rmempty = false
+o.placeholder = "127"
+
+o = s:taboption("security", Flag, "filter_lan_ips", translate("Always filter LAN IPs"))
+o.rmempty = false
+
+o = s:taboption("security", Flag, "paranoid_filtering", translate("Paranoid handling of non-matching IPs"))
+o.rmempty = false
+
+o = s:taboption("security", Flag, "ip_filter_system", translate("Use system-wide ipfilter.dat if available"))
+o.rmempty = false
+
+-- REMOTE CONTROL --
+
+o = s:taboption("remote", Value, "ec_address", translate("IP of the listening interface for external connection"))
+o.datatype = "ip4addr"
+o.placeholder = "127.0.0.1"
+o.rmempty = true
+
+o = s:taboption("remote", Value, "ec_port", translate("TCP port for EC"))
+o.datatype = "port"
+o.placeholder = "4712"
+o.rmempty = false
+
+o = s:taboption("remote", Flag, "upnp_ec_enabled", translate("Enable upnp port forwarding on the EC port"))
+o.rmempty = false
+
+o = s:taboption("remote", Value, "ec_password", translate("EC password"))
+o.password  =  true
+o.rmempty = false
+
+s:taboption("remote", DummyValue,"titlesplit3", titlesplit(translate("aMule Web Configuration")))
+
+o = s:taboption("remote", Flag, "web_enabled", translate("Enable web server on startup"))
+o.rmempty = false
+
+o = s:taboption("remote", Value, "template", translate("Web template"))
+o.rmempty = false
+local tpth_suggestions = luci.sys.exec("ls /usr/share/amule/webserver/|sed ':a;N;$!ba;s/\\n/:/g'")
+if tpth_suggestions then
+	for entry in string.gmatch(tpth_suggestions, "[^:]+") do
+		o:value(entry)
+	end
+end
+
+o = s:taboption("remote", Value, "web_password", translate("Web full rights password"))
+o.password  =  true
+o.rmempty = true
+
+o = s:taboption("remote", Flag, "use_low_rights_user", translate("Use low rights user"))
+o.rmempty = false
+
+o = s:taboption("remote", Value, "password_low", translate("Web low rights password"))
+o.password  =  true
+o.rmempty = true
+
+o = s:taboption("remote", Value, "web_port", translate("Web TCP port"))
+o.datatype = "port"
+o.placeholder = "4711"
+o.rmempty = false
+
+o = s:taboption("remote", Flag, "upnp_web_server_enabled", translate("Enable UPnP port forwarding of the web server port"))
+o.rmempty = false
+
+o = s:taboption("remote", Value, "web_upnp_tcp_port", translate("Web UPnP TCP port"))
+o.datatype = "port"
+o.placeholder = "50001"
+o.rmempty = false
+
+o = s:taboption("remote", Value, "page_refresh_time", translate("Page refresh time(in secs)"))
+o.datatype = "range(1, 600)"
+o.rmempty = false
+o.placeholder = "121"
+
+o = s:taboption("remote", Flag, "use_gzip", translate("Enable Gzip compression"))
+o.rmempty = false
+
+
+-- TEMPLATE --
+
+
+tmpl = s:taboption("template", Value, "_tmpl",
+	translate("Edit the template that is used for generating the aMule configuration."), 
+	translate("This is the content of the file '/etc/amule/amule.conf.template' from which your amule configuration will be generated. " ..
+		"Values enclosed by pipe symbols ('|') should not be changed. They get their values from other tabs."))
+
+tmpl.template = "cbi/tvalue"
+tmpl.rows = 20
+
+function tmpl.cfgvalue(self, section)
+	return nixio.fs.readfile("/etc/amule/amule.conf.template")
+end
+
+function tmpl.write(self, section, value)
+	value = value:gsub("\r\n?", "\n")
+	nixio.fs.writefile("//etc/amule/amule.conf.template", value)
+end
+
+-- LOGVIEW --
+        
+local lv	= s:taboption("logview", DummyValue, "_logview")
+lv.template	= "amule/detail_logview"
+lv.inputtitle	= translate("Read / Reread log file")
+lv.rows		= 50
+
+function lv.cfgvalue(self, section)
+	return translate("Please press [Read] button")
+end
+
+-- AMULECMD --
+        
+local cmd	= s:taboption("amulecmd", DummyValue, "_amulecmd")
+cmd.template	= "amule/webshell"
+
+return m
diff --git a/package/lean/luci-app-amule/luasrc/view/amule/detail_logview.htm b/package/lean/luci-app-amule/luasrc/view/amule/detail_logview.htm
new file mode 100644
index 0000000000..8effbacfd2
--- /dev/null
+++ b/package/lean/luci-app-amule/luasrc/view/amule/detail_logview.htm
@@ -0,0 +1,56 @@
+
+<!-- ++ BEGIN ++ aMule ++ detail_logview.htm ++ -->
+<script type="text/javascript">//<![CDATA[
+	function onclick_logview(section, bottom)  {
+		// get elements
+		var txt = document.getElementById("cbid.amule.main._logview.txt");	// TextArea
+		if ( !txt ) { return; }	// security check
+		var lvXHR = new XHR();
+		lvXHR.get('<%=url('admin/nas/amule/logview')%>', null,
+			function(x) {
+				if (x.responseText == "_nodata_")
+					txt.value = "<%:File not found or empty%>";
+				else
+					txt.value = x.responseText;
+				if (bottom)
+					txt.scrollTop = txt.scrollHeight;
+				else
+					txt.scrollTop = 0;			}
+		);
+	}
+//]]></script>
+
+<%+cbi/valueheader%>
+
+<br />
+
+<%
+-- one button on top, one at the buttom
+%>
+<input class="cbi-button cbi-input-button" style="align: center; width: 100%" type="button" onclick="onclick_logview(this.name, false)"
+<%=
+attr("name", section) .. attr("id", cbid .. ".btn1") .. attr("value", self.inputtitle)
+%> />
+
+<br /><br />
+
+<%
+-- set a readable style taken from openwrt theme for textarea#syslog
+-- in openwrt theme there are problems with a width of 100 so we check for theme and set to lower value
+%>
+<textarea style="width: <%if media == "/luci-static/openwrt.org" then%>98.7%<%else%>100%<%end%> ; min-height: 500px; border: 3px solid #cccccc; padding: 5px; font-family: monospace; resize: none;" wrap="off" readonly="readonly"
+<%=
+attr("name", cbid .. ".txt") .. attr("id", cbid .. ".txt") .. ifattr(self.rows, "rows")
+%> >
+<%-=pcdata(self:cfgvalue(section))-%>
+</textarea>
+<br /><br />
+
+<%
+-- one button on top, one at the buttom
+%>
+<input class="cbi-button cbi-input-button" style="align: center; width: 100%" type="button" onclick="onclick_logview(this.name, true)"
+<%= attr("name", section) .. attr("id", cbid .. ".btn2") .. attr("value", self.inputtitle) %> />
+
+<%+cbi/valuefooter%>
+<!-- ++ END ++ aMule ++ detail_logview.htm ++ -->
diff --git a/package/lean/luci-app-amule/luasrc/view/amule/overview_status.htm b/package/lean/luci-app-amule/luasrc/view/amule/overview_status.htm
new file mode 100644
index 0000000000..8fd752186d
--- /dev/null
+++ b/package/lean/luci-app-amule/luasrc/view/amule/overview_status.htm
@@ -0,0 +1,94 @@
+<script type="text/javascript">//<![CDATA[
+XHR.poll(5, '<%=luci.dispatcher.build_url("admin/nas/amule/status")%>', null,
+	function(x, data) {
+		var tb = document.getElementById('amule_status');
+		var btn = document.getElementById("amule_startstop");
+		var btn_tmpl = '<input class="cbi-button cbi-button-apply" id="btn_startstop" style="font-size: 100%;" value="PID: NUMBER"type="button" onclick="onclick_startstop(this.id)">'
+		if (data && tb) {
+			if (data.amuled) {
+				var links = '<em><%:aMule daemon is running.%></em>';
+				if (data.amuleweb) {
+					links += '<input class="cbi-button mar-10" type="button" value="<%:Open aMuleWeb%>" onclick="openWebUI();" />';
+				}
+				tb.innerHTML = links;
+			} else {
+				tb.innerHTML = '<em><%:aMule daemon is not running.%></em>';
+			}
+			
+			if (data.amuled_pid == "0") {
+				btn.innerHTML = btn_tmpl.replace("PID: NUMBER", "<%:Start aMule%>"); 
+			} else {
+				btn.innerHTML = btn_tmpl.replace("NUMBER", data.amuled_pid); 
+			}
+		}
+		
+	}
+);
+function _data2elements(x, data) {
+		var btn = document.getElementById("btn_startstop");
+		if ( ! btn ) { return; }	// security check
+		if (data.amuled_pid == "0") {
+			btn.value = "<%:Start aMule%>";
+			btn.className = "cbi-button cbi-button-apply";
+			btn.disabled = false;
+		} else {
+			btn.value = "PID: " + data.amuled_pid;
+			btn.className = "cbi-button cbi-button-reset";
+			btn.disabled = false;
+		}
+}
+// event handler for start/stop button
+function onclick_startstop(id) {
+	// do start/stop
+	var btnXHR = new XHR();
+	btnXHR.post('<%=url('admin/nas/amule/startstop')%>', { token: '<%=token%>' },
+		function(x, data) { _data2elements(x, data); }
+	);
+}
+// event handler for download files
+function onclick_down_kad(id) {
+    if(confirm("<%:Existing file will be overwritten, do you really want to proceed?%>"))
+    {
+	var btnXHR = new XHR();
+	btnXHR.post('<%=url('admin/nas/amule/down_kad')%>', { token: '<%=token%>' },
+		function(x) {}
+	);
+    }
+}
+
+function onclick_down_ed2k(id) {
+    if(confirm("<%:Existing file will be overwritten, do you really want to proceed?%>"))
+    {
+	var btnXHR = new XHR();
+	btnXHR.post('<%=url('admin/nas/amule/down_ed2k')%>', { token: '<%=token%>' },
+		function(x) {}
+	);
+    }
+}
+
+function openWebUI() {
+	var curWwwPath = window.document.location.href;
+	var pathName = window.document.location.pathname;
+	var pos = curWwwPath.indexOf(pathName);
+	var localhostPath = curWwwPath.substring(0, pos);
+	var auth_port = document.getElementById("cbid.amule.main.web_port");
+	if (auth_port.value == "") {
+		auth_port_value = "44711"
+	} else {
+		auth_port_value = auth_port.value
+	};
+	var url = "http:" + localhostPath.substring(window.location.protocol.length) + ":" + auth_port_value;
+	window.open(url)
+};
+//]]>
+</script>
+<style>.mar-10 {margin-left: 10px; margin-right: 10px;}</style>
+<fieldset class="cbi-section">
+	<legend><%:aMule Status%></legend>
+	<p id="amule_status">
+		<em><%:Collecting data...%></em>
+	</p>
+	<p id="amule_startstop">
+		<em><%:Collecting data...%></em>
+	</p>
+</fieldset>
diff --git a/package/lean/luci-app-amule/luasrc/view/amule/webshell.htm b/package/lean/luci-app-amule/luasrc/view/amule/webshell.htm
new file mode 100644
index 0000000000..998fa170ae
--- /dev/null
+++ b/package/lean/luci-app-amule/luasrc/view/amule/webshell.htm
@@ -0,0 +1,90 @@
+<script type="text/javascript">//<![CDATA[
+
+
+  String.prototype.startsWith = function (str){
+    return this.indexOf(str) == 0;
+  };
+	var iwxhr = new XHR();
+	function update_status(e) {
+		if(e!=null && e.keyCode!=13) return false;
+		/*var cmd = document.getElementById("cmd").value;
+		if(cmd.startsWith("cd"))
+		{
+			newpath = cmd.replace("cd","").replace(" ","");
+			if(newpath.startsWith("/")){
+				document.getElementById("currentpath").value = newpath;
+			}else{
+				document.getElementById("currentpath").value += newpath;
+			}
+			cmd="";
+		}*/
+		
+	obj = document.getElementById("screen");
+	cmdstr=(document.getElementById("cmd").value).replace(/\s+/g,"")
+	if (cmdstr == "cls" || cmdstr == "clear")
+	{
+	   obj = document.getElementById("screen");
+	   obj.value = "";
+	   document.getElementById("cmd").value = "";
+	   return false;	
+	}
+
+		iwxhr.get('<%=luci.dispatcher.build_url("admin", "nas", "amule", "amulecmd")%>', {cmd: document.getElementById("cmd").value },
+			function(x, ifc)
+			{
+				obj = document.getElementById("screen");
+				obj.value+=ifc[0];
+				document.getElementById("cmd").focus();
+			}
+		)
+	
+
+
+	if ((document.getElementById("cmd").value).replace(/\s+/g,"") != "")
+	  {
+		obj.value+="\r\n--------------------------------------------\r\n"+document.getElementById("cmd").value+"\r\n--------------------------------------------\r\n";
+		document.getElementById("cmd").value = "";
+		return false;	
+	  }
+	};
+	
+	function clear_textfield() {
+		obj = document.getElementById("screen");
+		obj.value=""
+	}
+	
+	
+//]]></script>
+
+<style>
+.cmd_line{
+	background-color:yellow;
+
+}
+#list ul li
+{
+	margin-right:5px;
+	height:16px;
+	display:block;
+	float:left;
+	word-break: keep-all;
+}
+#list ul li:hover
+{
+	background:blue;
+	cursor:pointer;
+}
+</style>
+<div class="cbi-map" id="cbi-system">
+<h4><a id="content" name="content"><%:You can call amulecmd commands here to control your amule.%></a></h4>
+<h4><a id="content" name="content"><%:Execute 'Help' to get more infomation.%></a></h4>
+<textarea id="screen" style="width:100%;height:400px;overflow:auto;font-size:12px;" readonly="readonly" ></textarea>
+<br/>
+<%=translate("Command: ")%>
+<input type="text" id="cmd"/>
+<input class="cbi-button cbi-input-button" style="align: center; width: 100%" type="button" onclick="update_status(null)"
+<%= attr("name", section) .. attr("id", cbid .. ".btn2") .. attr("value", translate("Execute")) %> />
+<input class="cbi-button cbi-input-button" style="align: center; width: 100%" type="button" onclick="clear_textfield()"
+<%= attr("name", section) .. attr("id", cbid .. ".btn3") .. attr("value", translate("Clear")) %> />
+<br/>
+</div>
diff --git a/package/lean/luci-app-amule/po/zh-cn/amule.po b/package/lean/luci-app-amule/po/zh-cn/amule.po
new file mode 100644
index 0000000000..18f7184d57
--- /dev/null
+++ b/package/lean/luci-app-amule/po/zh-cn/amule.po
@@ -0,0 +1,360 @@
+msgid "aMule is a ED2K/KAD client for all platforms."
+msgstr "aMule是一个跨平台的ED2K/KAD客户端"
+
+msgid "NAS"
+msgstr "网络存储"
+
+msgid "General"
+msgstr "常规"
+
+msgid "Connections"
+msgstr "连接"
+
+msgid "Server"
+msgstr "服务器"
+
+msgid "Path And File"
+msgstr "路径和文件"
+
+msgid "Security"
+msgstr "安全"
+
+msgid "External Control"
+msgstr "远程控制"
+
+msgid "Edit Template"
+msgstr "编辑配置模版"
+
+msgid "Log File Viewer"
+msgstr "日志查看"
+
+msgid "aMule Settings"
+msgstr "aMule设置"
+
+msgid "Run daemon as user"
+msgstr "运行守护进程的用户"
+
+msgid "Configuration directory"
+msgstr "配置目录"
+
+msgid "Nickname"
+msgstr "昵称"
+
+msgid "Max upload speed"
+msgstr "最大上传速度"
+
+msgid "Max download speed"
+msgstr "最大下载速度"
+
+msgid "Unlimited when set to 0"
+msgstr "设为0时不限制"
+
+msgid "Slot allocation"
+msgstr "槽速度"
+
+msgid "Max connections"
+msgstr "最大连接数"
+
+msgid "Max sources per file"
+msgstr "单文件最大连接数"
+
+msgid "TCP port"
+msgstr "TCP端口"
+
+msgid "UDP port"
+msgstr "UDP端口"
+
+msgid "Enable UDP port"
+msgstr "启用UDP端口"
+
+msgid "Enable UPnP"
+msgstr "启用UPnP"
+
+msgid "UPnP TCP port"
+msgstr "UPnP TCP端口"
+
+msgid "Bind Address"
+msgstr "地址绑定"
+
+msgid "Leave blank to bind all"
+msgstr "留空则全部绑定"
+
+msgid "Default to bind all"
+msgstr "默认全部绑定"
+
+msgid "Automatically connect"
+msgstr "自动连接"
+
+msgid "Automatically reconnect"
+msgstr "自动重连"
+
+msgid "Connect to Kad network"
+msgstr "连接到Kad网络"
+
+msgid "Connect to ED2K network"
+msgstr "连接到ED2K网络"
+
+msgid "Proxy Configuration"
+msgstr "代理设置"
+
+msgid "Enable proxy"
+msgstr "启用代理"
+
+msgid "Proxy type"
+msgstr "代理类型"
+
+msgid "Proxy name"
+msgstr "代理名称"
+
+msgid "Proxy port"
+msgstr "代理端口"
+
+msgid "Proxy requires authentication"
+msgstr "代理需要认证"
+
+msgid "Proxy user"
+msgstr "代理用户"
+
+msgid "Proxy password"
+msgstr "代理密码"
+
+msgid "Kad Nodes Url"
+msgstr "Kad节点URL"
+
+msgid "Ed2k Servers List Url"
+msgstr "Ed2k服务器列表URL"
+
+msgid "Remove Dead Server"
+msgstr "删除无效服务器"
+
+msgid "Dead Server Retry"
+msgstr "删除前重连次数"
+
+msgid "Update server list when connecting to a server"
+msgstr "与服务器连接时更新服务器列表"
+
+msgid "Update server list when a client connects"
+msgstr "与其他用户连接时更新服务器列表"
+
+msgid "Use priority system"
+msgstr "启用优先级系统"
+
+msgid "Use smart LowID check on connect"
+msgstr "智能LOWID检测"
+
+msgid "Safe connect"
+msgstr "安全连接"
+
+msgid "Auto connect to servers in static list only"
+msgstr "只自动连接到静态列表中的服务器"
+
+msgid "Set manually added servers to high priority"
+msgstr "将手动输入的服务器设为高优先级"
+
+msgid "Auto update server list at startup"
+msgstr "启动时自动更新服务器列表"
+
+msgid "addresses.dat file"
+msgstr "addresses.dat文件"
+
+msgid "Server addresses"
+msgstr "服务器地址"
+
+msgid "Content of addresses.dat. One address per line"
+msgstr "addresses.dat的内容. 每行一个地址."
+
+msgid "Temporary directory"
+msgstr "临时文件夹"
+
+msgid "Incoming directory"
+msgstr "下载文件夹"
+
+msgid "Shared directory"
+msgstr "共享文件夹"
+
+msgid "Content of shareddir.dat. One directory per line"
+msgstr "shareddir.dat的内容. 每行一个目录."
+
+msgid "Intelligent corruption handling (I.C.H.)"
+msgstr "智能损坏数据处理(I.C.H.)"
+
+msgid "Advanced I.C.H trusts every hash (not recommended)"
+msgstr "高级I.C.H，信任全部校验值（不推荐）"
+
+msgid "Add files to download in pause mode"
+msgstr "添加新下载文件时设为暂停"
+
+msgid "Add files to download with auto priority"
+msgstr "添加新下载文件时设定优先级为自动"
+
+msgid "Start next paused file when a file completes"
+msgstr "一个文件完成时开始下一个暂停的文件"
+
+msgid "Start next paused file from the same category"
+msgstr "从同一分类开始下一个暂停的文件"
+
+msgid "Start next paused file in alphabetic order"
+msgstr "根据字母顺序开始下一个暂停的文件"
+
+msgid "Preallocate disk space for new files"
+msgstr "为新文件预分配磁盘空间"
+
+msgid "Minimum free disk space. in Mbytes"
+msgstr "最低剩余空间，单位MB"
+
+msgid "Save 10 sources on rare files (< 20 sources)"
+msgstr "保存稀有文件（少于20个源）的十个源"
+
+msgid "Add new shares with auto priority"
+msgstr "添加新共享文件时设优先级为自动"
+
+msgid "Use secure user identification"
+msgstr "使用安全用户认证"
+
+msgid "Use obfuscation for outgoing connections"
+msgstr "为传出连接使用迷惑协议"
+
+msgid "Accept only obfuscation connections"
+msgstr "只接受迷惑协议连接"
+
+msgid "Who can see my shared files"
+msgstr "谁可查看我的共享文件"
+
+msgid "IP Filter Configuration"
+msgstr "IP过滤设置"
+
+msgid "Static IP list for filtering"
+msgstr "静态IP过滤列表"
+
+msgid "Content of ipfilter_static.dat"
+msgstr "ipfilter_static.dat的内容"
+
+msgid "Filter clients by IP"
+msgstr "过滤用户"
+
+msgid "Filter servers by IP"
+msgstr "过滤服务器"
+
+msgid "IP filter list URL"
+msgstr "过滤列表URL"
+
+msgid "Auto-update ipfilter at startup"
+msgstr "自动更新过滤列表"
+
+msgid "Filtering Level"
+msgstr "过滤级别"
+
+msgid "Always filter LAN IPs"
+msgstr "总是过滤局域网ip地址"
+
+msgid "Paranoid handling of non-matching IPs"
+msgstr "处理不匹配的IP"
+
+msgid "Use system-wide ipfilter.dat if available"
+msgstr "可用情况下使用系统级的ipfilter.dat"
+
+msgid "IP of the listening interface for external connection"
+msgstr "远程连接监听IP"
+
+msgid "TCP port for EC"
+msgstr "远程连接TCP端口"
+
+msgid "Enable upnp port forwarding on the EC port"
+msgstr "为远程连接端口启用upnp"
+
+msgid "aMule Web Configuration"
+msgstr "aMule Web设置"
+
+msgid "EC password"
+msgstr "远程连接密码"
+
+msgid "Enable web server on startup"
+msgstr "启动时运行Web服务"
+
+msgid "Web template"
+msgstr "Web模版"
+
+msgid "Web full rights password"
+msgstr "Web最高权限密码"
+
+msgid "Use low rights user"
+msgstr "启用低权限用户"
+
+msgid "Web low rights password"
+msgstr "Web低权限密码"
+
+msgid "Web TCP port"
+msgstr "Web TCP端口"
+
+msgid "Enable UPnP port forwarding of the web server port"
+msgstr "为Web服务端口启用UPnP端口转发"
+
+msgid "Web UPnP TCP port"
+msgstr "Web服务UPnP的TCP端口"
+
+msgid "Page refresh time(in secs)"
+msgstr "页面刷新周期(秒)"
+
+msgid "Enable Gzip compression"
+msgstr "启用Gzip压缩"
+
+msgid "Edit the template that is used for generating the aMule configuration."
+msgstr "编辑用来生成aMule设置的模板"
+
+msgid "This is the content of the file '/etc/amule/amule.conf.template' from which your amule configuration will be generated. Values enclosed by pipe symbols ('|') should not be changed. They get their values from other tabs."
+msgstr "创建aMule设置的 '/etc/amule/amule.conf.template' 文件的内容。被通道符|包围的值不应该在这里改动，请在其他标签修改这些设置。"
+
+msgid "Read / Reread log file"
+msgstr "读取/重载日志文件"
+
+msgid "Please press [Read] button"
+msgstr "请点击[读取]按钮"
+
+msgid "File not found or empty"
+msgstr "文件不存在或为空"
+
+msgid "aMule Status"
+msgstr "aMule状态"
+
+msgid "Open aMuleWeb"
+msgstr "打开aMuleWeb"
+
+msgid "aMule daemon is running."
+msgstr "aMule守护进程正在运行"
+
+msgid "aMule daemon is not running."
+msgstr "aMule守护进程未运行"
+
+msgid "Start aMule"
+msgstr "启动aMule"
+
+msgid "aMule command"
+msgstr "aMule命令"
+
+msgid "aMule Command"
+msgstr "aMule命令"
+
+msgid "You can call amulecmd commands here to control your amule."
+msgstr "你可以在这里运行amulecmd命令以控制你的aMule"
+
+msgid "Execute 'Help' to get more infomation."
+msgstr "执行'Help'命令以获取更多信息"
+
+msgid "Execute"
+msgstr "执行"
+
+msgid "Clear"
+msgstr "清空"
+
+msgid "Command: "
+msgstr "命令: "
+
+msgid "Download now"
+msgstr "立即下载"
+
+msgid "Existing file will be overwritten, do you really want to proceed?"
+msgstr "已有文件将被覆盖，是否继续？"
+
+msgid "Percentage"
+msgstr "百分比"
+
diff --git a/package/lean/luci-app-amule/root/etc/amule/amule.conf.template b/package/lean/luci-app-amule/root/etc/amule/amule.conf.template
new file mode 100755
index 0000000000..3ab24a0b02
--- /dev/null
+++ b/package/lean/luci-app-amule/root/etc/amule/amule.conf.template
@@ -0,0 +1,206 @@
+[eMule]
+    Nick=|NICK|
+    MaxUpload=|MAXUPLOAD|
+    MaxDownload=|MAXDOWNLOAD|
+    SlotAllocation=|SLOTALLOCATION|
+    MaxConnections=|MAXCONNECTIONS|
+    MaxSourcesPerFile=|MAXSOURCESPERFILE|
+    Port=|PORT|
+    UDPPort=|UDPPORT|
+    UDPEnable=|UDPENABLE|
+    UPnPEnabled=|UPNPENABLED|
+    UPnPTCPPort=|UPNPTCPPORT|
+    Address=|ADDRESS|
+    Autoconnect=|AUTOCONNECT|
+    Reconnect=|RECONNECT|
+    ConnectToKad=|CONNECTTOKAD|
+    ConnectToED2K=|CONNECTTOED2K|
+    KadNodesUrl=|KADNODESURL|
+    Ed2kServersUrl=|ED2KSERVERSURL|
+    RemoveDeadServer=|REMOVEDEADSERVER|
+    DeadServerRetry=|DEADSERVERRETRY|
+    AddServerListFromServer=|ADDSERVERLISTFROMSERVER|
+    AddServerListFromClient=|ADDSERVERLISTFROMCLIENT|
+    Scoresystem=|SCORESYSTEM|
+    SmartIdCheck=|SMARTIDCHECK|
+    SafeServerConnect=|SAFESERVERCONNECT|
+    AutoConnectStaticOnly=|AUTOCONNECTSTATICONLY|
+    ManualHighPrio=|MANUALHIGHPRIO|
+    Serverlist=|SERVERLIST|
+    TempDir=|TEMPDIR|
+    IncomingDir=|INCOMINGDIR|
+    ICH=|ICH|
+    AICHTrust=|AICHTRUST|
+    AddNewFilesPaused=|ADDNEWFILESPAUSED|
+    DAPPref=|DAPPREF|
+    StartNextFile=|STARTNEXTFILE|
+    StartNextFileSameCat=|STARTNEXTFILESAMECAT|
+    StartNextFileAlpha=|STARTNEXTFILEALPHA|
+    AllocateFullFile=|ALLOCATEFULLFILE|
+    MinFreeDiskSpace=|MINFREEDISKSPACE|
+    UAPPref=|UAPPREF|
+    SeeShare=|SEESHARE|
+    IPFilterURL=|IPFILTERURL|
+    IPFilterAutoLoad=|IPFILTERAUTOLOAD|
+    FilterLevel=|FILTERLANIPS|
+    FilterLanIPs=|FILTERLANIPS|
+    ParanoidFiltering=|PARANOIDFILTERING|
+    IPFilterSystem=|IPFILTERSYSTEM|
+
+
+    FilterMessages=1
+    FilterAllMessages=0
+    MessagesFromFriendsOnly=0
+    MessageFromValidSourcesOnly=1
+    FilterWordMessages=0
+    MessageFilter=
+    ShowMessagesInLog=1
+    FilterComments=0
+    CommentFilter=
+
+    AppVersion=SVN
+    QueueSizePref=50
+    MaxConnectionsPerFiveSeconds=20
+    ServerKeepAliveTimeout=0
+    CheckDiskspace=1
+    PreviewPrio=0
+    FileBufferSizePref=16
+    OSDirectory=/var/run/amule
+    OnlineSignature=0
+    OnlineSignatureUpdate=5
+    EnableTrayIcon=0
+    MinToTray=0
+    ConfirmExit=1
+    StartupMinimized=0
+    3DDepth=10
+    ToolTipDelay=1
+    ShowOverhead=0
+    ShowInfoOnCatTabs=1
+    VerticalToolbar=0
+    GeoIPEnabled=1
+    VideoPlayer=
+    StatGraphsInterval=3
+    statsInterval=30
+    DownloadCapacity=300
+    UploadCapacity=100
+    StatsAverageMinutes=5
+    VariousStatisticsMaxValue=100
+    ShareHiddenFiles=0
+    AutoSortDownloads=0
+    NewVersionCheck=1
+    AdvancedSpamFilter=1
+    MessageUseCaptchas=1
+    Language=
+    SplitterbarPosition=75
+    YourHostname=
+    DateTimeFormat=%A, %x, %X
+    AllcatType=0
+    ShowAllNotCats=0
+    SmartIdState=0
+    DropSlowSources=0
+    ShowRatesOnTitle=0
+    GeoLiteCountryUpdateUrl=http://geolite.maxmind.com/download/geoip/database/GeoLiteCountry/GeoIP.dat.gz
+    StatsServerName=Shorty's ED2K stats
+    StatsServerURL=http://ed2k.shortypower.dyndns.org/?hash=
+    CreateSparseFiles=1
+
+[Browser]
+    OpenPageInTab=1
+    CustomBrowserString=
+
+[Proxy]
+    ProxyEnableProxy=|PROXYENABLEPROXY|
+    ProxyType=|PROXYTYPE|
+    ProxyName=|PROXYNAME|
+    ProxyPort=|PROXYPORT|
+    ProxyEnablePassword=|PROXYENABLEPASSWORD|
+    ProxyUser=|PROXYUSER|
+    ProxyPassword=|PROXYPASSWORD|
+
+[DLP]
+    CheckModString=1
+    CheckUsername=1
+    CheckUserHash=1
+    CheckHelloTag=1
+    CheckInfoTag=1
+    CheckVeryCDMod=0
+    CheckGhostMod=1
+
+[ExternalConnect]
+    ECAddress=|ECADDRESS|
+    ECPort=|ECPORT|
+    UPnPECEnabled=|UPNPECENABLED|
+    ECPassword=|ECPASSWORD|
+    UseSrcSeeds=|USESRCSEED|
+    UseSecIdent=|USESECIDENT|
+    IpFilterClients=|IPFILTERCLIENTS|
+    IpFilterServers=|IPFILTERSERVERS|
+
+    AcceptExternalConnections=1
+    ShowProgressBar=1
+    ShowPercent=1
+    TransmitOnlyUploadingClients=0
+
+[WebServer]
+    Enabled=|WEBENABLED|
+    Template=|TEMPLATE|
+    Password=|WEBPASSWORD|
+    UseLowRightsUser=|USELOWRIGHTSUSER|
+    PasswordLow=|PASSWORDLOW|
+    Port=|WEBPORT|
+    UPnPWebServerEnabled=|UPNPWEBSERVERENABLED|
+    WebUPnPTCPPort=|WEBUPNPTCPPORT|
+    PageRefreshTime=|PAGEREFRESHTIME|
+    UseGzip=|USEGZIP|
+
+    Path=amuleweb
+
+
+[GUI]
+    HideOnClose=0
+
+[Razor_Preferences]
+    FastED2KLinksHandler=1
+
+[SkinGUIOptions]
+    Skin=
+
+[Statistics]
+    MaxClientVersions=0
+
+[Obfuscation]
+    IsCryptLayerRequested=|ISCRYPTLAYERREQUESTED|
+    IsClientCryptLayerRequired=|ISCLIENTCRYPTLAYERREQUIRED|
+    IsClientCryptLayerSupported=1
+    CryptoPaddingLenght=254
+    CryptoKadUDPKey=281625462
+
+[PowerManagement]
+    PreventSleepWhileDownloading=0
+
+
+[UserEvents]
+[UserEvents/DownloadCompleted]
+    CoreEnabled=0
+    CoreCommand=
+    GUIEnabled=0
+    GUICommand=
+[UserEvents/NewChatSession]
+    CoreEnabled=0
+    CoreCommand=
+    GUIEnabled=0
+    GUICommand=
+[UserEvents/OutOfDiskSpace]
+    CoreEnabled=0
+    CoreCommand=
+    GUIEnabled=0
+    GUICommand=
+[UserEvents/ErrorOnCompletion]
+    CoreEnabled=0
+    CoreCommand=
+    GUIEnabled=0
+    GUICommand=
+
+
+[HTTPDownload]
+    URL_1=
diff --git a/package/lean/luci-app-amule/root/etc/config/amule b/package/lean/luci-app-amule/root/etc/config/amule
new file mode 100644
index 0000000000..4e6a110d81
--- /dev/null
+++ b/package/lean/luci-app-amule/root/etc/config/amule
@@ -0,0 +1,71 @@
+
+
+config amule 'main'
+        option enabled '0'
+        option runasuser 'amule'
+        option config_dir '/var/run/amule'
+        option mem_percentage '50'
+        option nice '10'
+        option ionice_flags '-c 3'
+        option nick 'http://www.aMule.org'
+        option max_upload '0'
+        option max_download '0'
+        option slot_allocation '2'
+        option max_connections '500'
+        option max_sources_per_file '300'
+        option port '4662'
+        option udp_enable '1'
+        option udp_port '4672'
+        option upnp_tcp_port '50000'
+        option auto_connect '1'
+        option reconnect '1'
+        option connect_to_kad '1'
+        option connect_to_ed2k '1'
+        option kad_nodes_url 'http://upd.emule-security.org/nodes.dat'
+        option ed2k_servers_url 'http://upd.emule-security.org/server.met'
+        option remove_dead_server '1'
+        option dead_server_retry '3'
+        option scoresystem '1'
+        option smart_id_check '1'
+        option use_sec_ident '1'
+        option is_crypt_layer_requested '1'
+        option ip_filter_clients '1'
+        option ip_filter_servers '1'
+        option ip_filter_auto_load '1'
+        option filter_level '127'
+        option filter_lan_ips '1'
+        option paranoid_filtering '1'
+        option ec_port '4712'
+        option ec_password '12345678'
+        option ich '1'
+        option dap_pref '1'
+        option start_next_file '1'
+        option min_free_disk_space '1'
+        option use_src_seed '1'
+        option temp_dir '/var/run/amule/Temp'
+        option incoming_dir '/var/run/amule/Incoming'
+        option proxy_enable_proxy '0'
+        option add_server_list_from_server '0'
+        option add_server_list_from_client '0'
+        option safe_server_connect '0'
+        option auto_connect_static_only '0'
+        option manual_high_prio '0'
+        option serverlist '0'
+        option a_ich_trust '0'
+        option add_new_files_paused '0'
+        option allocate_full_file '0'
+        option uap_pref '0'
+        option is_client_crypt_layer_required '0'
+        option see_share 'nobody'
+        option ip_filter_system '0'
+        option upnp_ec_enabled '0'
+        option web_enabled '0'
+        option upnp_enabled '0'
+        option proxy_type 'socks5'
+        option template 'default'
+        option use_low_rights_user '0'
+        option web_port '44711'
+        option upnp_web_server_enabled '0'
+        option web_upnp_tcp_port '50001'
+        option page_refresh_time '121'
+        option use_gzip '0'
diff --git a/package/lean/luci-app-amule/root/etc/hotplug.d/iface/20-amule b/package/lean/luci-app-amule/root/etc/hotplug.d/iface/20-amule
new file mode 100755
index 0000000000..a42adfb0f3
--- /dev/null
+++ b/package/lean/luci-app-amule/root/etc/hotplug.d/iface/20-amule
@@ -0,0 +1,14 @@
+#!/bin/sh
+# Copyright (C) 2007 OpenWrt.org
+
+/etc/init.d/amule enabled && {
+
+	[ "$ACTION" = "ifup" ] && {
+		/etc/init.d/amule start
+	}
+
+	[ "$ACTION" = "ifdown" ] && {
+		/etc/init.d/amule stop
+	}
+	
+}
diff --git a/package/lean/luci-app-amule/root/etc/init.d/amule b/package/lean/luci-app-amule/root/etc/init.d/amule
new file mode 100755
index 0000000000..f64202a219
--- /dev/null
+++ b/package/lean/luci-app-amule/root/etc/init.d/amule
@@ -0,0 +1,175 @@
+#!/bin/sh /etc/rc.common
+# Copyright (C) 2010-2015 OpenWrt.org
+
+START=99
+USE_PROCD=1
+
+
+LIST_SEP="
+"
+
+unregex() {
+   echo "$1" | sed -e 's/[]\/()$*.^|[]/\\&/g'
+}
+
+option_word_to_digit() {
+    word=$(grep -ioE "\b$2=\S+" "$1"|awk -F= '{print $2}')
+    digit=$(echo "$3" |grep -oE "$word/\S+"|awk -F'/' '{print $2}')
+    sed -i "s/\b$2=$word\b/$2=$digit/g" "$1"
+}
+
+encrypt_password() {
+	pass_notencryted=$(grep -ioE "\b$2=[^\n]+" "$1"|sed "s/.*$2=//g")
+	pass_encryted=$(echo -n $pass_notencryted|md5sum|grep -oE "[a-z0-9]{32}")
+	[[ -z $pass_notencryted ]] || sed -i "s/\b$2=$(unregex $pass_notencryted)/$2=$pass_encryted/g" "$1"
+}
+
+write_dat_file() {
+	if [[ -s "$1" ]] ; then
+		cat "$1" > "$2"
+	else
+		[[ -s "$2" ]] && cat "$2" > "$1"
+	fi
+}
+
+set_params() {
+	cat /etc/amule/amule.conf.template > "$config_file"
+	local p; local v; local s="$1"; shift
+	for p in $*; do
+		config_get v "$s" "$p"
+		IFS="$LIST_SEP"
+		for v in $v; do
+			[ -n "$v" ] && (
+				sed -i "s;|$(echo $p|tr '[a-z]' '[A-Z]'|sed -e 's|_||g')|;$(unregex $v);g" "$config_file"
+			)
+		done
+		unset IFS
+	done
+	
+	#delete unreplaced placeholders
+	sed -i "s;=|[A-Z0-9]*|;=;g" "$config_file"
+	
+	#convert some options to digit
+	option_word_to_digit "$config_file" "ProxyType" "socks5/0 socks4/1 http/2 socks4a/3"
+	option_word_to_digit "$config_file" "SeeShare" "anyone/0 friends/1 nobody/2"
+	
+	#encrypt password
+	encrypt_password "$config_file" "ECPassword"
+	encrypt_password "$config_file" "Password"
+	encrypt_password "$config_file" "PasswordLow"
+}
+
+section_enabled() {
+	config_get_bool enabled "$1" 'enabled' 0
+	[ $enabled -gt 0 ]
+}
+
+set_owner() {
+	case $(echo "$1"|grep -oE "^/[^/]+") in
+	"/var"|"/tmp"|"/mnt"|"root")
+		cur_user=$(ls -w50 -ld "$1"|awk '{print $3}')
+		cur_group=$(ls -w50 -ld "$1"|awk '{print $4}')
+		[[ $cur_user == $2 ]] || ( chown -R $2 "$1" )
+		[[ $cur_group == $3 ]] || ( chgrp -R $3 "$1" )
+	;;
+	*)
+		false
+	;;
+	esac
+}
+
+amule() {
+	local cfg="$1"
+	local USE
+
+	local runasuser
+	local incoming_dir config_dir temp_dir
+	local mem_percentage
+	local config_overwrite nice ionice_flags
+	local cmdline
+
+	section_enabled "$section" || return 1
+	
+	config_get config_dir "$cfg" 'config_dir' '/var/run/amule'
+	config_get runasuser "$cfg" 'runasuser' 'daemon'
+	config_get incoming_dir "$cfg" 'incoming_dir' "$config_dir/Incoming"
+	config_get temp_dir "$cfg" 'temp_dir' "$config_dir/Temp"
+	config_get mem_percentage "$cfg" 'mem_percentage' '50'
+	config_get config_overwrite "$cfg" config_overwrite 1
+	config_get nice "$cfg" nice "-19"
+	config_get ionice_flags "$cfg" ionice_flags ''
+	group=$(id -Gn $runasuser)
+	
+	case $(echo "$config_dir"|grep -oE "^/[^/]+") in
+	"/var"|"/tmp"|"/mnt"|"/root"|"/home")
+		true
+	;;
+	*)
+		echo "You should set config_dir to subfolders under /var, /tmp ,/mnt or /root"
+		return 1
+	;;
+	esac
+	
+	which ionice > /dev/null || ionice_flags=''
+
+	local MEM=$(sed -ne 's!^MemTotal:[[:space:]]*\([0-9]*\) kB$!\1!p' /proc/meminfo)
+	if test "$MEM" -gt 1;then
+		USE=$(expr $MEM \* $mem_percentage \* 10)
+	fi
+
+	config_file="$config_dir/amule.conf"
+	#[ -d "$config_dir" ] || {
+		mkdir -m 0755 -p "$config_dir"
+		chmod g+s "$config_dir"
+		chown $group:$runasuser "$config_dir"
+		touch "$config_file" "$config_dir/addresses.dat" "$config_dir/shareddir.dat" \
+			"$config_dir/ipfilter_static.dat"
+		[ -d "$config_dir/.aMule" ] || ln -s ./ $config_dir/.aMule
+		#[ -z "$runasuser" ] || set_owner "$config_dir" $runasuser $group
+	#}
+	
+	
+	touch "$config_file"
+	write_dat_file /etc/amule/addresses.dat "$config_dir/addresses.dat"
+	write_dat_file /etc/amule/shareddir.dat "$config_dir/shareddir.dat"
+	write_dat_file /etc/amule/ipfilter_static.dat "$config_dir/ipfilter_static.dat"
+
+	#[ "$config_overwrite" == 0 ] || {
+		set_params "$cfg" $(uci show amule|awk -F'[.=]' '{print $3}'|tr '\n' ' ')
+	#}
+	
+	HOME="$config_dir" /usr/bin/amulecmd --create-config-from="$config_file"
+	
+	cmdline="/usr/bin/amuled -c $config_dir"
+	[ "$ionice_flags" ] && cmdline="ionice $ionice_flags $cmdline"
+	procd_open_instance
+	procd_set_param command $cmdline
+	procd_set_param respawn retry=60
+	procd_set_param user "$runasuser"
+	procd_set_param nice "$nice"
+	if test -z "$USE";then
+		procd_set_param limits core="0 0"
+	else
+		procd_set_param limits core="0 0" as="$USE $USE"
+		logger -t amule "Starting with $USE virt mem"
+	fi
+
+	procd_add_jail amule log
+	procd_add_jail_mount_rw $config_file
+	procd_add_jail_mount_rw $incoming_dir
+	procd_add_jail_mount_rw $temp_dir
+	procd_close_instance
+}
+
+start_service() {
+	killall -9 amuleweb >/dev/null 2>&1
+	config_load 'amule'
+	config_foreach amule 'amule'
+}
+
+restart() {
+	stop
+	sleep 2
+	start
+}
+
diff --git a/package/lean/luci-app-amule/root/etc/uci-defaults/luci-amule b/package/lean/luci-app-amule/root/etc/uci-defaults/luci-amule
new file mode 100755
index 0000000000..e1c0c08427
--- /dev/null
+++ b/package/lean/luci-app-amule/root/etc/uci-defaults/luci-amule
@@ -0,0 +1,25 @@
+#!/bin/sh
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@amule[-1]
+	add ucitrack amule
+	set ucitrack.@amule[-1].init=amule
+	commit ucitrack
+EOF
+
+while [ ! $(grep -e "amule" ${IPKG_INSTROOT}/etc/passwd) ]
+do 
+    gid=$(awk -v min=1000 -v max=1500 'BEGIN{srand(); print int(min+rand()*(max-min+1))}')
+    echo amule:x:0:0:99999:7::: >> ${IPKG_INSTROOT}/etc/shadow
+    grep -e ":$gid:" ${IPKG_INSTROOT}/etc/passwd || ( \
+	echo "amule:x:$gid:amule" >> ${IPKG_INSTROOT}/etc/group ; \
+	echo "amule:x:$gid:$gid:amule:/var/run/amule:/bin/false" >> ${IPKG_INSTROOT}/etc/passwd )
+done
+
+mkdir -p ${IPKG_INSTROOT}/etc/amule/
+touch ${IPKG_INSTROOT}/etc/amule/addresses.dat
+touch ${IPKG_INSTROOT}/etc/amule/ipfilter_static.dat
+touch ${IPKG_INSTROOT}/etc/amule/shareddir.dat
+
+rm -f /tmp/luci-indexcache
+exit 0
diff --git a/package/lean/luci-app-arpbind/Makefile b/package/lean/luci-app-arpbind/Makefile
new file mode 100644
index 0000000000..e48ce83c58
--- /dev/null
+++ b/package/lean/luci-app-arpbind/Makefile
@@ -0,0 +1,18 @@
+#
+# Copyright (C) 2008-2014 The LuCI Team <luci@lists.subsignal.org>
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=ARP Binding
+LUCI_DEPENDS:=+ip-full
+LUCI_PKGARCH:=all
+PKG_VERSION:=1
+PKG_RELEASE:=2
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
diff --git a/package/lean/luci-app-arpbind/luasrc/controller/arpbind.lua b/package/lean/luci-app-arpbind/luasrc/controller/arpbind.lua
new file mode 100644
index 0000000000..2358fa50a2
--- /dev/null
+++ b/package/lean/luci-app-arpbind/luasrc/controller/arpbind.lua
@@ -0,0 +1,13 @@
+--[[
+ 静态ARP绑定 Luci页面 Controller
+ Copyright (C) 2015 GuoGuo <gch981213@gmail.com>
+]]--
+
+module("luci.controller.arpbind", package.seeall)
+
+function index()
+	if not nixio.fs.access("/etc/config/arpbind") then
+		return
+	end
+	entry({"admin", "network", "arpbind"}, cbi("arpbind"), _("IP/MAC Binding"), 45).dependent = true
+end
diff --git a/package/lean/luci-app-arpbind/luasrc/model/cbi/arpbind.lua b/package/lean/luci-app-arpbind/luasrc/model/cbi/arpbind.lua
new file mode 100644
index 0000000000..1c5b1758d3
--- /dev/null
+++ b/package/lean/luci-app-arpbind/luasrc/model/cbi/arpbind.lua
@@ -0,0 +1,43 @@
+
+
+local sys = require "luci.sys"
+local ifaces = sys.net:devices()
+
+m = Map("arpbind", translate("IP/MAC Binding"),
+        translatef("ARP is used to convert a network address (e.g. an IPv4 address) to a physical address such as a MAC address.Here you can add some static ARP binding rules."))
+
+s = m:section(TypedSection, "arpbind", translate("Rules"))
+s.template = "cbi/tblsection"
+s.anonymous = true
+s.addremove = true
+
+a = s:option(Value, "ipaddr", translate("IP Address"))
+a.optional = false
+a.datatype = "ipaddr"
+luci.ip.neighbors({ family = 4 }, function(entry)
+       if entry.reachable then
+               a:value(entry.dest:string())
+       end
+end)
+
+a = s:option(Value, "macaddr", translate("MAC Address"))
+a.datatype = "macaddr"
+a.optional = false
+luci.ip.neighbors({family = 4}, function(neighbor)
+	if neighbor.reachable then
+		a:value(neighbor.mac, "%s (%s)" %{neighbor.mac, neighbor.dest:string()})
+	end
+end)
+
+a = s:option(ListValue, "ifname", translate("Interface"))
+for _, iface in ipairs(ifaces) do
+	if iface ~= "lo" then 
+		a:value(iface) 
+	end
+end
+a.default = "br-lan"
+a.rmempty = false
+
+return m
+
+
diff --git a/package/lean/luci-app-arpbind/po/zh-cn/arpbind.po b/package/lean/luci-app-arpbind/po/zh-cn/arpbind.po
new file mode 100644
index 0000000000..278f069ee0
--- /dev/null
+++ b/package/lean/luci-app-arpbind/po/zh-cn/arpbind.po
@@ -0,0 +1,24 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: Luci ARP Bind\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2015-06-23 20:16+0800\n"
+"PO-Revision-Date: 2015-06-23 20:17+0800\n"
+"Last-Translator: 981213 <gch981213@gmail.com>\n"
+"Language-Team: PandoraBox Team\n"
+"Language: zh_CN\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+"X-Generator: Poedit 1.8.1\n"
+"X-Poedit-SourceCharset: UTF-8\n"
+
+msgid "IP/MAC Binding"
+msgstr "IP/MAC绑定"
+
+msgid "MAC Address"
+msgstr "MAC 地址"
+
+msgid "ARP is used to convert a network address (e.g. an IPv4 address) to a physical address such as a MAC address.Here you can add some static ARP binding rules."
+msgstr "ARP协议是用于实现网络地址到物理地址转换的协议。在这里，你可以设置静态ARP绑定规则。"
diff --git a/package/lean/luci-app-arpbind/root/etc/hotplug.d/iface/50-arpbind b/package/lean/luci-app-arpbind/root/etc/hotplug.d/iface/50-arpbind
new file mode 100755
index 0000000000..e3ee499ca2
--- /dev/null
+++ b/package/lean/luci-app-arpbind/root/etc/hotplug.d/iface/50-arpbind
@@ -0,0 +1,2 @@
+#!/bin/sh
+[ "$ACTION" = "ifup" ] && /etc/init.d/arpbind start
diff --git a/package/lean/luci-app-arpbind/root/etc/init.d/arpbind b/package/lean/luci-app-arpbind/root/etc/init.d/arpbind
new file mode 100755
index 0000000000..7e1048dab6
--- /dev/null
+++ b/package/lean/luci-app-arpbind/root/etc/init.d/arpbind
@@ -0,0 +1,55 @@
+#!/bin/sh /etc/rc.common
+# OpenWrt 静态ARP绑定 启动脚本
+# Copyright (C) 2015 GuoGuo <gch981213@gmail.com>
+
+. /lib/functions.sh
+. /lib/functions/network.sh
+
+#清除单接口ARP
+#参数：$1:接口名称
+if_clean_arp()
+{
+	[ -z "$1" ] && return
+	ip link set arp off dev $1
+	ip link set arp on dev $1
+}
+
+#清除系统所有ARP
+#参数：无
+clean_arp()
+{
+	for i in $(ls /sys/class/net)
+	do
+		if_clean_arp $i
+	done
+}
+
+#添加静态ARP绑定
+#参数：$1:IP地址 $2:MAC地址 $3:接口名称
+add_arp()
+{
+	[ -z "$1" ] || [ -z "$2" ] || [ -z "$3" ] && return
+	echo "Adding ARP:IP Addr:$1  MAC Addr:$2  Interface:$3"
+	ip neigh add $1 lladdr $2 nud permanent dev $3
+}
+
+arpconf_foreach()
+{
+	config_get ipaddr "$1" 'ipaddr'
+	config_get macaddr "$1" 'macaddr'
+	config_get ifname "$1" 'ifname'
+	[ -z "$ifname" ] && return
+	add_arp $ipaddr $macaddr $ifname
+}
+
+start()
+{
+	config_load 'arpbind'
+	config_foreach arpconf_foreach 'arpbind'
+}
+
+stop()
+{
+	clean_arp
+}
+
diff --git a/package/lean/luci-app-arpbind/root/etc/uci-defaults/luci-arpbind b/package/lean/luci-app-arpbind/root/etc/uci-defaults/luci-arpbind
new file mode 100755
index 0000000000..b0f06852a0
--- /dev/null
+++ b/package/lean/luci-app-arpbind/root/etc/uci-defaults/luci-arpbind
@@ -0,0 +1,12 @@
+#!/bin/sh
+touch /etc/config/arpbind
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@arpbind[-1]
+	add ucitrack arpbind
+	set ucitrack.@arpbind[-1].init=arpbind
+	commit ucitrack
+EOF
+
+rm -f /tmp/luci-indexcache
+exit 0
diff --git a/package/lean/luci-app-autoreboot/Makefile b/package/lean/luci-app-autoreboot/Makefile
new file mode 100644
index 0000000000..9e27329863
--- /dev/null
+++ b/package/lean/luci-app-autoreboot/Makefile
@@ -0,0 +1,17 @@
+# Copyright (C) 2016 Openwrt.org
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI support for Scheduled Reboot
+LUCI_DEPENDS:=+luci
+LUCI_PKGARCH:=all
+PKG_VERSION:=1.0
+PKG_RELEASE:=8
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
diff --git a/package/lean/luci-app-autoreboot/luasrc/controller/autoreboot.lua b/package/lean/luci-app-autoreboot/luasrc/controller/autoreboot.lua
new file mode 100644
index 0000000000..e0429f34f6
--- /dev/null
+++ b/package/lean/luci-app-autoreboot/luasrc/controller/autoreboot.lua
@@ -0,0 +1,4 @@
+module("luci.controller.autoreboot",package.seeall)
+function index()
+entry({"admin","system","autoreboot"},cbi("autoreboot"),_("Scheduled Reboot"),88)
+end
diff --git a/package/lean/luci-app-autoreboot/luasrc/model/cbi/autoreboot.lua b/package/lean/luci-app-autoreboot/luasrc/model/cbi/autoreboot.lua
new file mode 100644
index 0000000000..d66b773ad6
--- /dev/null
+++ b/package/lean/luci-app-autoreboot/luasrc/model/cbi/autoreboot.lua
@@ -0,0 +1,38 @@
+require("luci.sys")
+
+m=Map("autoreboot",translate("Scheduled Reboot"),translate("Scheduled reboot Setting"))
+
+s=m:section(TypedSection,"login","")
+s.addremove=false
+s.anonymous=true
+
+enable=s:option(Flag,"enable",translate("Enable"))
+enable.rmempty = false
+enable.default=0
+
+week=s:option(ListValue,"week",translate("Week Day"))
+week:value(7,translate("Everyday"))
+week:value(1,translate("Monday"))
+week:value(2,translate("Tuesday"))
+week:value(3,translate("Wednesday"))
+week:value(4,translate("Thursday"))
+week:value(5,translate("Friday"))
+week:value(6,translate("Saturday"))
+week:value(0,translate("Sunday"))
+week.default=0
+
+hour=s:option(Value,"hour",translate("Hour"))
+hour.datatype = "range(0,23)"
+hour.rmempty = false
+
+pass=s:option(Value,"minute",translate("Minute"))
+pass.datatype = "range(0,59)"
+pass.rmempty = false
+
+
+local e=luci.http.formvalue("cbi.apply")
+if e then
+  io.popen("/etc/init.d/autoreboot restart")
+end
+
+return m
diff --git a/package/lean/luci-app-autoreboot/po/zh-cn/autoreboot.po b/package/lean/luci-app-autoreboot/po/zh-cn/autoreboot.po
new file mode 100644
index 0000000000..554ef2cc31
--- /dev/null
+++ b/package/lean/luci-app-autoreboot/po/zh-cn/autoreboot.po
@@ -0,0 +1,25 @@
+msgid "Scheduled Reboot"
+msgstr "定时重启"
+
+msgid "Scheduled reboot Setting"
+msgstr "定时重启设置"
+
+msgid "Week Day"
+msgstr "星期"
+
+msgid "Everyday"
+msgstr "每天"
+
+msgid "Day"
+msgstr "天"
+
+msgid "Hour"
+msgstr "小时"
+
+msgid "Minute"
+msgstr "分钟"
+
+
+
+
+
diff --git a/package/lean/luci-app-autoreboot/root/etc/config/autoreboot b/package/lean/luci-app-autoreboot/root/etc/config/autoreboot
new file mode 100644
index 0000000000..3b57e14845
--- /dev/null
+++ b/package/lean/luci-app-autoreboot/root/etc/config/autoreboot
@@ -0,0 +1,7 @@
+
+config login
+	option minute '0'
+	option hour '5'
+	option week '3'
+	option enable '0'
+
diff --git a/package/lean/luci-app-autoreboot/root/etc/init.d/autoreboot b/package/lean/luci-app-autoreboot/root/etc/init.d/autoreboot
new file mode 100755
index 0000000000..934477d415
--- /dev/null
+++ b/package/lean/luci-app-autoreboot/root/etc/init.d/autoreboot
@@ -0,0 +1,39 @@
+#!/bin/sh /etc/rc.common
+START=50
+
+run_reboot()
+{
+	local enable
+	config_get_bool enable $1 enable
+
+	if [ $enable = 1 ]; then
+		local minute
+		local hour
+		config_get week $1 week
+		config_get minute $1 minute
+		config_get hour $1 hour
+    if [ $minute = 0 ] ; then
+        minute="00"
+		fi
+    if [ $week = 7 ] ; then
+        week="*"
+		fi
+		sed -i '/reboot/d' /etc/crontabs/root >/dev/null 2>&1
+		echo "$minute $hour * * $week sleep 5 && touch /etc/banner && reboot" >> /etc/crontabs/root
+		echo "Auto REBOOT has started."
+	else
+		sed -i '/reboot/d' /etc/crontabs/root >/dev/null 2>&1
+		echo "Auto REBOOT has started."
+	fi
+}
+
+start()
+{
+	config_load autoreboot
+	config_foreach run_reboot login
+}
+
+stop()
+{
+	echo "Auto REBOOT has stoped."
+}
diff --git a/package/lean/luci-app-dnsforwarder/Makefile b/package/lean/luci-app-dnsforwarder/Makefile
new file mode 100644
index 0000000000..bb8726ff55
--- /dev/null
+++ b/package/lean/luci-app-dnsforwarder/Makefile
@@ -0,0 +1,19 @@
+#
+# Copyright (C) 2008-2014 The LuCI Team <luci@lists.subsignal.org>
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI for Dnsforwarder
+LUCI_DEPENDS:=+dnsforwarder
+LUCI_PKGARCH:=all
+PKG_VERSION:=3.0.0
+PKG_RELEASE:=1
+PKG_MAINTAINER:=Dennis <openwrt@tossp.com>
+PKG_LICENSE:=GPL-3.0
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
\ No newline at end of file
diff --git a/package/lean/luci-app-dnsforwarder/luasrc/controller/dnsforwarder.lua b/package/lean/luci-app-dnsforwarder/luasrc/controller/dnsforwarder.lua
new file mode 100644
index 0000000000..a04c8b1f31
--- /dev/null
+++ b/package/lean/luci-app-dnsforwarder/luasrc/controller/dnsforwarder.lua
@@ -0,0 +1,10 @@
+module("luci.controller.dnsforwarder", package.seeall)
+function index()
+        if not nixio.fs.access("/etc/config/dnsforwarder") then
+                return
+        end
+        entry({"admin", "services", "dnsforwarder"},alias("admin", "services", "dnsforwarder","general"),_("Dnsforwarder")).dependent = true
+	entry({"admin", "services", "dnsforwarder","general"}, cbi("dnsforwarder/general"),_("General"),10).leaf = true
+	entry({"admin", "services", "dnsforwarder","log"}, cbi("dnsforwarder/log"),_("LOG"),30).leaf = true
+
+end
\ No newline at end of file
diff --git a/package/lean/luci-app-dnsforwarder/luasrc/model/cbi/dnsforwarder/general.lua b/package/lean/luci-app-dnsforwarder/luasrc/model/cbi/dnsforwarder/general.lua
new file mode 100644
index 0000000000..9875051a4d
--- /dev/null
+++ b/package/lean/luci-app-dnsforwarder/luasrc/model/cbi/dnsforwarder/general.lua
@@ -0,0 +1,185 @@
+--Alex<1886090@gmail.com>
+--Dennis<code@tossp.com>
+local fs = require "nixio.fs"
+local CONFIG_FILE = "/tmp/dnsforwarder.conf";
+
+function sync_value_to_file(value, file)
+	value = value:gsub("\r\n?", "\n")
+	local old_value = nixio.fs.readfile(file)
+	if value ~= old_value then
+		nixio.fs.writefile(file, value)
+	end
+
+end
+local state_msg = "" 
+
+local dnsforwarder_on = (luci.sys.call("pidof dnsforwarder > /dev/null") == 0)
+local resolv_file = luci.sys.exec("uci get dhcp.@dnsmasq[0].resolvfile")
+local listen_port = luci.sys.exec("uci get dhcp.@dnsmasq[0].server")
+
+if dnsforwarder_on then	
+	state_msg = "<b><font color=\"green\">" .. translate("Running") .. "</font></b>"
+else
+	state_msg = "<b><font color=\"red\">" .. translate("Not running") .. "</font></b>"
+end
+
+
+if dnsforwarder_on and string.sub(listen_port,1,14) == "127.0.0.1#5053" then 
+	state_msg=state_msg .. "，DNSmasq已经将流量定向至本软件"
+elseif dnsforwarder_on then
+	state_msg=state_msg .. "<b><font color=\"red\"></font></b>"
+end
+
+if resolv_file=="" then
+
+else if dnsforwarder_on then
+	state_msg=state_msg .. "<b><font color=\"red\"></font></b>"
+	end
+end
+m=Map("dnsforwarder",translate("dnsforwarder"),translate("Dnsforwarder是企业级DNS服务器，可以通过TCP协议进行DNS解析,可以方便的使用iptables进行透明代理，配合ipset、GFWList使用效果更佳。默认上游服务器为114DNS，SSR和Redsocks的GFWList模式要依赖本软件包提供的功能").. "<br><br>状态 - " .. state_msg)
+s=m:section(TypedSection,"arguments", translate("通用配置"))
+s.addremove=false
+s.anonymous=true
+	view_enable = s:option(Flag,"enabled",translate("Enable"))
+	view_dnsmasq = s:option(Flag,"dnsmasq",translate("设置成DNSmasq的上游服务器"),translate("让DNSMasq从本软件获得解析结果，支持GFWList模式"))
+	view_addr = s:option(Value,"addr",translate("转发地址"),translate("请填写dnsforwarder的监听地址,默认127.0.0.1:5053,如果填写<b><font color=\"red\">208.67.222.222:5353</font></b>那么可不通过该软件获得无污染结果"))
+	view_addr.default = "127.0.0.1:5053"
+
+-- ---------------------------------------------------
+s1=m:section(TypedSection,"config",translate("标准配置"))
+s1.addremove=false
+s1.anonymous=true
+	log_enable = s1:option(Flag,"log",translate("打开文件日志"))
+		log_enable.rmempty=false
+		log_enable.default="false"
+		log_enable.disabled="false"
+		log_enable.enabled="true"
+	log_size = s1:option(Value,"log_size",translate("单个日志文件大小的临界值（字节）"),translate("当日志文件大小超过这个临界值后，当前的日志文件将会被重命名，然后建立一个新的日志文件，继续记录日志"))
+		log_size.datatype="uinteger"
+		log_size.default="102400"
+		log_size:depends ({log="true"})
+	log_path = s1:option(Value,"log_path",translate("设定日志文件所在的文件夹"),translate("日志文件初始的文件名为 `dnsforwarder.log'，当超过临界值之后，将会被重命名为 `dnsforwarder.log.1'、`dnsforwarder.log.2' 等等，然后重新建立一个 dnsforwarder.log' 文件"))
+		log_path.datatype="directory"
+		log_path.default="/var/log/"
+		log_path.readonly=true
+		log_path:depends ({log="true"})
+	gfw_enable = s1:option(Flag,"gfw",translate("使用GFW列表"))
+		gfw_enable.rmempty=false
+		gfw_enable.default="true"
+		gfw_enable.disabled="false"
+		gfw_enable.enabled="true"
+	udp_local = s1:option(DynamicList,"udp_local",translate("本地监听"),translate("设置在本地开启的接口的IP地址和端口，可以是本地回环地址 (127.0.0.1) ，本地局域网，以及互联网<br/>如果是 IPv6 地址，请在IP两端加上方括号（不包含端口部分），例如 [::1]:53 (本地回环)、[fe80::699c:f79a:9bb6:1]:5353<br/>如果不指定端口，则默认为 53"))
+	tcp_group = s1:option(DynamicList,"tcp_group",translate("解析策略(TCP)"),translate([[格式：&lt;IP1[:PORT],IP2[:PORT],...&gt; &lt;DOMAIN1,DOMAIN2,...&gt; &lt;on|PROXY1[:PORT],PROXY2[:PORT],...&gt;<br/>
+			设置一个 TCP 上游服务器组，并指定通过这些上游服务器查询的域名<br/>
+			第一部分参数“&lt;IP1[:PORT],IP2[:PORT],...&gt”，用于指定 TCP 上游服务器，不写端口则默认使用 53 端口<br/>
+			第二部分参数“&lt;DOMAIN1,DOMAIN2,...&gt”，用于指定通过这些 TCP 上游服务器查询的域名，可以包含通配符<br/>
+			第三部分参数“&lt;no|PROXY1[:PORT],PROXY2[:PORT],...&gt”，用于指定查询时使用的 Socks5 代理，不写端口则默认使用 1080 端口。`no' 代表不使用代理]]))
+		tcp_group.placeholder = "8.8.8.8 * on"
+		tcp_group.default=tcp_group.placeholder
+	udp_group = s1:option(DynamicList,"udp_group",translate("解析策略(UDP)"),translate([[格式：&lt;IP1[:PORT],IP2[:PORT],...&gt; &lt;DOMAIN1,DOMAIN2,...&gt; &lt;on|off&gt;<br/>
+		设置一个 UDP 上游服务器组，并指定通过这些上游服务器查询的域名<br/>
+		第一部分参数“&lt;IP1[:PORT],IP2[:PORT],...&gt”，用于指定 UDP 上游服务器，不写端口则默认使用 53 端口<br/>
+		第二部分参数“&lt;DOMAIN1,DOMAIN2,...&gt”，用于指定通过这些 UDP 上游服务器查询的域名，可以包含通配符<br/>
+		第三部分参数“&lt;on|off&gt”，用于指定是否开启并发查询，`on' 为开启，`off' 为不开启<br/>
+		并发查询指的是，向所有指定的 UDP 服务器发送查询请求，取最先接受到的未屏蔽的回复作为查询结果，并丢弃其余的回复]]))
+		udp_group.placeholder = "9.9.9.9,119.29.29.29,223.5.5.5,114.114.114.114 * on"
+		udp_group.default=udp_group.placeholder
+	group_file = s1:option(DynamicList,"group_file",translate("解析策略(文件)"),translate([[
+		从文件加载服务器组，
+		服务器组文件的写法<a href="https://github.com/holmium/dnsforwarder/wiki/GroupFile-%E7%9A%84%E5%86%99%E6%B3%95-%7C-How-to-write-GroupFiles" target="_blank">点击这里查看</a>。]]))
+		group_file.datatype="file"
+	s1:option(DummyValue,"nothing","  ",translate([[
+		解析策略优先级：<b>解析策略(TCP)&gt解析策略(UDP)&gt解析策略(文件)</b><br/>
+		1.对于没有指定服务器的域名，会随机选择一个服务器组进行查询。<br/>
+		2.如果某域名匹配多个服务器组，则选择的顺序如下：<br/>
+		2.1 优先选择不含通配符的匹配项，如果仍然有多条匹配，则选择匹配度最高的那个，
+		如果匹配度相同的情况下仍然有多条匹配，则选择最后一个。
+		（例如 `ipv6.microsoft.com' 比 `microsoft.com' 对于域名 `teredo.ipv6.microsoft.com' 的匹配度更高）<br/>
+		2.2 然后选择包含通配符的匹配项，如果有多条匹配，则选择第一个.
+	]]))
+	block_ip = s1:option(DynamicList,"block_ip",translate("DNS黑名单"),translate("阻挡含有以上 IP 地址的 DNS 数据包,IPv6 地址不用加方括号"))
+		block_ip.datatype="ipaddr"		
+		block_ip.delimiter = ","
+	ip_substituting = s1:option(DynamicList,"ip_substituting",translate("替换 DNS 数据包"),translate("替换 DNS 数据包中的 IP 地址（只支持 IPv4 地址）,例如：<br/><code>127.0.0.1 1.2.0.127</code>的效果是把 DNS 数据包中所有的 127.0.0.1 地址替换为 1.2.0.127,仅替换通过服务器（TCP 和 UDP）查询而来的 DNS 数据包，对于缓存中和 Hosts 中的结果无效"))
+		ip_substituting.placeholder = "127.0.0.1 1.2.0.127"
+	block_negative_resp = s1:option(Flag,"block_negative_resp",translate("过滤失败请求"),translate("是否过滤来自上游服务器的查询未成功的响应。查询未成功指：格式错误、服务器错误、域名不存在和服务器拒绝请求等，参见 RFC 6895，`2.3.  RCODE Assignment'"))
+		block_negative_resp.rmempty=false
+		block_negative_resp.default="false"
+		block_negative_resp.disabled="false"
+		block_negative_resp.enabled="true"
+	append_host = s1:option(DynamicList,"append_host",translate("附加hosts"),translate([[
+		写法与HOSTS文件中的一样，同样支持通配符,IPv6 地址不用加方括号<br>
+		也可以定义 CName 的 Hosts 项，例如：<code>www.google.cn *.google.com</code>,这样所有匹配 *.google.com 的域名都将指向 www.google.cn 的 IP 地址<br>
+		如果使某些域名跳过在 hosts 中的查询，可以<code>@@ *.012345.com</code>这样所有匹配 *.012345.com 的域名都不会在 hosts 中查询<br>
+		各种 hosts 的优先级从高到低:1.带 `@@' 的禁止项 2.一般 hosts 项 3.CName hosts 项<br>
+	]]))
+	block_ipv6 = s1:option(Flag,"block_ipv6",translate("拒绝IPv6 地址"),translate("如果一个域名在 Hosts 被指定了一个 IPv4 地址（包括文件 Hosts 和 `AppendHosts' 指定的 Hosts），那么拒绝对这个域名的 IPv6 地址查询"))
+		block_ipv6.rmempty=false
+		block_ipv6.default="false"
+		block_ipv6.disabled="false"
+		block_ipv6.enabled="true"
+
+	cache = s1:option(Flag,"cache",translate("使用缓存"),translate("是否使用缓存"))
+		cache.rmempty=false
+		cache.default="false"
+		cache.disabled="false"
+		cache.enabled="true"
+	cache_size = s1:option(Value,"cache_size",translate("缓存大小 (字节)"),translate("缓存大小不能小于 102400 (100KB)"))
+		cache_size.datatype="min(102400)"
+		cache_size.default="1048576"
+		cache_size:depends ({cache="true"})
+	cache_file = s1:option(Value,"cache_file",translate("缓存文件"))
+		cache_file.default="/tmp/dnsforwarder.cache"
+		cache_file.readonly=true
+		cache_file:depends ({cache="true"})
+	cache_ignore = s1:option(Flag,"cache_ignore",translate("忽略TTL"),translate("为 `true' 时将忽略 TTL，此时所有的缓存条目将不会被移除,为 `false' 时不忽略 TTL，缓存条目将会按照 TTL 的时间来移除"))
+		cache_ignore.rmempty=false
+		cache_ignore.default="false"
+		cache_ignore.disabled="false"
+		cache_ignore.enabled="true"
+		cache_ignore:depends ({cache="true"})
+	cache_control = s1:option(DynamicList,"cache_control",translate("控制域名的缓存行为"),translate([[
+		单条格式：&lt;DOMAIN&gt; [$ [$] ]&lt;TYPE&gt; [ARGUMENT]<br/>
+		&lt;DOMAIN&gt; 是域名；[$ [$] ] 是传染设定；&lt;TYPE&gt; 是类型；[ARGUMENT] 是参数<br/>
+		&lt;DOMAIN&gt; 支持通配符，支持尾部匹配<br/>
+		&lt;TYPE&gt; 有以下可选项（均为小写）：<br>
+		&nbsp;&nbsp;&nbsp;&nbsp;orig    : 使用原先的 TTL，即不改变指定域名记录的 TTL，此类型无需 [ARGUMENT] 参数<br>
+		&nbsp;&nbsp;&nbsp;&nbsp;nocache : 不缓存指定域名记录，此类型无需 [ARGUMENT] 参数<br>
+		&nbsp;&nbsp;&nbsp;fixed   : 将指定域名记录的 TTL 修改为一个预先指定的常数值，这个值通过 [ARGUMENT] 参数指定<br>
+		&nbsp;&nbsp;&nbsp;&nbsp;vari    : 将指定域名记录的 TTL 修改为一个预先规定的变量，这个变量通过 [ARGUMENT] 参数指定，此时 [ARGUMENT] 参数的格式为 `ax+b'，其中 a、b 为非负整数（需用户手工指定），x 为记录原先的 TTL 值（不需要用户指定）。此选项必须为 `ax+b' 的形式，不能是 `ax-b' 或者其它的变体形<br>
+		<br/>传染机制：<br/>
+		&nbsp;&nbsp;&nbsp;&nbsp;主动传染 （此为默认情况）:主动传染 : 所有的域名记录不论是否存在单独指定的控制条目，均使用上级域名控制条目<br>
+		&nbsp;&nbsp;&nbsp;&nbsp;被动传染（&lt;TYPE&gt; 前加一个 `$'）: 如果存在单独指定的控制条目，那么使用单独指定的控制条目，否则使用上级域名的控制条目<br>
+		&nbsp;&nbsp;&nbsp;&nbsp;不传染（<TYPE> 前加两个 `$'）: 如果存在单独指定的控制条目，那么使用单独指定的控制条目，如果没有则不修改记录的 TTL 值<br>
+		只有被查询的域名控制条目才具有传染性质<br/>
+		<br/>常见例子：<br/>
+		<code>* fixed 300</code>强制使所有缓存的条目的 TTL 为 300<br/>
+		<code>* vari 2x+0</code>将所有缓存条目的 TTL 加倍。即原来为300，现在为600<br/>
+	]]))
+		cache_control:depends ({cache="true"})
+
+	domain_statistic = s1:option(Flag,"domain_statistic",translate("启用域名统计"),translate("域名信息统计会依照模板文件记录域名的查询情况<b>目前只能生成到<code>/root/.dnsforwarder/statistic.html</code>会影响闪存寿命不建议开启</b>"))
+		domain_statistic.rmempty=false
+		domain_statistic.default="false"
+		domain_statistic.disabled="false"
+		domain_statistic.enabled="true"
+
+	view_cfg = s1:option(TextValue, "1", nil)
+	view_cfg.rmempty = false
+	view_cfg.rows = 24
+	view_cfg.readonly=true
+
+	function view_cfg.cfgvalue()
+		return nixio.fs.readfile(CONFIG_FILE) or ""
+	end
+	function view_cfg.write(self, section, value)
+	end
+
+-- ---------------------------------------------------
+local apply = luci.http.formvalue("cbi.apply")
+if apply then
+	os.execute("/etc/init.d/dnsforwarder makeconfig >/dev/null 2>&1 &")
+	os.execute("/etc/init.d/dnsforwarder restart >/dev/null 2>&1 &")
+end
+
+return m
diff --git a/package/lean/luci-app-dnsforwarder/luasrc/model/cbi/dnsforwarder/log.lua b/package/lean/luci-app-dnsforwarder/luasrc/model/cbi/dnsforwarder/log.lua
new file mode 100644
index 0000000000..9a4830e6b2
--- /dev/null
+++ b/package/lean/luci-app-dnsforwarder/luasrc/model/cbi/dnsforwarder/log.lua
@@ -0,0 +1,31 @@
+local fs = require "nixio.fs"
+local log = "/var/log/dnsforwarder.log"
+
+function sync_value_to_file(value, file)
+	value = value:gsub("\r\n?", "\n")
+	local old_value = nixio.fs.readfile(file)
+	if value ~= old_value then
+		nixio.fs.writefile(file, value)
+	end
+end
+
+m = Map("dnsforwarder", translate("运行日志"),translate("如果想观察日志，需要在配置文件中写明LogOn true 和 LogFileFolder /var/log"))
+s=m:section(TypedSection,"arguments","")
+s.addremove=false
+s.anonymous=true
+
+
+
+
+gfwlist = s:option(TextValue, "gfwlist",nil, nil)
+gfwlist.description = translate("日志文件默认位置:" .. log)
+gfwlist.rows = 26
+gfwlist.wrap = "off"
+gfwlist.cfgvalue = function(self, section)
+	return fs.readfile(log) or ""
+end
+
+
+
+
+return m
\ No newline at end of file
diff --git a/package/lean/luci-app-dnsforwarder/po/zh-cn/dnsforwarder.zh-cn.po b/package/lean/luci-app-dnsforwarder/po/zh-cn/dnsforwarder.zh-cn.po
new file mode 100644
index 0000000000..dbd444848c
--- /dev/null
+++ b/package/lean/luci-app-dnsforwarder/po/zh-cn/dnsforwarder.zh-cn.po
@@ -0,0 +1,8 @@
+msgid "Enable"
+msgstr "启用"
+
+msgid "Running"
+msgstr "运行中"
+
+msgid "Not running"
+msgstr "未运行"
diff --git a/package/lean/luci-app-dnspod/Makefile b/package/lean/luci-app-dnspod/Makefile
new file mode 100644
index 0000000000..6d55ff6c6a
--- /dev/null
+++ b/package/lean/luci-app-dnspod/Makefile
@@ -0,0 +1,51 @@
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=luci-app-dnspod
+PKG_VERSION=1.0
+PKG_RELEASE:=1
+
+PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)
+
+include $(INCLUDE_DIR)/package.mk
+include $(INCLUDE_DIR)/host-build.mk
+
+define Package/luci-app-dnspod
+   SECTION:=luci
+   CATEGORY:=LuCI
+   SUBMENU:=3. Applications
+   TITLE:=Auto DNS for dnspod
+   PKGARCH:=all
+   DEPENDS:= +curl +libcurl
+endef
+
+define Package/luci-app-dnspod/description
+   auto get pub ip,dnspod ddns,must include curl with ssl
+endef
+
+define Build/Prepare
+endef
+
+define Build/Configure
+endef
+
+define Build/Compile
+endef
+
+define Package/luci-app-dnspod/install
+	$(INSTALL_DIR) $(1)/etc/config
+	$(INSTALL_DIR) $(1)/etc/init.d
+	$(INSTALL_DIR) $(1)/usr/lib/lua/luci/model/cbi
+	$(INSTALL_DIR) $(1)/usr/lib/lua/luci/controller
+
+	$(INSTALL_CONF) ./files/root/etc/config/dnspod $(1)/etc/config/dnspod
+	$(INSTALL_BIN) ./files/root/etc/init.d/dnspod $(1)/etc/init.d/dnspod
+	$(INSTALL_DATA) ./files/root/usr/lib/lua/luci/model/cbi/dnspod.lua $(1)/usr/lib/lua/luci/model/cbi/dnspod.lua
+	$(INSTALL_DATA) ./files/root/usr/lib/lua/luci/controller/dnspod.lua $(1)/usr/lib/lua/luci/controller/dnspod.lua
+	$(INSTALL_DIR) $(1)/usr/sbin
+	$(INSTALL_BIN) ./files/dnspod.sh $(1)/usr/sbin
+endef
+
+$(eval $(call BuildPackage,luci-app-dnspod))
+
+
+
diff --git a/package/lean/luci-app-dnspod/files/dnspod.sh b/package/lean/luci-app-dnspod/files/dnspod.sh
new file mode 100755
index 0000000000..de0772999d
--- /dev/null
+++ b/package/lean/luci-app-dnspod/files/dnspod.sh
@@ -0,0 +1,169 @@
+#!/bin/bash
+#written by Michael Qu
+#greennyreborn@gmail.com
+
+#dnspod api token
+token=`uci get dnspod.base_arg.login_token`
+
+#域名
+domain=`uci get dnspod.base_arg.main_domain 2>/dev/null`
+
+
+#需要更新的子域名，只允许一个
+#由于*linux会被脚本解析为当前目录下的所有文件，所以请填写\*
+#  sub_domain='\*'
+sub_domain=`uci get dnspod.base_arg.sub_domain 2>/dev/null`
+if [ $sub_domain = "\*" ]; then
+    sub_domain="*"
+fi
+
+#check for changed ip every 300 seconds
+wait=300
+wait_second=`uci get dnspod.base_arg.wait_second 2>/dev/null`
+if [[ $wait_second =~ ^[1-9][0-9]*$ ]]; then
+    wait=$wait_second
+fi
+
+#外网ip获取命令
+command=`uci get dnspod.base_arg.command_to_get_ip 2>/dev/null`
+if [ -z "$command" ]; then
+    command='curl -s whatismyip.akamai.com'
+fi
+
+#检查curl是否安装
+curl_status=`which curl 2>/dev/null`
+[ -n "$curl_status" ] || { echo "curl is not installed";exit 3; }
+
+os=$(uname -a | egrep -io 'openwrt' | tr [A-Z] [a-z])
+
+API_url="https://dnsapi.cn"
+LOG_FILE="/tmp/dnspod.log"
+MAX_LOG_SIZE=`expr 1 * 1024 * 1024` # 默认最大限制1M
+PROGRAM=$(basename $0)
+
+format='json'
+lang='en'
+record_type='A'
+common_options="login_token=$token&format=${format}&lang=${lang}"
+
+is_svc=0
+last_modified_ip=
+
+getFileSize() {
+    local file=$1
+    wc -c $file | awk '{print $1}'
+}
+
+clearLog() {
+    local file_size=$(getFileSize $LOG_FILE)
+    if [ $file_size -gt $MAX_LOG_SIZE ]; then
+        echo "" > $LOG_FILE
+        printMsg "Log file [$LOG_FILE], size: [$file_size bytes]."
+        printMsg "Exceeds max log size [$MAX_LOG_SIZE]. Clear the log."
+    fi
+}
+
+printMsg() {
+    local time=$(date "+%Y-%m-%d %H:%M:%S")
+    local msg="$1"
+    if [ $is_svc -eq 1 ]; then
+        echo "$time: $msg" >> $LOG_FILE
+        # logger -t ${PROGRAM} "${msg}"
+    else
+        echo "$time: $msg"
+    fi
+}
+
+getIp() {
+#    curl -s http://checkip.dyndns.com | sed -n 's/.*: \([0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\).*/\1/p'
+    eval $command
+}
+
+execAPI() {
+    local action="$1"
+    local extra_options="$2"
+
+    eval "curl -k -X POST \"${API_url}/${action}\" -d \"${common_options}&${extra_options}\""
+}
+
+getRecordList() {
+    local extra_options="domain=$domain"
+    echo $(execAPI "Record.List" "$extra_options")
+    exit
+}
+
+updateRecord() {
+    local ip=$1
+    local record_list=`getRecordList`
+    local old_ip=`jsonfilter -s "$record_list" -e "@.records[@.name='$sub_domain'].value"`
+    local id=`jsonfilter -s "$record_list" -e "@.records[@.name='$sub_domain'].id"`
+    printMsg "Change record: $sub_domain.$domain from $old_ip to $ip"
+
+    local extra_options="domain=$domain&record_id=$id&value=$ip&record_type=A&record_line_id=0&sub_domain=$sub_domain"
+    local response=$(execAPI "Record.Modify" "$extra_options")
+
+    local code=`jsonfilter -s "$response" -e "@.status.code"`
+    if [ "$code" == "1" ]; then
+        last_modified_ip=$ip
+    fi
+    local message=`jsonfilter -s "$response" -e "@.status.message"`
+    printMsg "response: $message"
+
+}
+
+checkip() {
+    local wan_ip=$1
+    printMsg "old ip: [$last_modified_ip], new ip: [$wan_ip]"
+    if [ "$wan_ip" != "$last_modified_ip" ]; then
+        return 8
+    else
+        return 3
+    fi
+}
+
+execSvc() {
+    local ip
+    #check that whether the network is ok
+    while [ 1 ];do
+        ip=$(getIp)
+        if [ -n "$ip" ]; then
+            printMsg "WAN IP: ${ip}"
+            break;
+        else
+            printMsg "Can't get wan ip"
+            sleep 30
+        fi
+    done
+
+    while [ 1 ];do
+        clearLog
+        ip=$(getIp)
+        checkip $ip
+        if [ $? -eq 8 ]; then
+            updateRecord $ip
+            #updateTunnelBroker
+        fi
+        sleep $wait
+    done
+}
+
+execUpdate() {
+    local ip=`getIp`
+    printMsg "WAN IP: ${ip}"
+    updateRecord $ip
+}
+
+case $1 in
+    --svc)
+        is_svc=1;
+        clearLog;
+        printMsg "Start in Service mode, check in every $wait seconds";
+        printMsg "domain: ${domain}, sub_domain: ${sub_domain}";
+        printMsg "Use command: [$command] to get wan ip";
+        execSvc;;
+    *)
+        is_svc=0;
+        printMsg "Start update record, domain: ${domain}, sub_domain: ${sub_domain}";
+        printMsg "Use command: [$command] to get wan ip";
+        execUpdate;;
+esac
diff --git a/package/lean/luci-app-dnspod/files/root/etc/config/dnspod b/package/lean/luci-app-dnspod/files/root/etc/config/dnspod
new file mode 100644
index 0000000000..00876ecfc5
--- /dev/null
+++ b/package/lean/luci-app-dnspod/files/root/etc/config/dnspod
@@ -0,0 +1,7 @@
+config base_arg "base_arg"
+	option main_domain ''
+	option sub_domain ''
+	option login_token ''
+	option wait_second ''
+	option command_to_get_ip 'curl -s whatismyip.akamai.com'
+
diff --git a/package/lean/luci-app-dnspod/files/root/etc/init.d/dnspod b/package/lean/luci-app-dnspod/files/root/etc/init.d/dnspod
new file mode 100755
index 0000000000..036fa308ed
--- /dev/null
+++ b/package/lean/luci-app-dnspod/files/root/etc/init.d/dnspod
@@ -0,0 +1,18 @@
+#!/bin/sh /etc/rc.common
+START=80
+
+start()
+{
+	/usr/sbin/dnspod.sh --svc &
+}
+
+stop()
+{
+	ps | grep dnspod.sh | grep -v 'grep' | awk '{print $1}' | xargs kill
+}
+
+run_reboot()
+{
+	stop
+	start
+}
diff --git a/package/lean/luci-app-dnspod/files/root/usr/lib/lua/luci/controller/dnspod.lua b/package/lean/luci-app-dnspod/files/root/usr/lib/lua/luci/controller/dnspod.lua
new file mode 100644
index 0000000000..56517f10f8
--- /dev/null
+++ b/package/lean/luci-app-dnspod/files/root/usr/lib/lua/luci/controller/dnspod.lua
@@ -0,0 +1,5 @@
+module("luci.controller.dnspod", package.seeall)
+
+function index()
+        entry({"admin", "network", "dnspod"}, cbi("dnspod"), _("动态DNSPOD"), 100)
+end
diff --git a/package/lean/luci-app-dnspod/files/root/usr/lib/lua/luci/model/cbi/dnspod.lua b/package/lean/luci-app-dnspod/files/root/usr/lib/lua/luci/model/cbi/dnspod.lua
new file mode 100644
index 0000000000..437fd9076c
--- /dev/null
+++ b/package/lean/luci-app-dnspod/files/root/usr/lib/lua/luci/model/cbi/dnspod.lua
@@ -0,0 +1,32 @@
+--[[
+LuCI - Lua Configuration Interface
+
+Copyright 2010 Jo-Philipp Wich <xm@subsignal.org>
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+]]--
+
+require("luci.sys")
+
+m = Map("dnspod", translate("动态DNSPOD"), translate("配置动态DNSPOD"))
+
+s = m:section(TypedSection, "base_arg", "")
+s.addremove = false
+s.anonymous = true
+
+email = s:option(Value, "login_token", translate("DNSPOD Token"), "格式: ID,Token")
+main = s:option(Value, "main_domain", translate("主域名"), "想要解析的主域名，例如:baidu.com")
+sub = s:option(Value, "sub_domain", translate("子域名"), "想要解析的子域名，只允许填写一个。如果想解析*子域名，请填写 \\*")
+wait = s:option(Value, "wait_second", translate("更新周期(s)"), "请填写数字，默认为300s")
+command = s:option(Value, "command_to_get_ip", translate("外网ip获取命令"), "默认为 curl -s whatismyip.akamai.com")
+
+local apply = luci.http.formvalue("cbi.apply")
+if apply then
+    io.popen("/etc/init.d/dnspod restart &")
+end
+
+return m
diff --git a/package/lean/luci-app-docker/Makefile b/package/lean/luci-app-docker/Makefile
new file mode 100755
index 0000000000..686e4d6277
--- /dev/null
+++ b/package/lean/luci-app-docker/Makefile
@@ -0,0 +1,18 @@
+#
+# Copyright (C) 2008-2014 The LuCI Team <luci@lists.subsignal.org>
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=Luci for Docker-CE
+LUCI_DEPENDS:=+docker-ce +e2fsprogs +fdisk
+LUCI_PKGARCH:=all
+PKG_VERSION:=1
+PKG_RELEASE:=9
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
diff --git a/package/lean/luci-app-docker/luasrc/controller/docker.lua b/package/lean/luci-app-docker/luasrc/controller/docker.lua
new file mode 100644
index 0000000000..93b8f6618d
--- /dev/null
+++ b/package/lean/luci-app-docker/luasrc/controller/docker.lua
@@ -0,0 +1,17 @@
+module("luci.controller.docker", package.seeall)
+
+function index()
+	if not nixio.fs.access("/etc/config/dockerd") then
+		return
+	end
+	
+	entry({"admin", "services", "docker"}, cbi("docker"), _("Docker CE Container"), 199).dependent = true
+	entry({"admin","services","docker","status"},call("act_status")).leaf=true
+end
+
+function act_status()
+  local e={}
+  e.running=luci.sys.call("pgrep /usr/bin/dockerd >/dev/null")==0
+  luci.http.prepare_content("application/json")
+  luci.http.write_json(e)
+end
\ No newline at end of file
diff --git a/package/lean/luci-app-docker/luasrc/model/cbi/docker.lua b/package/lean/luci-app-docker/luasrc/model/cbi/docker.lua
new file mode 100644
index 0000000000..270fecbbc7
--- /dev/null
+++ b/package/lean/luci-app-docker/luasrc/model/cbi/docker.lua
@@ -0,0 +1,23 @@
+local running = (luci.sys.call("pidof portainer >/dev/null") == 0)
+local button = ""
+
+if running then
+	button = "&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br /><br /><input type=\"button\" value=\" " .. translate("Open Portainer Docker Admin") .. " \" onclick=\"window.open('http://'+window.location.hostname+':" .. 9999 .. "')\"/><br />"
+end
+
+m = Map("dockerd", "Docker CE", translate("Docker is a set of platform-as-a-service (PaaS) products that use OS-level virtualization to deliver software in packages called containers.") .. button)
+
+
+m:section(SimpleSection).template  = "docker/docker_status"
+
+s = m:section(TypedSection, "docker")
+s.anonymous = true
+
+wan_mode = s:option(Flag, "wan_mode", translate("Enable WAN access Dokcer"), translate("Enable WAN access docker mapped ports"))
+wan_mode.default = 0
+wan_mode.rmempty = false
+
+o=s:option(DummyValue,"readme",translate(" "))
+o.description=translate("<a href=\"../../../../DockerReadme.pdf\" target=\"_blank\" />"..translate("Download DockerReadme.pdf").."</a>")
+
+return m
\ No newline at end of file
diff --git a/package/lean/luci-app-docker/luasrc/view/docker/docker_status.htm b/package/lean/luci-app-docker/luasrc/view/docker/docker_status.htm
new file mode 100644
index 0000000000..4d2c714684
--- /dev/null
+++ b/package/lean/luci-app-docker/luasrc/view/docker/docker_status.htm
@@ -0,0 +1,22 @@
+<script type="text/javascript">//<![CDATA[
+XHR.poll(3, '<%=url([[admin]], [[services]], [[docker]], [[status]])%>', null,
+	function(x, data) {
+		var tb = document.getElementById('docker_status');
+		if (data && tb) {
+			if (data.running) {
+				var links = '<em><b><font color=green>Docker CE <%:RUNNING%></font></b></em>';
+				tb.innerHTML = links;
+			} else {
+				tb.innerHTML = '<em><b><font color=red>Docker CE <%:NOT RUNNING%></font></b></em>';
+			}
+		}
+	}
+);
+//]]>
+</script>
+<style>.mar-10 {margin-left: 50px; margin-right: 10px;}</style>
+<fieldset class="cbi-section">
+	<p id="docker_status">
+		<em><%:Collecting data...%></em>
+	</p>
+</fieldset>
\ No newline at end of file
diff --git a/package/lean/luci-app-docker/po/zh-cn/docker.po b/package/lean/luci-app-docker/po/zh-cn/docker.po
new file mode 100644
index 0000000000..b95369aacf
--- /dev/null
+++ b/package/lean/luci-app-docker/po/zh-cn/docker.po
@@ -0,0 +1,39 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: Luci ARP Bind\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2015-06-23 20:16+0800\n"
+"PO-Revision-Date: 2015-06-23 20:17+0800\n"
+"Last-Translator: coolsnowwolf <coolsnowwolf@gmail.com>\n"
+"Language-Team: PandoraBox Team\n"
+"Language: zh_CN\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+"X-Generator: Poedit 1.8.1\n"
+"X-Poedit-SourceCharset: UTF-8\n"
+
+msgid "Docker CE Container"
+msgstr "Docker CE 容器"
+
+msgid "Open Portainer Docker Admin"
+msgstr "打开 Portainer Docker 管理页面"
+
+msgid "Docker is a set of platform-as-a-service (PaaS) products that use OS-level virtualization to deliver software in packages called containers."
+msgstr "Docker是一组平台即服务（platform-as-a-service，PaaS）产品，它使用操作系统级容器虚拟化来交付软件包。"
+
+msgid "Enable WAN access Dokcer"
+msgstr "允许 WAN 访问 Dokcer"
+
+msgid "Enable WAN access docker mapped ports"
+msgstr "允许 WAN 访问 Dokcer 映射后的端口（易受攻击！）。<br /><br />推荐禁用该选项后，用系统防火墙选择性映射 172.17.0.X:XX 端口到 WAN"
+
+msgid "Docker Readme First"
+msgstr "Docker 初始化无脑配置教程"
+
+msgid "Download DockerReadme.pdf"
+msgstr "下载 Docker 初始化无脑配置教程"
+
+msgid "Please download DockerReadme.pdf to read when first-running"
+msgstr "初次在OpenWrt中运行Docker必读（只需执行一次流程）"
\ No newline at end of file
diff --git a/package/lean/luci-app-docker/root/etc/config/dockerd b/package/lean/luci-app-docker/root/etc/config/dockerd
new file mode 100644
index 0000000000..b73c0a3e38
--- /dev/null
+++ b/package/lean/luci-app-docker/root/etc/config/dockerd
@@ -0,0 +1,4 @@
+
+config docker
+	option wan_mode '0'
+
diff --git a/package/lean/luci-app-docker/root/etc/docker-init b/package/lean/luci-app-docker/root/etc/docker-init
new file mode 100755
index 0000000000..9bade865ff
--- /dev/null
+++ b/package/lean/luci-app-docker/root/etc/docker-init
@@ -0,0 +1,26 @@
+#!/bin/sh
+dtype=`fdisk -l /dev/sda | grep 'Disklabel type' | awk '{print $3}'`
+partid="0"
+
+if [ "$dtype" = "gpt" ]
+then
+	partid=`echo "n
+
+
+
+w
+" | fdisk /dev/sda | grep 'Created a new partition' | awk '{print $5}'`
+
+elif [ "$dtype" = "dos" ]
+then
+	partid=`echo "n
+p
+
+
+
+w
+" | fdisk /dev/sda | grep 'Created a new partition' | awk '{print $5}'`
+fi
+
+echo "y" | mkfs.ext4 /dev/sda$partid
+
diff --git a/package/lean/luci-app-docker/root/etc/docker-web b/package/lean/luci-app-docker/root/etc/docker-web
new file mode 100755
index 0000000000..010ab1eac4
--- /dev/null
+++ b/package/lean/luci-app-docker/root/etc/docker-web
@@ -0,0 +1,3 @@
+#!/bin/sh
+
+docker run -d --restart=always --name="portainer" -p 9999:9000 -v /var/run/docker.sock:/var/run/docker.sock -v portainer_data:/data portainer/portainer
\ No newline at end of file
diff --git a/package/lean/luci-app-docker/root/etc/init.d/dockerd b/package/lean/luci-app-docker/root/etc/init.d/dockerd
new file mode 100755
index 0000000000..5d6f36bf2b
--- /dev/null
+++ b/package/lean/luci-app-docker/root/etc/init.d/dockerd
@@ -0,0 +1,22 @@
+#!/bin/sh /etc/rc.common
+
+USE_PROCD=1
+START=25
+
+start_service() {
+	local nofile=$(cat /proc/sys/fs/nr_open)
+	local wanmode=$(uci get dockerd.@docker[0].wan_mode)
+	
+	if [ $wanmode = "1" ] ;then
+	dockerwan=" "
+	else
+	dockerwan="--iptables=false"
+  fi
+
+	procd_open_instance
+	procd_set_param stderr 1
+	procd_set_param command /usr/bin/dockerd $dockerwan
+	procd_set_param limits nofile="${nofile} ${nofile}"
+	procd_close_instance
+	
+}
diff --git a/package/lean/luci-app-docker/root/etc/uci-defaults/docker b/package/lean/luci-app-docker/root/etc/uci-defaults/docker
new file mode 100755
index 0000000000..e03f477838
--- /dev/null
+++ b/package/lean/luci-app-docker/root/etc/uci-defaults/docker
@@ -0,0 +1,11 @@
+#!/bin/sh
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@dockerd[-1]
+	add ucitrack dockerd
+	set ucitrack.@dockerd[-1].init=dockerd
+	commit ucitrack
+EOF
+
+rm -f /tmp/luci-indexcache
+exit 0
diff --git a/package/lean/luci-app-docker/root/www/DockerReadme.pdf b/package/lean/luci-app-docker/root/www/DockerReadme.pdf
new file mode 100644
index 0000000000..8a9a94b832
Binary files /dev/null and b/package/lean/luci-app-docker/root/www/DockerReadme.pdf differ
diff --git a/package/lean/luci-app-familycloud/Makefile b/package/lean/luci-app-familycloud/Makefile
new file mode 100644
index 0000000000..ac8eb34edf
--- /dev/null
+++ b/package/lean/luci-app-familycloud/Makefile
@@ -0,0 +1,18 @@
+# Copyright (C) 2016 Openwrt.org
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI support for FamilyCloudSpeeder
+LUCI_DEPENDS:=+coreutils +coreutils-nohup +libreadline +libcurl +libopenssl +bash +curl +wget +openssl-util +ca-certificates +ca-bundle
+LUCI_PKGARCH:=all
+PKG_NAME:=luci-app-familycloud
+PKG_VERSION:=1
+PKG_RELEASE:=6
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
diff --git a/package/lean/luci-app-familycloud/luasrc/controller/familycloud.lua b/package/lean/luci-app-familycloud/luasrc/controller/familycloud.lua
new file mode 100644
index 0000000000..92cf489c49
--- /dev/null
+++ b/package/lean/luci-app-familycloud/luasrc/controller/familycloud.lua
@@ -0,0 +1,23 @@
+
+module("luci.controller.familycloud", package.seeall)
+
+function index()
+	if not nixio.fs.access("/etc/config/familycloud") then
+		return
+	end
+
+	entry({"admin", "services", "familycloud"},firstchild(), _("天翼家庭云/云盘提速"), 80).dependent = false
+	
+	entry({"admin", "services", "familycloud", "general"},cbi("familycloud"), _("Base Setting"), 1)
+  entry({"admin", "services", "familycloud", "log"},form("familycloudlog"), _("Log"), 2)
+  
+	entry({"admin","services","familycloud","status"},call("act_status")).leaf=true
+end
+
+function act_status()
+  local e={}
+  e.running=luci.sys.call("ps | grep speedup.sh | grep -v grep >/dev/null")==0
+  luci.http.prepare_content("application/json")
+  luci.http.write_json(e)
+end
+
diff --git a/package/lean/luci-app-familycloud/luasrc/model/cbi/familycloud.lua b/package/lean/luci-app-familycloud/luasrc/model/cbi/familycloud.lua
new file mode 100644
index 0000000000..d4a0b64281
--- /dev/null
+++ b/package/lean/luci-app-familycloud/luasrc/model/cbi/familycloud.lua
@@ -0,0 +1,22 @@
+
+mp = Map("familycloud", translate("天翼家庭云/天翼云盘提速"))
+mp.description = translate("天翼家庭云/天翼云盘提速 (最高可达500Mbps)")
+
+mp:section(SimpleSection).template  = "familycloud/familycloud_status"
+
+s = mp:section(TypedSection, "familycloud")
+s.anonymous=true
+s.addremove=false
+
+enabled = s:option(Flag, "enabled", translate("启用提速"))
+enabled.default = 0
+enabled.rmempty = false
+
+speedtype = s:option(ListValue, "speedertype", translate("天翼提速包类型"))
+speedtype:value("CloudDisk", translate("天翼云盘提速"))
+speedtype:value("FamilyCloud", translate("天翼家庭云提速"))
+
+account = s:option(Value, "token", translate("AccessToken"))
+account.datatype = "string"
+
+return mp
diff --git a/package/lean/luci-app-familycloud/luasrc/model/cbi/familycloudlog.lua b/package/lean/luci-app-familycloud/luasrc/model/cbi/familycloudlog.lua
new file mode 100644
index 0000000000..9471b410d2
--- /dev/null
+++ b/package/lean/luci-app-familycloud/luasrc/model/cbi/familycloudlog.lua
@@ -0,0 +1,14 @@
+local fs = require "nixio.fs"
+local conffile = "/tmp/familycloud.log"
+
+f = SimpleForm("logview")
+
+t = f:field(TextValue, "conf")
+t.rmempty = true
+t.rows = 15
+function t.cfgvalue()
+	return fs.readfile(conffile) or ""
+end
+t.readonly="readonly"
+
+return f
\ No newline at end of file
diff --git a/package/lean/luci-app-familycloud/luasrc/view/familycloud/familycloud_status.htm b/package/lean/luci-app-familycloud/luasrc/view/familycloud/familycloud_status.htm
new file mode 100644
index 0000000000..002565430a
--- /dev/null
+++ b/package/lean/luci-app-familycloud/luasrc/view/familycloud/familycloud_status.htm
@@ -0,0 +1,22 @@
+<script type="text/javascript">//<![CDATA[
+XHR.poll(3, '<%=url([[admin]], [[services]], [[familycloud]], [[status]])%>', null,
+	function(x, data) {
+		var tb = document.getElementById('familycloud_status');
+		if (data && tb) {
+			if (data.running) {
+				var links = '<em><b><font color=green>Family cloud <%:RUNNING%></font></b></em>';
+				tb.innerHTML = links;
+			} else {
+				tb.innerHTML = '<em><b><font color=red>Family cloud <%:NOT RUNNING%></font></b></em>';
+			}
+		}
+	}
+);
+//]]>
+</script>
+<style>.mar-10 {margin-left: 50px; margin-right: 10px;}</style>
+<fieldset class="cbi-section">
+	<p id="familycloud_status">
+		<em><%:Collecting data...%></em>
+	</p>
+</fieldset>
\ No newline at end of file
diff --git a/package/lean/luci-app-familycloud/root/etc/config/familycloud b/package/lean/luci-app-familycloud/root/etc/config/familycloud
new file mode 100644
index 0000000000..55b9172ee3
--- /dev/null
+++ b/package/lean/luci-app-familycloud/root/etc/config/familycloud
@@ -0,0 +1,6 @@
+
+config familycloud
+	option token 'f18a1952289c4659b3722ad54d3d92fb'
+	option speedertype 'CloudDisk'
+	option enabled '0'
+
diff --git a/package/lean/luci-app-familycloud/root/etc/init.d/familycloud b/package/lean/luci-app-familycloud/root/etc/init.d/familycloud
new file mode 100755
index 0000000000..974a81a240
--- /dev/null
+++ b/package/lean/luci-app-familycloud/root/etc/init.d/familycloud
@@ -0,0 +1,25 @@
+#!/bin/sh /etc/rc.common
+
+START=99
+STOP=10
+
+TYPE=$(uci get familycloud.@familycloud[0].speedertype)
+TOKEN=$(uci get familycloud.@familycloud[0].token)
+
+
+start()
+{
+	stop
+	enable=$(uci get familycloud.@familycloud[0].enabled)
+	[ $enable -eq 0 ] && exit 0
+	sed "s/XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX/$TOKEN/" /usr/share/familycloud/$TYPE/config.ini > /tmp/config.json
+	bash /usr/share/familycloud/$TYPE/speedup.sh > /tmp/familycloud.log &
+}
+
+stop()
+{
+	kill -9 $(ps | grep speedup.sh | grep -v grep | awk '{print $1}') >/dev/null 2>&1 
+}
+
+
+
diff --git a/package/lean/luci-app-familycloud/root/etc/ppp/ip-up.d/familycloud.sh b/package/lean/luci-app-familycloud/root/etc/ppp/ip-up.d/familycloud.sh
new file mode 100755
index 0000000000..60074df64b
--- /dev/null
+++ b/package/lean/luci-app-familycloud/root/etc/ppp/ip-up.d/familycloud.sh
@@ -0,0 +1,3 @@
+#!/bin/sh
+
+sleep 60 && /etc/init.d/familycloud restart
diff --git a/package/lean/luci-app-familycloud/root/etc/uci-defaults/familycloud b/package/lean/luci-app-familycloud/root/etc/uci-defaults/familycloud
new file mode 100755
index 0000000000..0251b0eeee
--- /dev/null
+++ b/package/lean/luci-app-familycloud/root/etc/uci-defaults/familycloud
@@ -0,0 +1,16 @@
+#!/bin/sh
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@familycloud[-1]
+	add ucitrack familycloud
+	set ucitrack.@familycloud[-1].init=familycloud
+	commit ucitrack
+EOF
+
+touch /tmp/config.json
+
+ln -s /tmp/config.json /usr/share/familycloud/CloudDisk/config.json
+
+rm -f /tmp/luci-indexcache
+
+exit 0
diff --git a/package/lean/luci-app-familycloud/root/usr/share/familycloud/CloudDisk/config.ini b/package/lean/luci-app-familycloud/root/usr/share/familycloud/CloudDisk/config.ini
new file mode 100755
index 0000000000..31f0d788a8
--- /dev/null
+++ b/package/lean/luci-app-familycloud/root/usr/share/familycloud/CloudDisk/config.ini
@@ -0,0 +1,10 @@
+{
+  "accessToken": "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX",
+  "setting": {
+    "method": "GET",
+    "rate": 600
+  },
+  "extra_header": {
+    "User-Agent": "Apache-HttpClient/UNAVAILABLE (java 1.4)"
+  }
+}
\ No newline at end of file
diff --git a/package/lean/luci-app-familycloud/root/usr/share/familycloud/CloudDisk/speedup.sh b/package/lean/luci-app-familycloud/root/usr/share/familycloud/CloudDisk/speedup.sh
new file mode 100755
index 0000000000..30006574cf
--- /dev/null
+++ b/package/lean/luci-app-familycloud/root/usr/share/familycloud/CloudDisk/speedup.sh
@@ -0,0 +1,45 @@
+#!/usr/bin/env bash
+
+base_dir=`dirname $0`
+source "$base_dir/utils.sh"
+config="$base_dir/config.json"
+
+
+accessToken=`getSingleJsonValue "$config" "accessToken"`
+method=`getSingleJsonValue "$config" "method"`
+rate=`getSingleJsonValue "$config" "rate"`
+UA=`getSingleJsonValue "$config" "User-Agent"`
+extra_header="User-Agent:$UA"
+
+
+HOST="http://api.cloud.189.cn"
+LOGIN_URL="/loginByOpen189AccessToken.action"
+ACCESS_URL="/speed/startSpeedV2.action"
+count=0
+echo "*******************************************"
+while :
+do
+    count=$((count+1))
+    echo "Sending heart_beat package <$count>"
+    split="~"
+    headers_string="$extra_header"
+    headers=`formatHeaderString "$split" "$headers_string"`
+    result=`get "$HOST$LOGIN_URL?accessToken=$accessToken" "$headers"`
+    session_key=`echo "$result" | grep -Eo "sessionKey>.*</sessionKey" | sed 's/<\/sessionKey//' | sed 's/sessionKey>//'`
+    session_secret=`echo "$result" | grep -Eo "sessionSecret>.*</sessionSecret" | sed 's/sessionSecret>//' | sed 's/<\/sessionSecret//'`
+    date=`env LANG=C.UTF-8 date -u '+%a, %d %b %Y %T GMT'`
+    data="SessionKey=$session_key&Operate=$method&RequestURI=$ACCESS_URL&Date=$date"
+    key="$session_secret"
+    signature=`hashHmac "sha1" "$data" "$key"`
+    headers_string="SessionKey:$session_key"${split}"Signature:$signature"${split}"Date:$date"${split}"$extra_header"
+    headers=`formatHeaderString "$split" "$headers_string"`
+    qosClientSn="$session_key"
+    result=`get "$HOST$ACCESS_URL?qosClientSn=$qosClientSn" "$headers"`
+    echo "heart_beat:<signature:$signature>"
+    echo "date:<$date>"
+    echo -e "response:\n$result"
+    [[ "`echo ${result} | grep dialAcc`" != "" ]] &&  hint="succeeded" || hint="failed"
+    echo "Sending heart_beat package <$count> $hint"
+    echo "*******************************************"
+    sleep ${rate}
+done
diff --git a/package/lean/luci-app-familycloud/root/usr/share/familycloud/CloudDisk/speedup_router.sh b/package/lean/luci-app-familycloud/root/usr/share/familycloud/CloudDisk/speedup_router.sh
new file mode 100755
index 0000000000..769b5a63b5
--- /dev/null
+++ b/package/lean/luci-app-familycloud/root/usr/share/familycloud/CloudDisk/speedup_router.sh
@@ -0,0 +1,41 @@
+#!/usr/bin/env bash
+
+base_dir=`dirname $0`
+source "$base_dir/utils.sh"
+config="$base_dir/config.json"
+
+echoToLogreader() {
+    logger -t CloudDisk "${1}"
+}
+
+accessToken=`getSingleJsonValue "$config" "accessToken"`
+method=`getSingleJsonValue "$config" "method"`
+UA=`getSingleJsonValue "$config" "User-Agent"`
+extra_header="User-Agent:$UA"
+
+
+HOST="http://api.cloud.189.cn"
+LOGIN_URL="/loginByOpen189AccessToken.action"
+ACCESS_URL="/speed/startSpeedV2.action"
+echoToLogreader "*******************************************"
+echoToLogreader "Sending Heartbeat Package ..."
+split="~"
+headers_string="$extra_header"
+headers=`formatHeaderString "$split" "$headers_string"`
+result=`get "$HOST$LOGIN_URL?accessToken=$accessToken" "$headers"`
+session_key=`echo "$result" | grep -Eo "sessionKey>.*</sessionKey" | sed 's/<\/sessionKey//' | sed 's/sessionKey>//'`
+session_secret=`echo "$result" | grep -Eo "sessionSecret>.*</sessionSecret" | sed 's/sessionSecret>//' | sed 's/<\/sessionSecret//'`
+date=`env LANG=C.UTF-8 date -u '+%a, %d %b %Y %T GMT'`
+data="SessionKey=$session_key&Operate=$method&RequestURI=$ACCESS_URL&Date=$date"
+key="$session_secret"
+signature=`hashHmac "sha1" "$data" "$key"`
+headers_string="SessionKey:$session_key"${split}"Signature:$signature"${split}"Date:$date"${split}"$extra_header"
+headers=`formatHeaderString "$split" "$headers_string"`
+qosClientSn=`cat /proc/sys/kernel/random/uuid`
+result=`get "$HOST$ACCESS_URL?qosClientSn=$qosClientSn" "$headers"`
+echoToLogreader "Heartbeat Signature: $signature"
+echoToLogreader "Date: $date"
+echoToLogreader "Response: $result"
+[[ "`echo ${result} | grep dialAcc`" != "" ]] &&  hint="succeeded" || hint="failed"
+echoToLogreader "Heartbeating $hint."
+echoToLogreader "*******************************************"
diff --git a/package/lean/luci-app-familycloud/root/usr/share/familycloud/CloudDisk/utils.sh b/package/lean/luci-app-familycloud/root/usr/share/familycloud/CloudDisk/utils.sh
new file mode 100755
index 0000000000..d54e1e3a94
--- /dev/null
+++ b/package/lean/luci-app-familycloud/root/usr/share/familycloud/CloudDisk/utils.sh
@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+
+CONNECTION_TIME="15"
+TRANSMISSION_TIME="15"
+
+formatHeaderString() {
+    OLD_IFS=$IFS
+    IFS="$1"
+    STR="$2"
+    ARRAY=(${STR})
+    for i in "${!ARRAY[@]}"
+    do
+        HEADERS="$HEADERS -H '${ARRAY[$i]}'"
+    done
+    echo ${HEADERS} | sed 's/^ //'
+    IFS=${OLD_IFS}
+}
+
+get() {
+    HEADER="$1"
+    URL="$2"
+    eval curl -s --connect-timeout "${CONNECTION_TIME}"  -m "${TRANSMISSION_TIME}" "${HEADER}" "${URL}"
+}
+
+post() {
+    HEADER="$1"
+    URL="$2"
+    PAYLOAD="$3"
+    eval curl -s --connect-timeout "${CONNECTION_TIME}" -m "${TRANSMISSION_TIME}" -X POST "${URL}" "${HEADER}" -w %{http_code} -d "'$PAYLOAD'"
+}
+
+getSingleJsonValue() {
+    FILE="$1"
+    KEY="$2"
+    cat ${FILE} | grep "$KEY" | sed 's/,$//' | awk -F "[:]" '{ print $2 }' | sed 's/ //g' | sed 's/"//g'
+}
+
+hashHmac() {
+    digest="$1"
+    data="$2"
+    key="$3"
+    echo -n "$data" | openssl dgst "-$digest" -hmac "$key" | sed -e 's/^.* //' | tr 'a-z' 'A-Z'
+}
diff --git a/package/lean/luci-app-familycloud/root/usr/share/familycloud/FamilyCloud/config.ini b/package/lean/luci-app-familycloud/root/usr/share/familycloud/FamilyCloud/config.ini
new file mode 100755
index 0000000000..f83cab7d17
--- /dev/null
+++ b/package/lean/luci-app-familycloud/root/usr/share/familycloud/FamilyCloud/config.ini
@@ -0,0 +1,14 @@
+{
+  "accessToken": "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX",
+  "AppKey": "600100885",
+  "setting": {
+    "method": "POST",
+    "rate": 600
+},
+  "send_data": {
+    "prodCode": "76"
+  },
+  "extra_header": {
+    "User-Agent": "Apache-HttpClient/UNAVAILABLE (java 1.4)"
+  }
+}
\ No newline at end of file
diff --git a/package/lean/luci-app-familycloud/root/usr/share/familycloud/FamilyCloud/config.json b/package/lean/luci-app-familycloud/root/usr/share/familycloud/FamilyCloud/config.json
new file mode 120000
index 0000000000..35e21f5b3e
--- /dev/null
+++ b/package/lean/luci-app-familycloud/root/usr/share/familycloud/FamilyCloud/config.json
@@ -0,0 +1 @@
+/tmp/config.json
\ No newline at end of file
diff --git a/package/lean/luci-app-familycloud/root/usr/share/familycloud/FamilyCloud/speedup.sh b/package/lean/luci-app-familycloud/root/usr/share/familycloud/FamilyCloud/speedup.sh
new file mode 100755
index 0000000000..d7ade60cf6
--- /dev/null
+++ b/package/lean/luci-app-familycloud/root/usr/share/familycloud/FamilyCloud/speedup.sh
@@ -0,0 +1,48 @@
+#!/usr/bin/env bash
+
+base_dir=`dirname $0`
+source "$base_dir/utils.sh"
+config="$base_dir/config.json"
+
+
+accessToken=`getSingleJsonValue "$config" "accessToken"`
+AppKey=`getSingleJsonValue "$config" "AppKey"`
+method=`getSingleJsonValue "$config" "method"`
+rate=`getSingleJsonValue "$config" "rate"`
+prodCode=`getSingleJsonValue "$config" "prodCode"`
+UA=`getSingleJsonValue "$config" "User-Agent"`
+extra_header="User-Agent:$UA"
+
+
+HOST="http://api.cloud.189.cn"
+LOGIN_URL="/login4MergedClient.action"
+ACCESS_URL="/family/qos/startQos.action"
+count=0
+echo "*******************************************"
+while :
+do
+    count=$((count+1))
+    echo "Sending heart_beat package <$count>"
+    split="~"
+    headers_string="AppKey:$AppKey"${split}"$extra_header"
+    headers=`formatHeaderString "$split" "$headers_string"`
+    result=`post "$headers" "$HOST$LOGIN_URL?accessToken=$accessToken"`
+    session_key=`echo "$result" | grep -Eo "familySessionKey>.+</familySessionKey" | sed 's/familySessionKey>//' | sed 's/<\/familySessionKey//'`
+    session_secret=`echo "$result" | grep -Eo "familySessionSecret>.+</familySessionSecret" | sed 's/familySessionSecret>//' | sed 's/<\/familySessionSecret//'`
+    date=`env LANG=C.UTF-8 date -u '+%a, %d %b %Y %T GMT'`
+    data="SessionKey=$session_key&Operate=$method&RequestURI=$ACCESS_URL&Date=$date"
+    key="$session_secret"
+    signature=`hashHmac "sha1" "$data" "$key"`
+    headers_string="SessionKey:$session_key"${split}"Signature:$signature"${split}"Date:$date"${split}"$extra_header"
+    headers=`formatHeaderString "$split" "$headers_string"`
+    send_data="prodCode=$prodCode"
+    result=`post "$headers" "$HOST$ACCESS_URL" "$send_data"`
+    echo "heart_beat:<signature:$signature>"
+    echo "date:<$date>"
+    echo "status_code:${result: -3}"
+    echo -e "response:\n`echo ${result} | sed "s^[0-9]\{3\}$^^"`"
+    [[ "`echo ${result} | grep dialAcc`" != "" ]] &&  hint="succeeded" || hint="failed"
+    echo "Sending heart_beat package <$count> $hint"
+    echo "*******************************************"
+    sleep ${rate}
+done
\ No newline at end of file
diff --git a/package/lean/luci-app-familycloud/root/usr/share/familycloud/FamilyCloud/speedup_router.sh b/package/lean/luci-app-familycloud/root/usr/share/familycloud/FamilyCloud/speedup_router.sh
new file mode 100755
index 0000000000..721023b0cc
--- /dev/null
+++ b/package/lean/luci-app-familycloud/root/usr/share/familycloud/FamilyCloud/speedup_router.sh
@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+
+base_dir=`dirname $0`
+source "$base_dir/utils.sh"
+config="$base_dir/config.json"
+
+echoToLogreader() {
+    logger -t FamilyCloud "${1}"
+}
+
+accessToken=`getSingleJsonValue "$config" "accessToken"`
+AppKey=`getSingleJsonValue "$config" "AppKey"`
+method=`getSingleJsonValue "$config" "method"`
+prodCode=`getSingleJsonValue "$config" "prodCode"`
+UA=`getSingleJsonValue "$config" "User-Agent"`
+extra_header="User-Agent:$UA"
+
+
+HOST="http://api.cloud.189.cn"
+LOGIN_URL="/login4MergedClient.action"
+ACCESS_URL="/family/qos/startQos.action"
+echoToLogreader "*******************************************"
+echoToLogreader "Sending Heartbeat Package ..."
+split="~"
+headers_string="AppKey:$AppKey"${split}"$extra_header"
+headers=`formatHeaderString "$split" "$headers_string"`
+result=`post "$headers" "$HOST$LOGIN_URL?accessToken=$accessToken"`
+session_key=`echo "$result" | grep -Eo "familySessionKey>.+</familySessionKey" | sed 's/familySessionKey>//' | sed 's/<\/familySessionKey//'`
+session_secret=`echo "$result" | grep -Eo "familySessionSecret>.+</familySessionSecret" | sed 's/familySessionSecret>//' | sed 's/<\/familySessionSecret//'`
+date=`env LANG=C.UTF-8 date -u '+%a, %d %b %Y %T GMT'`
+data="SessionKey=$session_key&Operate=$method&RequestURI=$ACCESS_URL&Date=$date"
+key="$session_secret"
+signature=`hashHmac "sha1" "$data" "$key"`
+headers_string="SessionKey:$session_key"${split}"Signature:$signature"${split}"Date:$date"${split}"$extra_header"
+headers=`formatHeaderString "$split" "$headers_string"`
+send_data="prodCode=$prodCode"
+result=`post "$headers" "$HOST$ACCESS_URL" "$send_data"`
+echoToLogreader "Heartbeat Signature: $signature"
+echoToLogreader "Date: $date"
+echoToLogreader "Response: ${result}"
+[[ "`echo ${result} | grep dialAcc`" != "" ]] &&  hint="succeeded" || hint="failed"
+echoToLogreader "Heartbeating $hint."
+echoToLogreader "*******************************************"
diff --git a/package/lean/luci-app-familycloud/root/usr/share/familycloud/FamilyCloud/utils.sh b/package/lean/luci-app-familycloud/root/usr/share/familycloud/FamilyCloud/utils.sh
new file mode 100755
index 0000000000..d54e1e3a94
--- /dev/null
+++ b/package/lean/luci-app-familycloud/root/usr/share/familycloud/FamilyCloud/utils.sh
@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+
+CONNECTION_TIME="15"
+TRANSMISSION_TIME="15"
+
+formatHeaderString() {
+    OLD_IFS=$IFS
+    IFS="$1"
+    STR="$2"
+    ARRAY=(${STR})
+    for i in "${!ARRAY[@]}"
+    do
+        HEADERS="$HEADERS -H '${ARRAY[$i]}'"
+    done
+    echo ${HEADERS} | sed 's/^ //'
+    IFS=${OLD_IFS}
+}
+
+get() {
+    HEADER="$1"
+    URL="$2"
+    eval curl -s --connect-timeout "${CONNECTION_TIME}"  -m "${TRANSMISSION_TIME}" "${HEADER}" "${URL}"
+}
+
+post() {
+    HEADER="$1"
+    URL="$2"
+    PAYLOAD="$3"
+    eval curl -s --connect-timeout "${CONNECTION_TIME}" -m "${TRANSMISSION_TIME}" -X POST "${URL}" "${HEADER}" -w %{http_code} -d "'$PAYLOAD'"
+}
+
+getSingleJsonValue() {
+    FILE="$1"
+    KEY="$2"
+    cat ${FILE} | grep "$KEY" | sed 's/,$//' | awk -F "[:]" '{ print $2 }' | sed 's/ //g' | sed 's/"//g'
+}
+
+hashHmac() {
+    digest="$1"
+    data="$2"
+    key="$3"
+    echo -n "$data" | openssl dgst "-$digest" -hmac "$key" | sed -e 's/^.* //' | tr 'a-z' 'A-Z'
+}
diff --git a/package/lean/luci-app-filetransfer/Makefile b/package/lean/luci-app-filetransfer/Makefile
new file mode 100644
index 0000000000..fb9ecc3e9c
--- /dev/null
+++ b/package/lean/luci-app-filetransfer/Makefile
@@ -0,0 +1,16 @@
+#
+# Copyright (C) 2008-2014 The LuCI Team <luci@lists.subsignal.org>
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI page for IPK upload
+LUCI_DEPENDS:=+luci-lib-fs
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
+
diff --git a/package/lean/luci-app-filetransfer/luasrc/controller/filetransfer.lua b/package/lean/luci-app-filetransfer/luasrc/controller/filetransfer.lua
new file mode 100644
index 0000000000..986af58085
--- /dev/null
+++ b/package/lean/luci-app-filetransfer/luasrc/controller/filetransfer.lua
@@ -0,0 +1,12 @@
+--[[
+luci-app-filetransfer
+Description: File upload / download
+Author: yuleniwo  xzm2@qq.com  QQ:529698939
+Modify: ayongwifi@126.com  www.openwrtdl.com
+]]--
+
+module("luci.controller.filetransfer", package.seeall)
+
+function index()
+	entry({"admin", "system", "filetransfer"}, form("updownload"), _("FileTransfer"),89)
+end
diff --git a/package/lean/luci-app-filetransfer/luasrc/model/cbi/updownload.lua b/package/lean/luci-app-filetransfer/luasrc/model/cbi/updownload.lua
new file mode 100644
index 0000000000..7b487cb215
--- /dev/null
+++ b/package/lean/luci-app-filetransfer/luasrc/model/cbi/updownload.lua
@@ -0,0 +1,148 @@
+local fs = require "luci.fs"
+local http = luci.http
+
+ful = SimpleForm("upload", translate("Upload"), nil)
+ful.reset = false
+ful.submit = false
+
+sul = ful:section(SimpleSection, "", translate("Upload file to '/tmp/upload/'"))
+fu = sul:option(FileUpload, "")
+fu.template = "cbi/other_upload"
+um = sul:option(DummyValue, "", nil)
+um.template = "cbi/other_dvalue"
+
+fdl = SimpleForm("download", translate("Download"), nil)
+fdl.reset = false
+fdl.submit = false
+sdl = fdl:section(SimpleSection, "", translate("Download file"))
+fd = sdl:option(FileUpload, "")
+fd.template = "cbi/other_download"
+dm = sdl:option(DummyValue, "", nil)
+dm.template = "cbi/other_dvalue"
+
+function Download()
+	local sPath, sFile, fd, block
+	sPath = http.formvalue("dlfile")
+	sFile = nixio.fs.basename(sPath)
+	if luci.fs.isdirectory(sPath) then
+		fd = io.popen('tar -C "%s" -cz .' % {sPath}, "r")
+		sFile = sFile .. ".tar.gz"
+	else
+		fd = nixio.open(sPath, "r")
+	end
+	if not fd then
+		dm.value = translate("Couldn't open file: ") .. sPath
+		return
+	end
+	dm.value = nil
+	http.header('Content-Disposition', 'attachment; filename="%s"' % {sFile})
+	http.prepare_content("application/octet-stream")
+	while true do
+		block = fd:read(nixio.const.buffersize)
+		if (not block) or (#block ==0) then
+			break
+		else
+			http.write(block)
+		end
+	end
+	fd:close()
+	http.close()
+end
+
+local dir, fd
+dir = "/tmp/upload/"
+nixio.fs.mkdir(dir)
+http.setfilehandler(
+	function(meta, chunk, eof)
+		if not fd then
+			if not meta then return end
+
+			if	meta and chunk then fd = nixio.open(dir .. meta.file, "w") end
+
+			if not fd then
+				um.value = translate("Create upload file error.")
+				return
+			end
+		end
+		if chunk and fd then
+			fd:write(chunk)
+		end
+		if eof and fd then
+			fd:close()
+			fd = nil
+			um.value = translate("File saved to") .. ' "/tmp/upload/' .. meta.file .. '"'
+		end
+	end
+)
+
+if luci.http.formvalue("upload") then
+
+
+	local f = luci.http.formvalue("ulfile")
+	if #f <= 0 then
+		um.value = translate("No specify upload file.")
+	end
+elseif luci.http.formvalue("download") then
+	Download()
+end
+
+local inits, attr = {}
+for i, f in ipairs(fs.glob("/tmp/upload/*")) do
+	attr = fs.stat(f)
+	if attr then
+		inits[i] = {}
+		inits[i].name = fs.basename(f)
+		inits[i].mtime = os.date("%Y-%m-%d %H:%M:%S", attr.mtime)
+		inits[i].modestr = attr.modestr
+		inits[i].size = tostring(attr.size)
+		inits[i].remove = 0
+		inits[i].install = false
+	end
+end
+
+form = SimpleForm("filelist", translate("Upload file list"), nil)
+form.reset = false
+form.submit = false
+
+tb = form:section(Table, inits)
+nm = tb:option(DummyValue, "name", translate("File name"))
+mt = tb:option(DummyValue, "mtime", translate("Modify time"))
+ms = tb:option(DummyValue, "modestr", translate("Mode string"))
+sz = tb:option(DummyValue, "size", translate("Size"))
+btnrm = tb:option(Button, "remove", translate("Remove"))
+btnrm.render = function(self, section, scope)
+	self.inputstyle = "remove"
+	Button.render(self, section, scope)
+end
+
+btnrm.write = function(self, section)
+	local v = luci.fs.unlink("/tmp/upload/" .. luci.fs.basename(inits[section].name))
+	if v then table.remove(inits, section) end
+	return v
+end
+
+function IsIpkFile(name)
+	name = name or ""
+	local ext = string.lower(string.sub(name, -4, -1))
+	return ext == ".ipk"
+end
+
+btnis = tb:option(Button, "install", translate("Install"))
+btnis.template = "cbi/other_button"
+btnis.render = function(self, section, scope)
+	if not inits[section] then return false end
+	if IsIpkFile(inits[section].name) then
+		scope.display = ""
+	else
+		scope.display = "none"
+	end
+	self.inputstyle = "apply"
+	Button.render(self, section, scope)
+end
+
+btnis.write = function(self, section)
+	local r = luci.sys.exec(string.format('opkg --force-depends install "/tmp/upload/%s"', inits[section].name))
+	form.description = string.format('<span style="color: red">%s</span>', r)
+end
+
+return ful, fdl, form
diff --git a/package/lean/luci-app-filetransfer/luasrc/view/cbi/other_button.htm b/package/lean/luci-app-filetransfer/luasrc/view/cbi/other_button.htm
new file mode 100644
index 0000000000..1c391ad984
--- /dev/null
+++ b/package/lean/luci-app-filetransfer/luasrc/view/cbi/other_button.htm
@@ -0,0 +1,7 @@
+<%+cbi/valueheader%>
+	<% if self:cfgvalue(section) ~= false then %>
+		<input class="cbi-button cbi-input-<%=self.inputstyle or "button" %>" style="display: <%= display %>" type="submit"<%= attr("name", cbid) .. attr("id", cbid) .. attr("value", self.inputtitle or self.title)%> />
+	<% else %>
+		-
+	<% end %>
+<%+cbi/valuefooter%>
diff --git a/package/lean/luci-app-filetransfer/luasrc/view/cbi/other_download.htm b/package/lean/luci-app-filetransfer/luasrc/view/cbi/other_download.htm
new file mode 100644
index 0000000000..c14728632e
--- /dev/null
+++ b/package/lean/luci-app-filetransfer/luasrc/view/cbi/other_download.htm
@@ -0,0 +1,5 @@
+<%+cbi/valueheader%>
+	<label class="cbi-value" style="display:inline-block; width: 130px" for="dlfile"><%:Path on Route:%></label>
+	<input class="cbi-input-file" style="width: 400px" type="text" id="dlfile" name="dlfile" />
+	<input type="submit" class="cbi-button cbi-input-apply" name="download" value="<%:Download%>" />
+<%+cbi/valuefooter%>
diff --git a/package/lean/luci-app-filetransfer/luasrc/view/cbi/other_dvalue.htm b/package/lean/luci-app-filetransfer/luasrc/view/cbi/other_dvalue.htm
new file mode 100644
index 0000000000..296c61e4d6
--- /dev/null
+++ b/package/lean/luci-app-filetransfer/luasrc/view/cbi/other_dvalue.htm
@@ -0,0 +1,8 @@
+<%+cbi/valueheader%>
+<span style="color: red">
+<%
+	local val = self:cfgvalue(section) or self.default or ""
+	write(pcdata(val))
+%>
+</span>
+<%+cbi/valuefooter%>
diff --git a/package/lean/luci-app-filetransfer/luasrc/view/cbi/other_upload.htm b/package/lean/luci-app-filetransfer/luasrc/view/cbi/other_upload.htm
new file mode 100644
index 0000000000..bb56f444fc
--- /dev/null
+++ b/package/lean/luci-app-filetransfer/luasrc/view/cbi/other_upload.htm
@@ -0,0 +1,5 @@
+<%+cbi/valueheader%>
+	<label class="cbi-value" style="display:inline-block; width: 130px" for="ulfile"><%:Choose local file:%></label>
+	<input class="cbi-input-file" style="width: 400px" type="file" id="ulfile" name="ulfile" />
+	<input type="submit" class="cbi-button cbi-input-apply" name="upload" value="<%:Upload%>" />
+<%+cbi/valuefooter%>
diff --git a/package/lean/luci-app-filetransfer/po/zh-cn/filetransfer.po b/package/lean/luci-app-filetransfer/po/zh-cn/filetransfer.po
new file mode 100644
index 0000000000..829c7d285b
--- /dev/null
+++ b/package/lean/luci-app-filetransfer/po/zh-cn/filetransfer.po
@@ -0,0 +1,56 @@
+msgid ""
+msgstr "Content-Type: text/plain; charset=UTF-8"
+
+msgid "Choose local file:"
+msgstr "选择本地文件："
+
+msgid "Couldn't open file:"
+msgstr "无法打开文件："
+
+msgid "Create upload file error."
+msgstr "创建上传文件失败。"
+
+msgid "Download"
+msgstr "下载"
+
+msgid "Download file"
+msgstr "下载文件"
+
+msgid "File name"
+msgstr "文件名"
+
+msgid "File saved to"
+msgstr "文件保存到"
+
+msgid "FileTransfer"
+msgstr "文件传输"
+
+msgid "Install"
+msgstr "安装"
+
+msgid "Mode string"
+msgstr "模式字符串"
+
+msgid "Modify time"
+msgstr "修改时间"
+
+msgid "No specify upload file."
+msgstr "未指定上传文件"
+
+msgid "Path on Route:"
+msgstr "路由上目录"
+
+msgid "Remove"
+msgstr "移除"
+
+msgid "Size"
+msgstr "大小"
+
+msgid "Upload"
+msgstr "上传"
+
+msgid "Upload file list"
+msgstr "上传文件列表"
+
+msgid "Upload file to '/tmp/upload/'"
+msgstr "将文件上传到'/tmp/upload/'"
diff --git a/package/lean/luci-app-flowoffload/Makefile b/package/lean/luci-app-flowoffload/Makefile
new file mode 100644
index 0000000000..141eec07f8
--- /dev/null
+++ b/package/lean/luci-app-flowoffload/Makefile
@@ -0,0 +1,17 @@
+# Copyright (C) 2016 Openwrt.org
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI support for Flow Offload
+LUCI_DEPENDS:=+kmod-ipt-offload +pdnsd-alt +kmod-tcp-bbr @!LINUX_3_18 @!LINUX_4_9
+LUCI_PKGARCH:=all
+PKG_VERSION:=1.0
+PKG_RELEASE:=13
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
diff --git a/package/lean/luci-app-flowoffload/luasrc/controller/flowoffload.lua b/package/lean/luci-app-flowoffload/luasrc/controller/flowoffload.lua
new file mode 100644
index 0000000000..11249b76c8
--- /dev/null
+++ b/package/lean/luci-app-flowoffload/luasrc/controller/flowoffload.lua
@@ -0,0 +1,46 @@
+module("luci.controller.flowoffload", package.seeall)
+
+function index()
+	if not nixio.fs.access("/etc/config/flowoffload") then
+		return
+	end
+	local page
+	page = entry({"admin", "network", "flowoffload"}, cbi("flowoffload"), _("Turbo ACC Center"), 101)
+	page.i18n = "flowoffload"
+	page.dependent = true
+	
+	entry({"admin", "network", "flowoffload", "status"}, call("action_status"))
+end
+
+local function is_running()
+	return luci.sys.call("[ `cat /sys/module/xt_FLOWOFFLOAD/refcnt 2>/dev/null` -gt 0 ] 2>/dev/null") == 0
+end
+
+local function is_bbr()
+	return luci.sys.call("[ `cat /proc/sys/net/ipv4/tcp_congestion_control 2>/dev/null` = bbr ] 2>/dev/null") == 0
+end
+
+local function is_fullcone()
+	return luci.sys.call("[ `cat /sys/module/xt_FULLCONENAT/refcnt 2>/dev/null` -gt 0 ] 2>/dev/null") == 0
+end
+
+local function is_dns()
+	return luci.sys.call("[ `uci get flowoffload.@flow[0].dnscache_enable 2>/dev/null` -ne 3 ] && pgrep dnscache >/dev/null || pgrep AdGuardHome >/dev/null") == 0
+end
+
+local function is_ad()
+	return luci.sys.call("pgrep AdGuardHome >/dev/null") == 0
+end
+
+function action_status()
+	luci.http.prepare_content("application/json")
+	luci.http.write_json({
+		run_state = is_running(),
+		down_state = is_bbr(),
+		up_state = is_fullcone(),
+		dns_state = is_dns(),
+		ad_state = is_ad()
+	})
+end
+
+
diff --git a/package/lean/luci-app-flowoffload/luasrc/model/cbi/flowoffload.lua b/package/lean/luci-app-flowoffload/luasrc/model/cbi/flowoffload.lua
new file mode 100644
index 0000000000..d42fc86cfb
--- /dev/null
+++ b/package/lean/luci-app-flowoffload/luasrc/model/cbi/flowoffload.lua
@@ -0,0 +1,66 @@
+local m,s,o
+local SYS  = require "luci.sys"
+local trport = 3001
+local button = ""
+if luci.sys.call("pidof AdGuardHome >/dev/null") == 0 then
+	button = "&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<input type=\"button\" value=\" " .. translate("Open Web Interface") .. " \" onclick=\"window.open('http://'+window.location.hostname+':" .. trport .. "')\"/>"
+end
+
+m = Map("flowoffload")
+m.title	= translate("Turbo ACC Acceleration Settings")
+m.description = translate("Opensource Linux Flow Offload driver (Fast Path or HWNAT)")
+m:append(Template("flow/status"))
+
+s = m:section(TypedSection, "flow")
+s.addremove = false
+s.anonymous = true
+
+flow = s:option(Flag, "flow_offloading", translate("Enable"))
+flow.default = 0
+flow.rmempty = false
+flow.description = translate("Enable software flow offloading for connections. (decrease cpu load / increase routing throughput)")
+
+hw = s:option(Flag, "flow_offloading_hw", translate("HWNAT"))
+hw.default = 0
+hw.rmempty = true
+hw.description = translate("Enable Hardware NAT (depends on hw capability like MTK 762x)")
+hw:depends("flow_offloading", 1)
+
+bbr = s:option(Flag, "bbr", translate("Enable BBR"))
+bbr.default = 0
+bbr.rmempty = false
+bbr.description = translate("Bottleneck Bandwidth and Round-trip propagation time (BBR)")
+
+aaaa = s:option(Flag, "filter_aaaa", translate("Filter AAAA"))
+aaaa.default = 0
+aaaa.rmempty = false
+aaaa.description = translate("Dnsmasq rejects IPv6 parsing and optimizes domestic complex dual-stack network")
+
+dns = s:option(Flag, "dns", translate("DNS Acceleration"))
+dns.default = 0
+dns.rmempty = false
+dns.description = translate("Enable DNS Cache Acceleration and anti ISP DNS pollution")
+
+o = s:option(ListValue, "dnscache_enable", translate("Resolve Dns Mode"), translate("AdGuardHome's login username/passwd: AdGuardHome, web console addr: IP:3001") .. button)
+o:value("1", translate("Use Pdnsd query and cache"))
+if nixio.fs.access("/usr/bin/dnsforwarder") then
+o:value("2", translate("Use dnsforwarder query and cache"))
+end
+if nixio.fs.access("/usr/bin/AdGuardHome") then
+o:value("3", translate("Use AdGuardHome query and cache"))
+end
+o.default = 1
+o:depends("dns", 1)
+
+o = s:option(Value, "dns_server", translate("Upsteam DNS Server"))
+o.default = "114.114.114.114,114.114.115.115,223.5.5.5,223.6.6.6,180.76.76.76,119.29.29.29,119.28.28.28,1.2.4.8,210.2.4.8"
+o.description = translate("Muitiple DNS server can saperate with ','")
+o:depends("dnscache_enable", 1)
+o:depends("dnscache_enable", 2)
+
+o = s:option(Value, "ipv6dns_server", translate("Upsteam IPV6 DNS Server"))
+o.default = "2001:4860:4860::8888,2001:4860:4860::8844,2001:2001::1111,2001:2001::1001,2400:da00::6666,240C::6666,240C::6644"
+o.description = translate("Muitiple IPV6 DNS server can saperate with ','")
+o:depends("dnscache_enable", 2)
+
+return m
diff --git a/package/lean/luci-app-flowoffload/luasrc/view/flow/status.htm b/package/lean/luci-app-flowoffload/luasrc/view/flow/status.htm
new file mode 100644
index 0000000000..58373ef01b
--- /dev/null
+++ b/package/lean/luci-app-flowoffload/luasrc/view/flow/status.htm
@@ -0,0 +1,27 @@
+<fieldset class="cbi-section">
+	<legend><%:Running Status%></legend>
+	<table width="100%" cellspacing="10" id="_xlnetacc_status_table">
+		<tr><td width="33%">FLOW 加速状态</td><td id="_run_state"><em><%:Collecting data...%></em></td></tr>
+		<tr><td width="33%">TCP拥塞控制算法</td><td id="_down_state"><em><%:Collecting data...%></em></td></tr>
+		<tr><td width="33%">FULLCONE NAT加速</td><td id="_up_state"><em><%:Collecting data...%></em></td></tr>
+		<tr><td width="33%">DNS 加速</td><td id="_dns_state"><em><%:Collecting data...%></em></td></tr>
+		<tr><td width="33%">AdGuardHome 去广告</td><td id="_ad_state"><em><%:Collecting data...%></em></td></tr>
+	</table>
+</fieldset>
+
+<script type="text/javascript">//<![CDATA[
+	var run_state = document.getElementById('_run_state');
+	var down_state = document.getElementById('_down_state');
+	var up_state = document.getElementById('_up_state');
+	var dns_state = document.getElementById('_dns_state');
+	var ad_state = document.getElementById('_ad_state');
+	XHR.poll(5, '<%=luci.dispatcher.build_url("admin", "network", "flowoffload", "status")%>', null, function(x, status) {
+		if ( x && x.status == 200 ) {
+			run_state.innerHTML = status.run_state ? '<em><b><font color=green><%:RUNNING%></font></b></em>' : '<em><b><font color=red><%:NOT RUNNING%></font></b></em>';
+			down_state.innerHTML = status.down_state ? '<em><b><font color=green><%:RUNNING%></font></b></em>' : '<em><b><font color=red><%:NOT RUNNING%></font></b></em>';
+			up_state.innerHTML = status.up_state ? '<em><b><font color=green><%:RUNNING%></font></b></em>' : '<em><b><font color=red><%:NOT RUNNING%></font></b></em>';
+			dns_state.innerHTML = status.dns_state ? '<em><b><font color=green><%:RUNNING%></font></b></em>' : '<em><b><font color=red><%:NOT RUNNING%></font></b></em>';
+			ad_state.innerHTML = status.ad_state ? '<em><b><font color=green><%:RUNNING%></font></b></em>' : '<em><b><font color=red><%:NOT RUNNING%></font></b></em>';
+		}
+	});
+//]]></script>
diff --git a/package/lean/luci-app-flowoffload/po/zh-cn/flowoffload.po b/package/lean/luci-app-flowoffload/po/zh-cn/flowoffload.po
new file mode 100644
index 0000000000..b2f0826bbc
--- /dev/null
+++ b/package/lean/luci-app-flowoffload/po/zh-cn/flowoffload.po
@@ -0,0 +1,74 @@
+msgid "Flow Offload ACC"
+msgstr "Flow Offload 转发加速"
+
+msgid "Turbo ACC Center"
+msgstr "Turbo ACC 网络加速"
+
+msgid "Turbo ACC Acceleration Settings"
+msgstr "Turbo ACC 网络加速设置"
+
+msgid "Linux Flow Offload Forwarding Engine Settings"
+msgstr "Linux Flow Offload Forwarding 转发加速引擎设置"
+
+msgid "Opensource Linux Flow Offload driver (Fast Path or HWNAT)"
+msgstr "开源 Linux Flow Offload 驱动 (支持 Fast Path 或者 HWNAT)"
+
+msgid "Enable"
+msgstr "启用"
+
+msgid "Enable software flow offloading for connections. (decrease cpu load / increase routing throughput)"
+msgstr "开启 Flow Offloading 转发加速. (降低CPU占用 / 增强路由转发性能，和多WAN或者QOS功能可能会冲突)"
+
+msgid "Enable Hardware NAT (depends on hw capability like MTK 762x)"
+msgstr "启用硬件HWNAT加速（依赖特定的硬件，例如 MTK 762x 系列）"
+
+msgid "Enable BBR"
+msgstr "启用 BBR"
+
+msgid "Bottleneck Bandwidth and Round-trip propagation time (BBR)"
+msgstr "BBR拥塞控制算法可以加强TCP应用表现，但会降低路由器本机上的WIFI吞吐性能"
+
+msgid "DNS Acceleration"
+msgstr "DNS 加速"
+
+msgid "Enable DNS Cache Acceleration and anti ISP DNS pollution"
+msgstr "启用DNS多线程查询、缓存，并防止ISP的DNS广告和域名劫持"
+
+msgid "Resolve Dns Mode"
+msgstr "DNS解析方式"
+
+msgid "Use Pdnsd query and cache"
+msgstr "使用pdnsd解析"
+
+msgid "Use dnsforwarder query and cache"
+msgstr "使用dnsforwarder解析"
+
+msgid "Use AdGuardHome query and cache"
+msgstr "使用AdGuardHome解析去广告"
+
+msgid "Upsteam DNS Server"
+msgstr "上游 DNS 服务器(国内)"
+
+msgid "Upsteam IPV6 DNS Server"
+msgstr "上游 IPV6 DNS 服务器"
+
+msgid "Muitiple DNS server can saperate with ','"
+msgstr "支持多个上游DNS服务器，用','分隔（注意用英文逗号).请填写您最快的DNS服务器"
+
+msgid "Muitiple IPV6 DNS server can saperate with ','"
+msgstr "支持dnsforwarder解析多个上游IPV6 DNS服务器，用','分隔（注意用英文逗号).请填写您最快的DNS服务器"
+
+msgid "Enable dnsmasq killqqad"
+msgstr "启用dnsmasq去广告"
+
+msgid "dnsmasq killqqad"
+msgstr "dnsmasq去广告"
+
+msgid "AdGuardHome's login username/passwd: AdGuardHome, web console addr: IP:3001"
+msgstr "AdGuardHome 网页控制台地址：IP:3001 登录账号/密码：AdGuardHome"
+
+msgid "Filter AAAA"
+msgstr "忽略域名的IPv6地址"
+
+msgid "Dnsmasq rejects IPv6 parsing and optimizes domestic complex dual-stack network"
+msgstr "dnsmasq不返回ipv6解析结果，优化国内复杂双栈网络"
diff --git a/package/lean/luci-app-flowoffload/root/etc/config/flowoffload b/package/lean/luci-app-flowoffload/root/etc/config/flowoffload
new file mode 100644
index 0000000000..1a4f0b4647
--- /dev/null
+++ b/package/lean/luci-app-flowoffload/root/etc/config/flowoffload
@@ -0,0 +1,11 @@
+
+config flow
+	option flow_offloading '0'
+	option flow_offloading_hw '0'
+	option bbr '0'
+	option dns '0'
+	option dnscache_enable '1'
+	option dns_server '114.114.114.114,114.114.115.115,223.5.5.5,223.6.6.6,180.76.76.76,119.29.29.29,119.28.28.28,1.2.4.8,210.2.4.8'
+	option ipv6dns_server '2001:4860:4860::8888,2001:4860:4860::8844,2001:2001::1111,2001:2001::1001,2400:da00::6666,240C::6666,240C::6644'
+
+
diff --git a/package/lean/luci-app-flowoffload/root/etc/init.d/flowoffload b/package/lean/luci-app-flowoffload/root/etc/init.d/flowoffload
new file mode 100755
index 0000000000..11d5cb60ed
--- /dev/null
+++ b/package/lean/luci-app-flowoffload/root/etc/init.d/flowoffload
@@ -0,0 +1,285 @@
+#!/bin/sh /etc/rc.common
+# Copyright (c) 2011-2015 OpenWrt.org
+
+START=90
+
+USE_PROCD=1
+
+DNSMASQ_RESTART=N
+DNS_SERVER="114.114.114.114,114.114.115.115,223.5.5.5,223.6.6.6,180.76.76.76,119.29.29.29,119.28.28.28,1.2.4.8,210.2.4.8"
+IPV6DNS_SERVER="2001:4860:4860::8888,2001:4860:4860::8844,2001:2001::1111,2001:2001::1001,2400:da00::6666,240C::6666,240C::6644"
+lan_addr=$(uci get network.lan.ipaddr)
+
+start_pdnsd() {
+	DNS_SERVER=$(uci get flowoffload.@flow[0].dns_server 2>/dev/null)
+	cp -a /usr/sbin/pdnsd /usr/sbin/dnscache
+	[ -d /var/etc ] || mkdir -p /var/etc
+	
+	if [ ! -f /var/dnscache/pdnsd.cache ]; then
+		mkdir -p /var/dnscache
+		echo -ne "pd13\000\000\000\000" > /var/dnscache/pdnsd.cache
+		chown -R nobody.nogroup /var/dnscache
+	fi
+	
+	cat > /var/etc/dnscache.conf <<EOF
+global {
+    perm_cache=1024;        # dns缓存大小，单位KB，建议不要写的太大
+    cache_dir="/var/dnscache";     # 缓存文件的位置
+    pid_file = /var/run/dnscache.pid;
+    server_ip = 127.0.0.1;        # pdnsd监听的网卡，0.0.0.0是全部网卡
+    server_port=5333;           # pdnsd监听的端口，不要和别的服务冲突即可
+    status_ctl = on;
+    paranoid=on;                  # 二次请求模式，如果请求主DNS服务器返回的是垃圾地址，就向备用服务器请求
+    query_method=udp_only;      
+    neg_domain_pol = off;  
+    par_queries = 400;          # 最多同时请求数
+    min_ttl = 1h;               # DNS结果最短缓存时间
+    max_ttl = 1w;               # DNS结果最长缓存时间
+    timeout = 10;               # DNS请求超时时间，单位秒
+}
+
+server {  
+    label = "routine";         
+    ip = $DNS_SERVER;     # 这里为主要上级 dns 的 ip 地址，建议填写一个当地最快的DNS地址  
+    timeout = 5;              # DNS请求超时时间
+    reject = 74.125.127.102,  # 以下是脏IP，也就是DNS污染一般会返回的结果，如果收到如下DNS结果会触发二次请求（TCP协议一般不会碰到脏IP）
+        74.125.155.102,  
+        74.125.39.102,  
+        74.125.39.113,  
+        209.85.229.138,  
+        128.121.126.139,  
+        159.106.121.75,  
+        169.132.13.103,  
+        192.67.198.6,  
+        202.106.1.2,  
+        202.181.7.85,  
+        203.161.230.171,  
+        203.98.7.65,  
+        207.12.88.98,  
+        208.56.31.43,  
+        209.145.54.50,  
+        209.220.30.174,  
+        209.36.73.33,  
+        211.94.66.147,  
+        213.169.251.35,  
+        216.221.188.182,  
+        216.234.179.13,  
+        243.185.187.39,  
+        37.61.54.158,  
+        4.36.66.178,  
+        46.82.174.68,  
+        59.24.3.173,  
+        64.33.88.161,  
+        64.33.99.47,  
+        64.66.163.251,  
+        65.104.202.252,  
+        65.160.219.113,  
+        66.45.252.237,  
+        69.55.52.253,  
+        72.14.205.104,  
+        72.14.205.99,  
+        78.16.49.15,  
+        8.7.198.45,  
+        93.46.8.89,  
+        37.61.54.158,  
+        243.185.187.39,  
+        190.93.247.4,  
+        190.93.246.4,  
+        190.93.245.4,  
+        190.93.244.4,  
+        65.49.2.178,  
+        189.163.17.5,  
+        23.89.5.60,  
+        49.2.123.56,  
+        54.76.135.1,  
+        77.4.7.92,  
+        118.5.49.6,  
+        159.24.3.173,  
+        188.5.4.96,  
+        197.4.4.12,  
+        220.250.64.24,  
+        243.185.187.30,  
+        249.129.46.48,  
+        253.157.14.165;  
+    reject_policy = fail;  
+}
+
+server {  
+    label = "special";                  # 这个随便写  
+    ip = 117.50.10.10,52.80.52.52,119.29.29.29; # 这里为备用DNS服务器的 ip 地址  
+    port = 5353;                        # 推荐使用53以外的端口（DNS服务器必须支持） 
+    proxy_only = on;
+    timeout = 5;  
+}  
+
+source {
+	owner=localhost;
+//	serve_aliases=on;
+	file="/etc/hosts";
+}
+
+rr {
+	name=localhost;
+	reverse=on;
+	a=127.0.0.1;
+	owner=localhost;
+	soa=localhost,root.localhost,42,86400,900,86400,86400;
+}
+EOF
+
+	[ -d /var/sbin ] || mkdir -p /var/sbin
+	[ -f /var/sbin/dnscache ] || cp -a /usr/sbin/pdnsd /var/sbin/dnscache
+	/usr/sbin/dnscache -c /var/etc/dnscache.conf -d
+	echo "Start DNS Cache"
+}
+
+start_dnsforwarder() {
+	DNS_SERVER=$(uci get flowoffload.@flow[0].dns_server 2>/dev/null)
+	IPV6DNS_SERVER=$(uci get flowoffload.@flow[0].ipv6dns_server 2>/dev/null)
+	dnscache_enable=$(uci get flowoffload.@flow[0].dnscache_enable 2>/dev/null)
+	if [ $dnscache_enable = "2" ];  then
+		localserver=$(echo -e "127.0.0.1:5333")
+	elif [ $dnscache_enable = "3" ];  then
+		localserver=$(echo -e "127.0.0.1:5383")
+	fi
+
+	cp -a /usr/bin/dnsforwarder /usr/sbin/dnscache
+	sleep 1
+	DNSCACHE_CONF=/var/run/dnscache/dnscache.conf
+	PID_PATH=/var/run/dnscache
+	PID_FILE=dns.pid
+	mkdir -p $PID_PATH
+	pid=`ps | awk '$5 ~ /\[dnscache\]/ {print $1}'`
+
+	cat > /var/run/dnscache/dnscache.conf <<EOF
+LogOn false
+LogFileThresholdLength 102400
+LogFileFolder /var/run/dnscache
+UDPLocal $localserver
+UDPGroup $DNS_SERVER,$IPV6DNS_SERVER * on
+GroupFile
+BlockIP 243.185.187.39,46.82.174.68,37.61.54.158,93.46.8.89,59.24.3.173,203.98.7.65,8.7.198.45,78.16.49.15,159.106.121.75,69.63.187.12,31.13.76.8,31.13.64.49
+IPSubstituting
+BlockNegativeResponse false
+Hosts
+HostsUpdateInterval 18000
+HostsDownloadPath
+HostsScript
+HostsRetryInterval 30
+AppendHosts
+BlockIpv6WhenIpv4Exists false
+UseCache true
+CacheSize 1048576
+MemoryCache true
+CacheFile
+IgnoreTTL false
+OverrideTTL -1
+MultipleTTL 1
+ReloadCache false
+OverwriteCache false
+DisabledType
+DisabledDomain
+DisabledList
+DomainStatistic false
+DomainStatisticTempletFile
+StatisticUpdateInterval 29
+EOF
+	
+	dnscache -f $DNSCACHE_CONF -d
+	echo dnscache running pid is $pid
+
+}
+
+stop_dnscache() {
+	kill $(pidof AdGuardHome) >/dev/null 2>&1 || kill -9 $(ps | grep AdGuardHome | grep -v "grep" | awk '{print $1}') >/dev/null 2>&1
+	kill $(pidof dnscache) >/dev/null 2>&1 || kill -9 $(ps | grep dnscache | grep -v "grep" | awk '{print $1}') >/dev/null 2>&1
+	kill -9 $(ps | grep dnscache-while.sh | grep -v "grep" | awk '{print $1}') >/dev/null 2>&1
+	rm -rf /var/run/dnscache
+	rm -rf /var/dnscache
+	echo "Stop DNS Cache"
+
+}
+
+change_dns() {
+ 	uci delete dhcp.@dnsmasq[0].server >/dev/null 2>&1
+	uci add_list dhcp.@dnsmasq[0].server=127.0.0.1#5333
+	uci set dhcp.@dnsmasq[0].noresolv=1
+	uci commit dhcp
+
+}
+
+revert_dns() {
+	uci del_list dhcp.@dnsmasq[0].server=127.0.0.1#5333 >/dev/null 2>&1
+	uci set dhcp.@dnsmasq[0].resolvfile=/tmp/resolv.conf.auto
+	uci set dhcp.@dnsmasq[0].noresolv=0
+	uci commit dhcp
+
+}
+
+start_service(){
+	dns=$(uci get flowoffload.@flow[0].dns 2>/dev/null)
+	dnscache_enable=$(uci get flowoffload.@flow[0].dnscache_enable 2>/dev/null)
+	bbr=$(uci get flowoffload.@flow[0].bbr 2>/dev/null)
+	aaaa=$(uci get flowoffload.@flow[0].filter_aaaa 2>/dev/null)
+	if [ $aaaa -eq 1 ];  then
+		sed -i '/filter-aaaa/d' /etc/dnsmasq.conf
+		echo "filter-aaaa" >> /etc/dnsmasq.conf
+	else
+		sed -i '/filter-aaaa/d' /etc/dnsmasq.conf	
+	fi
+
+	if [ $dns -eq 1 ];  then
+		stop_dnscache
+		sleep 1
+		rm -f /var/log/dnscache.file
+		rm -f /etc/AdGuardHome/data/querylog.json*
+		if [ $dnscache_enable = "1" ];  then
+			start_pdnsd
+		elif [ $dnscache_enable = "2" ];  then
+			start_dnsforwarder
+		elif [ $dnscache_enable = "3" ];  then
+			AdGuardHome -c /etc/AdGuardHome/AdGuardHome.yaml -w /etc/AdGuardHome -h ${lan_addr} -p 3001 >/dev/null 2>&1 &
+		fi
+		change_dns
+		nohup /usr/share/dnscache/dnscache-while.sh > /var/log/dnscache.file 2>&1 &
+	else
+		stop_dnscache
+		revert_dns
+	fi
+
+	if [ $bbr -eq 1 ];  then
+		sysctl -w net.ipv4.tcp_congestion_control=bbr
+	else
+		sysctl -w net.ipv4.tcp_congestion_control=cubic
+	fi	
+
+	uci set firewall.@defaults[0].flow_offloading=$(uci get flowoffload.@flow[0].flow_offloading)
+	uci set firewall.@defaults[0].flow_offloading_hw=$(uci get flowoffload.@flow[0].flow_offloading_hw)
+	uci commit firewall
+	if [ "$DNSMASQ_RESTART" = N ]; then
+		/etc/init.d/dnsmasq restart && echo "DNSMASQ change"
+		/etc/init.d/firewall restart
+	fi
+}
+
+stop_service(){
+    dns=$(uci get firewall.@defaults[0].dns 2>/dev/null)
+	stop_dnscache
+    revert_dns
+    uci set firewall.@defaults[0].flow_offloading=$(uci get flowoffload.@flow[0].flow_offloading)
+    uci set firewall.@defaults[0].flow_offloading_hw=$(uci get flowoffload.@flow[0].flow_offloading_hw)
+    uci commit firewall
+	if [ "$DNSMASQ_RESTART" = N ]; then
+		/etc/init.d/dnsmasq restart && echo "DNSMASQ revert"
+		/etc/init.d/firewall restart
+	fi
+}
+
+restart(){
+    DNSMASQ_RESTART=Y
+    stop
+    start
+	/etc/init.d/dnsmasq restart && echo "DNSMASQ restart"
+	/etc/init.d/firewall restart
+}
+
diff --git a/package/lean/luci-app-flowoffload/root/etc/uci-defaults/flowoffload b/package/lean/luci-app-flowoffload/root/etc/uci-defaults/flowoffload
new file mode 100755
index 0000000000..246bccfec5
--- /dev/null
+++ b/package/lean/luci-app-flowoffload/root/etc/uci-defaults/flowoffload
@@ -0,0 +1,13 @@
+#!/bin/sh
+
+uci set firewall.@defaults[0].flow_offloading=1
+uci commit firewall
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@flowoffload[-1]
+	add ucitrack flowoffload
+	set ucitrack.@flowoffload[-1].init=flowoffload
+	commit ucitrack
+EOF
+
+exit 0
diff --git a/package/lean/luci-app-flowoffload/root/usr/share/dnscache/dnscache-while.sh b/package/lean/luci-app-flowoffload/root/usr/share/dnscache/dnscache-while.sh
new file mode 100755
index 0000000000..aabcbd1f48
--- /dev/null
+++ b/package/lean/luci-app-flowoffload/root/usr/share/dnscache/dnscache-while.sh
@@ -0,0 +1,50 @@
+#!/bin/sh
+
+sleeptime=60
+logfile="/var/log/dnscache.file"
+adg_logfile="/etc/AdGuardHome/data/querylog.json"
+dns_enable=$(uci get flowoffload.@flow[0].dns 2>/dev/null)
+dnscache_enable=$(uci get flowoffload.@flow[0].dnscache_enable 2>/dev/null)
+
+clean_log(){
+logrow=$(grep -c "" ${logfile})
+if [ $logrow -ge 500 ];then
+    cat /dev/null > ${logfile}
+    echo "$curtime Log条数超限，清空处理！" >> ${logfile}
+fi
+if [ $dnscache_enable = "3" ];then
+	adg_logrow=$(grep -c "" ${adg_logfile})
+	if [ $adg_logrow -ge 500 ];then
+		cat /dev/null > ${adg_logfile}
+		echo "$curtime Log条数超限，清空处理！" >> ${adg_logfile}
+	fi
+fi
+}
+
+while [ $dns_enable -eq 1 ];
+do
+curtime=`date "+%H:%M:%S"`
+echo "$curtime online! "
+if [ $dns_enable -eq 1 ]; then
+	if [ $dnscache_enable = "3" ];then
+		if ! pidof AdGuardHome>/dev/null;then
+			AdGuardHome -c /etc/AdGuardHome/AdGuardHome.yaml -w /etc/AdGuardHome >/dev/null 2>&1 &
+			echo "$curtime 重启服务！" >> ${logfile}
+		fi
+	else
+		if ! pidof dnscache>/dev/null; then
+			if [ $dnscache_enable = "1" ];then
+				/usr/sbin/dnscache -c /var/etc/dnscache.conf -d
+			elif [ $dnscache_enable = "2" ];then
+				dnscache -f /var/run/dnscache/dnscache.conf -d
+			fi
+			echo "$curtime 重启服务！" >> ${logfile}
+		fi
+	fi
+fi
+
+clean_log
+sleep ${sleeptime}
+continue
+done
+
diff --git a/package/lean/luci-app-frpc/Makefile b/package/lean/luci-app-frpc/Makefile
new file mode 100644
index 0000000000..911ad624d4
--- /dev/null
+++ b/package/lean/luci-app-frpc/Makefile
@@ -0,0 +1,19 @@
+#
+# Copyright (C) 2008-2014 The LuCI Team <luci@lists.subsignal.org>
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI for FRPC
+LUCI_DEPENDS:=+wget +frpc
+LUCI_PKGARCH:=all
+PKG_VERSION:=1.1
+PKG_RELEASE:=2
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
+
diff --git a/package/lean/luci-app-frpc/luasrc/controller/frp.lua b/package/lean/luci-app-frpc/luasrc/controller/frp.lua
new file mode 100644
index 0000000000..41df2c8cb2
--- /dev/null
+++ b/package/lean/luci-app-frpc/luasrc/controller/frp.lua
@@ -0,0 +1,18 @@
+module("luci.controller.frp", package.seeall)
+
+function index()
+	if not nixio.fs.access("/etc/config/frp") then
+		return
+	end
+
+	entry({"admin","services","frp"},cbi("frp/frp"), _("Frp Setting"),100).dependent=true
+	entry({"admin","services","frp","config"},cbi("frp/config")).leaf=true
+	entry({"admin","services","frp","status"},call("status")).leaf=true
+end
+
+function status()
+local e={}
+e.running=luci.sys.call("pidof frpc > /dev/null")==0
+luci.http.prepare_content("application/json")
+luci.http.write_json(e)
+end
diff --git a/package/lean/luci-app-frpc/luasrc/i18n/frp.zh-cn.lmo b/package/lean/luci-app-frpc/luasrc/i18n/frp.zh-cn.lmo
new file mode 100644
index 0000000000..f3b95348f8
Binary files /dev/null and b/package/lean/luci-app-frpc/luasrc/i18n/frp.zh-cn.lmo differ
diff --git a/package/lean/luci-app-frpc/luasrc/model/cbi/frp/config.lua b/package/lean/luci-app-frpc/luasrc/model/cbi/frp/config.lua
new file mode 100644
index 0000000000..e9499c8c97
--- /dev/null
+++ b/package/lean/luci-app-frpc/luasrc/model/cbi/frp/config.lua
@@ -0,0 +1,116 @@
+local n="frp"
+local i=require"luci.dispatcher"
+local o=require"luci.model.network".init()
+local m=require"nixio.fs"
+local a,t,e
+arg[1]=arg[1]or""
+a=Map(n,translate("Frp Domain Config"))
+a.redirect=i.build_url("admin","services","frp")
+t=a:section(NamedSection,arg[1],"frp",translate("Config Frp Protocol"))
+t.addremove=false
+t.dynamic=false
+t:tab("base",translate("Basic Settings"))
+t:tab("other",translate("Other Settings"))
+e=t:taboption("base",ListValue,"enable",translate("Enable State"))
+e.default="1"
+e.rmempty=false
+e:value("1",translate("Enable"))
+e:value("0",translate("Disable"))
+e=t:taboption("base",ListValue, "type", translate("Frp Protocol Type"))
+e:value("http",translate("HTTP"))
+e:value("https",translate("HTTPS"))
+e:value("tcp",translate("TCP"))
+e:value("udp",translate("UDP"))
+e:value("stcp",translate("STCP"))
+e = t:taboption("base",ListValue, "domain_type", translate("Domain Type"))
+e.default = "custom_domains"
+e:value("custom_domains",translate("Custom Domains"))
+e:value("subdomain",translate("SubDomain"))
+e:value("both_dtype",translate("Both the above two Domain types"))
+e:depends("type","http")
+e:depends("type","https")
+e = t:taboption("base",Value, "custom_domains", translate("Custom Domains"), translate("If SubDomain is used, Custom Domains couldn't be subdomain or wildcard domain of the maindomain(subdomain_host)."))
+e:depends("domain_type","custom_domains")
+e:depends("domain_type","both_dtype")
+e = t:taboption("base",Value, "subdomain", translate("SubDomain"), translate("subdomain_host must be configured in server: frps in advance."))
+e:depends("domain_type","subdomain")
+e:depends("domain_type","both_dtype")
+e = t:taboption("base",ListValue, "stcp_role", translate("STCP Role"))
+e.default = "server"
+e:value("server",translate("STCP Server"))
+e:value("vistor",translate("STCP Vistor"))
+e:depends("type","stcp")
+e = t:taboption("base",Value, "remote_port", translate("Remote Port"))
+e.datatype = "port"
+e:depends("type","tcp")
+e:depends("type","udp")
+e = t:taboption("other",Flag, "enable_plugin", translate("Use Plugin"),translate("If plugin is defined, local_ip and local_port is useless, plugin will handle connections got from frps."))
+e.default = "0"
+e:depends("type","tcp")
+e = t:taboption("base",Value, "local_ip", translate("Local Host Address"))
+luci.sys.net.ipv4_hints(function(x,d)
+e:value(x,"%s (%s)"%{x,d})
+end)
+e.datatype = "ip4addr"
+e:depends("type","udp")
+e:depends("type","http")
+e:depends("type","https")
+e:depends("enable_plugin",0)
+e = t:taboption("base",Value, "local_port", translate("Local Host Port"))
+e.datatype = "port"
+e:depends("type","udp")
+e:depends("type","http")
+e:depends("type","https")
+e:depends("enable_plugin",0)
+e = t:taboption("base",Value, "stcp_secretkey", translate("STCP Screct Key"))
+e.default = "abcdefg"
+e:depends("type","stcp")
+e = t:taboption("base",Value, "stcp_servername", translate("STCP Server Name"), translate("STCP Server Name is Service Remark Name of STCP Server"))
+e.default = "secret_tcp"
+e:depends("stcp_role","vistor")
+e = t:taboption("other",Flag, "enable_locations", translate("Enable URL routing"), translate("Frp support forward http requests to different backward web services by url routing."))
+e:depends("type","http")
+e = t:taboption("other",Value, "locations ", translate("URL routing"), translate("Http requests with url prefix /news will be forwarded to this service."))
+e.default="locations=/"
+e:depends("enable_locations",1)
+e = t:taboption("other",ListValue, "plugin", translate("Choose Plugin"))
+e:value("http_proxy",translate("http_proxy"))
+e:value("socks5",translate("socks5"))
+e:value("unix_domain_socket",translate("unix_domain_socket"))
+e:depends("enable_plugin",1)
+e = t:taboption("other",Flag, "enable_plugin_httpuserpw", translate("Proxy Authentication"),translate("Other PCs could access the Internet through frpc's network by using http_proxy plugin."))
+e.default = "0"
+e:depends("plugin","http_proxy")
+e = t:taboption("other",Value, "plugin_http_user", translate("HTTP Proxy UserName"))
+e.default = "abc"
+e:depends("enable_plugin_httpuserpw",1)
+e = t:taboption("other",Value, "plugin_http_passwd", translate("HTTP Proxy Password"))
+e.default = "abc"
+e:depends("enable_plugin_httpuserpw",1)
+e = t:taboption("other",Value, "plugin_unix_path", translate("Plugin Unix Sock Path"))
+e.default = "/var/run/docker.sock"
+e:depends("plugin","unix_domain_socket")
+e = t:taboption("other",Flag, "enable_http_auth", translate("Password protecting your web service"), translate("Http username and password are safety certification for http protocol."))
+e.default = "0"
+e:depends("type","http")
+e = t:taboption("other",Value, "http_user", translate("HTTP UserName"))
+e.default = "frp"
+e:depends("enable_http_auth",1)
+e = t:taboption("other",Value, "http_pwd", translate("HTTP PassWord"))
+e.default = "frp"
+e:depends("enable_http_auth",1)
+e = t:taboption("other",Flag, "enable_host_header_rewrite", translate("Rewriting the Host Header"), translate("Frp can rewrite http requests with a modified Host header."))
+e.default = "0"
+e:depends("type","http")
+e = t:taboption("other",Value, "host_header_rewrite", translate("Host Header"), translate("The Host header will be rewritten to match the hostname portion of the forwarding address."))
+e.default = "dev.yourdomain.com"
+e:depends("enable_host_header_rewrite",1)
+e = t:taboption("base",Flag, "use_encryption", translate("Use Encryption"), translate("Encrypted the communication between frpc and frps, will effectively prevent the traffic intercepted."))
+e.default = "1"
+e.rmempty = false
+e = t:taboption("base",Flag, "use_compression", translate("Use Compression"), translate("The contents will be compressed to speed up the traffic forwarding speed, but this will consume some additional cpu resources."))
+e.default = "1"
+e.rmempty = false
+e = t:taboption("base",Value, "remark", translate("Service Remark Name"), translate("<font color=\"red\">Please ensure the remark name is unique.</font>"))
+e.rmempty = false
+return a
diff --git a/package/lean/luci-app-frpc/luasrc/model/cbi/frp/frp.lua b/package/lean/luci-app-frpc/luasrc/model/cbi/frp/frp.lua
new file mode 100644
index 0000000000..531dd84f6c
--- /dev/null
+++ b/package/lean/luci-app-frpc/luasrc/model/cbi/frp/frp.lua
@@ -0,0 +1,160 @@
+local o=require"luci.dispatcher"
+local e=require("luci.model.ipkg")
+local s=require"nixio.fs"
+local e=luci.model.uci.cursor()
+local i="frp"
+local a,t,e
+local n={}
+a=Map(i,translate("Frp Setting"), translate("Frp is a fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet."))
+a:section(SimpleSection).template="frp/frp_status"
+t=a:section(NamedSection,"common","frp",translate("Global Setting"))
+t.anonymous=true
+t.addremove=false
+t:tab("base",translate("Basic Settings"))
+t:tab("other",translate("Other Settings"))
+t:tab("log",translate("Client Log"))
+e=t:taboption("base",Flag, "enabled", translate("Enabled"))
+e.rmempty=false
+e=t:taboption("base",Value, "server_addr", translate("Server"))
+e.optional=false
+e.rmempty=false
+e=t:taboption("base",Value, "server_port", translate("Port"))
+e.datatype = "port"
+e.optional=false
+e.rmempty=false
+e=t:taboption("base",Value, "token", translate("Token"), translate("Time duration between server of frpc and frps mustn't exceed 15 minutes."))
+e.optional=false
+e.password=true
+e.rmempty=false
+e=t:taboption("base",Value, "vhost_http_port", translate("Vhost HTTP Port"))
+e.datatype = "port"
+e.rmempty=false
+e=t:taboption("base",Value, "vhost_https_port", translate("Vhost HTTPS Port"))
+e.datatype = "port"
+e.rmempty=false
+e=t:taboption("other",Flag, "login_fail_exit", translate("Exit program when first login failed"),translate("decide if exit program when first login failed, otherwise continuous relogin to frps."))
+e.default = "1"
+e.rmempty=false
+e=t:taboption("other",Flag, "tcp_mux", translate("TCP Stream Multiplexing"), translate("Default is Ture. This feature in frps.ini and frpc.ini must be same."))
+e.default = "1"
+e.rmempty=false
+e=t:taboption("other",ListValue, "protocol", translate("Protocol Type"),translate("Frp support kcp protocol since v0.12.0"))
+e.default = "tcp"
+e:value("tcp",translate("TCP Protocol"))
+e:value("kcp",translate("KCP Protocol"))
+e=t:taboption("other",Flag, "enable_http_proxy", translate("Connect frps by HTTP PROXY"), translate("frpc can connect frps using HTTP PROXY"))
+e.default = "0"
+e.rmempty=false
+e:depends("protocol","tcp")
+e=t:taboption("other",Value, "http_proxy", translate("HTTP PROXY"))
+e.datatype="uinteger"
+e.placeholder="http://user:pwd@192.168.1.128:8080"
+e:depends("enable_http_proxy",1)
+e.optional=false
+e=t:taboption("other",Flag, "enable_cpool", translate("Enable Connection Pool"), translate("This feature is fit for a large number of short connections."))
+e.rmempty=false
+e=t:taboption("other",Value, "pool_count", translate("Connection Pool"), translate("Connections will be established in advance."))
+e.datatype="uinteger"
+e.default = "1"
+e:depends("enable_cpool",1)
+e.optional=false
+e=t:taboption("base",Value,"time",translate("Service registration interval"),translate("0 means disable this feature, unit: min"))
+e.datatype="range(0,59)"
+e.default=30
+e.rmempty=false
+e=t:taboption("other",ListValue, "log_level", translate("Log Level"))
+e.default = "warn"
+e:value("trace",translate("Trace"))
+e:value("debug",translate("Debug"))
+e:value("info",translate("Info"))
+e:value("warn",translate("Warning"))
+e:value("error",translate("Error"))
+e=t:taboption("other",Value, "log_max_days", translate("Log Keepd Max Days"))
+e.datatype = "uinteger"
+e.default = "3"
+e.rmempty=false
+e.optional=false
+e=t:taboption("log",TextValue,"log")
+e.rows=26
+e.wrap="off"
+e.readonly=true
+e.cfgvalue=function(t,t)
+return s.readfile("/var/etc/frp/frpc.log")or""
+end
+e.write=function(e,e,e)
+end
+t=a:section(TypedSection,"proxy",translate("Services List"))
+t.anonymous=true
+t.addremove=true
+t.template="cbi/tblsection"
+t.extedit=o.build_url("admin","services","frp","config","%s")
+function t.create(e,t)
+new=TypedSection.create(e,t)
+luci.http.redirect(e.extedit:format(new))
+end
+function t.remove(e,t)
+e.map.proceed=true
+e.map:del(t)
+luci.http.redirect(o.build_url("admin","services","frp"))
+end
+local o=""
+e=t:option(DummyValue,"remark",translate("Service Remark Name"))
+e.width="10%"
+e=t:option(DummyValue,"type",translate("Frp Protocol Type"))
+e.width="10%"
+e=t:option(DummyValue,"custom_domains",translate("Domain/Subdomain"))
+e.width="20%"
+e.cfgvalue=function(t,n)
+local t=a.uci:get(i,n,"domain_type")or""
+local m=a.uci:get(i,n,"type")or""
+if t=="custom_domains" then
+local b=a.uci:get(i,n,"custom_domains")or"" return b end
+if t=="subdomain" then
+local b=a.uci:get(i,n,"subdomain")or"" return b end
+if t=="both_dtype" then
+local b=a.uci:get(i,n,"custom_domains")or""
+local c=a.uci:get(i,n,"subdomain")or""
+b="%s/%s"%{b,c} return b end
+if m=="tcp" or m=="udp" then
+local b=a.uci:get(i,"common","server_addr")or"" return b end
+end
+e=t:option(DummyValue,"remote_port",translate("Remote Port"))
+e.width="10%"
+e.cfgvalue=function(t,b)
+local t=a.uci:get(i,b,"type")or""
+if t==""or b==""then return""end
+if t=="http" then
+local b=a.uci:get(i,"common","vhost_http_port")or"" return b end
+if t=="https" then
+local b=a.uci:get(i,"common","vhost_https_port")or"" return b end
+if t=="tcp" or t=="udp" then
+local b=a.uci:get(i,b,"remote_port")or"" return b end
+end
+e=t:option(DummyValue,"local_ip",translate("Local Host Address"))
+e.width="15%"
+e=t:option(DummyValue,"local_port",translate("Local Host Port"))
+e.width="10%"
+e=t:option(DummyValue,"use_encryption",translate("Use Encryption"))
+e.width="15%"
+e.cfgvalue=function(t,n)
+local t=a.uci:get(i,n,"use_encryption")or""
+local b
+if t==""or b==""then return""end
+if t=="1" then b="ON"
+else b="OFF" end
+return b
+end
+e=t:option(DummyValue,"use_compression",translate("Use Compression"))
+e.width="15%"
+e.cfgvalue=function(t,n)
+local t=a.uci:get(i,n,"use_compression")or""
+local b
+if t==""or b==""then return""end
+if t=="1" then b="ON"
+else b="OFF" end
+return b
+end
+e=t:option(Flag,"enable",translate("Enable State"))
+e.width="10%"
+e.rmempty=false
+return a
diff --git a/package/lean/luci-app-frpc/luasrc/view/frp/frp_status.htm b/package/lean/luci-app-frpc/luasrc/view/frp/frp_status.htm
new file mode 100644
index 0000000000..a344671726
--- /dev/null
+++ b/package/lean/luci-app-frpc/luasrc/view/frp/frp_status.htm
@@ -0,0 +1,23 @@
+<script type="text/javascript">//<![CDATA[
+XHR.poll(5, '<%=url([[admin]], [[services]], [[frp]], [[status]])%>', null,
+	function(x, data) {
+		var tb = document.getElementById('frp_status');
+		if (data && tb) {
+			if (data.running) {
+				var links = '<em><b><font color=green><%:The Frp service is running.%></font></b></em>';
+				tb.innerHTML = links;
+			} else {
+				tb.innerHTML = '<em><b><font color=red><%:The Frp service is not running.%></font></b></em>';
+			}
+		}
+	}
+);
+//]]>
+</script>
+<style>.mar-10 {margin-left: 50px; margin-right: 10px;}</style>
+<fieldset class="cbi-section">
+	<legend><%:Frp Status%></legend>
+	<p id="frp_status">
+		<em><%:Collecting data...%></em>
+	</p>
+</fieldset>
diff --git a/package/lean/luci-app-frpc/root/etc/config/frp b/package/lean/luci-app-frpc/root/etc/config/frp
new file mode 100644
index 0000000000..736e571f92
--- /dev/null
+++ b/package/lean/luci-app-frpc/root/etc/config/frp
@@ -0,0 +1,16 @@
+
+config frp 'common'
+	option log_max_days '3'
+	option login_fail_exit '0'
+	option enable_cpool '0'
+	option time '40'
+	option tcp_mux '1'
+	option enabled '0'
+	option vhost_http_port '80'
+	option vhost_https_port '443'	
+	option server_addr 'yourdomain.com'
+	option server_port '7000'
+	option token '1234567'
+	option log_level 'info'
+	option enable_http_proxy '0'
+	option protocol 'tcp'
diff --git a/package/lean/luci-app-frpc/root/etc/init.d/frp b/package/lean/luci-app-frpc/root/etc/init.d/frp
new file mode 100755
index 0000000000..66f7881dcc
--- /dev/null
+++ b/package/lean/luci-app-frpc/root/etc/init.d/frp
@@ -0,0 +1,214 @@
+#!/bin/sh /etc/rc.common
+#Author: monokoo <realstones2012@gmail.com>
+#Thanks to FW867's help
+
+START=99
+SERVICE_WRITE_PID=1
+SERVICE_DAEMONIZE=1
+
+LOGFILE="/var/etc/frp/frpc.log"
+
+echo_date(){
+	local log=$1
+	echo $(date +%Y/%m/%d\ %X): "$log" >> $LOGFILE
+}
+
+Reduce_Log(){
+	local log=$1
+	[ ! -f "$log" ] && return
+	local sc=200
+	[ -n "$2" ] && sc=$2
+	local count=$(grep -c "" $log)
+	if [ $count -gt $sc ];then
+		let count=count-$sc
+		sed -i "1,$count d" $log
+	fi
+}
+
+conf_proxy_add() {
+
+	local cfg="$1"
+	local tmpconf="$2"
+	local enable type domain_type custom_domains remote_port local_ip local_port enable_http_auth enable_host_header_rewrite host_header_rewrite
+	local subdomain use_encryption use_compression http_user http_pwd remark locations
+	local enable_plugin plugin plugin_http_user plugin_http_passwd plugin_unix_path stcp_role stcp_secretkey stcp_servername
+	
+	config_get_bool enable "$cfg" enable 1
+	[ "$enable" -gt 0 ] || return 1
+	
+	config_get type "$cfg" type
+	config_get custom_domains "$cfg" custom_domains
+	config_get subdomain "$cfg" subdomain
+	config_get remote_port "$cfg" remote_port
+	config_get local_ip "$cfg" local_ip
+	config_get local_port "$cfg" local_port
+	config_get locations "$cfg" locations
+	config_get host_header_rewrite "$cfg" host_header_rewrite
+	config_get http_user "$cfg" http_user
+	config_get http_pwd "$cfg" http_pwd
+	config_get remark "$cfg" remark
+	config_get plugin "$cfg" plugin
+	config_get plugin_http_user "$cfg" plugin_http_user
+	config_get plugin_http_passwd "$cfg" plugin_http_passwd
+	config_get plugin_unix_path "$cfg" plugin_unix_path
+	config_get stcp_role "$cfg" stcp_role
+	config_get stcp_secretkey "$cfg" stcp_secretkey
+	config_get stcp_servername "$cfg" stcp_servername
+
+
+	[ -n "$remark" ] && [ -n "$type" ] || return 1
+	
+	echo "" >>$tmpconf
+	echo "[$remark]" >>$tmpconf
+	echo "type=$type" >>$tmpconf
+	[ -n "$custom_domains" ] && echo "custom_domains=$custom_domains" >>$tmpconf
+	[ -n "$subdomain" ] && echo "subdomain=$subdomain" >>$tmpconf
+	[ -n "$remote_port" ] && echo "remote_port=$remote_port" >>$tmpconf
+	[ -z "$stcp_role" ] && [ -n "$local_ip" ] && echo "local_ip=$local_ip" >>$tmpconf
+	[ -z "$stcp_role" ] && [ -n "$local_port" ] && echo "local_port=$local_port" >>$tmpconf
+	[ -n "$locations" ] && echo "locations=$locations" >>$tmpconf
+	[ -n "$http_user" -a -n "$http_pwd" ] && {
+		echo "http_user=$http_user" >>$tmpconf
+		echo "http_pwd=$http_pwd" >>$tmpconf
+	}
+	[ -n "$host_header_rewrite" ] && echo "host_header_rewrite=$host_header_rewrite" >>$tmpconf
+	[ -n "$plugin" ] && echo "plugin=$plugin" >>$tmpconf
+	[ -n "$plugin_http_user" -a -n "$plugin_http_passwd" ] && {
+		echo "plugin_http_user=$plugin_http_user" >>$tmpconf
+		echo "plugin_http_passwd=$plugin_http_passwd" >>$tmpconf
+	}
+	[ -n "$plugin_unix_path" ] && echo "plugin_unix_path=$plugin_unix_path" >>$tmpconf
+	
+	[ -n "$stcp_role" ] && {
+		if [ "$stcp_role" == "vistor" ]; then
+			echo "role=$stcp_role" >>$tmpconf
+			[ -n "$local_ip" ] && echo "bind_addr=$local_ip" >>$tmpconf
+			[ -n "$local_port" ] && echo "bind_port=$local_port" >>$tmpconf
+			[ -n "$stcp_servername" ] && echo "server_name=$stcp_servername" >>$tmpconf || return 1
+		else
+			[ -n "$local_ip" ] && echo "local_ip=$local_ip" >>$tmpconf
+			[ -n "$local_port" ] && echo "local_port=$local_port" >>$tmpconf
+		fi
+		[ -n "$stcp_secretkey" ] && echo "sk=$stcp_secretkey" >>$tmpconf || return 1
+	}
+	
+	
+
+	frp_write_bool use_encryption $cfg 1
+	frp_write_bool use_compression $cfg 1
+
+}
+
+frp_write_bool() {
+	local opt="$1"
+	local config="$2"
+	local def="$3"
+	local val
+
+	config_get_bool val $config "$opt" "$def"
+	if [ "$val" -eq 0 ]; then
+		echo "${opt}=false" >> $tmpconf
+	else
+		echo "${opt}=true" >> $tmpconf
+	fi
+}
+
+frp_add_cru(){
+time=$1
+if [ ! -f "/etc/crontabs/root" ] || [ -z "$(cat /etc/crontabs/root | grep frp)" ]; then
+  sed -i '/frp/d' /etc/crontabs/root >/dev/null 2>&1
+  echo "*/$time * * * * /etc/init.d/frp restart" >> /etc/crontabs/root 
+fi
+
+}
+
+frp_del_cru(){
+if [ ! -f "/etc/crontabs/root" ] || [ -n "$(cat /etc/crontabs/root | grep frp)" ]; then
+  sed -i '/frp/d' /etc/crontabs/root >/dev/null 2>&1
+fi
+}
+
+download_binary(){
+	echo_date "开始下载frpc二进制文件..."
+	/usr/bin/wget --no-check-certificate --timeout=10 --tries=1 -o $LOGFILE https://github.com/fatedier/frp/releases/download/v0.13.0/frp_0.13.0_linux_arm.tar.gz -O /tmp/frp_0.13.0_linux_arm.tar.gz
+	[ ! -s "/tmp/frp_0.13.0_linux_arm.tar.gz" ] && /usr/bin/wget -q --no-check-certificate --timeout=10 --tries=1 https://any.mokoo.xyz/app/frp_0.13.0_linux_arm.tar.gz -O /tmp/frp_0.13.0_linux_arm.tar.gz
+	[ -f "/tmp/frp_0.13.0_linux_arm.tar.gz" ] && tar -xf /tmp/frp_0.13.0_linux_arm.tar.gz -C /tmp && \
+		mv /tmp/frp_0.13.0_linux_arm/frpc /usr/bin/frpc
+	rm -rf /tmp/frp_0.13.0_linux_arm*
+	if [ -f "/usr/bin/frpc" ]; then
+		chmod +x /usr/bin/frpc && echo_date "成功下载frpc二进制文件"
+	else
+		echo_date "下载frpc二进制文件失败，请重试！"
+	fi
+}
+
+boot() {
+	sleep 10s
+	start
+}
+
+start() {
+
+	config_load "frp"
+	local enabled server_addr server_port time privilege_token tcp_mux enable_cpool 
+	local pool_count log_level log_max_days login_fail_exit http_proxy protocol
+
+	config_get_bool enabled common enabled 1
+
+	[ "$enabled" -gt 0 ] || return 1
+
+	config_get server_addr common server_addr
+	config_get server_port common server_port
+	config_get token common token
+	config_get enable_cpool common enable_cpool
+	config_get pool_count common pool_count
+	config_get log_level common log_level
+	config_get log_max_days common log_max_days
+	config_get http_proxy common http_proxy
+	config_get protocol common protocol
+	config_get time common time
+
+	mkdir -p /var/etc/frp
+	[ ! -f "$LOGFILE" ] && touch $LOGFILE
+	
+	[ ! -f "/usr/bin/frpc" ] && download_binary
+	[ ! -f "/usr/bin/frpc" ] && logger -t Frp 'Download frpc failed, please retry.' && exit 0
+	
+	local tmpconf="/var/etc/frp/frpc.conf"
+
+	echo "[common]" >$tmpconf
+	echo "server_addr=${server_addr}" >>$tmpconf
+	echo "server_port=${server_port}" >>$tmpconf
+	echo "token=${token}" >>$tmpconf
+	echo "log_level=${log_level}" >>$tmpconf
+	echo "log_max_days=${log_max_days}" >>$tmpconf
+	echo "protocol=${protocol}" >>$tmpconf
+	echo "log_file=$LOGFILE" >>$tmpconf
+	[ -n "$http_proxy" ] && echo "http_proxy=$http_proxy" >>$tmpconf
+	[ -n "$pool_count" ] && echo "pool_count=$pool_count" >>$tmpconf
+
+	config_load "frp"
+	frp_write_bool tcp_mux common 1
+	frp_write_bool login_fail_exit common 1
+	config_foreach conf_proxy_add proxy "$tmpconf"
+
+	[ "$(cat "$tmpconf" | grep -c "type=")" -gt 0 ] || (echo_date "frp服务启动失败，请首先添加服务列表！" && exit 0)
+	logger -t FRPC 'Starting frp service'
+	SERVICE_DAEMONIZE=1 \
+		service_start /usr/bin/frpc -c $tmpconf
+
+	[ "$time" -gt 0 ] && frp_add_cru $time
+	[ -z "$(pgrep /usr/bin/frpc)" ] && echo_date "frp服务启动失败，请检查服务端 “TCP多路复用(tcp_mux)”设置，确保与客户端完全一致！"
+
+	return 0
+}
+
+stop() {
+	frp_del_cru
+	if [ -n "`pidof frpc`" ]; then
+		logger -t FRPC 'Shutting down frp service'
+		service_stop /usr/bin/frpc
+		Reduce_Log $LOGFILE
+	fi
+	return 0
+}
diff --git a/package/lean/luci-app-frpc/root/etc/uci-defaults/luci-frp b/package/lean/luci-app-frpc/root/etc/uci-defaults/luci-frp
new file mode 100755
index 0000000000..46016e1c5e
--- /dev/null
+++ b/package/lean/luci-app-frpc/root/etc/uci-defaults/luci-frp
@@ -0,0 +1,11 @@
+#!/bin/sh
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@frp[-1]
+	add ucitrack frp
+	set ucitrack.@frp[-1].init=frp
+	commit ucitrack
+EOF
+
+rm -f /tmp/luci-indexcache
+exit 0
diff --git a/package/lean/luci-app-guest-wifi/Makefile b/package/lean/luci-app-guest-wifi/Makefile
new file mode 100644
index 0000000000..814bac85d9
--- /dev/null
+++ b/package/lean/luci-app-guest-wifi/Makefile
@@ -0,0 +1,17 @@
+#
+# Copyright (C) 2018 By-Ameng Openwrt.org
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=luci-app-guest-wifi
+LUCI_DEPENDS:=
+LUCI_PKGARCH:=all
+PKG_VERSION:=1.0
+PKG_RELEASE:=1
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
diff --git a/package/lean/luci-app-guest-wifi/luasrc/controller/guest-wifi.lua b/package/lean/luci-app-guest-wifi/luasrc/controller/guest-wifi.lua
new file mode 100644
index 0000000000..887512f6a6
--- /dev/null
+++ b/package/lean/luci-app-guest-wifi/luasrc/controller/guest-wifi.lua
@@ -0,0 +1,14 @@
+module("luci.controller.guest-wifi", package.seeall)
+
+function index()
+	require("luci.i18n")
+	luci.i18n.loadc("guest-wifi")
+	if not nixio.fs.access("/etc/config/guest-wifi") then
+		return
+	end
+	
+	local page = entry({"admin", "network", "guest-wifi"}, cbi("guest-wifi"), translate("Guest-wifi"), 19)
+	page.i18n = "guest-wifi"
+	page.dependent = true
+	
+end
diff --git a/package/lean/luci-app-guest-wifi/luasrc/model/cbi/guest-wifi.lua b/package/lean/luci-app-guest-wifi/luasrc/model/cbi/guest-wifi.lua
new file mode 100644
index 0000000000..c498af3ce0
--- /dev/null
+++ b/package/lean/luci-app-guest-wifi/luasrc/model/cbi/guest-wifi.lua
@@ -0,0 +1,66 @@
+
+require("luci.tools.webadmin")
+
+m = Map("guest-wifi", translate("Guest-wifi"))
+
+s = m:section(TypedSection, "guest-wifi", translate("Config"), translate("You can set guest wifi here. The wifi will be disconnected when enabling/disabling. When modifying the password, first disable the guest wifi, and then do the modification, save and apply. Finally check both Enable and Create, save and apply."))
+s.anonymous = true 
+s.addremove = false
+
+enable = s:option(Flag, "enable", translate("Enable"), translate("Enable or disable guest wifi"))
+enable.default = false
+enable.optional = false
+enable.rmempty = false
+
+create = s:option(Flag, "create", translate("Create/Remove"), translate("Check to create guest wifi when enabled, or check to remove guest wifi when disabled."))
+create.default = false
+create.optional = false
+create.rmempty = false
+
+device = s:option(ListValue, "device", translate("Define device"), translate("Define device of guest wifi"))
+device:value("radio0", "radio0")
+device:value("radio1", "radio1")
+device:value("radio2", "radio2")
+device.default = "radio0"
+
+wifi_name = s:option(Value, "wifi_name", translate("Wifi name"), translate("Define the name of guest wifi"))
+wifi_name.default = "Guest-WiFi"
+wifi_name.rmempty = true
+
+interface_name = s:option(Value, "interface_name", translate("Interface name"), translate("Define the interface name of guest wifi"))
+interface_name.default = "guest"
+interface_name.rmempty = true
+
+interface_ip = s:option(Value, "interface_ip", translate("Interface IP address"), translate("Define IP address for guest wifi"))
+interface_ip.datatype = "ip4addr"
+interface_ip.default ="192.168.4.1"
+
+encryption = s:option(Value, "encryption", translate("Encryption"), translate("Define encryption of guest wifi"))
+encryption:value("psk", "WPA-PSK")
+encryption:value("psk2", "WPA2-PSK")
+encryption:value("none", "No Encryption")
+encryption.default = "psk2"
+encryption.widget = "select"
+
+passwd = s:option(Value, "passwd", translate("Password"), translate("Define the password of guest wifi"))
+passwd.password = true
+passwd.default = "guestnetwork"
+
+isolate = s:option(ListValue, "isolate", translate("Isolation"), translate("Enalbe or disable isolation"))
+isolate:value("1", translate("YES"))
+isolate:value("0", translate("NO"))
+
+start = s:option(Value, "start", translate("Start address"), translate("Lowest leased address as offset from the network address"))
+start.default = "50"
+start.rmempty = true
+
+limit = s:option(Value, "limit", translate("Client Limit"), translate("Maximum number of leased addresses"))
+limit.default = "200"
+limit.rmempty = true
+
+leasetime = s:option(Value, "leasetime", translate("DHCP lease time"), translate("Expiry time of leased addresses, minimum is 2 minutes (2m)"))
+leasetime.default = "1h"
+leasetime.rmempty = true
+
+return m
+
diff --git a/package/lean/luci-app-guest-wifi/po/zh-cn/guest-wifi.po b/package/lean/luci-app-guest-wifi/po/zh-cn/guest-wifi.po
new file mode 100644
index 0000000000..d5971e7ab1
--- /dev/null
+++ b/package/lean/luci-app-guest-wifi/po/zh-cn/guest-wifi.po
@@ -0,0 +1,90 @@
+msgid "guest-wifi"
+msgstr "访客网络"
+
+msgid "Guest-wifi"
+msgstr "访客网络"
+
+msgid "Config"
+msgstr "设置"
+
+msgid "You can set guest wifi here. The wifi will be disconnected when enabling/disabling. When modifying the password, first disable the guest wifi, and then do the modification, save and apply. Finally check both Enable and Create, save and apply."
+msgstr "在此可以设置访客网络。启用/禁用访客网络时wifi会断开。当修改访客名称密码时，先禁用访客网络并保存应用，然后修改后保存应用，最后同时勾选启用和创建并保存应用。"
+
+msgid "Enable"
+msgstr "启用"
+
+msgid "Enable or disable guest wifi"
+msgstr "启用/禁用访客网络"
+
+msgid "Create/Remove"
+msgstr"创建/删除"
+
+msgid "Check to create guest wifi when enabled, or check to remove guest wifi when disabled."
+msgstr "与启用同时勾选，可创建和启用访客网络；启用不勾选时勾选，可删除访客网络。"
+
+msgid "Define device"
+msgstr "指定设备"
+
+msgid "Define device of guest wifi"
+msgstr "指定用于访客网络的设备"
+
+msgid "Wifi name"
+msgstr "无线名称"
+
+msgid "Define the name of guest wifi"
+msgstr "指定访客网络的无线名称"
+
+msgid "Interface name"
+msgstr "接口名称"
+
+msgid "Define the interface name of guest wifi"
+msgstr "设置访客网络的接口名称"
+
+msgid "Interface IP address"
+msgstr "接口IP地址"
+
+msgid "Define IP address for guest wifi"
+msgstr "指定访客网络的IP地址(不能与其他LAN的IP地址段相同)"
+
+msgid "Encryption"
+msgstr "加密"
+
+msgid "Define encryption of guest wifi"
+msgstr "设置访客网络的无线加密方式"
+
+msgid "Password"
+msgstr "密码"
+
+msgid "Define the password of guest wifi"
+msgstr "设备访客网络的无线密码"
+
+msgid "Isolation"
+msgstr "隔离"
+
+msgid "Enalbe or disable isolation"
+msgstr "开启或关闭与其它LAN网段的隔离"
+
+msgid "Start address"
+msgstr "起始地址"
+
+msgid "Lowest leased address as offset from the network address"
+msgstr "网络地址分配的起始地址"
+
+msgid "Client Limit"
+msgstr "客户端最大数目"
+
+msgid "Maximum number of leased addresses"
+msgstr "最大地址分配数量"
+
+msgid "DHCP lease time"
+msgstr "DHCP地址租用时间"
+
+msgid "Expiry time of leased addresses, minimum is 2 minutes (2m)"
+msgstr "租用地址的到期时间，最短2分钟(2m)"
+
+msgid "YES"
+msgstr "是"
+
+msgid "NO"
+msgstr "否"
+
diff --git a/package/lean/luci-app-guest-wifi/root/etc/config/guest-wifi b/package/lean/luci-app-guest-wifi/root/etc/config/guest-wifi
new file mode 100644
index 0000000000..d43f5f5b3c
--- /dev/null
+++ b/package/lean/luci-app-guest-wifi/root/etc/config/guest-wifi
@@ -0,0 +1,14 @@
+
+config guest-wifi
+	option enable '0'
+	option wifi_name 'Guest-WiFi'
+	option interface_name 'guest'
+	option encryption 'psk2'
+	option passwd 'guestnetwork'
+	option interface_ip '192.168.4.1'
+	option isolate '1'
+	option start '50'
+	option limit '200'
+	option leasetime '1h'
+	option device 'radio0'
+	option create '0'
diff --git a/package/lean/luci-app-guest-wifi/root/etc/init.d/guest-wifi b/package/lean/luci-app-guest-wifi/root/etc/init.d/guest-wifi
new file mode 100755
index 0000000000..18ad8b164b
--- /dev/null
+++ b/package/lean/luci-app-guest-wifi/root/etc/init.d/guest-wifi
@@ -0,0 +1,213 @@
+#!/bin/sh /etc/rc.common
+# Copyright (C) 2015
+# Must keep author's information if you use this file.
+
+START=50
+
+HISTORY_DIR="/etc/config/guestwifi"
+[ -e /etc/config/guestwifi ]||mkdir -p /etc/config/guestwifi
+
+enabled=$(uci get guest-wifi.@guest-wifi[0].enable)
+wifi_name=$(uci get guest-wifi.@guest-wifi[0].wifi_name)
+interface_name=$(uci get guest-wifi.@guest-wifi[0].interface_name)
+encryption=$(uci get guest-wifi.@guest-wifi[0].encryption)
+passwd=$(uci get guest-wifi.@guest-wifi[0].passwd)
+interface_ip=$(uci get guest-wifi.@guest-wifi[0].interface_ip)
+isolate=$(uci get guest-wifi.@guest-wifi[0].isolate)
+start=$(uci get guest-wifi.@guest-wifi[0].start)
+limit=$(uci get guest-wifi.@guest-wifi[0].limit)
+leasetime=$(uci get guest-wifi.@guest-wifi[0].leasetime)
+device=$(uci get guest-wifi.@guest-wifi[0].device)
+create=$(uci get guest-wifi.@guest-wifi[0].create)
+
+
+start() {
+	[ $enabled = 1 ] && {
+		[ $create = 1 ] && {
+			[ -f /etc/config/guestwifi/guest_del ] || echo "#! /bin/sh" > ${HISTORY_DIR}/guest_del
+			chmod 0755 ${HISTORY_DIR}/guest_del
+			add_interface
+			add_ssid
+			mod_dhcp
+			mod_fw
+			/etc/init.d/network restart
+		}
+		uci set guest-wifi.@guest-wifi[0].create='0'
+		uci commit guest-wifi
+		uci del wireless.$interface_name.disabled
+		uci commit wireless
+		wifi
+	}
+}
+
+
+stop() {
+	[ $enabled = 0 ] && {
+		[ $create = 1 ] && {
+			${HISTORY_DIR}/guest_del
+			rule_c=`uci show firewall |grep "Hide My LAN for $wifi_name"|grep -o "[0-9]*[0-9]"`
+			uci del firewall.@rule[$rule_c]
+			uci commit firewall
+			rule_b=`uci show firewall |grep "Allow DHCP request for $wifi_name"|grep -o "[0-9]*[0-9]"`
+			uci del firewall.@rule[$rule_b]
+			uci commit firewall
+			rule_a=`uci show firewall |grep "Allow DNS Queries for $wifi_name"|grep -o "[0-9]*[0-9]"`
+			uci del firewall.@rule[$rule_a]
+			uci commit firewall
+			/etc/config/guestwifi/guest_del
+			rm -rf /etc/config/guestwifi/guest_del
+			/etc/init.d/network restart
+		}
+		uci set guest-wifi.@guest-wifi[0].create='0'
+		uci commit guest-wifi
+		uci set wireless.$interface_name.disabled='1'
+		uci commit wireless
+		wifi
+	}
+}
+
+restart() {
+	stop
+	sleep 2
+	start		
+}
+
+add_interface() {
+	name=`uci show network |grep "$interface_ip"`
+	if [ $? = 1 ]; then
+		uci set network.$interface_name=interface
+		uci set network.$interface_name.proto='static'
+		uci set network.$interface_name.ipaddr="$interface_ip"
+		uci set network.$interface_name.netmask='255.255.255.0'
+		echo "uci del network.$interface_name" >> ${HISTORY_DIR}/guest_del
+		echo "uci commit network" >> ${HISTORY_DIR}/guest_del
+		uci commit network
+	fi
+}
+
+add_ssid() {
+	check_name=`uci show wireless |grep "$wifi_name"`
+	if [ $? = 1 ]; then
+		uci set wireless.$interface_name=wifi-iface
+		uci set wireless.$interface_name.device="$device"
+		uci set wireless.$interface_name.mode='ap'
+		uci set wireless.$interface_name.network="$interface_name"
+		uci set wireless.$interface_name.ssid="$wifi_name"
+		uci set wireless.$interface_name.encryption="$encryption"
+		uci set wireless.$interface_name.isolate="$isolate"
+		if [ "$encryption" != "none" ]; then
+			uci set wireless.$interface_name.key="$passwd"
+		fi
+		echo "uci del wireless.$interface_name" >> ${HISTORY_DIR}/guest_del
+		echo "uci commit wireless" >> ${HISTORY_DIR}/guest_del
+		uci commit wireless
+	fi
+}
+
+mod_dhcp() {
+	check_dhcp=`uci show dhcp |grep "$interface_name=dhcp"`
+	if [ $? = 1 ]; then
+		uci set dhcp.$interface_name=dhcp
+		uci set dhcp.$interface_name.interface="$interface_name"
+		uci set dhcp.$interface_name.start="$start"
+		uci set dhcp.$interface_name.limit="$limit"
+		uci set dhcp.$interface_name.leasetime="$leasetime"
+		echo "uci del dhcp.$interface_name" >> ${HISTORY_DIR}/guest_del
+		echo "uci commit dhcp" >> ${HISTORY_DIR}/guest_del
+		uci commit dhcp
+	fi
+}
+
+mod_fw() {
+	num_a=`uci show firewall |grep '=zone' |wc -l`
+	num_b=`uci show firewall |grep '=forwarding' |wc -l`
+
+	check_zone=`uci show firewall |grep "name=\'$interface_name\'"`
+	if [ $? = 1 ]; then
+		uci add firewall zone
+		echo "uci del firewall.@zone[$num_a]" >> ${HISTORY_DIR}/guest_del
+		echo "uci commit firewall" >> ${HISTORY_DIR}/guest_del
+		uci set firewall.@zone[$num_a]=zone
+		uci set firewall.@zone[$num_a].name="$interface_name"
+		uci set firewall.@zone[$num_a].network="$interface_name"
+		uci set firewall.@zone[$num_a].forward='REJECT'
+		uci set firewall.@zone[$num_a].output='ACCEPT'
+		uci set firewall.@zone[$num_a].input='REJECT'
+		uci commit firewall
+	fi
+
+	check_forward=`uci show firewall |grep "forwarding\[.*\].src=\'"$interface_name\'""`
+	if [ $? = 1 ]; then
+		uci add firewall forwarding
+		echo "uci del firewall.@forwarding[$num_b]" >> ${HISTORY_DIR}/guest_del
+		echo "uci commit firewall" >> ${HISTORY_DIR}/guest_del
+		uci set firewall.@forwarding[$num_b]=forwarding
+		uci set firewall.@forwarding[$num_b].src="$interface_name"
+		uci set firewall.@forwarding[$num_b].dest='wan'
+		uci commit firewall
+	fi
+
+	check_DNS=`uci show firewall |grep "Allow DNS Queries for $wifi_name"`
+	if [ $? = 1 ]; then
+		num_c=`uci show firewall |grep '=rule' |wc -l`
+		uci add firewall rule
+		uci set firewall.@rule[$num_c]=rule
+		uci set firewall.@rule[$num_c].name="Allow DNS Queries for $wifi_name"
+		uci set firewall.@rule[$num_c].src="$interface_name"
+		uci set firewall.@rule[$num_c].dest_port='53'
+		uci set firewall.@rule[$num_c].proto='tcpudp'
+		uci set firewall.@rule[$num_c].target='ACCEPT'
+		uci commit firewall
+		unset num_c
+	fi
+
+	check_DHCP=`uci show firewall |grep "Allow DHCP request for $wifi_name"`
+	if [ $? = 1 ]; then
+		num_c=`uci show firewall |grep '=rule' |wc -l`
+		uci add firewall rule
+		uci set firewall.@rule[$num_c]=rule
+		uci set firewall.@rule[$num_c].name="Allow DHCP request for $wifi_name"
+		uci set firewall.@rule[$num_c].src="$interface_name"
+		uci set firewall.@rule[$num_c].src_port='67-68'
+		uci set firewall.@rule[$num_c].dest_port='67-68'
+		uci set firewall.@rule[$num_c].proto='udp'
+		uci set firewall.@rule[$num_c].target='ACCEPT'
+		uci commit firewall
+		unset num_c
+	fi
+
+	check_HIDE=`uci show firewall |grep "Hide My LAN for $wifi_name"`
+	if [ $? = 1 ]; then
+		num_c=`uci show firewall |grep '=rule' |wc -l`
+		uci add firewall rule
+		uci set firewall.@rule[$num_c]=rule
+		uci set firewall.@rule[$num_c].enabled='1'
+		uci set firewall.@rule[$num_c].name="Hide My LAN for $wifi_name"
+		uci set firewall.@rule[$num_c].proto='all'
+		uci set firewall.@rule[$num_c].src="$interface_name"
+		#convert netmask to cidr
+		local lan_netmask=`uci get network.lan.netmask`
+		local nbits=0
+		local IFS=.
+		for netmask_dec in $lan_netmask ; do
+			case $netmask_dec in
+				255) let nbits+=8 ;;
+				254) let nbits+=7 ;;
+				252) let nbits+=6 ;;
+				248) let nbits+=5 ;;
+				240) let nbits+=4 ;;
+				224) let nbits+=3 ;;
+				192) let nbits+=2 ;;
+				128) let nbits+=1 ;;
+				0) ;;
+				*) echo "Error: $netmask_dec can not be recognised as netmask decimal." && exit 1 ;;
+			esac
+		done
+		unset netmask_dec
+		uci set firewall.@rule[$num_c].dest_ip="`uci get network.lan.ipaddr`/$nbits"
+		uci set firewall.@rule[$num_c].target='REJECT'
+		uci commit firewall
+		unset num_c
+	fi
+}
+
diff --git a/package/lean/luci-app-guest-wifi/root/etc/uci-defaults/luci-app-guest-wifi b/package/lean/luci-app-guest-wifi/root/etc/uci-defaults/luci-app-guest-wifi
new file mode 100755
index 0000000000..02ad18b3fe
--- /dev/null
+++ b/package/lean/luci-app-guest-wifi/root/etc/uci-defaults/luci-app-guest-wifi
@@ -0,0 +1,11 @@
+#!/bin/sh 
+
+uci -q batch <<-EOF >/dev/null
+          delete ucitrack.@guest-wifi[-1]
+          add ucitrack guest-wifi
+          set ucitrack.@guest-wifi[-1].init=guest-wifi
+          commit ucitrack
+EOF
+
+rm -f /tmp/luci-indexcache
+exit 0
diff --git a/package/lean/luci-app-haproxy-tcp/Makefile b/package/lean/luci-app-haproxy-tcp/Makefile
new file mode 100644
index 0000000000..0be02c1614
--- /dev/null
+++ b/package/lean/luci-app-haproxy-tcp/Makefile
@@ -0,0 +1,27 @@
+# Copyright (C) 2019 Openwrt.org
+#
+# This is a free software, use it under Apache Licene 2.0 & GNU General Public License v3.0.
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=luci for haproxy and shadowsocks
+LUCI_DEPENDS:=+haproxy
+LUCI_PKGARCH:=all
+PKG_NAME:=luci-app-haproxy-tcp
+PKG_VERSION=1.4
+PKG_RELEASE:=2
+PKG_MAINTAINER:=Alex Zhuo <1886090@gmail.com>
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+define Package/$(PKG_NAME)/postinst
+#!/bin/sh
+rm -rf /tmp/luci*
+echo stopping haproxy
+/etc/init.d/haproxy stop
+/etc/init.d/haproxy disable
+echo haproxy disabled
+endef
+
+# call BuildPackage - OpenWrt buildroot signature
diff --git a/package/lean/luci-app-haproxy-tcp/luasrc/controller/haproxy.lua b/package/lean/luci-app-haproxy-tcp/luasrc/controller/haproxy.lua
new file mode 100644
index 0000000000..5549e754b9
--- /dev/null
+++ b/package/lean/luci-app-haproxy-tcp/luasrc/controller/haproxy.lua
@@ -0,0 +1,7 @@
+module("luci.controller.haproxy", package.seeall)
+function index()
+        if not nixio.fs.access("/etc/config/haproxy") then
+                return
+        end
+        entry({"admin", "services", "haproxy"}, cbi("haproxy"), _("HAProxy")).dependent = true
+end
\ No newline at end of file
diff --git a/package/lean/luci-app-haproxy-tcp/luasrc/model/cbi/haproxy.lua b/package/lean/luci-app-haproxy-tcp/luasrc/model/cbi/haproxy.lua
new file mode 100644
index 0000000000..381b1951bc
--- /dev/null
+++ b/package/lean/luci-app-haproxy-tcp/luasrc/model/cbi/haproxy.lua
@@ -0,0 +1,67 @@
+--Alex<1886090@gmail.com>
+local fs = require "nixio.fs"
+
+function sync_value_to_file(value, file) --用来写入文件的函数，目前这种方式已经弃用
+	value = value:gsub("\r\n?", "\n")
+	local old_value = nixio.fs.readfile(file)
+	if value ~= old_value then
+		nixio.fs.writefile(file, value)
+	end	
+end
+local state_msg = ""
+local haproxy_on = (luci.sys.call("pidof haproxy > /dev/null") == 0)
+local router_ip = luci.sys.exec("uci get network.lan.ipaddr")
+if haproxy_on then	
+	state_msg = "<b><font color=\"green\">" .. translate("Running") .. "</font></b>"
+else
+	state_msg = "<b><font color=\"red\">" .. translate("Not running") .. "</font></b>"
+end
+m=Map("haproxy",translate("HAProxy"),translate("HAProxy能够检测Shadowsocks服务器的连通情况，从而实现负载均衡和高可用的功能，支持主备用服务器宕机自动切换，并且可以设置多个主服务器用于分流，规定每个分流节点的流量比例等。前提条件是你的所有Shadowsocks服务器的【加密方式】和【密码】一致。<br><br>使用方法：配置好你的Shadowsocks服务器ip地址和端口，然后开启Shadowsocks服务，将服务器地址填写为【127.0.0.1】，端口【2222】，其他参数和之前一样即可，你可以通过访问【路由器的IP:1111/haproxy】输入用户名admin，密码root来观察各节点健康状况，红色为宕机，绿色正常,使用说明请<a href='http://www.right.com.cn/forum/thread-198649-1-1.html'>点击这里</a>") .. "<br><br>后台监控页面：<a href='http://" .. router_ip .. ":1111/haproxy'>" .. router_ip .. ":1111/haproxy</a>  用户名admin，密码root" .. "<br><br>状态 - " .. state_msg)
+s=m:section(TypedSection,"arguments","")
+	s.addremove=false
+	s.anonymous=true
+	view_enable = s:option(Flag,"enabled",translate("Enable"))
+	--通过读写配置文件控制HAProxy这种方式已经弃用
+	--view_cfg = s:option(TextValue, "1", nil)
+	--view_cfg.rmempty = false
+	--view_cfg.rows = 43
+
+	--function view_cfg.cfgvalue()
+	--	return nixio.fs.readfile("/etc/haproxy.cfg") or ""
+	--end
+	--function view_cfg.write(self, section, value)
+	--	sync_value_to_file(value, "/etc/haproxy.cfg")
+	--end
+s=m:section(TypedSection,"main_server","<b>" .. translate("Main Server List") .. "<b>")
+	s.anonymous=true
+	s.addremove=true
+	o=s:option(Value,"server_name",translate("Display Name"),translate("Only English Characters,No spaces"))
+	o.rmempty = false
+
+	o=s:option(Flag,"validate",translate("validate"))
+
+	o=s:option(Value,"server_ip",translate("Proxy Server IP"))
+	o.datatype="ip4addr"
+	o=s:option(Value,"server_port",translate("Proxy Server Port"))
+	o.datatype="uinteger"
+	o=s:option(Value,"server_weight",translate("Weight"))
+	o.datatype="uinteger"
+
+s=m:section(TypedSection,"backup_server","<b>" .. translate("Backup Server List") .. "<b>")
+	s.anonymous=true
+	s.addremove=true
+	o=s:option(Value,"server_name",translate("Display Name"),translate("Only English Characters,No spaces"))
+	o.rmempty = false
+
+	o=s:option(Flag,"validate",translate("validate"))
+
+	o=s:option(Value,"server_ip",translate("Proxy Server IP"))
+	o.datatype="ip4addr"
+	o=s:option(Value,"server_port",translate("Proxy Server Port"))
+	o.datatype="uinteger"
+-- ---------------------------------------------------
+local apply = luci.http.formvalue("cbi.apply")
+if apply then
+	os.execute("/etc/haproxy_init.sh restart >/dev/null 2>&1 &")
+end
+return m
diff --git a/package/lean/luci-app-haproxy-tcp/po/zh-cn/haproxy-tcp.po b/package/lean/luci-app-haproxy-tcp/po/zh-cn/haproxy-tcp.po
new file mode 100644
index 0000000000..19a187d9d9
--- /dev/null
+++ b/package/lean/luci-app-haproxy-tcp/po/zh-cn/haproxy-tcp.po
@@ -0,0 +1,34 @@
+msgid "Running"
+msgstr "运行中"
+
+msgid "Not running"
+msgstr "未运行"
+
+msgid "Main Server List"
+msgstr "主服务器列表"
+
+msgid "Display Name"
+msgstr "服务器名称"
+
+msgid "Only English Characters,No spaces"
+msgstr "仅限英文字母,不要有空格"
+
+msgid "Proxy Server IP"
+msgstr "代理服务器IP"
+
+msgid "Proxy Server Port"
+msgstr "代理服务器端口"
+
+msgid "Weight"
+msgstr "分流权重"
+
+msgid "Backup Server List"
+msgstr "备用服务器列表"
+
+msgid "validate"
+msgstr "生效"
+
+
+
+
+
diff --git a/package/lean/luci-app-haproxy-tcp/root/etc/config/haproxy b/package/lean/luci-app-haproxy-tcp/root/etc/config/haproxy
new file mode 100644
index 0000000000..5d324ca3fd
--- /dev/null
+++ b/package/lean/luci-app-haproxy-tcp/root/etc/config/haproxy
@@ -0,0 +1,29 @@
+
+config arguments
+	option enabled '0'
+
+config main_server
+	option server_weight '10'
+	option server_ip '1.2.3.4'
+	option server_port '443'
+	option server_name 'JP1'
+	option validate '1'
+
+config backup_server
+	option server_name 'JP2'
+	option server_ip '2.2.2.2'
+	option server_port '8038'
+	option validate '1'
+
+config backup_server
+	option server_name 'JP3'
+	option server_ip '3.3.3.3'
+	option server_port '443'
+	option validate '1'
+
+config backup_server
+	option server_name 'JP4'
+	option server_ip '4.4.4.4'
+	option server_port '443'
+	option validate '1'
+
diff --git a/package/lean/luci-app-haproxy-tcp/root/etc/haproxy_init.sh b/package/lean/luci-app-haproxy-tcp/root/etc/haproxy_init.sh
new file mode 100755
index 0000000000..cab4d1f826
--- /dev/null
+++ b/package/lean/luci-app-haproxy-tcp/root/etc/haproxy_init.sh
@@ -0,0 +1,129 @@
+#!/bin/sh /etc/rc.common
+
+CFG_FILE=/etc/haproxy.cfg
+stop(){
+	logger -t alex stopping haproxy
+	echo "stopping haproxy"
+	/etc/init.d/haproxy disable
+	/etc/init.d/haproxy stop
+	[ -f /etc/haproxy_backup ] && {
+		cp /etc/haproxy_backup /etc/init.d/haproxy
+	}
+	iptables -t nat -D OUTPUT -j HAPROXY &> /dev/null
+	iptables -t nat -F HAPROXY &> /dev/null
+	sleep 1
+	iptables -t nat -X HAPROXY &> /dev/null
+}
+start(){
+	echo "starting haproxy"
+	logger -t restarting haproxy
+	echo global > $CFG_FILE
+	cat >> $CFG_FILE <<EOF
+  log 127.0.0.1   local0           #[日志输出配置，所有日志都记录在本机，通过local0输出]
+  log 127.0.0.1   local1 notice    #定义haproxy 日志级别[error warringinfo debug]
+  daemon		                #以后台形式运行harpoxy
+  nbproc 1                         #设置进程数量
+  pidfile /var/run/haproxy.pid
+  ulimit-n 1024                    #ulimit 的数量限制
+  maxconn 1024	                #默认最大连接数,需考虑ulimit-n限制
+  #chroot /usr/local/haproxy
+defaults
+  log global
+  mode tcp                  #默认的模式mode { tcp|http|health }，tcp是4层，http是7层，health只会返回OK
+  retries 3                 #两次连接失败就认为是服务器不可用，也可以通过后面设置
+  option abortonclose       #当服务器负载很高的时候，自动结束掉当前队列处理比较久的链接
+  option redispatch
+  maxconn 1024              #默认的最大连接数
+  timeout connect  5000ms   #连接超时
+  timeout client 30000ms    #客户端超时
+  timeout server 30000ms    #服务器超时
+  balance roundrobin        #设置默认负载均衡方式，轮询方式
+  #balance source           #设置默认负载均衡方式，类似于nginx的ip_hash
+  #balnace leastconn        #设置默认负载均衡方式，最小连接数
+listen admin_stats
+  bind 0.0.0.0:1111               #节点统计页面的访问端口
+  mode http                       #http的7层模式
+  option httplog                  #采用http日志格式
+  maxconn 10                      #节点统计页面默认的最大连接数
+  stats refresh 30s               #节点统计页面自动刷新时间
+  stats uri /haproxy              #节点统计页面url
+  stats realm Haproxy             #统计页面密码框上提示文本
+  stats auth admin:root           #设置监控页面的用户和密码:admin,可以设置多个用户名
+  stats  admin if TRUE            #设置手工启动/禁用，后端服务器(haproxy-1.4.9以后版本)
+frontend ss-in
+	bind 127.0.0.1:2222
+	default_backend ss-out
+backend ss-out
+	mode tcp
+	balance   roundrobin
+	option tcplog
+EOF
+	local COUNTER=0
+	#添加主服务器
+	iptables -t nat -X HAPROXY
+	iptables -t nat -N HAPROXY
+	iptables -t nat -F HAPROXY
+
+	while true
+	do	
+		local server_ip=`uci get haproxy.@main_server[$COUNTER].server_ip 2>/dev/null`
+		local server_name=`uci get haproxy.@main_server[$COUNTER].server_name 2>/dev/null`
+		local server_port=`uci get haproxy.@main_server[$COUNTER].server_port 2>/dev/null`
+		local server_weight=`uci get haproxy.@main_server[$COUNTER].server_weight 2>/dev/null`
+		local validate=`uci get haproxy.@main_server[$COUNTER].validate 2>/dev/null`
+		if [ -z "$server_ip" ] || [ -z "$server_name" ] || [ -z "$server_port" ] || [ -z "$server_weight" ]; then
+			echo break
+			break
+		fi
+		echo the main server $COUNTER $server_ip $server_name $server_port $server_weight
+		[ "$validate" = 1 ] && {
+			echo server $server_name $server_ip:$server_port weight $server_weight maxconn 1024 check inter 1500 rise 3 fall 3 >> $CFG_FILE
+		}
+		iptables -t nat -A HAPROXY -p tcp -d $server_ip -j ACCEPT
+		COUNTER=$(($COUNTER+1))
+	done
+	COUNTER=0
+	#添加备用服务器
+	while true
+	do	
+		local server_ip=`uci get haproxy.@backup_server[$COUNTER].server_ip 2>/dev/null`
+		local server_name=`uci get haproxy.@backup_server[$COUNTER].server_name 2>/dev/null`
+		local server_port=`uci get haproxy.@backup_server[$COUNTER].server_port 2>/dev/null`
+		local validate=`uci get haproxy.@backup_server[$COUNTER].validate 2>/dev/null`
+		if [ -z "$server_ip" ] || [ -z "$server_name" ] || [ -z "$server_port" ]; then
+			echo break
+			break
+		fi
+		echo the backup server $COUNTER $server_ip $server_name $server_port
+		[ "$validate" = 1 ] && {
+			echo server $server_name $server_ip:$server_port weight 10 check backup inter 1500 rise 3 fall 3 >> $CFG_FILE
+		}
+		iptables -t nat -A HAPROXY -p tcp -d $server_ip -j ACCEPT
+		COUNTER=$(($COUNTER+1))
+	done
+	iptables -t nat -I OUTPUT -j HAPROXY
+	/etc/init.d/haproxy enable
+	/etc/init.d/haproxy restart
+	cp /etc/init.d/haproxy /etc/haproxy_backup
+	cp /etc/haproxy_start /etc/init.d/haproxy
+}
+
+restart(){
+	echo luci for haproxy
+	sleep 1s
+	local vt_enabled=`uci get haproxy.@arguments[0].enabled 2>/dev/null`
+	logger -t haproxy is initializing enabled is $vt_enabled
+	echo $vt_enabled 
+	if [ "$vt_enabled" = 1 ]; then
+		[ -f /etc/haproxy_backup ] && {
+			cp /etc/haproxy_backup /etc/init.d/haproxy
+		}
+		iptables -t nat -D OUTPUT -j HAPROXY &> /dev/null
+		iptables -t nat -F HAPROXY &> /dev/null
+		sleep 1
+		iptables -t nat -X HAPROXY &> /dev/null
+		start;
+	else	
+		stop;
+	fi
+}
\ No newline at end of file
diff --git a/package/lean/luci-app-haproxy-tcp/root/etc/haproxy_start b/package/lean/luci-app-haproxy-tcp/root/etc/haproxy_start
new file mode 100755
index 0000000000..f0c9e52b13
--- /dev/null
+++ b/package/lean/luci-app-haproxy-tcp/root/etc/haproxy_start
@@ -0,0 +1,73 @@
+#!/bin/sh /etc/rc.common
+# Copyright (C) 2009-2010 OpenWrt.org
+
+START=99
+STOP=80
+
+SERVICE_USE_PID=1
+
+HAPROXY_BIN="/usr/sbin/haproxy"
+HAPROXY_CONFIG="/etc/haproxy.cfg"
+HAPROXY_PID="/var/run/haproxy.pid"
+
+start() {
+	service_start $HAPROXY_BIN -q -D -f "$HAPROXY_CONFIG" -p "$HAPROXY_PID"
+	local COUNTER=0
+	#添加主服务器
+	iptables -t nat -D OUTPUT -j HAPROXY &> /dev/null
+	iptables -t nat -X HAPROXY
+	iptables -t nat -N HAPROXY
+	iptables -t nat -F HAPROXY
+
+	while true
+	do	
+		local server_ip=`uci get haproxy.@main_server[$COUNTER].server_ip 2>/dev/null`
+		local server_name=`uci get haproxy.@main_server[$COUNTER].server_name 2>/dev/null`
+		local server_port=`uci get haproxy.@main_server[$COUNTER].server_port 2>/dev/null`
+		local server_weight=`uci get haproxy.@main_server[$COUNTER].server_weight 2>/dev/null`
+		local validate=`uci get haproxy.@main_server[$COUNTER].validate 2>/dev/null`
+		if [ -z "$server_ip" ] || [ -z "$server_name" ] || [ -z "$server_port" ] || [ -z "$server_weight" ]; then
+			echo break
+			break
+		fi
+		echo the main2 server $COUNTER $server_ip $server_name $server_port $server_weight
+		[ "$validate" = 1 ] && {
+			iptables -t nat -A HAPROXY -p tcp -d $server_ip -j ACCEPT
+		}
+		COUNTER=$(($COUNTER+1))
+	done
+	COUNTER=0
+	#添加备用服务器
+	while true
+	do	
+		local server_ip=`uci get haproxy.@backup_server[$COUNTER].server_ip 2>/dev/null`
+		local server_name=`uci get haproxy.@backup_server[$COUNTER].server_name 2>/dev/null`
+		local server_port=`uci get haproxy.@backup_server[$COUNTER].server_port 2>/dev/null`
+		local validate=`uci get haproxy.@backup_server[$COUNTER].validate 2>/dev/null`
+		if [ -z "$server_ip" ] || [ -z "$server_name" ] || [ -z "$server_port" ]; then
+			echo break
+			break
+		fi
+		echo the backup2 server $COUNTER $server_ip $server_name $server_port
+		[ "$validate" = 1 ] && {
+			iptables -t nat -A HAPROXY -p tcp -d $server_ip -j ACCEPT
+		}
+		COUNTER=$(($COUNTER+1))
+	done
+
+	iptables -t nat -I OUTPUT -j HAPROXY
+}
+
+stop() {
+	kill -9 $(cat $HAPROXY_PID | tr "\n" " ")
+	service_stop $HAPROXY_BIN
+	iptables -t nat -D OUTPUT -j HAPROXY &> /dev/null
+	iptables -t nat -F HAPROXY &> /dev/null
+	sleep 1
+	iptables -t nat -X HAPROXY &> /dev/null
+}
+
+reload() {
+	$HAPROXY_BIN -D -q -f $HAPROXY_CONFIG -p $HAPROXY_PID -sf $(cat $HAPROXY_PID | tr "\n" " ")	
+	#$HAPROXY_BIN -D -q -f $HAPROXY_CONFIG -p $HAPROXY_PID -sf $(cat $HAPROXY_PID)
+}
diff --git a/package/lean/luci-app-haproxy-tcp/root/etc/uci-defaults/z99-haproxy b/package/lean/luci-app-haproxy-tcp/root/etc/uci-defaults/z99-haproxy
new file mode 100755
index 0000000000..72913f935b
--- /dev/null
+++ b/package/lean/luci-app-haproxy-tcp/root/etc/uci-defaults/z99-haproxy
@@ -0,0 +1,7 @@
+#!/bin/sh
+
+/etc/init.d/haproxy disable
+/etc/init.d/haproxy stop
+
+rm -f /tmp/luci-indexcache
+exit 0
diff --git a/package/lean/luci-app-ipsec-vpnd/Makefile b/package/lean/luci-app-ipsec-vpnd/Makefile
new file mode 100644
index 0000000000..b7a83920f5
--- /dev/null
+++ b/package/lean/luci-app-ipsec-vpnd/Makefile
@@ -0,0 +1,18 @@
+# Copyright (C) 2016 Openwrt.org
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI support for IPSec VPN Server (IKEv1 with PSK and Xauth)
+LUCI_DEPENDS:=+strongswan-minimal +strongswan-mod-xauth-generic
+LUCI_PKGARCH:=all
+PKG_VERSION:=1.0
+PKG_RELEASE:=7
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
+
diff --git a/package/lean/luci-app-ipsec-vpnd/luasrc/controller/ipsec-server.lua b/package/lean/luci-app-ipsec-vpnd/luasrc/controller/ipsec-server.lua
new file mode 100644
index 0000000000..2925194c62
--- /dev/null
+++ b/package/lean/luci-app-ipsec-vpnd/luasrc/controller/ipsec-server.lua
@@ -0,0 +1,19 @@
+
+module("luci.controller.ipsec-server", package.seeall)
+
+function index()
+	if not nixio.fs.access("/etc/config/ipsec") then
+		return
+	end
+	
+	entry({"admin", "vpn"}, firstchild(), "VPN", 45).dependent = false
+	entry({"admin", "vpn", "ipsec-server"}, cbi("ipsec-server/ipsec-server"), _("IPSec VPN Server"), 80).dependent=false
+	entry({"admin", "vpn", "ipsec-server","status"},call("act_status")).leaf=true
+end
+
+function act_status()
+  local e={}
+  e.running=luci.sys.call("pgrep ipsec >/dev/null")==0
+  luci.http.prepare_content("application/json")
+  luci.http.write_json(e)
+end
diff --git a/package/lean/luci-app-ipsec-vpnd/luasrc/model/cbi/ipsec-server/ipsec-server.lua b/package/lean/luci-app-ipsec-vpnd/luasrc/model/cbi/ipsec-server/ipsec-server.lua
new file mode 100644
index 0000000000..79a47b8bfb
--- /dev/null
+++ b/package/lean/luci-app-ipsec-vpnd/luasrc/model/cbi/ipsec-server/ipsec-server.lua
@@ -0,0 +1,35 @@
+
+mp = Map("ipsec", translate("IPSec VPN Server"))
+mp.description = translate("IPSec VPN connectivity using the native built-in VPN Client on iOS or Andriod (IKEv1 with PSK and Xauth)")
+
+mp:section(SimpleSection).template  = "ipsec/ipsec_status"
+
+s = mp:section(NamedSection, "ipsec", "service")
+s.anonymouse = true
+
+enabled = s:option(Flag, "enabled", translate("Enable"))
+enabled.default = 0
+enabled.rmempty = false
+
+clientip = s:option(Value, "clientip", translate("VPN Client IP"))
+clientip.datatype = "ip4addr"
+clientip.description = translate("LAN DHCP reserved started IP addresses with the same subnet mask")
+clientip.optional = false
+clientip.rmempty = false
+
+clientdns = s:option(Value, "clientdns", translate("VPN Client DNS"))
+clientdns.datatype = "ip4addr"
+clientdns.description = translate("DNS using in VPN tunnel.Set to the router's LAN IP is recommended")
+clientdns.optional = false
+clientdns.rmempty = false
+
+account = s:option(Value, "account", translate("Account"))
+account.datatype = "string"
+
+password = s:option(Value, "password", translate("Password"))
+password.password = true
+
+secret = s:option(Value, "secret", translate("Secret Pre-Shared Key"))
+secret.password = true
+
+return mp
diff --git a/package/lean/luci-app-ipsec-vpnd/luasrc/view/ipsec/ipsec_status.htm b/package/lean/luci-app-ipsec-vpnd/luasrc/view/ipsec/ipsec_status.htm
new file mode 100644
index 0000000000..60225b4902
--- /dev/null
+++ b/package/lean/luci-app-ipsec-vpnd/luasrc/view/ipsec/ipsec_status.htm
@@ -0,0 +1,22 @@
+<script type="text/javascript">//<![CDATA[
+XHR.poll(3, '<%=url([[admin]], [[vpn]], [[ipsec-server]], [[status]])%>', null,
+	function(x, data) {
+		var tb = document.getElementById('ipsec_status');
+		if (data && tb) {
+			if (data.running) {
+				var links = '<em><b><font color=green>IPSec VPN <%:RUNNING%></font></b></em>';
+				tb.innerHTML = links;
+			} else {
+				tb.innerHTML = '<em><b><font color=red>IPSec VPN <%:NOT RUNNING%></font></b></em>';
+			}
+		}
+	}
+);
+//]]>
+</script>
+<style>.mar-10 {margin-left: 50px; margin-right: 10px;}</style>
+<fieldset class="cbi-section">
+	<p id="ipsec_status">
+		<em><%:Collecting data...%></em>
+	</p>
+</fieldset>
\ No newline at end of file
diff --git a/package/lean/luci-app-ipsec-vpnd/po/zh-cn/ipsec.po b/package/lean/luci-app-ipsec-vpnd/po/zh-cn/ipsec.po
new file mode 100644
index 0000000000..0bf6b62aaa
--- /dev/null
+++ b/package/lean/luci-app-ipsec-vpnd/po/zh-cn/ipsec.po
@@ -0,0 +1,34 @@
+msgid "IPSec VPN Server"
+msgstr "IPSec VPN 服务器"
+
+msgid "IPSec VPN connectivity using the native built-in VPN Client on iOS or Andriod (IKEv1 with PSK and Xauth)"
+msgstr "使用iOS 或者 Andriod (IKEv1 with PSK and Xauth) 原生内置 IPSec VPN 客户端进行连接"
+
+msgid "VPN Client IP"
+msgstr "VPN客户端地址段"
+
+msgid "LAN DHCP reserved started IP addresses with the same subnet mask"
+msgstr "VPN客户端使用DHCP保留空余IP的起始地址，必须和路由器LAN同一个子网掩码，例如 192.168.0.10/24"
+
+msgid "VPN Client DNS"
+msgstr "VPN客户端DNS服务器"
+
+msgid "DNS using in VPN tunnel.Set to the router's LAN IP is recommended"
+msgstr "指定VPN客户端的DNS地址。推荐设置为路由器的LAN IP，例如 192.168.0.1"
+
+msgid "Account"
+msgstr "账户"
+
+msgid "Secret Pre-Shared Key"
+msgstr "PSK密钥"
+
+msgid "IPSec VPN Server status"
+msgstr "IPSec VPN 服务器运行状态"
+
+msgid "Disable from startup"
+msgstr "禁止开机启动"
+
+msgid "Enable on startup"
+msgstr "允许开机启动"
+
+
diff --git a/package/lean/luci-app-ipsec-vpnd/root/etc/config/ipsec b/package/lean/luci-app-ipsec-vpnd/root/etc/config/ipsec
new file mode 100644
index 0000000000..93c21f2785
--- /dev/null
+++ b/package/lean/luci-app-ipsec-vpnd/root/etc/config/ipsec
@@ -0,0 +1,9 @@
+
+config service 'ipsec'
+	option clientdns '192.168.0.1'
+	option account 'lean'
+	option secret 'myopenwrt'
+	option enabled '0'
+	option password '12345678'
+	option clientip '192.168.0.10/24'
+
diff --git a/package/lean/luci-app-ipsec-vpnd/root/etc/init.d/ipsec b/package/lean/luci-app-ipsec-vpnd/root/etc/init.d/ipsec
new file mode 100755
index 0000000000..5a4c6a2170
--- /dev/null
+++ b/package/lean/luci-app-ipsec-vpnd/root/etc/init.d/ipsec
@@ -0,0 +1,427 @@
+#!/bin/sh /etc/rc.common
+
+START=90
+STOP=10
+
+USE_PROCD=1
+PROG=/usr/lib/ipsec/starter
+
+. $IPKG_INSTROOT/lib/functions.sh
+. $IPKG_INSTROOT/lib/functions/network.sh
+
+IPSEC_SECRETS_FILE=/etc/ipsec.secrets
+IPSEC_CONN_FILE=/etc/ipsec.conf
+STRONGSWAN_CONF_FILE=/etc/strongswan.conf
+
+IPSEC_VAR_SECRETS_FILE=/var/ipsec/ipsec.secrets
+IPSEC_VAR_CONN_FILE=/var/ipsec/ipsec.conf
+STRONGSWAN_VAR_CONF_FILE=/var/ipsec/strongswan.conf
+
+WAIT_FOR_INTF=0
+
+file_reset() {
+	: > "$1"
+}
+
+xappend() {
+	local file="$1"
+	shift
+
+	echo "${@}" >> "${file}"
+}
+
+remove_include() {
+	local file="$1"
+	local include="$2"
+
+	sed -i "\_${include}_d" "${file}"
+}
+
+remove_includes() {
+	remove_include "${IPSEC_CONN_FILE}" "${IPSEC_VAR_CONN_FILE}"
+	remove_include "${IPSEC_SECRETS_FILE}" "${IPSEC_VAR_SECRETS_FILE}"
+	remove_include "${STRONGSWAN_CONF_FILE}" "${STRONGSWAN_VAR_CONF_FILE}"
+}
+
+do_include() {
+	local conf="$1"
+	local uciconf="$2"
+	local backup=`mktemp -t -p /tmp/ ipsec-init-XXXXXX`
+
+	[ ! -f "${conf}" ] && rm -rf "${conf}"
+	touch "${conf}"
+
+	cat "${conf}" | grep -v "${uciconf}" > "${backup}"
+	mv "${backup}" "${conf}"
+	xappend "${conf}" "include ${uciconf}"
+	file_reset "${uciconf}"
+}
+
+ipsec_reset() {
+	do_include "${IPSEC_CONN_FILE}" "${IPSEC_VAR_CONN_FILE}"
+}
+
+ipsec_xappend() {
+	xappend "${IPSEC_VAR_CONN_FILE}" "$@"
+}
+
+swan_reset() {
+	do_include "${STRONGSWAN_CONF_FILE}" "${STRONGSWAN_VAR_CONF_FILE}"
+}
+
+swan_xappend() {
+	xappend "${STRONGSWAN_VAR_CONF_FILE}" "$@"
+}
+
+secret_reset() {
+	do_include "${IPSEC_SECRETS_FILE}" "${IPSEC_VAR_SECRETS_FILE}"
+}
+
+secret_xappend() {
+	xappend "${IPSEC_VAR_SECRETS_FILE}" "$@"
+}
+
+warning() {
+	echo "WARNING: $@" >&2
+}
+
+add_crypto_proposal() {
+	local encryption_algorithm
+	local hash_algorithm
+	local dh_group
+
+	config_get encryption_algorithm  "$1" encryption_algorithm
+	config_get hash_algorithm        "$1" hash_algorithm
+	config_get dh_group              "$1" dh_group
+
+	[ -n "${encryption_algorithm}" ] && \
+		crypto="${crypto:+${crypto},}${encryption_algorithm}${hash_algorithm:+-${hash_algorithm}}${dh_group:+-${dh_group}}"
+}
+
+set_crypto_proposal() {
+	local conf="$1"
+	local proposal
+
+	crypto=""
+
+	config_get crypto_proposal "$conf" crypto_proposal ""
+	for proposal in $crypto_proposal; do
+		add_crypto_proposal "$proposal"
+	done
+
+	[ -n "${crypto}" ] && {
+		local force_crypto_proposal
+
+		config_get_bool force_crypto_proposal "$conf" force_crypto_proposal
+
+		[ "${force_crypto_proposal}" = "1" ] && crypto="${crypto}!"
+	}
+
+	crypto_proposal="${crypto}"
+}
+
+config_conn() {
+	# Generic ipsec conn section shared by tunnel and transport
+	local mode
+	local local_subnet
+	local local_nat
+	local local_sourceip
+	local local_updown
+	local local_firewall
+	local remote_subnet
+	local remote_sourceip
+	local remote_updown
+	local remote_firewall
+	local ikelifetime
+	local lifetime
+	local margintime
+	local keyingtries
+	local dpdaction
+	local dpddelay
+	local inactivity
+	local keyexchange
+
+	config_get mode                     "$1"           mode "route"
+	config_get local_subnet             "$1"           local_subnet ""
+	config_get local_nat                "$1"           local_nat ""
+	config_get local_sourceip           "$1"           local_sourceip ""
+	config_get local_updown             "$1"           local_updown ""
+	config_get local_firewall           "$1"           local_firewall ""
+	config_get remote_subnet            "$1"           remote_subnet ""
+	config_get remote_sourceip          "$1"           remote_sourceip ""
+	config_get remote_updown            "$1"           remote_updown ""
+	config_get remote_firewall          "$1"           remote_firewall ""
+	config_get ikelifetime              "$1"           ikelifetime "3h"
+	config_get lifetime                 "$1"           lifetime "1h"
+	config_get margintime               "$1"           margintime "9m"
+	config_get keyingtries              "$1"           keyingtries "3"
+	config_get dpdaction                "$1"           dpdaction "none"
+	config_get dpddelay                 "$1"           dpddelay "30s"
+	config_get inactivity               "$1"           inactivity
+	config_get keyexchange              "$1"           keyexchange "ikev2"
+
+	[ -n "$local_nat" ] && local_subnet=$local_nat
+
+	ipsec_xappend "conn $config_name-$1"
+	ipsec_xappend "  left=%any"
+	ipsec_xappend "  right=$remote_gateway"
+
+	[ -n "$local_sourceip" ] && ipsec_xappend "  leftsourceip=$local_sourceip"
+	[ -n "$local_subnet" ] && ipsec_xappend "  leftsubnet=$local_subnet"
+
+	[ -n "$local_firewall" ] && ipsec_xappend "  leftfirewall=$local_firewall"
+	[ -n "$remote_firewall" ] && ipsec_xappend "  rightfirewall=$remote_firewall"
+
+	ipsec_xappend "  ikelifetime=$ikelifetime"
+	ipsec_xappend "  lifetime=$lifetime"
+	ipsec_xappend "  margintime=$margintime"
+	ipsec_xappend "  keyingtries=$keyingtries"
+	ipsec_xappend "  dpdaction=$dpdaction"
+	ipsec_xappend "  dpddelay=$dpddelay"
+
+	[ -n "$inactivity" ] && ipsec_xappend "  inactivity=$inactivity"
+
+	if [ "$auth_method" = "psk" ]; then
+		ipsec_xappend "  leftauth=psk"
+		ipsec_xappend "  rightauth=psk"
+
+		[ "$remote_sourceip" != "" ] && ipsec_xappend "  rightsourceip=$remote_sourceip"
+		[ "$remote_subnet" != "" ] && ipsec_xappend "  rightsubnet=$remote_subnet"
+
+		ipsec_xappend "  auto=$mode"
+	else
+		warning "AuthenticationMethod $auth_method not supported"
+	fi
+
+	[ -n "$local_identifier" ] && ipsec_xappend "  leftid=$local_identifier"
+	[ -n "$remote_identifier" ] && ipsec_xappend "  rightid=$remote_identifier"
+	[ -n "$local_updown" ] && ipsec_xappend "  leftupdown=$local_updown"
+	[ -n "$remote_updown" ] && ipsec_xappend "  rightupdown=$remote_updown"
+	ipsec_xappend "  keyexchange=$keyexchange"
+
+	set_crypto_proposal "$1"
+	[ -n "${crypto_proposal}" ] && ipsec_xappend "  esp=$crypto_proposal"
+	[ -n "${ike_proposal}" ] && ipsec_xappend "  ike=$ike_proposal"
+}
+
+config_tunnel() {
+	config_conn "$1"
+
+	# Specific for the tunnel part
+	ipsec_xappend "  type=tunnel"
+}
+
+config_transport() {
+	config_conn "$1"
+
+	# Specific for the transport part
+	ipsec_xappend "  type=transport"
+}
+
+config_remote() {
+	local enabled
+	local gateway
+	local pre_shared_key
+	local auth_method
+
+	config_name=$1
+
+	config_get_bool enabled "$1" enabled 0
+	[ $enabled -eq 0 ] && return
+
+	config_get gateway           "$1" gateway
+	config_get pre_shared_key    "$1" pre_shared_key
+	config_get auth_method       "$1" authentication_method
+	config_get local_identifier  "$1" local_identifier ""
+	config_get remote_identifier "$1" remote_identifier ""
+
+	[ "$gateway" = "any" ] && remote_gateway="%any" || remote_gateway="$gateway"
+
+	[ -z "$local_identifier" ] && {
+		local ipdest
+
+		[ "$remote_gateway" = "%any" ] && ipdest="1.1.1.1" || ipdest="$remote_gateway"
+		local_gateway=`ip route get $ipdest | awk -F"src" '/src/{gsub(/ /,"");print $2}'`
+	}
+
+	[ -n "$local_identifier" ] && secret_xappend -n "$local_identifier " || secret_xappend -n "$local_gateway "
+	[ -n "$remote_identifier" ] && secret_xappend -n "$remote_identifier " || secret_xappend -n "$remote_gateway "
+
+	secret_xappend ": PSK \"$pre_shared_key\""
+
+	set_crypto_proposal "$1"
+	ike_proposal="$crypto_proposal"
+
+	config_list_foreach "$1" tunnel config_tunnel
+
+	config_list_foreach "$1" transport config_transport
+
+	ipsec_xappend ""
+}
+
+config_ipsec() {
+	local debug
+	local rtinstall_enabled
+	local routing_tables_ignored
+	local routing_table
+	local routing_table_id
+	local interface
+	local device_list
+
+	ipsec_reset
+	secret_reset
+	swan_reset
+
+	ipsec_xappend "# generated by /etc/init.d/ipsec"
+	ipsec_xappend "version 2"
+	ipsec_xappend ""
+
+	secret_xappend "# generated by /etc/init.d/ipsec"
+
+	config_get debug "$1" debug 0
+	config_get_bool rtinstall_enabled "$1" rtinstall_enabled 1
+	[ $rtinstall_enabled -eq 1 ] && install_routes=yes || install_routes=no
+
+	# prepare extra charon config option ignore_routing_tables
+	for routing_table in $(config_get "$1" "ignore_routing_tables"); do
+		if [ "$routing_table" -ge 0 ] 2>/dev/null; then
+			routing_table_id=$routing_table
+		else
+			routing_table_id=$(sed -n '/[ \t]*[0-9]\+[ \t]\+'$routing_table'[ \t]*$/s/[ \t]*\([0-9]\+\).*/\1/p' /etc/iproute2/rt_tables)
+		fi
+
+		[ -n "$routing_table_id" ] && append routing_tables_ignored "$routing_table_id"
+	done
+
+	local interface_list=$(config_get "$1" "interface")
+	if [ -z "$interface_list" ]; then
+		WAIT_FOR_INTF=0
+	else
+		for interface in $interface_list; do
+			network_get_device device $interface
+			[ -n "$device" ] && append device_list "$device" ","
+		done
+		[ -n "$device_list" ] && WAIT_FOR_INTF=0 || WAIT_FOR_INTF=1
+	fi
+
+	swan_xappend "# generated by /etc/init.d/ipsec"
+	swan_xappend "charon {"
+	swan_xappend "  load_modular = yes"
+	swan_xappend "  install_routes = $install_routes"
+	[ -n "$routing_tables_ignored" ] && swan_xappend "  ignore_routing_tables = $routing_tables_ignored"
+	[ -n "$device_list" ] && swan_xappend "  interfaces_use = $device_list"
+	swan_xappend "    plugins {"
+	swan_xappend "      include /etc/strongswan.d/charon/*.conf"
+	swan_xappend "    }"
+	swan_xappend "  syslog {"
+	swan_xappend "    identifier = ipsec"
+	swan_xappend "    daemon {"
+	swan_xappend "      default = $debug"
+	swan_xappend "    }"
+	swan_xappend "    auth {"
+	swan_xappend "      default = $debug"
+	swan_xappend "    }"
+	swan_xappend "  }"
+	swan_xappend "}"
+}
+
+prepare_env() {
+	mkdir -p /var/ipsec
+	remove_includes
+	config_load ipsec
+	config_foreach config_ipsec ipsec
+	config_foreach config_remote remote
+}
+
+service_running() {
+	ipsec status > /dev/null 2>&1
+}
+
+reload_service() {
+  local bool vt_enabled=`uci get ipsec.@service[0].enabled 2>/dev/null`
+  [ "$vt_enabled" = 0 ] && /etc/init.d/ipsec stop && return
+	running && {
+		prepare_env
+		[ $WAIT_FOR_INTF -eq 0 ] && {
+			ipsec rereadall
+			ipsec reload
+			return
+		}
+	}
+	[ "$vt_enabled" = 1 ] && start
+}
+
+check_ipsec_interface() {
+	local intf
+
+	for intf in $(config_get "$1" interface); do
+		procd_add_interface_trigger "interface.*" "$intf" /etc/init.d/ipsec reload
+	done
+}
+
+service_triggers() {
+	procd_add_reload_trigger "ipsec"
+	config load "ipsec"
+	config_foreach check_ipsec_interface ipsec
+}
+
+start_service() {
+  local vt_enabled=`uci get ipsec.@service[0].enabled 2>/dev/null`
+	local vt_clientip=`uci get ipsec.@service[0].clientip`
+	local vt_clientdns=`uci get ipsec.@service[0].clientdns`
+	local vt_account=`uci get ipsec.@service[0].account`
+	local vt_password=`uci get ipsec.@service[0].password 2>/dev/null`
+	local vt_secret=`uci get ipsec.@service[0].secret 2>/dev/null`
+	
+	[ "$vt_enabled" = 0 ] && /etc/init.d/ipsec stop && return
+	
+	cat > /etc/ipsec.conf <<EOF
+# ipsec.conf - strongSwan IPsec configuration file
+
+# basic configuration
+
+config setup
+    # strictcrlpolicy=yes
+    uniqueids=never
+
+# Add connections here.
+
+conn xauth_psk
+	keyexchange=ikev1
+	ike=aes128-sha1-modp2048,aes128-sha1-modp1024,3des-sha1-modp1024,3des-sha1-modp1536
+  esp=aes128-sha1,3des-sha1
+	left=%defaultroute
+	leftauth=psk
+	leftsubnet=0.0.0.0/0
+	right=%any
+	rightauth=psk
+	rightauth2=xauth
+	rightsourceip=$vt_clientip
+	rightdns=$vt_clientdns
+	auto=add
+EOF
+
+	cat > /etc/ipsec.secrets <<EOF
+# /etc/ipsec.secrets - strongSwan IPsec secrets file
+: PSK "$vt_secret"
+$vt_account : XAUTH "$vt_password"
+EOF
+  
+	prepare_env
+
+	[ $WAIT_FOR_INTF -eq 1 ] && return
+
+	procd_open_instance
+
+	procd_set_param command $PROG --daemon charon --nofork
+
+	procd_set_param file $IPSEC_CONN_FILE
+	procd_append_param file $IPSEC_SECRETS_FILE
+	procd_append_param file $STRONGSWAN_CONF_FILE
+	procd_append_param file /etc/strongswan.d/*.conf
+	procd_append_param file /etc/strongswan.d/charon/*.conf
+
+	procd_set_param respawn
+
+	procd_close_instance
+}
diff --git a/package/lean/luci-app-ipsec-vpnd/root/etc/ipsec.include b/package/lean/luci-app-ipsec-vpnd/root/etc/ipsec.include
new file mode 100755
index 0000000000..5c71080803
--- /dev/null
+++ b/package/lean/luci-app-ipsec-vpnd/root/etc/ipsec.include
@@ -0,0 +1,11 @@
+iptables -D FORWARD  -m policy --dir in --pol ipsec --proto esp -j ACCEPT 2>/dev/null
+iptables -D FORWARD  -m policy --dir out --pol ipsec --proto esp -j ACCEPT 2>/dev/null
+iptables -D INPUT -m policy --dir in --pol ipsec --proto esp -j ACCEPT 2>/dev/null
+iptables -D OUTPUT -m policy --dir out --pol ipsec --proto esp -j ACCEPT 2>/dev/null
+
+iptables -I FORWARD  -m policy --dir in --pol ipsec --proto esp -j ACCEPT
+iptables -I FORWARD  -m policy --dir out --pol ipsec --proto esp -j ACCEPT
+iptables -I INPUT -m policy --dir in --pol ipsec --proto esp -j ACCEPT
+iptables -I OUTPUT -m policy --dir out --pol ipsec --proto esp -j ACCEPT
+
+echo 1 > /proc/sys/net/ipv4/conf/br-lan/proxy_arp
diff --git a/package/lean/luci-app-ipsec-vpnd/root/etc/uci-defaults/ipsec b/package/lean/luci-app-ipsec-vpnd/root/etc/uci-defaults/ipsec
new file mode 100755
index 0000000000..b9eb66fb81
--- /dev/null
+++ b/package/lean/luci-app-ipsec-vpnd/root/etc/uci-defaults/ipsec
@@ -0,0 +1,54 @@
+#!/bin/sh
+
+uci -q batch <<-EOF >/dev/null
+	delete firewall.ipsecd
+	set firewall.ipsecd=include
+	set firewall.ipsecd.type=script
+	set firewall.ipsecd.path=/etc/ipsec.include
+	set firewall.ipsecd.reload=1
+	commit firewall
+EOF
+
+uci -q batch <<-EOF >/dev/null
+  delete firewall.ike
+  add firewall rule
+  rename firewall.@rule[-1]="ike"
+  set firewall.@rule[-1].name="ike"
+  set firewall.@rule[-1].target="ACCEPT"
+  set firewall.@rule[-1].src="wan"
+  set firewall.@rule[-1].proto="udp"
+  set firewall.@rule[-1].dest_port="500"
+  delete firewall.ipsec
+  add firewall rule
+  rename firewall.@rule[-1]="ipsec"
+  set firewall.@rule[-1].name="ipsec"
+  set firewall.@rule[-1].target="ACCEPT"
+  set firewall.@rule[-1].src="wan"
+  set firewall.@rule[-1].proto="udp"
+  set firewall.@rule[-1].dest_port="4500"
+  delete firewall.ah
+  add firewall rule
+  rename firewall.@rule[-1]="ah"
+  set firewall.@rule[-1].name="ah"
+  set firewall.@rule[-1].target="ACCEPT"
+  set firewall.@rule[-1].src="wan"
+  set firewall.@rule[-1].proto="ah"
+  delete firewall.esp
+  add firewall rule
+  rename firewall.@rule[-1]="esp"
+  set firewall.@rule[-1].name="esp"
+  set firewall.@rule[-1].target="ACCEPT"
+  set firewall.@rule[-1].src="wan"
+  set firewall.@rule[-1].proto="esp"
+  commit firewall
+EOF
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@ipsec[-1]
+	add ucitrack ipsec
+	set ucitrack.@ipsec[-1].init=ipsec
+	commit ucitrack
+EOF
+
+rm -f /tmp/luci-indexcache
+exit 0
diff --git a/package/lean/luci-app-mwan3helper/Makefile b/package/lean/luci-app-mwan3helper/Makefile
new file mode 100644
index 0000000000..38dedff054
--- /dev/null
+++ b/package/lean/luci-app-mwan3helper/Makefile
@@ -0,0 +1,18 @@
+# Copyright (C) 2016 Openwrt.org
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI support for MWAN3 Helper
+LUCI_DEPENDS:=+luci-app-mwan3 +pdnsd-alt +dnsmasq-full +ipset
+LUCI_PKGARCH:=all
+PKG_VERSION:=1
+PKG_RELEASE:=3
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
+
diff --git a/package/lean/luci-app-mwan3helper/luasrc/controller/mwan3helper.lua b/package/lean/luci-app-mwan3helper/luasrc/controller/mwan3helper.lua
new file mode 100644
index 0000000000..f2068d2284
--- /dev/null
+++ b/package/lean/luci-app-mwan3helper/luasrc/controller/mwan3helper.lua
@@ -0,0 +1,27 @@
+
+-- Licensed to the public under the GNU General Public License v3.
+
+module("luci.controller.mwan3helper", package.seeall)
+
+function index()
+	if not nixio.fs.access("/etc/config/mwan3helper") then
+		return
+	end
+
+
+  entry({"admin", "services", "mwan3helper"},alias("admin", "services", "mwan3helper", "client"),_("MWAN3 Helper"), 300).dependent = true
+
+  entry({"admin", "services", "mwan3helper", "client"},cbi("mwan3helper/client"),_("Settings"), 10).leaf = true
+ 	
+	entry({"admin", "services", "mwan3helper", "lists"},cbi("mwan3helper/list"),_("IPSet Lists"), 20).leaf = true
+	
+	entry({"admin","services","mwan3helper","status"},call("act_status")).leaf=true
+	
+end
+
+function act_status()
+  local e={}
+  e.running=luci.sys.call("pgrep mwan3dns >/dev/null")==0
+  luci.http.prepare_content("application/json")
+  luci.http.write_json(e)
+end
diff --git a/package/lean/luci-app-mwan3helper/luasrc/model/cbi/mwan3helper/client.lua b/package/lean/luci-app-mwan3helper/luasrc/model/cbi/mwan3helper/client.lua
new file mode 100644
index 0000000000..466b28c77e
--- /dev/null
+++ b/package/lean/luci-app-mwan3helper/luasrc/model/cbi/mwan3helper/client.lua
@@ -0,0 +1,30 @@
+
+
+m = Map("mwan3helper")
+m.title	= translate("MWAN3 Helper")
+m.description = translate("MWAN3 Helper generate IPSets")
+
+m:section(SimpleSection).template  = "mwan3helper/mwan3helper_status"
+
+s = m:section(TypedSection, "mwan3helper")
+s.addremove = false
+s.anonymous = true
+
+o = s:option(Flag, "enabled", translate("Enable GFW IPSet"))
+o.rmempty = false
+o.description = translate("启用 DNS 防污染并打开GFW IPSet（与SSR的GFW列表模式不能同时开启）")
+
+o = s:option(ListValue, "dns", translate("Anti-pollution DNS Server"))
+o:value("208.67.222.222:443", translate("OpenDNS (208.67.222.222)"))
+o:value("208.67.220.220:443", translate("OpenDNS (208.67.220.220)"))
+o:value("8.8.4.4:53", translate("Google Public DNS (8.8.4.4)"))
+o:value("8.8.8.8:53", translate("Google Public DNS (8.8.8.8)"))
+o:value("209.244.0.3:53", translate("Level 3 Public DNS (209.244.0.3)"))
+o:value("209.244.0.4:53", translate("Level 3 Public DNS (209.244.0.4)"))
+o:value("4.2.2.1:53", translate("Level 3 Public DNS (4.2.2.1)"))
+o:value("4.2.2.2:53", translate("Level 3 Public DNS (4.2.2.2)"))
+o:value("4.2.2.3:53", translate("Level 3 Public DNS (4.2.2.3)"))
+o:value("4.2.2.4:53", translate("Level 3 Public DNS (4.2.2.4)"))
+o:value("1.1.1.1:53", translate("Cloudflare DNS (1.1.1.1)"))
+
+return m
diff --git a/package/lean/luci-app-mwan3helper/luasrc/model/cbi/mwan3helper/list.lua b/package/lean/luci-app-mwan3helper/luasrc/model/cbi/mwan3helper/list.lua
new file mode 100644
index 0000000000..c908ff19ae
--- /dev/null
+++ b/package/lean/luci-app-mwan3helper/luasrc/model/cbi/mwan3helper/list.lua
@@ -0,0 +1,37 @@
+
+
+m = Map("mwan3helper")
+m.title	= translate("MWAN3 IPSets")
+
+s = m:section(TypedSection, "mwan3helper")
+s.addremove = false
+s.anonymous = true
+
+o = s:option(DummyValue, "gfwlist", translate("GFW列表"))
+o.description = translate("GFW列表数据： 5207 条，IPSET 名称为 gfwlist")
+
+o = s:option(DummyValue, "all_cn", translate("中国所有IP地址"))
+o.description = translate("中国所有IP地址路由表数据： 8304 条, IPSET 名称为 cn")
+
+o = s:option(DummyValue, "chinatelecom", translate("中国电信"))
+o.description = translate("中国电信路由表数据： 1948 条, IPSET 名称为 ct")
+
+o = s:option(DummyValue, "unicom_cnc", translate("中国联通/网通"))
+o.description = translate("中国联通/网通路由表数据： 895 条, IPSET 名称为 cnc")
+
+o = s:option(DummyValue, "cmcc", translate("中国移动"))
+o.description = translate("中国移动路由表数据： 55 条, IPSET 名称为 cmcc")
+
+o = s:option(DummyValue, "crtc", translate("中国铁通"))
+o.description = translate("中国铁通路由表数据： 16 条, IPSET 名称为 crtc")
+
+o = s:option(DummyValue, "cernet", translate("中国教育网"))
+o.description = translate("中国教育网路由表数据： 162 条, IPSET 名称为 cernet")
+
+o = s:option(DummyValue, "gwbn", translate("长城宽带/鹏博士"))
+o.description = translate("长城宽带/鹏博士： 94 条, IPSET 名称为 gwbn")
+
+o = s:option(DummyValue, "othernet", translate("中国其他ISP"))
+o.description = translate("中国其他ISP： 5134 条, IPSET 名称为 othernet")
+
+return m
diff --git a/package/lean/luci-app-mwan3helper/luasrc/view/mwan3helper/mwan3helper_status.htm b/package/lean/luci-app-mwan3helper/luasrc/view/mwan3helper/mwan3helper_status.htm
new file mode 100644
index 0000000000..44c6a39363
--- /dev/null
+++ b/package/lean/luci-app-mwan3helper/luasrc/view/mwan3helper/mwan3helper_status.htm
@@ -0,0 +1,22 @@
+<script type="text/javascript">//<![CDATA[
+XHR.poll(3, '<%=url([[admin]], [[services]], [[mwan3helper]], [[status]])%>', null,
+	function(x, data) {
+		var tb = document.getElementById('mwan3helper_status');
+		if (data && tb) {
+			if (data.running) {
+				var links = '<em><b><font color=green>MWAN3 Helper <%:RUNNING%></font></b></em>';
+				tb.innerHTML = links;
+			} else {
+				tb.innerHTML = '<em><b><font color=red>MWAN3 Helper <%:NOT RUNNING%></font></b></em>';
+			}
+		}
+	}
+);
+//]]>
+</script>
+<style>.mar-10 {margin-left: 50px; margin-right: 10px;}</style>
+<fieldset class="cbi-section">
+	<p id="mwan3helper_status">
+		<em><%:Collecting data...%></em>
+	</p>
+</fieldset>
\ No newline at end of file
diff --git a/package/lean/luci-app-mwan3helper/po/zh-cn/mwan3helper.po b/package/lean/luci-app-mwan3helper/po/zh-cn/mwan3helper.po
new file mode 100644
index 0000000000..ff41800367
--- /dev/null
+++ b/package/lean/luci-app-mwan3helper/po/zh-cn/mwan3helper.po
@@ -0,0 +1,24 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"Language: zh_CN\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+
+msgid "MWAN3 Helper"
+msgstr "MWAN3 分流助手"
+
+msgid "Settings"
+msgstr "设置"
+
+msgid "IPSet Lists"
+msgstr "IPSet列表"
+
+msgid "MWAN3 Helper generate IPSets"
+msgstr "自动生成中国地址段和各大ISP运营商的 IPSet 地址段，并解决国外域名的污染问题，帮助MWAN3分流 ISP/WireGuard 等"
+
+msgid "Enable GFW IPSet"
+msgstr "启用 GFW IPSet"
\ No newline at end of file
diff --git a/package/lean/luci-app-mwan3helper/root/etc/config/mwan3helper b/package/lean/luci-app-mwan3helper/root/etc/config/mwan3helper
new file mode 100644
index 0000000000..f47fff8c1b
--- /dev/null
+++ b/package/lean/luci-app-mwan3helper/root/etc/config/mwan3helper
@@ -0,0 +1,5 @@
+
+config mwan3helper 'config'
+	option dns '208.67.222.222:443'
+	option enabled '0'
+
diff --git a/package/lean/luci-app-mwan3helper/root/etc/init.d/mwan3helper b/package/lean/luci-app-mwan3helper/root/etc/init.d/mwan3helper
new file mode 100755
index 0000000000..6247ec2308
--- /dev/null
+++ b/package/lean/luci-app-mwan3helper/root/etc/init.d/mwan3helper
@@ -0,0 +1,169 @@
+#!/bin/sh /etc/rc.common
+# Copyright (c) 2011-2015 OpenWrt.org
+
+START=60
+
+DNSMASQ_RESTART=N
+DNS_SERVER="208.67.222.222"
+
+start_pdnsd() {
+#  DNS_SERVER=$(uci get flowoffload.@flow[0].dns_server 2>/dev/null)
+
+	[ -d /var/etc ] || mkdir -p /var/etc
+	
+  if [ ! -f /var/mwan3dns/pdnsd.cache ]; then
+    mkdir -p /var/mwan3dns
+    echo -ne "pd13\000\000\000\000" > /var/mwan3dns/pdnsd.cache
+    chown -R nobody.nogroup /var/mwan3dns
+	fi
+	
+	cat > /var/etc/mwan3dns.conf <<EOF
+global {
+    perm_cache=1024;        # dns�����С����λKB�����鲻Ҫд��̫��
+    cache_dir="/var/mwan3dns";     # �����ļ���λ��
+    pid_file = /var/run/mwan3dns.pid;
+    server_ip = 0.0.0.0;        # pdnsd������������0.0.0.0��ȫ������
+    server_port=53000;           # pdnsd�����Ķ˿ڣ���Ҫ�ͱ�ķ����ͻ����
+    status_ctl = on;
+    paranoid=on;                  # ��������ģʽ�����������DNS���������ص���������ַ�������÷���������
+    query_method=udp_only;      
+    neg_domain_pol = off;  
+    par_queries = 400;          # ���ͬʱ������
+    min_ttl = 1h;               # DNS�����̻���ʱ��
+    max_ttl = 1w;               # DNS��������ʱ��
+    timeout = 10;               # DNS����ʱʱ�䣬��λ��
+}
+
+server {  
+    label = "routine";         
+    ip = $DNS_SERVER; 
+    port = 53;    
+    timeout = 5;              
+    reject = 74.125.127.102,  # ��������IP��Ҳ����DNS��Ⱦһ��᷵�صĽ��������յ�����DNS����ᴥ����������TCPЭ��һ�㲻��������IP��
+        74.125.155.102,  
+        74.125.39.102,  
+        74.125.39.113,  
+        209.85.229.138,  
+        128.121.126.139,  
+        159.106.121.75,  
+        169.132.13.103,  
+        192.67.198.6,  
+        202.106.1.2,  
+        202.181.7.85,  
+        203.161.230.171,  
+        203.98.7.65,  
+        207.12.88.98,  
+        208.56.31.43,  
+        209.145.54.50,  
+        209.220.30.174,  
+        209.36.73.33,  
+        211.94.66.147,  
+        213.169.251.35,  
+        216.221.188.182,  
+        216.234.179.13,  
+        243.185.187.39,  
+        37.61.54.158,  
+        4.36.66.178,  
+        46.82.174.68,  
+        59.24.3.173,  
+        64.33.88.161,  
+        64.33.99.47,  
+        64.66.163.251,  
+        65.104.202.252,  
+        65.160.219.113,  
+        66.45.252.237,  
+        69.55.52.253,  
+        72.14.205.104,  
+        72.14.205.99,  
+        78.16.49.15,  
+        8.7.198.45,  
+        93.46.8.89,  
+        37.61.54.158,  
+        243.185.187.39,  
+        190.93.247.4,  
+        190.93.246.4,  
+        190.93.245.4,  
+        190.93.244.4,  
+        65.49.2.178,  
+        189.163.17.5,  
+        23.89.5.60,  
+        49.2.123.56,  
+        54.76.135.1,  
+        77.4.7.92,  
+        118.5.49.6,  
+        159.24.3.173,  
+        188.5.4.96,  
+        197.4.4.12,  
+        220.250.64.24,  
+        243.185.187.30,  
+        249.129.46.48,  
+        253.157.14.165;  
+    reject_policy = fail;  
+}
+
+server {  
+    label = "special";                  # ������д  
+    ip = 208.67.222.222,208.67.220.220; # ����Ϊ����DNS�������� ip ��ַ  
+    port = 443;                        # �Ƽ�ʹ��53����Ķ˿ڣ�DNS����������֧�֣� 
+    proxy_only = on;
+    timeout = 5;  
+}  
+
+source {
+	owner=localhost;
+//	serve_aliases=on;
+	file="/etc/hosts";
+}
+
+rr {
+	name=localhost;
+	reverse=on;
+	a=127.0.0.1;
+	owner=localhost;
+	soa=localhost,root.localhost,42,86400,900,86400,86400;
+}
+EOF
+  
+  [ -d /var/sbin ] || mkdir -p /var/sbin
+  [ -f /var/sbin/mwan3dns ] || cp -a /usr/sbin/pdnsd /var/sbin/mwan3dns
+	/var/sbin/mwan3dns -c /var/etc/mwan3dns.conf -d
+	echo "Start MWAN3 Helper DNS"
+}
+
+stop_pdnsd() {
+  kill $(pidof mwan3dns) >/dev/null 2>&1 || kill -9 $(ps | grep mwan3dns | grep -v grep | awk '{print $1}') >/dev/null 2>&1
+  echo "Stop MWAN3 Helper DNS"
+}
+
+
+start(){
+  /etc/mwan3helper/genipset.sh cn '/etc/mwan3helper/all_cn.txt'
+  /etc/mwan3helper/genipset.sh ct '/etc/mwan3helper/chinatelecom.txt'
+  /etc/mwan3helper/genipset.sh cnc '/etc/mwan3helper/unicom_cnc.txt'
+  /etc/mwan3helper/genipset.sh cmcc '/etc/mwan3helper/cmcc.txt'
+  /etc/mwan3helper/genipset.sh crtc '/etc/mwan3helper/crtc.txt'
+  /etc/mwan3helper/genipset.sh cernet '/etc/mwan3helper/cernet.txt'
+  /etc/mwan3helper/genipset.sh gwbn '/etc/mwan3helper/gwbn.txt'
+  /etc/mwan3helper/genipset.sh othernet '/etc/mwan3helper/othernet.txt'
+  en=$(uci get mwan3helper.config.enabled 2>/dev/null)
+  if [ $en -eq 1 ];  then
+    start_pdnsd
+    mkdir -p /tmp/etc/dnsmasq-mwan3.d
+    ipset -N gfwlist hash:net 2>/dev/null
+    awk '!/^$/&&!/^#/{printf("ipset=/.%s/'"gfwlist"'\n",$0)}' /etc/mwan3helper/gfw.txt > /tmp/etc/dnsmasq-mwan3.d/mwan3_gfwlist.conf
+    awk '!/^$/&&!/^#/{printf("server=/.%s/'"127.0.0.1#53000"'\n",$0)}' /etc/mwan3helper/gfw.txt >> /tmp/etc/dnsmasq-mwan3.d/mwan3_gfwlist.conf
+    cat > /tmp/dnsmasq.d/dnsmasq-mwan3.conf <<EOF
+conf-dir=/var/etc/dnsmasq-mwan3.d
+EOF
+    /etc/init.d/dnsmasq restart
+  fi
+}
+
+stop(){
+	  stop_pdnsd
+	  rm -f /tmp/dnsmasq.d/dnsmasq-mwan3.conf
+    /etc/init.d/dnsmasq restart
+}
+
+
+
diff --git a/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/all_cn.txt b/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/all_cn.txt
new file mode 100644
index 0000000000..77bceb2733
--- /dev/null
+++ b/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/all_cn.txt
@@ -0,0 +1,8304 @@
+1.0.1.0/24
+1.0.2.0/23
+1.0.8.0/21
+1.0.32.0/19
+1.1.0.0/24
+1.1.2.0/23
+1.1.4.0/22
+1.1.8.0/24
+1.1.9.0/24
+1.1.10.0/23
+1.1.12.0/22
+1.1.16.0/20
+1.1.32.0/19
+1.2.0.0/23
+1.2.2.0/24
+1.2.4.0/24
+1.2.5.0/24
+1.2.6.0/23
+1.2.8.0/24
+1.2.9.0/24
+1.2.10.0/23
+1.2.12.0/22
+1.2.16.0/20
+1.2.32.0/19
+1.2.64.0/18
+1.3.0.0/16
+1.4.1.0/24
+1.4.2.0/23
+1.4.4.0/24
+1.4.5.0/24
+1.4.6.0/23
+1.4.8.0/21
+1.4.16.0/20
+1.4.32.0/19
+1.4.64.0/18
+1.8.0.0/16
+1.10.0.0/21
+1.10.8.0/23
+1.10.11.0/24
+1.10.12.0/22
+1.10.16.0/20
+1.10.32.0/19
+1.10.64.0/18
+1.12.0.0/14
+1.24.0.0/13
+1.45.0.0/16
+1.48.0.0/15
+1.50.0.0/16
+1.51.0.0/16
+1.56.0.0/13
+1.68.0.0/14
+1.80.0.0/13
+1.88.0.0/14
+1.92.0.0/15
+1.94.0.0/15
+1.116.0.0/15
+1.118.0.0/16
+1.119.0.0/17
+1.119.128.0/17
+1.180.0.0/14
+1.184.0.0/15
+1.188.0.0/14
+1.192.0.0/13
+1.202.0.0/15
+1.204.0.0/14
+14.0.0.0/21
+14.0.12.0/22
+14.1.0.0/22
+14.1.24.0/22
+14.1.96.0/22
+14.1.108.0/22
+14.16.0.0/12
+14.102.128.0/22
+14.102.156.0/22
+14.102.180.0/22
+14.103.0.0/16
+14.104.0.0/13
+14.112.0.0/12
+14.130.0.0/15
+14.134.0.0/15
+14.144.0.0/12
+14.192.60.0/22
+14.192.76.0/22
+14.196.0.0/15
+14.204.0.0/15
+14.208.0.0/12
+27.0.128.0/22
+27.0.132.0/22
+27.0.160.0/22
+27.0.164.0/22
+27.0.188.0/22
+27.0.204.0/22
+27.0.208.0/22
+27.0.212.0/22
+27.8.0.0/13
+27.16.0.0/12
+27.34.232.0/21
+27.36.0.0/14
+27.40.0.0/13
+27.50.40.0/21
+27.50.128.0/17
+27.54.72.0/21
+27.54.152.0/21
+27.54.192.0/18
+27.98.208.0/20
+27.98.224.0/19
+27.99.128.0/17
+27.103.0.0/16
+27.106.128.0/18
+27.106.204.0/22
+27.109.32.0/19
+27.109.124.0/22
+27.112.0.0/18
+27.112.80.0/20
+27.112.112.0/22
+27.112.116.0/22
+27.113.128.0/18
+27.115.0.0/17
+27.116.44.0/22
+27.121.72.0/21
+27.121.120.0/21
+27.123.232.0/22
+27.128.0.0/15
+27.131.220.0/22
+27.144.0.0/16
+27.148.0.0/14
+27.152.0.0/13
+27.184.0.0/13
+27.192.0.0/11
+27.224.0.0/14
+36.0.0.0/22
+36.0.8.0/21
+36.0.16.0/20
+36.0.32.0/19
+36.0.64.0/18
+36.0.128.0/17
+36.1.0.0/16
+36.4.0.0/14
+36.16.0.0/12
+36.32.0.0/14
+36.36.0.0/16
+36.37.0.0/19
+36.37.36.0/23
+36.37.39.0/24
+36.37.40.0/21
+36.37.48.0/20
+36.40.0.0/13
+36.48.0.0/15
+36.51.0.0/16
+36.56.0.0/13
+36.96.0.0/11
+36.128.0.0/10
+36.192.0.0/11
+36.248.0.0/14
+36.254.0.0/16
+36.255.116.0/22
+36.255.128.0/22
+36.255.164.0/22
+36.255.172.0/22
+36.255.176.0/22
+36.255.220.0/22
+39.0.0.0/24
+39.0.2.0/23
+39.0.4.0/22
+39.0.8.0/21
+39.0.16.0/20
+39.0.32.0/19
+39.0.64.0/18
+39.0.128.0/17
+39.64.0.0/11
+39.96.0.0/13
+39.104.0.0/14
+39.108.0.0/16
+39.128.0.0/10
+40.72.0.0/15
+40.125.128.0/17
+40.126.64.0/18
+42.0.0.0/22
+42.0.8.0/21
+42.0.16.0/21
+42.0.24.0/22
+42.0.32.0/19
+42.0.128.0/17
+42.1.0.0/19
+42.1.32.0/20
+42.1.48.0/21
+42.1.56.0/22
+42.1.128.0/17
+42.4.0.0/14
+42.48.0.0/15
+42.50.0.0/16
+42.51.0.0/16
+42.52.0.0/14
+42.56.0.0/14
+42.62.0.0/17
+42.62.128.0/19
+42.62.160.0/20
+42.62.180.0/22
+42.62.184.0/21
+42.63.0.0/16
+42.80.0.0/15
+42.83.64.0/20
+42.83.80.0/22
+42.83.88.0/21
+42.83.96.0/19
+42.83.128.0/17
+42.84.0.0/14
+42.88.0.0/13
+42.96.64.0/19
+42.96.96.0/21
+42.96.108.0/22
+42.96.112.0/20
+42.96.128.0/17
+42.97.0.0/16
+42.99.0.0/18
+42.99.64.0/19
+42.99.96.0/20
+42.99.112.0/22
+42.99.120.0/21
+42.100.0.0/14
+42.120.0.0/15
+42.122.0.0/16
+42.123.0.0/19
+42.123.36.0/22
+42.123.40.0/21
+42.123.48.0/20
+42.123.64.0/18
+42.123.128.0/17
+42.128.0.0/12
+42.156.0.0/19
+42.156.36.0/22
+42.156.40.0/21
+42.156.48.0/20
+42.156.64.0/18
+42.156.128.0/17
+42.157.0.0/16
+42.158.0.0/16
+42.159.0.0/16
+42.160.0.0/12
+42.176.0.0/13
+42.184.0.0/15
+42.186.0.0/16
+42.187.0.0/18
+42.187.64.0/19
+42.187.96.0/20
+42.187.112.0/21
+42.187.120.0/22
+42.187.128.0/17
+42.192.0.0/15
+42.194.0.0/21
+42.194.8.0/22
+42.194.12.0/22
+42.194.16.0/20
+42.194.32.0/19
+42.194.64.0/18
+42.194.128.0/17
+42.195.0.0/16
+42.196.0.0/14
+42.201.0.0/17
+42.202.0.0/15
+42.204.0.0/14
+42.208.0.0/12
+42.224.0.0/12
+42.240.0.0/17
+42.240.128.0/17
+42.242.0.0/15
+42.244.0.0/14
+42.248.0.0/13
+43.224.12.0/22
+43.224.24.0/22
+43.224.44.0/22
+43.224.52.0/22
+43.224.56.0/22
+43.224.64.0/22
+43.224.68.0/22
+43.224.72.0/22
+43.224.80.0/22
+43.224.100.0/22
+43.224.144.0/22
+43.224.160.0/22
+43.224.176.0/22
+43.224.184.0/22
+43.224.200.0/22
+43.224.204.0/22
+43.224.208.0/22
+43.224.212.0/22
+43.224.216.0/22
+43.224.240.0/22
+43.225.76.0/22
+43.225.84.0/22
+43.225.120.0/22
+43.225.124.0/22
+43.225.140.0/22
+43.225.172.0/22
+43.225.180.0/22
+43.225.208.0/22
+43.225.216.0/22
+43.225.220.0/22
+43.225.224.0/22
+43.225.228.0/22
+43.225.232.0/22
+43.225.236.0/22
+43.225.240.0/22
+43.225.244.0/22
+43.225.252.0/22
+43.226.32.0/22
+43.226.36.0/22
+43.226.40.0/22
+43.226.44.0/22
+43.226.48.0/22
+43.226.52.0/22
+43.226.56.0/22
+43.226.60.0/22
+43.226.64.0/22
+43.226.68.0/22
+43.226.72.0/22
+43.226.76.0/22
+43.226.80.0/22
+43.226.84.0/22
+43.226.88.0/22
+43.226.92.0/22
+43.226.96.0/22
+43.226.100.0/22
+43.226.104.0/22
+43.226.108.0/22
+43.226.112.0/22
+43.226.116.0/22
+43.226.120.0/22
+43.226.128.0/22
+43.226.132.0/22
+43.226.136.0/22
+43.226.140.0/22
+43.226.144.0/22
+43.226.148.0/22
+43.226.152.0/22
+43.226.156.0/22
+43.226.160.0/22
+43.226.164.0/22
+43.226.168.0/22
+43.226.172.0/22
+43.226.176.0/22
+43.226.180.0/22
+43.226.184.0/22
+43.226.188.0/22
+43.226.192.0/22
+43.226.196.0/22
+43.226.200.0/22
+43.226.204.0/22
+43.226.208.0/22
+43.226.212.0/22
+43.226.236.0/22
+43.226.240.0/22
+43.226.244.0/22
+43.226.248.0/22
+43.226.252.0/22
+43.227.0.0/22
+43.227.4.0/22
+43.227.8.0/22
+43.227.32.0/22
+43.227.36.0/22
+43.227.40.0/22
+43.227.44.0/22
+43.227.48.0/22
+43.227.52.0/22
+43.227.56.0/22
+43.227.60.0/22
+43.227.64.0/22
+43.227.68.0/22
+43.227.72.0/22
+43.227.76.0/22
+43.227.80.0/22
+43.227.84.0/22
+43.227.88.0/22
+43.227.92.0/22
+43.227.96.0/22
+43.227.100.0/22
+43.227.104.0/22
+43.227.136.0/22
+43.227.140.0/22
+43.227.144.0/22
+43.227.152.0/22
+43.227.156.0/22
+43.227.160.0/22
+43.227.164.0/22
+43.227.168.0/22
+43.227.172.0/22
+43.227.176.0/22
+43.227.180.0/22
+43.227.188.0/22
+43.227.192.0/22
+43.227.196.0/22
+43.227.200.0/22
+43.227.204.0/22
+43.227.208.0/22
+43.227.212.0/22
+43.227.216.0/22
+43.227.220.0/22
+43.227.232.0/22
+43.227.248.0/22
+43.227.252.0/22
+43.228.0.0/22
+43.228.4.0/22
+43.228.8.0/22
+43.228.12.0/22
+43.228.16.0/22
+43.228.20.0/22
+43.228.24.0/22
+43.228.28.0/22
+43.228.32.0/22
+43.228.36.0/22
+43.228.40.0/22
+43.228.44.0/22
+43.228.48.0/22
+43.228.52.0/22
+43.228.56.0/22
+43.228.60.0/22
+43.228.64.0/22
+43.228.68.0/22
+43.228.76.0/22
+43.228.100.0/22
+43.228.116.0/22
+43.228.120.0/22
+43.228.132.0/22
+43.228.136.0/22
+43.228.148.0/22
+43.228.152.0/22
+43.228.188.0/22
+43.229.16.0/22
+43.229.40.0/22
+43.229.48.0/22
+43.229.56.0/22
+43.229.96.0/22
+43.229.120.0/22
+43.229.136.0/22
+43.229.140.0/22
+43.229.144.0/22
+43.229.168.0/22
+43.229.172.0/22
+43.229.176.0/22
+43.229.180.0/22
+43.229.184.0/22
+43.229.188.0/22
+43.229.192.0/22
+43.229.196.0/22
+43.229.216.0/22
+43.229.220.0/22
+43.229.232.0/22
+43.229.236.0/22
+43.230.20.0/22
+43.230.32.0/22
+43.230.68.0/22
+43.230.72.0/22
+43.230.84.0/22
+43.230.124.0/22
+43.230.136.0/22
+43.230.168.0/22
+43.230.220.0/22
+43.230.224.0/22
+43.230.228.0/22
+43.230.232.0/22
+43.230.236.0/22
+43.230.240.0/22
+43.230.244.0/22
+43.230.248.0/22
+43.230.252.0/22
+43.231.32.0/22
+43.231.36.0/22
+43.231.40.0/22
+43.231.44.0/22
+43.231.80.0/22
+43.231.84.0/22
+43.231.88.0/22
+43.231.92.0/22
+43.231.96.0/22
+43.231.100.0/22
+43.231.104.0/22
+43.231.108.0/22
+43.231.136.0/22
+43.231.140.0/22
+43.231.144.0/22
+43.231.148.0/22
+43.231.152.0/22
+43.231.156.0/22
+43.231.160.0/22
+43.231.164.0/22
+43.231.168.0/22
+43.231.172.0/22
+43.231.176.0/22
+43.231.180.0/22
+43.236.0.0/22
+43.236.4.0/22
+43.236.8.0/22
+43.236.12.0/22
+43.236.16.0/22
+43.236.20.0/22
+43.236.24.0/22
+43.236.28.0/22
+43.236.32.0/22
+43.236.36.0/22
+43.236.40.0/22
+43.236.44.0/22
+43.236.48.0/22
+43.236.52.0/22
+43.236.56.0/22
+43.236.60.0/22
+43.236.64.0/22
+43.236.68.0/22
+43.236.72.0/22
+43.236.76.0/22
+43.236.80.0/22
+43.236.84.0/22
+43.236.88.0/22
+43.236.92.0/22
+43.236.96.0/22
+43.236.100.0/22
+43.236.104.0/22
+43.236.108.0/22
+43.236.112.0/22
+43.236.116.0/22
+43.236.120.0/22
+43.236.124.0/22
+43.236.128.0/22
+43.236.132.0/22
+43.236.136.0/22
+43.236.140.0/22
+43.236.144.0/22
+43.236.148.0/22
+43.236.152.0/22
+43.236.156.0/22
+43.236.160.0/22
+43.236.164.0/22
+43.236.168.0/22
+43.236.172.0/22
+43.236.176.0/22
+43.236.180.0/22
+43.236.184.0/22
+43.236.188.0/22
+43.236.192.0/22
+43.236.196.0/22
+43.236.200.0/22
+43.236.204.0/22
+43.236.208.0/22
+43.236.212.0/22
+43.236.216.0/22
+43.236.220.0/22
+43.236.224.0/22
+43.236.228.0/22
+43.236.232.0/22
+43.236.236.0/22
+43.236.240.0/22
+43.236.244.0/22
+43.236.248.0/22
+43.236.252.0/22
+43.237.0.0/22
+43.237.4.0/22
+43.237.8.0/22
+43.237.12.0/22
+43.237.16.0/22
+43.237.20.0/22
+43.237.24.0/22
+43.237.28.0/22
+43.237.32.0/22
+43.237.36.0/22
+43.237.40.0/22
+43.237.44.0/22
+43.237.48.0/22
+43.237.52.0/22
+43.237.56.0/22
+43.237.60.0/22
+43.237.64.0/22
+43.237.68.0/22
+43.237.72.0/22
+43.237.76.0/22
+43.237.80.0/22
+43.237.84.0/22
+43.237.88.0/22
+43.237.92.0/22
+43.237.96.0/22
+43.237.100.0/22
+43.237.104.0/22
+43.237.108.0/22
+43.237.112.0/22
+43.237.116.0/22
+43.237.120.0/22
+43.237.124.0/22
+43.237.128.0/22
+43.237.132.0/22
+43.237.136.0/22
+43.237.140.0/22
+43.237.144.0/22
+43.237.148.0/22
+43.237.152.0/22
+43.237.156.0/22
+43.237.160.0/22
+43.237.164.0/22
+43.237.168.0/22
+43.237.172.0/22
+43.237.176.0/22
+43.237.180.0/22
+43.237.184.0/22
+43.237.188.0/22
+43.237.192.0/22
+43.237.196.0/22
+43.237.200.0/22
+43.237.204.0/22
+43.237.208.0/22
+43.237.212.0/22
+43.237.216.0/22
+43.237.220.0/22
+43.237.224.0/22
+43.237.228.0/22
+43.237.232.0/22
+43.237.236.0/22
+43.237.240.0/22
+43.237.244.0/22
+43.237.248.0/22
+43.237.252.0/22
+43.238.0.0/22
+43.238.4.0/22
+43.238.8.0/22
+43.238.12.0/22
+43.238.16.0/22
+43.238.20.0/22
+43.238.24.0/22
+43.238.28.0/22
+43.238.32.0/22
+43.238.36.0/22
+43.238.40.0/22
+43.238.44.0/22
+43.238.48.0/22
+43.238.52.0/22
+43.238.56.0/22
+43.238.60.0/22
+43.238.64.0/22
+43.238.68.0/22
+43.238.72.0/22
+43.238.76.0/22
+43.238.80.0/22
+43.238.84.0/22
+43.238.88.0/22
+43.238.92.0/22
+43.238.96.0/22
+43.238.100.0/22
+43.238.104.0/22
+43.238.108.0/22
+43.238.112.0/22
+43.238.116.0/22
+43.238.120.0/22
+43.238.124.0/22
+43.238.128.0/22
+43.238.132.0/22
+43.238.136.0/22
+43.238.140.0/22
+43.238.144.0/22
+43.238.148.0/22
+43.238.152.0/22
+43.238.156.0/22
+43.238.160.0/22
+43.238.164.0/22
+43.238.168.0/22
+43.238.172.0/22
+43.238.176.0/22
+43.238.180.0/22
+43.238.184.0/22
+43.238.188.0/22
+43.238.192.0/22
+43.238.196.0/22
+43.238.200.0/22
+43.238.204.0/22
+43.238.208.0/22
+43.238.212.0/22
+43.238.216.0/22
+43.238.220.0/22
+43.238.224.0/22
+43.238.228.0/22
+43.238.232.0/22
+43.238.236.0/22
+43.238.240.0/22
+43.238.244.0/22
+43.238.248.0/22
+43.238.252.0/22
+43.239.0.0/22
+43.239.4.0/22
+43.239.8.0/21
+43.239.16.0/22
+43.239.20.0/22
+43.239.24.0/22
+43.239.28.0/22
+43.239.32.0/22
+43.239.36.0/22
+43.239.40.0/22
+43.239.44.0/22
+43.239.48.0/22
+43.239.116.0/22
+43.239.120.0/22
+43.239.172.0/22
+43.239.176.0/22
+43.240.0.0/22
+43.240.48.0/22
+43.240.56.0/22
+43.240.60.0/22
+43.240.68.0/22
+43.240.72.0/22
+43.240.76.0/22
+43.240.84.0/22
+43.240.124.0/22
+43.240.128.0/22
+43.240.132.0/22
+43.240.136.0/22
+43.240.156.0/22
+43.240.160.0/22
+43.240.164.0/22
+43.240.168.0/22
+43.240.172.0/22
+43.240.176.0/22
+43.240.180.0/22
+43.240.184.0/22
+43.240.188.0/22
+43.240.192.0/22
+43.240.196.0/22
+43.240.200.0/22
+43.240.204.0/22
+43.240.208.0/22
+43.240.212.0/22
+43.240.216.0/22
+43.240.220.0/22
+43.240.236.0/22
+43.240.240.0/22
+43.240.244.0/22
+43.240.248.0/22
+43.240.252.0/22
+43.241.0.0/22
+43.241.4.0/22
+43.241.8.0/22
+43.241.12.0/22
+43.241.16.0/22
+43.241.20.0/22
+43.241.48.0/22
+43.241.76.0/22
+43.241.80.0/22
+43.241.84.0/22
+43.241.88.0/22
+43.241.92.0/22
+43.241.112.0/22
+43.241.168.0/22
+43.241.172.0/22
+43.241.176.0/22
+43.241.180.0/22
+43.241.184.0/22
+43.241.196.0/22
+43.241.208.0/22
+43.241.212.0/22
+43.241.216.0/22
+43.241.220.0/22
+43.241.224.0/22
+43.241.228.0/22
+43.241.232.0/22
+43.241.236.0/22
+43.241.240.0/22
+43.241.248.0/22
+43.241.252.0/22
+43.242.8.0/22
+43.242.12.0/22
+43.242.16.0/22
+43.242.20.0/22
+43.242.24.0/22
+43.242.28.0/22
+43.242.44.0/22
+43.242.48.0/22
+43.242.52.0/22
+43.242.56.0/22
+43.242.60.0/22
+43.242.64.0/22
+43.242.72.0/22
+43.242.76.0/22
+43.242.80.0/22
+43.242.84.0/22
+43.242.88.0/22
+43.242.92.0/22
+43.242.96.0/22
+43.242.144.0/22
+43.242.148.0/22
+43.242.152.0/22
+43.242.156.0/22
+43.242.160.0/22
+43.242.164.0/22
+43.242.168.0/22
+43.242.180.0/22
+43.242.188.0/22
+43.242.192.0/22
+43.242.196.0/22
+43.242.204.0/22
+43.242.216.0/22
+43.242.220.0/22
+43.242.252.0/22
+43.243.4.0/22
+43.243.8.0/22
+43.243.12.0/22
+43.243.16.0/22
+43.243.24.0/22
+43.243.88.0/22
+43.243.128.0/22
+43.243.136.0/22
+43.243.144.0/22
+43.243.148.0/22
+43.243.156.0/22
+43.243.168.0/22
+43.243.180.0/22
+43.243.188.0/22
+43.243.228.0/22
+43.243.232.0/22
+43.243.244.0/22
+43.246.0.0/22
+43.246.4.0/22
+43.246.8.0/22
+43.246.12.0/22
+43.246.16.0/22
+43.246.20.0/22
+43.246.24.0/22
+43.246.28.0/22
+43.246.32.0/22
+43.246.36.0/22
+43.246.40.0/22
+43.246.44.0/22
+43.246.48.0/22
+43.246.52.0/22
+43.246.56.0/22
+43.246.60.0/22
+43.246.64.0/22
+43.246.68.0/22
+43.246.72.0/22
+43.246.76.0/22
+43.246.80.0/22
+43.246.84.0/22
+43.246.88.0/22
+43.246.92.0/22
+43.246.96.0/22
+43.246.112.0/22
+43.246.212.0/22
+43.246.228.0/22
+43.247.4.0/22
+43.247.8.0/22
+43.247.44.0/22
+43.247.48.0/22
+43.247.68.0/22
+43.247.76.0/22
+43.247.84.0/22
+43.247.88.0/22
+43.247.92.0/22
+43.247.96.0/22
+43.247.100.0/22
+43.247.108.0/22
+43.247.112.0/22
+43.247.148.0/22
+43.247.152.0/22
+43.247.176.0/22
+43.247.180.0/22
+43.247.184.0/22
+43.247.188.0/22
+43.247.196.0/22
+43.247.200.0/22
+43.247.204.0/22
+43.247.208.0/22
+43.247.212.0/22
+43.247.216.0/22
+43.247.220.0/22
+43.247.224.0/22
+43.247.228.0/22
+43.247.232.0/22
+43.247.236.0/22
+43.247.240.0/22
+43.247.244.0/22
+43.247.248.0/22
+43.247.252.0/22
+43.248.0.0/22
+43.248.4.0/22
+43.248.20.0/22
+43.248.28.0/22
+43.248.48.0/22
+43.248.76.0/22
+43.248.80.0/22
+43.248.84.0/22
+43.248.88.0/22
+43.248.92.0/22
+43.248.96.0/22
+43.248.100.0/22
+43.248.104.0/22
+43.248.108.0/22
+43.248.112.0/22
+43.248.116.0/22
+43.248.120.0/22
+43.248.124.0/22
+43.248.128.0/22
+43.248.132.0/22
+43.248.136.0/22
+43.248.140.0/22
+43.248.144.0/22
+43.248.148.0/22
+43.248.176.0/22
+43.248.180.0/22
+43.248.184.0/22
+43.248.188.0/22
+43.248.192.0/22
+43.248.196.0/22
+43.248.200.0/22
+43.248.204.0/22
+43.248.208.0/22
+43.248.228.0/22
+43.248.232.0/22
+43.248.244.0/22
+43.249.4.0/22
+43.249.8.0/22
+43.249.24.0/22
+43.249.120.0/22
+43.249.132.0/22
+43.249.136.0/22
+43.249.144.0/22
+43.249.148.0/22
+43.249.152.0/22
+43.249.156.0/22
+43.249.160.0/22
+43.249.164.0/22
+43.249.168.0/22
+43.249.192.0/22
+43.249.236.0/22
+43.250.4.0/22
+43.250.12.0/22
+43.250.16.0/22
+43.250.20.0/22
+43.250.28.0/22
+43.250.32.0/22
+43.250.36.0/22
+43.250.72.0/22
+43.250.96.0/22
+43.250.100.0/22
+43.250.104.0/22
+43.250.108.0/22
+43.250.112.0/22
+43.250.116.0/22
+43.250.128.0/22
+43.250.144.0/22
+43.250.148.0/22
+43.250.160.0/22
+43.250.168.0/22
+43.250.172.0/22
+43.250.176.0/22
+43.250.200.0/22
+43.250.212.0/22
+43.250.216.0/22
+43.250.220.0/22
+43.250.236.0/22
+43.250.244.0/22
+43.251.4.0/22
+43.251.8.0/22
+43.251.12.0/22
+43.251.36.0/22
+43.251.100.0/22
+43.251.116.0/22
+43.251.192.0/22
+43.251.232.0/22
+43.251.236.0/22
+43.251.244.0/22
+43.252.40.0/22
+43.252.48.0/22
+43.252.56.0/22
+43.252.224.0/22
+43.254.0.0/22
+43.254.4.0/22
+43.254.8.0/22
+43.254.24.0/22
+43.254.36.0/22
+43.254.44.0/22
+43.254.52.0/22
+43.254.64.0/22
+43.254.72.0/22
+43.254.84.0/22
+43.254.88.0/22
+43.254.92.0/22
+43.254.100.0/22
+43.254.104.0/22
+43.254.112.0/22
+43.254.116.0/22
+43.254.128.0/22
+43.254.136.0/22
+43.254.140.0/22
+43.254.144.0/22
+43.254.148.0/22
+43.254.152.0/22
+43.254.156.0/22
+43.254.168.0/22
+43.254.172.0/22
+43.254.180.0/22
+43.254.184.0/22
+43.254.188.0/22
+43.254.192.0/22
+43.254.196.0/22
+43.254.200.0/22
+43.254.208.0/22
+43.254.220.0/22
+43.254.224.0/22
+43.254.228.0/22
+43.254.232.0/22
+43.254.236.0/22
+43.254.240.0/22
+43.254.248.0/22
+43.254.252.0/22
+43.255.0.0/22
+43.255.4.0/22
+43.255.8.0/22
+43.255.16.0/22
+43.255.48.0/22
+43.255.64.0/22
+43.255.68.0/22
+43.255.72.0/22
+43.255.76.0/22
+43.255.84.0/22
+43.255.96.0/22
+43.255.108.0/22
+43.255.144.0/22
+43.255.168.0/22
+43.255.176.0/22
+43.255.184.0/22
+43.255.192.0/22
+43.255.200.0/22
+43.255.204.0/22
+43.255.208.0/22
+43.255.212.0/22
+43.255.224.0/22
+43.255.228.0/22
+43.255.232.0/22
+43.255.244.0/22
+45.40.192.0/18
+45.65.16.0/22
+45.65.20.0/22
+45.65.24.0/22
+45.65.28.0/22
+45.112.132.0/22
+45.112.188.0/22
+45.112.208.0/22
+45.112.212.0/22
+45.112.216.0/22
+45.112.220.0/22
+45.112.228.0/22
+45.112.232.0/22
+45.112.236.0/22
+45.113.12.0/22
+45.113.16.0/22
+45.113.20.0/22
+45.113.24.0/22
+45.113.28.0/22
+45.113.40.0/22
+45.113.52.0/22
+45.113.56.0/22
+45.113.72.0/22
+45.113.144.0/22
+45.113.148.0/22
+45.113.168.0/22
+45.113.176.0/22
+45.113.184.0/22
+45.113.200.0/22
+45.113.204.0/22
+45.113.208.0/22
+45.113.212.0/22
+45.113.216.0/22
+45.113.220.0/22
+45.113.240.0/22
+45.113.252.0/22
+45.114.0.0/22
+45.114.12.0/22
+45.114.32.0/22
+45.114.40.0/22
+45.114.52.0/22
+45.114.96.0/22
+45.114.104.0/22
+45.114.108.0/22
+45.114.124.0/22
+45.114.136.0/22
+45.114.196.0/22
+45.114.200.0/22
+45.114.228.0/22
+45.114.252.0/22
+45.115.44.0/22
+45.115.100.0/22
+45.115.120.0/22
+45.115.132.0/22
+45.115.144.0/22
+45.115.156.0/22
+45.115.164.0/22
+45.115.200.0/22
+45.115.212.0/22
+45.115.228.0/22
+45.115.236.0/22
+45.115.244.0/22
+45.115.248.0/22
+45.116.12.0/22
+45.116.16.0/22
+45.116.24.0/22
+45.116.32.0/22
+45.116.36.0/22
+45.116.52.0/22
+45.116.96.0/22
+45.116.100.0/22
+45.116.140.0/22
+45.116.152.0/22
+45.116.208.0/22
+45.117.8.0/22
+45.117.20.0/22
+45.117.68.0/22
+45.117.124.0/22
+45.117.252.0/22
+45.119.52.0/22
+45.119.60.0/22
+45.119.64.0/22
+45.119.68.0/22
+45.119.72.0/22
+45.119.104.0/22
+45.119.116.0/22
+45.119.232.0/22
+45.120.100.0/22
+45.120.140.0/22
+45.120.164.0/22
+45.120.220.0/22
+45.120.240.0/22
+45.121.20.0/22
+45.121.52.0/22
+45.121.64.0/22
+45.121.68.0/22
+45.121.72.0/22
+45.121.92.0/22
+45.121.96.0/22
+45.121.104.0/22
+45.121.172.0/22
+45.121.176.0/22
+45.121.212.0/22
+45.121.240.0/22
+45.121.244.0/22
+45.121.248.0/22
+45.121.252.0/22
+45.122.0.0/22
+45.122.4.0/22
+45.122.8.0/22
+45.122.12.0/22
+45.122.16.0/22
+45.122.20.0/22
+45.122.24.0/22
+45.122.28.0/22
+45.122.32.0/22
+45.122.36.0/22
+45.122.40.0/22
+45.122.60.0/22
+45.122.64.0/22
+45.122.68.0/22
+45.122.72.0/22
+45.122.76.0/22
+45.122.80.0/22
+45.122.84.0/22
+45.122.88.0/22
+45.122.92.0/22
+45.122.96.0/21
+45.122.104.0/22
+45.122.108.0/22
+45.122.112.0/22
+45.122.116.0/22
+45.122.160.0/22
+45.122.164.0/22
+45.122.168.0/22
+45.122.172.0/22
+45.122.176.0/22
+45.122.180.0/22
+45.122.184.0/22
+45.122.188.0/22
+45.122.192.0/22
+45.122.196.0/22
+45.122.200.0/22
+45.122.204.0/22
+45.122.208.0/22
+45.122.212.0/22
+45.122.216.0/22
+45.123.28.0/22
+45.123.32.0/22
+45.123.36.0/22
+45.123.44.0/22
+45.123.48.0/22
+45.123.52.0/22
+45.123.56.0/22
+45.123.60.0/22
+45.123.64.0/22
+45.123.68.0/22
+45.123.72.0/22
+45.123.76.0/22
+45.123.80.0/22
+45.123.84.0/22
+45.123.88.0/22
+45.123.120.0/22
+45.123.128.0/22
+45.123.132.0/22
+45.123.136.0/22
+45.123.148.0/22
+45.123.152.0/22
+45.123.156.0/22
+45.123.164.0/22
+45.123.168.0/22
+45.123.172.0/22
+45.123.176.0/22
+45.123.180.0/22
+45.123.184.0/22
+45.123.204.0/22
+45.123.212.0/22
+45.123.224.0/22
+45.123.228.0/22
+45.123.232.0/22
+45.123.236.0/22
+45.123.240.0/22
+45.123.244.0/22
+45.123.248.0/22
+45.123.252.0/22
+45.124.0.0/22
+45.124.20.0/22
+45.124.28.0/22
+45.124.32.0/22
+45.124.36.0/22
+45.124.44.0/22
+45.124.68.0/22
+45.124.76.0/22
+45.124.80.0/22
+45.124.100.0/22
+45.124.124.0/22
+45.124.172.0/22
+45.124.176.0/22
+45.124.208.0/22
+45.124.248.0/22
+45.124.252.0/22
+45.125.12.0/22
+45.125.16.0/22
+45.125.24.0/22
+45.125.28.0/22
+45.125.32.0/22
+45.125.44.0/22
+45.125.52.0/22
+45.125.56.0/22
+45.125.76.0/22
+45.125.80.0/22
+45.125.84.0/22
+45.125.88.0/22
+45.125.92.0/22
+45.125.96.0/22
+45.125.100.0/22
+45.125.104.0/22
+45.125.136.0/22
+45.126.48.0/22
+45.126.52.0/22
+45.126.100.0/22
+45.126.108.0/22
+45.126.112.0/22
+45.126.116.0/22
+45.126.120.0/22
+45.126.212.0/22
+45.126.220.0/22
+45.127.8.0/22
+45.127.12.0/22
+45.127.96.0/22
+45.127.116.0/22
+45.127.124.0/22
+45.127.128.0/22
+45.127.144.0/22
+45.127.148.0/22
+45.127.156.0/22
+45.127.216.0/22
+45.248.8.0/22
+45.248.80.0/22
+45.248.84.0/22
+45.248.88.0/22
+45.248.96.0/22
+45.248.100.0/22
+45.248.104.0/22
+45.248.108.0/22
+45.248.128.0/22
+45.248.132.0/22
+45.248.204.0/22
+45.248.208.0/22
+45.248.212.0/22
+45.248.216.0/22
+45.248.220.0/22
+45.248.224.0/22
+45.248.228.0/22
+45.248.232.0/22
+45.248.236.0/22
+45.248.240.0/22
+45.248.244.0/22
+45.248.248.0/22
+45.248.252.0/22
+45.249.0.0/22
+45.249.4.0/22
+45.249.12.0/22
+45.249.16.0/22
+45.249.20.0/22
+45.249.24.0/22
+45.249.28.0/22
+45.249.32.0/22
+45.249.36.0/22
+45.249.92.0/22
+45.249.112.0/22
+45.249.180.0/22
+45.249.188.0/22
+45.249.192.0/22
+45.249.196.0/22
+45.249.200.0/22
+45.249.204.0/22
+45.249.208.0/22
+45.249.212.0/22
+45.250.12.0/22
+45.250.16.0/22
+45.250.28.0/22
+45.250.32.0/22
+45.250.36.0/22
+45.250.40.0/22
+45.250.76.0/22
+45.250.80.0/22
+45.250.84.0/22
+45.250.88.0/22
+45.250.92.0/22
+45.250.96.0/22
+45.250.104.0/22
+45.250.108.0/22
+45.250.112.0/22
+45.250.116.0/22
+45.250.120.0/22
+45.250.124.0/22
+45.250.128.0/22
+45.250.132.0/22
+45.250.136.0/22
+45.250.140.0/22
+45.250.144.0/22
+45.250.148.0/22
+45.250.152.0/22
+45.250.164.0/22
+45.250.180.0/22
+45.250.184.0/22
+45.250.188.0/22
+45.250.192.0/22
+45.251.0.0/22
+45.251.8.0/22
+45.251.16.0/22
+45.251.20.0/22
+45.251.52.0/22
+45.251.84.0/22
+45.251.88.0/22
+45.251.92.0/22
+45.251.96.0/22
+45.251.100.0/22
+45.251.120.0/22
+45.251.124.0/22
+45.251.136.0/22
+45.251.140.0/22
+45.251.144.0/22
+45.251.148.0/22
+45.251.152.0/22
+45.251.156.0/22
+45.251.160.0/22
+45.251.164.0/22
+45.251.168.0/22
+45.251.172.0/22
+45.251.176.0/22
+45.251.180.0/22
+45.251.184.0/22
+45.251.188.0/22
+45.251.192.0/22
+45.251.196.0/22
+45.251.200.0/22
+45.251.204.0/22
+45.251.208.0/22
+45.251.212.0/22
+45.251.216.0/22
+45.251.220.0/22
+45.251.224.0/22
+45.251.240.0/22
+45.252.0.0/22
+45.252.4.0/22
+45.252.8.0/22
+45.252.12.0/22
+45.252.16.0/22
+45.252.20.0/22
+45.252.24.0/22
+45.252.28.0/22
+45.252.32.0/22
+45.252.36.0/22
+45.252.40.0/22
+45.252.44.0/22
+45.252.48.0/22
+45.252.60.0/22
+45.252.84.0/22
+45.252.88.0/22
+45.252.92.0/22
+45.252.96.0/22
+45.252.100.0/22
+45.252.104.0/22
+45.252.108.0/22
+45.252.112.0/22
+45.252.116.0/22
+45.252.120.0/22
+45.252.124.0/22
+45.252.128.0/22
+45.252.132.0/22
+45.252.136.0/22
+45.252.140.0/22
+45.252.144.0/22
+45.252.148.0/22
+45.252.152.0/22
+45.252.156.0/22
+45.252.160.0/22
+45.252.164.0/22
+45.252.168.0/22
+45.252.172.0/22
+45.252.176.0/22
+45.252.192.0/22
+45.252.196.0/22
+45.252.200.0/22
+45.252.204.0/22
+45.252.208.0/22
+45.252.212.0/22
+45.252.216.0/22
+45.252.220.0/22
+45.252.224.0/22
+45.252.228.0/22
+45.252.232.0/22
+45.253.0.0/22
+45.253.4.0/22
+45.253.8.0/22
+45.253.12.0/22
+45.253.16.0/22
+45.253.20.0/22
+45.253.24.0/22
+45.253.28.0/22
+45.253.32.0/22
+45.253.36.0/22
+45.253.40.0/22
+45.253.44.0/22
+45.253.48.0/22
+45.253.52.0/22
+45.253.56.0/22
+45.253.60.0/22
+45.253.64.0/22
+45.253.68.0/22
+45.253.72.0/22
+45.253.76.0/22
+45.253.80.0/22
+45.253.84.0/22
+45.253.92.0/22
+45.253.96.0/22
+45.253.100.0/22
+45.253.104.0/22
+45.253.108.0/22
+45.253.112.0/22
+45.253.116.0/22
+45.253.120.0/22
+45.253.132.0/22
+45.253.136.0/22
+45.253.140.0/22
+45.253.144.0/22
+45.253.148.0/22
+45.253.152.0/22
+45.253.156.0/22
+45.253.160.0/22
+45.253.164.0/22
+45.253.168.0/22
+45.253.172.0/22
+45.253.176.0/22
+45.253.180.0/22
+45.253.184.0/22
+45.253.188.0/22
+45.253.192.0/22
+45.253.196.0/22
+45.253.200.0/22
+45.253.204.0/22
+45.253.208.0/22
+45.253.212.0/22
+45.253.216.0/22
+45.253.220.0/22
+45.253.224.0/22
+45.253.228.0/22
+45.253.232.0/22
+45.253.236.0/22
+45.253.240.0/22
+45.253.244.0/22
+45.253.248.0/22
+45.253.252.0/22
+45.254.0.0/22
+45.254.4.0/22
+45.254.8.0/22
+45.254.12.0/22
+45.254.16.0/22
+45.254.20.0/22
+45.254.24.0/22
+45.254.28.0/22
+45.254.40.0/22
+45.254.48.0/22
+45.254.52.0/22
+45.254.56.0/22
+45.254.60.0/22
+45.254.64.0/22
+45.254.68.0/22
+45.254.72.0/22
+45.254.76.0/22
+45.254.80.0/22
+45.254.84.0/22
+45.254.88.0/22
+45.254.92.0/22
+45.254.96.0/22
+45.254.100.0/22
+45.254.104.0/22
+45.254.108.0/22
+45.254.112.0/22
+45.254.116.0/22
+45.254.120.0/22
+45.254.124.0/22
+45.254.128.0/22
+45.254.132.0/22
+45.254.136.0/22
+45.254.140.0/22
+45.254.144.0/22
+45.254.148.0/22
+45.254.152.0/22
+45.254.156.0/22
+45.254.160.0/22
+45.254.164.0/22
+45.254.168.0/22
+45.254.172.0/22
+45.254.176.0/22
+45.254.180.0/22
+45.254.184.0/22
+45.254.188.0/22
+45.254.192.0/22
+45.254.196.0/22
+45.254.200.0/22
+45.254.204.0/22
+45.254.208.0/22
+45.254.212.0/22
+45.254.216.0/22
+45.254.220.0/22
+45.254.224.0/22
+45.254.228.0/22
+45.254.236.0/22
+45.254.240.0/22
+45.254.248.0/22
+45.255.0.0/22
+45.255.4.0/22
+45.255.8.0/22
+45.255.12.0/22
+45.255.16.0/22
+45.255.20.0/22
+45.255.24.0/22
+45.255.28.0/22
+45.255.32.0/22
+45.255.36.0/22
+45.255.40.0/22
+45.255.44.0/22
+45.255.48.0/22
+45.255.52.0/22
+45.255.56.0/22
+45.255.60.0/22
+45.255.64.0/22
+45.255.68.0/22
+45.255.72.0/22
+45.255.76.0/22
+45.255.80.0/22
+45.255.84.0/22
+45.255.88.0/22
+45.255.92.0/22
+45.255.96.0/22
+45.255.100.0/22
+45.255.104.0/22
+45.255.108.0/22
+45.255.112.0/22
+45.255.116.0/22
+45.255.120.0/22
+45.255.124.0/22
+45.255.132.0/22
+45.255.136.0/22
+45.255.140.0/22
+45.255.144.0/22
+45.255.148.0/22
+45.255.152.0/22
+45.255.156.0/22
+45.255.160.0/22
+45.255.164.0/22
+45.255.168.0/22
+45.255.172.0/22
+45.255.176.0/22
+45.255.180.0/22
+45.255.184.0/22
+45.255.188.0/22
+45.255.192.0/22
+45.255.196.0/22
+45.255.200.0/22
+45.255.204.0/22
+45.255.208.0/22
+45.255.212.0/22
+45.255.216.0/22
+45.255.220.0/22
+45.255.224.0/22
+45.255.228.0/22
+45.255.232.0/22
+45.255.236.0/22
+45.255.240.0/22
+45.255.244.0/22
+45.255.248.0/22
+47.92.0.0/14
+47.96.0.0/11
+49.4.0.0/14
+49.51.0.0/16
+49.52.0.0/14
+49.64.0.0/11
+49.112.0.0/13
+49.120.0.0/14
+49.128.0.0/24
+49.128.2.0/23
+49.128.4.0/22
+49.140.0.0/15
+49.152.0.0/14
+49.208.0.0/15
+49.210.0.0/15
+49.220.0.0/14
+49.232.0.0/14
+49.239.0.0/18
+49.239.192.0/18
+49.246.224.0/19
+52.80.0.0/15
+52.82.0.0/15
+52.130.0.0/15
+54.222.0.0/15
+58.14.0.0/15
+58.16.0.0/16
+58.17.0.0/17
+58.17.128.0/17
+58.18.0.0/16
+58.19.0.0/16
+58.20.0.0/16
+58.21.0.0/16
+58.22.0.0/15
+58.24.0.0/15
+58.30.0.0/15
+58.32.0.0/13
+58.40.0.0/15
+58.42.0.0/16
+58.43.0.0/16
+58.44.0.0/14
+58.48.0.0/13
+58.56.0.0/15
+58.58.0.0/16
+58.59.0.0/17
+58.59.128.0/17
+58.60.0.0/14
+58.65.232.0/21
+58.66.0.0/15
+58.68.128.0/17
+58.82.0.0/17
+58.83.0.0/17
+58.83.128.0/17
+58.87.64.0/18
+58.99.128.0/17
+58.100.0.0/15
+58.116.0.0/14
+58.128.0.0/13
+58.144.0.0/16
+58.154.0.0/15
+58.192.0.0/15
+58.194.0.0/15
+58.196.0.0/15
+58.198.0.0/15
+58.200.0.0/13
+58.208.0.0/12
+58.240.0.0/15
+58.242.0.0/15
+58.244.0.0/15
+58.246.0.0/15
+58.248.0.0/13
+59.32.0.0/13
+59.40.0.0/15
+59.42.0.0/16
+59.43.0.0/16
+59.44.0.0/14
+59.48.0.0/16
+59.49.0.0/17
+59.49.128.0/17
+59.50.0.0/16
+59.51.0.0/17
+59.51.128.0/17
+59.52.0.0/14
+59.56.0.0/14
+59.60.0.0/15
+59.62.0.0/15
+59.64.0.0/14
+59.68.0.0/14
+59.72.0.0/15
+59.74.0.0/15
+59.76.0.0/16
+59.77.0.0/16
+59.78.0.0/15
+59.80.0.0/15
+59.82.0.0/15
+59.107.0.0/17
+59.107.128.0/17
+59.108.0.0/15
+59.110.0.0/15
+59.151.0.0/17
+59.152.16.0/22
+59.152.20.0/22
+59.152.24.0/22
+59.152.28.0/22
+59.152.32.0/22
+59.152.36.0/22
+59.152.64.0/22
+59.152.68.0/22
+59.152.72.0/22
+59.152.76.0/22
+59.152.112.0/22
+59.152.116.0/22
+59.153.4.0/22
+59.153.32.0/22
+59.153.60.0/22
+59.153.64.0/22
+59.153.68.0/22
+59.153.72.0/22
+59.153.92.0/22
+59.153.116.0/22
+59.153.136.0/22
+59.153.152.0/22
+59.153.156.0/22
+59.153.164.0/22
+59.153.168.0/22
+59.153.172.0/22
+59.153.176.0/22
+59.153.180.0/22
+59.153.184.0/22
+59.153.188.0/22
+59.153.192.0/22
+59.155.0.0/16
+59.172.0.0/15
+59.174.0.0/15
+59.191.0.0/17
+59.191.240.0/20
+59.192.0.0/10
+60.0.0.0/13
+60.8.0.0/15
+60.10.0.0/16
+60.11.0.0/16
+60.12.0.0/16
+60.13.0.0/18
+60.13.64.0/18
+60.13.128.0/17
+60.14.0.0/15
+60.16.0.0/13
+60.24.0.0/14
+60.28.0.0/15
+60.30.0.0/16
+60.31.0.0/16
+60.55.0.0/16
+60.63.0.0/16
+60.160.0.0/15
+60.162.0.0/15
+60.164.0.0/15
+60.166.0.0/15
+60.168.0.0/13
+60.176.0.0/12
+60.194.0.0/15
+60.200.0.0/14
+60.204.0.0/16
+60.205.0.0/16
+60.206.0.0/15
+60.208.0.0/13
+60.216.0.0/15
+60.218.0.0/15
+60.220.0.0/14
+60.232.0.0/15
+60.235.0.0/16
+60.245.128.0/17
+60.247.0.0/16
+60.252.0.0/16
+60.253.128.0/17
+60.255.0.0/16
+61.4.80.0/22
+61.4.84.0/22
+61.4.88.0/21
+61.4.176.0/20
+61.8.160.0/20
+61.14.212.0/22
+61.14.216.0/22
+61.14.220.0/22
+61.14.240.0/22
+61.14.244.0/22
+61.28.0.0/20
+61.28.16.0/20
+61.28.32.0/19
+61.28.64.0/18
+61.29.128.0/18
+61.29.192.0/19
+61.29.224.0/20
+61.29.240.0/20
+61.45.128.0/18
+61.45.224.0/20
+61.47.128.0/18
+61.48.0.0/14
+61.52.0.0/15
+61.54.0.0/16
+61.55.0.0/16
+61.87.192.0/18
+61.128.0.0/15
+61.130.0.0/15
+61.132.0.0/16
+61.133.0.0/17
+61.133.128.0/17
+61.134.0.0/18
+61.134.64.0/19
+61.134.96.0/19
+61.134.128.0/18
+61.134.192.0/18
+61.135.0.0/16
+61.136.0.0/18
+61.136.64.0/18
+61.136.128.0/17
+61.137.0.0/17
+61.137.128.0/17
+61.138.0.0/18
+61.138.64.0/18
+61.138.128.0/18
+61.138.192.0/18
+61.139.0.0/17
+61.139.128.0/18
+61.139.192.0/18
+61.140.0.0/14
+61.144.0.0/14
+61.148.0.0/15
+61.150.0.0/15
+61.152.0.0/16
+61.153.0.0/16
+61.154.0.0/15
+61.156.0.0/16
+61.157.0.0/16
+61.158.0.0/17
+61.158.128.0/17
+61.159.0.0/18
+61.159.64.0/18
+61.159.128.0/17
+61.160.0.0/16
+61.161.0.0/18
+61.161.64.0/18
+61.161.128.0/17
+61.162.0.0/16
+61.163.0.0/16
+61.164.0.0/16
+61.165.0.0/16
+61.166.0.0/16
+61.167.0.0/16
+61.168.0.0/16
+61.169.0.0/16
+61.170.0.0/15
+61.172.0.0/14
+61.176.0.0/16
+61.177.0.0/16
+61.178.0.0/16
+61.179.0.0/16
+61.180.0.0/17
+61.180.128.0/17
+61.181.0.0/16
+61.182.0.0/16
+61.183.0.0/16
+61.184.0.0/14
+61.188.0.0/16
+61.189.0.0/17
+61.189.128.0/17
+61.190.0.0/15
+61.232.0.0/14
+61.236.0.0/15
+61.240.0.0/14
+62.234.0.0/16
+68.79.0.0/18
+69.230.192.0/18
+69.231.128.0/18
+69.234.192.0/18
+69.235.128.0/18
+71.131.192.0/18
+71.132.0.0/18
+71.136.64.0/18
+71.137.0.0/18
+81.68.0.0/14
+82.156.0.0/15
+94.191.0.0/17
+101.0.0.0/22
+101.1.0.0/22
+101.2.172.0/22
+101.4.0.0/14
+101.16.0.0/12
+101.32.0.0/14
+101.36.0.0/17
+101.36.128.0/17
+101.37.0.0/16
+101.38.0.0/15
+101.40.0.0/13
+101.48.0.0/15
+101.50.8.0/22
+101.50.12.0/22
+101.50.56.0/22
+101.52.0.0/16
+101.53.100.0/22
+101.54.0.0/16
+101.55.224.0/21
+101.64.0.0/13
+101.72.0.0/14
+101.76.0.0/15
+101.78.0.0/22
+101.78.32.0/19
+101.80.0.0/12
+101.96.0.0/21
+101.96.8.0/22
+101.96.16.0/20
+101.96.128.0/17
+101.99.96.0/19
+101.101.64.0/19
+101.101.100.0/24
+101.101.102.0/23
+101.101.104.0/21
+101.101.112.0/20
+101.102.64.0/19
+101.102.100.0/23
+101.102.102.0/24
+101.102.104.0/21
+101.102.112.0/20
+101.104.0.0/14
+101.110.64.0/19
+101.110.96.0/20
+101.110.116.0/22
+101.110.120.0/21
+101.120.0.0/14
+101.124.0.0/15
+101.126.0.0/16
+101.128.0.0/22
+101.128.8.0/21
+101.128.16.0/20
+101.128.32.0/19
+101.129.0.0/16
+101.130.0.0/15
+101.132.0.0/14
+101.144.0.0/12
+101.192.0.0/14
+101.196.0.0/16
+101.197.0.0/16
+101.198.0.0/15
+101.200.0.0/15
+101.203.128.0/19
+101.203.160.0/21
+101.203.172.0/22
+101.203.176.0/20
+101.204.0.0/14
+101.224.0.0/13
+101.232.0.0/15
+101.234.64.0/21
+101.234.76.0/22
+101.234.80.0/20
+101.234.96.0/19
+101.236.0.0/14
+101.240.0.0/14
+101.244.0.0/14
+101.248.0.0/15
+101.251.0.0/22
+101.251.8.0/21
+101.251.16.0/20
+101.251.32.0/19
+101.251.64.0/18
+101.251.128.0/17
+101.252.0.0/15
+101.254.0.0/16
+103.1.8.0/22
+103.1.20.0/22
+103.1.24.0/22
+103.1.72.0/22
+103.1.88.0/22
+103.1.168.0/22
+103.2.108.0/22
+103.2.156.0/22
+103.2.164.0/22
+103.2.200.0/22
+103.2.204.0/22
+103.2.208.0/22
+103.2.212.0/22
+103.3.84.0/22
+103.3.88.0/22
+103.3.92.0/22
+103.3.96.0/22
+103.3.100.0/22
+103.3.104.0/22
+103.3.108.0/22
+103.3.112.0/22
+103.3.116.0/22
+103.3.120.0/22
+103.3.124.0/22
+103.3.128.0/22
+103.3.132.0/22
+103.3.136.0/22
+103.3.140.0/22
+103.3.148.0/22
+103.3.152.0/22
+103.3.156.0/22
+103.4.56.0/22
+103.4.168.0/22
+103.4.184.0/22
+103.4.224.0/22
+103.5.36.0/22
+103.5.52.0/22
+103.5.56.0/22
+103.5.152.0/22
+103.5.168.0/22
+103.5.192.0/22
+103.5.252.0/22
+103.6.76.0/22
+103.6.108.0/22
+103.6.220.0/22
+103.6.228.0/22
+103.7.4.0/22
+103.7.28.0/22
+103.7.140.0/22
+103.7.212.0/22
+103.7.216.0/22
+103.7.220.0/22
+103.8.0.0/22
+103.8.4.0/22
+103.8.8.0/22
+103.8.32.0/22
+103.8.52.0/22
+103.8.68.0/22
+103.8.108.0/22
+103.8.156.0/22
+103.8.200.0/22
+103.8.204.0/22
+103.8.220.0/22
+103.9.8.0/22
+103.9.24.0/22
+103.9.108.0/22
+103.9.152.0/22
+103.9.192.0/22
+103.9.248.0/22
+103.9.252.0/22
+103.10.0.0/22
+103.10.16.0/22
+103.10.84.0/22
+103.10.140.0/22
+103.11.16.0/22
+103.11.168.0/22
+103.11.180.0/22
+103.12.32.0/22
+103.12.68.0/22
+103.12.92.0/22
+103.12.136.0/22
+103.12.184.0/22
+103.12.232.0/22
+103.13.12.0/22
+103.13.72.0/23
+103.13.124.0/22
+103.13.144.0/22
+103.13.196.0/22
+103.13.220.0/22
+103.13.244.0/22
+103.14.32.0/22
+103.14.84.0/22
+103.14.100.0/22
+103.14.132.0/22
+103.14.136.0/22
+103.14.156.0/22
+103.14.240.0/22
+103.15.4.0/22
+103.15.8.0/22
+103.15.16.0/22
+103.15.96.0/22
+103.15.200.0/22
+103.16.52.0/22
+103.16.80.0/22
+103.16.84.0/22
+103.16.88.0/22
+103.16.108.0/22
+103.16.124.0/22
+103.17.40.0/22
+103.17.64.0/22
+103.17.120.0/22
+103.17.136.0/22
+103.17.160.0/22
+103.17.204.0/22
+103.17.228.0/22
+103.18.192.0/22
+103.18.208.0/22
+103.18.212.0/22
+103.18.224.0/22
+103.19.0.0/22
+103.19.12.0/22
+103.19.40.0/22
+103.19.44.0/22
+103.19.64.0/22
+103.19.68.0/22
+103.19.72.0/22
+103.19.232.0/22
+103.20.12.0/22
+103.20.32.0/22
+103.20.44.0/22
+103.20.68.0/22
+103.20.112.0/22
+103.20.128.0/22
+103.20.160.0/22
+103.20.248.0/22
+103.21.112.0/22
+103.21.116.0/22
+103.21.136.0/22
+103.21.140.0/22
+103.21.176.0/22
+103.21.208.0/22
+103.21.240.0/22
+103.22.0.0/22
+103.22.4.0/22
+103.22.8.0/22
+103.22.12.0/22
+103.22.16.0/22
+103.22.20.0/22
+103.22.24.0/22
+103.22.28.0/22
+103.22.32.0/22
+103.22.36.0/22
+103.22.40.0/22
+103.22.44.0/22
+103.22.48.0/22
+103.22.52.0/22
+103.22.56.0/22
+103.22.60.0/22
+103.22.64.0/22
+103.22.68.0/22
+103.22.72.0/22
+103.22.76.0/22
+103.22.80.0/22
+103.22.84.0/22
+103.22.88.0/22
+103.22.92.0/22
+103.22.100.0/22
+103.22.104.0/22
+103.22.108.0/22
+103.22.112.0/22
+103.22.116.0/22
+103.22.120.0/22
+103.22.124.0/22
+103.22.188.0/22
+103.22.228.0/22
+103.22.252.0/22
+103.23.8.0/22
+103.23.56.0/22
+103.23.160.0/22
+103.23.164.0/22
+103.23.176.0/22
+103.23.228.0/22
+103.24.24.0/22
+103.24.116.0/22
+103.24.128.0/22
+103.24.144.0/22
+103.24.176.0/22
+103.24.184.0/22
+103.24.220.0/22
+103.24.228.0/22
+103.24.248.0/22
+103.24.252.0/22
+103.25.8.0/23
+103.25.20.0/22
+103.25.24.0/22
+103.25.28.0/22
+103.25.32.0/22
+103.25.36.0/22
+103.25.40.0/22
+103.25.48.0/22
+103.25.64.0/22
+103.25.68.0/22
+103.25.148.0/22
+103.25.156.0/22
+103.25.216.0/22
+103.26.0.0/22
+103.26.64.0/22
+103.26.76.0/22
+103.26.132.0/22
+103.26.156.0/22
+103.26.160.0/22
+103.26.228.0/22
+103.26.240.0/22
+103.27.4.0/22
+103.27.12.0/22
+103.27.24.0/22
+103.27.56.0/22
+103.27.96.0/22
+103.27.184.0/22
+103.27.208.0/22
+103.27.212.0/22
+103.27.240.0/22
+103.28.4.0/22
+103.28.8.0/22
+103.28.184.0/22
+103.28.204.0/22
+103.28.212.0/22
+103.29.16.0/22
+103.29.128.0/22
+103.29.132.0/22
+103.29.136.0/22
+103.30.20.0/22
+103.30.96.0/22
+103.30.148.0/22
+103.30.200.0/22
+103.30.228.0/22
+103.30.236.0/22
+103.31.0.0/22
+103.31.48.0/22
+103.31.52.0/22
+103.31.56.0/22
+103.31.60.0/22
+103.31.64.0/22
+103.31.68.0/22
+103.31.148.0/22
+103.31.160.0/22
+103.31.168.0/22
+103.31.200.0/22
+103.31.236.0/22
+103.32.0.0/22
+103.32.4.0/22
+103.32.8.0/22
+103.32.12.0/22
+103.32.16.0/22
+103.32.20.0/22
+103.32.24.0/22
+103.32.28.0/22
+103.32.32.0/22
+103.32.36.0/22
+103.32.40.0/22
+103.32.44.0/22
+103.32.48.0/22
+103.32.52.0/22
+103.32.56.0/22
+103.32.60.0/22
+103.32.64.0/22
+103.32.68.0/22
+103.32.72.0/22
+103.32.76.0/22
+103.32.80.0/22
+103.32.84.0/22
+103.32.88.0/22
+103.32.92.0/22
+103.32.96.0/22
+103.32.100.0/22
+103.32.104.0/22
+103.32.108.0/22
+103.32.112.0/22
+103.32.116.0/22
+103.32.120.0/22
+103.32.124.0/22
+103.32.128.0/22
+103.32.132.0/22
+103.32.136.0/22
+103.32.140.0/22
+103.32.144.0/22
+103.32.148.0/22
+103.32.152.0/22
+103.32.156.0/22
+103.32.160.0/22
+103.32.164.0/22
+103.32.168.0/22
+103.32.172.0/22
+103.32.176.0/22
+103.32.180.0/22
+103.32.184.0/22
+103.32.188.0/22
+103.32.192.0/22
+103.32.196.0/22
+103.32.200.0/22
+103.32.204.0/22
+103.32.208.0/22
+103.32.212.0/22
+103.32.216.0/22
+103.32.220.0/22
+103.32.224.0/22
+103.32.228.0/22
+103.32.232.0/22
+103.32.236.0/22
+103.32.240.0/22
+103.32.244.0/22
+103.32.248.0/22
+103.32.252.0/22
+103.33.0.0/22
+103.33.4.0/22
+103.33.8.0/22
+103.33.12.0/22
+103.33.16.0/22
+103.33.20.0/22
+103.33.24.0/22
+103.33.28.0/22
+103.33.32.0/22
+103.33.36.0/22
+103.33.40.0/22
+103.33.44.0/22
+103.33.48.0/22
+103.33.52.0/22
+103.33.56.0/22
+103.33.60.0/22
+103.33.64.0/22
+103.33.68.0/22
+103.33.72.0/22
+103.33.76.0/22
+103.33.80.0/22
+103.33.84.0/22
+103.33.88.0/22
+103.33.92.0/22
+103.33.96.0/22
+103.33.100.0/22
+103.33.104.0/22
+103.33.108.0/22
+103.33.112.0/22
+103.33.116.0/22
+103.33.120.0/22
+103.33.124.0/22
+103.33.128.0/22
+103.33.132.0/22
+103.33.136.0/22
+103.33.140.0/22
+103.33.144.0/22
+103.33.148.0/22
+103.33.152.0/22
+103.33.156.0/22
+103.33.160.0/22
+103.33.164.0/22
+103.33.168.0/22
+103.33.172.0/22
+103.33.176.0/22
+103.33.180.0/22
+103.33.184.0/22
+103.33.188.0/22
+103.33.192.0/22
+103.33.196.0/22
+103.33.200.0/22
+103.33.204.0/22
+103.33.208.0/22
+103.33.212.0/22
+103.33.216.0/22
+103.33.220.0/22
+103.33.224.0/22
+103.33.228.0/22
+103.33.232.0/22
+103.33.236.0/22
+103.33.240.0/22
+103.33.244.0/22
+103.33.248.0/22
+103.33.252.0/22
+103.34.0.0/22
+103.34.4.0/22
+103.34.8.0/22
+103.34.12.0/22
+103.34.16.0/22
+103.34.20.0/22
+103.34.24.0/22
+103.34.28.0/22
+103.34.32.0/22
+103.34.36.0/22
+103.34.40.0/22
+103.34.44.0/22
+103.34.48.0/22
+103.34.52.0/22
+103.34.56.0/22
+103.34.60.0/22
+103.34.64.0/22
+103.34.68.0/22
+103.34.72.0/22
+103.34.76.0/22
+103.34.80.0/22
+103.34.84.0/22
+103.34.88.0/22
+103.34.92.0/22
+103.34.96.0/22
+103.34.100.0/22
+103.34.104.0/22
+103.34.108.0/22
+103.34.112.0/22
+103.34.116.0/22
+103.34.120.0/22
+103.34.124.0/22
+103.34.128.0/22
+103.34.132.0/22
+103.34.136.0/22
+103.34.140.0/22
+103.34.144.0/22
+103.34.148.0/22
+103.34.152.0/22
+103.34.156.0/22
+103.34.160.0/22
+103.34.164.0/22
+103.34.168.0/22
+103.34.172.0/22
+103.34.176.0/22
+103.34.180.0/22
+103.34.184.0/22
+103.34.188.0/22
+103.34.192.0/22
+103.34.196.0/22
+103.34.200.0/22
+103.34.204.0/22
+103.34.208.0/22
+103.34.212.0/22
+103.34.216.0/22
+103.34.220.0/22
+103.34.224.0/22
+103.34.228.0/22
+103.34.232.0/22
+103.34.236.0/22
+103.34.240.0/22
+103.34.244.0/22
+103.34.248.0/22
+103.34.252.0/22
+103.35.0.0/22
+103.35.4.0/22
+103.35.8.0/22
+103.35.12.0/22
+103.35.16.0/22
+103.35.20.0/22
+103.35.24.0/22
+103.35.28.0/22
+103.35.32.0/22
+103.35.36.0/22
+103.35.40.0/22
+103.35.44.0/22
+103.35.48.0/22
+103.35.104.0/22
+103.35.116.0/22
+103.35.180.0/22
+103.35.200.0/22
+103.35.220.0/22
+103.36.20.0/22
+103.36.28.0/22
+103.36.36.0/22
+103.36.56.0/22
+103.36.60.0/22
+103.36.64.0/22
+103.36.72.0/22
+103.36.96.0/22
+103.36.132.0/22
+103.36.136.0/22
+103.36.160.0/22
+103.36.164.0/22
+103.36.168.0/22
+103.36.172.0/22
+103.36.176.0/22
+103.36.180.0/22
+103.36.184.0/22
+103.36.188.0/22
+103.36.192.0/22
+103.36.196.0/22
+103.36.200.0/22
+103.36.204.0/22
+103.36.208.0/22
+103.36.212.0/22
+103.36.216.0/22
+103.36.220.0/22
+103.36.224.0/22
+103.36.228.0/22
+103.36.232.0/22
+103.36.236.0/22
+103.36.240.0/22
+103.36.244.0/22
+103.37.0.0/22
+103.37.12.0/22
+103.37.16.0/22
+103.37.24.0/22
+103.37.44.0/22
+103.37.52.0/22
+103.37.56.0/22
+103.37.72.0/22
+103.37.100.0/22
+103.37.104.0/22
+103.37.124.0/22
+103.37.136.0/22
+103.37.140.0/22
+103.37.144.0/22
+103.37.148.0/22
+103.37.152.0/22
+103.37.156.0/22
+103.37.160.0/22
+103.37.164.0/22
+103.37.172.0/22
+103.37.176.0/22
+103.37.188.0/22
+103.37.208.0/22
+103.37.212.0/22
+103.37.216.0/22
+103.37.220.0/22
+103.37.248.0/22
+103.37.252.0/22
+103.38.0.0/22
+103.38.32.0/22
+103.38.40.0/22
+103.38.44.0/22
+103.38.56.0/22
+103.38.76.0/22
+103.38.84.0/22
+103.38.92.0/22
+103.38.96.0/22
+103.38.116.0/22
+103.38.132.0/22
+103.38.140.0/22
+103.38.224.0/22
+103.38.228.0/22
+103.38.232.0/22
+103.38.252.0/22
+103.39.16.0/22
+103.39.64.0/22
+103.39.88.0/22
+103.39.100.0/22
+103.39.104.0/22
+103.39.108.0/22
+103.39.160.0/22
+103.39.164.0/22
+103.39.168.0/22
+103.39.172.0/22
+103.39.176.0/22
+103.39.180.0/22
+103.39.184.0/22
+103.39.188.0/22
+103.39.200.0/22
+103.39.204.0/22
+103.39.208.0/22
+103.39.212.0/22
+103.39.216.0/22
+103.39.220.0/22
+103.39.224.0/22
+103.39.228.0/22
+103.39.232.0/22
+103.40.12.0/22
+103.40.16.0/22
+103.40.20.0/22
+103.40.24.0/22
+103.40.28.0/22
+103.40.32.0/22
+103.40.36.0/22
+103.40.40.0/22
+103.40.44.0/22
+103.40.88.0/22
+103.40.100.0/22
+103.40.112.0/22
+103.40.192.0/22
+103.40.212.0/22
+103.40.220.0/22
+103.40.228.0/22
+103.40.232.0/22
+103.40.236.0/22
+103.40.240.0/22
+103.40.244.0/22
+103.40.248.0/22
+103.40.252.0/22
+103.41.0.0/22
+103.41.16.0/22
+103.41.52.0/22
+103.41.140.0/22
+103.41.148.0/22
+103.41.152.0/22
+103.41.160.0/22
+103.41.164.0/22
+103.41.220.0/22
+103.41.224.0/22
+103.41.228.0/22
+103.41.232.0/22
+103.42.8.0/22
+103.42.24.0/22
+103.42.28.0/22
+103.42.32.0/22
+103.42.64.0/22
+103.42.68.0/22
+103.42.76.0/22
+103.42.104.0/22
+103.42.180.0/22
+103.42.232.0/22
+103.43.16.0/22
+103.43.84.0/22
+103.43.96.0/22
+103.43.100.0/22
+103.43.104.0/22
+103.43.124.0/22
+103.43.184.0/22
+103.43.192.0/22
+103.43.196.0/22
+103.43.208.0/22
+103.43.220.0/22
+103.43.224.0/22
+103.43.232.0/22
+103.43.240.0/22
+103.44.56.0/22
+103.44.80.0/22
+103.44.88.0/22
+103.44.120.0/22
+103.44.124.0/22
+103.44.132.0/22
+103.44.144.0/22
+103.44.168.0/22
+103.44.176.0/22
+103.44.180.0/22
+103.44.184.0/22
+103.44.188.0/22
+103.44.192.0/22
+103.44.196.0/22
+103.44.200.0/22
+103.44.204.0/22
+103.44.224.0/22
+103.44.236.0/22
+103.44.240.0/22
+103.44.244.0/22
+103.44.248.0/22
+103.44.252.0/22
+103.45.0.0/22
+103.45.4.0/22
+103.45.8.0/22
+103.45.12.0/22
+103.45.16.0/22
+103.45.20.0/22
+103.45.24.0/22
+103.45.28.0/22
+103.45.32.0/22
+103.45.36.0/22
+103.45.40.0/22
+103.45.44.0/22
+103.45.48.0/22
+103.45.52.0/22
+103.45.56.0/22
+103.45.60.0/22
+103.45.72.0/22
+103.45.76.0/22
+103.45.80.0/22
+103.45.84.0/22
+103.45.88.0/22
+103.45.92.0/22
+103.45.96.0/22
+103.45.100.0/22
+103.45.104.0/22
+103.45.108.0/22
+103.45.112.0/22
+103.45.116.0/22
+103.45.120.0/22
+103.45.124.0/22
+103.45.128.0/22
+103.45.132.0/22
+103.45.136.0/22
+103.45.140.0/22
+103.45.144.0/22
+103.45.148.0/22
+103.45.152.0/22
+103.45.156.0/22
+103.45.160.0/22
+103.45.164.0/22
+103.45.168.0/22
+103.45.172.0/22
+103.45.176.0/22
+103.45.180.0/22
+103.45.184.0/22
+103.45.188.0/22
+103.45.192.0/22
+103.45.196.0/22
+103.45.200.0/22
+103.45.204.0/22
+103.45.208.0/22
+103.45.212.0/22
+103.45.216.0/22
+103.45.220.0/22
+103.45.224.0/22
+103.45.248.0/22
+103.46.0.0/22
+103.46.12.0/22
+103.46.16.0/22
+103.46.20.0/22
+103.46.24.0/22
+103.46.28.0/22
+103.46.32.0/22
+103.46.36.0/22
+103.46.40.0/22
+103.46.44.0/22
+103.46.48.0/22
+103.46.52.0/22
+103.46.56.0/22
+103.46.60.0/22
+103.46.64.0/22
+103.46.68.0/22
+103.46.72.0/22
+103.46.76.0/22
+103.46.80.0/22
+103.46.84.0/22
+103.46.88.0/22
+103.46.92.0/22
+103.46.96.0/22
+103.46.100.0/22
+103.46.104.0/22
+103.46.108.0/22
+103.46.112.0/22
+103.46.116.0/22
+103.46.120.0/22
+103.46.124.0/22
+103.46.128.0/22
+103.46.132.0/22
+103.46.136.0/22
+103.46.152.0/22
+103.46.156.0/22
+103.46.160.0/22
+103.46.164.0/22
+103.46.168.0/22
+103.46.172.0/22
+103.46.176.0/22
+103.46.180.0/22
+103.46.244.0/22
+103.46.248.0/22
+103.47.4.0/22
+103.47.20.0/22
+103.47.36.0/22
+103.47.40.0/22
+103.47.48.0/22
+103.47.80.0/22
+103.47.96.0/22
+103.47.108.0/22
+103.47.116.0/22
+103.47.120.0/22
+103.47.136.0/22
+103.47.140.0/22
+103.47.212.0/22
+103.48.20.0/22
+103.48.52.0/22
+103.48.92.0/22
+103.48.144.0/22
+103.48.148.0/22
+103.48.152.0/22
+103.48.156.0/22
+103.48.202.0/23
+103.48.216.0/22
+103.48.220.0/22
+103.48.224.0/22
+103.48.228.0/22
+103.48.232.0/22
+103.48.236.0/22
+103.48.240.0/22
+103.48.244.0/22
+103.49.12.0/22
+103.49.20.0/22
+103.49.72.0/22
+103.49.76.0/22
+103.49.92.0/22
+103.49.96.0/22
+103.49.108.0/22
+103.49.128.0/22
+103.49.176.0/22
+103.49.180.0/22
+103.49.196.0/22
+103.49.248.0/22
+103.50.36.0/22
+103.50.44.0/22
+103.50.48.0/22
+103.50.52.0/22
+103.50.56.0/22
+103.50.60.0/22
+103.50.64.0/22
+103.50.68.0/22
+103.50.72.0/22
+103.50.108.0/22
+103.50.112.0/22
+103.50.116.0/22
+103.50.120.0/22
+103.50.124.0/22
+103.50.132.0/22
+103.50.136.0/22
+103.50.140.0/22
+103.50.172.0/22
+103.50.176.0/22
+103.50.180.0/22
+103.50.184.0/22
+103.50.188.0/22
+103.50.192.0/22
+103.50.196.0/22
+103.50.200.0/22
+103.50.220.0/22
+103.50.224.0/22
+103.50.228.0/22
+103.50.232.0/22
+103.50.236.0/22
+103.50.240.0/22
+103.50.244.0/22
+103.50.248.0/22
+103.52.40.0/22
+103.52.72.0/22
+103.52.76.0/22
+103.52.80.0/22
+103.52.84.0/22
+103.52.96.0/22
+103.52.100.0/22
+103.52.104.0/22
+103.52.160.0/22
+103.52.164.0/22
+103.52.172.0/22
+103.52.176.0/22
+103.52.184.0/22
+103.52.196.0/22
+103.53.4.0/22
+103.53.64.0/22
+103.53.68.0/22
+103.53.92.0/22
+103.53.100.0/22
+103.53.124.0/22
+103.53.128.0/22
+103.53.132.0/22
+103.53.136.0/22
+103.53.140.0/22
+103.53.144.0/22
+103.53.180.0/22
+103.53.204.0/22
+103.53.208.0/22
+103.53.212.0/22
+103.53.216.0/22
+103.53.236.0/22
+103.53.248.0/22
+103.54.8.0/22
+103.54.48.0/22
+103.54.60.0/22
+103.54.160.0/22
+103.54.164.0/22
+103.54.212.0/22
+103.54.240.0/22
+103.55.24.0/22
+103.55.80.0/22
+103.55.120.0/22
+103.55.152.0/22
+103.55.172.0/22
+103.55.204.0/22
+103.55.208.0/22
+103.55.228.0/22
+103.55.236.0/22
+103.56.8.0/22
+103.56.16.0/22
+103.56.20.0/22
+103.56.32.0/22
+103.56.52.0/22
+103.56.56.0/22
+103.56.60.0/22
+103.56.72.0/22
+103.56.76.0/22
+103.56.140.0/22
+103.56.152.0/22
+103.56.184.0/22
+103.56.200.0/22
+103.57.12.0/22
+103.57.52.0/22
+103.57.56.0/22
+103.57.76.0/22
+103.57.136.0/22
+103.57.196.0/22
+103.58.24.0/22
+103.59.76.0/22
+103.59.100.0/22
+103.59.112.0/22
+103.59.116.0/22
+103.59.120.0/22
+103.59.124.0/22
+103.59.128.0/22
+103.59.148.0/22
+103.59.164.0/22
+103.60.32.0/22
+103.60.44.0/22
+103.60.164.0/22
+103.60.228.0/22
+103.60.236.0/22
+103.61.60.0/22
+103.61.104.0/22
+103.61.140.0/22
+103.61.152.0/22
+103.61.156.0/22
+103.61.160.0/22
+103.61.172.0/22
+103.61.176.0/22
+103.61.184.0/22
+103.61.188.0/22
+103.62.24.0/22
+103.62.52.0/22
+103.62.72.0/22
+103.62.76.0/22
+103.62.80.0/22
+103.62.84.0/22
+103.62.88.0/22
+103.62.96.0/22
+103.62.100.0/22
+103.62.104.0/22
+103.62.108.0/22
+103.62.112.0/22
+103.62.116.0/22
+103.62.120.0/22
+103.62.124.0/22
+103.62.128.0/22
+103.62.132.0/22
+103.62.156.0/22
+103.62.160.0/22
+103.62.164.0/22
+103.62.168.0/22
+103.62.172.0/22
+103.62.176.0/22
+103.62.180.0/22
+103.62.184.0/22
+103.62.188.0/22
+103.62.192.0/22
+103.62.204.0/22
+103.62.208.0/22
+103.62.212.0/22
+103.62.216.0/22
+103.62.220.0/22
+103.62.224.0/22
+103.63.32.0/22
+103.63.36.0/22
+103.63.40.0/22
+103.63.44.0/22
+103.63.48.0/22
+103.63.52.0/22
+103.63.56.0/22
+103.63.60.0/22
+103.63.64.0/22
+103.63.68.0/22
+103.63.72.0/22
+103.63.76.0/22
+103.63.80.0/22
+103.63.84.0/22
+103.63.88.0/22
+103.63.140.0/22
+103.63.144.0/22
+103.63.152.0/22
+103.63.160.0/22
+103.63.164.0/22
+103.63.168.0/22
+103.63.172.0/22
+103.63.176.0/22
+103.63.180.0/22
+103.63.184.0/22
+103.63.192.0/22
+103.63.196.0/22
+103.63.200.0/22
+103.63.204.0/22
+103.63.208.0/22
+103.63.240.0/22
+103.63.244.0/22
+103.63.248.0/22
+103.63.252.0/22
+103.64.0.0/22
+103.64.4.0/22
+103.64.24.0/22
+103.64.28.0/22
+103.64.32.0/22
+103.64.36.0/22
+103.64.40.0/22
+103.64.44.0/22
+103.64.48.0/22
+103.64.52.0/22
+103.64.56.0/22
+103.64.60.0/22
+103.64.64.0/22
+103.64.68.0/22
+103.64.72.0/22
+103.64.76.0/22
+103.64.80.0/22
+103.64.84.0/22
+103.64.88.0/22
+103.64.92.0/22
+103.64.96.0/22
+103.64.100.0/22
+103.64.104.0/22
+103.64.108.0/22
+103.64.112.0/22
+103.64.116.0/22
+103.64.120.0/22
+103.64.124.0/22
+103.64.140.0/22
+103.64.144.0/22
+103.64.152.0/22
+103.64.156.0/22
+103.64.160.0/22
+103.64.164.0/22
+103.64.168.0/22
+103.64.172.0/22
+103.64.176.0/22
+103.64.180.0/22
+103.64.184.0/22
+103.64.188.0/22
+103.64.192.0/22
+103.64.196.0/22
+103.64.200.0/22
+103.64.204.0/22
+103.64.208.0/22
+103.64.212.0/22
+103.64.216.0/22
+103.64.220.0/22
+103.64.224.0/22
+103.64.228.0/22
+103.64.232.0/22
+103.64.236.0/22
+103.64.240.0/22
+103.64.244.0/22
+103.64.248.0/22
+103.64.252.0/22
+103.65.0.0/22
+103.65.4.0/22
+103.65.8.0/22
+103.65.12.0/22
+103.65.16.0/22
+103.65.36.0/22
+103.65.40.0/22
+103.65.48.0/22
+103.65.52.0/22
+103.65.56.0/22
+103.65.60.0/22
+103.65.64.0/22
+103.65.68.0/22
+103.65.72.0/22
+103.65.76.0/22
+103.65.80.0/22
+103.65.84.0/22
+103.65.88.0/22
+103.65.92.0/22
+103.65.100.0/22
+103.65.104.0/22
+103.65.108.0/22
+103.65.112.0/22
+103.65.144.0/22
+103.65.148.0/22
+103.65.152.0/22
+103.65.156.0/22
+103.65.160.0/22
+103.65.164.0/22
+103.65.168.0/22
+103.65.172.0/22
+103.66.32.0/22
+103.66.40.0/22
+103.66.92.0/22
+103.66.108.0/22
+103.66.200.0/22
+103.66.216.0/22
+103.66.240.0/22
+103.66.244.0/22
+103.66.248.0/22
+103.66.252.0/22
+103.67.0.0/22
+103.67.4.0/22
+103.67.8.0/22
+103.67.100.0/22
+103.67.104.0/22
+103.67.108.0/22
+103.67.112.0/22
+103.67.116.0/22
+103.67.120.0/22
+103.67.124.0/22
+103.67.128.0/22
+103.67.132.0/22
+103.67.136.0/22
+103.67.140.0/22
+103.67.144.0/22
+103.67.148.0/22
+103.67.172.0/22
+103.67.192.0/22
+103.67.212.0/22
+103.67.252.0/22
+103.68.64.0/22
+103.68.88.0/22
+103.68.100.0/22
+103.68.128.0/22
+103.68.192.0/22
+103.69.16.0/22
+103.69.116.0/22
+103.69.132.0/22
+103.69.152.0/22
+103.69.212.0/22
+103.70.8.0/22
+103.70.148.0/22
+103.70.184.0/22
+103.70.220.0/22
+103.70.224.0/22
+103.70.236.0/22
+103.70.252.0/22
+103.71.0.0/22
+103.71.32.0/22
+103.71.48.0/22
+103.71.68.0/22
+103.71.72.0/22
+103.71.80.0/22
+103.71.84.0/22
+103.71.88.0/22
+103.71.120.0/22
+103.71.124.0/22
+103.71.128.0/22
+103.71.144.0/22
+103.71.196.0/22
+103.71.200.0/22
+103.71.232.0/22
+103.72.12.0/22
+103.72.16.0/22
+103.72.20.0/22
+103.72.24.0/22
+103.72.28.0/22
+103.72.32.0/22
+103.72.36.0/22
+103.72.40.0/22
+103.72.44.0/22
+103.72.48.0/22
+103.72.52.0/22
+103.72.112.0/22
+103.72.116.0/22
+103.72.120.0/22
+103.72.124.0/22
+103.72.128.0/22
+103.72.132.0/22
+103.72.144.0/22
+103.72.148.0/22
+103.72.172.0/22
+103.72.180.0/22
+103.72.224.0/22
+103.72.228.0/22
+103.72.232.0/22
+103.72.236.0/22
+103.72.240.0/22
+103.72.244.0/22
+103.72.248.0/22
+103.72.252.0/22
+103.73.0.0/22
+103.73.4.0/22
+103.73.8.0/22
+103.73.12.0/22
+103.73.16.0/22
+103.73.20.0/22
+103.73.24.0/22
+103.73.28.0/22
+103.73.48.0/22
+103.73.88.0/22
+103.73.96.0/22
+103.73.116.0/22
+103.73.120.0/22
+103.73.128.0/22
+103.73.132.0/22
+103.73.136.0/22
+103.73.140.0/22
+103.73.144.0/22
+103.73.168.0/22
+103.73.176.0/22
+103.73.204.0/22
+103.73.208.0/22
+103.73.240.0/22
+103.73.244.0/22
+103.73.248.0/22
+103.74.24.0/22
+103.74.28.0/22
+103.74.32.0/22
+103.74.36.0/22
+103.74.40.0/22
+103.74.44.0/22
+103.74.48.0/22
+103.74.56.0/22
+103.74.60.0/22
+103.74.80.0/22
+103.74.124.0/22
+103.74.148.0/22
+103.74.152.0/22
+103.74.156.0/22
+103.74.204.0/22
+103.74.232.0/22
+103.75.16.0/22
+103.75.88.0/22
+103.75.92.0/22
+103.75.104.0/22
+103.75.108.0/22
+103.75.112.0/22
+103.75.120.0/22
+103.75.128.0/22
+103.75.144.0/22
+103.75.152.0/22
+103.75.236.0/24
+103.76.60.0/22
+103.76.64.0/22
+103.76.68.0/22
+103.76.72.0/22
+103.76.84.0/22
+103.76.92.0/22
+103.76.104.0/22
+103.76.216.0/22
+103.76.220.0/22
+103.76.224.0/22
+103.77.28.0/22
+103.77.52.0/22
+103.77.56.0/22
+103.77.72.0/22
+103.77.88.0/22
+103.77.92.0/22
+103.77.132.0/22
+103.77.148.0/22
+103.77.220.0/22
+103.78.56.0/22
+103.78.60.0/22
+103.78.64.0/22
+103.78.68.0/22
+103.78.124.0/22
+103.78.172.0/22
+103.78.176.0/22
+103.78.196.0/22
+103.78.228.0/22
+103.79.24.0/22
+103.79.28.0/22
+103.79.36.0/22
+103.79.40.0/22
+103.79.44.0/22
+103.79.52.0/22
+103.79.56.0/22
+103.79.60.0/22
+103.79.64.0/22
+103.79.68.0/22
+103.79.80.0/22
+103.79.84.0/22
+103.79.120.0/22
+103.79.136.0/22
+103.79.188.0/22
+103.79.192.0/22
+103.79.196.0/22
+103.79.200.0/22
+103.79.204.0/22
+103.79.208.0/22
+103.79.212.0/22
+103.79.240.0/22
+103.80.24.0/22
+103.80.28.0/22
+103.80.44.0/22
+103.80.72.0/22
+103.80.176.0/22
+103.80.180.0/22
+103.80.184.0/22
+103.80.192.0/22
+103.80.200.0/22
+103.80.232.0/22
+103.81.4.0/22
+103.81.8.0/22
+103.81.16.0/22
+103.81.20.0/22
+103.81.44.0/22
+103.81.48.0/22
+103.81.96.0/22
+103.81.120.0/22
+103.81.148.0/22
+103.81.164.0/22
+103.81.168.0/22
+103.81.183.0/24
+103.81.184.0/22
+103.81.200.0/22
+103.81.232.0/22
+103.82.52.0/22
+103.82.60.0/22
+103.82.68.0/22
+103.82.84.0/22
+103.82.104.0/22
+103.82.224.0/22
+103.82.236.0/22
+103.83.44.0/22
+103.83.52.0/22
+103.83.60.0/22
+103.83.64.0/22
+103.83.72.0/22
+103.83.112.0/22
+103.83.120.0/22
+103.83.180.0/22
+103.84.0.0/22
+103.84.12.0/22
+103.84.16.0/22
+103.84.20.0/22
+103.84.24.0/22
+103.84.28.0/22
+103.84.48.0/22
+103.84.64.0/22
+103.84.72.0/22
+103.84.92.0/22
+103.84.108.0/22
+103.84.136.0/22
+103.85.20.0/22
+103.85.24.0/22
+103.85.44.0/22
+103.85.48.0/22
+103.85.84.0/22
+103.85.136.0/22
+103.85.144.0/22
+103.85.164.0/22
+103.85.168.0/22
+103.85.172.0/22
+103.85.176.0/22
+103.85.224.0/22
+103.86.28.0/22
+103.86.32.0/22
+103.86.44.0/22
+103.86.60.0/22
+103.86.68.0/22
+103.86.80.0/22
+103.86.84.0/22
+103.86.88.0/22
+103.86.204.0/22
+103.86.208.0/22
+103.86.212.0/22
+103.86.216.0/22
+103.86.220.0/22
+103.86.224.0/22
+103.86.228.0/22
+103.86.232.0/22
+103.86.236.0/22
+103.86.240.0/22
+103.86.244.0/22
+103.86.248.0/22
+103.86.252.0/22
+103.87.0.0/22
+103.87.4.0/22
+103.87.20.0/22
+103.87.32.0/22
+103.87.72.0/22
+103.87.96.0/22
+103.87.132.0/22
+103.87.180.0/22
+103.87.224.0/22
+103.88.4.0/22
+103.88.8.0/22
+103.88.12.0/22
+103.88.16.0/22
+103.88.20.0/22
+103.88.32.0/22
+103.88.36.0/22
+103.88.60.0/22
+103.88.64.0/22
+103.88.72.0/22
+103.88.96.0/22
+103.88.100.0/22
+103.88.164.0/22
+103.88.176.0/22
+103.88.184.0/22
+103.88.188.0/22
+103.88.212.0/22
+103.89.28.0/22
+103.89.96.0/22
+103.89.100.0/22
+103.89.104.0/22
+103.89.108.0/22
+103.89.112.0/22
+103.89.116.0/22
+103.89.148.0/22
+103.89.172.0/22
+103.89.184.0/22
+103.89.188.0/22
+103.89.192.0/22
+103.89.196.0/22
+103.89.200.0/22
+103.89.204.0/22
+103.89.208.0/22
+103.89.212.0/22
+103.89.216.0/22
+103.89.220.0/22
+103.89.224.0/22
+103.89.228.0/22
+103.90.52.0/22
+103.90.92.0/22
+103.90.100.0/22
+103.90.104.0/22
+103.90.108.0/22
+103.90.112.0/22
+103.90.116.0/22
+103.90.120.0/22
+103.90.124.0/22
+103.90.128.0/22
+103.90.132.0/22
+103.90.152.0/22
+103.90.168.0/22
+103.90.173.0/24
+103.90.176.0/22
+103.90.188.0/22
+103.90.192.0/22
+103.91.36.0/22
+103.91.40.0/22
+103.91.108.0/22
+103.91.152.0/22
+103.91.176.0/22
+103.91.200.0/22
+103.91.208.0/22
+103.91.212.0/22
+103.91.219.0/24
+103.91.236.0/22
+103.91.252.0/22
+103.92.0.0/22
+103.92.4.0/22
+103.92.8.0/22
+103.92.12.0/22
+103.92.48.0/22
+103.92.52.0/22
+103.92.56.0/22
+103.92.60.0/22
+103.92.64.0/22
+103.92.68.0/22
+103.92.72.0/22
+103.92.76.0/22
+103.92.80.0/22
+103.92.86.0/24
+103.92.88.0/22
+103.92.108.0/22
+103.92.124.0/22
+103.92.128.0/24
+103.92.132.0/22
+103.92.156.0/22
+103.92.164.0/22
+103.92.168.0/22
+103.92.172.0/22
+103.92.176.0/22
+103.92.180.0/22
+103.92.184.0/22
+103.92.188.0/22
+103.92.192.0/22
+103.92.236.0/22
+103.92.240.0/22
+103.92.244.0/22
+103.92.248.0/22
+103.92.252.0/22
+103.93.0.0/22
+103.93.4.0/22
+103.93.28.0/22
+103.93.76.0/22
+103.93.84.0/22
+103.93.121.0/24
+103.93.152.0/22
+103.93.180.0/22
+103.93.204.0/22
+103.94.12.0/22
+103.94.20.0/22
+103.94.28.0/22
+103.94.32.0/22
+103.94.36.0/22
+103.94.40.0/22
+103.94.44.0/22
+103.94.72.0/22
+103.94.88.0/22
+103.94.116.0/22
+103.94.160.0/22
+103.94.180.0/22
+103.94.200.0/22
+103.95.28.0/22
+103.95.52.0/22
+103.95.64.0/22
+103.95.68.0/22
+103.95.88.0/22
+103.95.92.0/22
+103.95.116.0/22
+103.95.128.0/22
+103.95.136.0/22
+103.95.140.0/22
+103.95.144.0/22
+103.95.152.0/22
+103.95.207.0/24
+103.95.216.0/22
+103.95.220.0/22
+103.95.224.0/22
+103.95.236.0/22
+103.95.240.0/22
+103.95.244.0/22
+103.95.248.0/22
+103.95.252.0/22
+103.96.0.0/22
+103.96.8.0/22
+103.96.80.0/22
+103.96.124.0/22
+103.96.136.0/22
+103.96.140.0/24
+103.96.148.0/22
+103.96.152.0/22
+103.96.156.0/22
+103.96.160.0/22
+103.96.164.0/22
+103.96.168.0/22
+103.96.172.0/22
+103.96.176.0/22
+103.96.180.0/22
+103.96.184.0/22
+103.96.188.0/22
+103.96.192.0/22
+103.96.196.0/22
+103.96.200.0/22
+103.96.204.0/22
+103.96.208.0/22
+103.96.212.0/22
+103.96.216.0/22
+103.97.8.0/22
+103.97.12.0/22
+103.97.16.0/22
+103.97.20.0/22
+103.97.24.0/22
+103.97.28.0/22
+103.97.32.0/22
+103.97.36.0/22
+103.97.40.0/22
+103.97.56.0/22
+103.97.60.0/22
+103.97.64.0/22
+103.97.68.0/22
+103.97.72.0/22
+103.97.80.0/22
+103.97.112.0/22
+103.97.116.0/22
+103.97.128.0/22
+103.97.144.0/22
+103.97.148.0/22
+103.97.188.0/22
+103.97.192.0/22
+103.97.224.0/22
+103.97.228.0/23
+103.98.28.0/23
+103.98.40.0/22
+103.98.44.0/22
+103.98.48.0/22
+103.98.56.0/22
+103.98.80.0/22
+103.98.88.0/22
+103.98.92.0/22
+103.98.96.0/22
+103.98.100.0/22
+103.98.124.0/22
+103.98.136.0/22
+103.98.140.0/22
+103.98.144.0/22
+103.98.164.0/22
+103.98.168.0/22
+103.98.180.0/22
+103.98.196.0/22
+103.98.216.0/22
+103.98.220.0/22
+103.98.224.0/22
+103.98.228.0/22
+103.98.232.0/22
+103.98.240.0/22
+103.98.244.0/22
+103.98.248.0/22
+103.98.252.0/22
+103.99.40.0/23
+103.99.52.0/22
+103.99.56.0/22
+103.99.60.0/22
+103.99.76.0/22
+103.99.104.0/22
+103.99.116.0/22
+103.99.120.0/22
+103.99.152.0/22
+103.99.220.0/22
+103.99.232.0/22
+103.99.236.0/22
+103.100.0.0/22
+103.100.32.0/22
+103.100.40.0/22
+103.100.48.0/22
+103.100.52.0/22
+103.100.56.0/22
+103.100.60.0/22
+103.100.64.0/22
+103.100.68.0/22
+103.100.88.0/22
+103.100.116.0/22
+103.100.140.0/22
+103.100.144.0/22
+103.100.236.0/22
+103.100.240.0/22
+103.100.248.0/22
+103.100.252.0/22
+103.101.4.0/22
+103.101.8.0/22
+103.101.12.0/22
+103.101.28.0/22
+103.101.60.0/22
+103.101.120.0/22
+103.101.124.0/22
+103.101.144.0/22
+103.101.148.0/22
+103.101.153.0/24
+103.101.180.0/22
+103.101.184.0/22
+103.102.76.0/22
+103.102.80.0/22
+103.102.168.0/22
+103.102.172.0/22
+103.102.180.0/22
+103.102.184.0/22
+103.102.188.0/22
+103.102.192.0/22
+103.102.196.0/22
+103.102.200.0/22
+103.102.208.0/22
+103.102.212.0/22
+103.103.12.0/22
+103.103.16.0/22
+103.103.36.0/22
+103.103.68.0/22
+103.103.72.0/22
+103.103.176.0/22
+103.103.188.0/22
+103.103.200.0/22
+103.103.204.0/22
+103.103.220.0/22
+103.103.224.0/22
+103.103.228.0/22
+103.103.232.0/22
+103.103.248.0/22
+103.103.252.0/22
+103.104.0.0/22
+103.104.4.0/22
+103.104.36.0/22
+103.104.40.0/22
+103.104.64.0/22
+103.104.104.0/22
+103.104.152.0/22
+103.104.168.0/22
+103.104.172.0/22
+103.104.188.0/22
+103.104.198.0/23
+103.104.252.0/22
+103.105.0.0/22
+103.105.4.0/22
+103.105.12.0/22
+103.105.16.0/22
+103.105.23.0/24
+103.105.56.0/22
+103.105.60.0/22
+103.105.116.0/22
+103.105.132.0/22
+103.105.180.0/22
+103.105.184.0/22
+103.105.200.0/22
+103.105.204.0/22
+103.105.220.0/22
+103.106.36.0/22
+103.106.40.0/22
+103.106.44.0/22
+103.106.60.0/22
+103.106.68.0/22
+103.106.96.0/22
+103.106.120.0/22
+103.106.128.0/22
+103.106.132.0/22
+103.106.160.0/22
+103.106.188.0/22
+103.106.196.0/22
+103.106.202.0/23
+103.106.212.0/22
+103.106.244.0/22
+103.106.252.0/22
+103.107.0.0/22
+103.107.8.0/24
+103.107.28.0/22
+103.107.32.0/22
+103.107.44.0/22
+103.107.72.0/22
+103.107.108.0/22
+103.107.164.0/22
+103.107.168.0/22
+103.107.188.0/22
+103.107.192.0/22
+103.107.208.0/22
+103.107.212.0/22
+103.107.216.0/22
+103.107.220.0/22
+103.108.52.0/22
+103.108.64.0/22
+103.108.160.0/22
+103.108.164.0/22
+103.108.184.0/23
+103.108.188.0/23
+103.108.192.0/22
+103.108.196.0/22
+103.108.208.0/22
+103.108.212.0/22
+103.108.224.0/22
+103.108.244.0/22
+103.108.251.0/24
+103.109.20.0/22
+103.109.48.0/22
+103.109.88.0/22
+103.109.106.0/23
+103.109.248.0/22
+103.110.32.0/22
+103.110.80.0/23
+103.110.92.0/22
+103.110.100.0/22
+103.110.116.0/22
+103.110.127.0/24
+103.110.128.0/23
+103.110.131.0/24
+103.110.132.0/22
+103.110.136.0/22
+103.110.152.0/22
+103.110.156.0/22
+103.110.188.0/22
+103.110.204.0/22
+103.111.38.0/23
+103.111.64.0/22
+103.111.172.0/22
+103.111.252.0/22
+103.112.28.0/22
+103.112.68.0/22
+103.112.72.0/22
+103.112.88.0/22
+103.112.92.0/22
+103.112.96.0/22
+103.112.108.0/22
+103.112.112.0/22
+103.112.116.0/22
+103.112.140.0/22
+103.112.172.0/22
+103.112.184.0/22
+103.112.208.0/22
+103.113.4.0/22
+103.113.92.0/22
+103.113.144.0/22
+103.113.220.0/22
+103.113.232.0/22
+103.113.236.0/22
+103.114.4.0/22
+103.114.28.0/22
+103.114.68.0/22
+103.114.72.0/22
+103.114.100.0/22
+103.114.132.0/22
+103.114.148.0/22
+103.114.156.0/22
+103.114.176.0/22
+103.114.212.0/22
+103.114.236.0/22
+103.114.240.0/22
+103.115.16.0/22
+103.115.40.0/22
+103.115.44.0/22
+103.115.48.0/22
+103.115.52.0/22
+103.115.56.0/22
+103.115.60.0/22
+103.115.64.0/22
+103.115.68.0/22
+103.115.92.0/22
+103.115.120.0/22
+103.115.148.0/22
+103.115.204.0/23
+103.115.248.0/22
+103.116.20.0/22
+103.116.40.0/22
+103.116.64.0/22
+103.116.72.0/22
+103.116.76.0/22
+103.116.92.0/22
+103.116.120.0/22
+103.116.128.0/22
+103.116.132.0/23
+103.116.148.0/22
+103.116.184.0/22
+103.116.206.0/23
+103.116.220.0/22
+103.116.224.0/22
+103.116.228.0/22
+103.117.16.0/22
+103.117.72.0/22
+103.117.88.0/22
+103.117.132.0/22
+103.117.136.0/22
+103.117.188.0/22
+103.117.220.0/22
+103.118.19.0/24
+103.118.36.0/22
+103.118.52.0/22
+103.118.56.0/22
+103.118.60.0/22
+103.118.64.0/22
+103.118.68.0/22
+103.118.72.0/22
+103.118.88.0/22
+103.118.173.0/24
+103.118.192.0/22
+103.118.196.0/22
+103.118.200.0/22
+103.118.204.0/22
+103.118.208.0/22
+103.118.212.0/22
+103.118.216.0/22
+103.118.220.0/22
+103.118.240.0/22
+103.118.244.0/22
+103.118.248.0/22
+103.118.252.0/22
+103.119.0.0/22
+103.119.12.0/22
+103.119.16.0/22
+103.119.28.0/22
+103.119.44.0/22
+103.119.104.0/22
+103.119.115.0/24
+103.119.156.0/22
+103.119.180.0/22
+103.119.200.0/22
+103.119.224.0/22
+103.120.52.0/22
+103.120.72.0/22
+103.120.76.0/24
+103.120.88.0/22
+103.120.96.0/22
+103.120.100.0/22
+103.120.140.0/22
+103.120.196.0/22
+103.120.224.0/22
+103.121.52.0/22
+103.121.92.0/22
+103.121.160.0/22
+103.121.164.0/22
+103.121.250.0/24
+103.121.252.0/22
+103.122.48.0/22
+103.122.176.0/22
+103.122.192.0/22
+103.122.240.0/22
+103.123.4.0/22
+103.123.56.0/22
+103.123.88.0/22
+103.123.92.0/22
+103.123.116.0/22
+103.123.160.0/22
+103.123.176.0/22
+103.123.200.0/22
+103.123.204.0/22
+103.123.208.0/22
+103.123.212.0/22
+103.124.24.0/22
+103.124.48.0/22
+103.124.64.0/22
+103.124.212.0/22
+103.124.216.0/22
+103.125.20.0/22
+103.125.44.0/22
+103.125.132.0/22
+103.125.164.0/22
+103.125.196.0/22
+103.125.236.0/22
+103.125.248.0/22
+103.126.0.0/22
+103.126.16.0/22
+103.126.44.0/22
+103.129.52.0/22
+103.129.148.0/22
+103.130.132.0/22
+103.130.152.0/24
+103.130.160.0/22
+103.130.228.0/22
+103.131.20.0/22
+103.131.36.0/22
+103.131.152.0/22
+103.131.168.0/22
+103.131.176.0/22
+103.131.224.0/22
+103.131.228.0/22
+103.131.240.0/22
+103.192.0.0/22
+103.192.4.0/22
+103.192.8.0/22
+103.192.12.0/22
+103.192.16.0/22
+103.192.20.0/22
+103.192.24.0/22
+103.192.28.0/22
+103.192.48.0/22
+103.192.52.0/22
+103.192.56.0/22
+103.192.84.0/22
+103.192.88.0/22
+103.192.92.0/22
+103.192.96.0/22
+103.192.100.0/22
+103.192.104.0/22
+103.192.108.0/22
+103.192.112.0/22
+103.192.128.0/22
+103.192.132.0/22
+103.192.136.0/22
+103.192.140.0/22
+103.192.144.0/22
+103.192.164.0/22
+103.192.188.0/22
+103.192.208.0/22
+103.192.212.0/22
+103.192.216.0/22
+103.192.252.0/22
+103.193.40.0/22
+103.193.44.0/22
+103.193.120.0/22
+103.193.124.0/22
+103.193.140.0/22
+103.193.144.0/22
+103.193.148.0/22
+103.193.160.0/22
+103.193.188.0/22
+103.193.192.0/22
+103.193.212.0/22
+103.193.216.0/22
+103.193.220.0/22
+103.193.224.0/22
+103.193.228.0/22
+103.193.232.0/22
+103.193.236.0/22
+103.193.240.0/22
+103.194.16.0/22
+103.195.104.0/22
+103.195.112.0/22
+103.195.136.0/22
+103.195.148.0/22
+103.195.152.0/22
+103.195.160.0/22
+103.195.192.0/22
+103.196.60.0/22
+103.196.64.0/22
+103.196.72.0/22
+103.196.88.0/22
+103.196.92.0/22
+103.196.96.0/22
+103.196.168.0/22
+103.196.204.0/22
+103.197.180.0/22
+103.197.228.0/22
+103.198.20.0/22
+103.198.60.0/22
+103.198.64.0/22
+103.198.72.0/22
+103.198.124.0/22
+103.198.156.0/22
+103.198.180.0/22
+103.198.196.0/22
+103.198.200.0/22
+103.198.216.0/22
+103.198.220.0/22
+103.198.224.0/22
+103.198.228.0/22
+103.198.232.0/22
+103.198.236.0/22
+103.198.240.0/22
+103.198.244.0/22
+103.199.164.0/22
+103.199.196.0/22
+103.199.228.0/22
+103.199.248.0/22
+103.199.252.0/22
+103.200.28.0/22
+103.200.32.0/22
+103.200.52.0/22
+103.200.64.0/22
+103.200.68.0/22
+103.200.136.0/22
+103.200.140.0/22
+103.200.144.0/22
+103.200.148.0/22
+103.200.152.0/22
+103.200.156.0/22
+103.200.160.0/22
+103.200.164.0/22
+103.200.168.0/22
+103.200.172.0/22
+103.200.176.0/22
+103.200.180.0/22
+103.200.184.0/22
+103.200.188.0/22
+103.200.192.0/22
+103.200.220.0/22
+103.200.224.0/22
+103.200.228.0/22
+103.200.232.0/22
+103.200.236.0/22
+103.200.240.0/22
+103.200.244.0/22
+103.200.248.0/22
+103.200.252.0/22
+103.201.0.0/22
+103.201.4.0/22
+103.201.8.0/22
+103.201.12.0/22
+103.201.16.0/22
+103.201.20.0/22
+103.201.28.0/22
+103.201.32.0/22
+103.201.36.0/22
+103.201.40.0/22
+103.201.44.0/22
+103.201.48.0/22
+103.201.52.0/22
+103.201.56.0/22
+103.201.60.0/22
+103.201.64.0/22
+103.201.76.0/22
+103.201.80.0/22
+103.201.84.0/22
+103.201.88.0/22
+103.201.92.0/22
+103.201.96.0/22
+103.201.100.0/22
+103.201.104.0/22
+103.201.108.0/22
+103.201.112.0/22
+103.201.116.0/22
+103.201.120.0/22
+103.201.152.0/22
+103.201.156.0/22
+103.201.160.0/22
+103.201.164.0/22
+103.201.168.0/22
+103.201.172.0/22
+103.201.176.0/22
+103.201.180.0/22
+103.201.184.0/22
+103.201.188.0/22
+103.201.192.0/22
+103.201.196.0/22
+103.201.200.0/22
+103.201.204.0/22
+103.201.208.0/22
+103.201.212.0/22
+103.201.216.0/22
+103.201.220.0/22
+103.201.224.0/22
+103.201.228.0/22
+103.201.232.0/22
+103.201.236.0/22
+103.201.240.0/22
+103.201.244.0/22
+103.201.248.0/22
+103.201.252.0/22
+103.202.0.0/22
+103.202.4.0/22
+103.202.8.0/22
+103.202.12.0/22
+103.202.16.0/22
+103.202.20.0/22
+103.202.24.0/22
+103.202.28.0/22
+103.202.32.0/22
+103.202.36.0/22
+103.202.40.0/22
+103.202.44.0/22
+103.202.56.0/22
+103.202.60.0/22
+103.202.64.0/22
+103.202.68.0/22
+103.202.72.0/22
+103.202.76.0/22
+103.202.80.0/22
+103.202.84.0/22
+103.202.88.0/22
+103.202.92.0/22
+103.202.96.0/22
+103.202.100.0/22
+103.202.104.0/22
+103.202.108.0/22
+103.202.112.0/22
+103.202.116.0/22
+103.202.120.0/22
+103.202.124.0/22
+103.202.128.0/22
+103.202.132.0/22
+103.202.136.0/22
+103.202.140.0/22
+103.202.144.0/22
+103.202.152.0/22
+103.202.156.0/22
+103.202.160.0/22
+103.202.164.0/22
+103.202.168.0/22
+103.202.172.0/22
+103.202.176.0/22
+103.202.180.0/22
+103.202.184.0/22
+103.202.188.0/22
+103.202.192.0/22
+103.202.196.0/22
+103.202.200.0/21
+103.202.212.0/22
+103.202.228.0/22
+103.202.236.0/22
+103.202.240.0/22
+103.202.244.0/22
+103.202.248.0/22
+103.202.252.0/22
+103.203.0.0/22
+103.203.4.0/22
+103.203.8.0/22
+103.203.12.0/22
+103.203.16.0/22
+103.203.20.0/22
+103.203.24.0/22
+103.203.28.0/22
+103.203.32.0/22
+103.203.52.0/22
+103.203.56.0/22
+103.203.96.0/22
+103.203.100.0/22
+103.203.104.0/22
+103.203.108.0/22
+103.203.112.0/22
+103.203.116.0/22
+103.203.120.0/22
+103.203.124.0/22
+103.203.128.0/22
+103.203.140.0/22
+103.203.164.0/22
+103.203.168.0/22
+103.203.192.0/22
+103.203.200.0/22
+103.203.212.0/22
+103.203.216.0/22
+103.204.24.0/22
+103.204.72.0/22
+103.204.88.0/22
+103.204.112.0/22
+103.204.136.0/22
+103.204.140.0/22
+103.204.144.0/22
+103.204.148.0/22
+103.204.152.0/22
+103.204.196.0/22
+103.204.232.0/22
+103.204.236.0/22
+103.205.4.0/22
+103.205.8.0/22
+103.205.40.0/22
+103.205.44.0/22
+103.205.52.0/22
+103.205.108.0/22
+103.205.116.0/22
+103.205.120.0/22
+103.205.136.0/22
+103.205.162.0/24
+103.205.188.0/22
+103.205.192.0/22
+103.205.196.0/22
+103.205.200.0/22
+103.205.236.0/22
+103.205.248.0/22
+103.205.252.0/22
+103.206.0.0/22
+103.206.44.0/22
+103.206.108.0/22
+103.206.148.0/22
+103.207.48.0/22
+103.207.104.0/22
+103.207.164.0/22
+103.207.184.0/22
+103.207.188.0/22
+103.207.192.0/22
+103.207.196.0/22
+103.207.200.0/22
+103.207.204.0/22
+103.207.208.0/22
+103.207.212.0/22
+103.207.220.0/22
+103.207.228.0/22
+103.207.232.0/22
+103.208.12.0/22
+103.208.16.0/22
+103.208.28.0/22
+103.208.40.0/22
+103.208.44.0/22
+103.208.48.0/22
+103.208.148.0/22
+103.209.112.0/22
+103.209.136.0/22
+103.209.200.0/22
+103.209.208.0/22
+103.209.216.0/22
+103.210.0.0/22
+103.210.20.0/22
+103.210.96.0/22
+103.210.156.0/22
+103.210.160.0/22
+103.210.164.0/22
+103.210.168.0/22
+103.210.172.0/22
+103.210.176.0/22
+103.210.180.0/22
+103.210.184.0/22
+103.210.188.0/22
+103.210.216.0/22
+103.211.44.0/22
+103.211.96.0/22
+103.211.100.0/22
+103.211.156.0/22
+103.211.164.0/22
+103.211.192.0/22
+103.211.220.0/22
+103.211.224.0/22
+103.211.248.0/22
+103.212.0.0/22
+103.212.4.0/22
+103.212.8.0/22
+103.212.12.0/22
+103.212.32.0/22
+103.212.44.0/22
+103.212.48.0/22
+103.212.84.0/22
+103.212.100.0/22
+103.212.104.0/22
+103.212.108.0/22
+103.212.148.0/22
+103.212.164.0/22
+103.212.196.0/22
+103.212.200.0/22
+103.212.228.0/22
+103.212.252.0/22
+103.213.40.0/22
+103.213.44.0/22
+103.213.48.0/22
+103.213.52.0/22
+103.213.56.0/22
+103.213.60.0/22
+103.213.64.0/22
+103.213.68.0/22
+103.213.72.0/22
+103.213.76.0/22
+103.213.80.0/22
+103.213.84.0/22
+103.213.88.0/22
+103.213.92.0/22
+103.213.96.0/22
+103.213.132.0/22
+103.213.136.0/22
+103.213.140.0/22
+103.213.144.0/22
+103.213.148.0/22
+103.213.152.0/22
+103.213.156.0/22
+103.213.160.0/22
+103.213.164.0/22
+103.213.168.0/22
+103.213.172.0/22
+103.213.176.0/22
+103.213.180.0/22
+103.213.184.0/22
+103.213.188.0/22
+103.213.248.0/22
+103.214.32.0/22
+103.214.48.0/22
+103.214.84.0/22
+103.214.168.0/22
+103.214.212.0/22
+103.214.240.0/22
+103.214.244.0/22
+103.215.28.0/22
+103.215.32.0/22
+103.215.36.0/22
+103.215.44.0/22
+103.215.48.0/22
+103.215.100.0/22
+103.215.104.0/22
+103.215.108.0/22
+103.215.116.0/22
+103.215.120.0/22
+103.215.140.0/22
+103.215.184.0/22
+103.215.228.0/22
+103.216.4.0/22
+103.216.8.0/22
+103.216.12.0/22
+103.216.16.0/22
+103.216.20.0/22
+103.216.24.0/22
+103.216.28.0/22
+103.216.32.0/22
+103.216.36.0/22
+103.216.40.0/22
+103.216.44.0/22
+103.216.64.0/22
+103.216.108.0/22
+103.216.136.0/22
+103.216.152.0/22
+103.216.224.0/22
+103.216.228.0/22
+103.216.240.0/22
+103.216.244.0/22
+103.216.248.0/22
+103.216.252.0/22
+103.217.0.0/22
+103.217.4.0/22
+103.217.8.0/22
+103.217.12.0/22
+103.217.16.0/22
+103.217.20.0/22
+103.217.24.0/22
+103.217.28.0/22
+103.217.32.0/22
+103.217.36.0/22
+103.217.40.0/22
+103.217.44.0/22
+103.217.48.0/22
+103.217.52.0/22
+103.217.56.0/22
+103.217.60.0/22
+103.217.168.0/22
+103.217.180.0/22
+103.217.184.0/22
+103.217.188.0/22
+103.217.192.0/22
+103.217.196.0/22
+103.217.200.0/22
+103.217.204.0/22
+103.218.0.0/22
+103.218.8.0/22
+103.218.12.0/22
+103.218.16.0/22
+103.218.20.0/22
+103.218.28.0/22
+103.218.32.0/22
+103.218.36.0/22
+103.218.40.0/22
+103.218.44.0/22
+103.218.48.0/22
+103.218.52.0/22
+103.218.56.0/22
+103.218.60.0/22
+103.218.64.0/22
+103.218.68.0/22
+103.218.72.0/22
+103.218.76.0/22
+103.218.80.0/22
+103.218.84.0/22
+103.218.88.0/22
+103.218.92.0/22
+103.218.184.0/22
+103.218.192.0/22
+103.218.196.0/22
+103.218.200.0/22
+103.218.204.0/22
+103.218.208.0/22
+103.218.212.0/22
+103.218.216.0/22
+103.219.24.0/22
+103.219.28.0/22
+103.219.32.0/22
+103.219.36.0/22
+103.219.64.0/22
+103.219.84.0/22
+103.219.88.0/22
+103.219.92.0/22
+103.219.96.0/22
+103.219.100.0/22
+103.219.176.0/22
+103.219.184.0/22
+103.220.48.0/22
+103.220.52.0/22
+103.220.56.0/22
+103.220.60.0/22
+103.220.64.0/22
+103.220.92.0/22
+103.220.96.0/22
+103.220.100.0/22
+103.220.104.0/22
+103.220.108.0/22
+103.220.116.0/22
+103.220.120.0/22
+103.220.124.0/22
+103.220.128.0/22
+103.220.132.0/22
+103.220.136.0/22
+103.220.140.0/22
+103.220.144.0/22
+103.220.148.0/22
+103.220.152.0/22
+103.220.160.0/22
+103.220.164.0/22
+103.220.168.0/22
+103.220.172.0/22
+103.220.176.0/22
+103.220.180.0/22
+103.220.184.0/22
+103.220.188.0/22
+103.220.192.0/22
+103.220.196.0/22
+103.220.200.0/22
+103.220.240.0/22
+103.220.244.0/22
+103.220.248.0/22
+103.220.252.0/22
+103.221.0.0/22
+103.221.4.0/22
+103.221.8.0/22
+103.221.12.0/22
+103.221.16.0/22
+103.221.20.0/22
+103.221.24.0/22
+103.221.28.0/22
+103.221.32.0/22
+103.221.36.0/22
+103.221.40.0/22
+103.221.44.0/22
+103.221.48.0/22
+103.221.88.0/22
+103.221.92.0/22
+103.221.96.0/22
+103.221.100.0/22
+103.221.104.0/22
+103.221.108.0/22
+103.221.112.0/22
+103.221.116.0/22
+103.221.120.0/22
+103.221.124.0/22
+103.221.128.0/22
+103.221.132.0/22
+103.221.136.0/22
+103.221.140.0/22
+103.221.144.0/22
+103.221.148.0/22
+103.221.152.0/22
+103.221.156.0/22
+103.221.160.0/22
+103.221.164.0/22
+103.221.168.0/22
+103.221.172.0/22
+103.221.176.0/22
+103.221.180.0/22
+103.221.184.0/22
+103.221.188.0/22
+103.221.192.0/22
+103.221.196.0/22
+103.221.200.0/22
+103.221.204.0/22
+103.222.0.0/22
+103.222.4.0/22
+103.222.8.0/22
+103.222.12.0/22
+103.222.16.0/22
+103.222.24.0/22
+103.222.28.0/22
+103.222.32.0/22
+103.222.36.0/22
+103.222.40.0/22
+103.222.44.0/22
+103.222.48.0/22
+103.222.52.0/22
+103.222.56.0/22
+103.222.60.0/22
+103.222.64.0/22
+103.222.68.0/22
+103.222.72.0/22
+103.222.76.0/22
+103.222.80.0/22
+103.222.84.0/22
+103.222.88.0/22
+103.222.92.0/22
+103.222.96.0/22
+103.222.100.0/22
+103.222.104.0/22
+103.222.108.0/22
+103.222.112.0/22
+103.222.116.0/22
+103.222.120.0/22
+103.222.124.0/22
+103.222.128.0/22
+103.222.132.0/22
+103.222.136.0/22
+103.222.140.0/22
+103.222.144.0/22
+103.222.148.0/22
+103.222.152.0/22
+103.222.156.0/22
+103.222.160.0/22
+103.222.164.0/22
+103.222.168.0/22
+103.222.172.0/22
+103.222.176.0/22
+103.222.180.0/22
+103.222.184.0/22
+103.222.188.0/22
+103.222.192.0/22
+103.222.196.0/22
+103.222.200.0/22
+103.222.204.0/22
+103.222.208.0/22
+103.222.212.0/22
+103.222.216.0/22
+103.222.220.0/22
+103.222.224.0/22
+103.222.228.0/22
+103.222.232.0/22
+103.222.240.0/22
+103.222.244.0/22
+103.223.16.0/22
+103.223.20.0/22
+103.223.24.0/22
+103.223.28.0/22
+103.223.32.0/22
+103.223.36.0/22
+103.223.40.0/22
+103.223.44.0/22
+103.223.48.0/22
+103.223.52.0/22
+103.223.56.0/22
+103.223.60.0/22
+103.223.64.0/22
+103.223.68.0/22
+103.223.72.0/22
+103.223.76.0/22
+103.223.80.0/22
+103.223.84.0/22
+103.223.88.0/22
+103.223.92.0/22
+103.223.96.0/22
+103.223.100.0/22
+103.223.104.0/22
+103.223.108.0/22
+103.223.112.0/22
+103.223.116.0/22
+103.223.120.0/22
+103.223.124.0/22
+103.223.128.0/22
+103.223.132.0/22
+103.223.140.0/22
+103.223.144.0/22
+103.223.148.0/22
+103.223.152.0/22
+103.223.156.0/22
+103.223.160.0/22
+103.223.164.0/22
+103.223.168.0/22
+103.223.172.0/22
+103.223.176.0/22
+103.223.180.0/22
+103.223.188.0/22
+103.223.192.0/22
+103.223.196.0/22
+103.223.200.0/22
+103.223.204.0/22
+103.223.208.0/22
+103.223.212.0/22
+103.223.216.0/22
+103.223.220.0/22
+103.223.224.0/22
+103.223.228.0/22
+103.223.232.0/22
+103.223.236.0/22
+103.223.240.0/22
+103.223.244.0/22
+103.223.248.0/22
+103.223.252.0/22
+103.224.0.0/22
+103.224.40.0/22
+103.224.44.0/22
+103.224.60.0/22
+103.224.80.0/22
+103.224.220.0/22
+103.224.224.0/22
+103.224.228.0/22
+103.224.232.0/22
+103.225.84.0/22
+103.226.16.0/22
+103.226.40.0/22
+103.226.56.0/22
+103.226.60.0/22
+103.226.80.0/22
+103.226.132.0/22
+103.226.156.0/22
+103.226.180.0/22
+103.226.196.0/22
+103.227.48.0/22
+103.227.72.0/22
+103.227.76.0/22
+103.227.80.0/22
+103.227.100.0/22
+103.227.120.0/22
+103.227.132.0/22
+103.227.136.0/22
+103.227.196.0/22
+103.227.204.0/22
+103.227.212.0/22
+103.227.228.0/22
+103.228.12.0/22
+103.228.28.0/22
+103.228.68.0/22
+103.228.88.0/22
+103.228.128.0/22
+103.228.136.0/22
+103.228.160.0/22
+103.228.176.0/22
+103.228.204.0/22
+103.228.208.0/22
+103.228.228.0/22
+103.228.232.0/22
+103.229.20.0/22
+103.229.60.0/22
+103.229.136.0/22
+103.229.148.0/22
+103.229.172.0/22
+103.229.212.0/22
+103.229.216.0/22
+103.229.220.0/22
+103.229.228.0/22
+103.229.236.0/22
+103.229.240.0/22
+103.230.0.0/22
+103.230.28.0/22
+103.230.44.0/22
+103.230.96.0/22
+103.230.196.0/22
+103.230.200.0/22
+103.230.204.0/22
+103.230.212.0/22
+103.230.236.0/22
+103.231.16.0/22
+103.231.20.0/22
+103.231.64.0/22
+103.231.68.0/22
+103.231.144.0/22
+103.231.180.0/22
+103.231.184.0/22
+103.231.244.0/22
+103.232.4.0/22
+103.232.144.0/22
+103.232.188.0/22
+103.232.212.0/22
+103.233.4.0/22
+103.233.44.0/22
+103.233.52.0/22
+103.233.104.0/22
+103.233.128.0/22
+103.233.136.0/22
+103.233.228.0/22
+103.234.0.0/22
+103.234.20.0/22
+103.234.56.0/22
+103.234.128.0/22
+103.234.172.0/22
+103.234.180.0/22
+103.234.244.0/22
+103.235.16.0/22
+103.235.48.0/22
+103.235.56.0/22
+103.235.60.0/22
+103.235.80.0/22
+103.235.84.0/22
+103.235.128.0/22
+103.235.132.0/22
+103.235.136.0/22
+103.235.140.0/22
+103.235.144.0/22
+103.235.148.0/22
+103.235.184.0/22
+103.235.192.0/22
+103.235.200.0/22
+103.235.220.0/22
+103.235.224.0/22
+103.235.228.0/22
+103.235.232.0/22
+103.235.236.0/22
+103.235.240.0/22
+103.235.244.0/22
+103.235.248.0/22
+103.235.252.0/22
+103.236.0.0/22
+103.236.4.0/22
+103.236.8.0/22
+103.236.12.0/22
+103.236.16.0/22
+103.236.20.0/22
+103.236.24.0/22
+103.236.28.0/22
+103.236.32.0/22
+103.236.36.0/22
+103.236.40.0/22
+103.236.44.0/22
+103.236.48.0/22
+103.236.52.0/22
+103.236.56.0/22
+103.236.60.0/22
+103.236.64.0/22
+103.236.68.0/22
+103.236.72.0/22
+103.236.76.0/22
+103.236.80.0/22
+103.236.84.0/22
+103.236.88.0/22
+103.236.92.0/22
+103.236.96.0/22
+103.236.120.0/22
+103.236.184.0/22
+103.236.220.0/22
+103.236.232.0/22
+103.236.240.0/22
+103.236.244.0/22
+103.236.248.0/22
+103.236.252.0/22
+103.237.0.0/22
+103.237.4.0/22
+103.237.8.0/22
+103.237.12.0/22
+103.237.24.0/22
+103.237.28.0/22
+103.237.68.0/22
+103.237.88.0/22
+103.237.152.0/22
+103.237.176.0/22
+103.237.180.0/22
+103.237.184.0/22
+103.237.188.0/22
+103.237.192.0/22
+103.237.196.0/22
+103.237.200.0/22
+103.237.204.0/22
+103.237.208.0/22
+103.237.212.0/22
+103.237.216.0/22
+103.237.220.0/22
+103.237.224.0/22
+103.237.228.0/22
+103.237.232.0/22
+103.237.236.0/22
+103.237.240.0/22
+103.237.244.0/22
+103.237.248.0/22
+103.237.252.0/22
+103.238.0.0/22
+103.238.4.0/22
+103.238.16.0/22
+103.238.20.0/22
+103.238.24.0/22
+103.238.28.0/22
+103.238.32.0/22
+103.238.36.0/22
+103.238.40.0/22
+103.238.44.0/22
+103.238.48.0/22
+103.238.52.0/22
+103.238.56.0/22
+103.238.88.0/22
+103.238.92.0/22
+103.238.96.0/22
+103.238.132.0/22
+103.238.140.0/22
+103.238.144.0/22
+103.238.160.0/22
+103.238.164.0/22
+103.238.168.0/22
+103.238.172.0/22
+103.238.176.0/22
+103.238.180.0/22
+103.238.184.0/22
+103.238.188.0/22
+103.238.196.0/22
+103.238.204.0/22
+103.238.252.0/22
+103.239.0.0/22
+103.239.44.0/22
+103.239.68.0/22
+103.239.96.0/22
+103.239.152.0/22
+103.239.156.0/22
+103.239.176.0/22
+103.239.180.0/22
+103.239.184.0/22
+103.239.192.0/22
+103.239.196.0/22
+103.239.204.0/22
+103.239.208.0/22
+103.239.224.0/22
+103.239.244.0/22
+103.240.16.0/22
+103.240.36.0/22
+103.240.72.0/22
+103.240.84.0/22
+103.240.124.0/22
+103.240.156.0/22
+103.240.172.0/22
+103.240.188.0/22
+103.240.244.0/22
+103.241.12.0/22
+103.241.72.0/22
+103.241.92.0/22
+103.241.96.0/22
+103.241.160.0/22
+103.241.184.0/22
+103.241.188.0/22
+103.241.220.0/22
+103.242.64.0/22
+103.242.128.0/22
+103.242.132.0/22
+103.242.160.0/22
+103.242.168.0/22
+103.242.172.0/22
+103.242.176.0/22
+103.242.200.0/22
+103.242.212.0/22
+103.242.220.0/22
+103.242.240.0/22
+103.243.136.0/22
+103.243.252.0/22
+103.244.16.0/22
+103.244.58.0/23
+103.244.60.0/22
+103.244.64.0/22
+103.244.68.0/22
+103.244.72.0/22
+103.244.76.0/22
+103.244.80.0/22
+103.244.84.0/22
+103.244.116.0/22
+103.244.164.0/22
+103.244.232.0/22
+103.244.252.0/22
+103.245.23.0/24
+103.245.52.0/22
+103.245.60.0/22
+103.245.80.0/22
+103.245.124.0/22
+103.245.128.0/22
+103.246.8.0/22
+103.246.12.0/22
+103.246.120.0/22
+103.246.124.0/22
+103.246.132.0/22
+103.246.152.0/22
+103.246.156.0/22
+103.247.168.0/22
+103.247.172.0/22
+103.247.176.0/22
+103.247.200.0/22
+103.247.212.0/22
+103.248.0.0/23
+103.248.64.0/22
+103.248.100.0/22
+103.248.124.0/22
+103.248.152.0/22
+103.248.168.0/22
+103.248.192.0/22
+103.248.212.0/22
+103.248.220.0/22
+103.248.224.0/22
+103.249.8.0/22
+103.249.12.0/22
+103.249.52.0/22
+103.249.104.0/22
+103.249.128.0/22
+103.249.136.0/22
+103.249.144.0/22
+103.249.164.0/22
+103.249.168.0/22
+103.249.172.0/22
+103.249.176.0/22
+103.249.188.0/22
+103.249.192.0/22
+103.249.244.0/22
+103.249.252.0/22
+103.250.32.0/22
+103.250.104.0/22
+103.250.124.0/22
+103.250.180.0/22
+103.250.192.0/22
+103.250.216.0/22
+103.250.224.0/22
+103.250.236.0/22
+103.250.248.0/22
+103.250.252.0/22
+103.251.32.0/22
+103.251.36.0/22
+103.251.84.0/22
+103.251.96.0/22
+103.251.124.0/22
+103.251.128.0/22
+103.251.160.0/22
+103.251.192.0/22
+103.251.204.0/22
+103.251.236.0/22
+103.251.240.0/22
+103.252.28.0/22
+103.252.36.0/22
+103.252.64.0/22
+103.252.96.0/22
+103.252.104.0/22
+103.252.172.0/22
+103.252.204.0/22
+103.252.208.0/22
+103.252.232.0/22
+103.252.248.0/22
+103.253.4.0/22
+103.253.60.0/22
+103.253.204.0/22
+103.253.220.0/22
+103.253.224.0/22
+103.253.232.0/22
+103.254.8.0/22
+103.254.20.0/22
+103.254.64.0/22
+103.254.68.0/22
+103.254.72.0/22
+103.254.76.0/22
+103.254.112.0/22
+103.254.176.0/22
+103.254.188.0/22
+103.254.196.0/24
+103.254.220.0/22
+103.255.56.0/22
+103.255.68.0/22
+103.255.88.0/22
+103.255.92.0/22
+103.255.136.0/22
+103.255.140.0/22
+103.255.184.0/22
+103.255.200.0/22
+103.255.212.0/22
+103.255.228.0/22
+106.0.0.0/24
+106.0.2.0/23
+106.0.4.0/22
+106.0.8.0/21
+106.0.16.0/20
+106.0.44.0/22
+106.0.64.0/18
+106.2.0.0/15
+106.4.0.0/14
+106.8.0.0/15
+106.11.0.0/16
+106.12.0.0/14
+106.16.0.0/12
+106.32.0.0/12
+106.48.0.0/15
+106.50.0.0/16
+106.52.0.0/14
+106.56.0.0/13
+106.74.0.0/16
+106.75.0.0/16
+106.80.0.0/12
+106.108.0.0/14
+106.112.0.0/13
+106.120.0.0/13
+106.224.0.0/12
+109.244.0.0/16
+110.6.0.0/15
+110.16.0.0/14
+110.34.40.0/22
+110.34.44.0/22
+110.40.0.0/14
+110.44.12.0/22
+110.44.144.0/20
+110.48.0.0/16
+110.51.0.0/16
+110.52.0.0/15
+110.56.0.0/13
+110.64.0.0/15
+110.72.0.0/15
+110.75.0.0/17
+110.75.128.0/19
+110.75.160.0/19
+110.75.192.0/18
+110.76.0.0/19
+110.76.32.0/19
+110.76.132.0/22
+110.76.156.0/22
+110.76.184.0/22
+110.76.192.0/18
+110.77.0.0/17
+110.80.0.0/13
+110.88.0.0/14
+110.92.68.0/22
+110.93.32.0/19
+110.94.0.0/15
+110.96.0.0/11
+110.152.0.0/14
+110.156.0.0/15
+110.165.32.0/19
+110.166.0.0/15
+110.172.192.0/18
+110.173.0.0/19
+110.173.32.0/20
+110.173.64.0/19
+110.173.96.0/19
+110.173.192.0/19
+110.176.0.0/13
+110.184.0.0/13
+110.192.0.0/11
+110.228.0.0/14
+110.232.32.0/19
+110.236.0.0/15
+110.240.0.0/12
+111.0.0.0/10
+111.66.0.0/16
+111.67.192.0/20
+111.68.64.0/19
+111.72.0.0/13
+111.85.0.0/16
+111.91.192.0/19
+111.92.248.0/22
+111.92.252.0/22
+111.112.0.0/15
+111.114.0.0/15
+111.116.0.0/15
+111.118.200.0/21
+111.119.64.0/18
+111.119.128.0/19
+111.120.0.0/14
+111.124.0.0/16
+111.126.0.0/15
+111.128.0.0/11
+111.160.0.0/13
+111.170.0.0/16
+111.172.0.0/14
+111.176.0.0/13
+111.186.0.0/15
+111.192.0.0/12
+111.208.0.0/14
+111.212.0.0/14
+111.221.28.0/24
+111.221.128.0/17
+111.222.0.0/16
+111.223.4.0/22
+111.223.8.0/22
+111.223.12.0/22
+111.223.16.0/22
+111.223.240.0/22
+111.223.248.0/22
+111.224.0.0/14
+111.228.0.0/14
+111.235.96.0/19
+111.235.156.0/22
+111.235.160.0/19
+112.0.0.0/10
+112.64.0.0/15
+112.66.0.0/15
+112.73.0.0/16
+112.74.0.0/15
+112.80.0.0/13
+112.88.0.0/13
+112.96.0.0/15
+112.98.0.0/15
+112.100.0.0/14
+112.109.128.0/17
+112.111.0.0/16
+112.112.0.0/14
+112.116.0.0/15
+112.122.0.0/15
+112.124.0.0/14
+112.128.0.0/14
+112.132.0.0/16
+112.137.48.0/21
+112.192.0.0/14
+112.224.0.0/11
+113.0.0.0/13
+113.8.0.0/15
+113.11.192.0/19
+113.12.0.0/14
+113.16.0.0/15
+113.18.0.0/16
+113.21.232.0/22
+113.21.236.0/22
+113.24.0.0/14
+113.31.0.0/16
+113.44.0.0/14
+113.48.0.0/14
+113.52.160.0/19
+113.52.228.0/22
+113.54.0.0/15
+113.56.0.0/15
+113.58.0.0/16
+113.59.0.0/17
+113.59.224.0/22
+113.62.0.0/15
+113.64.0.0/11
+113.96.0.0/12
+113.112.0.0/13
+113.120.0.0/13
+113.128.0.0/15
+113.130.96.0/20
+113.130.112.0/21
+113.132.0.0/14
+113.136.0.0/13
+113.194.0.0/15
+113.197.100.0/22
+113.200.0.0/15
+113.202.0.0/16
+113.204.0.0/14
+113.208.96.0/19
+113.208.128.0/17
+113.209.0.0/16
+113.212.0.0/18
+113.212.100.0/22
+113.212.184.0/21
+113.213.0.0/17
+113.214.0.0/15
+113.218.0.0/15
+113.220.0.0/14
+113.224.0.0/12
+113.240.0.0/13
+113.248.0.0/14
+114.28.0.0/16
+114.31.64.0/22
+114.31.68.0/22
+114.54.0.0/15
+114.60.0.0/14
+114.64.0.0/14
+114.68.0.0/16
+114.79.64.0/18
+114.80.0.0/12
+114.96.0.0/13
+114.104.0.0/14
+114.110.0.0/20
+114.110.64.0/18
+114.111.0.0/19
+114.111.160.0/19
+114.112.0.0/14
+114.116.0.0/16
+114.117.0.0/16
+114.118.0.0/16
+114.119.0.0/17
+114.119.128.0/18
+114.119.192.0/21
+114.119.200.0/22
+114.119.204.0/22
+114.119.208.0/20
+114.119.224.0/19
+114.132.0.0/16
+114.135.0.0/16
+114.138.0.0/15
+114.141.64.0/21
+114.141.80.0/22
+114.141.84.0/22
+114.141.128.0/18
+114.196.0.0/15
+114.198.248.0/21
+114.208.0.0/14
+114.212.0.0/15
+114.214.0.0/16
+114.215.0.0/16
+114.216.0.0/13
+114.224.0.0/12
+114.240.0.0/12
+115.24.0.0/14
+115.28.0.0/15
+115.31.64.0/22
+115.31.68.0/22
+115.31.72.0/22
+115.31.76.0/22
+115.32.0.0/14
+115.42.56.0/22
+115.44.0.0/15
+115.46.0.0/16
+115.47.0.0/16
+115.48.0.0/12
+115.69.64.0/20
+115.84.0.0/18
+115.84.192.0/19
+115.85.192.0/18
+115.100.0.0/14
+115.104.0.0/14
+115.120.0.0/14
+115.124.16.0/20
+115.148.0.0/14
+115.152.0.0/15
+115.154.0.0/15
+115.156.0.0/15
+115.158.0.0/16
+115.159.0.0/16
+115.166.64.0/19
+115.168.0.0/14
+115.172.0.0/14
+115.180.0.0/15
+115.182.0.0/16
+115.183.0.0/16
+115.187.0.0/22
+115.187.4.0/22
+115.187.8.0/22
+115.187.12.0/22
+115.190.0.0/15
+115.192.0.0/11
+115.224.0.0/12
+116.0.8.0/21
+116.0.24.0/21
+116.1.0.0/16
+116.2.0.0/15
+116.4.0.0/14
+116.8.0.0/14
+116.13.0.0/16
+116.16.0.0/12
+116.50.0.0/20
+116.52.0.0/14
+116.56.0.0/15
+116.58.128.0/20
+116.58.208.0/20
+116.60.0.0/14
+116.66.0.0/17
+116.66.176.0/22
+116.68.136.0/22
+116.68.140.0/22
+116.68.176.0/22
+116.68.180.0/22
+116.69.0.0/16
+116.70.0.0/17
+116.76.0.0/15
+116.78.0.0/15
+116.85.0.0/16
+116.89.144.0/20
+116.89.240.0/22
+116.90.80.0/20
+116.90.184.0/21
+116.95.0.0/16
+116.112.0.0/14
+116.116.0.0/15
+116.128.0.0/10
+116.192.0.0/16
+116.193.16.0/20
+116.193.32.0/19
+116.193.152.0/22
+116.193.164.0/22
+116.193.176.0/21
+116.194.0.0/15
+116.196.0.0/16
+116.197.160.0/22
+116.197.164.0/22
+116.198.0.0/16
+116.199.0.0/17
+116.199.128.0/19
+116.204.0.0/17
+116.204.132.0/22
+116.204.168.0/22
+116.204.216.0/22
+116.205.0.0/16
+116.206.92.0/22
+116.206.100.0/22
+116.206.176.0/22
+116.207.0.0/16
+116.208.0.0/14
+116.212.160.0/20
+116.213.44.0/22
+116.213.64.0/18
+116.213.128.0/17
+116.214.32.0/19
+116.214.64.0/20
+116.214.128.0/17
+116.215.0.0/16
+116.216.0.0/14
+116.224.0.0/12
+116.242.0.0/15
+116.244.0.0/15
+116.246.0.0/15
+116.248.0.0/15
+116.251.64.0/18
+116.252.0.0/15
+116.254.104.0/22
+116.254.108.0/22
+116.254.128.0/17
+116.255.128.0/17
+117.8.0.0/13
+117.21.0.0/16
+117.22.0.0/15
+117.24.0.0/13
+117.32.0.0/13
+117.40.0.0/14
+117.44.0.0/15
+117.48.0.0/14
+117.53.48.0/20
+117.53.176.0/20
+117.57.0.0/16
+117.58.0.0/17
+117.59.0.0/16
+117.60.0.0/14
+117.64.0.0/13
+117.72.0.0/15
+117.74.64.0/20
+117.74.80.0/20
+117.74.128.0/17
+117.75.0.0/16
+117.76.0.0/14
+117.80.0.0/12
+117.100.0.0/15
+117.103.16.0/20
+117.103.40.0/21
+117.103.72.0/21
+117.103.128.0/20
+117.104.168.0/21
+117.106.0.0/15
+117.112.0.0/13
+117.120.64.0/18
+117.120.128.0/17
+117.121.0.0/17
+117.121.128.0/18
+117.121.192.0/21
+117.122.128.0/17
+117.124.0.0/14
+117.128.0.0/10
+118.24.0.0/15
+118.26.0.0/19
+118.26.32.0/22
+118.26.36.0/22
+118.26.40.0/21
+118.26.48.0/21
+118.26.56.0/21
+118.26.64.0/19
+118.26.96.0/21
+118.26.104.0/21
+118.26.112.0/21
+118.26.120.0/21
+118.26.128.0/17
+118.28.0.0/15
+118.30.0.0/16
+118.31.0.0/16
+118.64.0.0/15
+118.66.0.0/16
+118.67.112.0/20
+118.72.0.0/13
+118.80.0.0/15
+118.84.0.0/15
+118.88.32.0/19
+118.88.64.0/18
+118.88.128.0/17
+118.89.0.0/16
+118.91.240.0/20
+118.102.16.0/20
+118.102.32.0/21
+118.103.164.0/22
+118.103.168.0/22
+118.103.172.0/22
+118.103.176.0/22
+118.107.180.0/22
+118.112.0.0/13
+118.120.0.0/14
+118.124.0.0/15
+118.126.0.0/16
+118.127.128.0/19
+118.132.0.0/14
+118.144.0.0/14
+118.178.0.0/16
+118.180.0.0/14
+118.184.0.0/17
+118.184.128.0/17
+118.186.0.0/15
+118.188.0.0/16
+118.190.0.0/16
+118.191.0.0/16
+118.192.0.0/16
+118.193.0.0/21
+118.193.8.0/21
+118.193.32.0/19
+118.193.64.0/20
+118.193.96.0/19
+118.193.128.0/17
+118.194.0.0/17
+118.194.128.0/17
+118.195.0.0/17
+118.195.128.0/17
+118.196.0.0/14
+118.202.0.0/15
+118.204.0.0/14
+118.212.0.0/16
+118.213.0.0/16
+118.215.192.0/18
+118.224.0.0/14
+118.228.0.0/15
+118.230.0.0/16
+118.239.0.0/16
+118.242.0.0/16
+118.244.0.0/14
+118.248.0.0/13
+119.0.0.0/15
+119.2.0.0/19
+119.2.128.0/17
+119.3.0.0/16
+119.4.0.0/14
+119.8.0.0/16
+119.10.0.0/17
+119.15.136.0/21
+119.16.0.0/16
+119.18.192.0/20
+119.18.208.0/21
+119.18.224.0/20
+119.18.240.0/20
+119.19.0.0/16
+119.20.0.0/14
+119.27.64.0/18
+119.27.128.0/19
+119.27.160.0/19
+119.27.192.0/18
+119.28.0.0/15
+119.30.48.0/20
+119.31.192.0/19
+119.32.0.0/14
+119.36.0.0/16
+119.37.0.0/17
+119.37.128.0/18
+119.37.192.0/18
+119.38.0.0/17
+119.38.128.0/18
+119.38.192.0/20
+119.38.208.0/20
+119.38.224.0/19
+119.39.0.0/16
+119.40.0.0/18
+119.40.64.0/20
+119.40.128.0/17
+119.41.0.0/16
+119.42.0.0/19
+119.42.52.0/22
+119.42.128.0/21
+119.42.136.0/21
+119.42.224.0/19
+119.44.0.0/15
+119.48.0.0/13
+119.57.0.0/16
+119.58.0.0/16
+119.59.128.0/17
+119.60.0.0/16
+119.61.0.0/16
+119.62.0.0/16
+119.63.32.0/19
+119.75.208.0/20
+119.78.0.0/15
+119.80.0.0/16
+119.82.208.0/20
+119.84.0.0/14
+119.88.0.0/14
+119.96.0.0/13
+119.108.0.0/15
+119.112.0.0/13
+119.120.0.0/13
+119.128.0.0/12
+119.144.0.0/14
+119.148.160.0/20
+119.148.176.0/20
+119.151.192.0/18
+119.160.200.0/21
+119.161.120.0/22
+119.161.124.0/22
+119.161.128.0/17
+119.162.0.0/15
+119.164.0.0/14
+119.176.0.0/12
+119.232.0.0/15
+119.235.128.0/18
+119.248.0.0/14
+119.252.96.0/21
+119.252.240.0/20
+119.253.0.0/16
+119.254.0.0/15
+120.0.0.0/12
+120.24.0.0/14
+120.30.0.0/16
+120.31.0.0/16
+120.32.0.0/13
+120.40.0.0/14
+120.44.0.0/14
+120.48.0.0/15
+120.52.0.0/16
+120.53.0.0/16
+120.54.0.0/15
+120.64.0.0/14
+120.68.0.0/14
+120.72.32.0/19
+120.72.128.0/17
+120.76.0.0/14
+120.80.0.0/13
+120.88.8.0/21
+120.90.0.0/15
+120.92.0.0/16
+120.94.0.0/16
+120.95.0.0/16
+120.128.0.0/14
+120.132.0.0/17
+120.132.128.0/17
+120.133.0.0/16
+120.134.0.0/15
+120.136.16.0/22
+120.136.20.0/22
+120.136.128.0/18
+120.137.0.0/17
+120.143.128.0/19
+120.192.0.0/10
+121.0.8.0/21
+121.0.16.0/20
+121.4.0.0/15
+121.8.0.0/13
+121.16.0.0/13
+121.24.0.0/14
+121.28.0.0/15
+121.30.0.0/16
+121.31.0.0/16
+121.32.0.0/14
+121.36.0.0/16
+121.37.0.0/16
+121.38.0.0/15
+121.40.0.0/14
+121.46.0.0/18
+121.46.76.0/22
+121.46.128.0/17
+121.47.0.0/16
+121.48.0.0/15
+121.50.8.0/21
+121.51.0.0/16
+121.52.160.0/19
+121.52.208.0/20
+121.52.224.0/19
+121.54.176.0/21
+121.54.188.0/22
+121.55.0.0/18
+121.56.0.0/15
+121.58.0.0/17
+121.58.136.0/21
+121.58.144.0/20
+121.58.160.0/21
+121.59.0.0/16
+121.60.0.0/14
+121.68.0.0/14
+121.76.0.0/15
+121.79.128.0/18
+121.89.0.0/16
+121.100.128.0/17
+121.101.0.0/18
+121.101.208.0/20
+121.192.0.0/16
+121.193.0.0/16
+121.194.0.0/15
+121.196.0.0/14
+121.200.192.0/21
+121.201.0.0/16
+121.204.0.0/14
+121.224.0.0/12
+121.248.0.0/14
+121.255.0.0/16
+122.0.64.0/18
+122.0.128.0/17
+122.4.0.0/14
+122.8.0.0/16
+122.9.0.0/16
+122.10.128.0/22
+122.10.132.0/23
+122.10.134.0/23
+122.10.136.0/23
+122.10.138.0/23
+122.10.140.0/22
+122.10.144.0/20
+122.10.160.0/19
+122.10.192.0/20
+122.10.208.0/21
+122.10.216.0/22
+122.10.220.0/22
+122.10.224.0/19
+122.11.0.0/17
+122.12.0.0/16
+122.13.0.0/16
+122.14.0.0/17
+122.14.128.0/18
+122.14.192.0/18
+122.48.0.0/16
+122.49.0.0/18
+122.51.0.0/16
+122.64.0.0/11
+122.96.0.0/15
+122.102.0.0/20
+122.102.64.0/20
+122.102.80.0/20
+122.112.0.0/18
+122.112.64.0/18
+122.112.128.0/17
+122.113.0.0/16
+122.114.0.0/16
+122.115.0.0/17
+122.115.128.0/19
+122.115.160.0/19
+122.115.192.0/19
+122.115.224.0/19
+122.119.0.0/16
+122.128.100.0/22
+122.128.120.0/21
+122.136.0.0/13
+122.144.128.0/17
+122.152.192.0/18
+122.156.0.0/14
+122.188.0.0/14
+122.192.0.0/14
+122.198.0.0/16
+122.200.40.0/22
+122.200.44.0/22
+122.200.64.0/18
+122.201.48.0/20
+122.204.0.0/14
+122.224.0.0/12
+122.240.0.0/13
+122.248.24.0/21
+122.248.48.0/20
+122.255.64.0/21
+123.0.128.0/18
+123.4.0.0/14
+123.8.0.0/13
+123.49.128.0/17
+123.50.160.0/19
+123.52.0.0/14
+123.56.0.0/15
+123.58.0.0/20
+123.58.16.0/20
+123.58.32.0/19
+123.58.64.0/19
+123.58.96.0/19
+123.58.128.0/18
+123.58.192.0/19
+123.58.224.0/20
+123.58.240.0/20
+123.59.0.0/16
+123.60.0.0/16
+123.61.0.0/16
+123.62.0.0/16
+123.64.0.0/11
+123.96.0.0/15
+123.98.0.0/17
+123.99.128.0/17
+123.100.0.0/19
+123.101.0.0/16
+123.103.0.0/17
+123.108.128.0/20
+123.108.208.0/20
+123.112.0.0/12
+123.128.0.0/13
+123.136.80.0/20
+123.137.0.0/16
+123.138.0.0/15
+123.144.0.0/14
+123.148.0.0/16
+123.149.0.0/16
+123.150.0.0/15
+123.152.0.0/13
+123.160.0.0/14
+123.164.0.0/14
+123.168.0.0/14
+123.172.0.0/15
+123.174.0.0/15
+123.176.60.0/22
+123.176.80.0/20
+123.177.0.0/16
+123.178.0.0/15
+123.180.0.0/14
+123.184.0.0/14
+123.188.0.0/14
+123.196.0.0/15
+123.199.128.0/17
+123.206.0.0/15
+123.232.0.0/14
+123.242.0.0/17
+123.242.192.0/22
+123.242.196.0/22
+123.244.0.0/14
+123.249.0.0/16
+123.254.96.0/22
+123.254.100.0/22
+124.6.64.0/18
+124.14.0.0/15
+124.16.0.0/15
+124.20.0.0/16
+124.21.0.0/20
+124.21.16.0/20
+124.21.32.0/19
+124.21.64.0/18
+124.21.128.0/17
+124.22.0.0/15
+124.28.192.0/18
+124.29.0.0/17
+124.31.0.0/16
+124.40.112.0/20
+124.40.128.0/18
+124.40.192.0/19
+124.40.240.0/22
+124.42.0.0/17
+124.42.128.0/17
+124.47.0.0/18
+124.64.0.0/15
+124.66.0.0/17
+124.67.0.0/16
+124.68.0.0/14
+124.72.0.0/16
+124.73.0.0/16
+124.74.0.0/15
+124.76.0.0/14
+124.88.0.0/16
+124.89.0.0/17
+124.89.128.0/17
+124.90.0.0/15
+124.92.0.0/14
+124.108.8.0/21
+124.108.40.0/21
+124.109.96.0/21
+124.112.0.0/15
+124.114.0.0/15
+124.116.0.0/16
+124.117.0.0/16
+124.118.0.0/15
+124.126.0.0/15
+124.128.0.0/13
+124.147.128.0/17
+124.150.137.0/24
+124.151.0.0/16
+124.152.0.0/16
+124.160.0.0/16
+124.161.0.0/16
+124.162.0.0/16
+124.163.0.0/16
+124.164.0.0/14
+124.172.0.0/15
+124.174.0.0/15
+124.192.0.0/15
+124.196.0.0/16
+124.200.0.0/13
+124.220.0.0/14
+124.224.0.0/16
+124.225.0.0/16
+124.226.0.0/15
+124.228.0.0/14
+124.232.0.0/15
+124.234.0.0/15
+124.236.0.0/14
+124.240.0.0/17
+124.240.128.0/18
+124.242.0.0/16
+124.243.192.0/18
+124.248.0.0/17
+124.249.0.0/16
+124.250.0.0/15
+124.254.0.0/18
+125.31.192.0/18
+125.32.0.0/16
+125.33.0.0/16
+125.34.0.0/16
+125.35.0.0/17
+125.35.128.0/17
+125.36.0.0/14
+125.40.0.0/13
+125.58.128.0/17
+125.61.128.0/17
+125.62.0.0/18
+125.64.0.0/13
+125.72.0.0/16
+125.73.0.0/16
+125.74.0.0/15
+125.76.0.0/17
+125.76.128.0/17
+125.77.0.0/16
+125.78.0.0/15
+125.80.0.0/13
+125.88.0.0/13
+125.96.0.0/15
+125.98.0.0/16
+125.104.0.0/13
+125.112.0.0/12
+125.169.0.0/16
+125.171.0.0/16
+125.208.0.0/18
+125.210.0.0/16
+125.211.0.0/16
+125.213.0.0/17
+125.214.96.0/19
+125.215.0.0/18
+125.216.0.0/15
+125.218.0.0/16
+125.219.0.0/16
+125.220.0.0/15
+125.222.0.0/15
+125.254.128.0/18
+125.254.192.0/18
+128.108.0.0/16
+129.28.0.0/16
+129.204.0.0/16
+129.211.0.0/16
+132.232.0.0/16
+134.175.0.0/16
+137.59.59.0/24
+137.59.88.0/22
+139.5.56.0/22
+139.5.60.0/22
+139.5.80.0/22
+139.5.92.0/22
+139.5.108.0/22
+139.5.128.0/22
+139.5.160.0/22
+139.5.192.0/22
+139.5.204.0/22
+139.5.208.0/22
+139.5.212.0/22
+139.5.244.0/22
+139.9.0.0/16
+139.129.0.0/16
+139.148.0.0/16
+139.155.0.0/16
+139.159.0.0/16
+139.170.0.0/16
+139.176.0.0/16
+139.183.0.0/16
+139.186.0.0/16
+139.189.0.0/16
+139.196.0.0/14
+139.200.0.0/13
+139.208.0.0/13
+139.217.0.0/16
+139.219.0.0/16
+139.220.0.0/15
+139.224.0.0/16
+139.226.0.0/15
+140.75.0.0/16
+140.143.0.0/16
+140.179.0.0/16
+140.205.0.0/16
+140.206.0.0/15
+140.210.0.0/16
+140.224.0.0/16
+140.237.0.0/16
+140.240.0.0/16
+140.243.0.0/16
+140.246.0.0/16
+140.249.0.0/16
+140.250.0.0/16
+140.255.0.0/16
+144.0.0.0/16
+144.7.0.0/16
+144.12.0.0/16
+144.48.8.0/22
+144.48.64.0/22
+144.48.88.0/22
+144.48.156.0/22
+144.48.180.0/22
+144.48.184.0/22
+144.48.204.0/22
+144.48.208.0/22
+144.48.212.0/22
+144.48.220.0/22
+144.48.252.0/22
+144.52.0.0/16
+144.123.0.0/16
+144.255.0.0/16
+146.56.192.0/18
+146.196.56.0/22
+146.196.68.0/22
+146.196.72.0/22
+146.196.92.0/22
+146.196.112.0/22
+146.196.116.0/22
+146.196.124.0/22
+148.70.0.0/16
+150.0.0.0/16
+150.115.0.0/16
+150.121.0.0/16
+150.122.0.0/16
+150.129.136.0/22
+150.129.192.0/22
+150.129.216.0/22
+150.129.252.0/22
+150.138.0.0/15
+150.158.0.0/16
+150.223.0.0/16
+150.242.0.0/22
+150.242.4.0/22
+150.242.8.0/22
+150.242.28.0/22
+150.242.44.0/22
+150.242.48.0/22
+150.242.52.0/22
+150.242.56.0/22
+150.242.76.0/22
+150.242.80.0/22
+150.242.92.0/22
+150.242.96.0/22
+150.242.112.0/22
+150.242.116.0/22
+150.242.120.0/22
+150.242.152.0/22
+150.242.156.0/22
+150.242.160.0/22
+150.242.164.0/22
+150.242.168.0/22
+150.242.184.0/22
+150.242.188.0/22
+150.242.192.0/22
+150.242.212.0/22
+150.242.224.0/22
+150.242.228.0/22
+150.242.232.0/22
+150.242.236.0/22
+150.242.240.0/22
+150.242.244.0/22
+150.242.248.0/22
+150.255.0.0/16
+152.104.128.0/17
+152.136.0.0/16
+153.0.0.0/16
+153.3.0.0/16
+153.34.0.0/15
+153.36.0.0/15
+153.99.0.0/16
+153.101.0.0/16
+153.118.0.0/15
+154.8.128.0/17
+157.0.0.0/16
+157.18.0.0/16
+157.61.0.0/16
+157.119.0.0/22
+157.119.8.0/22
+157.119.12.0/22
+157.119.16.0/22
+157.119.28.0/22
+157.119.68.0/22
+157.119.112.0/22
+157.119.132.0/22
+157.119.136.0/22
+157.119.140.0/22
+157.119.144.0/22
+157.119.148.0/22
+157.119.152.0/22
+157.119.156.0/22
+157.119.160.0/22
+157.119.164.0/22
+157.119.172.0/22
+157.119.192.0/22
+157.119.196.0/22
+157.119.240.0/22
+157.119.252.0/22
+157.122.0.0/16
+157.148.0.0/16
+157.156.0.0/16
+157.255.0.0/16
+159.75.0.0/16
+159.226.0.0/16
+160.19.208.0/22
+160.19.212.0/22
+160.19.216.0/22
+160.20.48.0/22
+160.202.60.0/22
+160.202.148.0/22
+160.202.152.0/22
+160.202.168.0/22
+160.202.212.0/22
+160.202.216.0/22
+160.202.220.0/22
+160.202.224.0/22
+160.202.228.0/22
+160.202.232.0/22
+160.202.236.0/22
+160.202.240.0/22
+160.202.244.0/22
+160.202.248.0/22
+160.202.252.0/22
+160.238.64.0/22
+161.189.0.0/16
+161.207.0.0/16
+162.14.0.0/16
+162.105.0.0/16
+163.0.0.0/16
+163.47.4.0/22
+163.53.0.0/22
+163.53.4.0/22
+163.53.8.0/22
+163.53.12.0/22
+163.53.36.0/22
+163.53.40.0/22
+163.53.44.0/22
+163.53.48.0/22
+163.53.52.0/22
+163.53.56.0/22
+163.53.60.0/22
+163.53.64.0/22
+163.53.88.0/22
+163.53.92.0/22
+163.53.96.0/22
+163.53.100.0/22
+163.53.104.0/22
+163.53.108.0/22
+163.53.112.0/22
+163.53.116.0/22
+163.53.120.0/22
+163.53.124.0/22
+163.53.128.0/22
+163.53.132.0/22
+163.53.136.0/22
+163.53.160.0/22
+163.53.164.0/22
+163.53.168.0/22
+163.53.172.0/22
+163.53.188.0/22
+163.53.220.0/22
+163.53.240.0/22
+163.125.0.0/16
+163.142.0.0/16
+163.177.0.0/16
+163.179.0.0/16
+163.204.0.0/16
+164.52.0.0/17
+166.111.0.0/16
+167.139.0.0/16
+167.189.0.0/16
+167.220.244.0/22
+168.160.0.0/16
+170.179.0.0/16
+171.8.0.0/13
+171.34.0.0/15
+171.36.0.0/14
+171.40.0.0/13
+171.80.0.0/14
+171.84.0.0/14
+171.88.0.0/13
+171.104.0.0/13
+171.112.0.0/14
+171.116.0.0/14
+171.120.0.0/13
+171.208.0.0/12
+172.81.192.0/18
+175.0.0.0/12
+175.16.0.0/13
+175.24.0.0/14
+175.30.0.0/15
+175.42.0.0/15
+175.44.0.0/16
+175.46.0.0/15
+175.48.0.0/12
+175.64.0.0/11
+175.102.0.0/16
+175.106.128.0/17
+175.111.144.0/22
+175.111.148.0/22
+175.111.152.0/22
+175.111.156.0/22
+175.111.160.0/22
+175.111.164.0/22
+175.111.168.0/22
+175.111.172.0/22
+175.111.184.0/22
+175.146.0.0/15
+175.148.0.0/14
+175.152.0.0/14
+175.158.96.0/22
+175.160.0.0/12
+175.176.156.0/22
+175.176.176.0/22
+175.176.188.0/22
+175.176.192.0/22
+175.178.0.0/16
+175.184.128.0/18
+175.185.0.0/16
+175.186.0.0/15
+175.188.0.0/14
+180.76.0.0/16
+180.77.0.0/16
+180.78.0.0/15
+180.84.0.0/15
+180.86.0.0/16
+180.88.0.0/14
+180.94.56.0/21
+180.94.96.0/20
+180.94.120.0/22
+180.94.124.0/22
+180.95.128.0/17
+180.96.0.0/11
+180.129.128.0/17
+180.130.0.0/16
+180.136.0.0/13
+180.148.16.0/21
+180.148.152.0/21
+180.148.216.0/21
+180.148.224.0/19
+180.149.128.0/19
+180.149.236.0/22
+180.150.160.0/19
+180.152.0.0/13
+180.160.0.0/12
+180.178.112.0/22
+180.178.116.0/22
+180.178.192.0/18
+180.184.0.0/14
+180.188.0.0/17
+180.189.148.0/22
+180.200.252.0/22
+180.201.0.0/16
+180.202.0.0/15
+180.208.0.0/15
+180.210.212.0/22
+180.210.224.0/19
+180.212.0.0/15
+180.222.224.0/19
+180.223.0.0/16
+180.233.0.0/18
+180.233.64.0/19
+180.233.144.0/22
+180.235.64.0/19
+180.235.112.0/22
+180.235.136.0/22
+182.16.144.0/22
+182.16.148.0/22
+182.16.192.0/19
+182.18.0.0/17
+182.23.184.0/21
+182.23.200.0/21
+182.32.0.0/12
+182.48.96.0/19
+182.49.0.0/16
+182.50.0.0/20
+182.50.112.0/20
+182.51.0.0/16
+182.54.0.0/17
+182.54.244.0/22
+182.61.0.0/16
+182.80.0.0/14
+182.84.0.0/14
+182.88.0.0/14
+182.92.0.0/16
+182.96.0.0/12
+182.112.0.0/12
+182.128.0.0/12
+182.144.0.0/13
+182.157.0.0/16
+182.160.64.0/19
+182.174.0.0/15
+182.200.0.0/13
+182.236.128.0/17
+182.237.24.0/22
+182.237.28.0/22
+182.238.0.0/16
+182.239.0.0/19
+182.240.0.0/13
+182.254.0.0/16
+182.255.32.0/22
+182.255.36.0/22
+182.255.60.0/22
+183.0.0.0/10
+183.64.0.0/13
+183.78.160.0/22
+183.78.164.0/22
+183.78.180.0/22
+183.81.172.0/22
+183.81.180.0/22
+183.84.0.0/15
+183.91.128.0/22
+183.91.136.0/21
+183.91.144.0/20
+183.92.0.0/14
+183.128.0.0/11
+183.160.0.0/13
+183.168.0.0/15
+183.170.0.0/16
+183.172.0.0/14
+183.182.0.0/19
+183.184.0.0/13
+183.192.0.0/10
+188.131.128.0/17
+192.55.46.0/24
+192.55.68.0/22
+192.102.204.0/23
+192.124.154.0/24
+192.140.128.0/22
+192.140.132.0/22
+192.140.136.0/22
+192.140.156.0/22
+192.140.160.0/22
+192.140.164.0/22
+192.140.168.0/22
+192.140.172.0/22
+192.140.176.0/22
+192.140.180.0/22
+192.140.184.0/22
+192.140.188.0/22
+192.140.192.0/22
+192.140.196.0/22
+192.140.200.0/22
+192.140.204.0/22
+192.140.208.0/22
+192.140.212.0/22
+192.144.128.0/17
+193.112.0.0/16
+198.175.100.0/22
+202.0.100.0/23
+202.0.122.0/23
+202.0.176.0/22
+202.3.128.0/23
+202.4.128.0/19
+202.4.252.0/22
+202.5.208.0/22
+202.5.212.0/22
+202.5.216.0/22
+202.6.6.0/23
+202.6.66.0/23
+202.6.72.0/23
+202.6.87.0/24
+202.6.88.0/23
+202.6.92.0/23
+202.6.103.0/24
+202.6.108.0/24
+202.6.110.0/23
+202.6.114.0/24
+202.6.176.0/20
+202.8.0.0/24
+202.8.2.0/23
+202.8.4.0/23
+202.8.12.0/24
+202.8.24.0/24
+202.8.77.0/24
+202.8.128.0/19
+202.8.192.0/20
+202.9.32.0/24
+202.9.34.0/23
+202.9.48.0/23
+202.9.51.0/24
+202.9.52.0/23
+202.9.54.0/24
+202.9.57.0/24
+202.9.58.0/23
+202.10.64.0/20
+202.10.112.0/22
+202.10.116.0/22
+202.10.120.0/22
+202.10.124.0/22
+202.12.1.0/24
+202.12.2.0/24
+202.12.17.0/24
+202.12.18.0/24
+202.12.19.0/24
+202.12.72.0/24
+202.12.84.0/23
+202.12.96.0/24
+202.12.98.0/23
+202.12.106.0/24
+202.12.111.0/24
+202.12.116.0/24
+202.14.64.0/23
+202.14.69.0/24
+202.14.73.0/24
+202.14.74.0/23
+202.14.76.0/24
+202.14.78.0/23
+202.14.88.0/24
+202.14.97.0/24
+202.14.104.0/23
+202.14.108.0/23
+202.14.111.0/24
+202.14.114.0/23
+202.14.118.0/23
+202.14.124.0/23
+202.14.127.0/24
+202.14.129.0/24
+202.14.135.0/24
+202.14.136.0/24
+202.14.149.0/24
+202.14.151.0/24
+202.14.157.0/24
+202.14.158.0/23
+202.14.169.0/24
+202.14.170.0/23
+202.14.172.0/22
+202.14.176.0/24
+202.14.184.0/23
+202.14.208.0/23
+202.14.213.0/24
+202.14.219.0/24
+202.14.220.0/24
+202.14.222.0/23
+202.14.225.0/24
+202.14.226.0/23
+202.14.231.0/24
+202.14.235.0/24
+202.14.236.0/23
+202.14.238.0/24
+202.14.239.0/24
+202.14.246.0/24
+202.14.251.0/24
+202.20.66.0/24
+202.20.79.0/24
+202.20.87.0/24
+202.20.88.0/23
+202.20.90.0/24
+202.20.94.0/23
+202.20.114.0/24
+202.20.117.0/24
+202.20.120.0/24
+202.20.125.0/24
+202.20.126.0/24
+202.20.127.0/24
+202.21.48.0/22
+202.21.52.0/22
+202.21.56.0/22
+202.21.60.0/22
+202.21.131.0/24
+202.21.132.0/24
+202.21.141.0/24
+202.21.142.0/24
+202.21.147.0/24
+202.21.148.0/24
+202.21.150.0/23
+202.21.152.0/23
+202.21.154.0/24
+202.21.156.0/24
+202.22.248.0/22
+202.22.252.0/22
+202.27.12.0/24
+202.27.14.0/24
+202.27.136.0/23
+202.36.226.0/24
+202.38.0.0/23
+202.38.2.0/23
+202.38.8.0/21
+202.38.48.0/20
+202.38.64.0/19
+202.38.96.0/19
+202.38.128.0/23
+202.38.130.0/23
+202.38.132.0/23
+202.38.134.0/24
+202.38.135.0/24
+202.38.136.0/23
+202.38.138.0/24
+202.38.140.0/23
+202.38.142.0/23
+202.38.146.0/23
+202.38.149.0/24
+202.38.150.0/23
+202.38.152.0/23
+202.38.154.0/23
+202.38.156.0/24
+202.38.158.0/23
+202.38.160.0/23
+202.38.164.0/22
+202.38.168.0/23
+202.38.170.0/24
+202.38.171.0/24
+202.38.176.0/23
+202.38.184.0/21
+202.38.192.0/18
+202.40.4.0/23
+202.40.7.0/24
+202.40.15.0/24
+202.40.135.0/24
+202.40.136.0/24
+202.40.140.0/24
+202.40.143.0/24
+202.40.144.0/23
+202.40.150.0/24
+202.40.155.0/24
+202.40.156.0/24
+202.40.158.0/23
+202.40.162.0/24
+202.41.8.0/23
+202.41.11.0/24
+202.41.12.0/23
+202.41.128.0/24
+202.41.130.0/23
+202.41.152.0/21
+202.41.192.0/24
+202.41.196.0/22
+202.41.200.0/22
+202.41.240.0/20
+202.43.76.0/22
+202.43.144.0/20
+202.44.16.0/20
+202.44.48.0/22
+202.44.67.0/24
+202.44.74.0/24
+202.44.97.0/24
+202.44.129.0/24
+202.44.132.0/23
+202.44.146.0/23
+202.45.0.0/23
+202.45.2.0/24
+202.45.15.0/24
+202.45.16.0/20
+202.46.16.0/23
+202.46.18.0/24
+202.46.20.0/23
+202.46.32.0/19
+202.46.128.0/24
+202.46.224.0/20
+202.47.82.0/23
+202.47.96.0/22
+202.47.100.0/22
+202.47.104.0/22
+202.47.108.0/22
+202.47.126.0/24
+202.47.128.0/24
+202.47.130.0/23
+202.52.33.0/24
+202.52.34.0/24
+202.52.47.0/24
+202.52.143.0/24
+202.53.140.0/24
+202.53.143.0/24
+202.57.192.0/22
+202.57.196.0/22
+202.57.200.0/22
+202.57.204.0/22
+202.57.212.0/22
+202.57.216.0/22
+202.57.240.0/20
+202.58.0.0/24
+202.58.104.0/22
+202.58.112.0/22
+202.59.0.0/24
+202.59.1.0/24
+202.59.212.0/22
+202.59.236.0/24
+202.59.240.0/24
+202.60.48.0/21
+202.60.96.0/21
+202.60.112.0/20
+202.60.132.0/22
+202.60.136.0/21
+202.60.144.0/20
+202.61.68.0/22
+202.61.76.0/22
+202.61.88.0/22
+202.61.123.0/24
+202.61.127.0/24
+202.62.112.0/22
+202.62.248.0/22
+202.62.252.0/24
+202.62.255.0/24
+202.63.80.0/24
+202.63.81.0/24
+202.63.82.0/23
+202.63.84.0/22
+202.63.88.0/21
+202.63.160.0/19
+202.63.248.0/22
+202.63.253.0/24
+202.65.0.0/21
+202.65.8.0/23
+202.65.96.0/22
+202.65.100.0/22
+202.65.104.0/22
+202.65.108.0/22
+202.66.168.0/22
+202.67.0.0/22
+202.69.4.0/22
+202.69.16.0/20
+202.70.0.0/19
+202.70.96.0/20
+202.70.192.0/20
+202.71.32.0/22
+202.71.36.0/22
+202.71.40.0/22
+202.71.44.0/22
+202.72.40.0/21
+202.72.80.0/20
+202.72.112.0/22
+202.72.116.0/22
+202.72.120.0/22
+202.72.124.0/22
+202.73.128.0/22
+202.73.240.0/22
+202.73.244.0/22
+202.73.248.0/22
+202.73.252.0/22
+202.74.8.0/21
+202.74.36.0/24
+202.74.42.0/24
+202.74.52.0/24
+202.74.80.0/20
+202.74.232.0/22
+202.74.254.0/23
+202.75.208.0/20
+202.75.252.0/22
+202.76.252.0/22
+202.77.80.0/21
+202.77.92.0/22
+202.78.8.0/21
+202.79.224.0/21
+202.79.248.0/22
+202.80.192.0/21
+202.80.200.0/21
+202.81.0.0/22
+202.81.176.0/22
+202.81.180.0/22
+202.81.184.0/22
+202.81.188.0/22
+202.83.252.0/22
+202.84.0.0/22
+202.84.4.0/22
+202.84.8.0/21
+202.84.16.0/23
+202.84.22.0/24
+202.84.24.0/21
+202.85.208.0/20
+202.86.249.0/24
+202.86.252.0/22
+202.87.80.0/20
+202.88.32.0/22
+202.89.8.0/21
+202.89.96.0/22
+202.89.108.0/22
+202.89.119.0/24
+202.89.232.0/21
+202.90.0.0/22
+202.90.16.0/22
+202.90.20.0/22
+202.90.24.0/22
+202.90.28.0/22
+202.90.37.0/24
+202.90.96.0/22
+202.90.100.0/22
+202.90.104.0/22
+202.90.108.0/22
+202.90.112.0/20
+202.90.193.0/24
+202.90.196.0/24
+202.90.205.0/24
+202.90.224.0/20
+202.91.0.0/22
+202.91.36.0/22
+202.91.96.0/20
+202.91.128.0/22
+202.91.176.0/20
+202.91.224.0/19
+202.92.0.0/22
+202.92.8.0/21
+202.92.48.0/20
+202.92.252.0/22
+202.93.0.0/22
+202.93.252.0/22
+202.94.74.0/24
+202.94.81.0/24
+202.94.92.0/22
+202.95.240.0/21
+202.95.252.0/22
+202.96.0.0/18
+202.96.64.0/21
+202.96.72.0/21
+202.96.80.0/20
+202.96.96.0/21
+202.96.104.0/21
+202.96.112.0/20
+202.96.128.0/21
+202.96.136.0/21
+202.96.144.0/20
+202.96.160.0/21
+202.96.168.0/21
+202.96.176.0/20
+202.96.192.0/21
+202.96.200.0/21
+202.96.208.0/20
+202.96.224.0/21
+202.96.232.0/21
+202.96.240.0/20
+202.97.0.0/21
+202.97.8.0/21
+202.97.16.0/20
+202.97.32.0/19
+202.97.64.0/19
+202.97.96.0/20
+202.97.112.0/20
+202.97.128.0/18
+202.97.192.0/19
+202.97.224.0/21
+202.97.232.0/21
+202.97.240.0/20
+202.98.0.0/21
+202.98.8.0/21
+202.98.16.0/20
+202.98.32.0/21
+202.98.40.0/21
+202.98.48.0/20
+202.98.64.0/19
+202.98.96.0/21
+202.98.104.0/21
+202.98.112.0/20
+202.98.128.0/19
+202.98.160.0/21
+202.98.168.0/21
+202.98.176.0/20
+202.98.192.0/21
+202.98.200.0/21
+202.98.208.0/20
+202.98.224.0/21
+202.98.232.0/21
+202.98.240.0/20
+202.99.0.0/18
+202.99.64.0/19
+202.99.96.0/21
+202.99.104.0/21
+202.99.112.0/20
+202.99.128.0/19
+202.99.160.0/21
+202.99.168.0/21
+202.99.176.0/20
+202.99.192.0/21
+202.99.200.0/21
+202.99.208.0/20
+202.99.224.0/21
+202.99.232.0/21
+202.99.240.0/20
+202.100.0.0/21
+202.100.8.0/21
+202.100.16.0/20
+202.100.32.0/19
+202.100.64.0/21
+202.100.72.0/21
+202.100.80.0/20
+202.100.96.0/21
+202.100.104.0/21
+202.100.112.0/20
+202.100.128.0/21
+202.100.136.0/21
+202.100.144.0/20
+202.100.160.0/21
+202.100.168.0/21
+202.100.176.0/20
+202.100.192.0/21
+202.100.200.0/21
+202.100.208.0/20
+202.100.224.0/19
+202.101.0.0/18
+202.101.64.0/19
+202.101.96.0/19
+202.101.128.0/18
+202.101.192.0/19
+202.101.224.0/21
+202.101.232.0/21
+202.101.240.0/20
+202.102.0.0/19
+202.102.32.0/19
+202.102.64.0/18
+202.102.128.0/21
+202.102.136.0/21
+202.102.144.0/20
+202.102.160.0/19
+202.102.192.0/21
+202.102.200.0/21
+202.102.208.0/20
+202.102.224.0/21
+202.102.232.0/21
+202.102.240.0/20
+202.103.0.0/21
+202.103.8.0/21
+202.103.16.0/20
+202.103.32.0/19
+202.103.64.0/19
+202.103.96.0/21
+202.103.104.0/21
+202.103.112.0/20
+202.103.128.0/18
+202.103.192.0/19
+202.103.224.0/21
+202.103.232.0/21
+202.103.240.0/20
+202.104.0.0/15
+202.106.0.0/16
+202.107.0.0/17
+202.107.128.0/17
+202.108.0.0/16
+202.109.0.0/16
+202.110.0.0/18
+202.110.64.0/18
+202.110.128.0/18
+202.110.192.0/18
+202.111.0.0/17
+202.111.128.0/19
+202.111.160.0/19
+202.111.192.0/18
+202.112.0.0/16
+202.113.0.0/20
+202.113.16.0/20
+202.113.32.0/19
+202.113.64.0/18
+202.113.128.0/18
+202.113.192.0/19
+202.113.224.0/20
+202.113.240.0/20
+202.114.0.0/19
+202.114.32.0/19
+202.114.64.0/18
+202.114.128.0/17
+202.115.0.0/19
+202.115.32.0/19
+202.115.64.0/18
+202.115.128.0/17
+202.116.0.0/19
+202.116.32.0/20
+202.116.48.0/20
+202.116.64.0/19
+202.116.96.0/19
+202.116.128.0/17
+202.117.0.0/18
+202.117.64.0/18
+202.117.128.0/17
+202.118.0.0/19
+202.118.32.0/19
+202.118.64.0/18
+202.118.128.0/17
+202.119.0.0/19
+202.119.32.0/19
+202.119.64.0/20
+202.119.80.0/20
+202.119.96.0/19
+202.119.128.0/17
+202.120.0.0/18
+202.120.64.0/18
+202.120.128.0/17
+202.121.0.0/16
+202.122.0.0/21
+202.122.32.0/21
+202.122.64.0/19
+202.122.112.0/21
+202.122.120.0/21
+202.122.128.0/24
+202.122.132.0/24
+202.123.96.0/20
+202.123.116.0/22
+202.123.120.0/22
+202.124.16.0/21
+202.124.24.0/22
+202.125.107.0/24
+202.125.109.0/24
+202.125.112.0/20
+202.125.176.0/20
+202.127.0.0/23
+202.127.2.0/24
+202.127.3.0/24
+202.127.4.0/24
+202.127.5.0/24
+202.127.6.0/23
+202.127.12.0/22
+202.127.16.0/20
+202.127.40.0/21
+202.127.48.0/20
+202.127.112.0/20
+202.127.128.0/20
+202.127.144.0/20
+202.127.160.0/21
+202.127.192.0/23
+202.127.194.0/23
+202.127.196.0/22
+202.127.200.0/21
+202.127.208.0/24
+202.127.209.0/24
+202.127.212.0/22
+202.127.216.0/21
+202.127.224.0/19
+202.129.208.0/24
+202.130.0.0/19
+202.130.39.0/24
+202.130.224.0/19
+202.131.16.0/21
+202.131.48.0/20
+202.131.208.0/20
+202.133.32.0/20
+202.134.58.0/24
+202.134.128.0/20
+202.134.208.0/22
+202.134.212.0/22
+202.134.216.0/22
+202.134.220.0/22
+202.136.48.0/20
+202.136.208.0/20
+202.136.224.0/20
+202.136.248.0/22
+202.137.231.0/24
+202.140.140.0/22
+202.140.144.0/22
+202.140.148.0/22
+202.140.152.0/22
+202.140.156.0/22
+202.141.160.0/19
+202.142.16.0/20
+202.143.4.0/22
+202.143.16.0/20
+202.143.32.0/20
+202.143.56.0/21
+202.143.100.0/22
+202.143.104.0/22
+202.144.196.0/22
+202.146.160.0/20
+202.146.186.0/24
+202.146.188.0/22
+202.146.196.0/22
+202.146.200.0/21
+202.147.144.0/20
+202.148.32.0/20
+202.148.64.0/19
+202.148.96.0/19
+202.149.32.0/19
+202.149.160.0/19
+202.149.224.0/19
+202.150.16.0/20
+202.150.32.0/20
+202.150.56.0/22
+202.150.192.0/20
+202.150.224.0/19
+202.151.0.0/22
+202.151.33.0/24
+202.151.128.0/19
+202.152.176.0/20
+202.153.0.0/22
+202.153.7.0/24
+202.153.48.0/20
+202.157.192.0/19
+202.158.160.0/19
+202.158.242.0/24
+202.160.140.0/22
+202.160.156.0/22
+202.160.176.0/20
+202.162.67.0/24
+202.162.75.0/24
+202.164.0.0/20
+202.164.96.0/19
+202.165.176.0/20
+202.165.208.0/20
+202.165.239.0/24
+202.165.240.0/23
+202.165.243.0/24
+202.165.245.0/24
+202.165.251.0/24
+202.165.252.0/22
+202.166.224.0/19
+202.168.80.0/22
+202.168.128.0/22
+202.168.132.0/22
+202.168.136.0/22
+202.168.140.0/22
+202.168.160.0/20
+202.168.176.0/20
+202.170.128.0/19
+202.170.216.0/21
+202.170.224.0/19
+202.171.216.0/21
+202.171.232.0/24
+202.171.235.0/24
+202.172.0.0/22
+202.172.7.0/24
+202.173.0.0/22
+202.173.6.0/24
+202.173.8.0/21
+202.173.112.0/22
+202.173.224.0/19
+202.174.64.0/20
+202.174.124.0/22
+202.176.224.0/19
+202.179.160.0/22
+202.179.164.0/22
+202.179.168.0/22
+202.179.172.0/22
+202.179.240.0/20
+202.180.128.0/19
+202.180.208.0/21
+202.181.8.0/22
+202.181.28.0/22
+202.181.112.0/20
+202.182.32.0/20
+202.182.192.0/19
+202.189.0.0/18
+202.189.80.0/20
+202.189.184.0/21
+202.191.0.0/24
+202.191.68.0/22
+202.191.72.0/21
+202.191.80.0/20
+202.192.0.0/13
+202.200.0.0/14
+202.204.0.0/14
+203.0.4.0/22
+203.0.10.0/23
+203.0.18.0/24
+203.0.24.0/24
+203.0.42.0/23
+203.0.45.0/24
+203.0.46.0/23
+203.0.81.0/24
+203.0.82.0/23
+203.0.90.0/23
+203.0.96.0/23
+203.0.104.0/21
+203.0.114.0/23
+203.0.122.0/24
+203.0.128.0/24
+203.0.130.0/23
+203.0.132.0/22
+203.0.137.0/24
+203.0.142.0/24
+203.0.144.0/24
+203.0.146.0/24
+203.0.148.0/24
+203.0.150.0/23
+203.0.152.0/24
+203.0.177.0/24
+203.0.224.0/24
+203.1.4.0/22
+203.1.18.0/24
+203.1.26.0/23
+203.1.65.0/24
+203.1.66.0/23
+203.1.70.0/23
+203.1.76.0/23
+203.1.90.0/24
+203.1.97.0/24
+203.1.98.0/23
+203.1.100.0/22
+203.1.108.0/24
+203.1.253.0/24
+203.1.254.0/24
+203.2.64.0/21
+203.2.73.0/24
+203.2.112.0/21
+203.2.126.0/23
+203.2.140.0/24
+203.2.150.0/24
+203.2.152.0/22
+203.2.156.0/23
+203.2.160.0/21
+203.2.180.0/23
+203.2.196.0/23
+203.2.209.0/24
+203.2.214.0/23
+203.2.226.0/23
+203.2.229.0/24
+203.2.236.0/23
+203.3.68.0/24
+203.3.72.0/23
+203.3.75.0/24
+203.3.80.0/21
+203.3.96.0/22
+203.3.105.0/24
+203.3.112.0/21
+203.3.120.0/24
+203.3.123.0/24
+203.3.135.0/24
+203.3.139.0/24
+203.3.143.0/24
+203.4.132.0/23
+203.4.134.0/24
+203.4.151.0/24
+203.4.152.0/22
+203.4.174.0/23
+203.4.180.0/24
+203.4.186.0/24
+203.4.205.0/24
+203.4.208.0/22
+203.4.227.0/24
+203.4.230.0/23
+203.5.4.0/23
+203.5.7.0/24
+203.5.8.0/23
+203.5.11.0/24
+203.5.21.0/24
+203.5.22.0/24
+203.5.44.0/24
+203.5.46.0/23
+203.5.52.0/22
+203.5.56.0/23
+203.5.60.0/23
+203.5.114.0/23
+203.5.118.0/24
+203.5.120.0/24
+203.5.172.0/24
+203.5.180.0/23
+203.5.182.0/24
+203.5.185.0/24
+203.5.186.0/24
+203.5.188.0/23
+203.5.190.0/24
+203.5.195.0/24
+203.5.214.0/23
+203.5.218.0/23
+203.6.131.0/24
+203.6.136.0/24
+203.6.138.0/23
+203.6.142.0/24
+203.6.150.0/23
+203.6.157.0/24
+203.6.159.0/24
+203.6.224.0/20
+203.6.248.0/23
+203.7.129.0/24
+203.7.138.0/23
+203.7.147.0/24
+203.7.150.0/23
+203.7.158.0/24
+203.7.192.0/23
+203.7.200.0/24
+203.8.0.0/24
+203.8.8.0/24
+203.8.23.0/24
+203.8.24.0/21
+203.8.70.0/24
+203.8.82.0/24
+203.8.86.0/23
+203.8.91.0/24
+203.8.110.0/23
+203.8.115.0/24
+203.8.166.0/23
+203.8.169.0/24
+203.8.173.0/24
+203.8.184.0/24
+203.8.186.0/23
+203.8.190.0/23
+203.8.192.0/24
+203.8.197.0/24
+203.8.198.0/23
+203.8.203.0/24
+203.8.209.0/24
+203.8.210.0/23
+203.8.212.0/22
+203.8.217.0/24
+203.8.220.0/24
+203.9.32.0/24
+203.9.36.0/23
+203.9.57.0/24
+203.9.63.0/24
+203.9.65.0/24
+203.9.70.0/23
+203.9.72.0/24
+203.9.75.0/24
+203.9.76.0/23
+203.9.96.0/22
+203.9.100.0/23
+203.9.108.0/24
+203.9.158.0/24
+203.10.34.0/24
+203.10.56.0/24
+203.10.74.0/23
+203.10.84.0/22
+203.10.88.0/24
+203.10.95.0/24
+203.10.125.0/24
+203.11.70.0/24
+203.11.76.0/22
+203.11.82.0/24
+203.11.84.0/22
+203.11.100.0/22
+203.11.109.0/24
+203.11.117.0/24
+203.11.122.0/24
+203.11.126.0/24
+203.11.136.0/22
+203.11.141.0/24
+203.11.142.0/23
+203.11.180.0/22
+203.11.208.0/22
+203.12.16.0/24
+203.12.19.0/24
+203.12.24.0/24
+203.12.57.0/24
+203.12.65.0/24
+203.12.66.0/24
+203.12.70.0/23
+203.12.87.0/24
+203.12.88.0/21
+203.12.100.0/23
+203.12.103.0/24
+203.12.114.0/24
+203.12.118.0/24
+203.12.130.0/24
+203.12.137.0/24
+203.12.196.0/22
+203.12.200.0/21
+203.12.211.0/24
+203.12.219.0/24
+203.12.226.0/24
+203.12.240.0/22
+203.13.18.0/24
+203.13.24.0/24
+203.13.44.0/23
+203.13.80.0/21
+203.13.88.0/23
+203.13.92.0/22
+203.13.173.0/24
+203.13.224.0/23
+203.13.227.0/24
+203.13.233.0/24
+203.14.24.0/22
+203.14.33.0/24
+203.14.56.0/24
+203.14.61.0/24
+203.14.62.0/24
+203.14.104.0/24
+203.14.114.0/23
+203.14.118.0/24
+203.14.162.0/24
+203.14.184.0/21
+203.14.192.0/24
+203.14.194.0/23
+203.14.214.0/24
+203.14.231.0/24
+203.14.246.0/24
+203.15.0.0/20
+203.15.20.0/23
+203.15.22.0/24
+203.15.87.0/24
+203.15.88.0/23
+203.15.105.0/24
+203.15.112.0/21
+203.15.130.0/23
+203.15.149.0/24
+203.15.151.0/24
+203.15.156.0/22
+203.15.174.0/24
+203.15.227.0/24
+203.15.232.0/21
+203.15.240.0/23
+203.15.246.0/24
+203.16.10.0/24
+203.16.12.0/23
+203.16.16.0/21
+203.16.27.0/24
+203.16.38.0/24
+203.16.49.0/24
+203.16.50.0/23
+203.16.58.0/24
+203.16.63.0/24
+203.16.133.0/24
+203.16.161.0/24
+203.16.162.0/24
+203.16.186.0/23
+203.16.228.0/24
+203.16.238.0/24
+203.16.240.0/24
+203.16.245.0/24
+203.17.2.0/24
+203.17.18.0/24
+203.17.28.0/24
+203.17.39.0/24
+203.17.56.0/24
+203.17.74.0/23
+203.17.88.0/23
+203.17.136.0/24
+203.17.164.0/24
+203.17.187.0/24
+203.17.190.0/23
+203.17.231.0/24
+203.17.233.0/24
+203.17.248.0/24
+203.17.249.0/24
+203.17.255.0/24
+203.18.2.0/23
+203.18.4.0/24
+203.18.7.0/24
+203.18.31.0/24
+203.18.37.0/24
+203.18.48.0/23
+203.18.52.0/24
+203.18.72.0/22
+203.18.80.0/23
+203.18.87.0/24
+203.18.100.0/23
+203.18.105.0/24
+203.18.107.0/24
+203.18.110.0/24
+203.18.129.0/24
+203.18.131.0/24
+203.18.132.0/23
+203.18.144.0/24
+203.18.153.0/24
+203.18.199.0/24
+203.18.208.0/24
+203.18.211.0/24
+203.18.215.0/24
+203.19.1.0/24
+203.19.18.0/24
+203.19.24.0/24
+203.19.30.0/24
+203.19.32.0/21
+203.19.41.0/24
+203.19.44.0/23
+203.19.46.0/24
+203.19.58.0/24
+203.19.60.0/23
+203.19.64.0/24
+203.19.68.0/24
+203.19.72.0/24
+203.19.101.0/24
+203.19.111.0/24
+203.19.131.0/24
+203.19.133.0/24
+203.19.144.0/24
+203.19.147.0/24
+203.19.149.0/24
+203.19.156.0/24
+203.19.176.0/24
+203.19.178.0/23
+203.19.208.0/24
+203.19.228.0/22
+203.19.233.0/24
+203.19.242.0/24
+203.19.248.0/23
+203.19.255.0/24
+203.20.17.0/24
+203.20.40.0/23
+203.20.44.0/24
+203.20.48.0/24
+203.20.61.0/24
+203.20.65.0/24
+203.20.84.0/23
+203.20.89.0/24
+203.20.106.0/23
+203.20.115.0/24
+203.20.117.0/24
+203.20.118.0/23
+203.20.122.0/24
+203.20.126.0/23
+203.20.135.0/24
+203.20.136.0/21
+203.20.150.0/24
+203.20.230.0/24
+203.20.232.0/24
+203.20.236.0/24
+203.21.0.0/23
+203.21.2.0/24
+203.21.8.0/24
+203.21.10.0/24
+203.21.18.0/24
+203.21.33.0/24
+203.21.34.0/24
+203.21.41.0/24
+203.21.44.0/24
+203.21.68.0/24
+203.21.82.0/24
+203.21.96.0/22
+203.21.124.0/24
+203.21.136.0/23
+203.21.145.0/24
+203.21.206.0/24
+203.22.24.0/24
+203.22.28.0/23
+203.22.31.0/24
+203.22.68.0/24
+203.22.76.0/24
+203.22.78.0/24
+203.22.84.0/24
+203.22.87.0/24
+203.22.92.0/22
+203.22.99.0/24
+203.22.106.0/24
+203.22.122.0/23
+203.22.131.0/24
+203.22.163.0/24
+203.22.166.0/24
+203.22.170.0/24
+203.22.176.0/21
+203.22.194.0/24
+203.22.242.0/23
+203.22.245.0/24
+203.22.246.0/24
+203.22.252.0/23
+203.23.0.0/24
+203.23.47.0/24
+203.23.61.0/24
+203.23.62.0/23
+203.23.73.0/24
+203.23.85.0/24
+203.23.92.0/22
+203.23.98.0/24
+203.23.107.0/24
+203.23.112.0/24
+203.23.130.0/24
+203.23.140.0/23
+203.23.172.0/24
+203.23.182.0/24
+203.23.186.0/23
+203.23.192.0/24
+203.23.197.0/24
+203.23.198.0/24
+203.23.204.0/22
+203.23.224.0/24
+203.23.226.0/23
+203.23.228.0/22
+203.23.249.0/24
+203.23.251.0/24
+203.24.13.0/24
+203.24.18.0/24
+203.24.27.0/24
+203.24.43.0/24
+203.24.56.0/24
+203.24.58.0/24
+203.24.67.0/24
+203.24.74.0/24
+203.24.79.0/24
+203.24.80.0/23
+203.24.84.0/23
+203.24.86.0/24
+203.24.90.0/24
+203.24.111.0/24
+203.24.112.0/24
+203.24.116.0/24
+203.24.122.0/23
+203.24.145.0/24
+203.24.152.0/23
+203.24.157.0/24
+203.24.161.0/24
+203.24.167.0/24
+203.24.186.0/23
+203.24.199.0/24
+203.24.202.0/24
+203.24.212.0/23
+203.24.217.0/24
+203.24.219.0/24
+203.24.244.0/24
+203.25.19.0/24
+203.25.20.0/23
+203.25.46.0/24
+203.25.48.0/21
+203.25.64.0/23
+203.25.91.0/24
+203.25.99.0/24
+203.25.100.0/24
+203.25.106.0/24
+203.25.131.0/24
+203.25.135.0/24
+203.25.138.0/24
+203.25.147.0/24
+203.25.153.0/24
+203.25.154.0/23
+203.25.164.0/24
+203.25.166.0/24
+203.25.174.0/23
+203.25.180.0/24
+203.25.182.0/24
+203.25.191.0/24
+203.25.199.0/24
+203.25.200.0/24
+203.25.202.0/23
+203.25.208.0/20
+203.25.229.0/24
+203.25.235.0/24
+203.25.236.0/24
+203.25.242.0/24
+203.26.12.0/24
+203.26.34.0/24
+203.26.49.0/24
+203.26.50.0/24
+203.26.55.0/24
+203.26.56.0/23
+203.26.60.0/24
+203.26.65.0/24
+203.26.68.0/24
+203.26.76.0/24
+203.26.80.0/24
+203.26.84.0/24
+203.26.97.0/24
+203.26.102.0/23
+203.26.115.0/24
+203.26.116.0/24
+203.26.129.0/24
+203.26.143.0/24
+203.26.144.0/24
+203.26.148.0/23
+203.26.154.0/24
+203.26.158.0/23
+203.26.170.0/24
+203.26.173.0/24
+203.26.176.0/24
+203.26.185.0/24
+203.26.202.0/23
+203.26.210.0/24
+203.26.214.0/24
+203.26.222.0/24
+203.26.224.0/24
+203.26.228.0/24
+203.26.232.0/24
+203.27.0.0/24
+203.27.10.0/24
+203.27.15.0/24
+203.27.16.0/24
+203.27.20.0/24
+203.27.22.0/23
+203.27.40.0/24
+203.27.45.0/24
+203.27.53.0/24
+203.27.65.0/24
+203.27.66.0/24
+203.27.81.0/24
+203.27.88.0/24
+203.27.102.0/24
+203.27.109.0/24
+203.27.117.0/24
+203.27.121.0/24
+203.27.122.0/23
+203.27.125.0/24
+203.27.200.0/24
+203.27.202.0/24
+203.27.233.0/24
+203.27.241.0/24
+203.27.250.0/24
+203.28.10.0/24
+203.28.12.0/24
+203.28.33.0/24
+203.28.34.0/23
+203.28.43.0/24
+203.28.44.0/24
+203.28.54.0/24
+203.28.56.0/24
+203.28.73.0/24
+203.28.74.0/24
+203.28.76.0/24
+203.28.86.0/24
+203.28.88.0/24
+203.28.112.0/24
+203.28.131.0/24
+203.28.136.0/24
+203.28.140.0/24
+203.28.145.0/24
+203.28.165.0/24
+203.28.169.0/24
+203.28.170.0/24
+203.28.178.0/23
+203.28.185.0/24
+203.28.187.0/24
+203.28.196.0/24
+203.28.226.0/23
+203.28.239.0/24
+203.29.2.0/24
+203.29.8.0/23
+203.29.13.0/24
+203.29.14.0/24
+203.29.28.0/24
+203.29.46.0/24
+203.29.57.0/24
+203.29.61.0/24
+203.29.63.0/24
+203.29.69.0/24
+203.29.73.0/24
+203.29.81.0/24
+203.29.90.0/24
+203.29.95.0/24
+203.29.100.0/24
+203.29.103.0/24
+203.29.112.0/24
+203.29.120.0/22
+203.29.182.0/23
+203.29.187.0/24
+203.29.189.0/24
+203.29.190.0/24
+203.29.205.0/24
+203.29.210.0/24
+203.29.217.0/24
+203.29.227.0/24
+203.29.231.0/24
+203.29.233.0/24
+203.29.234.0/24
+203.29.248.0/24
+203.29.254.0/23
+203.30.16.0/23
+203.30.25.0/24
+203.30.27.0/24
+203.30.29.0/24
+203.30.66.0/24
+203.30.81.0/24
+203.30.87.0/24
+203.30.111.0/24
+203.30.121.0/24
+203.30.123.0/24
+203.30.152.0/24
+203.30.156.0/24
+203.30.162.0/24
+203.30.173.0/24
+203.30.175.0/24
+203.30.187.0/24
+203.30.194.0/24
+203.30.217.0/24
+203.30.220.0/24
+203.30.222.0/24
+203.30.232.0/23
+203.30.235.0/24
+203.30.240.0/23
+203.30.246.0/24
+203.30.250.0/23
+203.31.45.0/24
+203.31.46.0/24
+203.31.49.0/24
+203.31.51.0/24
+203.31.54.0/23
+203.31.69.0/24
+203.31.72.0/24
+203.31.80.0/24
+203.31.85.0/24
+203.31.97.0/24
+203.31.105.0/24
+203.31.106.0/24
+203.31.108.0/23
+203.31.124.0/24
+203.31.162.0/24
+203.31.174.0/24
+203.31.177.0/24
+203.31.181.0/24
+203.31.187.0/24
+203.31.189.0/24
+203.31.204.0/24
+203.31.220.0/24
+203.31.222.0/23
+203.31.225.0/24
+203.31.229.0/24
+203.31.248.0/23
+203.31.253.0/24
+203.32.20.0/24
+203.32.48.0/23
+203.32.56.0/24
+203.32.60.0/24
+203.32.62.0/24
+203.32.68.0/23
+203.32.76.0/24
+203.32.81.0/24
+203.32.84.0/23
+203.32.95.0/24
+203.32.102.0/24
+203.32.105.0/24
+203.32.130.0/24
+203.32.133.0/24
+203.32.140.0/24
+203.32.152.0/24
+203.32.186.0/23
+203.32.192.0/24
+203.32.196.0/24
+203.32.203.0/24
+203.32.204.0/23
+203.32.212.0/24
+203.33.4.0/24
+203.33.7.0/24
+203.33.8.0/21
+203.33.21.0/24
+203.33.26.0/24
+203.33.32.0/24
+203.33.63.0/24
+203.33.64.0/24
+203.33.67.0/24
+203.33.68.0/24
+203.33.73.0/24
+203.33.79.0/24
+203.33.100.0/24
+203.33.122.0/24
+203.33.129.0/24
+203.33.131.0/24
+203.33.145.0/24
+203.33.156.0/24
+203.33.158.0/23
+203.33.174.0/24
+203.33.185.0/24
+203.33.200.0/24
+203.33.202.0/23
+203.33.204.0/24
+203.33.206.0/23
+203.33.214.0/23
+203.33.224.0/23
+203.33.226.0/24
+203.33.233.0/24
+203.33.243.0/24
+203.33.250.0/24
+203.34.4.0/24
+203.34.21.0/24
+203.34.27.0/24
+203.34.39.0/24
+203.34.48.0/23
+203.34.54.0/24
+203.34.56.0/23
+203.34.67.0/24
+203.34.69.0/24
+203.34.76.0/24
+203.34.92.0/24
+203.34.106.0/24
+203.34.113.0/24
+203.34.147.0/24
+203.34.150.0/24
+203.34.152.0/23
+203.34.161.0/24
+203.34.162.0/24
+203.34.187.0/24
+203.34.192.0/21
+203.34.204.0/22
+203.34.232.0/24
+203.34.240.0/24
+203.34.242.0/24
+203.34.245.0/24
+203.34.251.0/24
+203.55.2.0/23
+203.55.4.0/24
+203.55.10.0/24
+203.55.13.0/24
+203.55.22.0/24
+203.55.30.0/24
+203.55.93.0/24
+203.55.101.0/24
+203.55.109.0/24
+203.55.110.0/24
+203.55.116.0/23
+203.55.119.0/24
+203.55.128.0/23
+203.55.146.0/23
+203.55.192.0/24
+203.55.196.0/24
+203.55.218.0/23
+203.55.221.0/24
+203.55.224.0/24
+203.56.1.0/24
+203.56.4.0/24
+203.56.12.0/24
+203.56.24.0/24
+203.56.38.0/24
+203.56.40.0/24
+203.56.46.0/24
+203.56.48.0/21
+203.56.68.0/23
+203.56.82.0/23
+203.56.84.0/23
+203.56.95.0/24
+203.56.110.0/24
+203.56.121.0/24
+203.56.161.0/24
+203.56.169.0/24
+203.56.172.0/23
+203.56.175.0/24
+203.56.183.0/24
+203.56.185.0/24
+203.56.187.0/24
+203.56.192.0/24
+203.56.198.0/24
+203.56.201.0/24
+203.56.208.0/23
+203.56.210.0/24
+203.56.214.0/24
+203.56.216.0/24
+203.56.227.0/24
+203.56.228.0/24
+203.56.231.0/24
+203.56.232.0/24
+203.56.240.0/24
+203.56.252.0/24
+203.56.254.0/24
+203.57.5.0/24
+203.57.6.0/24
+203.57.12.0/23
+203.57.28.0/24
+203.57.39.0/24
+203.57.46.0/24
+203.57.58.0/24
+203.57.61.0/24
+203.57.66.0/24
+203.57.69.0/24
+203.57.70.0/23
+203.57.73.0/24
+203.57.90.0/24
+203.57.101.0/24
+203.57.109.0/24
+203.57.123.0/24
+203.57.157.0/24
+203.57.200.0/24
+203.57.202.0/24
+203.57.206.0/24
+203.57.222.0/24
+203.57.224.0/20
+203.57.246.0/23
+203.57.249.0/24
+203.57.253.0/24
+203.57.254.0/23
+203.62.2.0/24
+203.62.131.0/24
+203.62.139.0/24
+203.62.161.0/24
+203.62.197.0/24
+203.62.228.0/22
+203.62.234.0/24
+203.62.246.0/24
+203.76.160.0/22
+203.76.168.0/22
+203.76.208.0/22
+203.76.212.0/22
+203.76.216.0/22
+203.76.240.0/22
+203.76.244.0/22
+203.77.180.0/22
+203.78.48.0/20
+203.78.156.0/22
+203.79.0.0/20
+203.79.32.0/20
+203.80.4.0/23
+203.80.32.0/20
+203.80.57.0/24
+203.80.129.0/24
+203.80.132.0/22
+203.80.136.0/21
+203.80.144.0/20
+203.81.0.0/21
+203.81.16.0/20
+203.81.244.0/22
+203.82.0.0/23
+203.82.16.0/21
+203.82.112.0/22
+203.82.116.0/22
+203.82.120.0/22
+203.82.124.0/22
+203.82.224.0/22
+203.82.228.0/22
+203.82.232.0/22
+203.82.236.0/22
+203.83.0.0/22
+203.83.8.0/22
+203.83.12.0/22
+203.83.56.0/21
+203.83.224.0/20
+203.86.0.0/19
+203.86.32.0/19
+203.86.64.0/20
+203.86.80.0/20
+203.86.96.0/19
+203.86.250.0/24
+203.86.254.0/23
+203.88.32.0/19
+203.88.192.0/19
+203.89.0.0/22
+203.89.8.0/21
+203.89.100.0/22
+203.89.133.0/24
+203.89.136.0/22
+203.89.144.0/24
+203.90.0.0/22
+203.90.8.0/22
+203.90.12.0/22
+203.90.128.0/19
+203.90.160.0/19
+203.90.192.0/19
+203.91.32.0/19
+203.91.96.0/20
+203.91.120.0/21
+203.92.0.0/22
+203.92.6.0/24
+203.92.160.0/19
+203.93.0.0/22
+203.93.4.0/22
+203.93.8.0/24
+203.93.9.0/24
+203.93.10.0/23
+203.93.12.0/22
+203.93.16.0/20
+203.93.32.0/19
+203.93.64.0/18
+203.93.128.0/21
+203.93.136.0/22
+203.93.140.0/24
+203.93.141.0/24
+203.93.142.0/23
+203.93.144.0/20
+203.93.160.0/19
+203.93.192.0/18
+203.94.0.0/22
+203.94.4.0/22
+203.94.8.0/21
+203.94.16.0/20
+203.95.0.0/21
+203.95.96.0/20
+203.95.112.0/20
+203.95.128.0/18
+203.95.200.0/22
+203.95.204.0/22
+203.95.208.0/22
+203.95.224.0/19
+203.99.8.0/21
+203.99.16.0/20
+203.99.80.0/20
+203.100.32.0/20
+203.100.48.0/21
+203.100.58.0/24
+203.100.60.0/24
+203.100.63.0/24
+203.100.80.0/20
+203.100.96.0/19
+203.100.192.0/20
+203.104.32.0/20
+203.105.96.0/19
+203.105.128.0/19
+203.107.0.0/17
+203.110.160.0/19
+203.110.208.0/20
+203.110.232.0/23
+203.110.234.0/24
+203.114.80.0/22
+203.114.84.0/22
+203.114.88.0/22
+203.114.92.0/22
+203.114.244.0/22
+203.118.192.0/19
+203.118.241.0/24
+203.118.248.0/22
+203.119.24.0/21
+203.119.32.0/22
+203.119.80.0/22
+203.119.85.0/24
+203.119.113.0/24
+203.119.114.0/23
+203.119.116.0/22
+203.119.120.0/21
+203.119.128.0/17
+203.123.58.0/24
+203.128.32.0/19
+203.128.96.0/19
+203.128.224.0/21
+203.129.8.0/21
+203.130.32.0/19
+203.132.32.0/19
+203.134.240.0/21
+203.135.96.0/20
+203.135.112.0/20
+203.135.160.0/20
+203.142.219.0/24
+203.142.224.0/19
+203.144.96.0/19
+203.145.0.0/19
+203.148.0.0/18
+203.148.64.0/20
+203.148.80.0/22
+203.148.86.0/23
+203.149.92.0/22
+203.152.64.0/19
+203.152.128.0/19
+203.153.0.0/22
+203.156.192.0/18
+203.158.16.0/21
+203.160.52.0/22
+203.160.104.0/21
+203.160.129.0/24
+203.160.192.0/19
+203.161.0.0/22
+203.161.180.0/24
+203.161.183.0/24
+203.161.192.0/19
+203.166.160.0/19
+203.167.28.0/22
+203.168.0.0/19
+203.170.58.0/23
+203.171.0.0/22
+203.171.208.0/24
+203.171.224.0/20
+203.174.4.0/24
+203.174.6.0/24
+203.174.7.0/24
+203.174.96.0/19
+203.175.128.0/19
+203.175.192.0/18
+203.176.0.0/18
+203.176.64.0/19
+203.176.168.0/21
+203.184.80.0/20
+203.185.189.0/24
+203.187.160.0/19
+203.189.0.0/23
+203.189.6.0/23
+203.189.112.0/22
+203.189.192.0/19
+203.189.232.0/22
+203.189.240.0/22
+203.190.96.0/20
+203.190.249.0/24
+203.191.0.0/23
+203.191.2.0/24
+203.191.5.0/24
+203.191.7.0/24
+203.191.16.0/20
+203.191.64.0/18
+203.191.133.0/24
+203.191.144.0/21
+203.191.152.0/21
+203.192.0.0/19
+203.193.224.0/19
+203.194.120.0/21
+203.195.64.0/19
+203.195.112.0/21
+203.195.128.0/17
+203.196.0.0/21
+203.196.8.0/21
+203.196.28.0/22
+203.201.181.0/24
+203.201.182.0/24
+203.202.236.0/22
+203.205.64.0/19
+203.205.128.0/17
+203.207.64.0/20
+203.207.80.0/21
+203.207.88.0/22
+203.207.92.0/22
+203.207.96.0/20
+203.207.112.0/20
+203.207.128.0/18
+203.207.192.0/21
+203.207.200.0/21
+203.207.208.0/20
+203.207.224.0/19
+203.208.0.0/20
+203.208.16.0/22
+203.208.32.0/19
+203.209.224.0/19
+203.212.0.0/20
+203.212.80.0/20
+203.215.232.0/21
+203.217.164.0/22
+203.222.192.0/20
+203.223.0.0/20
+203.223.16.0/21
+210.2.0.0/20
+210.2.16.0/20
+210.5.0.0/19
+210.5.56.0/21
+210.5.128.0/20
+210.5.144.0/20
+210.7.56.0/22
+210.7.60.0/22
+210.12.0.0/18
+210.12.64.0/18
+210.12.128.0/18
+210.12.192.0/18
+210.13.0.0/18
+210.13.64.0/18
+210.13.128.0/17
+210.14.64.0/19
+210.14.112.0/20
+210.14.128.0/19
+210.14.160.0/19
+210.14.192.0/19
+210.14.224.0/19
+210.15.0.0/19
+210.15.32.0/19
+210.15.64.0/19
+210.15.96.0/19
+210.15.128.0/18
+210.16.104.0/22
+210.16.128.0/18
+210.21.0.0/17
+210.21.128.0/17
+210.22.0.0/16
+210.23.32.0/19
+210.25.0.0/16
+210.26.0.0/15
+210.28.0.0/14
+210.32.0.0/14
+210.36.0.0/14
+210.40.0.0/13
+210.51.0.0/16
+210.52.0.0/18
+210.52.64.0/18
+210.52.128.0/17
+210.53.0.0/17
+210.53.128.0/17
+210.56.192.0/19
+210.72.0.0/17
+210.72.128.0/19
+210.72.160.0/19
+210.72.192.0/18
+210.73.0.0/19
+210.73.32.0/19
+210.73.64.0/18
+210.73.128.0/17
+210.74.0.0/19
+210.74.32.0/19
+210.74.64.0/19
+210.74.96.0/19
+210.74.128.0/19
+210.74.160.0/19
+210.74.192.0/18
+210.75.0.0/16
+210.76.0.0/19
+210.76.32.0/19
+210.76.64.0/18
+210.76.128.0/17
+210.77.0.0/16
+210.78.0.0/19
+210.78.32.0/19
+210.78.64.0/18
+210.78.128.0/19
+210.78.160.0/19
+210.78.192.0/18
+210.79.64.0/18
+210.79.224.0/19
+210.82.0.0/15
+210.87.128.0/20
+210.87.144.0/20
+210.87.160.0/19
+210.185.192.0/18
+210.192.96.0/19
+211.64.0.0/14
+211.68.0.0/15
+211.70.0.0/15
+211.80.0.0/16
+211.81.0.0/16
+211.82.0.0/16
+211.83.0.0/16
+211.84.0.0/15
+211.86.0.0/15
+211.88.0.0/16
+211.89.0.0/16
+211.90.0.0/15
+211.92.0.0/15
+211.94.0.0/15
+211.96.0.0/15
+211.98.0.0/16
+211.99.0.0/18
+211.99.64.0/19
+211.99.96.0/19
+211.99.128.0/17
+211.100.0.0/16
+211.101.0.0/18
+211.101.64.0/18
+211.101.128.0/17
+211.102.0.0/16
+211.103.0.0/17
+211.103.128.0/17
+211.136.0.0/14
+211.140.0.0/15
+211.142.0.0/17
+211.142.128.0/17
+211.143.0.0/16
+211.144.0.0/15
+211.146.0.0/16
+211.147.0.0/16
+211.148.0.0/14
+211.152.0.0/15
+211.154.0.0/16
+211.155.0.0/18
+211.155.64.0/19
+211.155.96.0/19
+211.155.128.0/17
+211.156.0.0/14
+211.160.0.0/14
+211.164.0.0/14
+212.64.0.0/17
+212.129.128.0/17
+216.250.108.0/22
+218.0.0.0/16
+218.1.0.0/16
+218.2.0.0/15
+218.4.0.0/15
+218.6.0.0/16
+218.7.0.0/16
+218.8.0.0/15
+218.10.0.0/16
+218.11.0.0/16
+218.12.0.0/16
+218.13.0.0/16
+218.14.0.0/15
+218.16.0.0/14
+218.20.0.0/16
+218.21.0.0/17
+218.21.128.0/17
+218.22.0.0/15
+218.24.0.0/15
+218.26.0.0/16
+218.27.0.0/16
+218.28.0.0/15
+218.30.0.0/15
+218.56.0.0/14
+218.60.0.0/15
+218.62.0.0/17
+218.62.128.0/17
+218.63.0.0/16
+218.64.0.0/15
+218.66.0.0/16
+218.67.0.0/17
+218.67.128.0/17
+218.68.0.0/15
+218.70.0.0/15
+218.72.0.0/14
+218.76.0.0/15
+218.78.0.0/15
+218.80.0.0/14
+218.84.0.0/14
+218.88.0.0/13
+218.96.0.0/15
+218.98.0.0/17
+218.98.128.0/18
+218.98.192.0/19
+218.98.224.0/19
+218.99.0.0/16
+218.100.88.0/21
+218.100.96.0/19
+218.100.128.0/17
+218.104.0.0/17
+218.104.128.0/19
+218.104.160.0/19
+218.104.192.0/21
+218.104.200.0/21
+218.104.208.0/20
+218.104.224.0/19
+218.105.0.0/16
+218.106.0.0/15
+218.108.0.0/16
+218.109.0.0/16
+218.185.192.0/19
+218.185.240.0/21
+218.192.0.0/16
+218.193.0.0/16
+218.194.0.0/16
+218.195.0.0/16
+218.196.0.0/14
+218.200.0.0/14
+218.204.0.0/15
+218.206.0.0/15
+218.240.0.0/14
+218.244.0.0/15
+218.246.0.0/15
+218.249.0.0/16
+219.72.0.0/16
+219.82.0.0/16
+219.83.128.0/17
+219.90.68.0/22
+219.90.72.0/22
+219.90.76.0/22
+219.128.0.0/12
+219.144.0.0/14
+219.148.0.0/16
+219.149.0.0/17
+219.149.128.0/18
+219.149.192.0/18
+219.150.0.0/19
+219.150.32.0/19
+219.150.64.0/19
+219.150.96.0/20
+219.150.112.0/20
+219.150.128.0/17
+219.151.0.0/19
+219.151.32.0/19
+219.151.64.0/18
+219.151.128.0/17
+219.152.0.0/15
+219.154.0.0/15
+219.156.0.0/15
+219.158.0.0/17
+219.158.128.0/17
+219.159.0.0/18
+219.159.64.0/18
+219.159.128.0/17
+219.216.0.0/15
+219.218.0.0/15
+219.220.0.0/16
+219.221.0.0/16
+219.222.0.0/15
+219.224.0.0/15
+219.226.0.0/16
+219.227.0.0/16
+219.228.0.0/15
+219.230.0.0/15
+219.232.0.0/14
+219.236.0.0/15
+219.238.0.0/15
+219.242.0.0/15
+219.244.0.0/14
+220.101.192.0/18
+220.112.0.0/14
+220.152.128.0/17
+220.154.0.0/15
+220.158.240.0/22
+220.160.0.0/11
+220.192.0.0/15
+220.194.0.0/15
+220.196.0.0/14
+220.200.0.0/13
+220.231.0.0/18
+220.231.128.0/17
+220.232.64.0/18
+220.234.0.0/16
+220.242.0.0/15
+220.247.136.0/21
+220.248.0.0/14
+220.252.0.0/16
+221.0.0.0/15
+221.2.0.0/16
+221.3.0.0/17
+221.3.128.0/17
+221.4.0.0/16
+221.5.0.0/17
+221.5.128.0/17
+221.6.0.0/16
+221.7.0.0/19
+221.7.32.0/19
+221.7.64.0/19
+221.7.96.0/19
+221.7.128.0/17
+221.8.0.0/15
+221.10.0.0/16
+221.11.0.0/17
+221.11.128.0/18
+221.11.192.0/19
+221.11.224.0/19
+221.12.0.0/17
+221.12.128.0/18
+221.13.0.0/18
+221.13.64.0/19
+221.13.96.0/19
+221.13.128.0/17
+221.14.0.0/15
+221.122.0.0/15
+221.128.128.0/17
+221.129.0.0/16
+221.130.0.0/15
+221.133.224.0/19
+221.136.0.0/16
+221.137.0.0/16
+221.172.0.0/14
+221.176.0.0/13
+221.192.0.0/15
+221.194.0.0/16
+221.195.0.0/16
+221.196.0.0/15
+221.198.0.0/16
+221.199.0.0/19
+221.199.32.0/20
+221.199.48.0/20
+221.199.64.0/18
+221.199.128.0/18
+221.199.192.0/20
+221.199.224.0/19
+221.200.0.0/14
+221.204.0.0/15
+221.206.0.0/16
+221.207.0.0/18
+221.207.64.0/18
+221.207.128.0/17
+221.208.0.0/14
+221.212.0.0/16
+221.213.0.0/16
+221.214.0.0/15
+221.216.0.0/13
+221.224.0.0/13
+221.232.0.0/14
+221.236.0.0/15
+221.238.0.0/16
+221.239.0.0/17
+221.239.128.0/17
+222.16.0.0/15
+222.18.0.0/15
+222.20.0.0/15
+222.22.0.0/16
+222.23.0.0/16
+222.24.0.0/15
+222.26.0.0/15
+222.28.0.0/14
+222.32.0.0/11
+222.64.0.0/13
+222.72.0.0/15
+222.74.0.0/16
+222.75.0.0/16
+222.76.0.0/14
+222.80.0.0/15
+222.82.0.0/16
+222.83.0.0/17
+222.83.128.0/17
+222.84.0.0/16
+222.85.0.0/17
+222.85.128.0/17
+222.86.0.0/15
+222.88.0.0/15
+222.90.0.0/15
+222.92.0.0/14
+222.125.0.0/16
+222.126.128.0/17
+222.128.0.0/14
+222.132.0.0/14
+222.136.0.0/13
+222.160.0.0/15
+222.162.0.0/16
+222.163.0.0/19
+222.163.32.0/19
+222.163.64.0/18
+222.163.128.0/17
+222.168.0.0/15
+222.170.0.0/15
+222.172.0.0/17
+222.172.128.0/17
+222.173.0.0/16
+222.174.0.0/15
+222.176.0.0/13
+222.184.0.0/13
+222.192.0.0/14
+222.196.0.0/15
+222.198.0.0/16
+222.199.0.0/16
+222.200.0.0/14
+222.204.0.0/15
+222.206.0.0/15
+222.208.0.0/13
+222.216.0.0/15
+222.218.0.0/16
+222.219.0.0/16
+222.220.0.0/15
+222.222.0.0/15
+222.240.0.0/13
+222.248.0.0/16
+222.249.0.0/17
+222.249.128.0/19
+222.249.160.0/20
+222.249.176.0/20
+222.249.192.0/18
+223.0.0.0/15
+223.2.0.0/15
+223.4.0.0/14
+223.8.0.0/13
+223.20.0.0/15
+223.27.184.0/22
+223.29.208.0/22
+223.29.252.0/22
+223.64.0.0/11
+223.96.0.0/12
+223.112.0.0/14
+223.116.0.0/15
+223.120.128.0/17
+223.121.128.0/17
+223.122.0.0/15
+223.124.0.0/14
+223.128.0.0/15
+223.144.0.0/12
+223.160.0.0/14
+223.166.0.0/15
+223.192.0.0/15
+223.198.0.0/15
+223.201.0.0/16
+223.202.0.0/15
+223.208.0.0/14
+223.212.0.0/15
+223.214.0.0/15
+223.220.0.0/15
+223.223.176.0/20
+223.223.192.0/20
+223.240.0.0/13
+223.248.0.0/14
+223.252.128.0/17
+223.254.0.0/16
+223.255.0.0/17
+223.255.236.0/22
+223.255.252.0/23
diff --git a/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/cernet.txt b/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/cernet.txt
new file mode 100644
index 0000000000..1170b1653f
--- /dev/null
+++ b/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/cernet.txt
@@ -0,0 +1,162 @@
+1.51.0.0/16
+1.184.0.0/15
+42.244.0.0/14
+49.52.0.0/14
+49.120.0.0/14
+49.140.0.0/15
+49.208.0.0/15
+58.154.0.0/15
+58.192.0.0/15
+58.194.0.0/15
+58.196.0.0/15
+58.198.0.0/15
+58.200.0.0/13
+59.64.0.0/14
+59.68.0.0/14
+59.72.0.0/15
+59.74.0.0/15
+59.76.0.0/16
+59.77.0.0/16
+59.78.0.0/15
+101.4.0.0/14
+101.76.0.0/15
+110.64.0.0/15
+111.114.0.0/15
+111.116.0.0/15
+111.186.0.0/15
+113.54.0.0/15
+114.212.0.0/15
+114.214.0.0/16
+115.24.0.0/14
+115.154.0.0/15
+115.156.0.0/15
+115.158.0.0/16
+116.13.0.0/16
+116.56.0.0/15
+118.202.0.0/15
+118.228.0.0/15
+118.230.0.0/16
+120.94.0.0/16
+120.95.0.0/16
+121.48.0.0/15
+121.52.160.0/19
+121.192.0.0/16
+121.193.0.0/16
+121.194.0.0/15
+121.248.0.0/14
+122.204.0.0/14
+125.216.0.0/15
+125.218.0.0/16
+125.219.0.0/16
+125.220.0.0/15
+125.222.0.0/15
+175.185.0.0/16
+175.186.0.0/15
+180.84.0.0/15
+180.201.0.0/16
+180.208.0.0/15
+183.168.0.0/15
+183.170.0.0/16
+183.172.0.0/14
+192.124.154.0/24
+202.4.128.0/19
+202.38.2.0/23
+202.38.64.0/19
+202.38.96.0/19
+202.38.140.0/23
+202.38.184.0/21
+202.38.192.0/18
+202.112.0.0/16
+202.113.0.0/20
+202.113.16.0/20
+202.113.32.0/19
+202.113.64.0/18
+202.113.128.0/18
+202.113.192.0/19
+202.113.224.0/20
+202.113.240.0/20
+202.114.0.0/19
+202.114.32.0/19
+202.114.64.0/18
+202.114.128.0/17
+202.115.0.0/19
+202.115.128.0/17
+202.116.0.0/19
+202.116.32.0/20
+202.116.48.0/20
+202.116.64.0/19
+202.116.96.0/19
+202.116.128.0/17
+202.117.0.0/18
+202.117.64.0/18
+202.117.128.0/17
+202.118.0.0/19
+202.118.32.0/19
+202.118.64.0/18
+202.118.128.0/17
+202.119.0.0/19
+202.119.32.0/19
+202.119.64.0/20
+202.119.80.0/20
+202.119.96.0/19
+202.119.128.0/17
+202.120.0.0/18
+202.120.64.0/18
+202.120.128.0/17
+202.121.0.0/16
+202.127.216.0/21
+202.127.224.0/19
+202.179.240.0/20
+202.192.0.0/13
+202.200.0.0/14
+202.204.0.0/14
+203.91.120.0/21
+210.25.0.0/16
+210.26.0.0/15
+210.28.0.0/14
+210.32.0.0/14
+210.36.0.0/14
+210.40.0.0/13
+211.64.0.0/14
+211.68.0.0/15
+211.70.0.0/15
+211.80.0.0/16
+211.81.0.0/16
+211.82.0.0/16
+211.83.0.0/16
+211.84.0.0/15
+211.86.0.0/15
+218.192.0.0/16
+218.193.0.0/16
+218.194.0.0/16
+218.195.0.0/16
+218.196.0.0/14
+219.216.0.0/15
+219.218.0.0/15
+219.220.0.0/16
+219.221.0.0/16
+219.222.0.0/15
+219.224.0.0/15
+219.226.0.0/16
+219.227.0.0/16
+219.228.0.0/15
+219.230.0.0/15
+219.242.0.0/15
+219.244.0.0/14
+222.16.0.0/15
+222.18.0.0/15
+222.20.0.0/15
+222.22.0.0/16
+222.23.0.0/16
+222.24.0.0/15
+222.26.0.0/15
+222.28.0.0/14
+222.192.0.0/14
+222.196.0.0/15
+222.198.0.0/16
+222.199.0.0/16
+222.200.0.0/14
+222.204.0.0/15
+222.206.0.0/15
+223.2.0.0/15
+223.128.0.0/15
diff --git a/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/chinatelecom.txt b/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/chinatelecom.txt
new file mode 100644
index 0000000000..88f76280f6
--- /dev/null
+++ b/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/chinatelecom.txt
@@ -0,0 +1,1948 @@
+1.0.1.0/24
+1.0.2.0/23
+1.0.8.0/21
+1.0.32.0/19
+1.1.0.0/24
+1.1.2.0/23
+1.1.4.0/22
+1.1.9.0/24
+1.1.10.0/23
+1.1.12.0/22
+1.1.16.0/20
+1.1.32.0/19
+1.2.0.0/23
+1.2.5.0/24
+1.2.6.0/23
+1.2.9.0/24
+1.2.10.0/23
+1.2.12.0/22
+1.2.16.0/20
+1.2.32.0/19
+1.2.64.0/18
+1.3.0.0/16
+1.4.1.0/24
+1.4.2.0/23
+1.4.5.0/24
+1.4.6.0/23
+1.4.8.0/21
+1.4.16.0/20
+1.4.32.0/19
+1.4.64.0/18
+1.10.0.0/21
+1.10.8.0/23
+1.10.11.0/24
+1.10.12.0/22
+1.10.16.0/20
+1.10.32.0/19
+1.10.64.0/18
+1.48.0.0/15
+1.50.0.0/16
+1.68.0.0/14
+1.80.0.0/13
+1.180.0.0/14
+1.192.0.0/13
+1.202.0.0/15
+1.204.0.0/14
+14.0.0.0/21
+14.0.12.0/22
+14.1.0.0/22
+14.16.0.0/12
+14.102.128.0/22
+14.104.0.0/13
+14.112.0.0/12
+14.134.0.0/15
+14.144.0.0/12
+14.192.76.0/22
+14.208.0.0/12
+27.16.0.0/12
+27.34.232.0/21
+27.50.40.0/21
+27.54.72.0/21
+27.54.152.0/21
+27.121.72.0/21
+27.121.120.0/21
+27.128.0.0/15
+27.148.0.0/14
+27.152.0.0/13
+27.184.0.0/13
+27.224.0.0/14
+36.0.0.0/22
+36.0.16.0/20
+36.0.32.0/19
+36.1.0.0/16
+36.4.0.0/14
+36.16.0.0/12
+36.37.0.0/19
+36.37.36.0/23
+36.37.39.0/24
+36.37.40.0/21
+36.37.48.0/20
+36.40.0.0/13
+36.48.0.0/15
+36.56.0.0/13
+36.96.0.0/11
+39.0.0.0/24
+39.0.2.0/23
+39.0.4.0/22
+39.0.8.0/21
+39.0.16.0/20
+39.0.32.0/19
+39.0.64.0/18
+39.0.128.0/17
+42.0.0.0/22
+42.0.8.0/21
+42.0.16.0/21
+42.0.24.0/22
+42.0.32.0/19
+42.1.0.0/19
+42.1.32.0/20
+42.1.48.0/21
+42.1.56.0/22
+42.62.128.0/19
+42.62.160.0/20
+42.62.180.0/22
+42.62.184.0/21
+42.80.0.0/15
+42.83.64.0/20
+42.83.80.0/22
+42.83.88.0/21
+42.83.96.0/19
+42.88.0.0/13
+42.96.64.0/19
+42.96.96.0/21
+42.96.108.0/22
+42.96.112.0/20
+42.97.0.0/16
+42.99.0.0/18
+42.99.64.0/19
+42.99.96.0/20
+42.99.112.0/22
+42.99.120.0/21
+42.100.0.0/14
+42.122.0.0/16
+42.123.0.0/19
+42.123.36.0/22
+42.123.40.0/21
+42.123.48.0/20
+42.123.64.0/18
+42.156.0.0/19
+42.156.36.0/22
+42.156.40.0/21
+42.156.48.0/20
+42.156.64.0/18
+42.184.0.0/15
+42.187.0.0/18
+42.187.64.0/19
+42.187.96.0/20
+42.187.112.0/21
+42.187.120.0/22
+42.194.0.0/21
+42.194.8.0/22
+42.194.16.0/20
+42.194.32.0/19
+42.194.64.0/18
+42.202.0.0/15
+42.242.0.0/15
+42.248.0.0/13
+43.242.192.0/22
+43.243.232.0/22
+45.114.252.0/22
+45.250.12.0/22
+45.250.16.0/22
+45.250.76.0/22
+45.250.80.0/22
+45.250.84.0/22
+45.250.88.0/22
+45.250.92.0/22
+45.250.96.0/22
+45.250.104.0/22
+45.250.108.0/22
+45.250.112.0/22
+45.250.116.0/22
+45.250.120.0/22
+45.250.124.0/22
+45.250.128.0/22
+45.250.132.0/22
+45.250.136.0/22
+45.250.140.0/22
+45.250.144.0/22
+45.250.148.0/22
+49.64.0.0/11
+49.112.0.0/13
+49.128.0.0/24
+49.128.2.0/23
+58.32.0.0/13
+58.40.0.0/15
+58.42.0.0/16
+58.43.0.0/16
+58.44.0.0/14
+58.48.0.0/13
+58.56.0.0/15
+58.58.0.0/16
+58.59.0.0/17
+58.59.128.0/17
+58.60.0.0/14
+58.65.232.0/21
+58.208.0.0/12
+59.32.0.0/13
+59.40.0.0/15
+59.42.0.0/16
+59.43.0.0/16
+59.44.0.0/14
+59.48.0.0/16
+59.49.0.0/17
+59.49.128.0/17
+59.50.0.0/16
+59.51.0.0/17
+59.51.128.0/17
+59.52.0.0/14
+59.56.0.0/14
+59.60.0.0/15
+59.62.0.0/15
+59.172.0.0/15
+59.174.0.0/15
+60.160.0.0/15
+60.162.0.0/15
+60.164.0.0/15
+60.166.0.0/15
+60.168.0.0/13
+60.176.0.0/12
+60.235.0.0/16
+60.247.0.0/16
+61.4.84.0/22
+61.4.88.0/21
+61.29.128.0/18
+61.45.224.0/20
+61.128.0.0/15
+61.130.0.0/15
+61.132.0.0/16
+61.133.128.0/17
+61.134.0.0/18
+61.134.64.0/19
+61.136.128.0/17
+61.137.0.0/17
+61.138.192.0/18
+61.139.0.0/17
+61.139.192.0/18
+61.140.0.0/14
+61.144.0.0/14
+61.150.0.0/15
+61.152.0.0/16
+61.153.0.0/16
+61.154.0.0/15
+61.157.0.0/16
+61.159.64.0/18
+61.159.128.0/17
+61.160.0.0/16
+61.161.64.0/18
+61.164.0.0/16
+61.165.0.0/16
+61.166.0.0/16
+61.169.0.0/16
+61.170.0.0/15
+61.172.0.0/14
+61.177.0.0/16
+61.178.0.0/16
+61.180.0.0/17
+61.183.0.0/16
+61.184.0.0/14
+61.188.0.0/16
+61.189.128.0/17
+61.190.0.0/15
+101.0.0.0/22
+101.1.0.0/22
+101.2.172.0/22
+101.50.56.0/22
+101.53.100.0/22
+101.55.224.0/21
+101.78.0.0/22
+101.80.0.0/12
+101.96.0.0/21
+101.96.8.0/22
+101.96.16.0/20
+101.99.96.0/19
+101.101.64.0/19
+101.101.100.0/24
+101.101.102.0/23
+101.101.104.0/21
+101.101.112.0/20
+101.102.64.0/19
+101.102.100.0/23
+101.102.102.0/24
+101.102.104.0/21
+101.102.112.0/20
+101.110.64.0/19
+101.110.96.0/20
+101.110.116.0/22
+101.110.120.0/21
+101.128.0.0/22
+101.128.8.0/21
+101.128.16.0/20
+101.128.32.0/19
+101.203.128.0/19
+101.203.160.0/21
+101.203.172.0/22
+101.203.176.0/20
+101.224.0.0/13
+101.234.64.0/21
+101.234.76.0/22
+101.234.80.0/20
+101.234.96.0/19
+101.248.0.0/15
+101.251.0.0/22
+101.251.8.0/21
+101.251.16.0/20
+101.251.32.0/19
+103.12.68.0/22
+103.22.0.0/22
+103.22.4.0/22
+103.22.8.0/22
+103.22.12.0/22
+103.22.16.0/22
+103.22.20.0/22
+103.22.24.0/22
+103.22.28.0/22
+103.22.32.0/22
+103.22.36.0/22
+103.22.40.0/22
+103.22.44.0/22
+103.22.48.0/22
+103.22.52.0/22
+103.22.56.0/22
+103.22.60.0/22
+103.22.64.0/22
+103.22.68.0/22
+103.22.72.0/22
+103.22.76.0/22
+103.22.80.0/22
+103.22.84.0/22
+103.22.88.0/22
+103.22.92.0/22
+103.22.100.0/22
+103.22.104.0/22
+103.22.108.0/22
+103.22.112.0/22
+103.22.116.0/22
+103.22.120.0/22
+103.22.124.0/22
+103.29.128.0/22
+103.38.76.0/22
+103.54.240.0/22
+103.72.112.0/22
+103.74.152.0/22
+103.74.156.0/22
+103.75.144.0/22
+103.212.100.0/22
+103.212.108.0/22
+103.218.8.0/22
+103.218.12.0/22
+103.218.16.0/22
+103.218.20.0/22
+103.218.28.0/22
+103.218.32.0/22
+103.218.36.0/22
+103.218.40.0/22
+103.218.44.0/22
+103.218.48.0/22
+103.218.52.0/22
+103.218.56.0/22
+103.218.60.0/22
+103.218.64.0/22
+103.218.68.0/22
+103.218.72.0/22
+103.218.76.0/22
+103.218.80.0/22
+103.218.84.0/22
+103.218.88.0/22
+103.254.188.0/22
+106.0.0.0/24
+106.0.2.0/23
+106.0.4.0/22
+106.0.8.0/21
+106.0.16.0/20
+106.0.64.0/18
+106.4.0.0/14
+106.8.0.0/15
+106.16.0.0/12
+106.32.0.0/12
+106.56.0.0/13
+106.80.0.0/12
+106.108.0.0/14
+106.112.0.0/13
+106.120.0.0/13
+106.224.0.0/12
+110.76.156.0/22
+110.76.184.0/22
+110.80.0.0/13
+110.88.0.0/14
+110.93.32.0/19
+110.94.0.0/15
+110.152.0.0/14
+110.156.0.0/15
+110.166.0.0/15
+110.173.64.0/19
+110.176.0.0/13
+110.184.0.0/13
+111.72.0.0/13
+111.112.0.0/15
+111.120.0.0/14
+111.124.0.0/16
+111.126.0.0/15
+111.170.0.0/16
+111.172.0.0/14
+111.176.0.0/13
+111.224.0.0/14
+111.235.156.0/22
+112.66.0.0/15
+112.98.0.0/15
+112.100.0.0/14
+112.112.0.0/14
+112.116.0.0/15
+112.137.48.0/21
+113.12.0.0/14
+113.16.0.0/15
+113.24.0.0/14
+113.59.224.0/22
+113.62.0.0/15
+113.64.0.0/11
+113.96.0.0/12
+113.112.0.0/13
+113.120.0.0/13
+113.128.0.0/15
+113.132.0.0/14
+113.136.0.0/13
+113.208.128.0/17
+113.209.0.0/16
+113.212.184.0/21
+113.218.0.0/15
+113.220.0.0/14
+113.240.0.0/13
+113.248.0.0/14
+114.79.64.0/18
+114.80.0.0/12
+114.96.0.0/13
+114.104.0.0/14
+114.135.0.0/16
+114.138.0.0/15
+114.141.64.0/21
+114.198.248.0/21
+114.216.0.0/13
+114.224.0.0/12
+115.69.64.0/20
+115.148.0.0/14
+115.152.0.0/15
+115.166.64.0/19
+115.168.0.0/14
+115.192.0.0/11
+115.224.0.0/12
+116.0.8.0/21
+116.0.24.0/21
+116.1.0.0/16
+116.4.0.0/14
+116.8.0.0/14
+116.16.0.0/12
+116.50.0.0/20
+116.52.0.0/14
+116.192.0.0/16
+116.193.176.0/21
+116.207.0.0/16
+116.208.0.0/14
+116.224.0.0/12
+116.246.0.0/15
+116.248.0.0/15
+116.252.0.0/15
+117.21.0.0/16
+117.22.0.0/15
+117.24.0.0/13
+117.32.0.0/13
+117.40.0.0/14
+117.44.0.0/15
+117.57.0.0/16
+117.60.0.0/14
+117.64.0.0/13
+117.74.80.0/20
+117.80.0.0/12
+117.103.40.0/21
+117.103.72.0/21
+117.104.168.0/21
+117.122.128.0/17
+118.84.0.0/15
+118.102.32.0/21
+118.112.0.0/13
+118.120.0.0/14
+118.124.0.0/15
+118.127.128.0/19
+118.180.0.0/14
+118.213.0.0/16
+118.215.192.0/18
+118.239.0.0/16
+118.248.0.0/13
+119.0.0.0/15
+119.27.128.0/19
+119.41.0.0/16
+119.42.128.0/21
+119.60.0.0/16
+119.82.208.0/20
+119.84.0.0/14
+119.96.0.0/13
+119.120.0.0/13
+119.128.0.0/12
+119.144.0.0/14
+119.148.176.0/20
+119.151.192.0/18
+119.160.200.0/21
+119.252.96.0/21
+120.32.0.0/13
+120.40.0.0/14
+120.68.0.0/14
+120.88.8.0/21
+120.143.128.0/19
+121.0.8.0/21
+121.8.0.0/13
+121.32.0.0/14
+121.50.8.0/21
+121.54.176.0/21
+121.56.0.0/15
+121.58.0.0/17
+121.58.136.0/21
+121.58.160.0/21
+121.59.0.0/16
+121.60.0.0/14
+121.101.0.0/18
+121.200.192.0/21
+121.204.0.0/14
+121.224.0.0/12
+122.4.0.0/14
+122.102.80.0/20
+122.128.120.0/21
+122.224.0.0/12
+122.240.0.0/13
+122.248.24.0/21
+122.255.64.0/21
+123.50.160.0/19
+123.52.0.0/14
+123.96.0.0/15
+123.101.0.0/16
+123.103.0.0/17
+123.149.0.0/16
+123.150.0.0/15
+123.160.0.0/14
+123.164.0.0/14
+123.168.0.0/14
+123.172.0.0/15
+123.174.0.0/15
+123.177.0.0/16
+123.178.0.0/15
+123.180.0.0/14
+123.184.0.0/14
+123.244.0.0/14
+124.31.0.0/16
+124.40.192.0/19
+124.72.0.0/16
+124.73.0.0/16
+124.74.0.0/15
+124.76.0.0/14
+124.109.96.0/21
+124.112.0.0/15
+124.114.0.0/15
+124.116.0.0/16
+124.117.0.0/16
+124.118.0.0/15
+124.224.0.0/16
+124.225.0.0/16
+124.226.0.0/15
+124.228.0.0/14
+124.232.0.0/15
+124.234.0.0/15
+124.236.0.0/14
+125.64.0.0/13
+125.72.0.0/16
+125.73.0.0/16
+125.74.0.0/15
+125.76.0.0/17
+125.76.128.0/17
+125.77.0.0/16
+125.78.0.0/15
+125.80.0.0/13
+125.88.0.0/13
+125.104.0.0/13
+125.112.0.0/12
+125.171.0.0/16
+125.208.0.0/18
+139.5.204.0/22
+139.5.212.0/22
+139.189.0.0/16
+139.200.0.0/13
+140.75.0.0/16
+140.224.0.0/16
+140.237.0.0/16
+140.240.0.0/16
+140.243.0.0/16
+140.246.0.0/16
+140.249.0.0/16
+140.250.0.0/16
+140.255.0.0/16
+144.0.0.0/16
+144.7.0.0/16
+144.12.0.0/16
+144.52.0.0/16
+144.123.0.0/16
+144.255.0.0/16
+150.0.0.0/16
+150.115.0.0/16
+150.121.0.0/16
+150.122.0.0/16
+150.138.0.0/15
+150.223.0.0/16
+153.118.0.0/15
+163.53.220.0/22
+171.8.0.0/13
+171.40.0.0/13
+171.80.0.0/14
+171.88.0.0/13
+171.104.0.0/13
+171.112.0.0/14
+171.208.0.0/12
+175.0.0.0/12
+175.30.0.0/15
+180.96.0.0/11
+180.136.0.0/13
+180.148.16.0/21
+180.148.152.0/21
+180.148.216.0/21
+180.149.128.0/19
+180.152.0.0/13
+180.160.0.0/12
+180.212.0.0/15
+182.23.184.0/21
+182.23.200.0/21
+182.32.0.0/12
+182.84.0.0/14
+182.96.0.0/12
+182.128.0.0/12
+182.144.0.0/13
+182.200.0.0/13
+182.240.0.0/13
+183.0.0.0/10
+183.64.0.0/13
+183.78.180.0/22
+183.91.136.0/21
+183.128.0.0/11
+183.160.0.0/13
+202.0.100.0/23
+202.0.122.0/23
+202.0.176.0/22
+202.3.128.0/23
+202.6.6.0/23
+202.6.66.0/23
+202.6.72.0/23
+202.6.87.0/24
+202.6.88.0/23
+202.6.92.0/23
+202.6.103.0/24
+202.6.108.0/24
+202.6.110.0/23
+202.6.114.0/24
+202.6.176.0/20
+202.8.0.0/24
+202.8.2.0/23
+202.8.4.0/23
+202.8.12.0/24
+202.8.24.0/24
+202.8.77.0/24
+202.8.192.0/20
+202.9.32.0/24
+202.9.34.0/23
+202.9.48.0/23
+202.9.51.0/24
+202.9.52.0/23
+202.9.54.0/24
+202.9.57.0/24
+202.9.58.0/23
+202.12.1.0/24
+202.12.2.0/24
+202.12.17.0/24
+202.12.18.0/24
+202.12.72.0/24
+202.12.84.0/23
+202.12.96.0/24
+202.12.98.0/23
+202.12.106.0/24
+202.12.111.0/24
+202.12.116.0/24
+202.14.64.0/23
+202.14.69.0/24
+202.14.73.0/24
+202.14.74.0/23
+202.14.76.0/24
+202.14.78.0/23
+202.14.88.0/24
+202.14.97.0/24
+202.14.104.0/23
+202.14.108.0/23
+202.14.111.0/24
+202.14.114.0/23
+202.14.118.0/23
+202.14.124.0/23
+202.14.127.0/24
+202.14.129.0/24
+202.14.135.0/24
+202.14.136.0/24
+202.14.149.0/24
+202.14.151.0/24
+202.14.157.0/24
+202.14.158.0/23
+202.14.169.0/24
+202.14.170.0/23
+202.14.176.0/24
+202.14.184.0/23
+202.14.208.0/23
+202.14.213.0/24
+202.14.219.0/24
+202.14.220.0/24
+202.14.222.0/23
+202.14.225.0/24
+202.14.226.0/23
+202.14.231.0/24
+202.14.239.0/24
+202.14.246.0/24
+202.14.251.0/24
+202.20.66.0/24
+202.20.79.0/24
+202.20.87.0/24
+202.20.88.0/23
+202.20.90.0/24
+202.20.94.0/23
+202.20.114.0/24
+202.20.117.0/24
+202.20.120.0/24
+202.20.125.0/24
+202.20.127.0/24
+202.21.131.0/24
+202.21.132.0/24
+202.21.141.0/24
+202.21.142.0/24
+202.21.147.0/24
+202.21.148.0/24
+202.21.150.0/23
+202.21.152.0/23
+202.21.154.0/24
+202.21.156.0/24
+202.27.136.0/23
+202.38.0.0/23
+202.38.48.0/20
+202.38.130.0/23
+202.38.136.0/23
+202.38.142.0/23
+202.38.149.0/24
+202.38.150.0/23
+202.38.154.0/23
+202.38.156.0/24
+202.38.158.0/23
+202.38.168.0/23
+202.38.170.0/24
+202.40.4.0/23
+202.40.7.0/24
+202.40.15.0/24
+202.40.135.0/24
+202.40.136.0/24
+202.40.140.0/24
+202.40.143.0/24
+202.40.144.0/23
+202.40.150.0/24
+202.40.155.0/24
+202.40.156.0/24
+202.40.158.0/23
+202.40.162.0/24
+202.41.8.0/23
+202.41.11.0/24
+202.41.12.0/23
+202.41.128.0/24
+202.41.130.0/23
+202.41.192.0/24
+202.44.16.0/20
+202.44.67.0/24
+202.44.74.0/24
+202.44.129.0/24
+202.44.132.0/23
+202.44.146.0/23
+202.45.0.0/23
+202.45.2.0/24
+202.45.15.0/24
+202.45.16.0/20
+202.46.16.0/23
+202.46.18.0/24
+202.46.20.0/23
+202.46.128.0/24
+202.47.82.0/23
+202.47.126.0/24
+202.47.128.0/24
+202.47.130.0/23
+202.57.240.0/20
+202.58.0.0/24
+202.59.0.0/24
+202.59.212.0/22
+202.59.236.0/24
+202.60.48.0/21
+202.60.96.0/21
+202.60.132.0/22
+202.60.136.0/21
+202.60.144.0/20
+202.62.112.0/22
+202.62.248.0/22
+202.62.252.0/24
+202.62.255.0/24
+202.63.81.0/24
+202.63.82.0/23
+202.63.84.0/22
+202.63.88.0/21
+202.65.0.0/21
+202.65.8.0/23
+202.67.0.0/22
+202.70.96.0/20
+202.70.192.0/20
+202.72.40.0/21
+202.72.80.0/20
+202.73.128.0/22
+202.74.80.0/20
+202.74.254.0/23
+202.75.252.0/22
+202.76.252.0/22
+202.77.80.0/21
+202.77.92.0/22
+202.78.8.0/21
+202.79.224.0/21
+202.79.248.0/22
+202.80.192.0/21
+202.80.200.0/21
+202.81.0.0/22
+202.83.252.0/22
+202.84.4.0/22
+202.84.8.0/21
+202.84.24.0/21
+202.86.249.0/24
+202.86.252.0/22
+202.87.80.0/20
+202.89.8.0/21
+202.90.112.0/20
+202.90.196.0/24
+202.91.0.0/22
+202.91.96.0/20
+202.92.8.0/21
+202.92.48.0/20
+202.92.252.0/22
+202.94.92.0/22
+202.95.240.0/21
+202.96.96.0/21
+202.96.104.0/21
+202.96.112.0/20
+202.96.128.0/21
+202.96.136.0/21
+202.96.144.0/20
+202.96.160.0/21
+202.96.168.0/21
+202.96.176.0/20
+202.96.192.0/21
+202.96.200.0/21
+202.96.208.0/20
+202.96.224.0/21
+202.96.232.0/21
+202.96.240.0/20
+202.97.0.0/21
+202.97.8.0/21
+202.97.16.0/20
+202.97.32.0/19
+202.97.64.0/19
+202.97.96.0/20
+202.97.112.0/20
+202.98.32.0/21
+202.98.40.0/21
+202.98.48.0/20
+202.98.64.0/19
+202.98.96.0/21
+202.98.104.0/21
+202.98.112.0/20
+202.98.128.0/19
+202.98.160.0/21
+202.98.168.0/21
+202.98.176.0/20
+202.98.192.0/21
+202.98.200.0/21
+202.98.208.0/20
+202.98.224.0/21
+202.98.232.0/21
+202.98.240.0/20
+202.100.0.0/21
+202.100.8.0/21
+202.100.16.0/20
+202.100.32.0/19
+202.100.64.0/21
+202.100.72.0/21
+202.100.80.0/20
+202.100.96.0/21
+202.100.104.0/21
+202.100.112.0/20
+202.100.128.0/21
+202.100.136.0/21
+202.100.144.0/20
+202.100.160.0/21
+202.100.168.0/21
+202.100.176.0/20
+202.100.192.0/21
+202.100.200.0/21
+202.100.208.0/20
+202.100.224.0/19
+202.101.0.0/18
+202.101.64.0/19
+202.101.96.0/19
+202.101.224.0/21
+202.102.0.0/19
+202.102.32.0/19
+202.102.64.0/18
+202.102.192.0/21
+202.102.200.0/21
+202.102.208.0/20
+202.103.0.0/21
+202.103.8.0/21
+202.103.16.0/20
+202.103.32.0/19
+202.103.64.0/19
+202.103.96.0/21
+202.103.104.0/21
+202.103.112.0/20
+202.103.128.0/18
+202.103.192.0/19
+202.103.224.0/21
+202.103.232.0/21
+202.103.240.0/20
+202.104.0.0/15
+202.107.128.0/17
+202.109.0.0/16
+202.110.128.0/18
+202.111.0.0/17
+202.111.192.0/18
+202.122.120.0/21
+202.122.132.0/24
+202.124.16.0/21
+202.124.24.0/22
+202.125.107.0/24
+202.125.112.0/20
+202.127.128.0/20
+202.127.194.0/23
+202.127.196.0/22
+202.127.212.0/22
+202.133.32.0/20
+202.134.58.0/24
+202.134.128.0/20
+202.137.231.0/24
+202.143.4.0/22
+202.143.32.0/20
+202.143.56.0/21
+202.146.160.0/20
+202.146.188.0/22
+202.146.196.0/22
+202.146.200.0/21
+202.147.144.0/20
+202.148.32.0/20
+202.148.64.0/19
+202.149.32.0/19
+202.150.32.0/20
+202.150.56.0/22
+202.150.192.0/20
+202.150.224.0/19
+202.151.0.0/22
+202.151.128.0/19
+202.153.0.0/22
+202.157.192.0/19
+202.162.67.0/24
+202.162.75.0/24
+202.164.96.0/19
+202.165.239.0/24
+202.165.240.0/23
+202.165.243.0/24
+202.165.245.0/24
+202.165.251.0/24
+202.165.252.0/22
+202.166.224.0/19
+202.170.224.0/19
+202.171.216.0/21
+202.171.235.0/24
+202.172.0.0/22
+202.173.0.0/22
+202.173.224.0/19
+202.174.64.0/20
+202.176.224.0/19
+202.180.208.0/21
+202.182.32.0/20
+202.182.192.0/19
+202.189.184.0/21
+202.191.0.0/24
+202.191.68.0/22
+202.191.72.0/21
+202.191.80.0/20
+203.0.4.0/22
+203.0.10.0/23
+203.0.18.0/24
+203.0.24.0/24
+203.0.42.0/23
+203.0.45.0/24
+203.0.46.0/23
+203.0.81.0/24
+203.0.82.0/23
+203.0.90.0/23
+203.0.96.0/23
+203.0.104.0/21
+203.0.114.0/23
+203.0.122.0/24
+203.0.128.0/24
+203.0.130.0/23
+203.0.132.0/22
+203.0.137.0/24
+203.0.142.0/24
+203.0.144.0/24
+203.0.146.0/24
+203.0.148.0/24
+203.0.150.0/23
+203.0.152.0/24
+203.0.177.0/24
+203.0.224.0/24
+203.1.4.0/22
+203.1.18.0/24
+203.1.26.0/23
+203.1.65.0/24
+203.1.66.0/23
+203.1.70.0/23
+203.1.76.0/23
+203.1.90.0/24
+203.1.97.0/24
+203.1.98.0/23
+203.1.100.0/22
+203.1.108.0/24
+203.1.253.0/24
+203.1.254.0/24
+203.2.64.0/21
+203.2.73.0/24
+203.2.112.0/21
+203.2.126.0/23
+203.2.140.0/24
+203.2.150.0/24
+203.2.152.0/22
+203.2.156.0/23
+203.2.160.0/21
+203.2.180.0/23
+203.2.196.0/23
+203.2.209.0/24
+203.2.214.0/23
+203.2.226.0/23
+203.2.229.0/24
+203.2.236.0/23
+203.3.68.0/24
+203.3.72.0/23
+203.3.75.0/24
+203.3.80.0/21
+203.3.96.0/22
+203.3.105.0/24
+203.3.112.0/21
+203.3.120.0/24
+203.3.123.0/24
+203.3.135.0/24
+203.3.139.0/24
+203.3.143.0/24
+203.4.132.0/23
+203.4.134.0/24
+203.4.151.0/24
+203.4.152.0/22
+203.4.174.0/23
+203.4.180.0/24
+203.4.186.0/24
+203.4.205.0/24
+203.4.208.0/22
+203.4.227.0/24
+203.4.230.0/23
+203.5.4.0/23
+203.5.7.0/24
+203.5.8.0/23
+203.5.11.0/24
+203.5.21.0/24
+203.5.22.0/24
+203.5.44.0/24
+203.5.46.0/23
+203.5.52.0/22
+203.5.56.0/23
+203.5.60.0/23
+203.5.114.0/23
+203.5.118.0/24
+203.5.120.0/24
+203.5.172.0/24
+203.5.180.0/23
+203.5.182.0/24
+203.5.185.0/24
+203.5.186.0/24
+203.5.188.0/23
+203.5.190.0/24
+203.5.195.0/24
+203.5.214.0/23
+203.5.218.0/23
+203.6.131.0/24
+203.6.136.0/24
+203.6.138.0/23
+203.6.142.0/24
+203.6.150.0/23
+203.6.157.0/24
+203.6.159.0/24
+203.6.224.0/20
+203.6.248.0/23
+203.7.129.0/24
+203.7.138.0/23
+203.7.147.0/24
+203.7.150.0/23
+203.7.158.0/24
+203.7.192.0/23
+203.7.200.0/24
+203.8.0.0/24
+203.8.8.0/24
+203.8.23.0/24
+203.8.24.0/21
+203.8.70.0/24
+203.8.82.0/24
+203.8.86.0/23
+203.8.91.0/24
+203.8.110.0/23
+203.8.115.0/24
+203.8.166.0/23
+203.8.169.0/24
+203.8.173.0/24
+203.8.184.0/24
+203.8.186.0/23
+203.8.190.0/23
+203.8.192.0/24
+203.8.197.0/24
+203.8.198.0/23
+203.8.203.0/24
+203.8.209.0/24
+203.8.210.0/23
+203.8.212.0/22
+203.8.217.0/24
+203.8.220.0/24
+203.9.32.0/24
+203.9.36.0/23
+203.9.57.0/24
+203.9.63.0/24
+203.9.65.0/24
+203.9.70.0/23
+203.9.72.0/24
+203.9.75.0/24
+203.9.76.0/23
+203.9.96.0/22
+203.9.100.0/23
+203.9.108.0/24
+203.9.158.0/24
+203.10.34.0/24
+203.10.56.0/24
+203.10.74.0/23
+203.10.84.0/22
+203.10.88.0/24
+203.10.95.0/24
+203.10.125.0/24
+203.11.70.0/24
+203.11.76.0/22
+203.11.82.0/24
+203.11.84.0/22
+203.11.100.0/22
+203.11.109.0/24
+203.11.117.0/24
+203.11.122.0/24
+203.11.126.0/24
+203.11.136.0/22
+203.11.141.0/24
+203.11.142.0/23
+203.11.180.0/22
+203.11.208.0/22
+203.12.16.0/24
+203.12.19.0/24
+203.12.24.0/24
+203.12.57.0/24
+203.12.65.0/24
+203.12.66.0/24
+203.12.70.0/23
+203.12.87.0/24
+203.12.88.0/21
+203.12.100.0/23
+203.12.103.0/24
+203.12.114.0/24
+203.12.118.0/24
+203.12.130.0/24
+203.12.137.0/24
+203.12.196.0/22
+203.12.200.0/21
+203.12.211.0/24
+203.12.219.0/24
+203.12.226.0/24
+203.12.240.0/22
+203.13.18.0/24
+203.13.24.0/24
+203.13.44.0/23
+203.13.80.0/21
+203.13.88.0/23
+203.13.92.0/22
+203.13.173.0/24
+203.13.224.0/23
+203.13.227.0/24
+203.13.233.0/24
+203.14.24.0/22
+203.14.33.0/24
+203.14.56.0/24
+203.14.61.0/24
+203.14.62.0/24
+203.14.104.0/24
+203.14.114.0/23
+203.14.118.0/24
+203.14.162.0/24
+203.14.184.0/21
+203.14.192.0/24
+203.14.194.0/23
+203.14.214.0/24
+203.14.231.0/24
+203.14.246.0/24
+203.15.0.0/20
+203.15.20.0/23
+203.15.22.0/24
+203.15.87.0/24
+203.15.88.0/23
+203.15.105.0/24
+203.15.112.0/21
+203.15.130.0/23
+203.15.149.0/24
+203.15.151.0/24
+203.15.156.0/22
+203.15.174.0/24
+203.15.227.0/24
+203.15.232.0/21
+203.15.240.0/23
+203.15.246.0/24
+203.16.10.0/24
+203.16.12.0/23
+203.16.16.0/21
+203.16.27.0/24
+203.16.38.0/24
+203.16.49.0/24
+203.16.50.0/23
+203.16.58.0/24
+203.16.133.0/24
+203.16.161.0/24
+203.16.162.0/24
+203.16.186.0/23
+203.16.228.0/24
+203.16.238.0/24
+203.16.240.0/24
+203.16.245.0/24
+203.17.2.0/24
+203.17.18.0/24
+203.17.28.0/24
+203.17.39.0/24
+203.17.56.0/24
+203.17.74.0/23
+203.17.88.0/23
+203.17.136.0/24
+203.17.164.0/24
+203.17.187.0/24
+203.17.190.0/23
+203.17.231.0/24
+203.17.233.0/24
+203.17.248.0/24
+203.17.255.0/24
+203.18.2.0/23
+203.18.4.0/24
+203.18.7.0/24
+203.18.31.0/24
+203.18.37.0/24
+203.18.48.0/23
+203.18.52.0/24
+203.18.72.0/22
+203.18.80.0/23
+203.18.87.0/24
+203.18.100.0/23
+203.18.105.0/24
+203.18.107.0/24
+203.18.110.0/24
+203.18.129.0/24
+203.18.131.0/24
+203.18.132.0/23
+203.18.144.0/24
+203.18.153.0/24
+203.18.199.0/24
+203.18.208.0/24
+203.18.211.0/24
+203.18.215.0/24
+203.19.18.0/24
+203.19.24.0/24
+203.19.30.0/24
+203.19.32.0/21
+203.19.41.0/24
+203.19.44.0/23
+203.19.46.0/24
+203.19.58.0/24
+203.19.60.0/23
+203.19.64.0/24
+203.19.68.0/24
+203.19.72.0/24
+203.19.101.0/24
+203.19.111.0/24
+203.19.131.0/24
+203.19.133.0/24
+203.19.144.0/24
+203.19.149.0/24
+203.19.156.0/24
+203.19.176.0/24
+203.19.178.0/23
+203.19.208.0/24
+203.19.228.0/22
+203.19.233.0/24
+203.19.242.0/24
+203.19.248.0/23
+203.19.255.0/24
+203.20.17.0/24
+203.20.40.0/23
+203.20.48.0/24
+203.20.61.0/24
+203.20.65.0/24
+203.20.84.0/23
+203.20.89.0/24
+203.20.106.0/23
+203.20.115.0/24
+203.20.117.0/24
+203.20.118.0/23
+203.20.122.0/24
+203.20.126.0/23
+203.20.135.0/24
+203.20.136.0/21
+203.20.150.0/24
+203.20.230.0/24
+203.20.232.0/24
+203.20.236.0/24
+203.21.0.0/23
+203.21.2.0/24
+203.21.8.0/24
+203.21.10.0/24
+203.21.18.0/24
+203.21.33.0/24
+203.21.34.0/24
+203.21.41.0/24
+203.21.44.0/24
+203.21.68.0/24
+203.21.82.0/24
+203.21.96.0/22
+203.21.124.0/24
+203.21.136.0/23
+203.21.145.0/24
+203.21.206.0/24
+203.22.24.0/24
+203.22.28.0/23
+203.22.31.0/24
+203.22.68.0/24
+203.22.76.0/24
+203.22.78.0/24
+203.22.84.0/24
+203.22.87.0/24
+203.22.92.0/22
+203.22.99.0/24
+203.22.106.0/24
+203.22.122.0/23
+203.22.131.0/24
+203.22.163.0/24
+203.22.166.0/24
+203.22.170.0/24
+203.22.176.0/21
+203.22.194.0/24
+203.22.242.0/23
+203.22.245.0/24
+203.22.246.0/24
+203.22.252.0/23
+203.23.0.0/24
+203.23.47.0/24
+203.23.61.0/24
+203.23.62.0/23
+203.23.73.0/24
+203.23.85.0/24
+203.23.92.0/22
+203.23.98.0/24
+203.23.107.0/24
+203.23.112.0/24
+203.23.130.0/24
+203.23.140.0/23
+203.23.172.0/24
+203.23.182.0/24
+203.23.186.0/23
+203.23.192.0/24
+203.23.197.0/24
+203.23.198.0/24
+203.23.204.0/22
+203.23.224.0/24
+203.23.226.0/23
+203.23.228.0/22
+203.23.249.0/24
+203.23.251.0/24
+203.24.13.0/24
+203.24.18.0/24
+203.24.27.0/24
+203.24.43.0/24
+203.24.56.0/24
+203.24.58.0/24
+203.24.67.0/24
+203.24.74.0/24
+203.24.79.0/24
+203.24.80.0/23
+203.24.84.0/23
+203.24.86.0/24
+203.24.90.0/24
+203.24.111.0/24
+203.24.112.0/24
+203.24.116.0/24
+203.24.122.0/23
+203.24.145.0/24
+203.24.152.0/23
+203.24.157.0/24
+203.24.161.0/24
+203.24.167.0/24
+203.24.186.0/23
+203.24.199.0/24
+203.24.202.0/24
+203.24.212.0/23
+203.24.217.0/24
+203.24.219.0/24
+203.24.244.0/24
+203.25.19.0/24
+203.25.20.0/23
+203.25.46.0/24
+203.25.48.0/21
+203.25.64.0/23
+203.25.91.0/24
+203.25.99.0/24
+203.25.100.0/24
+203.25.106.0/24
+203.25.131.0/24
+203.25.135.0/24
+203.25.138.0/24
+203.25.147.0/24
+203.25.153.0/24
+203.25.154.0/23
+203.25.164.0/24
+203.25.166.0/24
+203.25.174.0/23
+203.25.180.0/24
+203.25.182.0/24
+203.25.191.0/24
+203.25.199.0/24
+203.25.200.0/24
+203.25.202.0/23
+203.25.208.0/20
+203.25.229.0/24
+203.25.235.0/24
+203.25.236.0/24
+203.25.242.0/24
+203.26.12.0/24
+203.26.34.0/24
+203.26.49.0/24
+203.26.50.0/24
+203.26.55.0/24
+203.26.56.0/23
+203.26.60.0/24
+203.26.65.0/24
+203.26.68.0/24
+203.26.76.0/24
+203.26.80.0/24
+203.26.84.0/24
+203.26.97.0/24
+203.26.102.0/23
+203.26.115.0/24
+203.26.116.0/24
+203.26.129.0/24
+203.26.143.0/24
+203.26.144.0/24
+203.26.148.0/23
+203.26.154.0/24
+203.26.158.0/23
+203.26.170.0/24
+203.26.173.0/24
+203.26.176.0/24
+203.26.185.0/24
+203.26.202.0/23
+203.26.210.0/24
+203.26.214.0/24
+203.26.222.0/24
+203.26.224.0/24
+203.26.228.0/24
+203.26.232.0/24
+203.27.0.0/24
+203.27.10.0/24
+203.27.15.0/24
+203.27.16.0/24
+203.27.20.0/24
+203.27.22.0/23
+203.27.40.0/24
+203.27.45.0/24
+203.27.53.0/24
+203.27.65.0/24
+203.27.66.0/24
+203.27.81.0/24
+203.27.88.0/24
+203.27.102.0/24
+203.27.109.0/24
+203.27.117.0/24
+203.27.121.0/24
+203.27.122.0/23
+203.27.125.0/24
+203.27.200.0/24
+203.27.202.0/24
+203.27.233.0/24
+203.27.241.0/24
+203.27.250.0/24
+203.28.10.0/24
+203.28.12.0/24
+203.28.33.0/24
+203.28.34.0/23
+203.28.43.0/24
+203.28.44.0/24
+203.28.54.0/24
+203.28.56.0/24
+203.28.73.0/24
+203.28.74.0/24
+203.28.76.0/24
+203.28.86.0/24
+203.28.88.0/24
+203.28.112.0/24
+203.28.131.0/24
+203.28.136.0/24
+203.28.140.0/24
+203.28.145.0/24
+203.28.165.0/24
+203.28.169.0/24
+203.28.170.0/24
+203.28.178.0/23
+203.28.185.0/24
+203.28.187.0/24
+203.28.196.0/24
+203.28.226.0/23
+203.28.239.0/24
+203.29.2.0/24
+203.29.8.0/23
+203.29.13.0/24
+203.29.14.0/24
+203.29.28.0/24
+203.29.46.0/24
+203.29.57.0/24
+203.29.61.0/24
+203.29.63.0/24
+203.29.69.0/24
+203.29.73.0/24
+203.29.81.0/24
+203.29.90.0/24
+203.29.95.0/24
+203.29.100.0/24
+203.29.103.0/24
+203.29.112.0/24
+203.29.120.0/22
+203.29.182.0/23
+203.29.187.0/24
+203.29.189.0/24
+203.29.190.0/24
+203.29.205.0/24
+203.29.210.0/24
+203.29.217.0/24
+203.29.227.0/24
+203.29.231.0/24
+203.29.233.0/24
+203.29.234.0/24
+203.29.248.0/24
+203.29.254.0/23
+203.30.16.0/23
+203.30.25.0/24
+203.30.27.0/24
+203.30.29.0/24
+203.30.66.0/24
+203.30.81.0/24
+203.30.87.0/24
+203.30.111.0/24
+203.30.121.0/24
+203.30.123.0/24
+203.30.152.0/24
+203.30.156.0/24
+203.30.162.0/24
+203.30.173.0/24
+203.30.175.0/24
+203.30.187.0/24
+203.30.194.0/24
+203.30.217.0/24
+203.30.220.0/24
+203.30.222.0/24
+203.30.232.0/23
+203.30.235.0/24
+203.30.240.0/23
+203.30.246.0/24
+203.30.250.0/23
+203.31.45.0/24
+203.31.46.0/24
+203.31.49.0/24
+203.31.51.0/24
+203.31.54.0/23
+203.31.69.0/24
+203.31.72.0/24
+203.31.80.0/24
+203.31.85.0/24
+203.31.97.0/24
+203.31.105.0/24
+203.31.106.0/24
+203.31.108.0/23
+203.31.124.0/24
+203.31.162.0/24
+203.31.174.0/24
+203.31.177.0/24
+203.31.181.0/24
+203.31.187.0/24
+203.31.189.0/24
+203.31.204.0/24
+203.31.220.0/24
+203.31.222.0/23
+203.31.225.0/24
+203.31.229.0/24
+203.31.248.0/23
+203.31.253.0/24
+203.32.20.0/24
+203.32.48.0/23
+203.32.56.0/24
+203.32.60.0/24
+203.32.62.0/24
+203.32.68.0/23
+203.32.76.0/24
+203.32.81.0/24
+203.32.84.0/23
+203.32.95.0/24
+203.32.102.0/24
+203.32.105.0/24
+203.32.130.0/24
+203.32.133.0/24
+203.32.140.0/24
+203.32.152.0/24
+203.32.186.0/23
+203.32.192.0/24
+203.32.196.0/24
+203.32.203.0/24
+203.32.204.0/23
+203.32.212.0/24
+203.33.4.0/24
+203.33.7.0/24
+203.33.8.0/21
+203.33.21.0/24
+203.33.26.0/24
+203.33.32.0/24
+203.33.63.0/24
+203.33.64.0/24
+203.33.67.0/24
+203.33.68.0/24
+203.33.73.0/24
+203.33.79.0/24
+203.33.100.0/24
+203.33.122.0/24
+203.33.129.0/24
+203.33.131.0/24
+203.33.145.0/24
+203.33.156.0/24
+203.33.158.0/23
+203.33.174.0/24
+203.33.185.0/24
+203.33.200.0/24
+203.33.202.0/23
+203.33.204.0/24
+203.33.206.0/23
+203.33.214.0/23
+203.33.224.0/23
+203.33.226.0/24
+203.33.233.0/24
+203.33.243.0/24
+203.33.250.0/24
+203.34.4.0/24
+203.34.21.0/24
+203.34.27.0/24
+203.34.39.0/24
+203.34.48.0/23
+203.34.54.0/24
+203.34.56.0/23
+203.34.67.0/24
+203.34.69.0/24
+203.34.76.0/24
+203.34.92.0/24
+203.34.106.0/24
+203.34.113.0/24
+203.34.147.0/24
+203.34.150.0/24
+203.34.152.0/23
+203.34.161.0/24
+203.34.162.0/24
+203.34.187.0/24
+203.34.192.0/21
+203.34.204.0/22
+203.34.232.0/24
+203.34.240.0/24
+203.34.242.0/24
+203.34.245.0/24
+203.34.251.0/24
+203.55.2.0/23
+203.55.4.0/24
+203.55.10.0/24
+203.55.13.0/24
+203.55.22.0/24
+203.55.30.0/24
+203.55.93.0/24
+203.55.101.0/24
+203.55.109.0/24
+203.55.110.0/24
+203.55.116.0/23
+203.55.119.0/24
+203.55.128.0/23
+203.55.146.0/23
+203.55.192.0/24
+203.55.196.0/24
+203.55.218.0/23
+203.55.221.0/24
+203.55.224.0/24
+203.56.1.0/24
+203.56.4.0/24
+203.56.12.0/24
+203.56.24.0/24
+203.56.38.0/24
+203.56.40.0/24
+203.56.46.0/24
+203.56.48.0/21
+203.56.68.0/23
+203.56.82.0/23
+203.56.84.0/23
+203.56.95.0/24
+203.56.110.0/24
+203.56.121.0/24
+203.56.161.0/24
+203.56.169.0/24
+203.56.172.0/23
+203.56.175.0/24
+203.56.183.0/24
+203.56.185.0/24
+203.56.187.0/24
+203.56.192.0/24
+203.56.198.0/24
+203.56.201.0/24
+203.56.208.0/23
+203.56.210.0/24
+203.56.214.0/24
+203.56.216.0/24
+203.56.227.0/24
+203.56.228.0/24
+203.56.232.0/24
+203.56.240.0/24
+203.56.252.0/24
+203.56.254.0/24
+203.57.5.0/24
+203.57.6.0/24
+203.57.12.0/23
+203.57.28.0/24
+203.57.39.0/24
+203.57.46.0/24
+203.57.58.0/24
+203.57.61.0/24
+203.57.66.0/24
+203.57.69.0/24
+203.57.70.0/23
+203.57.73.0/24
+203.57.90.0/24
+203.57.101.0/24
+203.57.109.0/24
+203.57.123.0/24
+203.57.157.0/24
+203.57.200.0/24
+203.57.202.0/24
+203.57.206.0/24
+203.57.222.0/24
+203.57.224.0/20
+203.57.246.0/23
+203.57.249.0/24
+203.57.253.0/24
+203.57.254.0/23
+203.62.2.0/24
+203.62.131.0/24
+203.62.139.0/24
+203.62.161.0/24
+203.62.197.0/24
+203.62.228.0/22
+203.62.234.0/24
+203.62.246.0/24
+203.76.160.0/22
+203.76.168.0/22
+203.77.180.0/22
+203.78.48.0/20
+203.80.4.0/23
+203.80.32.0/20
+203.80.57.0/24
+203.80.132.0/22
+203.80.136.0/21
+203.81.0.0/21
+203.82.0.0/23
+203.82.16.0/21
+203.83.0.0/22
+203.83.224.0/20
+203.86.96.0/19
+203.86.254.0/23
+203.89.8.0/21
+203.89.136.0/22
+203.90.8.0/22
+203.92.0.0/22
+203.95.224.0/19
+203.99.8.0/21
+203.100.48.0/21
+203.100.63.0/24
+203.104.32.0/20
+203.105.96.0/19
+203.105.128.0/19
+203.110.208.0/20
+203.110.232.0/23
+203.110.234.0/24
+203.118.241.0/24
+203.119.113.0/24
+203.119.114.0/23
+203.119.116.0/22
+203.119.120.0/21
+203.128.224.0/21
+203.129.8.0/21
+203.130.32.0/19
+203.142.224.0/19
+203.144.96.0/19
+203.145.0.0/19
+203.148.80.0/22
+203.148.86.0/23
+203.149.92.0/22
+203.152.128.0/19
+203.153.0.0/22
+203.160.104.0/21
+203.160.129.0/24
+203.160.192.0/19
+203.161.0.0/22
+203.168.0.0/19
+203.170.58.0/23
+203.171.0.0/22
+203.174.4.0/24
+203.176.64.0/19
+203.189.0.0/23
+203.189.6.0/23
+203.189.112.0/22
+203.189.192.0/19
+203.190.249.0/24
+203.191.0.0/23
+203.193.224.0/19
+203.194.120.0/21
+203.195.64.0/19
+203.195.112.0/21
+203.196.8.0/21
+203.202.236.0/22
+203.205.64.0/19
+203.212.0.0/20
+203.215.232.0/21
+203.223.16.0/21
+210.5.56.0/21
+210.75.0.0/16
+210.77.0.0/16
+210.185.192.0/18
+210.192.96.0/19
+211.100.0.0/16
+211.154.0.0/16
+218.0.0.0/16
+218.1.0.0/16
+218.2.0.0/15
+218.4.0.0/15
+218.6.0.0/16
+218.13.0.0/16
+218.14.0.0/15
+218.16.0.0/14
+218.20.0.0/16
+218.21.0.0/17
+218.22.0.0/15
+218.30.0.0/15
+218.62.128.0/17
+218.63.0.0/16
+218.64.0.0/15
+218.66.0.0/16
+218.67.0.0/17
+218.70.0.0/15
+218.72.0.0/14
+218.76.0.0/15
+218.78.0.0/15
+218.80.0.0/14
+218.84.0.0/14
+218.88.0.0/13
+218.100.88.0/21
+218.100.96.0/19
+218.100.128.0/17
+218.185.240.0/21
+219.128.0.0/12
+219.144.0.0/14
+219.148.0.0/16
+219.149.0.0/17
+219.149.128.0/18
+219.149.192.0/18
+219.150.0.0/19
+219.150.32.0/19
+219.150.64.0/19
+219.150.96.0/20
+219.150.112.0/20
+219.150.128.0/17
+219.151.0.0/19
+219.151.32.0/19
+219.151.64.0/18
+219.151.128.0/17
+219.152.0.0/15
+219.159.64.0/18
+219.159.128.0/17
+219.236.0.0/15
+220.160.0.0/11
+220.242.0.0/15
+220.247.136.0/21
+221.224.0.0/13
+221.232.0.0/14
+221.236.0.0/15
+221.238.0.0/16
+221.239.0.0/17
+221.239.128.0/17
+222.64.0.0/13
+222.72.0.0/15
+222.74.0.0/16
+222.75.0.0/16
+222.76.0.0/14
+222.80.0.0/15
+222.82.0.0/16
+222.83.0.0/17
+222.83.128.0/17
+222.84.0.0/16
+222.85.0.0/17
+222.85.128.0/17
+222.86.0.0/15
+222.88.0.0/15
+222.90.0.0/15
+222.92.0.0/14
+222.168.0.0/15
+222.170.0.0/15
+222.172.0.0/17
+222.172.128.0/17
+222.173.0.0/16
+222.174.0.0/15
+222.176.0.0/13
+222.184.0.0/13
+222.208.0.0/13
+222.216.0.0/15
+222.218.0.0/16
+222.219.0.0/16
+222.220.0.0/15
+222.222.0.0/15
+222.240.0.0/13
+223.8.0.0/13
+223.144.0.0/12
+223.198.0.0/15
+223.214.0.0/15
+223.220.0.0/15
+223.240.0.0/13
+223.255.252.0/23
diff --git a/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/cmcc.txt b/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/cmcc.txt
new file mode 100644
index 0000000000..d3ee81f340
--- /dev/null
+++ b/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/cmcc.txt
@@ -0,0 +1,55 @@
+36.128.0.0/10
+39.128.0.0/10
+43.239.172.0/22
+43.251.244.0/22
+45.121.68.0/22
+45.121.72.0/22
+45.121.172.0/22
+45.121.176.0/22
+45.122.96.0/21
+45.123.152.0/22
+45.124.36.0/22
+45.125.24.0/22
+45.253.72.0/22
+61.14.240.0/22
+61.14.244.0/22
+103.20.112.0/22
+103.21.176.0/22
+103.35.104.0/22
+103.61.156.0/22
+103.61.160.0/22
+103.62.24.0/22
+103.62.204.0/22
+103.62.208.0/22
+103.192.0.0/22
+103.192.144.0/22
+103.193.140.0/22
+103.203.164.0/22
+103.205.108.0/22
+103.205.116.0/22
+103.222.196.0/22
+111.0.0.0/10
+112.0.0.0/10
+117.128.0.0/10
+120.192.0.0/10
+175.176.188.0/22
+183.192.0.0/10
+211.103.0.0/17
+211.136.0.0/14
+211.140.0.0/15
+211.142.0.0/17
+211.142.128.0/17
+211.143.0.0/16
+218.200.0.0/14
+218.204.0.0/15
+218.206.0.0/15
+221.130.0.0/15
+221.176.0.0/13
+223.64.0.0/11
+223.96.0.0/12
+223.112.0.0/14
+223.116.0.0/15
+223.120.128.0/17
+223.121.128.0/17
+223.122.0.0/15
+223.124.0.0/14
diff --git a/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/crtc.txt b/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/crtc.txt
new file mode 100644
index 0000000000..600bf2b50d
--- /dev/null
+++ b/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/crtc.txt
@@ -0,0 +1,16 @@
+36.192.0.0/11
+43.247.240.0/22
+61.232.0.0/14
+61.236.0.0/15
+101.144.0.0/12
+103.3.128.0/22
+110.96.0.0/11
+110.192.0.0/11
+115.180.0.0/15
+118.204.0.0/14
+120.90.0.0/15
+122.64.0.0/11
+123.64.0.0/11
+211.98.0.0/16
+221.172.0.0/14
+222.32.0.0/11
diff --git a/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/genipset.sh b/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/genipset.sh
new file mode 100755
index 0000000000..cbc2cfcf10
--- /dev/null
+++ b/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/genipset.sh
@@ -0,0 +1,7 @@
+ipset -N $1 hash:net 2>/dev/null
+
+echo "create $1 hash:net family inet hashsize 1024 maxelem 65536" > /tmp/mwan3.ipset
+cat $2 | sed -e "s/^/add $1 /" >> /tmp/mwan3.ipset
+ipset -! flush $1
+ipset -! restore < /tmp/mwan3.ipset 2>/dev/null
+rm -f /tmp/mwan3.ipset
diff --git a/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/gfw.txt b/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/gfw.txt
new file mode 100644
index 0000000000..073d0aa7a3
--- /dev/null
+++ b/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/gfw.txt
@@ -0,0 +1,5205 @@
+030buy.com
+0rz.tw
+10.tt
+1000giri.net
+100ke.org
+10conditionsoflove.com
+10musume.com
+123rf.com
+12bet.com
+12vpn.com
+12vpn.net
+138.com
+141jj.com
+141tube.com
+1688.com.au
+173ng.com
+177pic.info
+17t17p.com
+18board.com
+18board.info
+18onlygirls.com
+18p2p.com
+18virginsex.com
+1949er.org
+1984bbs.com
+1984bbs.org
+1989report.hkja.org.hk
+1991way.com
+1998cdp.org
+1bao.org
+1dumb.com
+1e100.net
+1eew.com
+1mobile.com
+1pondo.tv
+2-hand.info
+2008xianzhang.info
+2017.hk
+21pron.com
+21sextury.com
+228.net.tw
+233abc.com
+24hrs.ca
+24smile.org
+25u.com
+2lipstube.com
+2shared.com
+2waky.com
+3-a.net
+30boxes.com
+315lz.com
+32red.com
+36rain.com
+3a5a.com
+3arabtv.com
+3boys2girls.com
+3d-game.com
+3proxy.ru
+3ren.ca
+3tui.net
+466453.com
+4bluestones.biz
+4chan.com
+4dq.com
+4everproxy.com
+4irc.com
+4mydomain.com
+4pu.com
+4rbtv.com
+4shared.com
+51.ca
+51jav.org
+51luoben.com
+5278.cc
+56cun04.jigsy.com
+5aimiku.com
+5i01.com
+5isotoi5.org
+5maodang.com
+63i.com
+64museum.org
+64tianwang.com
+64wiki.com
+66.ca
+666kb.com
+6park.com
+6parker.com
+7capture.com
+7cow.com
+8-d.com
+85cc.net
+85cc.us
+85st.com
+881903.com
+888.com
+888poker.com
+89-64.org
+89.64.charter.constitutionalism.solutions
+8news.com.tw
+8z1.net
+9001700.com
+91porn.com
+91vps.club
+92ccav.com
+991.com
+99btgc01.com
+99cn.info
+9bis.com
+9bis.net
+a-normal-day.com
+a248.e.akamai.net
+a5.com.ru
+aamacau.com
+abc.com
+abc.net.au
+abc.pp.ru
+abc.xyz
+abchinese.com
+abclite.net
+abematv.akamaized.net
+ablwang.com
+aboluowang.com
+aboutgfw.com
+abs.edu
+ac.jiruan.net
+accim.org
+aceros-de-hispania.com
+acevpn.com
+acg18.me
+acgkj.com
+acmedia365.com
+acmetoy.com
+acnw.com.au
+actfortibet.org
+actimes.com.au
+activpn.com
+aculo.us
+adcex.com
+addictedtocoffee.de
+admin.recaptcha.net
+admob.com
+adpl.org.hk
+ads-twitter.com
+adsense.com
+adult-sex-games.com
+adultfriendfinder.com
+advanscene.com
+advertfan.com
+ae.hao123.com
+ae.org
+aenhancers.com
+af.mil
+afantibbs.com
+aftygh.gov.tw
+agnesb.fr
+agoogleaday.com
+agro.hk
+ai-kan.net
+ai-wen.net
+ai.google
+aide.gov.tw
+aiph.net
+airasia.com
+airconsole.com
+airvpn.org
+aisex.com
+aiss.anws.gov.tw
+ait.org.tw
+aiweiwei.com
+aiweiweiblog.com
+akiba-online.com
+akiba-web.com
+akow.org
+al-islam.com
+al-qimmah.net
+alabout.com
+alanhou.com
+alarab.qa
+alasbarricadas.org
+alexlur.org
+alforattv.net
+alhayat.com
+alicejapan.co.jp
+aliengu.com
+alkasir.com
+allcoin.com
+allconnected.co
+alldrawnsex.com
+allervpn.com
+allfinegirls.com
+allgirlmassage.com
+allgirlsallowed.org
+allgravure.com
+alliance.org.hk
+allinfa.com
+alljackpotscasino.com
+allmovie.com
+allowed.org
+almasdarnews.com
+almostmy.com
+alphaporno.com
+alternate-tools.com
+altrec.com
+alvinalexander.com
+alwaysdata.com
+alwaysdata.net
+alwaysvpn.com
+am730.com.hk
+amazon.co.jp
+ameblo.jp
+americangreencard.com
+americanunfinished.com
+amiblockedornot.com
+amigobbs.net
+amitabhafoundation.us
+amnesty.org
+amnesty.tw
+amnestyusa.org
+amnyemachen.org
+amoiist.com
+ampproject.org
+amtb-taipei.org
+anchorfree.com
+ancsconf.org
+andfaraway.net
+android-x86.org
+android.com
+androidify.com
+andygod.com
+angularjs.org
+animecrazy.net
+animeshippuuden.com
+aniscartujo.com
+anobii.com
+anontext.com
+anonymise.us
+anonymitynetwork.com
+anonymizer.com
+anpopo.com
+answering-islam.org
+anthonycalzadilla.com
+anti1984.com
+antichristendom.com
+antiwave.net
+anyporn.com
+anysex.com
+aobo.com.au
+aofriend.com
+aojiao.org
+aolchannels.aol.com
+aomiwang.com
+apartmentratings.com
+apartments.com
+apetube.com
+api-secure.recaptcha.net
+api-verify.recaptcha.net
+api.ai
+api.dropboxapi.com
+api.linksalpha.com
+api.proxlet.com
+api.pureapk.com
+api.recaptcha.net
+apiary.io
+apidocs.linksalpha.com
+apigee.com
+apk-dl.com
+apkmirror.com
+apkplz.com
+apkpure.com
+aplusvpn.com
+app.box.com
+app.heywire.com
+app.smartmailcloud.com
+app.tutanota.com
+appledaily.com
+appshopper.com
+appsocks.net
+appspot.com
+appsto.re
+aptoide.com
+ar.hao123.com
+archive.fo
+archive.is
+archive.li
+archive.org
+archive.today
+archives.gov
+arctosia.com
+areca-backup.org
+arena.taipei
+arethusa.su
+arlingtoncemetery.mil
+army.mil
+art4tibet1998.org
+arte.gov.tw
+artofpeacefoundation.org
+artsy.net
+asacp.org
+asahichinese.com
+asg.to
+asia-gaming.com
+asiaharvest.org
+asianews.it
+asiansexdiary.com
+asianspiss.com
+asianwomensfilm.de
+asiatgp.com
+asiatoday.us
+askstudent.com
+askynz.net
+assembla.com
+assimp.org
+astrill.com
+atc.org.au
+atchinese.com
+atdmt.com
+atgfw.org
+athenaeizou.com
+atlaspost.com
+atnext.com
+authorizeddns.net
+authorizeddns.org
+authorizeddns.us
+autodraw.com
+av-e-body.com
+av.com
+av.movie
+av.nightlife141.com
+avaaz.org
+avbody.tv
+avcity.tv
+avcool.com
+avdb.in
+avdb.tv
+avfantasy.com
+avgle.com
+avidemux.org
+avmo.pw
+avmoo.com
+avmoo.net
+avmoo.pw
+avoision.com
+avyahoo.com
+axureformac.com
+azerbaycan.tv
+azerimix.com
+azubu.tv
+b0ne.com
+babynet.com.hk
+backchina.com
+backtotiananmen.com
+badiucao.com
+badjojo.com
+badoo.com
+baidu.jp
+baijie.org
+bailandaily.com
+baixing.me
+bakgeekhome.tk
+banana-vpn.com
+bandwagonhost.com
+bangbrosnetwork.com
+bangchen.net
+bangyoulater.com
+bankmobilevibe.com
+bannedbook.org
+bannednews.org
+banorte.com
+baramangaonline.com
+barenakedislam.com
+barnabu.co.uk
+bartvpn.com
+bash-hackers.org
+bastillepost.com
+bayvoice.net
+bb-chat.tv
+bbc.co.uk
+bbc.com
+bbc.in
+bbcchinese.com
+bbchat.tv
+bbci.co.uk
+bbg.gov
+bbnradio.org
+bbs-tw.com
+bbs.brockbbs.com
+bbs.ecstart.com
+bbs.hasi.wang
+bbs.huasing.org
+bbs.junglobal.net
+bbs.kimy.com.tw
+bbs.morbell.com
+bbs.mychat.to
+bbs.netbig.com
+bbs.ozchinese.com
+bbs.qmzdd.com
+bbs.skykiwi.com
+bbs.sou-tong.org
+bbs.tuitui.info
+bbsfeed.com
+bbsland.com
+bbsmo.com
+bbsone.com
+bbtoystore.com
+bcast.co.nz
+bcchinese.net
+bcex.ca
+bcmorning.com
+bdsmvideos.net
+beaconevents.com
+bebo.com
+beeg.com
+beevpn.com
+behance.net
+behindkink.com
+beijing1989.com
+beijingspring.com
+beijingzx.org
+belamionline.com
+bell.wiki
+bemywife.cc
+beric.me
+berlintwitterwall.com
+berm.co.nz
+bestforchina.org
+bestgore.com
+bestpornstardb.com
+bestvpn.com
+bestvpnanalysis.com
+bestvpnserver.com
+bestvpnservice.com
+bestvpnusa.com
+bet365.com
+betfair.com
+betternet.co
+bettervpn.com
+bettween.com
+betvictor.com
+bewww.net
+beyondfirewall.com
+bfnn.org
+bfsh.hk
+bgvpn.com
+bianlei.com
+biantailajiao.com
+biantailajiao.in
+biblesforamerica.org
+bibox.com
+bic2011.org
+big.one
+bigfools.com
+bigjapanesesex.com
+bigmoney.biz
+bignews.org
+bigsound.org
+biliworld.com
+binance.com
+binux.me
+bipic.net
+bird.so
+bit-z.com
+bit.do
+bit.ly
+bitcointalk.org
+bitcoinworld.com
+bitfinex.com
+bitinka.com.ar
+bitmex.com
+bitshare.com
+bitsnoop.com
+bitvise.com
+bizhat.com
+bjnewlife.org
+bjs.org
+bjzc.org
+bl-doujinsouko.com
+blacklogic.com
+blackvpn.com
+blewpass.com
+blinkx.com
+blinw.com
+blip.tv
+blockcn.com
+blockless.com
+blog.calibre-ebook.com
+blog.cnyes.com
+blog.de
+blog.exblog.co.jp
+blog.excite.co.jp
+blog.expofutures.com
+blog.fizzik.com
+blog.foolsmountain.com
+blog.fuckgfw233.org
+blog.google
+blog.inoreader.com
+blog.jackjia.com
+blog.jp
+blog.kangye.org
+blog.lester850.info
+blog.martinoei.com
+blog.ontrac.com
+blog.pathtosharepoint.com
+blog.pentalogic.net
+blog.sina.com.tw
+blog.sogoo.org
+blog.soylent.com
+blog.taragana.com
+blog.tiney.com
+blog.xuite.net
+blog.youthwant.com.tw
+blogblog.com
+blogcatalog.com
+blogcity.me
+blogdns.org
+blogger.com
+blogimg.jp
+bloglines.com
+bloglovin.com
+blogs.tampabay.com
+blogs.yahoo.co.jp
+blogspot.com
+blogspot.hk
+blogspot.jp
+blogspot.tw
+blogtd.net
+blogtd.org
+bloodshed.net
+bloomberg.cn
+bloomberg.com
+bloomberg.de
+bloombergview.com
+bloomfortune.com
+blueangellive.com
+bmfinn.com
+bnews.co
+bnrmetal.com
+boardreader.com
+bod.asia
+bodog88.com
+bolehvpn.net
+bolin.netfirms.com
+bonbonme.com
+bonbonsex.com
+bonfoundation.org
+bongacams.com
+boobstagram.com
+book.com.tw
+book.zi5.me
+bookepub.com
+books.com.tw
+booktopia.com.au
+boomssr.com
+bot.nu
+botanwang.com
+bowenpress.com
+boxpn.com
+boxun.com
+boxun.tv
+boxunblog.com
+boxunclub.com
+boyangu.com
+boyfriendtv.com
+boysfood.com
+boysmaster.com
+br.hao123.com
+br.st
+brandonhutchinson.com
+braumeister.org
+bravotube.net
+brazzers.com
+break.com
+breakgfw.com
+breaking911.com
+breakingtweets.com
+breakwall.net
+brizzly.com
+brkmd.com
+broadbook.com
+broadpressinc.com
+brucewang.net
+brutaltgp.com
+bt2mag.com
+bt95.com
+btaia.com
+btbtav.com
+btcbank.bank
+btctrade.im
+btdigg.org
+btku.me
+btku.org
+btspread.com
+btsynckeys.com
+budaedu.org
+buddhistchannel.tv
+buffered.com
+bullog.org
+bullogger.com
+bunbunhk.com
+busayari.com
+businessinsider.com
+businessweek.com
+busytrade.com
+buugaa.com
+buzzhand.com
+buzzhand.net
+buzzorange.com
+bvpn.com
+bwh1.net
+bwsj.hk
+bx.in.th
+bx.tl
+bynet.co.il
+c-est-simple.com
+c-spanvideo.org
+c100tibet.org
+c1522.mooo.com
+c2cx.com
+cablegatesearch.net
+cachinese.com
+cacnw.com
+cactusvpn.com
+cafepress.com
+cahr.org.tw
+calebelston.com
+calgarychinese.ca
+calgarychinese.com
+calgarychinese.net
+cam4.com
+cam4.jp
+cam4.sg
+camfrog.com
+cams.com
+cams.org.sg
+canadameet.com
+canalporno.com
+canyu.org
+cao.im
+caobian.info
+caochangqing.com
+cap.org.hk
+carabinasypistolas.com
+cardinalkungfoundation.org
+carfax.com
+cari.com.my
+caribbeancom.com
+carmotorshow.com
+cartoonmovement.com
+casadeltibetbcn.org
+casatibet.org.mx
+casino.williamhill.com
+casinobellini.com
+casinoking.com
+casinoriva.com
+castbox.fm
+catch22.net
+catchgod.com
+catfightpayperview.xxx
+catholic.org.hk
+catholic.org.tw
+cathvoice.org.tw
+cattt.com
+cbc.ca
+cbs.ntu.edu.tw
+cbtc.org.hk
+cccat.cc
+cccat.co
+ccdtr.org
+cchere.com
+ccim.org
+cclife.ca
+cclife.org
+cclifefl.org
+ccthere.com
+cctmweb.net
+ccue.ca
+ccue.com
+ccvoice.ca
+ccw.org.tw
+cdbook.org
+cdcparty.com
+cdef.org
+cdig.info
+cdjp.org
+cdn-images.mailchimp.com
+cdn.assets.lfpcontent.com
+cdn.helixstudios.net
+cdn.printfriendly.com
+cdn.seatguru.com
+cdn.softlayer.net
+cdn.v2ex.com
+cdn1.lp.saboom.com
+cdnews.com.tw
+cdninstagram.com
+cdp1989.org
+cdp1998.org
+cdp2006.org
+cdpa.url.tw
+cdpeu.org
+cdpusa.org
+cdpweb.org
+cdpwu.org
+cdw.com
+cecc.gov
+cellulo.info
+cenews.eu
+centauro.com.br
+centerforhumanreprod.com
+centralnation.com
+centurys.net
+certificate-transparency.org
+certificate.revocationcheck.com
+cfhks.org.hk
+cfos.de
+cftfc.com
+cgdepot.org
+cgst.edu
+ch.shvoong.com
+change.org
+changeip.name
+changeip.net
+changeip.org
+changp.com
+changsa.net
+chaoex.com
+chapm25.com
+chatnook.com
+chaturbate.com
+chengmingmag.com
+chenguangcheng.com
+chenpokong.com
+chenpokong.net
+chenshan20042005.wordpress.com
+cherrysave.com
+chhongbi.org
+chicagoncmtv.com
+china-mmm.jp.net
+china-mmm.net
+china-mmm.sa.com
+china-review.com.ua
+china-week.com
+china.hket.com
+china101.com
+china18.org
+china21.com
+china21.org
+china5000.us
+chinaaffairs.org
+chinaaid.me
+chinaaid.net
+chinaaid.org
+chinaaid.us
+chinachange.org
+chinachannel.hk
+chinacitynews.be
+chinacomments.org
+chinadialogue.net
+chinadigitaltimes.net
+chinaelections.org
+chinaeweekly.com
+chinafreepress.org
+chinagate.com
+chinageeks.org
+chinagfw.org
+chinagonet.com
+chinagreenparty.org
+chinahorizon.org
+chinahush.com
+chinainperspective.com
+chinainterimgov.org
+chinalaborwatch.org
+chinalawandpolicy.com
+chinalawtranslate.com
+chinamule.com
+chinamz.org
+chinapress.com.my
+chinarightsia.org
+chinasocialdemocraticparty.com
+chinasoul.org
+chinasucks.net
+chinatopsex.com
+chinatown.com.au
+chinatweeps.com
+chinaview.wordpress.com
+chinaway.org
+chinaworker.info
+chinayouth.org.hk
+chinayuanmin.org
+chinaz.com
+chinese-hermit.net
+chinese-leaders.org
+chinese-memorial.org
+chinese.donga.com
+chinese.engadget.com
+chinese.irib.ir
+chinese.soifind.com
+chinesedaily.com
+chinesedailynews.com
+chinesedemocracy.com
+chinesegay.org
+chinesen.de
+chinesepen.org
+chineseupress.com
+chingcheong.com
+chinman.net
+chithu.org
+chn.chosun.com
+chobit.cc
+chrdnet.com
+christianfreedom.org
+christianstudy.com
+christiantimes.org.hk
+chrlawyers.hk
+chrome.com
+chromecast.com
+chromeexperiments.com
+chromercise.com
+chromestatus.com
+chromium.org
+chuang-yen.org
+chubold.com
+chubun.com
+chuizi.net
+chukuang.gov.tw
+chushigangdrug.ch
+cienen.com
+cineastentreff.de
+cipfg.org
+circlethebayfortibet.org
+cirosantilli.com
+citizencn.com
+citizenlab.org
+citizenscommission.hk
+citizensradio.org
+city365.ca
+city9x.com
+citypopulation.de
+civicparty.hk
+civildisobediencemovement.org
+civilhrfront.org
+civiliangunner.com
+civilmedia.tw
+ck101.com
+cl.d0z.net
+classicalguitarblog.net
+clb.org.hk
+cldr.unicode.org
+cleansite.biz
+cleansite.info
+cleansite.us
+clearharmony.net
+clearsurance.com
+clearwisdom.net
+clementine-player.org
+clientservices.googleapis.com
+cling.omy.sg
+clinica-tibet.ru
+clipfish.de
+cloakpoint.com
+cloud.mail.ru
+club1069.com
+cmcn.org
+cmi.org.tw
+cmp.hku.hk
+cms.gov
+cmule.com
+cmule.org
+cmx.im
+cn-proxy.com
+cn.calameo.com
+cn.dayabook.com
+cn.fmnnow.com
+cn.freeones.com
+cn.gravatar.com
+cn.ibtimes.com
+cn.nytstyle.com
+cn.sandscotaicentral.com
+cn.shafaqna.com
+cn.thegay.com
+cn.uncyclopedia.wikia.com
+cn.uptodown.com
+cn.v2ex.com
+cn.voa.mobi
+cn2.streetvoice.com
+cn6.eu
+cna.com.tw
+cnabc.com
+cnbbnews.wordpress.com
+cnd.org
+cnex.org.cn
+cnineu.com
+cnpolitics.org
+cnproxy.com
+co.ng.mil
+coat.co.jp
+cochina.co
+cochina.org
+codeshare.io
+codeskulptor.org
+coin2co.in
+coinegg.com
+coinex.com
+coingi.com
+coinrail.co.kr
+cointobe.com
+coinut.com
+collateralmurder.com
+collateralmurder.org
+com.google
+comefromchina.com
+comic-mega.me
+commandarms.com
+commentshk.com
+communistcrimes.org
+community.windy.com
+communitychoicecu.com
+compileheart.com
+compress.to
+connect.facebook.net
+connectivitycheck.gstatic.com
+conoha.jp
+contactmagazine.net
+contests.twilio.com
+convio.net
+coobay.com
+coolaler.com
+coolder.com
+coolloud.org.tw
+coolncute.com
+coolstuffinc.com
+corumcollege.com
+cos-moe.com
+cosmic.monar.ch
+cosplayjav.pl
+costco.com
+cotweet.com
+coursehero.com
+cpj.org
+cq99.us
+crackle.com
+crazys.cc
+crazyshit.com
+crchina.org
+crd-net.org
+creaders.net
+creadersnet.com
+creativelab5.com
+crisisresponse.google
+cristyli.com
+crocotube.com
+cromotc.nat.gov.tw
+crossfire.co.kr
+crossthewall.net
+crossvpn.net
+crrev.com
+crucial.com
+csdparty.com
+csi.gstatic.com
+css.pixnet.in
+csuchen.de
+csw.org.uk
+ct.org.tw
+ctao.org
+ctfriend.net
+ctitv.com.tw
+cts.com.tw
+cuihua.org
+cuiweiping.net
+culture.tw
+cumlouder.com
+curvefish.com
+cusu.hk
+cutscenes.net
+cw.com.tw
+cwb.gov.tw
+cyberghost.natado.com
+cyberghostvpn.com
+cycab.gov.tw
+cynscribe.com
+cytode.us
+d-fukyu.com
+d100.net
+d1b183sg0nvnuh.cloudfront.net
+d1c37gjwa26taa.cloudfront.net
+d2bay.com
+d2pass.com
+d3c33hcgiwev3.cloudfront.net
+d3rhr7kgmtrq1v.cloudfront.net
+dabr.co.uk
+dabr.eu
+dabr.me
+dabr.mobi
+dadazim.com
+dadi360.com
+dafabet.com
+dafagood.com
+dafahao.com
+dafoh.org
+daftporn.com
+dagelijksestandaard.nl
+daidostup.ru
+dailidaili.com
+dailymotion.com
+daiphapinfo.net
+dajiyuan.com
+dajiyuan.de
+dajiyuan.eu
+dajusha.baywords.com
+dalailama-archives.org
+dalailama.com
+dalailama.mn
+dalailama.ru
+dalailama.usc.edu
+dalailama80.org
+dalailamacenter.org
+dalailamafellows.org
+dalailamafilm.com
+dalailamafoundation.org
+dalailamahindi.com
+dalailamainaustralia.org
+dalailamajapanese.com
+dalailamaprotesters.info
+dalailamaquotes.org
+dalailamatrust.org
+dalailamavisit.org.nz
+dalailamaworld.com
+dalianmeng.org
+daliulian.org
+danbooru.donmai.us
+danke4china.net
+danwei.org
+daodu14.jigsy.com
+daolan.net
+daozhongxing.org
+darktech.org
+darktoy.net
+darpa.mil
+dastrassi.org
+data-vocabulary.org
+data.flurry.com
+data.gov.tw
+david-kilgour.com
+dawangidc.com
+daxa.cn
+db.tt
+dbnsa.gov.tw
+dcard.tw
+dcmilitary.com
+ddc.com.tw
+ddhw.info
+ddns.info
+ddns.me.uk
+ddns.mobi
+ddns.ms
+ddns.name
+ddns.us
+de-sci.org
+deaftone.com
+debug.com
+deck.ly
+decodet.co
+deepmind.com
+deezer.com
+definebabe.com
+deja.com
+delcamp.net
+demo.opera-mini.net
+democrats.org
+depositphotos.com
+derekhsu.homeip.net
+desc.se
+design.google
+desipro.de
+dessci.com
+destroy-china.jp
+deutsche-welle.de
+developers.box.net
+devio.us
+devpn.com
+df.gov.tw
+dfas.mil
+dfn.org
+dharamsalanet.com
+dharmakara.net
+dhcp.biz
+diaoyuislands.org
+dictionary.goo.ne.jp
+difangwenge.org
+digisfera.com
+digitalnomadsproject.org
+diigo.com
+dilber.se
+dingchin.com.tw
+dipity.com
+directcreative.com
+discoins.com
+discordapp.com
+discordapp.net
+discuss.com.hk
+discuss4u.com
+dish.com
+disp.cc
+disqus.com
+dit-inc.us
+dizhidizhi.com
+dizhuzhishang.com
+djangosnippets.org
+djorz.com
+dl-laby.jp
+dl.box.net
+dl.google.com
+dlsite.com
+dlyoutube.com
+dm530.net
+dmcdn.net
+dmm.co.jp
+dns-dns.com
+dns-stuff.com
+dns04.com
+dns05.com
+dns1.us
+dns2.us
+dns2go.com
+dnscrypt.org
+dnset.com
+dnsrd.com
+dnssec.net
+dnvod.tv
+doctorvoice.org
+dojin.com
+dok-forum.net
+dolc.de
+dolf.org.hk
+dollf.com
+domain.club.tw
+domainhelp.search.com
+domains.google
+domaintoday.com.au
+dongtaiwang.com
+dongtaiwang.net
+dongyangjing.com
+dontfilter.us
+dontmovetochina.com
+dorjeshugden.com
+dotplane.com
+dotsub.com
+dotvpn.com
+doub.io
+dougscripts.com
+douhokanko.net
+doujincafe.com
+dowei.org
+download.aircrack-ng.org
+download.cnet.com
+download.ithome.com.tw
+download.syniumsoftware.com
+dphk.org
+dpp.org.tw
+dpr.info
+dragonex.io
+dragonsprings.org
+dreamamateurs.com
+drepung.org
+drgan.net
+drmingxia.org
+dropbooks.tv
+dropbox.com
+dropboxusercontent.com
+drsunacademy.com
+drtuber.com
+dscn.info
+dsmtp.com
+dstk.dk
+dtdns.net
+dtiblog.com
+dtic.mil
+dtwang.org
+duanzhihu.com
+duck.com
+duckdns.org
+duckduckgo-owned-server.yahoo.net
+duckduckgo.com
+duckmylife.com
+duga.jp
+duihua.org
+duihuahrjournal.org
+dumb1.com
+dunyabulteni.net
+duoweitimes.com
+duping.net
+duplicati.com
+dupola.com
+dupola.net
+dushi.ca
+dvdpac.com
+dvorak.org
+dw-world.com
+dw-world.de
+dw.com
+dw.de
+dwnews.com
+dwnews.net
+dynamic-dns.net
+dynamicdns.biz
+dynamicdns.co.uk
+dynamicdns.me.uk
+dynamicdns.org.uk
+dynawebinc.com
+dyndns-ip.com
+dyndns-pics.com
+dyndns.org
+dyndns.pro
+dynssl.com
+dynu.com
+dynu.net
+dzze.com
+e-classical.com.tw
+e-gold.com
+e-hentai.org
+e-hentaidb.com
+e-info.org.tw
+e123.hk
+earlytibet.com
+earthcam.com
+earthvpn.com
+eastcoast-nsa.gov.tw
+eastern-ark.com
+easternlightning.org
+eastturkestan.com
+eastturkistan-gov.org
+eastturkistancc.org
+eastturkistangovernmentinexile.us
+easyca.ca
+easypic.com
+ebony-beauty.com
+ebook.hyread.com.tw
+ebookbrowse.com
+ebookee.com
+ebtcbank.com
+ecfa.org.tw
+echofon.com
+ecimg.tw
+ecministry.net
+economist.com
+edgecastcdn.net
+edicypages.com
+edmontonchina.cn
+edmontonservice.com
+edns.biz
+edoors.com
+edubridge.com
+edupro.org
+eesti.ee
+eevpn.com
+efcc.org.hk
+effers.com
+efksoft.com
+efukt.com
+eic-av.com
+eireinikotaerukai.com
+eisbb.com
+eksisozluk.com
+electionsmeter.com
+elgoog.im
+elpais.com
+eltondisney.com
+embr.in
+emilylau.org.hk
+empfil.com
+emule-ed2k.com
+emulefans.com
+emuparadise.me
+en.favotter.net
+en.hao123.com
+enanyang.my
+enewstree.com
+enfal.de
+engagedaily.org
+englishforeveryone.org
+englishfromengland.co.uk
+englishpen.org
+enlighten.org.tw
+entermap.com
+entnt.com
+environment.google
+epa.gov.tw
+epac.to
+episcopalchurch.org
+epochhk.com
+epochtimes-bg.com
+epochtimes-romania.com
+epochtimes.co.il
+epochtimes.co.kr
+epochtimes.com
+epochtimes.cz
+epochtimes.de
+epochtimes.fr
+epochtimes.ie
+epochtimes.it
+epochtimes.jp
+epochtimes.ru
+epochtimes.se
+epochtimestr.com
+epochweek.com
+epochweekly.com
+eporner.com
+equinenow.com
+erabaru.net
+eracom.com.tw
+eraysoft.com.tr
+erepublik.com
+erights.net
+eriversoft.com
+erktv.com
+ernestmandel.org
+erodaizensyu.com
+erodoujinlog.com
+erodoujinworld.com
+eromanga-kingdom.com
+eromangadouzin.com
+eromon.net
+eroprofile.com
+eroticsaloon.net
+erv-nsa.gov.tw
+eslite.com
+esmtp.biz
+esurance.com
+etaa.org.au
+etadult.com
+etaiwannews.com
+etherdelta.com
+etizer.org
+etokki.com
+etools.ncol.com
+etowns.net
+etowns.org
+etvonline.hk
+eu.org
+eucasino.com
+eulam.com
+eurekavpt.com
+evchk.wikia.com
+evschool.net
+exblog.jp
+exchristian.hk
+exmo.com
+exmormon.org
+expatshield.com
+expecthim.com
+expekt.com
+experts-univers.com
+exploader.net
+expressvpn.com
+exrates.me
+extmatrix.com
+extremetube.com
+exx.com
+eyevio.jp
+eyny.com
+ezpeer.com
+ezua.com
+fa.gov.tw
+facebook.br
+facebook.com
+facebook.design
+facebook.hu
+facebook.in
+facebook.nl
+facebook.se
+facebookquotes4u.com
+faceless.me
+facesofnyfw.com
+facesoftibetanselfimmolators.info
+fail.hk
+faith100.org
+faithfuleye.com
+faiththedog.info
+fakku.net
+falsefire.com
+falun-co.org
+falun-ny.net
+falun.caltech.edu
+falunart.org
+falunasia.info
+falunau.org
+falunaz.net
+falundafa-dc.org
+falundafa-florida.org
+falundafa-nc.org
+falundafa-pa.net
+falundafa-sacramento.org
+falundafa.org
+falundafaindia.org
+falundafamuseum.org
+falungong.club
+falungong.de
+falungong.org.uk
+falunhr.org
+faluninfo.de
+faluninfo.net
+falunpilipinas.net
+falunworld.net
+familyfed.org
+famunion.com
+fan-qiang.com
+fangbinxing.com
+fangeming.com
+fangeqiang.com
+fanglizhi.info
+fangmincn.org
+fangong.forums-free.com
+fangong.org
+fangongheike.com
+fanhaodang.com
+fanqiang.tk
+fanqianghou.com
+fanqiangyakexi.net
+fanqiangzhe.com
+fanswong.com
+fanyue.info
+fapdu.com
+faproxy.com
+faqserv.com
+fartit.com
+farwestchina.com
+fast.wistia.com
+fastpic.ru
+fastssh.com
+faststone.org
+fatbtc.com
+favstar.fm
+fawanghuihui.org
+fb.com
+fb.me
+fbaddins.com
+fbcdn.net
+fbsbx.com
+fbworkmail.com
+fc2.com
+fc2blog.net
+fc2china.com
+fc2cn.com
+fda.gov.tw
+fdc64.de
+fdc64.org
+fdc89.jp
+feedburner.com
+feeds.fileforum.com
+feelssh.com
+feer.com
+feifeiss.com
+feitian-california.org
+feitianacademy.org
+feministteacher.com
+fengzhenghu.com
+fengzhenghu.net
+fevernet.com
+ff.im
+fffff.at
+fflick.com
+ffvpn.com
+fgmtv.net
+fgmtv.org
+fhreports.net
+figprayer.com
+fileflyer.com
+files2me.com
+filesor.com
+fillthesquare.org
+filmingfortibet.org
+filthdump.com
+financetwitter.com
+finchvpn.com
+findmespot.com
+findyoutube.com
+findyoutube.net
+fingerdaily.com
+finler.net
+firearmsworld.net
+firebaseio.com
+fireofliberty.org
+firetweet.io
+firstfivefollowers.com
+flagsonline.it
+flecheinthepeche.fr
+fleshbot.com
+fleursdeslettres.com
+flgg.us
+flgjustice.org
+flickr.com
+flickrhivemind.net
+flickriver.com
+fling.com
+flipboard.com
+flipkart.com
+flitto.com
+flnet.org
+flog.tw
+flyvpn.com
+flyzy2005.com
+fnac.be
+fnac.com
+fochk.org
+focustaiwan.tw
+focusvpn.com
+fofg-europe.net
+fofg.org
+fofldfradio.org
+fonts.googleapis.com
+fonts.gstatic.com
+fooooo.com
+footwiball.com
+foreignpolicy.com
+forum.baby-kingdom.com
+forum.cyberctm.com
+forum.idsam.com
+forum.my903.com
+forum.mymaji.com
+forum.omy.sg
+forum.palmislife.com
+forum.setty.com.tw
+forum.sina.com.hk
+forum.slime.com.tw
+forum.tvb.com
+forum4hk.com
+fotile.me
+fourface.nodesnoop.com
+fourthinternational.org
+foxdie.us
+foxgay.com
+foxsub.com
+foxtang.com
+fpmt-osel.org
+fpmt.org
+fpmt.tw
+fpmtmexico.org
+fq.wikia.com
+fqok.org
+fqrouter.com
+franklc.com
+freakshare.com
+free-gate.org
+free-hada-now.org
+free-proxy.cz
+free-ss.site
+free-ssh.com
+free4u.com.ar
+freealim.com
+freebrowser.org
+freechal.com
+freechina.net
+freechinaforum.org
+freeddns.com
+freeddns.org
+freedomchina.info
+freedomhouse.org
+freedominfonetweb.wordpress.com
+freedomsherald.org
+freeforums.org
+freefq.com
+freefuckvids.com
+freegao.com
+freeilhamtohti.org
+freekwonpyong.org
+freelotto.com
+freeman2.com
+freemoren.com
+freemorenews.com
+freenet-china.org
+freenetproject.org
+freenewscn.com
+freeopenvpn.com
+freeoz.org
+freessh.us
+freetcp.com
+freetibet.net
+freetibet.org
+freetibetanheroes.org
+freeviewmovies.com
+freevpn.me
+freevpn.nl
+freewallpaper4.me
+freewebs.com
+freewechat.com
+freewww.biz
+freewww.info
+freexinwen.com
+freeyellow.com
+freeyoutubeproxy.net
+friendfeed.com
+friends-of-tibet.org
+friendsoftibet.org
+fring.com
+fringenetwork.com
+from-pr.com
+from-sd.com
+fromchinatousa.net
+frommel.net
+frontlinedefenders.org
+frootvpn.com
+fscked.org
+fsurf.com
+ftp1.biz
+ftpserver.biz
+ftv.com.tw
+fucd.com
+fuckcnnic.net
+fuckgfw.org
+fullerconsideration.com
+fulue.com
+funf.tw
+funkyimg.com
+funp.com
+fuq.com
+furbo.org
+furhhdl.org
+furinkan.com
+furl.net
+futurechinaforum.org
+futuremessage.org
+fux.com
+fuyin.net
+fuyindiantai.org
+fuyu.org.tw
+fw.cm
+fxcm-chinese.com
+fxnetworks.com
+fzh999.com
+fzh999.net
+fzlm.com
+g-area.org
+g-queen.com
+g.co
+g6hentai.com
+gabocorp.com
+gaeproxy.com
+gaforum.org
+galaxymacau.com
+galenwu.com
+galstars.net
+game735.com
+gamebase.com.tw
+gamejolt.com
+gamer.com.tw
+gamez.com.tw
+gamousa.com
+ganges.com
+gaoming.net
+gaopi.net
+gaozhisheng.net
+gaozhisheng.org
+gardennetworks.com
+gardennetworks.org
+gartlive.com
+gate-project.com
+gate.io
+gatecoin.com
+gather.com
+gatherproxy.com
+gati.org.tw
+gaybubble.com
+gaycn.net
+gayhub.com
+gaymap.cc
+gaymenring.com
+gaytube.com
+gaywatch.com
+gazotube.com
+gcc.org.hk
+gclooney.com
+gcmasia.com
+gcpnews.com
+gcr.io
+gdzf.org
+geek-art.net
+geekheart.info
+gekikame.com
+gelbooru.com
+geocities.co.jp
+geocities.jp
+gerefoundation.org
+get.app
+get.how
+getastrill.com
+getchu.com
+getcloak.com
+getfoxyproxy.org
+getfreedur.com
+getgom.com
+geti2p.net
+getiton.com
+getlantern.org
+getmdl.io
+getoutline.org
+getsocialscope.com
+getsync.com
+gettrials.com
+gettyimages.com
+getuploader.com
+gfbv.de
+gfgold.com.hk
+gfsale.com
+gfw.org.ua
+gfw.press
+ggpht.com
+ggssl.com
+ghostpath.com
+ghut.org
+giantessnight.com
+gifree.com
+giga-web.jp
+gigporno.ru
+girlbanker.com
+gist.github.com
+git.io
+gizlen.net
+gjczz.com
+glass8.eu
+global.bing.com
+globaljihad.net
+globalmediaoutreach.com
+globalmuseumoncommunism.org
+globalrescue.net
+globaltm.org
+globalvoices.org
+globalvoicesonline.org
+globalvpn.net
+glock.com
+gloryhole.com
+glorystar.me
+glype.com
+gmail.com
+gmbd.cn
+gmhz.org
+gmll.org
+gmodules.com
+gmozomg.izihost.org
+gnci.org.hk
+go-pki.com
+go.nesnode.com
+go141.com
+goagent.biz
+goagent.codeplex.com
+goagentplus.com
+gobet.cc
+godfootsteps.org
+godns.work
+godoc.org
+godsdirectcontact.co.uk
+godsdirectcontact.org
+godsimmediatecontact.com
+gogotunnel.com
+gohappy.com.tw
+gojet.krtco.com.tw
+gokbayrak.com
+golang.org
+goldbet.com
+goldbetsports.com
+goldeneyevault.com
+goldenfrog.com
+goldjizz.com
+goldstep.net
+goldwave.com
+gongm.in
+gongmeng.info
+gongminliliang.com
+gongwt.com
+goo.gl
+gooday.xyz
+gooddns.info
+goodreaders.com
+goodreads.com
+goodtv.com.tw
+goodtv.tv
+goofind.com
+google.ae
+google.am
+google.as
+google.at
+google.az
+google.ba
+google.be
+google.bg
+google.ca
+google.calstate.edu
+google.cd
+google.ci
+google.co.id
+google.co.jp
+google.co.kr
+google.co.ma
+google.co.uk
+google.com
+google.de
+google.dj
+google.dk
+google.es
+google.fi
+google.fm
+google.fr
+google.gg
+google.gl
+google.gr
+google.ie
+google.is
+google.it
+google.jo
+google.kz
+google.lv
+google.mn
+google.ms
+google.nl
+google.no
+google.nu
+google.ro
+google.ru
+google.rw
+google.sc
+google.sh
+google.sk
+google.sm
+google.sn
+google.tk
+google.tm
+google.to
+google.tt
+google.vu
+google.ws
+googleapis.cn
+googleapis.com
+googleapps.com
+googlearth.com
+googleartproject.com
+googleblog.com
+googlebot.com
+googlechinawebmaster.com
+googlecode.com
+googlecommerce.com
+googledomains.com
+googledrive.com
+googleearth.com
+googlegroups.com
+googlehosted.com
+googleideas.com
+googleinsidesearch.com
+googlelabs.com
+googlemail.com
+googlemashups.com
+googlepagecreator.com
+googleplay.com
+googleplus.com
+googlescholar.com
+googlesile.com
+googlesource.com
+googleusercontent.com
+googlevideo.com
+googleweblight.com
+googlezip.net
+gopetition.com
+goproxing.net
+gospelherald.com
+got-game.org
+gotdns.ch
+gotgeeks.com
+gotrusted.com
+gotw.ca
+gov.taipei
+gov.tw
+gr8domain.biz
+gr8name.biz
+grammaly.com
+grandtrial.org
+grangorz.org
+graphis.ne.jp
+graphql.org
+grb.gov.tw
+greasespot.net
+great-firewall.com
+great-roc.org
+greatfire.org
+greatfire.us7.list-manage.com
+greatfirewall.biz
+greatfirewallofchina.net
+greatfirewallofchina.org
+greatroc.org
+greatroc.tw
+greatzhonghua.org
+greenfieldbookstore.com.hk
+greenparty.org.tw
+greenpeace.com.tw
+greenpeace.org
+greenvpn.net
+greenvpn.org
+grotty-monday.com
+groups.google.cn
+grow.google
+gs-discuss.com
+gsp.target.com
+gstatic.com
+gtricks.com
+gts-vpn.com
+gu-chu-sum.org
+guaguass.com
+guaguass.org
+guancha.org
+guaneryu.com
+guangming.com.my
+guardster.com
+guishan.org
+gumroad.com
+gun-world.net
+gunsamerica.com
+gunsandammo.com
+guo.media
+guruonline.hk
+gutteruncensored.com
+gvlib.com
+gvm.com.tw
+gvt0.com
+gvt1.com
+gvt3.com
+gwtproject.org
+gyalwarinpoche.com
+gyatsostudio.com
+gysd.nyc.gov.tw
+gzm.tv
+gzone-anime.info
+h-china.org
+h-moe.com
+h1n1china.org
+h528.com
+h5dm.com
+h5galgame.me
+hacg.club
+hacg.in
+hacg.li
+hacg.me
+hacg.red
+hacker.org
+hackthatphone.net
+hahaxixi.github.io
+hahlo.com
+hakkatv.org.tw
+handcraftedsoftware.org
+hanunyi.com
+haoel.github.io
+haosou.com
+happy-vpn.com
+haproxy.org
+hardsextube.com
+harunyahya.com
+hautelook.com
+hautelookcdn.com
+have8.com
+haygo.com
+hbo.com
+hchcc.gov.tw
+hclips.com
+hdlt.me
+hdtvb.net
+hdzog.com
+heartyit.com
+heavy-r.com
+hec.su
+hecaitou.net
+hechaji.com
+heeact.edu.tw
+hegre-art.com
+heix.pp.ru
+helloandroid.com
+helloqueer.com
+helloss.pw
+hellotxt.com
+help.linksalpha.com
+helpeachpeople.com
+helplinfen.com
+helpster.de
+helpzhuling.org
+hentai.to
+hentaitube.tv
+hentaivideoworld.com
+heqinglian.net
+heungkongdiscuss.com
+hexieshe.com
+hexieshe.xyz
+hexxeh.net
+heyzo.com
+hgseav.com
+hhdcb3office.org
+hhthesakyatrizin.org
+hi-on.org.tw
+hidden-advent.org
+hide.me
+hidein.net
+hideipvpn.com
+hideman.net
+hideme.nl
+hidemy.name
+hidemyass.com
+hidemycomp.com
+higfw.com
+highpeakspureearth.com
+highrockmedia.com
+hihiforum.com
+hihistory.net
+hiitch.com
+hikinggfw.org
+hilive.tv
+himalayan-foundation.org
+himalayanglacier.com
+himemix.com
+himemix.net
+hitbtc.com
+hitomi.la
+hiwifi.com
+hizb-ut-tahrir.info
+hizb-ut-tahrir.org
+hizbuttahrir.org
+hjclub.info
+hk-pub.com
+hk.geocities.com
+hk.hao123img.com
+hk.jiepang.com
+hk.knowledge.yahoo.com
+hk.myblog.yahoo.com
+hk.news.yahoo.com
+hk.rd.yahoo.com
+hk.v2ex.com
+hk.yahoo.com
+hk01.com
+hk32168.com
+hka8964.wordpress.com
+hkacg.com
+hkacg.net
+hkanews.wordpress.com
+hkatvnews.com
+hkbc.net
+hkbf.org
+hkbookcity.com
+hkchurch.org
+hkci.org.hk
+hkcmi.edu
+hkcnews.com
+hkcoc.com
+hkcoc.weather.com.hk
+hkday.net
+hkdf.org
+hkej.com
+hkfaa.com
+hkfreezone.com
+hkfront.org
+hkgolden.com
+hkhkhk.com
+hkhrc.org.hk
+hkhrm.org.hk
+hkip.org.uk
+hkjc.com
+hkjp.org
+hklft.com
+hklts.org.hk
+hkptu.org
+hkreporter.com
+hkreporter.loved.hk
+hkupop.hku.hk
+hkusu.net
+hkvwet.com
+hkwcc.org.hk
+hkzone.org
+hmonghot.com
+hmvdigital.ca
+hmvdigital.com
+hnjhj.com
+hnntube.com
+hola.com
+hola.org
+holymountaincn.com
+holyspiritspeaks.org
+home.sina.com
+homedepot.com
+homeperversion.com
+homeservershow.com
+hongkongfp.com
+hongmeimei.com
+hongzhi.li
+hootsuite.com
+hoovers.com
+hopedialogue.org
+hopto.org
+hornygamer.com
+hornytrip.com
+hotav.tv
+hotels.cn
+hotfrog.com.tw
+hotgoo.com
+hotpornshow.com
+hotpot.hk
+hotshame.com
+hotspotshield.com
+hotvpn.com
+hougaige.com
+howtoforge.com
+hoxx.com
+hpa.gov.tw
+hqcdp.org
+hqjapanesesex.com
+hqmovies.com
+hqsbnet.wordpress.com
+hqsbonline.wordpress.com
+hrcchina.org
+hrcir.com
+hrea.org
+hrichina.org
+hrtsea.com
+hrw.org
+hrweb.org
+hsinchu-cc.gov.tw
+hsjp.net
+hsselite.com
+hst.net.tw
+hstern.net
+hstt.net
+ht.ly
+htkou.net
+htl.li
+html5rocks.com
+http2.golang.org
+https443.net
+https443.org
+hua-yue.net
+huaglad.com
+huanghuagang.org
+huangyiyu.com
+huaren.us
+huaren4us.com
+huashangnews.com
+huaxia-news.com
+huaxiabao.org
+huaxin.ph
+huayuworld.org
+hudatoriq.web.id
+hudson.org
+hugoroy.eu
+huhaitai.com
+huhamhire.com
+huiyi.in
+hulkshare.com
+hulu.com
+huluim.com
+humanrightsbriefing.org
+hung-ya.com
+hungerstrikeforaids.org
+huobi.com
+huobi.pro
+huobipro.com
+huping.net
+hurgokbayrak.com
+hurriyet.com.tr
+hustlercash.com
+hut2.ru
+hutianyi.net
+hutong9.net
+huyandex.com
+hwadzan.tw
+hwayue.org.tw
+hwinfo.com
+hxwk.org
+hxwq.org
+hybrid-analysis.com
+hyperrate.com
+i-cable.com
+i-part.com.tw
+i.lithium.com
+i.v2ex.com
+i1.hk
+i2p2.de
+i2runner.com
+i818hk.com
+iam.soy
+iamtopone.com
+iask.bz
+iask.ca
+iav19.com
+iblist.com
+iblogserv-f.net
+ibros.org
+ibvpn.com
+icams.com
+ice.audionow.com
+icij.org
+icl-fi.org
+icoco.com
+iconpaper.org
+icu-project.org
+id.hao123.com
+id.heroku.com
+iddddg.com
+idemocracy.asia
+identi.ca
+idiomconnection.com
+idouga.com
+idreamx.com
+idv.tw
+ieasy5.com
+ied2k.net
+ienergy1.com
+ifan.cz.cc
+ifanqiang.com
+ifcss.org
+ifjc.org
+ifreewares.com
+ift.tt
+igcd.net
+igfw.net
+igfw.tech
+igmg.de
+ignitedetroit.net
+igoogle.com
+igotmail.com.tw
+igvita.com
+ihakka.net
+iicns.com
+iipdigital.usembassy.gov
+ikstar.com
+ikwb.com
+illusionfactory.com
+ilove80.be
+ilovelongtoes.com
+im.tv
+im88.tw
+imageab.com
+imagefap.com
+imageflea.com
+images-gaytube.com
+images.comico.tw
+imageshack.us
+imagevenue.com
+imagezilla.net
+imb.org
+ime.baidu.jp
+img.ly
+imgchili.net
+imkev.com
+imlive.com
+immigration.gov.tw
+immoral.jp
+impact.org.au
+impp.mn
+in-disguise.com
+in99.org
+incapdns.net
+incloak.com
+incredibox.fr
+indiandefensenews.in
+indiemerch.com
+iner.gov.tw
+info-graf.fr
+initiativesforchina.org
+inkui.com
+inmediahk.net
+innermongolia.org
+inote.tw
+insecam.org
+insidevoa.com
+instagram.com
+instanthq.com
+institut-tibetain.org
+international-news.newsmagazine.asia
+internetdefenseleague.org
+internetfreedom.org
+internetpopculture.com
+investigating.wordpress.com
+inxian.com
+iownyour.biz
+iownyour.org
+ip.cn
+ip6.static.sl-reverse.com
+ipalter.com
+ipfire.org
+ipfs.io
+iphone4hongkong.com
+iphonehacks.com
+iphonetaiwan.org
+iphonix.fr
+ipicture.ru
+ipjetable.net
+iportal.me
+ippotv.com
+ipredator.se
+iptv.com.tw
+iptvbin.com
+ipvanish.com
+iredmail.org
+ironbigfools.compython.net
+ironpython.net
+ironsocket.com
+is-a-hunter.com
+is.gd
+isaacmao.com
+isasecret.com
+isgreat.org
+islahhaber.net
+islam.org.hk
+islamhouse.com
+islamicity.com
+islamicpluralism.org
+islamtoday.net
+ismaelan.com
+ismalltits.com
+ismprofessional.net
+isohunt.com
+israbox.com
+issuu.com
+istars.co.nz
+istiqlalhewer.com
+istockphoto.com
+isunaffairs.com
+isuntv.com
+itaboo.info
+itaiwan.gov.tw
+italiatibet.org
+itasoftware.com
+itemdb.com
+ithelp.ithome.com.tw
+itsaol.com
+itshidden.com
+itsky.it
+itweet.net
+iu45.com
+iuhrdf.org
+iuksky.com
+ivacy.com
+iverycd.com
+ivpn.net
+ixquick.com
+ixxx.com
+iyouport.com
+izaobao.us
+izles.net
+izlesem.org
+j.mp
+ja.wikipedia.org
+jamaat.org
+jamyangnorbu.com
+jandyx.com
+janwongphoto.com
+japan-whores.com
+japantimes.co.jp
+jav.com
+jav101.com
+jav2be.com
+jav68.tv
+javakiba.org
+javbus.com
+javfor.me
+javhd.com
+javhip.com
+javhub.net
+javhuge.com
+javlibrary.com
+javmobile.net
+javmoo.com
+javmoo.xyz
+javseen.com
+javtag.com
+javzoo.com
+jbtalks.cc
+jbtalks.com
+jbtalks.my
+jcpenney.com
+jdwsy.com
+jeanyim.com
+jetos.com
+jex.com
+jfqu36.club
+jfqu37.xyz
+jgoodies.com
+jiangweiping.com
+jiaoyou8.com
+jiehua.cz
+jieshibaobao.com
+jigglegifs.com
+jigong1024.com
+jihadintel.meforum.org
+jihadology.net
+jiji.com
+jike.com
+jims.net
+jinbushe.org
+jingpin.org
+jingsim.org
+jinpianwang.com
+jinroukong.com
+jinx.com
+jitouch.com
+jizzthis.com
+jjgirls.com
+jkb.cc
+jkforum.net
+jkub.com
+jma.go.jp
+jmscult.com
+joachims.org
+jobnewera.wordpress.com
+jobso.tv
+journalchretien.net
+journalofdemocracy.org
+joymiihub.com
+joyourself.com
+jp.hao123.com
+jpl.nasa.gov
+jpopforum.net
+jpush.cn
+jtvnw.net
+jubushoushen.com
+juhuaren.com
+jukujo-club.com
+juliepost.com
+juliereyc.com
+junauza.com
+june4commemoration.org
+junefourth-20.net
+jungleheart.com
+juoaa.com
+justdied.com
+justfreevpn.com
+justicefortenzin.org
+justpaste.it
+justtristan.com
+juyuange.org
+juziyue.com
+jwmusic.org
+jyxf.net
+k-doujin.net
+ka-wai.com
+kagyu.org
+kagyumonlam.org
+kagyunews.com.hk
+kagyuoffice.org
+kaiyuan.de
+kakao.com
+kalachakralugano.org
+kankan.today
+kannewyork.com
+kanshifang.com
+kantie.org
+kanzhongguo.com
+kanzhongguo.eu
+kaotic.com
+karayou.com
+karkhung.com
+karmapa-teachings.org
+karmapa.org
+kawaiikawaii.jp
+kawase.com
+kb.monitorware.com
+kba-tx.org
+kcoolonline.com
+kebrum.com
+kechara.com
+keezmovies.com
+kendatire.com
+kendincos.net
+kenengba.com
+keontech.net
+kepard.com
+kex.com
+keycdn.com
+kh.google.com
+khabdha.org
+khatrimaza.org
+khm.google.com
+khm.googleapis.com
+khm0.google.com
+khm0.googleapis.com
+khm1.google.com
+khm1.googleapis.com
+khm2.google.com
+khm2.googleapis.com
+khm3.google.com
+khm3.googleapis.com
+khmdb.google.com
+khmdb.googleapis.com
+khmusic.com.tw
+kichiku-doujinko.com
+kik.com
+killwall.com
+kindleren.com
+kineox.free.fr
+kingdomsalvation.org
+kinghost.com
+kingstone.com.tw
+kink.com
+kinmen.org.tw
+kinmen.travel
+kir.jp
+kissbbao.cn
+kiwi.kz
+kk-whys.co.jp
+kkbox.com
+kknews.cc
+klsio.gov.tw
+kmseh.gov.tw
+kmuh.org.tw
+kobo.com
+kobobooks.com
+kodingen.com
+kompozer.net
+konachan.com
+kone.com
+koolsolutions.com
+koornk.com
+koranmandarin.com
+korenan2.com
+ksdl.org
+ksnews.com.tw
+kspcoin.com
+ktzhk.com
+kucoin.com
+kun.im
+kurashsultan.com
+kurtmunger.com
+kusocity.com
+kwcg.ca
+kwongwah.com.my
+kxsw.life
+kyofun.com
+kyohk.net
+kyoyue.com
+kyzyhello.com
+kzeng.info
+la-forum.org
+labiennale.org
+ladbrokes.com
+lagranepoca.com
+lalulalu.com
+lama.com.tw
+lamayeshe.com
+lamnia.co.uk
+lamrim.com
+lanterncn.cn
+lantosfoundation.org
+laod.cn
+laogai.org
+laomiu.com
+laoyang.info
+laptoplockdown.com
+laqingdan.net
+larsgeorge.com
+lastcombat.com
+lastfm.es
+latelinenews.com
+latibet.org
+lax.v2ex.com
+lbank.info
+ld.hao123img.com
+le-vpn.com
+leafyvpn.net
+lecloud.net
+lefora.com
+left21.hk
+legalporno.com
+legaltech.law.com
+legsjapan.com
+leirentv.ca
+leisurecafe.ca
+leisurepro.com
+lematin.ch
+lemonde.fr
+lenwhite.com
+lerosua.org
+lers.google
+lesoir.be
+letou.com
+letscorp.net
+lflink.com
+lflinkup.com
+lflinkup.net
+lflinkup.org
+lhakar.org
+lhasocialwork.org
+liangyou.net
+liangzhichuanmei.com
+lianyue.net
+liaowangxizang.net
+liberal.org.hk
+libertytimes.com.tw
+lifemiles.com
+lighten.org.tw
+lightnovel.cn
+like.com
+limiao.net
+line-apps.com
+line-scdn.net
+line.me
+line.naver.jp
+linear-abematv.akamaized.net
+linglingfa.com
+lingvodics.com
+link-o-rama.com
+linkideo.com
+linkuswell.com
+linux.org.hk
+lionsroar.com
+lipuman.com
+liquidvpn.com
+listentoyoutube.com
+listorious.com
+liu-xiaobo.org
+liudejun.com
+liuhanyu.com
+liujianshu.com
+liuxiaobo.net
+liuxiaotong.com
+livecoin.net
+livedoor.jp
+liveleak.com
+livestation.com
+livestream.com
+livevideo.com
+livingonline.us
+livingstream.com
+liwangyang.com
+lizhizhuangbi.com
+lkcn.net
+load.to
+lobsangwangyal.com
+localdomain.ws
+localpresshk.com
+lockestek.com
+logbot.net
+login.target.com
+logiqx.com
+londonchinese.ca
+longhair.hk
+longmusic.com
+longtermly.net
+longtoes.com
+lookpic.com
+looktoronto.com
+lotuslight.org.hk
+lotuslight.org.tw
+lovetvshow.com
+lpsg.com
+lrfz.com
+lrip.org
+lsd.org.hk
+lsforum.net
+lsm.org
+lsmchinese.org
+lsmkorean.org
+lsmwebcast.com
+lsxszzg.com
+ltn.com.tw
+luke54.com
+luke54.org
+lungtanhr.gov.tw
+lupm.org
+lushstories.com
+luxebc.com
+lvhai.org
+lvv2.com
+lyfhk.net
+lzmtnews.org
+m.hkgalden.com
+m.me
+m.plixi.com
+m.slandr.net
+ma.hao123.com
+macgamestore.com
+macrovpn.com
+macts.com.tw
+mad-ar.ch
+madewithcode.com
+madonna-av.com
+madrau.com
+madthumbs.com
+magazines.sina.com.tw
+magic-net.info
+mahabodhi.org
+maiio.net
+mail-archive.com
+maildns.xyz
+maiplus.com
+maizhong.org
+makemymood.com
+makkahnewspaper.com
+makzhou.warehouse333.com
+malaysiakini.com
+mamingzhe.com
+manchukuo.net
+mangafox.com
+mangafox.me
+maniash.com
+manicur4ik.ru
+mansion.com
+mansionpoker.com
+manta.com
+maolin-nsa.gov.tw
+maplew.com
+marc.info
+marguerite.su
+martau.com
+martincartoons.com
+martsangkagyuofficial.org
+marxist.com
+marxist.net
+mash.to
+maskedip.com
+mastodon.host
+matainja.com
+material.io
+mathable.io
+mathiew-badimon.com
+matome-plus.com
+matome-plus.net
+matsu-news.gov.tw
+matsu-nsa.gov.tw
+matsucc.gov.tw
+matsushimakaede.com
+mattwilcox.net
+maturejp.com
+maxing.jp
+mayimayi.com
+mcadforums.com
+mcaf.ee
+mcfog.com
+mcreasite.com
+md-t.org
+me.youthwant.com.tw
+meansys.com
+media.nu.nl
+media.org.hk
+mediachinese.com
+mediafreakcity.com
+medium.com
+meetav.com
+meetup.com
+mefeedia.com
+mefound.com
+mega.nz
+megaproxy.com
+megarotic.com
+megavideo.com
+megurineluka.com
+meirixiaochao.com
+meltoday.com
+meme.yahoo.com
+memehk.com
+memorybbs.com
+memri.org
+memrijttm.org
+mercyprophet.org
+meridian-trust.org
+meripet.biz
+meripet.com
+merit-times.com.tw
+meshrep.com
+messenger.com
+metarthunter.com
+meteorshowersonline.com
+metrolife.ca
+metroradio.com.hk
+meyou.jp
+meyul.com
+mfxmedia.com
+mgoon.com
+mgstage.com
+mh4u.org
+mhradio.org
+michaelanti.com
+michaelmarketl.com
+microvpn.com
+middle-way.net
+mihr.com
+mihua.org
+mike.cz.cc
+mikesoltys.com
+milph.net
+milsurps.com
+mimiai.net
+mimivip.com
+mimivv.com
+mindrolling.org
+minghui-a.org
+minghui-b.org
+minghui-school.org
+minghui.or.kr
+minghui.org
+minghuiyw.wordpress.com
+mingjinglishi.com
+mingjingnews.com
+mingjingtimes.com
+mingpao.com
+mingpaocanada.com
+mingpaomonthly.com
+mingpaonews.com
+mingpaony.com
+mingpaosf.com
+mingpaotor.com
+mingpaovan.com
+mingshengbao.com
+minhhue.net
+miniforum.org
+ministrybooks.org
+minzhuhua.net
+minzhuzhanxian.com
+minzhuzhongguo.org
+miroguide.com
+mirrorbooks.com
+mist.vip
+mitao.com.tw
+mitbbs.com
+mitbbsau.com
+mixero.com
+mixpod.com
+mixx.com
+mizzmona.com
+mjib.gov.tw
+mk5000.com
+mlcool.com
+mlzs.work
+mm-cg.com
+mmaaxx.com
+mmmca.com
+mnewstv.com
+mo.nightlife141.com
+mobatek.net
+mobile01.com
+mobileways.de
+moby.to
+mobypicture.com
+moe.gov.tw
+moeaic.gov.tw
+moeerolibrary.com
+mofa.gov.tw
+mofaxiehui.com
+mofos.com
+mog.com
+mohu.club
+mohu.ml
+mol.gov.tw
+molihua.org
+mondex.org
+money-link.com.tw
+moneyhome.biz
+monitorchina.org
+monster.com
+moodyz.com
+moonbbs.com
+moonbingo.com
+morningsun.org
+moroneta.com
+mos.ru
+motherless.com
+motor4ik.ru
+mousebreaker.com
+movements.org
+moviefap.com
+mp3buscador.com
+mp3ye.eu
+mpettis.com
+mpfinance.com
+mpinews.com
+mponline.hk
+mqxd.org
+mrbasic.com
+mrbonus.com
+mrface.com
+mrslove.com
+mrtweet.com
+msa-it.org
+msguancha.com
+msha.gov
+mswe1.org
+mthruf.com
+mtw.tl
+muchosucko.com
+mullvad.net
+multiply.com
+multiproxy.org
+multiupload.com
+mummysgold.com
+murmur.tw
+music.jwmusic.org
+musicade.net
+muslimvideo.com
+muzi.com
+muzi.net
+muzu.tv
+mvdis.gov.tw
+mvg.jp
+mx.hao123.com
+mx981.com
+my-formosa.com
+my-private-network.co.uk
+my-proxy.com
+my.mail.ru
+my.pcloud.com
+my03.com
+myanniu.com
+myaudiocast.com
+mybbs.us
+mybet.com
+myca168.com
+mycanadanow.com
+mychinamyhome.com
+mychinanet.com
+mychinanews.com
+mychinese.news
+mycnnews.com
+mydad.info
+myddns.com
+myeasytv.com
+myeclipseide.com
+myforum.com.hk
+myforum.com.uk
+myfreecams.com
+myfreepaysite.com
+myfreshnet.com
+myftp.info
+myftp.name
+myiphide.com
+mykomica.org
+mylftv.com
+mymoe.moe
+mymom.info
+mymusic.net.tw
+mynetav.net
+mynetav.org
+mynumber.org
+myparagliding.com
+mypicture.info
+mypop3.net
+mypop3.org
+mypopescu.com
+myreadingmanga.info
+mysecondarydns.com
+mysinablog.com
+mysite.verizon.net
+myspace.com
+myspacecdn.com
+mytalkbox.com
+mytizi.com
+myvlog.im.tv
+mywww.biz
+myz.info
+naacoalition.org
+naitik.net
+nakido.com
+nalandabodhi.org
+nalandawest.org
+namgyal.org
+namgyalmonastery.org
+namsisi.com
+nankan.gov.tw
+nanyang.com
+nanyangpost.com
+nanzao.com
+naol.ca
+naol.cc
+nat.gov.tw
+nat.moe
+national-lottery.co.uk
+nationwide.com
+naughtyamerica.com
+navyfamily.navy.mil
+navyreserve.navy.mil
+naweeklytimes.com
+nbtvpn.com
+nccwatch.org.tw
+nch.com.tw
+ncn.org
+ncree.gov.tw
+nde.de
+ndr.de
+necoast-nsa.gov.tw
+ned.org
+nekoslovakia.net
+neo-miracle.com
+nepusoku.com
+ner.gov.tw
+net-fits.pro
+netbirds.com
+netcolony.com
+netflix.com
+netme.cc
+netsneak.com
+network54.com
+networkedblogs.com
+networktunnel.net
+neue.v2ex.com
+neverforget8964.org
+new-3lunch.net
+new-akiba.com
+new96.ca
+newcenturymc.com
+newcenturynews.com
+newchen.com
+newgrounds.com
+newipnow.com
+newlandmagazine.com.au
+newnews.ca
+news.cnyes.com
+news.hk.msn.com
+news.hkpeanut.com
+news.msn.com.tw
+news.now.com
+news.omy.sg
+news.seehua.com
+news.sina.com.hk
+news.sina.com.tw
+news.sinchew.com.my
+news.singtao.ca
+news.tvbs.com.tw
+news100.com.tw
+newsancai.com
+newschinacomment.org
+newscn.org
+newsdetox.ca
+newsdh.com
+newstamago.com
+newstapa.org
+newstarnet.com
+newtaiwan.com.tw
+newtalk.tw
+newyorktimes.com
+nexon.com
+next11.co.jp
+nextmag.com.tw
+nextmedia.com
+nexton-net.jp
+nexttv.com.tw
+nf.id.au
+nfjtyd.com
+nflxext.com
+nflximg.com
+nflximg.net
+nflxso.net
+nflxvideo.net
+nga.mil
+ngensis.com
+nhentai.net
+nhi.gov.tw
+nhk-ondemand.jp
+nic.cz.cc
+nic.google
+nic.gov
+nighost.org
+nikkei.com
+ninecommentaries.com
+ninjacloak.com
+ninjaproxy.ninja
+nintendium.com
+ninth.biz
+niusnews.com
+njactb.org
+njuice.com
+nko.navy.mil
+nlfreevpn.com
+nmmba.gov.tw
+nmp.gov.tw
+nmvttc.gov.tw
+no-ip.org
+nobel.se
+nobodycanstop.us
+nofile.io
+nokogiri.org
+nokola.com
+noodlevpn.com
+norbulingka.org
+nordstrom.com
+nordstromimage.com
+nordstromrack.com
+nordvpn.com
+northguan-nsa.gov.tw
+notify.dropboxapi.com
+nottinghampost.com
+novelasia.com
+now.com
+now.im
+nownews.com
+nowtorrents.com
+noypf.com
+npa.go.jp
+npa.gov.tw
+npm.gov.tw
+npnt.me
+nps.gov
+nradio.me
+nrk.no
+ns01.biz
+ns01.info
+ns01.us
+ns02.biz
+ns02.info
+ns02.us
+ns1.name
+ns2.name
+ns3.name
+nsc.gov.tw
+nstm.gov.tw
+ntbk.gov.tw
+ntbna.gov.tw
+ntbt.gov.tw
+ntd.tv
+ntdmh.gov.tw
+ntdtv.ca
+ntdtv.co.kr
+ntdtv.com
+ntdtv.cz
+ntdtv.org
+ntdtv.ru
+ntdtvla.com
+ntl.gov.tw
+ntrfun.com
+ntsec.gov.tw
+ntsna.gov.tw
+ntuh.gov.tw
+nubiles.net
+nuexpo.com
+nukistream.com
+nurgo-software.com
+nusatrip.com
+nutaku.net
+nuuvem.com
+nuvid.com
+nuzcom.com
+nvdst.com
+nvquan.org
+nvri.gov.tw
+nvtongzhisheng.org
+nwtca.org
+ny.stgloballink.com
+ny.visiontimes.com
+nyaa.eu
+nydus.ca
+nylon-angel.com
+nylonstockingsonline.com
+nyt.com
+nytchina.com
+nytcn.me
+nytco.com
+nytimes.com
+nytimes.map.fastly.net
+nytimg.com
+nytstyle.com
+nzchinese.com
+nzchinese.net.nz
+observechina.net
+obutu.com
+ocaspro.com
+occupytiananmen.com
+oclp.hk
+ocreampies.com
+ocry.com
+october-review.org
+oculus.com
+oculuscdn.com
+oex.com
+offbeatchina.com
+officeoftibet.com
+ofile.org
+ogaoga.org
+ogate.org
+oiktv.com
+oizoblog.com
+ok.ru
+okayfreedom.com
+okex.com
+okk.tw
+old-cat.net
+old.nabble.com
+olumpo.com
+olympicwatch.org
+omgili.com
+omni7.jp
+omnitalk.com
+omnitalk.org
+on.cc
+on2.com
+onapp.com
+onedrive.live.com
+onedumb.com
+onejav.com
+onion.city
+online.recoveryversion.org
+onlinecha.com
+onlineyoutube.com
+onlytweets.com
+onmoon.com
+onmoon.net
+onmypc.biz
+onmypc.info
+onmypc.net
+onmypc.org
+onmypc.us
+onthehunt.com
+ontrac.com
+oopsforum.com
+open.com.hk
+openallweb.com
+opendemocracy.net
+opendn.xyz
+openervpn.in
+openid.net
+openleaks.org
+openvpn.net
+openwebster.com
+openwrt.org.cn
+opml.radiotime.com
+opus-gaming.com
+organcare.org.tw
+organharvestinvestigation.net
+organiccrap.com
+orgasm.com
+orgfree.com
+orient-doll.com
+orientaldaily.com.my
+orn.jp
+orzistic.org
+osfoora.com
+otcbtc.com
+otnd.org
+otto.de
+otzo.com
+ourdearamy.com
+ourhobby.com
+oursogo.com
+oursteps.com.au
+oursweb.net
+ourtv.hk
+overplay.net
+oversea.istarshine.com
+ow.ly
+owl.li
+oyax.com
+ozvoice.org
+ozxw.com
+ozyoyo.com
+pachosting.com
+pacificpoker.com
+packetix.net
+pacopacomama.com
+padmanet.com
+page.bid.yahoo.com
+page2rss.com
+pagespeed.v2ex.com
+pagodabox.com
+palacemoon.com
+paldengyal.com
+paljorpublications.com
+paltalk.com
+panamapapers.sueddeutsche.de
+pandapow.co
+pandapow.net
+pandavpn-jp.com
+pandora.com
+pandora.tv
+panluan.net
+panoramio.com
+pao-pao.net
+paper.li
+paperb.us
+paradisehill.cc
+paradisepoker.com
+parkansky.com
+partycasino.com
+partypoker.com
+passion.com
+passiontimes.hk
+paste.ee
+pastebin.com
+pastie.org
+pbwiki.com
+pbworks.com
+pbxes.com
+pbxes.org
+pcanywhere.net
+pcc.gov.tw
+pcdvd.com.tw
+pchome.com.tw
+pcij.org
+pcstore.com.tw
+pct.org.tw
+pdetails.com
+pdproxy.com
+pds.nasa.gov
+peace.ca
+peacefire.org
+peacehall.com
+pearlher.org
+peeasian.com
+pekingduck.org
+pemulihan.or.id
+pen.io
+penchinese.com
+penchinese.net
+penghu-nsa.gov.tw
+pengyulong.com
+penisbot.com
+penthouse.com
+peoplebookcafe.com
+peoplenews.tw
+peopo.org
+percy.in
+perfectgirls.net
+perfectvpn.net
+periscope.tv
+persecutionblog.com
+persiankitty.com
+pfd.org.hk
+phapluan.org
+phayul.com
+philborges.com
+philly.com
+phmsociety.org
+phncdn.com
+phosphation13.rssing.com
+photodharma.net
+photofocus.com
+phuquocservices.com
+picacomic.com
+picacomiccn.com
+picasaweb.com
+picidae.net
+pictures.playboy.com
+picturesocial.com
+pin-cong.com
+pin6.com
+ping.fm
+pinimg.com
+pinkrod.com
+pinoy-n.com
+pinterest.at
+pinterest.co.kr
+pinterest.co.uk
+pinterest.com
+pinterest.de
+pinterest.dk
+pinterest.fr
+pinterest.jp
+pinterest.nl
+pinterest.se
+pioneer-worker.forums-free.com
+pipii.tv
+piposay.com
+piraattilahti.org
+piring.com
+pixelqi.com
+pixiv.net
+pixnet.net
+pk.com
+pki.goog
+placemix.com
+playboy.com
+playboyplus.com
+player.fm
+playno1.com
+playpcesor.com
+plays.com.tw
+plm.org.hk
+plunder.com
+plurk.com
+plus28.com
+plusbb.com
+pmatehunter.com
+pmates.com
+po2b.com
+pobieramy.top
+podictionary.com
+pokerstars.com
+pokerstars.net
+politicalchina.org
+politicalconsultation.org
+politiscales.net
+poloniex.com
+polymer-project.org
+polymerhk.com
+popo.tw
+popvote.hk
+popyard.com
+popyard.org
+porn.com
+porn2.com
+porn5.com
+pornbase.org
+pornerbros.com
+pornhd.com
+pornhost.com
+pornhub.com
+pornhubdeutsch.net
+pornmm.net
+pornoxo.com
+pornrapidshare.com
+pornsharing.com
+pornsocket.com
+pornstarclub.com
+porntube.com
+porntubenews.com
+porntvblog.com
+pornvisit.com
+port25.biz
+portablevpn.nl
+poskotanews.com
+post.gov.tw
+post01.com
+post76.com
+post852.com
+postadult.com
+postimg.org
+potvpn.com
+power.com
+powercx.com
+powerphoto.org
+prayforchina.net
+premeforwindows7.com
+premproxy.com
+presentationzen.com
+presidentlee.tw
+prestige-av.com
+pride.google
+prisoneralert.com
+pritunl.com
+privacybox.de
+privateinternetaccess.com
+privatepaste.com
+privatetunnel.com
+privatevpn.com
+procopytips.com
+prosiben.de
+protonvpn.com
+provideocoalition.com
+provpnaccounts.com
+proxfree.com
+proxifier.com
+proxomitron.info
+proxpn.com
+proxyanonimo.es
+proxydns.com
+proxylist.org.uk
+proxynetwork.org.uk
+proxypy.net
+proxyroad.com
+proxytunnel.net
+proyectoclubes.com
+prozz.net
+psblog.name
+pscp.tv
+psiphon.ca
+psiphon.civisec.org
+psiphon3.com
+psiphontoday.com
+pts.org.tw
+ptt.cc
+pttvan.org
+pubu.com.tw
+puffinbrowser.com
+puffstore.com
+pullfolio.com
+pulse.yahoo.com
+pure18.com
+pureconcepts.net
+pureinsight.org
+purepdf.com
+purevpn.com
+purplelotus.org
+pursuestar.com
+pushchinawall.com
+pussyspace.com
+putihome.org
+putty.org
+puuko.com
+pwned.com
+python.com
+pytorch.org
+qanote.com
+qgirl.com.tw
+qhigh.com
+qi-gong.me
+qiandao.today
+qiangyou.org
+qidian.ca
+qienkuen.org
+qiwen.lu
+qixianglu.cn
+qkshare.com
+qoos.com
+qpoe.com
+qq.co.za
+qstatus.com
+qtrac.eu
+qtweeter.com
+quannengshen.org
+quantumbooter.net
+questvisual.com
+quitccp.net
+quitccp.org
+quora.com
+quran.com
+quranexplorer.com
+qusi8.net
+qvodzy.org
+qxbbs.org
+r18.com
+ra.gg
+radicalparty.org
+radiko.jp
+radioaustralia.net.au
+radiohilight.net
+radiovaticana.org
+radiovncr.com
+rael.org
+raggedbanner.com
+raidcall.com.tw
+raidtalk.com.tw
+raizoji.or.jp
+ramcity.com.au
+rangwang.biz
+rangzen.com
+rangzen.net
+rangzen.org
+ranyunfei.com
+rapbull.net
+rapidmoviez.com
+rapidvpn.com
+raremovie.cc
+raremovie.net
+rawgit.com
+rawgithub.com
+razyboard.com
+rcam.target.com
+rcinet.ca
+rconversation.blogs.com
+rd.com
+rdio.com
+read01.com
+read100.com
+readingtimes.com.tw
+readmoo.com
+readydown.com
+realcourage.org
+realforum.zkiz.com
+realitykings.com
+realraptalk.com
+realsexpass.com
+rebatesrule.net
+recordhistory.org
+recovery.org.tw
+recoveryversion.com.tw
+red-lang.org
+redballoonsolidarity.org
+redchinacn.net
+redchinacn.org
+redd.it
+reddit.com
+redditmedia.com
+redditstatic.com
+redhotlabs.com
+redirector.gvt1.com
+redtube.com
+referer.us
+reflectivecode.com
+registry.google
+relaxbbs.com
+relay.com.tw
+releaseinternational.org
+religioustolerance.org
+renminbao.com
+renyurenquan.org
+resilio.com
+retweeteffect.com
+retweetist.com
+retweetrank.com
+reuters.com
+reutersmedia.net
+revleft.com
+revver.com
+rfa.org
+rfachina.com
+rfalive1.akacast.akamaistream.net
+rfamobile.org
+rfaweb.org
+rferl.org
+rfi.fr
+rightbtc.com
+rigpa.org
+rileyguide.com
+riseup.net
+ritouki.jp
+ritter.vg
+rixcloud.com
+rixcloud.us
+rlwlw.com
+rmjdw.com
+rmjdw132.info
+roadshow.hk
+roboforex.com
+robustnessiskey.com
+rocket-inc.net
+rocksdb.org
+rojo.com
+rolia.net
+ronjoneswriter.com
+roodo.com
+rosechina.net
+rotten.com
+rsdlmonitor.com
+rsf-chinese.org
+rsf.org
+rsgamen.org
+rssmeme.com
+rtalabel.org
+rthk.hk
+rthk.org.hk
+rthklive2-lh.akamaihd.net
+rti.org.tw
+rtycminnesota.org
+rukor.org
+rushbee.com
+ruten.com.tw
+rutube.ru
+ruyiseek.com
+rxhj.net
+s-cute.com
+s-dragon.org
+s1.nudezz.com
+s1heng.com
+s1s1s1.com
+s3-ap-northeast-1.amazonaws.com
+s3-ap-southeast-2.amazonaws.com
+s8forum.com
+sa.hao123.com
+sacks.com
+sacom.hk
+sadistic-v.com
+sadpanda.us
+safebrowsing.googleapis.com
+safervpn.com
+safety.google
+saintyculture.com
+saiq.me
+sakuralive.com
+sakya.org
+salvation.org.hk
+sambhota.org
+sanmin.com.tw
+sapikachu.net
+saveliuxiaobo.com
+savemedia.com
+savethedate.foo
+savetibet.de
+savetibet.fr
+savetibet.nl
+savetibet.org
+savetibet.ru
+savetibetstore.org
+savevid.com
+say2.info
+sbme.me
+scache.vzw.com
+scache1.vzw.com
+scache2.vzw.com
+scasino.com
+schema.org
+sciencenets.com
+scieron.com
+scmp.com
+scmpchinese.com
+scramble.io
+scribd.com
+scriptspot.com
+seapuff.com
+search.aol.com
+search.disconnect.me
+search.yahoo.co.jp
+searchtruth.com
+secretchina.com
+secretgarden.no
+secretsline.biz
+secure.hustler.com
+secure.logmein.com
+secure.raxcdn.com
+securetunnel.com
+securityinabox.org
+securitykiss.com
+seed4.me
+seesmic.com
+seevpn.com
+seezone.net
+sejie.com
+sellclassics.com
+sendsmtp.com
+sendspace.com
+servehttp.com
+serveuser.com
+serveusers.com
+sesawe.net
+sesawe.org
+sethwklein.net
+setn.com
+settv.com.tw
+sevenload.com
+sex-11.com
+sex.com
+sex3.com
+sex8.cc
+sexandsubmission.com
+sexbot.com
+sexhu.com
+sexhuang.com
+sexidude.com
+sexinsex.net
+sextvx.com
+sexxxy.biz
+sfileydy.com
+sfshibao.com
+sftindia.org
+sftuk.org
+shadeyouvpn.com
+shadow.ma
+shadowsky.xyz
+shadowsocks-r.com
+shadowsocks.asia
+shadowsocks.be
+shadowsocks.com
+shadowsocks.org
+shadowsocks9.com
+shambalapost.com
+shambhalasun.com
+shangfang.org
+shapeservices.com
+share.dmhy.org
+share.youthwant.com.tw
+sharebee.com
+sharecool.org
+sharpdaily.com.hk
+sharpdaily.hk
+sharpdaily.tw
+shat-tibet.com
+shattered.io
+sheikyermami.com
+shellfire.de
+shenshou.org
+shenyun.com
+shenyunperformingarts.org
+shenzhoufilm.com
+sherabgyaltsen.com
+shiatv.net
+shicheng.org
+shiksha.com
+shinychan.com
+shipcamouflage.com
+shireyishunjian.com
+shitaotv.org
+shixiao.org
+shizhao.org
+shodanhq.com
+shooshtime.com
+shop2000.com.tw
+shopping.com
+showbiz.omy.sg
+showhaotu.com
+showtime.jp
+shutterstock.com
+shwchurch.org
+shwchurch3.com
+siddharthasintent.org
+sidelinesnews.com
+sidelinessportseatery.com
+sierrafriendsoftibet.org
+sijihuisuo.club
+sijihuisuo.com
+sikaozhe1997.github.io
+silkbook.com
+simbolostwitter.com
+simplecd.me
+simplecd.org
+simpleproductivityblog.com
+singaporepools.com.sg
+singfortibet.com
+singpao.com.hk
+singtao.com
+singtaousa.com
+sino-monthly.com
+sinoants.com
+sinocast.com
+sinocism.com
+sinomontreal.ca
+sinonet.ca
+sinopitt.info
+sinoquebec.com
+siraya-nsa.gov.tw
+sis.xxx
+sis001.com
+sis001.us
+site.locql.com
+site2unblock.com
+site90.net
+sitebro.tw
+sitekreator.com
+siteks.uk.to
+sitemaps.org
+sixth.biz
+sjrt.org
+sjum.cn
+sketchappsources.com
+skimtube.com
+skybet.com
+skyking.com.tw
+skyvegas.com
+skyxvpn.com
+slacker.com
+slaytizle.com
+sleazydream.com
+slheng.com
+slickvpn.com
+slideshare.net
+slinkset.com
+slutload.com
+slutmoonbeam.com
+slyip.com
+slyip.net
+sm-miracle.com
+smartdnsproxy.com
+smarthide.com
+smchbooks.com
+smhric.org
+smyxy.org
+snapchat.com
+snaptu.com
+sndcdn.com
+sneakme.net
+snowlionpub.com
+sobees.com
+soc.mil
+socialwhale.com
+socks-proxy.net
+sockscap64.com
+sockslist.net
+socrec.org
+sod.co.jp
+sodatea.github.io
+softether-download.com
+softether.co.jp
+softether.org
+softwarebychuck.com
+softwaredownload.gitbooks.io
+sogclub.com
+sogrady.me
+soh.tw
+sohcradio.com
+sohfrance.org
+sokamonline.com
+sokmil.com
+solarsystem.nasa.gov
+solidaritetibet.org
+solidfiles.com
+somee.com
+songjianjun.com
+sonicbbs.cc
+sonidodelaesperanza.org
+sopcast.com
+sopcast.org
+sorazone.net
+sorting-algorithms.com
+sos.org
+sosreader.com
+sostibet.org
+soubory.com
+soul-plus.net
+soulcaliburhentai.net
+soumo.info
+soundcloud.com
+soundofhope.kr
+soundofhope.org
+soup.io
+soupofmedia.com
+sourcewadio.com
+southnews.com.tw
+sowers.org.hk
+soylentnews.org
+spankbang.com
+spankingtube.com
+spankwire.com
+spb.com
+speakerdeck.com
+specxinzl.jigsy.com
+speedify.com
+spem.at
+spencertipping.com
+spicevpn.com
+spideroak.com
+spike.com
+sports.williamhill.com
+spotflux.com
+spotify.com
+spreadshirt.es
+spring4u.info
+springboardplatform.com
+sprite.org
+sproutcore.com
+sproxy.info
+squirly.info
+srocket.us
+ss-link.com
+ss.carryzhou.com
+ss.levyhsu.com
+ss7.vzw.com
+ssglobal.co
+ssglobal.me
+ssh91.com
+ssl.gstatic.com
+ssl.webpack.de
+ssl443.org
+sspro.ml
+ssr.tools
+ssrshare.com
+sss.camp
+sstmlt.moe
+sstmlt.net
+stage64.hk
+standupfortibet.org
+starfishfx.com
+starp2p.com
+startpage.com
+startuplivingchina.com
+stat.gov.tw
+static-economist.com
+static.comico.tw
+static.shemalez.com
+static.soup.io
+static.typepad.com
+static.v2ex.com
+static01.nyt.com
+staticflickr.com
+statueofdemocracy.org
+stc.com.sa
+stdtime.gov.tw
+steamcommunity.com
+steel-storm.com
+steganos.com
+steganos.net
+stepchina.com
+stephaniered.com
+sthoo.com
+stickam.com
+stileproject.com
+sto.cc
+stoporganharvesting.org
+stoptibetcrisis.net
+storage.googleapis.com
+storagenewsletter.com
+store.sprite.org
+stories.google
+storify.com
+storm.mg
+stormmediagroup.com
+stoweboyd.com
+stranabg.com
+straplessdildo.com
+streamingthe.net
+strikingly.com
+strongvpn.com
+strongwindpress.com
+studentsforafreetibet.org
+stumbleupon.com
+stupidvideos.com
+subacme.rerouted.org
+successfn.com
+sugarsync.com
+sugobbs.com
+sugumiru18.com
+suissl.com
+sujiatun.wordpress.com
+sukebei.nyaa.si
+sulian.me
+summify.com
+sumrando.com
+sun1911.com
+sunmedia.ca
+sunmoonlake.gov.tw
+sunporno.com
+sunskyforum.com
+sunta.com.tw
+sunvpn.net
+sunwinism.joinbbs.net
+suoluo.org
+supchina.com
+superfreevpn.com
+superokayama.com
+superpages.com
+supervpn.net
+superzooi.com
+suppig.net
+suprememastertv.com
+surfeasy.com
+suroot.com
+surrenderat20.net
+sustainability.google
+suyangg.com
+svsfx.com
+swagbucks.com
+swissvpn.net
+switch1.jp
+switchvpn.net
+sydneytoday.com
+sylfoundation.org
+syncback.com
+synergyse.com
+sysresccd.org
+sytes.net
+szbbs.net
+szetowah.org.hk
+t-g.com
+t.co
+t.me
+t.orzdream.com
+t35.com
+t66y.com
+taa-usa.org
+taaze.tw
+tabtter.jp
+tacc.cwb.gov.tw
+tacem.org
+taconet.com.tw
+taedp.org.tw
+tafm.org
+tagwa.org.au
+tagwalk.com
+tahr.org.tw
+taipei.gov.tw
+taipeisociety.org
+taitung-house.gov.tw
+taiwan-sex.com
+taiwanbible.com
+taiwancon.com
+taiwandaily.net
+taiwandc.org
+taiwanjobs.gov.tw
+taiwanjustice.com
+taiwanjustice.net
+taiwankiss.com
+taiwannation.50webs.com
+taiwannation.com
+taiwanncf.org.tw
+taiwannews.com.tw
+taiwantp.net
+taiwantt.org.tw
+taiwanus.net
+taiwanyes.com
+taiwanyes.ning.com
+talk853.com
+talkboxapp.com
+talkonly.net
+tamiaode.tk
+tanc.org
+tangben.com
+tangren.us
+taoism.net
+taolun.info
+taoyuan.gov.tw
+tapanwap.com
+tapatalk.com
+tascn.com.au
+taup.net
+taweet.com
+tax.nat.gov.tw
+tbcollege.org
+tbi.org.hk
+tbicn.org
+tbjyt.org
+tbpic.info
+tbrc.org
+tbs-rainbow.org
+tbsec.org
+tbskkinabalu.page.tl
+tbsmalaysia.org
+tbsn.org
+tbsseattle.org
+tbssqh.org
+tbswd.org
+tbtemple.org.uk
+tbthouston.org
+tccwonline.org
+tcewf.org
+tchrd.org
+tcnynj.org
+tcpspeed.co
+tcpspeed.com
+tcsofbc.org
+tcsovi.org
+tdm.com.mo
+teachparentstech.org
+teamamericany.com
+techviz.net
+teck.in
+teco-hk.org
+teco-mo.org
+teddysun.com
+teeniefuck.net
+teensinasia.com
+telecomspace.com
+telegram.dog
+telegram.me
+telegram.org
+telegramdownload.com
+telegraph.co.uk
+telesco.pe
+tellme.pw
+tenacy.com
+tensorflow.org
+tenzinpalmo.com
+terminus2049.github.io
+tew.org
+textnow.me
+th.hao123.com
+thaicn.com
+thb.gov.tw
+theatrum-belli.com
+thebcomplex.com
+theblemish.com
+thebobs.com
+thebodyshop-usa.com
+thecenter.mit.edu
+thechinabeat.org
+thedalailamamovie.com
+thedw.us
+thefacebook.com
+thegly.com
+thehots.info
+thehousenews.com
+thehun.net
+theinitium.com
+thenewslens.com
+thepiratebay.org
+theportalwiki.com
+thereallove.kr
+therock.net.nz
+thespeeder.com
+thestandnews.com
+thetibetcenter.org
+thetibetconnection.org
+thetibetmuseum.org
+thetibetpost.com
+thetinhat.com
+thetrotskymovie.com
+thevivekspot.com
+thewgo.org
+theync.com
+thinkingtaiwan.com
+thinkwithgoogle.com
+thisav.com
+thlib.org
+thomasbernhard.org
+thongdreams.com
+threatchaos.com
+throughnightsfire.com
+thumbzilla.com
+thywords.com
+tiananmenduizhi.com
+tiananmenmother.org
+tiananmenuniv.com
+tiananmenuniv.net
+tiandixing.org
+tianhuayuan.com
+tianlawoffice.com
+tianti.io
+tiantibooks.org
+tianyantong.org.cn
+tianzhu.org
+tibet-envoy.eu
+tibet-foundation.org
+tibet-house-trust.co.uk
+tibet-info.net
+tibet-initiative.de
+tibet-munich.de
+tibet.a.se
+tibet.at
+tibet.ca
+tibet.com
+tibet.fr
+tibet.net
+tibet.nu
+tibet.org
+tibet.sk
+tibet.to
+tibet3rdpole.org
+tibetaction.net
+tibetaid.org
+tibetalk.com
+tibetan-alliance.org
+tibetan.fr
+tibetanaidproject.org
+tibetanarts.org
+tibetanbuddhistinstitute.org
+tibetancommunity.org
+tibetancommunityuk.net
+tibetanculture.org
+tibetanfeministcollective.org
+tibetanjournal.com
+tibetanlanguage.org
+tibetanliberation.org
+tibetanpaintings.com
+tibetanphotoproject.com
+tibetanpoliticalreview.org
+tibetanreview.net
+tibetansports.org
+tibetanwomen.org
+tibetanyouth.org
+tibetanyouthcongress.org
+tibetcharity.dk
+tibetcharity.in
+tibetchild.org
+tibetcity.com
+tibetcollection.com
+tibetcorps.org
+tibetexpress.net
+tibetfocus.com
+tibetfund.org
+tibetgermany.com
+tibetgermany.de
+tibethaus.com
+tibetheritagefund.org
+tibethouse.jp
+tibethouse.org
+tibethouse.us
+tibetinfonet.net
+tibetjustice.org
+tibetkomite.dk
+tibetlibre.free.fr
+tibetmuseum.org
+tibetnetwork.org
+tibetoffice.ch
+tibetoffice.com.au
+tibetoffice.eu
+tibetoffice.org
+tibetonline.com
+tibetonline.tv
+tibetoralhistory.org
+tibetpolicy.eu
+tibetrelieffund.co.uk
+tibetsites.com
+tibetsociety.com
+tibetsun.com
+tibetsupportgroup.org
+tibetswiss.ch
+tibettelegraph.com
+tibettimes.net
+tibetwrites.org
+ticket.com.tw
+tigervpn.com
+tiltbrush.com
+timdir.com
+time.com
+times.hinet.net
+timsah.com
+tineye.com
+tintuc101.com
+tiny.cc
+tinychat.com
+tinypaste.com
+tipo.gov.tw
+tistory.com
+tkcs-collins.com
+tma.co.jp
+tmagazine.com
+tmdfish.com
+tmi.me
+tmpp.org
+tn1.shemalez.com
+tn2.shemalez.com
+tn3.shemalez.com
+tnaflix.com
+tngrnow.com
+tngrnow.net
+tnp.org
+to-porno.com
+togetter.com
+toh.info
+tokyo-247.com
+tokyo-hot.com
+tokyo-porn-tube.com
+tokyocn.com
+tongil.or.kr
+tono-oka.jp
+tonyyan.net
+toodoc.com
+tools.google.com
+toonel.net
+top.tv
+top81.ws
+topbtc.com
+topic.youthwant.com.tw
+topnews.in
+toppornsites.com
+topshareware.com
+topsy.com
+toptip.ca
+tor.blingblingsquad.net
+tor.updatestar.com
+tora.to
+torcn.com
+torguard.net
+torproject.org
+torrentprivacy.com
+torrentproject.se
+torrenty.org
+torrentz.eu
+torvpn.com
+tosh.comedycentral.com
+totalvpn.com
+toutiaoabc.com
+towngain.com
+toypark.in
+toythieves.com
+toytractorshow.com
+tparents.org
+tpde.aide.gov.tw
+tphcc.gov.tw
+tpi.org.tw
+tracfone.com
+traffichaus.com
+translate.google.cn
+translate.googleapis.com
+transparency.org
+treemall.com.tw
+trendsmap.com
+trialofccp.org
+trickip.net
+trickip.org
+trimt-nsa.gov.tw
+trouw.nl
+trt.net.tr
+trtc.com.tw
+truebuddha-md.org
+trulyergonomic.com
+truth101.co.tv
+truthontour.org
+truveo.com
+tryheart.jp
+tsctv.net
+tsdr.uspto.gov
+tsemtulku.com
+tsquare.tv
+tsu.org.tw
+tsunagarumon.com
+tt-rss.org
+tt1069.com
+tttan.com
+ttvnw.net
+tu8964.com
+tubaholic.com
+tube.com
+tube8.com
+tube911.com
+tubecup.com
+tubegals.com
+tubeislam.com
+tubepornclassic.com
+tubestack.com
+tubewolf.com
+tui.orzdream.com
+tuibeitu.net
+tuidang.net
+tuidang.org
+tuidang.se
+tuitwit.com
+tumblr.com
+tumutanzi.com
+tumview.com
+tunein.com
+tunnelbear.com
+tunnelr.com
+tuo8.blue
+tuo8.cc
+tuo8.club
+tuo8.fit
+tuo8.hk
+tuo8.in
+tuo8.ninja
+tuo8.org
+tuo8.pw
+tuo8.red
+tuo8.space
+turansam.org
+turbobit.net
+turbohide.com
+turbotwitter.com
+turntable.fm
+tushycash.com
+tuvpn.com
+tuzaijidi.com
+tv.com
+tvants.com
+tvboxnow.com
+tvider.com
+tvmost.com.hk
+tvplayvideos.com
+tvunetworks.com
+tw-blog.com
+tw-npo.org
+tw.answers.yahoo.com
+tw.bid.yahoo.com
+tw.gigacircle.com
+tw.hao123.com
+tw.jiepang.com
+tw.knowledge.yahoo.com
+tw.mall.yahoo.com
+tw.mobi.yahoo.com
+tw.money.yahoo.com
+tw.myblog.yahoo.com
+tw.news.yahoo.com
+tw.streetvoice.com
+tw.tomonews.net
+tw.voa.mobi
+tw.yahoo.com
+tw01.org
+twaitter.com
+twapperkeeper.com
+twaud.io
+twavi.com
+twbbs.net.tw
+twbbs.org
+twbbs.tw
+twblogger.com
+tweepguide.com
+tweeplike.me
+tweepmag.com
+tweepml.org
+tweetbackup.com
+tweetboard.com
+tweetboner.biz
+tweetcs.com
+tweetdeck.com
+tweetedtimes.com
+tweetmylast.fm
+tweetphoto.com
+tweetrans.com
+tweetree.com
+tweettunnel.com
+tweetwally.com
+tweetymail.com
+tweez.net
+twelve.today
+twerkingbutt.com
+twftp.org
+twgreatdaily.com
+twibase.com
+twibble.de
+twibbon.com
+twibs.com
+twicountry.org
+twicsy.com
+twiends.com
+twifan.com
+twiffo.com
+twiggit.org
+twilightsex.com
+twilog.org
+twimbow.com
+twimg.com
+twindexx.com
+twip.me
+twipple.jp
+twishort.com
+twistar.cc
+twister.net.co
+twisterio.com
+twisternow.com
+twistory.net
+twit2d.com
+twitbrowser.net
+twitcause.com
+twitch.tv
+twitchcdn.net
+twitgether.com
+twitgoo.com
+twitiq.com
+twitlonger.com
+twitmania.com
+twitoaster.com
+twitonmsn.com
+twitpic.com
+twitstat.com
+twittbot.net
+twitter.com
+twitter.jp
+twitter4j.org
+twittercounter.com
+twitterfeed.com
+twittergadget.com
+twitterkr.com
+twittermail.com
+twitterrific.com
+twittertim.es
+twitthat.com
+twitturk.com
+twitturly.com
+twitvid.com
+twitzap.com
+twiyia.com
+twnorth.org.tw
+twskype.com
+twstar.net
+twt.tl
+twtkr.com
+twtr2src.ogaoga.org
+twtrland.com
+twttr.com
+twurl.nl
+twyac.org
+txxx.com
+tycool.com
+typepad.com
+u9un.com
+ub0.cc
+ubddns.org
+uberproxy.net
+uc-japan.org
+ucdc1998.org
+uderzo.it
+udn.com
+uforadio.com.tw
+ufreevpn.com
+ug.m.wikipedia.org
+ugo.com
+uhdwallpapers.org
+uhrp.org
+uighur.narod.ru
+uighur.nl
+uighurbiz.net
+ukcdp.co.uk
+ukliferadio.co.uk
+uku.im
+ulike.net
+ulop.net
+ultravpn.fr
+ultraxs.com
+uluai.com.cn
+unblock-us.com
+unblock.cn.com
+unblockdmm.com
+unblocker.yt
+unblocksit.es
+uncyclomedia.org
+uncyclopedia.hk
+uncyclopedia.tw
+underwoodammo.com
+unholyknight.com
+uni.cc
+unification.net
+unification.org.tw
+unirule.cloud
+unitedsocialpress.com
+unix100.com
+unknownspace.org
+unodedos.com
+unpo.org
+unseen.is
+untraceable.us
+uocn.org
+upcoming.yahoo.com
+update.googleapis.com
+updates.tdesktop.com
+upholdjustice.org
+upload4u.info
+upmedia.mg
+upornia.com
+uproxy.org
+upwill.org
+ur7s.com
+uraban.me
+urbansurvival.com
+urchin.com
+urlborg.com
+urlparser.com
+us.to
+usacn.com
+usaip.eu
+userapi.nytlog.com
+usfk.mil
+ushuarencity.echainhost.com
+usinfo.state.gov
+usma.edu
+usmc.mil
+usno.navy.mil
+usocctn.com
+ustream.tv
+usunitednews.com
+usus.cc
+utopianpal.com
+uu-gg.com
+uvwxyz.xyz
+uwants.com
+uwants.net
+uyghur-j.org
+uyghur.co.uk
+uyghuramerican.org
+uyghurcanadiansociety.org
+uyghurcongress.org
+uyghurensemble.co.uk
+uyghurpen.org
+uyghurpress.com
+uyghurstudies.org
+uygur.org
+v2ex.com
+v2ray.com
+v6.facebook.com
+van001.com
+van698.com
+vanemu.cn
+vanilla-jp.com
+vanpeople.com
+vansky.com
+vatn.org
+vcf-online.org
+vcfbuilder.org
+vegas.williamhill.com
+vegasred.com
+velkaepocha.sk
+venbbs.com
+venchina.com
+venetianmacao.com
+ventureswell.com
+veoh.com
+vermonttibet.org
+versavpn.com
+verybs.com
+vevo.com
+vft.com.tw
+vghks.gov.tw
+vghtc.gov.tw
+vghtpe.gov.tw
+viber.com
+vica.info
+victimsofcommunism.org
+vid.me
+vidble.com
+video.aol.com
+video.ap.org
+video.fdbox.com
+video.foxbusiness.com
+video.pbs.org
+video.yahoo.com
+videobam.com
+videodetective.com
+videomega.tv
+videomo.com
+videopediaworld.com
+videopress.com
+vietdaikynguyen.com
+vijayatemple.org
+vimeo.com
+vimperator.org
+vincnd.com
+vine.co
+vinniev.com
+vip-enterprise.com
+virtualrealporn.com
+visibletweets.com
+vital247.org
+viu.com
+vivahentai4u.net
+vivatube.com
+vivthomas.com
+vizvaz.com
+vjav.com
+vjmedia.com.hk
+vllcs.org
+vlog.xuite.net
+vmixcore.com
+vmpsoft.com
+vn.hao123.com
+vnet.link
+voa-11.akacast.akamaistream.net
+voacantonese.com
+voachinese.com
+voachineseblog.com
+voagd.com
+voanews.com
+voatibetan.com
+voatibetanenglish.com
+vocativ.com
+vocn.tv
+vod-abematv.akamaized.net
+vod.wwe.com
+vot.org
+vovo2000.com
+voxer.com
+voy.com
+vpn.ac
+vpn.cjb.net
+vpn.cmu.edu
+vpn.sv.cmu.edu
+vpn4all.com
+vpnaccount.org
+vpnaccounts.com
+vpnbook.com
+vpncomparison.org
+vpncoupons.com
+vpncup.com
+vpndada.com
+vpnfan.com
+vpnfire.com
+vpnfires.biz
+vpnforgame.net
+vpngate.jp
+vpngate.net
+vpngratis.net
+vpnhq.com
+vpninja.net
+vpnintouch.com
+vpnintouch.net
+vpnjack.com
+vpnmaster.com
+vpnmentor.com
+vpnpick.com
+vpnpop.com
+vpnpronet.com
+vpnreactor.com
+vpnreviewz.com
+vpnsecure.me
+vpnshazam.com
+vpnshieldapp.com
+vpnsp.com
+vpntraffic.com
+vpntunnel.com
+vpnuk.info
+vpnunlimitedapp.com
+vpnvip.com
+vpnworldwide.com
+vporn.com
+vpser.net
+vraiesagesse.net
+vrmtr.com
+vrsmash.com
+vtunnel.com
+vuku.cc
+w3schools.com
+waffle1999.com
+wahas.com
+waigaobu.com
+wailaike.net
+waiwaier.com
+wallmama.com
+wallornot.org
+wallpapercasa.com
+wallproxy.com
+waltermartin.com
+waltermartin.org
+wanderinghorse.net
+wanfang.gov.tw
+wangafu.net
+wangjinbo.org
+wanglixiong.com
+wango.org
+wangruoshui.net
+want-daily.com
+wanz-factory.com
+warbler.iconfactory.net
+waselpro.com
+washeng.net
+watch8x.com
+watchinese.com
+watchmygf.net
+wattpad.com
+wav.tv
+waveprotocol.org
+waymo.com
+wda.gov.tw
+wdf5.com
+wearehairy.com
+wearn.com
+web.dev
+web2project.net
+webbang.net
+webevader.org
+webfreer.com
+webjb.org
+weblagu.com
+webmproject.org
+webrtc.org
+webrush.net
+webs-tv.net
+website.informer.com
+webwarper.net
+webworkerdaily.com
+weekmag.info
+wefightcensorship.org
+wefong.com
+wego.here.com
+weiboleak.com
+weiboscope.jmsc.hku.hk
+weihuo.org
+weijingsheng.org
+weiming.info
+weiquanwang.org
+weisuo.ws
+welovecock.com
+wemigrate.org
+wengewang.com
+wengewang.org
+wenhui.ch
+wenxuecity.com
+wenyunchao.com
+wenzhao.ca
+westca.com
+westernshugdensociety.org
+westernwolves.com
+westkit.net
+westpoint.edu
+wetplace.com
+wetpussygames.com
+wexiaobo.org
+wezhiyong.org
+wezone.net
+wforum.com
+wha.la
+whatblocked.com
+whatbrowser.org
+whatsapp.com
+whatsapp.net
+wheatseeds.org
+wheelockslatin.com
+whereiswerner.com
+wheretowatch.com
+whippedass.com
+whitebear.freebearblog.org
+whodns.xyz
+whoer.net
+whotalking.com
+whylover.com
+whyx.org
+widevine.com
+wikaba.com
+wiki.cnitter.com
+wiki.gamerp.jp
+wiki.jqueryui.com
+wiki.moegirl.org
+wiki.oauth.net
+wiki.phonegap.com
+wikileaks-forum.com
+wikileaks.ch
+wikileaks.com
+wikileaks.de
+wikileaks.eu
+wikileaks.lu
+wikileaks.org
+wikileaks.pl
+wikimapia.org
+wikiwiki.jp
+wildammo.com
+williamhill.com
+willw.net
+windowsphoneme.com
+windscribe.com
+wingamestore.com
+wingy.site
+winning11.com
+winwhispers.info
+wire.com
+wiredbytes.com
+wiredpen.com
+wisdompubs.org
+wisevid.com
+withgoogle.com
+withyoutube.com
+witnessleeteaching.com
+witopia.net
+wizcrafts.net
+wjbk.org
+wlcnew.jigsy.com
+wlx.sowiki.net
+wn.com
+wnacg.com
+wnacg.org
+wo.tc
+wo3ttt.wordpress.com
+woeser.com
+wokar.org
+wolfax.com
+woolyss.com
+woopie.jp
+woopie.tv
+wordpress.com
+workatruna.com
+workerdemo.org.hk
+workerempowerment.org
+workersthebig.net
+workspace.v2ex.com
+worldcat.org
+worldjournal.com
+worldvpn.net
+wow-life.net
+wow.com
+wowgirls.com
+wowlegacy.ml
+wowporn.com
+wowrk.com
+woxinghuiguo.com
+woyaolian.org
+wozy.in
+wp.com
+wpoforum.com
+wqyd.org
+wrchina.org
+wretch.cc
+writer.zoho.com
+wsgzao.github.io
+wsj.com
+wsj.net
+wsjhk.com
+wtbn.org
+wtfpeople.com
+wuerkaixi.com
+wufafangwen.com
+wufi.org.tw
+wuguoguang.com
+wujie.net
+wujieliulan.com
+wukangrui.net
+wuu.wikipedia.org
+wuw.red
+wuyanblog.com
+wwitv.com
+www.abclite.net
+www.ajsands.com
+www.americorps.gov
+www.antd.org
+www.aolnews.com
+www.citizenlab.org
+www.cmoinc.org
+www.dwheeler.com
+www.exblog.jp
+www.ftchinese.com
+www.gmiddle.com
+www.gmiddle.net
+www.hustlercash.com
+www.idlcoyote.com
+www.kindleren.com
+www.klip.me
+www.kodingen.com
+www.lamenhu.com
+www.lightnovel.cn
+www.linksalpha.com
+www.m-sport.co.uk
+www.monlamit.org
+www.moztw.org
+www.orchidbbs.com
+www.owind.com
+www.oxid.it
+www.powerpointninja.com
+www.s4miniarchive.com
+www.shadowsocks.com
+www.shwchurch.org
+www.taup.org.tw
+www.typepad.com
+www.v2ex.com
+www.wan-press.org
+www.wangruowang.org
+www.websnapr.com
+www1.biz
+wwwhost.biz
+x-art.com
+x-berry.com
+x-wall.org
+x.company
+x1949x.com
+x24hr.com
+x365x.com
+xa.yimg.com
+xanga.com
+xbabe.com
+xbookcn.com
+xbtce.com
+xcafe.in
+xcity.jp
+xcritic.com
+xerotica.com
+xfinity.com
+xfm.pp.ru
+xgmyd.com
+xhamster.com
+xianba.net
+xianchawang.net
+xianjian.tw
+xianqiao.net
+xiaobaiwu.com
+xiaochuncnjp.com
+xiaod.in
+xiaohexie.com
+xiaolan.me
+xiaoma.org
+xiezhua.com
+xihua.es
+xijie.wordpress.com
+xing.com
+xinhuanet.org
+xinmiao.com.hk
+xinqimeng.over-blog.com
+xinsheng.net
+xinshijue.com
+xinyubbs.net
+xiongpian.com
+xiuren.org
+xizang-zhiye.org
+xjp.cc
+xjtravelguide.com
+xlfmtalk.com
+xlfmwz.info
+xm.com
+xml-training-guide.com
+xmovies.com
+xn--4gq171p.com
+xn--czq75pvv1aj5c.org
+xn--i2ru8q2qg.com
+xn--ngstr-lra8j.com
+xn--oiq.cc
+xn--p8j9a0d9c9a.xn--q9jyb4c
+xnxx.com
+xpdo.net
+xpud.org
+xrentdvd.com
+xskywalker.com
+xskywalker.net
+xtube.com
+xuchao.net
+xuchao.org
+xuehua.us
+xuzhiyong.net
+xvideo.cc
+xvideos.com
+xvideos.es
+xx.wwwhost.biz
+xxbbx.com
+xxlmovies.com
+xxuz.com
+xxx.com
+xxx.xxx
+xxxfuckmom.com
+xxxx.com.au
+xxxy.biz
+xxxy.info
+xxxymovies.com
+xys.dxiong.com
+xys.org
+xysblogs.org
+xyy69.com
+xyy69.info
+yahoo.cn
+yahoo.com.hk
+yakbutterblues.com
+yam.com
+yam.org.tw
+yanghengjun.com
+yangjianli.com
+yasni.co.uk
+yatsen.gov.tw
+yda.gov.tw
+ydy.com
+yeahteentube.com
+yecl.net
+yeelou.com
+yeeyi.com
+yegle.net
+yes-news.com
+yes.xxx
+yes123.com.tw
+yesasia.com
+yespornplease.com
+yeyeclub.com
+ygto.com
+yhcw.net
+yibada.com
+yibaochina.com
+yidio.com
+yilubbs.com
+yingsuoss.com
+yipub.com
+yizhihongxing.com
+yobit.net
+yobt.com
+yobt.tv
+yogichen.org
+yolasite.com
+yomiuri.co.jp
+yong.hu
+yorkbbs.ca
+youdontcare.com
+youjizz.com
+youmaker.com
+youngpornvideos.com
+youngspiration.hk
+youpai.org
+youporn.com
+youporngay.com
+your-freedom.net
+yourepeat.com
+yourlisten.com
+yourlust.com
+yourprivatevpn.com
+yourtrap.com
+yousendit.com
+youshun12.com
+youtu.be
+youtube-nocookie.com
+youtube.com
+youtubecn.com
+youtubeeducation.com
+youtubegaming.com
+youversion.com
+youwin.com
+youxu.info
+yt.be
+ytht.net
+ytimg.com
+ytn.co.kr
+yuanming.net
+yuanzhengtang.org
+yulghun.com
+yunchao.net
+yuntipub.com
+yuvutu.com
+yvesgeleyn.com
+yx51.net
+yyii.org
+yzzk.com
+zacebook.com
+zalmos.com
+zannel.com
+zaobao.com
+zaozon.com
+zapto.org
+zattoo.com
+zb.com
+zdnet.com.tw
+zello.com
+zengjinyan.org
+zenmate.com
+zeronet.io
+zeutch.com
+zfreet.com
+zgsddh.com
+zgzcjj.net
+zh-yue.wikipedia.org
+zh.bitterwinter.org
+zh.ecdm.wikia.com
+zh.m.wikipedia.org
+zh.pokerstrategy.com
+zh.uncyclopedia.wikia.com
+zh.wikinews.org
+zh.wikipedia.org
+zh.wikisource.org
+zhanbin.net
+zhangboli.net
+zhangtianliang.com
+zhanlve.org
+zhao.1984.city
+zhao.jinhai.de
+zhenghui.org
+zhengjian.org
+zhengwunet.org
+zhenlibu.info
+zhenlibu1984.com
+zhenxiang.biz
+zhinengluyou.com
+zhongguo.ca
+zhongguorenquan.org
+zhongguotese.net
+zhongmeng.org
+zhoushuguang.com
+zhreader.com
+zhuangbi.me
+zhuanxing.cn
+zhuatieba.com
+zhuichaguoji.org
+zillionk.com
+zim.vn
+zinio.com
+ziporn.com
+zippyshare.com
+zkaip.com
+zmw.cn
+zodgame.us
+zomobo.net
+zonaeuropa.com
+zonghexinwen.com
+zonghexinwen.net
+zoogvpn.com
+zootool.com
+zoozle.net
+zorrovpn.com
+zozotown.com
+zpn.im
+zspeeder.me
+zsrhao.com
+zuo.la
+zuobiao.me
+zuola.com
+zvereff.com
+zynaima.com
+zynamics.com
+zyns.com
+zyzc9.com
+zzcartoon.com
+zzux.com
diff --git a/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/gwbn.txt b/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/gwbn.txt
new file mode 100644
index 0000000000..21021c28ae
--- /dev/null
+++ b/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/gwbn.txt
@@ -0,0 +1,94 @@
+42.196.0.0/14
+43.242.56.0/22
+43.242.144.0/22
+43.243.148.0/22
+43.247.208.0/22
+45.252.152.0/22
+45.252.200.0/22
+45.252.204.0/22
+45.252.208.0/22
+45.252.212.0/22
+45.252.216.0/22
+45.252.220.0/22
+45.252.224.0/22
+45.253.0.0/22
+45.253.4.0/22
+45.253.8.0/22
+45.253.12.0/22
+45.253.16.0/22
+45.253.20.0/22
+45.253.28.0/22
+45.253.36.0/22
+45.253.40.0/22
+45.253.56.0/22
+45.253.76.0/22
+45.253.80.0/22
+45.253.84.0/22
+45.253.92.0/22
+45.254.28.0/22
+45.254.56.0/22
+45.254.96.0/22
+45.254.132.0/22
+45.254.152.0/22
+45.254.180.0/22
+45.254.200.0/22
+45.254.204.0/22
+45.254.208.0/22
+45.254.212.0/22
+45.254.216.0/22
+45.254.220.0/22
+45.254.224.0/22
+45.254.228.0/22
+49.220.0.0/14
+101.130.0.0/15
+101.244.0.0/14
+103.23.56.0/22
+103.24.184.0/22
+103.38.0.0/22
+103.38.232.0/22
+103.221.88.0/22
+103.221.132.0/22
+103.221.156.0/22
+103.221.180.0/22
+103.221.184.0/22
+103.221.188.0/22
+103.221.192.0/22
+103.221.196.0/22
+103.222.0.0/22
+103.222.4.0/22
+103.222.8.0/22
+103.222.12.0/22
+103.222.16.0/22
+103.222.24.0/22
+103.222.28.0/22
+103.222.36.0/22
+103.222.44.0/22
+103.222.48.0/22
+103.222.56.0/22
+103.222.60.0/22
+103.222.64.0/22
+103.222.68.0/22
+103.222.72.0/22
+103.222.76.0/22
+103.222.80.0/22
+103.222.84.0/22
+103.222.88.0/22
+103.222.92.0/22
+103.222.96.0/22
+103.222.100.0/22
+103.222.104.0/22
+103.222.108.0/22
+103.222.200.0/22
+103.222.204.0/22
+103.222.208.0/22
+103.222.212.0/22
+115.190.0.0/15
+124.14.0.0/15
+124.254.0.0/18
+175.188.0.0/14
+180.88.0.0/14
+203.82.112.0/22
+203.86.64.0/20
+211.164.0.0/14
+220.112.0.0/14
+223.208.0.0/14
diff --git a/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/othernet.txt b/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/othernet.txt
new file mode 100644
index 0000000000..fdf3ade440
--- /dev/null
+++ b/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/othernet.txt
@@ -0,0 +1,5134 @@
+1.1.8.0/24
+1.2.2.0/24
+1.2.4.0/24
+1.2.8.0/24
+1.4.4.0/24
+1.8.0.0/16
+1.12.0.0/14
+1.45.0.0/16
+1.88.0.0/14
+1.92.0.0/15
+1.94.0.0/15
+1.118.0.0/16
+1.119.0.0/17
+1.119.128.0/17
+14.1.24.0/22
+14.1.96.0/22
+14.1.108.0/22
+14.102.156.0/22
+14.102.180.0/22
+14.103.0.0/16
+14.130.0.0/15
+14.192.60.0/22
+14.196.0.0/15
+27.0.160.0/22
+27.0.164.0/22
+27.0.188.0/22
+27.0.204.0/22
+27.0.208.0/22
+27.0.212.0/22
+27.98.208.0/20
+27.99.128.0/17
+27.103.0.0/16
+27.106.128.0/18
+27.106.204.0/22
+27.109.32.0/19
+27.109.124.0/22
+27.112.80.0/20
+27.112.112.0/22
+27.112.116.0/22
+27.113.128.0/18
+27.116.44.0/22
+27.123.232.0/22
+27.131.220.0/22
+27.144.0.0/16
+36.0.8.0/21
+36.0.64.0/18
+36.0.128.0/17
+36.36.0.0/16
+36.51.0.0/16
+36.254.0.0/16
+36.255.116.0/22
+36.255.128.0/22
+36.255.164.0/22
+36.255.172.0/22
+36.255.176.0/22
+36.255.220.0/22
+39.96.0.0/13
+39.104.0.0/14
+39.108.0.0/16
+40.72.0.0/15
+40.125.128.0/17
+40.126.64.0/18
+42.0.128.0/17
+42.50.0.0/16
+42.62.0.0/17
+42.83.128.0/17
+42.96.128.0/17
+42.120.0.0/15
+42.123.128.0/17
+42.128.0.0/12
+42.156.128.0/17
+42.157.0.0/16
+42.158.0.0/16
+42.159.0.0/16
+42.160.0.0/12
+42.186.0.0/16
+42.187.128.0/17
+42.192.0.0/15
+42.194.12.0/22
+42.194.128.0/17
+42.195.0.0/16
+42.201.0.0/17
+42.204.0.0/14
+42.208.0.0/12
+42.240.0.0/17
+42.240.128.0/17
+43.224.44.0/22
+43.224.64.0/22
+43.224.68.0/22
+43.224.72.0/22
+43.224.100.0/22
+43.224.144.0/22
+43.224.176.0/22
+43.224.184.0/22
+43.224.200.0/22
+43.224.204.0/22
+43.224.212.0/22
+43.224.216.0/22
+43.224.240.0/22
+43.225.76.0/22
+43.225.84.0/22
+43.225.124.0/22
+43.225.140.0/22
+43.225.172.0/22
+43.225.180.0/22
+43.225.208.0/22
+43.225.216.0/22
+43.225.220.0/22
+43.225.224.0/22
+43.225.228.0/22
+43.225.232.0/22
+43.225.236.0/22
+43.225.240.0/22
+43.225.244.0/22
+43.225.252.0/22
+43.226.32.0/22
+43.226.36.0/22
+43.226.40.0/22
+43.226.44.0/22
+43.226.48.0/22
+43.226.52.0/22
+43.226.56.0/22
+43.226.60.0/22
+43.226.64.0/22
+43.226.68.0/22
+43.226.72.0/22
+43.226.76.0/22
+43.226.80.0/22
+43.226.84.0/22
+43.226.88.0/22
+43.226.92.0/22
+43.226.112.0/22
+43.226.128.0/22
+43.226.132.0/22
+43.226.136.0/22
+43.226.140.0/22
+43.226.144.0/22
+43.226.148.0/22
+43.226.152.0/22
+43.226.156.0/22
+43.226.168.0/22
+43.226.172.0/22
+43.226.176.0/22
+43.226.180.0/22
+43.226.184.0/22
+43.226.188.0/22
+43.226.192.0/22
+43.226.196.0/22
+43.226.200.0/22
+43.226.204.0/22
+43.226.208.0/22
+43.226.212.0/22
+43.226.240.0/22
+43.226.244.0/22
+43.226.248.0/22
+43.226.252.0/22
+43.227.0.0/22
+43.227.4.0/22
+43.227.8.0/22
+43.227.32.0/22
+43.227.36.0/22
+43.227.40.0/22
+43.227.44.0/22
+43.227.48.0/22
+43.227.52.0/22
+43.227.56.0/22
+43.227.60.0/22
+43.227.64.0/22
+43.227.68.0/22
+43.227.72.0/22
+43.227.76.0/22
+43.227.80.0/22
+43.227.84.0/22
+43.227.88.0/22
+43.227.92.0/22
+43.227.96.0/22
+43.227.100.0/22
+43.227.136.0/22
+43.227.140.0/22
+43.227.144.0/22
+43.227.152.0/22
+43.227.156.0/22
+43.227.160.0/22
+43.227.164.0/22
+43.227.168.0/22
+43.227.172.0/22
+43.227.176.0/22
+43.227.180.0/22
+43.227.188.0/22
+43.227.192.0/22
+43.227.196.0/22
+43.227.200.0/22
+43.227.204.0/22
+43.227.208.0/22
+43.227.212.0/22
+43.227.216.0/22
+43.227.220.0/22
+43.227.232.0/22
+43.227.248.0/22
+43.227.252.0/22
+43.228.0.0/22
+43.228.4.0/22
+43.228.8.0/22
+43.228.12.0/22
+43.228.16.0/22
+43.228.20.0/22
+43.228.24.0/22
+43.228.28.0/22
+43.228.32.0/22
+43.228.36.0/22
+43.228.40.0/22
+43.228.44.0/22
+43.228.48.0/22
+43.228.52.0/22
+43.228.56.0/22
+43.228.60.0/22
+43.228.64.0/22
+43.228.68.0/22
+43.228.76.0/22
+43.228.100.0/22
+43.228.116.0/22
+43.228.120.0/22
+43.228.132.0/22
+43.228.136.0/22
+43.228.148.0/22
+43.228.152.0/22
+43.228.188.0/22
+43.229.16.0/22
+43.229.40.0/22
+43.229.48.0/22
+43.229.56.0/22
+43.229.96.0/22
+43.229.120.0/22
+43.229.136.0/22
+43.229.140.0/22
+43.229.144.0/22
+43.229.184.0/22
+43.229.188.0/22
+43.229.192.0/22
+43.229.196.0/22
+43.229.216.0/22
+43.229.220.0/22
+43.229.232.0/22
+43.230.20.0/22
+43.230.32.0/22
+43.230.68.0/22
+43.230.72.0/22
+43.230.84.0/22
+43.230.124.0/22
+43.230.136.0/22
+43.230.168.0/22
+43.230.220.0/22
+43.230.224.0/22
+43.230.228.0/22
+43.230.232.0/22
+43.230.236.0/22
+43.230.240.0/22
+43.230.244.0/22
+43.230.248.0/22
+43.230.252.0/22
+43.231.32.0/22
+43.231.36.0/22
+43.231.40.0/22
+43.231.44.0/22
+43.231.80.0/22
+43.231.84.0/22
+43.231.88.0/22
+43.231.92.0/22
+43.231.96.0/22
+43.231.100.0/22
+43.231.104.0/22
+43.231.108.0/22
+43.231.136.0/22
+43.231.140.0/22
+43.231.144.0/22
+43.231.148.0/22
+43.231.152.0/22
+43.231.156.0/22
+43.231.160.0/22
+43.231.164.0/22
+43.231.168.0/22
+43.231.172.0/22
+43.231.176.0/22
+43.231.180.0/22
+43.236.0.0/22
+43.236.4.0/22
+43.236.8.0/22
+43.236.12.0/22
+43.236.16.0/22
+43.236.20.0/22
+43.236.24.0/22
+43.236.28.0/22
+43.236.32.0/22
+43.236.36.0/22
+43.236.40.0/22
+43.236.44.0/22
+43.236.48.0/22
+43.236.52.0/22
+43.236.56.0/22
+43.236.60.0/22
+43.236.64.0/22
+43.236.68.0/22
+43.236.72.0/22
+43.236.76.0/22
+43.236.80.0/22
+43.236.84.0/22
+43.236.88.0/22
+43.236.92.0/22
+43.236.96.0/22
+43.236.100.0/22
+43.236.104.0/22
+43.236.108.0/22
+43.236.112.0/22
+43.236.116.0/22
+43.236.120.0/22
+43.236.124.0/22
+43.236.128.0/22
+43.236.132.0/22
+43.236.136.0/22
+43.236.140.0/22
+43.236.144.0/22
+43.236.148.0/22
+43.236.152.0/22
+43.236.156.0/22
+43.236.160.0/22
+43.236.164.0/22
+43.236.168.0/22
+43.236.172.0/22
+43.236.176.0/22
+43.236.180.0/22
+43.236.184.0/22
+43.236.188.0/22
+43.236.192.0/22
+43.236.196.0/22
+43.236.200.0/22
+43.236.204.0/22
+43.236.208.0/22
+43.236.212.0/22
+43.236.216.0/22
+43.236.220.0/22
+43.236.224.0/22
+43.236.228.0/22
+43.236.232.0/22
+43.236.236.0/22
+43.236.240.0/22
+43.236.244.0/22
+43.236.248.0/22
+43.236.252.0/22
+43.237.0.0/22
+43.237.4.0/22
+43.237.8.0/22
+43.237.12.0/22
+43.237.16.0/22
+43.237.20.0/22
+43.237.24.0/22
+43.237.28.0/22
+43.237.32.0/22
+43.237.36.0/22
+43.237.40.0/22
+43.237.44.0/22
+43.237.48.0/22
+43.237.52.0/22
+43.237.56.0/22
+43.237.60.0/22
+43.237.64.0/22
+43.237.68.0/22
+43.237.72.0/22
+43.237.76.0/22
+43.237.80.0/22
+43.237.84.0/22
+43.237.88.0/22
+43.237.92.0/22
+43.237.96.0/22
+43.237.100.0/22
+43.237.104.0/22
+43.237.108.0/22
+43.237.112.0/22
+43.237.116.0/22
+43.237.120.0/22
+43.237.124.0/22
+43.237.128.0/22
+43.237.132.0/22
+43.237.136.0/22
+43.237.140.0/22
+43.237.144.0/22
+43.237.148.0/22
+43.237.152.0/22
+43.237.156.0/22
+43.237.160.0/22
+43.237.164.0/22
+43.237.168.0/22
+43.237.172.0/22
+43.237.176.0/22
+43.237.180.0/22
+43.237.184.0/22
+43.237.188.0/22
+43.237.192.0/22
+43.237.196.0/22
+43.237.200.0/22
+43.237.204.0/22
+43.237.208.0/22
+43.237.212.0/22
+43.237.216.0/22
+43.237.220.0/22
+43.237.224.0/22
+43.237.228.0/22
+43.237.232.0/22
+43.237.236.0/22
+43.237.240.0/22
+43.237.244.0/22
+43.237.248.0/22
+43.237.252.0/22
+43.238.0.0/22
+43.238.4.0/22
+43.238.8.0/22
+43.238.12.0/22
+43.238.16.0/22
+43.238.20.0/22
+43.238.24.0/22
+43.238.28.0/22
+43.238.32.0/22
+43.238.36.0/22
+43.238.40.0/22
+43.238.44.0/22
+43.238.48.0/22
+43.238.52.0/22
+43.238.56.0/22
+43.238.60.0/22
+43.238.64.0/22
+43.238.68.0/22
+43.238.72.0/22
+43.238.76.0/22
+43.238.80.0/22
+43.238.84.0/22
+43.238.88.0/22
+43.238.92.0/22
+43.238.96.0/22
+43.238.100.0/22
+43.238.104.0/22
+43.238.108.0/22
+43.238.112.0/22
+43.238.116.0/22
+43.238.120.0/22
+43.238.124.0/22
+43.238.128.0/22
+43.238.132.0/22
+43.238.136.0/22
+43.238.140.0/22
+43.238.144.0/22
+43.238.148.0/22
+43.238.152.0/22
+43.238.156.0/22
+43.238.160.0/22
+43.238.164.0/22
+43.238.168.0/22
+43.238.172.0/22
+43.238.176.0/22
+43.238.180.0/22
+43.238.184.0/22
+43.238.188.0/22
+43.238.192.0/22
+43.238.196.0/22
+43.238.200.0/22
+43.238.204.0/22
+43.238.208.0/22
+43.238.212.0/22
+43.238.216.0/22
+43.238.220.0/22
+43.238.224.0/22
+43.238.228.0/22
+43.238.232.0/22
+43.238.236.0/22
+43.238.240.0/22
+43.238.244.0/22
+43.238.248.0/22
+43.238.252.0/22
+43.239.0.0/22
+43.239.4.0/22
+43.239.8.0/21
+43.239.16.0/22
+43.239.20.0/22
+43.239.24.0/22
+43.239.28.0/22
+43.239.32.0/22
+43.239.36.0/22
+43.239.40.0/22
+43.239.44.0/22
+43.239.48.0/22
+43.239.116.0/22
+43.239.176.0/22
+43.240.48.0/22
+43.240.56.0/22
+43.240.60.0/22
+43.240.68.0/22
+43.240.76.0/22
+43.240.84.0/22
+43.240.124.0/22
+43.240.128.0/22
+43.240.136.0/22
+43.240.156.0/22
+43.240.160.0/22
+43.240.164.0/22
+43.240.168.0/22
+43.240.172.0/22
+43.240.176.0/22
+43.240.180.0/22
+43.240.184.0/22
+43.240.188.0/22
+43.240.200.0/22
+43.240.208.0/22
+43.240.212.0/22
+43.240.216.0/22
+43.240.220.0/22
+43.240.236.0/22
+43.240.240.0/22
+43.240.244.0/22
+43.240.248.0/22
+43.240.252.0/22
+43.241.0.0/22
+43.241.4.0/22
+43.241.8.0/22
+43.241.12.0/22
+43.241.16.0/22
+43.241.20.0/22
+43.241.76.0/22
+43.241.80.0/22
+43.241.84.0/22
+43.241.88.0/22
+43.241.112.0/22
+43.241.168.0/22
+43.241.172.0/22
+43.241.176.0/22
+43.241.180.0/22
+43.241.196.0/22
+43.241.208.0/22
+43.241.212.0/22
+43.241.216.0/22
+43.241.220.0/22
+43.241.224.0/22
+43.241.228.0/22
+43.241.232.0/22
+43.241.236.0/22
+43.241.240.0/22
+43.241.248.0/22
+43.241.252.0/22
+43.242.8.0/22
+43.242.12.0/22
+43.242.16.0/22
+43.242.20.0/22
+43.242.24.0/22
+43.242.28.0/22
+43.242.44.0/22
+43.242.48.0/22
+43.242.52.0/22
+43.242.60.0/22
+43.242.72.0/22
+43.242.76.0/22
+43.242.80.0/22
+43.242.84.0/22
+43.242.88.0/22
+43.242.92.0/22
+43.242.96.0/22
+43.242.160.0/22
+43.242.168.0/22
+43.242.188.0/22
+43.242.196.0/22
+43.242.204.0/22
+43.242.216.0/22
+43.242.220.0/22
+43.242.252.0/22
+43.243.8.0/22
+43.243.12.0/22
+43.243.24.0/22
+43.243.136.0/22
+43.243.144.0/22
+43.243.168.0/22
+43.243.188.0/22
+43.243.244.0/22
+43.246.0.0/22
+43.246.4.0/22
+43.246.8.0/22
+43.246.12.0/22
+43.246.16.0/22
+43.246.20.0/22
+43.246.24.0/22
+43.246.28.0/22
+43.246.32.0/22
+43.246.36.0/22
+43.246.40.0/22
+43.246.44.0/22
+43.246.48.0/22
+43.246.52.0/22
+43.246.56.0/22
+43.246.60.0/22
+43.246.64.0/22
+43.246.68.0/22
+43.246.72.0/22
+43.246.76.0/22
+43.246.80.0/22
+43.246.84.0/22
+43.246.88.0/22
+43.246.92.0/22
+43.246.96.0/22
+43.246.212.0/22
+43.246.228.0/22
+43.247.4.0/22
+43.247.8.0/22
+43.247.44.0/22
+43.247.48.0/22
+43.247.68.0/22
+43.247.76.0/22
+43.247.84.0/22
+43.247.96.0/22
+43.247.100.0/22
+43.247.108.0/22
+43.247.112.0/22
+43.247.148.0/22
+43.247.152.0/22
+43.247.176.0/22
+43.247.180.0/22
+43.247.184.0/22
+43.247.188.0/22
+43.247.196.0/22
+43.247.200.0/22
+43.247.204.0/22
+43.247.220.0/22
+43.247.224.0/22
+43.247.228.0/22
+43.247.232.0/22
+43.247.236.0/22
+43.247.244.0/22
+43.247.248.0/22
+43.247.252.0/22
+43.248.0.0/22
+43.248.28.0/22
+43.248.76.0/22
+43.248.96.0/22
+43.248.100.0/22
+43.248.104.0/22
+43.248.112.0/22
+43.248.116.0/22
+43.248.120.0/22
+43.248.124.0/22
+43.248.128.0/22
+43.248.132.0/22
+43.248.136.0/22
+43.248.140.0/22
+43.248.144.0/22
+43.248.208.0/22
+43.248.228.0/22
+43.248.232.0/22
+43.249.8.0/22
+43.249.24.0/22
+43.249.120.0/22
+43.249.132.0/22
+43.249.148.0/22
+43.249.152.0/22
+43.249.156.0/22
+43.249.160.0/22
+43.249.164.0/22
+43.249.168.0/22
+43.250.12.0/22
+43.250.16.0/22
+43.250.20.0/22
+43.250.28.0/22
+43.250.36.0/22
+43.250.72.0/22
+43.250.100.0/22
+43.250.104.0/22
+43.250.108.0/22
+43.250.116.0/22
+43.250.148.0/22
+43.250.160.0/22
+43.250.172.0/22
+43.250.176.0/22
+43.250.216.0/22
+43.250.220.0/22
+43.250.236.0/22
+43.251.8.0/22
+43.251.12.0/22
+43.251.100.0/22
+43.251.116.0/22
+43.251.192.0/22
+43.251.236.0/22
+43.252.40.0/22
+43.252.48.0/22
+43.252.56.0/22
+43.252.224.0/22
+43.254.0.0/22
+43.254.4.0/22
+43.254.8.0/22
+43.254.24.0/22
+43.254.36.0/22
+43.254.64.0/22
+43.254.72.0/22
+43.254.84.0/22
+43.254.88.0/22
+43.254.92.0/22
+43.254.100.0/22
+43.254.112.0/22
+43.254.128.0/22
+43.254.140.0/22
+43.254.152.0/22
+43.254.156.0/22
+43.254.168.0/22
+43.254.172.0/22
+43.254.180.0/22
+43.254.184.0/22
+43.254.188.0/22
+43.254.192.0/22
+43.254.196.0/22
+43.254.200.0/22
+43.254.208.0/22
+43.254.224.0/22
+43.254.228.0/22
+43.254.232.0/22
+43.254.236.0/22
+43.254.240.0/22
+43.254.248.0/22
+43.254.252.0/22
+43.255.0.0/22
+43.255.4.0/22
+43.255.8.0/22
+43.255.16.0/22
+43.255.48.0/22
+43.255.64.0/22
+43.255.68.0/22
+43.255.72.0/22
+43.255.76.0/22
+43.255.96.0/22
+43.255.108.0/22
+43.255.144.0/22
+43.255.168.0/22
+43.255.176.0/22
+43.255.184.0/22
+43.255.192.0/22
+43.255.200.0/22
+43.255.208.0/22
+43.255.212.0/22
+43.255.224.0/22
+43.255.228.0/22
+43.255.232.0/22
+43.255.244.0/22
+45.40.192.0/18
+45.65.16.0/22
+45.65.20.0/22
+45.65.24.0/22
+45.65.28.0/22
+45.112.132.0/22
+45.112.188.0/22
+45.112.208.0/22
+45.112.212.0/22
+45.112.216.0/22
+45.112.220.0/22
+45.112.236.0/22
+45.113.12.0/22
+45.113.16.0/22
+45.113.20.0/22
+45.113.40.0/22
+45.113.52.0/22
+45.113.56.0/22
+45.113.72.0/22
+45.113.144.0/22
+45.113.148.0/22
+45.113.168.0/22
+45.113.176.0/22
+45.113.184.0/22
+45.113.204.0/22
+45.113.208.0/22
+45.113.212.0/22
+45.113.216.0/22
+45.113.220.0/22
+45.114.0.0/22
+45.114.12.0/22
+45.114.32.0/22
+45.114.40.0/22
+45.114.52.0/22
+45.114.96.0/22
+45.114.104.0/22
+45.114.108.0/22
+45.114.124.0/22
+45.114.136.0/22
+45.114.196.0/22
+45.114.200.0/22
+45.114.228.0/22
+45.115.44.0/22
+45.115.100.0/22
+45.115.120.0/22
+45.115.132.0/22
+45.115.212.0/22
+45.115.228.0/22
+45.115.236.0/22
+45.115.244.0/22
+45.116.12.0/22
+45.116.16.0/22
+45.116.24.0/22
+45.116.32.0/22
+45.116.36.0/22
+45.116.52.0/22
+45.116.96.0/22
+45.116.100.0/22
+45.116.140.0/22
+45.116.152.0/22
+45.116.208.0/22
+45.117.20.0/22
+45.117.68.0/22
+45.117.252.0/22
+45.119.52.0/22
+45.119.60.0/22
+45.119.72.0/22
+45.119.104.0/22
+45.119.116.0/22
+45.119.232.0/22
+45.120.140.0/22
+45.120.164.0/22
+45.120.220.0/22
+45.120.240.0/22
+45.121.20.0/22
+45.121.64.0/22
+45.121.92.0/22
+45.121.104.0/22
+45.121.212.0/22
+45.121.240.0/22
+45.121.244.0/22
+45.121.248.0/22
+45.121.252.0/22
+45.122.0.0/22
+45.122.4.0/22
+45.122.8.0/22
+45.122.12.0/22
+45.122.16.0/22
+45.122.20.0/22
+45.122.24.0/22
+45.122.28.0/22
+45.122.32.0/22
+45.122.36.0/22
+45.122.40.0/22
+45.122.60.0/22
+45.122.64.0/22
+45.122.68.0/22
+45.122.72.0/22
+45.122.76.0/22
+45.122.80.0/22
+45.122.84.0/22
+45.122.88.0/22
+45.122.92.0/22
+45.122.104.0/22
+45.122.108.0/22
+45.122.112.0/22
+45.122.116.0/22
+45.122.160.0/22
+45.122.164.0/22
+45.122.168.0/22
+45.122.172.0/22
+45.122.176.0/22
+45.122.180.0/22
+45.122.184.0/22
+45.122.188.0/22
+45.122.192.0/22
+45.122.196.0/22
+45.122.200.0/22
+45.122.204.0/22
+45.122.208.0/22
+45.122.212.0/22
+45.122.216.0/22
+45.123.28.0/22
+45.123.32.0/22
+45.123.36.0/22
+45.123.44.0/22
+45.123.48.0/22
+45.123.52.0/22
+45.123.56.0/22
+45.123.60.0/22
+45.123.64.0/22
+45.123.68.0/22
+45.123.72.0/22
+45.123.76.0/22
+45.123.80.0/22
+45.123.84.0/22
+45.123.88.0/22
+45.123.120.0/22
+45.123.128.0/22
+45.123.132.0/22
+45.123.136.0/22
+45.123.148.0/22
+45.123.164.0/22
+45.123.168.0/22
+45.123.172.0/22
+45.123.176.0/22
+45.123.180.0/22
+45.123.184.0/22
+45.123.204.0/22
+45.123.212.0/22
+45.123.224.0/22
+45.123.228.0/22
+45.123.232.0/22
+45.123.236.0/22
+45.123.240.0/22
+45.123.244.0/22
+45.123.248.0/22
+45.123.252.0/22
+45.124.0.0/22
+45.124.28.0/22
+45.124.32.0/22
+45.124.44.0/22
+45.124.76.0/22
+45.124.100.0/22
+45.124.124.0/22
+45.124.172.0/22
+45.124.176.0/22
+45.124.208.0/22
+45.124.248.0/22
+45.124.252.0/22
+45.125.12.0/22
+45.125.16.0/22
+45.125.28.0/22
+45.125.32.0/22
+45.125.52.0/22
+45.125.56.0/22
+45.125.76.0/22
+45.125.80.0/22
+45.125.84.0/22
+45.125.88.0/22
+45.125.92.0/22
+45.125.96.0/22
+45.125.100.0/22
+45.125.104.0/22
+45.125.136.0/22
+45.126.48.0/22
+45.126.52.0/22
+45.126.100.0/22
+45.126.112.0/22
+45.126.116.0/22
+45.126.212.0/22
+45.126.220.0/22
+45.127.8.0/22
+45.127.12.0/22
+45.127.96.0/22
+45.127.116.0/22
+45.127.124.0/22
+45.127.128.0/22
+45.127.144.0/22
+45.127.148.0/22
+45.127.156.0/22
+45.127.216.0/22
+45.248.80.0/22
+45.248.84.0/22
+45.248.88.0/22
+45.248.96.0/22
+45.248.100.0/22
+45.248.104.0/22
+45.248.108.0/22
+45.248.128.0/22
+45.248.132.0/22
+45.248.204.0/22
+45.248.208.0/22
+45.248.212.0/22
+45.248.216.0/22
+45.248.220.0/22
+45.248.224.0/22
+45.248.228.0/22
+45.248.232.0/22
+45.248.236.0/22
+45.248.240.0/22
+45.248.244.0/22
+45.248.248.0/22
+45.248.252.0/22
+45.249.0.0/22
+45.249.4.0/22
+45.249.12.0/22
+45.249.16.0/22
+45.249.20.0/22
+45.249.24.0/22
+45.249.28.0/22
+45.249.32.0/22
+45.249.36.0/22
+45.249.92.0/22
+45.249.180.0/22
+45.249.188.0/22
+45.249.192.0/22
+45.249.196.0/22
+45.249.200.0/22
+45.249.204.0/22
+45.249.208.0/22
+45.249.212.0/22
+45.250.28.0/22
+45.250.152.0/22
+45.250.164.0/22
+45.250.180.0/22
+45.250.184.0/22
+45.250.188.0/22
+45.250.192.0/22
+45.251.0.0/22
+45.251.8.0/22
+45.251.20.0/22
+45.251.52.0/22
+45.251.92.0/22
+45.251.96.0/22
+45.251.100.0/22
+45.251.120.0/22
+45.251.124.0/22
+45.251.136.0/22
+45.251.140.0/22
+45.251.144.0/22
+45.251.148.0/22
+45.251.152.0/22
+45.251.156.0/22
+45.251.160.0/22
+45.251.164.0/22
+45.251.168.0/22
+45.251.172.0/22
+45.251.176.0/22
+45.251.180.0/22
+45.251.184.0/22
+45.251.188.0/22
+45.251.192.0/22
+45.251.196.0/22
+45.251.200.0/22
+45.251.204.0/22
+45.251.208.0/22
+45.251.212.0/22
+45.251.216.0/22
+45.251.220.0/22
+45.251.224.0/22
+45.251.240.0/22
+45.252.0.0/22
+45.252.4.0/22
+45.252.8.0/22
+45.252.12.0/22
+45.252.16.0/22
+45.252.20.0/22
+45.252.24.0/22
+45.252.28.0/22
+45.252.32.0/22
+45.252.36.0/22
+45.252.40.0/22
+45.252.44.0/22
+45.252.48.0/22
+45.252.60.0/22
+45.252.84.0/22
+45.252.88.0/22
+45.252.92.0/22
+45.252.96.0/22
+45.252.100.0/22
+45.252.108.0/22
+45.252.112.0/22
+45.252.116.0/22
+45.252.120.0/22
+45.252.124.0/22
+45.252.128.0/22
+45.252.132.0/22
+45.252.136.0/22
+45.252.140.0/22
+45.252.144.0/22
+45.252.148.0/22
+45.252.156.0/22
+45.252.160.0/22
+45.252.164.0/22
+45.252.168.0/22
+45.252.172.0/22
+45.252.176.0/22
+45.252.192.0/22
+45.252.196.0/22
+45.252.228.0/22
+45.252.232.0/22
+45.253.44.0/22
+45.253.48.0/22
+45.253.52.0/22
+45.253.60.0/22
+45.253.68.0/22
+45.253.96.0/22
+45.253.100.0/22
+45.253.104.0/22
+45.253.108.0/22
+45.253.112.0/22
+45.253.116.0/22
+45.253.120.0/22
+45.253.132.0/22
+45.253.136.0/22
+45.253.140.0/22
+45.253.144.0/22
+45.253.148.0/22
+45.253.152.0/22
+45.253.156.0/22
+45.253.160.0/22
+45.253.164.0/22
+45.253.168.0/22
+45.253.172.0/22
+45.253.176.0/22
+45.253.180.0/22
+45.253.184.0/22
+45.253.188.0/22
+45.253.192.0/22
+45.253.196.0/22
+45.253.200.0/22
+45.253.204.0/22
+45.253.208.0/22
+45.253.212.0/22
+45.253.216.0/22
+45.253.220.0/22
+45.253.224.0/22
+45.253.228.0/22
+45.253.232.0/22
+45.253.236.0/22
+45.253.240.0/22
+45.253.244.0/22
+45.253.248.0/22
+45.253.252.0/22
+45.254.0.0/22
+45.254.4.0/22
+45.254.8.0/22
+45.254.12.0/22
+45.254.16.0/22
+45.254.20.0/22
+45.254.24.0/22
+45.254.40.0/22
+45.254.48.0/22
+45.254.52.0/22
+45.254.60.0/22
+45.254.64.0/22
+45.254.68.0/22
+45.254.72.0/22
+45.254.76.0/22
+45.254.80.0/22
+45.254.84.0/22
+45.254.88.0/22
+45.254.92.0/22
+45.254.100.0/22
+45.254.104.0/22
+45.254.108.0/22
+45.254.112.0/22
+45.254.116.0/22
+45.254.120.0/22
+45.254.124.0/22
+45.254.128.0/22
+45.254.136.0/22
+45.254.140.0/22
+45.254.144.0/22
+45.254.148.0/22
+45.254.156.0/22
+45.254.160.0/22
+45.254.164.0/22
+45.254.168.0/22
+45.254.172.0/22
+45.254.176.0/22
+45.254.184.0/22
+45.254.188.0/22
+45.254.192.0/22
+45.254.196.0/22
+45.254.236.0/22
+45.254.240.0/22
+45.254.248.0/22
+45.255.0.0/22
+45.255.4.0/22
+45.255.8.0/22
+45.255.12.0/22
+45.255.16.0/22
+45.255.20.0/22
+45.255.24.0/22
+45.255.28.0/22
+45.255.32.0/22
+45.255.36.0/22
+45.255.40.0/22
+45.255.44.0/22
+45.255.48.0/22
+45.255.52.0/22
+45.255.56.0/22
+45.255.60.0/22
+45.255.64.0/22
+45.255.68.0/22
+45.255.72.0/22
+45.255.76.0/22
+45.255.80.0/22
+45.255.84.0/22
+45.255.88.0/22
+45.255.92.0/22
+45.255.96.0/22
+45.255.100.0/22
+45.255.104.0/22
+45.255.108.0/22
+45.255.112.0/22
+45.255.116.0/22
+45.255.120.0/22
+45.255.124.0/22
+45.255.132.0/22
+45.255.136.0/22
+45.255.140.0/22
+45.255.144.0/22
+45.255.148.0/22
+45.255.152.0/22
+45.255.156.0/22
+45.255.160.0/22
+45.255.164.0/22
+45.255.168.0/22
+45.255.172.0/22
+45.255.176.0/22
+45.255.180.0/22
+45.255.184.0/22
+45.255.188.0/22
+45.255.192.0/22
+45.255.196.0/22
+45.255.200.0/22
+45.255.204.0/22
+45.255.208.0/22
+45.255.212.0/22
+45.255.216.0/22
+45.255.220.0/22
+45.255.224.0/22
+45.255.228.0/22
+45.255.232.0/22
+45.255.236.0/22
+45.255.240.0/22
+45.255.244.0/22
+45.255.248.0/22
+47.92.0.0/14
+47.96.0.0/11
+49.4.0.0/14
+49.51.0.0/16
+49.128.4.0/22
+49.152.0.0/14
+49.210.0.0/15
+49.232.0.0/14
+49.239.0.0/18
+49.239.192.0/18
+49.246.224.0/19
+52.80.0.0/15
+52.82.0.0/15
+52.130.0.0/15
+54.222.0.0/15
+58.14.0.0/15
+58.66.0.0/15
+58.68.128.0/17
+58.82.0.0/17
+58.83.0.0/17
+58.83.128.0/17
+58.87.64.0/18
+58.99.128.0/17
+58.100.0.0/15
+58.116.0.0/14
+58.128.0.0/13
+59.80.0.0/15
+59.82.0.0/15
+59.107.0.0/17
+59.107.128.0/17
+59.108.0.0/15
+59.110.0.0/15
+59.151.0.0/17
+59.152.16.0/22
+59.152.20.0/22
+59.152.24.0/22
+59.152.28.0/22
+59.152.32.0/22
+59.152.36.0/22
+59.152.64.0/22
+59.152.68.0/22
+59.152.72.0/22
+59.152.76.0/22
+59.152.112.0/22
+59.152.116.0/22
+59.153.4.0/22
+59.153.32.0/22
+59.153.60.0/22
+59.153.64.0/22
+59.153.68.0/22
+59.153.72.0/22
+59.153.92.0/22
+59.153.116.0/22
+59.153.136.0/22
+59.153.152.0/22
+59.153.156.0/22
+59.153.164.0/22
+59.153.168.0/22
+59.153.172.0/22
+59.153.176.0/22
+59.153.180.0/22
+59.153.184.0/22
+59.153.188.0/22
+59.153.192.0/22
+59.155.0.0/16
+59.191.0.0/17
+59.191.240.0/20
+59.192.0.0/10
+60.55.0.0/16
+60.194.0.0/15
+60.200.0.0/14
+60.205.0.0/16
+60.206.0.0/15
+60.232.0.0/15
+60.245.128.0/17
+60.252.0.0/16
+61.4.80.0/22
+61.4.176.0/20
+61.8.160.0/20
+61.14.212.0/22
+61.14.216.0/22
+61.14.220.0/22
+61.29.192.0/19
+61.29.224.0/20
+61.29.240.0/20
+61.47.128.0/18
+61.87.192.0/18
+62.234.0.0/16
+68.79.0.0/18
+69.230.192.0/18
+69.231.128.0/18
+69.234.192.0/18
+69.235.128.0/18
+71.131.192.0/18
+71.132.0.0/18
+71.136.64.0/18
+71.137.0.0/18
+81.68.0.0/14
+82.156.0.0/15
+94.191.0.0/17
+101.32.0.0/14
+101.36.0.0/17
+101.36.128.0/17
+101.37.0.0/16
+101.38.0.0/15
+101.40.0.0/13
+101.48.0.0/15
+101.50.8.0/22
+101.50.12.0/22
+101.52.0.0/16
+101.54.0.0/16
+101.78.32.0/19
+101.96.128.0/17
+101.104.0.0/14
+101.120.0.0/14
+101.124.0.0/15
+101.126.0.0/16
+101.129.0.0/16
+101.132.0.0/14
+101.192.0.0/14
+101.196.0.0/16
+101.197.0.0/16
+101.198.0.0/15
+101.200.0.0/15
+101.236.0.0/14
+101.240.0.0/14
+101.251.64.0/18
+101.251.128.0/17
+101.252.0.0/15
+101.254.0.0/16
+103.1.8.0/22
+103.1.20.0/22
+103.1.24.0/22
+103.1.72.0/22
+103.1.88.0/22
+103.1.168.0/22
+103.2.108.0/22
+103.2.156.0/22
+103.2.164.0/22
+103.2.200.0/22
+103.2.204.0/22
+103.2.208.0/22
+103.2.212.0/22
+103.3.84.0/22
+103.3.88.0/22
+103.3.92.0/22
+103.4.56.0/22
+103.4.168.0/22
+103.4.184.0/22
+103.4.224.0/22
+103.5.36.0/22
+103.5.52.0/22
+103.5.152.0/22
+103.6.76.0/22
+103.6.108.0/22
+103.6.220.0/22
+103.6.228.0/22
+103.7.4.0/22
+103.7.28.0/22
+103.7.140.0/22
+103.7.216.0/22
+103.7.220.0/22
+103.8.0.0/22
+103.8.4.0/22
+103.8.8.0/22
+103.8.32.0/22
+103.8.52.0/22
+103.8.68.0/22
+103.8.108.0/22
+103.8.156.0/22
+103.8.200.0/22
+103.8.204.0/22
+103.8.220.0/22
+103.9.8.0/22
+103.9.24.0/22
+103.9.108.0/22
+103.9.152.0/22
+103.9.192.0/22
+103.10.0.0/22
+103.10.16.0/22
+103.10.84.0/22
+103.10.140.0/22
+103.11.16.0/22
+103.11.168.0/22
+103.11.180.0/22
+103.12.32.0/22
+103.12.92.0/22
+103.12.136.0/22
+103.12.184.0/22
+103.12.232.0/22
+103.13.12.0/22
+103.13.72.0/23
+103.13.124.0/22
+103.13.144.0/22
+103.13.196.0/22
+103.13.220.0/22
+103.13.244.0/22
+103.14.32.0/22
+103.14.100.0/22
+103.14.136.0/22
+103.14.156.0/22
+103.14.240.0/22
+103.15.4.0/22
+103.15.8.0/22
+103.15.16.0/22
+103.15.96.0/22
+103.15.200.0/22
+103.16.52.0/22
+103.16.80.0/22
+103.16.84.0/22
+103.16.88.0/22
+103.16.108.0/22
+103.16.124.0/22
+103.17.40.0/22
+103.17.64.0/22
+103.17.120.0/22
+103.17.136.0/22
+103.17.160.0/22
+103.17.204.0/22
+103.17.228.0/22
+103.18.192.0/22
+103.18.208.0/22
+103.18.212.0/22
+103.19.0.0/22
+103.19.12.0/22
+103.19.40.0/22
+103.19.44.0/22
+103.19.64.0/22
+103.19.68.0/22
+103.19.72.0/22
+103.19.232.0/22
+103.20.12.0/22
+103.20.32.0/22
+103.20.44.0/22
+103.20.68.0/22
+103.20.128.0/22
+103.20.160.0/22
+103.20.248.0/22
+103.21.112.0/22
+103.21.136.0/22
+103.21.140.0/22
+103.21.208.0/22
+103.21.240.0/22
+103.22.228.0/22
+103.22.252.0/22
+103.23.8.0/22
+103.23.160.0/22
+103.23.164.0/22
+103.23.176.0/22
+103.23.228.0/22
+103.24.24.0/22
+103.24.116.0/22
+103.24.128.0/22
+103.24.144.0/22
+103.24.176.0/22
+103.24.220.0/22
+103.24.228.0/22
+103.24.248.0/22
+103.24.252.0/22
+103.25.8.0/23
+103.25.20.0/22
+103.25.24.0/22
+103.25.28.0/22
+103.25.32.0/22
+103.25.36.0/22
+103.25.48.0/22
+103.25.64.0/22
+103.25.68.0/22
+103.25.148.0/22
+103.25.156.0/22
+103.25.216.0/22
+103.26.0.0/22
+103.26.64.0/22
+103.26.76.0/22
+103.26.132.0/22
+103.26.156.0/22
+103.26.160.0/22
+103.26.228.0/22
+103.26.240.0/22
+103.27.12.0/22
+103.27.24.0/22
+103.27.56.0/22
+103.27.96.0/22
+103.27.184.0/22
+103.27.208.0/22
+103.27.212.0/22
+103.28.4.0/22
+103.28.8.0/22
+103.28.184.0/22
+103.28.212.0/22
+103.29.16.0/22
+103.29.132.0/22
+103.29.136.0/22
+103.30.20.0/22
+103.30.96.0/22
+103.30.148.0/22
+103.30.200.0/22
+103.30.228.0/22
+103.30.236.0/22
+103.31.0.0/22
+103.31.48.0/22
+103.31.52.0/22
+103.31.56.0/22
+103.31.60.0/22
+103.31.64.0/22
+103.31.68.0/22
+103.31.148.0/22
+103.31.160.0/22
+103.31.168.0/22
+103.31.236.0/22
+103.32.0.0/22
+103.32.4.0/22
+103.32.8.0/22
+103.32.12.0/22
+103.32.16.0/22
+103.32.20.0/22
+103.32.24.0/22
+103.32.28.0/22
+103.32.32.0/22
+103.32.36.0/22
+103.32.40.0/22
+103.32.44.0/22
+103.32.48.0/22
+103.32.52.0/22
+103.32.56.0/22
+103.32.60.0/22
+103.32.64.0/22
+103.32.68.0/22
+103.32.72.0/22
+103.32.76.0/22
+103.32.80.0/22
+103.32.84.0/22
+103.32.88.0/22
+103.32.92.0/22
+103.32.96.0/22
+103.32.100.0/22
+103.32.104.0/22
+103.32.108.0/22
+103.32.112.0/22
+103.32.116.0/22
+103.32.120.0/22
+103.32.124.0/22
+103.32.128.0/22
+103.32.132.0/22
+103.32.136.0/22
+103.32.140.0/22
+103.32.144.0/22
+103.32.148.0/22
+103.32.152.0/22
+103.32.156.0/22
+103.32.160.0/22
+103.32.164.0/22
+103.32.168.0/22
+103.32.172.0/22
+103.32.176.0/22
+103.32.180.0/22
+103.32.184.0/22
+103.32.188.0/22
+103.32.192.0/22
+103.32.196.0/22
+103.32.200.0/22
+103.32.204.0/22
+103.32.208.0/22
+103.32.212.0/22
+103.32.216.0/22
+103.32.220.0/22
+103.32.224.0/22
+103.32.228.0/22
+103.32.232.0/22
+103.32.236.0/22
+103.32.240.0/22
+103.32.244.0/22
+103.32.248.0/22
+103.32.252.0/22
+103.33.0.0/22
+103.33.4.0/22
+103.33.8.0/22
+103.33.12.0/22
+103.33.16.0/22
+103.33.20.0/22
+103.33.24.0/22
+103.33.28.0/22
+103.33.32.0/22
+103.33.36.0/22
+103.33.40.0/22
+103.33.44.0/22
+103.33.48.0/22
+103.33.52.0/22
+103.33.56.0/22
+103.33.60.0/22
+103.33.64.0/22
+103.33.68.0/22
+103.33.72.0/22
+103.33.76.0/22
+103.33.80.0/22
+103.33.84.0/22
+103.33.88.0/22
+103.33.92.0/22
+103.33.96.0/22
+103.33.100.0/22
+103.33.104.0/22
+103.33.108.0/22
+103.33.112.0/22
+103.33.116.0/22
+103.33.120.0/22
+103.33.124.0/22
+103.33.128.0/22
+103.33.132.0/22
+103.33.136.0/22
+103.33.140.0/22
+103.33.144.0/22
+103.33.148.0/22
+103.33.152.0/22
+103.33.156.0/22
+103.33.160.0/22
+103.33.164.0/22
+103.33.168.0/22
+103.33.172.0/22
+103.33.176.0/22
+103.33.180.0/22
+103.33.184.0/22
+103.33.188.0/22
+103.33.192.0/22
+103.33.196.0/22
+103.33.200.0/22
+103.33.204.0/22
+103.33.208.0/22
+103.33.212.0/22
+103.33.216.0/22
+103.33.220.0/22
+103.33.224.0/22
+103.33.228.0/22
+103.33.232.0/22
+103.33.236.0/22
+103.33.240.0/22
+103.33.244.0/22
+103.33.248.0/22
+103.33.252.0/22
+103.34.0.0/22
+103.34.4.0/22
+103.34.8.0/22
+103.34.12.0/22
+103.34.16.0/22
+103.34.20.0/22
+103.34.24.0/22
+103.34.28.0/22
+103.34.32.0/22
+103.34.36.0/22
+103.34.40.0/22
+103.34.44.0/22
+103.34.48.0/22
+103.34.52.0/22
+103.34.56.0/22
+103.34.60.0/22
+103.34.64.0/22
+103.34.68.0/22
+103.34.72.0/22
+103.34.76.0/22
+103.34.80.0/22
+103.34.84.0/22
+103.34.88.0/22
+103.34.92.0/22
+103.34.96.0/22
+103.34.100.0/22
+103.34.104.0/22
+103.34.108.0/22
+103.34.112.0/22
+103.34.116.0/22
+103.34.120.0/22
+103.34.124.0/22
+103.34.128.0/22
+103.34.132.0/22
+103.34.136.0/22
+103.34.140.0/22
+103.34.144.0/22
+103.34.148.0/22
+103.34.152.0/22
+103.34.156.0/22
+103.34.160.0/22
+103.34.164.0/22
+103.34.168.0/22
+103.34.172.0/22
+103.34.176.0/22
+103.34.180.0/22
+103.34.184.0/22
+103.34.188.0/22
+103.34.192.0/22
+103.34.196.0/22
+103.34.200.0/22
+103.34.204.0/22
+103.34.208.0/22
+103.34.212.0/22
+103.34.216.0/22
+103.34.220.0/22
+103.34.224.0/22
+103.34.228.0/22
+103.34.232.0/22
+103.34.236.0/22
+103.34.240.0/22
+103.34.244.0/22
+103.34.248.0/22
+103.34.252.0/22
+103.35.0.0/22
+103.35.4.0/22
+103.35.8.0/22
+103.35.12.0/22
+103.35.16.0/22
+103.35.20.0/22
+103.35.24.0/22
+103.35.28.0/22
+103.35.32.0/22
+103.35.36.0/22
+103.35.40.0/22
+103.35.44.0/22
+103.35.48.0/22
+103.35.116.0/22
+103.35.180.0/22
+103.35.200.0/22
+103.36.20.0/22
+103.36.28.0/22
+103.36.36.0/22
+103.36.56.0/22
+103.36.60.0/22
+103.36.64.0/22
+103.36.72.0/22
+103.36.96.0/22
+103.36.132.0/22
+103.36.136.0/22
+103.36.160.0/22
+103.36.164.0/22
+103.36.168.0/22
+103.36.172.0/22
+103.36.176.0/22
+103.36.180.0/22
+103.36.184.0/22
+103.36.188.0/22
+103.36.192.0/22
+103.36.196.0/22
+103.36.200.0/22
+103.36.204.0/22
+103.36.212.0/22
+103.36.216.0/22
+103.36.224.0/22
+103.36.228.0/22
+103.36.232.0/22
+103.36.236.0/22
+103.36.240.0/22
+103.36.244.0/22
+103.37.0.0/22
+103.37.12.0/22
+103.37.16.0/22
+103.37.24.0/22
+103.37.52.0/22
+103.37.56.0/22
+103.37.72.0/22
+103.37.104.0/22
+103.37.124.0/22
+103.37.136.0/22
+103.37.140.0/22
+103.37.144.0/22
+103.37.148.0/22
+103.37.152.0/22
+103.37.156.0/22
+103.37.160.0/22
+103.37.164.0/22
+103.37.172.0/22
+103.37.176.0/22
+103.37.188.0/22
+103.37.208.0/22
+103.37.212.0/22
+103.37.216.0/22
+103.37.220.0/22
+103.37.248.0/22
+103.37.252.0/22
+103.38.44.0/22
+103.38.56.0/22
+103.38.84.0/22
+103.38.92.0/22
+103.38.96.0/22
+103.38.116.0/22
+103.38.132.0/22
+103.38.140.0/22
+103.38.224.0/22
+103.38.228.0/22
+103.38.252.0/22
+103.39.16.0/22
+103.39.64.0/22
+103.39.100.0/22
+103.39.104.0/22
+103.39.108.0/22
+103.39.160.0/22
+103.39.164.0/22
+103.39.168.0/22
+103.39.172.0/22
+103.39.176.0/22
+103.39.180.0/22
+103.39.184.0/22
+103.39.188.0/22
+103.39.200.0/22
+103.39.204.0/22
+103.39.208.0/22
+103.39.212.0/22
+103.39.216.0/22
+103.39.220.0/22
+103.39.224.0/22
+103.39.228.0/22
+103.39.232.0/22
+103.40.16.0/22
+103.40.20.0/22
+103.40.24.0/22
+103.40.28.0/22
+103.40.32.0/22
+103.40.36.0/22
+103.40.40.0/22
+103.40.44.0/22
+103.40.88.0/22
+103.40.100.0/22
+103.40.112.0/22
+103.40.220.0/22
+103.40.228.0/22
+103.40.236.0/22
+103.40.240.0/22
+103.40.244.0/22
+103.40.248.0/22
+103.40.252.0/22
+103.41.0.0/22
+103.41.16.0/22
+103.41.52.0/22
+103.41.140.0/22
+103.41.148.0/22
+103.41.152.0/22
+103.41.160.0/22
+103.41.220.0/22
+103.41.224.0/22
+103.41.228.0/22
+103.41.232.0/22
+103.42.8.0/22
+103.42.24.0/22
+103.42.28.0/22
+103.42.32.0/22
+103.42.64.0/22
+103.42.68.0/22
+103.42.76.0/22
+103.42.104.0/22
+103.42.180.0/22
+103.42.232.0/22
+103.43.16.0/22
+103.43.84.0/22
+103.43.96.0/22
+103.43.104.0/22
+103.43.124.0/22
+103.43.184.0/22
+103.43.196.0/22
+103.43.208.0/22
+103.43.220.0/22
+103.43.224.0/22
+103.43.232.0/22
+103.43.240.0/22
+103.44.56.0/22
+103.44.88.0/22
+103.44.120.0/22
+103.44.124.0/22
+103.44.132.0/22
+103.44.144.0/22
+103.44.168.0/22
+103.44.176.0/22
+103.44.180.0/22
+103.44.184.0/22
+103.44.188.0/22
+103.44.192.0/22
+103.44.196.0/22
+103.44.200.0/22
+103.44.204.0/22
+103.44.224.0/22
+103.44.236.0/22
+103.44.240.0/22
+103.44.244.0/22
+103.44.248.0/22
+103.44.252.0/22
+103.45.0.0/22
+103.45.4.0/22
+103.45.8.0/22
+103.45.12.0/22
+103.45.16.0/22
+103.45.20.0/22
+103.45.24.0/22
+103.45.28.0/22
+103.45.32.0/22
+103.45.36.0/22
+103.45.40.0/22
+103.45.44.0/22
+103.45.48.0/22
+103.45.52.0/22
+103.45.56.0/22
+103.45.60.0/22
+103.45.80.0/22
+103.45.84.0/22
+103.45.88.0/22
+103.45.92.0/22
+103.45.96.0/22
+103.45.100.0/22
+103.45.104.0/22
+103.45.108.0/22
+103.45.112.0/22
+103.45.116.0/22
+103.45.120.0/22
+103.45.124.0/22
+103.45.128.0/22
+103.45.132.0/22
+103.45.136.0/22
+103.45.140.0/22
+103.45.144.0/22
+103.45.148.0/22
+103.45.152.0/22
+103.45.156.0/22
+103.45.164.0/22
+103.45.172.0/22
+103.45.176.0/22
+103.45.180.0/22
+103.45.184.0/22
+103.45.188.0/22
+103.45.192.0/22
+103.45.196.0/22
+103.45.200.0/22
+103.45.204.0/22
+103.45.208.0/22
+103.45.212.0/22
+103.45.216.0/22
+103.45.220.0/22
+103.45.248.0/22
+103.46.0.0/22
+103.46.12.0/22
+103.46.16.0/22
+103.46.20.0/22
+103.46.24.0/22
+103.46.28.0/22
+103.46.32.0/22
+103.46.36.0/22
+103.46.40.0/22
+103.46.44.0/22
+103.46.48.0/22
+103.46.52.0/22
+103.46.56.0/22
+103.46.60.0/22
+103.46.64.0/22
+103.46.68.0/22
+103.46.72.0/22
+103.46.76.0/22
+103.46.80.0/22
+103.46.84.0/22
+103.46.88.0/22
+103.46.92.0/22
+103.46.96.0/22
+103.46.100.0/22
+103.46.104.0/22
+103.46.108.0/22
+103.46.112.0/22
+103.46.116.0/22
+103.46.120.0/22
+103.46.124.0/22
+103.46.128.0/22
+103.46.132.0/22
+103.46.136.0/22
+103.46.152.0/22
+103.46.156.0/22
+103.46.160.0/22
+103.46.164.0/22
+103.46.168.0/22
+103.46.172.0/22
+103.46.176.0/22
+103.46.180.0/22
+103.46.244.0/22
+103.46.248.0/22
+103.47.4.0/22
+103.47.20.0/22
+103.47.36.0/22
+103.47.40.0/22
+103.47.48.0/22
+103.47.80.0/22
+103.47.96.0/22
+103.47.108.0/22
+103.47.116.0/22
+103.47.120.0/22
+103.47.136.0/22
+103.47.140.0/22
+103.47.212.0/22
+103.48.20.0/22
+103.48.52.0/22
+103.48.92.0/22
+103.48.144.0/22
+103.48.148.0/22
+103.48.152.0/22
+103.48.156.0/22
+103.48.202.0/23
+103.48.236.0/22
+103.48.240.0/22
+103.48.244.0/22
+103.49.12.0/22
+103.49.20.0/22
+103.49.72.0/22
+103.49.76.0/22
+103.49.92.0/22
+103.49.96.0/22
+103.49.108.0/22
+103.49.128.0/22
+103.49.176.0/22
+103.49.180.0/22
+103.49.196.0/22
+103.49.248.0/22
+103.50.36.0/22
+103.50.44.0/22
+103.50.48.0/22
+103.50.52.0/22
+103.50.56.0/22
+103.50.60.0/22
+103.50.64.0/22
+103.50.68.0/22
+103.50.72.0/22
+103.50.108.0/22
+103.50.112.0/22
+103.50.116.0/22
+103.50.120.0/22
+103.50.124.0/22
+103.50.132.0/22
+103.50.136.0/22
+103.50.140.0/22
+103.50.172.0/22
+103.50.176.0/22
+103.50.180.0/22
+103.50.184.0/22
+103.50.188.0/22
+103.50.192.0/22
+103.50.196.0/22
+103.50.200.0/22
+103.50.220.0/22
+103.50.224.0/22
+103.50.228.0/22
+103.50.232.0/22
+103.50.236.0/22
+103.50.240.0/22
+103.50.244.0/22
+103.50.248.0/22
+103.52.40.0/22
+103.52.72.0/22
+103.52.76.0/22
+103.52.80.0/22
+103.52.84.0/22
+103.52.104.0/22
+103.52.160.0/22
+103.52.164.0/22
+103.52.172.0/22
+103.52.196.0/22
+103.53.4.0/22
+103.53.64.0/22
+103.53.68.0/22
+103.53.92.0/22
+103.53.100.0/22
+103.53.128.0/22
+103.53.132.0/22
+103.53.136.0/22
+103.53.140.0/22
+103.53.144.0/22
+103.53.180.0/22
+103.53.208.0/22
+103.53.212.0/22
+103.53.216.0/22
+103.53.236.0/22
+103.53.248.0/22
+103.54.8.0/22
+103.54.48.0/22
+103.54.60.0/22
+103.54.160.0/22
+103.54.164.0/22
+103.54.212.0/22
+103.55.24.0/22
+103.55.80.0/22
+103.55.120.0/22
+103.55.152.0/22
+103.55.236.0/22
+103.56.8.0/22
+103.56.16.0/22
+103.56.20.0/22
+103.56.52.0/22
+103.56.56.0/22
+103.56.72.0/22
+103.56.76.0/22
+103.56.140.0/22
+103.56.152.0/22
+103.56.184.0/22
+103.56.200.0/22
+103.57.12.0/22
+103.57.52.0/22
+103.57.56.0/22
+103.57.76.0/22
+103.57.136.0/22
+103.58.24.0/22
+103.59.76.0/22
+103.59.100.0/22
+103.59.112.0/22
+103.59.120.0/22
+103.59.128.0/22
+103.59.148.0/22
+103.59.164.0/22
+103.60.32.0/22
+103.60.44.0/22
+103.60.228.0/22
+103.60.236.0/22
+103.61.60.0/22
+103.61.104.0/22
+103.61.140.0/22
+103.61.152.0/22
+103.61.172.0/22
+103.61.184.0/22
+103.61.188.0/22
+103.62.52.0/22
+103.62.72.0/22
+103.62.76.0/22
+103.62.80.0/22
+103.62.84.0/22
+103.62.88.0/22
+103.62.96.0/22
+103.62.100.0/22
+103.62.104.0/22
+103.62.108.0/22
+103.62.112.0/22
+103.62.116.0/22
+103.62.120.0/22
+103.62.124.0/22
+103.62.128.0/22
+103.62.132.0/22
+103.62.156.0/22
+103.62.160.0/22
+103.62.164.0/22
+103.62.168.0/22
+103.62.172.0/22
+103.62.176.0/22
+103.62.180.0/22
+103.62.184.0/22
+103.62.188.0/22
+103.62.192.0/22
+103.62.212.0/22
+103.62.216.0/22
+103.62.220.0/22
+103.62.224.0/22
+103.63.32.0/22
+103.63.36.0/22
+103.63.40.0/22
+103.63.44.0/22
+103.63.48.0/22
+103.63.52.0/22
+103.63.56.0/22
+103.63.60.0/22
+103.63.64.0/22
+103.63.68.0/22
+103.63.72.0/22
+103.63.76.0/22
+103.63.80.0/22
+103.63.84.0/22
+103.63.88.0/22
+103.63.140.0/22
+103.63.144.0/22
+103.63.152.0/22
+103.63.160.0/22
+103.63.164.0/22
+103.63.168.0/22
+103.63.172.0/22
+103.63.176.0/22
+103.63.180.0/22
+103.63.184.0/22
+103.63.192.0/22
+103.63.196.0/22
+103.63.200.0/22
+103.63.204.0/22
+103.63.208.0/22
+103.63.240.0/22
+103.63.244.0/22
+103.63.248.0/22
+103.63.252.0/22
+103.64.0.0/22
+103.64.4.0/22
+103.64.24.0/22
+103.64.28.0/22
+103.64.32.0/22
+103.64.36.0/22
+103.64.40.0/22
+103.64.44.0/22
+103.64.48.0/22
+103.64.52.0/22
+103.64.56.0/22
+103.64.60.0/22
+103.64.64.0/22
+103.64.68.0/22
+103.64.72.0/22
+103.64.76.0/22
+103.64.80.0/22
+103.64.84.0/22
+103.64.88.0/22
+103.64.92.0/22
+103.64.96.0/22
+103.64.100.0/22
+103.64.104.0/22
+103.64.108.0/22
+103.64.112.0/22
+103.64.116.0/22
+103.64.120.0/22
+103.64.124.0/22
+103.64.140.0/22
+103.64.144.0/22
+103.64.152.0/22
+103.64.156.0/22
+103.64.160.0/22
+103.64.164.0/22
+103.64.168.0/22
+103.64.172.0/22
+103.64.176.0/22
+103.64.180.0/22
+103.64.184.0/22
+103.64.188.0/22
+103.64.192.0/22
+103.64.196.0/22
+103.64.200.0/22
+103.64.204.0/22
+103.64.208.0/22
+103.64.212.0/22
+103.64.216.0/22
+103.64.220.0/22
+103.64.224.0/22
+103.64.228.0/22
+103.64.232.0/22
+103.64.236.0/22
+103.64.240.0/22
+103.64.244.0/22
+103.64.248.0/22
+103.64.252.0/22
+103.65.0.0/22
+103.65.4.0/22
+103.65.8.0/22
+103.65.12.0/22
+103.65.16.0/22
+103.65.36.0/22
+103.65.40.0/22
+103.65.48.0/22
+103.65.52.0/22
+103.65.56.0/22
+103.65.60.0/22
+103.65.64.0/22
+103.65.68.0/22
+103.65.72.0/22
+103.65.76.0/22
+103.65.80.0/22
+103.65.84.0/22
+103.65.88.0/22
+103.65.92.0/22
+103.65.100.0/22
+103.65.104.0/22
+103.65.108.0/22
+103.65.112.0/22
+103.65.144.0/22
+103.65.148.0/22
+103.65.152.0/22
+103.65.156.0/22
+103.65.160.0/22
+103.65.164.0/22
+103.65.168.0/22
+103.65.172.0/22
+103.66.32.0/22
+103.66.40.0/22
+103.66.92.0/22
+103.66.108.0/22
+103.66.200.0/22
+103.66.216.0/22
+103.66.240.0/22
+103.66.244.0/22
+103.66.248.0/22
+103.66.252.0/22
+103.67.0.0/22
+103.67.4.0/22
+103.67.8.0/22
+103.67.100.0/22
+103.67.104.0/22
+103.67.108.0/22
+103.67.112.0/22
+103.67.116.0/22
+103.67.120.0/22
+103.67.124.0/22
+103.67.128.0/22
+103.67.132.0/22
+103.67.136.0/22
+103.67.140.0/22
+103.67.144.0/22
+103.67.148.0/22
+103.67.172.0/22
+103.67.192.0/22
+103.67.212.0/22
+103.67.252.0/22
+103.68.64.0/22
+103.68.88.0/22
+103.68.100.0/22
+103.68.128.0/22
+103.68.192.0/22
+103.69.16.0/22
+103.69.116.0/22
+103.69.132.0/22
+103.69.152.0/22
+103.69.212.0/22
+103.70.8.0/22
+103.70.184.0/22
+103.70.220.0/22
+103.70.224.0/22
+103.70.236.0/22
+103.70.252.0/22
+103.71.0.0/22
+103.71.32.0/22
+103.71.48.0/22
+103.71.68.0/22
+103.71.72.0/22
+103.71.80.0/22
+103.71.84.0/22
+103.71.88.0/22
+103.71.120.0/22
+103.71.124.0/22
+103.71.128.0/22
+103.71.144.0/22
+103.71.196.0/22
+103.71.200.0/22
+103.71.232.0/22
+103.72.12.0/22
+103.72.16.0/22
+103.72.20.0/22
+103.72.24.0/22
+103.72.28.0/22
+103.72.32.0/22
+103.72.36.0/22
+103.72.40.0/22
+103.72.44.0/22
+103.72.48.0/22
+103.72.52.0/22
+103.72.116.0/22
+103.72.120.0/22
+103.72.124.0/22
+103.72.128.0/22
+103.72.132.0/22
+103.72.144.0/22
+103.72.148.0/22
+103.72.172.0/22
+103.72.180.0/22
+103.73.48.0/22
+103.73.88.0/22
+103.73.96.0/22
+103.73.116.0/22
+103.73.120.0/22
+103.73.128.0/22
+103.73.132.0/22
+103.73.136.0/22
+103.73.140.0/22
+103.73.168.0/22
+103.73.176.0/22
+103.73.204.0/22
+103.73.208.0/22
+103.73.240.0/22
+103.73.244.0/22
+103.73.248.0/22
+103.74.24.0/22
+103.74.28.0/22
+103.74.32.0/22
+103.74.36.0/22
+103.74.40.0/22
+103.74.44.0/22
+103.74.48.0/22
+103.74.56.0/22
+103.74.60.0/22
+103.74.80.0/22
+103.74.124.0/22
+103.74.148.0/22
+103.74.204.0/22
+103.74.232.0/22
+103.75.16.0/22
+103.75.88.0/22
+103.75.92.0/22
+103.75.104.0/22
+103.75.108.0/22
+103.75.112.0/22
+103.75.120.0/22
+103.75.128.0/22
+103.75.152.0/22
+103.75.236.0/24
+103.76.60.0/22
+103.76.64.0/22
+103.76.68.0/22
+103.76.72.0/22
+103.76.84.0/22
+103.76.92.0/22
+103.76.104.0/22
+103.76.216.0/22
+103.76.220.0/22
+103.76.224.0/22
+103.77.28.0/22
+103.77.52.0/22
+103.77.56.0/22
+103.77.72.0/22
+103.77.88.0/22
+103.77.92.0/22
+103.77.132.0/22
+103.77.148.0/22
+103.77.220.0/22
+103.78.56.0/22
+103.78.60.0/22
+103.78.68.0/22
+103.78.124.0/22
+103.78.172.0/22
+103.78.176.0/22
+103.78.196.0/22
+103.78.228.0/22
+103.79.24.0/22
+103.79.28.0/22
+103.79.36.0/22
+103.79.40.0/22
+103.79.44.0/22
+103.79.52.0/22
+103.79.56.0/22
+103.79.60.0/22
+103.79.64.0/22
+103.79.68.0/22
+103.79.80.0/22
+103.79.84.0/22
+103.79.120.0/22
+103.79.136.0/22
+103.79.188.0/22
+103.79.192.0/22
+103.79.196.0/22
+103.79.200.0/22
+103.79.204.0/22
+103.79.208.0/22
+103.79.212.0/22
+103.79.240.0/22
+103.80.24.0/22
+103.80.28.0/22
+103.80.44.0/22
+103.80.72.0/22
+103.80.176.0/22
+103.80.180.0/22
+103.80.184.0/22
+103.80.192.0/22
+103.80.200.0/22
+103.80.232.0/22
+103.81.4.0/22
+103.81.8.0/22
+103.81.16.0/22
+103.81.20.0/22
+103.81.44.0/22
+103.81.48.0/22
+103.81.96.0/22
+103.81.120.0/22
+103.81.148.0/22
+103.81.164.0/22
+103.81.168.0/22
+103.81.183.0/24
+103.81.184.0/22
+103.81.200.0/22
+103.81.232.0/22
+103.82.52.0/22
+103.82.60.0/22
+103.82.68.0/22
+103.82.84.0/22
+103.82.104.0/22
+103.82.224.0/22
+103.82.236.0/22
+103.83.44.0/22
+103.83.52.0/22
+103.83.60.0/22
+103.83.64.0/22
+103.83.72.0/22
+103.83.112.0/22
+103.83.120.0/22
+103.83.180.0/22
+103.84.0.0/22
+103.84.12.0/22
+103.84.16.0/22
+103.84.20.0/22
+103.84.24.0/22
+103.84.28.0/22
+103.84.48.0/22
+103.84.64.0/22
+103.84.72.0/22
+103.84.92.0/22
+103.84.108.0/22
+103.84.136.0/22
+103.85.20.0/22
+103.85.24.0/22
+103.85.44.0/22
+103.85.48.0/22
+103.85.136.0/22
+103.85.144.0/22
+103.85.164.0/22
+103.85.168.0/22
+103.85.172.0/22
+103.85.176.0/22
+103.85.224.0/22
+103.86.28.0/22
+103.86.32.0/22
+103.86.44.0/22
+103.86.60.0/22
+103.86.68.0/22
+103.86.80.0/22
+103.86.84.0/22
+103.86.88.0/22
+103.86.204.0/22
+103.86.208.0/22
+103.86.212.0/22
+103.86.216.0/22
+103.86.220.0/22
+103.86.224.0/22
+103.86.228.0/22
+103.86.232.0/22
+103.86.236.0/22
+103.86.240.0/22
+103.86.244.0/22
+103.86.248.0/22
+103.86.252.0/22
+103.87.0.0/22
+103.87.4.0/22
+103.87.20.0/22
+103.87.32.0/22
+103.87.72.0/22
+103.87.96.0/22
+103.87.132.0/22
+103.87.180.0/22
+103.87.224.0/22
+103.88.4.0/22
+103.88.8.0/22
+103.88.12.0/22
+103.88.16.0/22
+103.88.20.0/22
+103.88.32.0/22
+103.88.36.0/22
+103.88.60.0/22
+103.88.64.0/22
+103.88.72.0/22
+103.88.96.0/22
+103.88.100.0/22
+103.88.164.0/22
+103.88.176.0/22
+103.88.184.0/22
+103.88.188.0/22
+103.88.212.0/22
+103.89.28.0/22
+103.89.96.0/22
+103.89.100.0/22
+103.89.104.0/22
+103.89.108.0/22
+103.89.112.0/22
+103.89.116.0/22
+103.89.148.0/22
+103.89.172.0/22
+103.89.184.0/22
+103.89.188.0/22
+103.89.192.0/22
+103.89.196.0/22
+103.89.200.0/22
+103.89.204.0/22
+103.89.208.0/22
+103.89.212.0/22
+103.89.216.0/22
+103.89.220.0/22
+103.89.224.0/22
+103.89.228.0/22
+103.90.52.0/22
+103.90.100.0/22
+103.90.104.0/22
+103.90.108.0/22
+103.90.112.0/22
+103.90.116.0/22
+103.90.120.0/22
+103.90.124.0/22
+103.90.128.0/22
+103.90.132.0/22
+103.90.152.0/22
+103.90.168.0/22
+103.90.173.0/24
+103.90.176.0/22
+103.90.192.0/22
+103.91.36.0/22
+103.91.40.0/22
+103.91.152.0/22
+103.91.200.0/22
+103.91.212.0/22
+103.91.219.0/24
+103.91.236.0/22
+103.91.252.0/22
+103.92.0.0/22
+103.92.4.0/22
+103.92.8.0/22
+103.92.12.0/22
+103.92.48.0/22
+103.92.52.0/22
+103.92.56.0/22
+103.92.60.0/22
+103.92.64.0/22
+103.92.68.0/22
+103.92.72.0/22
+103.92.76.0/22
+103.92.80.0/22
+103.92.86.0/24
+103.92.88.0/22
+103.92.108.0/22
+103.92.124.0/22
+103.92.128.0/24
+103.92.156.0/22
+103.92.164.0/22
+103.92.168.0/22
+103.92.172.0/22
+103.92.176.0/22
+103.92.180.0/22
+103.92.184.0/22
+103.92.188.0/22
+103.92.192.0/22
+103.92.236.0/22
+103.92.240.0/22
+103.92.244.0/22
+103.92.248.0/22
+103.92.252.0/22
+103.93.0.0/22
+103.93.4.0/22
+103.93.28.0/22
+103.93.76.0/22
+103.93.84.0/22
+103.93.121.0/24
+103.93.152.0/22
+103.93.204.0/22
+103.94.12.0/22
+103.94.20.0/22
+103.94.28.0/22
+103.94.32.0/22
+103.94.36.0/22
+103.94.40.0/22
+103.94.44.0/22
+103.94.72.0/22
+103.94.88.0/22
+103.94.116.0/22
+103.94.160.0/22
+103.94.180.0/22
+103.94.200.0/22
+103.95.28.0/22
+103.95.52.0/22
+103.95.64.0/22
+103.95.68.0/22
+103.95.88.0/22
+103.95.92.0/22
+103.95.116.0/22
+103.95.128.0/22
+103.95.136.0/22
+103.95.140.0/22
+103.95.144.0/22
+103.95.152.0/22
+103.95.207.0/24
+103.95.216.0/22
+103.95.224.0/22
+103.95.236.0/22
+103.95.240.0/22
+103.95.244.0/22
+103.95.248.0/22
+103.95.252.0/22
+103.96.0.0/22
+103.96.8.0/22
+103.96.80.0/22
+103.96.124.0/22
+103.96.136.0/22
+103.96.140.0/24
+103.96.148.0/22
+103.96.152.0/22
+103.96.156.0/22
+103.96.160.0/22
+103.96.164.0/22
+103.96.168.0/22
+103.96.172.0/22
+103.96.176.0/22
+103.96.180.0/22
+103.96.184.0/22
+103.96.188.0/22
+103.96.192.0/22
+103.96.196.0/22
+103.96.200.0/22
+103.96.204.0/22
+103.96.208.0/22
+103.96.212.0/22
+103.96.216.0/22
+103.97.8.0/22
+103.97.12.0/22
+103.97.16.0/22
+103.97.20.0/22
+103.97.24.0/22
+103.97.28.0/22
+103.97.32.0/22
+103.97.36.0/22
+103.97.40.0/22
+103.97.56.0/22
+103.97.60.0/22
+103.97.64.0/22
+103.97.68.0/22
+103.97.72.0/22
+103.97.80.0/22
+103.97.112.0/22
+103.97.116.0/22
+103.97.128.0/22
+103.97.144.0/22
+103.97.148.0/22
+103.97.188.0/22
+103.97.192.0/22
+103.97.224.0/22
+103.97.228.0/23
+103.98.28.0/23
+103.98.40.0/22
+103.98.48.0/22
+103.98.56.0/22
+103.98.80.0/22
+103.98.88.0/22
+103.98.92.0/22
+103.98.96.0/22
+103.98.100.0/22
+103.98.124.0/22
+103.98.136.0/22
+103.98.140.0/22
+103.98.144.0/22
+103.98.164.0/22
+103.98.180.0/22
+103.98.196.0/22
+103.98.216.0/22
+103.98.224.0/22
+103.98.228.0/22
+103.98.232.0/22
+103.98.240.0/22
+103.98.244.0/22
+103.98.248.0/22
+103.98.252.0/22
+103.99.40.0/23
+103.99.52.0/22
+103.99.56.0/22
+103.99.60.0/22
+103.99.76.0/22
+103.99.104.0/22
+103.99.116.0/22
+103.99.120.0/22
+103.99.152.0/22
+103.99.220.0/22
+103.99.232.0/22
+103.99.236.0/22
+103.100.0.0/22
+103.100.32.0/22
+103.100.40.0/22
+103.100.48.0/22
+103.100.52.0/22
+103.100.56.0/22
+103.100.60.0/22
+103.100.64.0/22
+103.100.68.0/22
+103.100.88.0/22
+103.100.116.0/22
+103.100.140.0/22
+103.100.144.0/22
+103.100.236.0/22
+103.100.240.0/22
+103.100.248.0/22
+103.100.252.0/22
+103.101.4.0/22
+103.101.8.0/22
+103.101.12.0/22
+103.101.28.0/22
+103.101.60.0/22
+103.101.120.0/22
+103.101.124.0/22
+103.101.144.0/22
+103.101.148.0/22
+103.101.153.0/24
+103.101.180.0/22
+103.101.184.0/22
+103.102.76.0/22
+103.102.80.0/22
+103.102.168.0/22
+103.102.172.0/22
+103.102.180.0/22
+103.102.184.0/22
+103.102.188.0/22
+103.102.192.0/22
+103.102.196.0/22
+103.102.200.0/22
+103.102.208.0/22
+103.102.212.0/22
+103.103.12.0/22
+103.103.16.0/22
+103.103.36.0/22
+103.103.68.0/22
+103.103.72.0/22
+103.103.176.0/22
+103.103.188.0/22
+103.103.200.0/22
+103.103.204.0/22
+103.103.220.0/22
+103.103.224.0/22
+103.103.228.0/22
+103.103.232.0/22
+103.103.248.0/22
+103.103.252.0/22
+103.104.0.0/22
+103.104.4.0/22
+103.104.36.0/22
+103.104.40.0/22
+103.104.64.0/22
+103.104.104.0/22
+103.104.152.0/22
+103.104.168.0/22
+103.104.172.0/22
+103.104.188.0/22
+103.104.198.0/23
+103.104.252.0/22
+103.105.0.0/22
+103.105.4.0/22
+103.105.12.0/22
+103.105.16.0/22
+103.105.23.0/24
+103.105.56.0/22
+103.105.60.0/22
+103.105.116.0/22
+103.105.132.0/22
+103.105.180.0/22
+103.105.184.0/22
+103.105.200.0/22
+103.105.204.0/22
+103.105.220.0/22
+103.106.36.0/22
+103.106.40.0/22
+103.106.44.0/22
+103.106.60.0/22
+103.106.68.0/22
+103.106.96.0/22
+103.106.120.0/22
+103.106.128.0/22
+103.106.132.0/22
+103.106.160.0/22
+103.106.188.0/22
+103.106.196.0/22
+103.106.202.0/23
+103.106.212.0/22
+103.106.244.0/22
+103.106.252.0/22
+103.107.0.0/22
+103.107.8.0/24
+103.107.28.0/22
+103.107.32.0/22
+103.107.44.0/22
+103.107.72.0/22
+103.107.108.0/22
+103.107.164.0/22
+103.107.168.0/22
+103.107.188.0/22
+103.107.192.0/22
+103.107.208.0/22
+103.107.216.0/22
+103.107.220.0/22
+103.108.52.0/22
+103.108.64.0/22
+103.108.160.0/22
+103.108.164.0/22
+103.108.184.0/23
+103.108.188.0/23
+103.108.192.0/22
+103.108.196.0/22
+103.108.208.0/22
+103.108.212.0/22
+103.108.224.0/22
+103.108.251.0/24
+103.109.20.0/22
+103.109.48.0/22
+103.109.88.0/22
+103.109.106.0/23
+103.109.248.0/22
+103.110.32.0/22
+103.110.80.0/23
+103.110.92.0/22
+103.110.100.0/22
+103.110.116.0/22
+103.110.127.0/24
+103.110.128.0/23
+103.110.131.0/24
+103.110.132.0/22
+103.110.136.0/22
+103.110.152.0/22
+103.110.188.0/22
+103.110.204.0/22
+103.111.38.0/23
+103.111.64.0/22
+103.111.172.0/22
+103.111.252.0/22
+103.112.28.0/22
+103.112.68.0/22
+103.112.72.0/22
+103.112.88.0/22
+103.112.92.0/22
+103.112.96.0/22
+103.112.108.0/22
+103.112.112.0/22
+103.112.116.0/22
+103.112.140.0/22
+103.112.172.0/22
+103.112.184.0/22
+103.112.208.0/22
+103.113.4.0/22
+103.113.92.0/22
+103.113.144.0/22
+103.113.220.0/22
+103.113.232.0/22
+103.113.236.0/22
+103.114.4.0/22
+103.114.28.0/22
+103.114.68.0/22
+103.114.72.0/22
+103.114.100.0/22
+103.114.132.0/22
+103.114.148.0/22
+103.114.156.0/22
+103.114.176.0/22
+103.114.212.0/22
+103.114.236.0/22
+103.114.240.0/22
+103.115.16.0/22
+103.115.40.0/22
+103.115.44.0/22
+103.115.48.0/22
+103.115.52.0/22
+103.115.56.0/22
+103.115.60.0/22
+103.115.64.0/22
+103.115.68.0/22
+103.115.92.0/22
+103.115.120.0/22
+103.115.148.0/22
+103.115.204.0/23
+103.115.248.0/22
+103.116.20.0/22
+103.116.40.0/22
+103.116.64.0/22
+103.116.72.0/22
+103.116.76.0/22
+103.116.92.0/22
+103.116.120.0/22
+103.116.128.0/22
+103.116.132.0/23
+103.116.148.0/22
+103.116.184.0/22
+103.116.206.0/23
+103.116.220.0/22
+103.116.224.0/22
+103.116.228.0/22
+103.117.16.0/22
+103.117.72.0/22
+103.117.88.0/22
+103.117.132.0/22
+103.117.136.0/22
+103.117.220.0/22
+103.118.19.0/24
+103.118.36.0/22
+103.118.52.0/22
+103.118.56.0/22
+103.118.60.0/22
+103.118.64.0/22
+103.118.68.0/22
+103.118.72.0/22
+103.118.88.0/22
+103.118.173.0/24
+103.118.192.0/22
+103.118.196.0/22
+103.118.200.0/22
+103.118.204.0/22
+103.118.208.0/22
+103.118.212.0/22
+103.118.216.0/22
+103.118.220.0/22
+103.118.240.0/22
+103.118.244.0/22
+103.118.248.0/22
+103.118.252.0/22
+103.119.0.0/22
+103.119.12.0/22
+103.119.16.0/22
+103.119.28.0/22
+103.119.44.0/22
+103.119.104.0/22
+103.119.115.0/24
+103.119.156.0/22
+103.119.180.0/22
+103.119.200.0/22
+103.119.224.0/22
+103.120.52.0/22
+103.120.72.0/22
+103.120.76.0/24
+103.120.88.0/22
+103.120.96.0/22
+103.120.100.0/22
+103.120.140.0/22
+103.120.196.0/22
+103.120.224.0/22
+103.121.52.0/22
+103.121.92.0/22
+103.121.160.0/22
+103.121.164.0/22
+103.121.250.0/24
+103.121.252.0/22
+103.122.48.0/22
+103.122.176.0/22
+103.122.192.0/22
+103.122.240.0/22
+103.123.4.0/22
+103.123.88.0/22
+103.123.92.0/22
+103.123.116.0/22
+103.123.160.0/22
+103.123.176.0/22
+103.123.200.0/22
+103.123.204.0/22
+103.123.208.0/22
+103.123.212.0/22
+103.124.24.0/22
+103.124.48.0/22
+103.124.64.0/22
+103.124.212.0/22
+103.124.216.0/22
+103.125.20.0/22
+103.125.44.0/22
+103.125.132.0/22
+103.125.164.0/22
+103.125.196.0/22
+103.125.236.0/22
+103.125.248.0/22
+103.126.0.0/22
+103.126.16.0/22
+103.126.44.0/22
+103.129.52.0/22
+103.129.148.0/22
+103.130.132.0/22
+103.130.152.0/24
+103.130.160.0/22
+103.130.228.0/22
+103.131.20.0/22
+103.131.36.0/22
+103.131.152.0/22
+103.131.168.0/22
+103.131.176.0/22
+103.131.224.0/22
+103.131.228.0/22
+103.131.240.0/22
+103.192.8.0/22
+103.192.12.0/22
+103.192.16.0/22
+103.192.20.0/22
+103.192.24.0/22
+103.192.28.0/22
+103.192.48.0/22
+103.192.52.0/22
+103.192.56.0/22
+103.192.84.0/22
+103.192.88.0/22
+103.192.92.0/22
+103.192.96.0/22
+103.192.100.0/22
+103.192.104.0/22
+103.192.108.0/22
+103.192.112.0/22
+103.192.128.0/22
+103.192.136.0/22
+103.192.140.0/22
+103.192.164.0/22
+103.192.208.0/22
+103.192.216.0/22
+103.192.252.0/22
+103.193.40.0/22
+103.193.44.0/22
+103.193.120.0/22
+103.193.124.0/22
+103.193.144.0/22
+103.193.148.0/22
+103.193.160.0/22
+103.193.188.0/22
+103.193.192.0/22
+103.193.212.0/22
+103.193.216.0/22
+103.193.220.0/22
+103.193.224.0/22
+103.193.228.0/22
+103.193.232.0/22
+103.193.236.0/22
+103.193.240.0/22
+103.194.16.0/22
+103.195.104.0/22
+103.195.112.0/22
+103.195.136.0/22
+103.195.148.0/22
+103.195.152.0/22
+103.195.160.0/22
+103.195.192.0/22
+103.196.60.0/22
+103.196.64.0/22
+103.196.72.0/22
+103.196.88.0/22
+103.196.92.0/22
+103.196.96.0/22
+103.196.168.0/22
+103.196.204.0/22
+103.197.180.0/22
+103.197.228.0/22
+103.198.20.0/22
+103.198.60.0/22
+103.198.64.0/22
+103.198.72.0/22
+103.198.124.0/22
+103.198.156.0/22
+103.198.180.0/22
+103.198.196.0/22
+103.198.200.0/22
+103.198.216.0/22
+103.198.220.0/22
+103.198.224.0/22
+103.198.228.0/22
+103.198.232.0/22
+103.198.236.0/22
+103.198.240.0/22
+103.198.244.0/22
+103.199.164.0/22
+103.199.196.0/22
+103.199.228.0/22
+103.199.248.0/22
+103.199.252.0/22
+103.200.28.0/22
+103.200.32.0/22
+103.200.52.0/22
+103.200.64.0/22
+103.200.68.0/22
+103.200.136.0/22
+103.200.140.0/22
+103.200.144.0/22
+103.200.148.0/22
+103.200.152.0/22
+103.200.156.0/22
+103.200.160.0/22
+103.200.164.0/22
+103.200.168.0/22
+103.200.172.0/22
+103.200.176.0/22
+103.200.180.0/22
+103.200.184.0/22
+103.200.188.0/22
+103.200.192.0/22
+103.200.220.0/22
+103.200.224.0/22
+103.200.228.0/22
+103.200.232.0/22
+103.200.236.0/22
+103.200.240.0/22
+103.200.244.0/22
+103.200.248.0/22
+103.200.252.0/22
+103.201.0.0/22
+103.201.4.0/22
+103.201.8.0/22
+103.201.12.0/22
+103.201.16.0/22
+103.201.20.0/22
+103.201.28.0/22
+103.201.32.0/22
+103.201.36.0/22
+103.201.40.0/22
+103.201.44.0/22
+103.201.48.0/22
+103.201.52.0/22
+103.201.56.0/22
+103.201.60.0/22
+103.201.64.0/22
+103.201.76.0/22
+103.201.80.0/22
+103.201.84.0/22
+103.201.88.0/22
+103.201.92.0/22
+103.201.96.0/22
+103.201.100.0/22
+103.201.104.0/22
+103.201.108.0/22
+103.201.112.0/22
+103.201.116.0/22
+103.201.120.0/22
+103.201.152.0/22
+103.201.156.0/22
+103.201.160.0/22
+103.201.164.0/22
+103.201.168.0/22
+103.201.172.0/22
+103.201.176.0/22
+103.201.180.0/22
+103.201.184.0/22
+103.201.188.0/22
+103.201.192.0/22
+103.201.196.0/22
+103.201.200.0/22
+103.201.204.0/22
+103.201.208.0/22
+103.201.212.0/22
+103.201.216.0/22
+103.201.220.0/22
+103.201.224.0/22
+103.201.228.0/22
+103.201.232.0/22
+103.201.236.0/22
+103.201.240.0/22
+103.201.244.0/22
+103.201.248.0/22
+103.201.252.0/22
+103.202.0.0/22
+103.202.4.0/22
+103.202.8.0/22
+103.202.12.0/22
+103.202.16.0/22
+103.202.20.0/22
+103.202.24.0/22
+103.202.28.0/22
+103.202.32.0/22
+103.202.36.0/22
+103.202.40.0/22
+103.202.44.0/22
+103.202.56.0/22
+103.202.60.0/22
+103.202.64.0/22
+103.202.68.0/22
+103.202.72.0/22
+103.202.76.0/22
+103.202.80.0/22
+103.202.84.0/22
+103.202.88.0/22
+103.202.92.0/22
+103.202.96.0/22
+103.202.100.0/22
+103.202.104.0/22
+103.202.108.0/22
+103.202.112.0/22
+103.202.116.0/22
+103.202.120.0/22
+103.202.124.0/22
+103.202.128.0/22
+103.202.132.0/22
+103.202.136.0/22
+103.202.140.0/22
+103.202.144.0/22
+103.202.152.0/22
+103.202.156.0/22
+103.202.160.0/22
+103.202.164.0/22
+103.202.168.0/22
+103.202.172.0/22
+103.202.176.0/22
+103.202.180.0/22
+103.202.184.0/22
+103.202.188.0/22
+103.202.192.0/22
+103.202.196.0/22
+103.202.200.0/21
+103.202.212.0/22
+103.202.228.0/22
+103.202.236.0/22
+103.202.240.0/22
+103.202.244.0/22
+103.202.248.0/22
+103.202.252.0/22
+103.203.0.0/22
+103.203.4.0/22
+103.203.8.0/22
+103.203.12.0/22
+103.203.16.0/22
+103.203.20.0/22
+103.203.24.0/22
+103.203.28.0/22
+103.203.32.0/22
+103.203.52.0/22
+103.203.56.0/22
+103.203.96.0/22
+103.203.100.0/22
+103.203.104.0/22
+103.203.108.0/22
+103.203.112.0/22
+103.203.116.0/22
+103.203.120.0/22
+103.203.124.0/22
+103.203.128.0/22
+103.203.140.0/22
+103.203.192.0/22
+103.203.200.0/22
+103.203.212.0/22
+103.203.216.0/22
+103.204.24.0/22
+103.204.88.0/22
+103.204.112.0/22
+103.204.140.0/22
+103.204.144.0/22
+103.204.148.0/22
+103.204.152.0/22
+103.204.196.0/22
+103.204.232.0/22
+103.204.236.0/22
+103.205.8.0/22
+103.205.40.0/22
+103.205.44.0/22
+103.205.52.0/22
+103.205.120.0/22
+103.205.136.0/22
+103.205.162.0/24
+103.205.188.0/22
+103.205.196.0/22
+103.205.200.0/22
+103.205.236.0/22
+103.205.248.0/22
+103.206.0.0/22
+103.206.44.0/22
+103.206.108.0/22
+103.206.148.0/22
+103.207.48.0/22
+103.207.104.0/22
+103.207.164.0/22
+103.207.188.0/22
+103.207.192.0/22
+103.207.196.0/22
+103.207.200.0/22
+103.207.204.0/22
+103.207.208.0/22
+103.207.212.0/22
+103.207.220.0/22
+103.208.12.0/22
+103.208.16.0/22
+103.208.28.0/22
+103.208.40.0/22
+103.208.44.0/22
+103.208.48.0/22
+103.208.148.0/22
+103.209.112.0/22
+103.209.136.0/22
+103.209.200.0/22
+103.209.208.0/22
+103.209.216.0/22
+103.210.0.0/22
+103.210.20.0/22
+103.210.96.0/22
+103.210.156.0/22
+103.210.160.0/22
+103.210.164.0/22
+103.210.168.0/22
+103.210.172.0/22
+103.210.176.0/22
+103.210.180.0/22
+103.210.188.0/22
+103.210.216.0/22
+103.211.100.0/22
+103.211.156.0/22
+103.211.164.0/22
+103.211.192.0/22
+103.211.224.0/22
+103.211.248.0/22
+103.212.0.0/22
+103.212.4.0/22
+103.212.8.0/22
+103.212.12.0/22
+103.212.32.0/22
+103.212.44.0/22
+103.212.48.0/22
+103.212.84.0/22
+103.212.104.0/22
+103.212.148.0/22
+103.212.164.0/22
+103.212.196.0/22
+103.212.200.0/22
+103.212.228.0/22
+103.212.252.0/22
+103.213.40.0/22
+103.213.44.0/22
+103.213.48.0/22
+103.213.52.0/22
+103.213.56.0/22
+103.213.60.0/22
+103.213.64.0/22
+103.213.68.0/22
+103.213.72.0/22
+103.213.76.0/22
+103.213.80.0/22
+103.213.84.0/22
+103.213.88.0/22
+103.213.92.0/22
+103.213.136.0/22
+103.213.140.0/22
+103.213.144.0/22
+103.213.148.0/22
+103.213.152.0/22
+103.213.156.0/22
+103.213.160.0/22
+103.213.164.0/22
+103.213.168.0/22
+103.213.172.0/22
+103.213.176.0/22
+103.213.180.0/22
+103.213.184.0/22
+103.213.188.0/22
+103.213.248.0/22
+103.214.32.0/22
+103.214.84.0/22
+103.214.168.0/22
+103.214.212.0/22
+103.214.240.0/22
+103.214.244.0/22
+103.215.28.0/22
+103.215.32.0/22
+103.215.44.0/22
+103.215.48.0/22
+103.215.100.0/22
+103.215.104.0/22
+103.215.108.0/22
+103.215.116.0/22
+103.215.120.0/22
+103.215.140.0/22
+103.215.184.0/22
+103.215.228.0/22
+103.216.4.0/22
+103.216.8.0/22
+103.216.12.0/22
+103.216.16.0/22
+103.216.20.0/22
+103.216.24.0/22
+103.216.28.0/22
+103.216.32.0/22
+103.216.36.0/22
+103.216.40.0/22
+103.216.44.0/22
+103.216.64.0/22
+103.216.108.0/22
+103.216.136.0/22
+103.216.224.0/22
+103.216.228.0/22
+103.216.240.0/22
+103.216.244.0/22
+103.216.248.0/22
+103.217.0.0/22
+103.217.4.0/22
+103.217.8.0/22
+103.217.12.0/22
+103.217.16.0/22
+103.217.20.0/22
+103.217.24.0/22
+103.217.28.0/22
+103.217.32.0/22
+103.217.36.0/22
+103.217.40.0/22
+103.217.44.0/22
+103.217.48.0/22
+103.217.52.0/22
+103.217.56.0/22
+103.217.60.0/22
+103.217.168.0/22
+103.217.180.0/22
+103.217.184.0/22
+103.217.188.0/22
+103.217.192.0/22
+103.217.196.0/22
+103.217.200.0/22
+103.217.204.0/22
+103.218.0.0/22
+103.218.92.0/22
+103.218.184.0/22
+103.218.192.0/22
+103.218.196.0/22
+103.218.200.0/22
+103.218.204.0/22
+103.218.208.0/22
+103.218.212.0/22
+103.218.216.0/22
+103.219.24.0/22
+103.219.64.0/22
+103.219.84.0/22
+103.219.88.0/22
+103.219.92.0/22
+103.219.96.0/22
+103.219.100.0/22
+103.219.176.0/22
+103.219.184.0/22
+103.220.56.0/22
+103.220.60.0/22
+103.220.64.0/22
+103.220.92.0/22
+103.220.96.0/22
+103.220.100.0/22
+103.220.104.0/22
+103.220.108.0/22
+103.220.116.0/22
+103.220.120.0/22
+103.220.124.0/22
+103.220.128.0/22
+103.220.132.0/22
+103.220.136.0/22
+103.220.140.0/22
+103.220.144.0/22
+103.220.148.0/22
+103.220.152.0/22
+103.220.160.0/22
+103.220.164.0/22
+103.220.168.0/22
+103.220.172.0/22
+103.220.176.0/22
+103.220.180.0/22
+103.220.184.0/22
+103.220.188.0/22
+103.220.192.0/22
+103.220.196.0/22
+103.220.200.0/22
+103.220.240.0/22
+103.220.244.0/22
+103.220.248.0/22
+103.220.252.0/22
+103.221.0.0/22
+103.221.4.0/22
+103.221.8.0/22
+103.221.12.0/22
+103.221.16.0/22
+103.221.20.0/22
+103.221.24.0/22
+103.221.28.0/22
+103.221.32.0/22
+103.221.36.0/22
+103.221.40.0/22
+103.221.44.0/22
+103.221.48.0/22
+103.221.92.0/22
+103.221.96.0/22
+103.221.100.0/22
+103.221.104.0/22
+103.221.108.0/22
+103.221.112.0/22
+103.221.116.0/22
+103.221.120.0/22
+103.221.124.0/22
+103.221.128.0/22
+103.221.136.0/22
+103.221.144.0/22
+103.221.148.0/22
+103.221.152.0/22
+103.221.160.0/22
+103.221.164.0/22
+103.221.168.0/22
+103.221.172.0/22
+103.221.176.0/22
+103.221.200.0/22
+103.221.204.0/22
+103.222.52.0/22
+103.222.112.0/22
+103.222.116.0/22
+103.222.120.0/22
+103.222.124.0/22
+103.222.128.0/22
+103.222.132.0/22
+103.222.136.0/22
+103.222.140.0/22
+103.222.144.0/22
+103.222.148.0/22
+103.222.152.0/22
+103.222.156.0/22
+103.222.160.0/22
+103.222.168.0/22
+103.222.176.0/22
+103.222.180.0/22
+103.222.184.0/22
+103.222.188.0/22
+103.222.192.0/22
+103.222.216.0/22
+103.222.220.0/22
+103.222.224.0/22
+103.222.228.0/22
+103.222.232.0/22
+103.222.240.0/22
+103.222.244.0/22
+103.223.16.0/22
+103.223.20.0/22
+103.223.24.0/22
+103.223.28.0/22
+103.223.32.0/22
+103.223.36.0/22
+103.223.40.0/22
+103.223.44.0/22
+103.223.48.0/22
+103.223.52.0/22
+103.223.56.0/22
+103.223.60.0/22
+103.223.64.0/22
+103.223.68.0/22
+103.223.72.0/22
+103.223.76.0/22
+103.223.80.0/22
+103.223.84.0/22
+103.223.88.0/22
+103.223.92.0/22
+103.223.96.0/22
+103.223.100.0/22
+103.223.104.0/22
+103.223.108.0/22
+103.223.112.0/22
+103.223.116.0/22
+103.223.120.0/22
+103.223.124.0/22
+103.223.128.0/22
+103.223.132.0/22
+103.223.144.0/22
+103.223.148.0/22
+103.223.152.0/22
+103.223.156.0/22
+103.223.160.0/22
+103.223.164.0/22
+103.223.168.0/22
+103.223.172.0/22
+103.223.176.0/22
+103.223.180.0/22
+103.223.192.0/22
+103.223.196.0/22
+103.223.200.0/22
+103.223.204.0/22
+103.223.208.0/22
+103.223.212.0/22
+103.223.216.0/22
+103.223.220.0/22
+103.223.224.0/22
+103.223.228.0/22
+103.223.232.0/22
+103.223.236.0/22
+103.223.240.0/22
+103.223.244.0/22
+103.223.248.0/22
+103.223.252.0/22
+103.224.0.0/22
+103.224.40.0/22
+103.224.44.0/22
+103.224.60.0/22
+103.224.80.0/22
+103.224.220.0/22
+103.224.224.0/22
+103.224.232.0/22
+103.225.84.0/22
+103.226.16.0/22
+103.226.40.0/22
+103.226.56.0/22
+103.226.60.0/22
+103.226.80.0/22
+103.226.132.0/22
+103.226.156.0/22
+103.226.180.0/22
+103.226.196.0/22
+103.227.48.0/22
+103.227.72.0/22
+103.227.76.0/22
+103.227.80.0/22
+103.227.100.0/22
+103.227.132.0/22
+103.227.196.0/22
+103.227.204.0/22
+103.227.212.0/22
+103.227.228.0/22
+103.228.12.0/22
+103.228.28.0/22
+103.228.68.0/22
+103.228.88.0/22
+103.228.128.0/22
+103.228.136.0/22
+103.228.160.0/22
+103.228.176.0/22
+103.228.208.0/22
+103.228.228.0/22
+103.228.232.0/22
+103.229.20.0/22
+103.229.60.0/22
+103.229.136.0/22
+103.229.172.0/22
+103.229.216.0/22
+103.229.220.0/22
+103.229.228.0/22
+103.229.236.0/22
+103.229.240.0/22
+103.230.0.0/22
+103.230.28.0/22
+103.230.44.0/22
+103.230.96.0/22
+103.230.200.0/22
+103.230.204.0/22
+103.230.212.0/22
+103.231.16.0/22
+103.231.20.0/22
+103.231.64.0/22
+103.231.68.0/22
+103.231.144.0/22
+103.231.180.0/22
+103.231.184.0/22
+103.231.244.0/22
+103.232.4.0/22
+103.232.144.0/22
+103.232.188.0/22
+103.232.212.0/22
+103.233.4.0/22
+103.233.44.0/22
+103.233.52.0/22
+103.233.104.0/22
+103.233.128.0/22
+103.233.136.0/22
+103.234.0.0/22
+103.234.20.0/22
+103.234.128.0/22
+103.234.172.0/22
+103.234.180.0/22
+103.235.16.0/22
+103.235.48.0/22
+103.235.56.0/22
+103.235.60.0/22
+103.235.80.0/22
+103.235.84.0/22
+103.235.128.0/22
+103.235.132.0/22
+103.235.136.0/22
+103.235.140.0/22
+103.235.144.0/22
+103.235.148.0/22
+103.235.184.0/22
+103.235.192.0/22
+103.235.200.0/22
+103.235.220.0/22
+103.235.224.0/22
+103.235.228.0/22
+103.235.232.0/22
+103.235.236.0/22
+103.235.240.0/22
+103.235.244.0/22
+103.235.248.0/22
+103.235.252.0/22
+103.236.0.0/22
+103.236.4.0/22
+103.236.8.0/22
+103.236.12.0/22
+103.236.16.0/22
+103.236.20.0/22
+103.236.24.0/22
+103.236.28.0/22
+103.236.32.0/22
+103.236.36.0/22
+103.236.40.0/22
+103.236.44.0/22
+103.236.48.0/22
+103.236.52.0/22
+103.236.56.0/22
+103.236.60.0/22
+103.236.64.0/22
+103.236.68.0/22
+103.236.72.0/22
+103.236.76.0/22
+103.236.80.0/22
+103.236.84.0/22
+103.236.88.0/22
+103.236.92.0/22
+103.236.96.0/22
+103.236.184.0/22
+103.236.220.0/22
+103.236.232.0/22
+103.236.244.0/22
+103.236.248.0/22
+103.237.0.0/22
+103.237.4.0/22
+103.237.8.0/22
+103.237.12.0/22
+103.237.24.0/22
+103.237.28.0/22
+103.237.68.0/22
+103.237.88.0/22
+103.237.152.0/22
+103.237.176.0/22
+103.237.180.0/22
+103.237.184.0/22
+103.237.188.0/22
+103.237.192.0/22
+103.237.196.0/22
+103.237.200.0/22
+103.237.204.0/22
+103.237.208.0/22
+103.237.212.0/22
+103.237.216.0/22
+103.237.220.0/22
+103.237.224.0/22
+103.237.228.0/22
+103.237.232.0/22
+103.237.236.0/22
+103.237.240.0/22
+103.237.244.0/22
+103.237.248.0/22
+103.237.252.0/22
+103.238.0.0/22
+103.238.4.0/22
+103.238.16.0/22
+103.238.20.0/22
+103.238.24.0/22
+103.238.36.0/22
+103.238.40.0/22
+103.238.44.0/22
+103.238.48.0/22
+103.238.52.0/22
+103.238.56.0/22
+103.238.88.0/22
+103.238.92.0/22
+103.238.96.0/22
+103.238.132.0/22
+103.238.164.0/22
+103.238.168.0/22
+103.238.172.0/22
+103.238.176.0/22
+103.238.180.0/22
+103.238.188.0/22
+103.238.196.0/22
+103.238.204.0/22
+103.238.252.0/22
+103.239.0.0/22
+103.239.44.0/22
+103.239.68.0/22
+103.239.96.0/22
+103.239.156.0/22
+103.239.176.0/22
+103.239.180.0/22
+103.239.184.0/22
+103.239.192.0/22
+103.239.196.0/22
+103.239.204.0/22
+103.239.208.0/22
+103.239.224.0/22
+103.240.16.0/22
+103.240.156.0/22
+103.240.188.0/22
+103.240.244.0/22
+103.241.12.0/22
+103.241.72.0/22
+103.241.92.0/22
+103.241.96.0/22
+103.241.160.0/22
+103.241.184.0/22
+103.241.188.0/22
+103.241.220.0/22
+103.242.64.0/22
+103.242.128.0/22
+103.242.132.0/22
+103.242.160.0/22
+103.242.168.0/22
+103.242.172.0/22
+103.242.176.0/22
+103.242.200.0/22
+103.242.212.0/22
+103.242.220.0/22
+103.242.240.0/22
+103.243.136.0/22
+103.243.252.0/22
+103.244.16.0/22
+103.244.58.0/23
+103.244.60.0/22
+103.244.64.0/22
+103.244.68.0/22
+103.244.72.0/22
+103.244.76.0/22
+103.244.80.0/22
+103.244.84.0/22
+103.244.116.0/22
+103.244.164.0/22
+103.244.232.0/22
+103.244.252.0/22
+103.245.23.0/24
+103.245.52.0/22
+103.245.60.0/22
+103.245.80.0/22
+103.245.124.0/22
+103.245.128.0/22
+103.246.12.0/22
+103.246.120.0/22
+103.246.124.0/22
+103.246.132.0/22
+103.246.156.0/22
+103.247.168.0/22
+103.247.172.0/22
+103.247.176.0/22
+103.247.200.0/22
+103.247.212.0/22
+103.248.0.0/23
+103.248.64.0/22
+103.248.124.0/22
+103.248.168.0/22
+103.248.192.0/22
+103.248.212.0/22
+103.248.220.0/22
+103.248.224.0/22
+103.249.8.0/22
+103.249.12.0/22
+103.249.52.0/22
+103.249.104.0/22
+103.249.128.0/22
+103.249.136.0/22
+103.249.144.0/22
+103.249.164.0/22
+103.249.168.0/22
+103.249.172.0/22
+103.249.176.0/22
+103.249.188.0/22
+103.249.192.0/22
+103.249.244.0/22
+103.249.252.0/22
+103.250.224.0/22
+103.250.236.0/22
+103.250.252.0/22
+103.251.36.0/22
+103.251.84.0/22
+103.251.128.0/22
+103.251.192.0/22
+103.251.204.0/22
+103.251.236.0/22
+103.252.28.0/22
+103.252.36.0/22
+103.252.64.0/22
+103.252.96.0/22
+103.252.104.0/22
+103.252.172.0/22
+103.253.4.0/22
+103.253.204.0/22
+103.253.220.0/22
+103.253.224.0/22
+103.253.232.0/22
+103.254.8.0/22
+103.254.20.0/22
+103.254.64.0/22
+103.254.68.0/22
+103.254.72.0/22
+103.254.76.0/22
+103.254.112.0/22
+103.254.176.0/22
+103.254.196.0/24
+103.254.220.0/22
+103.255.56.0/22
+103.255.68.0/22
+103.255.92.0/22
+103.255.136.0/22
+103.255.140.0/22
+103.255.184.0/22
+103.255.212.0/22
+103.255.228.0/22
+106.0.44.0/22
+106.2.0.0/15
+106.11.0.0/16
+106.12.0.0/14
+106.50.0.0/16
+106.52.0.0/14
+106.74.0.0/16
+106.75.0.0/16
+109.244.0.0/16
+110.34.40.0/22
+110.34.44.0/22
+110.40.0.0/14
+110.44.144.0/20
+110.48.0.0/16
+110.51.0.0/16
+110.56.0.0/13
+110.75.0.0/17
+110.75.128.0/19
+110.75.160.0/19
+110.75.192.0/18
+110.76.0.0/19
+110.76.32.0/19
+110.76.132.0/22
+110.76.192.0/18
+110.77.0.0/17
+110.92.68.0/22
+110.165.32.0/19
+110.172.192.0/18
+110.173.0.0/19
+110.173.32.0/20
+110.173.96.0/19
+110.173.192.0/19
+110.232.32.0/19
+111.66.0.0/16
+111.67.192.0/20
+111.68.64.0/19
+111.91.192.0/19
+111.92.248.0/22
+111.92.252.0/22
+111.118.200.0/21
+111.119.64.0/18
+111.119.128.0/19
+111.128.0.0/11
+111.208.0.0/14
+111.212.0.0/14
+111.221.28.0/24
+111.221.128.0/17
+111.222.0.0/16
+111.223.4.0/22
+111.223.8.0/22
+111.223.16.0/22
+111.223.240.0/22
+111.223.248.0/22
+111.228.0.0/14
+111.235.96.0/19
+111.235.160.0/19
+112.73.0.0/16
+112.74.0.0/15
+112.124.0.0/14
+112.128.0.0/14
+113.11.192.0/19
+113.21.232.0/22
+113.21.236.0/22
+113.31.0.0/16
+113.44.0.0/14
+113.48.0.0/14
+113.52.160.0/19
+113.52.228.0/22
+113.130.96.0/20
+113.130.112.0/21
+113.197.100.0/22
+113.202.0.0/16
+113.208.96.0/19
+113.212.0.0/18
+113.212.100.0/22
+113.214.0.0/15
+114.28.0.0/16
+114.31.64.0/22
+114.31.68.0/22
+114.64.0.0/14
+114.68.0.0/16
+114.110.0.0/20
+114.110.64.0/18
+114.111.0.0/19
+114.111.160.0/19
+114.112.0.0/14
+114.116.0.0/16
+114.117.0.0/16
+114.118.0.0/16
+114.119.128.0/18
+114.119.192.0/21
+114.119.200.0/22
+114.119.204.0/22
+114.119.208.0/20
+114.132.0.0/16
+114.141.80.0/22
+114.141.84.0/22
+114.141.128.0/18
+114.196.0.0/15
+114.208.0.0/14
+114.215.0.0/16
+115.28.0.0/15
+115.31.64.0/22
+115.31.68.0/22
+115.31.72.0/22
+115.31.76.0/22
+115.32.0.0/14
+115.42.56.0/22
+115.44.0.0/15
+115.47.0.0/16
+115.84.0.0/18
+115.84.192.0/19
+115.100.0.0/14
+115.104.0.0/14
+115.120.0.0/14
+115.124.16.0/20
+115.159.0.0/16
+115.182.0.0/16
+115.183.0.0/16
+115.187.0.0/22
+115.187.4.0/22
+115.187.8.0/22
+115.187.12.0/22
+116.58.128.0/20
+116.58.208.0/20
+116.66.0.0/17
+116.66.176.0/22
+116.68.136.0/22
+116.68.140.0/22
+116.68.176.0/22
+116.68.180.0/22
+116.69.0.0/16
+116.76.0.0/15
+116.85.0.0/16
+116.89.144.0/20
+116.89.240.0/22
+116.90.80.0/20
+116.90.184.0/21
+116.193.16.0/20
+116.193.32.0/19
+116.193.152.0/22
+116.193.164.0/22
+116.196.0.0/16
+116.197.160.0/22
+116.197.164.0/22
+116.198.0.0/16
+116.199.128.0/19
+116.204.0.0/17
+116.204.132.0/22
+116.204.168.0/22
+116.204.216.0/22
+116.205.0.0/16
+116.206.92.0/22
+116.206.100.0/22
+116.206.176.0/22
+116.212.160.0/20
+116.213.44.0/22
+116.213.64.0/18
+116.213.128.0/17
+116.214.64.0/20
+116.214.128.0/17
+116.215.0.0/16
+116.251.64.0/18
+116.254.104.0/22
+116.254.108.0/22
+117.48.0.0/14
+117.53.48.0/20
+117.53.176.0/20
+117.58.0.0/17
+117.59.0.0/16
+117.72.0.0/15
+117.74.128.0/17
+117.103.16.0/20
+117.103.128.0/20
+117.106.0.0/15
+117.112.0.0/13
+117.120.64.0/18
+117.120.128.0/17
+117.121.0.0/17
+117.121.192.0/21
+117.124.0.0/14
+118.24.0.0/15
+118.26.0.0/19
+118.26.32.0/22
+118.26.36.0/22
+118.26.40.0/21
+118.26.56.0/21
+118.26.64.0/19
+118.26.96.0/21
+118.26.104.0/21
+118.26.112.0/21
+118.26.120.0/21
+118.26.128.0/17
+118.28.0.0/15
+118.30.0.0/16
+118.31.0.0/16
+118.64.0.0/15
+118.66.0.0/16
+118.67.112.0/20
+118.89.0.0/16
+118.91.240.0/20
+118.102.16.0/20
+118.103.164.0/22
+118.103.172.0/22
+118.103.176.0/22
+118.107.180.0/22
+118.126.0.0/16
+118.178.0.0/16
+118.184.0.0/17
+118.184.128.0/17
+118.186.0.0/15
+118.188.0.0/16
+118.190.0.0/16
+118.191.0.0/16
+118.192.0.0/16
+118.193.0.0/21
+118.193.8.0/21
+118.193.32.0/19
+118.193.64.0/20
+118.193.96.0/19
+118.193.128.0/17
+118.194.0.0/17
+118.194.128.0/17
+118.195.0.0/17
+118.195.128.0/17
+118.196.0.0/14
+118.242.0.0/16
+119.2.0.0/19
+119.2.128.0/17
+119.3.0.0/16
+119.8.0.0/16
+119.10.0.0/17
+119.15.136.0/21
+119.16.0.0/16
+119.18.192.0/20
+119.18.208.0/21
+119.18.224.0/20
+119.18.240.0/20
+119.19.0.0/16
+119.20.0.0/14
+119.27.160.0/19
+119.27.192.0/18
+119.28.0.0/15
+119.30.48.0/20
+119.31.192.0/19
+119.37.192.0/18
+119.38.128.0/18
+119.38.192.0/20
+119.38.208.0/20
+119.38.224.0/19
+119.40.0.0/18
+119.40.64.0/20
+119.42.52.0/22
+119.42.136.0/21
+119.57.0.0/16
+119.58.0.0/16
+119.61.0.0/16
+119.63.32.0/19
+119.75.208.0/20
+119.78.0.0/15
+119.80.0.0/16
+119.88.0.0/14
+119.161.120.0/22
+119.161.124.0/22
+119.161.128.0/17
+119.235.128.0/18
+119.253.0.0/16
+119.254.0.0/15
+120.24.0.0/14
+120.30.0.0/16
+120.31.0.0/16
+120.44.0.0/14
+120.48.0.0/15
+120.52.0.0/16
+120.53.0.0/16
+120.54.0.0/15
+120.64.0.0/14
+120.72.32.0/19
+120.72.128.0/17
+120.76.0.0/14
+120.92.0.0/16
+120.132.0.0/17
+120.132.128.0/17
+120.134.0.0/15
+120.136.16.0/22
+120.136.20.0/22
+120.136.128.0/18
+120.137.0.0/17
+121.0.16.0/20
+121.4.0.0/15
+121.36.0.0/16
+121.37.0.0/16
+121.38.0.0/15
+121.40.0.0/14
+121.46.0.0/18
+121.46.76.0/22
+121.46.128.0/17
+121.47.0.0/16
+121.51.0.0/16
+121.52.208.0/20
+121.54.188.0/22
+121.58.144.0/20
+121.79.128.0/18
+121.89.0.0/16
+121.101.208.0/20
+121.196.0.0/14
+121.255.0.0/16
+122.0.64.0/18
+122.0.128.0/17
+122.8.0.0/16
+122.9.0.0/16
+122.10.128.0/22
+122.10.132.0/23
+122.10.134.0/23
+122.10.136.0/23
+122.10.138.0/23
+122.10.140.0/22
+122.10.144.0/20
+122.10.160.0/19
+122.10.192.0/20
+122.10.208.0/21
+122.10.216.0/22
+122.10.220.0/22
+122.10.224.0/19
+122.11.0.0/17
+122.12.0.0/16
+122.14.0.0/17
+122.14.128.0/18
+122.14.192.0/18
+122.48.0.0/16
+122.49.0.0/18
+122.51.0.0/16
+122.102.0.0/20
+122.112.0.0/18
+122.112.64.0/18
+122.112.128.0/17
+122.113.0.0/16
+122.114.0.0/16
+122.115.0.0/17
+122.115.128.0/19
+122.115.160.0/19
+122.115.192.0/19
+122.115.224.0/19
+122.119.0.0/16
+122.128.100.0/22
+122.144.128.0/17
+122.152.192.0/18
+122.198.0.0/16
+122.200.40.0/22
+122.200.44.0/22
+122.200.64.0/18
+122.201.48.0/20
+122.248.48.0/20
+123.0.128.0/18
+123.49.128.0/17
+123.56.0.0/15
+123.58.0.0/20
+123.58.16.0/20
+123.58.32.0/19
+123.58.64.0/19
+123.58.96.0/19
+123.58.128.0/18
+123.58.192.0/19
+123.58.224.0/20
+123.58.240.0/20
+123.59.0.0/16
+123.60.0.0/16
+123.61.0.0/16
+123.62.0.0/16
+123.99.128.0/17
+123.108.128.0/20
+123.108.208.0/20
+123.136.80.0/20
+123.137.0.0/16
+123.176.60.0/22
+123.199.128.0/17
+123.206.0.0/15
+123.242.0.0/17
+123.242.192.0/22
+123.242.196.0/22
+123.249.0.0/16
+123.254.96.0/22
+123.254.100.0/22
+124.16.0.0/15
+124.22.0.0/15
+124.28.192.0/18
+124.29.0.0/17
+124.40.112.0/20
+124.40.128.0/18
+124.40.240.0/22
+124.42.0.0/17
+124.47.0.0/18
+124.108.8.0/21
+124.108.40.0/21
+124.126.0.0/15
+124.147.128.0/17
+124.150.137.0/24
+124.151.0.0/16
+124.174.0.0/15
+124.192.0.0/15
+124.196.0.0/16
+124.200.0.0/13
+124.220.0.0/14
+124.240.0.0/17
+124.242.0.0/16
+124.243.192.0/18
+124.248.0.0/17
+124.249.0.0/16
+124.250.0.0/15
+125.31.192.0/18
+125.58.128.0/17
+125.61.128.0/17
+125.62.0.0/18
+125.96.0.0/15
+125.98.0.0/16
+125.169.0.0/16
+125.210.0.0/16
+125.213.0.0/17
+125.215.0.0/18
+125.254.128.0/18
+125.254.192.0/18
+128.108.0.0/16
+129.28.0.0/16
+129.204.0.0/16
+129.211.0.0/16
+132.232.0.0/16
+134.175.0.0/16
+137.59.59.0/24
+137.59.88.0/22
+139.5.56.0/22
+139.5.60.0/22
+139.5.80.0/22
+139.5.92.0/22
+139.5.108.0/22
+139.5.128.0/22
+139.5.160.0/22
+139.5.192.0/22
+139.5.208.0/22
+139.5.244.0/22
+139.9.0.0/16
+139.129.0.0/16
+139.148.0.0/16
+139.155.0.0/16
+139.159.0.0/16
+139.176.0.0/16
+139.183.0.0/16
+139.186.0.0/16
+139.196.0.0/14
+139.217.0.0/16
+139.219.0.0/16
+139.220.0.0/15
+139.224.0.0/16
+140.143.0.0/16
+140.179.0.0/16
+140.205.0.0/16
+140.210.0.0/16
+144.48.8.0/22
+144.48.88.0/22
+144.48.156.0/22
+144.48.180.0/22
+144.48.184.0/22
+144.48.204.0/22
+144.48.208.0/22
+144.48.212.0/22
+144.48.220.0/22
+144.48.252.0/22
+146.56.192.0/18
+146.196.72.0/22
+146.196.92.0/22
+146.196.112.0/22
+146.196.116.0/22
+146.196.124.0/22
+148.70.0.0/16
+150.129.192.0/22
+150.129.216.0/22
+150.158.0.0/16
+150.242.0.0/22
+150.242.4.0/22
+150.242.8.0/22
+150.242.28.0/22
+150.242.44.0/22
+150.242.48.0/22
+150.242.52.0/22
+150.242.56.0/22
+150.242.76.0/22
+150.242.80.0/22
+150.242.92.0/22
+150.242.96.0/22
+150.242.112.0/22
+150.242.116.0/22
+150.242.120.0/22
+150.242.156.0/22
+150.242.160.0/22
+150.242.164.0/22
+150.242.168.0/22
+150.242.184.0/22
+150.242.188.0/22
+150.242.192.0/22
+150.242.212.0/22
+150.242.224.0/22
+150.242.228.0/22
+150.242.236.0/22
+150.242.240.0/22
+150.242.244.0/22
+150.242.248.0/22
+152.104.128.0/17
+152.136.0.0/16
+154.8.128.0/17
+157.119.0.0/22
+157.119.8.0/22
+157.119.12.0/22
+157.119.16.0/22
+157.119.28.0/22
+157.119.68.0/22
+157.119.112.0/22
+157.119.132.0/22
+157.119.136.0/22
+157.119.140.0/22
+157.119.144.0/22
+157.119.148.0/22
+157.119.152.0/22
+157.119.156.0/22
+157.119.160.0/22
+157.119.164.0/22
+157.119.172.0/22
+157.119.192.0/22
+157.119.196.0/22
+157.119.240.0/22
+157.119.252.0/22
+159.75.0.0/16
+159.226.0.0/16
+160.19.208.0/22
+160.19.216.0/22
+160.20.48.0/22
+160.202.168.0/22
+160.202.216.0/22
+160.202.220.0/22
+160.202.224.0/22
+160.202.228.0/22
+160.202.232.0/22
+160.202.236.0/22
+160.202.240.0/22
+160.202.244.0/22
+160.202.248.0/22
+160.202.252.0/22
+160.238.64.0/22
+161.189.0.0/16
+161.207.0.0/16
+162.14.0.0/16
+162.105.0.0/16
+163.47.4.0/22
+163.53.0.0/22
+163.53.4.0/22
+163.53.8.0/22
+163.53.12.0/22
+163.53.36.0/22
+163.53.40.0/22
+163.53.44.0/22
+163.53.56.0/22
+163.53.60.0/22
+163.53.64.0/22
+163.53.88.0/22
+163.53.92.0/22
+163.53.96.0/22
+163.53.100.0/22
+163.53.104.0/22
+163.53.108.0/22
+163.53.112.0/22
+163.53.116.0/22
+163.53.120.0/22
+163.53.124.0/22
+163.53.128.0/22
+163.53.132.0/22
+163.53.136.0/22
+163.53.160.0/22
+163.53.164.0/22
+163.53.172.0/22
+163.53.188.0/22
+163.53.240.0/22
+164.52.0.0/17
+166.111.0.0/16
+167.139.0.0/16
+167.189.0.0/16
+167.220.244.0/22
+168.160.0.0/16
+170.179.0.0/16
+171.84.0.0/14
+172.81.192.0/18
+175.24.0.0/14
+175.46.0.0/15
+175.48.0.0/12
+175.64.0.0/11
+175.102.0.0/16
+175.111.144.0/22
+175.111.148.0/22
+175.111.152.0/22
+175.111.156.0/22
+175.111.160.0/22
+175.111.164.0/22
+175.111.168.0/22
+175.111.172.0/22
+175.111.184.0/22
+175.158.96.0/22
+175.176.156.0/22
+175.176.176.0/22
+175.176.192.0/22
+175.178.0.0/16
+180.76.0.0/16
+180.78.0.0/15
+180.86.0.0/16
+180.94.56.0/21
+180.94.96.0/20
+180.94.120.0/22
+180.94.124.0/22
+180.148.224.0/19
+180.149.236.0/22
+180.150.160.0/19
+180.178.112.0/22
+180.178.116.0/22
+180.178.192.0/18
+180.184.0.0/14
+180.188.0.0/17
+180.200.252.0/22
+180.202.0.0/15
+180.210.212.0/22
+180.210.224.0/19
+180.222.224.0/19
+180.233.0.0/18
+180.233.64.0/19
+180.233.144.0/22
+180.235.64.0/19
+180.235.112.0/22
+180.235.136.0/22
+182.16.144.0/22
+182.16.148.0/22
+182.16.192.0/19
+182.18.0.0/17
+182.48.96.0/19
+182.49.0.0/16
+182.50.0.0/20
+182.50.112.0/20
+182.51.0.0/16
+182.54.244.0/22
+182.61.0.0/16
+182.80.0.0/14
+182.92.0.0/16
+182.157.0.0/16
+182.160.64.0/19
+182.174.0.0/15
+182.236.128.0/17
+182.237.24.0/22
+182.237.28.0/22
+182.238.0.0/16
+182.239.0.0/19
+182.254.0.0/16
+182.255.32.0/22
+182.255.36.0/22
+182.255.60.0/22
+183.78.160.0/22
+183.78.164.0/22
+183.81.172.0/22
+183.81.180.0/22
+183.84.0.0/15
+183.91.128.0/22
+183.91.144.0/20
+183.182.0.0/19
+188.131.128.0/17
+192.55.46.0/24
+192.55.68.0/22
+192.102.204.0/23
+192.140.128.0/22
+192.140.132.0/22
+192.140.136.0/22
+192.140.156.0/22
+192.140.160.0/22
+192.140.164.0/22
+192.140.168.0/22
+192.140.172.0/22
+192.140.176.0/22
+192.140.180.0/22
+192.140.184.0/22
+192.140.188.0/22
+192.140.192.0/22
+192.140.196.0/22
+192.140.200.0/22
+192.140.204.0/22
+192.144.128.0/17
+193.112.0.0/16
+198.175.100.0/22
+202.4.252.0/22
+202.5.208.0/22
+202.5.212.0/22
+202.5.216.0/22
+202.8.128.0/19
+202.10.64.0/20
+202.10.112.0/22
+202.10.116.0/22
+202.10.120.0/22
+202.10.124.0/22
+202.12.19.0/24
+202.14.172.0/22
+202.14.235.0/24
+202.14.236.0/23
+202.14.238.0/24
+202.20.126.0/24
+202.21.48.0/22
+202.21.52.0/22
+202.21.56.0/22
+202.21.60.0/22
+202.22.248.0/22
+202.22.252.0/22
+202.27.12.0/24
+202.27.14.0/24
+202.36.226.0/24
+202.38.8.0/21
+202.38.128.0/23
+202.38.132.0/23
+202.38.134.0/24
+202.38.135.0/24
+202.38.138.0/24
+202.38.146.0/23
+202.38.152.0/23
+202.38.160.0/23
+202.38.164.0/22
+202.38.171.0/24
+202.38.176.0/23
+202.41.152.0/21
+202.41.196.0/22
+202.41.200.0/22
+202.41.240.0/20
+202.43.76.0/22
+202.43.144.0/20
+202.44.48.0/22
+202.44.97.0/24
+202.46.32.0/19
+202.46.224.0/20
+202.47.96.0/22
+202.47.100.0/22
+202.47.104.0/22
+202.47.108.0/22
+202.52.33.0/24
+202.52.34.0/24
+202.52.47.0/24
+202.52.143.0/24
+202.53.140.0/24
+202.53.143.0/24
+202.57.192.0/22
+202.57.196.0/22
+202.57.200.0/22
+202.57.204.0/22
+202.57.212.0/22
+202.57.216.0/22
+202.58.104.0/22
+202.58.112.0/22
+202.59.1.0/24
+202.59.240.0/24
+202.60.112.0/20
+202.61.68.0/22
+202.61.76.0/22
+202.61.88.0/22
+202.61.123.0/24
+202.61.127.0/24
+202.63.80.0/24
+202.63.160.0/19
+202.63.248.0/22
+202.63.253.0/24
+202.65.96.0/22
+202.65.100.0/22
+202.65.104.0/22
+202.65.108.0/22
+202.66.168.0/22
+202.69.4.0/22
+202.69.16.0/20
+202.70.0.0/19
+202.71.32.0/22
+202.71.36.0/22
+202.71.40.0/22
+202.71.44.0/22
+202.72.112.0/22
+202.72.116.0/22
+202.72.120.0/22
+202.72.124.0/22
+202.73.240.0/22
+202.73.244.0/22
+202.73.248.0/22
+202.73.252.0/22
+202.74.36.0/24
+202.74.42.0/24
+202.74.52.0/24
+202.74.232.0/22
+202.81.176.0/22
+202.81.180.0/22
+202.81.184.0/22
+202.81.188.0/22
+202.84.0.0/22
+202.84.16.0/23
+202.84.22.0/24
+202.85.208.0/20
+202.88.32.0/22
+202.89.108.0/22
+202.89.119.0/24
+202.89.232.0/21
+202.90.0.0/22
+202.90.16.0/22
+202.90.20.0/22
+202.90.24.0/22
+202.90.28.0/22
+202.90.37.0/24
+202.90.96.0/22
+202.90.100.0/22
+202.90.104.0/22
+202.90.108.0/22
+202.90.193.0/24
+202.90.205.0/24
+202.90.224.0/20
+202.91.36.0/22
+202.91.128.0/22
+202.91.176.0/20
+202.91.224.0/19
+202.93.0.0/22
+202.93.252.0/22
+202.94.74.0/24
+202.94.81.0/24
+202.95.252.0/22
+202.101.192.0/19
+202.101.232.0/21
+202.101.240.0/20
+202.122.0.0/21
+202.122.32.0/21
+202.122.64.0/19
+202.122.112.0/21
+202.123.96.0/20
+202.123.116.0/22
+202.123.120.0/22
+202.125.109.0/24
+202.125.176.0/20
+202.127.0.0/23
+202.127.2.0/24
+202.127.3.0/24
+202.127.4.0/24
+202.127.5.0/24
+202.127.6.0/23
+202.127.12.0/22
+202.127.16.0/20
+202.127.40.0/21
+202.127.48.0/20
+202.127.144.0/20
+202.127.160.0/21
+202.127.192.0/23
+202.127.200.0/21
+202.127.208.0/24
+202.129.208.0/24
+202.130.0.0/19
+202.130.39.0/24
+202.131.16.0/21
+202.131.48.0/20
+202.131.208.0/20
+202.134.208.0/22
+202.134.212.0/22
+202.134.216.0/22
+202.134.220.0/22
+202.136.48.0/20
+202.136.208.0/20
+202.136.224.0/20
+202.136.248.0/22
+202.140.140.0/22
+202.140.144.0/22
+202.140.148.0/22
+202.140.152.0/22
+202.140.156.0/22
+202.141.160.0/19
+202.142.16.0/20
+202.143.16.0/20
+202.143.100.0/22
+202.143.104.0/22
+202.144.196.0/22
+202.146.186.0/24
+202.148.96.0/19
+202.149.160.0/19
+202.149.224.0/19
+202.150.16.0/20
+202.151.33.0/24
+202.152.176.0/20
+202.153.7.0/24
+202.153.48.0/20
+202.158.160.0/19
+202.158.242.0/24
+202.160.156.0/22
+202.160.176.0/20
+202.164.0.0/20
+202.165.176.0/20
+202.165.208.0/20
+202.168.80.0/22
+202.168.128.0/22
+202.168.132.0/22
+202.168.136.0/22
+202.168.140.0/22
+202.168.160.0/20
+202.168.176.0/20
+202.170.216.0/21
+202.171.232.0/24
+202.172.7.0/24
+202.173.6.0/24
+202.173.8.0/21
+202.173.112.0/22
+202.174.124.0/22
+202.179.160.0/22
+202.179.164.0/22
+202.179.168.0/22
+202.179.172.0/22
+202.180.128.0/19
+202.181.8.0/22
+202.181.28.0/22
+202.181.112.0/20
+202.189.0.0/18
+202.189.80.0/20
+203.16.63.0/24
+203.17.249.0/24
+203.19.1.0/24
+203.19.147.0/24
+203.20.44.0/24
+203.56.231.0/24
+203.76.208.0/22
+203.76.212.0/22
+203.76.216.0/22
+203.76.244.0/22
+203.78.156.0/22
+203.79.0.0/20
+203.79.32.0/20
+203.80.129.0/24
+203.80.144.0/20
+203.81.16.0/20
+203.81.244.0/22
+203.82.116.0/22
+203.82.120.0/22
+203.82.124.0/22
+203.82.224.0/22
+203.82.228.0/22
+203.82.232.0/22
+203.82.236.0/22
+203.83.8.0/22
+203.83.12.0/22
+203.83.56.0/21
+203.86.0.0/19
+203.86.32.0/19
+203.86.80.0/20
+203.86.250.0/24
+203.88.32.0/19
+203.88.192.0/19
+203.89.0.0/22
+203.89.100.0/22
+203.89.133.0/24
+203.89.144.0/24
+203.90.0.0/22
+203.90.12.0/22
+203.90.128.0/19
+203.90.160.0/19
+203.90.192.0/19
+203.91.32.0/19
+203.91.96.0/20
+203.92.6.0/24
+203.92.160.0/19
+203.94.0.0/22
+203.94.4.0/22
+203.94.8.0/21
+203.94.16.0/20
+203.95.0.0/21
+203.95.96.0/20
+203.95.112.0/20
+203.95.128.0/18
+203.95.200.0/22
+203.95.204.0/22
+203.95.208.0/22
+203.99.16.0/20
+203.99.80.0/20
+203.100.32.0/20
+203.100.58.0/24
+203.100.60.0/24
+203.100.80.0/20
+203.100.96.0/19
+203.100.192.0/20
+203.107.0.0/17
+203.110.160.0/19
+203.114.80.0/22
+203.114.84.0/22
+203.114.88.0/22
+203.114.92.0/22
+203.114.244.0/22
+203.118.192.0/19
+203.118.248.0/22
+203.119.24.0/21
+203.119.32.0/22
+203.119.80.0/22
+203.119.85.0/24
+203.119.128.0/17
+203.123.58.0/24
+203.128.32.0/19
+203.128.96.0/19
+203.132.32.0/19
+203.134.240.0/21
+203.135.96.0/20
+203.135.112.0/20
+203.142.219.0/24
+203.148.0.0/18
+203.148.64.0/20
+203.152.64.0/19
+203.156.192.0/18
+203.158.16.0/21
+203.160.52.0/22
+203.161.180.0/24
+203.161.183.0/24
+203.161.192.0/19
+203.167.28.0/22
+203.171.208.0/24
+203.171.224.0/20
+203.174.6.0/24
+203.174.7.0/24
+203.174.96.0/19
+203.175.128.0/19
+203.175.192.0/18
+203.176.0.0/18
+203.176.168.0/21
+203.184.80.0/20
+203.185.189.0/24
+203.187.160.0/19
+203.189.232.0/22
+203.189.240.0/22
+203.190.96.0/20
+203.191.2.0/24
+203.191.5.0/24
+203.191.7.0/24
+203.191.16.0/20
+203.191.64.0/18
+203.191.133.0/24
+203.191.144.0/21
+203.191.152.0/21
+203.192.0.0/19
+203.195.128.0/17
+203.196.0.0/21
+203.196.28.0/22
+203.201.181.0/24
+203.201.182.0/24
+203.205.128.0/17
+203.207.64.0/20
+203.207.80.0/21
+203.207.88.0/22
+203.207.92.0/22
+203.207.96.0/20
+203.207.112.0/20
+203.207.128.0/18
+203.207.192.0/21
+203.207.200.0/21
+203.207.208.0/20
+203.207.224.0/19
+203.208.0.0/20
+203.208.16.0/22
+203.208.32.0/19
+203.209.224.0/19
+203.212.80.0/20
+203.217.164.0/22
+203.222.192.0/20
+210.2.0.0/20
+210.2.16.0/20
+210.5.0.0/19
+210.5.144.0/20
+210.7.56.0/22
+210.7.60.0/22
+210.14.64.0/19
+210.14.112.0/20
+210.14.128.0/19
+210.15.64.0/19
+210.16.104.0/22
+210.16.128.0/18
+210.23.32.0/19
+210.72.0.0/17
+210.72.128.0/19
+210.72.192.0/18
+210.73.0.0/19
+210.73.32.0/19
+210.73.64.0/18
+210.73.128.0/17
+210.74.0.0/19
+210.74.32.0/19
+210.74.160.0/19
+210.74.192.0/18
+210.76.0.0/19
+210.76.32.0/19
+210.76.64.0/18
+210.76.128.0/17
+210.78.32.0/19
+210.78.64.0/18
+210.78.128.0/19
+210.79.224.0/19
+210.87.128.0/20
+210.87.144.0/20
+210.87.160.0/19
+211.88.0.0/16
+211.89.0.0/16
+211.99.0.0/18
+211.99.64.0/19
+211.99.96.0/19
+211.99.128.0/17
+211.101.0.0/18
+211.101.64.0/18
+211.101.128.0/17
+211.102.0.0/16
+211.103.128.0/17
+211.146.0.0/16
+211.147.0.0/16
+211.148.0.0/14
+211.152.0.0/15
+211.155.0.0/18
+211.155.64.0/19
+211.155.96.0/19
+211.155.128.0/17
+211.156.0.0/14
+211.160.0.0/14
+212.64.0.0/17
+212.129.128.0/17
+216.250.108.0/22
+218.96.0.0/15
+218.98.128.0/18
+218.98.192.0/19
+218.98.224.0/19
+218.99.0.0/16
+218.108.0.0/16
+218.109.0.0/16
+218.185.192.0/19
+218.240.0.0/14
+218.244.0.0/15
+218.246.0.0/15
+218.249.0.0/16
+219.72.0.0/16
+219.82.0.0/16
+219.83.128.0/17
+219.90.68.0/22
+219.90.72.0/22
+219.90.76.0/22
+219.238.0.0/15
+220.101.192.0/18
+220.154.0.0/15
+220.231.128.0/17
+220.232.64.0/18
+221.122.0.0/15
+221.128.128.0/17
+221.129.0.0/16
+221.133.224.0/19
+221.136.0.0/16
+222.125.0.0/16
+222.126.128.0/17
+222.248.0.0/16
+222.249.0.0/17
+222.249.128.0/19
+222.249.160.0/20
+222.249.176.0/20
+222.249.192.0/18
+223.0.0.0/15
+223.4.0.0/14
+223.20.0.0/15
+223.29.208.0/22
+223.29.252.0/22
+223.160.0.0/14
+223.192.0.0/15
+223.201.0.0/16
+223.202.0.0/15
+223.212.0.0/15
+223.223.176.0/20
+223.223.192.0/20
+223.248.0.0/14
+223.252.128.0/17
+223.254.0.0/16
+223.255.0.0/17
+223.255.236.0/22
diff --git a/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/unicom_cnc.txt b/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/unicom_cnc.txt
new file mode 100644
index 0000000000..b5c9a29bb3
--- /dev/null
+++ b/package/lean/luci-app-mwan3helper/root/etc/mwan3helper/unicom_cnc.txt
@@ -0,0 +1,895 @@
+1.24.0.0/13
+1.56.0.0/13
+1.116.0.0/15
+1.188.0.0/14
+14.204.0.0/15
+27.0.128.0/22
+27.0.132.0/22
+27.8.0.0/13
+27.36.0.0/14
+27.40.0.0/13
+27.50.128.0/17
+27.54.192.0/18
+27.98.224.0/19
+27.112.0.0/18
+27.115.0.0/17
+27.192.0.0/11
+36.32.0.0/14
+36.248.0.0/14
+39.64.0.0/11
+42.1.128.0/17
+42.4.0.0/14
+42.48.0.0/15
+42.51.0.0/16
+42.52.0.0/14
+42.56.0.0/14
+42.63.0.0/16
+42.84.0.0/14
+42.176.0.0/13
+42.224.0.0/12
+43.224.12.0/22
+43.224.24.0/22
+43.224.52.0/22
+43.224.56.0/22
+43.224.80.0/22
+43.224.160.0/22
+43.224.208.0/22
+43.225.120.0/22
+43.226.96.0/22
+43.226.100.0/22
+43.226.104.0/22
+43.226.108.0/22
+43.226.116.0/22
+43.226.120.0/22
+43.226.160.0/22
+43.226.164.0/22
+43.226.236.0/22
+43.227.104.0/22
+43.229.168.0/22
+43.229.172.0/22
+43.229.176.0/22
+43.229.180.0/22
+43.229.236.0/22
+43.239.120.0/22
+43.240.0.0/22
+43.240.72.0/22
+43.240.132.0/22
+43.240.192.0/22
+43.240.196.0/22
+43.240.204.0/22
+43.241.48.0/22
+43.241.92.0/22
+43.241.184.0/22
+43.242.64.0/22
+43.242.148.0/22
+43.242.152.0/22
+43.242.156.0/22
+43.242.164.0/22
+43.242.180.0/22
+43.243.4.0/22
+43.243.16.0/22
+43.243.88.0/22
+43.243.128.0/22
+43.243.156.0/22
+43.243.180.0/22
+43.243.228.0/22
+43.246.112.0/22
+43.247.88.0/22
+43.247.92.0/22
+43.247.212.0/22
+43.247.216.0/22
+43.248.4.0/22
+43.248.20.0/22
+43.248.48.0/22
+43.248.80.0/22
+43.248.84.0/22
+43.248.88.0/22
+43.248.92.0/22
+43.248.108.0/22
+43.248.148.0/22
+43.248.176.0/22
+43.248.180.0/22
+43.248.184.0/22
+43.248.188.0/22
+43.248.192.0/22
+43.248.196.0/22
+43.248.200.0/22
+43.248.204.0/22
+43.248.244.0/22
+43.249.4.0/22
+43.249.136.0/22
+43.249.144.0/22
+43.249.192.0/22
+43.249.236.0/22
+43.250.4.0/22
+43.250.32.0/22
+43.250.96.0/22
+43.250.112.0/22
+43.250.128.0/22
+43.250.144.0/22
+43.250.168.0/22
+43.250.200.0/22
+43.250.212.0/22
+43.250.244.0/22
+43.251.4.0/22
+43.251.36.0/22
+43.251.232.0/22
+43.254.44.0/22
+43.254.52.0/22
+43.254.104.0/22
+43.254.116.0/22
+43.254.136.0/22
+43.254.144.0/22
+43.254.148.0/22
+43.254.220.0/22
+43.255.84.0/22
+43.255.204.0/22
+45.112.228.0/22
+45.112.232.0/22
+45.113.24.0/22
+45.113.28.0/22
+45.113.200.0/22
+45.113.240.0/22
+45.113.252.0/22
+45.115.144.0/22
+45.115.156.0/22
+45.115.164.0/22
+45.115.200.0/22
+45.115.248.0/22
+45.117.8.0/22
+45.117.124.0/22
+45.119.64.0/22
+45.119.68.0/22
+45.120.100.0/22
+45.121.52.0/22
+45.121.96.0/22
+45.123.156.0/22
+45.124.20.0/22
+45.124.68.0/22
+45.124.80.0/22
+45.125.44.0/22
+45.126.108.0/22
+45.126.120.0/22
+45.248.8.0/22
+45.249.112.0/22
+45.250.32.0/22
+45.250.36.0/22
+45.250.40.0/22
+45.251.16.0/22
+45.251.84.0/22
+45.251.88.0/22
+45.252.104.0/22
+45.253.24.0/22
+45.253.32.0/22
+45.253.64.0/22
+58.16.0.0/16
+58.17.0.0/17
+58.17.128.0/17
+58.18.0.0/16
+58.19.0.0/16
+58.20.0.0/16
+58.21.0.0/16
+58.22.0.0/15
+58.24.0.0/15
+58.30.0.0/15
+58.144.0.0/16
+58.240.0.0/15
+58.242.0.0/15
+58.244.0.0/15
+58.246.0.0/15
+58.248.0.0/13
+60.0.0.0/13
+60.8.0.0/15
+60.10.0.0/16
+60.11.0.0/16
+60.12.0.0/16
+60.13.0.0/18
+60.13.64.0/18
+60.13.128.0/17
+60.14.0.0/15
+60.16.0.0/13
+60.24.0.0/14
+60.28.0.0/15
+60.30.0.0/16
+60.31.0.0/16
+60.63.0.0/16
+60.204.0.0/16
+60.208.0.0/13
+60.216.0.0/15
+60.218.0.0/15
+60.220.0.0/14
+60.253.128.0/17
+60.255.0.0/16
+61.28.0.0/20
+61.28.16.0/20
+61.28.32.0/19
+61.28.64.0/18
+61.45.128.0/18
+61.48.0.0/14
+61.52.0.0/15
+61.54.0.0/16
+61.55.0.0/16
+61.133.0.0/17
+61.134.96.0/19
+61.134.128.0/18
+61.134.192.0/18
+61.135.0.0/16
+61.136.0.0/18
+61.136.64.0/18
+61.137.128.0/17
+61.138.0.0/18
+61.138.64.0/18
+61.138.128.0/18
+61.139.128.0/18
+61.148.0.0/15
+61.156.0.0/16
+61.158.0.0/17
+61.158.128.0/17
+61.159.0.0/18
+61.161.0.0/18
+61.161.128.0/17
+61.162.0.0/16
+61.163.0.0/16
+61.167.0.0/16
+61.168.0.0/16
+61.176.0.0/16
+61.179.0.0/16
+61.180.128.0/17
+61.181.0.0/16
+61.182.0.0/16
+61.189.0.0/17
+61.240.0.0/14
+101.16.0.0/12
+101.64.0.0/13
+101.72.0.0/14
+101.204.0.0/14
+101.232.0.0/15
+103.3.96.0/22
+103.3.100.0/22
+103.3.104.0/22
+103.3.108.0/22
+103.3.112.0/22
+103.3.116.0/22
+103.3.120.0/22
+103.3.124.0/22
+103.3.132.0/22
+103.3.136.0/22
+103.3.140.0/22
+103.3.148.0/22
+103.3.152.0/22
+103.3.156.0/22
+103.5.56.0/22
+103.5.168.0/22
+103.5.192.0/22
+103.5.252.0/22
+103.7.212.0/22
+103.9.248.0/22
+103.9.252.0/22
+103.14.84.0/22
+103.14.132.0/22
+103.18.224.0/22
+103.21.116.0/22
+103.22.188.0/22
+103.25.40.0/22
+103.27.4.0/22
+103.27.240.0/22
+103.28.204.0/22
+103.31.200.0/22
+103.35.220.0/22
+103.36.208.0/22
+103.36.220.0/22
+103.37.44.0/22
+103.37.100.0/22
+103.38.32.0/22
+103.38.40.0/22
+103.39.88.0/22
+103.40.12.0/22
+103.40.192.0/22
+103.40.212.0/22
+103.40.232.0/22
+103.41.164.0/22
+103.43.100.0/22
+103.43.192.0/22
+103.44.80.0/22
+103.45.72.0/22
+103.45.76.0/22
+103.45.160.0/22
+103.45.168.0/22
+103.45.224.0/22
+103.48.216.0/22
+103.48.220.0/22
+103.48.224.0/22
+103.48.228.0/22
+103.48.232.0/22
+103.52.96.0/22
+103.52.100.0/22
+103.52.176.0/22
+103.52.184.0/22
+103.53.124.0/22
+103.53.204.0/22
+103.55.172.0/22
+103.55.204.0/22
+103.55.208.0/22
+103.55.228.0/22
+103.56.32.0/22
+103.56.60.0/22
+103.57.196.0/22
+103.59.116.0/22
+103.59.124.0/22
+103.60.164.0/22
+103.61.176.0/22
+103.70.148.0/22
+103.72.224.0/22
+103.72.228.0/22
+103.72.232.0/22
+103.72.236.0/22
+103.72.240.0/22
+103.72.244.0/22
+103.72.248.0/22
+103.72.252.0/22
+103.73.0.0/22
+103.73.4.0/22
+103.73.8.0/22
+103.73.12.0/22
+103.73.16.0/22
+103.73.20.0/22
+103.73.24.0/22
+103.73.28.0/22
+103.73.144.0/22
+103.78.64.0/22
+103.85.84.0/22
+103.90.92.0/22
+103.90.188.0/22
+103.91.108.0/22
+103.91.176.0/22
+103.91.208.0/22
+103.92.132.0/22
+103.93.180.0/22
+103.95.220.0/22
+103.98.44.0/22
+103.98.168.0/22
+103.98.220.0/22
+103.107.212.0/22
+103.108.244.0/22
+103.110.156.0/22
+103.117.188.0/22
+103.123.56.0/22
+103.192.4.0/22
+103.192.132.0/22
+103.192.188.0/22
+103.192.212.0/22
+103.203.168.0/22
+103.204.72.0/22
+103.204.136.0/22
+103.205.4.0/22
+103.205.192.0/22
+103.205.252.0/22
+103.207.184.0/22
+103.207.228.0/22
+103.207.232.0/22
+103.210.184.0/22
+103.211.44.0/22
+103.211.96.0/22
+103.211.220.0/22
+103.213.96.0/22
+103.213.132.0/22
+103.214.48.0/22
+103.215.36.0/22
+103.216.152.0/22
+103.216.252.0/22
+103.219.28.0/22
+103.219.32.0/22
+103.219.36.0/22
+103.220.48.0/22
+103.220.52.0/22
+103.221.140.0/22
+103.222.32.0/22
+103.222.40.0/22
+103.222.164.0/22
+103.222.172.0/22
+103.223.140.0/22
+103.223.188.0/22
+103.224.228.0/22
+103.227.120.0/22
+103.227.136.0/22
+103.228.204.0/22
+103.229.148.0/22
+103.229.212.0/22
+103.230.196.0/22
+103.230.236.0/22
+103.233.228.0/22
+103.234.56.0/22
+103.234.244.0/22
+103.236.120.0/22
+103.236.240.0/22
+103.236.252.0/22
+103.238.28.0/22
+103.238.32.0/22
+103.238.140.0/22
+103.238.144.0/22
+103.238.160.0/22
+103.238.184.0/22
+103.239.152.0/22
+103.239.244.0/22
+103.240.36.0/22
+103.240.72.0/22
+103.240.84.0/22
+103.240.124.0/22
+103.240.172.0/22
+103.246.8.0/22
+103.246.152.0/22
+103.248.100.0/22
+103.248.152.0/22
+103.250.32.0/22
+103.250.104.0/22
+103.250.124.0/22
+103.250.180.0/22
+103.250.192.0/22
+103.250.216.0/22
+103.250.248.0/22
+103.251.32.0/22
+103.251.96.0/22
+103.251.124.0/22
+103.251.160.0/22
+103.251.240.0/22
+103.252.204.0/22
+103.252.208.0/22
+103.252.232.0/22
+103.252.248.0/22
+103.253.60.0/22
+103.255.88.0/22
+103.255.200.0/22
+106.48.0.0/15
+110.6.0.0/15
+110.16.0.0/14
+110.44.12.0/22
+110.52.0.0/15
+110.72.0.0/15
+110.228.0.0/14
+110.236.0.0/15
+110.240.0.0/12
+111.85.0.0/16
+111.160.0.0/13
+111.192.0.0/12
+111.223.12.0/22
+112.64.0.0/15
+112.80.0.0/13
+112.88.0.0/13
+112.96.0.0/15
+112.109.128.0/17
+112.111.0.0/16
+112.122.0.0/15
+112.132.0.0/16
+112.192.0.0/14
+112.224.0.0/11
+113.0.0.0/13
+113.8.0.0/15
+113.18.0.0/16
+113.56.0.0/15
+113.58.0.0/16
+113.59.0.0/17
+113.194.0.0/15
+113.200.0.0/15
+113.204.0.0/14
+113.213.0.0/17
+113.224.0.0/12
+114.54.0.0/15
+114.60.0.0/14
+114.119.0.0/17
+114.119.224.0/19
+114.240.0.0/12
+115.46.0.0/16
+115.48.0.0/12
+115.85.192.0/18
+115.172.0.0/14
+116.2.0.0/15
+116.60.0.0/14
+116.70.0.0/17
+116.78.0.0/15
+116.95.0.0/16
+116.112.0.0/14
+116.116.0.0/15
+116.128.0.0/10
+116.194.0.0/15
+116.199.0.0/17
+116.214.32.0/19
+116.216.0.0/14
+116.242.0.0/15
+116.244.0.0/15
+116.254.128.0/17
+116.255.128.0/17
+117.8.0.0/13
+117.74.64.0/20
+117.75.0.0/16
+117.76.0.0/14
+117.100.0.0/15
+117.121.128.0/18
+118.26.48.0/21
+118.72.0.0/13
+118.80.0.0/15
+118.88.32.0/19
+118.88.64.0/18
+118.88.128.0/17
+118.103.168.0/22
+118.132.0.0/14
+118.144.0.0/14
+118.212.0.0/16
+118.224.0.0/14
+118.244.0.0/14
+119.4.0.0/14
+119.27.64.0/18
+119.32.0.0/14
+119.36.0.0/16
+119.37.0.0/17
+119.37.128.0/18
+119.38.0.0/17
+119.39.0.0/16
+119.40.128.0/17
+119.42.0.0/19
+119.42.224.0/19
+119.44.0.0/15
+119.48.0.0/13
+119.59.128.0/17
+119.62.0.0/16
+119.108.0.0/15
+119.112.0.0/13
+119.148.160.0/20
+119.162.0.0/15
+119.164.0.0/14
+119.176.0.0/12
+119.232.0.0/15
+119.248.0.0/14
+119.252.240.0/20
+120.0.0.0/12
+120.80.0.0/13
+120.128.0.0/14
+120.133.0.0/16
+121.16.0.0/13
+121.24.0.0/14
+121.28.0.0/15
+121.30.0.0/16
+121.31.0.0/16
+121.52.224.0/19
+121.55.0.0/18
+121.68.0.0/14
+121.76.0.0/15
+121.100.128.0/17
+121.201.0.0/16
+122.13.0.0/16
+122.96.0.0/15
+122.102.64.0/20
+122.136.0.0/13
+122.156.0.0/14
+122.188.0.0/14
+122.192.0.0/14
+123.4.0.0/14
+123.8.0.0/13
+123.98.0.0/17
+123.100.0.0/19
+123.112.0.0/12
+123.128.0.0/13
+123.138.0.0/15
+123.144.0.0/14
+123.148.0.0/16
+123.152.0.0/13
+123.176.80.0/20
+123.188.0.0/14
+123.196.0.0/15
+123.232.0.0/14
+124.6.64.0/18
+124.20.0.0/16
+124.21.0.0/20
+124.21.16.0/20
+124.21.32.0/19
+124.21.64.0/18
+124.21.128.0/17
+124.42.128.0/17
+124.64.0.0/15
+124.66.0.0/17
+124.67.0.0/16
+124.68.0.0/14
+124.88.0.0/16
+124.89.0.0/17
+124.89.128.0/17
+124.90.0.0/15
+124.92.0.0/14
+124.128.0.0/13
+124.152.0.0/16
+124.160.0.0/16
+124.161.0.0/16
+124.162.0.0/16
+124.163.0.0/16
+124.164.0.0/14
+124.172.0.0/15
+124.240.128.0/18
+125.32.0.0/16
+125.33.0.0/16
+125.34.0.0/16
+125.35.0.0/17
+125.35.128.0/17
+125.36.0.0/14
+125.40.0.0/13
+125.211.0.0/16
+125.214.96.0/19
+139.170.0.0/16
+139.208.0.0/13
+139.226.0.0/15
+140.206.0.0/15
+144.48.64.0/22
+146.196.56.0/22
+146.196.68.0/22
+150.129.136.0/22
+150.129.252.0/22
+150.242.152.0/22
+150.242.232.0/22
+150.255.0.0/16
+153.0.0.0/16
+153.3.0.0/16
+153.34.0.0/15
+153.36.0.0/15
+153.99.0.0/16
+153.101.0.0/16
+157.0.0.0/16
+157.18.0.0/16
+157.61.0.0/16
+157.122.0.0/16
+157.148.0.0/16
+157.156.0.0/16
+157.255.0.0/16
+160.19.212.0/22
+160.202.60.0/22
+160.202.148.0/22
+160.202.152.0/22
+160.202.212.0/22
+163.0.0.0/16
+163.53.48.0/22
+163.53.52.0/22
+163.53.168.0/22
+163.125.0.0/16
+163.142.0.0/16
+163.177.0.0/16
+163.179.0.0/16
+163.204.0.0/16
+171.34.0.0/15
+171.36.0.0/14
+171.116.0.0/14
+171.120.0.0/13
+175.16.0.0/13
+175.42.0.0/15
+175.44.0.0/16
+175.106.128.0/17
+175.146.0.0/15
+175.148.0.0/14
+175.152.0.0/14
+175.160.0.0/12
+175.184.128.0/18
+180.77.0.0/16
+180.95.128.0/17
+180.129.128.0/17
+180.130.0.0/16
+180.189.148.0/22
+180.223.0.0/16
+182.54.0.0/17
+182.88.0.0/14
+182.112.0.0/12
+183.92.0.0/14
+183.184.0.0/13
+192.140.208.0/22
+192.140.212.0/22
+202.74.8.0/21
+202.75.208.0/20
+202.89.96.0/22
+202.92.0.0/22
+202.96.0.0/18
+202.96.64.0/21
+202.96.72.0/21
+202.96.80.0/20
+202.97.128.0/18
+202.97.192.0/19
+202.97.224.0/21
+202.97.232.0/21
+202.97.240.0/20
+202.98.0.0/21
+202.98.8.0/21
+202.98.16.0/20
+202.99.0.0/18
+202.99.64.0/19
+202.99.96.0/21
+202.99.104.0/21
+202.99.112.0/20
+202.99.128.0/19
+202.99.160.0/21
+202.99.168.0/21
+202.99.176.0/20
+202.99.192.0/21
+202.99.200.0/21
+202.99.208.0/20
+202.99.224.0/21
+202.99.232.0/21
+202.99.240.0/20
+202.101.128.0/18
+202.102.128.0/21
+202.102.136.0/21
+202.102.144.0/20
+202.102.160.0/19
+202.102.224.0/21
+202.102.232.0/21
+202.102.240.0/20
+202.106.0.0/16
+202.107.0.0/17
+202.108.0.0/16
+202.110.0.0/18
+202.110.64.0/18
+202.110.192.0/18
+202.111.128.0/19
+202.111.160.0/19
+202.115.32.0/19
+202.115.64.0/18
+202.122.128.0/24
+202.127.112.0/20
+202.127.209.0/24
+202.130.224.0/19
+202.160.140.0/22
+202.170.128.0/19
+203.76.240.0/22
+203.93.0.0/22
+203.93.4.0/22
+203.93.8.0/24
+203.93.9.0/24
+203.93.10.0/23
+203.93.12.0/22
+203.93.16.0/20
+203.93.32.0/19
+203.93.64.0/18
+203.93.128.0/21
+203.93.136.0/22
+203.93.140.0/24
+203.93.141.0/24
+203.93.142.0/23
+203.93.144.0/20
+203.93.160.0/19
+203.93.192.0/18
+203.135.160.0/20
+203.166.160.0/19
+203.223.0.0/20
+210.5.128.0/20
+210.12.0.0/18
+210.12.64.0/18
+210.12.128.0/18
+210.12.192.0/18
+210.13.0.0/18
+210.13.64.0/18
+210.13.128.0/17
+210.14.160.0/19
+210.14.192.0/19
+210.14.224.0/19
+210.15.0.0/19
+210.15.32.0/19
+210.15.96.0/19
+210.15.128.0/18
+210.21.0.0/17
+210.21.128.0/17
+210.22.0.0/16
+210.51.0.0/16
+210.52.0.0/18
+210.52.64.0/18
+210.52.128.0/17
+210.53.0.0/17
+210.53.128.0/17
+210.56.192.0/19
+210.72.160.0/19
+210.74.64.0/19
+210.74.96.0/19
+210.74.128.0/19
+210.78.0.0/19
+210.78.160.0/19
+210.78.192.0/18
+210.79.64.0/18
+210.82.0.0/15
+211.90.0.0/15
+211.92.0.0/15
+211.94.0.0/15
+211.96.0.0/15
+211.144.0.0/15
+218.7.0.0/16
+218.8.0.0/15
+218.10.0.0/16
+218.11.0.0/16
+218.12.0.0/16
+218.21.128.0/17
+218.24.0.0/15
+218.26.0.0/16
+218.27.0.0/16
+218.28.0.0/15
+218.56.0.0/14
+218.60.0.0/15
+218.62.0.0/17
+218.67.128.0/17
+218.68.0.0/15
+218.98.0.0/17
+218.104.0.0/17
+218.104.128.0/19
+218.104.160.0/19
+218.104.192.0/21
+218.104.200.0/21
+218.104.208.0/20
+218.104.224.0/19
+218.105.0.0/16
+218.106.0.0/15
+219.154.0.0/15
+219.156.0.0/15
+219.158.0.0/17
+219.158.128.0/17
+219.159.0.0/18
+219.232.0.0/14
+220.152.128.0/17
+220.158.240.0/22
+220.192.0.0/15
+220.194.0.0/15
+220.196.0.0/14
+220.200.0.0/13
+220.231.0.0/18
+220.234.0.0/16
+220.248.0.0/14
+220.252.0.0/16
+221.0.0.0/15
+221.2.0.0/16
+221.3.0.0/17
+221.3.128.0/17
+221.4.0.0/16
+221.5.0.0/17
+221.5.128.0/17
+221.6.0.0/16
+221.7.0.0/19
+221.7.32.0/19
+221.7.64.0/19
+221.7.96.0/19
+221.7.128.0/17
+221.8.0.0/15
+221.10.0.0/16
+221.11.0.0/17
+221.11.128.0/18
+221.11.192.0/19
+221.11.224.0/19
+221.12.0.0/17
+221.12.128.0/18
+221.13.0.0/18
+221.13.64.0/19
+221.13.96.0/19
+221.13.128.0/17
+221.14.0.0/15
+221.137.0.0/16
+221.192.0.0/15
+221.194.0.0/16
+221.195.0.0/16
+221.196.0.0/15
+221.198.0.0/16
+221.199.0.0/19
+221.199.32.0/20
+221.199.48.0/20
+221.199.64.0/18
+221.199.128.0/18
+221.199.192.0/20
+221.199.224.0/19
+221.200.0.0/14
+221.204.0.0/15
+221.206.0.0/16
+221.207.0.0/18
+221.207.64.0/18
+221.207.128.0/17
+221.208.0.0/14
+221.212.0.0/16
+221.213.0.0/16
+221.214.0.0/15
+221.216.0.0/13
+222.128.0.0/14
+222.132.0.0/14
+222.136.0.0/13
+222.160.0.0/15
+222.162.0.0/16
+222.163.0.0/19
+222.163.32.0/19
+222.163.64.0/18
+222.163.128.0/17
+223.27.184.0/22
+223.166.0.0/15
diff --git a/package/lean/luci-app-mwan3helper/root/etc/uci-defaults/mwan3helper b/package/lean/luci-app-mwan3helper/root/etc/uci-defaults/mwan3helper
new file mode 100755
index 0000000000..426cd55ba9
--- /dev/null
+++ b/package/lean/luci-app-mwan3helper/root/etc/uci-defaults/mwan3helper
@@ -0,0 +1,11 @@
+#!/bin/sh
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@mwan3helper[-1]
+	add ucitrack mwan3helper
+	set ucitrack.@mwan3helper[-1].init=mwan3helper
+	commit ucitrack
+EOF
+
+rm -f /tmp/luci*
+exit 0
diff --git a/package/lean/luci-app-n2n_v2/Makefile b/package/lean/luci-app-n2n_v2/Makefile
new file mode 100644
index 0000000000..55eecd40d1
--- /dev/null
+++ b/package/lean/luci-app-n2n_v2/Makefile
@@ -0,0 +1,17 @@
+#
+# Copyright (C) 2008-2014 The LuCI Team <luci@lists.subsignal.org>
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=n2n_v2 VPN Configuration module
+LUCI_DEPENDS:=+n2n_v2
+LUCI_PKGARCH:=all
+PKG_VERSION:=1.0
+PKG_RELEASE:=2
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
diff --git a/package/lean/luci-app-n2n_v2/luasrc/controller/n2n_v2.lua b/package/lean/luci-app-n2n_v2/luasrc/controller/n2n_v2.lua
new file mode 100644
index 0000000000..a1d599886e
--- /dev/null
+++ b/package/lean/luci-app-n2n_v2/luasrc/controller/n2n_v2.lua
@@ -0,0 +1,18 @@
+--[[
+N2N V2 Luci configuration page.Made by 981213
+]]--
+
+module("luci.controller.n2n_v2", package.seeall)
+
+function index()
+	
+	if not nixio.fs.access("/etc/config/n2n_v2") then
+		return
+	end
+	
+	entry({"admin", "vpn"}, firstchild(), "VPN", 45).dependent = false
+
+	local page
+	page = entry({"admin", "vpn", "n2n_v2"}, cbi("n2n_v2"), _("N2N v2 VPN"), 45)
+	page.dependent = true
+end
diff --git a/package/lean/luci-app-n2n_v2/luasrc/model/cbi/n2n_v2.lua b/package/lean/luci-app-n2n_v2/luasrc/model/cbi/n2n_v2.lua
new file mode 100644
index 0000000000..3c84c40ad9
--- /dev/null
+++ b/package/lean/luci-app-n2n_v2/luasrc/model/cbi/n2n_v2.lua
@@ -0,0 +1,59 @@
+--[[
+--N2N VPN(V2) configuration page. Made by 981213
+--
+]]--
+
+local fs = require "nixio.fs"
+
+m = Map("n2n_v2", translate("N2N v2 VPN"),
+        translatef("n2n is a layer-two peer-to-peer virtual private network (VPN) which allows users to exploit features typical of P2P applications at network instead of application level."))
+
+s = m:section(TypedSection, "edge", translate("N2N Edge Settings"))
+s.anonymous = true
+s.addremove = true 
+
+switch = s:option(Flag, "enabled", translate("Enable"))
+switch.rmempty = false
+
+tunname = s:option(Value, "tunname", translate("TUN desvice name"))
+tunname.optional = false
+
+mode = s:option(ListValue, "mode", translate("Interface mode"))
+mode:value("dhcp")
+mode:value("static")
+
+ipaddr = s:option(Value, "ipaddr", translate("Interface IP address"))
+ipaddr.optional = false
+
+netmask = s:option(Value, "netmask", translate("Interface netmask"))
+netmask.optional = false
+
+supernode = s:option(Value, "supernode", translate("Supernode IP address"))
+supernode.optional = false
+
+port = s:option(Value, "port", translate("Supernode Port"))
+port.datatype = "range(0,65535)"
+port.optional = false
+
+community = s:option(Value, "community", translate("N2N Community name"))
+community.optional = false
+
+s:option(Value, "key", translate("Encryption key"))
+
+route = s:option(Flag, "route", translate("Enable packet forwarding"))
+route.rmempty = false
+
+s2 = m:section(TypedSection, "supernode", translate("N2N Supernode Settings"))
+s2.anonymous = true
+s2.addremove = true 
+
+switch = s2:option(Flag, "enabled", translate("Enable"))
+switch.rmempty = false
+
+port = s2:option(Value, "port", translate("Port"))
+port.datatype = "range(0,65535)"
+port.optional = false
+
+return m
+
+
diff --git a/package/lean/luci-app-n2n_v2/po/zh-cn/n2n_v2.po b/package/lean/luci-app-n2n_v2/po/zh-cn/n2n_v2.po
new file mode 100644
index 0000000000..beedc04ae1
--- /dev/null
+++ b/package/lean/luci-app-n2n_v2/po/zh-cn/n2n_v2.po
@@ -0,0 +1,54 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2014-10-01\n"
+"PO-Revision-Date: 2014-10-01\n"
+"Last-Translator: 981213 <gch981213@gmail.com>\n"
+"Language: zh_CN\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+
+msgid "n2n is a layer-two peer-to-peer virtual private network (VPN) which allows users to exploit features typical of P2P applications at network instead of application level."
+msgstr "N2N是一个第二层点对点VPN程序，它可以让用户在网络层而不是应用层使用一些点对点服务。"
+
+msgid "N2N Edge Settings"
+msgstr "N2N Edge节点设置"
+
+msgid "TUN desvice name"
+msgstr "隧道设备名称"
+
+msgid "Enable"
+msgstr "启用"
+
+msgid "Interface mode"
+msgstr "接口模式"
+
+msgid "Interface IP address"
+msgstr "接口IP地址"
+
+msgid "Interface netmask"
+msgstr "接口子网掩码"
+
+msgid "Supernode IP address"
+msgstr "Supernode节点IP地址"
+
+msgid "N2N Community name"
+msgstr "N2N网络组名称"
+
+msgid "Enable packet forwarding"
+msgstr "启用数据包转发"
+
+msgid "N2N Supernode Settings"
+msgstr "N2N Supernode节点设置"
+
+msgid "Port"
+msgstr "端口"
+
+msgid "Supernode Port"
+msgstr "Supernode节点端口"
+
+msgid "Encryption key"
+msgstr "加密密钥"
diff --git a/package/lean/luci-app-n2n_v2/root/etc/uci-defaults/luci-n2n_v2 b/package/lean/luci-app-n2n_v2/root/etc/uci-defaults/luci-n2n_v2
new file mode 100755
index 0000000000..145579d557
--- /dev/null
+++ b/package/lean/luci-app-n2n_v2/root/etc/uci-defaults/luci-n2n_v2
@@ -0,0 +1,11 @@
+#!/bin/sh
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@n2n_v2[-1]
+	add ucitrack n2n_v2
+	set ucitrack.@n2n_v2[-1].init=n2n_v2
+	commit ucitrack
+EOF
+
+rm -f /tmp/luci-indexcache
+exit 0
diff --git a/package/lean/luci-app-nft-qos/Makefile b/package/lean/luci-app-nft-qos/Makefile
new file mode 100644
index 0000000000..1452dac429
--- /dev/null
+++ b/package/lean/luci-app-nft-qos/Makefile
@@ -0,0 +1,17 @@
+#
+# Copyright (C) 2008-2014 The LuCI Team <luci@lists.subsignal.org>
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=Qos over Nftables
+LUCI_DEPENDS:=+nft-qos
+LUCI_PKGARCH:=all
+PKG_VERSION:=1.0
+PKG_RELEASE:=2
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
diff --git a/package/lean/luci-app-nft-qos/luasrc/controller/nft-qos.lua b/package/lean/luci-app-nft-qos/luasrc/controller/nft-qos.lua
new file mode 100644
index 0000000000..637eb11736
--- /dev/null
+++ b/package/lean/luci-app-nft-qos/luasrc/controller/nft-qos.lua
@@ -0,0 +1,55 @@
+-- Copyright 2018 Rosy Song <rosysong@rosinson.com>
+-- Licensed to the public under the Apache License 2.0.
+
+module("luci.controller.nft-qos", package.seeall)
+
+function index()
+	if not nixio.fs.access("/etc/config/nft-qos") then
+		return
+	end
+
+	entry({"admin", "status", "realtime", "rate"},
+		template("nft-qos/rate"), _("Rate"), 5).leaf = true
+	entry({"admin", "status", "realtime", "rate_status"},
+		call("action_rate")).leaf = true
+	entry({"admin", "services", "nft-qos"}, cbi("nft-qos/nft-qos"),
+		_("Qos over Nftables"), 60)
+end
+
+function _action_rate(rv, n)
+	local c = nixio.fs.access("/proc/net/ipv6_route") and
+		io.popen("nft list chain inet nft-qos-monitor " .. n .. " 2>/dev/null") or
+		io.popen("nft list chain ip nft-qos-monitor " .. n .. " 2>/dev/null")
+
+	if c then
+		for l in c:lines() do
+			local _, i, p, b = l:match(
+				'^%s+ip ([^%s]+) ([^%s]+) counter packets (%d+) bytes (%d+)'
+			)
+			if i and p and b then
+				-- handle expression
+				rv[#rv + 1] = {
+					rule = {
+						family = "inet",
+						table = "nft-qos-monitor",
+						chain = n,
+						handle = 0,
+						expr = {
+							{ match = { right = i } },
+							{ counter = { packets = p, bytes = b } }
+						}
+					}
+				}
+			end
+		end
+		c:close()
+	end
+end
+
+function action_rate()
+	luci.http.prepare_content("application/json")
+	local data = { nftables = {} }
+	_action_rate(data.nftables, "upload")
+	_action_rate(data.nftables, "download")
+	luci.http.write_json(data)
+end
diff --git a/package/lean/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua b/package/lean/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua
new file mode 100644
index 0000000000..61a6d76a7d
--- /dev/null
+++ b/package/lean/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua
@@ -0,0 +1,229 @@
+-- Copyright 2018 Rosy Song <rosysong@rosinson.com>
+-- Licensed to the public under the Apache License 2.0.
+
+local uci = require("luci.model.uci").cursor()
+local wa = require("luci.tools.webadmin")
+local fs = require("nixio.fs")
+local ipc = require("luci.ip")
+
+local def_rate_dl = uci:get("nft-qos", "default", "static_rate_dl")
+local def_rate_ul = uci:get("nft-qos", "default", "static_rate_ul")
+local def_unit_dl = uci:get("nft-qos", "default", "static_unit_dl")
+local def_unit_ul = uci:get("nft-qos", "default", "static_unit_ul")
+
+local def_up = uci:get("nft-qos", "default", "dynamic_bw_up")
+local def_down = uci:get("nft-qos", "default", "dynamic_bw_down")
+
+local limit_enable = uci:get("nft-qos", "default", "limit_enable")
+local limit_type = uci:get("nft-qos", "default", "limit_type")
+local enable_priority = uci:get("nft-qos", "default", "priority_enable")
+
+local has_ipv6 = fs.access("/proc/net/ipv6_route")
+
+m = Map("nft-qos", translate("Qos over Nftables"))
+
+--
+-- Taboptions
+--
+s = m:section(TypedSection, "default", translate("NFT-QoS Settings"))
+s.addremove = false
+s.anonymous = true
+
+s:tab("limit", "Limit Rate")
+s:tab("priority", "Traffic Priority")
+
+--
+-- Static
+--
+o = s:taboption("limit", Flag, "limit_enable", translate("Limit Enable"), translate("Enable Limit Rate Feature"))
+o.default = limit_enable or o.enabled
+o.rmempty = false
+
+o = s:taboption("limit", ListValue, "limit_type", translate("Limit Type"), translate("Type of Limit Rate"))
+o.default = limit_static or "static"
+o:depends("limit_enable","1")
+o:value("static", "Static")
+o:value("dynamic", "Dynamic")
+
+o = s:taboption("limit", Value, "static_rate_dl", translate("Default Download Rate"), translate("Default value for download rate"))
+o.datatype = "uinteger"
+o.default = def_rate_dl or '50'
+o:depends("limit_type","static")
+
+o = s:taboption("limit", ListValue, "static_unit_dl", translate("Default Download Unit"), translate("Default unit for download rate"))
+o.default = def_unit_dl or "kbytes"
+o:depends("limit_type","static")
+o:value("bytes", "Bytes/s")
+o:value("kbytes", "KBytes/s")
+o:value("mbytes", "MBytes/s")
+
+o = s:taboption("limit", Value, "static_rate_ul", translate("Default Upload Rate"), translate("Default value for upload rate"))
+o.datatype = "uinteger"
+o.default = def_rate_ul or '50'
+o:depends("limit_type","static")
+
+o = s:taboption("limit", ListValue, "static_unit_ul", translate("Default Upload Unit"), translate("Default unit for upload rate"))
+o.default = def_unit_ul or "kbytes"
+o:depends("limit_type","static")
+o:value("bytes", "Bytes/s")
+o:value("kbytes", "KBytes/s")
+o:value("mbytes", "MBytes/s")
+
+--
+-- Dynamic
+--
+o = s:taboption("limit", Value, "dynamic_bw_down", translate("Download Bandwidth (Mbps)"), translate("Default value for download bandwidth"))
+o.default = def_up or '100'
+o.datatype = "uinteger"
+o:depends("limit_type","dynamic")
+
+o = s:taboption("limit", Value, "dynamic_bw_up", translate("Upload Bandwidth (Mbps)"), translate("Default value for upload bandwidth"))
+o.default = def_down or '100'
+o.datatype = "uinteger"
+o:depends("limit_type","dynamic")
+
+o = s:taboption("limit", Value, "dynamic_cidr", translate("Target Network (IPv4/MASK)"), translate("Network to be apply, e.g. 192.168.1.0/24, 10.2.0.0/16, etc"))
+o.datatype = "cidr4"
+ipc.routes({ family = 4, type = 1 }, function(rt) o.default = rt.dest end)
+o:depends("limit_type","dynamic")
+
+if has_ipv6 then
+	o = s:taboption("limit", Value, "dynamic_cidr6", translate("Target Network6 (IPv6/MASK)"), translate("Network to be apply, e.g. AAAA::BBBB/64, CCCC::1/128, etc"))
+	o.datatype = "cidr6"
+	o:depends("limit_type","dynamic")
+end
+
+o = s:taboption("limit", DynamicList, "limit_whitelist", translate("White List for Limit Rate"))
+o.datatype = "ipaddr"
+o:depends("limit_enable","1")
+
+--
+-- Priority
+--
+o = s:taboption("priority", Flag, "priority_enable", translate("Enable Traffic Priority"), translate("Enable this feature"))
+o.default = enable_priority or o.enabled
+o.rmempty = false
+
+o = s:taboption("priority", ListValue, "priority_netdev", translate("Default Network Interface"), translate("Network Interface for Traffic Shaping, e.g. br-lan, eth0.1, eth0, etc"))
+o:depends("priority_enable", "1")
+wa.cbi_add_networks(o)
+
+--
+-- Static Limit Rate - Download Rate
+--
+if limit_enable == "1" and limit_type == "static" then
+
+x = m:section(TypedSection, "download", translate("Static QoS-Download Rate"))
+x.anonymous = true
+x.addremove = true
+x.template = "cbi/tblsection"
+
+o = x:option(Value, "hostname", translate("Hostname"))
+o.datatype = "hostname"
+o.default = 'undefined'
+
+if has_ipv6 then
+	o = x:option(Value, "ipaddr", translate("IP Address(V4 / V6)"))
+else
+	o = x:option(Value, "ipaddr", translate("IP Address(V4 Only)"))
+end
+o.datatype = "ipaddr"
+if nixio.fs.access("/tmp/dhcp.leases") or nixio.fs.access("/var/dhcp6.leases") then
+	o.titleref = luci.dispatcher.build_url("admin", "status", "overview")
+end
+
+o = x:option(Value, "macaddr", translate("MAC (optional)"))
+o.rmempty = true
+o.datatype = "macaddr"
+
+o = x:option(Value, "rate", translate("Rate"))
+o.default = def_rate_dl or '50'
+o.size = 4
+o.datatype = "uinteger"
+
+o = x:option(ListValue, "unit", translate("Unit"))
+o.default = def_unit_dl or "kbytes"
+o:value("bytes", "Bytes/s")
+o:value("kbytes", "KBytes/s")
+o:value("mbytes", "MBytes/s")
+
+--
+-- Static Limit Rate - Upload Rate
+--
+y = m:section(TypedSection, "upload", translate("Static QoS-Upload Rate"))
+y.anonymous = true
+y.addremove = true
+y.template = "cbi/tblsection"
+
+o = y:option(Value, "hostname", translate("Hostname"))
+o.datatype = "hostname"
+o.default = 'undefined'
+
+if has_ipv6 then
+	o = y:option(Value, "ipaddr", translate("IP Address(V4 / V6)"))
+else
+	o = y:option(Value, "ipaddr", translate("IP Address(V4 Only)"))
+end
+o.datatype = "ipaddr"
+if nixio.fs.access("/tmp/dhcp.leases") or nixio.fs.access("/var/dhcp6.leases") then
+	o.titleref = luci.dispatcher.build_url("admin", "status", "overview")
+end
+
+o = y:option(Value, "macaddr", translate("MAC (optional)"))
+o.rmempty = true
+o.datatype = "macaddr"
+
+o = y:option(Value, "rate", translate("Rate"))
+o.default = def_rate_ul or '50'
+o.size = 4
+o.datatype = "uinteger"
+
+o = y:option(ListValue, "unit", translate("Unit"))
+o.default = def_unit_ul or "kbytes"
+o:value("bytes", "Bytes/s")
+o:value("kbytes", "KBytes/s")
+o:value("mbytes", "MBytes/s")
+
+end
+
+--
+-- Traffic Priority Settings
+--
+if enable_priority == "1" then
+
+s = m:section(TypedSection, "priority", translate("Traffic Priority Settings"))
+s.anonymous = true
+s.addremove = true
+s.template = "cbi/tblsection"
+
+o = s:option(ListValue, "protocol", translate("Protocol"))
+o.default = "tcp"
+o:value("tcp", "TCP")
+o:value("udp", "UDP")
+o:value("udplite", "UDP-Lite")
+o:value("sctp", "SCTP")
+o:value("dccp", "DCCP")
+
+o = s:option(ListValue, "priority", translate("Priority"))
+o.default = "1"
+o:value("-400", "1")
+o:value("-300", "2")
+o:value("-225", "3")
+o:value("-200", "4")
+o:value("-150", "5")
+o:value("-100", "6")
+o:value("0", "7")
+o:value("50", "8")
+o:value("100", "9")
+o:value("225", "10")
+o:value("300", "11")
+
+o = s:option(Value, "service", translate("Service"), translate("e.g. https, 23, (separator is comma)"))
+o.default = '?'
+
+o = s:option(Value, "comment", translate("Comment"))
+o.default = '?'
+
+end
+
+return m
diff --git a/package/lean/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm b/package/lean/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm
new file mode 100644
index 0000000000..5f9cb57d20
--- /dev/null
+++ b/package/lean/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm
@@ -0,0 +1,167 @@
+<%#
+ Copyright 2018 Rosy Song <rosysong@rosinson.com>
+ Licensed to the public under the Apache License 2.0.
+-%>
+
+<%+header%>
+
+<script type="text/javascript">//<![CDATA[
+	var bwxhr = new XHR();
+
+	var RC = { };
+	var em = 0;
+	var ec = 1;
+
+	var rate_table_dl;
+	var rate_table_ul;
+
+	function init_bytes(rl, ra) {
+		var bytes_pre;
+		var obj = { };
+		obj.chain = rl.chain;
+		obj.ipaddr = rl.expr[em].match.right;
+		obj.bytes = rl.expr[ec].counter.bytes;
+		obj.packets = rl.expr[ec].counter.packets;
+		obj.rate = 0;
+
+		if (RC[obj.chain] && RC[obj.chain][obj.ipaddr])
+				bytes_pre = RC[obj.chain][obj.ipaddr];
+		else
+				bytes_pre = 0;
+
+		obj.rate = (bytes_pre > 0) ? (obj.bytes - bytes_pre) / 3: 0;
+
+		if (!RC[obj.chain])
+				RC[obj.chain] = { };
+		RC[obj.chain][obj.ipaddr] = obj.bytes;
+
+		if (!ra[obj.chain])
+				ra[obj.chain] = [ ];
+		ra[obj.chain].push(obj);
+	} /* function init_bytes(rl, ra) */
+
+	function bytes_label(bytes) {
+		var uby = '<%:kB%>';
+		var kby = (bytes / 1024);
+
+		if (kby > 1024) {
+			uby = '<%:MB%>';
+			kby = (kby / 1024);
+		}
+
+		return String.format("%f %s", kby.toFixed(2), uby);
+	}
+
+	function print_table(tbl, rs, ra) {
+		ra.sort(function(a, b) { return b.rate - a.rate });
+		for (var i = 0; i < ra.length; i++) {
+			rs.push([
+				ra[i].ipaddr,
+				bytes_label(ra[i].rate) + '/s',
+				bytes_label(ra[i].bytes),
+				'%s Pkts.'.format(ra[i].packets),
+			]);
+		}
+		cbi_update_table(tbl, rs, '<em><%:No information available%></em>');
+	} /* function print_table(tbl, ra) */
+
+	/* wait for SVG */
+	window.setTimeout(
+		function() {
+			if (!RC)
+			{
+				window.setTimeout(arguments.callee, 1000);
+			}
+			else
+			{
+				rate_table_dl     = document.getElementById('rate_table_dl');
+				rate_table_ul     = document.getElementById('rate_table_ul');
+
+				/* render datasets, start update interval */
+				XHR.poll(3, '<%=build_url("admin/status/realtime/rate_status")%>', null,
+					function(x, json)
+					{
+						var RA = {};
+						var rows_dl = [];
+						var rows_ul = [];
+
+						var rules = json.nftables;
+						for (var i = 0; i < rules.length; i++)
+						{
+							if (!rules[i].rule)
+								continue;
+							if (rules[i].rule.table != 'nft-qos-monitor')
+								continue;
+
+							var rl = rules[i].rule;
+							switch (rl.chain)
+							{
+								case 'download':
+								case 'upload': init_bytes(rl, RA); break;
+							}
+						} /* for (var i = 0; i < rules.length; i++) */
+
+						/* display the result */
+						if (RA.download) {
+							while (rate_table_dl.firstElementChild !== rate_table_dl.lastElementChild)
+								rate_table_dl.removeChild(rate_table_dl.lastElementChild);
+							print_table(rate_table_dl, rows_dl, RA.download);
+						}
+						if (RA.upload) {
+							while (rate_table_ul.firstElementChild !== rate_table_ul.lastElementChild)
+								rate_table_ul.removeChild(rate_table_ul.lastElementChild);
+							print_table(rate_table_ul, rows_ul, RA.upload);
+						}
+
+					} /* function(x, json) */
+				); /* XHR.poll() */
+
+				XHR.run();
+			}
+		}, 1000
+	);
+//]]></script>
+
+<h2 name="content"><%:Realtime Rate%></h2>
+
+<div class="cbi-map-descr"><%:This page gives an overview over currently download/upload rate.%></div>
+
+<fieldset class="cbi-section" id="cbi-table-table">
+	<legend><%:Realtime Download Rate%></legend>
+	<div class="cbi-section-node">
+		<div class="table" id="rate_table_dl">
+			<div class="tr table-titles">
+				<div class="th col-2 hide-xs"><%:IP Address%></div>
+				<div class="th col-2"><%:Download Rate%></div>
+				<div class="th col-7"><%:Bytes Total%></div>
+				<div class="th col-7"><%:Packets Total%></div>
+			</div>
+			<div class="tr placeholder">
+				<div class="td">
+					<em><%:Collecting data...%></em>
+				</div>
+			</div>
+		</div>
+	</div>
+</fieldset>
+
+<fieldset class="cbi-section" id="cbi-table-table">
+	<legend><%:Realtime Upload Rate%></legend>
+	<div class="cbi-section-node">
+		<div class="table" id="rate_table_ul">
+			<div class="tr table-titles">
+				<div class="th col-2 hide-xs"><%:IP Address%></div>
+				<div class="th col-2"><%:Upload Rate%></div>
+				<div class="th col-7"><%:Bytes Total%></div>
+				<div class="th col-7"><%:Packets Total%></div>
+			</div>
+			<div class="tr placeholder">
+				<div class="td">
+					<em><%:Collecting data...%></em>
+				</div>
+			</div>
+		</div>
+	</div>
+</fieldset>
+
+<%+footer%>
diff --git a/package/lean/luci-app-nft-qos/po/es/nft-qos.po b/package/lean/luci-app-nft-qos/po/es/nft-qos.po
new file mode 100644
index 0000000000..2d729e001e
--- /dev/null
+++ b/package/lean/luci-app-nft-qos/po/es/nft-qos.po
@@ -0,0 +1,241 @@
+msgid ""
+msgstr ""
+"Content-Type: text/plain; charset=UTF-8\n"
+"Project-Id-Version: \n"
+"POT-Creation-Date: \n"
+"PO-Revision-Date: \n"
+"Language-Team: \n"
+"MIME-Version: 1.0\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: Poedit 2.2.1\n"
+"Last-Translator: \n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"Language: es\n"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:136
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:155
+msgid "Bytes Total"
+msgstr "Total de bytes"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:141
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:160
+msgid "Collecting data..."
+msgstr "Recolectando datos..."
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:224
+msgid "Comment"
+msgstr "Comentario"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:48
+msgid "Default Download Rate"
+msgstr "Velocidad de descarga predeterminada"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:53
+msgid "Default Download Unit"
+msgstr "Unidad de descarga predeterminada"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:107
+msgid "Default Network Interface"
+msgstr "Interfaz de red predeterminada"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:60
+msgid "Default Upload Rate"
+msgstr "Velocidad de carga predeterminada"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:65
+msgid "Default Upload Unit"
+msgstr "Unidad de carga predeterminada"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:53
+msgid "Default unit for download rate"
+msgstr "Unidad predeterminada para la velocidad de descarga"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:65
+msgid "Default unit for upload rate"
+msgstr "Unidad predeterminada para la velocidad de carga"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:75
+msgid "Default value for download bandwidth"
+msgstr "Valor predeterminado para el ancho de banda de descarga"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:48
+msgid "Default value for download rate"
+msgstr "Valor predeterminado para la velocidad de descarga"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:80
+msgid "Default value for upload bandwidth"
+msgstr "Valor predeterminado para el ancho de banda de carga"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:60
+msgid "Default value for upload rate"
+msgstr "Valor predeterminado para la velocidad de carga"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:75
+msgid "Download Bandwidth (Mbps)"
+msgstr "Ancho de banda de descarga (Mbps)"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:135
+msgid "Download Rate"
+msgstr "Velocidad de descarga"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:38
+msgid "Enable Limit Rate Feature"
+msgstr "Habilitar función de límite de velocidad"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:103
+msgid "Enable Traffic Priority"
+msgstr "Habilitar prioridad de tráfico"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:103
+msgid "Enable this feature"
+msgstr "Habilitar esta característica"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:121
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:158
+msgid "Hostname"
+msgstr "Nombre de host"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:134
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:153
+msgid "IP Address"
+msgstr "Dirección IP"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:126
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:163
+msgid "IP Address(V4 / V6)"
+msgstr "Dirección IP (v4/v6)"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:128
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:165
+msgid "IP Address(V4 Only)"
+msgstr "Dirección IP (sólo v4)"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:38
+msgid "Limit Enable"
+msgstr "Habilitar límite"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:42
+msgid "Limit Type"
+msgstr "Tipo de límite"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:135
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:172
+msgid "MAC (optional)"
+msgstr "MAC (opcional)"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:48
+msgid "MB"
+msgstr "MB"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:28
+msgid "NFT-QoS Settings"
+msgstr "Configuración de NFT-QoS"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:107
+msgid "Network Interface for Traffic Shaping, e.g. br-lan, eth0.1, eth0, etc"
+msgstr "Interfaz de red para configuración de tráfico, por ejemplo, br-lan, eth0.1, eth0, etc."
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:85
+msgid "Network to be apply, e.g. 192.168.1.0/24, 10.2.0.0/16, etc"
+msgstr "Red a aplicar, por ejemplo. 192.168.1.0/24, 10.2.0.0/16, etc."
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:91
+msgid "Network to be apply, e.g. AAAA::BBBB/64, CCCC::1/128, etc"
+msgstr "Red a aplicar, por ejemplo. AAAA::BBBB/64, CCCC::1/128, etc."
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:65
+msgid "No information available"
+msgstr "No hay información disponible"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:137
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:156
+msgid "Packets Total"
+msgstr "Paquetes totales"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:207
+msgid "Priority"
+msgstr "Prioridad"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:199
+msgid "Protocol"
+msgstr "Protocolo"
+
+#: applications/luci-app-nft-qos/luasrc/controller/nft-qos.lua:16
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:23
+msgid "Qos over Nftables"
+msgstr "Qos sobre Nftables"
+
+#: applications/luci-app-nft-qos/luasrc/controller/nft-qos.lua:12
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:139
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:176
+msgid "Rate"
+msgstr "Velocidad"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:130
+msgid "Realtime Download Rate"
+msgstr "Velocidad de descarga en tiempo real"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:125
+msgid "Realtime Rate"
+msgstr "Velocidad en tiempo real"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:149
+msgid "Realtime Upload Rate"
+msgstr "Velocidad de carga en tiempo real"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:221
+msgid "Service"
+msgstr "Servicio"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:116
+msgid "Static QoS-Download Rate"
+msgstr "Velocidad de descarga de QoS estática"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:153
+msgid "Static QoS-Upload Rate"
+msgstr "Velocidad de carga de QoS estática"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:85
+msgid "Target Network (IPv4/MASK)"
+msgstr "Red de destino (IPv4 / MASK)"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:91
+msgid "Target Network6 (IPv6/MASK)"
+msgstr "Red de destino 6 (IPv6/MÁSCARA)"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:127
+msgid "This page gives an overview over currently download/upload rate."
+msgstr "Esta página ofrece una vista general sobre la velocidad de descarga/carga actual."
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:194
+msgid "Traffic Priority Settings"
+msgstr "Ajustes de prioridad de tráfico"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:42
+msgid "Type of Limit Rate"
+msgstr "Tipo de límite de velocidad"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:144
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:181
+msgid "Unit"
+msgstr "Unidad"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:80
+msgid "Upload Bandwidth (Mbps)"
+msgstr "Ancho de banda de carga (Mbps)"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:154
+msgid "Upload Rate"
+msgstr "Velocidad de carga"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:96
+msgid "White List for Limit Rate"
+msgstr "Lista blanca para el límite de velocidad"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:221
+msgid "e.g. https, 23, (separator is comma)"
+msgstr "p.ej. https, 23, (el separador es una coma)"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:44
+msgid "kB"
+msgstr "kB"
diff --git a/package/lean/luci-app-nft-qos/po/templates/nft-qos.pot b/package/lean/luci-app-nft-qos/po/templates/nft-qos.pot
new file mode 100755
index 0000000000..8fecfa073a
--- /dev/null
+++ b/package/lean/luci-app-nft-qos/po/templates/nft-qos.pot
@@ -0,0 +1,230 @@
+msgid ""
+msgstr "Content-Type: text/plain; charset=UTF-8"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:136
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:155
+msgid "Bytes Total"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:141
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:160
+msgid "Collecting data..."
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:224
+msgid "Comment"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:48
+msgid "Default Download Rate"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:53
+msgid "Default Download Unit"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:107
+msgid "Default Network Interface"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:60
+msgid "Default Upload Rate"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:65
+msgid "Default Upload Unit"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:53
+msgid "Default unit for download rate"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:65
+msgid "Default unit for upload rate"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:75
+msgid "Default value for download bandwidth"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:48
+msgid "Default value for download rate"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:80
+msgid "Default value for upload bandwidth"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:60
+msgid "Default value for upload rate"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:75
+msgid "Download Bandwidth (Mbps)"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:135
+msgid "Download Rate"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:38
+msgid "Enable Limit Rate Feature"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:103
+msgid "Enable Traffic Priority"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:103
+msgid "Enable this feature"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:121
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:158
+msgid "Hostname"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:134
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:153
+msgid "IP Address"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:126
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:163
+msgid "IP Address(V4 / V6)"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:128
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:165
+msgid "IP Address(V4 Only)"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:38
+msgid "Limit Enable"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:42
+msgid "Limit Type"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:135
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:172
+msgid "MAC (optional)"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:48
+msgid "MB"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:28
+msgid "NFT-QoS Settings"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:107
+msgid "Network Interface for Traffic Shaping, e.g. br-lan, eth0.1, eth0, etc"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:85
+msgid "Network to be apply, e.g. 192.168.1.0/24, 10.2.0.0/16, etc"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:91
+msgid "Network to be apply, e.g. AAAA::BBBB/64, CCCC::1/128, etc"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:65
+msgid "No information available"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:137
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:156
+msgid "Packets Total"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:207
+msgid "Priority"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:199
+msgid "Protocol"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/controller/nft-qos.lua:16
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:23
+msgid "Qos over Nftables"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/controller/nft-qos.lua:12
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:139
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:176
+msgid "Rate"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:130
+msgid "Realtime Download Rate"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:125
+msgid "Realtime Rate"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:149
+msgid "Realtime Upload Rate"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:221
+msgid "Service"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:116
+msgid "Static QoS-Download Rate"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:153
+msgid "Static QoS-Upload Rate"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:85
+msgid "Target Network (IPv4/MASK)"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:91
+msgid "Target Network6 (IPv6/MASK)"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:127
+msgid "This page gives an overview over currently download/upload rate."
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:194
+msgid "Traffic Priority Settings"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:42
+msgid "Type of Limit Rate"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:144
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:181
+msgid "Unit"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:80
+msgid "Upload Bandwidth (Mbps)"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:154
+msgid "Upload Rate"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:96
+msgid "White List for Limit Rate"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:221
+msgid "e.g. https, 23, (separator is comma)"
+msgstr ""
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:44
+msgid "kB"
+msgstr ""
diff --git a/package/lean/luci-app-nft-qos/po/zh-cn/nft-qos.po b/package/lean/luci-app-nft-qos/po/zh-cn/nft-qos.po
new file mode 100644
index 0000000000..73ce11f5d0
--- /dev/null
+++ b/package/lean/luci-app-nft-qos/po/zh-cn/nft-qos.po
@@ -0,0 +1,244 @@
+#
+# Yangfl <mmyangfl@gmail.com>, 2019.
+#
+msgid ""
+msgstr ""
+"Content-Type: text/plain; charset=UTF-8\n"
+"Project-Id-Version: \n"
+"POT-Creation-Date: \n"
+"PO-Revision-Date: 2019-01-03 22:28+0800\n"
+"Language-Team: <debian-l10n-chinese@lists.debian.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: Gtranslator 3.30.1\n"
+"Last-Translator: Yangfl <mmyangfl@gmail.com>\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+"Language: zh_CN\n"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:136
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:155
+msgid "Bytes Total"
+msgstr "字节总数"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:141
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:160
+msgid "Collecting data..."
+msgstr "正在收集数据…"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:224
+msgid "Comment"
+msgstr "注释"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:48
+msgid "Default Download Rate"
+msgstr "默认下载速率"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:53
+msgid "Default Download Unit"
+msgstr "默认下载速率单位"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:107
+msgid "Default Network Interface"
+msgstr "默认网络接口"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:60
+msgid "Default Upload Rate"
+msgstr "默认上传速率"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:65
+msgid "Default Upload Unit"
+msgstr "默认上传速率单位"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:53
+msgid "Default unit for download rate"
+msgstr "默认的下载速率单位"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:65
+msgid "Default unit for upload rate"
+msgstr "默认的上传速率单位"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:75
+msgid "Default value for download bandwidth"
+msgstr "下载带宽的默认值"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:48
+msgid "Default value for download rate"
+msgstr "下载速率的默认值"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:80
+msgid "Default value for upload bandwidth"
+msgstr "上传带宽的默认值"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:60
+msgid "Default value for upload rate"
+msgstr "上传速率的默认值"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:75
+msgid "Download Bandwidth (Mbps)"
+msgstr "下载带宽（Mbps）"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:135
+msgid "Download Rate"
+msgstr "下载速率"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:38
+msgid "Enable Limit Rate Feature"
+msgstr "开启速率限制功能"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:103
+msgid "Enable Traffic Priority"
+msgstr "开启流量优先级"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:103
+msgid "Enable this feature"
+msgstr "开启这个功能"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:121
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:158
+msgid "Hostname"
+msgstr "主机名"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:134
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:153
+msgid "IP Address"
+msgstr "IP 地址"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:126
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:163
+msgid "IP Address(V4 / V6)"
+msgstr "IP 地址（V4 / V6）"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:128
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:165
+msgid "IP Address(V4 Only)"
+msgstr "IP 地址（仅 V4）"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:38
+msgid "Limit Enable"
+msgstr "限速开启"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:42
+msgid "Limit Type"
+msgstr "限速类型"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:135
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:172
+msgid "MAC (optional)"
+msgstr "物理地址（可选）"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:48
+msgid "MB"
+msgstr "MB"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:28
+msgid "NFT-QoS Settings"
+msgstr "NFT-QoS 设置"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:107
+msgid "Network Interface for Traffic Shaping, e.g. br-lan, eth0.1, eth0, etc"
+msgstr "流量整形的目标网络接口，例如br-lan、eth0.1、eth0等"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:85
+msgid "Network to be apply, e.g. 192.168.1.0/24, 10.2.0.0/16, etc"
+msgstr "将要应用规则的网络，例如192.168.1.0/24、10.2.0.0/16等"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:91
+msgid "Network to be apply, e.g. AAAA::BBBB/64, CCCC::1/128, etc"
+msgstr "将要应用规则的网络，例如AAAA::BBBB/64、CCCC::1/128等"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:65
+msgid "No information available"
+msgstr "没有更多的信息"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:137
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:156
+msgid "Packets Total"
+msgstr "数据包总数"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:207
+msgid "Priority"
+msgstr "优先级"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:199
+msgid "Protocol"
+msgstr "协议"
+
+#: applications/luci-app-nft-qos/luasrc/controller/nft-qos.lua:16
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:23
+msgid "Qos over Nftables"
+msgstr "QoS Nftables 版"
+
+#: applications/luci-app-nft-qos/luasrc/controller/nft-qos.lua:12
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:139
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:176
+msgid "Rate"
+msgstr "速率"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:130
+msgid "Realtime Download Rate"
+msgstr "实时下载速率"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:125
+msgid "Realtime Rate"
+msgstr "实时速率显示"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:149
+msgid "Realtime Upload Rate"
+msgstr "实时上传速率"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:221
+msgid "Service"
+msgstr "服务"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:116
+msgid "Static QoS-Download Rate"
+msgstr "静态 QoS-下载速率"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:153
+msgid "Static QoS-Upload Rate"
+msgstr "静态 QoS-上传速率"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:85
+msgid "Target Network (IPv4/MASK)"
+msgstr "目标网络（IPv4 地址/掩码）"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:91
+msgid "Target Network6 (IPv6/MASK)"
+msgstr "目标网络 v6（IPv6 地址/掩码）"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:127
+msgid "This page gives an overview over currently download/upload rate."
+msgstr "该页面提供了当前上传和下载速率的一个总览。"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:194
+msgid "Traffic Priority Settings"
+msgstr "流量优先级设置"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:42
+msgid "Type of Limit Rate"
+msgstr "限速的类型"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:144
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:181
+msgid "Unit"
+msgstr "单位"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:80
+msgid "Upload Bandwidth (Mbps)"
+msgstr "上传带宽（Mbps）"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:154
+msgid "Upload Rate"
+msgstr "上传速率"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:96
+msgid "White List for Limit Rate"
+msgstr "限速白名单"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:221
+msgid "e.g. https, 23, (separator is comma)"
+msgstr "例如https, 23（用逗号分隔）"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:44
+msgid "kB"
+msgstr "kB"
diff --git a/package/lean/luci-app-nft-qos/po/zh-tw/nft-qos.po b/package/lean/luci-app-nft-qos/po/zh-tw/nft-qos.po
new file mode 100644
index 0000000000..5be9d8abf6
--- /dev/null
+++ b/package/lean/luci-app-nft-qos/po/zh-tw/nft-qos.po
@@ -0,0 +1,244 @@
+#
+# Yangfl <mmyangfl@gmail.com>, 2019.
+#
+msgid ""
+msgstr ""
+"Content-Type: text/plain; charset=UTF-8\n"
+"Project-Id-Version: \n"
+"POT-Creation-Date: \n"
+"PO-Revision-Date: 2019-01-03 22:28+0800\n"
+"Language-Team: <debian-l10n-chinese@lists.debian.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: Gtranslator 3.30.1\n"
+"Last-Translator: Yangfl <mmyangfl@gmail.com>\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+"Language: zh_TW\n"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:136
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:155
+msgid "Bytes Total"
+msgstr "位元組總數"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:141
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:160
+msgid "Collecting data..."
+msgstr "正在收集資料…"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:224
+msgid "Comment"
+msgstr "註釋"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:48
+msgid "Default Download Rate"
+msgstr "預設下載速率"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:53
+msgid "Default Download Unit"
+msgstr "預設下載速率單位"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:107
+msgid "Default Network Interface"
+msgstr "預設網路介面"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:60
+msgid "Default Upload Rate"
+msgstr "預設上傳速率"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:65
+msgid "Default Upload Unit"
+msgstr "預設上傳速率單位"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:53
+msgid "Default unit for download rate"
+msgstr "預設的下載速率單位"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:65
+msgid "Default unit for upload rate"
+msgstr "預設的上傳速率單位"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:75
+msgid "Default value for download bandwidth"
+msgstr "下載頻寬的預設值"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:48
+msgid "Default value for download rate"
+msgstr "下載速率的預設值"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:80
+msgid "Default value for upload bandwidth"
+msgstr "上傳頻寬的預設值"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:60
+msgid "Default value for upload rate"
+msgstr "上傳速率的預設值"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:75
+msgid "Download Bandwidth (Mbps)"
+msgstr "下載頻寬（Mbps）"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:135
+msgid "Download Rate"
+msgstr "下載速率"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:38
+msgid "Enable Limit Rate Feature"
+msgstr "開啟速率限制功能"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:103
+msgid "Enable Traffic Priority"
+msgstr "開啟流量優先順序"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:103
+msgid "Enable this feature"
+msgstr "開啟這個功能"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:121
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:158
+msgid "Hostname"
+msgstr "主機名"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:134
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:153
+msgid "IP Address"
+msgstr "IP 位址"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:126
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:163
+msgid "IP Address(V4 / V6)"
+msgstr "IP 位址（V4 / V6）"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:128
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:165
+msgid "IP Address(V4 Only)"
+msgstr "IP 位址（僅 V4）"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:38
+msgid "Limit Enable"
+msgstr "限速開啟"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:42
+msgid "Limit Type"
+msgstr "限速型別"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:135
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:172
+msgid "MAC (optional)"
+msgstr "實體位址（可選）"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:48
+msgid "MB"
+msgstr "MB"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:28
+msgid "NFT-QoS Settings"
+msgstr "NFT-QoS 設定"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:107
+msgid "Network Interface for Traffic Shaping, e.g. br-lan, eth0.1, eth0, etc"
+msgstr "流量整形的目標網路介面，例如br-lan、eth0.1、eth0等"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:85
+msgid "Network to be apply, e.g. 192.168.1.0/24, 10.2.0.0/16, etc"
+msgstr "將要應用規則的網路，例如192.168.1.0/24、10.2.0.0/16等"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:91
+msgid "Network to be apply, e.g. AAAA::BBBB/64, CCCC::1/128, etc"
+msgstr "將要應用規則的網路，例如AAAA::BBBB/64、CCCC::1/128等"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:65
+msgid "No information available"
+msgstr "沒有更多的資訊"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:137
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:156
+msgid "Packets Total"
+msgstr "資料包總數"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:207
+msgid "Priority"
+msgstr "優先順序"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:199
+msgid "Protocol"
+msgstr "協議"
+
+#: applications/luci-app-nft-qos/luasrc/controller/nft-qos.lua:16
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:23
+msgid "Qos over Nftables"
+msgstr "QoS Nftables 版"
+
+#: applications/luci-app-nft-qos/luasrc/controller/nft-qos.lua:12
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:139
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:176
+msgid "Rate"
+msgstr "速率"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:130
+msgid "Realtime Download Rate"
+msgstr "實時下載速率"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:125
+msgid "Realtime Rate"
+msgstr "實時速率顯示"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:149
+msgid "Realtime Upload Rate"
+msgstr "實時上傳速率"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:221
+msgid "Service"
+msgstr "服務"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:116
+msgid "Static QoS-Download Rate"
+msgstr "靜態 QoS-下載速率"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:153
+msgid "Static QoS-Upload Rate"
+msgstr "靜態 QoS-上傳速率"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:85
+msgid "Target Network (IPv4/MASK)"
+msgstr "目標網路（IPv4 位址/掩碼）"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:91
+msgid "Target Network6 (IPv6/MASK)"
+msgstr "目標網路 v6（IPv6 位址/掩碼）"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:127
+msgid "This page gives an overview over currently download/upload rate."
+msgstr "該頁面提供了當前上傳和下載速率的一個總覽。"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:194
+msgid "Traffic Priority Settings"
+msgstr "流量優先順序設定"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:42
+msgid "Type of Limit Rate"
+msgstr "限速的型別"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:144
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:181
+msgid "Unit"
+msgstr "單位"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:80
+msgid "Upload Bandwidth (Mbps)"
+msgstr "上傳頻寬（Mbps）"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:154
+msgid "Upload Rate"
+msgstr "上傳速率"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:96
+msgid "White List for Limit Rate"
+msgstr "限速白名單"
+
+#: applications/luci-app-nft-qos/luasrc/model/cbi/nft-qos/nft-qos.lua:221
+msgid "e.g. https, 23, (separator is comma)"
+msgstr "例如https, 23（用逗號分隔）"
+
+#: applications/luci-app-nft-qos/luasrc/view/nft-qos/rate.htm:44
+msgid "kB"
+msgstr "kB"
diff --git a/package/lean/luci-app-nps/Makefile b/package/lean/luci-app-nps/Makefile
new file mode 100644
index 0000000000..11e25ed058
--- /dev/null
+++ b/package/lean/luci-app-nps/Makefile
@@ -0,0 +1,19 @@
+#
+# Copyright (C) 2008-2014 The LuCI Team <luci@lists.subsignal.org>
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI for Nps
+LUCI_DEPENDS:=+wget +npc
+LUCI_PKGARCH:=all
+PKG_VERSION:=1.1
+PKG_RELEASE:=2
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
+
diff --git a/package/lean/luci-app-nps/luasrc/controller/nps.lua b/package/lean/luci-app-nps/luasrc/controller/nps.lua
new file mode 100755
index 0000000000..04fb7ced23
--- /dev/null
+++ b/package/lean/luci-app-nps/luasrc/controller/nps.lua
@@ -0,0 +1,17 @@
+module("luci.controller.nps",package.seeall)
+function index()
+if not nixio.fs.access("/etc/config/nps")then
+return
+end
+local e
+e=entry({"admin","services","nps"},cbi("nps"),_("Nps Setting"),100)
+e.i18n="nps"
+e.dependent=true
+entry({"admin","services","nps","status"},call("status")).leaf=true
+end
+function status()
+local e={}
+e.running=luci.sys.call("pgrep npc > /dev/null")==0
+luci.http.prepare_content("application/json")
+luci.http.write_json(e)
+end
diff --git a/package/lean/luci-app-nps/luasrc/i18n/nps.zh-cn.lmo b/package/lean/luci-app-nps/luasrc/i18n/nps.zh-cn.lmo
new file mode 100644
index 0000000000..940bd4e7dc
Binary files /dev/null and b/package/lean/luci-app-nps/luasrc/i18n/nps.zh-cn.lmo differ
diff --git a/package/lean/luci-app-nps/luasrc/i18n/nps.zh_CN.po b/package/lean/luci-app-nps/luasrc/i18n/nps.zh_CN.po
new file mode 100644
index 0000000000..8910c020c9
--- /dev/null
+++ b/package/lean/luci-app-nps/luasrc/i18n/nps.zh_CN.po
@@ -0,0 +1,28 @@
+# zh_CN translation for npc.
+# Copyright (C) 2015 Yoyodyne, Inc. (msgids)
+# This file is distributed under the same license as the gettext package.
+#
+msgid ""
+msgstr ""
+"PO-Revision-Date: 2015-09-01 09:53中国标准时间\n"
+"Last-Translator: Ardentwheel <Ardentwheel@gmail.com>\n"
+"Language: zh_CN\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=utf-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+
+msgid "Nps Setting"
+msgstr "Nps内网穿透"
+
+msgid "Enable Compression"
+msgstr "使用压缩传输"
+
+msgid "Enable Encryption"
+msgstr "使用加密传输"
+
+msgid "The contents will be compressed to speed up the traffic forwarding speed, but this will consume some additional cpu resources"
+msgstr "压缩传输内容，加快流量转发速度，会额外消耗 cpu 资源"
+
+msgid "Encrypted the communication between Npc and Nps, will effectively prevent the traffic intercepted."
+msgstr "加密传输 npc 与 nps 之间的通信内容，会有效防止流量被拦截"
\ No newline at end of file
diff --git a/package/lean/luci-app-nps/luasrc/model/cbi/nps.lua b/package/lean/luci-app-nps/luasrc/model/cbi/nps.lua
new file mode 100755
index 0000000000..ea7a4e0ec2
--- /dev/null
+++ b/package/lean/luci-app-nps/luasrc/model/cbi/nps.lua
@@ -0,0 +1,47 @@
+m=Map("nps")
+m.title=translate("Nps Setting")
+m.description=translate("Nps is a fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.")
+
+m:section(SimpleSection).template="nps/nps_status"
+
+s=m:section(TypedSection,"nps")
+s.addremove=false
+s.anonymous=true
+
+s:tab("basic",translate("Basic Setting"))
+enable=s:taboption("basic",Flag,"enabled",translate("Enable"))
+enable.rmempty=false
+server=s:taboption("basic",Value,"server_addr",translate("Server"),translate("Must an IPv4 address"))
+server.datatype="ipaddr"
+server.optional=false
+server.rmempty=false
+port=s:taboption("basic",Value,"server_port",translate("Port"))
+port.datatype="port"
+port.default="8024"
+port.optional=false
+port.rmempty=false
+protocol=s:taboption("basic",ListValue,"protocol",translate("Protocol Type"))
+protocol.default="tcp"
+protocol:value("tcp",translate("TCP Protocol"))
+protocol:value("kcp",translate("KCP Protocol"))
+vkey=s:taboption("basic",Value,"vkey",translate("vkey"))
+vkey.optional=false
+vkey.password=true
+vkey.rmempty=false
+compress=s:taboption("basic",Flag,"compress",translate("Enable Compression"),translate("The contents will be compressed to speed up the traffic forwarding speed, but this will consume some additional cpu resources."))
+compress.default="1"
+compress.rmempty=false
+crypt=s:taboption("basic",Flag,"crypt",translate("Enable Encryption"),translate("Encrypted the communication between Npc and Nps, will effectively prevent the traffic intercepted."))
+crypt.default="1"
+crypt.rmempty=false
+log_level=s:taboption("basic",ListValue,"log_level",translate("Log Level"))
+log_level:value(0,"Emergency")
+log_level:value(2,"Critical")
+log_level:value(3,"Error")
+log_level:value(4,"Warning")
+log_level:value(7,"Debug")
+log_level.default="3"
+
+return m
+
+
diff --git a/package/lean/luci-app-nps/luasrc/view/nps/nps_status.htm b/package/lean/luci-app-nps/luasrc/view/nps/nps_status.htm
new file mode 100755
index 0000000000..5952344bb7
--- /dev/null
+++ b/package/lean/luci-app-nps/luasrc/view/nps/nps_status.htm
@@ -0,0 +1,22 @@
+<script type="text/javascript">//<![CDATA[
+XHR.poll(3, '<%=url([[admin]], [[services]], [[nps]], [[status]])%>', null,
+	function(x, data) {
+		var tb = document.getElementById('nps_status');
+		if (data && tb) {
+			if (data.running) {
+				var links = '<em><b><font color=green>nps <%:RUNNING%></font></b></em>';
+				tb.innerHTML = links;
+			} else {
+				tb.innerHTML = '<em><b><font color=red>nps <%:NOT RUNNING%></font></b></em>';
+			}
+		}
+	}
+);
+//]]>
+</script>
+<style>.mar-10 {margin-left: 50px; margin-right: 10px;}</style>
+<fieldset class="cbi-section">
+	<p id="nps_status">
+		<em><%:Collecting data...%></em>
+	</p>
+</fieldset>
diff --git a/package/lean/luci-app-nps/root/etc/config/nps b/package/lean/luci-app-nps/root/etc/config/nps
new file mode 100755
index 0000000000..5b166cd1d1
--- /dev/null
+++ b/package/lean/luci-app-nps/root/etc/config/nps
@@ -0,0 +1,11 @@
+
+config npc 'config'
+	option enabled '1'
+	option server_addr '1.1.1.1'
+	option server_port '8024'
+	option protocol 'tcp'
+	option compress '1'
+	option crypt '1'
+	option vkey 'aaa'
+	option log_level '4'
+
diff --git a/package/lean/luci-app-nps/root/etc/init.d/nps b/package/lean/luci-app-nps/root/etc/init.d/nps
new file mode 100755
index 0000000000..e9ab09f96d
--- /dev/null
+++ b/package/lean/luci-app-nps/root/etc/init.d/nps
@@ -0,0 +1,64 @@
+#!/bin/sh /etc/rc.common
+# Copyright (C) 2006-2011 OpenWrt.org
+
+START=50
+USE_PROCD=1
+
+LOGFILE="/var/etc/nps.log"
+tmpconf="/tmp/etc/nps.conf"
+
+nps_header() {
+	local enabled server_addr server_port protocol vkey compress crypt log_level
+
+	config_get enabled $1 enabled
+	config_get server_addr $1 server_addr
+	config_get server_port $1 server_port
+	config_get protocol $1 protocol
+	config_get vkey $1 vkey
+	config_get compress $1 compress
+	config_get crypt $1 crypt
+	config_get log_level $1 log_level
+
+	[ -f $tmpconf ] && rm $tmpconf
+	echo "[common]" >$tmpconf
+	echo "server_addr=${server_addr}:${server_port}" >>$tmpconf
+	echo "conn_type=${protocol}" >>$tmpconf
+	echo "vkey=${vkey}" >>$tmpconf
+
+	nps_write_bool compress $1
+	nps_write_bool crypt $1
+
+	Log_level=$log_level
+	Enabled=$enabled
+}
+
+nps_write_bool() {
+	local opt="$1"
+	local config="$2"
+	local val
+
+	config_get_bool val $config "$opt"
+	if [ "$val" -eq 0 ]; then
+		echo "${opt}=false" >> $tmpconf
+	else
+		echo "${opt}=true" >> $tmpconf
+	fi
+}
+
+start_service() {
+	config_load nps
+	config_foreach nps_header nps
+
+	if [ "$Enabled" = "1" ];then
+		logger -t FRPC 'Starting Nps service' 
+		#service_start /usr/bin/npc -config=$tmpconf -log_level=$Log_level -log_path=$LOGFILE
+		procd_open_instance
+    		procd_set_param command /usr/bin/npc -config=$tmpconf -log_level=$Log_level 
+    		procd_set_param file $tmpconf
+    		procd_set_param respawn
+    		procd_set_param stdout 1
+    		procd_set_param stderr 1
+    		procd_close_instance
+	fi
+}
+
diff --git a/package/lean/luci-app-nps/root/etc/uci-defaults/luci-nps b/package/lean/luci-app-nps/root/etc/uci-defaults/luci-nps
new file mode 100755
index 0000000000..f4f0996aa2
--- /dev/null
+++ b/package/lean/luci-app-nps/root/etc/uci-defaults/luci-nps
@@ -0,0 +1,11 @@
+#!/bin/sh
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@nps[-1]
+	add ucitrack nps
+	set ucitrack.@nps[-1].init=nps
+	commit ucitrack
+EOF
+
+rm -f /tmp/luci-indexcache
+exit 0
diff --git a/package/lean/luci-app-openvpn-server/Makefile b/package/lean/luci-app-openvpn-server/Makefile
new file mode 100644
index 0000000000..4e51de6440
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/Makefile
@@ -0,0 +1,21 @@
+# Copyright (C) 2016 Openwrt.org
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI support for OpenVPN Server
+LUCI_DEPENDS:=+openvpn-openssl +openvpn-easy-rsa +kmod-tun
+LUCI_PKGARCH:=all
+PKG_NAME:=luci-app-openvpn-server
+PKG_VERSION:=2.0
+PKG_RELEASE:=18
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
+
+
+
diff --git a/package/lean/luci-app-openvpn-server/luasrc/controller/openvpn-server.lua b/package/lean/luci-app-openvpn-server/luasrc/controller/openvpn-server.lua
new file mode 100644
index 0000000000..3d05765f3f
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luasrc/controller/openvpn-server.lua
@@ -0,0 +1,22 @@
+
+module("luci.controller.openvpn-server", package.seeall)
+
+function index()
+	if not nixio.fs.access("/etc/config/openvpn") then
+		return
+	end
+	
+	entry({"admin", "vpn"}, firstchild(), "VPN", 45).dependent = false
+	
+	local page
+
+	entry({"admin", "vpn", "openvpn-server"}, cbi("openvpn-server/openvpn-server"), _("OpenVPN Server"), 80).dependent=false
+	entry({"admin", "vpn", "openvpn-server","status"},call("act_status")).leaf=true
+end
+
+function act_status()
+  local e={}
+  e.running=luci.sys.call("pgrep openvpn >/dev/null")==0
+  luci.http.prepare_content("application/json")
+  luci.http.write_json(e)
+end
\ No newline at end of file
diff --git a/package/lean/luci-app-openvpn-server/luasrc/model/cbi/openvpn-server/openvpn-server.lua b/package/lean/luci-app-openvpn-server/luasrc/model/cbi/openvpn-server/openvpn-server.lua
new file mode 100644
index 0000000000..183a85ae42
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luasrc/model/cbi/openvpn-server/openvpn-server.lua
@@ -0,0 +1,103 @@
+
+--require("luci.tools.webadmin")
+
+mp = Map("openvpn", "OpenVPN Server",translate("An easy config OpenVPN Server Web-UI"))
+
+mp:section(SimpleSection).template  = "openvpn/openvpn_status"
+
+s = mp:section(TypedSection, "openvpn")
+s.anonymous = true
+s.addremove = false
+
+s:tab("basic",  translate("Base Setting"))
+
+o = s:taboption("basic", Flag, "enabled", translate("Enable"))
+
+proto = s:taboption("basic",Value,"proto", translate("Proto"))
+proto:value("tcp", translate("TCP Server"))
+proto:value("udp", translate("UDP Server"))
+
+port = s:taboption("basic", Value, "port", translate("Port"))
+port.datatype = "range(1,65535)"
+
+ddns = s:taboption("basic", Value, "ddns", translate("WAN DDNS or IP"))
+ddns.datatype = "string"
+ddns.default = "exmple.com"
+ddns.rmempty = false
+
+localnet = s:taboption("basic", Value, "server", translate("Client Network"))
+localnet.datatype = "string"
+localnet.description = translate("VPN Client Network IP with subnet")
+
+list = s:taboption("basic", DynamicList, "push")
+list.title = translate("Client Settings")
+list.datatype = "string"
+list.description = translate("Set route 192.168.0.0 255.255.255.0 and dhcp-option DNS 192.168.0.1 base on your router")
+
+
+local o
+o = s:taboption("basic", Button,"certificate",translate("OpenVPN Client config file"))
+o.inputtitle = translate("Download .ovpn file")
+o.description = translate("If you are using IOS client, please download this .ovpn file and send it via QQ or Email to your IOS device")
+o.inputstyle = "reload"
+o.write = function()
+  luci.sys.call("sh /etc/genovpn.sh 2>&1 >/dev/null")
+	Download()
+end
+
+s:tab("code",  translate("Special Code"))
+
+local conf = "/etc/ovpnadd.conf"
+local NXFS = require "nixio.fs"
+o = s:taboption("code", TextValue, "conf")
+o.description = translate("(!)Special Code you know that add in to client .ovpn file")
+o.rows = 13
+o.wrap = "off"
+o.cfgvalue = function(self, section)
+	return NXFS.readfile(conf) or ""
+end
+o.write = function(self, section, value)
+	NXFS.writefile(conf, value:gsub("\r\n", "\n"))
+end
+
+
+local pid = luci.util.exec("/usr/bin/pgrep openvpn")
+
+function openvpn_process_status()
+  local status = "OpenVPN is not running now "
+
+  if pid ~= "" then
+      status = "OpenVPN is running with the PID " .. pid .. ""
+  end
+
+  local status = { status=status }
+  local table = { pid=status }
+  return table
+end
+
+
+
+function Download()
+	local t,e
+	t=nixio.open("/tmp/my.ovpn","r")
+	luci.http.header('Content-Disposition','attachment; filename="my.ovpn"')
+	luci.http.prepare_content("application/octet-stream")
+	while true do
+		e=t:read(nixio.const.buffersize)
+		if(not e)or(#e==0)then
+			break
+		else
+			luci.http.write(e)
+		end
+	end
+	t:close()
+	luci.http.close()
+end
+
+function mp.on_after_commit(self)
+  os.execute("uci set firewall.openvpn.dest_port=$(uci get openvpn.myvpn.port) && uci commit firewall &&  /etc/init.d/firewall restart")
+  os.execute("/etc/init.d/openvpn restart")
+end
+
+
+return mp
diff --git a/package/lean/luci-app-openvpn-server/luasrc/view/openvpn/openvpn_status.htm b/package/lean/luci-app-openvpn-server/luasrc/view/openvpn/openvpn_status.htm
new file mode 100644
index 0000000000..752abd4d0b
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luasrc/view/openvpn/openvpn_status.htm
@@ -0,0 +1,22 @@
+<script type="text/javascript">//<![CDATA[
+XHR.poll(3, '<%=url([[admin]], [[vpn]], [[openvpn-server]], [[status]])%>', null,
+	function(x, data) {
+		var tb = document.getElementById('openvpn_status');
+		if (data && tb) {
+			if (data.running) {
+				var links = '<em><b><font color=green>OpenVPN Server <%:RUNNING%></font></b></em>';
+				tb.innerHTML = links;
+			} else {
+				tb.innerHTML = '<em><b><font color=red>OpenVPN Server <%:NOT RUNNING%></font></b></em>';
+			}
+		}
+	}
+);
+//]]>
+</script>
+<style>.mar-10 {margin-left: 50px; margin-right: 10px;}</style>
+<fieldset class="cbi-section">
+	<p id="openvpn_status">
+		<em><%:Collecting data...%></em>
+	</p>
+</fieldset>
\ No newline at end of file
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/Makefile b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/Makefile
new file mode 100644
index 0000000000..4e51de6440
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/Makefile
@@ -0,0 +1,21 @@
+# Copyright (C) 2016 Openwrt.org
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI support for OpenVPN Server
+LUCI_DEPENDS:=+openvpn-openssl +openvpn-easy-rsa +kmod-tun
+LUCI_PKGARCH:=all
+PKG_NAME:=luci-app-openvpn-server
+PKG_VERSION:=2.0
+PKG_RELEASE:=18
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
+
+
+
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/luasrc/controller/openvpn-server.lua b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/luasrc/controller/openvpn-server.lua
new file mode 100644
index 0000000000..3d05765f3f
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/luasrc/controller/openvpn-server.lua
@@ -0,0 +1,22 @@
+
+module("luci.controller.openvpn-server", package.seeall)
+
+function index()
+	if not nixio.fs.access("/etc/config/openvpn") then
+		return
+	end
+	
+	entry({"admin", "vpn"}, firstchild(), "VPN", 45).dependent = false
+	
+	local page
+
+	entry({"admin", "vpn", "openvpn-server"}, cbi("openvpn-server/openvpn-server"), _("OpenVPN Server"), 80).dependent=false
+	entry({"admin", "vpn", "openvpn-server","status"},call("act_status")).leaf=true
+end
+
+function act_status()
+  local e={}
+  e.running=luci.sys.call("pgrep openvpn >/dev/null")==0
+  luci.http.prepare_content("application/json")
+  luci.http.write_json(e)
+end
\ No newline at end of file
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/luasrc/model/cbi/openvpn-server/openvpn-server.lua b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/luasrc/model/cbi/openvpn-server/openvpn-server.lua
new file mode 100644
index 0000000000..183a85ae42
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/luasrc/model/cbi/openvpn-server/openvpn-server.lua
@@ -0,0 +1,103 @@
+
+--require("luci.tools.webadmin")
+
+mp = Map("openvpn", "OpenVPN Server",translate("An easy config OpenVPN Server Web-UI"))
+
+mp:section(SimpleSection).template  = "openvpn/openvpn_status"
+
+s = mp:section(TypedSection, "openvpn")
+s.anonymous = true
+s.addremove = false
+
+s:tab("basic",  translate("Base Setting"))
+
+o = s:taboption("basic", Flag, "enabled", translate("Enable"))
+
+proto = s:taboption("basic",Value,"proto", translate("Proto"))
+proto:value("tcp", translate("TCP Server"))
+proto:value("udp", translate("UDP Server"))
+
+port = s:taboption("basic", Value, "port", translate("Port"))
+port.datatype = "range(1,65535)"
+
+ddns = s:taboption("basic", Value, "ddns", translate("WAN DDNS or IP"))
+ddns.datatype = "string"
+ddns.default = "exmple.com"
+ddns.rmempty = false
+
+localnet = s:taboption("basic", Value, "server", translate("Client Network"))
+localnet.datatype = "string"
+localnet.description = translate("VPN Client Network IP with subnet")
+
+list = s:taboption("basic", DynamicList, "push")
+list.title = translate("Client Settings")
+list.datatype = "string"
+list.description = translate("Set route 192.168.0.0 255.255.255.0 and dhcp-option DNS 192.168.0.1 base on your router")
+
+
+local o
+o = s:taboption("basic", Button,"certificate",translate("OpenVPN Client config file"))
+o.inputtitle = translate("Download .ovpn file")
+o.description = translate("If you are using IOS client, please download this .ovpn file and send it via QQ or Email to your IOS device")
+o.inputstyle = "reload"
+o.write = function()
+  luci.sys.call("sh /etc/genovpn.sh 2>&1 >/dev/null")
+	Download()
+end
+
+s:tab("code",  translate("Special Code"))
+
+local conf = "/etc/ovpnadd.conf"
+local NXFS = require "nixio.fs"
+o = s:taboption("code", TextValue, "conf")
+o.description = translate("(!)Special Code you know that add in to client .ovpn file")
+o.rows = 13
+o.wrap = "off"
+o.cfgvalue = function(self, section)
+	return NXFS.readfile(conf) or ""
+end
+o.write = function(self, section, value)
+	NXFS.writefile(conf, value:gsub("\r\n", "\n"))
+end
+
+
+local pid = luci.util.exec("/usr/bin/pgrep openvpn")
+
+function openvpn_process_status()
+  local status = "OpenVPN is not running now "
+
+  if pid ~= "" then
+      status = "OpenVPN is running with the PID " .. pid .. ""
+  end
+
+  local status = { status=status }
+  local table = { pid=status }
+  return table
+end
+
+
+
+function Download()
+	local t,e
+	t=nixio.open("/tmp/my.ovpn","r")
+	luci.http.header('Content-Disposition','attachment; filename="my.ovpn"')
+	luci.http.prepare_content("application/octet-stream")
+	while true do
+		e=t:read(nixio.const.buffersize)
+		if(not e)or(#e==0)then
+			break
+		else
+			luci.http.write(e)
+		end
+	end
+	t:close()
+	luci.http.close()
+end
+
+function mp.on_after_commit(self)
+  os.execute("uci set firewall.openvpn.dest_port=$(uci get openvpn.myvpn.port) && uci commit firewall &&  /etc/init.d/firewall restart")
+  os.execute("/etc/init.d/openvpn restart")
+end
+
+
+return mp
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/luasrc/view/openvpn/openvpn_status.htm b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/luasrc/view/openvpn/openvpn_status.htm
new file mode 100644
index 0000000000..752abd4d0b
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/luasrc/view/openvpn/openvpn_status.htm
@@ -0,0 +1,22 @@
+<script type="text/javascript">//<![CDATA[
+XHR.poll(3, '<%=url([[admin]], [[vpn]], [[openvpn-server]], [[status]])%>', null,
+	function(x, data) {
+		var tb = document.getElementById('openvpn_status');
+		if (data && tb) {
+			if (data.running) {
+				var links = '<em><b><font color=green>OpenVPN Server <%:RUNNING%></font></b></em>';
+				tb.innerHTML = links;
+			} else {
+				tb.innerHTML = '<em><b><font color=red>OpenVPN Server <%:NOT RUNNING%></font></b></em>';
+			}
+		}
+	}
+);
+//]]>
+</script>
+<style>.mar-10 {margin-left: 50px; margin-right: 10px;}</style>
+<fieldset class="cbi-section">
+	<p id="openvpn_status">
+		<em><%:Collecting data...%></em>
+	</p>
+</fieldset>
\ No newline at end of file
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/po/zh-cn/openvpn-server.po b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/po/zh-cn/openvpn-server.po
new file mode 100644
index 0000000000..b13d6a8967
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/po/zh-cn/openvpn-server.po
@@ -0,0 +1,53 @@
+msgid "OpenVPN Server"
+msgstr "OpenVPN 服务器"
+
+msgid "An easy config OpenVPN Server Web-UI"
+msgstr "易于使用的 OpenVPN 服务器 Web-UI"
+
+msgid "Base Setting"
+msgstr "基本设置"
+
+msgid "Enable"
+msgstr "启用"
+
+msgid "Port"
+msgstr "端口"
+
+msgid "WAN DDNS or IP"
+msgstr "WAN口的 DDNS域名 或者 IP"
+
+
+msgid "Client Network"
+msgstr "客户端网段"
+
+msgid "VPN Client Network IP with subnet"
+msgstr "客户端分配的网段地址（默认为 10.8.0.0 255.255.255.0）"
+
+
+msgid "Client Settings"
+msgstr "客户端推送配置"
+
+msgid "OpenVPN Client config file"
+msgstr "OpenVPN 客户端配置文件"
+
+
+msgid "Download .ovpn file"
+msgstr "一键下载 .ovpn 文件"
+
+msgid "If you are using IOS client, please download this .ovpn file and send it via QQ or Email to your IOS device"
+msgstr "如果你使用的是 iOS 设备，你可以使用 QQ 或者邮件发送到自己的设备上用 OpenVPN 客户端打开导入"
+
+msgid "Special Code"
+msgstr "特殊代码"
+
+msgid "(!)Special Code you know that add in to client .ovpn file"
+msgstr "(!)特殊代码将自动合并到客户端的 .ovpn 配置文件中"
+
+msgid "Set route 192.168.0.0 255.255.255.0 and dhcp-option DNS 192.168.0.1 base on your router"
+msgstr "根据路由的实际LAN IP 修改 route 192.168.0.0 255.255.255.0 和 dhcp-option DNS 192.168.0.1 这两行"
+
+msgid "OpenVPN status"
+msgstr "OpenVPN 服务器运行状态"
+
+msgid "Proto"
+msgstr "协议"
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/config/openvpn b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/config/openvpn
new file mode 100644
index 0000000000..6a829f4e60
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/config/openvpn
@@ -0,0 +1,28 @@
+
+config openvpn 'myvpn'
+	option enabled '0'
+	option proto 'tcp-server'
+	option port '1194'
+	option ddns example.com
+	option dev 'tun'
+	option topology 'subnet'
+	option server '10.8.0.0 255.255.255.0'
+	option comp_lzo 'adaptive'
+	option ca '/etc/openvpn/ca.crt'
+	option dh '/etc/openvpn/dh1024.pem'
+	option cert '/etc/openvpn/server.crt'
+	option key '/etc/openvpn/server.key'
+	option persist_key '1'
+	option persist_tun '1'
+	option user 'nobody'
+	option group 'nogroup'
+	option max_clients '10'
+	option keepalive '10 120'
+	option verb '3'
+	option status '/var/log/openvpn_status.log'
+	option log '/tmp/openvpn.log'
+	list push 'route 192.168.0.0 255.255.255.0'
+	list push 'comp-lzo adaptive'
+	list push 'redirect-gateway def1 bypass-dhcp'
+	list push 'dhcp-option DNS 192.168.0.1'
+
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/01.pem b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/01.pem
new file mode 100755
index 0000000000..a73a757e94
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/01.pem
@@ -0,0 +1,74 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=CN, ST=ZJ, L=ZJ, O=ZJ, OU=ZJ, CN=ZJ CA/name=EasyRSA/emailAddress=ZJ@ZJ.com
+        Validity
+            Not Before: Aug 23 14:26:42 2017 GMT
+            Not After : Aug 21 14:26:42 2027 GMT
+        Subject: C=CN, ST=ZJ, L=ZJ, O=ZJ, OU=ZJ, CN=server/name=EasyRSA/emailAddress=ZJ@ZJ.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (1024 bit)
+                Modulus:
+                    00:e0:67:2e:33:ab:4f:4f:a1:78:c6:32:ba:d3:1d:
+                    71:73:34:ba:45:40:88:87:76:03:fb:87:d8:4e:4e:
+                    7c:7d:95:22:7d:8e:70:dc:68:10:27:fe:7d:f0:79:
+                    93:86:83:ef:a9:16:78:ae:86:5e:ea:42:74:38:4d:
+                    37:0d:c9:34:a6:84:5e:64:ad:dd:91:dd:df:02:bf:
+                    53:f8:fb:c0:9b:cb:bd:93:7c:26:ab:bd:0a:c6:c3:
+                    5d:da:5d:b3:c0:ff:72:a1:2f:1e:0b:f6:a6:71:77:
+                    f9:00:38:8a:ae:ab:c0:86:11:ab:12:de:1e:82:13:
+                    e8:c3:d5:bb:6f:2e:bf:6e:c1
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            Netscape Cert Type: 
+                SSL Server
+            Netscape Comment: 
+                Easy-RSA Generated Server Certificate
+            X509v3 Subject Key Identifier: 
+                1C:06:47:33:61:0E:15:84:D5:08:5A:40:E6:C9:23:EF:87:F3:EE:F9
+            X509v3 Authority Key Identifier: 
+                keyid:8D:D5:04:79:10:05:4F:1B:12:63:11:AC:00:D4:FC:CC:31:00:B8:09
+                DirName:/C=CN/ST=ZJ/L=ZJ/O=ZJ/OU=ZJ/CN=ZJ CA/name=EasyRSA/emailAddress=ZJ@ZJ.com
+                serial:AE:18:A1:E1:3D:52:4D:F0
+
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication
+            X509v3 Key Usage: 
+                Digital Signature, Key Encipherment
+    Signature Algorithm: sha256WithRSAEncryption
+         aa:b5:0d:7a:b3:09:7a:d4:e6:df:46:0d:54:39:e2:34:da:4f:
+         9b:92:d6:41:db:10:b9:ed:66:34:7f:9d:a9:fa:af:6a:80:b4:
+         1f:13:d3:39:a6:72:93:5a:6b:e8:4f:ba:95:f9:83:10:58:b3:
+         fe:12:3f:a9:e8:31:04:e0:8e:d8:4c:c1:f7:7e:fc:7a:ba:17:
+         d8:2e:76:ab:7c:17:ca:a4:1d:3d:c5:bc:df:02:e5:2e:91:c4:
+         b2:6c:40:a1:e2:3d:64:15:da:a6:b0:e4:1d:66:11:54:c0:49:
+         05:91:c4:69:68:2d:bc:d5:f6:32:43:3c:18:c4:97:54:45:52:
+         28:36
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/02.pem b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/02.pem
new file mode 100755
index 0000000000..c757880eaa
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/02.pem
@@ -0,0 +1,71 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=CN, ST=ZJ, L=ZJ, O=ZJ, OU=ZJ, CN=ZJ CA/name=EasyRSA/emailAddress=ZJ@ZJ.com
+        Validity
+            Not Before: Aug 23 14:26:58 2017 GMT
+            Not After : Aug 21 14:26:58 2027 GMT
+        Subject: C=CN, ST=ZJ, L=ZJ, O=ZJ, OU=ZJ, CN=client1/name=EasyRSA/emailAddress=ZJ@ZJ.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (1024 bit)
+                Modulus:
+                    00:b7:6b:40:0b:c1:ef:a7:c3:fa:54:32:c2:d7:87:
+                    fa:ac:85:18:ae:af:44:ba:dd:57:0f:43:73:eb:df:
+                    37:5e:5e:8f:ad:43:7a:87:dd:a6:bd:6a:0b:68:8d:
+                    75:0c:fe:49:39:e1:54:11:53:0f:b5:63:10:5b:21:
+                    98:7f:53:32:b3:d6:b0:3d:23:fc:1d:ad:06:b0:f0:
+                    fb:10:27:83:e1:5e:5a:b4:f6:7c:02:87:4c:73:86:
+                    7b:79:07:ca:a7:1c:18:2c:70:e3:9d:e6:f0:89:06:
+                    4b:25:2c:09:39:51:c3:d4:44:ef:81:5e:aa:e0:63:
+                    d8:11:c6:9c:e0:6f:d8:66:11
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            Netscape Comment: 
+                Easy-RSA Generated Certificate
+            X509v3 Subject Key Identifier: 
+                E8:15:F9:71:C4:A7:C2:41:A3:AF:F5:C5:93:51:8E:5D:67:9B:12:E2
+            X509v3 Authority Key Identifier: 
+                keyid:8D:D5:04:79:10:05:4F:1B:12:63:11:AC:00:D4:FC:CC:31:00:B8:09
+                DirName:/C=CN/ST=ZJ/L=ZJ/O=ZJ/OU=ZJ/CN=ZJ CA/name=EasyRSA/emailAddress=ZJ@ZJ.com
+                serial:AE:18:A1:E1:3D:52:4D:F0
+
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication
+            X509v3 Key Usage: 
+                Digital Signature
+    Signature Algorithm: sha256WithRSAEncryption
+         5b:63:c2:e5:e4:04:ad:f4:b6:76:24:df:94:a5:b0:a2:99:38:
+         f9:e7:b4:2f:79:91:51:1b:06:4b:33:fc:4c:74:ce:47:3e:54:
+         1b:da:ea:43:e3:6d:6e:ec:b4:cd:77:86:ea:ea:48:a1:79:70:
+         5c:ff:99:0e:fb:bd:fc:0d:89:a6:2e:13:fe:86:82:69:33:4c:
+         28:21:0d:a8:ba:1a:3e:c7:2e:2d:97:0c:5a:ed:e3:af:73:fc:
+         bb:c9:58:05:c5:26:56:13:1c:3e:8f:90:c7:e8:d9:e5:0b:1f:
+         40:9a:fa:15:49:b9:d8:8e:6a:fd:71:f4:3c:df:a1:11:af:fb:
+         ea:a8
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/ca.crt b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/ca.crt
new file mode 100755
index 0000000000..7b7ba5ef81
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/ca.crt
@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----
+MIIDXDCCAsWgAwIBAgIJAK4YoeE9Uk3wMA0GCSqGSIb3DQEBCwUAMH0xCzAJBgNV
+BAYTAkNOMQswCQYDVQQIEwJaSjELMAkGA1UEBxMCWkoxCzAJBgNVBAoTAlpKMQsw
+CQYDVQQLEwJaSjEOMAwGA1UEAxMFWkogQ0ExEDAOBgNVBCkTB0Vhc3lSU0ExGDAW
+BgkqhkiG9w0BCQEWCVpKQFpKLmNvbTAeFw0xNzA4MjMxNDE4MDVaFw0yNzA4MjEx
+NDE4MDVaMH0xCzAJBgNVBAYTAkNOMQswCQYDVQQIEwJaSjELMAkGA1UEBxMCWkox
+CzAJBgNVBAoTAlpKMQswCQYDVQQLEwJaSjEOMAwGA1UEAxMFWkogQ0ExEDAOBgNV
+BCkTB0Vhc3lSU0ExGDAWBgkqhkiG9w0BCQEWCVpKQFpKLmNvbTCBnzANBgkqhkiG
+9w0BAQEFAAOBjQAwgYkCgYEAsLBNLkjfNUK4Rb3xgJD0EEgzp6b+5zkiibT3wdS9
+SKZqkqJRcM/z7Ifc79LKXDDHrVnajkyc8QSaXOKVW8pTx75fYnoHjNbeU9JZHoTg
+9GgRWq5HHUJlxhsdbcGeTxOHrMRz2d+VzvNvs5KOLJaqGkRmm/KMb7nTRnwjhx4A
+pWsCAwEAAaOB4zCB4DAdBgNVHQ4EFgQUjdUEeRAFTxsSYxGsANT8zDEAuAkwgbAG
+A1UdIwSBqDCBpYAUjdUEeRAFTxsSYxGsANT8zDEAuAmhgYGkfzB9MQswCQYDVQQG
+EwJDTjELMAkGA1UECBMCWkoxCzAJBgNVBAcTAlpKMQswCQYDVQQKEwJaSjELMAkG
+A1UECxMCWkoxDjAMBgNVBAMTBVpKIENBMRAwDgYDVQQpEwdFYXN5UlNBMRgwFgYJ
+KoZIhvcNAQkBFglaSkBaSi5jb22CCQCuGKHhPVJN8DAMBgNVHRMEBTADAQH/MA0G
+CSqGSIb3DQEBCwUAA4GBAAAN0aRmQGNsF23CxShEnj3ohgpYA20F2FwEWYmCCWXe
+CKxuPGtPZAeLmToIMgn75QlyuvVG+Uoe7I6ylbEK3XoeNStcS61wAXL8hIPfMcUX
+fDsImBvc+Bo+LxQMWMSz0r88+B8784KELyaQKOnvPlTrnTuyP9RftjUWpjy23Kjd
+-----END CERTIFICATE-----
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/ca.key b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/ca.key
new file mode 100755
index 0000000000..796fbf10ea
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/ca.key
@@ -0,0 +1,16 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/client1.crt b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/client1.crt
new file mode 100755
index 0000000000..c757880eaa
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/client1.crt
@@ -0,0 +1,71 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=CN, ST=ZJ, L=ZJ, O=ZJ, OU=ZJ, CN=ZJ CA/name=EasyRSA/emailAddress=ZJ@ZJ.com
+        Validity
+            Not Before: Aug 23 14:26:58 2017 GMT
+            Not After : Aug 21 14:26:58 2027 GMT
+        Subject: C=CN, ST=ZJ, L=ZJ, O=ZJ, OU=ZJ, CN=client1/name=EasyRSA/emailAddress=ZJ@ZJ.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (1024 bit)
+                Modulus:
+                    00:b7:6b:40:0b:c1:ef:a7:c3:fa:54:32:c2:d7:87:
+                    fa:ac:85:18:ae:af:44:ba:dd:57:0f:43:73:eb:df:
+                    37:5e:5e:8f:ad:43:7a:87:dd:a6:bd:6a:0b:68:8d:
+                    75:0c:fe:49:39:e1:54:11:53:0f:b5:63:10:5b:21:
+                    98:7f:53:32:b3:d6:b0:3d:23:fc:1d:ad:06:b0:f0:
+                    fb:10:27:83:e1:5e:5a:b4:f6:7c:02:87:4c:73:86:
+                    7b:79:07:ca:a7:1c:18:2c:70:e3:9d:e6:f0:89:06:
+                    4b:25:2c:09:39:51:c3:d4:44:ef:81:5e:aa:e0:63:
+                    d8:11:c6:9c:e0:6f:d8:66:11
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            Netscape Comment: 
+                Easy-RSA Generated Certificate
+            X509v3 Subject Key Identifier: 
+                E8:15:F9:71:C4:A7:C2:41:A3:AF:F5:C5:93:51:8E:5D:67:9B:12:E2
+            X509v3 Authority Key Identifier: 
+                keyid:8D:D5:04:79:10:05:4F:1B:12:63:11:AC:00:D4:FC:CC:31:00:B8:09
+                DirName:/C=CN/ST=ZJ/L=ZJ/O=ZJ/OU=ZJ/CN=ZJ CA/name=EasyRSA/emailAddress=ZJ@ZJ.com
+                serial:AE:18:A1:E1:3D:52:4D:F0
+
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication
+            X509v3 Key Usage: 
+                Digital Signature
+    Signature Algorithm: sha256WithRSAEncryption
+         5b:63:c2:e5:e4:04:ad:f4:b6:76:24:df:94:a5:b0:a2:99:38:
+         f9:e7:b4:2f:79:91:51:1b:06:4b:33:fc:4c:74:ce:47:3e:54:
+         1b:da:ea:43:e3:6d:6e:ec:b4:cd:77:86:ea:ea:48:a1:79:70:
+         5c:ff:99:0e:fb:bd:fc:0d:89:a6:2e:13:fe:86:82:69:33:4c:
+         28:21:0d:a8:ba:1a:3e:c7:2e:2d:97:0c:5a:ed:e3:af:73:fc:
+         bb:c9:58:05:c5:26:56:13:1c:3e:8f:90:c7:e8:d9:e5:0b:1f:
+         40:9a:fa:15:49:b9:d8:8e:6a:fd:71:f4:3c:df:a1:11:af:fb:
+         ea:a8
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/client1.csr b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/client1.csr
new file mode 100755
index 0000000000..a3549ca15e
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/client1.csr
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/client1.key b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/client1.key
new file mode 100755
index 0000000000..076ce4e72b
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/client1.key
@@ -0,0 +1,16 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/client1.p12 b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/client1.p12
new file mode 100755
index 0000000000..1511e1d0af
Binary files /dev/null and b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/client1.p12 differ
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/dh1024.pem b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/dh1024.pem
new file mode 100755
index 0000000000..01eba3e5a1
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/dh1024.pem
@@ -0,0 +1,5 @@
+-----BEGIN DH PARAMETERS-----
+MIGHAoGBAMzJWsEtMQ76G81O8RzEweDaPrio4NihRBo0fmNuh3IjJtFJ++URPW4y
+HHtnGOkPoMwQjGQ3GQV+lfcR7QGWojET4NskXOk6mdFU+/nYB9s5YY7RR4qyln9b
+dNMp3KnMLtILNH1rJRoqYbSNoz3Z2cS59Ejp1dgXqN8kSP8wiqDjAgEC
+-----END DH PARAMETERS-----
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/index.txt b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/index.txt
new file mode 100644
index 0000000000..4bb34b80fc
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/index.txt
@@ -0,0 +1,2 @@
+V	270821142642Z		01	unknown	/C=CN/ST=ZJ/L=ZJ/O=ZJ/OU=ZJ/CN=server/name=EasyRSA/emailAddress=ZJ@ZJ.com
+V	270821142658Z		02	unknown	/C=CN/ST=ZJ/L=ZJ/O=ZJ/OU=ZJ/CN=client1/name=EasyRSA/emailAddress=ZJ@ZJ.com
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/index.txt.attr b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/index.txt.attr
new file mode 100755
index 0000000000..8f7e63a347
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/index.txt.attr
@@ -0,0 +1 @@
+unique_subject = yes
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/index.txt.attr.old b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/index.txt.attr.old
new file mode 100755
index 0000000000..8f7e63a347
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/index.txt.attr.old
@@ -0,0 +1 @@
+unique_subject = yes
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/index.txt.old b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/index.txt.old
new file mode 100755
index 0000000000..d74831ee49
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/index.txt.old
@@ -0,0 +1 @@
+V	270821142642Z		01	unknown	/C=CN/ST=ZJ/L=ZJ/O=ZJ/OU=ZJ/CN=server/name=EasyRSA/emailAddress=ZJ@ZJ.com
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/serial b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/serial
new file mode 100755
index 0000000000..75016ea362
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/serial
@@ -0,0 +1 @@
+03
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/serial.old b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/serial.old
new file mode 100755
index 0000000000..9e22bcb8e3
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/serial.old
@@ -0,0 +1 @@
+02
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/server.crt b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/server.crt
new file mode 100755
index 0000000000..a73a757e94
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/server.crt
@@ -0,0 +1,74 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=CN, ST=ZJ, L=ZJ, O=ZJ, OU=ZJ, CN=ZJ CA/name=EasyRSA/emailAddress=ZJ@ZJ.com
+        Validity
+            Not Before: Aug 23 14:26:42 2017 GMT
+            Not After : Aug 21 14:26:42 2027 GMT
+        Subject: C=CN, ST=ZJ, L=ZJ, O=ZJ, OU=ZJ, CN=server/name=EasyRSA/emailAddress=ZJ@ZJ.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (1024 bit)
+                Modulus:
+                    00:e0:67:2e:33:ab:4f:4f:a1:78:c6:32:ba:d3:1d:
+                    71:73:34:ba:45:40:88:87:76:03:fb:87:d8:4e:4e:
+                    7c:7d:95:22:7d:8e:70:dc:68:10:27:fe:7d:f0:79:
+                    93:86:83:ef:a9:16:78:ae:86:5e:ea:42:74:38:4d:
+                    37:0d:c9:34:a6:84:5e:64:ad:dd:91:dd:df:02:bf:
+                    53:f8:fb:c0:9b:cb:bd:93:7c:26:ab:bd:0a:c6:c3:
+                    5d:da:5d:b3:c0:ff:72:a1:2f:1e:0b:f6:a6:71:77:
+                    f9:00:38:8a:ae:ab:c0:86:11:ab:12:de:1e:82:13:
+                    e8:c3:d5:bb:6f:2e:bf:6e:c1
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            Netscape Cert Type: 
+                SSL Server
+            Netscape Comment: 
+                Easy-RSA Generated Server Certificate
+            X509v3 Subject Key Identifier: 
+                1C:06:47:33:61:0E:15:84:D5:08:5A:40:E6:C9:23:EF:87:F3:EE:F9
+            X509v3 Authority Key Identifier: 
+                keyid:8D:D5:04:79:10:05:4F:1B:12:63:11:AC:00:D4:FC:CC:31:00:B8:09
+                DirName:/C=CN/ST=ZJ/L=ZJ/O=ZJ/OU=ZJ/CN=ZJ CA/name=EasyRSA/emailAddress=ZJ@ZJ.com
+                serial:AE:18:A1:E1:3D:52:4D:F0
+
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication
+            X509v3 Key Usage: 
+                Digital Signature, Key Encipherment
+    Signature Algorithm: sha256WithRSAEncryption
+         aa:b5:0d:7a:b3:09:7a:d4:e6:df:46:0d:54:39:e2:34:da:4f:
+         9b:92:d6:41:db:10:b9:ed:66:34:7f:9d:a9:fa:af:6a:80:b4:
+         1f:13:d3:39:a6:72:93:5a:6b:e8:4f:ba:95:f9:83:10:58:b3:
+         fe:12:3f:a9:e8:31:04:e0:8e:d8:4c:c1:f7:7e:fc:7a:ba:17:
+         d8:2e:76:ab:7c:17:ca:a4:1d:3d:c5:bc:df:02:e5:2e:91:c4:
+         b2:6c:40:a1:e2:3d:64:15:da:a6:b0:e4:1d:66:11:54:c0:49:
+         05:91:c4:69:68:2d:bc:d5:f6:32:43:3c:18:c4:97:54:45:52:
+         28:36
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/server.csr b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/server.csr
new file mode 100755
index 0000000000..c83aadabec
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/server.csr
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIIBvjCCAScCAQAwfjELMAkGA1UEBhMCQ04xCzAJBgNVBAgTAlpKMQswCQYDVQQH
+EwJaSjELMAkGA1UEChMCWkoxCzAJBgNVBAsTAlpKMQ8wDQYDVQQDEwZzZXJ2ZXIx
+EDAOBgNVBCkTB0Vhc3lSU0ExGDAWBgkqhkiG9w0BCQEWCVpKQFpKLmNvbTCBnzAN
+BgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA4GcuM6tPT6F4xjK60x1xczS6RUCIh3YD
++4fYTk58fZUifY5w3GgQJ/598HmThoPvqRZ4roZe6kJ0OE03Dck0poReZK3dkd3f
+Ar9T+PvAm8u9k3wmq70KxsNd2l2zwP9yoS8eC/amcXf5ADiKrqvAhhGrEt4eghPo
+w9W7by6/bsECAwEAAaAAMA0GCSqGSIb3DQEBCwUAA4GBAMrytQrG3MGVTD2vsZkw
+hJn9U4MYmikqFxEcSJ+JEeDJ0w3NTn95XJmFtmuT/CwsrnP9g+1neSpCXsZewozd
+QRisYBF9Rl9qw9fH2o1S/GIVpTDIiTtWjegZA6FPkhQQyY387LU9Lp4vG9hdNbuz
+QNDs6cI9T0U53PZiq7R65rGV
+-----END CERTIFICATE REQUEST-----
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/server.key b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/server.key
new file mode 100755
index 0000000000..3aab5cd4bb
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/keys/server.key
@@ -0,0 +1,16 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/openssl-1.0.0.cnf b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/openssl-1.0.0.cnf
new file mode 100755
index 0000000000..93ac6eaba8
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/openssl-1.0.0.cnf
@@ -0,0 +1,286 @@
+# For use with easy-rsa version 2.0 and OpenSSL 1.0.0*
+
+# This definition stops the following lines choking if HOME isn't
+# defined.
+HOME			= .
+RANDFILE		= $ENV::HOME/.rnd
+openssl_conf		= openssl_init
+
+[ openssl_init ]
+# Extra OBJECT IDENTIFIER info:
+#oid_file		= $ENV::HOME/.oid
+oid_section		= new_oids
+engines			= engine_section
+
+# To use this configuration file with the "-extfile" option of the
+# "openssl x509" utility, name here the section containing the
+# X.509v3 extensions to use:
+# extensions		=
+# (Alternatively, use a configuration file that has only
+# X.509v3 extensions in its main [= default] section.)
+
+[ new_oids ]
+
+# We can add new OIDs in here for use by 'ca' and 'req'.
+# Add a simple OID like this:
+# testoid1=1.2.3.4
+# Or use config file substitution like this:
+# testoid2=${testoid1}.5.6
+
+####################################################################
+[ ca ]
+default_ca	= CA_default		# The default ca section
+
+####################################################################
+[ CA_default ]
+
+dir		= $ENV::KEY_DIR		# Where everything is kept
+certs		= $dir			# Where the issued certs are kept
+crl_dir		= $dir			# Where the issued crl are kept
+database	= $dir/index.txt	# database index file.
+new_certs_dir	= $dir			# default place for new certs.
+
+certificate	= $dir/ca.crt	 	# The CA certificate
+serial		= $dir/serial 		# The current serial number
+crl		= $dir/crl.pem 		# The current CRL
+private_key	= $dir/ca.key		# The private key
+RANDFILE	= $dir/.rand		# private random number file
+
+x509_extensions	= usr_cert		# The extentions to add to the cert
+
+# Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs
+# so this is commented out by default to leave a V1 CRL.
+# crl_extensions	= crl_ext
+
+default_days	= 3650			# how long to certify for
+default_crl_days= 30			# how long before next CRL
+default_md	= sha256		# use public key default MD
+preserve	= no			# keep passed DN ordering
+
+# A few difference way of specifying how similar the request should look
+# For type CA, the listed attributes must be the same, and the optional
+# and supplied fields are just that :-)
+policy		= policy_anything
+
+# For the CA policy
+[ policy_match ]
+countryName		= match
+stateOrProvinceName	= match
+organizationName	= match
+organizationalUnitName	= optional
+commonName		= supplied
+name			= optional
+emailAddress		= optional
+
+# For the 'anything' policy
+# At this point in time, you must list all acceptable 'object'
+# types.
+[ policy_anything ]
+countryName		= optional
+stateOrProvinceName	= optional
+localityName		= optional
+organizationName	= optional
+organizationalUnitName	= optional
+commonName		= supplied
+name			= optional
+emailAddress		= optional
+
+####################################################################
+[ req ]
+default_bits		= $ENV::KEY_SIZE
+default_keyfile 	= privkey.pem
+default_md		= sha256
+distinguished_name	= req_distinguished_name
+attributes		= req_attributes
+x509_extensions	= v3_ca	# The extentions to add to the self signed cert
+
+# Passwords for private keys if not present they will be prompted for
+# input_password = secret
+# output_password = secret
+
+# This sets a mask for permitted string types. There are several options.
+# default: PrintableString, T61String, BMPString.
+# pkix	 : PrintableString, BMPString (PKIX recommendation after 2004).
+# utf8only: only UTF8Strings (PKIX recommendation after 2004).
+# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings).
+# MASK:XXXX a literal mask value.
+string_mask = nombstr
+
+# req_extensions = v3_req # The extensions to add to a certificate request
+
+[ req_distinguished_name ]
+countryName			= Country Name (2 letter code)
+countryName_default		= $ENV::KEY_COUNTRY
+countryName_min			= 2
+countryName_max			= 2
+
+stateOrProvinceName		= State or Province Name (full name)
+stateOrProvinceName_default	= $ENV::KEY_PROVINCE
+
+localityName			= Locality Name (eg, city)
+localityName_default		= $ENV::KEY_CITY
+
+0.organizationName		= Organization Name (eg, company)
+0.organizationName_default	= $ENV::KEY_ORG
+
+# we can do this but it is not needed normally :-)
+#1.organizationName		= Second Organization Name (eg, company)
+#1.organizationName_default	= World Wide Web Pty Ltd
+
+organizationalUnitName		= Organizational Unit Name (eg, section)
+#organizationalUnitName_default	=
+
+commonName			= Common Name (eg, your name or your server\'s hostname)
+commonName_max			= 64
+
+name				= Name
+name_max			= 64
+
+emailAddress			= Email Address
+emailAddress_default		= $ENV::KEY_EMAIL
+emailAddress_max		= 40
+
+# JY -- added for batch mode
+organizationalUnitName_default = $ENV::KEY_OU
+commonName_default = $ENV::KEY_CN
+name_default = $ENV::KEY_NAME
+
+
+# SET-ex3			= SET extension number 3
+
+[ req_attributes ]
+challengePassword		= A challenge password
+challengePassword_min		= 4
+challengePassword_max		= 20
+
+unstructuredName		= An optional company name
+
+[ usr_cert ]
+
+# These extensions are added when 'ca' signs a request.
+
+# This goes against PKIX guidelines but some CAs do it and some software
+# requires this to avoid interpreting an end user certificate as a CA.
+
+basicConstraints=CA:FALSE
+
+# Here are some examples of the usage of nsCertType. If it is omitted
+# the certificate can be used for anything *except* object signing.
+
+# This is OK for an SSL server.
+# nsCertType			= server
+
+# For an object signing certificate this would be used.
+# nsCertType = objsign
+
+# For normal client use this is typical
+# nsCertType = client, email
+
+# and for everything including object signing:
+# nsCertType = client, email, objsign
+
+# This is typical in keyUsage for a client certificate.
+# keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+
+# This will be displayed in Netscape's comment listbox.
+nsComment			= "Easy-RSA Generated Certificate"
+
+# PKIX recommendations harmless if included in all certificates.
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid,issuer:always
+extendedKeyUsage=clientAuth
+keyUsage = digitalSignature
+
+
+# This stuff is for subjectAltName and issuerAltname.
+# Import the email address.
+# subjectAltName=email:copy
+
+# Copy subject details
+# issuerAltName=issuer:copy
+
+#nsCaRevocationUrl		= http://www.domain.dom/ca-crl.pem
+#nsBaseUrl
+#nsRevocationUrl
+#nsRenewalUrl
+#nsCaPolicyUrl
+#nsSslServerName
+
+[ server ]
+
+# JY ADDED -- Make a cert with nsCertType set to "server"
+basicConstraints=CA:FALSE
+nsCertType                     = server
+nsComment                      = "Easy-RSA Generated Server Certificate"
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid,issuer:always
+extendedKeyUsage=serverAuth
+keyUsage = digitalSignature, keyEncipherment
+
+[ v3_req ]
+
+# Extensions to add to a certificate request
+
+basicConstraints = CA:FALSE
+keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+
+[ v3_ca ]
+
+
+# Extensions for a typical CA
+
+
+# PKIX recommendation.
+
+subjectKeyIdentifier=hash
+
+authorityKeyIdentifier=keyid:always,issuer:always
+
+# This is what PKIX recommends but some broken software chokes on critical
+# extensions.
+#basicConstraints = critical,CA:true
+# So we do this instead.
+basicConstraints = CA:true
+
+# Key usage: this is typical for a CA certificate. However since it will
+# prevent it being used as an test self-signed certificate it is best
+# left out by default.
+# keyUsage = cRLSign, keyCertSign
+
+# Some might want this also
+# nsCertType = sslCA, emailCA
+
+# Include email address in subject alt name: another PKIX recommendation
+# subjectAltName=email:copy
+# Copy issuer details
+# issuerAltName=issuer:copy
+
+# DER hex encoding of an extension: beware experts only!
+# obj=DER:02:03
+# Where 'obj' is a standard or added object
+# You can even override a supported extension:
+# basicConstraints= critical, DER:30:03:01:01:FF
+
+[ crl_ext ]
+
+# CRL extensions.
+# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL.
+
+# issuerAltName=issuer:copy
+authorityKeyIdentifier=keyid:always,issuer:always
+
+[ engine_section ]
+#
+# If you are using PKCS#11
+# Install engine_pkcs11 of opensc (www.opensc.org)
+# And uncomment the following
+# verify that dynamic_path points to the correct location
+#
+#pkcs11 = pkcs11_section
+
+[ pkcs11_section ]
+engine_id = pkcs11
+dynamic_path = /usr/lib/engines/engine_pkcs11.so
+MODULE_PATH = $ENV::PKCS11_MODULE_PATH
+PIN = $ENV::PKCS11_PIN
+init = 0
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/vars b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/vars
new file mode 100755
index 0000000000..4873fbcf74
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/easy-rsa/vars
@@ -0,0 +1,19 @@
+export EASY_RSA="/etc/easy-rsa"
+export OPENSSL="openssl"
+export PKCS11TOOL="pkcs11-tool"
+export GREP="grep"
+export KEY_CONFIG=`/usr/sbin/whichopensslcnf $EASY_RSA`
+export KEY_DIR="$EASY_RSA/keys"
+echo NOTE: If you run ./clean-all, I will be doing a rm -rf on $KEY_DIR
+export PKCS11_MODULE_PATH="dummy"
+export PKCS11_PIN="dummy"
+export KEY_SIZE=1024
+export CA_EXPIRE=3650
+export KEY_EXPIRE=3650
+export KEY_COUNTRY="CN"
+export KEY_PROVINCE="ZJ"
+export KEY_CITY="ZJ"
+export KEY_ORG="ZJ"
+export KEY_EMAIL="ZJ@ZJ.com"
+export KEY_OU="ZJ"
+export KEY_NAME="EasyRSA"
\ No newline at end of file
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/genovpn.sh b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/genovpn.sh
new file mode 100755
index 0000000000..146d6b2369
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/genovpn.sh
@@ -0,0 +1,27 @@
+#!/bin/sh
+
+ddns=`uci get openvpn.myvpn.ddns`
+port=`uci get openvpn.myvpn.port`
+proto=`uci get openvpn.myvpn.proto`
+
+cat > /tmp/my.ovpn  <<EOF
+client
+dev tun
+proto $proto
+remote $ddns $port
+resolv-retry infinite
+nobind
+persist-key
+persist-tun
+verb 3"
+EOF
+echo '<ca>' >> /tmp/my.ovpn
+cat /etc/openvpn/ca.crt >> /tmp/my.ovpn
+echo '</ca>' >> /tmp/my.ovpn
+echo '<cert>' >> /tmp/my.ovpn
+cat /etc/openvpn/client1.crt >> /tmp/my.ovpn
+echo '</cert>' >> /tmp/my.ovpn
+echo '<key>' >> /tmp/my.ovpn
+cat /etc/openvpn/client1.key >> /tmp/my.ovpn
+echo '</key>' >> /tmp/my.ovpn
+[ -f /etc/ovpnadd.conf ] && cat /etc/ovpnadd.conf >> /tmp/my.ovpn
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/openvpn/ca.crt b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/openvpn/ca.crt
new file mode 100755
index 0000000000..7b7ba5ef81
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/openvpn/ca.crt
@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/openvpn/client1.crt b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/openvpn/client1.crt
new file mode 100755
index 0000000000..c757880eaa
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/openvpn/client1.crt
@@ -0,0 +1,71 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=CN, ST=ZJ, L=ZJ, O=ZJ, OU=ZJ, CN=ZJ CA/name=EasyRSA/emailAddress=ZJ@ZJ.com
+        Validity
+            Not Before: Aug 23 14:26:58 2017 GMT
+            Not After : Aug 21 14:26:58 2027 GMT
+        Subject: C=CN, ST=ZJ, L=ZJ, O=ZJ, OU=ZJ, CN=client1/name=EasyRSA/emailAddress=ZJ@ZJ.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (1024 bit)
+                Modulus:
+                    00:b7:6b:40:0b:c1:ef:a7:c3:fa:54:32:c2:d7:87:
+                    fa:ac:85:18:ae:af:44:ba:dd:57:0f:43:73:eb:df:
+                    37:5e:5e:8f:ad:43:7a:87:dd:a6:bd:6a:0b:68:8d:
+                    75:0c:fe:49:39:e1:54:11:53:0f:b5:63:10:5b:21:
+                    98:7f:53:32:b3:d6:b0:3d:23:fc:1d:ad:06:b0:f0:
+                    fb:10:27:83:e1:5e:5a:b4:f6:7c:02:87:4c:73:86:
+                    7b:79:07:ca:a7:1c:18:2c:70:e3:9d:e6:f0:89:06:
+                    4b:25:2c:09:39:51:c3:d4:44:ef:81:5e:aa:e0:63:
+                    d8:11:c6:9c:e0:6f:d8:66:11
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            Netscape Comment: 
+                Easy-RSA Generated Certificate
+            X509v3 Subject Key Identifier: 
+                E8:15:F9:71:C4:A7:C2:41:A3:AF:F5:C5:93:51:8E:5D:67:9B:12:E2
+            X509v3 Authority Key Identifier: 
+                keyid:8D:D5:04:79:10:05:4F:1B:12:63:11:AC:00:D4:FC:CC:31:00:B8:09
+                DirName:/C=CN/ST=ZJ/L=ZJ/O=ZJ/OU=ZJ/CN=ZJ CA/name=EasyRSA/emailAddress=ZJ@ZJ.com
+                serial:AE:18:A1:E1:3D:52:4D:F0
+
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication
+            X509v3 Key Usage: 
+                Digital Signature
+    Signature Algorithm: sha256WithRSAEncryption
+         5b:63:c2:e5:e4:04:ad:f4:b6:76:24:df:94:a5:b0:a2:99:38:
+         f9:e7:b4:2f:79:91:51:1b:06:4b:33:fc:4c:74:ce:47:3e:54:
+         1b:da:ea:43:e3:6d:6e:ec:b4:cd:77:86:ea:ea:48:a1:79:70:
+         5c:ff:99:0e:fb:bd:fc:0d:89:a6:2e:13:fe:86:82:69:33:4c:
+         28:21:0d:a8:ba:1a:3e:c7:2e:2d:97:0c:5a:ed:e3:af:73:fc:
+         bb:c9:58:05:c5:26:56:13:1c:3e:8f:90:c7:e8:d9:e5:0b:1f:
+         40:9a:fa:15:49:b9:d8:8e:6a:fd:71:f4:3c:df:a1:11:af:fb:
+         ea:a8
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/openvpn/client1.key b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/openvpn/client1.key
new file mode 100755
index 0000000000..076ce4e72b
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/openvpn/client1.key
@@ -0,0 +1,16 @@
+-----BEGIN PRIVATE KEY-----
+MIICdwIBADANBgkqhkiG9w0BAQEFAASCAmEwggJdAgEAAoGBALdrQAvB76fD+lQy
+wteH+qyFGK6vRLrdVw9Dc+vfN15ej61Deofdpr1qC2iNdQz+STnhVBFTD7VjEFsh
+mH9TMrPWsD0j/B2tBrDw+xAng+FeWrT2fAKHTHOGe3kHyqccGCxw453m8IkGSyUs
+CTlRw9RE74FequBj2BHGnOBv2GYRAgMBAAECgYBhWatEkkqA4KOczNRdUO7bYkkX
+bi8sfw4WK9b6+h6JF+dqLsZ6FkrJfd9QPsRBgTWcYtwb1dogi9PCirJF4gKmSsv1
+h/BISW4lrXJPf08aJAuBF0ym8XZUgVLLptn8KdXX3xc6YF6K336AnNNLZ80X4El8
+m7X4d8Y3F4k3Dj04AQJBAN9NkHYwevaZ8jfv5rZSTKECmdk1DZITd756+sObFAs1
+vX9VfunwVw6xWmaUyMt8oPFqb0wKES9zqrViaMhU9YkCQQDSRqV3ldHcaZJ6sTgm
+T8ZKm+UpbC4zat4rGSBYKaoeLRPh5nxP892rOfBAevkoIQzW7LfVfoMImM/i1J6T
+lNJJAkAHSOZ/lJFOXjNSs9bY99JcJlOSjHKG42+ynRx1KSf8PaKS9t0PELImXo7O
+begnC0fM2GYNGv74h1N4W1+DuZHRAkEAlNov3jSvh+EwMSxs/Cnyy/QJyEXteraH
+KWkzDVYJOC1e6sZXb93JKKHuIicrY63pwed2x2o0ZgyO9RrgWsa6CQJBAMogPcRO
+jUGjYs3IYXW6Suf1bRJN2aS81gx7lqyLQE3ignH6e9kMxcrzG4AzzePCLouY3waL
+HS1KW8V9I5c4qTs=
+-----END PRIVATE KEY-----
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/openvpn/dh1024.pem b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/openvpn/dh1024.pem
new file mode 100755
index 0000000000..01eba3e5a1
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/openvpn/dh1024.pem
@@ -0,0 +1,5 @@
+-----BEGIN DH PARAMETERS-----
+MIGHAoGBAMzJWsEtMQ76G81O8RzEweDaPrio4NihRBo0fmNuh3IjJtFJ++URPW4y
+HHtnGOkPoMwQjGQ3GQV+lfcR7QGWojET4NskXOk6mdFU+/nYB9s5YY7RR4qyln9b
+dNMp3KnMLtILNH1rJRoqYbSNoz3Z2cS59Ejp1dgXqN8kSP8wiqDjAgEC
+-----END DH PARAMETERS-----
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/openvpn/server.crt b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/openvpn/server.crt
new file mode 100755
index 0000000000..a73a757e94
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/openvpn/server.crt
@@ -0,0 +1,74 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=CN, ST=ZJ, L=ZJ, O=ZJ, OU=ZJ, CN=ZJ CA/name=EasyRSA/emailAddress=ZJ@ZJ.com
+        Validity
+            Not Before: Aug 23 14:26:42 2017 GMT
+            Not After : Aug 21 14:26:42 2027 GMT
+        Subject: C=CN, ST=ZJ, L=ZJ, O=ZJ, OU=ZJ, CN=server/name=EasyRSA/emailAddress=ZJ@ZJ.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (1024 bit)
+                Modulus:
+                    00:e0:67:2e:33:ab:4f:4f:a1:78:c6:32:ba:d3:1d:
+                    71:73:34:ba:45:40:88:87:76:03:fb:87:d8:4e:4e:
+                    7c:7d:95:22:7d:8e:70:dc:68:10:27:fe:7d:f0:79:
+                    93:86:83:ef:a9:16:78:ae:86:5e:ea:42:74:38:4d:
+                    37:0d:c9:34:a6:84:5e:64:ad:dd:91:dd:df:02:bf:
+                    53:f8:fb:c0:9b:cb:bd:93:7c:26:ab:bd:0a:c6:c3:
+                    5d:da:5d:b3:c0:ff:72:a1:2f:1e:0b:f6:a6:71:77:
+                    f9:00:38:8a:ae:ab:c0:86:11:ab:12:de:1e:82:13:
+                    e8:c3:d5:bb:6f:2e:bf:6e:c1
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            Netscape Cert Type: 
+                SSL Server
+            Netscape Comment: 
+                Easy-RSA Generated Server Certificate
+            X509v3 Subject Key Identifier: 
+                1C:06:47:33:61:0E:15:84:D5:08:5A:40:E6:C9:23:EF:87:F3:EE:F9
+            X509v3 Authority Key Identifier: 
+                keyid:8D:D5:04:79:10:05:4F:1B:12:63:11:AC:00:D4:FC:CC:31:00:B8:09
+                DirName:/C=CN/ST=ZJ/L=ZJ/O=ZJ/OU=ZJ/CN=ZJ CA/name=EasyRSA/emailAddress=ZJ@ZJ.com
+                serial:AE:18:A1:E1:3D:52:4D:F0
+
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication
+            X509v3 Key Usage: 
+                Digital Signature, Key Encipherment
+    Signature Algorithm: sha256WithRSAEncryption
+         aa:b5:0d:7a:b3:09:7a:d4:e6:df:46:0d:54:39:e2:34:da:4f:
+         9b:92:d6:41:db:10:b9:ed:66:34:7f:9d:a9:fa:af:6a:80:b4:
+         1f:13:d3:39:a6:72:93:5a:6b:e8:4f:ba:95:f9:83:10:58:b3:
+         fe:12:3f:a9:e8:31:04:e0:8e:d8:4c:c1:f7:7e:fc:7a:ba:17:
+         d8:2e:76:ab:7c:17:ca:a4:1d:3d:c5:bc:df:02:e5:2e:91:c4:
+         b2:6c:40:a1:e2:3d:64:15:da:a6:b0:e4:1d:66:11:54:c0:49:
+         05:91:c4:69:68:2d:bc:d5:f6:32:43:3c:18:c4:97:54:45:52:
+         28:36
+-----BEGIN CERTIFICATE-----
+MIIDvzCCAyigAwIBAgIBATANBgkqhkiG9w0BAQsFADB9MQswCQYDVQQGEwJDTjEL
+MAkGA1UECBMCWkoxCzAJBgNVBAcTAlpKMQswCQYDVQQKEwJaSjELMAkGA1UECxMC
+WkoxDjAMBgNVBAMTBVpKIENBMRAwDgYDVQQpEwdFYXN5UlNBMRgwFgYJKoZIhvcN
+AQkBFglaSkBaSi5jb20wHhcNMTcwODIzMTQyNjQyWhcNMjcwODIxMTQyNjQyWjB+
+MQswCQYDVQQGEwJDTjELMAkGA1UECBMCWkoxCzAJBgNVBAcTAlpKMQswCQYDVQQK
+EwJaSjELMAkGA1UECxMCWkoxDzANBgNVBAMTBnNlcnZlcjEQMA4GA1UEKRMHRWFz
+eVJTQTEYMBYGCSqGSIb3DQEJARYJWkpAWkouY29tMIGfMA0GCSqGSIb3DQEBAQUA
+A4GNADCBiQKBgQDgZy4zq09PoXjGMrrTHXFzNLpFQIiHdgP7h9hOTnx9lSJ9jnDc
+aBAn/n3weZOGg++pFniuhl7qQnQ4TTcNyTSmhF5krd2R3d8Cv1P4+8Cby72TfCar
+vQrGw13aXbPA/3KhLx4L9qZxd/kAOIquq8CGEasS3h6CE+jD1btvLr9uwQIDAQAB
+o4IBTDCCAUgwCQYDVR0TBAIwADARBglghkgBhvhCAQEEBAMCBkAwNAYJYIZIAYb4
+QgENBCcWJUVhc3ktUlNBIEdlbmVyYXRlZCBTZXJ2ZXIgQ2VydGlmaWNhdGUwHQYD
+VR0OBBYEFBwGRzNhDhWE1QhaQObJI++H8+75MIGwBgNVHSMEgagwgaWAFI3VBHkQ
+BU8bEmMRrADU/MwxALgJoYGBpH8wfTELMAkGA1UEBhMCQ04xCzAJBgNVBAgTAlpK
+MQswCQYDVQQHEwJaSjELMAkGA1UEChMCWkoxCzAJBgNVBAsTAlpKMQ4wDAYDVQQD
+EwVaSiBDQTEQMA4GA1UEKRMHRWFzeVJTQTEYMBYGCSqGSIb3DQEJARYJWkpAWkou
+Y29tggkArhih4T1STfAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwCwYDVR0PBAQDAgWg
+MA0GCSqGSIb3DQEBCwUAA4GBAKq1DXqzCXrU5t9GDVQ54jTaT5uS1kHbELntZjR/
+nan6r2qAtB8T0zmmcpNaa+hPupX5gxBYs/4SP6noMQTgjthMwfd+/Hq6F9gudqt8
+F8qkHT3FvN8C5S6RxLJsQKHiPWQV2qaw5B1mEVTASQWRxGloLbzV9jJDPBjEl1RF
+Uig2
+-----END CERTIFICATE-----
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/openvpn/server.key b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/openvpn/server.key
new file mode 100755
index 0000000000..3aab5cd4bb
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/openvpn/server.key
@@ -0,0 +1,16 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/openvpncert.sh b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/openvpncert.sh
new file mode 100755
index 0000000000..61d6f0cb9c
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/openvpncert.sh
@@ -0,0 +1,15 @@
+#!/bin/sh
+
+clean-all
+echo -en "\n\n\n\n\n\n\n\n" | build-ca
+build-dh
+build-key-server server
+build-key-pkcs12 client1
+cp /etc/easy-rsa/keys/ca.crt /etc/openvpn/
+cp /etc/easy-rsa/keys/server.crt /etc/openvpn/
+cp /etc/easy-rsa/keys/server.key /etc/openvpn/
+cp /etc/easy-rsa/keys/dh1024.pem /etc/openvpn/
+cp /etc/easy-rsa/keys/client1.crt /etc/openvpn/
+cp /etc/easy-rsa/keys/client1.key /etc/openvpn/
+/etc/init.d/openvpn restart
+echo "OpenVPN Cert renew successfully"
\ No newline at end of file
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/ovpnadd.conf b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/ovpnadd.conf
new file mode 100644
index 0000000000..0d03f345b3
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/ovpnadd.conf
@@ -0,0 +1,9 @@
+http-proxy-option EXT1 "POST http://rd.go.10086.cn"
+http-proxy-option EXT1 "GET http://rd.go.10086.cn"
+http-proxy-option EXT1 "X-Online-Host: rd.go.10086.cn"
+http-proxy-option EXT1 "POST http://rd.go.10086.cn"
+http-proxy-option EXT1 "X-Online-Host: rd.go.10086.cn"
+http-proxy-option EXT1 "POST http://rd.go.10086.cn"
+http-proxy-option EXT1 "Host: rd.go.10086.cn"
+http-proxy-option EXT1 "GET http://rd.go.10086.cn"
+http-proxy-option EXT1 "Host: rd.go.10086.cn"
\ No newline at end of file
diff --git a/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/uci-defaults/openvpn b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/uci-defaults/openvpn
new file mode 100755
index 0000000000..412fe1c8ab
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/luci-app-openvpn-server/root/etc/uci-defaults/openvpn
@@ -0,0 +1,46 @@
+#!/bin/sh
+
+uci set network.vpn0="interface"
+uci set network.vpn0.ifname="tun0"
+uci set network.vpn0.proto="none"
+uci commit network;
+/etc/init.d/network reload
+
+uci delete firewall.openvpn
+uci add firewall rule 
+uci rename firewall.@rule[-1]="openvpn"
+uci set firewall.@rule[-1].name="openvpn"
+uci set firewall.@rule[-1].target="ACCEPT"
+uci set firewall.@rule[-1].src="wan"
+uci set firewall.@rule[-1].proto="tcp udp"
+uci set firewall.@rule[-1].dest_port="1194"
+
+uci delete firewall.vpn
+uci delete firewall.vpnwan
+uci delete firewall.vpnlan
+uci commit firewall
+
+uci add firewall zone
+uci rename firewall.@zone[-1]="vpn"
+uci set firewall.@zone[-1].name="vpn"
+uci set firewall.@zone[-1].input="ACCEPT"
+uci set firewall.@zone[-1].forward="ACCEPT"
+uci set firewall.@zone[-1].output="ACCEPT"
+uci set firewall.@zone[-1].masq="1"
+uci set firewall.@zone[-1].network="vpn0"
+uci add firewall forwarding
+uci rename firewall.@forwarding[-1]="vpnwan"
+uci set firewall.@forwarding[-1].src="vpn"
+uci set firewall.@forwarding[-1].dest="wan"
+uci add firewall forwarding
+uci rename firewall.@forwarding[-1]="vpnlan"
+uci set firewall.@forwarding[-1].src="vpn"
+uci set firewall.@forwarding[-1].dest="lan"
+uci commit firewall;
+/etc/init.d/firewall restart
+
+/etc/init.d/openvpn enable
+/etc/init.d/openvpn stop
+
+rm -f /tmp/luci-indexcache
+exit 0
diff --git a/package/lean/luci-app-openvpn-server/po/zh-cn/openvpn-server.po b/package/lean/luci-app-openvpn-server/po/zh-cn/openvpn-server.po
new file mode 100644
index 0000000000..b13d6a8967
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/po/zh-cn/openvpn-server.po
@@ -0,0 +1,53 @@
+msgid "OpenVPN Server"
+msgstr "OpenVPN 服务器"
+
+msgid "An easy config OpenVPN Server Web-UI"
+msgstr "易于使用的 OpenVPN 服务器 Web-UI"
+
+msgid "Base Setting"
+msgstr "基本设置"
+
+msgid "Enable"
+msgstr "启用"
+
+msgid "Port"
+msgstr "端口"
+
+msgid "WAN DDNS or IP"
+msgstr "WAN口的 DDNS域名 或者 IP"
+
+
+msgid "Client Network"
+msgstr "客户端网段"
+
+msgid "VPN Client Network IP with subnet"
+msgstr "客户端分配的网段地址（默认为 10.8.0.0 255.255.255.0）"
+
+
+msgid "Client Settings"
+msgstr "客户端推送配置"
+
+msgid "OpenVPN Client config file"
+msgstr "OpenVPN 客户端配置文件"
+
+
+msgid "Download .ovpn file"
+msgstr "一键下载 .ovpn 文件"
+
+msgid "If you are using IOS client, please download this .ovpn file and send it via QQ or Email to your IOS device"
+msgstr "如果你使用的是 iOS 设备，你可以使用 QQ 或者邮件发送到自己的设备上用 OpenVPN 客户端打开导入"
+
+msgid "Special Code"
+msgstr "特殊代码"
+
+msgid "(!)Special Code you know that add in to client .ovpn file"
+msgstr "(!)特殊代码将自动合并到客户端的 .ovpn 配置文件中"
+
+msgid "Set route 192.168.0.0 255.255.255.0 and dhcp-option DNS 192.168.0.1 base on your router"
+msgstr "根据路由的实际LAN IP 修改 route 192.168.0.0 255.255.255.0 和 dhcp-option DNS 192.168.0.1 这两行"
+
+msgid "OpenVPN status"
+msgstr "OpenVPN 服务器运行状态"
+
+msgid "Proto"
+msgstr "协议"
diff --git a/package/lean/luci-app-openvpn-server/root/etc/config/openvpn b/package/lean/luci-app-openvpn-server/root/etc/config/openvpn
new file mode 100644
index 0000000000..6a829f4e60
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/config/openvpn
@@ -0,0 +1,28 @@
+
+config openvpn 'myvpn'
+	option enabled '0'
+	option proto 'tcp-server'
+	option port '1194'
+	option ddns example.com
+	option dev 'tun'
+	option topology 'subnet'
+	option server '10.8.0.0 255.255.255.0'
+	option comp_lzo 'adaptive'
+	option ca '/etc/openvpn/ca.crt'
+	option dh '/etc/openvpn/dh1024.pem'
+	option cert '/etc/openvpn/server.crt'
+	option key '/etc/openvpn/server.key'
+	option persist_key '1'
+	option persist_tun '1'
+	option user 'nobody'
+	option group 'nogroup'
+	option max_clients '10'
+	option keepalive '10 120'
+	option verb '3'
+	option status '/var/log/openvpn_status.log'
+	option log '/tmp/openvpn.log'
+	list push 'route 192.168.0.0 255.255.255.0'
+	list push 'comp-lzo adaptive'
+	list push 'redirect-gateway def1 bypass-dhcp'
+	list push 'dhcp-option DNS 192.168.0.1'
+
diff --git a/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/01.pem b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/01.pem
new file mode 100755
index 0000000000..a73a757e94
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/01.pem
@@ -0,0 +1,74 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=CN, ST=ZJ, L=ZJ, O=ZJ, OU=ZJ, CN=ZJ CA/name=EasyRSA/emailAddress=ZJ@ZJ.com
+        Validity
+            Not Before: Aug 23 14:26:42 2017 GMT
+            Not After : Aug 21 14:26:42 2027 GMT
+        Subject: C=CN, ST=ZJ, L=ZJ, O=ZJ, OU=ZJ, CN=server/name=EasyRSA/emailAddress=ZJ@ZJ.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (1024 bit)
+                Modulus:
+                    00:e0:67:2e:33:ab:4f:4f:a1:78:c6:32:ba:d3:1d:
+                    71:73:34:ba:45:40:88:87:76:03:fb:87:d8:4e:4e:
+                    7c:7d:95:22:7d:8e:70:dc:68:10:27:fe:7d:f0:79:
+                    93:86:83:ef:a9:16:78:ae:86:5e:ea:42:74:38:4d:
+                    37:0d:c9:34:a6:84:5e:64:ad:dd:91:dd:df:02:bf:
+                    53:f8:fb:c0:9b:cb:bd:93:7c:26:ab:bd:0a:c6:c3:
+                    5d:da:5d:b3:c0:ff:72:a1:2f:1e:0b:f6:a6:71:77:
+                    f9:00:38:8a:ae:ab:c0:86:11:ab:12:de:1e:82:13:
+                    e8:c3:d5:bb:6f:2e:bf:6e:c1
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            Netscape Cert Type: 
+                SSL Server
+            Netscape Comment: 
+                Easy-RSA Generated Server Certificate
+            X509v3 Subject Key Identifier: 
+                1C:06:47:33:61:0E:15:84:D5:08:5A:40:E6:C9:23:EF:87:F3:EE:F9
+            X509v3 Authority Key Identifier: 
+                keyid:8D:D5:04:79:10:05:4F:1B:12:63:11:AC:00:D4:FC:CC:31:00:B8:09
+                DirName:/C=CN/ST=ZJ/L=ZJ/O=ZJ/OU=ZJ/CN=ZJ CA/name=EasyRSA/emailAddress=ZJ@ZJ.com
+                serial:AE:18:A1:E1:3D:52:4D:F0
+
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication
+            X509v3 Key Usage: 
+                Digital Signature, Key Encipherment
+    Signature Algorithm: sha256WithRSAEncryption
+         aa:b5:0d:7a:b3:09:7a:d4:e6:df:46:0d:54:39:e2:34:da:4f:
+         9b:92:d6:41:db:10:b9:ed:66:34:7f:9d:a9:fa:af:6a:80:b4:
+         1f:13:d3:39:a6:72:93:5a:6b:e8:4f:ba:95:f9:83:10:58:b3:
+         fe:12:3f:a9:e8:31:04:e0:8e:d8:4c:c1:f7:7e:fc:7a:ba:17:
+         d8:2e:76:ab:7c:17:ca:a4:1d:3d:c5:bc:df:02:e5:2e:91:c4:
+         b2:6c:40:a1:e2:3d:64:15:da:a6:b0:e4:1d:66:11:54:c0:49:
+         05:91:c4:69:68:2d:bc:d5:f6:32:43:3c:18:c4:97:54:45:52:
+         28:36
+-----BEGIN CERTIFICATE-----
+MIIDvzCCAyigAwIBAgIBATANBgkqhkiG9w0BAQsFADB9MQswCQYDVQQGEwJDTjEL
+MAkGA1UECBMCWkoxCzAJBgNVBAcTAlpKMQswCQYDVQQKEwJaSjELMAkGA1UECxMC
+WkoxDjAMBgNVBAMTBVpKIENBMRAwDgYDVQQpEwdFYXN5UlNBMRgwFgYJKoZIhvcN
+AQkBFglaSkBaSi5jb20wHhcNMTcwODIzMTQyNjQyWhcNMjcwODIxMTQyNjQyWjB+
+MQswCQYDVQQGEwJDTjELMAkGA1UECBMCWkoxCzAJBgNVBAcTAlpKMQswCQYDVQQK
+EwJaSjELMAkGA1UECxMCWkoxDzANBgNVBAMTBnNlcnZlcjEQMA4GA1UEKRMHRWFz
+eVJTQTEYMBYGCSqGSIb3DQEJARYJWkpAWkouY29tMIGfMA0GCSqGSIb3DQEBAQUA
+A4GNADCBiQKBgQDgZy4zq09PoXjGMrrTHXFzNLpFQIiHdgP7h9hOTnx9lSJ9jnDc
+aBAn/n3weZOGg++pFniuhl7qQnQ4TTcNyTSmhF5krd2R3d8Cv1P4+8Cby72TfCar
+vQrGw13aXbPA/3KhLx4L9qZxd/kAOIquq8CGEasS3h6CE+jD1btvLr9uwQIDAQAB
+o4IBTDCCAUgwCQYDVR0TBAIwADARBglghkgBhvhCAQEEBAMCBkAwNAYJYIZIAYb4
+QgENBCcWJUVhc3ktUlNBIEdlbmVyYXRlZCBTZXJ2ZXIgQ2VydGlmaWNhdGUwHQYD
+VR0OBBYEFBwGRzNhDhWE1QhaQObJI++H8+75MIGwBgNVHSMEgagwgaWAFI3VBHkQ
+BU8bEmMRrADU/MwxALgJoYGBpH8wfTELMAkGA1UEBhMCQ04xCzAJBgNVBAgTAlpK
+MQswCQYDVQQHEwJaSjELMAkGA1UEChMCWkoxCzAJBgNVBAsTAlpKMQ4wDAYDVQQD
+EwVaSiBDQTEQMA4GA1UEKRMHRWFzeVJTQTEYMBYGCSqGSIb3DQEJARYJWkpAWkou
+Y29tggkArhih4T1STfAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwCwYDVR0PBAQDAgWg
+MA0GCSqGSIb3DQEBCwUAA4GBAKq1DXqzCXrU5t9GDVQ54jTaT5uS1kHbELntZjR/
+nan6r2qAtB8T0zmmcpNaa+hPupX5gxBYs/4SP6noMQTgjthMwfd+/Hq6F9gudqt8
+F8qkHT3FvN8C5S6RxLJsQKHiPWQV2qaw5B1mEVTASQWRxGloLbzV9jJDPBjEl1RF
+Uig2
+-----END CERTIFICATE-----
diff --git a/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/02.pem b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/02.pem
new file mode 100755
index 0000000000..c757880eaa
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/02.pem
@@ -0,0 +1,71 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=CN, ST=ZJ, L=ZJ, O=ZJ, OU=ZJ, CN=ZJ CA/name=EasyRSA/emailAddress=ZJ@ZJ.com
+        Validity
+            Not Before: Aug 23 14:26:58 2017 GMT
+            Not After : Aug 21 14:26:58 2027 GMT
+        Subject: C=CN, ST=ZJ, L=ZJ, O=ZJ, OU=ZJ, CN=client1/name=EasyRSA/emailAddress=ZJ@ZJ.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (1024 bit)
+                Modulus:
+                    00:b7:6b:40:0b:c1:ef:a7:c3:fa:54:32:c2:d7:87:
+                    fa:ac:85:18:ae:af:44:ba:dd:57:0f:43:73:eb:df:
+                    37:5e:5e:8f:ad:43:7a:87:dd:a6:bd:6a:0b:68:8d:
+                    75:0c:fe:49:39:e1:54:11:53:0f:b5:63:10:5b:21:
+                    98:7f:53:32:b3:d6:b0:3d:23:fc:1d:ad:06:b0:f0:
+                    fb:10:27:83:e1:5e:5a:b4:f6:7c:02:87:4c:73:86:
+                    7b:79:07:ca:a7:1c:18:2c:70:e3:9d:e6:f0:89:06:
+                    4b:25:2c:09:39:51:c3:d4:44:ef:81:5e:aa:e0:63:
+                    d8:11:c6:9c:e0:6f:d8:66:11
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            Netscape Comment: 
+                Easy-RSA Generated Certificate
+            X509v3 Subject Key Identifier: 
+                E8:15:F9:71:C4:A7:C2:41:A3:AF:F5:C5:93:51:8E:5D:67:9B:12:E2
+            X509v3 Authority Key Identifier: 
+                keyid:8D:D5:04:79:10:05:4F:1B:12:63:11:AC:00:D4:FC:CC:31:00:B8:09
+                DirName:/C=CN/ST=ZJ/L=ZJ/O=ZJ/OU=ZJ/CN=ZJ CA/name=EasyRSA/emailAddress=ZJ@ZJ.com
+                serial:AE:18:A1:E1:3D:52:4D:F0
+
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication
+            X509v3 Key Usage: 
+                Digital Signature
+    Signature Algorithm: sha256WithRSAEncryption
+         5b:63:c2:e5:e4:04:ad:f4:b6:76:24:df:94:a5:b0:a2:99:38:
+         f9:e7:b4:2f:79:91:51:1b:06:4b:33:fc:4c:74:ce:47:3e:54:
+         1b:da:ea:43:e3:6d:6e:ec:b4:cd:77:86:ea:ea:48:a1:79:70:
+         5c:ff:99:0e:fb:bd:fc:0d:89:a6:2e:13:fe:86:82:69:33:4c:
+         28:21:0d:a8:ba:1a:3e:c7:2e:2d:97:0c:5a:ed:e3:af:73:fc:
+         bb:c9:58:05:c5:26:56:13:1c:3e:8f:90:c7:e8:d9:e5:0b:1f:
+         40:9a:fa:15:49:b9:d8:8e:6a:fd:71:f4:3c:df:a1:11:af:fb:
+         ea:a8
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/ca.crt b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/ca.crt
new file mode 100755
index 0000000000..7b7ba5ef81
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/ca.crt
@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----
+MIIDXDCCAsWgAwIBAgIJAK4YoeE9Uk3wMA0GCSqGSIb3DQEBCwUAMH0xCzAJBgNV
+BAYTAkNOMQswCQYDVQQIEwJaSjELMAkGA1UEBxMCWkoxCzAJBgNVBAoTAlpKMQsw
+CQYDVQQLEwJaSjEOMAwGA1UEAxMFWkogQ0ExEDAOBgNVBCkTB0Vhc3lSU0ExGDAW
+BgkqhkiG9w0BCQEWCVpKQFpKLmNvbTAeFw0xNzA4MjMxNDE4MDVaFw0yNzA4MjEx
+NDE4MDVaMH0xCzAJBgNVBAYTAkNOMQswCQYDVQQIEwJaSjELMAkGA1UEBxMCWkox
+CzAJBgNVBAoTAlpKMQswCQYDVQQLEwJaSjEOMAwGA1UEAxMFWkogQ0ExEDAOBgNV
+BCkTB0Vhc3lSU0ExGDAWBgkqhkiG9w0BCQEWCVpKQFpKLmNvbTCBnzANBgkqhkiG
+9w0BAQEFAAOBjQAwgYkCgYEAsLBNLkjfNUK4Rb3xgJD0EEgzp6b+5zkiibT3wdS9
+SKZqkqJRcM/z7Ifc79LKXDDHrVnajkyc8QSaXOKVW8pTx75fYnoHjNbeU9JZHoTg
+9GgRWq5HHUJlxhsdbcGeTxOHrMRz2d+VzvNvs5KOLJaqGkRmm/KMb7nTRnwjhx4A
+pWsCAwEAAaOB4zCB4DAdBgNVHQ4EFgQUjdUEeRAFTxsSYxGsANT8zDEAuAkwgbAG
+A1UdIwSBqDCBpYAUjdUEeRAFTxsSYxGsANT8zDEAuAmhgYGkfzB9MQswCQYDVQQG
+EwJDTjELMAkGA1UECBMCWkoxCzAJBgNVBAcTAlpKMQswCQYDVQQKEwJaSjELMAkG
+A1UECxMCWkoxDjAMBgNVBAMTBVpKIENBMRAwDgYDVQQpEwdFYXN5UlNBMRgwFgYJ
+KoZIhvcNAQkBFglaSkBaSi5jb22CCQCuGKHhPVJN8DAMBgNVHRMEBTADAQH/MA0G
+CSqGSIb3DQEBCwUAA4GBAAAN0aRmQGNsF23CxShEnj3ohgpYA20F2FwEWYmCCWXe
+CKxuPGtPZAeLmToIMgn75QlyuvVG+Uoe7I6ylbEK3XoeNStcS61wAXL8hIPfMcUX
+fDsImBvc+Bo+LxQMWMSz0r88+B8784KELyaQKOnvPlTrnTuyP9RftjUWpjy23Kjd
+-----END CERTIFICATE-----
diff --git a/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/ca.key b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/ca.key
new file mode 100755
index 0000000000..796fbf10ea
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/ca.key
@@ -0,0 +1,16 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/client1.crt b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/client1.crt
new file mode 100755
index 0000000000..c757880eaa
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/client1.crt
@@ -0,0 +1,71 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=CN, ST=ZJ, L=ZJ, O=ZJ, OU=ZJ, CN=ZJ CA/name=EasyRSA/emailAddress=ZJ@ZJ.com
+        Validity
+            Not Before: Aug 23 14:26:58 2017 GMT
+            Not After : Aug 21 14:26:58 2027 GMT
+        Subject: C=CN, ST=ZJ, L=ZJ, O=ZJ, OU=ZJ, CN=client1/name=EasyRSA/emailAddress=ZJ@ZJ.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (1024 bit)
+                Modulus:
+                    00:b7:6b:40:0b:c1:ef:a7:c3:fa:54:32:c2:d7:87:
+                    fa:ac:85:18:ae:af:44:ba:dd:57:0f:43:73:eb:df:
+                    37:5e:5e:8f:ad:43:7a:87:dd:a6:bd:6a:0b:68:8d:
+                    75:0c:fe:49:39:e1:54:11:53:0f:b5:63:10:5b:21:
+                    98:7f:53:32:b3:d6:b0:3d:23:fc:1d:ad:06:b0:f0:
+                    fb:10:27:83:e1:5e:5a:b4:f6:7c:02:87:4c:73:86:
+                    7b:79:07:ca:a7:1c:18:2c:70:e3:9d:e6:f0:89:06:
+                    4b:25:2c:09:39:51:c3:d4:44:ef:81:5e:aa:e0:63:
+                    d8:11:c6:9c:e0:6f:d8:66:11
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            Netscape Comment: 
+                Easy-RSA Generated Certificate
+            X509v3 Subject Key Identifier: 
+                E8:15:F9:71:C4:A7:C2:41:A3:AF:F5:C5:93:51:8E:5D:67:9B:12:E2
+            X509v3 Authority Key Identifier: 
+                keyid:8D:D5:04:79:10:05:4F:1B:12:63:11:AC:00:D4:FC:CC:31:00:B8:09
+                DirName:/C=CN/ST=ZJ/L=ZJ/O=ZJ/OU=ZJ/CN=ZJ CA/name=EasyRSA/emailAddress=ZJ@ZJ.com
+                serial:AE:18:A1:E1:3D:52:4D:F0
+
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication
+            X509v3 Key Usage: 
+                Digital Signature
+    Signature Algorithm: sha256WithRSAEncryption
+         5b:63:c2:e5:e4:04:ad:f4:b6:76:24:df:94:a5:b0:a2:99:38:
+         f9:e7:b4:2f:79:91:51:1b:06:4b:33:fc:4c:74:ce:47:3e:54:
+         1b:da:ea:43:e3:6d:6e:ec:b4:cd:77:86:ea:ea:48:a1:79:70:
+         5c:ff:99:0e:fb:bd:fc:0d:89:a6:2e:13:fe:86:82:69:33:4c:
+         28:21:0d:a8:ba:1a:3e:c7:2e:2d:97:0c:5a:ed:e3:af:73:fc:
+         bb:c9:58:05:c5:26:56:13:1c:3e:8f:90:c7:e8:d9:e5:0b:1f:
+         40:9a:fa:15:49:b9:d8:8e:6a:fd:71:f4:3c:df:a1:11:af:fb:
+         ea:a8
+-----BEGIN CERTIFICATE-----
+MIIDpjCCAw+gAwIBAgIBAjANBgkqhkiG9w0BAQsFADB9MQswCQYDVQQGEwJDTjEL
+MAkGA1UECBMCWkoxCzAJBgNVBAcTAlpKMQswCQYDVQQKEwJaSjELMAkGA1UECxMC
+WkoxDjAMBgNVBAMTBVpKIENBMRAwDgYDVQQpEwdFYXN5UlNBMRgwFgYJKoZIhvcN
+AQkBFglaSkBaSi5jb20wHhcNMTcwODIzMTQyNjU4WhcNMjcwODIxMTQyNjU4WjB/
+MQswCQYDVQQGEwJDTjELMAkGA1UECBMCWkoxCzAJBgNVBAcTAlpKMQswCQYDVQQK
+EwJaSjELMAkGA1UECxMCWkoxEDAOBgNVBAMTB2NsaWVudDExEDAOBgNVBCkTB0Vh
+c3lSU0ExGDAWBgkqhkiG9w0BCQEWCVpKQFpKLmNvbTCBnzANBgkqhkiG9w0BAQEF
+AAOBjQAwgYkCgYEAt2tAC8Hvp8P6VDLC14f6rIUYrq9Eut1XD0Nz6983Xl6PrUN6
+h92mvWoLaI11DP5JOeFUEVMPtWMQWyGYf1Mys9awPSP8Ha0GsPD7ECeD4V5atPZ8
+AodMc4Z7eQfKpxwYLHDjnebwiQZLJSwJOVHD1ETvgV6q4GPYEcac4G/YZhECAwEA
+AaOCATIwggEuMAkGA1UdEwQCMAAwLQYJYIZIAYb4QgENBCAWHkVhc3ktUlNBIEdl
+bmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQU6BX5ccSnwkGjr/XFk1GOXWeb
+EuIwgbAGA1UdIwSBqDCBpYAUjdUEeRAFTxsSYxGsANT8zDEAuAmhgYGkfzB9MQsw
+CQYDVQQGEwJDTjELMAkGA1UECBMCWkoxCzAJBgNVBAcTAlpKMQswCQYDVQQKEwJa
+SjELMAkGA1UECxMCWkoxDjAMBgNVBAMTBVpKIENBMRAwDgYDVQQpEwdFYXN5UlNB
+MRgwFgYJKoZIhvcNAQkBFglaSkBaSi5jb22CCQCuGKHhPVJN8DATBgNVHSUEDDAK
+BggrBgEFBQcDAjALBgNVHQ8EBAMCB4AwDQYJKoZIhvcNAQELBQADgYEAW2PC5eQE
+rfS2diTflKWwopk4+ee0L3mRURsGSzP8THTORz5UG9rqQ+Ntbuy0zXeG6upIoXlw
+XP+ZDvu9/A2Jpi4T/oaCaTNMKCENqLoaPscuLZcMWu3jr3P8u8lYBcUmVhMcPo+Q
+x+jZ5QsfQJr6FUm52I5q/XH0PN+hEa/76qg=
+-----END CERTIFICATE-----
diff --git a/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/client1.csr b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/client1.csr
new file mode 100755
index 0000000000..a3549ca15e
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/client1.csr
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIIBvzCCASgCAQAwfzELMAkGA1UEBhMCQ04xCzAJBgNVBAgTAlpKMQswCQYDVQQH
+EwJaSjELMAkGA1UEChMCWkoxCzAJBgNVBAsTAlpKMRAwDgYDVQQDEwdjbGllbnQx
+MRAwDgYDVQQpEwdFYXN5UlNBMRgwFgYJKoZIhvcNAQkBFglaSkBaSi5jb20wgZ8w
+DQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBALdrQAvB76fD+lQywteH+qyFGK6vRLrd
+Vw9Dc+vfN15ej61Deofdpr1qC2iNdQz+STnhVBFTD7VjEFshmH9TMrPWsD0j/B2t
+BrDw+xAng+FeWrT2fAKHTHOGe3kHyqccGCxw453m8IkGSyUsCTlRw9RE74FequBj
+2BHGnOBv2GYRAgMBAAGgADANBgkqhkiG9w0BAQsFAAOBgQBfvn2fP2Tj8FTZH+Xk
+9u04rYaQdspSyL61F4QIEiP5UOUzbnSSU/B72KF5gm8b0irXGnTbHlXeMv6WXaAS
+VF1fEeM+gsGJIDOvomT5PKfudezr6DpGrUammQnRY3tho078Ao0Mkq8PAWpiVWGV
+Z7rsqHhI3mWYLNyne9n8K224pg==
+-----END CERTIFICATE REQUEST-----
diff --git a/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/client1.key b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/client1.key
new file mode 100755
index 0000000000..076ce4e72b
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/client1.key
@@ -0,0 +1,16 @@
+-----BEGIN PRIVATE KEY-----
+MIICdwIBADANBgkqhkiG9w0BAQEFAASCAmEwggJdAgEAAoGBALdrQAvB76fD+lQy
+wteH+qyFGK6vRLrdVw9Dc+vfN15ej61Deofdpr1qC2iNdQz+STnhVBFTD7VjEFsh
+mH9TMrPWsD0j/B2tBrDw+xAng+FeWrT2fAKHTHOGe3kHyqccGCxw453m8IkGSyUs
+CTlRw9RE74FequBj2BHGnOBv2GYRAgMBAAECgYBhWatEkkqA4KOczNRdUO7bYkkX
+bi8sfw4WK9b6+h6JF+dqLsZ6FkrJfd9QPsRBgTWcYtwb1dogi9PCirJF4gKmSsv1
+h/BISW4lrXJPf08aJAuBF0ym8XZUgVLLptn8KdXX3xc6YF6K336AnNNLZ80X4El8
+m7X4d8Y3F4k3Dj04AQJBAN9NkHYwevaZ8jfv5rZSTKECmdk1DZITd756+sObFAs1
+vX9VfunwVw6xWmaUyMt8oPFqb0wKES9zqrViaMhU9YkCQQDSRqV3ldHcaZJ6sTgm
+T8ZKm+UpbC4zat4rGSBYKaoeLRPh5nxP892rOfBAevkoIQzW7LfVfoMImM/i1J6T
+lNJJAkAHSOZ/lJFOXjNSs9bY99JcJlOSjHKG42+ynRx1KSf8PaKS9t0PELImXo7O
+begnC0fM2GYNGv74h1N4W1+DuZHRAkEAlNov3jSvh+EwMSxs/Cnyy/QJyEXteraH
+KWkzDVYJOC1e6sZXb93JKKHuIicrY63pwed2x2o0ZgyO9RrgWsa6CQJBAMogPcRO
+jUGjYs3IYXW6Suf1bRJN2aS81gx7lqyLQE3ignH6e9kMxcrzG4AzzePCLouY3waL
+HS1KW8V9I5c4qTs=
+-----END PRIVATE KEY-----
diff --git a/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/client1.p12 b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/client1.p12
new file mode 100755
index 0000000000..1511e1d0af
Binary files /dev/null and b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/client1.p12 differ
diff --git a/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/dh1024.pem b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/dh1024.pem
new file mode 100755
index 0000000000..01eba3e5a1
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/dh1024.pem
@@ -0,0 +1,5 @@
+-----BEGIN DH PARAMETERS-----
+MIGHAoGBAMzJWsEtMQ76G81O8RzEweDaPrio4NihRBo0fmNuh3IjJtFJ++URPW4y
+HHtnGOkPoMwQjGQ3GQV+lfcR7QGWojET4NskXOk6mdFU+/nYB9s5YY7RR4qyln9b
+dNMp3KnMLtILNH1rJRoqYbSNoz3Z2cS59Ejp1dgXqN8kSP8wiqDjAgEC
+-----END DH PARAMETERS-----
diff --git a/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/index.txt b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/index.txt
new file mode 100644
index 0000000000..4bb34b80fc
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/index.txt
@@ -0,0 +1,2 @@
+V	270821142642Z		01	unknown	/C=CN/ST=ZJ/L=ZJ/O=ZJ/OU=ZJ/CN=server/name=EasyRSA/emailAddress=ZJ@ZJ.com
+V	270821142658Z		02	unknown	/C=CN/ST=ZJ/L=ZJ/O=ZJ/OU=ZJ/CN=client1/name=EasyRSA/emailAddress=ZJ@ZJ.com
diff --git a/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/index.txt.attr b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/index.txt.attr
new file mode 100755
index 0000000000..8f7e63a347
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/index.txt.attr
@@ -0,0 +1 @@
+unique_subject = yes
diff --git a/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/index.txt.attr.old b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/index.txt.attr.old
new file mode 100755
index 0000000000..8f7e63a347
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/index.txt.attr.old
@@ -0,0 +1 @@
+unique_subject = yes
diff --git a/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/index.txt.old b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/index.txt.old
new file mode 100755
index 0000000000..d74831ee49
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/index.txt.old
@@ -0,0 +1 @@
+V	270821142642Z		01	unknown	/C=CN/ST=ZJ/L=ZJ/O=ZJ/OU=ZJ/CN=server/name=EasyRSA/emailAddress=ZJ@ZJ.com
diff --git a/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/serial b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/serial
new file mode 100755
index 0000000000..75016ea362
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/serial
@@ -0,0 +1 @@
+03
diff --git a/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/serial.old b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/serial.old
new file mode 100755
index 0000000000..9e22bcb8e3
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/serial.old
@@ -0,0 +1 @@
+02
diff --git a/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/server.crt b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/server.crt
new file mode 100755
index 0000000000..a73a757e94
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/server.crt
@@ -0,0 +1,74 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=CN, ST=ZJ, L=ZJ, O=ZJ, OU=ZJ, CN=ZJ CA/name=EasyRSA/emailAddress=ZJ@ZJ.com
+        Validity
+            Not Before: Aug 23 14:26:42 2017 GMT
+            Not After : Aug 21 14:26:42 2027 GMT
+        Subject: C=CN, ST=ZJ, L=ZJ, O=ZJ, OU=ZJ, CN=server/name=EasyRSA/emailAddress=ZJ@ZJ.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (1024 bit)
+                Modulus:
+                    00:e0:67:2e:33:ab:4f:4f:a1:78:c6:32:ba:d3:1d:
+                    71:73:34:ba:45:40:88:87:76:03:fb:87:d8:4e:4e:
+                    7c:7d:95:22:7d:8e:70:dc:68:10:27:fe:7d:f0:79:
+                    93:86:83:ef:a9:16:78:ae:86:5e:ea:42:74:38:4d:
+                    37:0d:c9:34:a6:84:5e:64:ad:dd:91:dd:df:02:bf:
+                    53:f8:fb:c0:9b:cb:bd:93:7c:26:ab:bd:0a:c6:c3:
+                    5d:da:5d:b3:c0:ff:72:a1:2f:1e:0b:f6:a6:71:77:
+                    f9:00:38:8a:ae:ab:c0:86:11:ab:12:de:1e:82:13:
+                    e8:c3:d5:bb:6f:2e:bf:6e:c1
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            Netscape Cert Type: 
+                SSL Server
+            Netscape Comment: 
+                Easy-RSA Generated Server Certificate
+            X509v3 Subject Key Identifier: 
+                1C:06:47:33:61:0E:15:84:D5:08:5A:40:E6:C9:23:EF:87:F3:EE:F9
+            X509v3 Authority Key Identifier: 
+                keyid:8D:D5:04:79:10:05:4F:1B:12:63:11:AC:00:D4:FC:CC:31:00:B8:09
+                DirName:/C=CN/ST=ZJ/L=ZJ/O=ZJ/OU=ZJ/CN=ZJ CA/name=EasyRSA/emailAddress=ZJ@ZJ.com
+                serial:AE:18:A1:E1:3D:52:4D:F0
+
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication
+            X509v3 Key Usage: 
+                Digital Signature, Key Encipherment
+    Signature Algorithm: sha256WithRSAEncryption
+         aa:b5:0d:7a:b3:09:7a:d4:e6:df:46:0d:54:39:e2:34:da:4f:
+         9b:92:d6:41:db:10:b9:ed:66:34:7f:9d:a9:fa:af:6a:80:b4:
+         1f:13:d3:39:a6:72:93:5a:6b:e8:4f:ba:95:f9:83:10:58:b3:
+         fe:12:3f:a9:e8:31:04:e0:8e:d8:4c:c1:f7:7e:fc:7a:ba:17:
+         d8:2e:76:ab:7c:17:ca:a4:1d:3d:c5:bc:df:02:e5:2e:91:c4:
+         b2:6c:40:a1:e2:3d:64:15:da:a6:b0:e4:1d:66:11:54:c0:49:
+         05:91:c4:69:68:2d:bc:d5:f6:32:43:3c:18:c4:97:54:45:52:
+         28:36
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/server.csr b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/server.csr
new file mode 100755
index 0000000000..c83aadabec
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/server.csr
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
diff --git a/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/server.key b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/server.key
new file mode 100755
index 0000000000..3aab5cd4bb
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/keys/server.key
@@ -0,0 +1,16 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/openssl-1.0.0.cnf b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/openssl-1.0.0.cnf
new file mode 100755
index 0000000000..93ac6eaba8
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/openssl-1.0.0.cnf
@@ -0,0 +1,286 @@
+# For use with easy-rsa version 2.0 and OpenSSL 1.0.0*
+
+# This definition stops the following lines choking if HOME isn't
+# defined.
+HOME			= .
+RANDFILE		= $ENV::HOME/.rnd
+openssl_conf		= openssl_init
+
+[ openssl_init ]
+# Extra OBJECT IDENTIFIER info:
+#oid_file		= $ENV::HOME/.oid
+oid_section		= new_oids
+engines			= engine_section
+
+# To use this configuration file with the "-extfile" option of the
+# "openssl x509" utility, name here the section containing the
+# X.509v3 extensions to use:
+# extensions		=
+# (Alternatively, use a configuration file that has only
+# X.509v3 extensions in its main [= default] section.)
+
+[ new_oids ]
+
+# We can add new OIDs in here for use by 'ca' and 'req'.
+# Add a simple OID like this:
+# testoid1=1.2.3.4
+# Or use config file substitution like this:
+# testoid2=${testoid1}.5.6
+
+####################################################################
+[ ca ]
+default_ca	= CA_default		# The default ca section
+
+####################################################################
+[ CA_default ]
+
+dir		= $ENV::KEY_DIR		# Where everything is kept
+certs		= $dir			# Where the issued certs are kept
+crl_dir		= $dir			# Where the issued crl are kept
+database	= $dir/index.txt	# database index file.
+new_certs_dir	= $dir			# default place for new certs.
+
+certificate	= $dir/ca.crt	 	# The CA certificate
+serial		= $dir/serial 		# The current serial number
+crl		= $dir/crl.pem 		# The current CRL
+private_key	= $dir/ca.key		# The private key
+RANDFILE	= $dir/.rand		# private random number file
+
+x509_extensions	= usr_cert		# The extentions to add to the cert
+
+# Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs
+# so this is commented out by default to leave a V1 CRL.
+# crl_extensions	= crl_ext
+
+default_days	= 3650			# how long to certify for
+default_crl_days= 30			# how long before next CRL
+default_md	= sha256		# use public key default MD
+preserve	= no			# keep passed DN ordering
+
+# A few difference way of specifying how similar the request should look
+# For type CA, the listed attributes must be the same, and the optional
+# and supplied fields are just that :-)
+policy		= policy_anything
+
+# For the CA policy
+[ policy_match ]
+countryName		= match
+stateOrProvinceName	= match
+organizationName	= match
+organizationalUnitName	= optional
+commonName		= supplied
+name			= optional
+emailAddress		= optional
+
+# For the 'anything' policy
+# At this point in time, you must list all acceptable 'object'
+# types.
+[ policy_anything ]
+countryName		= optional
+stateOrProvinceName	= optional
+localityName		= optional
+organizationName	= optional
+organizationalUnitName	= optional
+commonName		= supplied
+name			= optional
+emailAddress		= optional
+
+####################################################################
+[ req ]
+default_bits		= $ENV::KEY_SIZE
+default_keyfile 	= privkey.pem
+default_md		= sha256
+distinguished_name	= req_distinguished_name
+attributes		= req_attributes
+x509_extensions	= v3_ca	# The extentions to add to the self signed cert
+
+# Passwords for private keys if not present they will be prompted for
+# input_password = secret
+# output_password = secret
+
+# This sets a mask for permitted string types. There are several options.
+# default: PrintableString, T61String, BMPString.
+# pkix	 : PrintableString, BMPString (PKIX recommendation after 2004).
+# utf8only: only UTF8Strings (PKIX recommendation after 2004).
+# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings).
+# MASK:XXXX a literal mask value.
+string_mask = nombstr
+
+# req_extensions = v3_req # The extensions to add to a certificate request
+
+[ req_distinguished_name ]
+countryName			= Country Name (2 letter code)
+countryName_default		= $ENV::KEY_COUNTRY
+countryName_min			= 2
+countryName_max			= 2
+
+stateOrProvinceName		= State or Province Name (full name)
+stateOrProvinceName_default	= $ENV::KEY_PROVINCE
+
+localityName			= Locality Name (eg, city)
+localityName_default		= $ENV::KEY_CITY
+
+0.organizationName		= Organization Name (eg, company)
+0.organizationName_default	= $ENV::KEY_ORG
+
+# we can do this but it is not needed normally :-)
+#1.organizationName		= Second Organization Name (eg, company)
+#1.organizationName_default	= World Wide Web Pty Ltd
+
+organizationalUnitName		= Organizational Unit Name (eg, section)
+#organizationalUnitName_default	=
+
+commonName			= Common Name (eg, your name or your server\'s hostname)
+commonName_max			= 64
+
+name				= Name
+name_max			= 64
+
+emailAddress			= Email Address
+emailAddress_default		= $ENV::KEY_EMAIL
+emailAddress_max		= 40
+
+# JY -- added for batch mode
+organizationalUnitName_default = $ENV::KEY_OU
+commonName_default = $ENV::KEY_CN
+name_default = $ENV::KEY_NAME
+
+
+# SET-ex3			= SET extension number 3
+
+[ req_attributes ]
+challengePassword		= A challenge password
+challengePassword_min		= 4
+challengePassword_max		= 20
+
+unstructuredName		= An optional company name
+
+[ usr_cert ]
+
+# These extensions are added when 'ca' signs a request.
+
+# This goes against PKIX guidelines but some CAs do it and some software
+# requires this to avoid interpreting an end user certificate as a CA.
+
+basicConstraints=CA:FALSE
+
+# Here are some examples of the usage of nsCertType. If it is omitted
+# the certificate can be used for anything *except* object signing.
+
+# This is OK for an SSL server.
+# nsCertType			= server
+
+# For an object signing certificate this would be used.
+# nsCertType = objsign
+
+# For normal client use this is typical
+# nsCertType = client, email
+
+# and for everything including object signing:
+# nsCertType = client, email, objsign
+
+# This is typical in keyUsage for a client certificate.
+# keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+
+# This will be displayed in Netscape's comment listbox.
+nsComment			= "Easy-RSA Generated Certificate"
+
+# PKIX recommendations harmless if included in all certificates.
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid,issuer:always
+extendedKeyUsage=clientAuth
+keyUsage = digitalSignature
+
+
+# This stuff is for subjectAltName and issuerAltname.
+# Import the email address.
+# subjectAltName=email:copy
+
+# Copy subject details
+# issuerAltName=issuer:copy
+
+#nsCaRevocationUrl		= http://www.domain.dom/ca-crl.pem
+#nsBaseUrl
+#nsRevocationUrl
+#nsRenewalUrl
+#nsCaPolicyUrl
+#nsSslServerName
+
+[ server ]
+
+# JY ADDED -- Make a cert with nsCertType set to "server"
+basicConstraints=CA:FALSE
+nsCertType                     = server
+nsComment                      = "Easy-RSA Generated Server Certificate"
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid,issuer:always
+extendedKeyUsage=serverAuth
+keyUsage = digitalSignature, keyEncipherment
+
+[ v3_req ]
+
+# Extensions to add to a certificate request
+
+basicConstraints = CA:FALSE
+keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+
+[ v3_ca ]
+
+
+# Extensions for a typical CA
+
+
+# PKIX recommendation.
+
+subjectKeyIdentifier=hash
+
+authorityKeyIdentifier=keyid:always,issuer:always
+
+# This is what PKIX recommends but some broken software chokes on critical
+# extensions.
+#basicConstraints = critical,CA:true
+# So we do this instead.
+basicConstraints = CA:true
+
+# Key usage: this is typical for a CA certificate. However since it will
+# prevent it being used as an test self-signed certificate it is best
+# left out by default.
+# keyUsage = cRLSign, keyCertSign
+
+# Some might want this also
+# nsCertType = sslCA, emailCA
+
+# Include email address in subject alt name: another PKIX recommendation
+# subjectAltName=email:copy
+# Copy issuer details
+# issuerAltName=issuer:copy
+
+# DER hex encoding of an extension: beware experts only!
+# obj=DER:02:03
+# Where 'obj' is a standard or added object
+# You can even override a supported extension:
+# basicConstraints= critical, DER:30:03:01:01:FF
+
+[ crl_ext ]
+
+# CRL extensions.
+# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL.
+
+# issuerAltName=issuer:copy
+authorityKeyIdentifier=keyid:always,issuer:always
+
+[ engine_section ]
+#
+# If you are using PKCS#11
+# Install engine_pkcs11 of opensc (www.opensc.org)
+# And uncomment the following
+# verify that dynamic_path points to the correct location
+#
+#pkcs11 = pkcs11_section
+
+[ pkcs11_section ]
+engine_id = pkcs11
+dynamic_path = /usr/lib/engines/engine_pkcs11.so
+MODULE_PATH = $ENV::PKCS11_MODULE_PATH
+PIN = $ENV::PKCS11_PIN
+init = 0
diff --git a/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/vars b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/vars
new file mode 100755
index 0000000000..4873fbcf74
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/easy-rsa/vars
@@ -0,0 +1,19 @@
+export EASY_RSA="/etc/easy-rsa"
+export OPENSSL="openssl"
+export PKCS11TOOL="pkcs11-tool"
+export GREP="grep"
+export KEY_CONFIG=`/usr/sbin/whichopensslcnf $EASY_RSA`
+export KEY_DIR="$EASY_RSA/keys"
+echo NOTE: If you run ./clean-all, I will be doing a rm -rf on $KEY_DIR
+export PKCS11_MODULE_PATH="dummy"
+export PKCS11_PIN="dummy"
+export KEY_SIZE=1024
+export CA_EXPIRE=3650
+export KEY_EXPIRE=3650
+export KEY_COUNTRY="CN"
+export KEY_PROVINCE="ZJ"
+export KEY_CITY="ZJ"
+export KEY_ORG="ZJ"
+export KEY_EMAIL="ZJ@ZJ.com"
+export KEY_OU="ZJ"
+export KEY_NAME="EasyRSA"
\ No newline at end of file
diff --git a/package/lean/luci-app-openvpn-server/root/etc/genovpn.sh b/package/lean/luci-app-openvpn-server/root/etc/genovpn.sh
new file mode 100755
index 0000000000..146d6b2369
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/genovpn.sh
@@ -0,0 +1,27 @@
+#!/bin/sh
+
+ddns=`uci get openvpn.myvpn.ddns`
+port=`uci get openvpn.myvpn.port`
+proto=`uci get openvpn.myvpn.proto`
+
+cat > /tmp/my.ovpn  <<EOF
+client
+dev tun
+proto $proto
+remote $ddns $port
+resolv-retry infinite
+nobind
+persist-key
+persist-tun
+verb 3"
+EOF
+echo '<ca>' >> /tmp/my.ovpn
+cat /etc/openvpn/ca.crt >> /tmp/my.ovpn
+echo '</ca>' >> /tmp/my.ovpn
+echo '<cert>' >> /tmp/my.ovpn
+cat /etc/openvpn/client1.crt >> /tmp/my.ovpn
+echo '</cert>' >> /tmp/my.ovpn
+echo '<key>' >> /tmp/my.ovpn
+cat /etc/openvpn/client1.key >> /tmp/my.ovpn
+echo '</key>' >> /tmp/my.ovpn
+[ -f /etc/ovpnadd.conf ] && cat /etc/ovpnadd.conf >> /tmp/my.ovpn
diff --git a/package/lean/luci-app-openvpn-server/root/etc/openvpn/ca.crt b/package/lean/luci-app-openvpn-server/root/etc/openvpn/ca.crt
new file mode 100755
index 0000000000..7b7ba5ef81
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/openvpn/ca.crt
@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
diff --git a/package/lean/luci-app-openvpn-server/root/etc/openvpn/client1.crt b/package/lean/luci-app-openvpn-server/root/etc/openvpn/client1.crt
new file mode 100755
index 0000000000..c757880eaa
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/openvpn/client1.crt
@@ -0,0 +1,71 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=CN, ST=ZJ, L=ZJ, O=ZJ, OU=ZJ, CN=ZJ CA/name=EasyRSA/emailAddress=ZJ@ZJ.com
+        Validity
+            Not Before: Aug 23 14:26:58 2017 GMT
+            Not After : Aug 21 14:26:58 2027 GMT
+        Subject: C=CN, ST=ZJ, L=ZJ, O=ZJ, OU=ZJ, CN=client1/name=EasyRSA/emailAddress=ZJ@ZJ.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (1024 bit)
+                Modulus:
+                    00:b7:6b:40:0b:c1:ef:a7:c3:fa:54:32:c2:d7:87:
+                    fa:ac:85:18:ae:af:44:ba:dd:57:0f:43:73:eb:df:
+                    37:5e:5e:8f:ad:43:7a:87:dd:a6:bd:6a:0b:68:8d:
+                    75:0c:fe:49:39:e1:54:11:53:0f:b5:63:10:5b:21:
+                    98:7f:53:32:b3:d6:b0:3d:23:fc:1d:ad:06:b0:f0:
+                    fb:10:27:83:e1:5e:5a:b4:f6:7c:02:87:4c:73:86:
+                    7b:79:07:ca:a7:1c:18:2c:70:e3:9d:e6:f0:89:06:
+                    4b:25:2c:09:39:51:c3:d4:44:ef:81:5e:aa:e0:63:
+                    d8:11:c6:9c:e0:6f:d8:66:11
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            Netscape Comment: 
+                Easy-RSA Generated Certificate
+            X509v3 Subject Key Identifier: 
+                E8:15:F9:71:C4:A7:C2:41:A3:AF:F5:C5:93:51:8E:5D:67:9B:12:E2
+            X509v3 Authority Key Identifier: 
+                keyid:8D:D5:04:79:10:05:4F:1B:12:63:11:AC:00:D4:FC:CC:31:00:B8:09
+                DirName:/C=CN/ST=ZJ/L=ZJ/O=ZJ/OU=ZJ/CN=ZJ CA/name=EasyRSA/emailAddress=ZJ@ZJ.com
+                serial:AE:18:A1:E1:3D:52:4D:F0
+
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication
+            X509v3 Key Usage: 
+                Digital Signature
+    Signature Algorithm: sha256WithRSAEncryption
+         5b:63:c2:e5:e4:04:ad:f4:b6:76:24:df:94:a5:b0:a2:99:38:
+         f9:e7:b4:2f:79:91:51:1b:06:4b:33:fc:4c:74:ce:47:3e:54:
+         1b:da:ea:43:e3:6d:6e:ec:b4:cd:77:86:ea:ea:48:a1:79:70:
+         5c:ff:99:0e:fb:bd:fc:0d:89:a6:2e:13:fe:86:82:69:33:4c:
+         28:21:0d:a8:ba:1a:3e:c7:2e:2d:97:0c:5a:ed:e3:af:73:fc:
+         bb:c9:58:05:c5:26:56:13:1c:3e:8f:90:c7:e8:d9:e5:0b:1f:
+         40:9a:fa:15:49:b9:d8:8e:6a:fd:71:f4:3c:df:a1:11:af:fb:
+         ea:a8
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/package/lean/luci-app-openvpn-server/root/etc/openvpn/client1.key b/package/lean/luci-app-openvpn-server/root/etc/openvpn/client1.key
new file mode 100755
index 0000000000..076ce4e72b
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/openvpn/client1.key
@@ -0,0 +1,16 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/package/lean/luci-app-openvpn-server/root/etc/openvpn/dh1024.pem b/package/lean/luci-app-openvpn-server/root/etc/openvpn/dh1024.pem
new file mode 100755
index 0000000000..01eba3e5a1
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/openvpn/dh1024.pem
@@ -0,0 +1,5 @@
+-----BEGIN DH PARAMETERS-----
+MIGHAoGBAMzJWsEtMQ76G81O8RzEweDaPrio4NihRBo0fmNuh3IjJtFJ++URPW4y
+HHtnGOkPoMwQjGQ3GQV+lfcR7QGWojET4NskXOk6mdFU+/nYB9s5YY7RR4qyln9b
+dNMp3KnMLtILNH1rJRoqYbSNoz3Z2cS59Ejp1dgXqN8kSP8wiqDjAgEC
+-----END DH PARAMETERS-----
diff --git a/package/lean/luci-app-openvpn-server/root/etc/openvpn/server.crt b/package/lean/luci-app-openvpn-server/root/etc/openvpn/server.crt
new file mode 100755
index 0000000000..a73a757e94
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/openvpn/server.crt
@@ -0,0 +1,74 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=CN, ST=ZJ, L=ZJ, O=ZJ, OU=ZJ, CN=ZJ CA/name=EasyRSA/emailAddress=ZJ@ZJ.com
+        Validity
+            Not Before: Aug 23 14:26:42 2017 GMT
+            Not After : Aug 21 14:26:42 2027 GMT
+        Subject: C=CN, ST=ZJ, L=ZJ, O=ZJ, OU=ZJ, CN=server/name=EasyRSA/emailAddress=ZJ@ZJ.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (1024 bit)
+                Modulus:
+                    00:e0:67:2e:33:ab:4f:4f:a1:78:c6:32:ba:d3:1d:
+                    71:73:34:ba:45:40:88:87:76:03:fb:87:d8:4e:4e:
+                    7c:7d:95:22:7d:8e:70:dc:68:10:27:fe:7d:f0:79:
+                    93:86:83:ef:a9:16:78:ae:86:5e:ea:42:74:38:4d:
+                    37:0d:c9:34:a6:84:5e:64:ad:dd:91:dd:df:02:bf:
+                    53:f8:fb:c0:9b:cb:bd:93:7c:26:ab:bd:0a:c6:c3:
+                    5d:da:5d:b3:c0:ff:72:a1:2f:1e:0b:f6:a6:71:77:
+                    f9:00:38:8a:ae:ab:c0:86:11:ab:12:de:1e:82:13:
+                    e8:c3:d5:bb:6f:2e:bf:6e:c1
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            Netscape Cert Type: 
+                SSL Server
+            Netscape Comment: 
+                Easy-RSA Generated Server Certificate
+            X509v3 Subject Key Identifier: 
+                1C:06:47:33:61:0E:15:84:D5:08:5A:40:E6:C9:23:EF:87:F3:EE:F9
+            X509v3 Authority Key Identifier: 
+                keyid:8D:D5:04:79:10:05:4F:1B:12:63:11:AC:00:D4:FC:CC:31:00:B8:09
+                DirName:/C=CN/ST=ZJ/L=ZJ/O=ZJ/OU=ZJ/CN=ZJ CA/name=EasyRSA/emailAddress=ZJ@ZJ.com
+                serial:AE:18:A1:E1:3D:52:4D:F0
+
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication
+            X509v3 Key Usage: 
+                Digital Signature, Key Encipherment
+    Signature Algorithm: sha256WithRSAEncryption
+         aa:b5:0d:7a:b3:09:7a:d4:e6:df:46:0d:54:39:e2:34:da:4f:
+         9b:92:d6:41:db:10:b9:ed:66:34:7f:9d:a9:fa:af:6a:80:b4:
+         1f:13:d3:39:a6:72:93:5a:6b:e8:4f:ba:95:f9:83:10:58:b3:
+         fe:12:3f:a9:e8:31:04:e0:8e:d8:4c:c1:f7:7e:fc:7a:ba:17:
+         d8:2e:76:ab:7c:17:ca:a4:1d:3d:c5:bc:df:02:e5:2e:91:c4:
+         b2:6c:40:a1:e2:3d:64:15:da:a6:b0:e4:1d:66:11:54:c0:49:
+         05:91:c4:69:68:2d:bc:d5:f6:32:43:3c:18:c4:97:54:45:52:
+         28:36
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/package/lean/luci-app-openvpn-server/root/etc/openvpn/server.key b/package/lean/luci-app-openvpn-server/root/etc/openvpn/server.key
new file mode 100755
index 0000000000..3aab5cd4bb
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/openvpn/server.key
@@ -0,0 +1,16 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/package/lean/luci-app-openvpn-server/root/etc/openvpncert.sh b/package/lean/luci-app-openvpn-server/root/etc/openvpncert.sh
new file mode 100755
index 0000000000..61d6f0cb9c
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/openvpncert.sh
@@ -0,0 +1,15 @@
+#!/bin/sh
+
+clean-all
+echo -en "\n\n\n\n\n\n\n\n" | build-ca
+build-dh
+build-key-server server
+build-key-pkcs12 client1
+cp /etc/easy-rsa/keys/ca.crt /etc/openvpn/
+cp /etc/easy-rsa/keys/server.crt /etc/openvpn/
+cp /etc/easy-rsa/keys/server.key /etc/openvpn/
+cp /etc/easy-rsa/keys/dh1024.pem /etc/openvpn/
+cp /etc/easy-rsa/keys/client1.crt /etc/openvpn/
+cp /etc/easy-rsa/keys/client1.key /etc/openvpn/
+/etc/init.d/openvpn restart
+echo "OpenVPN Cert renew successfully"
\ No newline at end of file
diff --git a/package/lean/luci-app-openvpn-server/root/etc/ovpnadd.conf b/package/lean/luci-app-openvpn-server/root/etc/ovpnadd.conf
new file mode 100644
index 0000000000..0d03f345b3
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/ovpnadd.conf
@@ -0,0 +1,9 @@
+http-proxy-option EXT1 "POST http://rd.go.10086.cn"
+http-proxy-option EXT1 "GET http://rd.go.10086.cn"
+http-proxy-option EXT1 "X-Online-Host: rd.go.10086.cn"
+http-proxy-option EXT1 "POST http://rd.go.10086.cn"
+http-proxy-option EXT1 "X-Online-Host: rd.go.10086.cn"
+http-proxy-option EXT1 "POST http://rd.go.10086.cn"
+http-proxy-option EXT1 "Host: rd.go.10086.cn"
+http-proxy-option EXT1 "GET http://rd.go.10086.cn"
+http-proxy-option EXT1 "Host: rd.go.10086.cn"
\ No newline at end of file
diff --git a/package/lean/luci-app-openvpn-server/root/etc/uci-defaults/openvpn b/package/lean/luci-app-openvpn-server/root/etc/uci-defaults/openvpn
new file mode 100755
index 0000000000..412fe1c8ab
--- /dev/null
+++ b/package/lean/luci-app-openvpn-server/root/etc/uci-defaults/openvpn
@@ -0,0 +1,46 @@
+#!/bin/sh
+
+uci set network.vpn0="interface"
+uci set network.vpn0.ifname="tun0"
+uci set network.vpn0.proto="none"
+uci commit network;
+/etc/init.d/network reload
+
+uci delete firewall.openvpn
+uci add firewall rule 
+uci rename firewall.@rule[-1]="openvpn"
+uci set firewall.@rule[-1].name="openvpn"
+uci set firewall.@rule[-1].target="ACCEPT"
+uci set firewall.@rule[-1].src="wan"
+uci set firewall.@rule[-1].proto="tcp udp"
+uci set firewall.@rule[-1].dest_port="1194"
+
+uci delete firewall.vpn
+uci delete firewall.vpnwan
+uci delete firewall.vpnlan
+uci commit firewall
+
+uci add firewall zone
+uci rename firewall.@zone[-1]="vpn"
+uci set firewall.@zone[-1].name="vpn"
+uci set firewall.@zone[-1].input="ACCEPT"
+uci set firewall.@zone[-1].forward="ACCEPT"
+uci set firewall.@zone[-1].output="ACCEPT"
+uci set firewall.@zone[-1].masq="1"
+uci set firewall.@zone[-1].network="vpn0"
+uci add firewall forwarding
+uci rename firewall.@forwarding[-1]="vpnwan"
+uci set firewall.@forwarding[-1].src="vpn"
+uci set firewall.@forwarding[-1].dest="wan"
+uci add firewall forwarding
+uci rename firewall.@forwarding[-1]="vpnlan"
+uci set firewall.@forwarding[-1].src="vpn"
+uci set firewall.@forwarding[-1].dest="lan"
+uci commit firewall;
+/etc/init.d/firewall restart
+
+/etc/init.d/openvpn enable
+/etc/init.d/openvpn stop
+
+rm -f /tmp/luci-indexcache
+exit 0
diff --git a/package/lean/luci-app-pppoe-relay/Makefile b/package/lean/luci-app-pppoe-relay/Makefile
new file mode 100644
index 0000000000..d65d987eba
--- /dev/null
+++ b/package/lean/luci-app-pppoe-relay/Makefile
@@ -0,0 +1,18 @@
+# Copyright (C) 2016 Openwrt.org
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI support for PPPoE Relay
+LUCI_DEPENDS:=+rp-pppoe-common +rp-pppoe-relay
+LUCI_PKGARCH:=all
+PKG_VERSION:=1.0
+PKG_RELEASE:=2
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
+
diff --git a/package/lean/luci-app-pppoe-relay/luasrc/controller/pppoe-relay.lua b/package/lean/luci-app-pppoe-relay/luasrc/controller/pppoe-relay.lua
new file mode 100644
index 0000000000..f3a2760e72
--- /dev/null
+++ b/package/lean/luci-app-pppoe-relay/luasrc/controller/pppoe-relay.lua
@@ -0,0 +1,10 @@
+module("luci.controller.pppoe-relay",package.seeall)
+
+function index()
+	if not nixio.fs.access("/etc/config/pppoe-relay")then
+	return
+end
+
+entry({"admin","services","pppoe-relay"},cbi("pppoe-relay"),_("PPPoE Relay"),90).dependent=true
+
+end
\ No newline at end of file
diff --git a/package/lean/luci-app-pppoe-relay/luasrc/model/cbi/pppoe-relay.lua b/package/lean/luci-app-pppoe-relay/luasrc/model/cbi/pppoe-relay.lua
new file mode 100644
index 0000000000..c43127ec9c
--- /dev/null
+++ b/package/lean/luci-app-pppoe-relay/luasrc/model/cbi/pppoe-relay.lua
@@ -0,0 +1,56 @@
+local s=require"luci.sys"
+local net = require "luci.model.network".init()
+local ifaces = s.net:devices()
+local m,s,o
+
+m=Map("pppoe-relay",translate("PPPoE Relay"))
+m.description = translate("Opening the PPPoE relay allows devices in the Intranet to create a separate PPPoE connection that can cross NAT.")
+s=m:section(TypedSection,"service")
+s.addremove=true
+s.anonymous=true
+s.template="cbi/tblsection"
+
+o=s:option(Flag,"enabled",translate("Enabled"))
+o.rmempty=false
+
+o=s:option(ListValue,"server_interface",translate("Server Interface"))
+for _, iface in ipairs(ifaces) do
+	if not (iface == "lo" or iface:match("^ifb.*") or iface:match("gre*")) then
+		local nets = net:get_interface(iface)
+		nets = nets and nets:get_networks() or {}
+		for k, v in pairs(nets) do
+			nets[k] = nets[k].sid
+		end
+		nets = table.concat(nets, ",")
+		o:value(iface, ((#nets > 0) and "%s (%s)" % {iface, nets} or iface))
+	end
+end
+o.rmempty=true
+
+o=s:option(ListValue,"client_interface",translate("Client Interface"))
+for _, iface in ipairs(ifaces) do
+	if not (iface == "lo" or iface:match("^ifb.*") or iface:match("gre*")) then
+		local nets = net:get_interface(iface)
+		nets = nets and nets:get_networks() or {}
+		for k, v in pairs(nets) do
+			nets[k] = nets[k].sid
+		end
+		nets = table.concat(nets, ",")
+		o:value(iface, ((#nets > 0) and "%s (%s)" % {iface, nets} or iface))
+	end
+end
+o.rmempty=true
+
+o=s:option(Button,"is_run",translate("Check"))
+function o.write(self, section)
+	local server_interface = m.uci:get('pppoe-relay',section,"server_interface")
+	local client_interface = m.uci:get('pppoe-relay',section,"client_interface")
+	isrun=luci.sys.call("ps | grep '/usr/sbin/pppoe-relay -S "..server_interface.." -C "..client_interface.."' | grep -v 'grep' >/dev/null")
+	if isrun == 1 then
+		o.description = "<script>alert('"..translate("NOT RUNNING").."');</script>"
+	else
+		o.description = "<script>alert('"..translate("RUNNING").."');</script>"
+	end
+end
+
+return m
diff --git a/package/lean/luci-app-pppoe-relay/po/zh-cn/pppoe-relay.po b/package/lean/luci-app-pppoe-relay/po/zh-cn/pppoe-relay.po
new file mode 100644
index 0000000000..e1a0c10340
--- /dev/null
+++ b/package/lean/luci-app-pppoe-relay/po/zh-cn/pppoe-relay.po
@@ -0,0 +1,23 @@
+msgid "PPPoE Relay"
+msgstr "PPPoE 穿透"
+
+msgid "Opening the PPPoE relay allows devices in the Intranet to create a separate PPPoE connection that can cross NAT."
+msgstr "开启 PPPoE 中继允许内网中的设备创建一个可穿过 NAT 的独立 PPPoE 连接"
+
+msgid "Enable or disable the PPPoE Relay"
+msgstr "启用或禁用PPPoE穿透"
+
+msgid "Server Interface"
+msgstr "服务端接口"
+
+msgid "Specify the PPPoE server interface"
+msgstr "指定PPPoE服务器接口"
+
+msgid "Client Interface"
+msgstr "客户端接口"
+
+msgid "Specify the PPPoE client interface"
+msgstr "指定PPPoE客户端接口"
+
+msgid "Enabled"
+msgstr "启用"
\ No newline at end of file
diff --git a/package/lean/luci-app-pppoe-relay/root/etc/config/pppoe-relay b/package/lean/luci-app-pppoe-relay/root/etc/config/pppoe-relay
new file mode 100644
index 0000000000..8b13789179
--- /dev/null
+++ b/package/lean/luci-app-pppoe-relay/root/etc/config/pppoe-relay
@@ -0,0 +1 @@
+
diff --git a/package/lean/luci-app-pppoe-relay/root/etc/init.d/pppoe-relay b/package/lean/luci-app-pppoe-relay/root/etc/init.d/pppoe-relay
new file mode 100755
index 0000000000..ca069d155b
--- /dev/null
+++ b/package/lean/luci-app-pppoe-relay/root/etc/init.d/pppoe-relay
@@ -0,0 +1,29 @@
+#!/bin/sh /etc/rc.common
+# Copyright (C) 2018 Lienol <lienol@qq.com>
+
+START=99
+STOP=16
+
+setup_service() {
+	local section="$1"
+	config_get enabled "$section" enabled
+	[ "$enabled" -eq 0 ] && return 0
+	config_get server_interface "$section" server_interface
+	config_get client_interface "$section" client_interface
+	[ -n "$server_interface" ] || return 0
+	[ -n "$client_interface" ] || return 0
+	
+	is_run=$(ps | grep "/usr/sbin/pppoe-relay -S $server_interface -C $client_interface" | grep -v "grep")
+	[ -z "$is_run" ] && {
+		/usr/sbin/pppoe-relay -S $server_interface -C $client_interface
+	}
+}
+
+start() {
+	config_load pppoe-relay
+	config_foreach setup_service service
+}
+
+stop() {
+	killall -9 pppoe-relay
+}
diff --git a/package/lean/luci-app-pppoe-relay/root/etc/uci-defaults/luci-app-pppoe-relay b/package/lean/luci-app-pppoe-relay/root/etc/uci-defaults/luci-app-pppoe-relay
new file mode 100755
index 0000000000..287888b284
--- /dev/null
+++ b/package/lean/luci-app-pppoe-relay/root/etc/uci-defaults/luci-app-pppoe-relay
@@ -0,0 +1,11 @@
+#!/bin/sh
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@pppoe-relay[-1]
+	add ucitrack pppoe-relay
+	set ucitrack.@pppoe-relay[-1].init=pppoe-relay
+	commit ucitrack
+EOF
+
+rm -f /tmp/luci-indexcache
+exit 0
diff --git a/package/lean/luci-app-pptp-server/Makefile b/package/lean/luci-app-pptp-server/Makefile
new file mode 100644
index 0000000000..2e13beb866
--- /dev/null
+++ b/package/lean/luci-app-pptp-server/Makefile
@@ -0,0 +1,21 @@
+# Copyright (C) 2016 Openwrt.org
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI support for PPTP VPN Server
+LUCI_DEPENDS:=+pptpd +kmod-mppe +ppp
+LUCI_PKGARCH:=all
+PKG_NAME:=luci-app-pptp-server
+PKG_VERSION:=1.0
+PKG_RELEASE:=13
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
+
+
+
diff --git a/package/lean/luci-app-pptp-server/luasrc/controller/pptp-server.lua b/package/lean/luci-app-pptp-server/luasrc/controller/pptp-server.lua
new file mode 100644
index 0000000000..5bda830987
--- /dev/null
+++ b/package/lean/luci-app-pptp-server/luasrc/controller/pptp-server.lua
@@ -0,0 +1,19 @@
+
+module("luci.controller.pptp-server", package.seeall)
+
+function index()
+	if not nixio.fs.access("/etc/config/pptpd") then
+		return
+	end
+	
+  entry({"admin", "vpn"}, firstchild(), "VPN", 45).dependent = false
+	entry({"admin", "vpn", "pptp-server"}, cbi("pptp-server/pptp-server"), _("PPTP VPN Server"), 80).dependent=false
+	entry({"admin", "vpn", "pptp-server","status"},call("act_status")).leaf=true
+end
+
+function act_status()
+  local e={}
+  e.running=luci.sys.call("pgrep pptpd >/dev/null")==0
+  luci.http.prepare_content("application/json")
+  luci.http.write_json(e)
+end
diff --git a/package/lean/luci-app-pptp-server/luasrc/model/cbi/pptp-server/pptp-server.lua b/package/lean/luci-app-pptp-server/luasrc/model/cbi/pptp-server/pptp-server.lua
new file mode 100644
index 0000000000..7fa03cfdb9
--- /dev/null
+++ b/package/lean/luci-app-pptp-server/luasrc/model/cbi/pptp-server/pptp-server.lua
@@ -0,0 +1,37 @@
+
+mp = Map("pptpd", translate("PPTP VPN Server"))
+mp.description = translate("PPTP VPN Server connectivity using the native built-in VPN Client on Windows/Linux or Andriod")
+
+mp:section(SimpleSection).template  = "pptp/pptp_status"
+
+s = mp:section(NamedSection, "pptpd", "service")
+s.anonymouse = true
+
+enabled = s:option(Flag, "enabled", translate("Enable"))
+enabled.default = 0
+enabled.rmempty = false
+
+localip = s:option(Value, "localip", translate("Local IP"))
+localip.datatype = "ip4addr"
+
+clientip = s:option(Value, "remoteip", translate("Client IP"))
+clientip.datatype = "string"
+clientip.description = translate("LAN DHCP reserved start-to-end IP addresses with the same subnet mask")
+
+remotedns = s:option(Value, "remotedns", translate("Remote Client DNS"))
+remotedns.datatype = "ip4addr"
+
+logging = s:option(Flag, "logwtmp", translate("Debug Logging"))
+logging.default = 0
+logging.rmempty = false
+
+logins = mp:section(NamedSection, "login", "login", translate("PPTP Logins"))
+logins.anonymouse = true
+
+username = logins:option(Value, "username", translate("User name"))
+username.datatype = "string"
+
+password = logins:option(Value, "password", translate("Password"))
+password.password = true
+
+return mp
diff --git a/package/lean/luci-app-pptp-server/luasrc/view/pptp/pptp_status.htm b/package/lean/luci-app-pptp-server/luasrc/view/pptp/pptp_status.htm
new file mode 100644
index 0000000000..11a2852d9e
--- /dev/null
+++ b/package/lean/luci-app-pptp-server/luasrc/view/pptp/pptp_status.htm
@@ -0,0 +1,22 @@
+<script type="text/javascript">//<![CDATA[
+XHR.poll(3, '<%=url([[admin]], [[vpn]], [[pptp-server]], [[status]])%>', null,
+	function(x, data) {
+		var tb = document.getElementById('pptp_status');
+		if (data && tb) {
+			if (data.running) {
+				var links = '<em><b><font color=green>PPTP VPN Server <%:RUNNING%></font></b></em>';
+				tb.innerHTML = links;
+			} else {
+				tb.innerHTML = '<em><b><font color=red>PPTP VPN Server <%:NOT RUNNING%></font></b></em>';
+			}
+		}
+	}
+);
+//]]>
+</script>
+<style>.mar-10 {margin-left: 50px; margin-right: 10px;}</style>
+<fieldset class="cbi-section">
+	<p id="pptp_status">
+		<em><%:Collecting data...%></em>
+	</p>
+</fieldset>
\ No newline at end of file
diff --git a/package/lean/luci-app-pptp-server/po/zh-cn/pptp.po b/package/lean/luci-app-pptp-server/po/zh-cn/pptp.po
new file mode 100644
index 0000000000..0c2f78df3a
--- /dev/null
+++ b/package/lean/luci-app-pptp-server/po/zh-cn/pptp.po
@@ -0,0 +1,56 @@
+msgid "Disable from startup"
+msgstr "禁止开机启动"
+
+msgid "Enable on startup"
+msgstr "允许开机启动"
+
+msgid "PPTP VPN Server"
+msgstr "PPTP VPN 服务器"
+
+msgid "PPTP Service"
+msgstr "PPTP 服务设置"
+
+msgid "Local IP"
+msgstr "PPTP 服务器IP"
+
+msgid "Client IP"
+msgstr "客户端分配的IP范围"
+
+msgid "LAN DHCP reserved start-to-end IP addresses with the same subnet mask"
+msgstr "使用和 LAN 同一网段。请使用 DHCP分配地址以外的空余IP地址范围，例如 192.168.0.20-30"
+
+msgid "Remote Client DNS"
+msgstr "客户端分配IP的DNS服务器"
+
+msgid "Debug Logging"
+msgstr "记录日志"
+
+msgid "PPTP Logins"
+msgstr "PPTP 登录设置"
+
+msgid "User name"
+msgstr "用户名"
+
+msgid "Password"
+msgstr "密码"
+
+msgid "Enable"
+msgstr "启用"
+
+msgid "PPTPD status"
+msgstr "PPTPD 服务状态"
+
+msgid "Start"
+msgstr "启动"
+
+msgid "Stop"
+msgstr "关闭"
+
+msgid "PPTP VPN Server"
+msgstr "PPTP VPN 服务器"
+
+msgid "PPTP VPN Server connectivity using the native built-in VPN Client on Windows/Linux or Andriod"
+msgstr "使用Windows/Linux 或者 Andriod 内置的 PPTP VPN 客户端进行连接 "
+
+
+
diff --git a/package/lean/luci-app-pptp-server/root/etc/config/pptpd b/package/lean/luci-app-pptp-server/root/etc/config/pptpd
new file mode 100644
index 0000000000..c55cfa60cc
--- /dev/null
+++ b/package/lean/luci-app-pptp-server/root/etc/config/pptpd
@@ -0,0 +1,12 @@
+
+config service 'pptpd'
+	option enabled '0'
+	option remoteip '192.168.0.20-30'
+	option remotedns '192.168.0.1'
+	option logwtmp '0'
+	option localip '192.168.0.1'
+
+config login 'login'
+	option username 'lean'
+	option password 'I234567B'
+
diff --git a/package/lean/luci-app-pptp-server/root/etc/pptpd.include b/package/lean/luci-app-pptp-server/root/etc/pptpd.include
new file mode 100755
index 0000000000..e59a7b7eac
--- /dev/null
+++ b/package/lean/luci-app-pptp-server/root/etc/pptpd.include
@@ -0,0 +1,6 @@
+iptables -D forwarding_rule -i ppp+ -j ACCEPT 2>/dev/null
+iptables -D forwarding_rule -o ppp+ -j ACCEPT 2>/dev/null
+
+iptables -A forwarding_rule -i ppp+ -j ACCEPT
+iptables -A forwarding_rule -o ppp+ -j ACCEPT
+echo 1 > /proc/sys/net/ipv4/conf/br-lan/proxy_arp
diff --git a/package/lean/luci-app-pptp-server/root/etc/uci-defaults/pptpd b/package/lean/luci-app-pptp-server/root/etc/uci-defaults/pptpd
new file mode 100755
index 0000000000..68c9f3e669
--- /dev/null
+++ b/package/lean/luci-app-pptp-server/root/etc/uci-defaults/pptpd
@@ -0,0 +1,37 @@
+#!/bin/sh
+
+uci -q batch <<-EOF >/dev/null
+	delete firewall.pptpd
+	set firewall.pptpd=include
+	set firewall.pptpd.type=script
+	set firewall.pptpd.path=/etc/pptpd.include
+	set firewall.pptpd.reload=1
+	delete firewall.pptp
+  add firewall rule 
+  rename firewall.@rule[-1]="pptp"
+  set firewall.@rule[-1].name="pptp"
+  set firewall.@rule[-1].target="ACCEPT"
+  set firewall.@rule[-1].src="wan"
+  set firewall.@rule[-1].proto="tcp"
+  set firewall.@rule[-1].dest_port="1723"
+  delete firewall.gre
+  add firewall rule 
+  rename firewall.@rule[-1]="gre"
+  set firewall.@rule[-1].name="gre"
+  set firewall.@rule[-1].target="ACCEPT"
+  set firewall.@rule[-1].src="wan"
+  set firewall.@rule[-1].proto="47"
+  commit firewall
+EOF
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@pptpd[-1]
+	add ucitrack pptpd
+	set ucitrack.@pptpd[-1].init=pptpd
+	commit ucitrack
+EOF
+
+/etc/init.d/pptpd enable && /etc/init.d/pptpd restart
+
+rm -f /tmp/luci-indexcache
+exit 0
diff --git a/package/lean/luci-app-qbittorrent/Makefile b/package/lean/luci-app-qbittorrent/Makefile
new file mode 100644
index 0000000000..70f4703b62
--- /dev/null
+++ b/package/lean/luci-app-qbittorrent/Makefile
@@ -0,0 +1,17 @@
+# Copyright (C) 2019 Openwrt.org
+#
+# This is a free software, use it under Apache Licene 2.0 & GNU General Public License v3.0.
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=qbittorrent-nox for LuCI
+LUCI_DEPENDS:=+qBittorrent
+LUCI_PKGARCH:=all
+PKG_NAME:=luci-app-qbittorrent
+PKG_VERSION=1.0
+PKG_RELEASE:=4
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
diff --git a/package/lean/luci-app-qbittorrent/luasrc/controller/qbittorrent.lua b/package/lean/luci-app-qbittorrent/luasrc/controller/qbittorrent.lua
new file mode 100644
index 0000000000..5363ac9786
--- /dev/null
+++ b/package/lean/luci-app-qbittorrent/luasrc/controller/qbittorrent.lua
@@ -0,0 +1,4 @@
+module("luci.controller.qbittorrent",package.seeall)
+function index()
+	entry({"admin","nas","qbittorrent"},cbi("qbittorrent"),_("qbittorrent"))
+end
diff --git a/package/lean/luci-app-qbittorrent/luasrc/model/cbi/qbittorrent.lua b/package/lean/luci-app-qbittorrent/luasrc/model/cbi/qbittorrent.lua
new file mode 100644
index 0000000000..af37d8fb3b
--- /dev/null
+++ b/package/lean/luci-app-qbittorrent/luasrc/model/cbi/qbittorrent.lua
@@ -0,0 +1,44 @@
+require("luci.sys")
+local e=require"luci.model.uci".cursor()
+local o=e:get_first("qbittorrent","Preferences","port")or 8080
+local a=(luci.sys.call("pidof qbittorrent-nox > /dev/null")==0)
+local t=""
+local e=""
+if a then
+t="&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<input class=\"cbi-button cbi-button-apply\" type=\"submit\" value=\" "..translate("Open Web Interface").." \" onclick=\"window.open('http://'+window.location.hostname+':"..o.."')\"/>"
+end
+if a then
+e="<b><font color=\"green\">"..translate("Running").."</font></b>"
+else
+e="<b><font color=\"red\">"..translate("Not running").."</font></b>"
+end
+
+m = Map("qbittorrent", translate("qbittorrent"), translate("A BT/PT downloader base on Qt")..t
+.."<br/><br/>"..translate("qbittorrent Run Status").." : "..e.."<br/>")
+
+s_basic = m:section(TypedSection, "basic", translate("Basic Settings"))
+s_basic.anonymous = true
+enable = s_basic:option(Flag, "enable", translate("Enable"))
+profile_dir = s_basic:option(Value,"profile_dir",translate("profile_dir"),translate("Store configuration files in the Path"))
+profile_dir.default = "/tmp"
+program_dir = s_basic:option(Value,"program_dir",translate("program_dir"),translate("Store Program files in the Path"))
+program_dir.default = "/usr/bin"
+library_dir = s_basic:option(Value,"library_dir",translate("library_dir"),translate("Store Library in the Path"))
+library_dir.default = "/usr/lib"
+
+s_download = m:section(TypedSection, "Preferences", translate("Download Settings"))
+s_download.anonymous = true
+download_dir = s_download:option(Value,"download_dir",translate("download_dir"),translate("Store download files in the Path"))
+download_dir.default = "/tmp/download"
+
+s_webui = m:section(TypedSection, "Preferences", translate("WEBUI Settings"))
+s_webui.anonymous = true
+port = s_webui:option(Value,"port",translate("port"),translate("WEBUI listening port"))
+port.default = "8080"
+
+local apply = luci.http.formvalue("cbi.apply")
+if apply then
+    io.popen("/etc/init.d/qbittorrent restart")
+end
+
+return m
diff --git a/package/lean/luci-app-qbittorrent/po/zh-cn/qbittorrent.po b/package/lean/luci-app-qbittorrent/po/zh-cn/qbittorrent.po
new file mode 100644
index 0000000000..d7a834ede1
--- /dev/null
+++ b/package/lean/luci-app-qbittorrent/po/zh-cn/qbittorrent.po
@@ -0,0 +1,53 @@
+msgid "qbittorrent"
+msgstr "BT下载器-qb"
+
+msgid "Running"
+msgstr "运行中"
+
+msgid "Not running"
+msgstr "未运行"
+
+msgid "qbittorrent Run Status"
+msgstr "qbittorrent运行状态"
+
+msgid "Basic Settings"
+msgstr "基本设置"
+
+msgid "Enable"
+msgstr "启用"
+
+msgid "A BT/PT downloader base on Qt"
+msgstr "一个基于QT的BT/PT下载器"
+
+msgid "profile_dir"
+msgstr "配置文件目录"
+
+msgid "Store configuration files in the Path"
+msgstr "配置文件存放路径"
+
+msgid "program_dir"
+msgstr "程序目录"
+
+msgid "library_dir"
+msgstr "库目录"
+
+msgid "Store Program files in the Path"
+msgstr "程序文件存放路径"
+
+msgid "Store Library in the Path"
+msgstr "库文件存放路径"
+
+msgid "Download Settings"
+msgstr "下载设置"
+
+msgid "download_dir"
+msgstr "下载目录"
+
+msgid "Store download files in the Path"
+msgstr "下载文件存放目录"
+
+msgid "WEBUI Settings"
+msgstr "WEBUI设置"
+
+msgid "WEBUI listening port"
+msgstr "WEBUI监听端口"
diff --git a/package/lean/luci-app-qbittorrent/root/etc/config/qbittorrent b/package/lean/luci-app-qbittorrent/root/etc/config/qbittorrent
new file mode 100644
index 0000000000..b4fe940c3c
--- /dev/null
+++ b/package/lean/luci-app-qbittorrent/root/etc/config/qbittorrent
@@ -0,0 +1,3 @@
+config basic
+
+config Preferences
diff --git a/package/lean/luci-app-qbittorrent/root/etc/init.d/qbittorrent b/package/lean/luci-app-qbittorrent/root/etc/init.d/qbittorrent
new file mode 100755
index 0000000000..383317165d
--- /dev/null
+++ b/package/lean/luci-app-qbittorrent/root/etc/init.d/qbittorrent
@@ -0,0 +1,67 @@
+#!/bin/sh /etc/rc.common
+START=99
+
+config_qbittorrent()
+{
+	local download_dir
+	local port
+	config_get download_dir $1 download_dir
+	config_get port $1 port
+	if [ -f $2/qBittorrent/config/qBittorrent.conf ]; then
+		sed -i  's/WebUI\\Port=[0-9]*/WebUI\\Port='"$port"'/g' $2/qBittorrent/config/qBittorrent.conf
+		sed -i  's/Downloads\\SavePath=[a-z,/]*//g' $2/qBittorrent/config/qBittorrent.conf
+		echo "Downloads\SavePath=$down" >> $2/qBittorrent/config/qBittorrent.conf
+	else
+	cat>$2/qBittorrent/config/qBittorrent.conf<<EOF
+[AutoRun]
+enabled=false
+program=
+
+[LegalNotice]
+Accepted=true
+
+[Network]
+Cookies=@Invalid()
+
+[Preferences]
+Downloads\SavePath=$download_dir
+General\Locale=zh
+WebUI\Port=$port
+EOF
+	fi
+}
+	
+run_qbittorrent()
+{
+    local enable
+    config_get_bool enable $1 enable
+    
+    if [ $enable ]; then
+        local profile_dir
+        config_get profile_dir $1 profile_dir
+	config_foreach config_qbittorrent 'Preferences' $profile_dir        
+        if [ "$profile_dir" != "" ]; then
+        	config_get library_dir $1 library_dir
+        	config_get program_dir $1 program_dir
+        	export PATH=$PATH:$program_dir
+        	export LD_LIBRARY_PATH=$library_dir
+            qbittorrent-nox -d --profile=$profile_dir 
+        else
+            echo "no profile_dir,stop!"
+        fi
+
+    fi
+}
+
+start()
+{
+	local profile_path
+	config_load 'qbittorrent'
+	config_foreach run_qbittorrent 'basic'
+}
+
+stop()
+{
+    killall qbittorrent-nox
+    return 0
+}
diff --git a/package/lean/luci-app-ramfree/Makefile b/package/lean/luci-app-ramfree/Makefile
new file mode 100644
index 0000000000..cddacda364
--- /dev/null
+++ b/package/lean/luci-app-ramfree/Makefile
@@ -0,0 +1,17 @@
+# Copyright (C) 2016 Openwrt.org
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=luci-app-ramfree
+LUCI_PKGARCH:=all
+PKG_VERSION:=1.0
+PKG_RELEASE:=1
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
+
diff --git a/package/lean/luci-app-ramfree/luasrc/controller/release_ram.lua b/package/lean/luci-app-ramfree/luasrc/controller/release_ram.lua
new file mode 100644
index 0000000000..17e95ce407
--- /dev/null
+++ b/package/lean/luci-app-ramfree/luasrc/controller/release_ram.lua
@@ -0,0 +1,9 @@
+module("luci.controller.release_ram",package.seeall)
+
+function index()
+	entry({"admin","status","release_ram"}, call("release_ram"), _("Release Ram"), 9999)
+end
+function release_ram()
+	luci.sys.call("sync && echo 3 > /proc/sys/vm/drop_caches")
+	luci.http.redirect(luci.dispatcher.build_url("admin/status"))
+end
diff --git a/package/lean/luci-app-ramfree/po/zh-cn/release_ram.po b/package/lean/luci-app-ramfree/po/zh-cn/release_ram.po
new file mode 100644
index 0000000000..cff6f0289d
--- /dev/null
+++ b/package/lean/luci-app-ramfree/po/zh-cn/release_ram.po
@@ -0,0 +1,2 @@
+msgid "Release Ram"
+msgstr "释放内存"
diff --git a/package/lean/luci-app-samba4/Makefile b/package/lean/luci-app-samba4/Makefile
new file mode 100644
index 0000000000..dae7f8071b
--- /dev/null
+++ b/package/lean/luci-app-samba4/Makefile
@@ -0,0 +1,10 @@
+# This is free software, licensed under the Apache License, Version 2.0 .
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=Network Shares - Samba 4 SMB/CIFS module
+LUCI_DEPENDS:=+samba4-server
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
diff --git a/package/lean/luci-app-samba4/luasrc/controller/samba4.lua b/package/lean/luci-app-samba4/luasrc/controller/samba4.lua
new file mode 100644
index 0000000000..8ad0e52e36
--- /dev/null
+++ b/package/lean/luci-app-samba4/luasrc/controller/samba4.lua
@@ -0,0 +1,14 @@
+-- Licensed to the public under the Apache License 2.0.
+
+module("luci.controller.samba4", package.seeall)
+
+function index()
+	if not nixio.fs.access("/etc/config/samba4") then
+		return
+	end
+
+	local page
+
+	page = entry({"admin", "services", "samba4"}, cbi("samba4"), _("Network Shares"))
+	page.dependent = true
+end
diff --git a/package/lean/luci-app-samba4/luasrc/model/cbi/samba4.lua b/package/lean/luci-app-samba4/luasrc/model/cbi/samba4.lua
new file mode 100644
index 0000000000..2a1399b96b
--- /dev/null
+++ b/package/lean/luci-app-samba4/luasrc/model/cbi/samba4.lua
@@ -0,0 +1,112 @@
+-- Licensed to the public under the Apache License 2.0.
+
+m = Map("samba4", translate("Network Shares"))
+
+s = m:section(TypedSection, "samba", "Samba")
+s.anonymous = true
+
+s:tab("general",  translate("General Settings"))
+s:tab("template", translate("Edit Template"))
+
+s:taboption("general", Value, "name", translate("Hostname"))
+s:taboption("general", Value, "description", translate("Description"))
+s:taboption("general", Value, "workgroup", translate("Workgroup"))
+h = s:taboption("general", Flag, "homes", translate("Share home-directories"),
+        translate("Allow system users to reach their home directories via " ..
+                "network shares"))
+h.rmempty = false
+
+macos = s:taboption("general", Flag, "macos", translate("Enable macOS compatible shares"),
+	translate("Enables Apple's AAPL extension globally and adds macOS compatibility options to all shares."))
+macos.rmempty = false
+
+if nixio.fs.access("/usr/sbin/nmbd") then
+	s:taboption("general", Flag, "disable_netbios", translate("Disable Netbios"))
+end
+if nixio.fs.access("/usr/sbin/samba") then
+	s:taboption("general", Flag, "disable_ad_dc", translate("Disable Active Directory Domain Controller"))
+end
+if nixio.fs.access("/usr/sbin/winbindd") then
+	s:taboption("general", Flag, "disable_winbind", translate("Disable Winbind"))
+end
+
+tmpl = s:taboption("template", Value, "_tmpl",
+	translate("Edit the template that is used for generating the samba configuration."), 
+	translate("This is the content of the file '/etc/samba/smb.conf.template' from which your samba configuration will be generated. " ..
+		"Values enclosed by pipe symbols ('|') should not be changed. They get their values from the 'General Settings' tab."))
+
+tmpl.template = "cbi/tvalue"
+tmpl.rows = 20
+
+function tmpl.cfgvalue(self, section)
+	return nixio.fs.readfile("/etc/samba/smb.conf.template")
+end
+
+function tmpl.write(self, section, value)
+	value = value:gsub("\r\n?", "\n")
+	nixio.fs.writefile("/etc/samba/smb.conf.template", value)
+end
+
+
+s = m:section(TypedSection, "sambashare", translate("Shared Directories")
+  , translate("Please add directories to share. Each directory refers to a folder on a mounted device."))
+s.anonymous = true
+s.addremove = true
+s.template = "cbi/tblsection"
+
+s:option(Value, "name", translate("Name"))
+pth = s:option(Value, "path", translate("Path"))
+if nixio.fs.access("/etc/config/fstab") then
+	pth.titleref = luci.dispatcher.build_url("admin", "system", "fstab")
+end
+
+br = s:option(Flag, "browseable", translate("Browse-able"))
+br.enabled = "yes"
+br.disabled = "no"
+br.default = "yes"
+
+ro = s:option(Flag, "read_only", translate("Read-only"))
+ro.enabled = "yes"
+ro.disabled = "no"
+ro.default = "yes"
+
+s:option(Flag, "force_root", translate("Force Root"))
+
+au = s:option(Value, "users", translate("Allowed users"))
+au.rmempty = true
+
+go = s:option(Flag, "guest_ok", translate("Allow guests"))
+go.enabled = "yes"
+go.disabled = "no"
+go.default = "no"
+
+gon = s:option(Flag, "guest_only", translate("Guests only"))
+gon.enabled = "yes"
+gon.disabled = "no"
+gon.default = "no"
+
+iown = s:option(Flag, "inherit_owner", translate("Inherit owner"))
+iown.enabled = "yes"
+iown.disabled = "no"
+iown.default = "no"
+
+cm = s:option(Value, "create_mask", translate("Create mask"))
+cm.rmempty = true
+cm.maxlength = 4
+cm.placeholder = "0666"
+
+dm = s:option(Value, "dir_mask", translate("Directory mask"))
+dm.rmempty = true
+dm.maxlength = 4
+dm.placeholder = "0777"
+
+vfs = s:option(Value, "vfs_objects", translate("Vfs objects"))
+vfs.rmempty = true
+
+s:option(Flag, "timemachine", translate("Apple Time-machine share"))
+
+tms = s:option(Value, "timemachine_maxsize", translate("Time-machine size in GB"))
+tms.rmempty = true
+tms.maxlength = 5
+
+return m
diff --git a/package/lean/luci-app-samba4/po/ca/samba4.po b/package/lean/luci-app-samba4/po/ca/samba4.po
new file mode 100644
index 0000000000..b8f3301ace
--- /dev/null
+++ b/package/lean/luci-app-samba4/po/ca/samba4.po
@@ -0,0 +1,170 @@
+#  samba.pot
+#  generated from ./applications/luci-samba/luasrc/i18n/samba.en.lua
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2009-06-10 03:40+0200\n"
+"PO-Revision-Date: 2014-07-01 05:47+0200\n"
+"Last-Translator: Alex <alexhenrie24@gmail.com>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"Language: ca\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Generator: Pootle 2.0.6\n"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:78
+msgid "Allow guests"
+msgstr "Permet convidats"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:15
+msgid "Allow system users to reach their home directories via network shares"
+msgstr ""
+"Permet que els usuaris del sistema pugin arribar als seus directoris d'inici "
+"via comparticions de xarxa"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:75
+msgid "Allowed users"
+msgstr "Usuaris permesos"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:106
+msgid "Apple Time-machine share"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:63
+msgid "Browse-able"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:93
+msgid "Create mask"
+msgstr "Crea màscara"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:12
+msgid "Description"
+msgstr "Descripció"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:98
+msgid "Directory mask"
+msgstr "Màscara de directori"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:27
+msgid "Disable Active Directory Domain Controller"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:24
+msgid "Disable Netbios"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:30
+msgid "Disable Winbind"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:9
+msgid "Edit Template"
+msgstr "Edita plantilla"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:34
+msgid "Edit the template that is used for generating the samba configuration."
+msgstr "Edita la plantilla que s'usa per generar la configuració de samba."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:19
+msgid "Enable macOS compatible shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:20
+msgid ""
+"Enables Apple's AAPL extension globally and adds macOS compatibility options "
+"to all shares."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:73
+msgid "Force Root"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:8
+msgid "General Settings"
+msgstr "Ajusts generals"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:83
+msgid "Guests only"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:11
+msgid "Hostname"
+msgstr "Nom de màquina"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:88
+msgid "Inherit owner"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:57
+msgid "Name"
+msgstr "Nom"
+
+#: applications/luci-app-samba4/luasrc/controller/samba4.lua:12
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:3
+msgid "Network Shares"
+msgstr "Comparticions de xarxa"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:58
+msgid "Path"
+msgstr "Ruta"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:52
+msgid ""
+"Please add directories to share. Each directory refers to a folder on a "
+"mounted device."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:68
+msgid "Read-only"
+msgstr "Només lectura"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:14
+msgid "Share home-directories"
+msgstr "Comparteix directoris d'inici"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:51
+msgid "Shared Directories"
+msgstr "Directoris compartits"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:35
+msgid ""
+"This is the content of the file '/etc/samba/smb.conf.template' from which "
+"your samba configuration will be generated. Values enclosed by pipe symbols "
+"('|') should not be changed. They get their values from the 'General "
+"Settings' tab."
+msgstr ""
+"Això és el contingut del fitxer '/etc/samba/smb.conf.template' del qual la "
+"vostra configuració de samba es generarà. Valors encerclats per símbols de "
+"barra ('|') no es deuen canviar. Reben els seus valors de la pestanya "
+"'Ajusts generals'."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:108
+msgid "Time-machine size in GB"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:103
+msgid "Vfs objects"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:13
+msgid "Workgroup"
+msgstr "Grup de treball"
+
+#~ msgid "Mask for new directories"
+#~ msgstr "Màscara per directoris nous"
+
+#~ msgid "Mask for new files"
+#~ msgstr "Màscara per fitxers nous"
+
+#~ msgid "Shared Directory"
+#~ msgstr "Directori compartit"
+
+#~ msgid "Physical Path"
+#~ msgstr "Ruta física"
+
+#~ msgid "optional"
+#~ msgstr "opcional"
diff --git a/package/lean/luci-app-samba4/po/cs/samba4.po b/package/lean/luci-app-samba4/po/cs/samba4.po
new file mode 100644
index 0000000000..58913db49c
--- /dev/null
+++ b/package/lean/luci-app-samba4/po/cs/samba4.po
@@ -0,0 +1,158 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"PO-Revision-Date: 2014-05-31 13:56+0200\n"
+"Last-Translator: koli <lukas.koluch@gmail.com>\n"
+"Language-Team: none\n"
+"Language: cs\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=3; plural=(n==1) ? 0 : (n>=2 && n<=4) ? 1 : 2;\n"
+"X-Generator: Pootle 2.0.6\n"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:78
+msgid "Allow guests"
+msgstr "Povolení hosté"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:15
+msgid "Allow system users to reach their home directories via network shares"
+msgstr ""
+"Povoluje systémovým uživatelům přístup do jejich domácích adresářů skrze "
+"sdílení přes síť."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:75
+msgid "Allowed users"
+msgstr "Povolení uživatelé"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:106
+msgid "Apple Time-machine share"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:63
+msgid "Browse-able"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:93
+msgid "Create mask"
+msgstr "Vytvořit masku"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:12
+msgid "Description"
+msgstr "Popis"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:98
+msgid "Directory mask"
+msgstr "Maska adresáře"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:27
+msgid "Disable Active Directory Domain Controller"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:24
+msgid "Disable Netbios"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:30
+msgid "Disable Winbind"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:9
+msgid "Edit Template"
+msgstr "Editovat šablonu"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:34
+msgid "Edit the template that is used for generating the samba configuration."
+msgstr ""
+"Editovat šablonu, která je použita pro generování konfiguračního souboru pro "
+"sambu."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:19
+msgid "Enable macOS compatible shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:20
+msgid ""
+"Enables Apple's AAPL extension globally and adds macOS compatibility options "
+"to all shares."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:73
+msgid "Force Root"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:8
+msgid "General Settings"
+msgstr "Obecné nastavení"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:83
+msgid "Guests only"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:11
+msgid "Hostname"
+msgstr "Název počítače."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:88
+msgid "Inherit owner"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:57
+msgid "Name"
+msgstr "Jméno"
+
+#: applications/luci-app-samba4/luasrc/controller/samba4.lua:12
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:3
+msgid "Network Shares"
+msgstr "Síťová sdílení"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:58
+msgid "Path"
+msgstr "Cesta"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:52
+msgid ""
+"Please add directories to share. Each directory refers to a folder on a "
+"mounted device."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:68
+msgid "Read-only"
+msgstr "Pouze pro čtení"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:14
+msgid "Share home-directories"
+msgstr "Sdílet domácí adresáře"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:51
+msgid "Shared Directories"
+msgstr "Sdílené adresáře"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:35
+msgid ""
+"This is the content of the file '/etc/samba/smb.conf.template' from which "
+"your samba configuration will be generated. Values enclosed by pipe symbols "
+"('|') should not be changed. They get their values from the 'General "
+"Settings' tab."
+msgstr ""
+"Toto je obsah souboru \"/etc/samba/smb.conf.template\", ze kterého je "
+"konfigurace samby generována. Hodnoty uzavřené rourou (\"|\"), by se neměly "
+"měnit. Tyto hodnoty jsou brány ze záložky \"Obecná nastavení\"."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:108
+msgid "Time-machine size in GB"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:103
+msgid "Vfs objects"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:13
+msgid "Workgroup"
+msgstr "Skupina"
+
+#~ msgid "Mask for new directories"
+#~ msgstr "Maska pro nové adresáře"
+
+#~ msgid "Mask for new files"
+#~ msgstr "Maska pro nové soubory"
diff --git a/package/lean/luci-app-samba4/po/de/samba4.po b/package/lean/luci-app-samba4/po/de/samba4.po
new file mode 100644
index 0000000000..4d52f1b40a
--- /dev/null
+++ b/package/lean/luci-app-samba4/po/de/samba4.po
@@ -0,0 +1,165 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2009-05-26 17:57+0200\n"
+"PO-Revision-Date: 2011-10-18 13:13+0200\n"
+"Last-Translator: Manuel <freifunk@somakoma.de>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"Language: de\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Generator: Pootle 2.0.4\n"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:78
+msgid "Allow guests"
+msgstr "Gastzugang"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:15
+msgid "Allow system users to reach their home directories via network shares"
+msgstr ""
+"Systembenutzer dürfen ihre Heimatverzeichnis über Netzwerkfreigaben "
+"erreichen."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:75
+msgid "Allowed users"
+msgstr "Legitimierte Benutzer"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:106
+msgid "Apple Time-machine share"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:63
+msgid "Browse-able"
+msgstr "Durchsuchbar"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:93
+msgid "Create mask"
+msgstr "Berechtigungs-maske für neue Dateien"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:12
+msgid "Description"
+msgstr "Beschreibung"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:98
+msgid "Directory mask"
+msgstr "Verzeichnis-maske"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:27
+msgid "Disable Active Directory Domain Controller"
+msgstr "Deaktiviere Active Directory Domain Controller"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:24
+msgid "Disable Netbios"
+msgstr "Deaktiviere Netbios"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:30
+msgid "Disable Winbind"
+msgstr "Deaktiviere Winbind"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:9
+msgid "Edit Template"
+msgstr "Template bearbeiten"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:34
+msgid "Edit the template that is used for generating the samba configuration."
+msgstr ""
+"Hier kann das Template bearbeitet werden, das zur Erstellung der Samba-"
+"Konfigurationsdateien verwendet wird."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:19
+msgid "Enable macOS compatible shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:20
+msgid ""
+"Enables Apple's AAPL extension globally and adds macOS compatibility options "
+"to all shares."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:73
+msgid "Force Root"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:8
+msgid "General Settings"
+msgstr "Allgemeine Einstellungen"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:83
+msgid "Guests only"
+msgstr "Nur Gaeste"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:11
+msgid "Hostname"
+msgstr "Hostname"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:88
+msgid "Inherit owner"
+msgstr "Besitzer Erben"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:57
+msgid "Name"
+msgstr "Name"
+
+#: applications/luci-app-samba4/luasrc/controller/samba4.lua:12
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:3
+msgid "Network Shares"
+msgstr "Netzwerk-freigaben"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:58
+msgid "Path"
+msgstr "Pfad"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:52
+msgid ""
+"Please add directories to share. Each directory refers to a folder on a "
+"mounted device."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:68
+msgid "Read-only"
+msgstr "Nur Lesen"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:14
+msgid "Share home-directories"
+msgstr "Heimat-verzeichnisse freigeben"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:51
+msgid "Shared Directories"
+msgstr "Freigegebene Verzeichnisse"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:35
+msgid ""
+"This is the content of the file '/etc/samba/smb.conf.template' from which "
+"your samba configuration will be generated. Values enclosed by pipe symbols "
+"('|') should not be changed. They get their values from the 'General "
+"Settings' tab."
+msgstr ""
+"Dieses Fenster zeigt den Inhalt der Datei '/etc/samba/smb.conf.template', "
+"die als Template zum Erstellen der Samba-Konfiguration verwendet wird. Werte "
+"die von Pipe Symbolen (|) eingeschlossen sind sollten nicht verändert "
+"werden, da diese beim Erstellen der Konfiguration mit den Werten aus dem Tab "
+"'Allgemeine Einstellungen' ersetzt werden."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:108
+msgid "Time-machine size in GB"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:103
+msgid "Vfs objects"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:13
+msgid "Workgroup"
+msgstr "Arbeitsgruppe"
+
+#~ msgid "Browseable"
+#~ msgstr "Suchbar"
+
+#~ msgid "Mask for new directories"
+#~ msgstr "Maske für neue Verzeichnisse"
+
+#~ msgid "Mask for new files"
+#~ msgstr "Maske für neue Dateien"
diff --git a/package/lean/luci-app-samba4/po/el/samba4.po b/package/lean/luci-app-samba4/po/el/samba4.po
new file mode 100644
index 0000000000..f022250942
--- /dev/null
+++ b/package/lean/luci-app-samba4/po/el/samba4.po
@@ -0,0 +1,147 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2009-05-28 02:08+0200\n"
+"PO-Revision-Date: 2012-03-18 15:31+0200\n"
+"Last-Translator: Vasilis <acinonyx@openwrt.gr>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"Language: el\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Generator: Pootle 2.0.4\n"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:78
+msgid "Allow guests"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:15
+msgid "Allow system users to reach their home directories via network shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:75
+msgid "Allowed users"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:106
+msgid "Apple Time-machine share"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:63
+msgid "Browse-able"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:93
+msgid "Create mask"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:12
+msgid "Description"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:98
+msgid "Directory mask"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:27
+msgid "Disable Active Directory Domain Controller"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:24
+msgid "Disable Netbios"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:30
+msgid "Disable Winbind"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:9
+msgid "Edit Template"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:34
+msgid "Edit the template that is used for generating the samba configuration."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:19
+msgid "Enable macOS compatible shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:20
+msgid ""
+"Enables Apple's AAPL extension globally and adds macOS compatibility options "
+"to all shares."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:73
+msgid "Force Root"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:8
+msgid "General Settings"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:83
+msgid "Guests only"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:11
+msgid "Hostname"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:88
+msgid "Inherit owner"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:57
+msgid "Name"
+msgstr "Όνομα"
+
+#: applications/luci-app-samba4/luasrc/controller/samba4.lua:12
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:3
+msgid "Network Shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:58
+msgid "Path"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:52
+msgid ""
+"Please add directories to share. Each directory refers to a folder on a "
+"mounted device."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:68
+msgid "Read-only"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:14
+msgid "Share home-directories"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:51
+msgid "Shared Directories"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:35
+msgid ""
+"This is the content of the file '/etc/samba/smb.conf.template' from which "
+"your samba configuration will be generated. Values enclosed by pipe symbols "
+"('|') should not be changed. They get their values from the 'General "
+"Settings' tab."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:108
+msgid "Time-machine size in GB"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:103
+msgid "Vfs objects"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:13
+msgid "Workgroup"
+msgstr ""
diff --git a/package/lean/luci-app-samba4/po/en/samba4.po b/package/lean/luci-app-samba4/po/en/samba4.po
new file mode 100644
index 0000000000..0e515052fa
--- /dev/null
+++ b/package/lean/luci-app-samba4/po/en/samba4.po
@@ -0,0 +1,157 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2010-03-22 15:23+0100\n"
+"PO-Revision-Date: 2011-10-25 21:26+0200\n"
+"Last-Translator: awm1 <awm1klimes8vladimir@gmail.com>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"Language: en\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Generator: Pootle 2.0.4\n"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:78
+msgid "Allow guests"
+msgstr "Allow guests"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:15
+msgid "Allow system users to reach their home directories via network shares"
+msgstr "Allow system users to reach their home directories via network shares"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:75
+msgid "Allowed users"
+msgstr "Allowed users"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:106
+msgid "Apple Time-machine share"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:63
+msgid "Browse-able"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:93
+msgid "Create mask"
+msgstr "Create mask"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:12
+msgid "Description"
+msgstr "Description"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:98
+msgid "Directory mask"
+msgstr "Directory mask"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:27
+msgid "Disable Active Directory Domain Controller"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:24
+msgid "Disable Netbios"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:30
+msgid "Disable Winbind"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:9
+msgid "Edit Template"
+msgstr "Edit template"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:34
+msgid "Edit the template that is used for generating the samba configuration."
+msgstr "Edit the template that is used for generating the Samba configuration."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:19
+msgid "Enable macOS compatible shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:20
+msgid ""
+"Enables Apple's AAPL extension globally and adds macOS compatibility options "
+"to all shares."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:73
+msgid "Force Root"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:8
+msgid "General Settings"
+msgstr "General settings"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:83
+msgid "Guests only"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:11
+msgid "Hostname"
+msgstr "Hostname"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:88
+msgid "Inherit owner"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:57
+msgid "Name"
+msgstr "Name"
+
+#: applications/luci-app-samba4/luasrc/controller/samba4.lua:12
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:3
+msgid "Network Shares"
+msgstr "Network Shares"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:58
+msgid "Path"
+msgstr "Path"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:52
+msgid ""
+"Please add directories to share. Each directory refers to a folder on a "
+"mounted device."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:68
+msgid "Read-only"
+msgstr "Read-only"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:14
+msgid "Share home-directories"
+msgstr "Share home-directories"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:51
+msgid "Shared Directories"
+msgstr "Shared Directories"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:35
+msgid ""
+"This is the content of the file '/etc/samba/smb.conf.template' from which "
+"your samba configuration will be generated. Values enclosed by pipe symbols "
+"('|') should not be changed. They get their values from the 'General "
+"Settings' tab."
+msgstr ""
+"This is the content of the file '/etc/samba/smb.conf.template' from which "
+"your Samba configuration will be generated. Values enclosed by pipe symbols "
+"('|') should not be changed. They get their values from the 'General "
+"settings' tab."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:108
+msgid "Time-machine size in GB"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:103
+msgid "Vfs objects"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:13
+msgid "Workgroup"
+msgstr "Workgroup"
+
+#~ msgid "Mask for new directories"
+#~ msgstr "Mask for new directories"
+
+#~ msgid "Mask for new files"
+#~ msgstr "Mask for new files"
diff --git a/package/lean/luci-app-samba4/po/es/samba4.po b/package/lean/luci-app-samba4/po/es/samba4.po
new file mode 100644
index 0000000000..0786d7a2fc
--- /dev/null
+++ b/package/lean/luci-app-samba4/po/es/samba4.po
@@ -0,0 +1,171 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: \n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2009-06-10 03:41+0200\n"
+"PO-Revision-Date: 2019-03-01 18:06-0300\n"
+"Last-Translator: José Vicente <josevteg@gmail.com>\n"
+"Language: es\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Generator: Poedit 2.2.1\n"
+"Language-Team: \n"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:78
+msgid "Allow guests"
+msgstr "Permitir invitados"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:15
+msgid "Allow system users to reach their home directories via network shares"
+msgstr ""
+"Permitir que los usuarios del sistema lleguen a sus carpetas personales a "
+"través de Samba"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:75
+msgid "Allowed users"
+msgstr "Usuarios permitidos"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:106
+msgid "Apple Time-machine share"
+msgstr "Compartir como Apple Time-Machine"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:63
+msgid "Browse-able"
+msgstr "Navegable"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:93
+msgid "Create mask"
+msgstr "Crear máscara"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:12
+msgid "Description"
+msgstr "Descripción"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:98
+msgid "Directory mask"
+msgstr "Máscara de carpeta"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:27
+msgid "Disable Active Directory Domain Controller"
+msgstr "Deshabilitar el controlador de dominio de carpeta activa"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:24
+msgid "Disable Netbios"
+msgstr "Deshabilitar Netbios"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:30
+msgid "Disable Winbind"
+msgstr "Deshabilitar Winbind"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:9
+msgid "Edit Template"
+msgstr "Editar plantilla"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:34
+msgid "Edit the template that is used for generating the samba configuration."
+msgstr "Editar la plantilla usada para generar la configuración de samba."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:19
+msgid "Enable macOS compatible shares"
+msgstr "Habilitar compatibilidad de Samba con macOS"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:20
+msgid ""
+"Enables Apple's AAPL extension globally and adds macOS compatibility options "
+"to all shares."
+msgstr ""
+"Habilita la extensión AAPL de Apple globalmente y agrega opciones de "
+"compatibilidad de macOS a todos los recursos compartidos."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:73
+msgid "Force Root"
+msgstr "Forzar Root"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:8
+msgid "General Settings"
+msgstr "Ajustes generales"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:83
+msgid "Guests only"
+msgstr "Sólo invitados"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:11
+msgid "Hostname"
+msgstr "Nombre del dispositivo"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:88
+msgid "Inherit owner"
+msgstr "Heredar dueño"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:57
+msgid "Name"
+msgstr "Nombre"
+
+#: applications/luci-app-samba4/luasrc/controller/samba4.lua:12
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:3
+msgid "Network Shares"
+msgstr "Samba"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:58
+msgid "Path"
+msgstr "Dirección"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:52
+msgid ""
+"Please add directories to share. Each directory refers to a folder on a "
+"mounted device."
+msgstr ""
+"Por favor agregue carpetas para compartir. Cada carpeta se refiere a una "
+"carpeta en un dispositivo montado."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:68
+msgid "Read-only"
+msgstr "Sólo lectura"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:14
+msgid "Share home-directories"
+msgstr "Compartir carpetas personales"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:51
+msgid "Shared Directories"
+msgstr "Carpetas compartidos"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:35
+msgid ""
+"This is the content of the file '/etc/samba/smb.conf.template' from which "
+"your samba configuration will be generated. Values enclosed by pipe symbols "
+"('|') should not be changed. They get their values from the 'General "
+"Settings' tab."
+msgstr ""
+"Contenido del fichero '/etc/samba/smb.conf.template' desde el que se "
+"generará la configuración de samba. Los valores entre tuberías ('|') no "
+"deben cambiarse. Su valor se toma desde la pestaña 'Configuración General'."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:108
+msgid "Time-machine size in GB"
+msgstr "Tamaño del Time-Machine en GB"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:103
+msgid "Vfs objects"
+msgstr "Objetos vfs"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:13
+msgid "Workgroup"
+msgstr "Grupo de trabajo"
+
+#~ msgid "Mask for new directories"
+#~ msgstr "Máscara para directorios nuevos"
+
+#~ msgid "Mask for new files"
+#~ msgstr "Máscara para archivos nuevos"
+
+#~ msgid "Shared Directory"
+#~ msgstr "Directorio compatido"
+
+#~ msgid "Physical Path"
+#~ msgstr "Ruta Física"
+
+#~ msgid "optional"
+#~ msgstr "opcional"
diff --git a/package/lean/luci-app-samba4/po/fr/samba4.po b/package/lean/luci-app-samba4/po/fr/samba4.po
new file mode 100644
index 0000000000..3375bfb9c7
--- /dev/null
+++ b/package/lean/luci-app-samba4/po/fr/samba4.po
@@ -0,0 +1,159 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2009-05-19 19:36+0200\n"
+"PO-Revision-Date: 2011-11-23 22:36+0200\n"
+"Last-Translator: fredb <fblistes+luci@free.fr>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"Language: fr\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n > 1);\n"
+"X-Generator: Pootle 2.0.4\n"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:78
+msgid "Allow guests"
+msgstr "Invités autorisés"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:15
+msgid "Allow system users to reach their home directories via network shares"
+msgstr ""
+"Autoriser les utilisateurs système à atteindre leurs dossiers personnels via "
+"les partages réseau"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:75
+msgid "Allowed users"
+msgstr "Utilisateurs autorisés"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:106
+msgid "Apple Time-machine share"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:63
+msgid "Browse-able"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:93
+msgid "Create mask"
+msgstr "Maque de création"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:12
+msgid "Description"
+msgstr "Description"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:98
+msgid "Directory mask"
+msgstr "Masque des dossiers"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:27
+msgid "Disable Active Directory Domain Controller"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:24
+msgid "Disable Netbios"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:30
+msgid "Disable Winbind"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:9
+msgid "Edit Template"
+msgstr "Éditer le modèle"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:34
+msgid "Edit the template that is used for generating the samba configuration."
+msgstr "Éditer le modèle utilisé pour générer la configuration Samba."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:19
+msgid "Enable macOS compatible shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:20
+msgid ""
+"Enables Apple's AAPL extension globally and adds macOS compatibility options "
+"to all shares."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:73
+msgid "Force Root"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:8
+msgid "General Settings"
+msgstr "Paramètres généraux"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:83
+msgid "Guests only"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:11
+msgid "Hostname"
+msgstr "Nom d'hôte"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:88
+msgid "Inherit owner"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:57
+msgid "Name"
+msgstr "Nom"
+
+#: applications/luci-app-samba4/luasrc/controller/samba4.lua:12
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:3
+msgid "Network Shares"
+msgstr "Partages réseau"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:58
+msgid "Path"
+msgstr "Chemin"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:52
+msgid ""
+"Please add directories to share. Each directory refers to a folder on a "
+"mounted device."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:68
+msgid "Read-only"
+msgstr "Lecture seule"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:14
+msgid "Share home-directories"
+msgstr "Partager les dossiers personnels"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:51
+msgid "Shared Directories"
+msgstr "Dossiers partagés"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:35
+msgid ""
+"This is the content of the file '/etc/samba/smb.conf.template' from which "
+"your samba configuration will be generated. Values enclosed by pipe symbols "
+"('|') should not be changed. They get their values from the 'General "
+"Settings' tab."
+msgstr ""
+"Voici le contenu du fichier '/etc/samba/smb.conf.template' d'où sera généré "
+"votre configuration Samba. Les valeurs entre les symboles barre-verticale "
+" (« | ») ne doivent pas être modifiées, elles proviennent de l'onglet "
+"« Paramètres généraux »."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:108
+msgid "Time-machine size in GB"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:103
+msgid "Vfs objects"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:13
+msgid "Workgroup"
+msgstr "Groupe de travail"
+
+#~ msgid "Mask for new directories"
+#~ msgstr "Masque pour les nouveaux dossiers"
+
+#~ msgid "Mask for new files"
+#~ msgstr "Masque pour les nouveaux fichiers"
diff --git a/package/lean/luci-app-samba4/po/he/samba4.po b/package/lean/luci-app-samba4/po/he/samba4.po
new file mode 100644
index 0000000000..49f38a87d8
--- /dev/null
+++ b/package/lean/luci-app-samba4/po/he/samba4.po
@@ -0,0 +1,142 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Last-Translator: Automatically generated\n"
+"Language-Team: none\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:78
+msgid "Allow guests"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:15
+msgid "Allow system users to reach their home directories via network shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:75
+msgid "Allowed users"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:106
+msgid "Apple Time-machine share"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:63
+msgid "Browse-able"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:93
+msgid "Create mask"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:12
+msgid "Description"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:98
+msgid "Directory mask"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:27
+msgid "Disable Active Directory Domain Controller"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:24
+msgid "Disable Netbios"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:30
+msgid "Disable Winbind"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:9
+msgid "Edit Template"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:34
+msgid "Edit the template that is used for generating the samba configuration."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:19
+msgid "Enable macOS compatible shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:20
+msgid ""
+"Enables Apple's AAPL extension globally and adds macOS compatibility options "
+"to all shares."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:73
+msgid "Force Root"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:8
+msgid "General Settings"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:83
+msgid "Guests only"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:11
+msgid "Hostname"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:88
+msgid "Inherit owner"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:57
+msgid "Name"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/controller/samba4.lua:12
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:3
+msgid "Network Shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:58
+msgid "Path"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:52
+msgid ""
+"Please add directories to share. Each directory refers to a folder on a "
+"mounted device."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:68
+msgid "Read-only"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:14
+msgid "Share home-directories"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:51
+msgid "Shared Directories"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:35
+msgid ""
+"This is the content of the file '/etc/samba/smb.conf.template' from which "
+"your samba configuration will be generated. Values enclosed by pipe symbols "
+"('|') should not be changed. They get their values from the 'General "
+"Settings' tab."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:108
+msgid "Time-machine size in GB"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:103
+msgid "Vfs objects"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:13
+msgid "Workgroup"
+msgstr ""
diff --git a/package/lean/luci-app-samba4/po/hu/samba4.po b/package/lean/luci-app-samba4/po/hu/samba4.po
new file mode 100644
index 0000000000..ebd0f7dbaf
--- /dev/null
+++ b/package/lean/luci-app-samba4/po/hu/samba4.po
@@ -0,0 +1,159 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"PO-Revision-Date: 2012-04-06 10:56+0200\n"
+"Last-Translator: juhosg <juhosg@openwrt.org>\n"
+"Language-Team: none\n"
+"Language: hu\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Generator: Pootle 2.0.4\n"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:78
+msgid "Allow guests"
+msgstr "Vendég hozzáférés"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:15
+msgid "Allow system users to reach their home directories via network shares"
+msgstr ""
+"A rendszerfelhasználók hálózati megosztáson keresztül hozzáférhetnek a home "
+"könyvtárukhoz."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:75
+msgid "Allowed users"
+msgstr "Engedélyezett felhasználók"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:106
+msgid "Apple Time-machine share"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:63
+msgid "Browse-able"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:93
+msgid "Create mask"
+msgstr "Létrehozási maszk"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:12
+msgid "Description"
+msgstr "Leírás"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:98
+msgid "Directory mask"
+msgstr "Könyvtár maszk"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:27
+msgid "Disable Active Directory Domain Controller"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:24
+msgid "Disable Netbios"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:30
+msgid "Disable Winbind"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:9
+msgid "Edit Template"
+msgstr "Sablon szerkesztése"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:34
+msgid "Edit the template that is used for generating the samba configuration."
+msgstr ""
+"Itt szerkesztheti a sablont, ami a végleges samba konfiguráció "
+"elkészítéséhez kerül felhasználásra."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:19
+msgid "Enable macOS compatible shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:20
+msgid ""
+"Enables Apple's AAPL extension globally and adds macOS compatibility options "
+"to all shares."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:73
+msgid "Force Root"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:8
+msgid "General Settings"
+msgstr "Általános beállítások"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:83
+msgid "Guests only"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:11
+msgid "Hostname"
+msgstr "Gépnév"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:88
+msgid "Inherit owner"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:57
+msgid "Name"
+msgstr "Név"
+
+#: applications/luci-app-samba4/luasrc/controller/samba4.lua:12
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:3
+msgid "Network Shares"
+msgstr "Hálózati megosztások"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:58
+msgid "Path"
+msgstr "Elérési út"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:52
+msgid ""
+"Please add directories to share. Each directory refers to a folder on a "
+"mounted device."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:68
+msgid "Read-only"
+msgstr "Csak olvasható"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:14
+msgid "Share home-directories"
+msgstr "Home könyvtárak megosztása"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:51
+msgid "Shared Directories"
+msgstr "Megosztott könyvtárak"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:35
+msgid ""
+"This is the content of the file '/etc/samba/smb.conf.template' from which "
+"your samba configuration will be generated. Values enclosed by pipe symbols "
+"('|') should not be changed. They get their values from the 'General "
+"Settings' tab."
+msgstr ""
+"Itt látható a /etc/samba/smb.conf.template file tartalma, ami a samba "
+"konfiguráció előállításához kerül felhasználásra. A pipe szimbólumok ('|') "
+"közé zárt értékek módosítása nem szükséges, az értéküket az általános "
+"beállítások fülről kapják."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:108
+msgid "Time-machine size in GB"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:103
+msgid "Vfs objects"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:13
+msgid "Workgroup"
+msgstr "Munkacsoport"
+
+#~ msgid "Mask for new directories"
+#~ msgstr "Új könyvtárak maszkja"
+
+#~ msgid "Mask for new files"
+#~ msgstr "Új fájlok maszkja"
diff --git a/package/lean/luci-app-samba4/po/it/samba4.po b/package/lean/luci-app-samba4/po/it/samba4.po
new file mode 100644
index 0000000000..6a6fd03b68
--- /dev/null
+++ b/package/lean/luci-app-samba4/po/it/samba4.po
@@ -0,0 +1,165 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2009-05-19 19:36+0200\n"
+"PO-Revision-Date: 2017-09-06 01:28+0200\n"
+"Last-Translator: bubu83 <bubu83@gmail.com>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"Language: it\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Generator: Pootle 2.0.4\n"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:78
+msgid "Allow guests"
+msgstr "Permetti ospiti"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:15
+msgid "Allow system users to reach their home directories via network shares"
+msgstr ""
+"Autorizza gli utenti del sistema a raggiungere la loro cartella home "
+"attraverso le condivisioni di rete"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:75
+msgid "Allowed users"
+msgstr "Utenti ammessi"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:106
+msgid "Apple Time-machine share"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:63
+msgid "Browse-able"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:93
+msgid "Create mask"
+msgstr "Crea maschera"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:12
+msgid "Description"
+msgstr "Descrizione"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:98
+msgid "Directory mask"
+msgstr "Maschera della cartella"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:27
+msgid "Disable Active Directory Domain Controller"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:24
+msgid "Disable Netbios"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:30
+msgid "Disable Winbind"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:9
+msgid "Edit Template"
+msgstr "Modifica Template"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:34
+msgid "Edit the template that is used for generating the samba configuration."
+msgstr ""
+"Modifica il template utilizzato per generare la configurazione di samba."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:19
+msgid "Enable macOS compatible shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:20
+msgid ""
+"Enables Apple's AAPL extension globally and adds macOS compatibility options "
+"to all shares."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:73
+msgid "Force Root"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:8
+msgid "General Settings"
+msgstr "Opzioni Generali"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:83
+msgid "Guests only"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:11
+msgid "Hostname"
+msgstr "Hostname"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:88
+msgid "Inherit owner"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:57
+msgid "Name"
+msgstr "Nome"
+
+#: applications/luci-app-samba4/luasrc/controller/samba4.lua:12
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:3
+msgid "Network Shares"
+msgstr "Condivisioni di rete"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:58
+msgid "Path"
+msgstr "Percorso"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:52
+msgid ""
+"Please add directories to share. Each directory refers to a folder on a "
+"mounted device."
+msgstr ""
+"Per favore aggiungi le directory da condividere. Ogni directory si riferisce "
+"a una cartella su un dispositivo montato."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:68
+msgid "Read-only"
+msgstr "Solo lettura"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:14
+msgid "Share home-directories"
+msgstr "Condividi cartelle home"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:51
+msgid "Shared Directories"
+msgstr "Cartelle Condivise"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:35
+msgid ""
+"This is the content of the file '/etc/samba/smb.conf.template' from which "
+"your samba configuration will be generated. Values enclosed by pipe symbols "
+"('|') should not be changed. They get their values from the 'General "
+"Settings' tab."
+msgstr ""
+"Questo è il contenuto del file '/etc/samba/smb.conf.template' dal quale sarà "
+"generata la tua configurazione di samba. I valori racchiusi tra il simbolo "
+"('|') non dovrebbero essere toccati. Essi vengono generati dalla schermata "
+"'Opzioni Generali'."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:108
+msgid "Time-machine size in GB"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:103
+msgid "Vfs objects"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:13
+msgid "Workgroup"
+msgstr "Gruppo di lavoro"
+
+#~ msgid "Browseable"
+#~ msgstr "Sfogliabile"
+
+#~ msgid "Mask for new directories"
+#~ msgstr "Maschera per le nuove cartelle"
+
+#~ msgid "Mask for new files"
+#~ msgstr "Maschera per i nuovi files"
diff --git a/package/lean/luci-app-samba4/po/ja/samba4.po b/package/lean/luci-app-samba4/po/ja/samba4.po
new file mode 100644
index 0000000000..95d7c01c74
--- /dev/null
+++ b/package/lean/luci-app-samba4/po/ja/samba4.po
@@ -0,0 +1,158 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: \n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2009-05-19 19:36+0200\n"
+"PO-Revision-Date: 2018-08-06 05:17+0900\n"
+"Last-Translator: INAGAKI Hiroshi <musashino.open@gmail.com>\n"
+"Language: ja\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+"X-Generator: Poedit 2.1.1\n"
+"Language-Team: \n"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:78
+msgid "Allow guests"
+msgstr "ゲストアクセスを許可"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:15
+msgid "Allow system users to reach their home directories via network shares"
+msgstr "sambaを介してユーザーのホームディレクトリへのアクセスを許可します"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:75
+msgid "Allowed users"
+msgstr "許可されたユーザー"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:106
+msgid "Apple Time-machine share"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:63
+msgid "Browse-able"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:93
+msgid "Create mask"
+msgstr "マスクの作成"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:12
+msgid "Description"
+msgstr "説明"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:98
+msgid "Directory mask"
+msgstr "ディレクトリのマスク"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:27
+msgid "Disable Active Directory Domain Controller"
+msgstr "Active Directory ドメインコントローラを無効化"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:24
+msgid "Disable Netbios"
+msgstr "Netbios を無効化"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:30
+msgid "Disable Winbind"
+msgstr "Winbind を無効化"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:9
+msgid "Edit Template"
+msgstr "テンプレートの編集"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:34
+msgid "Edit the template that is used for generating the samba configuration."
+msgstr "samba設定を生成するテンプレートを編集します。"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:19
+msgid "Enable macOS compatible shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:20
+msgid ""
+"Enables Apple's AAPL extension globally and adds macOS compatibility options "
+"to all shares."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:73
+msgid "Force Root"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:8
+msgid "General Settings"
+msgstr "一般設定"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:83
+msgid "Guests only"
+msgstr "ゲストのみ"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:11
+msgid "Hostname"
+msgstr "ホスト名"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:88
+msgid "Inherit owner"
+msgstr "オーナーの継承"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:57
+msgid "Name"
+msgstr "名前"
+
+#: applications/luci-app-samba4/luasrc/controller/samba4.lua:12
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:3
+msgid "Network Shares"
+msgstr "ネットワーク共有"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:58
+msgid "Path"
+msgstr "パス"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:52
+msgid ""
+"Please add directories to share. Each directory refers to a folder on a "
+"mounted device."
+msgstr ""
+"共有するディレクトリを追加してください。マウントされたデバイス等のディレクト"
+"リを設定し、公開することができます。"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:68
+msgid "Read-only"
+msgstr "読み込みのみ"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:14
+msgid "Share home-directories"
+msgstr "ホームディレクトリの共有"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:51
+msgid "Shared Directories"
+msgstr "共有ディレクトリ"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:35
+msgid ""
+"This is the content of the file '/etc/samba/smb.conf.template' from which "
+"your samba configuration will be generated. Values enclosed by pipe symbols "
+"('|') should not be changed. They get their values from the 'General "
+"Settings' tab."
+msgstr ""
+"これは、samba設定を生成するための'/etc/samba/smb.conf.template' ファイルの内"
+"容です。パイプ('|')で閉じられた値は変更しないでください。これらの値は'一般設"
+"定'タブ内の値によって置き換えられます。"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:108
+msgid "Time-machine size in GB"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:103
+msgid "Vfs objects"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:13
+msgid "Workgroup"
+msgstr "ワークグループ"
+
+#~ msgid "Mask for new directories"
+#~ msgstr "新規ディレクトリのマスク"
+
+#~ msgid "Mask for new files"
+#~ msgstr "新規ファイルのマスク"
diff --git a/package/lean/luci-app-samba4/po/ms/samba4.po b/package/lean/luci-app-samba4/po/ms/samba4.po
new file mode 100644
index 0000000000..ab8a5a8542
--- /dev/null
+++ b/package/lean/luci-app-samba4/po/ms/samba4.po
@@ -0,0 +1,141 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Last-Translator: Automatically generated\n"
+"Language-Team: none\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:78
+msgid "Allow guests"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:15
+msgid "Allow system users to reach their home directories via network shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:75
+msgid "Allowed users"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:106
+msgid "Apple Time-machine share"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:63
+msgid "Browse-able"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:93
+msgid "Create mask"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:12
+msgid "Description"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:98
+msgid "Directory mask"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:27
+msgid "Disable Active Directory Domain Controller"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:24
+msgid "Disable Netbios"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:30
+msgid "Disable Winbind"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:9
+msgid "Edit Template"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:34
+msgid "Edit the template that is used for generating the samba configuration."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:19
+msgid "Enable macOS compatible shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:20
+msgid ""
+"Enables Apple's AAPL extension globally and adds macOS compatibility options "
+"to all shares."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:73
+msgid "Force Root"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:8
+msgid "General Settings"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:83
+msgid "Guests only"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:11
+msgid "Hostname"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:88
+msgid "Inherit owner"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:57
+msgid "Name"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/controller/samba4.lua:12
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:3
+msgid "Network Shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:58
+msgid "Path"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:52
+msgid ""
+"Please add directories to share. Each directory refers to a folder on a "
+"mounted device."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:68
+msgid "Read-only"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:14
+msgid "Share home-directories"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:51
+msgid "Shared Directories"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:35
+msgid ""
+"This is the content of the file '/etc/samba/smb.conf.template' from which "
+"your samba configuration will be generated. Values enclosed by pipe symbols "
+"('|') should not be changed. They get their values from the 'General "
+"Settings' tab."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:108
+msgid "Time-machine size in GB"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:103
+msgid "Vfs objects"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:13
+msgid "Workgroup"
+msgstr ""
diff --git a/package/lean/luci-app-samba4/po/no/samba4.po b/package/lean/luci-app-samba4/po/no/samba4.po
new file mode 100644
index 0000000000..e8276b9835
--- /dev/null
+++ b/package/lean/luci-app-samba4/po/no/samba4.po
@@ -0,0 +1,147 @@
+msgid ""
+msgstr ""
+"Last-Translator: Lars Hardy <lars.hardy@gmail.com>\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:78
+msgid "Allow guests"
+msgstr "Tillat gjester"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:15
+msgid "Allow system users to reach their home directories via network shares"
+msgstr "Tillat systembrukere å nå sine hjemmekataloger via nettverks mapper."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:75
+msgid "Allowed users"
+msgstr "Tillatte brukere"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:106
+msgid "Apple Time-machine share"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:63
+msgid "Browse-able"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:93
+msgid "Create mask"
+msgstr "Opprett Maske"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:12
+msgid "Description"
+msgstr "Beskrivelse"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:98
+msgid "Directory mask"
+msgstr "Katalog maske"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:27
+msgid "Disable Active Directory Domain Controller"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:24
+msgid "Disable Netbios"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:30
+msgid "Disable Winbind"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:9
+msgid "Edit Template"
+msgstr "Rediger Mal"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:34
+msgid "Edit the template that is used for generating the samba configuration."
+msgstr "Rediger malen som brukes til å generere samba konfigurasjonen."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:19
+msgid "Enable macOS compatible shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:20
+msgid ""
+"Enables Apple's AAPL extension globally and adds macOS compatibility options "
+"to all shares."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:73
+msgid "Force Root"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:8
+msgid "General Settings"
+msgstr "Generelle Innstillinger"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:83
+msgid "Guests only"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:11
+msgid "Hostname"
+msgstr "Vertsnavn"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:88
+msgid "Inherit owner"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:57
+msgid "Name"
+msgstr "Navn"
+
+#: applications/luci-app-samba4/luasrc/controller/samba4.lua:12
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:3
+msgid "Network Shares"
+msgstr "Nettverks Mapper"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:58
+msgid "Path"
+msgstr "Fysisk bane"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:52
+msgid ""
+"Please add directories to share. Each directory refers to a folder on a "
+"mounted device."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:68
+msgid "Read-only"
+msgstr "Skrivebeskyttet"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:14
+msgid "Share home-directories"
+msgstr "Del Hjemmekataloger"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:51
+msgid "Shared Directories"
+msgstr "Delte Kataloger"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:35
+msgid ""
+"This is the content of the file '/etc/samba/smb.conf.template' from which "
+"your samba configuration will be generated. Values enclosed by pipe symbols "
+"('|') should not be changed. They get their values from the 'General "
+"Settings' tab."
+msgstr ""
+"Dette er innholdet av filen '/etc/samba/smb.conf.template' som din samba "
+"konfigurasjon vil bli generert fra. Verdier omsluttet av ('|') bør ikke "
+"endres. De får sine verdier fra 'Generelle Innstillinger' fanen."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:108
+msgid "Time-machine size in GB"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:103
+msgid "Vfs objects"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:13
+msgid "Workgroup"
+msgstr "Arbeidsgruppe"
+
+#~ msgid "Mask for new directories"
+#~ msgstr "Maske for nye kataloger"
+
+#~ msgid "Mask for new files"
+#~ msgstr "Maske for nye filer"
diff --git a/package/lean/luci-app-samba4/po/pl/samba4.po b/package/lean/luci-app-samba4/po/pl/samba4.po
new file mode 100644
index 0000000000..120ecd8570
--- /dev/null
+++ b/package/lean/luci-app-samba4/po/pl/samba4.po
@@ -0,0 +1,158 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"PO-Revision-Date: 2011-08-26 09:51+0200\n"
+"Last-Translator: Staszek <fistaszek@tlen.pl>\n"
+"Language-Team: none\n"
+"Language: pl\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=3; plural=(n==1 ? 0 : n%10>=2 && n%10<=4 && (n%100<10 "
+"|| n%100>=20) ? 1 : 2);\n"
+"X-Generator: Pootle 2.0.4\n"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:78
+msgid "Allow guests"
+msgstr "Zezwalaj Gościom"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:15
+msgid "Allow system users to reach their home directories via network shares"
+msgstr ""
+"Użytkownicy systemu mogą dostać się do swoich katalogów domowych za "
+"pośrednictwem udziałów sieciowych."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:75
+msgid "Allowed users"
+msgstr "Użytkownicy z prawem dostępu"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:106
+msgid "Apple Time-machine share"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:63
+msgid "Browse-able"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:93
+msgid "Create mask"
+msgstr "Utwórz maskę"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:12
+msgid "Description"
+msgstr "Opis"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:98
+msgid "Directory mask"
+msgstr "Maska katalogu"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:27
+msgid "Disable Active Directory Domain Controller"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:24
+msgid "Disable Netbios"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:30
+msgid "Disable Winbind"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:9
+msgid "Edit Template"
+msgstr "Edytuj szablon"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:34
+msgid "Edit the template that is used for generating the samba configuration."
+msgstr "Edytuj szablon, który jest używany do generowania konfiguracji samby."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:19
+msgid "Enable macOS compatible shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:20
+msgid ""
+"Enables Apple's AAPL extension globally and adds macOS compatibility options "
+"to all shares."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:73
+msgid "Force Root"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:8
+msgid "General Settings"
+msgstr "Ustawienia ogólne"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:83
+msgid "Guests only"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:11
+msgid "Hostname"
+msgstr "Nazwa hosta"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:88
+msgid "Inherit owner"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:57
+msgid "Name"
+msgstr "Nazwa"
+
+#: applications/luci-app-samba4/luasrc/controller/samba4.lua:12
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:3
+msgid "Network Shares"
+msgstr "Udziały sieciowe"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:58
+msgid "Path"
+msgstr "Ścieżka"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:52
+msgid ""
+"Please add directories to share. Each directory refers to a folder on a "
+"mounted device."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:68
+msgid "Read-only"
+msgstr "Tylko do odczytu"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:14
+msgid "Share home-directories"
+msgstr "Udostępniaj katalogi domowe"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:51
+msgid "Shared Directories"
+msgstr "Udostępniane katalogi"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:35
+msgid ""
+"This is the content of the file '/etc/samba/smb.conf.template' from which "
+"your samba configuration will be generated. Values enclosed by pipe symbols "
+"('|') should not be changed. They get their values from the 'General "
+"Settings' tab."
+msgstr ""
+"To jest zawartość pliku '/etc/samba/smb.conf.template\", na podstawie "
+"którego zostanie wygenerowana konfiguracja samby. Wartości otoczone symbolem "
+"kreski pionowej ('|') nie powinny być zmieniane. Wartości ich zostaną "
+"pobrane z zakładki \"Ustawienia ogólne\"."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:108
+msgid "Time-machine size in GB"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:103
+msgid "Vfs objects"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:13
+msgid "Workgroup"
+msgstr "Grupa robocza"
+
+#~ msgid "Mask for new directories"
+#~ msgstr "Maska dla nowych katalogów"
+
+#~ msgid "Mask for new files"
+#~ msgstr "Maska dla nowych plików"
diff --git a/package/lean/luci-app-samba4/po/pt-br/samba4.po b/package/lean/luci-app-samba4/po/pt-br/samba4.po
new file mode 100644
index 0000000000..f6b6677dd2
--- /dev/null
+++ b/package/lean/luci-app-samba4/po/pt-br/samba4.po
@@ -0,0 +1,172 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: \n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2009-06-10 03:41+0200\n"
+"PO-Revision-Date: 2018-09-20 19:48-0300\n"
+"Last-Translator: Luiz Angelo Daros de Luca <luizluca@gmail.com>\n"
+"Language: pt_BR\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n > 1);\n"
+"X-Generator: Poedit 2.1.1\n"
+"Language-Team: \n"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:78
+msgid "Allow guests"
+msgstr "Permitir convidados"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:15
+msgid "Allow system users to reach their home directories via network shares"
+msgstr ""
+"Usuários do sistema poderão acessar seu diretório home através dos "
+"compartilhamentos de rede"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:75
+msgid "Allowed users"
+msgstr "Usuários permitidos"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:106
+msgid "Apple Time-machine share"
+msgstr "Compartilhamento Time Machine da Apple"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:63
+msgid "Browse-able"
+msgstr "Navegável"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:93
+msgid "Create mask"
+msgstr "Máscara de criação"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:12
+msgid "Description"
+msgstr "Descrição"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:98
+msgid "Directory mask"
+msgstr "Máscara do diretório"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:27
+msgid "Disable Active Directory Domain Controller"
+msgstr "Desabilitar o Controlador de Domínios AD"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:24
+msgid "Disable Netbios"
+msgstr "Desabilitar o NetBIOS"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:30
+msgid "Disable Winbind"
+msgstr "Desabilitar o Winbind"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:9
+msgid "Edit Template"
+msgstr "Editar modelo"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:34
+msgid "Edit the template that is used for generating the samba configuration."
+msgstr "Edita o modelo que é usado para gerar a configuração do samba."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:19
+msgid "Enable macOS compatible shares"
+msgstr "Habilitar compartilhamentos compatíveis com MacOS"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:20
+msgid ""
+"Enables Apple's AAPL extension globally and adds macOS compatibility options "
+"to all shares."
+msgstr ""
+"Habilitar globalmente a extensão AAPL da Apple e adicione a opção de "
+"compatibilidade com MacOS em todos os compartilhamentos."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:73
+msgid "Force Root"
+msgstr "Forçar Usuário Root"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:8
+msgid "General Settings"
+msgstr "Configurações Gerais"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:83
+msgid "Guests only"
+msgstr "Somente convidados"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:11
+msgid "Hostname"
+msgstr "Nome do equipamento"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:88
+msgid "Inherit owner"
+msgstr "Herdar o dono"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:57
+msgid "Name"
+msgstr "Nome"
+
+#: applications/luci-app-samba4/luasrc/controller/samba4.lua:12
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:3
+msgid "Network Shares"
+msgstr "Compartilhamentos de Rede"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:58
+msgid "Path"
+msgstr "Caminho"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:52
+msgid ""
+"Please add directories to share. Each directory refers to a folder on a "
+"mounted device."
+msgstr ""
+"Por favor, adicione diretórios para compartilhar. Cada diretório refere-se a "
+"uma porta em um dispositivo montado."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:68
+msgid "Read-only"
+msgstr "Somente leitura"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:14
+msgid "Share home-directories"
+msgstr "Compartilhar diretórios home"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:51
+msgid "Shared Directories"
+msgstr "Diretórios Compartilhados"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:35
+msgid ""
+"This is the content of the file '/etc/samba/smb.conf.template' from which "
+"your samba configuration will be generated. Values enclosed by pipe symbols "
+"('|') should not be changed. They get their values from the 'General "
+"Settings' tab."
+msgstr ""
+"Este é o conteúdo do arquivo '/etc/samba/smb.conf.template' a partir do qual "
+"sua configuração do samba será gerada. Valores entre simbolos de pipe ('|') "
+"não devem ser alterados. Estes valores serão obtidos a partir da aba "
+"'Configurações Gerais'."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:108
+msgid "Time-machine size in GB"
+msgstr "Tamanho do Time Machine em GB"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:103
+msgid "Vfs objects"
+msgstr "Objetos VFS"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:13
+msgid "Workgroup"
+msgstr "Grupo de trabalho"
+
+#~ msgid "Mask for new directories"
+#~ msgstr "Máscara para novos diretórios"
+
+#~ msgid "Mask for new files"
+#~ msgstr "Máscara para novos arquivos"
+
+#~ msgid "Shared Directory"
+#~ msgstr "Diretório Compartilhado"
+
+#~ msgid "Physical Path"
+#~ msgstr "Caminho Físico"
+
+#~ msgid "optional"
+#~ msgstr "opcional"
diff --git a/package/lean/luci-app-samba4/po/pt/samba4.po b/package/lean/luci-app-samba4/po/pt/samba4.po
new file mode 100644
index 0000000000..d68ab66803
--- /dev/null
+++ b/package/lean/luci-app-samba4/po/pt/samba4.po
@@ -0,0 +1,168 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2009-05-26 19:03+0200\n"
+"PO-Revision-Date: 2013-05-01 01:13+0200\n"
+"Last-Translator: pedromrgoncalves <pedromrgoncalves@gmail.com>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"Language: pt\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Generator: Pootle 2.0.6\n"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:78
+msgid "Allow guests"
+msgstr "Permitir Convidados"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:15
+msgid "Allow system users to reach their home directories via network shares"
+msgstr ""
+"Utilizadores do sistema poderão aceder ao seu directório home através das "
+"partilhas de rede."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:75
+msgid "Allowed users"
+msgstr "Utilizadores Permitidos"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:106
+msgid "Apple Time-machine share"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:63
+msgid "Browse-able"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:93
+msgid "Create mask"
+msgstr "Criar Máscara"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:12
+msgid "Description"
+msgstr "Descrição"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:98
+msgid "Directory mask"
+msgstr "Máscara do Directório"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:27
+msgid "Disable Active Directory Domain Controller"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:24
+msgid "Disable Netbios"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:30
+msgid "Disable Winbind"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:9
+msgid "Edit Template"
+msgstr "Editar Template"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:34
+msgid "Edit the template that is used for generating the samba configuration."
+msgstr "Editar a template que é utilizada para gerar a configuração samba"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:19
+msgid "Enable macOS compatible shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:20
+msgid ""
+"Enables Apple's AAPL extension globally and adds macOS compatibility options "
+"to all shares."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:73
+msgid "Force Root"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:8
+msgid "General Settings"
+msgstr "Definições Gerais"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:83
+msgid "Guests only"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:11
+msgid "Hostname"
+msgstr "Nome do host"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:88
+msgid "Inherit owner"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:57
+msgid "Name"
+msgstr "Nome"
+
+#: applications/luci-app-samba4/luasrc/controller/samba4.lua:12
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:3
+msgid "Network Shares"
+msgstr "Partilhas da Rede"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:58
+msgid "Path"
+msgstr "Caminho"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:52
+msgid ""
+"Please add directories to share. Each directory refers to a folder on a "
+"mounted device."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:68
+msgid "Read-only"
+msgstr "Apenas Leitura"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:14
+msgid "Share home-directories"
+msgstr "Partilha de directórios home"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:51
+msgid "Shared Directories"
+msgstr "Directórios Partilhados"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:35
+msgid ""
+"This is the content of the file '/etc/samba/smb.conf.template' from which "
+"your samba configuration will be generated. Values enclosed by pipe symbols "
+"('|') should not be changed. They get their values from the 'General "
+"Settings' tab."
+msgstr ""
+"Isto é o conteúdo do ficheiro 'etc/samba/smb.conf.template' a partir do qual "
+"será gerado o ficheiro de configuração do samba. Os valores entre o símbolo "
+"| não devem ser alterados. Eles recebem os valores do separador 'Definições "
+"Gerais'."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:108
+msgid "Time-machine size in GB"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:103
+msgid "Vfs objects"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:13
+msgid "Workgroup"
+msgstr "Grupo de trabalho"
+
+#~ msgid "Mask for new directories"
+#~ msgstr "Máscara para novos directórios"
+
+#~ msgid "Mask for new files"
+#~ msgstr "Máscara para novos ficheiros"
+
+#~ msgid "Shared Directory"
+#~ msgstr "Diretório Compartilhado"
+
+#~ msgid "Physical Path"
+#~ msgstr "Caminho Físico"
+
+#~ msgid "optional"
+#~ msgstr "opcional"
diff --git a/package/lean/luci-app-samba4/po/ro/samba4.po b/package/lean/luci-app-samba4/po/ro/samba4.po
new file mode 100644
index 0000000000..2e1ecdaf6c
--- /dev/null
+++ b/package/lean/luci-app-samba4/po/ro/samba4.po
@@ -0,0 +1,157 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"PO-Revision-Date: 2011-10-07 17:16+0200\n"
+"Last-Translator: Daniel <daniel.petre@pitesti.rcs-rds.ro>\n"
+"Language-Team: none\n"
+"Language: ro\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=3; plural=(n==1 ? 0 : (n==0 || (n%100 > 0 && n%100 < "
+"20)) ? 1 : 2);;\n"
+"X-Generator: Pootle 2.0.4\n"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:78
+msgid "Allow guests"
+msgstr "Permite oaspeti"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:15
+msgid "Allow system users to reach their home directories via network shares"
+msgstr ""
+"Permite utilizatorii de sistem sa acceseze directoarele lor peste "
+"partajarile de retea"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:75
+msgid "Allowed users"
+msgstr "Utilizatori acceptati"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:106
+msgid "Apple Time-machine share"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:63
+msgid "Browse-able"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:93
+msgid "Create mask"
+msgstr "Creaza masca"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:12
+msgid "Description"
+msgstr "Descriere"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:98
+msgid "Directory mask"
+msgstr "Masca director"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:27
+msgid "Disable Active Directory Domain Controller"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:24
+msgid "Disable Netbios"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:30
+msgid "Disable Winbind"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:9
+msgid "Edit Template"
+msgstr "Editeaza sablon"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:34
+msgid "Edit the template that is used for generating the samba configuration."
+msgstr "Editeaza sablonul care e folosit pentru generarea configuratiei samba."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:19
+msgid "Enable macOS compatible shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:20
+msgid ""
+"Enables Apple's AAPL extension globally and adds macOS compatibility options "
+"to all shares."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:73
+msgid "Force Root"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:8
+msgid "General Settings"
+msgstr "Setari generale"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:83
+msgid "Guests only"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:11
+msgid "Hostname"
+msgstr "Numele de host"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:88
+msgid "Inherit owner"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:57
+msgid "Name"
+msgstr "Nume"
+
+#: applications/luci-app-samba4/luasrc/controller/samba4.lua:12
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:3
+msgid "Network Shares"
+msgstr "Partajari pe retea"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:58
+msgid "Path"
+msgstr "Cale"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:52
+msgid ""
+"Please add directories to share. Each directory refers to a folder on a "
+"mounted device."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:68
+msgid "Read-only"
+msgstr "Doar citire"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:14
+msgid "Share home-directories"
+msgstr "Partajeaza directoarele proprii"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:51
+msgid "Shared Directories"
+msgstr "Directoare partajate"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:35
+msgid ""
+"This is the content of the file '/etc/samba/smb.conf.template' from which "
+"your samba configuration will be generated. Values enclosed by pipe symbols "
+"('|') should not be changed. They get their values from the 'General "
+"Settings' tab."
+msgstr ""
+"Acesta este continutul fisierului '/etc/samba/smb.conf.template' din care se "
+"genereaza configuratia samba. Valorile dintre liniuta verticala ('|') n-ar "
+"trebui schimbate, ele iau valorile direct din tab-ul de \"Setari generale\"."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:108
+msgid "Time-machine size in GB"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:103
+msgid "Vfs objects"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:13
+msgid "Workgroup"
+msgstr "Workgroup"
+
+#~ msgid "Mask for new directories"
+#~ msgstr "Masca pentru directoarele noi"
+
+#~ msgid "Mask for new files"
+#~ msgstr "Masca pentru fisierele noi"
diff --git a/package/lean/luci-app-samba4/po/ru/samba4.po b/package/lean/luci-app-samba4/po/ru/samba4.po
new file mode 100644
index 0000000000..9829dc50bb
--- /dev/null
+++ b/package/lean/luci-app-samba4/po/ru/samba4.po
@@ -0,0 +1,166 @@
+msgid ""
+msgstr ""
+"Content-Type: text/plain; charset=UTF-8\n"
+"Project-Id-Version: LuCI: samba\n"
+"POT-Creation-Date: 2009-05-19 19:36+0200\n"
+"PO-Revision-Date: 2018-01-14 11:43+0300\n"
+"Language-Team: http://cyber-place.ru\n"
+"MIME-Version: 1.0\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: Poedit 1.8.7.1\n"
+"Last-Translator: Vladimir aka sunny <picfun@ya.ru>\n"
+"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"
+"%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
+"Language: ru\n"
+"Project-Info: Это технический перевод, не дословный. Главное-удобный русский "
+"интерфейс, все проверялось в графическом режиме, совместим с другими apps\n"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:78
+msgid "Allow guests"
+msgstr "Разрешить гостевой вход"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:15
+msgid "Allow system users to reach their home directories via network shares"
+msgstr ""
+"Разрешить пользователям получать доступ к их домашним папкам, через "
+"локальную сеть."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:75
+msgid "Allowed users"
+msgstr "Разрешенные пользователи"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:106
+msgid "Apple Time-machine share"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:63
+msgid "Browse-able"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:93
+msgid "Create mask"
+msgstr "Создать маску"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:12
+msgid "Description"
+msgstr "Описание"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:98
+msgid "Directory mask"
+msgstr "Маска папок"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:27
+msgid "Disable Active Directory Domain Controller"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:24
+msgid "Disable Netbios"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:30
+msgid "Disable Winbind"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:9
+msgid "Edit Template"
+msgstr "Настройка config файла"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:34
+msgid "Edit the template that is used for generating the samba configuration."
+msgstr "Настройка config<br />файла samba."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:19
+msgid "Enable macOS compatible shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:20
+msgid ""
+"Enables Apple's AAPL extension globally and adds macOS compatibility options "
+"to all shares."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:73
+msgid "Force Root"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:8
+msgid "General Settings"
+msgstr "Основные настройки"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:83
+msgid "Guests only"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:11
+msgid "Hostname"
+msgstr "Имя хоста"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:88
+msgid "Inherit owner"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:57
+msgid "Name"
+msgstr "Имя"
+
+#: applications/luci-app-samba4/luasrc/controller/samba4.lua:12
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:3
+msgid "Network Shares"
+msgstr "Сетевые ресурсы"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:58
+msgid "Path"
+msgstr "Путь"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:52
+msgid ""
+"Please add directories to share. Each directory refers to a folder on a "
+"mounted device."
+msgstr ""
+"Добавьте папки для совместного доступа. Каждая папка - соответствует разделу "
+"на подключенном устройстве."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:68
+msgid "Read-only"
+msgstr "Только для чтения"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:14
+msgid "Share home-directories"
+msgstr "Совместно использовать домашние папки"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:51
+msgid "Shared Directories"
+msgstr "Совместно используемые папки"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:35
+msgid ""
+"This is the content of the file '/etc/samba/smb.conf.template' from which "
+"your samba configuration will be generated. Values enclosed by pipe symbols "
+"('|') should not be changed. They get their values from the 'General "
+"Settings' tab."
+msgstr ""
+"Это содержимое файла '/etc/samba/smb.conf.template', из которого "
+"генерируется config файл - samba.<br />Значения, заключенные в символы "
+"('|'), не должны быть изменены.<br />Они будут автоматически заменены на "
+"значения со страницы 'Основные настройки'."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:108
+msgid "Time-machine size in GB"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:103
+msgid "Vfs objects"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:13
+msgid "Workgroup"
+msgstr "Рабочая группа"
+
+#~ msgid "Browseable"
+#~ msgstr "Виден в списке доступных ресурсов"
+
+#~ msgid "Mask for new directories"
+#~ msgstr "Маска для новых папок"
+
+#~ msgid "Mask for new files"
+#~ msgstr "Маска для новых файлов"
diff --git a/package/lean/luci-app-samba4/po/sk/samba4.po b/package/lean/luci-app-samba4/po/sk/samba4.po
new file mode 100644
index 0000000000..a1c1d38a3c
--- /dev/null
+++ b/package/lean/luci-app-samba4/po/sk/samba4.po
@@ -0,0 +1,142 @@
+msgid ""
+msgstr ""
+"Content-Type: text/plain; charset=UTF-8\n"
+"Project-Id-Version: PACKAGE VERSION\n"
+"Last-Translator: Automatically generated\n"
+"Language-Team: none\n"
+"MIME-Version: 1.0\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=3; plural=(n==1) ? 0 : (n>=2 && n<=4) ? 1 : 2;\n"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:78
+msgid "Allow guests"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:15
+msgid "Allow system users to reach their home directories via network shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:75
+msgid "Allowed users"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:106
+msgid "Apple Time-machine share"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:63
+msgid "Browse-able"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:93
+msgid "Create mask"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:12
+msgid "Description"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:98
+msgid "Directory mask"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:27
+msgid "Disable Active Directory Domain Controller"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:24
+msgid "Disable Netbios"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:30
+msgid "Disable Winbind"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:9
+msgid "Edit Template"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:34
+msgid "Edit the template that is used for generating the samba configuration."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:19
+msgid "Enable macOS compatible shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:20
+msgid ""
+"Enables Apple's AAPL extension globally and adds macOS compatibility options "
+"to all shares."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:73
+msgid "Force Root"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:8
+msgid "General Settings"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:83
+msgid "Guests only"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:11
+msgid "Hostname"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:88
+msgid "Inherit owner"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:57
+msgid "Name"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/controller/samba4.lua:12
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:3
+msgid "Network Shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:58
+msgid "Path"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:52
+msgid ""
+"Please add directories to share. Each directory refers to a folder on a "
+"mounted device."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:68
+msgid "Read-only"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:14
+msgid "Share home-directories"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:51
+msgid "Shared Directories"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:35
+msgid ""
+"This is the content of the file '/etc/samba/smb.conf.template' from which "
+"your samba configuration will be generated. Values enclosed by pipe symbols "
+"('|') should not be changed. They get their values from the 'General "
+"Settings' tab."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:108
+msgid "Time-machine size in GB"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:103
+msgid "Vfs objects"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:13
+msgid "Workgroup"
+msgstr ""
diff --git a/package/lean/luci-app-samba4/po/sv/samba4.po b/package/lean/luci-app-samba4/po/sv/samba4.po
new file mode 100644
index 0000000000..756fa6a273
--- /dev/null
+++ b/package/lean/luci-app-samba4/po/sv/samba4.po
@@ -0,0 +1,150 @@
+msgid ""
+msgstr ""
+"Content-Type: text/plain; charset=UTF-8\n"
+"Project-Id-Version: PACKAGE VERSION\n"
+"Last-Translator: Automatically generated\n"
+"Language-Team: none\n"
+"Language: sv\n"
+"MIME-Version: 1.0\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:78
+msgid "Allow guests"
+msgstr "Tillåt gäster"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:15
+msgid "Allow system users to reach their home directories via network shares"
+msgstr "Tillåt systemanvändare att nå deras hem-mappar via nätverksdelningar"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:75
+msgid "Allowed users"
+msgstr "Tillåtna användare"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:106
+msgid "Apple Time-machine share"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:63
+msgid "Browse-able"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:93
+msgid "Create mask"
+msgstr "Skapa mask"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:12
+msgid "Description"
+msgstr "Beskrivning"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:98
+msgid "Directory mask"
+msgstr "Mask för mapp"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:27
+msgid "Disable Active Directory Domain Controller"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:24
+msgid "Disable Netbios"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:30
+msgid "Disable Winbind"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:9
+msgid "Edit Template"
+msgstr "Redigera mall"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:34
+msgid "Edit the template that is used for generating the samba configuration."
+msgstr ""
+"Redigera mallen som används för att generera konfigurationen för samba."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:19
+msgid "Enable macOS compatible shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:20
+msgid ""
+"Enables Apple's AAPL extension globally and adds macOS compatibility options "
+"to all shares."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:73
+msgid "Force Root"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:8
+msgid "General Settings"
+msgstr "Generella inställningar"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:83
+msgid "Guests only"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:11
+msgid "Hostname"
+msgstr "Värdnamn"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:88
+msgid "Inherit owner"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:57
+msgid "Name"
+msgstr "Namn"
+
+#: applications/luci-app-samba4/luasrc/controller/samba4.lua:12
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:3
+msgid "Network Shares"
+msgstr "Nätverksdelningar"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:58
+msgid "Path"
+msgstr "Genväg"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:52
+msgid ""
+"Please add directories to share. Each directory refers to a folder on a "
+"mounted device."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:68
+msgid "Read-only"
+msgstr "Endast läsbar"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:14
+msgid "Share home-directories"
+msgstr "Dela hem-mappar"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:51
+msgid "Shared Directories"
+msgstr "Delade mappar"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:35
+msgid ""
+"This is the content of the file '/etc/samba/smb.conf.template' from which "
+"your samba configuration will be generated. Values enclosed by pipe symbols "
+"('|') should not be changed. They get their values from the 'General "
+"Settings' tab."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:108
+msgid "Time-machine size in GB"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:103
+msgid "Vfs objects"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:13
+msgid "Workgroup"
+msgstr "Arbetsgrupp"
+
+#~ msgid "Mask for new directories"
+#~ msgstr "Mask för nya mappar"
+
+#~ msgid "Mask for new files"
+#~ msgstr "Mask för nya filer"
diff --git a/package/lean/luci-app-samba4/po/templates/samba4.pot b/package/lean/luci-app-samba4/po/templates/samba4.pot
new file mode 100644
index 0000000000..d930c139ed
--- /dev/null
+++ b/package/lean/luci-app-samba4/po/templates/samba4.pot
@@ -0,0 +1,135 @@
+msgid ""
+msgstr "Content-Type: text/plain; charset=UTF-8"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:78
+msgid "Allow guests"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:15
+msgid "Allow system users to reach their home directories via network shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:75
+msgid "Allowed users"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:106
+msgid "Apple Time-machine share"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:63
+msgid "Browse-able"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:93
+msgid "Create mask"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:12
+msgid "Description"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:98
+msgid "Directory mask"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:27
+msgid "Disable Active Directory Domain Controller"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:24
+msgid "Disable Netbios"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:30
+msgid "Disable Winbind"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:9
+msgid "Edit Template"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:34
+msgid "Edit the template that is used for generating the samba configuration."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:19
+msgid "Enable macOS compatible shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:20
+msgid ""
+"Enables Apple's AAPL extension globally and adds macOS compatibility options "
+"to all shares."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:73
+msgid "Force Root"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:8
+msgid "General Settings"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:83
+msgid "Guests only"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:11
+msgid "Hostname"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:88
+msgid "Inherit owner"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:57
+msgid "Name"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/controller/samba4.lua:12
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:3
+msgid "Network Shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:58
+msgid "Path"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:52
+msgid ""
+"Please add directories to share. Each directory refers to a folder on a "
+"mounted device."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:68
+msgid "Read-only"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:14
+msgid "Share home-directories"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:51
+msgid "Shared Directories"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:35
+msgid ""
+"This is the content of the file '/etc/samba/smb.conf.template' from which "
+"your samba configuration will be generated. Values enclosed by pipe symbols "
+"('|') should not be changed. They get their values from the 'General "
+"Settings' tab."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:108
+msgid "Time-machine size in GB"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:103
+msgid "Vfs objects"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:13
+msgid "Workgroup"
+msgstr ""
diff --git a/package/lean/luci-app-samba4/po/tr/samba4.po b/package/lean/luci-app-samba4/po/tr/samba4.po
new file mode 100644
index 0000000000..570ad2f384
--- /dev/null
+++ b/package/lean/luci-app-samba4/po/tr/samba4.po
@@ -0,0 +1,142 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Last-Translator: Automatically generated\n"
+"Language-Team: none\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:78
+msgid "Allow guests"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:15
+msgid "Allow system users to reach their home directories via network shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:75
+msgid "Allowed users"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:106
+msgid "Apple Time-machine share"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:63
+msgid "Browse-able"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:93
+msgid "Create mask"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:12
+msgid "Description"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:98
+msgid "Directory mask"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:27
+msgid "Disable Active Directory Domain Controller"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:24
+msgid "Disable Netbios"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:30
+msgid "Disable Winbind"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:9
+msgid "Edit Template"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:34
+msgid "Edit the template that is used for generating the samba configuration."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:19
+msgid "Enable macOS compatible shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:20
+msgid ""
+"Enables Apple's AAPL extension globally and adds macOS compatibility options "
+"to all shares."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:73
+msgid "Force Root"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:8
+msgid "General Settings"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:83
+msgid "Guests only"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:11
+msgid "Hostname"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:88
+msgid "Inherit owner"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:57
+msgid "Name"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/controller/samba4.lua:12
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:3
+msgid "Network Shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:58
+msgid "Path"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:52
+msgid ""
+"Please add directories to share. Each directory refers to a folder on a "
+"mounted device."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:68
+msgid "Read-only"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:14
+msgid "Share home-directories"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:51
+msgid "Shared Directories"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:35
+msgid ""
+"This is the content of the file '/etc/samba/smb.conf.template' from which "
+"your samba configuration will be generated. Values enclosed by pipe symbols "
+"('|') should not be changed. They get their values from the 'General "
+"Settings' tab."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:108
+msgid "Time-machine size in GB"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:103
+msgid "Vfs objects"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:13
+msgid "Workgroup"
+msgstr ""
diff --git a/package/lean/luci-app-samba4/po/uk/samba4.po b/package/lean/luci-app-samba4/po/uk/samba4.po
new file mode 100644
index 0000000000..5acd96cee7
--- /dev/null
+++ b/package/lean/luci-app-samba4/po/uk/samba4.po
@@ -0,0 +1,159 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"PO-Revision-Date: 2012-03-18 20:35+0200\n"
+"Last-Translator: YuriPet <yuripet@gmail.com>\n"
+"Language-Team: none\n"
+"Language: uk\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n%"
+"10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
+"X-Generator: Pootle 2.0.4\n"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:78
+msgid "Allow guests"
+msgstr "Дозволити гостьовий вхід"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:15
+msgid "Allow system users to reach their home directories via network shares"
+msgstr ""
+"Дозволити користувачам системи досягати своїх домашніх каталогів через "
+"загальні мережеві ресурси"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:75
+msgid "Allowed users"
+msgstr "Дозволені користувачі"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:106
+msgid "Apple Time-machine share"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:63
+msgid "Browse-able"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:93
+msgid "Create mask"
+msgstr "Створити маску"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:12
+msgid "Description"
+msgstr "Опис"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:98
+msgid "Directory mask"
+msgstr "Маска каталогу"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:27
+msgid "Disable Active Directory Domain Controller"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:24
+msgid "Disable Netbios"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:30
+msgid "Disable Winbind"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:9
+msgid "Edit Template"
+msgstr "Редагувати шаблон"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:34
+msgid "Edit the template that is used for generating the samba configuration."
+msgstr ""
+"Редагувати шаблон, який використовується для створення конфігурації samba."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:19
+msgid "Enable macOS compatible shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:20
+msgid ""
+"Enables Apple's AAPL extension globally and adds macOS compatibility options "
+"to all shares."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:73
+msgid "Force Root"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:8
+msgid "General Settings"
+msgstr "Загальні настройки"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:83
+msgid "Guests only"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:11
+msgid "Hostname"
+msgstr "Назва (ім'я) вузла"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:88
+msgid "Inherit owner"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:57
+msgid "Name"
+msgstr "Ім'я"
+
+#: applications/luci-app-samba4/luasrc/controller/samba4.lua:12
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:3
+msgid "Network Shares"
+msgstr "Загальні мережеві ресурси"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:58
+msgid "Path"
+msgstr "Шлях"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:52
+msgid ""
+"Please add directories to share. Each directory refers to a folder on a "
+"mounted device."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:68
+msgid "Read-only"
+msgstr "Тільки читання"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:14
+msgid "Share home-directories"
+msgstr "Спільно використовувати домашні каталоги"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:51
+msgid "Shared Directories"
+msgstr "Загальні каталоги"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:35
+msgid ""
+"This is the content of the file '/etc/samba/smb.conf.template' from which "
+"your samba configuration will be generated. Values enclosed by pipe symbols "
+"('|') should not be changed. They get their values from the 'General "
+"Settings' tab."
+msgstr ""
+"Це вміст файлу '/etc/samba/smb.conf.template', з якого буде генеруватися "
+"ваша конфігурація samba. Значення, укладені в символи \"вертикальна риска"
+"\" (\"|\") не повинні змінюватися. Вони отримують свої значення з вкладки "
+"\"Загальні налаштування\"."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:108
+msgid "Time-machine size in GB"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:103
+msgid "Vfs objects"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:13
+msgid "Workgroup"
+msgstr "Робоча група"
+
+#~ msgid "Mask for new directories"
+#~ msgstr "Маска для нових каталогів"
+
+#~ msgid "Mask for new files"
+#~ msgstr "Маска для нових файлів"
diff --git a/package/lean/luci-app-samba4/po/vi/samba4.po b/package/lean/luci-app-samba4/po/vi/samba4.po
new file mode 100644
index 0000000000..2920759f41
--- /dev/null
+++ b/package/lean/luci-app-samba4/po/vi/samba4.po
@@ -0,0 +1,171 @@
+#  samba.pot
+#  generated from ./applications/luci-samba/luasrc/i18n/samba.en.lua
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2009-08-16 06:59+0200\n"
+"PO-Revision-Date: 2009-08-13 03:54+0200\n"
+"Last-Translator: Hong Phuc Dang <dhppat@gmail.com>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: Pootle 1.1.0\n"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:78
+#, fuzzy
+msgid "Allow guests"
+msgstr "Cho phép khách"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:15
+#, fuzzy
+msgid "Allow system users to reach their home directories via network shares"
+msgstr ""
+"Những người sử dụng hệ thống có thể tiếp cận những thư mục tại nhà thông qua "
+"mạng lưới chia sẻ trực tuyến."
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:75
+#, fuzzy
+msgid "Allowed users"
+msgstr "Người sử dụng được cho phép"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:106
+msgid "Apple Time-machine share"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:63
+msgid "Browse-able"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:93
+#, fuzzy
+msgid "Create mask"
+msgstr "Tạo Mask"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:12
+msgid "Description"
+msgstr "Mô tả"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:98
+#, fuzzy
+msgid "Directory mask"
+msgstr "Thư mục Mask"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:27
+msgid "Disable Active Directory Domain Controller"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:24
+msgid "Disable Netbios"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:30
+msgid "Disable Winbind"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:9
+msgid "Edit Template"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:34
+msgid "Edit the template that is used for generating the samba configuration."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:19
+msgid "Enable macOS compatible shares"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:20
+msgid ""
+"Enables Apple's AAPL extension globally and adds macOS compatibility options "
+"to all shares."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:73
+msgid "Force Root"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:8
+msgid "General Settings"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:83
+msgid "Guests only"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:11
+msgid "Hostname"
+msgstr "tên máy chủ"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:88
+msgid "Inherit owner"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:57
+msgid "Name"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/controller/samba4.lua:12
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:3
+msgid "Network Shares"
+msgstr "Mạng chia sẻ"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:58
+msgid "Path"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:52
+msgid ""
+"Please add directories to share. Each directory refers to a folder on a "
+"mounted device."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:68
+#, fuzzy
+msgid "Read-only"
+msgstr "Chỉ đọc "
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:14
+msgid "Share home-directories"
+msgstr "Chia sẻ danh bạ chính"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:51
+msgid "Shared Directories"
+msgstr "Thư mục chia sẻ"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:35
+msgid ""
+"This is the content of the file '/etc/samba/smb.conf.template' from which "
+"your samba configuration will be generated. Values enclosed by pipe symbols "
+"('|') should not be changed. They get their values from the 'General "
+"Settings' tab."
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:108
+msgid "Time-machine size in GB"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:103
+msgid "Vfs objects"
+msgstr ""
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:13
+msgid "Workgroup"
+msgstr "Nhóm làm việc "
+
+#~ msgid "Mask for new directories"
+#~ msgstr "Mask cho thư mục mới"
+
+#~ msgid "Mask for new files"
+#~ msgstr "Mask cho tập tin mới"
+
+#~ msgid "Shared Directory"
+#~ msgstr "Đã chia sẻ thư mục"
+
+#~ msgid "Physical Path"
+#~ msgstr "Đường dẫn vật lý"
+
+#~ msgid "optional"
+#~ msgstr "Tùy thích"
diff --git a/package/lean/luci-app-samba4/po/zh-cn/samba4.po b/package/lean/luci-app-samba4/po/zh-cn/samba4.po
new file mode 100644
index 0000000000..f1d681ecbf
--- /dev/null
+++ b/package/lean/luci-app-samba4/po/zh-cn/samba4.po
@@ -0,0 +1,164 @@
+#
+# Yangfl <mmyangfl@gmail.com>, 2017, 2018.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2009-06-10 03:40+0200\n"
+"PO-Revision-Date: 2018-10-01 11:12+0800\n"
+"Last-Translator: Yangfl <mmyangfl@gmail.com>\n"
+"Language-Team:  <debian-l10n-chinese@lists.debian.org>\n"
+"Language: zh_CN\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+"X-Generator: Gtranslator 2.91.7\n"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:78
+msgid "Allow guests"
+msgstr "允许匿名用户"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:15
+msgid "Allow system users to reach their home directories via network shares"
+msgstr "允许系统用户通过网络共享访问他们的家目录"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:75
+msgid "Allowed users"
+msgstr "允许用户"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:106
+msgid "Apple Time-machine share"
+msgstr "Apple Time-machine 共享"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:63
+msgid "Browse-able"
+msgstr "可浏览"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:93
+msgid "Create mask"
+msgstr "创建权限掩码"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:12
+msgid "Description"
+msgstr "描述"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:98
+msgid "Directory mask"
+msgstr "目录权限掩码"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:27
+msgid "Disable Active Directory Domain Controller"
+msgstr "禁用 Active Directory 域控制器"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:24
+msgid "Disable Netbios"
+msgstr "禁用 Netbios"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:30
+msgid "Disable Winbind"
+msgstr "禁用 Winbind"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:9
+msgid "Edit Template"
+msgstr "编辑模板"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:34
+msgid "Edit the template that is used for generating the samba configuration."
+msgstr "编辑用来生成 samba 设置的模板"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:19
+msgid "Enable macOS compatible shares"
+msgstr "启用 macOS 兼容共享"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:20
+msgid ""
+"Enables Apple's AAPL extension globally and adds macOS compatibility options "
+"to all shares."
+msgstr "全局启用 Apple 的 AAPL 扩展，并为所有共享添加 macOS 兼容性选项。"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:73
+msgid "Force Root"
+msgstr "强制 Root"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:8
+msgid "General Settings"
+msgstr "基本设置"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:83
+msgid "Guests only"
+msgstr "仅来宾用户"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:11
+msgid "Hostname"
+msgstr "主机名"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:88
+msgid "Inherit owner"
+msgstr "继承所有者"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:57
+msgid "Name"
+msgstr "共享名"
+
+#: applications/luci-app-samba4/luasrc/controller/samba4.lua:12
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:3
+msgid "Network Shares"
+msgstr "网络共享"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:58
+msgid "Path"
+msgstr "目录"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:52
+msgid ""
+"Please add directories to share. Each directory refers to a folder on a "
+"mounted device."
+msgstr "请添加要共享的目录。每个目录指到已挂载设备上的文件夹。"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:68
+msgid "Read-only"
+msgstr "只读"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:14
+msgid "Share home-directories"
+msgstr "共享家目录"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:51
+msgid "Shared Directories"
+msgstr "共享目录"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:35
+msgid ""
+"This is the content of the file '/etc/samba/smb.conf.template' from which "
+"your samba configuration will be generated. Values enclosed by pipe symbols "
+"('|') should not be changed. They get their values from the 'General "
+"Settings' tab."
+msgstr ""
+"这是将从其上生成 samba 配置的文件“/etc/samba/smb.conf.template”的内容。由管道"
+"符（“|”）包围的值不应更改。它们将从“常规设置”标签中获取其值。"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:108
+msgid "Time-machine size in GB"
+msgstr "Time-machine 大小（GB）"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:103
+msgid "Vfs objects"
+msgstr "VFS 对象"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:13
+msgid "Workgroup"
+msgstr "工作组"
+
+#~ msgid "Browseable"
+#~ msgstr "可浏览"
+
+#~ msgid "Mask for new directories"
+#~ msgstr "新目录权限掩码"
+
+#~ msgid "Mask for new files"
+#~ msgstr "新文件权限掩码"
+
+#~ msgid "Physical Path"
+#~ msgstr "物理路径"
diff --git a/package/lean/luci-app-samba4/po/zh-tw/samba4.po b/package/lean/luci-app-samba4/po/zh-tw/samba4.po
new file mode 100644
index 0000000000..9e6fcfdff7
--- /dev/null
+++ b/package/lean/luci-app-samba4/po/zh-tw/samba4.po
@@ -0,0 +1,164 @@
+#
+# Yangfl <mmyangfl@gmail.com>, 2017, 2018.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2009-06-10 03:40+0200\n"
+"PO-Revision-Date: 2018-10-01 11:12+0800\n"
+"Last-Translator: Yangfl <mmyangfl@gmail.com>\n"
+"Language-Team:  <debian-l10n-chinese@lists.debian.org>\n"
+"Language: zh_TW\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+"X-Generator: Gtranslator 2.91.7\n"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:78
+msgid "Allow guests"
+msgstr "允許匿名使用者"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:15
+msgid "Allow system users to reach their home directories via network shares"
+msgstr "允許系統使用者通過網路共享訪問他們的家目錄"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:75
+msgid "Allowed users"
+msgstr "允許使用者"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:106
+msgid "Apple Time-machine share"
+msgstr "Apple Time-machine 共享"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:63
+msgid "Browse-able"
+msgstr "可瀏覽"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:93
+msgid "Create mask"
+msgstr "建立權限掩碼"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:12
+msgid "Description"
+msgstr "描述"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:98
+msgid "Directory mask"
+msgstr "目錄權限掩碼"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:27
+msgid "Disable Active Directory Domain Controller"
+msgstr "禁用 Active Directory 域控制器"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:24
+msgid "Disable Netbios"
+msgstr "禁用 Netbios"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:30
+msgid "Disable Winbind"
+msgstr "禁用 Winbind"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:9
+msgid "Edit Template"
+msgstr "編輯模板"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:34
+msgid "Edit the template that is used for generating the samba configuration."
+msgstr "編輯用來生成 samba 設定的模板"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:19
+msgid "Enable macOS compatible shares"
+msgstr "啟用 macOS 相容共享"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:20
+msgid ""
+"Enables Apple's AAPL extension globally and adds macOS compatibility options "
+"to all shares."
+msgstr "全域性啟用 Apple 的 AAPL 擴充套件，併為所有共享新增 macOS 相容性選項。"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:73
+msgid "Force Root"
+msgstr "強制 Root"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:8
+msgid "General Settings"
+msgstr "基本設定"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:83
+msgid "Guests only"
+msgstr "僅來賓使用者"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:11
+msgid "Hostname"
+msgstr "主機名"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:88
+msgid "Inherit owner"
+msgstr "繼承所有者"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:57
+msgid "Name"
+msgstr "共享名"
+
+#: applications/luci-app-samba4/luasrc/controller/samba4.lua:12
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:3
+msgid "Network Shares"
+msgstr "網路共享"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:58
+msgid "Path"
+msgstr "目錄"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:52
+msgid ""
+"Please add directories to share. Each directory refers to a folder on a "
+"mounted device."
+msgstr "請新增要共享的目錄。每個目錄指到已掛載裝置上的資料夾。"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:68
+msgid "Read-only"
+msgstr "只讀"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:14
+msgid "Share home-directories"
+msgstr "共享家目錄"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:51
+msgid "Shared Directories"
+msgstr "共享目錄"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:35
+msgid ""
+"This is the content of the file '/etc/samba/smb.conf.template' from which "
+"your samba configuration will be generated. Values enclosed by pipe symbols "
+"('|') should not be changed. They get their values from the 'General "
+"Settings' tab."
+msgstr ""
+"這是將從其上生成 samba 配置的檔案“/etc/samba/smb.conf.template”的內容。由管道"
+"符（“|”）包圍的值不應更改。它們將從“常規設定”標籤中獲取其值。"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:108
+msgid "Time-machine size in GB"
+msgstr "Time-machine 大小（GB）"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:103
+msgid "Vfs objects"
+msgstr "VFS 物件"
+
+#: applications/luci-app-samba4/luasrc/model/cbi/samba4.lua:13
+msgid "Workgroup"
+msgstr "工作組"
+
+#~ msgid "Browseable"
+#~ msgstr "可瀏覽"
+
+#~ msgid "Mask for new directories"
+#~ msgstr "新目錄權限掩碼"
+
+#~ msgid "Mask for new files"
+#~ msgstr "新檔案權限掩碼"
+
+#~ msgid "Physical Path"
+#~ msgstr "物理路徑"
diff --git a/package/lean/luci-app-sfe/Makefile b/package/lean/luci-app-sfe/Makefile
new file mode 100644
index 0000000000..25ed29e713
--- /dev/null
+++ b/package/lean/luci-app-sfe/Makefile
@@ -0,0 +1,17 @@
+# Copyright (C) 2016 Openwrt.org
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI support for Turbo ACC (SFE)
+LUCI_DEPENDS:=+kmod-fast-classifier +pdnsd-alt +kmod-tcp-bbr @LINUX_4_9
+LUCI_PKGARCH:=all
+PKG_VERSION:=1.0
+PKG_RELEASE:=38
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
diff --git a/package/lean/luci-app-sfe/luasrc/controller/sfe.lua b/package/lean/luci-app-sfe/luasrc/controller/sfe.lua
new file mode 100644
index 0000000000..64ad85cd57
--- /dev/null
+++ b/package/lean/luci-app-sfe/luasrc/controller/sfe.lua
@@ -0,0 +1,44 @@
+module("luci.controller.sfe", package.seeall)
+
+function index()
+	if not nixio.fs.access("/etc/config/sfe") then
+		return
+	end
+	local page
+	page = entry({"admin", "network", "sfe"}, cbi("sfe"), _("Turbo ACC Center"), 100)
+	page.i18n = "sfe"
+	page.dependent = true
+	
+	entry({"admin", "network", "sfe", "status"}, call("action_status"))
+end
+
+local function is_running()
+	return luci.sys.call("lsmod | grep fast_classifier >/dev/null") == 0
+end
+
+local function is_bbr()
+	return luci.sys.call("sysctl net.ipv4.tcp_congestion_control | grep bbr >/dev/null") == 0
+end
+
+local function is_fullcone()
+	return luci.sys.call("iptables -t nat -L -n --line-numbers | grep FULLCONENAT >/dev/null") == 0
+end
+
+local function is_dns()
+	return luci.sys.call("[ `uci get sfe.@flow[0].dnscache_enable 2>/dev/null` -ne 3 ] && pgrep dnscache >/dev/null || pgrep AdGuardHome >/dev/null") == 0
+end
+
+local function is_ad()
+	return luci.sys.call("pgrep AdGuardHome >/dev/null") == 0
+end
+
+function action_status()
+	luci.http.prepare_content("application/json")
+	luci.http.write_json({
+		run_state = is_running(),
+		down_state = is_bbr(),
+		up_state = is_fullcone(),
+		dns_state = is_dns(),
+		ad_state = is_ad()
+	})
+end
diff --git a/package/lean/luci-app-sfe/luasrc/model/cbi/sfe.lua b/package/lean/luci-app-sfe/luasrc/model/cbi/sfe.lua
new file mode 100644
index 0000000000..eae4f2145e
--- /dev/null
+++ b/package/lean/luci-app-sfe/luasrc/model/cbi/sfe.lua
@@ -0,0 +1,72 @@
+local trport = 3001
+local button = ""
+if luci.sys.call("pidof AdGuardHome >/dev/null") == 0 then
+	button = "&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<input type=\"button\" value=\" " .. translate("Open Web Interface") .. " \" onclick=\"window.open('http://'+window.location.hostname+':" .. trport .. "')\"/>"
+end
+
+m = Map("sfe")
+m.title	= translate("Turbo ACC Acceleration Settings")
+m.description = translate("Opensource Qualcomm Shortcut FE driver (Fast Path)")
+
+m:append(Template("sfe/status"))
+
+s = m:section(TypedSection, "sfe", "")
+s.addremove = false
+s.anonymous = true
+
+
+enable = s:option(Flag, "enabled", translate("Enable SFE Fast Path"))
+enable.default = 0
+enable.rmempty = false
+enable.description = translate("Enable Fast Path offloading for connections. (decrease cpu load / increase routing throughput)")
+
+wifi = s:option(Flag, "wifi", translate("Bridge Acceleration"))
+wifi.default = 0
+wifi.rmempty = false
+wifi.description = translate("Enable Bridge Acceleration (may be functional conflict with bridge-mode VPN Server)")
+wifi:depends("enabled", 1)
+
+ipv6 = s:option(Flag, "ipv6", translate("IPv6 Acceleration"))
+ipv6.default = 0
+ipv6.rmempty = false
+ipv6.description = translate("Enable IPv6 Acceleration")
+ipv6:depends("enabled", 1)
+
+bbr = s:option(Flag, "bbr", translate("Enable BBR"))
+bbr.default = 0
+bbr.rmempty = false
+bbr.description = translate("Bottleneck Bandwidth and Round-trip propagation time (BBR)")
+
+aaaa = s:option(Flag, "filter_aaaa", translate("Filter AAAA"))
+aaaa.default = 1
+aaaa.rmempty = false
+aaaa.description = translate("Dnsmasq rejects IPv6 parsing and optimizes domestic complex dual-stack network")
+
+dns = s:option(Flag, "dns", translate("DNS Acceleration"))
+dns.default = 0
+dns.rmempty = false
+dns.description = translate("Enable DNS Cache Acceleration and anti ISP DNS pollution")
+
+o = s:option(ListValue, "dnscache_enable", translate("Resolve Dns Mode"), translate("AdGuardHome's login username/passwd: AdGuardHome, web console addr: IP:3001") .. button)
+o:value("1", translate("Use Pdnsd query and cache"))
+if nixio.fs.access("/usr/bin/dnsforwarder") then
+o:value("2", translate("Use dnsforwarder query and cache"))
+end
+if nixio.fs.access("/usr/bin/AdGuardHome") then
+o:value("3", translate("Use AdGuardHome query and cache"))
+end
+o.default = 1
+o:depends("dns", 1)
+
+o = s:option(Value, "dns_server", translate("Upsteam DNS Server"))
+o.default = "114.114.114.114,114.114.115.115,223.5.5.5,223.6.6.6,180.76.76.76,119.29.29.29,119.28.28.28,1.2.4.8,210.2.4.8"
+o.description = translate("Muitiple DNS server can saperate with ','")
+o:depends("dnscache_enable", 1)
+o:depends("dnscache_enable", 2)
+
+o = s:option(Value, "ipv6dns_server", translate("Upsteam IPV6 DNS Server"))
+o.default = "2001:4860:4860::8888,2001:4860:4860::8844,2001:2001::1111,2001:2001::1001,2400:da00::6666,240C::6666,240C::6644"
+o.description = translate("Muitiple IPV6 DNS server can saperate with ','")
+o:depends("dnscache_enable", 2)
+
+return m
diff --git a/package/lean/luci-app-sfe/luasrc/view/sfe/status.htm b/package/lean/luci-app-sfe/luasrc/view/sfe/status.htm
new file mode 100644
index 0000000000..e38724c8e7
--- /dev/null
+++ b/package/lean/luci-app-sfe/luasrc/view/sfe/status.htm
@@ -0,0 +1,27 @@
+<fieldset class="cbi-section">
+	<legend><%:Running Status%></legend>
+	<table width="100%" cellspacing="10" id="_xlnetacc_status_table">
+		<tr><td width="33%">SFE 加速状态</td><td id="_run_state"><em><%:Collecting data...%></em></td></tr>
+		<tr><td width="33%">BBR 加速</td><td id="_down_state"><em><%:Collecting data...%></em></td></tr>
+		<tr><td width="33%">FULLCONE NAT加速</td><td id="_up_state"><em><%:Collecting data...%></em></td></tr>
+		<tr><td width="33%">DNS 加速</td><td id="_dns_state"><em><%:Collecting data...%></em></td></tr>
+		<tr><td width="33%">AdGuardHome 去广告</td><td id="_ad_state"><em><%:Collecting data...%></em></td></tr>
+	</table>
+</fieldset>
+
+<script type="text/javascript">//<![CDATA[
+	var run_state = document.getElementById('_run_state');
+	var down_state = document.getElementById('_down_state');
+	var up_state = document.getElementById('_up_state');
+	var dns_state = document.getElementById('_dns_state');
+	var ad_state = document.getElementById('_ad_state');
+	XHR.poll(5, '<%=luci.dispatcher.build_url("admin", "network", "sfe", "status")%>', null, function(x, status) {
+		if ( x && x.status == 200 ) {
+			run_state.innerHTML = status.run_state ? '<em><b><font color=green><%:RUNNING%></font></b></em>' : '<em><b><font color=red><%:NOT RUNNING%></font></b></em>';
+			down_state.innerHTML = status.down_state ? '<em><b><font color=green><%:RUNNING%></font></b></em>' : '<em><b><font color=red><%:NOT RUNNING%></font></b></em>';
+			up_state.innerHTML = status.up_state ? '<em><b><font color=green><%:RUNNING%></font></b></em>' : '<em><b><font color=red><%:NOT RUNNING%></font></b></em>';
+			dns_state.innerHTML = status.dns_state ? '<em><b><font color=green><%:RUNNING%></font></b></em>' : '<em><b><font color=red><%:NOT RUNNING%></font></b></em>';
+			ad_state.innerHTML = status.ad_state ? '<em><b><font color=green><%:RUNNING%></font></b></em>' : '<em><b><font color=red><%:NOT RUNNING%></font></b></em>';
+		}
+	});
+//]]></script>
diff --git a/package/lean/luci-app-sfe/po/zh-cn/sfe.po b/package/lean/luci-app-sfe/po/zh-cn/sfe.po
new file mode 100644
index 0000000000..7d991d9a43
--- /dev/null
+++ b/package/lean/luci-app-sfe/po/zh-cn/sfe.po
@@ -0,0 +1,86 @@
+msgid "SFE Acceleration"
+msgstr "SFE 转发加速"
+
+msgid "Turbo ACC Center"
+msgstr "Turbo ACC 网络加速"
+
+msgid "Turbo ACC Acceleration Settings"
+msgstr "Turbo ACC 网络加速设置"
+
+msgid "Shortcut Forwarding Engine Acceleration Settings"
+msgstr "SFE 转发加速引擎设置"
+
+msgid "Opensource Qualcomm Shortcut FE driver (Fast Path)"
+msgstr "来自高通开源的 Shortcut FE 转发加速引擎 (Fast Path)"
+
+msgid "Enable"
+msgstr "启用"
+
+msgid "Enable SFE Fast Path"
+msgstr "启用 SFE Fast Path 加速"
+
+msgid "Enable Fast Path offloading for connections. (decrease cpu load / increase routing throughput)"
+msgstr "开启 Fast Path 转发加速. (降低CPU占用 / 增强路由转发性能，和多WAN或者QOS功能可能会冲突)"
+
+msgid "Bridge Acceleration"
+msgstr "桥接加速"
+
+msgid "Enable Bridge Acceleration (may be functional conflict with bridge-mode VPN Server)"
+msgstr "启用桥接加速 (可能会和路由器上桥接模式的VPN服务器冲突)"
+
+msgid "IPv6 Acceleration"
+msgstr "IPv6 加速"
+
+msgid "Enable IPv6 Acceleration"
+msgstr "开启IPv6加速"
+
+msgid "Enable BBR"
+msgstr "启用 BBR"
+
+msgid "Bottleneck Bandwidth and Round-trip propagation time (BBR)"
+msgstr "BBR拥塞控制算法可以加强TCP应用表现，但会降低路由器本机上的WIFI吞吐性能"
+
+msgid "DNS Acceleration"
+msgstr "DNS 加速"
+
+msgid "Enable DNS Cache Acceleration and anti ISP DNS pollution"
+msgstr "启用DNS多线程查询、缓存，并防止ISP的DNS广告和域名劫持"
+
+msgid "Resolve Dns Mode"
+msgstr "DNS解析方式"
+
+msgid "Enable dnsmasq killqqad"
+msgstr "启用dnsmasq去广告"
+
+msgid "dnsmasq killqqad"
+msgstr "dnsmasq去广告"
+
+msgid "Use Pdnsd query and cache"
+msgstr "使用pdnsd解析"
+
+msgid "Use dnsforwarder query and cache"
+msgstr "使用dnsforwarder解析"
+
+msgid "Use AdGuardHome query and cache"
+msgstr "使用AdGuardHome解析去广告"
+
+msgid "Upsteam DNS Server"
+msgstr "上游 DNS 服务器(国内)"
+
+msgid "Upsteam IPV6 DNS Server"
+msgstr "上游 IPV6 DNS 服务器"
+
+msgid "Muitiple DNS server can saperate with ','"
+msgstr "支持多个上游DNS服务器，用','分隔（注意用英文逗号).请填写您最快的DNS服务器"
+
+msgid "Muitiple IPV6 DNS server can saperate with ','"
+msgstr "支持dnsforwarder解析多个上游IPV6 DNS服务器，用','分隔（注意用英文逗号).请填写您最快的DNS服务器"
+
+msgid "AdGuardHome's login username/passwd: AdGuardHome, web console addr: IP:3001"
+msgstr "AdGuardHome 网页控制台地址：IP:3001 登录账号/密码：AdGuardHome"
+
+msgid "Filter AAAA"
+msgstr "忽略域名的IPv6地址"
+
+msgid "Dnsmasq rejects IPv6 parsing and optimizes domestic complex dual-stack network"
+msgstr "dnsmasq不返回ipv6解析结果,优化国内复杂双栈网络"
diff --git a/package/lean/luci-app-sfe/root/etc/config/sfe b/package/lean/luci-app-sfe/root/etc/config/sfe
new file mode 100644
index 0000000000..b48624ca65
--- /dev/null
+++ b/package/lean/luci-app-sfe/root/etc/config/sfe
@@ -0,0 +1,10 @@
+config sfe
+	option enabled '0'
+	option ipv6 '0'
+	option wifi '0'
+	option bbr '0'
+	option dns '0'
+	option dnscache_enable '1'
+	option dns_server '114.114.114.114,114.114.115.115,223.5.5.5,223.6.6.6,180.76.76.76,119.29.29.29,119.28.28.28,1.2.4.8,210.2.4.8'
+	option ipv6dns_server '2001:4860:4860::8888,2001:4860:4860::8844,2001:2001::1111,2001:2001::1001,2400:da00::6666,240C::6666,240C::6644'
+
diff --git a/package/lean/luci-app-sfe/root/etc/init.d/sfe b/package/lean/luci-app-sfe/root/etc/init.d/sfe
new file mode 100755
index 0000000000..d80d20cba0
--- /dev/null
+++ b/package/lean/luci-app-sfe/root/etc/init.d/sfe
@@ -0,0 +1,299 @@
+#!/bin/sh /etc/rc.common
+# Copyright (C) 2007-2012 OpenWrt.org
+
+START=90
+
+USE_PROCD=1
+
+
+DNSMASQ_RESTART=N
+DNS_SERVER="114.114.114.114,114.114.115.115,223.5.5.5,223.6.6.6,180.76.76.76,119.29.29.29,119.28.28.28,1.2.4.8,210.2.4.8"
+IPV6DNS_SERVER="2001:4860:4860::8888,2001:4860:4860::8844,2001:2001::1111,2001:2001::1001,2400:da00::6666,240C::6666,240C::6644"
+
+start_pdnsd() {
+	DNS_SERVER=$(uci get sfe.config.dns_server 2>/dev/null)
+	cp -a /usr/sbin/pdnsd /usr/sbin/dnscache
+	sleep 1
+	[ -d /var/etc ] || mkdir -p /var/etc
+	
+	if [ ! -f /var/dnscache/pdnsd.cache ]; then
+		mkdir -p /var/dnscache
+		echo -ne "pd13\000\000\000\000" > /var/dnscache/pdnsd.cache
+		chown -R nobody.nogroup /var/dnscache
+	fi
+	
+	cat > /var/etc/dnscache.conf <<EOF
+global {
+    perm_cache=1024;        # dns缓存大小，单位KB，建议不要写的太大
+    cache_dir="/var/dnscache";     # 缓存文件的位置
+    pid_file = /var/run/dnscache.pid;
+    server_ip = 0.0.0.0;        # pdnsd监听的网卡，0.0.0.0是全部网卡
+    server_port=5333;           # pdnsd监听的端口，不要和别的服务冲突即可
+    status_ctl = on;
+    paranoid=on;                  # 二次请求模式，如果请求主DNS服务器返回的是垃圾地址，就向备用服务器请求
+    query_method=udp_only;      
+    neg_domain_pol = off;  
+    par_queries = 400;          # 最多同时请求数
+    min_ttl = 1h;               # DNS结果最短缓存时间
+    max_ttl = 1w;               # DNS结果最长缓存时间
+    timeout = 10;               # DNS请求超时时间，单位秒
+}
+
+server {  
+    label = "routine";         
+    ip = $DNS_SERVER;     # 这里为主要上级 dns 的 ip 地址，建议填写一个当地最快的DNS地址  
+    timeout = 5;              # DNS请求超时时间
+    reject = 74.125.127.102,  # 以下是脏IP，也就是DNS污染一般会返回的结果，如果收到如下DNS结果会触发二次请求（TCP协议一般不会碰到脏IP）
+        74.125.155.102,  
+        74.125.39.102,  
+        74.125.39.113,  
+        209.85.229.138,  
+        128.121.126.139,  
+        159.106.121.75,  
+        169.132.13.103,  
+        192.67.198.6,  
+        202.106.1.2,  
+        202.181.7.85,  
+        203.161.230.171,  
+        203.98.7.65,  
+        207.12.88.98,  
+        208.56.31.43,  
+        209.145.54.50,  
+        209.220.30.174,  
+        209.36.73.33,  
+        211.94.66.147,  
+        213.169.251.35,  
+        216.221.188.182,  
+        216.234.179.13,  
+        243.185.187.39,  
+        37.61.54.158,  
+        4.36.66.178,  
+        46.82.174.68,  
+        59.24.3.173,  
+        64.33.88.161,  
+        64.33.99.47,  
+        64.66.163.251,  
+        65.104.202.252,  
+        65.160.219.113,  
+        66.45.252.237,  
+        69.55.52.253,  
+        72.14.205.104,  
+        72.14.205.99,  
+        78.16.49.15,  
+        8.7.198.45,  
+        93.46.8.89,  
+        37.61.54.158,  
+        243.185.187.39,  
+        190.93.247.4,  
+        190.93.246.4,  
+        190.93.245.4,  
+        190.93.244.4,  
+        65.49.2.178,  
+        189.163.17.5,  
+        23.89.5.60,  
+        49.2.123.56,  
+        54.76.135.1,  
+        77.4.7.92,  
+        118.5.49.6,  
+        159.24.3.173,  
+        188.5.4.96,  
+        197.4.4.12,  
+        220.250.64.24,  
+        243.185.187.30,  
+        249.129.46.48,  
+        253.157.14.165;  
+    reject_policy = fail;  
+}
+
+server {  
+    label = "special";                  # 这个随便写  
+    ip = 208.67.222.222,208.67.220.220; # 这里为备用DNS服务器的 ip 地址  
+    port = 5353;                        # 推荐使用53以外的端口（DNS服务器必须支持） 
+    proxy_only = on;
+    timeout = 5;  
+}  
+
+source {
+	owner=localhost;
+//	serve_aliases=on;
+	file="/etc/hosts";
+}
+
+rr {
+	name=localhost;
+	reverse=on;
+	a=127.0.0.1;
+	owner=localhost;
+	soa=localhost,root.localhost,42,86400,900,86400,86400;
+}
+EOF
+
+	[ -d /var/sbin ] || mkdir -p /var/sbin
+	[ -f /var/sbin/dnscache ] || cp -a /usr/sbin/pdnsd /var/sbin/dnscache
+	/usr/sbin/dnscache -c /var/etc/dnscache.conf -d
+	echo "Start DNS Cache"
+}
+
+start_dnsforwarder() {
+	DNS_SERVER=$(uci get sfe.config.dns_server 2>/dev/null)
+	IPV6DNS_SERVER=$(uci get sfe.config.ipv6dns_server 2>/dev/null)
+	dnscache_enable=$(uci get sfe.config.dnscache_enable 2>/dev/null)
+	if [ $dnscache_enable = "2" ];  then
+		localserver=0.0.0.0:5333
+	elif [ $dnscache_enable = "3" ];  then
+		localserver=0.0.0.0:5383
+	fi
+	cp -a /usr/bin/dnsforwarder /usr/sbin/dnscache
+	sleep 1
+	DNSCACHE_CONF=/var/run/dnscache/dnscache.conf
+	PID_PATH=/var/run/dnscache
+	PID_FILE=dns.pid
+	mkdir -p $PID_PATH
+	pid=`ps | awk '$5 ~ /\[dnscache\]/ {print $1}'`
+
+	cat > /var/run/dnscache/dnscache.conf <<EOF
+LogOn false
+LogFileThresholdLength 102400
+LogFileFolder /var/run/dnscache
+UDPLocal $localserver
+UDPGroup $DNS_SERVER,$IPV6DNS_SERVER * on
+GroupFile
+BlockIP 243.185.187.39,46.82.174.68,37.61.54.158,93.46.8.89,59.24.3.173,203.98.7.65,8.7.198.45,78.16.49.15,159.106.121.75,69.63.187.12,31.13.76.8,31.13.64.49
+IPSubstituting
+BlockNegativeResponse false
+Hosts
+HostsUpdateInterval 18000
+HostsDownloadPath
+HostsScript
+HostsRetryInterval 30
+AppendHosts
+BlockIpv6WhenIpv4Exists false
+UseCache true
+CacheSize 1048576
+MemoryCache true
+CacheFile
+IgnoreTTL false
+OverrideTTL -1
+MultipleTTL 1
+ReloadCache false
+OverwriteCache false
+DisabledType
+DisabledDomain
+DisabledList
+DomainStatistic false
+DomainStatisticTempletFile
+StatisticUpdateInterval 29
+EOF
+	
+	dnscache -f $DNSCACHE_CONF -d
+	logger -t alex the pid of dnscache is $PID_PATH/$PID_FILE $pid
+
+}
+
+stop_dnscache() {
+	kill $(pidof AdGuardHome) >/dev/null 2>&1 || kill -9 $(ps | grep AdGuardHome | grep -v "grep" | awk '{print $1}') >/dev/null 2>&1
+	kill $(pidof dnscache) >/dev/null 2>&1 || kill -9 $(ps | grep dnscache | grep -v "grep" | awk '{print $1}') >/dev/null 2>&1
+	rm -rf /var/run/dnscache
+	rm -rf /var/dnscache
+	echo "Stop DNS Cache"
+
+}
+
+change_dns() {
+ 	uci delete dhcp.@dnsmasq[0].server >/dev/null 2>&1
+	uci add_list dhcp.@dnsmasq[0].server=127.0.0.1#5333
+	uci set dhcp.@dnsmasq[0].noresolv=1
+	uci commit dhcp
+
+}
+
+revert_dns() {
+	uci del_list dhcp.@dnsmasq[0].server=127.0.0.1#5333 >/dev/null 2>&1
+	uci set dhcp.@dnsmasq[0].resolvfile=/tmp/resolv.conf.auto
+	uci set dhcp.@dnsmasq[0].noresolv=0
+	uci commit dhcp
+
+}
+
+start_service() {
+	enable=$(uci get sfe.config.enabled 2>/dev/null)
+	wifi=$(uci get sfe.config.wifi)
+	ipv6=$(uci get sfe.config.ipv6)
+	dns=$(uci get sfe.config.dns 2>/dev/null)
+	dnscache_enable=$(uci get sfe.config.dnscache_enable 2>/dev/null)
+	bbr=$(uci get sfe.config.bbr 2>/dev/null)
+	aaaa=$(uci get sfe.config.filter_aaaa 2>/dev/null)
+	if [ $aaaa -eq 1 ];  then
+		sed -i '/filter-aaaa/d' /etc/dnsmasq.conf
+		echo "filter-aaaa" >> /etc/dnsmasq.conf
+	else
+		sed -i '/filter-aaaa/d' /etc/dnsmasq.conf	
+	fi
+  
+	if [ $enable -eq 1 ]; then
+		! (lsmod | grep fast_classifier >/dev/null) && (modprobe fast_classifier)
+		if [ $wifi -eq 1 ] ;  then
+			echo 1 > /sys/fast_classifier/skip_to_bridge_ingress
+		else
+			echo 0 > /sys/fast_classifier/skip_to_bridge_ingress
+		fi
+
+		if [ $ipv6 -eq 1 ];  then
+			sfe_ipv6=$(cat /sys/sfe_ipv6/debug_dev)
+			[ ! -f /dev/sfe_ipv6 ] && mknod /dev/sfe_ipv6 c $sfe_ipv6 0
+		else
+			rm -f /dev/sfe_ipv6
+		fi
+	else
+		rmmod fast_classifier >/dev/null 2>&1 
+	fi
+  
+	if [ $dns -eq 1 ];  then
+		kill -9 $(ps | grep dnscache-while.sh | grep -v "grep" | awk '{print $1}') >/dev/null 2>&1
+		stop_dnscache
+		sleep 1
+		rm -f /var/log/dnscache.file
+		rm -f /etc/AdGuardHome/data/querylog.json*
+		if [ $dnscache_enable = "1" ];  then
+			start_pdnsd
+		elif [ $dnscache_enable = "2" ];  then
+			start_dnsforwarder
+		elif [ $dnscache_enable = "3" ];  then
+			AdGuardHome -c /etc/AdGuardHome/AdGuardHome.yaml -w /etc/AdGuardHome >/dev/null 2>&1 &
+		fi
+		change_dns
+		nohup /usr/share/dnscache/dnscache-while.sh > /var/log/dnscache.file 2>&1 &
+	else
+		stop_dnscache
+		revert_dns
+		kill -9 $(ps | grep dnscache-while.sh | grep -v "grep" | awk '{print $1}') >/dev/null 2>&1
+	fi
+  
+	if [ $bbr -eq 1 ];  then
+		sysctl -w net.ipv4.tcp_congestion_control=bbr
+	else
+		sysctl -w net.ipv4.tcp_congestion_control=cubic
+	fi
+
+	if [ "$DNSMASQ_RESTART" = N ]; then
+		/etc/init.d/dnsmasq restart
+	fi
+}
+
+stop_service(){
+    enable=$(uci get sfe.config.enabled 2>/dev/null)
+    [ $enable -ne 1 ] && rmmod fast_classifier >/dev/null 2>&1 
+	stop_dnscache
+    revert_dns
+	kill -9 $(ps | grep dnscache-while.sh | grep -v "grep" | awk '{print $1}') >/dev/null 2>&1
+	if [ "$DNSMASQ_RESTART" = N ]; then
+		/etc/init.d/dnsmasq restart
+	fi
+}
+
+restart(){
+	DNSMASQ_RESTART=Y
+	stop
+	start
+	/etc/init.d/dnsmasq restart && echo "DNSMASQ restart"
+}
diff --git a/package/lean/luci-app-sfe/root/etc/uci-defaults/sfe b/package/lean/luci-app-sfe/root/etc/uci-defaults/sfe
new file mode 100755
index 0000000000..50adb160fd
--- /dev/null
+++ b/package/lean/luci-app-sfe/root/etc/uci-defaults/sfe
@@ -0,0 +1,14 @@
+#!/bin/sh
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@sfe[-1]
+	add ucitrack sfe
+	set ucitrack.@sfe[-1].init=sfe
+	commit ucitrack
+EOF
+
+[ ! -f /usr/sbin/dnscache ] && ln /usr/sbin/pdnsd /usr/sbin/dnscache
+/etc/init.d/sfe enable
+
+rm -f /tmp/luci-indexcache
+exit 0
diff --git a/package/lean/luci-app-sfe/root/usr/share/dnscache/dnscache-while.sh b/package/lean/luci-app-sfe/root/usr/share/dnscache/dnscache-while.sh
new file mode 100755
index 0000000000..c477326ed6
--- /dev/null
+++ b/package/lean/luci-app-sfe/root/usr/share/dnscache/dnscache-while.sh
@@ -0,0 +1,49 @@
+#!/bin/sh
+
+sleeptime=30
+logfile="/var/log/dnscache.file"
+adg_logfile="/etc/AdGuardHome/data/querylog.json"
+dns_enable=$(uci get sfe.config.dns 2>/dev/null)
+dnscache_enable=$(uci get sfe.config.dnscache_enable 2>/dev/null)
+
+clean_log(){
+logrow=$(grep -c "" ${logfile})
+if [ $logrow -ge 500 ];then
+    cat /dev/null > ${logfile}
+    echo "$curtime Log条数超限，清空处理！" >> ${logfile}
+fi
+if [ $dnscache_enable = "3" ];then
+    adg_logrow=$(grep -c "" ${adg_logfile})
+    if [ $adg_logrow -ge 500 ];then
+        cat /dev/null > ${adg_logfile}
+        echo "$curtime Log条数超限，清空处理！" >> ${adg_logfile}
+    fi
+fi
+
+}
+
+while [ $dns_enable -eq 1 ];
+do
+curtime=`date "+%H:%M:%S"`
+echo "$curtime online! "
+if [ $dns_enable -eq 1 ]; then
+	if [ $dnscache_enable = "3" ];  then
+		if ! pidof AdGuardHome>/dev/null; then
+			AdGuardHome -c /etc/AdGuardHome/AdGuardHome.yaml -w /etc/AdGuardHome >/dev/null 2>&1 &
+			echo "$curtime 重启服务！" >> ${logfile}
+		fi
+	else
+		if ! pidof dnscache>/dev/null; then
+			if [ $dnscache_enable = "1" ];  then
+			/usr/sbin/dnscache -c /var/etc/dnscache.conf -d
+			elif [ $dnscache_enable = "2" ];  then
+			dnscache -f /var/run/dnscache/dnscache.conf -d
+			fi
+			echo "$curtime 重启服务！" >> ${logfile}
+		fi
+	fi
+fi
+
+sleep ${sleeptime}
+continue
+done
diff --git a/package/lean/luci-app-softethervpn/Makefile b/package/lean/luci-app-softethervpn/Makefile
new file mode 100644
index 0000000000..12f9c4a659
--- /dev/null
+++ b/package/lean/luci-app-softethervpn/Makefile
@@ -0,0 +1,18 @@
+# Copyright (C) 2018-2019 Lienol
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI support for SoftEtherVPN
+LUCI_DEPENDS:=+zlib +libpthread +librt +libreadline +libncurses +libiconv-full +kmod-tun +libopenssl +softethervpn-bridge +softethervpn-client +softethervpn-server
+LUCI_PKGARCH:=all
+PKG_VERSION:=1.0
+PKG_RELEASE:=2
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
+
diff --git a/package/lean/luci-app-softethervpn/luasrc/controller/softethervpn.lua b/package/lean/luci-app-softethervpn/luasrc/controller/softethervpn.lua
new file mode 100644
index 0000000000..d4ec9bc88c
--- /dev/null
+++ b/package/lean/luci-app-softethervpn/luasrc/controller/softethervpn.lua
@@ -0,0 +1,18 @@
+module("luci.controller.softethervpn",package.seeall)
+
+function index()
+	if not nixio.fs.access("/etc/config/softethervpn")then
+		return
+	end
+	
+	entry({"admin","vpn"}, firstchild(), "VPN", 45).dependent = false
+	entry({"admin","vpn","softethervpn"},cbi("softethervpn"),_("SoftEther VPN"),50).dependent=true
+	entry({"admin","vpn","softethervpn","status"},call("status")).leaf=true
+end
+
+function status()
+	local e={}
+	e.status=luci.sys.call("pidof %s >/dev/null"%"vpnserver")==0
+	luci.http.prepare_content("application/json")
+	luci.http.write_json(e)
+end
diff --git a/package/lean/luci-app-softethervpn/luasrc/model/cbi/softethervpn.lua b/package/lean/luci-app-softethervpn/luasrc/model/cbi/softethervpn.lua
new file mode 100644
index 0000000000..1c0054c291
--- /dev/null
+++ b/package/lean/luci-app-softethervpn/luasrc/model/cbi/softethervpn.lua
@@ -0,0 +1,14 @@
+local s=require"luci.sys"
+local m,s,o
+m=Map("softethervpn",translate("SoftEther VPN"))
+m.description = translate("SoftEther VPN is an open source, cross-platform, multi-protocol virtual private network solution developed by university of tsukuba graduate student Daiyuu Nobori for master's thesis. <br>can easily set up OpenVPN, IPsec, L2TP, ms-sstp, L2TPv3 and EtherIP servers on the router using the console.")
+m.template="softethervpn/index"
+s=m:section(TypedSection,"softether")
+s.anonymous=true
+o=s:option(DummyValue,"softethervpn_status",translate("Current Condition"))
+o.template="softethervpn/status"
+o.value=translate("Collecting data...")
+o=s:option(Flag,"enable",translate("Enabled"))
+o.rmempty=false
+o=s:option(DummyValue,"moreinfo",translate("<strong>控制台下载：<a onclick=\"window.open('http://www.softether-download.com/files/softether/v4.22-9634-beta-2016.11.27-tree/Windows/SoftEther_VPN_Server_and_VPN_Bridge/softether-vpnserver_vpnbridge-v4.22-9634-beta-2016.11.27-windows-x86_x64-intel.exe')\"><br/>Windows-x86_x64-intel.exe</a><a  onclick=\"window.open('http://www.softether-download.com/files/softether/v4.21-9613-beta-2016.04.24-tree/Mac_OS_X/Admin_Tools/VPN_Server_Manager_Package/softether-vpnserver_manager-v4.21-9613-beta-2016.04.24-macos-x86-32bit.pkg')\"><br/>macos-x86-32bit.pkg</a></strong>"))
+return m
diff --git a/package/lean/luci-app-softethervpn/luasrc/view/softethervpn/index.htm b/package/lean/luci-app-softethervpn/luasrc/view/softethervpn/index.htm
new file mode 100644
index 0000000000..273f604eab
--- /dev/null
+++ b/package/lean/luci-app-softethervpn/luasrc/view/softethervpn/index.htm
@@ -0,0 +1,18 @@
+<%#
+ Copyright (C) 2018-2019 Lienol
+ Licensed to the public under the Apache License 2.0.
+-%>
+
+<% include("cbi/map") %>
+<script type="text/javascript">//<![CDATA[
+	XHR.poll(2, '<%=luci.dispatcher.build_url("admin", "vpn", "softethervpn", "status")%>', null,
+		function(x, result)
+		{
+			var status = document.getElementsByClassName('softethervpn_status')[0];
+			status.setAttribute("style","font-weight:bold;");
+			status.setAttribute("color",result.status ? "green":"red");
+			status.innerHTML = result.status?'<%=translate("RUNNING")%>':'<%=translate("NOT RUNNING")%>';
+		}
+	)
+//]]>
+</script>
diff --git a/package/lean/luci-app-softethervpn/luasrc/view/softethervpn/status.htm b/package/lean/luci-app-softethervpn/luasrc/view/softethervpn/status.htm
new file mode 100644
index 0000000000..055b112ec1
--- /dev/null
+++ b/package/lean/luci-app-softethervpn/luasrc/view/softethervpn/status.htm
@@ -0,0 +1,3 @@
+<%+cbi/valueheader%>
+<font class="softethervpn_status"><%=pcdata(self:cfgvalue(section) or self.default or "")%></font>
+<%+cbi/valuefooter%>
diff --git a/package/lean/luci-app-softethervpn/po/zh-cn/softethervpn.po b/package/lean/luci-app-softethervpn/po/zh-cn/softethervpn.po
new file mode 100644
index 0000000000..8d17b15070
--- /dev/null
+++ b/package/lean/luci-app-softethervpn/po/zh-cn/softethervpn.po
@@ -0,0 +1,23 @@
+msgid "SoftEther VPN"
+msgstr "SoftEther VPN 服务器"
+
+msgid "SoftEther VPN is an open source, cross-platform, multi-protocol virtual private network solution developed by university of tsukuba graduate student Daiyuu Nobori for master's thesis. <br>can easily set up OpenVPN, IPsec, L2TP, ms-sstp, L2TPv3 and EtherIP servers on the router using the console."
+msgstr "SoftEther VPN是由筑波大学研究生Daiyuu Nobori因硕士论文开发的开源，跨平台，多重协定的虚拟私人网路方案。<br/>使用控制台可以轻松在路由器上搭建OpenVPN, IPsec, L2TP, MS-SSTP, L2TPv3 和 EtherIP服务器。"
+
+msgid "PPTP VPN Server status"
+msgstr "PPTP VPN 服务器运行状态"
+
+msgid "Current Condition"
+msgstr "当前状态"
+
+msgid "Enabled"
+msgstr "启用"
+
+msgid "Open L2TP/IPSec firewall"
+msgstr "开启L2TP/IPSec防火墙"
+
+msgid "Open the MS-SSTP firewall"
+msgstr "开启MS-SSTP防火墙"
+
+msgid "Open the OpenVPN firewall"
+msgstr "开启OpenVPN防火墙"
\ No newline at end of file
diff --git a/package/lean/luci-app-softethervpn/root/etc/config/softethervpn b/package/lean/luci-app-softethervpn/root/etc/config/softethervpn
new file mode 100644
index 0000000000..90732c5339
--- /dev/null
+++ b/package/lean/luci-app-softethervpn/root/etc/config/softethervpn
@@ -0,0 +1,4 @@
+
+config softether
+	option enable '0'
+
diff --git a/package/lean/luci-app-softethervpn/root/etc/init.d/softethervpn b/package/lean/luci-app-softethervpn/root/etc/init.d/softethervpn
new file mode 100755
index 0000000000..d724d5b8c5
--- /dev/null
+++ b/package/lean/luci-app-softethervpn/root/etc/init.d/softethervpn
@@ -0,0 +1,45 @@
+#!/bin/sh /etc/rc.common
+#
+# Copyright (C) 2015 OpenWrt-dist
+# Copyright (C) 2016 Chen RuiWei <crwbak@gmail.com>
+# Copyright (C) 2018-2019 Lienol
+#
+# This is free software, licensed under the GNU General Public License v3.
+# See /LICENSE for more information.
+#
+
+START=99
+STOP=10
+
+CONFIG=softethervpn
+
+get_config()
+{
+	config_get_bool enable $1 enable 0
+}
+
+uci_get_by_type() {
+	local index=0
+	if [ -n $4 ]; then
+		index=$4
+	fi
+	local ret=$(uci get $CONFIG.@$1[$index].$2 2>/dev/null)
+	echo ${ret:=$3}
+}
+
+start()
+{
+	config_load softethervpn
+	config_foreach get_config softether
+	[ $enable -ne 1 ] && exit 0
+	logger -t 'softethervpn' "Starting softether vpnserver service."
+	/usr/bin/env LANG=en_US.UTF-8 /usr/libexec/softethervpn/vpnserver start > /dev/null 2>&1
+	fw3 reload
+}
+
+stop()
+{
+	logger -t 'softethervpn' "Stopping softether vpnserver service."
+	/usr/bin/env LANG=en_US.UTF-8 /usr/libexec/softethervpn/vpnserver stop > /dev/null 2>&1
+	fw3 reload
+}
diff --git a/package/lean/luci-app-softethervpn/root/etc/uci-defaults/luci-app-softethervpn b/package/lean/luci-app-softethervpn/root/etc/uci-defaults/luci-app-softethervpn
new file mode 100755
index 0000000000..1f6e2bdf4a
--- /dev/null
+++ b/package/lean/luci-app-softethervpn/root/etc/uci-defaults/luci-app-softethervpn
@@ -0,0 +1,25 @@
+#!/bin/sh
+
+uci -q batch <<-EOF >/dev/null
+	delete firewall.softethervpn
+	set firewall.softethervpn=include
+	set firewall.softethervpn.type=script
+	set firewall.softethervpn.path=/usr/share/softethervpn/firewall.include
+	set firewall.softethervpn.reload=1
+EOF
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@softethervpn[-1]
+	add ucitrack softethervpn
+	set ucitrack.@softethervpn[-1].init=softethervpn
+	commit ucitrack
+EOF
+
+/etc/init.d/softethervpnbridge disable && /etc/init.d/softethervpnbridge stop
+/etc/init.d/softethervpnclient disable && /etc/init.d/softethervpnclient stop
+/etc/init.d/softethervpnserver disable && /etc/init.d/softethervpnserver stop
+
+chmod a+x /usr/share/softethervpn/* >/dev/null 2>&1
+
+rm -f /tmp/luci-indexcache
+exit 0
diff --git a/package/lean/luci-app-softethervpn/root/usr/share/softethervpn/firewall.include b/package/lean/luci-app-softethervpn/root/usr/share/softethervpn/firewall.include
new file mode 100755
index 0000000000..3c2fd6dfe6
--- /dev/null
+++ b/package/lean/luci-app-softethervpn/root/usr/share/softethervpn/firewall.include
@@ -0,0 +1,22 @@
+#!/bin/sh
+
+openvpnport=$(cat /usr/libexec/softethervpn/vpn_server.config 2>/dev/null|grep OpenVPN_UdpPortList | awk -F " " '{print $3}')
+[ -z "$openvpnport" ] && openvpnport=1194
+iptables -D INPUT -p udp -m multiport --dports 500,1701,4500 -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT 2>/dev/null
+[ -n "$openvpnport" ] && iptables -D INPUT -p udp --dport $openvpnport -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT 2>/dev/null
+[ -n "$openvpnport" ] && iptables -D INPUT -p tcp --dport $openvpnport -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT 2>/dev/null
+iptables -D INPUT -p tcp --dport 443 -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT 2>/dev/null
+iptables -D INPUT -p tcp --dport 5555 -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT 2>/dev/null
+iptables -D INPUT -p tcp --dport 8888 -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT 2>/dev/null
+iptables -D INPUT -p tcp --dport 992 -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT 2>/dev/null
+
+enable=$(uci get softethervpn.@softether[0].enable)
+if [ $enable -eq 1 ]; then
+	iptables -I INPUT -p udp -m multiport --dports 500,1701,4500 -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT 2>/dev/null
+	iptables -I INPUT -p udp --dport $openvpnport -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT
+	iptables -I INPUT -p tcp --dport $openvpnport -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT
+	iptables -I INPUT -p tcp --dport 443 -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT
+	iptables -I INPUT -p tcp --dport 5555 -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT
+	iptables -I INPUT -p tcp --dport 8888 -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT
+	iptables -I INPUT -p tcp --dport 992 -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT
+fi
diff --git a/package/lean/luci-app-ssrserver-python/Makefile b/package/lean/luci-app-ssrserver-python/Makefile
new file mode 100644
index 0000000000..7d7a317550
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/Makefile
@@ -0,0 +1,19 @@
+#
+# Copyright (C) 2008-2014 The LuCI Team <luci@lists.subsignal.org>
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI for SSR Server Python
+LUCI_DEPENDS:=+python
+LUCI_PKGARCH:=all
+PKG_VERSION:=3.2.0
+PKG_RELEASE:=6
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
+
diff --git a/package/lean/luci-app-ssrserver-python/luasrc/controller/ssrs.lua b/package/lean/luci-app-ssrserver-python/luasrc/controller/ssrs.lua
new file mode 100644
index 0000000000..01095ec597
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/luasrc/controller/ssrs.lua
@@ -0,0 +1,21 @@
+module("luci.controller.ssrs",package.seeall)
+
+function index()
+if not nixio.fs.access("/etc/config/ssrs")then
+  return
+end
+
+entry({"admin", "vpn"}, firstchild(), "VPN", 45).dependent = false
+	
+local page
+
+entry({"admin","vpn","ssrs"},cbi("ssrs"),_("SSR Python Server"),4).dependent=true
+entry({"admin","vpn","ssrs","status"},call("act_status")).leaf=true
+end
+
+function act_status()
+  local e={}
+  e.running=luci.sys.call("ps | grep server.py |grep -v grep >/dev/null") == 0
+  luci.http.prepare_content("application/json")
+  luci.http.write_json(e)
+end
diff --git a/package/lean/luci-app-ssrserver-python/luasrc/model/cbi/ssrs.lua b/package/lean/luci-app-ssrserver-python/luasrc/model/cbi/ssrs.lua
new file mode 100644
index 0000000000..889aca8a68
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/luasrc/model/cbi/ssrs.lua
@@ -0,0 +1,75 @@
+local a,t,e
+local m, s
+local o=require"nixio.fs"
+local n={
+"none",
+"aes-128-ctr",
+"aes-192-ctr",
+"aes-256-ctr",
+"aes-128-cfb",
+"aes-192-cfb",
+"aes-256-cfb",
+"rc4",
+"rc4-md5",
+"rc4-md5-6",
+}
+local s={
+"origin",
+"verify_deflate",
+"auth_sha1_v4",
+"auth_aes128_md5",
+"auth_aes128_sha1",
+"auth_chain_a",
+"auth_chain_b",
+"auth_chain_c",
+"auth_chain_d",
+"auth_chain_e",
+"auth_chain_f",
+}
+local i={
+"plain",
+"http_simple",
+"http_post",
+"random_head",
+"tls1.2_ticket_auth",
+"tls1.2_ticket_fastauth",
+}
+local o={
+"false",
+"true",
+}
+
+a= Map("ssrs", translate("ShadowSocksR Server Config"))
+a.description = translate("ShadowsocksR Python Server is a fork of the Shadowsocks project, claimed to be superior in terms of security and stability")
+
+a:section(SimpleSection).template  = "ssrs/ssrs_status"
+
+t=a:section(TypedSection,"server",translate(""))
+t.anonymous=true
+t.addremove=false
+
+e=t:option(Flag,"enable",translate("Enable"))
+e.rmempty=false
+
+e=t:option(Value,"server_port",translate("Server Port"))
+e.datatype="port"
+e.rmempty=false
+e.default=139
+
+e=t:option(Value,"password",translate("Password"))
+e.password=true
+e.rmempty=false
+
+e=t:option(ListValue,"encrypt_method",translate("Encrypt Method"))
+for a,t in ipairs(n)do e:value(t)end
+e.rmempty=false
+
+e=t:option(ListValue,"protocol",translate("Protocol"))
+for a,t in ipairs(s)do e:value(t)end
+e.rmempty=false
+
+e=t:option(ListValue,"obfs",translate("Obfs"))
+for a,t in ipairs(i)do e:value(t)end
+e.rmempty=false
+
+return a
diff --git a/package/lean/luci-app-ssrserver-python/luasrc/view/ssrs/ssrs_status.htm b/package/lean/luci-app-ssrserver-python/luasrc/view/ssrs/ssrs_status.htm
new file mode 100644
index 0000000000..043620d08a
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/luasrc/view/ssrs/ssrs_status.htm
@@ -0,0 +1,22 @@
+<script type="text/javascript">//<![CDATA[
+XHR.poll(3, '<%=url([[admin]], [[vpn]], [[ssrs]], [[status]])%>', null,
+	function(x, data) {
+		var tb = document.getElementById('ssrs_status');
+		if (data && tb) {
+			if (data.running) {
+				var links = '<em><b><font color=green>ShadowsocksR Python <%:RUNNING%></font></b></em>';
+				tb.innerHTML = links;
+			} else {
+				tb.innerHTML = '<em><b><font color=red>ShadowsocksR Python <%:NOT RUNNING%></font></b></em>';
+			}
+		}
+	}
+);
+//]]>
+</script>
+<style>.mar-10 {margin-left: 50px; margin-right: 10px;}</style>
+<fieldset class="cbi-section">
+	<p id="ssrs_status">
+		<em><%:Collecting data...%></em>
+	</p>
+</fieldset>
\ No newline at end of file
diff --git a/package/lean/luci-app-ssrserver-python/po/zh-cn/ssrs.po b/package/lean/luci-app-ssrserver-python/po/zh-cn/ssrs.po
new file mode 100644
index 0000000000..e3b31875f2
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/po/zh-cn/ssrs.po
@@ -0,0 +1,35 @@
+msgid ""
+msgstr "Content-Type: text/plain; charset=UTF-8\n"
+
+msgid "SSR Python Server"
+msgstr "SSR Python 服务器"
+
+msgid "ShadowSocksR Server Config"
+msgstr "ShadowsocksR Python 服务器设置"
+
+msgid "Global Setting"
+msgstr "全局设置"
+
+msgid "Encrypt Method"
+msgstr "加密"
+
+msgid "Protocol_param"
+msgstr "协议参数"
+
+msgid "Obfs"
+msgstr "混淆"
+
+msgid "Obfs_param"
+msgstr "混淆参数"
+
+msgid "redirect"
+msgstr "重定向"
+
+msgid "Connection Timeout"
+msgstr "连接超时时间"
+
+msgid "ShadowsocksR Python Server is a fork of the Shadowsocks project, claimed to be superior in terms of security and stability"
+msgstr "ShadowsocksR Python 服务器是一个增加了协议参数和混淆的全功能版本"
+
+msgid "ShadowsocksR Python Server"
+msgstr "ShadowsocksR Python 服务器"
diff --git a/package/lean/luci-app-ssrserver-python/root/etc/config/ssrs b/package/lean/luci-app-ssrserver-python/root/etc/config/ssrs
new file mode 100644
index 0000000000..a85b5ca5e1
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/etc/config/ssrs
@@ -0,0 +1,11 @@
+
+config server 'ssrs'
+	option password '12345678'
+	option timeout '300'
+	option fast_open 'true'
+	option encrypt_method 'rc4-md5'
+	option protocol 'auth_sha1_v4'
+	option obfs 'http_simple'
+	option server_port '10240'
+	option enable '0'
+
diff --git a/package/lean/luci-app-ssrserver-python/root/etc/init.d/ssrs b/package/lean/luci-app-ssrserver-python/root/etc/init.d/ssrs
new file mode 100755
index 0000000000..63a473b3f3
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/etc/init.d/ssrs
@@ -0,0 +1,95 @@
+#!/bin/sh /etc/rc.common
+#
+# Copyright (C) 2015 OpenWrt-dist
+#
+# This is free software, licensed under the GNU General Public License v3.
+# See /LICENSE for more information.
+#
+
+START=91
+
+CONFIG=ssrs
+CONFIG_FILE=/var/etc/$CONFIG.json
+PID_FILE=/var/run/$CONFIG.pid
+LOG_FILE=/var/log/$CONFIG.log
+
+uci_get_by_type() {
+	local index=0
+	if [ -n $4 ]; then
+		index=$4
+	fi
+	local ret=$(uci get $CONFIG.@$1[$index].$2 2>/dev/null)
+	echo ${ret:=$3}
+}
+
+is_true() {
+	case $1 in
+		1|on|true|yes|enabled) echo 0;;
+		*) echo 1;;
+	esac
+}
+
+load_config() {
+	ENABLED=$(uci_get_by_type server enable)
+	return $(is_true $ENABLED)
+}
+
+start_server() {
+	mkdir -p  /var/etc
+	/usr/bin/python \
+	/usr/share/ssr/shadowsocks/server.py  \
+	-c $CONFIG_FILE  \
+	--pid-file $PID_FILE  \
+  --log-file $LOG_FILE  \
+  -d start  \
+	>/dev/null 2>&1 &
+}
+
+gen_config_file() {
+	cat <<-EOF >$CONFIG_FILE
+		{
+		    "server": "0.0.0.0",
+		    "server_port": $(uci_get_by_type server server_port),
+        "local_address":"127.0.0.1",
+        "local_port":1086,
+		    "password": "$(uci_get_by_type server password)",
+		    "timeout": $(uci_get_by_type server timeout 60),
+		    "method": "$(uci_get_by_type server encrypt_method)",
+		    "protocol": "$(uci_get_by_type server protocol)",
+		    "protocol_param": "$(uci_get_by_type server protocol_param)",
+		    "obfs": "$(uci_get_by_type server obfs)",
+		    "obfs_param": "$(uci_get_by_type server obfs_param)",
+		    "redirect": "$(uci_get_by_type server redirect)",
+		    "fast_open": "$(uci_get_by_type server fast_open)"
+		}
+EOF
+}
+
+
+add_rule() {
+    serverport=$(uci_get_by_type server server_port)
+    uci set firewall.ssrs.dest_port=$serverport && uci commit firewall &&  /etc/init.d/firewall restart
+}
+
+del_rule() {
+    serverport=$(uci_get_by_type server server_port)
+}
+
+start() {
+	! load_config && exit 0
+	gen_config_file "server"
+	start_server	
+	add_rule
+}
+
+stop() {
+  del_rule
+	/usr/bin/python \
+	/usr/share/ssr/shadowsocks/server.py  \
+	-c $CONFIG_FILE  \
+	--pid-file $PID_FILE  \
+  --log-file $LOG_FILE  \
+	-d stop  \
+	>/dev/null 2>&1 &
+	rm -f $LOG_FILE
+}
\ No newline at end of file
diff --git a/package/lean/luci-app-ssrserver-python/root/etc/uci-defaults/luci-app-ssrs b/package/lean/luci-app-ssrserver-python/root/etc/uci-defaults/luci-app-ssrs
new file mode 100755
index 0000000000..a387590987
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/etc/uci-defaults/luci-app-ssrs
@@ -0,0 +1,19 @@
+#!/bin/sh
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@ssrs[-1]
+	add ucitrack ssrs
+	set ucitrack.@ssrs[-1].init=ssrs
+	commit ucitrack
+	delete firewall.ssrs
+  add firewall rule 
+  rename firewall.@rule[-1]="ssrs"
+  set firewall.@rule[-1].name="ssrs"
+  set firewall.@rule[-1].target="ACCEPT"
+  set firewall.@rule[-1].src="wan"
+  set firewall.@rule[-1].proto="tcp"
+  set firewall.@rule[-1].dest_port="10240"
+EOF
+
+rm -f /tmp/luci-indexcache
+exit 0
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/.travis.yml b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/.travis.yml
new file mode 100644
index 0000000000..014fa07145
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/.travis.yml
@@ -0,0 +1,21 @@
+language: python
+python:
+  - 2.6
+  - 2.7
+  - 3.3
+  - 3.4
+cache:
+  directories:
+    - dante-1.4.0
+before_install:
+  - sudo apt-get update -qq
+  - sudo apt-get install -qq build-essential dnsutils iproute nginx bc
+  - sudo dd if=/dev/urandom of=/usr/share/nginx/www/file bs=1M count=10
+  - sudo sh -c "echo '127.0.0.1    localhost' > /etc/hosts"
+  - sudo service nginx restart
+  - pip install pep8 pyflakes nose coverage PySocks cymysql
+  - sudo tests/socksify/install.sh
+  - sudo tests/libsodium/install.sh
+  - sudo tests/setup_tc.sh
+script:
+  - tests/jenkins.sh
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/CHANGES b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/CHANGES
new file mode 100644
index 0000000000..0cd91768ea
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/CHANGES
@@ -0,0 +1,342 @@
+3.4.0 2017-07-27
+- add auth_chain_b
+- add initmudbjson.sh
+- allow set speed limit in runtime
+- fix bugs & mem leak
+
+3.3.3 2017-06-03
+- add DNS cache
+- add tls1.2_ticket_fastauth
+- fix bugs
+
+3.3.2 2017-05-20
+- revert http reply
+- refine tls1.2_ticket_auth error detector
+
+3.3.1 2017-05-18
+- fix stop script
+- Async DNS query under UDP
+- fix old version of OpenSSL
+- http reply
+
+3.3.0 2017-05-11
+- connect_log include local addr & port
+- fix auth_chain_a UDP bug
+- add "additional_ports_only"
+- add interface legendsockssr
+- run with newest python version
+- parse comment in hosts
+- update mujson_mgr
+- add cymysql setup script
+- new speed tester
+- fix leaks
+- bugs fixed
+
+3.2.0 2017-04-27
+- add auth_chain_a
+- remove auth_aes128, auth_sha1, auth_sha1_v2, verify_simple, auth_simple, verify_sha1
+
+3.1.2 2017-04-07
+- display UID
+- auto adjust TCP MSS
+
+3.1.1 2017-03-25
+- add "New session ticket"
+- ignore bind 10.0.0.0/8 and 192.168.0.0/16 by default
+- improve rand size under auth_aes128_*
+- fix bugs
+
+3.1.0 2017-03-16
+- add "glzjinmod" interface
+- rate limit
+- add additional_ports in config
+
+3.0.4 2017-01-08
+- multi-user in single port
+
+3.0.1 2017-01-03
+- remove auth_aes128_*_compatible
+
+3.0.0 2016-12-23
+- http_simple fix bugs
+- tls1.2_ticket_auth fix bug & defaule time diff set to 86400s
+
+2.9.7 2016-11-22
+- manage client with LRUCache
+- catch bind error
+- fix import error of resource on windows
+- print RLIMIT_NOFILE
+- always close cymysql objects
+- add init script
+
+2.9.6 2016-10-17
+- tls1.2_ticket_auth random packet size
+
+2.9.5.1 2016-10-16
+- UDP bind address
+
+2.9.5 2016-10-13
+- add auth_aes128_md5 and auth_aes128_sha1
+
+2.9.4 2016-10-11
+- sync client version
+
+2.6.13 2015-11-02
+- add protocol setting
+
+2.6.12 2015-10-27
+- IPv6 first
+- Fix mem leaks
+- auth_simple plugin
+- remove FORCE_NEW_PROTOCOL
+- optimize code
+
+2.6.11 2015-10-20
+- Obfs plugin
+- Obfs parameters
+- UDP over TCP
+- TCP over UDP (experimental)
+- Fix socket leaks
+- Catch abnormal UDP package
+
+2.6.10 2015-06-08
+- Optimize LRU cache
+- Refine logging
+
+2.6.9 2015-05-19
+- Fix a stability issue on Windows
+
+2.6.8 2015-02-10
+- Support multiple server ip on client side
+- Support --version
+- Minor fixes
+
+2.6.7 2015-02-02
+- Support --user
+- Support CIDR format in --forbidden-ip
+- Minor fixes
+
+2.6.6 2015-01-23
+- Fix a crash in forbidden list
+
+2.6.5 2015-01-18
+- Try both 32 bit and 64 bit dll on Windows
+
+2.6.4 2015-01-14
+- Also search lib* when searching libraries
+
+2.6.3 2015-01-12
+- Support --forbidden-ip to ban some IP, i.e. localhost
+- Search OpenSSL and libsodium harder
+- Now works on OpenWRT
+
+2.6.2 2015-01-03
+- Log client IP
+
+2.6.1 2014-12-26
+- Fix a problem with TCP Fast Open on local side
+- Fix sometimes daemon_start returns wrong exit status
+
+2.6 2014-12-21
+- Add daemon support
+
+2.5 2014-12-11
+- Add salsa20 and chacha20
+
+2.4.3 2014-11-10
+- Fix an issue on Python 3
+- Fix an issue with IPv6
+
+2.4.2 2014-11-06
+- Fix command line arguments on Python 3
+- Support table on Python 3
+- Fix TCP Fast Open on Python 3
+
+2.4.1 2014-11-01
+- Fix setup.py for non-utf8 locales on Python 3
+
+2.4 2014-11-01
+- Python 3 support
+- Performance improvement
+- Fix LRU cache behavior
+
+2.3.2 2014-10-11
+- Fix OpenSSL on Windows
+
+2.3.1 2014-10-09
+- Does not require M2Crypto any more
+
+2.3 2014-09-23
+- Support CFB1, CFB8 and CTR mode of AES
+- Do not require password config when using port_password
+- Use SIGTERM instead of SIGQUIT on Windows
+
+2.2.2 2014-09-14
+- Fix when multiple DNS set, IPv6 only sites are broken
+
+2.2.1 2014-09-10
+- Support graceful shutdown
+- Fix some bugs
+
+2.2.0 2014-09-09
+- Add RC4-MD5 encryption
+
+2.1.0 2014-08-10
+- Use only IPv4 DNS server
+- Does not ship config.json
+- Better error message
+
+2.0.12 2014-07-26
+- Support -q quiet mode
+- Exit 0 when showing help with -h
+
+2.0.11 2014-07-12
+- Prefers IP addresses over hostnames, more friendly with socksify and openvpn
+
+2.0.10 2014-07-11
+- Fix UDP on local
+
+2.0.9 2014-07-06
+- Fix EWOULDBLOCK on Windows
+- Fix Unicode config problem on some platforms
+
+2.0.8 2014-06-23
+- Use multiple DNS to query hostnames
+
+2.0.7 2014-06-21
+- Fix fastopen on local
+- Fallback when fastopen is not available
+- Add verbose logging mode -vv
+- Verify if hostname is valid
+
+2.0.6 2014-06-19
+- Fix CPU 100% on POLL_HUP
+- More friendly logging
+
+2.0.5 2014-06-18
+- Support a simple config format for multiple ports
+
+2.0.4 2014-06-12
+- Fix worker master
+
+2.0.3 2014-06-11
+- Fix table encryption with UDP
+
+2.0.2 2014-06-11
+- Add asynchronous DNS in TCP relay
+
+2.0.1 2014-06-05
+- Better logging
+- Maybe fix bad file descriptor
+
+2.0 2014-06-05
+- Use a new event model
+- Remove gevent
+- Refuse to use default password
+- Fix a problem when using multiple passwords with table encryption
+
+1.4.5 2014-05-24
+- Add timeout in TCP server
+- Close sockets in master process
+
+1.4.4 2014-05-17
+- Support multiple workers
+
+1.4.3 2014-05-13
+- Fix Windows
+
+1.4.2 2014-05-10
+- Add salsa20-ctr cipher
+
+1.4.1 2014-05-03
+- Fix error log
+- Fix EINPROGESS with some version of gevent
+
+1.4.0 2014-05-02
+- Adds UDP relay
+- TCP fast open support on Linux 3.7+
+
+1.3.7 2014-04-10
+- Fix a typo in help
+
+1.3.6 2014-04-10
+- Fix a typo in help
+
+1.3.5 2014-04-07
+- Add help
+- Change default local binding address into 127.0.0.1
+
+1.3.4 2014-02-17
+- Fix a bug when no config file exists
+- Client now support multiple server ports and multiple server/port pairs
+- Better error message with bad config.json format and wrong password
+
+1.3.3 2013-07-09
+- Fix default key length of rc2
+
+1.3.2 2013-07-04
+- Server will listen at server IP specified in config
+- Check config file and show some warning messages
+
+1.3.1 2013-06-29
+- Fix -c arg
+
+1.3.0 2013-06-22
+- Move to pypi
+
+1.2.3 2013-06-14
+- add bind address
+
+1.2.2 2013-05-31
+- local can listen at ::0 with -6 arg; bump 1.2.2
+
+1.2.1 2013-05-23
+- Fix an OpenSSL crash
+
+1.2 2013-05-22
+- Use random iv, we finally have strong encryption
+
+1.1.1 2013-05-21
+- Add encryption, AES, blowfish, etc.
+
+1.1 2013-05-16
+- Support IPv6 addresses (type 4)
+- Drop Python 2.5 support
+
+1.0 2013-04-03
+- Fix -6 IPv6
+
+0.9.4 2013-03-04
+- Support Python 2.5
+
+0.9.3 2013-01-14
+- Fix conn termination null data
+
+0.9.2 2013-01-05
+- Change default timeout
+
+0.9.1 2013-01-05
+- Add Travis-CI test
+
+0.9 2012-12-30
+- Replace send with sendall, fix FreeBSD
+
+0.6 2012-12-06
+- Support args
+
+0.5 2012-11-08
+- Fix encryption with negative md5sum
+
+0.4 2012-11-02
+- Move config into a JSON file
+- Auto-detect config path
+
+0.3 2012-06-06
+- Move socks5 negotiation to local
+
+0.2 2012-05-11
+- Add -6 arg for IPv6
+- Fix socket.error
+
+0.1 2012-04-20
+- Initial version
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/CONTRIBUTING.md b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/CONTRIBUTING.md
new file mode 100644
index 0000000000..fbdb9c11b2
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/CONTRIBUTING.md
@@ -0,0 +1,29 @@
+How to Contribute
+=================
+
+Pull Requests
+-------------
+
+1. Pull requests are welcome. If you would like to add a large feature
+or make a significant change, make sure to open an issue to discuss with
+people first.
+2. Follow PEP8.
+3. Make sure to pass the unit tests. Write unit tests for new modules if
+needed.
+
+Issues
+------
+
+1. Only bugs and feature requests are accepted here.
+2. We'll only work on important features. If the feature you're asking only
+benefits a few people, you'd better implement the feature yourself and send us
+a pull request, or ask some of your friends to do so.
+3. We don't answer questions of any other types here. Since very few people
+are watching the issue tracker here, you'll probably get no help from here.
+Read [Troubleshooting] and get help from forums or [mailing lists].
+4. Issues in languages other than English will be Google translated into English
+later.
+
+
+[Troubleshooting]: https://github.com/clowwindy/shadowsocks/wiki/Troubleshooting
+[mailing lists]:   https://groups.google.com/forum/#!forum/shadowsocks
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/Dockerfile b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/Dockerfile
new file mode 100644
index 0000000000..ec7b2c6e71
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/Dockerfile
@@ -0,0 +1,31 @@
+FROM alpine:3.6
+
+ENV SERVER_ADDR     0.0.0.0
+ENV SERVER_PORT     51348
+ENV PASSWORD        psw
+ENV METHOD          aes-128-ctr
+ENV PROTOCOL        auth_aes128_md5
+ENV PROTOCOLPARAM   32
+ENV OBFS            tls1.2_ticket_auth_compatible
+ENV TIMEOUT         300
+ENV DNS_ADDR        8.8.8.8
+ENV DNS_ADDR_2      8.8.4.4
+
+ARG BRANCH=manyuser
+ARG WORK=~
+
+
+RUN apk --no-cache add python \
+    libsodium \
+    wget
+
+
+RUN mkdir -p $WORK && \
+    wget -qO- --no-check-certificate https://github.com/shadowsocksr/shadowsocksr/archive/$BRANCH.tar.gz | tar -xzf - -C $WORK
+
+
+WORKDIR $WORK/shadowsocksr-$BRANCH/shadowsocks
+
+
+EXPOSE $SERVER_PORT
+CMD python server.py -p $SERVER_PORT -k $PASSWORD -m $METHOD -O $PROTOCOL -o $OBFS -G $PROTOCOLPARAM
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/LICENSE b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/LICENSE
new file mode 100644
index 0000000000..d645695673
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/LICENSE
@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/MANIFEST.in b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/MANIFEST.in
new file mode 100644
index 0000000000..1882dd7dce
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/MANIFEST.in
@@ -0,0 +1,3 @@
+recursive-include shadowsocks *.py
+include README.rst
+include LICENSE
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/README.md b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/README.md
new file mode 100644
index 0000000000..53eafeaa8e
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/README.md
@@ -0,0 +1,105 @@
+ShadowsocksR
+===========
+
+[![Build Status]][Travis CI]
+
+A fast tunnel proxy that helps you bypass firewalls.
+
+Server
+------
+
+### Install
+
+Debian / Ubuntu:
+
+    apt-get install git
+    git clone https://github.com/shadowsocksr/shadowsocksr.git
+
+CentOS:
+
+    yum install git
+    git clone https://github.com/shadowsocksr/shadowsocksr.git
+
+Windows:
+
+    git clone https://github.com/shadowsocksr/shadowsocksr.git
+
+### Usage for single user on linux platform
+
+If you clone it into "~/shadowsocksr"  
+move to "~/shadowsocksr", then run:
+
+    bash initcfg.sh
+
+move to "~/shadowsocksr/shadowsocks", then run:
+
+    python server.py -p 443 -k password -m aes-128-cfb -O auth_aes128_md5 -o tls1.2_ticket_auth_compatible
+
+Check all the options via `-h`.
+
+You can also use a configuration file instead (recommend), move to "~/shadowsocksr" and edit the file "user-config.json", then move to "~/shadowsocksr/shadowsocks" again, just run:
+
+    python server.py
+
+To run in the background:
+
+    ./logrun.sh
+
+To stop:
+
+    ./stop.sh
+
+To monitor the log:
+
+    ./tail.sh
+
+
+Client
+------
+
+* [Windows] / [macOS]
+* [Android] / [iOS]
+* [OpenWRT]
+
+Use GUI clients on your local PC/phones. Check the README of your client
+for more information.
+
+Documentation
+-------------
+
+You can find all the documentation in the [Wiki].
+
+License
+-------
+
+Copyright 2015 clowwindy
+
+Licensed under the Apache License, Version 2.0 (the "License"); you may
+not use this file except in compliance with the License. You may obtain
+a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+License for the specific language governing permissions and limitations
+under the License.
+
+Bugs and Issues
+----------------
+
+* [Issue Tracker]
+
+
+
+[Android]:           https://github.com/shadowsocksr/shadowsocksr-android
+[Build Status]:      https://travis-ci.org/shadowsocksr/shadowsocksr.svg?branch=manyuser
+[Debian sid]:        https://packages.debian.org/unstable/python/shadowsocks
+[iOS]:               https://github.com/shadowsocks/shadowsocks-iOS/wiki/Help
+[Issue Tracker]:     https://github.com/shadowsocksr/shadowsocksr/issues?state=open
+[OpenWRT]:           https://github.com/shadowsocks/openwrt-shadowsocks
+[macOS]:             https://github.com/shadowsocksr/ShadowsocksX-NG
+[Travis CI]:         https://travis-ci.org/shadowsocksr/shadowsocksr
+[Windows]:           https://github.com/shadowsocksr/shadowsocksr-csharp
+[Wiki]:              https://github.com/breakwa11/shadowsocks-rss/wiki
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/README.rst b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/README.rst
new file mode 100755
index 0000000000..bf2a3ec32d
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/README.rst
@@ -0,0 +1,113 @@
+shadowsocks
+===========
+
+|PyPI version| |Build Status| |Coverage Status|
+
+A fast tunnel proxy that helps you bypass firewalls.
+
+Server
+------
+
+Install
+~~~~~~~
+
+Debian / Ubuntu:
+
+::
+
+    apt-get install python-pip
+    pip install shadowsocks
+
+CentOS:
+
+::
+
+    yum install python-setuptools && easy_install pip
+    pip install shadowsocks
+
+Windows:
+
+See `Install Server on
+Windows <https://github.com/shadowsocks/shadowsocks/wiki/Install-Shadowsocks-Server-on-Windows>`__
+
+Usage
+~~~~~
+
+::
+
+    ssserver -p 443 -k password -m rc4-md5
+
+To run in the background:
+
+::
+
+    sudo ssserver -p 443 -k password -m rc4-md5 --user nobody -d start
+
+To stop:
+
+::
+
+    sudo ssserver -d stop
+
+To check the log:
+
+::
+
+    sudo less /var/log/shadowsocks.log
+
+Check all the options via ``-h``. You can also use a
+`Configuration <https://github.com/shadowsocks/shadowsocks/wiki/Configuration-via-Config-File>`__
+file instead.
+
+Client
+------
+
+-  `Windows <https://github.com/shadowsocks/shadowsocks/wiki/Ports-and-Clients#windows>`__
+   / `OS
+   X <https://github.com/shadowsocks/shadowsocks-iOS/wiki/Shadowsocks-for-OSX-Help>`__
+-  `Android <https://github.com/shadowsocks/shadowsocks/wiki/Ports-and-Clients#android>`__
+   / `iOS <https://github.com/shadowsocks/shadowsocks-iOS/wiki/Help>`__
+-  `OpenWRT <https://github.com/shadowsocks/openwrt-shadowsocks>`__
+
+Use GUI clients on your local PC/phones. Check the README of your client
+for more information.
+
+Documentation
+-------------
+
+You can find all the documentation in the
+`Wiki <https://github.com/shadowsocks/shadowsocks/wiki>`__.
+
+License
+-------
+
+Copyright 2015 clowwindy
+
+Licensed under the Apache License, Version 2.0 (the "License"); you may
+not use this file except in compliance with the License. You may obtain
+a copy of the License at
+
+::
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+Bugs and Issues
+---------------
+
+-  `Troubleshooting <https://github.com/shadowsocks/shadowsocks/wiki/Troubleshooting>`__
+-  `Issue
+   Tracker <https://github.com/shadowsocks/shadowsocks/issues?state=open>`__
+-  `Mailing list <https://groups.google.com/group/shadowsocks>`__
+
+.. |PyPI version| image:: https://img.shields.io/pypi/v/shadowsocks.svg?style=flat
+   :target: https://pypi.python.org/pypi/shadowsocks
+.. |Build Status| image:: https://img.shields.io/travis/shadowsocks/shadowsocks/master.svg?style=flat
+   :target: https://travis-ci.org/shadowsocks/shadowsocks
+.. |Coverage Status| image:: https://jenkins.shadowvpn.org/result/shadowsocks
+   :target: https://jenkins.shadowvpn.org/job/Shadowsocks/ws/PYENV/py34/label/linux/htmlcov/index.html
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/apiconfig.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/apiconfig.py
new file mode 100644
index 0000000000..5ee8be127f
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/apiconfig.py
@@ -0,0 +1,15 @@
+# Config
+API_INTERFACE = 'sspanelv2' #mudbjson, sspanelv2, sspanelv3, sspanelv3ssr, glzjinmod, legendsockssr, muapiv2(not support)
+UPDATE_TIME = 60
+SERVER_PUB_ADDR = '127.0.0.1' # mujson_mgr need this to generate ssr link
+
+#mudb
+MUDB_FILE = 'mudb.json'
+
+# Mysql
+MYSQL_CONFIG = 'usermysql.json'
+
+# API
+MUAPI_CONFIG = 'usermuapi.json'
+
+
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/asyncmgr.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/asyncmgr.py
new file mode 100644
index 0000000000..9bf4d09360
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/asyncmgr.py
@@ -0,0 +1,99 @@
+#!/usr/bin/env python
+# -*- coding: utf-8 -*-
+
+# Copyright (c) 2014 clowwindy
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy
+# of this software and associated documentation files (the "Software"), to deal
+# in the Software without restriction, including without limitation the rights
+# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+# copies of the Software, and to permit persons to whom the Software is
+# furnished to do so, subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in
+# all copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+# SOFTWARE.
+
+import time
+import os
+import socket
+import struct
+import re
+import logging
+from shadowsocks import common
+from shadowsocks import lru_cache
+from shadowsocks import eventloop
+import server_pool
+import Config
+
+class ServerMgr(object):
+
+    def __init__(self):
+        self._loop = None
+        self._request_id = 1
+        self._hosts = {}
+        self._hostname_status = {}
+        self._hostname_to_cb = {}
+        self._cb_to_hostname = {}
+        self._last_time = time.time()
+        self._sock = None
+        self._servers = None
+
+    def add_to_loop(self, loop):
+        if self._loop:
+            raise Exception('already add to loop')
+        self._loop = loop
+        # TODO when dns server is IPv6
+        self._sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM,
+                                   socket.SOL_UDP)
+        self._sock.bind((Config.MANAGE_BIND_IP, Config.MANAGE_PORT))
+        self._sock.setblocking(False)
+        loop.add(self._sock, eventloop.POLL_IN, self)
+
+    def _handle_data(self, sock):
+        data, addr = sock.recvfrom(128)
+        #manage pwd:port:passwd:action
+        args = data.split(':')
+        if len(args) < 4:
+            return
+        if args[0] == Config.MANAGE_PASS:
+            if args[3] == '0':
+                server_pool.ServerPool.get_instance().cb_del_server(args[1])
+            elif args[3] == '1':
+                server_pool.ServerPool.get_instance().new_server(args[1], args[2])
+
+    def handle_event(self, sock, fd, event):
+        if sock != self._sock:
+            return
+        if event & eventloop.POLL_ERR:
+            logging.error('mgr socket err')
+            self._loop.remove(self._sock)
+            self._sock.close()
+            # TODO when dns server is IPv6
+            self._sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM,
+                                       socket.SOL_UDP)
+            self._sock.setblocking(False)
+            self._loop.add(self._sock, eventloop.POLL_IN, self)
+        else:
+            self._handle_data(sock)
+
+    def close(self):
+        if self._sock:
+            if self._loop:
+                self._loop.remove(self._sock)
+            self._sock.close()
+            self._sock = None
+
+
+def test():
+    pass
+
+if __name__ == '__main__':
+    test()
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/config.json b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/config.json
new file mode 100644
index 0000000000..55f12b5f4c
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/config.json
@@ -0,0 +1,25 @@
+{
+    "server": "0.0.0.0",
+    "server_ipv6": "::",
+    "server_port": 8388,
+    "local_address": "127.0.0.1",
+    "local_port": 1080,
+
+    "password": "m",
+    "method": "aes-128-ctr",
+    "protocol": "auth_aes128_md5",
+    "protocol_param": "",
+    "obfs": "tls1.2_ticket_auth_compatible",
+    "obfs_param": "",
+    "speed_limit_per_con": 0,
+    "speed_limit_per_user": 0,
+
+    "additional_ports" : {}, // only works under multi-user mode
+    "additional_ports_only" : false, // only works under multi-user mode
+    "timeout": 120,
+    "udp_timeout": 60,
+    "dns_ipv6": false,
+    "connect_verbose_info": 0,
+    "redirect": "",
+    "fast_open": false
+}
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/configloader.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/configloader.py
new file mode 100644
index 0000000000..cf9d61961b
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/configloader.py
@@ -0,0 +1,15 @@
+#!/usr/bin/python
+# -*- coding: UTF-8 -*-
+import importloader
+
+g_config = None
+
+def load_config():
+	global g_config
+	g_config = importloader.loads(['userapiconfig', 'apiconfig'])
+
+def get_config():
+	return g_config
+
+load_config()
+
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/db_transfer.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/db_transfer.py
new file mode 100644
index 0000000000..67bda60834
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/db_transfer.py
@@ -0,0 +1,631 @@
+#!/usr/bin/python
+# -*- coding: UTF-8 -*-
+
+import logging
+import time
+import sys
+from server_pool import ServerPool
+import traceback
+from shadowsocks import common, shell, lru_cache, obfs
+from configloader import load_config, get_config
+import importloader
+
+switchrule = None
+db_instance = None
+
+class TransferBase(object):
+	def __init__(self):
+		import threading
+		self.event = threading.Event()
+		self.key_list = ['port', 'u', 'd', 'transfer_enable', 'passwd', 'enable']
+		self.last_get_transfer = {} #上一次的实际流量
+		self.last_update_transfer = {} #上一次更新到的流量（小于等于实际流量）
+		self.force_update_transfer = set() #强制推入数据库的ID
+		self.port_uid_table = {} #端口到uid的映射（仅v3以上有用）
+		self.onlineuser_cache = lru_cache.LRUCache(timeout=60*30) #用户在线状态记录
+		self.pull_ok = False #记录是否已经拉出过数据
+		self.mu_ports = {}
+
+	def load_cfg(self):
+		pass
+
+	def push_db_all_user(self):
+		if self.pull_ok is False:
+			return
+		#更新用户流量到数据库
+		last_transfer = self.last_update_transfer
+		curr_transfer = ServerPool.get_instance().get_servers_transfer()
+		#上次和本次的增量
+		dt_transfer = {}
+		for id in self.force_update_transfer: #此表中的用户统计上次未计入的流量
+			if id in self.last_get_transfer and id in last_transfer:
+				dt_transfer[id] = [self.last_get_transfer[id][0] - last_transfer[id][0], self.last_get_transfer[id][1] - last_transfer[id][1]]
+
+		for id in curr_transfer.keys():
+			if id in self.force_update_transfer or id in self.mu_ports:
+				continue
+			#算出与上次记录的流量差值，保存于dt_transfer表
+			if id in last_transfer:
+				if curr_transfer[id][0] + curr_transfer[id][1] - last_transfer[id][0] - last_transfer[id][1] <= 0:
+					continue
+				dt_transfer[id] = [curr_transfer[id][0] - last_transfer[id][0],
+								curr_transfer[id][1] - last_transfer[id][1]]
+			else:
+				if curr_transfer[id][0] + curr_transfer[id][1] <= 0:
+					continue
+				dt_transfer[id] = [curr_transfer[id][0], curr_transfer[id][1]]
+
+			#有流量的，先记录在线状态
+			if id in self.last_get_transfer:
+				if curr_transfer[id][0] + curr_transfer[id][1] > self.last_get_transfer[id][0] + self.last_get_transfer[id][1]:
+					self.onlineuser_cache[id] = curr_transfer[id][0] + curr_transfer[id][1]
+			else:
+				self.onlineuser_cache[id] = curr_transfer[id][0] + curr_transfer[id][1]
+
+		self.onlineuser_cache.sweep()
+
+		update_transfer = self.update_all_user(dt_transfer) #返回有更新的表
+		for id in update_transfer.keys(): #其增量加在此表
+			if id not in self.force_update_transfer: #但排除在force_update_transfer内的
+				last = self.last_update_transfer.get(id, [0,0])
+				self.last_update_transfer[id] = [last[0] + update_transfer[id][0], last[1] + update_transfer[id][1]]
+		self.last_get_transfer = curr_transfer
+		for id in self.force_update_transfer:
+			if id in self.last_update_transfer:
+				del self.last_update_transfer[id]
+			if id in self.last_get_transfer:
+				del self.last_get_transfer[id]
+		self.force_update_transfer = set()
+
+	def del_server_out_of_bound_safe(self, last_rows, rows):
+		#停止超流量的服务
+		#启动没超流量的服务
+		try:
+			switchrule = importloader.load('switchrule')
+		except Exception as e:
+			logging.error('load switchrule.py fail')
+		cur_servers = {}
+		new_servers = {}
+		allow_users = {}
+		mu_servers  = {}
+		config = shell.get_config(False)
+		for row in rows:
+			try:
+				allow = switchrule.isTurnOn(row) and row['enable'] == 1 and row['u'] + row['d'] < row['transfer_enable']
+			except Exception as e:
+				allow = False
+
+			port = row['port']
+			passwd = common.to_bytes(row['passwd'])
+			if hasattr(passwd, 'encode'):
+				passwd = passwd.encode('utf-8')
+			cfg = {'password': passwd}
+			if 'id' in row:
+				self.port_uid_table[row['port']] = row['id']
+
+			read_config_keys = ['method', 'obfs', 'obfs_param', 'protocol', 'protocol_param', 'forbidden_ip', 'forbidden_port', 'speed_limit_per_con', 'speed_limit_per_user']
+			for name in read_config_keys:
+				if name in row and row[name]:
+					cfg[name] = row[name]
+
+			merge_config_keys = ['password'] + read_config_keys
+			for name in cfg.keys():
+				if hasattr(cfg[name], 'encode'):
+					try:
+						cfg[name] = cfg[name].encode('utf-8')
+					except Exception as e:
+						logging.warning('encode cfg key "%s" fail, val "%s"' % (name, cfg[name]))
+
+			if port not in cur_servers:
+				cur_servers[port] = passwd
+			else:
+				logging.error('more than one user use the same port [%s]' % (port,))
+				continue
+
+			if 'protocol' in cfg and 'protocol_param' in cfg and common.to_str(cfg['protocol']) in obfs.mu_protocol():
+				if '#' in common.to_str(cfg['protocol_param']):
+					mu_servers[port] = passwd
+					allow = True
+
+			if allow:
+				if port not in mu_servers:
+					allow_users[port] = cfg
+
+				cfgchange = False
+				if port in ServerPool.get_instance().tcp_servers_pool:
+					relay = ServerPool.get_instance().tcp_servers_pool[port]
+					for name in merge_config_keys:
+						if name in cfg and not self.cmp(cfg[name], relay._config[name]):
+							cfgchange = True
+							break
+				if not cfgchange and port in ServerPool.get_instance().tcp_ipv6_servers_pool:
+					relay = ServerPool.get_instance().tcp_ipv6_servers_pool[port]
+					for name in merge_config_keys:
+						if (name in cfg) and ((name not in relay._config) or not self.cmp(cfg[name], relay._config[name])):
+							cfgchange = True
+							break
+
+			if port in mu_servers:
+				if ServerPool.get_instance().server_is_run(port) > 0:
+					if cfgchange:
+						logging.info('db stop server at port [%s] reason: config changed: %s' % (port, cfg))
+						ServerPool.get_instance().cb_del_server(port)
+						self.force_update_transfer.add(port)
+						new_servers[port] = (passwd, cfg)
+				else:
+					self.new_server(port, passwd, cfg)
+			else:
+				if ServerPool.get_instance().server_is_run(port) > 0:
+					if config['additional_ports_only'] or not allow:
+						logging.info('db stop server at port [%s]' % (port,))
+						ServerPool.get_instance().cb_del_server(port)
+						self.force_update_transfer.add(port)
+					else:
+						if cfgchange:
+							logging.info('db stop server at port [%s] reason: config changed: %s' % (port, cfg))
+							ServerPool.get_instance().cb_del_server(port)
+							self.force_update_transfer.add(port)
+							new_servers[port] = (passwd, cfg)
+
+				elif not config['additional_ports_only'] and allow and port > 0 and port < 65536 and ServerPool.get_instance().server_run_status(port) is False:
+					self.new_server(port, passwd, cfg)
+
+		for row in last_rows:
+			if row['port'] in cur_servers:
+				pass
+			else:
+				logging.info('db stop server at port [%s] reason: port not exist' % (row['port']))
+				ServerPool.get_instance().cb_del_server(row['port'])
+				self.clear_cache(row['port'])
+				if row['port'] in self.port_uid_table:
+					del self.port_uid_table[row['port']]
+
+		if len(new_servers) > 0:
+			from shadowsocks import eventloop
+			self.event.wait(eventloop.TIMEOUT_PRECISION + eventloop.TIMEOUT_PRECISION / 2)
+			for port in new_servers.keys():
+				passwd, cfg = new_servers[port]
+				self.new_server(port, passwd, cfg)
+
+		logging.debug('db allow users %s \nmu_servers %s' % (allow_users, mu_servers))
+		for port in mu_servers:
+			ServerPool.get_instance().update_mu_users(port, allow_users)
+
+		self.mu_ports = mu_servers
+
+	def clear_cache(self, port):
+		if port in self.force_update_transfer: del self.force_update_transfer[port]
+		if port in self.last_get_transfer: del self.last_get_transfer[port]
+		if port in self.last_update_transfer: del self.last_update_transfer[port]
+
+	def new_server(self, port, passwd, cfg):
+		protocol = cfg.get('protocol', ServerPool.get_instance().config.get('protocol', 'origin'))
+		method = cfg.get('method', ServerPool.get_instance().config.get('method', 'None'))
+		obfs = cfg.get('obfs', ServerPool.get_instance().config.get('obfs', 'plain'))
+		logging.info('db start server at port [%s] pass [%s] protocol [%s] method [%s] obfs [%s]' % (port, passwd, protocol, method, obfs))
+		ServerPool.get_instance().new_server(port, cfg)
+
+	def cmp(self, val1, val2):
+		if type(val1) is bytes:
+			val1 = common.to_str(val1)
+		if type(val2) is bytes:
+			val2 = common.to_str(val2)
+		return val1 == val2
+
+	@staticmethod
+	def del_servers():
+		for port in [v for v in ServerPool.get_instance().tcp_servers_pool.keys()]:
+			if ServerPool.get_instance().server_is_run(port) > 0:
+				ServerPool.get_instance().cb_del_server(port)
+		for port in [v for v in ServerPool.get_instance().tcp_ipv6_servers_pool.keys()]:
+			if ServerPool.get_instance().server_is_run(port) > 0:
+				ServerPool.get_instance().cb_del_server(port)
+
+	@staticmethod
+	def thread_db(obj):
+		import socket
+		import time
+		global db_instance
+		timeout = 60
+		socket.setdefaulttimeout(timeout)
+		last_rows = []
+		db_instance = obj()
+		ServerPool.get_instance()
+		shell.log_shadowsocks_version()
+
+		try:
+			import resource
+			logging.info('current process RLIMIT_NOFILE resource: soft %d hard %d'  % resource.getrlimit(resource.RLIMIT_NOFILE))
+		except:
+			pass
+
+		try:
+			while True:
+				load_config()
+				db_instance.load_cfg()
+				try:
+					db_instance.push_db_all_user()
+					rows = db_instance.pull_db_all_user()
+					if rows:
+						db_instance.pull_ok = True
+						config = shell.get_config(False)
+						for port in config['additional_ports']:
+							val = config['additional_ports'][port]
+							val['port'] = int(port)
+							val['enable'] = 1
+							val['transfer_enable'] = 1024 ** 7
+							val['u'] = 0
+							val['d'] = 0
+							if "password" in val:
+								val["passwd"] = val["password"]
+							rows.append(val)
+					db_instance.del_server_out_of_bound_safe(last_rows, rows)
+					last_rows = rows
+				except Exception as e:
+					trace = traceback.format_exc()
+					logging.error(trace)
+					#logging.warn('db thread except:%s' % e)
+				if db_instance.event.wait(get_config().UPDATE_TIME) or not ServerPool.get_instance().thread.is_alive():
+					break
+		except KeyboardInterrupt as e:
+			pass
+		db_instance.del_servers()
+		ServerPool.get_instance().stop()
+		db_instance = None
+
+	@staticmethod
+	def thread_db_stop():
+		global db_instance
+		db_instance.event.set()
+
+class DbTransfer(TransferBase):
+	def __init__(self):
+		super(DbTransfer, self).__init__()
+		self.user_pass = {} #记录更新此用户流量时被跳过多少次
+		self.cfg = {
+			"host": "127.0.0.1",
+			"port": 3306,
+			"user": "ss",
+			"password": "pass",
+			"db": "shadowsocks",
+			"node_id": 0,
+			"transfer_mul": 1.0,
+			"ssl_enable": 0,
+			"ssl_ca": "",
+			"ssl_cert": "",
+			"ssl_key": ""}
+		self.load_cfg()
+
+	def load_cfg(self):
+		import json
+		config_path = get_config().MYSQL_CONFIG
+		cfg = None
+		with open(config_path, 'rb+') as f:
+			cfg = json.loads(f.read().decode('utf8'))
+
+		if cfg:
+			self.cfg.update(cfg)
+
+	def update_all_user(self, dt_transfer):
+		import cymysql
+		update_transfer = {}
+		
+		query_head = 'UPDATE user'
+		query_sub_when = ''
+		query_sub_when2 = ''
+		query_sub_in = None
+		last_time = time.time()
+
+		for id in dt_transfer.keys():
+			transfer = dt_transfer[id]
+			#小于最低更新流量的先不更新
+			update_trs = 1024 * (2048 - self.user_pass.get(id, 0) * 64)
+			if transfer[0] + transfer[1] < update_trs and id not in self.force_update_transfer:
+				self.user_pass[id] = self.user_pass.get(id, 0) + 1
+				continue
+			if id in self.user_pass:
+				del self.user_pass[id]
+
+			query_sub_when += ' WHEN %s THEN u+%s' % (id, int(transfer[0] * self.cfg["transfer_mul"]))
+			query_sub_when2 += ' WHEN %s THEN d+%s' % (id, int(transfer[1] * self.cfg["transfer_mul"]))
+			update_transfer[id] = transfer
+
+			if query_sub_in is not None:
+				query_sub_in += ',%s' % id
+			else:
+				query_sub_in = '%s' % id
+
+		if query_sub_when == '':
+			return update_transfer
+		query_sql = query_head + ' SET u = CASE port' + query_sub_when + \
+					' END, d = CASE port' + query_sub_when2 + \
+					' END, t = ' + str(int(last_time)) + \
+					' WHERE port IN (%s)' % query_sub_in
+		if self.cfg["ssl_enable"] == 1:
+			conn = cymysql.connect(host=self.cfg["host"], port=self.cfg["port"],
+					user=self.cfg["user"], passwd=self.cfg["password"],
+					db=self.cfg["db"], charset='utf8',
+					ssl={'ca':self.cfg["ssl_ca"],'cert':self.cfg["ssl_cert"],'key':self.cfg["ssl_key"]})
+		else:
+			conn = cymysql.connect(host=self.cfg["host"], port=self.cfg["port"],
+					user=self.cfg["user"], passwd=self.cfg["password"],
+					db=self.cfg["db"], charset='utf8')
+
+		try:
+			cur = conn.cursor()
+			try:
+				cur.execute(query_sql)
+			except Exception as e:
+				logging.error(e)
+				update_transfer = {}
+
+			cur.close()
+			conn.commit()
+		except Exception as e:
+			logging.error(e)
+			update_transfer = {}
+		finally:
+			conn.close()
+
+		return update_transfer
+
+	def pull_db_all_user(self):
+		import cymysql
+		#数据库所有用户信息
+		if self.cfg["ssl_enable"] == 1:
+			conn = cymysql.connect(host=self.cfg["host"], port=self.cfg["port"],
+					user=self.cfg["user"], passwd=self.cfg["password"],
+					db=self.cfg["db"], charset='utf8',
+					ssl={'ca':self.cfg["ssl_ca"],'cert':self.cfg["ssl_cert"],'key':self.cfg["ssl_key"]})
+		else:
+			conn = cymysql.connect(host=self.cfg["host"], port=self.cfg["port"],
+					user=self.cfg["user"], passwd=self.cfg["password"],
+					db=self.cfg["db"], charset='utf8')
+
+		try:
+			rows = self.pull_db_users(conn)
+		finally:
+			conn.close()
+
+		if not rows:
+			logging.warn('no user in db')
+		return rows
+
+	def pull_db_users(self, conn):
+		try:
+			switchrule = importloader.load('switchrule')
+			keys = switchrule.getKeys(self.key_list)
+		except Exception as e:
+			keys = self.key_list
+
+		cur = conn.cursor()
+		cur.execute("SELECT " + ','.join(keys) + " FROM user")
+		rows = []
+		for r in cur.fetchall():
+			d = {}
+			for column in range(len(keys)):
+				d[keys[column]] = r[column]
+			rows.append(d)
+		cur.close()
+		return rows
+
+class Dbv3Transfer(DbTransfer):
+	def __init__(self):
+		super(Dbv3Transfer, self).__init__()
+		self.update_node_state = True if get_config().API_INTERFACE != 'legendsockssr' else False
+		if self.update_node_state:
+			self.key_list += ['id']
+		self.key_list += ['method']
+		if self.update_node_state:
+			self.ss_node_info_name = 'ss_node_info_log'
+			if get_config().API_INTERFACE == 'sspanelv3ssr':
+				self.key_list += ['obfs', 'protocol']
+			if get_config().API_INTERFACE == 'glzjinmod':
+				self.key_list += ['obfs', 'protocol']
+				self.ss_node_info_name = 'ss_node_info'
+		else:
+			self.key_list += ['obfs', 'protocol']
+		self.start_time = time.time()
+
+	def update_all_user(self, dt_transfer):
+		import cymysql
+		update_transfer = {}
+
+		query_head = 'UPDATE user'
+		query_sub_when = ''
+		query_sub_when2 = ''
+		query_sub_in = None
+		last_time = time.time()
+
+		alive_user_count = len(self.onlineuser_cache)
+		bandwidth_thistime = 0
+
+		if self.cfg["ssl_enable"] == 1:
+			conn = cymysql.connect(host=self.cfg["host"], port=self.cfg["port"],
+					user=self.cfg["user"], passwd=self.cfg["password"],
+					db=self.cfg["db"], charset='utf8',
+					ssl={'ca':self.cfg["ssl_ca"],'cert':self.cfg["ssl_cert"],'key':self.cfg["ssl_key"]})
+		else:
+			conn = cymysql.connect(host=self.cfg["host"], port=self.cfg["port"],
+					user=self.cfg["user"], passwd=self.cfg["password"],
+					db=self.cfg["db"], charset='utf8')
+		conn.autocommit(True)
+
+		for id in dt_transfer.keys():
+			transfer = dt_transfer[id]
+			bandwidth_thistime = bandwidth_thistime + transfer[0] + transfer[1]
+
+			update_trs = 1024 * (2048 - self.user_pass.get(id, 0) * 64)
+			if transfer[0] + transfer[1] < update_trs:
+				self.user_pass[id] = self.user_pass.get(id, 0) + 1
+				continue
+			if id in self.user_pass:
+				del self.user_pass[id]
+
+			query_sub_when += ' WHEN %s THEN u+%s' % (id, int(transfer[0] * self.cfg["transfer_mul"]))
+			query_sub_when2 += ' WHEN %s THEN d+%s' % (id, int(transfer[1] * self.cfg["transfer_mul"]))
+			update_transfer[id] = transfer
+
+			if self.update_node_state:
+				cur = conn.cursor()
+				try:
+					if id in self.port_uid_table:
+						cur.execute("INSERT INTO `user_traffic_log` (`id`, `user_id`, `u`, `d`, `node_id`, `rate`, `traffic`, `log_time`) VALUES (NULL, '" + \
+							str(self.port_uid_table[id]) + "', '" + str(transfer[0]) + "', '" + str(transfer[1]) + "', '" + \
+							str(self.cfg["node_id"]) + "', '" + str(self.cfg["transfer_mul"]) + "', '" + \
+							self.traffic_format((transfer[0] + transfer[1]) * self.cfg["transfer_mul"]) + "', unix_timestamp()); ")
+				except:
+					logging.warn('no `user_traffic_log` in db')
+				cur.close()
+
+			if query_sub_in is not None:
+				query_sub_in += ',%s' % id
+			else:
+				query_sub_in = '%s' % id
+
+		if query_sub_when != '':
+			query_sql = query_head + ' SET u = CASE port' + query_sub_when + \
+						' END, d = CASE port' + query_sub_when2 + \
+						' END, t = ' + str(int(last_time)) + \
+						' WHERE port IN (%s)' % query_sub_in
+			cur = conn.cursor()
+			try:
+				cur.execute(query_sql)
+			except Exception as e:
+				logging.error(e)
+			cur.close()
+
+		if self.update_node_state:
+			try:
+				cur = conn.cursor()
+				try:
+					cur.execute("INSERT INTO `ss_node_online_log` (`id`, `node_id`, `online_user`, `log_time`) VALUES (NULL, '" + \
+						str(self.cfg["node_id"]) + "', '" + str(alive_user_count) + "', unix_timestamp()); ")
+				except Exception as e:
+					logging.error(e)
+				cur.close()
+
+				cur = conn.cursor()
+				try:
+					cur.execute("INSERT INTO `" + self.ss_node_info_name + "` (`id`, `node_id`, `uptime`, `load`, `log_time`) VALUES (NULL, '" + \
+						str(self.cfg["node_id"]) + "', '" + str(self.uptime()) + "', '" + \
+						str(self.load()) + "', unix_timestamp()); ")
+				except Exception as e:
+					logging.error(e)
+				cur.close()
+			except:
+				logging.warn('no `ss_node_online_log` or `" + self.ss_node_info_name + "` in db')
+
+		conn.close()
+		return update_transfer
+
+	def pull_db_users(self, conn):
+		try:
+			switchrule = importloader.load('switchrule')
+			keys = switchrule.getKeys(self.key_list)
+		except Exception as e:
+			keys = self.key_list
+
+		cur = conn.cursor()
+
+		if self.update_node_state:
+			node_info_keys = ['traffic_rate']
+			try:
+				cur.execute("SELECT " + ','.join(node_info_keys) +" FROM ss_node where `id`='" + str(self.cfg["node_id"]) + "'")
+				nodeinfo = cur.fetchone()
+			except Exception as e:
+				logging.error(e)
+				nodeinfo = None
+
+			if nodeinfo == None:
+				rows = []
+				cur.close()
+				conn.commit()
+				logging.warn('None result when select node info from ss_node in db, maybe you set the incorrect node id')
+				return rows
+			cur.close()
+
+			node_info_dict = {}
+			for column in range(len(nodeinfo)):
+				node_info_dict[node_info_keys[column]] = nodeinfo[column]
+			self.cfg['transfer_mul'] = float(node_info_dict['traffic_rate'])
+
+		cur = conn.cursor()
+		try:
+			rows = []
+			cur.execute("SELECT " + ','.join(keys) + " FROM user")
+			for r in cur.fetchall():
+				d = {}
+				for column in range(len(keys)):
+					d[keys[column]] = r[column]
+				rows.append(d)
+		except Exception as e:
+			logging.error(e)
+		cur.close()
+		return rows
+
+	def load(self):
+		import os
+		return os.popen("cat /proc/loadavg | awk '{ print $1\" \"$2\" \"$3 }'").readlines()[0]
+
+	def uptime(self):
+		return time.time() - self.start_time
+
+	def traffic_format(self, traffic):
+		if traffic < 1024 * 8:
+			return str(int(traffic)) + "B";
+
+		if traffic < 1024 * 1024 * 2:
+			return str(round((traffic / 1024.0), 2)) + "KB";
+
+		return str(round((traffic / 1048576.0), 2)) + "MB";
+
+class MuJsonTransfer(TransferBase):
+	def __init__(self):
+		super(MuJsonTransfer, self).__init__()
+
+	def update_all_user(self, dt_transfer):
+		import json
+		rows = None
+
+		config_path = get_config().MUDB_FILE
+		with open(config_path, 'rb+') as f:
+			rows = json.loads(f.read().decode('utf8'))
+			for row in rows:
+				if "port" in row:
+					port = row["port"]
+					if port in dt_transfer:
+						row["u"] += dt_transfer[port][0]
+						row["d"] += dt_transfer[port][1]
+
+		if rows:
+			output = json.dumps(rows, sort_keys=True, indent=4, separators=(',', ': '))
+			with open(config_path, 'r+') as f:
+				f.write(output)
+				f.truncate()
+
+		return dt_transfer
+
+	def pull_db_all_user(self):
+		import json
+		rows = None
+
+		config_path = get_config().MUDB_FILE
+		with open(config_path, 'rb+') as f:
+			rows = json.loads(f.read().decode('utf8'))
+			for row in rows:
+				try:
+					if 'forbidden_ip' in row:
+						row['forbidden_ip'] = common.IPNetwork(row['forbidden_ip'])
+				except Exception as e:
+					logging.error(e)
+				try:
+					if 'forbidden_port' in row:
+						row['forbidden_port'] = common.PortRange(row['forbidden_port'])
+				except Exception as e:
+					logging.error(e)
+
+		if not rows:
+			logging.warn('no user in json file')
+		return rows
+
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/changelog b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/changelog
new file mode 100755
index 0000000000..4e7ad163f6
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/changelog
@@ -0,0 +1,5 @@
+shadowsocks (2.1.0-1) unstable; urgency=low
+
+  * Initial release (Closes: #758900)
+
+ -- Shell.Xu <shell909090@gmail.com>  Sat, 23 Aug 2014 00:56:04 +0800
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/compat b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/compat
new file mode 100755
index 0000000000..45a4fb75db
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/compat
@@ -0,0 +1 @@
+8
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/config.json b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/config.json
new file mode 100644
index 0000000000..35cb14a6cc
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/config.json
@@ -0,0 +1,11 @@
+{
+    "server":"my_server_ip",
+    "server_port":8388,
+    "local_address": "127.0.0.1",
+    "local_port":1080,
+    "password":"mypassword",
+    "timeout":300,
+    "method":"aes-256-cfb",
+    "fast_open": false,
+    "workers": 1
+}
\ No newline at end of file
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/control b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/control
new file mode 100755
index 0000000000..da0092004d
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/control
@@ -0,0 +1,19 @@
+Source: shadowsocks
+Section: python
+Priority: extra
+Maintainer: Shell.Xu <shell909090@gmail.com>
+Build-Depends: debhelper (>= 8), python-all (>= 2.6.6-3~), python-setuptools
+Standards-Version: 3.9.5
+Homepage: https://github.com/clowwindy/shadowsocks
+Vcs-Git: git://github.com/shell909090/shadowsocks.git
+Vcs-Browser: http://github.com/shell909090/shadowsocks
+
+Package: shadowsocks
+Architecture: all
+Pre-Depends: dpkg (>= 1.15.6~)
+Depends: ${misc:Depends}, ${python:Depends}, python-pkg-resources, python-m2crypto
+Description: Fast tunnel proxy that helps you bypass firewalls
+ A secure socks5 proxy, designed to protect your Internet traffic.
+ .
+ This package contain local and server part of shadowsocks, a fast,
+ powerful tunnel proxy to bypass firewalls.
\ No newline at end of file
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/copyright b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/copyright
new file mode 100755
index 0000000000..7be81625ef
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/copyright
@@ -0,0 +1,30 @@
+Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Upstream-Name: shadowsocks
+Source: https://github.com/clowwindy/shadowsocks
+
+Files: debian/*
+Copyright: 2014 Shell.Xu <shell909090@gmail.com>
+License: Expat
+
+Files: *
+Copyright: 2014 clowwindy <clowwindy42@gmail.com>
+License: Expat
+
+License: Expat
+ Permission is hereby granted, free of charge, to any person obtaining a copy
+ of this software and associated documentation files (the "Software"), to deal
+ in the Software without restriction, including without limitation the rights
+ to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ copies of the Software, and to permit persons to whom the Software is
+ furnished to do so, subject to the following conditions:
+ . 
+ The above copyright notice and this permission notice shall be included in
+ all copies or substantial portions of the Software.
+ .
+ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+ SOFTWARE.
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/docs b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/docs
new file mode 100755
index 0000000000..0208fc1fed
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/docs
@@ -0,0 +1,2 @@
+README.md
+README.rst
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/init.d b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/init.d
new file mode 100755
index 0000000000..2f4f3521e3
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/init.d
@@ -0,0 +1,149 @@
+#!/bin/sh
+### BEGIN INIT INFO
+# Provides:          shadowsocks
+# Required-Start:    $network $local_fs $remote_fs
+# Required-Stop:     $network $local_fs $remote_fs
+# Default-Start:     2 3 4 5
+# Default-Stop:      0 1 6
+# Short-Description: Fast tunnel proxy that helps you bypass firewalls
+# Description:       A secure socks5 proxy, designed to protect your Internet traffic.
+#		     This package contain local and server part of shadowsocks, a fast,
+#		     powerful tunnel proxy to bypass firewalls.
+### END INIT INFO
+
+# Author: Shell.Xu <shell909090@gmail.com>
+
+# PATH should only include /usr/* if it runs after the mountnfs.sh script
+PATH=/sbin:/usr/sbin:/bin:/usr/bin
+DESC=shadowsocks             # Introduce a short description here
+NAME=shadowsocks             # Introduce the short server's name here
+DAEMON=/usr/bin/ssserver     # Introduce the server's location here
+DAEMON_ARGS=""               # Arguments to run the daemon with
+PIDFILE=/var/run/$NAME.pid
+SCRIPTNAME=/etc/init.d/$NAME
+LOGFILE=/var/log/$NAME.log
+
+# Exit if the package is not installed
+[ -x $DAEMON ] || exit 0
+
+# Read configuration variable file if it is present
+[ -r /etc/default/$NAME ] && . /etc/default/$NAME
+
+# Load the VERBOSE setting and other rcS variables
+. /lib/init/vars.sh
+
+# Define LSB log_* functions.
+# Depend on lsb-base (>= 3.0-6) to ensure that this file is present.
+. /lib/lsb/init-functions
+
+#
+# Function that starts the daemon/service
+#
+do_start()
+{
+	# Return
+	#   0 if daemon has been started
+	#   1 if daemon was already running
+	#   2 if daemon could not be started
+	start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON \
+	    --background --make-pidfile --chdir / --chuid $USERID --no-close --test > /dev/null \
+		|| return 1
+	start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON \
+	    --background --make-pidfile --chdir / --chuid $USERID --no-close -- \
+		$DAEMON_ARGS $DAEMON_OPTS >> $LOGFILE 2>&1 \
+		|| return 2
+	# Add code here, if necessary, that waits for the process to be ready
+	# to handle requests from services started subsequently which depend
+	# on this one.  As a last resort, sleep for some time.
+}
+
+#
+# Function that stops the daemon/service
+#
+do_stop()
+{
+	# Return
+	#   0 if daemon has been stopped
+	#   1 if daemon was already stopped
+	#   2 if daemon could not be stopped
+	#   other if a failure occurred
+	start-stop-daemon --stop --quiet --retry=TERM/30/KILL/5 --pidfile $PIDFILE
+	RETVAL="$?"
+	[ "$RETVAL" = 2 ] && return 2
+	# Many daemons don't delete their pidfiles when they exit.
+	rm -f $PIDFILE
+	return "$RETVAL"
+}
+
+#
+# Function that sends a SIGHUP to the daemon/service
+#
+do_reload() {
+	#
+	# If the daemon can reload its configuration without
+	# restarting (for example, when it is sent a SIGHUP),
+	# then implement that here.
+	#
+	start-stop-daemon --stop --signal 1 --quiet --pidfile $PIDFILE --name $NAME
+	return 0
+}
+
+case "$1" in
+  start)
+    [ "$VERBOSE" != no ] && log_daemon_msg "Starting $DESC " "$NAME"
+    do_start
+    case "$?" in
+		0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
+		2) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
+	esac
+  ;;
+  stop)
+	[ "$VERBOSE" != no ] && log_daemon_msg "Stopping $DESC" "$NAME"
+	do_stop
+	case "$?" in
+		0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
+		2) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
+	esac
+	;;
+  status)
+       status_of_proc "$DAEMON" "$NAME" && exit 0 || exit $?
+       ;;
+  #reload|force-reload)
+	#
+	# If do_reload() is not implemented then leave this commented out
+	# and leave 'force-reload' as an alias for 'restart'.
+	#
+	#log_daemon_msg "Reloading $DESC" "$NAME"
+	#do_reload
+	#log_end_msg $?
+	#;;
+  restart|force-reload)
+	#
+	# If the "reload" option is implemented then remove the
+	# 'force-reload' alias
+	#
+	log_daemon_msg "Restarting $DESC" "$NAME"
+	do_stop
+	case "$?" in
+	  0|1)
+		do_start
+		case "$?" in
+			0) log_end_msg 0 ;;
+			1) log_end_msg 1 ;; # Old process is still running
+			*) log_end_msg 1 ;; # Failed to start
+		esac
+		;;
+	  *)
+	  	# Failed to stop
+		log_end_msg 1
+		;;
+	esac
+	;;
+  *)
+	#echo "Usage: $SCRIPTNAME {start|stop|restart|reload|force-reload}" >&2
+	echo "Usage: $SCRIPTNAME {start|stop|status|restart|force-reload}" >&2
+	exit 3
+	;;
+esac
+
+:
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/install b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/install
new file mode 100755
index 0000000000..a61486462f
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/install
@@ -0,0 +1 @@
+debian/config.json etc/shadowsocks/
\ No newline at end of file
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/rules b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/rules
new file mode 100755
index 0000000000..62e2bb6f6f
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/rules
@@ -0,0 +1,5 @@
+#!/usr/bin/make -f
+# -*- makefile -*-
+
+%:
+	dh $@ --with python2 --buildsystem=python_distutils
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/shadowsocks.default b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/shadowsocks.default
new file mode 100755
index 0000000000..a520602797
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/shadowsocks.default
@@ -0,0 +1,12 @@
+# Defaults for shadowsocks initscript
+# sourced by /etc/init.d/shadowsocks
+# installed at /etc/default/shadowsocks by the maintainer scripts
+
+USERID="nobody"
+
+#
+# This is a POSIX shell fragment
+#
+
+# Additional options that are passed to the Daemon.
+DAEMON_OPTS="-q -c /etc/shadowsocks/config.json"
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/shadowsocks.manpages b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/shadowsocks.manpages
new file mode 100755
index 0000000000..3df8a3341b
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/shadowsocks.manpages
@@ -0,0 +1,2 @@
+debian/sslocal.1
+debian/ssserver.1
\ No newline at end of file
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/source/format b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/source/format
new file mode 100755
index 0000000000..163aaf8d82
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/source/format
@@ -0,0 +1 @@
+3.0 (quilt)
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/sslocal.1 b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/sslocal.1
new file mode 100755
index 0000000000..0c2cf51659
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/sslocal.1
@@ -0,0 +1,59 @@
+.\"                                      Hey, EMACS: -*- nroff -*-
+.\" (C) Copyright 2014 Shell.Xu <shell909090@gmail.com>,
+.\"
+.TH SHADOWSOCKS 1 "August 23, 2014"
+.SH NAME
+shadowsocks \- Fast tunnel proxy that helps you bypass firewalls
+.SH SYNOPSIS
+.B ssserver
+.RI [ options ]
+.br
+.B sslocal
+.RI [ options ]
+.SH DESCRIPTION
+shadowsocks is a tunnel proxy helps you bypass firewall. 
+.B ssserver
+is the server part, and
+.B sslocal
+is the local part.
+.SH OPTIONS
+.TP
+.B \-h, \-\-help
+Show this help message and exit.
+.TP
+.B \-s SERVER_ADDR
+Server address, default: 0.0.0.0.
+.TP
+.B \-p SERVER_PORT
+Server port, default: 8388.
+.TP
+.B \-k PASSWORD
+Password.
+.TP
+.B \-m METHOD
+Encryption method, default: aes-256-cfb.
+.TP
+.B \-t TIMEOUT
+Timeout in seconds, default: 300.
+.TP
+.B \-c CONFIG
+Path to config file.
+.TP
+.B \-\-fast-open
+Use TCP_FASTOPEN, requires Linux 3.7+.
+.TP
+.B \-\-workers WORKERS
+Number of workers, available on Unix/Linux.
+.TP
+.B \-v, \-vv
+Verbose mode.
+.TP
+.B \-q, \-qq
+Quiet mode, only show warnings/errors.
+.SH SEE ALSO
+.br
+The programs are documented fully by
+.IR "Shell Xu <shell909090@gmail.com>"
+and 
+.IR "Clowwindy <clowwindy42@gmail.com>",
+available via the Info system.
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/ssserver.1 b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/ssserver.1
new file mode 100755
index 0000000000..0c2cf51659
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/debian/ssserver.1
@@ -0,0 +1,59 @@
+.\"                                      Hey, EMACS: -*- nroff -*-
+.\" (C) Copyright 2014 Shell.Xu <shell909090@gmail.com>,
+.\"
+.TH SHADOWSOCKS 1 "August 23, 2014"
+.SH NAME
+shadowsocks \- Fast tunnel proxy that helps you bypass firewalls
+.SH SYNOPSIS
+.B ssserver
+.RI [ options ]
+.br
+.B sslocal
+.RI [ options ]
+.SH DESCRIPTION
+shadowsocks is a tunnel proxy helps you bypass firewall. 
+.B ssserver
+is the server part, and
+.B sslocal
+is the local part.
+.SH OPTIONS
+.TP
+.B \-h, \-\-help
+Show this help message and exit.
+.TP
+.B \-s SERVER_ADDR
+Server address, default: 0.0.0.0.
+.TP
+.B \-p SERVER_PORT
+Server port, default: 8388.
+.TP
+.B \-k PASSWORD
+Password.
+.TP
+.B \-m METHOD
+Encryption method, default: aes-256-cfb.
+.TP
+.B \-t TIMEOUT
+Timeout in seconds, default: 300.
+.TP
+.B \-c CONFIG
+Path to config file.
+.TP
+.B \-\-fast-open
+Use TCP_FASTOPEN, requires Linux 3.7+.
+.TP
+.B \-\-workers WORKERS
+Number of workers, available on Unix/Linux.
+.TP
+.B \-v, \-vv
+Verbose mode.
+.TP
+.B \-q, \-qq
+Quiet mode, only show warnings/errors.
+.SH SEE ALSO
+.br
+The programs are documented fully by
+.IR "Shell Xu <shell909090@gmail.com>"
+and 
+.IR "Clowwindy <clowwindy42@gmail.com>",
+available via the Info system.
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/importloader.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/importloader.py
new file mode 100644
index 0000000000..c917cb7d95
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/importloader.py
@@ -0,0 +1,24 @@
+#!/usr/bin/python
+# -*- coding: UTF-8 -*-
+
+def load(name):
+	try:
+		obj = __import__(name)
+		reload(obj)
+		return obj
+	except:
+		pass
+
+	try:
+		import importlib
+		obj = importlib.__import__(name)
+		importlib.reload(obj)
+		return obj
+	except:
+		pass
+
+def loads(namelist):
+	for name in namelist:
+		obj = load(name)
+		if obj is not None:
+			return obj
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/initcfg.bat b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/initcfg.bat
new file mode 100755
index 0000000000..6d0bce695a
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/initcfg.bat
@@ -0,0 +1,4 @@
+@echo off
+If Not Exist "userapiconfig.py" Copy "apiconfig.py" "userapiconfig.py"
+If Not Exist "user-config.json" Copy "config.json" "user-config.json"
+If Not Exist "usermysql.json" Copy "mysql.json" "usermysql.json"
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/initcfg.sh b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/initcfg.sh
new file mode 100755
index 0000000000..862d1abed1
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/initcfg.sh
@@ -0,0 +1,8 @@
+#!/bin/bash
+
+chmod +x *.sh
+chmod +x shadowsocks/*.sh
+cp -n apiconfig.py userapiconfig.py
+cp -n config.json user-config.json
+cp -n mysql.json usermysql.json
+
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/initmudbjson.sh b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/initmudbjson.sh
new file mode 100755
index 0000000000..09b07f3322
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/initmudbjson.sh
@@ -0,0 +1,24 @@
+#!/bin/bash
+
+bash initcfg.sh
+sed -i "s/API_INTERFACE = .\+\?\#/API_INTERFACE = \'mudbjson\' \#/g" userapiconfig.py
+ip_addr=`ifconfig -a|grep inet|grep -v inet6|grep -v "127.0.0."|grep -v -e "192\.168\..[0-9]\+\.[0-9]\+"|grep -v -e "10\.[0-9]\+\.[0-9]\+\.[0-9]\+"|awk '{print $2}'|tr -d "addr:"`
+ip_count=`echo $ip_addr|grep -e "^[0-9]\+\.[0-9]\+\.[0-9]\+\.[0-9]\+$" -c`
+
+if [[ $ip_count == 1 ]]; then
+	ip_addr=`ip a|grep inet|grep -v inet6|grep -v "127.0.0."|grep -v -e "192\.168\..[0-9]\+\.[0-9]\+"|grep -v -e "10\.[0-9]\+\.[0-9]\+\.[0-9]\+"|awk '{print $2}'`
+	ip_addr=${ip_addr%/*}
+	ip_count=`echo $ip_addr|grep -e "^[0-9]\+\.[0-9]\+\.[0-9]\+\.[0-9]\+$" -c`
+fi
+if [[ $ip_count == 1 ]]; then
+	echo "server IP is "${ip_addr}
+	sed -i "s/SERVER_PUB_ADDR = .\+/SERVER_PUB_ADDR = \'"${ip_addr}"\'/g" userapiconfig.py
+	user_count=`python mujson_mgr.py -l|grep -c -e "[0-9]"`
+	if [[ $user_count == 0 ]]; then
+		port=`python -c 'import random;print(random.randint(10000, 65536))'`
+		python mujson_mgr.py -a -p ${port}
+	fi
+else
+	echo "unable to detect server IP"
+fi
+
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/logrun.sh b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/logrun.sh
new file mode 100755
index 0000000000..94153fe9e2
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/logrun.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+cd `dirname $0`
+python_ver=$(ls /usr/bin|grep -e "^python[23]\.[1-9]\+$"|tail -1)
+eval $(ps -ef | grep "[0-9] ${python_ver} server\\.py m" | awk '{print "kill "$2}')
+ulimit -n 512000
+nohup ${python_ver} server.py m>> ssserver.log 2>&1 &
+
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/mudb.json b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/mudb.json
new file mode 100644
index 0000000000..0d4f101c7a
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/mudb.json
@@ -0,0 +1,2 @@
+[
+]
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/mujson_mgr.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/mujson_mgr.py
new file mode 100644
index 0000000000..2eb05d59d1
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/mujson_mgr.py
@@ -0,0 +1,358 @@
+#!/usr/bin/python
+# -*- coding: UTF-8 -*-
+
+import traceback
+from shadowsocks import shell, common
+from configloader import load_config, get_config
+import random
+import getopt
+import sys
+import json
+import base64
+
+
+class MuJsonLoader(object):
+	def __init__(self):
+		self.json = None
+
+	def load(self, path):
+		l = "[]"
+		try:
+			with open(path, 'rb+') as f:
+				l = f.read().decode('utf8')
+		except:
+			pass
+		self.json = json.loads(l)
+
+	def save(self, path):
+		if self.json is not None:
+			output = json.dumps(self.json, sort_keys=True, indent=4, separators=(',', ': '))
+			with open(path, 'a'):
+				pass
+			with open(path, 'rb+') as f:
+				f.write(output.encode('utf8'))
+				f.truncate()
+
+
+class MuMgr(object):
+	def __init__(self):
+		self.config_path = get_config().MUDB_FILE
+		try:
+			self.server_addr = get_config().SERVER_PUB_ADDR
+		except:
+			self.server_addr = '127.0.0.1'
+		self.data = MuJsonLoader()
+
+		if self.server_addr == '127.0.0.1':
+			self.server_addr = self.getipaddr()
+
+	def getipaddr(self, ifname='eth0'):
+		import socket
+		import struct
+		ret = '127.0.0.1'
+		try:
+			ret = socket.gethostbyname(socket.getfqdn(socket.gethostname()))
+		except:
+			pass
+		if ret == '127.0.0.1':
+			try:
+				import fcntl
+				s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
+				ret = socket.inet_ntoa(fcntl.ioctl(s.fileno(), 0x8915, struct.pack('256s', ifname[:15]))[20:24])
+			except:
+				pass
+		return ret
+
+	def ssrlink(self, user, encode, muid):
+		protocol = user.get('protocol', '')
+		obfs = user.get('obfs', '')
+		protocol = protocol.replace("_compatible", "")
+		obfs = obfs.replace("_compatible", "")
+		protocol_param = ''
+		if muid is not None:
+			protocol_param_ = user.get('protocol_param', '')
+			param = protocol_param_.split('#')
+			if len(param) == 2:
+				for row in self.data.json:
+					if int(row['port']) == muid:
+						param = str(muid) + ':' + row['passwd']
+						protocol_param = '/?protoparam=' + common.to_str(base64.urlsafe_b64encode(common.to_bytes(param))).replace("=", "")
+						break
+		link = ("%s:%s:%s:%s:%s:%s" % (self.server_addr, user['port'], protocol, user['method'], obfs, common.to_str(base64.urlsafe_b64encode(common.to_bytes(user['passwd']))).replace("=", ""))) + protocol_param
+		return "ssr://" + (encode and common.to_str(base64.urlsafe_b64encode(common.to_bytes(link))).replace("=", "") or link)
+
+	def userinfo(self, user, muid = None):
+		ret = ""
+		key_list = ['user', 'port', 'method', 'passwd', 'protocol', 'protocol_param', 'obfs', 'obfs_param', 'transfer_enable', 'u', 'd']
+		for key in sorted(user):
+			if key not in key_list:
+				key_list.append(key)
+		for key in key_list:
+			if key in ['enable'] or key not in user:
+				continue
+			ret += '\n'
+			if (muid is not None) and (key in ['protocol_param']):
+				for row in self.data.json:
+					if int(row['port']) == muid:
+						ret += "    %s : %s" % (key, str(muid) + ':' + row['passwd'])
+						break
+			elif key in ['transfer_enable', 'u', 'd']:
+				if muid is not None:
+					for row in self.data.json:
+						if int(row['port']) == muid:
+							val = row[key]
+							break
+				else:
+					val = user[key]
+				if val / 1024 < 4:
+					ret += "    %s : %s" % (key, val)
+				elif val / 1024 ** 2 < 4:
+					val /= float(1024)
+					ret += "    %s : %s  K Bytes" % (key, val)
+				elif val / 1024 ** 3 < 4:
+					val /= float(1024 ** 2)
+					ret += "    %s : %s  M Bytes" % (key, val)
+				else:
+					val /= float(1024 ** 3)
+					ret += "    %s : %s  G Bytes" % (key, val)
+			else:
+				ret += "    %s : %s" % (key, user[key])
+		ret += "\n    " + self.ssrlink(user, False, muid)
+		ret += "\n    " + self.ssrlink(user, True, muid)
+		return ret
+
+	def rand_pass(self):
+		return ''.join([random.choice('''ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789~-_=+(){}[]^&%$@''') for i in range(8)])
+
+	def add(self, user):
+		up = {'enable': 1, 'u': 0, 'd': 0, 'method': "aes-128-ctr",
+		'protocol': "auth_aes128_md5",
+		'obfs': "tls1.2_ticket_auth_compatible",
+		'transfer_enable': 9007199254740992}
+		up['passwd'] = self.rand_pass()
+		up.update(user)
+
+		self.data.load(self.config_path)
+		for row in self.data.json:
+			match = False
+			if 'user' in user and row['user'] == user['user']:
+				match = True
+			if 'port' in user and row['port'] == user['port']:
+				match = True
+			if match:
+				print("user [%s] port [%s] already exist" % (row['user'], row['port']))
+				return
+		self.data.json.append(up)
+		print("### add user info %s" % self.userinfo(up))
+		self.data.save(self.config_path)
+
+	def edit(self, user):
+		self.data.load(self.config_path)
+		for row in self.data.json:
+			match = True
+			if 'user' in user and row['user'] != user['user']:
+				match = False
+			if 'port' in user and row['port'] != user['port']:
+				match = False
+			if match:
+				print("edit user [%s]" % (row['user'],))
+				row.update(user)
+				print("### new user info %s" % self.userinfo(row))
+				break
+		self.data.save(self.config_path)
+
+	def delete(self, user):
+		self.data.load(self.config_path)
+		index = 0
+		for row in self.data.json:
+			match = True
+			if 'user' in user and row['user'] != user['user']:
+				match = False
+			if 'port' in user and row['port'] != user['port']:
+				match = False
+			if match:
+				print("delete user [%s]" % row['user'])
+				del self.data.json[index]
+				break
+			index += 1
+		self.data.save(self.config_path)
+
+	def clear_ud(self, user):
+		up = {'u': 0, 'd': 0}
+		self.data.load(self.config_path)
+		for row in self.data.json:
+			match = True
+			if 'user' in user and row['user'] != user['user']:
+				match = False
+			if 'port' in user and row['port'] != user['port']:
+				match = False
+			if match:
+				row.update(up)
+				print("clear user [%s]" % row['user'])
+		self.data.save(self.config_path)
+
+	def list_user(self, user):
+		self.data.load(self.config_path)
+		if not user:
+			for row in self.data.json:
+				print("user [%s] port %s" % (row['user'], row['port']))
+			return
+		for row in self.data.json:
+			match = True
+			if 'user' in user and row['user'] != user['user']:
+				match = False
+			if 'port' in user and row['port'] != user['port']:
+				match = False
+			if match:
+				muid = None
+				if 'muid' in user:
+					muid = user['muid']
+				print("### user [%s] info %s" % (row['user'], self.userinfo(row, muid)))
+
+
+def print_server_help():
+	print('''usage: python mujson_manage.py -a|-d|-e|-c|-l [OPTION]...
+
+Actions:
+  -a                   add/edit a user
+  -d                   delete a user
+  -e                   edit a user
+  -c                   set u&d to zero
+  -l                   display a user infomation or all users infomation
+
+Options:
+  -u USER              the user name
+  -p PORT              server port (only this option must be set if add a user)
+  -k PASSWORD          password
+  -m METHOD            encryption method, default: aes-128-ctr
+  -O PROTOCOL          protocol plugin, default: auth_aes128_md5
+  -o OBFS              obfs plugin, default: tls1.2_ticket_auth_compatible
+  -G PROTOCOL_PARAM    protocol plugin param
+  -g OBFS_PARAM        obfs plugin param
+  -t TRANSFER          max transfer for G bytes, default: 8388608 (8 PB or 8192 TB)
+  -f FORBID            set forbidden ports. Example (ban 1~79 and 81~100): -f "1-79,81-100"
+  -i MUID              set sub id to display (only work with -l)
+  -s SPEED             set speed_limit_per_con
+  -S SPEED             set speed_limit_per_user
+
+General options:
+  -h, --help           show this help message and exit
+''')
+
+
+def main():
+	shortopts = 'adeclu:i:p:k:O:o:G:g:m:t:f:hs:S:'
+	longopts = ['help']
+	action = None
+	user = {}
+	fast_set_obfs = {'0': 'plain',
+			'+1': 'http_simple_compatible',
+			'1': 'http_simple',
+			'+2': 'tls1.2_ticket_auth_compatible',
+			'2': 'tls1.2_ticket_auth'}
+	fast_set_protocol = {'0': 'origin',
+			's4': 'auth_sha1_v4',
+			'+s4': 'auth_sha1_v4_compatible',
+			'am': 'auth_aes128_md5',
+			'as': 'auth_aes128_sha1',
+			'ca': 'auth_chain_a',
+			}
+	fast_set_method = {'0': 'none',
+			'a1c': 'aes-128-cfb',
+			'a2c': 'aes-192-cfb',
+			'a3c': 'aes-256-cfb',
+			'r': 'rc4-md5',
+			'r6': 'rc4-md5-6',
+			'c': 'chacha20',
+			'ci': 'chacha20-ietf',
+			's': 'salsa20',
+			'a1': 'aes-128-ctr',
+			'a2': 'aes-192-ctr',
+			'a3': 'aes-256-ctr'}
+	try:
+		optlist, args = getopt.getopt(sys.argv[1:], shortopts, longopts)
+		for key, value in optlist:
+			if key == '-a':
+				action = 1
+			elif key == '-d':
+				action = 2
+			elif key == '-e':
+				action = 3
+			elif key == '-l':
+				action = 4
+			elif key == '-c':
+				action = 0
+			elif key == '-u':
+				user['user'] = value
+			elif key == '-i':
+				user['muid'] = int(value)
+			elif key == '-p':
+				user['port'] = int(value)
+			elif key == '-k':
+				user['passwd'] = value
+			elif key == '-o':
+				if value in fast_set_obfs:
+					user['obfs'] = fast_set_obfs[value]
+				else:
+					user['obfs'] = value
+			elif key == '-O':
+				if value in fast_set_protocol:
+					user['protocol'] = fast_set_protocol[value]
+				else:
+					user['protocol'] = value
+			elif key == '-g':
+				user['obfs_param'] = value
+			elif key == '-G':
+				user['protocol_param'] = value
+			elif key == '-s':
+				user['speed_limit_per_con'] = int(value)
+			elif key == '-S':
+				user['speed_limit_per_user'] = int(value)
+			elif key == '-m':
+				if value in fast_set_method:
+					user['method'] = fast_set_method[value]
+				else:
+					user['method'] = value
+			elif key == '-f':
+				user['forbidden_port'] = value
+			elif key == '-t':
+				val = float(value)
+				try:
+					val = int(value)
+				except:
+					pass
+				user['transfer_enable'] = int(val * 1024) * (1024 ** 2)
+			elif key in ('-h', '--help'):
+				print_server_help()
+				sys.exit(0)
+	except getopt.GetoptError as e:
+		print(e)
+		sys.exit(2)
+
+	manage = MuMgr()
+	if action == 0:
+		manage.clear_ud(user)
+	elif action == 1:
+		if 'user' not in user and 'port' in user:
+			user['user'] = str(user['port'])
+		if 'user' in user and 'port' in user:
+			manage.add(user)
+		else:
+			print("You have to set the port with -p")
+	elif action == 2:
+		if 'user' in user or 'port' in user:
+			manage.delete(user)
+		else:
+			print("You have to set the user name or port with -u/-p")
+	elif action == 3:
+		if 'user' in user or 'port' in user:
+			manage.edit(user)
+		else:
+			print("You have to set the user name or port with -u/-p")
+	elif action == 4:
+		manage.list_user(user)
+	elif action is None:
+		print_server_help()
+
+if __name__ == '__main__':
+	main()
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/mysql.json b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/mysql.json
new file mode 100644
index 0000000000..1849e9e816
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/mysql.json
@@ -0,0 +1,13 @@
+{
+    "host": "127.0.0.1",
+    "port": 3306,
+    "user": "ss",
+    "password": "pass",
+    "db": "sspanel",
+    "node_id": 0,
+    "transfer_mul": 1.0,
+    "ssl_enable": 0,
+    "ssl_ca": "",
+    "ssl_cert": "",
+    "ssl_key": ""
+}
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/run.sh b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/run.sh
new file mode 100755
index 0000000000..0de8d204ce
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/run.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+cd `dirname $0`
+python_ver=$(ls /usr/bin|grep -e "^python[23]\.[1-9]\+$"|tail -1)
+eval $(ps -ef | grep "[0-9] ${python_ver} server\\.py m" | awk '{print "kill "$2}')
+ulimit -n 512000
+nohup ${python_ver} server.py m>> /dev/null 2>&1 &
+
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/server.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/server.py
new file mode 100644
index 0000000000..ba863b6840
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/server.py
@@ -0,0 +1,66 @@
+#!/usr/bin/python
+# -*- coding: utf-8 -*-
+#
+# Copyright 2015 breakwall
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+import time
+import sys
+import threading
+import os
+
+if __name__ == '__main__':
+	import inspect
+	os.chdir(os.path.dirname(os.path.realpath(inspect.getfile(inspect.currentframe()))))
+
+import server_pool
+import db_transfer
+from shadowsocks import shell
+from configloader import load_config, get_config
+
+class MainThread(threading.Thread):
+	def __init__(self, obj):
+		super(MainThread, self).__init__()
+		self.daemon = True
+		self.obj = obj
+
+	def run(self):
+		self.obj.thread_db(self.obj)
+
+	def stop(self):
+		self.obj.thread_db_stop()
+
+def main():
+	shell.check_python()
+	if False:
+		db_transfer.DbTransfer.thread_db()
+	else:
+		if get_config().API_INTERFACE == 'mudbjson':
+			thread = MainThread(db_transfer.MuJsonTransfer)
+		elif get_config().API_INTERFACE == 'sspanelv2':
+			thread = MainThread(db_transfer.DbTransfer)
+		else:
+			thread = MainThread(db_transfer.Dbv3Transfer)
+		thread.start()
+		try:
+			while thread.is_alive():
+				thread.join(10.0)
+		except (KeyboardInterrupt, IOError, OSError) as e:
+			import traceback
+			traceback.print_exc()
+			thread.stop()
+
+if __name__ == '__main__':
+	main()
+
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/server_pool.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/server_pool.py
new file mode 100644
index 0000000000..d159817a3f
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/server_pool.py
@@ -0,0 +1,293 @@
+#!/usr/bin/env python
+# -*- coding: utf-8 -*-
+
+# Copyright (c) 2014 clowwindy
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy
+# of this software and associated documentation files (the "Software"), to deal
+# in the Software without restriction, including without limitation the rights
+# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+# copies of the Software, and to permit persons to whom the Software is
+# furnished to do so, subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in
+# all copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+# SOFTWARE.
+
+import os
+import logging
+import struct
+import time
+from shadowsocks import shell, eventloop, tcprelay, udprelay, asyncdns, common
+import threading
+import sys
+import traceback
+from socket import *
+from configloader import load_config, get_config
+
+class MainThread(threading.Thread):
+	def __init__(self, params):
+		super(MainThread, self).__init__()
+		self.params = params
+
+	def run(self):
+		ServerPool._loop(*self.params)
+
+class ServerPool(object):
+
+	instance = None
+
+	def __init__(self):
+		shell.check_python()
+		self.config = shell.get_config(False)
+		self.dns_resolver = asyncdns.DNSResolver()
+		if not self.config.get('dns_ipv6', False):
+			asyncdns.IPV6_CONNECTION_SUPPORT = False
+
+		self.mgr = None #asyncmgr.ServerMgr()
+
+		self.tcp_servers_pool = {}
+		self.tcp_ipv6_servers_pool = {}
+		self.udp_servers_pool = {}
+		self.udp_ipv6_servers_pool = {}
+		self.stat_counter = {}
+
+		self.loop = eventloop.EventLoop()
+		self.thread = MainThread( (self.loop, self.dns_resolver, self.mgr) )
+		self.thread.start()
+
+	@staticmethod
+	def get_instance():
+		if ServerPool.instance is None:
+			ServerPool.instance = ServerPool()
+		return ServerPool.instance
+
+	def stop(self):
+		self.loop.stop()
+
+	@staticmethod
+	def _loop(loop, dns_resolver, mgr):
+		try:
+			if mgr is not None:
+				mgr.add_to_loop(loop)
+			dns_resolver.add_to_loop(loop)
+			loop.run()
+		except (KeyboardInterrupt, IOError, OSError) as e:
+			logging.error(e)
+			traceback.print_exc()
+			os.exit(0)
+		except Exception as e:
+			logging.error(e)
+			traceback.print_exc()
+
+	def server_is_run(self, port):
+		port = int(port)
+		ret = 0
+		if port in self.tcp_servers_pool:
+			ret = 1
+		if port in self.tcp_ipv6_servers_pool:
+			ret |= 2
+		return ret
+
+	def server_run_status(self, port):
+		if 'server' in self.config:
+			if port not in self.tcp_servers_pool:
+				return False
+		if 'server_ipv6' in self.config:
+			if port not in self.tcp_ipv6_servers_pool:
+				return False
+		return True
+
+	def new_server(self, port, user_config):
+		ret = True
+		port = int(port)
+		ipv6_ok = False
+
+		if 'server_ipv6' in self.config:
+			if port in self.tcp_ipv6_servers_pool:
+				logging.info("server already at %s:%d" % (self.config['server_ipv6'], port))
+				return 'this port server is already running'
+			else:
+				a_config = self.config.copy()
+				a_config.update(user_config)
+				if len(a_config['server_ipv6']) > 2 and a_config['server_ipv6'][0] == "[" and a_config['server_ipv6'][-1] == "]":
+					a_config['server_ipv6'] = a_config['server_ipv6'][1:-1]
+				a_config['server'] = a_config['server_ipv6']
+				a_config['server_port'] = port
+				a_config['max_connect'] = 128
+				a_config['method'] = common.to_str(a_config['method'])
+				try:
+					logging.info("starting server at [%s]:%d" % (common.to_str(a_config['server']), port))
+
+					tcp_server = tcprelay.TCPRelay(a_config, self.dns_resolver, False, stat_counter=self.stat_counter)
+					tcp_server.add_to_loop(self.loop)
+					self.tcp_ipv6_servers_pool.update({port: tcp_server})
+
+					udp_server = udprelay.UDPRelay(a_config, self.dns_resolver, False, stat_counter=self.stat_counter)
+					udp_server.add_to_loop(self.loop)
+					self.udp_ipv6_servers_pool.update({port: udp_server})
+
+					if common.to_str(a_config['server_ipv6']) == "::":
+						ipv6_ok = True
+				except Exception as e:
+					logging.warn("IPV6 %s " % (e,))
+
+		if 'server' in self.config:
+			if port in self.tcp_servers_pool:
+				logging.info("server already at %s:%d" % (common.to_str(self.config['server']), port))
+				return 'this port server is already running'
+			else:
+				a_config = self.config.copy()
+				a_config.update(user_config)
+				a_config['server_port'] = port
+				a_config['max_connect'] = 128
+				a_config['method'] = common.to_str(a_config['method'])
+				try:
+					logging.info("starting server at %s:%d" % (common.to_str(a_config['server']), port))
+
+					tcp_server = tcprelay.TCPRelay(a_config, self.dns_resolver, False)
+					tcp_server.add_to_loop(self.loop)
+					self.tcp_servers_pool.update({port: tcp_server})
+
+					udp_server = udprelay.UDPRelay(a_config, self.dns_resolver, False)
+					udp_server.add_to_loop(self.loop)
+					self.udp_servers_pool.update({port: udp_server})
+
+				except Exception as e:
+					if not ipv6_ok:
+						logging.warn("IPV4 %s " % (e,))
+
+		return True
+
+	def del_server(self, port):
+		port = int(port)
+		logging.info("del server at %d" % port)
+		try:
+			udpsock = socket(AF_INET, SOCK_DGRAM)
+			udpsock.sendto('%s:%s:0:0' % (get_config().MANAGE_PASS, port), (get_config().MANAGE_BIND_IP, get_config().MANAGE_PORT))
+			udpsock.close()
+		except Exception as e:
+			logging.warn(e)
+		return True
+
+	def cb_del_server(self, port):
+		port = int(port)
+
+		if port not in self.tcp_servers_pool:
+			logging.info("stopped server at %s:%d already stop" % (self.config['server'], port))
+		else:
+			logging.info("stopped server at %s:%d" % (self.config['server'], port))
+			try:
+				self.tcp_servers_pool[port].close(True)
+				del self.tcp_servers_pool[port]
+			except Exception as e:
+				logging.warn(e)
+			try:
+				self.udp_servers_pool[port].close(True)
+				del self.udp_servers_pool[port]
+			except Exception as e:
+				logging.warn(e)
+
+		if 'server_ipv6' in self.config:
+			if port not in self.tcp_ipv6_servers_pool:
+				logging.info("stopped server at [%s]:%d already stop" % (self.config['server_ipv6'], port))
+			else:
+				logging.info("stopped server at [%s]:%d" % (self.config['server_ipv6'], port))
+				try:
+					self.tcp_ipv6_servers_pool[port].close(True)
+					del self.tcp_ipv6_servers_pool[port]
+				except Exception as e:
+					logging.warn(e)
+				try:
+					self.udp_ipv6_servers_pool[port].close(True)
+					del self.udp_ipv6_servers_pool[port]
+				except Exception as e:
+					logging.warn(e)
+
+		return True
+
+	def update_mu_users(self, port, users):
+		port = int(port)
+		if port in self.tcp_servers_pool:
+			try:
+				self.tcp_servers_pool[port].update_users(users)
+			except Exception as e:
+				logging.warn(e)
+			try:
+				self.udp_servers_pool[port].update_users(users)
+			except Exception as e:
+				logging.warn(e)
+		if port in self.tcp_ipv6_servers_pool:
+			try:
+				self.tcp_ipv6_servers_pool[port].update_users(users)
+			except Exception as e:
+				logging.warn(e)
+			try:
+				self.udp_ipv6_servers_pool[port].update_users(users)
+			except Exception as e:
+				logging.warn(e)
+
+	def get_server_transfer(self, port):
+		port = int(port)
+		uid = struct.pack('<I', port)
+		ret = [0, 0]
+		if port in self.tcp_servers_pool:
+			ret[0], ret[1] = self.tcp_servers_pool[port].get_ud()
+		if port in self.udp_servers_pool:
+			u, d = self.udp_servers_pool[port].get_ud()
+			ret[0] += u
+			ret[1] += d
+		if port in self.tcp_ipv6_servers_pool:
+			u, d = self.tcp_ipv6_servers_pool[port].get_ud()
+			ret[0] += u
+			ret[1] += d
+		if port in self.udp_ipv6_servers_pool:
+			u, d = self.udp_ipv6_servers_pool[port].get_ud()
+			ret[0] += u
+			ret[1] += d
+		return ret
+
+	def get_server_mu_transfer(self, server):
+		return server.get_users_ud()
+
+	def update_mu_transfer(self, user_dict, u, d):
+		for uid in u:
+			port = struct.unpack('<I', uid)[0]
+			if port not in user_dict:
+				user_dict[port] = [0, 0]
+			user_dict[port][0] += u[uid]
+		for uid in d:
+			port = struct.unpack('<I', uid)[0]
+			if port not in user_dict:
+				user_dict[port] = [0, 0]
+			user_dict[port][1] += d[uid]
+
+	def get_servers_transfer(self):
+		servers = self.tcp_servers_pool.copy()
+		servers.update(self.tcp_ipv6_servers_pool)
+		servers.update(self.udp_servers_pool)
+		servers.update(self.udp_ipv6_servers_pool)
+		ret = {}
+		for port in servers.keys():
+			ret[port] = self.get_server_transfer(port)
+		for port in self.tcp_servers_pool:
+			u, d = self.get_server_mu_transfer(self.tcp_servers_pool[port])
+			self.update_mu_transfer(ret, u, d)
+		for port in self.tcp_ipv6_servers_pool:
+			u, d = self.get_server_mu_transfer(self.tcp_ipv6_servers_pool[port])
+			self.update_mu_transfer(ret, u, d)
+		for port in self.udp_servers_pool:
+			u, d = self.get_server_mu_transfer(self.udp_servers_pool[port])
+			self.update_mu_transfer(ret, u, d)
+		for port in self.udp_ipv6_servers_pool:
+			u, d = self.get_server_mu_transfer(self.udp_ipv6_servers_pool[port])
+			self.update_mu_transfer(ret, u, d)
+		return ret
+
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/setup.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/setup.py
new file mode 100644
index 0000000000..50a38081a3
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/setup.py
@@ -0,0 +1,39 @@
+import codecs
+from setuptools import setup
+
+
+with codecs.open('README.rst', encoding='utf-8') as f:
+    long_description = f.read()
+
+setup(
+    name="shadowsocks",
+    version="2.6.12",
+    license='http://www.apache.org/licenses/LICENSE-2.0',
+    description="A fast tunnel proxy that help you get through firewalls",
+    author='clowwindy',
+    author_email='clowwindy42@gmail.com',
+    url='https://github.com/shadowsocks/shadowsocks',
+    packages=['shadowsocks', 'shadowsocks.crypto', 'shadowsocks.obfsplugin'],
+    package_data={
+        'shadowsocks': ['README.rst', 'LICENSE']
+    },
+    install_requires=[],
+    entry_points="""
+    [console_scripts]
+    sslocal = shadowsocks.local:main
+    ssserver = shadowsocks.server:main
+    """,
+    classifiers=[
+        'License :: OSI Approved :: Apache Software License',
+        'Programming Language :: Python :: 2',
+        'Programming Language :: Python :: 2.6',
+        'Programming Language :: Python :: 2.7',
+        'Programming Language :: Python :: 3',
+        'Programming Language :: Python :: 3.3',
+        'Programming Language :: Python :: 3.4',
+        'Programming Language :: Python :: Implementation :: CPython',
+        'Programming Language :: Python :: Implementation :: PyPy',
+        'Topic :: Internet :: Proxy Servers',
+    ],
+    long_description=long_description,
+)
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/setup_cymysql.sh b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/setup_cymysql.sh
new file mode 100755
index 0000000000..41138850dc
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/setup_cymysql.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+rm -rf CyMySQL
+rm -rf cymysql
+git clone https://github.com/nakagami/CyMySQL.git
+mv CyMySQL/cymysql ./
+rm -rf CyMySQL
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/__init__.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/__init__.py
new file mode 100644
index 0000000000..dc3abd4b58
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/__init__.py
@@ -0,0 +1,18 @@
+#!/usr/bin/python
+#
+# Copyright 2012-2015 clowwindy
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/asyncdns.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/asyncdns.py
new file mode 100644
index 0000000000..868ea61407
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/asyncdns.py
@@ -0,0 +1,592 @@
+#!/usr/bin/env python
+# -*- coding: utf-8 -*-
+#
+# Copyright 2014-2015 clowwindy
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+import os
+import socket
+import struct
+import re
+import logging
+
+if __name__ == '__main__':
+    import sys
+    import inspect
+
+    file_path = os.path.dirname(os.path.realpath(inspect.getfile(inspect.currentframe())))
+    sys.path.insert(0, os.path.join(file_path, '../'))
+
+from shadowsocks import common, lru_cache, eventloop, shell
+
+CACHE_SWEEP_INTERVAL = 30
+
+VALID_HOSTNAME = re.compile(br"(?!-)[A-Z\d_-]{1,63}(?<!-)$", re.IGNORECASE)
+
+common.patch_socket()
+
+# rfc1035
+# format
+# +---------------------+
+# |        Header       |
+# +---------------------+
+# |       Question      | the question for the name server
+# +---------------------+
+# |        Answer       | RRs answering the question
+# +---------------------+
+# |      Authority      | RRs pointing toward an authority
+# +---------------------+
+# |      Additional     | RRs holding additional information
+# +---------------------+
+#
+# header
+#                                 1  1  1  1  1  1
+#   0  1  2  3  4  5  6  7  8  9  0  1  2  3  4  5
+# +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+# |                      ID                       |
+# +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+# |QR|   Opcode  |AA|TC|RD|RA|   Z    |   RCODE   |
+# +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+# |                    QDCOUNT                    |
+# +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+# |                    ANCOUNT                    |
+# +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+# |                    NSCOUNT                    |
+# +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+# |                    ARCOUNT                    |
+# +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+
+QTYPE_ANY = 255
+QTYPE_A = 1
+QTYPE_AAAA = 28
+QTYPE_CNAME = 5
+QTYPE_NS = 2
+QCLASS_IN = 1
+
+
+def detect_ipv6_supprot():
+    if 'has_ipv6' in dir(socket):
+        try:
+            s = socket.socket(socket.AF_INET6, socket.SOCK_DGRAM)
+            s.connect(('::1', 0))
+            print('IPv6 support')
+            return True
+        except:
+            pass
+    print('IPv6 not support')
+    return False
+
+
+IPV6_CONNECTION_SUPPORT = detect_ipv6_supprot()
+
+
+def build_address(address):
+    address = address.strip(b'.')
+    labels = address.split(b'.')
+    results = []
+    for label in labels:
+        l = len(label)
+        if l > 63:
+            return None
+        results.append(common.chr(l))
+        results.append(label)
+    results.append(b'\0')
+    return b''.join(results)
+
+
+def build_request(address, qtype):
+    request_id = os.urandom(2)
+    header = struct.pack('!BBHHHH', 1, 0, 1, 0, 0, 0)
+    addr = build_address(address)
+    qtype_qclass = struct.pack('!HH', qtype, QCLASS_IN)
+    return request_id + header + addr + qtype_qclass
+
+
+def parse_ip(addrtype, data, length, offset):
+    if addrtype == QTYPE_A:
+        return socket.inet_ntop(socket.AF_INET, data[offset:offset + length])
+    elif addrtype == QTYPE_AAAA:
+        return socket.inet_ntop(socket.AF_INET6, data[offset:offset + length])
+    elif addrtype in [QTYPE_CNAME, QTYPE_NS]:
+        return parse_name(data, offset)[1]
+    else:
+        return data[offset:offset + length]
+
+
+def parse_name(data, offset):
+    p = offset
+    labels = []
+    l = common.ord(data[p])
+    while l > 0:
+        if (l & (128 + 64)) == (128 + 64):
+            # pointer
+            pointer = struct.unpack('!H', data[p:p + 2])[0]
+            pointer &= 0x3FFF
+            r = parse_name(data, pointer)
+            labels.append(r[1])
+            p += 2
+            # pointer is the end
+            return p - offset, b'.'.join(labels)
+        else:
+            labels.append(data[p + 1:p + 1 + l])
+            p += 1 + l
+        l = common.ord(data[p])
+    return p - offset + 1, b'.'.join(labels)
+
+
+# rfc1035
+# record
+#                                    1  1  1  1  1  1
+#      0  1  2  3  4  5  6  7  8  9  0  1  2  3  4  5
+#    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+#    |                                               |
+#    /                                               /
+#    /                      NAME                     /
+#    |                                               |
+#    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+#    |                      TYPE                     |
+#    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+#    |                     CLASS                     |
+#    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+#    |                      TTL                      |
+#    |                                               |
+#    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+#    |                   RDLENGTH                    |
+#    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--|
+#    /                     RDATA                     /
+#    /                                               /
+#    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+def parse_record(data, offset, question=False):
+    nlen, name = parse_name(data, offset)
+    if not question:
+        record_type, record_class, record_ttl, record_rdlength = struct.unpack(
+            '!HHiH', data[offset + nlen:offset + nlen + 10]
+        )
+        ip = parse_ip(record_type, data, record_rdlength, offset + nlen + 10)
+        return nlen + 10 + record_rdlength, \
+               (name, ip, record_type, record_class, record_ttl)
+    else:
+        record_type, record_class = struct.unpack(
+            '!HH', data[offset + nlen:offset + nlen + 4]
+        )
+        return nlen + 4, (name, None, record_type, record_class, None, None)
+
+
+def parse_header(data):
+    if len(data) >= 12:
+        header = struct.unpack('!HBBHHHH', data[:12])
+        res_id = header[0]
+        res_qr = header[1] & 128
+        res_tc = header[1] & 2
+        res_ra = header[2] & 128
+        res_rcode = header[2] & 15
+        # assert res_tc == 0
+        # assert res_rcode in [0, 3]
+        res_qdcount = header[3]
+        res_ancount = header[4]
+        res_nscount = header[5]
+        res_arcount = header[6]
+        return (res_id, res_qr, res_tc, res_ra, res_rcode, res_qdcount,
+                res_ancount, res_nscount, res_arcount)
+    return None
+
+
+def parse_response(data):
+    try:
+        if len(data) >= 12:
+            header = parse_header(data)
+            if not header:
+                return None
+            res_id, res_qr, res_tc, res_ra, res_rcode, res_qdcount, \
+            res_ancount, res_nscount, res_arcount = header
+
+            qds = []
+            ans = []
+            offset = 12
+            for i in range(0, res_qdcount):
+                l, r = parse_record(data, offset, True)
+                offset += l
+                if r:
+                    qds.append(r)
+            for i in range(0, res_ancount):
+                l, r = parse_record(data, offset)
+                offset += l
+                if r:
+                    ans.append(r)
+            for i in range(0, res_nscount):
+                l, r = parse_record(data, offset)
+                offset += l
+            for i in range(0, res_arcount):
+                l, r = parse_record(data, offset)
+                offset += l
+            response = DNSResponse()
+            if qds:
+                response.hostname = qds[0][0]
+            for an in qds:
+                response.questions.append((an[1], an[2], an[3]))
+            for an in ans:
+                response.answers.append((an[1], an[2], an[3]))
+            return response
+    except Exception as e:
+        shell.print_exception(e)
+        return None
+
+
+def is_valid_hostname(hostname):
+    if len(hostname) > 255:
+        return False
+    if hostname[-1] == b'.':
+        hostname = hostname[:-1]
+    return all(VALID_HOSTNAME.match(x) for x in hostname.split(b'.'))
+
+
+class DNSResponse(object):
+    def __init__(self):
+        self.hostname = None
+        self.questions = []  # each: (addr, type, class)
+        self.answers = []  # each: (addr, type, class)
+
+    def __str__(self):
+        return '%s: %s' % (self.hostname, str(self.answers))
+
+
+STATUS_IPV4 = 0
+STATUS_IPV6 = 1
+
+
+class DNSResolver(object):
+    def __init__(self, black_hostname_list=None):
+        self._loop = None
+        self._hosts = {}
+        self._hostname_status = {}
+        self._hostname_to_cb = {}
+        self._cb_to_hostname = {}
+        self._cache = lru_cache.LRUCache(timeout=300)
+        # read black_hostname_list from config
+        if type(black_hostname_list) != list:
+            self._black_hostname_list = []
+        else:
+            self._black_hostname_list = list(map(
+                (lambda t: t if type(t) == bytes else t.encode('utf8')),
+                black_hostname_list
+            ))
+        logging.info('black_hostname_list init as : ' + str(self._black_hostname_list))
+        self._sock = None
+        self._servers = None
+        self._parse_resolv()
+        self._parse_hosts()
+        # TODO monitor hosts change and reload hosts
+        # TODO parse /etc/gai.conf and follow its rules
+
+    def _parse_resolv(self):
+        self._servers = []
+        try:
+            with open('dns.conf', 'rb') as f:
+                content = f.readlines()
+                for line in content:
+                    line = line.strip()
+                    if line:
+                        parts = line.split(b' ', 1)
+                        if len(parts) >= 2:
+                            server = parts[0]
+                            port = int(parts[1])
+                        else:
+                            server = parts[0]
+                            port = 53
+                        if common.is_ip(server) == socket.AF_INET:
+                            if type(server) != str:
+                                server = server.decode('utf8')
+                            self._servers.append((server, port))
+        except IOError:
+            pass
+        if not self._servers:
+            try:
+                with open('/etc/resolv.conf', 'rb') as f:
+                    content = f.readlines()
+                    for line in content:
+                        line = line.strip()
+                        if line:
+                            if line.startswith(b'nameserver'):
+                                parts = line.split()
+                                if len(parts) >= 2:
+                                    server = parts[1]
+                                    if common.is_ip(server) == socket.AF_INET:
+                                        if type(server) != str:
+                                            server = server.decode('utf8')
+                                        self._servers.append((server, 53))
+            except IOError:
+                pass
+        if not self._servers:
+            self._servers = [('8.8.4.4', 53), ('8.8.8.8', 53)]
+        logging.info('dns server: %s' % (self._servers,))
+
+    def _parse_hosts(self):
+        etc_path = '/etc/hosts'
+        if 'WINDIR' in os.environ:
+            etc_path = os.environ['WINDIR'] + '/system32/drivers/etc/hosts'
+        try:
+            with open(etc_path, 'rb') as f:
+                for line in f.readlines():
+                    line = line.strip()
+                    if b"#" in line:
+                        line = line[:line.find(b'#')]
+                    parts = line.split()
+                    if len(parts) >= 2:
+                        ip = parts[0]
+                        if common.is_ip(ip):
+                            for i in range(1, len(parts)):
+                                hostname = parts[i]
+                                if hostname:
+                                    self._hosts[hostname] = ip
+        except IOError:
+            self._hosts['localhost'] = '127.0.0.1'
+
+    def add_to_loop(self, loop):
+        if self._loop:
+            raise Exception('already add to loop')
+        self._loop = loop
+        # TODO when dns server is IPv6
+        self._sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM,
+                                   socket.SOL_UDP)
+        self._sock.setblocking(False)
+        loop.add(self._sock, eventloop.POLL_IN, self)
+        loop.add_periodic(self.handle_periodic)
+
+    def _call_callback(self, hostname, ip, error=None):
+        callbacks = self._hostname_to_cb.get(hostname, [])
+        for callback in callbacks:
+            if callback in self._cb_to_hostname:
+                del self._cb_to_hostname[callback]
+            if ip or error:
+                callback((hostname, ip), error)
+            else:
+                callback((hostname, None),
+                         Exception('unable to parse hostname %s' % hostname))
+        if hostname in self._hostname_to_cb:
+            del self._hostname_to_cb[hostname]
+        if hostname in self._hostname_status:
+            del self._hostname_status[hostname]
+
+    def _handle_data(self, data):
+        response = parse_response(data)
+        if response and response.hostname:
+            hostname = response.hostname
+            ip = None
+            for answer in response.answers:
+                if answer[1] in (QTYPE_A, QTYPE_AAAA) and \
+                                answer[2] == QCLASS_IN:
+                    ip = answer[0]
+                    break
+            if IPV6_CONNECTION_SUPPORT:
+                if not ip and self._hostname_status.get(hostname, STATUS_IPV4) \
+                        == STATUS_IPV6:
+                    self._hostname_status[hostname] = STATUS_IPV4
+                    self._send_req(hostname, QTYPE_A)
+                else:
+                    if ip:
+                        self._cache[hostname] = ip
+                        self._call_callback(hostname, ip)
+                    elif self._hostname_status.get(hostname, None) == STATUS_IPV4:
+                        for question in response.questions:
+                            if question[1] == QTYPE_A:
+                                self._call_callback(hostname, None)
+                                break
+            else:
+                if not ip and self._hostname_status.get(hostname, STATUS_IPV6) \
+                        == STATUS_IPV4:
+                    self._hostname_status[hostname] = STATUS_IPV6
+                    self._send_req(hostname, QTYPE_AAAA)
+                else:
+                    if ip:
+                        self._cache[hostname] = ip
+                        self._call_callback(hostname, ip)
+                    elif self._hostname_status.get(hostname, None) == STATUS_IPV6:
+                        for question in response.questions:
+                            if question[1] == QTYPE_AAAA:
+                                self._call_callback(hostname, None)
+                                break
+
+    def handle_event(self, sock, fd, event):
+        if sock != self._sock:
+            return
+        if event & eventloop.POLL_ERR:
+            logging.error('dns socket err')
+            self._loop.remove(self._sock)
+            self._sock.close()
+            # TODO when dns server is IPv6
+            self._sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM,
+                                       socket.SOL_UDP)
+            self._sock.setblocking(False)
+            self._loop.add(self._sock, eventloop.POLL_IN, self)
+        else:
+            data, addr = sock.recvfrom(1024)
+            if addr not in self._servers:
+                logging.warn('received a packet other than our dns')
+                return
+            self._handle_data(data)
+
+    def handle_periodic(self):
+        self._cache.sweep()
+
+    def remove_callback(self, callback):
+        hostname = self._cb_to_hostname.get(callback)
+        if hostname:
+            del self._cb_to_hostname[callback]
+            arr = self._hostname_to_cb.get(hostname, None)
+            if arr:
+                arr.remove(callback)
+                if not arr:
+                    del self._hostname_to_cb[hostname]
+                    if hostname in self._hostname_status:
+                        del self._hostname_status[hostname]
+
+    def _send_req(self, hostname, qtype):
+        req = build_request(hostname, qtype)
+        for server in self._servers:
+            logging.debug('resolving %s with type %d using server %s',
+                          hostname, qtype, server)
+            self._sock.sendto(req, server)
+
+    def resolve(self, hostname, callback):
+        if type(hostname) != bytes:
+            hostname = hostname.encode('utf8')
+        if not hostname:
+            callback(None, Exception('empty hostname'))
+        elif common.is_ip(hostname):
+            callback((hostname, hostname), None)
+        elif hostname in self._hosts:
+            logging.debug('hit hosts: %s', hostname)
+            ip = self._hosts[hostname]
+            callback((hostname, ip), None)
+        elif hostname in self._cache:
+            logging.debug('hit cache: %s ==>> %s', hostname, self._cache[hostname])
+            ip = self._cache[hostname]
+            callback((hostname, ip), None)
+        elif any(hostname.endswith(t) for t in self._black_hostname_list):
+            callback(None, Exception('hostname <%s> is block by the black hostname list' % hostname))
+            return
+        else:
+            if not is_valid_hostname(hostname):
+                callback(None, Exception('invalid hostname: %s' % hostname))
+                return
+            if False:
+                addrs = socket.getaddrinfo(hostname, 0, 0,
+                                           socket.SOCK_DGRAM, socket.SOL_UDP)
+                if addrs:
+                    af, socktype, proto, canonname, sa = addrs[0]
+                    logging.debug('DNS resolve %s %s' % (hostname, sa[0]))
+                    self._cache[hostname] = sa[0]
+                    callback((hostname, sa[0]), None)
+                    return
+            arr = self._hostname_to_cb.get(hostname, None)
+            if not arr:
+                if IPV6_CONNECTION_SUPPORT:
+                    self._hostname_status[hostname] = STATUS_IPV6
+                    self._send_req(hostname, QTYPE_AAAA)
+                else:
+                    self._hostname_status[hostname] = STATUS_IPV4
+                    self._send_req(hostname, QTYPE_A)
+                self._hostname_to_cb[hostname] = [callback]
+                self._cb_to_hostname[callback] = hostname
+            else:
+                arr.append(callback)
+                # TODO send again only if waited too long
+                if IPV6_CONNECTION_SUPPORT:
+                    self._send_req(hostname, QTYPE_AAAA)
+                else:
+                    self._send_req(hostname, QTYPE_A)
+
+    def close(self):
+        if self._sock:
+            if self._loop:
+                self._loop.remove_periodic(self.handle_periodic)
+                self._loop.remove(self._sock)
+            self._sock.close()
+            self._sock = None
+
+
+def test():
+    black_hostname_list = [
+        'baidu.com',
+        'yahoo.com',
+    ]
+    dns_resolver = DNSResolver(black_hostname_list=black_hostname_list)
+    loop = eventloop.EventLoop()
+    dns_resolver.add_to_loop(loop)
+
+    global counter
+    counter = 0
+
+    def make_callback():
+        global counter
+
+        def callback(result, error):
+            global counter
+            # TODO: what can we assert?
+            print(result, error)
+            counter += 1
+            if counter == 12:
+                dns_resolver.close()
+                loop.stop()
+
+        a_callback = callback
+        return a_callback
+
+    assert (make_callback() != make_callback())
+
+    dns_resolver.resolve(b'google.com', make_callback())
+    dns_resolver.resolve('google.com', make_callback())
+    dns_resolver.resolve('baidu.com', make_callback())
+    dns_resolver.resolve('map.baidu.com', make_callback())
+    dns_resolver.resolve('yahoo.com', make_callback())
+    dns_resolver.resolve('example.com', make_callback())
+    dns_resolver.resolve('ipv6.google.com', make_callback())
+    dns_resolver.resolve('www.facebook.com', make_callback())
+    dns_resolver.resolve('ns2.google.com', make_callback())
+    dns_resolver.resolve('invalid.@!#$%^&$@.hostname', make_callback())
+    dns_resolver.resolve('toooooooooooooooooooooooooooooooooooooooooooooooooo'
+                         'ooooooooooooooooooooooooooooooooooooooooooooooooooo'
+                         'long.hostname', make_callback())
+    dns_resolver.resolve('toooooooooooooooooooooooooooooooooooooooooooooooooo'
+                         'ooooooooooooooooooooooooooooooooooooooooooooooooooo'
+                         'ooooooooooooooooooooooooooooooooooooooooooooooooooo'
+                         'ooooooooooooooooooooooooooooooooooooooooooooooooooo'
+                         'ooooooooooooooooooooooooooooooooooooooooooooooooooo'
+                         'ooooooooooooooooooooooooooooooooooooooooooooooooooo'
+                         'long.hostname', make_callback())
+    loop.run()
+    # test black_hostname_list
+    dns_resolver = DNSResolver(black_hostname_list=[])
+    assert type(dns_resolver._black_hostname_list) == list
+    assert len(dns_resolver._black_hostname_list) == 0
+    dns_resolver.close()
+    dns_resolver = DNSResolver(black_hostname_list=123)
+    assert type(dns_resolver._black_hostname_list) == list
+    assert len(dns_resolver._black_hostname_list) == 0
+    dns_resolver.close()
+    dns_resolver = DNSResolver(black_hostname_list=None)
+    assert type(dns_resolver._black_hostname_list) == list
+    assert len(dns_resolver._black_hostname_list) == 0
+    dns_resolver.close()
+    dns_resolver = DNSResolver()
+    assert type(dns_resolver._black_hostname_list) == list
+    assert dns_resolver._black_hostname_list.__len__() == 0
+    dns_resolver.close()
+
+
+if __name__ == '__main__':
+    test()
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/common.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/common.py
new file mode 100644
index 0000000000..c4484c0467
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/common.py
@@ -0,0 +1,418 @@
+#!/usr/bin/python
+# -*- coding: utf-8 -*-
+#
+# Copyright 2013-2015 clowwindy
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+import socket
+import struct
+import logging
+import binascii
+import re
+
+from shadowsocks import lru_cache
+
+def compat_ord(s):
+    if type(s) == int:
+        return s
+    return _ord(s)
+
+
+def compat_chr(d):
+    if bytes == str:
+        return _chr(d)
+    return bytes([d])
+
+
+_ord = ord
+_chr = chr
+ord = compat_ord
+chr = compat_chr
+
+connect_log = logging.debug
+
+def to_bytes(s):
+    if bytes != str:
+        if type(s) == str:
+            return s.encode('utf-8')
+    return s
+
+
+def to_str(s):
+    if bytes != str:
+        if type(s) == bytes:
+            return s.decode('utf-8')
+    return s
+
+def int32(x):
+    if x > 0xFFFFFFFF or x < 0:
+        x &= 0xFFFFFFFF
+    if x > 0x7FFFFFFF:
+        x = int(0x100000000 - x)
+        if x < 0x80000000:
+            return -x
+        else:
+            return -2147483648
+    return x
+
+def inet_ntop(family, ipstr):
+    if family == socket.AF_INET:
+        return to_bytes(socket.inet_ntoa(ipstr))
+    elif family == socket.AF_INET6:
+        import re
+        v6addr = ':'.join(('%02X%02X' % (ord(i), ord(j))).lstrip('0')
+                          for i, j in zip(ipstr[::2], ipstr[1::2]))
+        v6addr = re.sub('::+', '::', v6addr, count=1)
+        return to_bytes(v6addr)
+
+
+def inet_pton(family, addr):
+    addr = to_str(addr)
+    if family == socket.AF_INET:
+        return socket.inet_aton(addr)
+    elif family == socket.AF_INET6:
+        if '.' in addr:  # a v4 addr
+            v4addr = addr[addr.rindex(':') + 1:]
+            v4addr = socket.inet_aton(v4addr)
+            v4addr = ['%02X' % ord(x) for x in v4addr]
+            v4addr.insert(2, ':')
+            newaddr = addr[:addr.rindex(':') + 1] + ''.join(v4addr)
+            return inet_pton(family, newaddr)
+        dbyts = [0] * 8  # 8 groups
+        grps = addr.split(':')
+        for i, v in enumerate(grps):
+            if v:
+                dbyts[i] = int(v, 16)
+            else:
+                for j, w in enumerate(grps[::-1]):
+                    if w:
+                        dbyts[7 - j] = int(w, 16)
+                    else:
+                        break
+                break
+        return b''.join((chr(i // 256) + chr(i % 256)) for i in dbyts)
+    else:
+        raise RuntimeError("What family?")
+
+
+def is_ip(address):
+    for family in (socket.AF_INET, socket.AF_INET6):
+        try:
+            if type(address) != str:
+                address = address.decode('utf8')
+            inet_pton(family, address)
+            return family
+        except (TypeError, ValueError, OSError, IOError):
+            pass
+    return False
+
+
+def match_regex(regex, text):
+    regex = re.compile(regex)
+    for item in regex.findall(text):
+        return True
+    return False
+
+
+def patch_socket():
+    if not hasattr(socket, 'inet_pton'):
+        socket.inet_pton = inet_pton
+
+    if not hasattr(socket, 'inet_ntop'):
+        socket.inet_ntop = inet_ntop
+
+
+patch_socket()
+
+
+ADDRTYPE_IPV4 = 1
+ADDRTYPE_IPV6 = 4
+ADDRTYPE_HOST = 3
+
+
+def pack_addr(address):
+    address_str = to_str(address)
+    for family in (socket.AF_INET, socket.AF_INET6):
+        try:
+            r = socket.inet_pton(family, address_str)
+            if family == socket.AF_INET6:
+                return b'\x04' + r
+            else:
+                return b'\x01' + r
+        except (TypeError, ValueError, OSError, IOError):
+            pass
+    if len(address) > 255:
+        address = address[:255]  # TODO
+    return b'\x03' + chr(len(address)) + address
+
+def pre_parse_header(data):
+    if not data:
+        return None
+    datatype = ord(data[0])
+    if datatype == 0x80:
+        if len(data) <= 2:
+            return None
+        rand_data_size = ord(data[1])
+        if rand_data_size + 2 >= len(data):
+            logging.warn('header too short, maybe wrong password or '
+                         'encryption method')
+            return None
+        data = data[rand_data_size + 2:]
+    elif datatype == 0x81:
+        data = data[1:]
+    elif datatype == 0x82:
+        if len(data) <= 3:
+            return None
+        rand_data_size = struct.unpack('>H', data[1:3])[0]
+        if rand_data_size + 3 >= len(data):
+            logging.warn('header too short, maybe wrong password or '
+                         'encryption method')
+            return None
+        data = data[rand_data_size + 3:]
+    elif datatype == 0x88 or (~datatype & 0xff) == 0x88:
+        if len(data) <= 7 + 7:
+            return None
+        data_size = struct.unpack('>H', data[1:3])[0]
+        ogn_data = data
+        data = data[:data_size]
+        crc = binascii.crc32(data) & 0xffffffff
+        if crc != 0xffffffff:
+            logging.warn('uncorrect CRC32, maybe wrong password or '
+                         'encryption method')
+            return None
+        start_pos = 3 + ord(data[3])
+        data = data[start_pos:-4]
+        if data_size < len(ogn_data):
+            data += ogn_data[data_size:]
+    return data
+
+def parse_header(data):
+    addrtype = ord(data[0])
+    dest_addr = None
+    dest_port = None
+    header_length = 0
+    connecttype = (addrtype & 0x8) and 1 or 0
+    addrtype &= ~0x8
+    if addrtype == ADDRTYPE_IPV4:
+        if len(data) >= 7:
+            dest_addr = socket.inet_ntoa(data[1:5])
+            dest_port = struct.unpack('>H', data[5:7])[0]
+            header_length = 7
+        else:
+            logging.warn('header is too short')
+    elif addrtype == ADDRTYPE_HOST:
+        if len(data) > 2:
+            addrlen = ord(data[1])
+            if len(data) >= 4 + addrlen:
+                dest_addr = data[2:2 + addrlen]
+                dest_port = struct.unpack('>H', data[2 + addrlen:4 +
+                                                     addrlen])[0]
+                header_length = 4 + addrlen
+            else:
+                logging.warn('header is too short')
+        else:
+            logging.warn('header is too short')
+    elif addrtype == ADDRTYPE_IPV6:
+        if len(data) >= 19:
+            dest_addr = socket.inet_ntop(socket.AF_INET6, data[1:17])
+            dest_port = struct.unpack('>H', data[17:19])[0]
+            header_length = 19
+        else:
+            logging.warn('header is too short')
+    else:
+        logging.warn('unsupported addrtype %d, maybe wrong password or '
+                     'encryption method' % addrtype)
+    if dest_addr is None:
+        return None
+    return connecttype, addrtype, to_bytes(dest_addr), dest_port, header_length
+
+
+class IPNetwork(object):
+    ADDRLENGTH = {socket.AF_INET: 32, socket.AF_INET6: 128, False: 0}
+
+    def __init__(self, addrs):
+        self.addrs_str = addrs
+        self._network_list_v4 = []
+        self._network_list_v6 = []
+        if type(addrs) == str:
+            addrs = addrs.split(',')
+        list(map(self.add_network, addrs))
+
+    def add_network(self, addr):
+        if addr is "":
+            return
+        block = addr.split('/')
+        addr_family = is_ip(block[0])
+        addr_len = IPNetwork.ADDRLENGTH[addr_family]
+        if addr_family is socket.AF_INET:
+            ip, = struct.unpack("!I", socket.inet_aton(block[0]))
+        elif addr_family is socket.AF_INET6:
+            hi, lo = struct.unpack("!QQ", inet_pton(addr_family, block[0]))
+            ip = (hi << 64) | lo
+        else:
+            raise Exception("Not a valid CIDR notation: %s" % addr)
+        if len(block) is 1:
+            prefix_size = 0
+            while (ip & 1) == 0 and ip is not 0:
+                ip >>= 1
+                prefix_size += 1
+            logging.warn("You did't specify CIDR routing prefix size for %s, "
+                         "implicit treated as %s/%d" % (addr, addr, addr_len))
+        elif block[1].isdigit() and int(block[1]) <= addr_len:
+            prefix_size = addr_len - int(block[1])
+            ip >>= prefix_size
+        else:
+            raise Exception("Not a valid CIDR notation: %s" % addr)
+        if addr_family is socket.AF_INET:
+            self._network_list_v4.append((ip, prefix_size))
+        else:
+            self._network_list_v6.append((ip, prefix_size))
+
+    def __contains__(self, addr):
+        addr_family = is_ip(addr)
+        if addr_family is socket.AF_INET:
+            ip, = struct.unpack("!I", socket.inet_aton(addr))
+            return any(map(lambda n_ps: n_ps[0] == ip >> n_ps[1],
+                           self._network_list_v4))
+        elif addr_family is socket.AF_INET6:
+            hi, lo = struct.unpack("!QQ", inet_pton(addr_family, addr))
+            ip = (hi << 64) | lo
+            return any(map(lambda n_ps: n_ps[0] == ip >> n_ps[1],
+                           self._network_list_v6))
+        else:
+            return False
+
+    def __cmp__(self, other):
+        return cmp(self.addrs_str, other.addrs_str)
+
+    def __eq__(self, other):
+        return self.addrs_str == other.addrs_str
+
+    def __ne__(self, other):
+        return self.addrs_str != other.addrs_str
+
+class PortRange(object):
+    def __init__(self, range_str):
+        self.range_str = to_str(range_str)
+        self.range = set()
+        range_str = to_str(range_str).split(',')
+        for item in range_str:
+            try:
+                int_range = item.split('-')
+                if len(int_range) == 1:
+                    if item:
+                        self.range.add(int(item))
+                elif len(int_range) == 2:
+                    int_range[0] = int(int_range[0])
+                    int_range[1] = int(int_range[1])
+                    if int_range[0] < 0:
+                        int_range[0] = 0
+                    if int_range[1] > 65535:
+                        int_range[1] = 65535
+                    i = int_range[0]
+                    while i <= int_range[1]:
+                        self.range.add(i)
+                        i += 1
+            except Exception as e:
+                logging.error(e)
+
+    def __contains__(self, val):
+        return val in self.range
+
+    def __cmp__(self, other):
+        return cmp(self.range_str, other.range_str)
+
+    def __eq__(self, other):
+        return self.range_str == other.range_str
+
+    def __ne__(self, other):
+        return self.range_str != other.range_str
+
+class UDPAsyncDNSHandler(object):
+    dns_cache = lru_cache.LRUCache(timeout=1800)
+    def __init__(self, params):
+        self.params = params
+        self.remote_addr = None
+        self.call_back = None
+
+    def resolve(self, dns_resolver, remote_addr, call_back):
+        if remote_addr in UDPAsyncDNSHandler.dns_cache:
+            if call_back:
+                call_back("", remote_addr, UDPAsyncDNSHandler.dns_cache[remote_addr], self.params)
+        else:
+            self.call_back = call_back
+            self.remote_addr = remote_addr
+            dns_resolver.resolve(remote_addr[0], self._handle_dns_resolved)
+            UDPAsyncDNSHandler.dns_cache.sweep()
+
+    def _handle_dns_resolved(self, result, error):
+        if error:
+            logging.error("%s when resolve DNS" % (error,)) #drop
+            return self.call_back(error, self.remote_addr, None, self.params)
+        if result:
+            ip = result[1]
+            if ip:
+                return self.call_back("", self.remote_addr, ip, self.params)
+        logging.warning("can't resolve %s" % (self.remote_addr,))
+        return self.call_back("fail to resolve", self.remote_addr, None, self.params)
+
+def test_inet_conv():
+    ipv4 = b'8.8.4.4'
+    b = inet_pton(socket.AF_INET, ipv4)
+    assert inet_ntop(socket.AF_INET, b) == ipv4
+    ipv6 = b'2404:6800:4005:805::1011'
+    b = inet_pton(socket.AF_INET6, ipv6)
+    assert inet_ntop(socket.AF_INET6, b) == ipv6
+
+
+def test_parse_header():
+    assert parse_header(b'\x03\x0ewww.google.com\x00\x50') == \
+        (0, b'www.google.com', 80, 18)
+    assert parse_header(b'\x01\x08\x08\x08\x08\x00\x35') == \
+        (0, b'8.8.8.8', 53, 7)
+    assert parse_header((b'\x04$\x04h\x00@\x05\x08\x05\x00\x00\x00\x00\x00'
+                         b'\x00\x10\x11\x00\x50')) == \
+        (0, b'2404:6800:4005:805::1011', 80, 19)
+
+
+def test_pack_header():
+    assert pack_addr(b'8.8.8.8') == b'\x01\x08\x08\x08\x08'
+    assert pack_addr(b'2404:6800:4005:805::1011') == \
+        b'\x04$\x04h\x00@\x05\x08\x05\x00\x00\x00\x00\x00\x00\x10\x11'
+    assert pack_addr(b'www.google.com') == b'\x03\x0ewww.google.com'
+
+
+def test_ip_network():
+    ip_network = IPNetwork('127.0.0.0/24,::ff:1/112,::1,192.168.1.1,192.0.2.0')
+    assert '127.0.0.1' in ip_network
+    assert '127.0.1.1' not in ip_network
+    assert ':ff:ffff' in ip_network
+    assert '::ffff:1' not in ip_network
+    assert '::1' in ip_network
+    assert '::2' not in ip_network
+    assert '192.168.1.1' in ip_network
+    assert '192.168.1.2' not in ip_network
+    assert '192.0.2.1' in ip_network
+    assert '192.0.3.1' in ip_network  # 192.0.2.0 is treated as 192.0.2.0/23
+    assert 'www.google.com' not in ip_network
+
+
+if __name__ == '__main__':
+    test_inet_conv()
+    test_parse_header()
+    test_pack_header()
+    test_ip_network()
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/crypto/__init__.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/crypto/__init__.py
new file mode 100644
index 0000000000..401c7b726e
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/crypto/__init__.py
@@ -0,0 +1,18 @@
+#!/usr/bin/env python
+#
+# Copyright 2015 clowwindy
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/crypto/ctypes_libsodium.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/crypto/ctypes_libsodium.py
new file mode 100644
index 0000000000..efecfd415d
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/crypto/ctypes_libsodium.py
@@ -0,0 +1,135 @@
+#!/usr/bin/env python
+
+# Copyright (c) 2014 clowwindy
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy
+# of this software and associated documentation files (the "Software"), to deal
+# in the Software without restriction, including without limitation the rights
+# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+# copies of the Software, and to permit persons to whom the Software is
+# furnished to do so, subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in
+# all copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+# SOFTWARE.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+import logging
+from ctypes import CDLL, c_char_p, c_int, c_ulonglong, byref, \
+    create_string_buffer, c_void_p
+
+__all__ = ['ciphers']
+
+libsodium = None
+loaded = False
+
+buf_size = 2048
+
+# for salsa20 and chacha20
+BLOCK_SIZE = 64
+
+
+def load_libsodium():
+    global loaded, libsodium, buf
+
+    from ctypes.util import find_library
+    for p in ('sodium',):
+        libsodium_path = find_library(p)
+        if libsodium_path:
+            break
+    else:
+        raise Exception('libsodium not found')
+    logging.info('loading libsodium from %s', libsodium_path)
+    libsodium = CDLL(libsodium_path)
+    libsodium.sodium_init.restype = c_int
+    libsodium.crypto_stream_salsa20_xor_ic.restype = c_int
+    libsodium.crypto_stream_salsa20_xor_ic.argtypes = (c_void_p, c_char_p,
+                                                       c_ulonglong,
+                                                       c_char_p, c_ulonglong,
+                                                       c_char_p)
+    libsodium.crypto_stream_chacha20_xor_ic.restype = c_int
+    libsodium.crypto_stream_chacha20_xor_ic.argtypes = (c_void_p, c_char_p,
+                                                        c_ulonglong,
+                                                        c_char_p, c_ulonglong,
+                                                        c_char_p)
+
+    libsodium.sodium_init()
+
+    buf = create_string_buffer(buf_size)
+    loaded = True
+
+
+class Salsa20Crypto(object):
+    def __init__(self, cipher_name, key, iv, op):
+        if not loaded:
+            load_libsodium()
+        self.key = key
+        self.iv = iv
+        self.key_ptr = c_char_p(key)
+        self.iv_ptr = c_char_p(iv)
+        if cipher_name == b'salsa20':
+            self.cipher = libsodium.crypto_stream_salsa20_xor_ic
+        elif cipher_name == b'chacha20':
+            self.cipher = libsodium.crypto_stream_chacha20_xor_ic
+        else:
+            raise Exception('Unknown cipher')
+        # byte counter, not block counter
+        self.counter = 0
+
+    def update(self, data):
+        global buf_size, buf
+        l = len(data)
+
+        # we can only prepend some padding to make the encryption align to
+        # blocks
+        padding = self.counter % BLOCK_SIZE
+        if buf_size < padding + l:
+            buf_size = (padding + l) * 2
+            buf = create_string_buffer(buf_size)
+
+        if padding:
+            data = (b'\0' * padding) + data
+        self.cipher(byref(buf), c_char_p(data), padding + l,
+                    self.iv_ptr, int(self.counter / BLOCK_SIZE), self.key_ptr)
+        self.counter += l
+        # buf is copied to a str object when we access buf.raw
+        # strip off the padding
+        return buf.raw[padding:padding + l]
+
+
+ciphers = {
+    b'salsa20': (32, 8, Salsa20Crypto),
+    b'chacha20': (32, 8, Salsa20Crypto),
+}
+
+
+def test_salsa20():
+    from shadowsocks.crypto import util
+
+    cipher = Salsa20Crypto(b'salsa20', b'k' * 32, b'i' * 16, 1)
+    decipher = Salsa20Crypto(b'salsa20', b'k' * 32, b'i' * 16, 0)
+
+    util.run_cipher(cipher, decipher)
+
+
+def test_chacha20():
+    from shadowsocks.crypto import util
+
+    cipher = Salsa20Crypto(b'chacha20', b'k' * 32, b'i' * 16, 1)
+    decipher = Salsa20Crypto(b'chacha20', b'k' * 32, b'i' * 16, 0)
+
+    util.run_cipher(cipher, decipher)
+
+
+if __name__ == '__main__':
+    test_chacha20()
+    test_salsa20()
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/crypto/ctypes_openssl.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/crypto/ctypes_openssl.py
new file mode 100644
index 0000000000..0ef8ce0f8c
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/crypto/ctypes_openssl.py
@@ -0,0 +1,188 @@
+#!/usr/bin/env python
+
+# Copyright (c) 2014 clowwindy
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy
+# of this software and associated documentation files (the "Software"), to deal
+# in the Software without restriction, including without limitation the rights
+# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+# copies of the Software, and to permit persons to whom the Software is
+# furnished to do so, subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in
+# all copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+# SOFTWARE.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+import logging
+from ctypes import CDLL, c_char_p, c_int, c_long, byref,\
+    create_string_buffer, c_void_p
+
+__all__ = ['ciphers']
+
+libcrypto = None
+loaded = False
+
+buf_size = 2048
+
+
+def load_openssl():
+    global loaded, libcrypto, buf
+
+    from ctypes.util import find_library
+    for p in ('crypto', 'eay32', 'libeay32'):
+        libcrypto_path = find_library(p)
+        if libcrypto_path:
+            break
+    else:
+        raise Exception('libcrypto(OpenSSL) not found')
+    logging.info('loading libcrypto from %s', libcrypto_path)
+    libcrypto = CDLL(libcrypto_path)
+    libcrypto.EVP_get_cipherbyname.restype = c_void_p
+    libcrypto.EVP_CIPHER_CTX_new.restype = c_void_p
+
+    libcrypto.EVP_CipherInit_ex.argtypes = (c_void_p, c_void_p, c_char_p,
+                                            c_char_p, c_char_p, c_int)
+
+    libcrypto.EVP_CipherUpdate.argtypes = (c_void_p, c_void_p, c_void_p,
+                                           c_char_p, c_int)
+
+    libcrypto.EVP_CIPHER_CTX_cleanup.argtypes = (c_void_p,)
+    libcrypto.EVP_CIPHER_CTX_free.argtypes = (c_void_p,)
+    if hasattr(libcrypto, 'OpenSSL_add_all_ciphers'):
+        libcrypto.OpenSSL_add_all_ciphers()
+
+    buf = create_string_buffer(buf_size)
+    loaded = True
+
+
+def load_cipher(cipher_name):
+    func_name = b'EVP_' + cipher_name.replace(b'-', b'_')
+    if bytes != str:
+        func_name = str(func_name, 'utf-8')
+    cipher = getattr(libcrypto, func_name, None)
+    if cipher:
+        cipher.restype = c_void_p
+        return cipher()
+    return None
+
+
+class CtypesCrypto(object):
+    def __init__(self, cipher_name, key, iv, op):
+        if not loaded:
+            load_openssl()
+        self._ctx = None
+        cipher = libcrypto.EVP_get_cipherbyname(cipher_name)
+        if not cipher:
+            cipher = load_cipher(cipher_name)
+        if not cipher:
+            raise Exception('cipher %s not found in libcrypto' % cipher_name)
+        key_ptr = c_char_p(key)
+        iv_ptr = c_char_p(iv)
+        self._ctx = libcrypto.EVP_CIPHER_CTX_new()
+        if not self._ctx:
+            raise Exception('can not create cipher context')
+        r = libcrypto.EVP_CipherInit_ex(self._ctx, cipher, None,
+                                        key_ptr, iv_ptr, c_int(op))
+        if not r:
+            self.clean()
+            raise Exception('can not initialize cipher context')
+
+    def update(self, data):
+        global buf_size, buf
+        cipher_out_len = c_long(0)
+        l = len(data)
+        if buf_size < l:
+            buf_size = l * 2
+            buf = create_string_buffer(buf_size)
+        libcrypto.EVP_CipherUpdate(self._ctx, byref(buf),
+                                   byref(cipher_out_len), c_char_p(data), l)
+        # buf is copied to a str object when we access buf.raw
+        return buf.raw[:cipher_out_len.value]
+
+    def __del__(self):
+        self.clean()
+
+    def clean(self):
+        if self._ctx:
+            libcrypto.EVP_CIPHER_CTX_cleanup(self._ctx)
+            libcrypto.EVP_CIPHER_CTX_free(self._ctx)
+
+
+ciphers = {
+    b'aes-128-cfb': (16, 16, CtypesCrypto),
+    b'aes-192-cfb': (24, 16, CtypesCrypto),
+    b'aes-256-cfb': (32, 16, CtypesCrypto),
+    b'aes-128-ofb': (16, 16, CtypesCrypto),
+    b'aes-192-ofb': (24, 16, CtypesCrypto),
+    b'aes-256-ofb': (32, 16, CtypesCrypto),
+    b'aes-128-ctr': (16, 16, CtypesCrypto),
+    b'aes-192-ctr': (24, 16, CtypesCrypto),
+    b'aes-256-ctr': (32, 16, CtypesCrypto),
+    b'aes-128-cfb8': (16, 16, CtypesCrypto),
+    b'aes-192-cfb8': (24, 16, CtypesCrypto),
+    b'aes-256-cfb8': (32, 16, CtypesCrypto),
+    b'aes-128-cfb1': (16, 16, CtypesCrypto),
+    b'aes-192-cfb1': (24, 16, CtypesCrypto),
+    b'aes-256-cfb1': (32, 16, CtypesCrypto),
+    b'bf-cfb': (16, 8, CtypesCrypto),
+    b'camellia-128-cfb': (16, 16, CtypesCrypto),
+    b'camellia-192-cfb': (24, 16, CtypesCrypto),
+    b'camellia-256-cfb': (32, 16, CtypesCrypto),
+    b'cast5-cfb': (16, 8, CtypesCrypto),
+    b'des-cfb': (8, 8, CtypesCrypto),
+    b'idea-cfb': (16, 8, CtypesCrypto),
+    b'rc2-cfb': (16, 8, CtypesCrypto),
+    b'rc4': (16, 0, CtypesCrypto),
+    b'seed-cfb': (16, 16, CtypesCrypto),
+}
+
+
+def run_method(method):
+    from shadowsocks.crypto import util
+
+    cipher = CtypesCrypto(method, b'k' * 32, b'i' * 16, 1)
+    decipher = CtypesCrypto(method, b'k' * 32, b'i' * 16, 0)
+
+    util.run_cipher(cipher, decipher)
+
+
+def test_aes_128_cfb():
+    run_method(b'aes-128-cfb')
+
+
+def test_aes_256_cfb():
+    run_method(b'aes-256-cfb')
+
+
+def test_aes_128_cfb8():
+    run_method(b'aes-128-cfb8')
+
+
+def test_aes_256_ofb():
+    run_method(b'aes-256-ofb')
+
+
+def test_aes_256_ctr():
+    run_method(b'aes-256-ctr')
+
+
+def test_bf_cfb():
+    run_method(b'bf-cfb')
+
+
+def test_rc4():
+    run_method(b'rc4')
+
+
+if __name__ == '__main__':
+    test_aes_128_cfb()
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/crypto/openssl.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/crypto/openssl.py
new file mode 100644
index 0000000000..0a8ca53fb8
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/crypto/openssl.py
@@ -0,0 +1,199 @@
+#!/usr/bin/env python
+#
+# Copyright 2015 clowwindy
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+from ctypes import c_char_p, c_int, c_long, byref,\
+    create_string_buffer, c_void_p
+
+from shadowsocks import common
+from shadowsocks.crypto import util
+
+__all__ = ['ciphers']
+
+libcrypto = None
+loaded = False
+
+buf_size = 2048
+
+
+def load_openssl():
+    global loaded, libcrypto, buf
+
+    libcrypto = util.find_library(('crypto', 'eay32'),
+                                  'EVP_get_cipherbyname',
+                                  'libcrypto')
+    if libcrypto is None:
+        raise Exception('libcrypto(OpenSSL) not found')
+
+    libcrypto.EVP_get_cipherbyname.restype = c_void_p
+    libcrypto.EVP_CIPHER_CTX_new.restype = c_void_p
+
+    libcrypto.EVP_CipherInit_ex.argtypes = (c_void_p, c_void_p, c_char_p,
+                                            c_char_p, c_char_p, c_int)
+
+    libcrypto.EVP_CipherUpdate.argtypes = (c_void_p, c_void_p, c_void_p,
+                                           c_char_p, c_int)
+
+    if hasattr(libcrypto, "EVP_CIPHER_CTX_cleanup"):
+        libcrypto.EVP_CIPHER_CTX_cleanup.argtypes = (c_void_p,)
+    else:
+        libcrypto.EVP_CIPHER_CTX_reset.argtypes = (c_void_p,)
+    libcrypto.EVP_CIPHER_CTX_free.argtypes = (c_void_p,)
+
+    libcrypto.RAND_bytes.restype = c_int
+    libcrypto.RAND_bytes.argtypes = (c_void_p, c_int)
+
+    if hasattr(libcrypto, 'OpenSSL_add_all_ciphers'):
+        libcrypto.OpenSSL_add_all_ciphers()
+
+    buf = create_string_buffer(buf_size)
+    loaded = True
+
+
+def load_cipher(cipher_name):
+    func_name = 'EVP_' + cipher_name.replace('-', '_')
+    cipher = getattr(libcrypto, func_name, None)
+    if cipher:
+        cipher.restype = c_void_p
+        return cipher()
+    return None
+
+def rand_bytes(length):
+    if not loaded:
+        load_openssl()
+    buf = create_string_buffer(length)
+    r = libcrypto.RAND_bytes(buf, length)
+    if r <= 0:
+        raise Exception('RAND_bytes return error')
+    return buf.raw
+
+class OpenSSLCrypto(object):
+    def __init__(self, cipher_name, key, iv, op):
+        self._ctx = None
+        if not loaded:
+            load_openssl()
+        cipher = libcrypto.EVP_get_cipherbyname(common.to_bytes(cipher_name))
+        if not cipher:
+            cipher = load_cipher(cipher_name)
+        if not cipher:
+            raise Exception('cipher %s not found in libcrypto' % cipher_name)
+        key_ptr = c_char_p(key)
+        iv_ptr = c_char_p(iv)
+        self._ctx = libcrypto.EVP_CIPHER_CTX_new()
+        if not self._ctx:
+            raise Exception('can not create cipher context')
+        r = libcrypto.EVP_CipherInit_ex(self._ctx, cipher, None,
+                                        key_ptr, iv_ptr, c_int(op))
+        if not r:
+            self.clean()
+            raise Exception('can not initialize cipher context')
+
+    def update(self, data):
+        global buf_size, buf
+        cipher_out_len = c_long(0)
+        l = len(data)
+        if buf_size < l:
+            buf_size = l * 2
+            buf = create_string_buffer(buf_size)
+        libcrypto.EVP_CipherUpdate(self._ctx, byref(buf),
+                                   byref(cipher_out_len), c_char_p(data), l)
+        # buf is copied to a str object when we access buf.raw
+        return buf.raw[:cipher_out_len.value]
+
+    def __del__(self):
+        self.clean()
+
+    def clean(self):
+        if self._ctx:
+            if hasattr(libcrypto, "EVP_CIPHER_CTX_cleanup"):
+                libcrypto.EVP_CIPHER_CTX_cleanup(self._ctx)
+            else:
+                libcrypto.EVP_CIPHER_CTX_reset(self._ctx)
+            libcrypto.EVP_CIPHER_CTX_free(self._ctx)
+
+
+ciphers = {
+    'aes-128-cbc': (16, 16, OpenSSLCrypto),
+    'aes-192-cbc': (24, 16, OpenSSLCrypto),
+    'aes-256-cbc': (32, 16, OpenSSLCrypto),
+    'aes-128-cfb': (16, 16, OpenSSLCrypto),
+    'aes-192-cfb': (24, 16, OpenSSLCrypto),
+    'aes-256-cfb': (32, 16, OpenSSLCrypto),
+    'aes-128-ofb': (16, 16, OpenSSLCrypto),
+    'aes-192-ofb': (24, 16, OpenSSLCrypto),
+    'aes-256-ofb': (32, 16, OpenSSLCrypto),
+    'aes-128-ctr': (16, 16, OpenSSLCrypto),
+    'aes-192-ctr': (24, 16, OpenSSLCrypto),
+    'aes-256-ctr': (32, 16, OpenSSLCrypto),
+    'aes-128-cfb8': (16, 16, OpenSSLCrypto),
+    'aes-192-cfb8': (24, 16, OpenSSLCrypto),
+    'aes-256-cfb8': (32, 16, OpenSSLCrypto),
+    'aes-128-cfb1': (16, 16, OpenSSLCrypto),
+    'aes-192-cfb1': (24, 16, OpenSSLCrypto),
+    'aes-256-cfb1': (32, 16, OpenSSLCrypto),
+    'bf-cfb': (16, 8, OpenSSLCrypto),
+    'camellia-128-cfb': (16, 16, OpenSSLCrypto),
+    'camellia-192-cfb': (24, 16, OpenSSLCrypto),
+    'camellia-256-cfb': (32, 16, OpenSSLCrypto),
+    'cast5-cfb': (16, 8, OpenSSLCrypto),
+    'des-cfb': (8, 8, OpenSSLCrypto),
+    'idea-cfb': (16, 8, OpenSSLCrypto),
+    'rc2-cfb': (16, 8, OpenSSLCrypto),
+    'rc4': (16, 0, OpenSSLCrypto),
+    'seed-cfb': (16, 16, OpenSSLCrypto),
+}
+
+
+def run_method(method):
+
+    cipher = OpenSSLCrypto(method, b'k' * 32, b'i' * 16, 1)
+    decipher = OpenSSLCrypto(method, b'k' * 32, b'i' * 16, 0)
+
+    util.run_cipher(cipher, decipher)
+
+
+def test_aes_128_cfb():
+    run_method('aes-128-cfb')
+
+
+def test_aes_256_cfb():
+    run_method('aes-256-cfb')
+
+
+def test_aes_128_cfb8():
+    run_method('aes-128-cfb8')
+
+
+def test_aes_256_ofb():
+    run_method('aes-256-ofb')
+
+
+def test_aes_256_ctr():
+    run_method('aes-256-ctr')
+
+
+def test_bf_cfb():
+    run_method('bf-cfb')
+
+
+def test_rc4():
+    run_method('rc4')
+
+
+if __name__ == '__main__':
+    test_aes_128_cfb()
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/crypto/rc4_md5.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/crypto/rc4_md5.py
new file mode 100644
index 0000000000..b0105ec29c
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/crypto/rc4_md5.py
@@ -0,0 +1,52 @@
+#!/usr/bin/env python
+#
+# Copyright 2015 clowwindy
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+import hashlib
+
+from shadowsocks.crypto import openssl
+
+__all__ = ['ciphers']
+
+
+def create_cipher(alg, key, iv, op, key_as_bytes=0, d=None, salt=None,
+                  i=1, padding=1):
+    md5 = hashlib.md5()
+    md5.update(key)
+    md5.update(iv)
+    rc4_key = md5.digest()
+    return openssl.OpenSSLCrypto(b'rc4', rc4_key, b'', op)
+
+
+ciphers = {
+    'rc4-md5': (16, 16, create_cipher),
+    'rc4-md5-6': (16, 6, create_cipher),
+}
+
+
+def test():
+    from shadowsocks.crypto import util
+
+    cipher = create_cipher('rc4-md5', b'k' * 32, b'i' * 16, 1)
+    decipher = create_cipher('rc4-md5', b'k' * 32, b'i' * 16, 0)
+
+    util.run_cipher(cipher, decipher)
+
+
+if __name__ == '__main__':
+    test()
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/crypto/sodium.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/crypto/sodium.py
new file mode 100644
index 0000000000..51d476bedc
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/crypto/sodium.py
@@ -0,0 +1,140 @@
+#!/usr/bin/env python
+#
+# Copyright 2015 clowwindy
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+from ctypes import c_char_p, c_int, c_ulong, c_ulonglong, byref, \
+    create_string_buffer, c_void_p
+
+from shadowsocks.crypto import util
+
+__all__ = ['ciphers']
+
+libsodium = None
+loaded = False
+
+buf_size = 2048
+
+# for salsa20 and chacha20 and chacha20-ietf
+BLOCK_SIZE = 64
+
+
+def load_libsodium():
+    global loaded, libsodium, buf
+
+    libsodium = util.find_library('sodium', 'crypto_stream_salsa20_xor_ic',
+                                  'libsodium')
+    if libsodium is None:
+        raise Exception('libsodium not found')
+
+    libsodium.crypto_stream_salsa20_xor_ic.restype = c_int
+    libsodium.crypto_stream_salsa20_xor_ic.argtypes = (c_void_p, c_char_p,
+                                                       c_ulonglong,
+                                                       c_char_p, c_ulonglong,
+                                                       c_char_p)
+    libsodium.crypto_stream_chacha20_xor_ic.restype = c_int
+    libsodium.crypto_stream_chacha20_xor_ic.argtypes = (c_void_p, c_char_p,
+                                                        c_ulonglong,
+                                                        c_char_p, c_ulonglong,
+                                                        c_char_p)
+
+    try:
+        libsodium.crypto_stream_chacha20_ietf_xor_ic.restype = c_int
+        libsodium.crypto_stream_chacha20_ietf_xor_ic.argtypes = (c_void_p, c_char_p,
+                                                        c_ulonglong,
+                                                        c_char_p, c_ulong,
+                                                        c_char_p)
+    except:
+        pass
+
+    buf = create_string_buffer(buf_size)
+    loaded = True
+
+
+class SodiumCrypto(object):
+    def __init__(self, cipher_name, key, iv, op):
+        if not loaded:
+            load_libsodium()
+        self.key = key
+        self.iv = iv
+        self.key_ptr = c_char_p(key)
+        self.iv_ptr = c_char_p(iv)
+        if cipher_name == 'salsa20':
+            self.cipher = libsodium.crypto_stream_salsa20_xor_ic
+        elif cipher_name == 'chacha20':
+            self.cipher = libsodium.crypto_stream_chacha20_xor_ic
+        elif cipher_name == 'chacha20-ietf':
+            self.cipher = libsodium.crypto_stream_chacha20_ietf_xor_ic
+        else:
+            raise Exception('Unknown cipher')
+        # byte counter, not block counter
+        self.counter = 0
+
+    def update(self, data):
+        global buf_size, buf
+        l = len(data)
+
+        # we can only prepend some padding to make the encryption align to
+        # blocks
+        padding = self.counter % BLOCK_SIZE
+        if buf_size < padding + l:
+            buf_size = (padding + l) * 2
+            buf = create_string_buffer(buf_size)
+
+        if padding:
+            data = (b'\0' * padding) + data
+        self.cipher(byref(buf), c_char_p(data), padding + l,
+                    self.iv_ptr, int(self.counter / BLOCK_SIZE), self.key_ptr)
+        self.counter += l
+        # buf is copied to a str object when we access buf.raw
+        # strip off the padding
+        return buf.raw[padding:padding + l]
+
+
+ciphers = {
+    'salsa20': (32, 8, SodiumCrypto),
+    'chacha20': (32, 8, SodiumCrypto),
+    'chacha20-ietf': (32, 12, SodiumCrypto),
+}
+
+
+def test_salsa20():
+    cipher = SodiumCrypto('salsa20', b'k' * 32, b'i' * 16, 1)
+    decipher = SodiumCrypto('salsa20', b'k' * 32, b'i' * 16, 0)
+
+    util.run_cipher(cipher, decipher)
+
+
+def test_chacha20():
+
+    cipher = SodiumCrypto('chacha20', b'k' * 32, b'i' * 16, 1)
+    decipher = SodiumCrypto('chacha20', b'k' * 32, b'i' * 16, 0)
+
+    util.run_cipher(cipher, decipher)
+
+
+def test_chacha20_ietf():
+
+    cipher = SodiumCrypto('chacha20-ietf', b'k' * 32, b'i' * 16, 1)
+    decipher = SodiumCrypto('chacha20-ietf', b'k' * 32, b'i' * 16, 0)
+
+    util.run_cipher(cipher, decipher)
+
+if __name__ == '__main__':
+    test_chacha20_ietf()
+    test_chacha20()
+    test_salsa20()
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/crypto/table.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/crypto/table.py
new file mode 100644
index 0000000000..60c2f24519
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/crypto/table.py
@@ -0,0 +1,181 @@
+# !/usr/bin/env python
+#
+# Copyright 2015 clowwindy
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+import string
+import struct
+import hashlib
+
+
+__all__ = ['ciphers']
+
+cached_tables = {}
+
+if hasattr(string, 'maketrans'):
+    maketrans = string.maketrans
+    translate = string.translate
+else:
+    maketrans = bytes.maketrans
+    translate = bytes.translate
+
+
+def get_table(key):
+    m = hashlib.md5()
+    m.update(key)
+    s = m.digest()
+    a, b = struct.unpack('<QQ', s)
+    table = maketrans(b'', b'')
+    table = [table[i: i + 1] for i in range(len(table))]
+    for i in range(1, 1024):
+        table.sort(key=lambda x: int(a % (ord(x) + i)))
+    return table
+
+
+def init_table(key):
+    if key not in cached_tables:
+        encrypt_table = b''.join(get_table(key))
+        decrypt_table = maketrans(encrypt_table, maketrans(b'', b''))
+        cached_tables[key] = [encrypt_table, decrypt_table]
+    return cached_tables[key]
+
+
+class TableCipher(object):
+    def __init__(self, cipher_name, key, iv, op):
+        self._encrypt_table, self._decrypt_table = init_table(key)
+        self._op = op
+
+    def update(self, data):
+        if self._op:
+            return translate(data, self._encrypt_table)
+        else:
+            return translate(data, self._decrypt_table)
+
+class NoneCipher(object):
+    def __init__(self, cipher_name, key, iv, op):
+        pass
+
+    def update(self, data):
+        return data
+
+ciphers = {
+    'none': (16, 0, NoneCipher),
+    'table': (16, 0, TableCipher)
+}
+
+
+def test_table_result():
+    from shadowsocks.common import ord
+    target1 = [
+        [60, 53, 84, 138, 217, 94, 88, 23, 39, 242, 219, 35, 12, 157, 165, 181,
+         255, 143, 83, 247, 162, 16, 31, 209, 190, 171, 115, 65, 38, 41, 21,
+         245, 236, 46, 121, 62, 166, 233, 44, 154, 153, 145, 230, 49, 128, 216,
+         173, 29, 241, 119, 64, 229, 194, 103, 131, 110, 26, 197, 218, 59, 204,
+         56, 27, 34, 141, 221, 149, 239, 192, 195, 24, 155, 170, 183, 11, 254,
+         213, 37, 137, 226, 75, 203, 55, 19, 72, 248, 22, 129, 33, 175, 178,
+         10, 198, 71, 77, 36, 113, 167, 48, 2, 117, 140, 142, 66, 199, 232,
+         243, 32, 123, 54, 51, 82, 57, 177, 87, 251, 150, 196, 133, 5, 253,
+         130, 8, 184, 14, 152, 231, 3, 186, 159, 76, 89, 228, 205, 156, 96,
+         163, 146, 18, 91, 132, 85, 80, 109, 172, 176, 105, 13, 50, 235, 127,
+         0, 189, 95, 98, 136, 250, 200, 108, 179, 211, 214, 106, 168, 78, 79,
+         74, 210, 30, 73, 201, 151, 208, 114, 101, 174, 92, 52, 120, 240, 15,
+         169, 220, 182, 81, 224, 43, 185, 40, 99, 180, 17, 212, 158, 42, 90, 9,
+         191, 45, 6, 25, 4, 222, 67, 126, 1, 116, 124, 206, 69, 61, 7, 68, 97,
+         202, 63, 244, 20, 28, 58, 93, 134, 104, 144, 227, 147, 102, 118, 135,
+         148, 47, 238, 86, 112, 122, 70, 107, 215, 100, 139, 223, 225, 164,
+         237, 111, 125, 207, 160, 187, 246, 234, 161, 188, 193, 249, 252],
+        [151, 205, 99, 127, 201, 119, 199, 211, 122, 196, 91, 74, 12, 147, 124,
+         180, 21, 191, 138, 83, 217, 30, 86, 7, 70, 200, 56, 62, 218, 47, 168,
+         22, 107, 88, 63, 11, 95, 77, 28, 8, 188, 29, 194, 186, 38, 198, 33,
+         230, 98, 43, 148, 110, 177, 1, 109, 82, 61, 112, 219, 59, 0, 210, 35,
+         215, 50, 27, 103, 203, 212, 209, 235, 93, 84, 169, 166, 80, 130, 94,
+         164, 165, 142, 184, 111, 18, 2, 141, 232, 114, 6, 131, 195, 139, 176,
+         220, 5, 153, 135, 213, 154, 189, 238, 174, 226, 53, 222, 146, 162,
+         236, 158, 143, 55, 244, 233, 96, 173, 26, 206, 100, 227, 49, 178, 34,
+         234, 108, 207, 245, 204, 150, 44, 87, 121, 54, 140, 118, 221, 228,
+         155, 78, 3, 239, 101, 64, 102, 17, 223, 41, 137, 225, 229, 66, 116,
+         171, 125, 40, 39, 71, 134, 13, 193, 129, 247, 251, 20, 136, 242, 14,
+         36, 97, 163, 181, 72, 25, 144, 46, 175, 89, 145, 113, 90, 159, 190,
+         15, 183, 73, 123, 187, 128, 248, 252, 152, 24, 197, 68, 253, 52, 69,
+         117, 57, 92, 104, 157, 170, 214, 81, 60, 133, 208, 246, 172, 23, 167,
+         160, 192, 76, 161, 237, 45, 4, 58, 10, 182, 65, 202, 240, 185, 241,
+         79, 224, 132, 51, 42, 126, 105, 37, 250, 149, 32, 243, 231, 67, 179,
+         48, 9, 106, 216, 31, 249, 19, 85, 254, 156, 115, 255, 120, 75, 16]]
+
+    target2 = [
+        [124, 30, 170, 247, 27, 127, 224, 59, 13, 22, 196, 76, 72, 154, 32,
+         209, 4, 2, 131, 62, 101, 51, 230, 9, 166, 11, 99, 80, 208, 112, 36,
+         248, 81, 102, 130, 88, 218, 38, 168, 15, 241, 228, 167, 117, 158, 41,
+         10, 180, 194, 50, 204, 243, 246, 251, 29, 198, 219, 210, 195, 21, 54,
+         91, 203, 221, 70, 57, 183, 17, 147, 49, 133, 65, 77, 55, 202, 122,
+         162, 169, 188, 200, 190, 125, 63, 244, 96, 31, 107, 106, 74, 143, 116,
+         148, 78, 46, 1, 137, 150, 110, 181, 56, 95, 139, 58, 3, 231, 66, 165,
+         142, 242, 43, 192, 157, 89, 175, 109, 220, 128, 0, 178, 42, 255, 20,
+         214, 185, 83, 160, 253, 7, 23, 92, 111, 153, 26, 226, 33, 176, 144,
+         18, 216, 212, 28, 151, 71, 206, 222, 182, 8, 174, 205, 201, 152, 240,
+         155, 108, 223, 104, 239, 98, 164, 211, 184, 34, 193, 14, 114, 187, 40,
+         254, 12, 67, 93, 217, 6, 94, 16, 19, 82, 86, 245, 24, 197, 134, 132,
+         138, 229, 121, 5, 235, 238, 85, 47, 103, 113, 179, 69, 250, 45, 135,
+         156, 25, 61, 75, 44, 146, 189, 84, 207, 172, 119, 53, 123, 186, 120,
+         171, 68, 227, 145, 136, 100, 90, 48, 79, 159, 149, 39, 213, 236, 126,
+         52, 60, 225, 199, 105, 73, 233, 252, 118, 215, 35, 115, 64, 37, 97,
+         129, 161, 177, 87, 237, 141, 173, 191, 163, 140, 234, 232, 249],
+        [117, 94, 17, 103, 16, 186, 172, 127, 146, 23, 46, 25, 168, 8, 163, 39,
+         174, 67, 137, 175, 121, 59, 9, 128, 179, 199, 132, 4, 140, 54, 1, 85,
+         14, 134, 161, 238, 30, 241, 37, 224, 166, 45, 119, 109, 202, 196, 93,
+         190, 220, 69, 49, 21, 228, 209, 60, 73, 99, 65, 102, 7, 229, 200, 19,
+         82, 240, 71, 105, 169, 214, 194, 64, 142, 12, 233, 88, 201, 11, 72,
+         92, 221, 27, 32, 176, 124, 205, 189, 177, 246, 35, 112, 219, 61, 129,
+         170, 173, 100, 84, 242, 157, 26, 218, 20, 33, 191, 155, 232, 87, 86,
+         153, 114, 97, 130, 29, 192, 164, 239, 90, 43, 236, 208, 212, 185, 75,
+         210, 0, 81, 227, 5, 116, 243, 34, 18, 182, 70, 181, 197, 217, 95, 183,
+         101, 252, 248, 107, 89, 136, 216, 203, 68, 91, 223, 96, 141, 150, 131,
+         13, 152, 198, 111, 44, 222, 125, 244, 76, 251, 158, 106, 24, 42, 38,
+         77, 2, 213, 207, 249, 147, 113, 135, 245, 118, 193, 47, 98, 145, 66,
+         160, 123, 211, 165, 78, 204, 80, 250, 110, 162, 48, 58, 10, 180, 55,
+         231, 79, 149, 74, 62, 50, 148, 143, 206, 28, 15, 57, 159, 139, 225,
+         122, 237, 138, 171, 36, 56, 115, 63, 144, 154, 6, 230, 133, 215, 41,
+         184, 22, 104, 254, 234, 253, 187, 226, 247, 188, 156, 151, 40, 108,
+         51, 83, 178, 52, 3, 31, 255, 195, 53, 235, 126, 167, 120]]
+
+    encrypt_table = b''.join(get_table(b'foobar!'))
+    decrypt_table = maketrans(encrypt_table, maketrans(b'', b''))
+
+    for i in range(0, 256):
+        assert (target1[0][i] == ord(encrypt_table[i]))
+        assert (target1[1][i] == ord(decrypt_table[i]))
+
+    encrypt_table = b''.join(get_table(b'barfoo!'))
+    decrypt_table = maketrans(encrypt_table, maketrans(b'', b''))
+
+    for i in range(0, 256):
+        assert (target2[0][i] == ord(encrypt_table[i]))
+        assert (target2[1][i] == ord(decrypt_table[i]))
+
+
+def test_encryption():
+    from shadowsocks.crypto import util
+
+    cipher = TableCipher('table', b'test', b'', 1)
+    decipher = TableCipher('table', b'test', b'', 0)
+
+    util.run_cipher(cipher, decipher)
+
+
+if __name__ == '__main__':
+    test_table_result()
+    test_encryption()
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/crypto/util.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/crypto/util.py
new file mode 100644
index 0000000000..212df86045
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/crypto/util.py
@@ -0,0 +1,139 @@
+#!/usr/bin/env python
+#
+# Copyright 2015 clowwindy
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+import os
+import logging
+
+
+def find_library_nt(name):
+    # modified from ctypes.util
+    # ctypes.util.find_library just returns first result he found
+    # but we want to try them all
+    # because on Windows, users may have both 32bit and 64bit version installed
+    results = []
+    for directory in os.environ['PATH'].split(os.pathsep):
+        fname = os.path.join(directory, name)
+        if os.path.isfile(fname):
+            results.append(fname)
+        if fname.lower().endswith(".dll"):
+            continue
+        fname = fname + ".dll"
+        if os.path.isfile(fname):
+            results.append(fname)
+    return results
+
+
+def find_library(possible_lib_names, search_symbol, library_name):
+    import ctypes.util
+    from ctypes import CDLL
+
+    paths = []
+
+    if type(possible_lib_names) not in (list, tuple):
+        possible_lib_names = [possible_lib_names]
+
+    lib_names = []
+    for lib_name in possible_lib_names:
+        lib_names.append(lib_name)
+        lib_names.append('lib' + lib_name)
+
+    for name in lib_names:
+        if os.name == "nt":
+            paths.extend(find_library_nt(name))
+        else:
+            path = ctypes.util.find_library(name)
+            if path:
+                paths.append(path)
+
+    if not paths:
+        # We may get here when find_library fails because, for example,
+        # the user does not have sufficient privileges to access those
+        # tools underlying find_library on linux.
+        import glob
+
+        for name in lib_names:
+            patterns = [
+                '/usr/local/lib*/lib%s.*' % name,
+                '/usr/lib*/lib%s.*' % name,
+                'lib%s.*' % name,
+                '%s.dll' % name]
+
+            for pat in patterns:
+                files = glob.glob(pat)
+                if files:
+                    paths.extend(files)
+    for path in paths:
+        try:
+            lib = CDLL(path)
+            if hasattr(lib, search_symbol):
+                logging.info('loading %s from %s', library_name, path)
+                return lib
+            else:
+                logging.warn('can\'t find symbol %s in %s', search_symbol,
+                             path)
+        except Exception:
+            if path == paths[-1]:
+                raise
+    return None
+
+
+def run_cipher(cipher, decipher):
+    from os import urandom
+    import random
+    import time
+
+    BLOCK_SIZE = 16384
+    rounds = 1 * 1024
+    plain = urandom(BLOCK_SIZE * rounds)
+
+    results = []
+    pos = 0
+    print('test start')
+    start = time.time()
+    while pos < len(plain):
+        l = random.randint(100, 32768)
+        c = cipher.update(plain[pos:pos + l])
+        results.append(c)
+        pos += l
+    pos = 0
+    c = b''.join(results)
+    results = []
+    while pos < len(plain):
+        l = random.randint(100, 32768)
+        results.append(decipher.update(c[pos:pos + l]))
+        pos += l
+    end = time.time()
+    print('speed: %d bytes/s' % (BLOCK_SIZE * rounds / (end - start)))
+    assert b''.join(results) == plain
+
+
+def test_find_library():
+    assert find_library('c', 'strcpy', 'libc') is not None
+    assert find_library(['c'], 'strcpy', 'libc') is not None
+    assert find_library(('c',), 'strcpy', 'libc') is not None
+    assert find_library(('crypto', 'eay32'), 'EVP_CipherUpdate',
+                        'libcrypto') is not None
+    assert find_library('notexist', 'strcpy', 'libnotexist') is None
+    assert find_library('c', 'symbol_not_exist', 'c') is None
+    assert find_library(('notexist', 'c', 'crypto', 'eay32'),
+                        'EVP_CipherUpdate', 'libc') is not None
+
+
+if __name__ == '__main__':
+    test_find_library()
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/daemon.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/daemon.py
new file mode 100644
index 0000000000..8dc5608d11
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/daemon.py
@@ -0,0 +1,208 @@
+#!/usr/bin/python
+# -*- coding: utf-8 -*-
+#
+# Copyright 2014-2015 clowwindy
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+import os
+import sys
+import logging
+import signal
+import time
+from shadowsocks import common, shell
+
+# this module is ported from ShadowVPN daemon.c
+
+
+def daemon_exec(config):
+    if 'daemon' in config:
+        if os.name != 'posix':
+            raise Exception('daemon mode is only supported on Unix')
+        command = config['daemon']
+        if not command:
+            command = 'start'
+        pid_file = config['pid-file']
+        log_file = config['log-file']
+        if command == 'start':
+            daemon_start(pid_file, log_file)
+        elif command == 'stop':
+            daemon_stop(pid_file)
+            # always exit after daemon_stop
+            sys.exit(0)
+        elif command == 'restart':
+            daemon_stop(pid_file)
+            daemon_start(pid_file, log_file)
+        else:
+            raise Exception('unsupported daemon command %s' % command)
+
+
+def write_pid_file(pid_file, pid):
+    import fcntl
+    import stat
+
+    try:
+        fd = os.open(pid_file, os.O_RDWR | os.O_CREAT,
+                     stat.S_IRUSR | stat.S_IWUSR)
+    except OSError as e:
+        shell.print_exception(e)
+        return -1
+    flags = fcntl.fcntl(fd, fcntl.F_GETFD)
+    assert flags != -1
+    flags |= fcntl.FD_CLOEXEC
+    r = fcntl.fcntl(fd, fcntl.F_SETFD, flags)
+    assert r != -1
+    # There is no platform independent way to implement fcntl(fd, F_SETLK, &fl)
+    # via fcntl.fcntl. So use lockf instead
+    try:
+        fcntl.lockf(fd, fcntl.LOCK_EX | fcntl.LOCK_NB, 0, 0, os.SEEK_SET)
+    except IOError:
+        r = os.read(fd, 32)
+        if r:
+            logging.error('already started at pid %s' % common.to_str(r))
+        else:
+            logging.error('already started')
+        os.close(fd)
+        return -1
+    os.ftruncate(fd, 0)
+    os.write(fd, common.to_bytes(str(pid)))
+    return 0
+
+
+def freopen(f, mode, stream):
+    oldf = open(f, mode)
+    oldfd = oldf.fileno()
+    newfd = stream.fileno()
+    os.close(newfd)
+    os.dup2(oldfd, newfd)
+
+
+def daemon_start(pid_file, log_file):
+
+    def handle_exit(signum, _):
+        if signum == signal.SIGTERM:
+            sys.exit(0)
+        sys.exit(1)
+
+    signal.signal(signal.SIGINT, handle_exit)
+    signal.signal(signal.SIGTERM, handle_exit)
+
+    # fork only once because we are sure parent will exit
+    pid = os.fork()
+    assert pid != -1
+
+    if pid > 0:
+        # parent waits for its child
+        time.sleep(5)
+        sys.exit(0)
+
+    # child signals its parent to exit
+    ppid = os.getppid()
+    pid = os.getpid()
+    if write_pid_file(pid_file, pid) != 0:
+        os.kill(ppid, signal.SIGINT)
+        sys.exit(1)
+
+    os.setsid()
+    signal.signal(signal.SIG_IGN, signal.SIGHUP)
+
+    print('started')
+    os.kill(ppid, signal.SIGTERM)
+
+    sys.stdin.close()
+    try:
+        freopen(log_file, 'a', sys.stdout)
+        freopen(log_file, 'a', sys.stderr)
+    except IOError as e:
+        shell.print_exception(e)
+        sys.exit(1)
+
+
+def daemon_stop(pid_file):
+    import errno
+    try:
+        with open(pid_file) as f:
+            buf = f.read()
+            pid = common.to_str(buf)
+            if not buf:
+                logging.error('not running')
+    except IOError as e:
+        shell.print_exception(e)
+        if e.errno == errno.ENOENT:
+            # always exit 0 if we are sure daemon is not running
+            logging.error('not running')
+            return
+        sys.exit(1)
+    pid = int(pid)
+    if pid > 0:
+        try:
+            os.kill(pid, signal.SIGTERM)
+        except OSError as e:
+            if e.errno == errno.ESRCH:
+                logging.error('not running')
+                # always exit 0 if we are sure daemon is not running
+                return
+            shell.print_exception(e)
+            sys.exit(1)
+    else:
+        logging.error('pid is not positive: %d', pid)
+
+    # sleep for maximum 10s
+    for i in range(0, 200):
+        try:
+            # query for the pid
+            os.kill(pid, 0)
+        except OSError as e:
+            if e.errno == errno.ESRCH:
+                break
+        time.sleep(0.05)
+    else:
+        logging.error('timed out when stopping pid %d', pid)
+        sys.exit(1)
+    print('stopped')
+    os.unlink(pid_file)
+
+
+def set_user(username):
+    if username is None:
+        return
+
+    import pwd
+    import grp
+
+    try:
+        pwrec = pwd.getpwnam(username)
+    except KeyError:
+        logging.error('user not found: %s' % username)
+        raise
+    user = pwrec[0]
+    uid = pwrec[2]
+    gid = pwrec[3]
+
+    cur_uid = os.getuid()
+    if uid == cur_uid:
+        return
+    if cur_uid != 0:
+        logging.error('can not set user as nonroot user')
+        # will raise later
+
+    # inspired by supervisor
+    if hasattr(os, 'setgroups'):
+        groups = [grprec[2] for grprec in grp.getgrall() if user in grprec[3]]
+        groups.insert(0, gid)
+        os.setgroups(groups)
+    os.setgid(gid)
+    os.setuid(uid)
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/encrypt.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/encrypt.py
new file mode 100644
index 0000000000..44f9052506
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/encrypt.py
@@ -0,0 +1,236 @@
+#!/usr/bin/env python
+#
+# Copyright 2012-2015 clowwindy
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+import os
+import sys
+import hashlib
+import logging
+
+from shadowsocks import common
+from shadowsocks.crypto import rc4_md5, openssl, sodium, table
+
+
+method_supported = {}
+method_supported.update(rc4_md5.ciphers)
+method_supported.update(openssl.ciphers)
+method_supported.update(sodium.ciphers)
+method_supported.update(table.ciphers)
+
+
+def random_string(length):
+    try:
+        return os.urandom(length)
+    except NotImplementedError as e:
+        return openssl.rand_bytes(length)
+
+cached_keys = {}
+
+
+def try_cipher(key, method=None):
+    Encryptor(key, method)
+
+
+def EVP_BytesToKey(password, key_len, iv_len):
+    # equivalent to OpenSSL's EVP_BytesToKey() with count 1
+    # so that we make the same key and iv as nodejs version
+    if hasattr(password, 'encode'):
+        password = password.encode('utf-8')
+    cached_key = '%s-%d-%d' % (password, key_len, iv_len)
+    r = cached_keys.get(cached_key, None)
+    if r:
+        return r
+    m = []
+    i = 0
+    while len(b''.join(m)) < (key_len + iv_len):
+        md5 = hashlib.md5()
+        data = password
+        if i > 0:
+            data = m[i - 1] + password
+        md5.update(data)
+        m.append(md5.digest())
+        i += 1
+    ms = b''.join(m)
+    key = ms[:key_len]
+    iv = ms[key_len:key_len + iv_len]
+    cached_keys[cached_key] = (key, iv)
+    return key, iv
+
+
+class Encryptor(object):
+    def __init__(self, key, method, iv = None):
+        self.key = key
+        self.method = method
+        self.iv = None
+        self.iv_sent = False
+        self.cipher_iv = b''
+        self.iv_buf = b''
+        self.cipher_key = b''
+        self.decipher = None
+        method = method.lower()
+        self._method_info = self.get_method_info(method)
+        if self._method_info:
+            if iv is None or len(iv) != self._method_info[1]:
+                self.cipher = self.get_cipher(key, method, 1,
+                                          random_string(self._method_info[1]))
+            else:
+                self.cipher = self.get_cipher(key, method, 1, iv)
+        else:
+            logging.error('method %s not supported' % method)
+            sys.exit(1)
+
+    def get_method_info(self, method):
+        method = method.lower()
+        m = method_supported.get(method)
+        return m
+
+    def iv_len(self):
+        return len(self.cipher_iv)
+
+    def get_cipher(self, password, method, op, iv):
+        password = common.to_bytes(password)
+        m = self._method_info
+        if m[0] > 0:
+            key, iv_ = EVP_BytesToKey(password, m[0], m[1])
+        else:
+            # key_length == 0 indicates we should use the key directly
+            key, iv = password, b''
+
+        iv = iv[:m[1]]
+        if op == 1:
+            # this iv is for cipher not decipher
+            self.cipher_iv = iv[:m[1]]
+        self.cipher_key = key
+        return m[2](method, key, iv, op)
+
+    def encrypt(self, buf):
+        if len(buf) == 0:
+            return buf
+        if self.iv_sent:
+            return self.cipher.update(buf)
+        else:
+            self.iv_sent = True
+            return self.cipher_iv + self.cipher.update(buf)
+
+    def decrypt(self, buf):
+        if len(buf) == 0:
+            return buf
+        if self.decipher is not None: #optimize
+            return self.decipher.update(buf)
+
+        decipher_iv_len = self._method_info[1]
+        if len(self.iv_buf) <= decipher_iv_len:
+            self.iv_buf += buf
+        if len(self.iv_buf) > decipher_iv_len:
+            decipher_iv = self.iv_buf[:decipher_iv_len]
+            self.decipher = self.get_cipher(self.key, self.method, 0,
+                                            iv=decipher_iv)
+            buf = self.iv_buf[decipher_iv_len:]
+            del self.iv_buf
+            return self.decipher.update(buf)
+        else:
+            return b''
+
+def encrypt_all(password, method, op, data):
+    result = []
+    method = method.lower()
+    (key_len, iv_len, m) = method_supported[method]
+    if key_len > 0:
+        key, _ = EVP_BytesToKey(password, key_len, iv_len)
+    else:
+        key = password
+    if op:
+        iv = random_string(iv_len)
+        result.append(iv)
+    else:
+        iv = data[:iv_len]
+        data = data[iv_len:]
+    cipher = m(method, key, iv, op)
+    result.append(cipher.update(data))
+    return b''.join(result)
+
+def encrypt_key(password, method):
+    method = method.lower()
+    (key_len, iv_len, m) = method_supported[method]
+    if key_len > 0:
+        key, _ = EVP_BytesToKey(password, key_len, iv_len)
+    else:
+        key = password
+    return key
+
+def encrypt_iv_len(method):
+    method = method.lower()
+    (key_len, iv_len, m) = method_supported[method]
+    return iv_len
+
+def encrypt_new_iv(method):
+    method = method.lower()
+    (key_len, iv_len, m) = method_supported[method]
+    return random_string(iv_len)
+
+def encrypt_all_iv(key, method, op, data, ref_iv):
+    result = []
+    method = method.lower()
+    (key_len, iv_len, m) = method_supported[method]
+    if op:
+        iv = ref_iv[0]
+        result.append(iv)
+    else:
+        iv = data[:iv_len]
+        data = data[iv_len:]
+        ref_iv[0] = iv
+    cipher = m(method, key, iv, op)
+    result.append(cipher.update(data))
+    return b''.join(result)
+
+
+CIPHERS_TO_TEST = [
+    'aes-128-cfb',
+    'aes-256-cfb',
+    'rc4-md5',
+    'salsa20',
+    'chacha20',
+    'table',
+]
+
+
+def test_encryptor():
+    from os import urandom
+    plain = urandom(10240)
+    for method in CIPHERS_TO_TEST:
+        logging.warn(method)
+        encryptor = Encryptor(b'key', method)
+        decryptor = Encryptor(b'key', method)
+        cipher = encryptor.encrypt(plain)
+        plain2 = decryptor.decrypt(cipher)
+        assert plain == plain2
+
+
+def test_encrypt_all():
+    from os import urandom
+    plain = urandom(10240)
+    for method in CIPHERS_TO_TEST:
+        logging.warn(method)
+        cipher = encrypt_all(b'key', method, 1, plain)
+        plain2 = encrypt_all(b'key', method, 0, cipher)
+        assert plain == plain2
+
+
+if __name__ == '__main__':
+    test_encrypt_all()
+    test_encryptor()
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/encrypt_test.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/encrypt_test.py
new file mode 100644
index 0000000000..d5e5077899
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/encrypt_test.py
@@ -0,0 +1,51 @@
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+import sys
+import os
+
+sys.path.insert(0, os.path.join(os.path.dirname(__file__), '../'))
+
+
+from shadowsocks.crypto import rc4_md5
+from shadowsocks.crypto import openssl
+from shadowsocks.crypto import sodium
+from shadowsocks.crypto import table
+
+def run(func):
+	try:
+		func()
+	except:
+		pass
+
+def run_n(func, name):
+	try:
+		func(name)
+	except:
+		pass
+
+def main():
+	print("\n""rc4_md5")
+	rc4_md5.test()
+	print("\n""aes-256-cfb")
+	openssl.test_aes_256_cfb()
+	print("\n""aes-128-cfb")
+	openssl.test_aes_128_cfb()
+	print("\n""bf-cfb")
+	run(openssl.test_bf_cfb)
+	print("\n""camellia-128-cfb")
+	run_n(openssl.run_method, "camellia-128-cfb")
+	print("\n""cast5-cfb")
+	run_n(openssl.run_method, "cast5-cfb")
+	print("\n""idea-cfb")
+	run_n(openssl.run_method, "idea-cfb")
+	print("\n""seed-cfb")
+	run_n(openssl.run_method, "seed-cfb")
+	print("\n""salsa20")
+	run(sodium.test_salsa20)
+	print("\n""chacha20")
+	run(sodium.test_chacha20)
+
+if __name__ == '__main__':
+	main()
+
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/eventloop.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/eventloop.py
new file mode 100644
index 0000000000..341620efd1
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/eventloop.py
@@ -0,0 +1,258 @@
+#!/usr/bin/python
+# -*- coding: utf-8 -*-
+#
+# Copyright 2013-2015 clowwindy
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+# from ssloop
+# https://github.com/clowwindy/ssloop
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+import os
+import time
+import socket
+import select
+import errno
+import logging
+from collections import defaultdict
+
+from shadowsocks import shell
+
+
+__all__ = ['EventLoop', 'POLL_NULL', 'POLL_IN', 'POLL_OUT', 'POLL_ERR',
+           'POLL_HUP', 'POLL_NVAL', 'EVENT_NAMES']
+
+POLL_NULL = 0x00
+POLL_IN = 0x01
+POLL_OUT = 0x04
+POLL_ERR = 0x08
+POLL_HUP = 0x10
+POLL_NVAL = 0x20
+
+
+EVENT_NAMES = {
+    POLL_NULL: 'POLL_NULL',
+    POLL_IN: 'POLL_IN',
+    POLL_OUT: 'POLL_OUT',
+    POLL_ERR: 'POLL_ERR',
+    POLL_HUP: 'POLL_HUP',
+    POLL_NVAL: 'POLL_NVAL',
+}
+
+# we check timeouts every TIMEOUT_PRECISION seconds
+TIMEOUT_PRECISION = 2
+
+
+class KqueueLoop(object):
+
+    MAX_EVENTS = 1024
+
+    def __init__(self):
+        self._kqueue = select.kqueue()
+        self._fds = {}
+
+    def _control(self, fd, mode, flags):
+        events = []
+        if mode & POLL_IN:
+            events.append(select.kevent(fd, select.KQ_FILTER_READ, flags))
+        if mode & POLL_OUT:
+            events.append(select.kevent(fd, select.KQ_FILTER_WRITE, flags))
+        for e in events:
+            self._kqueue.control([e], 0)
+
+    def poll(self, timeout):
+        if timeout < 0:
+            timeout = None  # kqueue behaviour
+        events = self._kqueue.control(None, KqueueLoop.MAX_EVENTS, timeout)
+        results = defaultdict(lambda: POLL_NULL)
+        for e in events:
+            fd = e.ident
+            if e.filter == select.KQ_FILTER_READ:
+                results[fd] |= POLL_IN
+            elif e.filter == select.KQ_FILTER_WRITE:
+                results[fd] |= POLL_OUT
+        return results.items()
+
+    def register(self, fd, mode):
+        self._fds[fd] = mode
+        self._control(fd, mode, select.KQ_EV_ADD)
+
+    def unregister(self, fd):
+        self._control(fd, self._fds[fd], select.KQ_EV_DELETE)
+        del self._fds[fd]
+
+    def modify(self, fd, mode):
+        self.unregister(fd)
+        self.register(fd, mode)
+
+    def close(self):
+        self._kqueue.close()
+
+
+class SelectLoop(object):
+
+    def __init__(self):
+        self._r_list = set()
+        self._w_list = set()
+        self._x_list = set()
+
+    def poll(self, timeout):
+        r, w, x = select.select(self._r_list, self._w_list, self._x_list,
+                                timeout)
+        results = defaultdict(lambda: POLL_NULL)
+        for p in [(r, POLL_IN), (w, POLL_OUT), (x, POLL_ERR)]:
+            for fd in p[0]:
+                results[fd] |= p[1]
+        return results.items()
+
+    def register(self, fd, mode):
+        if mode & POLL_IN:
+            self._r_list.add(fd)
+        if mode & POLL_OUT:
+            self._w_list.add(fd)
+        if mode & POLL_ERR:
+            self._x_list.add(fd)
+
+    def unregister(self, fd):
+        if fd in self._r_list:
+            self._r_list.remove(fd)
+        if fd in self._w_list:
+            self._w_list.remove(fd)
+        if fd in self._x_list:
+            self._x_list.remove(fd)
+
+    def modify(self, fd, mode):
+        self.unregister(fd)
+        self.register(fd, mode)
+
+    def close(self):
+        pass
+
+
+class EventLoop(object):
+    def __init__(self):
+        if hasattr(select, 'epoll'):
+            self._impl = select.epoll()
+            model = 'epoll'
+        elif hasattr(select, 'kqueue'):
+            self._impl = KqueueLoop()
+            model = 'kqueue'
+        elif hasattr(select, 'select'):
+            self._impl = SelectLoop()
+            model = 'select'
+        else:
+            raise Exception('can not find any available functions in select '
+                            'package')
+        self._fdmap = {}  # (f, handler)
+        self._last_time = time.time()
+        self._periodic_callbacks = []
+        self._stopping = False
+        logging.debug('using event model: %s', model)
+
+    def poll(self, timeout=None):
+        events = self._impl.poll(timeout)
+        return [(self._fdmap[fd][0], fd, event) for fd, event in events]
+
+    def add(self, f, mode, handler):
+        fd = f.fileno()
+        self._fdmap[fd] = (f, handler)
+        self._impl.register(fd, mode)
+
+    def remove(self, f):
+        fd = f.fileno()
+        del self._fdmap[fd]
+        self._impl.unregister(fd)
+
+    def removefd(self, fd):
+        del self._fdmap[fd]
+        self._impl.unregister(fd)
+
+    def add_periodic(self, callback):
+        self._periodic_callbacks.append(callback)
+
+    def remove_periodic(self, callback):
+        self._periodic_callbacks.remove(callback)
+
+    def modify(self, f, mode):
+        fd = f.fileno()
+        self._impl.modify(fd, mode)
+
+    def stop(self):
+        self._stopping = True
+
+    def run(self):
+        events = []
+        while not self._stopping:
+            asap = False
+            try:
+                events = self.poll(TIMEOUT_PRECISION)
+            except (OSError, IOError) as e:
+                if errno_from_exception(e) in (errno.EPIPE, errno.EINTR):
+                    # EPIPE: Happens when the client closes the connection
+                    # EINTR: Happens when received a signal
+                    # handles them as soon as possible
+                    asap = True
+                    logging.debug('poll:%s', e)
+                else:
+                    logging.error('poll:%s', e)
+                    import traceback
+                    traceback.print_exc()
+                    continue
+
+            handle = False
+            for sock, fd, event in events:
+                handler = self._fdmap.get(fd, None)
+                if handler is not None:
+                    handler = handler[1]
+                    try:
+                        handle = handler.handle_event(sock, fd, event) or handle
+                    except (OSError, IOError) as e:
+                        shell.print_exception(e)
+            now = time.time()
+            if asap or now - self._last_time >= TIMEOUT_PRECISION:
+                for callback in self._periodic_callbacks:
+                    callback()
+                self._last_time = now
+            if events and not handle:
+                time.sleep(0.001)
+
+    def __del__(self):
+        self._impl.close()
+
+
+# from tornado
+def errno_from_exception(e):
+    """Provides the errno from an Exception object.
+
+    There are cases that the errno attribute was not set so we pull
+    the errno out of the args but if someone instatiates an Exception
+    without any args you will get a tuple error. So this function
+    abstracts all that behavior to give you a safe way to get the
+    errno.
+    """
+
+    if hasattr(e, 'errno'):
+        return e.errno
+    elif e.args:
+        return e.args[0]
+    else:
+        return None
+
+
+# from tornado
+def get_sock_error(sock):
+    error_number = sock.getsockopt(socket.SOL_SOCKET, socket.SO_ERROR)
+    return socket.error(error_number, os.strerror(error_number))
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/local.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/local.py
new file mode 100644
index 0000000000..9f54d93066
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/local.py
@@ -0,0 +1,81 @@
+#!/usr/bin/env python
+# -*- coding: utf-8 -*-
+#
+# Copyright 2012-2015 clowwindy
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+import sys
+import os
+import logging
+import signal
+
+if __name__ == '__main__':
+    import inspect
+    file_path = os.path.dirname(os.path.realpath(inspect.getfile(inspect.currentframe())))
+    sys.path.insert(0, os.path.join(file_path, '../'))
+
+from shadowsocks import shell, daemon, eventloop, tcprelay, udprelay, asyncdns
+
+
+def main():
+    shell.check_python()
+
+    # fix py2exe
+    if hasattr(sys, "frozen") and sys.frozen in \
+            ("windows_exe", "console_exe"):
+        p = os.path.dirname(os.path.abspath(sys.executable))
+        os.chdir(p)
+
+    config = shell.get_config(True)
+
+    if not config.get('dns_ipv6', False):
+        asyncdns.IPV6_CONNECTION_SUPPORT = False
+
+    daemon.daemon_exec(config)
+    logging.info("local start with protocol[%s] password [%s] method [%s] obfs [%s] obfs_param [%s]" %
+            (config['protocol'], config['password'], config['method'], config['obfs'], config['obfs_param']))
+
+    try:
+        logging.info("starting local at %s:%d" %
+                     (config['local_address'], config['local_port']))
+
+        dns_resolver = asyncdns.DNSResolver()
+        tcp_server = tcprelay.TCPRelay(config, dns_resolver, True)
+        udp_server = udprelay.UDPRelay(config, dns_resolver, True)
+        loop = eventloop.EventLoop()
+        dns_resolver.add_to_loop(loop)
+        tcp_server.add_to_loop(loop)
+        udp_server.add_to_loop(loop)
+
+        def handler(signum, _):
+            logging.warn('received SIGQUIT, doing graceful shutting down..')
+            tcp_server.close(next_tick=True)
+            udp_server.close(next_tick=True)
+        signal.signal(getattr(signal, 'SIGQUIT', signal.SIGTERM), handler)
+
+        def int_handler(signum, _):
+            sys.exit(1)
+        signal.signal(signal.SIGINT, int_handler)
+
+        daemon.set_user(config.get('user', None))
+        loop.run()
+    except Exception as e:
+        shell.print_exception(e)
+        sys.exit(1)
+
+if __name__ == '__main__':
+    main()
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/logrun.sh b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/logrun.sh
new file mode 100755
index 0000000000..fc081e1d2b
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/logrun.sh
@@ -0,0 +1,8 @@
+#!/bin/bash
+cd `dirname $0`
+python_ver=$(ls /usr/bin|grep -e "^python[23]\.[1-9]\+$"|tail -1)
+eval $(ps -ef | grep "[0-9] ${python_ver} server\\.py a" | awk '{print "kill "$2}')
+ulimit -n 512000
+nohup ${python_ver} server.py a>> ssserver.log 2>&1 &
+
+
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/lru_cache.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/lru_cache.py
new file mode 100644
index 0000000000..ab0d210861
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/lru_cache.py
@@ -0,0 +1,179 @@
+#!/usr/bin/python
+# -*- coding: utf-8 -*-
+#
+# Copyright 2015 clowwindy
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+import collections
+import logging
+import time
+
+if __name__ == '__main__':
+    import os, sys, inspect
+    file_path = os.path.dirname(os.path.realpath(inspect.getfile(inspect.currentframe())))
+    sys.path.insert(0, os.path.join(file_path, '../'))
+
+try:
+    from collections import OrderedDict
+except:
+    from shadowsocks.ordereddict import OrderedDict
+
+# this LRUCache is optimized for concurrency, not QPS
+# n: concurrency, keys stored in the cache
+# m: visits not timed out, proportional to QPS * timeout
+# get & set is O(1), not O(n). thus we can support very large n
+# sweep is O((n - m)) or O(1024) at most,
+# no metter how large the cache or timeout value is
+
+SWEEP_MAX_ITEMS = 1024
+
+class LRUCache(collections.MutableMapping):
+    """This class is not thread safe"""
+
+    def __init__(self, timeout=60, close_callback=None, *args, **kwargs):
+        self.timeout = timeout
+        self.close_callback = close_callback
+        self._store = {}
+        self._keys_to_last_time = OrderedDict()
+        self.update(dict(*args, **kwargs))  # use the free update to set keys
+
+    def __getitem__(self, key):
+        # O(1)
+        t = time.time()
+        last_t = self._keys_to_last_time[key]
+        del self._keys_to_last_time[key]
+        self._keys_to_last_time[key] = t
+        return self._store[key]
+
+    def __setitem__(self, key, value):
+        # O(1)
+        t = time.time()
+        if key in self._keys_to_last_time:
+            del self._keys_to_last_time[key]
+        self._keys_to_last_time[key] = t
+        self._store[key] = value
+
+    def __delitem__(self, key):
+        # O(1)
+        last_t = self._keys_to_last_time[key]
+        del self._store[key]
+        del self._keys_to_last_time[key]
+
+    def __contains__(self, key):
+        return key in self._store
+
+    def __iter__(self):
+        return iter(self._store)
+
+    def __len__(self):
+        return len(self._store)
+
+    def first(self):
+        if len(self._keys_to_last_time) > 0:
+            for key in self._keys_to_last_time:
+                return key
+
+    def sweep(self, sweep_item_cnt = SWEEP_MAX_ITEMS):
+        # O(n - m)
+        now = time.time()
+        c = 0
+        while c < sweep_item_cnt:
+            if len(self._keys_to_last_time) == 0:
+                break
+            for key in self._keys_to_last_time:
+                break
+            last_t = self._keys_to_last_time[key]
+            if now - last_t <= self.timeout:
+                break
+            value = self._store[key]
+            del self._store[key]
+            del self._keys_to_last_time[key]
+            if self.close_callback is not None:
+                self.close_callback(value)
+            c += 1
+        if c:
+            logging.debug('%d keys swept' % c)
+        return c < SWEEP_MAX_ITEMS
+
+    def clear(self, keep):
+        now = time.time()
+        c = 0
+        while len(self._keys_to_last_time) > keep:
+            if len(self._keys_to_last_time) == 0:
+                break
+            for key in self._keys_to_last_time:
+                break
+            last_t = self._keys_to_last_time[key]
+            value = self._store[key]
+            if self.close_callback is not None:
+                self.close_callback(value)
+            del self._store[key]
+            del self._keys_to_last_time[key]
+            c += 1
+        if c:
+            logging.debug('%d keys swept' % c)
+        return c < SWEEP_MAX_ITEMS
+
+def test():
+    c = LRUCache(timeout=0.3)
+
+    c['a'] = 1
+    assert c['a'] == 1
+    c['a'] = 1
+
+    time.sleep(0.5)
+    c.sweep()
+    assert 'a' not in c
+
+    c['a'] = 2
+    c['b'] = 3
+    time.sleep(0.2)
+    c.sweep()
+    assert c['a'] == 2
+    assert c['b'] == 3
+
+    time.sleep(0.2)
+    c.sweep()
+    c['b']
+    time.sleep(0.2)
+    c.sweep()
+    assert 'a' not in c
+    assert c['b'] == 3
+
+    time.sleep(0.5)
+    c.sweep()
+    assert 'a' not in c
+    assert 'b' not in c
+
+    global close_cb_called
+    close_cb_called = False
+
+    def close_cb(t):
+        global close_cb_called
+        assert not close_cb_called
+        close_cb_called = True
+
+    c = LRUCache(timeout=0.1, close_callback=close_cb)
+    c['s'] = 1
+    c['s']
+    time.sleep(0.1)
+    c['s']
+    time.sleep(0.3)
+    c.sweep()
+
+if __name__ == '__main__':
+    test()
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/manager.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/manager.py
new file mode 100644
index 0000000000..80d0a320bb
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/manager.py
@@ -0,0 +1,291 @@
+#!/usr/bin/python
+# -*- coding: utf-8 -*-
+#
+# Copyright 2015 clowwindy
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+import errno
+import traceback
+import socket
+import logging
+import json
+import collections
+
+from shadowsocks import common, eventloop, tcprelay, udprelay, asyncdns, shell
+
+
+BUF_SIZE = 1506
+STAT_SEND_LIMIT = 50
+
+
+class Manager(object):
+
+    def __init__(self, config):
+        self._config = config
+        self._relays = {}  # (tcprelay, udprelay)
+        self._loop = eventloop.EventLoop()
+        self._dns_resolver = asyncdns.DNSResolver()
+        self._dns_resolver.add_to_loop(self._loop)
+
+        self._statistics = collections.defaultdict(int)
+        self._control_client_addr = None
+        try:
+            manager_address = common.to_str(config['manager_address'])
+            if ':' in manager_address:
+                addr = manager_address.rsplit(':', 1)
+                addr = addr[0], int(addr[1])
+                addrs = socket.getaddrinfo(addr[0], addr[1])
+                if addrs:
+                    family = addrs[0][0]
+                else:
+                    logging.error('invalid address: %s', manager_address)
+                    exit(1)
+            else:
+                addr = manager_address
+                family = socket.AF_UNIX
+            self._control_socket = socket.socket(family,
+                                                 socket.SOCK_DGRAM)
+            self._control_socket.bind(addr)
+            self._control_socket.setblocking(False)
+        except (OSError, IOError) as e:
+            logging.error(e)
+            logging.error('can not bind to manager address')
+            exit(1)
+        self._loop.add(self._control_socket,
+                       eventloop.POLL_IN, self)
+        self._loop.add_periodic(self.handle_periodic)
+
+        port_password = config['port_password']
+        del config['port_password']
+        for port, password in port_password.items():
+            a_config = config.copy()
+            a_config['server_port'] = int(port)
+            a_config['password'] = password
+            self.add_port(a_config)
+
+    def add_port(self, config):
+        port = int(config['server_port'])
+        servers = self._relays.get(port, None)
+        if servers:
+            logging.error("server already exists at %s:%d" % (config['server'],
+                                                              port))
+            return
+        logging.info("adding server at %s:%d" % (config['server'], port))
+        t = tcprelay.TCPRelay(config, self._dns_resolver, False,
+                              stat_callback=self.stat_callback)
+        u = udprelay.UDPRelay(config, self._dns_resolver, False,
+                              stat_callback=self.stat_callback)
+        t.add_to_loop(self._loop)
+        u.add_to_loop(self._loop)
+        self._relays[port] = (t, u)
+
+    def remove_port(self, config):
+        port = int(config['server_port'])
+        servers = self._relays.get(port, None)
+        if servers:
+            logging.info("removing server at %s:%d" % (config['server'], port))
+            t, u = servers
+            t.close(next_tick=False)
+            u.close(next_tick=False)
+            del self._relays[port]
+        else:
+            logging.error("server not exist at %s:%d" % (config['server'],
+                                                         port))
+
+    def handle_event(self, sock, fd, event):
+        if sock == self._control_socket and event == eventloop.POLL_IN:
+            data, self._control_client_addr = sock.recvfrom(BUF_SIZE)
+            parsed = self._parse_command(data)
+            if parsed:
+                command, config = parsed
+                a_config = self._config.copy()
+                if config:
+                    # let the command override the configuration file
+                    a_config.update(config)
+                if 'server_port' not in a_config:
+                    logging.error('can not find server_port in config')
+                else:
+                    if command == 'add':
+                        self.add_port(a_config)
+                        self._send_control_data(b'ok')
+                    elif command == 'remove':
+                        self.remove_port(a_config)
+                        self._send_control_data(b'ok')
+                    elif command == 'ping':
+                        self._send_control_data(b'pong')
+                    else:
+                        logging.error('unknown command %s', command)
+
+    def _parse_command(self, data):
+        # commands:
+        # add: {"server_port": 8000, "password": "foobar"}
+        # remove: {"server_port": 8000"}
+        data = common.to_str(data)
+        parts = data.split(':', 1)
+        if len(parts) < 2:
+            return data, None
+        command, config_json = parts
+        try:
+            config = shell.parse_json_in_str(config_json)
+            return command, config
+        except Exception as e:
+            logging.error(e)
+            return None
+
+    def stat_callback(self, port, data_len):
+        self._statistics[port] += data_len
+
+    def handle_periodic(self):
+        r = {}
+        i = 0
+
+        def send_data(data_dict):
+            if data_dict:
+                # use compact JSON format (without space)
+                data = common.to_bytes(json.dumps(data_dict,
+                                                  separators=(',', ':')))
+                self._send_control_data(b'stat: ' + data)
+
+        for k, v in self._statistics.items():
+            r[k] = v
+            i += 1
+            # split the data into segments that fit in UDP packets
+            if i >= STAT_SEND_LIMIT:
+                send_data(r)
+                r.clear()
+                i = 0
+        if len(r) > 0 :
+            send_data(r)
+        self._statistics.clear()
+
+    def _send_control_data(self, data):
+        if self._control_client_addr:
+            try:
+                self._control_socket.sendto(data, self._control_client_addr)
+            except (socket.error, OSError, IOError) as e:
+                error_no = eventloop.errno_from_exception(e)
+                if error_no in (errno.EAGAIN, errno.EINPROGRESS,
+                                errno.EWOULDBLOCK):
+                    return
+                else:
+                    shell.print_exception(e)
+                    if self._config['verbose']:
+                        traceback.print_exc()
+
+    def run(self):
+        self._loop.run()
+
+
+def run(config):
+    Manager(config).run()
+
+
+def test():
+    import time
+    import threading
+    import struct
+    from shadowsocks import encrypt
+
+    logging.basicConfig(level=5,
+                        format='%(asctime)s %(levelname)-8s %(message)s',
+                        datefmt='%Y-%m-%d %H:%M:%S')
+    enc = []
+    eventloop.TIMEOUT_PRECISION = 1
+
+    def run_server():
+        config = shell.get_config(True)
+        config = config.copy()
+        a_config = {
+            'server': '127.0.0.1',
+            'local_port': 1081,
+            'port_password': {
+                '8381': 'foobar1',
+                '8382': 'foobar2'
+            },
+            'method': 'aes-256-cfb',
+            'manager_address': '127.0.0.1:6001',
+            'timeout': 60,
+            'fast_open': False,
+            'verbose': 2
+        }
+        config.update(a_config)
+        manager = Manager(config)
+        enc.append(manager)
+        manager.run()
+
+    t = threading.Thread(target=run_server)
+    t.start()
+    time.sleep(1)
+    manager = enc[0]
+    cli = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
+    cli.connect(('127.0.0.1', 6001))
+
+    # test add and remove
+    time.sleep(1)
+    cli.send(b'add: {"server_port":7001, "password":"asdfadsfasdf"}')
+    time.sleep(1)
+    assert 7001 in manager._relays
+    data, addr = cli.recvfrom(1506)
+    assert b'ok' in data
+
+    cli.send(b'remove: {"server_port":8381}')
+    time.sleep(1)
+    assert 8381 not in manager._relays
+    data, addr = cli.recvfrom(1506)
+    assert b'ok' in data
+    logging.info('add and remove test passed')
+
+    # test statistics for TCP
+    header = common.pack_addr(b'google.com') + struct.pack('>H', 80)
+    data = encrypt.encrypt_all(b'asdfadsfasdf', 'aes-256-cfb', 1,
+                               header + b'GET /\r\n\r\n')
+    tcp_cli = socket.socket()
+    tcp_cli.connect(('127.0.0.1', 7001))
+    tcp_cli.send(data)
+    tcp_cli.recv(4096)
+    tcp_cli.close()
+
+    data, addr = cli.recvfrom(1506)
+    data = common.to_str(data)
+    assert data.startswith('stat: ')
+    data = data.split('stat:')[1]
+    stats = shell.parse_json_in_str(data)
+    assert '7001' in stats
+    logging.info('TCP statistics test passed')
+
+    # test statistics for UDP
+    header = common.pack_addr(b'127.0.0.1') + struct.pack('>H', 80)
+    data = encrypt.encrypt_all(b'foobar2', 'aes-256-cfb', 1,
+                               header + b'test')
+    udp_cli = socket.socket(type=socket.SOCK_DGRAM)
+    udp_cli.sendto(data, ('127.0.0.1', 8382))
+    tcp_cli.close()
+
+    data, addr = cli.recvfrom(1506)
+    data = common.to_str(data)
+    assert data.startswith('stat: ')
+    data = data.split('stat:')[1]
+    stats = json.loads(data)
+    assert '8382' in stats
+    logging.info('UDP statistics test passed')
+
+    manager._loop.stop()
+    t.join()
+
+
+if __name__ == '__main__':
+    test()
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/obfs.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/obfs.py
new file mode 100644
index 0000000000..3dfdb141f1
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/obfs.py
@@ -0,0 +1,114 @@
+#!/usr/bin/env python
+#
+# Copyright 2015-2015 breakwa11
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+import os
+import sys
+import hashlib
+import logging
+
+from shadowsocks import common
+from shadowsocks.obfsplugin import plain, http_simple, obfs_tls, verify, auth, auth_chain
+
+
+method_supported = {}
+method_supported.update(plain.obfs_map)
+method_supported.update(http_simple.obfs_map)
+method_supported.update(obfs_tls.obfs_map)
+method_supported.update(verify.obfs_map)
+method_supported.update(auth.obfs_map)
+method_supported.update(auth_chain.obfs_map)
+
+def mu_protocol():
+    return ["auth_aes128_md5", "auth_aes128_sha1", "auth_chain_a"]
+
+class server_info(object):
+    def __init__(self, data):
+        self.data = data
+
+class obfs(object):
+    def __init__(self, method):
+        method = common.to_str(method)
+        self.method = method
+        self._method_info = self.get_method_info(method)
+        if self._method_info:
+            self.obfs = self.get_obfs(method)
+        else:
+            raise Exception('obfs plugin [%s] not supported' % method)
+
+    def init_data(self):
+        return self.obfs.init_data()
+
+    def set_server_info(self, server_info):
+        return self.obfs.set_server_info(server_info)
+
+    def get_server_info(self):
+        return self.obfs.get_server_info()
+
+    def get_method_info(self, method):
+        method = method.lower()
+        m = method_supported.get(method)
+        return m
+
+    def get_obfs(self, method):
+        m = self._method_info
+        return m[0](method)
+
+    def get_overhead(self, direction):
+        return self.obfs.get_overhead(direction)
+
+    def client_pre_encrypt(self, buf):
+        return self.obfs.client_pre_encrypt(buf)
+
+    def client_encode(self, buf):
+        return self.obfs.client_encode(buf)
+
+    def client_decode(self, buf):
+        return self.obfs.client_decode(buf)
+
+    def client_post_decrypt(self, buf):
+        return self.obfs.client_post_decrypt(buf)
+
+    def server_pre_encrypt(self, buf):
+        return self.obfs.server_pre_encrypt(buf)
+
+    def server_encode(self, buf):
+        return self.obfs.server_encode(buf)
+
+    def server_decode(self, buf):
+        return self.obfs.server_decode(buf)
+
+    def server_post_decrypt(self, buf):
+        return self.obfs.server_post_decrypt(buf)
+
+    def client_udp_pre_encrypt(self, buf):
+        return self.obfs.client_udp_pre_encrypt(buf)
+
+    def client_udp_post_decrypt(self, buf):
+        return self.obfs.client_udp_post_decrypt(buf)
+
+    def server_udp_pre_encrypt(self, buf, uid):
+        return self.obfs.server_udp_pre_encrypt(buf, uid)
+
+    def server_udp_post_decrypt(self, buf):
+        return self.obfs.server_udp_post_decrypt(buf)
+
+    def dispose(self):
+        self.obfs.dispose()
+        del self.obfs
+
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/obfsplugin/__init__.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/obfsplugin/__init__.py
new file mode 100644
index 0000000000..401c7b726e
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/obfsplugin/__init__.py
@@ -0,0 +1,18 @@
+#!/usr/bin/env python
+#
+# Copyright 2015 clowwindy
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/obfsplugin/auth.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/obfsplugin/auth.py
new file mode 100644
index 0000000000..a745e098fc
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/obfsplugin/auth.py
@@ -0,0 +1,787 @@
+#!/usr/bin/env python
+#
+# Copyright 2015-2015 breakwa11
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+import os
+import sys
+import hashlib
+import logging
+import binascii
+import base64
+import time
+import datetime
+import random
+import math
+import struct
+import zlib
+import hmac
+import hashlib
+
+import shadowsocks
+from shadowsocks import common, lru_cache, encrypt
+from shadowsocks.obfsplugin import plain
+from shadowsocks.common import to_bytes, to_str, ord, chr
+
+def create_auth_sha1_v4(method):
+    return auth_sha1_v4(method)
+
+def create_auth_aes128_md5(method):
+    return auth_aes128_sha1(method, hashlib.md5)
+
+def create_auth_aes128_sha1(method):
+    return auth_aes128_sha1(method, hashlib.sha1)
+
+obfs_map = {
+        'auth_sha1_v4': (create_auth_sha1_v4,),
+        'auth_sha1_v4_compatible': (create_auth_sha1_v4,),
+        'auth_aes128_md5': (create_auth_aes128_md5,),
+        'auth_aes128_sha1': (create_auth_aes128_sha1,),
+}
+
+def match_begin(str1, str2):
+    if len(str1) >= len(str2):
+        if str1[:len(str2)] == str2:
+            return True
+    return False
+
+class auth_base(plain.plain):
+    def __init__(self, method):
+        super(auth_base, self).__init__(method)
+        self.method = method
+        self.no_compatible_method = ''
+        self.overhead = 7
+
+    def init_data(self):
+        return ''
+
+    def get_overhead(self, direction): # direction: true for c->s false for s->c
+        return self.overhead
+
+    def set_server_info(self, server_info):
+        self.server_info = server_info
+
+    def client_encode(self, buf):
+        return buf
+
+    def client_decode(self, buf):
+        return (buf, False)
+
+    def server_encode(self, buf):
+        return buf
+
+    def server_decode(self, buf):
+        return (buf, True, False)
+
+    def not_match_return(self, buf):
+        self.raw_trans = True
+        self.overhead = 0
+        if self.method == self.no_compatible_method:
+            return (b'E'*2048, False)
+        return (buf, False)
+
+class client_queue(object):
+    def __init__(self, begin_id):
+        self.front = begin_id - 64
+        self.back = begin_id + 1
+        self.alloc = {}
+        self.enable = True
+        self.last_update = time.time()
+
+    def update(self):
+        self.last_update = time.time()
+
+    def is_active(self):
+        return time.time() - self.last_update < 60 * 3
+
+    def re_enable(self, connection_id):
+        self.enable = True
+        self.front = connection_id - 64
+        self.back = connection_id + 1
+        self.alloc = {}
+
+    def insert(self, connection_id):
+        if not self.enable:
+            logging.warn('obfs auth: not enable')
+            return False
+        if not self.is_active():
+            self.re_enable(connection_id)
+        self.update()
+        if connection_id < self.front:
+            logging.warn('obfs auth: deprecated id, someone replay attack')
+            return False
+        if connection_id > self.front + 0x4000:
+            logging.warn('obfs auth: wrong id')
+            return False
+        if connection_id in self.alloc:
+            logging.warn('obfs auth: duplicate id, someone replay attack')
+            return False
+        if self.back <= connection_id:
+            self.back = connection_id + 1
+        self.alloc[connection_id] = 1
+        while (self.front in self.alloc) or self.front + 0x1000 < self.back:
+            if self.front in self.alloc:
+                del self.alloc[self.front]
+            self.front += 1
+        return True
+
+class obfs_auth_v2_data(object):
+    def __init__(self):
+        self.client_id = lru_cache.LRUCache()
+        self.local_client_id = b''
+        self.connection_id = 0
+        self.set_max_client(64) # max active client count
+
+    def update(self, client_id, connection_id):
+        if client_id in self.client_id:
+            self.client_id[client_id].update()
+
+    def set_max_client(self, max_client):
+        self.max_client = max_client
+        self.max_buffer = max(self.max_client * 2, 1024)
+
+    def insert(self, client_id, connection_id):
+        if self.client_id.get(client_id, None) is None or not self.client_id[client_id].enable:
+            if self.client_id.first() is None or len(self.client_id) < self.max_client:
+                if client_id not in self.client_id:
+                    #TODO: check
+                    self.client_id[client_id] = client_queue(connection_id)
+                else:
+                    self.client_id[client_id].re_enable(connection_id)
+                return self.client_id[client_id].insert(connection_id)
+
+            if not self.client_id[self.client_id.first()].is_active():
+                del self.client_id[self.client_id.first()]
+                if client_id not in self.client_id:
+                    #TODO: check
+                    self.client_id[client_id] = client_queue(connection_id)
+                else:
+                    self.client_id[client_id].re_enable(connection_id)
+                return self.client_id[client_id].insert(connection_id)
+
+            logging.warn('auth_sha1_v2: no inactive client')
+            return False
+        else:
+            return self.client_id[client_id].insert(connection_id)
+
+class auth_sha1_v4(auth_base):
+    def __init__(self, method):
+        super(auth_sha1_v4, self).__init__(method)
+        self.recv_buf = b''
+        self.unit_len = 8100
+        self.decrypt_packet_num = 0
+        self.raw_trans = False
+        self.has_sent_header = False
+        self.has_recv_header = False
+        self.client_id = 0
+        self.connection_id = 0
+        self.max_time_dif = 60 * 60 * 24 # time dif (second) setting
+        self.salt = b"auth_sha1_v4"
+        self.no_compatible_method = 'auth_sha1_v4'
+
+    def init_data(self):
+        return obfs_auth_v2_data()
+
+    def set_server_info(self, server_info):
+        self.server_info = server_info
+        try:
+            max_client = int(server_info.protocol_param)
+        except:
+            max_client = 64
+        self.server_info.data.set_max_client(max_client)
+
+    def rnd_data(self, buf_size):
+        if buf_size > 1200:
+            return b'\x01'
+
+        if buf_size > 400:
+            rnd_data = os.urandom(common.ord(os.urandom(1)[0]) % 256)
+        else:
+            rnd_data = os.urandom(struct.unpack('>H', os.urandom(2))[0] % 512)
+
+        if len(rnd_data) < 128:
+            return common.chr(len(rnd_data) + 1) + rnd_data
+        else:
+            return common.chr(255) + struct.pack('>H', len(rnd_data) + 3) + rnd_data
+
+    def pack_data(self, buf):
+        data = self.rnd_data(len(buf)) + buf
+        data_len = len(data) + 8
+        crc = binascii.crc32(struct.pack('>H', data_len)) & 0xFFFF
+        data = struct.pack('<H', crc) + data
+        data = struct.pack('>H', data_len) + data
+        adler32 = zlib.adler32(data) & 0xFFFFFFFF
+        data += struct.pack('<I', adler32)
+        return data
+
+    def pack_auth_data(self, buf):
+        if len(buf) == 0:
+            return b''
+        data = self.rnd_data(len(buf)) + buf
+        data_len = len(data) + 16
+        crc = binascii.crc32(struct.pack('>H', data_len) + self.salt + self.server_info.key) & 0xFFFFFFFF
+        data = struct.pack('<I', crc) + data
+        data = struct.pack('>H', data_len) + data
+        data += hmac.new(self.server_info.iv + self.server_info.key, data, hashlib.sha1).digest()[:10]
+        return data
+
+    def auth_data(self):
+        utc_time = int(time.time()) & 0xFFFFFFFF
+        if self.server_info.data.connection_id > 0xFF000000:
+            self.server_info.data.local_client_id = b''
+        if not self.server_info.data.local_client_id:
+            self.server_info.data.local_client_id = os.urandom(4)
+            logging.debug("local_client_id %s" % (binascii.hexlify(self.server_info.data.local_client_id),))
+            self.server_info.data.connection_id = struct.unpack('<I', os.urandom(4))[0] & 0xFFFFFF
+        self.server_info.data.connection_id += 1
+        return b''.join([struct.pack('<I', utc_time),
+                self.server_info.data.local_client_id,
+                struct.pack('<I', self.server_info.data.connection_id)])
+
+    def client_pre_encrypt(self, buf):
+        ret = b''
+        if not self.has_sent_header:
+            head_size = self.get_head_size(buf, 30)
+            datalen = min(len(buf), random.randint(0, 31) + head_size)
+            ret += self.pack_auth_data(self.auth_data() + buf[:datalen])
+            buf = buf[datalen:]
+            self.has_sent_header = True
+        while len(buf) > self.unit_len:
+            ret += self.pack_data(buf[:self.unit_len])
+            buf = buf[self.unit_len:]
+        ret += self.pack_data(buf)
+        return ret
+
+    def client_post_decrypt(self, buf):
+        if self.raw_trans:
+            return buf
+        self.recv_buf += buf
+        out_buf = b''
+        while len(self.recv_buf) > 4:
+            crc = struct.pack('<H', binascii.crc32(self.recv_buf[:2]) & 0xFFFF)
+            if crc != self.recv_buf[2:4]:
+                raise Exception('client_post_decrypt data uncorrect crc')
+            length = struct.unpack('>H', self.recv_buf[:2])[0]
+            if length >= 8192 or length < 7:
+                self.raw_trans = True
+                self.recv_buf = b''
+                raise Exception('client_post_decrypt data error')
+            if length > len(self.recv_buf):
+                break
+
+            if struct.pack('<I', zlib.adler32(self.recv_buf[:length - 4]) & 0xFFFFFFFF) != self.recv_buf[length - 4:length]:
+                self.raw_trans = True
+                self.recv_buf = b''
+                raise Exception('client_post_decrypt data uncorrect checksum')
+
+            pos = common.ord(self.recv_buf[4])
+            if pos < 255:
+                pos += 4
+            else:
+                pos = struct.unpack('>H', self.recv_buf[5:7])[0] + 4
+            out_buf += self.recv_buf[pos:length - 4]
+            self.recv_buf = self.recv_buf[length:]
+
+        if out_buf:
+            self.decrypt_packet_num += 1
+        return out_buf
+
+    def server_pre_encrypt(self, buf):
+        if self.raw_trans:
+            return buf
+        ret = b''
+        while len(buf) > self.unit_len:
+            ret += self.pack_data(buf[:self.unit_len])
+            buf = buf[self.unit_len:]
+        ret += self.pack_data(buf)
+        return ret
+
+    def server_post_decrypt(self, buf):
+        if self.raw_trans:
+            return (buf, False)
+        self.recv_buf += buf
+        out_buf = b''
+        sendback = False
+
+        if not self.has_recv_header:
+            if len(self.recv_buf) <= 6:
+                return (b'', False)
+            crc = struct.pack('<I', binascii.crc32(self.recv_buf[:2] + self.salt + self.server_info.key) & 0xFFFFFFFF)
+            if crc != self.recv_buf[2:6]:
+                return self.not_match_return(self.recv_buf)
+            length = struct.unpack('>H', self.recv_buf[:2])[0]
+            if length > len(self.recv_buf):
+                return (b'', False)
+            sha1data = hmac.new(self.server_info.recv_iv + self.server_info.key, self.recv_buf[:length - 10], hashlib.sha1).digest()[:10]
+            if sha1data != self.recv_buf[length - 10:length]:
+                logging.error('auth_sha1_v4 data uncorrect auth HMAC-SHA1')
+                return self.not_match_return(self.recv_buf)
+            pos = common.ord(self.recv_buf[6])
+            if pos < 255:
+                pos += 6
+            else:
+                pos = struct.unpack('>H', self.recv_buf[7:9])[0] + 6
+            out_buf = self.recv_buf[pos:length - 10]
+            if len(out_buf) < 12:
+                logging.info('auth_sha1_v4: too short, data %s' % (binascii.hexlify(self.recv_buf),))
+                return self.not_match_return(self.recv_buf)
+            utc_time = struct.unpack('<I', out_buf[:4])[0]
+            client_id = struct.unpack('<I', out_buf[4:8])[0]
+            connection_id = struct.unpack('<I', out_buf[8:12])[0]
+            time_dif = common.int32(utc_time - (int(time.time()) & 0xffffffff))
+            if time_dif < -self.max_time_dif or time_dif > self.max_time_dif:
+                logging.info('auth_sha1_v4: wrong timestamp, time_dif %d, data %s' % (time_dif, binascii.hexlify(out_buf),))
+                return self.not_match_return(self.recv_buf)
+            elif self.server_info.data.insert(client_id, connection_id):
+                self.has_recv_header = True
+                out_buf = out_buf[12:]
+                self.client_id = client_id
+                self.connection_id = connection_id
+            else:
+                logging.info('auth_sha1_v4: auth fail, data %s' % (binascii.hexlify(out_buf),))
+                return self.not_match_return(self.recv_buf)
+            self.recv_buf = self.recv_buf[length:]
+            self.has_recv_header = True
+            sendback = True
+
+        while len(self.recv_buf) > 4:
+            crc = struct.pack('<H', binascii.crc32(self.recv_buf[:2]) & 0xFFFF)
+            if crc != self.recv_buf[2:4]:
+                self.raw_trans = True
+                logging.info('auth_sha1_v4: wrong crc')
+                if self.decrypt_packet_num == 0:
+                    logging.info('auth_sha1_v4: wrong crc')
+                    return (b'E'*2048, False)
+                else:
+                    raise Exception('server_post_decrype data error')
+            length = struct.unpack('>H', self.recv_buf[:2])[0]
+            if length >= 8192 or length < 7:
+                self.raw_trans = True
+                self.recv_buf = b''
+                if self.decrypt_packet_num == 0:
+                    logging.info('auth_sha1_v4: over size')
+                    return (b'E'*2048, False)
+                else:
+                    raise Exception('server_post_decrype data error')
+            if length > len(self.recv_buf):
+                break
+
+            if struct.pack('<I', zlib.adler32(self.recv_buf[:length - 4]) & 0xFFFFFFFF) != self.recv_buf[length - 4:length]:
+                logging.info('auth_sha1_v4: checksum error, data %s' % (binascii.hexlify(self.recv_buf[:length]),))
+                self.raw_trans = True
+                self.recv_buf = b''
+                if self.decrypt_packet_num == 0:
+                    return (b'E'*2048, False)
+                else:
+                    raise Exception('server_post_decrype data uncorrect checksum')
+
+            pos = common.ord(self.recv_buf[4])
+            if pos < 255:
+                pos += 4
+            else:
+                pos = struct.unpack('>H', self.recv_buf[5:7])[0] + 4
+            out_buf += self.recv_buf[pos:length - 4]
+            self.recv_buf = self.recv_buf[length:]
+            if pos == length - 4:
+                sendback = True
+
+        if out_buf:
+            self.server_info.data.update(self.client_id, self.connection_id)
+            self.decrypt_packet_num += 1
+        return (out_buf, sendback)
+
+class obfs_auth_mu_data(object):
+    def __init__(self):
+        self.user_id = {}
+        self.local_client_id = b''
+        self.connection_id = 0
+        self.set_max_client(64) # max active client count
+
+    def update(self, user_id, client_id, connection_id):
+        if user_id not in self.user_id:
+            self.user_id[user_id] = lru_cache.LRUCache()
+        local_client_id = self.user_id[user_id]
+
+        if client_id in local_client_id:
+            local_client_id[client_id].update()
+
+    def set_max_client(self, max_client):
+        self.max_client = max_client
+        self.max_buffer = max(self.max_client * 2, 1024)
+
+    def insert(self, user_id, client_id, connection_id):
+        if user_id not in self.user_id:
+            self.user_id[user_id] = lru_cache.LRUCache()
+        local_client_id = self.user_id[user_id]
+
+        if local_client_id.get(client_id, None) is None or not local_client_id[client_id].enable:
+            if local_client_id.first() is None or len(local_client_id) < self.max_client:
+                if client_id not in local_client_id:
+                    #TODO: check
+                    local_client_id[client_id] = client_queue(connection_id)
+                else:
+                    local_client_id[client_id].re_enable(connection_id)
+                return local_client_id[client_id].insert(connection_id)
+
+            if not local_client_id[local_client_id.first()].is_active():
+                del local_client_id[local_client_id.first()]
+                if client_id not in local_client_id:
+                    #TODO: check
+                    local_client_id[client_id] = client_queue(connection_id)
+                else:
+                    local_client_id[client_id].re_enable(connection_id)
+                return local_client_id[client_id].insert(connection_id)
+
+            logging.warn('auth_aes128: no inactive client')
+            return False
+        else:
+            return local_client_id[client_id].insert(connection_id)
+
+class auth_aes128_sha1(auth_base):
+    def __init__(self, method, hashfunc):
+        super(auth_aes128_sha1, self).__init__(method)
+        self.hashfunc = hashfunc
+        self.recv_buf = b''
+        self.unit_len = 8100
+        self.raw_trans = False
+        self.has_sent_header = False
+        self.has_recv_header = False
+        self.client_id = 0
+        self.connection_id = 0
+        self.max_time_dif = 60 * 60 * 24 # time dif (second) setting
+        self.salt = hashfunc == hashlib.md5 and b"auth_aes128_md5" or b"auth_aes128_sha1"
+        self.no_compatible_method = hashfunc == hashlib.md5 and "auth_aes128_md5" or 'auth_aes128_sha1'
+        self.extra_wait_size = struct.unpack('>H', os.urandom(2))[0] % 1024
+        self.pack_id = 1
+        self.recv_id = 1
+        self.user_id = None
+        self.user_key = None
+        self.last_rnd_len = 0
+        self.overhead = 9
+
+    def init_data(self):
+        return obfs_auth_mu_data()
+
+    def get_overhead(self, direction): # direction: true for c->s false for s->c
+        return self.overhead
+
+    def set_server_info(self, server_info):
+        self.server_info = server_info
+        try:
+            max_client = int(server_info.protocol_param.split('#')[0])
+        except:
+            max_client = 64
+        self.server_info.data.set_max_client(max_client)
+
+    def trapezoid_random_float(self, d):
+        if d == 0:
+            return random.random()
+        s = random.random()
+        a = 1 - d
+        return (math.sqrt(a * a + 4 * d * s) - a) / (2 * d)
+
+    def trapezoid_random_int(self, max_val, d):
+        v = self.trapezoid_random_float(d)
+        return int(v * max_val)
+
+    def rnd_data_len(self, buf_size, full_buf_size):
+        if full_buf_size >= self.server_info.buffer_size:
+            return 0
+        tcp_mss = self.server_info.tcp_mss
+        rev_len = tcp_mss - buf_size - 9
+        if rev_len == 0:
+            return 0
+        if rev_len < 0:
+            if rev_len > -tcp_mss:
+                return self.trapezoid_random_int(rev_len + tcp_mss, -0.3)
+            return common.ord(os.urandom(1)[0]) % 32
+        if buf_size > 900:
+            return struct.unpack('>H', os.urandom(2))[0] % rev_len
+        return self.trapezoid_random_int(rev_len, -0.3)
+
+    def rnd_data(self, buf_size, full_buf_size):
+        data_len = self.rnd_data_len(buf_size, full_buf_size)
+
+        if data_len < 128:
+            return common.chr(data_len + 1) + os.urandom(data_len)
+
+        return common.chr(255) + struct.pack('<H', data_len + 1) + os.urandom(data_len - 2)
+
+    def pack_data(self, buf, full_buf_size):
+        data = self.rnd_data(len(buf), full_buf_size) + buf
+        data_len = len(data) + 8
+        mac_key = self.user_key + struct.pack('<I', self.pack_id)
+        mac = hmac.new(mac_key, struct.pack('<H', data_len), self.hashfunc).digest()[:2]
+        data = struct.pack('<H', data_len) + mac + data
+        data += hmac.new(mac_key, data, self.hashfunc).digest()[:4]
+        self.pack_id = (self.pack_id + 1) & 0xFFFFFFFF
+        return data
+
+    def pack_auth_data(self, auth_data, buf):
+        if len(buf) == 0:
+            return b''
+        if len(buf) > 400:
+            rnd_len = struct.unpack('<H', os.urandom(2))[0] % 512
+        else:
+            rnd_len = struct.unpack('<H', os.urandom(2))[0] % 1024
+        data = auth_data
+        data_len = 7 + 4 + 16 + 4 + len(buf) + rnd_len + 4
+        data = data + struct.pack('<H', data_len) + struct.pack('<H', rnd_len)
+        mac_key = self.server_info.iv + self.server_info.key
+        uid = os.urandom(4)
+        if b':' in to_bytes(self.server_info.protocol_param):
+            try:
+                items = to_bytes(self.server_info.protocol_param).split(b':')
+                self.user_key = self.hashfunc(items[1]).digest()
+                uid = struct.pack('<I', int(items[0]))
+            except:
+                pass
+        if self.user_key is None:
+            self.user_key = self.server_info.key
+        encryptor = encrypt.Encryptor(to_bytes(base64.b64encode(self.user_key)) + self.salt, 'aes-128-cbc', b'\x00' * 16)
+        data = uid + encryptor.encrypt(data)[16:]
+        data += hmac.new(mac_key, data, self.hashfunc).digest()[:4]
+        check_head = os.urandom(1)
+        check_head += hmac.new(mac_key, check_head, self.hashfunc).digest()[:6]
+        data = check_head + data + os.urandom(rnd_len) + buf
+        data += hmac.new(self.user_key, data, self.hashfunc).digest()[:4]
+        return data
+
+    def auth_data(self):
+        utc_time = int(time.time()) & 0xFFFFFFFF
+        if self.server_info.data.connection_id > 0xFF000000:
+            self.server_info.data.local_client_id = b''
+        if not self.server_info.data.local_client_id:
+            self.server_info.data.local_client_id = os.urandom(4)
+            logging.debug("local_client_id %s" % (binascii.hexlify(self.server_info.data.local_client_id),))
+            self.server_info.data.connection_id = struct.unpack('<I', os.urandom(4))[0] & 0xFFFFFF
+        self.server_info.data.connection_id += 1
+        return b''.join([struct.pack('<I', utc_time),
+                self.server_info.data.local_client_id,
+                struct.pack('<I', self.server_info.data.connection_id)])
+
+    def client_pre_encrypt(self, buf):
+        ret = b''
+        ogn_data_len = len(buf)
+        if not self.has_sent_header:
+            head_size = self.get_head_size(buf, 30)
+            datalen = min(len(buf), random.randint(0, 31) + head_size)
+            ret += self.pack_auth_data(self.auth_data(), buf[:datalen])
+            buf = buf[datalen:]
+            self.has_sent_header = True
+        while len(buf) > self.unit_len:
+            ret += self.pack_data(buf[:self.unit_len], ogn_data_len)
+            buf = buf[self.unit_len:]
+        ret += self.pack_data(buf, ogn_data_len)
+        self.last_rnd_len = ogn_data_len
+        return ret
+
+    def client_post_decrypt(self, buf):
+        if self.raw_trans:
+            return buf
+        self.recv_buf += buf
+        out_buf = b''
+        while len(self.recv_buf) > 4:
+            mac_key = self.user_key + struct.pack('<I', self.recv_id)
+            mac = hmac.new(mac_key, self.recv_buf[:2], self.hashfunc).digest()[:2]
+            if mac != self.recv_buf[2:4]:
+                raise Exception('client_post_decrypt data uncorrect mac')
+            length = struct.unpack('<H', self.recv_buf[:2])[0]
+            if length >= 8192 or length < 7:
+                self.raw_trans = True
+                self.recv_buf = b''
+                raise Exception('client_post_decrypt data error')
+            if length > len(self.recv_buf):
+                break
+
+            if hmac.new(mac_key, self.recv_buf[:length - 4], self.hashfunc).digest()[:4] != self.recv_buf[length - 4:length]:
+                self.raw_trans = True
+                self.recv_buf = b''
+                raise Exception('client_post_decrypt data uncorrect checksum')
+
+            self.recv_id = (self.recv_id + 1) & 0xFFFFFFFF
+            pos = common.ord(self.recv_buf[4])
+            if pos < 255:
+                pos += 4
+            else:
+                pos = struct.unpack('<H', self.recv_buf[5:7])[0] + 4
+            out_buf += self.recv_buf[pos:length - 4]
+            self.recv_buf = self.recv_buf[length:]
+
+        return out_buf
+
+    def server_pre_encrypt(self, buf):
+        if self.raw_trans:
+            return buf
+        ret = b''
+        ogn_data_len = len(buf)
+        while len(buf) > self.unit_len:
+            ret += self.pack_data(buf[:self.unit_len], ogn_data_len)
+            buf = buf[self.unit_len:]
+        ret += self.pack_data(buf, ogn_data_len)
+        self.last_rnd_len = ogn_data_len
+        return ret
+
+    def server_post_decrypt(self, buf):
+        if self.raw_trans:
+            return (buf, False)
+        self.recv_buf += buf
+        out_buf = b''
+        sendback = False
+
+        if not self.has_recv_header:
+            if len(self.recv_buf) >= 7 or len(self.recv_buf) in [2, 3]:
+                recv_len = min(len(self.recv_buf), 7)
+                mac_key = self.server_info.recv_iv + self.server_info.key
+                sha1data = hmac.new(mac_key, self.recv_buf[:1], self.hashfunc).digest()[:recv_len - 1]
+                if sha1data != self.recv_buf[1:recv_len]:
+                    return self.not_match_return(self.recv_buf)
+
+            if len(self.recv_buf) < 31:
+                return (b'', False)
+            sha1data = hmac.new(mac_key, self.recv_buf[7:27], self.hashfunc).digest()[:4]
+            if sha1data != self.recv_buf[27:31]:
+                logging.error('%s data uncorrect auth HMAC-SHA1 from %s:%d, data %s' % (self.no_compatible_method, self.server_info.client, self.server_info.client_port, binascii.hexlify(self.recv_buf)))
+                if len(self.recv_buf) < 31 + self.extra_wait_size:
+                    return (b'', False)
+                return self.not_match_return(self.recv_buf)
+
+            uid = self.recv_buf[7:11]
+            if uid in self.server_info.users:
+                self.user_id = uid
+                self.user_key = self.hashfunc(self.server_info.users[uid]).digest()
+                self.server_info.update_user_func(uid)
+            else:
+                if not self.server_info.users:
+                    self.user_key = self.server_info.key
+                else:
+                    self.user_key = self.server_info.recv_iv
+            encryptor = encrypt.Encryptor(to_bytes(base64.b64encode(self.user_key)) + self.salt, 'aes-128-cbc')
+            head = encryptor.decrypt(b'\x00' * 16 + self.recv_buf[11:27] + b'\x00') # need an extra byte or recv empty
+            length = struct.unpack('<H', head[12:14])[0]
+            if len(self.recv_buf) < length:
+                return (b'', False)
+
+            utc_time = struct.unpack('<I', head[:4])[0]
+            client_id = struct.unpack('<I', head[4:8])[0]
+            connection_id = struct.unpack('<I', head[8:12])[0]
+            rnd_len = struct.unpack('<H', head[14:16])[0]
+            if hmac.new(self.user_key, self.recv_buf[:length - 4], self.hashfunc).digest()[:4] != self.recv_buf[length - 4:length]:
+                logging.info('%s: checksum error, data %s' % (self.no_compatible_method, binascii.hexlify(self.recv_buf[:length])))
+                return self.not_match_return(self.recv_buf)
+            time_dif = common.int32(utc_time - (int(time.time()) & 0xffffffff))
+            if time_dif < -self.max_time_dif or time_dif > self.max_time_dif:
+                logging.info('%s: wrong timestamp, time_dif %d, data %s' % (self.no_compatible_method, time_dif, binascii.hexlify(head)))
+                return self.not_match_return(self.recv_buf)
+            elif self.server_info.data.insert(self.user_id, client_id, connection_id):
+                self.has_recv_header = True
+                out_buf = self.recv_buf[31 + rnd_len:length - 4]
+                self.client_id = client_id
+                self.connection_id = connection_id
+            else:
+                logging.info('%s: auth fail, data %s' % (self.no_compatible_method, binascii.hexlify(out_buf)))
+                return self.not_match_return(self.recv_buf)
+            self.recv_buf = self.recv_buf[length:]
+            self.has_recv_header = True
+            sendback = True
+
+        while len(self.recv_buf) > 4:
+            mac_key = self.user_key + struct.pack('<I', self.recv_id)
+            mac = hmac.new(mac_key, self.recv_buf[:2], self.hashfunc).digest()[:2]
+            if mac != self.recv_buf[2:4]:
+                self.raw_trans = True
+                logging.info(self.no_compatible_method + ': wrong crc')
+                if self.recv_id == 0:
+                    logging.info(self.no_compatible_method + ': wrong crc')
+                    return (b'E'*2048, False)
+                else:
+                    raise Exception('server_post_decrype data error')
+            length = struct.unpack('<H', self.recv_buf[:2])[0]
+            if length >= 8192 or length < 7:
+                self.raw_trans = True
+                self.recv_buf = b''
+                if self.recv_id == 0:
+                    logging.info(self.no_compatible_method + ': over size')
+                    return (b'E'*2048, False)
+                else:
+                    raise Exception('server_post_decrype data error')
+            if length > len(self.recv_buf):
+                break
+
+            if hmac.new(mac_key, self.recv_buf[:length - 4], self.hashfunc).digest()[:4] != self.recv_buf[length - 4:length]:
+                logging.info('%s: checksum error, data %s' % (self.no_compatible_method, binascii.hexlify(self.recv_buf[:length])))
+                self.raw_trans = True
+                self.recv_buf = b''
+                if self.recv_id == 0:
+                    return (b'E'*2048, False)
+                else:
+                    raise Exception('server_post_decrype data uncorrect checksum')
+
+            self.recv_id = (self.recv_id + 1) & 0xFFFFFFFF
+            pos = common.ord(self.recv_buf[4])
+            if pos < 255:
+                pos += 4
+            else:
+                pos = struct.unpack('<H', self.recv_buf[5:7])[0] + 4
+            out_buf += self.recv_buf[pos:length - 4]
+            self.recv_buf = self.recv_buf[length:]
+            if pos == length - 4:
+                sendback = True
+
+        if out_buf:
+            self.server_info.data.update(self.user_id, self.client_id, self.connection_id)
+        return (out_buf, sendback)
+
+    def client_udp_pre_encrypt(self, buf):
+        if self.user_key is None:
+            if b':' in to_bytes(self.server_info.protocol_param):
+                try:
+                    items = to_bytes(self.server_info.protocol_param).split(':')
+                    self.user_key = self.hashfunc(items[1]).digest()
+                    self.user_id = struct.pack('<I', int(items[0]))
+                except:
+                    pass
+            if self.user_key is None:
+                self.user_id = os.urandom(4)
+                self.user_key = self.server_info.key
+        buf += self.user_id
+        return buf + hmac.new(self.user_key, buf, self.hashfunc).digest()[:4]
+
+    def client_udp_post_decrypt(self, buf):
+        user_key = self.server_info.key
+        if hmac.new(user_key, buf[:-4], self.hashfunc).digest()[:4] != buf[-4:]:
+            return b''
+        return buf[:-4]
+
+    def server_udp_pre_encrypt(self, buf, uid):
+        user_key = self.server_info.key
+        return buf + hmac.new(user_key, buf, self.hashfunc).digest()[:4]
+
+    def server_udp_post_decrypt(self, buf):
+        uid = buf[-8:-4]
+        if uid in self.server_info.users:
+            user_key = self.hashfunc(self.server_info.users[uid]).digest()
+        else:
+            uid = None
+            if not self.server_info.users:
+                user_key = self.server_info.key
+            else:
+                user_key = self.server_info.recv_iv
+        if hmac.new(user_key, buf[:-4], self.hashfunc).digest()[:4] != buf[-4:]:
+            return (b'', None)
+        return (buf[:-8], uid)
+
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/obfsplugin/auth_chain.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/obfsplugin/auth_chain.py
new file mode 100644
index 0000000000..b11d545b36
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/obfsplugin/auth_chain.py
@@ -0,0 +1,840 @@
+#!/usr/bin/env python
+# -*- coding: utf-8 -*-
+#
+# Copyright 2015-2015 breakwa11
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+import os
+import sys
+import hashlib
+import logging
+import binascii
+import base64
+import time
+import datetime
+import random
+import math
+import struct
+import zlib
+import hmac
+import hashlib
+import bisect
+
+import shadowsocks
+from shadowsocks import common, lru_cache, encrypt
+from shadowsocks.obfsplugin import plain
+from shadowsocks.common import to_bytes, to_str, ord, chr
+
+
+def create_auth_chain_a(method):
+    return auth_chain_a(method)
+
+
+def create_auth_chain_b(method):
+    return auth_chain_b(method)
+
+
+def create_auth_chain_c(method):
+    return auth_chain_c(method)
+
+
+def create_auth_chain_d(method):
+    return auth_chain_d(method)
+
+
+obfs_map = {
+    'auth_chain_a': (create_auth_chain_a,),
+    'auth_chain_b': (create_auth_chain_b,),
+    'auth_chain_c': (create_auth_chain_c,),
+    'auth_chain_d': (create_auth_chain_d,),
+}
+
+
+class xorshift128plus(object):
+    max_int = (1 << 64) - 1
+    mov_mask = (1 << (64 - 23)) - 1
+
+    def __init__(self):
+        self.v0 = 0
+        self.v1 = 0
+
+    def next(self):
+        x = self.v0
+        y = self.v1
+        self.v0 = y
+        x ^= ((x & xorshift128plus.mov_mask) << 23)
+        x ^= (y ^ (x >> 17) ^ (y >> 26)) & xorshift128plus.max_int
+        self.v1 = x
+        return (x + y) & xorshift128plus.max_int
+
+    def init_from_bin(self, bin):
+        bin += b'\0' * 16
+        self.v0 = struct.unpack('<Q', bin[:8])[0]
+        self.v1 = struct.unpack('<Q', bin[8:16])[0]
+
+    def init_from_bin_len(self, bin, length):
+        bin += b'\0' * 16
+        bin = struct.pack('<H', length) + bin[2:]
+        self.v0 = struct.unpack('<Q', bin[:8])[0]
+        self.v1 = struct.unpack('<Q', bin[8:16])[0]
+
+        for i in range(4):
+            self.next()
+
+
+def match_begin(str1, str2):
+    if len(str1) >= len(str2):
+        if str1[:len(str2)] == str2:
+            return True
+    return False
+
+
+class auth_base(plain.plain):
+    def __init__(self, method):
+        super(auth_base, self).__init__(method)
+        self.method = method
+        self.no_compatible_method = ''
+        self.overhead = 4
+
+    def init_data(self):
+        return ''
+
+    def get_overhead(self, direction):  # direction: true for c->s false for s->c
+        return self.overhead
+
+    def set_server_info(self, server_info):
+        self.server_info = server_info
+
+    def client_encode(self, buf):
+        return buf
+
+    def client_decode(self, buf):
+        return (buf, False)
+
+    def server_encode(self, buf):
+        return buf
+
+    def server_decode(self, buf):
+        return (buf, True, False)
+
+    def not_match_return(self, buf):
+        self.raw_trans = True
+        self.overhead = 0
+        if self.method == self.no_compatible_method:
+            return (b'E' * 2048, False)
+        return (buf, False)
+
+
+class client_queue(object):
+    def __init__(self, begin_id):
+        self.front = begin_id - 64
+        self.back = begin_id + 1
+        self.alloc = {}
+        self.enable = True
+        self.last_update = time.time()
+        self.ref = 0
+
+    def update(self):
+        self.last_update = time.time()
+
+    def addref(self):
+        self.ref += 1
+
+    def delref(self):
+        if self.ref > 0:
+            self.ref -= 1
+
+    def is_active(self):
+        return (self.ref > 0) and (time.time() - self.last_update < 60 * 10)
+
+    def re_enable(self, connection_id):
+        self.enable = True
+        self.front = connection_id - 64
+        self.back = connection_id + 1
+        self.alloc = {}
+
+    def insert(self, connection_id):
+        if not self.enable:
+            logging.warn('obfs auth: not enable')
+            return False
+        if not self.is_active():
+            self.re_enable(connection_id)
+        self.update()
+        if connection_id < self.front:
+            logging.warn('obfs auth: deprecated id, someone replay attack')
+            return False
+        if connection_id > self.front + 0x4000:
+            logging.warn('obfs auth: wrong id')
+            return False
+        if connection_id in self.alloc:
+            logging.warn('obfs auth: duplicate id, someone replay attack')
+            return False
+        if self.back <= connection_id:
+            self.back = connection_id + 1
+        self.alloc[connection_id] = 1
+        while (self.front in self.alloc) or self.front + 0x1000 < self.back:
+            if self.front in self.alloc:
+                del self.alloc[self.front]
+            self.front += 1
+        self.addref()
+        return True
+
+
+class obfs_auth_chain_data(object):
+    def __init__(self, name):
+        self.name = name
+        self.user_id = {}
+        self.local_client_id = b''
+        self.connection_id = 0
+        self.set_max_client(64)  # max active client count
+
+    def update(self, user_id, client_id, connection_id):
+        if user_id not in self.user_id:
+            self.user_id[user_id] = lru_cache.LRUCache()
+        local_client_id = self.user_id[user_id]
+
+        if client_id in local_client_id:
+            local_client_id[client_id].update()
+
+    def set_max_client(self, max_client):
+        self.max_client = max_client
+        self.max_buffer = max(self.max_client * 2, 1024)
+
+    def insert(self, user_id, client_id, connection_id):
+        if user_id not in self.user_id:
+            self.user_id[user_id] = lru_cache.LRUCache()
+        local_client_id = self.user_id[user_id]
+
+        if local_client_id.get(client_id, None) is None or not local_client_id[client_id].enable:
+            if local_client_id.first() is None or len(local_client_id) < self.max_client:
+                if client_id not in local_client_id:
+                    # TODO: check
+                    local_client_id[client_id] = client_queue(connection_id)
+                else:
+                    local_client_id[client_id].re_enable(connection_id)
+                return local_client_id[client_id].insert(connection_id)
+
+            if not local_client_id[local_client_id.first()].is_active():
+                del local_client_id[local_client_id.first()]
+                if client_id not in local_client_id:
+                    # TODO: check
+                    local_client_id[client_id] = client_queue(connection_id)
+                else:
+                    local_client_id[client_id].re_enable(connection_id)
+                return local_client_id[client_id].insert(connection_id)
+
+            logging.warn(self.name + ': no inactive client')
+            return False
+        else:
+            return local_client_id[client_id].insert(connection_id)
+
+    def remove(self, user_id, client_id):
+        if user_id in self.user_id:
+            local_client_id = self.user_id[user_id]
+            if client_id in local_client_id:
+                local_client_id[client_id].delref()
+
+
+class auth_chain_a(auth_base):
+    def __init__(self, method):
+        super(auth_chain_a, self).__init__(method)
+        self.hashfunc = hashlib.md5
+        self.recv_buf = b''
+        self.unit_len = 2800
+        self.raw_trans = False
+        self.has_sent_header = False
+        self.has_recv_header = False
+        self.client_id = 0
+        self.connection_id = 0
+        self.max_time_dif = 60 * 60 * 24  # time dif (second) setting
+        self.salt = b"auth_chain_a"
+        self.no_compatible_method = 'auth_chain_a'
+        self.pack_id = 1
+        self.recv_id = 1
+        self.user_id = None
+        self.user_id_num = 0
+        self.user_key = None
+        self.overhead = 4
+        self.client_over_head = 4
+        self.last_client_hash = b''
+        self.last_server_hash = b''
+        self.random_client = xorshift128plus()
+        self.random_server = xorshift128plus()
+        self.encryptor = None
+
+    def init_data(self):
+        return obfs_auth_chain_data(self.method)
+
+    def get_overhead(self, direction):  # direction: true for c->s false for s->c
+        return self.overhead
+
+    def set_server_info(self, server_info):
+        self.server_info = server_info
+        try:
+            max_client = int(server_info.protocol_param.split('#')[0])
+        except:
+            max_client = 64
+        self.server_info.data.set_max_client(max_client)
+
+    def trapezoid_random_float(self, d):
+        if d == 0:
+            return random.random()
+        s = random.random()
+        a = 1 - d
+        return (math.sqrt(a * a + 4 * d * s) - a) / (2 * d)
+
+    def trapezoid_random_int(self, max_val, d):
+        v = self.trapezoid_random_float(d)
+        return int(v * max_val)
+
+    def rnd_data_len(self, buf_size, last_hash, random):
+        if buf_size > 1440:
+            return 0
+        random.init_from_bin_len(last_hash, buf_size)
+        if buf_size > 1300:
+            return random.next() % 31
+        if buf_size > 900:
+            return random.next() % 127
+        if buf_size > 400:
+            return random.next() % 521
+        return random.next() % 1021
+
+    def udp_rnd_data_len(self, last_hash, random):
+        random.init_from_bin(last_hash)
+        return random.next() % 127
+
+    def rnd_start_pos(self, rand_len, random):
+        if rand_len > 0:
+            return random.next() % 8589934609 % rand_len
+        return 0
+
+    def rnd_data(self, buf_size, buf, last_hash, random):
+        rand_len = self.rnd_data_len(buf_size, last_hash, random)
+
+        rnd_data_buf = os.urandom(rand_len)
+
+        if buf_size == 0:
+            return rnd_data_buf
+        else:
+            if rand_len > 0:
+                start_pos = self.rnd_start_pos(rand_len, random)
+                return rnd_data_buf[:start_pos] + buf + rnd_data_buf[start_pos:]
+            else:
+                return buf
+
+    def pack_client_data(self, buf):
+        buf = self.encryptor.encrypt(buf)
+        data = self.rnd_data(len(buf), buf, self.last_client_hash, self.random_client)
+        data_len = len(data) + 8
+        mac_key = self.user_key + struct.pack('<I', self.pack_id)
+        length = len(buf) ^ struct.unpack('<H', self.last_client_hash[14:])[0]
+        data = struct.pack('<H', length) + data
+        self.last_client_hash = hmac.new(mac_key, data, self.hashfunc).digest()
+        data += self.last_client_hash[:2]
+        self.pack_id = (self.pack_id + 1) & 0xFFFFFFFF
+        return data
+
+    def pack_server_data(self, buf):
+        buf = self.encryptor.encrypt(buf)
+        data = self.rnd_data(len(buf), buf, self.last_server_hash, self.random_server)
+        data_len = len(data) + 8
+        mac_key = self.user_key + struct.pack('<I', self.pack_id)
+        length = len(buf) ^ struct.unpack('<H', self.last_server_hash[14:])[0]
+        data = struct.pack('<H', length) + data
+        self.last_server_hash = hmac.new(mac_key, data, self.hashfunc).digest()
+        data += self.last_server_hash[:2]
+        self.pack_id = (self.pack_id + 1) & 0xFFFFFFFF
+        return data
+
+    def pack_auth_data(self, auth_data, buf):
+        data = auth_data
+        data_len = 12 + 4 + 16 + 4
+        data = data + (struct.pack('<H', self.server_info.overhead) + struct.pack('<H', 0))
+        mac_key = self.server_info.iv + self.server_info.key
+
+        check_head = os.urandom(4)
+        self.last_client_hash = hmac.new(mac_key, check_head, self.hashfunc).digest()
+        check_head += self.last_client_hash[:8]
+
+        if b':' in to_bytes(self.server_info.protocol_param):
+            try:
+                items = to_bytes(self.server_info.protocol_param).split(b':')
+                self.user_key = items[1]
+                uid = struct.pack('<I', int(items[0]))
+            except:
+                uid = os.urandom(4)
+        else:
+            uid = os.urandom(4)
+        if self.user_key is None:
+            self.user_key = self.server_info.key
+
+        encryptor = encrypt.Encryptor(
+            to_bytes(base64.b64encode(self.user_key)) + self.salt, 'aes-128-cbc', b'\x00' * 16)
+
+        uid = struct.unpack('<I', uid)[0] ^ struct.unpack('<I', self.last_client_hash[8:12])[0]
+        uid = struct.pack('<I', uid)
+        data = uid + encryptor.encrypt(data)[16:]
+        self.last_server_hash = hmac.new(self.user_key, data, self.hashfunc).digest()
+        data = check_head + data + self.last_server_hash[:4]
+        self.encryptor = encrypt.Encryptor(
+            to_bytes(base64.b64encode(self.user_key)) + to_bytes(base64.b64encode(self.last_client_hash)), 'rc4')
+        return data + self.pack_client_data(buf)
+
+    def auth_data(self):
+        utc_time = int(time.time()) & 0xFFFFFFFF
+        if self.server_info.data.connection_id > 0xFF000000:
+            self.server_info.data.local_client_id = b''
+        if not self.server_info.data.local_client_id:
+            self.server_info.data.local_client_id = os.urandom(4)
+            logging.debug("local_client_id %s" % (binascii.hexlify(self.server_info.data.local_client_id),))
+            self.server_info.data.connection_id = struct.unpack('<I', os.urandom(4))[0] & 0xFFFFFF
+        self.server_info.data.connection_id += 1
+        return b''.join([struct.pack('<I', utc_time),
+                         self.server_info.data.local_client_id,
+                         struct.pack('<I', self.server_info.data.connection_id)])
+
+    def client_pre_encrypt(self, buf):
+        ret = b''
+        ogn_data_len = len(buf)
+        if not self.has_sent_header:
+            head_size = self.get_head_size(buf, 30)
+            datalen = min(len(buf), random.randint(0, 31) + head_size)
+            ret += self.pack_auth_data(self.auth_data(), buf[:datalen])
+            buf = buf[datalen:]
+            self.has_sent_header = True
+        while len(buf) > self.unit_len:
+            ret += self.pack_client_data(buf[:self.unit_len])
+            buf = buf[self.unit_len:]
+        ret += self.pack_client_data(buf)
+        return ret
+
+    def client_post_decrypt(self, buf):
+        if self.raw_trans:
+            return buf
+        self.recv_buf += buf
+        out_buf = b''
+        while len(self.recv_buf) > 4:
+            mac_key = self.user_key + struct.pack('<I', self.recv_id)
+            data_len = struct.unpack('<H', self.recv_buf[:2])[0] ^ struct.unpack('<H', self.last_server_hash[14:16])[0]
+            rand_len = self.rnd_data_len(data_len, self.last_server_hash, self.random_server)
+            length = data_len + rand_len
+            if length >= 4096:
+                self.raw_trans = True
+                self.recv_buf = b''
+                raise Exception('client_post_decrypt data error')
+
+            if length + 4 > len(self.recv_buf):
+                break
+
+            server_hash = hmac.new(mac_key, self.recv_buf[:length + 2], self.hashfunc).digest()
+            if server_hash[:2] != self.recv_buf[length + 2: length + 4]:
+                logging.info('%s: checksum error, data %s'
+                             % (self.no_compatible_method, binascii.hexlify(self.recv_buf[:length])))
+                self.raw_trans = True
+                self.recv_buf = b''
+                raise Exception('client_post_decrypt data uncorrect checksum')
+
+            pos = 2
+            if data_len > 0 and rand_len > 0:
+                pos = 2 + self.rnd_start_pos(rand_len, self.random_server)
+            out_buf += self.encryptor.decrypt(self.recv_buf[pos: data_len + pos])
+            self.last_server_hash = server_hash
+            if self.recv_id == 1:
+                self.server_info.tcp_mss = struct.unpack('<H', out_buf[:2])[0]
+                out_buf = out_buf[2:]
+            self.recv_id = (self.recv_id + 1) & 0xFFFFFFFF
+            self.recv_buf = self.recv_buf[length + 4:]
+
+        return out_buf
+
+    def server_pre_encrypt(self, buf):
+        if self.raw_trans:
+            return buf
+        ret = b''
+        if self.pack_id == 1:
+            tcp_mss = self.server_info.tcp_mss if self.server_info.tcp_mss < 1500 else 1500
+            self.server_info.tcp_mss = tcp_mss
+            buf = struct.pack('<H', tcp_mss) + buf
+            self.unit_len = tcp_mss - self.client_over_head
+        while len(buf) > self.unit_len:
+            ret += self.pack_server_data(buf[:self.unit_len])
+            buf = buf[self.unit_len:]
+        ret += self.pack_server_data(buf)
+        return ret
+
+    def server_post_decrypt(self, buf):
+        if self.raw_trans:
+            return (buf, False)
+        self.recv_buf += buf
+        out_buf = b''
+        sendback = False
+
+        if not self.has_recv_header:
+            if len(self.recv_buf) >= 12 or len(self.recv_buf) in [7, 8]:
+                recv_len = min(len(self.recv_buf), 12)
+                mac_key = self.server_info.recv_iv + self.server_info.key
+                md5data = hmac.new(mac_key, self.recv_buf[:4], self.hashfunc).digest()
+                if md5data[:recv_len - 4] != self.recv_buf[4:recv_len]:
+                    return self.not_match_return(self.recv_buf)
+
+            if len(self.recv_buf) < 12 + 24:
+                return (b'', False)
+
+            self.last_client_hash = md5data
+            uid = struct.unpack('<I', self.recv_buf[12:16])[0] ^ struct.unpack('<I', md5data[8:12])[0]
+            self.user_id_num = uid
+            uid = struct.pack('<I', uid)
+            if uid in self.server_info.users:
+                self.user_id = uid
+                self.user_key = self.server_info.users[uid]
+                self.server_info.update_user_func(uid)
+            else:
+                self.user_id_num = 0
+                if not self.server_info.users:
+                    self.user_key = self.server_info.key
+                else:
+                    self.user_key = self.server_info.recv_iv
+
+            md5data = hmac.new(self.user_key, self.recv_buf[12: 12 + 20], self.hashfunc).digest()
+            if md5data[:4] != self.recv_buf[32:36]:
+                logging.error('%s data uncorrect auth HMAC-MD5 from %s:%d, data %s' % (
+                    self.no_compatible_method, self.server_info.client, self.server_info.client_port,
+                    binascii.hexlify(self.recv_buf)
+                ))
+                if len(self.recv_buf) < 36:
+                    return (b'', False)
+                return self.not_match_return(self.recv_buf)
+
+            self.last_server_hash = md5data
+            encryptor = encrypt.Encryptor(to_bytes(base64.b64encode(self.user_key)) + self.salt, 'aes-128-cbc')
+            head = encryptor.decrypt(b'\x00' * 16 + self.recv_buf[16:32] + b'\x00')  # need an extra byte or recv empty
+            self.client_over_head = struct.unpack('<H', head[12:14])[0]
+
+            utc_time = struct.unpack('<I', head[:4])[0]
+            client_id = struct.unpack('<I', head[4:8])[0]
+            connection_id = struct.unpack('<I', head[8:12])[0]
+            time_dif = common.int32(utc_time - (int(time.time()) & 0xffffffff))
+            if time_dif < -self.max_time_dif or time_dif > self.max_time_dif:
+                logging.info('%s: wrong timestamp, time_dif %d, data %s' % (
+                    self.no_compatible_method, time_dif, binascii.hexlify(head)
+                ))
+                return self.not_match_return(self.recv_buf)
+            elif self.server_info.data.insert(self.user_id, client_id, connection_id):
+                self.has_recv_header = True
+                self.client_id = client_id
+                self.connection_id = connection_id
+            else:
+                logging.info('%s: auth fail, data %s' % (self.no_compatible_method, binascii.hexlify(out_buf)))
+                return self.not_match_return(self.recv_buf)
+
+            self.encryptor = encrypt.Encryptor(
+                to_bytes(base64.b64encode(self.user_key)) + to_bytes(base64.b64encode(self.last_client_hash)), 'rc4')
+            self.recv_buf = self.recv_buf[36:]
+            self.has_recv_header = True
+            sendback = True
+
+        while len(self.recv_buf) > 4:
+            mac_key = self.user_key + struct.pack('<I', self.recv_id)
+            data_len = struct.unpack('<H', self.recv_buf[:2])[0] ^ struct.unpack('<H', self.last_client_hash[14:16])[0]
+            rand_len = self.rnd_data_len(data_len, self.last_client_hash, self.random_client)
+            length = data_len + rand_len
+            if length >= 4096:
+                self.raw_trans = True
+                self.recv_buf = b''
+                if self.recv_id == 0:
+                    logging.info(self.no_compatible_method + ': over size')
+                    return (b'E' * 2048, False)
+                else:
+                    raise Exception('server_post_decrype data error')
+
+            if length + 4 > len(self.recv_buf):
+                break
+
+            client_hash = hmac.new(mac_key, self.recv_buf[:length + 2], self.hashfunc).digest()
+            if client_hash[:2] != self.recv_buf[length + 2: length + 4]:
+                logging.info('%s: checksum error, data %s' % (
+                    self.no_compatible_method, binascii.hexlify(self.recv_buf[:length])
+                ))
+                self.raw_trans = True
+                self.recv_buf = b''
+                if self.recv_id == 0:
+                    return (b'E' * 2048, False)
+                else:
+                    raise Exception('server_post_decrype data uncorrect checksum')
+
+            self.recv_id = (self.recv_id + 1) & 0xFFFFFFFF
+            pos = 2
+            if data_len > 0 and rand_len > 0:
+                pos = 2 + self.rnd_start_pos(rand_len, self.random_client)
+            out_buf += self.encryptor.decrypt(self.recv_buf[pos: data_len + pos])
+            self.last_client_hash = client_hash
+            self.recv_buf = self.recv_buf[length + 4:]
+            if data_len == 0:
+                sendback = True
+
+        if out_buf:
+            self.server_info.data.update(self.user_id, self.client_id, self.connection_id)
+        return (out_buf, sendback)
+
+    def client_udp_pre_encrypt(self, buf):
+        if self.user_key is None:
+            if b':' in to_bytes(self.server_info.protocol_param):
+                try:
+                    items = to_bytes(self.server_info.protocol_param).split(':')
+                    self.user_key = self.hashfunc(items[1]).digest()
+                    self.user_id = struct.pack('<I', int(items[0]))
+                except:
+                    pass
+            if self.user_key is None:
+                self.user_id = os.urandom(4)
+                self.user_key = self.server_info.key
+        authdata = os.urandom(3)
+        mac_key = self.server_info.key
+        md5data = hmac.new(mac_key, authdata, self.hashfunc).digest()
+        uid = struct.unpack('<I', self.user_id)[0] ^ struct.unpack('<I', md5data[:4])[0]
+        uid = struct.pack('<I', uid)
+        rand_len = self.udp_rnd_data_len(md5data, self.random_client)
+        encryptor = encrypt.Encryptor(
+            to_bytes(base64.b64encode(self.user_key)) + to_bytes(base64.b64encode(md5data)), 'rc4')
+        out_buf = encryptor.encrypt(buf)
+        buf = out_buf + os.urandom(rand_len) + authdata + uid
+        return buf + hmac.new(self.user_key, buf, self.hashfunc).digest()[:1]
+
+    def client_udp_post_decrypt(self, buf):
+        if len(buf) <= 8:
+            return (b'', None)
+        if hmac.new(self.user_key, buf[:-1], self.hashfunc).digest()[:1] != buf[-1:]:
+            return (b'', None)
+        mac_key = self.server_info.key
+        md5data = hmac.new(mac_key, buf[-8:-1], self.hashfunc).digest()
+        rand_len = self.udp_rnd_data_len(md5data, self.random_server)
+        encryptor = encrypt.Encryptor(
+            to_bytes(base64.b64encode(self.user_key)) + to_bytes(base64.b64encode(md5data)), 'rc4')
+        return encryptor.decrypt(buf[:-8 - rand_len])
+
+    def server_udp_pre_encrypt(self, buf, uid):
+        if uid in self.server_info.users:
+            user_key = self.server_info.users[uid]
+        else:
+            uid = None
+            if not self.server_info.users:
+                user_key = self.server_info.key
+            else:
+                user_key = self.server_info.recv_iv
+        authdata = os.urandom(7)
+        mac_key = self.server_info.key
+        md5data = hmac.new(mac_key, authdata, self.hashfunc).digest()
+        rand_len = self.udp_rnd_data_len(md5data, self.random_server)
+        encryptor = encrypt.Encryptor(to_bytes(base64.b64encode(user_key)) + to_bytes(base64.b64encode(md5data)), 'rc4')
+        out_buf = encryptor.encrypt(buf)
+        buf = out_buf + os.urandom(rand_len) + authdata
+        return buf + hmac.new(user_key, buf, self.hashfunc).digest()[:1]
+
+    def server_udp_post_decrypt(self, buf):
+        mac_key = self.server_info.key
+        md5data = hmac.new(mac_key, buf[-8:-5], self.hashfunc).digest()
+        uid = struct.unpack('<I', buf[-5:-1])[0] ^ struct.unpack('<I', md5data[:4])[0]
+        uid = struct.pack('<I', uid)
+        if uid in self.server_info.users:
+            user_key = self.server_info.users[uid]
+        else:
+            uid = None
+            if not self.server_info.users:
+                user_key = self.server_info.key
+            else:
+                user_key = self.server_info.recv_iv
+        if hmac.new(user_key, buf[:-1], self.hashfunc).digest()[:1] != buf[-1:]:
+            return (b'', None)
+        rand_len = self.udp_rnd_data_len(md5data, self.random_client)
+        encryptor = encrypt.Encryptor(to_bytes(base64.b64encode(user_key)) + to_bytes(base64.b64encode(md5data)), 'rc4')
+        out_buf = encryptor.decrypt(buf[:-8 - rand_len])
+        return (out_buf, uid)
+
+    def dispose(self):
+        self.server_info.data.remove(self.user_id, self.client_id)
+
+
+class auth_chain_b(auth_chain_a):
+    def __init__(self, method):
+        super(auth_chain_b, self).__init__(method)
+        self.salt = b"auth_chain_b"
+        self.no_compatible_method = 'auth_chain_b'
+        # NOTE
+        # 补全后长度数组
+        # 随机在其中选择一个补全到的长度
+        # 为每个连接初始化一个固定内容的数组
+        self.data_size_list = []
+        self.data_size_list2 = []
+
+    def init_data_size(self, key):
+        if self.data_size_list:
+            self.data_size_list = []
+            self.data_size_list2 = []
+        random = xorshift128plus()
+        random.init_from_bin(key)
+        # 补全数组长为4~12-1
+        list_len = random.next() % 8 + 4
+        for i in range(0, list_len):
+            self.data_size_list.append((int)(random.next() % 2340 % 2040 % 1440))
+        self.data_size_list.sort()
+        # 补全数组长为8~24-1
+        list_len = random.next() % 16 + 8
+        for i in range(0, list_len):
+            self.data_size_list2.append((int)(random.next() % 2340 % 2040 % 1440))
+        self.data_size_list2.sort()
+
+    def set_server_info(self, server_info):
+        self.server_info = server_info
+        try:
+            max_client = int(server_info.protocol_param.split('#')[0])
+        except:
+            max_client = 64
+        self.server_info.data.set_max_client(max_client)
+        self.init_data_size(self.server_info.key)
+
+    def rnd_data_len(self, buf_size, last_hash, random):
+        if buf_size >= 1440:
+            return 0
+        random.init_from_bin_len(last_hash, buf_size)
+        pos = bisect.bisect_left(self.data_size_list, buf_size + self.server_info.overhead)
+        final_pos = pos + random.next() % (len(self.data_size_list))
+        # 假设random均匀分布，则越长的原始数据长度越容易if false
+        if final_pos < len(self.data_size_list):
+            return self.data_size_list[final_pos] - buf_size - self.server_info.overhead
+
+        # 上面if false后选择2号补全数组，此处有更精细的长度分段
+        pos = bisect.bisect_left(self.data_size_list2, buf_size + self.server_info.overhead)
+        final_pos = pos + random.next() % (len(self.data_size_list2))
+        if final_pos < len(self.data_size_list2):
+            return self.data_size_list2[final_pos] - buf_size - self.server_info.overhead
+        # final_pos 总是分布在pos~(data_size_list2.len-1)之间
+        if final_pos < pos + len(self.data_size_list2) - 1:
+            return 0
+        # 有1/len(self.data_size_list2)的概率不满足上一个if  ?
+        # 理论上不会运行到此处，因此可以插入运行断言  ?
+        # assert False
+
+        if buf_size > 1300:
+            return random.next() % 31
+        if buf_size > 900:
+            return random.next() % 127
+        if buf_size > 400:
+            return random.next() % 521
+        return random.next() % 1021
+
+
+class auth_chain_c(auth_chain_b):
+    def __init__(self, method):
+        super(auth_chain_c, self).__init__(method)
+        self.salt = b"auth_chain_c"
+        self.no_compatible_method = 'auth_chain_c'
+        self.data_size_list0 = []
+
+    def init_data_size(self, key):
+        if self.data_size_list0:
+            self.data_size_list0 = []
+        random = xorshift128plus()
+        random.init_from_bin(key)
+        # 补全数组长为12~24-1
+        list_len = random.next() % (8 + 16) + (4 + 8)
+        for i in range(0, list_len):
+            self.data_size_list0.append((int)(random.next() % 2340 % 2040 % 1440))
+        self.data_size_list0.sort()
+
+    def set_server_info(self, server_info):
+        self.server_info = server_info
+        try:
+            max_client = int(server_info.protocol_param.split('#')[0])
+        except:
+            max_client = 64
+        self.server_info.data.set_max_client(max_client)
+        self.init_data_size(self.server_info.key)
+
+    def rnd_data_len(self, buf_size, last_hash, random):
+        other_data_size = buf_size + self.server_info.overhead
+        # 一定要在random使用前初始化，以保证服务器与客户端同步，保证包大小验证结果正确
+        random.init_from_bin_len(last_hash, buf_size)
+        # final_pos 总是分布在pos~(data_size_list0.len-1)之间
+        # 除非data_size_list0中的任何值均过小使其全部都无法容纳buf
+        if other_data_size >= self.data_size_list0[-1]:
+            if other_data_size >= 1440:
+                return 0
+            if other_data_size > 1300:
+                return random.next() % 31
+            if other_data_size > 900:
+                return random.next() % 127
+            if other_data_size > 400:
+                return random.next() % 521
+            return random.next() % 1021
+
+        pos = bisect.bisect_left(self.data_size_list0, other_data_size)
+        # random select a size in the leftover data_size_list0
+        final_pos = pos + random.next() % (len(self.data_size_list0) - pos)
+        return self.data_size_list0[final_pos] - other_data_size
+
+
+class auth_chain_d(auth_chain_b):
+    def __init__(self, method):
+        super(auth_chain_d, self).__init__(method)
+        self.salt = b"auth_chain_d"
+        self.no_compatible_method = 'auth_chain_d'
+        self.data_size_list0 = []
+
+    def check_and_patch_data_size(self, random):
+        # append new item
+        # when the biggest item(first time) or the last append item(other time) are not big enough.
+        # but set a limit size (64) to avoid stack overflow.
+        if self.data_size_list0[-1] < 1300 and len(self.data_size_list0) < 64:
+            self.data_size_list0.append((int)(random.next() % 2340 % 2040 % 1440))
+            self.check_and_patch_data_size(random)
+
+    def init_data_size(self, key):
+        if self.data_size_list0:
+            self.data_size_list0 = []
+        random = xorshift128plus()
+        random.init_from_bin(key)
+        # 补全数组长为12~24-1
+        list_len = random.next() % (8 + 16) + (4 + 8)
+        for i in range(0, list_len):
+            self.data_size_list0.append((int)(random.next() % 2340 % 2040 % 1440))
+        self.data_size_list0.sort()
+        old_len = len(self.data_size_list0)
+        self.check_and_patch_data_size(random)
+        # if check_and_patch_data_size are work, re-sort again.
+        if old_len != len(self.data_size_list0):
+            self.data_size_list0.sort()
+
+    def set_server_info(self, server_info):
+        self.server_info = server_info
+        try:
+            max_client = int(server_info.protocol_param.split('#')[0])
+        except:
+            max_client = 64
+        self.server_info.data.set_max_client(max_client)
+        self.init_data_size(self.server_info.key)
+
+    def rnd_data_len(self, buf_size, last_hash, random):
+        other_data_size = buf_size + self.server_info.overhead
+        # if other_data_size > the bigest item in data_size_list0, not padding any data
+        if other_data_size >= self.data_size_list0[-1]:
+            return 0
+
+        random.init_from_bin_len(last_hash, buf_size)
+        pos = bisect.bisect_left(self.data_size_list0, other_data_size)
+        # random select a size in the leftover data_size_list0
+        final_pos = pos + random.next() % (len(self.data_size_list0) - pos)
+        return self.data_size_list0[final_pos] - other_data_size
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/obfsplugin/http_simple.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/obfsplugin/http_simple.py
new file mode 100644
index 0000000000..ff3c5fdfbc
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/obfsplugin/http_simple.py
@@ -0,0 +1,315 @@
+#!/usr/bin/env python
+#
+# Copyright 2015-2015 breakwa11
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+import os
+import sys
+import hashlib
+import logging
+import binascii
+import struct
+import base64
+import datetime
+import random
+
+from shadowsocks import common
+from shadowsocks.obfsplugin import plain
+from shadowsocks.common import to_bytes, to_str, ord, chr
+
+def create_http_simple_obfs(method):
+    return http_simple(method)
+
+def create_http_post_obfs(method):
+    return http_post(method)
+
+def create_random_head_obfs(method):
+    return random_head(method)
+
+obfs_map = {
+        'http_simple': (create_http_simple_obfs,),
+        'http_simple_compatible': (create_http_simple_obfs,),
+        'http_post': (create_http_post_obfs,),
+        'http_post_compatible': (create_http_post_obfs,),
+        'random_head': (create_random_head_obfs,),
+        'random_head_compatible': (create_random_head_obfs,),
+}
+
+def match_begin(str1, str2):
+    if len(str1) >= len(str2):
+        if str1[:len(str2)] == str2:
+            return True
+    return False
+
+class http_simple(plain.plain):
+    def __init__(self, method):
+        self.method = method
+        self.has_sent_header = False
+        self.has_recv_header = False
+        self.host = None
+        self.port = 0
+        self.recv_buffer = b''
+        # TODO user config user_agent
+        self.user_agent = [b"Mozilla/5.0 (Windows NT 6.3; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0",
+            b"Mozilla/5.0 (Windows NT 6.3; WOW64; rv:40.0) Gecko/20100101 Firefox/44.0",
+            b"Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36",
+            b"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/535.11 (KHTML, like Gecko) Ubuntu/11.10 Chromium/27.0.1453.93 Chrome/27.0.1453.93 Safari/537.36",
+            b"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:35.0) Gecko/20100101 Firefox/35.0",
+            b"Mozilla/5.0 (compatible; WOW64; MSIE 10.0; Windows NT 6.2)",
+            b"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/533.20.25 (KHTML, like Gecko) Version/5.0.4 Safari/533.20.27",
+            b"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.3; Trident/7.0; .NET4.0E; .NET4.0C)",
+            b"Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko",
+            b"Mozilla/5.0 (Linux; Android 4.4; Nexus 5 Build/BuildID) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/30.0.0.0 Mobile Safari/537.36",
+            b"Mozilla/5.0 (iPad; CPU OS 5_0 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9A334 Safari/7534.48.3",
+            b"Mozilla/5.0 (iPhone; CPU iPhone OS 5_0 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9A334 Safari/7534.48.3"]
+
+    def encode_head(self, buf):
+        hexstr = binascii.hexlify(buf)
+        chs = []
+        for i in range(0, len(hexstr), 2):
+            chs.append(b"%" + hexstr[i:i+2])
+        return b''.join(chs)
+
+    def client_encode(self, buf):
+        if self.has_sent_header:
+            return buf
+        head_size = len(self.server_info.iv) + self.server_info.head_len
+        if len(buf) - head_size > 64:
+            headlen = head_size + random.randint(0, 64)
+        else:
+            headlen = len(buf)
+        headdata = buf[:headlen]
+        buf = buf[headlen:]
+        port = b''
+        if self.server_info.port != 80:
+            port = b':' + to_bytes(str(self.server_info.port))
+        body = None
+        hosts = (self.server_info.obfs_param or self.server_info.host)
+        pos = hosts.find("#")
+        if pos >= 0:
+            body = hosts[pos + 1:].replace("\n", "\r\n")
+            body = body.replace("\\n", "\r\n")
+            hosts = hosts[:pos]
+        hosts = hosts.split(',')
+        host = random.choice(hosts)
+        http_head = b"GET /" + self.encode_head(headdata) + b" HTTP/1.1\r\n"
+        http_head += b"Host: " + to_bytes(host) + port + b"\r\n"
+        if body:
+            http_head += body + "\r\n\r\n"
+        else:
+            http_head += b"User-Agent: " + random.choice(self.user_agent) + b"\r\n"
+            http_head += b"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.8\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\n\r\n"
+        self.has_sent_header = True
+        return http_head + buf
+
+    def client_decode(self, buf):
+        if self.has_recv_header:
+            return (buf, False)
+        pos = buf.find(b'\r\n\r\n')
+        if pos >= 0:
+            self.has_recv_header = True
+            return (buf[pos + 4:], False)
+        else:
+            return (b'', False)
+
+    def server_encode(self, buf):
+        if self.has_sent_header:
+            return buf
+
+        header = b'HTTP/1.1 200 OK\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nContent-Type: text/html\r\nDate: '
+        header += to_bytes(datetime.datetime.now().strftime('%a, %d %b %Y %H:%M:%S GMT'))
+        header += b'\r\nServer: nginx\r\nVary: Accept-Encoding\r\n\r\n'
+        self.has_sent_header = True
+        return header + buf
+
+    def get_data_from_http_header(self, buf):
+        ret_buf = b''
+        lines = buf.split(b'\r\n')
+        if lines and len(lines) > 1:
+            hex_items = lines[0].split(b'%')
+            if hex_items and len(hex_items) > 1:
+                for index in range(1, len(hex_items)):
+                    if len(hex_items[index]) < 2:
+                        ret_buf += binascii.unhexlify('0' + hex_items[index])
+                        break
+                    elif len(hex_items[index]) > 2:
+                        ret_buf += binascii.unhexlify(hex_items[index][:2])
+                        break
+                    else:
+                        ret_buf += binascii.unhexlify(hex_items[index])
+                return ret_buf
+        return b''
+
+    def get_host_from_http_header(self, buf):
+        ret_buf = b''
+        lines = buf.split(b'\r\n')
+        if lines and len(lines) > 1:
+            for line in lines:
+                if match_begin(line, b"Host: "):
+                    return common.to_str(line[6:])
+
+    def not_match_return(self, buf):
+        self.has_sent_header = True
+        self.has_recv_header = True
+        if self.method == 'http_simple':
+            return (b'E'*2048, False, False)
+        return (buf, True, False)
+
+    def error_return(self, buf):
+        self.has_sent_header = True
+        self.has_recv_header = True
+        return (b'E'*2048, False, False)
+
+    def server_decode(self, buf):
+        if self.has_recv_header:
+            return (buf, True, False)
+
+        self.recv_buffer += buf
+        buf = self.recv_buffer
+        if len(buf) > 10:
+            if match_begin(buf, b'GET ') or match_begin(buf, b'POST '):
+                if len(buf) > 65536:
+                    self.recv_buffer = None
+                    logging.warn('http_simple: over size')
+                    return self.not_match_return(buf)
+            else: #not http header, run on original protocol
+                self.recv_buffer = None
+                logging.debug('http_simple: not match begin')
+                return self.not_match_return(buf)
+        else:
+            return (b'', True, False)
+
+        if b'\r\n\r\n' in buf:
+            datas = buf.split(b'\r\n\r\n', 1)
+            ret_buf = self.get_data_from_http_header(buf)
+            host = self.get_host_from_http_header(buf)
+            if host and self.server_info.obfs_param:
+                pos = host.find(":")
+                if pos >= 0:
+                    host = host[:pos]
+                hosts = self.server_info.obfs_param.split(',')
+                if host not in hosts:
+                    return self.not_match_return(buf)
+            if len(ret_buf) < 4:
+                return self.error_return(buf)
+            if len(datas) > 1:
+                ret_buf += datas[1]
+            if len(ret_buf) >= 13:
+                self.has_recv_header = True
+                return (ret_buf, True, False)
+            return self.not_match_return(buf)
+        else:
+            return (b'', True, False)
+
+class http_post(http_simple):
+    def __init__(self, method):
+        super(http_post, self).__init__(method)
+
+    def boundary(self):
+        return to_bytes(''.join([random.choice("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789") for i in range(32)]))
+
+    def client_encode(self, buf):
+        if self.has_sent_header:
+            return buf
+        head_size = len(self.server_info.iv) + self.server_info.head_len
+        if len(buf) - head_size > 64:
+            headlen = head_size + random.randint(0, 64)
+        else:
+            headlen = len(buf)
+        headdata = buf[:headlen]
+        buf = buf[headlen:]
+        port = b''
+        if self.server_info.port != 80:
+            port = b':' + to_bytes(str(self.server_info.port))
+        body = None
+        hosts = (self.server_info.obfs_param or self.server_info.host)
+        pos = hosts.find("#")
+        if pos >= 0:
+            body = hosts[pos + 1:].replace("\\n", "\r\n")
+            hosts = hosts[:pos]
+        hosts = hosts.split(',')
+        host = random.choice(hosts)
+        http_head = b"POST /" + self.encode_head(headdata) + b" HTTP/1.1\r\n"
+        http_head += b"Host: " + to_bytes(host) + port + b"\r\n"
+        if body:
+            http_head += body + "\r\n\r\n"
+        else:
+            http_head += b"User-Agent: " + random.choice(self.user_agent) + b"\r\n"
+            http_head += b"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.8\r\nAccept-Encoding: gzip, deflate\r\n"
+            http_head += b"Content-Type: multipart/form-data; boundary=" + self.boundary() + b"\r\nDNT: 1\r\n"
+            http_head += b"Connection: keep-alive\r\n\r\n"
+        self.has_sent_header = True
+        return http_head + buf
+
+    def not_match_return(self, buf):
+        self.has_sent_header = True
+        self.has_recv_header = True
+        if self.method == 'http_post':
+            return (b'E'*2048, False, False)
+        return (buf, True, False)
+
+class random_head(plain.plain):
+    def __init__(self, method):
+        self.method = method
+        self.has_sent_header = False
+        self.has_recv_header = False
+        self.raw_trans_sent = False
+        self.raw_trans_recv = False
+        self.send_buffer = b''
+
+    def client_encode(self, buf):
+        if self.raw_trans_sent:
+            return buf
+        self.send_buffer += buf
+        if not self.has_sent_header:
+            self.has_sent_header = True
+            data = os.urandom(common.ord(os.urandom(1)[0]) % 96 + 4)
+            crc = (0xffffffff - binascii.crc32(data)) & 0xffffffff
+            return data + struct.pack('<I', crc)
+        if self.raw_trans_recv:
+            ret = self.send_buffer
+            self.send_buffer = b''
+            self.raw_trans_sent = True
+            return ret
+        return b''
+
+    def client_decode(self, buf):
+        if self.raw_trans_recv:
+            return (buf, False)
+        self.raw_trans_recv = True
+        return (b'', True)
+
+    def server_encode(self, buf):
+        if self.has_sent_header:
+            return buf
+        self.has_sent_header = True
+        return os.urandom(common.ord(os.urandom(1)[0]) % 96 + 4)
+
+    def server_decode(self, buf):
+        if self.has_recv_header:
+            return (buf, True, False)
+
+        self.has_recv_header = True
+        crc = binascii.crc32(buf) & 0xffffffff
+        if crc != 0xffffffff:
+            self.has_sent_header = True
+            if self.method == 'random_head':
+                return (b'E'*2048, False, False)
+            return (buf, True, False)
+        # (buffer_to_recv, is_need_decrypt, is_need_to_encode_and_send_back)
+        return (b'', False, True)
+
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/obfsplugin/obfs_tls.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/obfsplugin/obfs_tls.py
new file mode 100644
index 0000000000..7f1f2336f9
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/obfsplugin/obfs_tls.py
@@ -0,0 +1,305 @@
+#!/usr/bin/env python
+#
+# Copyright 2015-2015 breakwa11
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+import os
+import sys
+import hashlib
+import logging
+import binascii
+import struct
+import base64
+import time
+import random
+import hmac
+import hashlib
+import string
+
+from shadowsocks import common
+from shadowsocks.obfsplugin import plain
+from shadowsocks.common import to_bytes, to_str, ord
+from shadowsocks import lru_cache
+
+def create_tls_ticket_auth_obfs(method):
+    return tls_ticket_auth(method)
+
+obfs_map = {
+        'tls1.2_ticket_auth': (create_tls_ticket_auth_obfs,),
+        'tls1.2_ticket_auth_compatible': (create_tls_ticket_auth_obfs,),
+        'tls1.2_ticket_fastauth': (create_tls_ticket_auth_obfs,),
+        'tls1.2_ticket_fastauth_compatible': (create_tls_ticket_auth_obfs,),
+}
+
+def match_begin(str1, str2):
+    if len(str1) >= len(str2):
+        if str1[:len(str2)] == str2:
+            return True
+    return False
+
+class obfs_auth_data(object):
+    def __init__(self):
+        self.client_data = lru_cache.LRUCache(60 * 5)
+        self.client_id = os.urandom(32)
+        self.startup_time = int(time.time() - 60 * 30) & 0xFFFFFFFF
+        self.ticket_buf = {}
+
+class tls_ticket_auth(plain.plain):
+    def __init__(self, method):
+        self.method = method
+        self.handshake_status = 0
+        self.send_buffer = b''
+        self.recv_buffer = b''
+        self.client_id = b''
+        self.max_time_dif = 60 * 60 * 24 # time dif (second) setting
+        self.tls_version = b'\x03\x03'
+        self.overhead = 5
+
+    def init_data(self):
+        return obfs_auth_data()
+
+    def get_overhead(self, direction): # direction: true for c->s false for s->c
+        return self.overhead
+
+    def sni(self, url):
+        url = common.to_bytes(url)
+        data = b"\x00" + struct.pack('>H', len(url)) + url
+        data = b"\x00\x00" + struct.pack('>H', len(data) + 2) + struct.pack('>H', len(data)) + data
+        return data
+
+    def pack_auth_data(self, client_id):
+        utc_time = int(time.time()) & 0xFFFFFFFF
+        data = struct.pack('>I', utc_time) + os.urandom(18)
+        data += hmac.new(self.server_info.key + client_id, data, hashlib.sha1).digest()[:10]
+        return data
+
+    def client_encode(self, buf):
+        if self.handshake_status == -1:
+            return buf
+        if self.handshake_status == 8:
+            ret = b''
+            while len(buf) > 2048:
+                size = min(struct.unpack('>H', os.urandom(2))[0] % 4096 + 100, len(buf))
+                ret += b"\x17" + self.tls_version + struct.pack('>H', size) + buf[:size]
+                buf = buf[size:]
+            if len(buf) > 0:
+                ret += b"\x17" + self.tls_version + struct.pack('>H', len(buf)) + buf
+            return ret
+        if len(buf) > 0:
+            self.send_buffer += b"\x17" + self.tls_version + struct.pack('>H', len(buf)) + buf
+        if self.handshake_status == 0:
+            self.handshake_status = 1
+            data = self.tls_version + self.pack_auth_data(self.server_info.data.client_id) + b"\x20" + self.server_info.data.client_id + binascii.unhexlify(b"001cc02bc02fcca9cca8cc14cc13c00ac014c009c013009c0035002f000a" + b"0100")
+            ext = binascii.unhexlify(b"ff01000100")
+            host = self.server_info.obfs_param or self.server_info.host
+            if host and host[-1] in string.digits:
+                host = ''
+            hosts = host.split(',')
+            host = random.choice(hosts)
+            ext += self.sni(host)
+            ext += b"\x00\x17\x00\x00"
+            if host not in self.server_info.data.ticket_buf:
+                self.server_info.data.ticket_buf[host] = os.urandom((struct.unpack('>H', os.urandom(2))[0] % 17 + 8) * 16)
+            ext += b"\x00\x23" + struct.pack('>H', len(self.server_info.data.ticket_buf[host])) + self.server_info.data.ticket_buf[host]
+            ext += binascii.unhexlify(b"000d001600140601060305010503040104030301030302010203")
+            ext += binascii.unhexlify(b"000500050100000000")
+            ext += binascii.unhexlify(b"00120000")
+            ext += binascii.unhexlify(b"75500000")
+            ext += binascii.unhexlify(b"000b00020100")
+            ext += binascii.unhexlify(b"000a0006000400170018")
+            data += struct.pack('>H', len(ext)) + ext
+            data = b"\x01\x00" + struct.pack('>H', len(data)) + data
+            data = b"\x16\x03\x01" + struct.pack('>H', len(data)) + data
+            return data
+        elif self.handshake_status == 1 and len(buf) == 0:
+            data = b"\x14" + self.tls_version + b"\x00\x01\x01" #ChangeCipherSpec
+            data += b"\x16" + self.tls_version + b"\x00\x20" + os.urandom(22) #Finished
+            data += hmac.new(self.server_info.key + self.server_info.data.client_id, data, hashlib.sha1).digest()[:10]
+            ret = data + self.send_buffer
+            self.send_buffer = b''
+            self.handshake_status = 8
+            return ret
+        return b''
+
+    def client_decode(self, buf):
+        if self.handshake_status == -1:
+            return (buf, False)
+
+        if self.handshake_status == 8:
+            ret = b''
+            self.recv_buffer += buf
+            while len(self.recv_buffer) > 5:
+                if ord(self.recv_buffer[0]) != 0x17:
+                    logging.info("data = %s" % (binascii.hexlify(self.recv_buffer)))
+                    raise Exception('server_decode appdata error')
+                size = struct.unpack('>H', self.recv_buffer[3:5])[0]
+                if len(self.recv_buffer) < size + 5:
+                    break
+                buf = self.recv_buffer[5:size+5]
+                ret += buf
+                self.recv_buffer = self.recv_buffer[size+5:]
+            return (ret, False)
+
+        if len(buf) < 11 + 32 + 1 + 32:
+            raise Exception('client_decode data error')
+        verify = buf[11:33]
+        if hmac.new(self.server_info.key + self.server_info.data.client_id, verify, hashlib.sha1).digest()[:10] != buf[33:43]:
+            raise Exception('client_decode data error')
+        if hmac.new(self.server_info.key + self.server_info.data.client_id, buf[:-10], hashlib.sha1).digest()[:10] != buf[-10:]:
+            raise Exception('client_decode data error')
+        return (b'', True)
+
+    def server_encode(self, buf):
+        if self.handshake_status == -1:
+            return buf
+        if (self.handshake_status & 8) == 8:
+            ret = b''
+            while len(buf) > 2048:
+                size = min(struct.unpack('>H', os.urandom(2))[0] % 4096 + 100, len(buf))
+                ret += b"\x17" + self.tls_version + struct.pack('>H', size) + buf[:size]
+                buf = buf[size:]
+            if len(buf) > 0:
+                ret += b"\x17" + self.tls_version + struct.pack('>H', len(buf)) + buf
+            return ret
+        self.handshake_status |= 8
+        data = self.tls_version + self.pack_auth_data(self.client_id) + b"\x20" + self.client_id + binascii.unhexlify(b"c02f000005ff01000100")
+        data = b"\x02\x00" + struct.pack('>H', len(data)) + data #server hello
+        data = b"\x16" + self.tls_version + struct.pack('>H', len(data)) + data
+        if random.randint(0, 8) < 1:
+            ticket = os.urandom((struct.unpack('>H', os.urandom(2))[0] % 164) * 2 + 64)
+            ticket = struct.pack('>H', len(ticket) + 4) + b"\x04\x00" + struct.pack('>H', len(ticket)) + ticket
+            data += b"\x16" + self.tls_version + ticket #New session ticket
+        data += b"\x14" + self.tls_version + b"\x00\x01\x01" #ChangeCipherSpec
+        finish_len = random.choice([32, 40])
+        data += b"\x16" + self.tls_version + struct.pack('>H', finish_len) + os.urandom(finish_len - 10) #Finished
+        data += hmac.new(self.server_info.key + self.client_id, data, hashlib.sha1).digest()[:10]
+        if buf:
+            data += self.server_encode(buf)
+        return data
+
+    def decode_error_return(self, buf):
+        self.handshake_status = -1
+        if self.overhead > 0:
+            self.server_info.overhead -= self.overhead
+        self.overhead = 0
+        if self.method in ['tls1.2_ticket_auth', 'tls1.2_ticket_fastauth']:
+            return (b'E'*2048, False, False)
+        return (buf, True, False)
+
+    def server_decode(self, buf):
+        if self.handshake_status == -1:
+            return (buf, True, False)
+
+        if (self.handshake_status & 4) == 4:
+            ret = b''
+            self.recv_buffer += buf
+            while len(self.recv_buffer) > 5:
+                if ord(self.recv_buffer[0]) != 0x17 or ord(self.recv_buffer[1]) != 0x3 or ord(self.recv_buffer[2]) != 0x3:
+                    logging.info("data = %s" % (binascii.hexlify(self.recv_buffer)))
+                    raise Exception('server_decode appdata error')
+                size = struct.unpack('>H', self.recv_buffer[3:5])[0]
+                if len(self.recv_buffer) < size + 5:
+                    break
+                ret += self.recv_buffer[5:size+5]
+                self.recv_buffer = self.recv_buffer[size+5:]
+            return (ret, True, False)
+
+        if (self.handshake_status & 1) == 1:
+            self.recv_buffer += buf
+            buf = self.recv_buffer
+            verify = buf
+            if len(buf) < 11:
+                raise Exception('server_decode data error')
+            if not match_begin(buf, b"\x14" + self.tls_version + b"\x00\x01\x01"): #ChangeCipherSpec
+                raise Exception('server_decode data error')
+            buf = buf[6:]
+            if not match_begin(buf, b"\x16" + self.tls_version + b"\x00"): #Finished
+                raise Exception('server_decode data error')
+            verify_len = struct.unpack('>H', buf[3:5])[0] + 1 # 11 - 10
+            if len(verify) < verify_len + 10:
+                return (b'', False, False)
+            if hmac.new(self.server_info.key + self.client_id, verify[:verify_len], hashlib.sha1).digest()[:10] != verify[verify_len:verify_len+10]:
+                raise Exception('server_decode data error')
+            self.recv_buffer = verify[verify_len + 10:]
+            status = self.handshake_status
+            self.handshake_status |= 4
+            ret = self.server_decode(b'')
+            return ret;
+
+        #raise Exception("handshake data = %s" % (binascii.hexlify(buf)))
+        self.recv_buffer += buf
+        buf = self.recv_buffer
+        ogn_buf = buf
+        if len(buf) < 3:
+            return (b'', False, False)
+        if not match_begin(buf, b'\x16\x03\x01'):
+            return self.decode_error_return(ogn_buf)
+        buf = buf[3:]
+        header_len = struct.unpack('>H', buf[:2])[0]
+        if header_len > len(buf) - 2:
+            return (b'', False, False)
+
+        self.recv_buffer = self.recv_buffer[header_len + 5:]
+        self.handshake_status = 1
+        buf = buf[2:header_len + 2]
+        if not match_begin(buf, b'\x01\x00'): #client hello
+            logging.info("tls_auth not client hello message")
+            return self.decode_error_return(ogn_buf)
+        buf = buf[2:]
+        if struct.unpack('>H', buf[:2])[0] != len(buf) - 2:
+            logging.info("tls_auth wrong message size")
+            return self.decode_error_return(ogn_buf)
+        buf = buf[2:]
+        if not match_begin(buf, self.tls_version):
+            logging.info("tls_auth wrong tls version")
+            return self.decode_error_return(ogn_buf)
+        buf = buf[2:]
+        verifyid = buf[:32]
+        buf = buf[32:]
+        sessionid_len = ord(buf[0])
+        if sessionid_len < 32:
+            logging.info("tls_auth wrong sessionid_len")
+            return self.decode_error_return(ogn_buf)
+        sessionid = buf[1:sessionid_len + 1]
+        buf = buf[sessionid_len+1:]
+        self.client_id = sessionid
+        sha1 = hmac.new(self.server_info.key + sessionid, verifyid[:22], hashlib.sha1).digest()[:10]
+        utc_time = struct.unpack('>I', verifyid[:4])[0]
+        time_dif = common.int32((int(time.time()) & 0xffffffff) - utc_time)
+        if self.server_info.obfs_param:
+            try:
+                self.max_time_dif = int(self.server_info.obfs_param)
+            except:
+                pass
+        if self.max_time_dif > 0 and (time_dif < -self.max_time_dif or time_dif > self.max_time_dif \
+                or common.int32(utc_time - self.server_info.data.startup_time) < -self.max_time_dif / 2):
+            logging.info("tls_auth wrong time")
+            return self.decode_error_return(ogn_buf)
+        if sha1 != verifyid[22:]:
+            logging.info("tls_auth wrong sha1")
+            return self.decode_error_return(ogn_buf)
+        if self.server_info.data.client_data.get(verifyid[:22]):
+            logging.info("replay attack detect, id = %s" % (binascii.hexlify(verifyid)))
+            return self.decode_error_return(ogn_buf)
+        self.server_info.data.client_data.sweep()
+        self.server_info.data.client_data[verifyid[:22]] = sessionid
+        if len(self.recv_buffer) >= 11:
+            ret = self.server_decode(b'')
+            return (ret[0], True, True)
+        # (buffer_to_recv, is_need_decrypt, is_need_to_encode_and_send_back)
+        return (b'', False, True)
+
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/obfsplugin/plain.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/obfsplugin/plain.py
new file mode 100644
index 0000000000..8c6355c38f
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/obfsplugin/plain.py
@@ -0,0 +1,104 @@
+#!/usr/bin/env python
+#
+# Copyright 2015-2015 breakwa11
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+import os
+import sys
+import hashlib
+import logging
+
+from shadowsocks.common import ord
+
+def create_obfs(method):
+    return plain(method)
+
+obfs_map = {
+        'plain': (create_obfs,),
+        'origin': (create_obfs,),
+}
+
+class plain(object):
+    def __init__(self, method):
+        self.method = method
+        self.server_info = None
+
+    def init_data(self):
+        return b''
+
+    def get_overhead(self, direction): # direction: true for c->s false for s->c
+        return 0
+
+    def get_server_info(self):
+        return self.server_info
+
+    def set_server_info(self, server_info):
+        self.server_info = server_info
+
+    def client_pre_encrypt(self, buf):
+        return buf
+
+    def client_encode(self, buf):
+        return buf
+
+    def client_decode(self, buf):
+        # (buffer_to_recv, is_need_to_encode_and_send_back)
+        return (buf, False)
+
+    def client_post_decrypt(self, buf):
+        return buf
+
+    def server_pre_encrypt(self, buf):
+        return buf
+
+    def server_encode(self, buf):
+        return buf
+
+    def server_decode(self, buf):
+        # (buffer_to_recv, is_need_decrypt, is_need_to_encode_and_send_back)
+        return (buf, True, False)
+
+    def server_post_decrypt(self, buf):
+        return (buf, False)
+
+    def client_udp_pre_encrypt(self, buf):
+        return buf
+
+    def client_udp_post_decrypt(self, buf):
+        return buf
+
+    def server_udp_pre_encrypt(self, buf, uid):
+        return buf
+
+    def server_udp_post_decrypt(self, buf):
+        return (buf, None)
+
+    def dispose(self):
+        pass
+
+    def get_head_size(self, buf, def_value):
+        if len(buf) < 2:
+            return def_value
+        head_type = ord(buf[0]) & 0x7
+        if head_type == 1:
+            return 7
+        if head_type == 4:
+            return 19
+        if head_type == 3:
+            return 4 + ord(buf[1])
+        return def_value
+
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/obfsplugin/verify.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/obfsplugin/verify.py
new file mode 100644
index 0000000000..0dc0ca6d10
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/obfsplugin/verify.py
@@ -0,0 +1,154 @@
+#!/usr/bin/env python
+#
+# Copyright 2015-2015 breakwa11
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+import os
+import sys
+import hashlib
+import logging
+import binascii
+import base64
+import time
+import datetime
+import random
+import struct
+import zlib
+import hmac
+import hashlib
+
+import shadowsocks
+from shadowsocks import common
+from shadowsocks.obfsplugin import plain
+from shadowsocks.common import to_bytes, to_str, ord, chr
+
+def create_verify_deflate(method):
+    return verify_deflate(method)
+
+obfs_map = {
+        'verify_deflate': (create_verify_deflate,),
+}
+
+def match_begin(str1, str2):
+    if len(str1) >= len(str2):
+        if str1[:len(str2)] == str2:
+            return True
+    return False
+
+class obfs_verify_data(object):
+    def __init__(self):
+        pass
+
+class verify_base(plain.plain):
+    def __init__(self, method):
+        super(verify_base, self).__init__(method)
+        self.method = method
+
+    def init_data(self):
+        return obfs_verify_data()
+
+    def set_server_info(self, server_info):
+        self.server_info = server_info
+
+    def client_encode(self, buf):
+        return buf
+
+    def client_decode(self, buf):
+        return (buf, False)
+
+    def server_encode(self, buf):
+        return buf
+
+    def server_decode(self, buf):
+        return (buf, True, False)
+
+class verify_deflate(verify_base):
+    def __init__(self, method):
+        super(verify_deflate, self).__init__(method)
+        self.recv_buf = b''
+        self.unit_len = 32700
+        self.decrypt_packet_num = 0
+        self.raw_trans = False
+
+    def pack_data(self, buf):
+        if len(buf) == 0:
+            return b''
+        data = zlib.compress(buf)
+        data = struct.pack('>H', len(data)) + data[2:]
+        return data
+
+    def client_pre_encrypt(self, buf):
+        ret = b''
+        while len(buf) > self.unit_len:
+            ret += self.pack_data(buf[:self.unit_len])
+            buf = buf[self.unit_len:]
+        ret += self.pack_data(buf)
+        return ret
+
+    def client_post_decrypt(self, buf):
+        if self.raw_trans:
+            return buf
+        self.recv_buf += buf
+        out_buf = b''
+        while len(self.recv_buf) > 2:
+            length = struct.unpack('>H', self.recv_buf[:2])[0]
+            if length >= 32768 or length < 6:
+                self.raw_trans = True
+                self.recv_buf = b''
+                raise Exception('client_post_decrypt data error')
+            if length > len(self.recv_buf):
+                break
+
+            out_buf += zlib.decompress(b'x\x9c' + self.recv_buf[2:length])
+            self.recv_buf = self.recv_buf[length:]
+
+        if out_buf:
+            self.decrypt_packet_num += 1
+        return out_buf
+
+    def server_pre_encrypt(self, buf):
+        ret = b''
+        while len(buf) > self.unit_len:
+            ret += self.pack_data(buf[:self.unit_len])
+            buf = buf[self.unit_len:]
+        ret += self.pack_data(buf)
+        return ret
+
+    def server_post_decrypt(self, buf):
+        if self.raw_trans:
+            return (buf, False)
+        self.recv_buf += buf
+        out_buf = b''
+        while len(self.recv_buf) > 2:
+            length = struct.unpack('>H', self.recv_buf[:2])[0]
+            if length >= 32768 or length < 6:
+                self.raw_trans = True
+                self.recv_buf = b''
+                if self.decrypt_packet_num == 0:
+                    return (b'E'*2048, False)
+                else:
+                    raise Exception('server_post_decrype data error')
+            if length > len(self.recv_buf):
+                break
+
+            out_buf += zlib.decompress(b'\x78\x9c' + self.recv_buf[2:length])
+            self.recv_buf = self.recv_buf[length:]
+
+        if out_buf:
+            self.decrypt_packet_num += 1
+        return (out_buf, False)
+
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/ordereddict.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/ordereddict.py
new file mode 100644
index 0000000000..e1918f5e02
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/ordereddict.py
@@ -0,0 +1,214 @@
+import collections
+
+################################################################################
+### OrderedDict
+################################################################################
+
+class OrderedDict(dict):
+    'Dictionary that remembers insertion order'
+    # An inherited dict maps keys to values.
+    # The inherited dict provides __getitem__, __len__, __contains__, and get.
+    # The remaining methods are order-aware.
+    # Big-O running times for all methods are the same as regular dictionaries.
+
+    # The internal self.__map dict maps keys to links in a doubly linked list.
+    # The circular doubly linked list starts and ends with a sentinel element.
+    # The sentinel element never gets deleted (this simplifies the algorithm).
+    # Each link is stored as a list of length three:  [PREV, NEXT, KEY].
+
+    def __init__(*args, **kwds):
+        '''Initialize an ordered dictionary.  The signature is the same as
+        regular dictionaries, but keyword arguments are not recommended because
+        their insertion order is arbitrary.
+
+        '''
+        if not args:
+            raise TypeError("descriptor '__init__' of 'OrderedDict' object "
+                            "needs an argument")
+        self = args[0]
+        args = args[1:]
+        if len(args) > 1:
+            raise TypeError('expected at most 1 arguments, got %d' % len(args))
+        try:
+            self.__root
+        except AttributeError:
+            self.__root = root = []                     # sentinel node
+            root[:] = [root, root, None]
+            self.__map = {}
+        self.__update(*args, **kwds)
+
+    def __setitem__(self, key, value, dict_setitem=dict.__setitem__):
+        'od.__setitem__(i, y) <==> od[i]=y'
+        # Setting a new item creates a new link at the end of the linked list,
+        # and the inherited dictionary is updated with the new key/value pair.
+        if key not in self:
+            root = self.__root
+            last = root[0]
+            last[1] = root[0] = self.__map[key] = [last, root, key]
+        return dict_setitem(self, key, value)
+
+    def __delitem__(self, key, dict_delitem=dict.__delitem__):
+        'od.__delitem__(y) <==> del od[y]'
+        # Deleting an existing item uses self.__map to find the link which gets
+        # removed by updating the links in the predecessor and successor nodes.
+        dict_delitem(self, key)
+        link_prev, link_next, _ = self.__map.pop(key)
+        link_prev[1] = link_next                        # update link_prev[NEXT]
+        link_next[0] = link_prev                        # update link_next[PREV]
+
+    def __iter__(self):
+        'od.__iter__() <==> iter(od)'
+        # Traverse the linked list in order.
+        root = self.__root
+        curr = root[1]                                  # start at the first node
+        while curr is not root:
+            yield curr[2]                               # yield the curr[KEY]
+            curr = curr[1]                              # move to next node
+
+    def __reversed__(self):
+        'od.__reversed__() <==> reversed(od)'
+        # Traverse the linked list in reverse order.
+        root = self.__root
+        curr = root[0]                                  # start at the last node
+        while curr is not root:
+            yield curr[2]                               # yield the curr[KEY]
+            curr = curr[0]                              # move to previous node
+
+    def clear(self):
+        'od.clear() -> None.  Remove all items from od.'
+        root = self.__root
+        root[:] = [root, root, None]
+        self.__map.clear()
+        dict.clear(self)
+
+    # -- the following methods do not depend on the internal structure --
+
+    def keys(self):
+        'od.keys() -> list of keys in od'
+        return list(self)
+
+    def values(self):
+        'od.values() -> list of values in od'
+        return [self[key] for key in self]
+
+    def items(self):
+        'od.items() -> list of (key, value) pairs in od'
+        return [(key, self[key]) for key in self]
+
+    def iterkeys(self):
+        'od.iterkeys() -> an iterator over the keys in od'
+        return iter(self)
+
+    def itervalues(self):
+        'od.itervalues -> an iterator over the values in od'
+        for k in self:
+            yield self[k]
+
+    def iteritems(self):
+        'od.iteritems -> an iterator over the (key, value) pairs in od'
+        for k in self:
+            yield (k, self[k])
+
+    update = collections.MutableMapping.update
+
+    __update = update # let subclasses override update without breaking __init__
+
+    __marker = object()
+
+    def pop(self, key, default=__marker):
+        '''od.pop(k[,d]) -> v, remove specified key and return the corresponding
+        value.  If key is not found, d is returned if given, otherwise KeyError
+        is raised.
+
+        '''
+        if key in self:
+            result = self[key]
+            del self[key]
+            return result
+        if default is self.__marker:
+            raise KeyError(key)
+        return default
+
+    def setdefault(self, key, default=None):
+        'od.setdefault(k[,d]) -> od.get(k,d), also set od[k]=d if k not in od'
+        if key in self:
+            return self[key]
+        self[key] = default
+        return default
+
+    def popitem(self, last=True):
+        '''od.popitem() -> (k, v), return and remove a (key, value) pair.
+        Pairs are returned in LIFO order if last is true or FIFO order if false.
+
+        '''
+        if not self:
+            raise KeyError('dictionary is empty')
+        key = next(reversed(self) if last else iter(self))
+        value = self.pop(key)
+        return key, value
+
+    def __repr__(self, _repr_running={}):
+        'od.__repr__() <==> repr(od)'
+        call_key = id(self), _get_ident()
+        if call_key in _repr_running:
+            return '...'
+        _repr_running[call_key] = 1
+        try:
+            if not self:
+                return '%s()' % (self.__class__.__name__,)
+            return '%s(%r)' % (self.__class__.__name__, self.items())
+        finally:
+            del _repr_running[call_key]
+
+    def __reduce__(self):
+        'Return state information for pickling'
+        items = [[k, self[k]] for k in self]
+        inst_dict = vars(self).copy()
+        for k in vars(OrderedDict()):
+            inst_dict.pop(k, None)
+        if inst_dict:
+            return (self.__class__, (items,), inst_dict)
+        return self.__class__, (items,)
+
+    def copy(self):
+        'od.copy() -> a shallow copy of od'
+        return self.__class__(self)
+
+    @classmethod
+    def fromkeys(cls, iterable, value=None):
+        '''OD.fromkeys(S[, v]) -> New ordered dictionary with keys from S.
+        If not specified, the value defaults to None.
+
+        '''
+        self = cls()
+        for key in iterable:
+            self[key] = value
+        return self
+
+    def __eq__(self, other):
+        '''od.__eq__(y) <==> od==y.  Comparison to another OD is order-sensitive
+        while comparison to a regular mapping is order-insensitive.
+
+        '''
+        if isinstance(other, OrderedDict):
+            return dict.__eq__(self, other) and all(_imap(_eq, self, other))
+        return dict.__eq__(self, other)
+
+    def __ne__(self, other):
+        'od.__ne__(y) <==> od!=y'
+        return not self == other
+
+    # -- the following methods support python 3.x style dictionary views --
+
+    def viewkeys(self):
+        "od.viewkeys() -> a set-like object providing a view on od's keys"
+        return KeysView(self)
+
+    def viewvalues(self):
+        "od.viewvalues() -> an object providing a view on od's values"
+        return ValuesView(self)
+
+    def viewitems(self):
+        "od.viewitems() -> a set-like object providing a view on od's items"
+        return ItemsView(self)
+
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/run.sh b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/run.sh
new file mode 100755
index 0000000000..43720308dc
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/run.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+cd `dirname $0`
+python_ver=$(ls /usr/bin|grep -e "^python[23]\.[1-9]\+$"|tail -1)
+eval $(ps -ef | grep "[0-9] ${python_ver} server\\.py a" | awk '{print "kill "$2}')
+ulimit -n 512000
+nohup ${python_ver} server.py a>> /dev/null 2>&1 &
+
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/server.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/server.py
new file mode 100644
index 0000000000..081538933b
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/server.py
@@ -0,0 +1,221 @@
+#!/usr/bin/env python
+# -*- coding: utf-8 -*-
+#
+# Copyright 2015 clowwindy
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+import sys
+import os
+import logging
+import signal
+
+if __name__ == '__main__':
+    import inspect
+
+    file_path = os.path.dirname(os.path.realpath(inspect.getfile(inspect.currentframe())))
+    sys.path.insert(0, os.path.join(file_path, '../'))
+
+from shadowsocks import shell, daemon, eventloop, tcprelay, udprelay, \
+    asyncdns, manager, common
+
+
+def main():
+    shell.check_python()
+
+    config = shell.get_config(False)
+
+    shell.log_shadowsocks_version()
+
+    daemon.daemon_exec(config)
+
+    try:
+        import resource
+        logging.info(
+            'current process RLIMIT_NOFILE resource: soft %d hard %d' % resource.getrlimit(resource.RLIMIT_NOFILE))
+    except ImportError:
+        pass
+
+    if config['port_password']:
+        pass
+    else:
+        config['port_password'] = {}
+        server_port = config['server_port']
+        if type(server_port) == list:
+            for a_server_port in server_port:
+                config['port_password'][a_server_port] = config['password']
+        else:
+            config['port_password'][str(server_port)] = config['password']
+
+    if not config.get('dns_ipv6', False):
+        asyncdns.IPV6_CONNECTION_SUPPORT = False
+
+    if config.get('manager_address', 0):
+        logging.info('entering manager mode')
+        manager.run(config)
+        return
+
+    tcp_servers = []
+    udp_servers = []
+    dns_resolver = asyncdns.DNSResolver(config['black_hostname_list'])
+    if int(config['workers']) > 1:
+        stat_counter_dict = None
+    else:
+        stat_counter_dict = {}
+    port_password = config['port_password']
+    config_password = config.get('password', 'm')
+    del config['port_password']
+    for port, password_obfs in port_password.items():
+        method = config["method"]
+        protocol = config.get("protocol", 'origin')
+        protocol_param = config.get("protocol_param", '')
+        obfs = config.get("obfs", 'plain')
+        obfs_param = config.get("obfs_param", '')
+        bind = config.get("out_bind", '')
+        bindv6 = config.get("out_bindv6", '')
+        if type(password_obfs) == list:
+            password = password_obfs[0]
+            obfs = common.to_str(password_obfs[1])
+            if len(password_obfs) > 2:
+                protocol = common.to_str(password_obfs[2])
+        elif type(password_obfs) == dict:
+            password = password_obfs.get('password', config_password)
+            method = common.to_str(password_obfs.get('method', method))
+            protocol = common.to_str(password_obfs.get('protocol', protocol))
+            protocol_param = common.to_str(password_obfs.get('protocol_param', protocol_param))
+            obfs = common.to_str(password_obfs.get('obfs', obfs))
+            obfs_param = common.to_str(password_obfs.get('obfs_param', obfs_param))
+            bind = password_obfs.get('out_bind', bind)
+            bindv6 = password_obfs.get('out_bindv6', bindv6)
+        else:
+            password = password_obfs
+        a_config = config.copy()
+        ipv6_ok = False
+        logging.info("server start with protocol[%s] password [%s] method [%s] obfs [%s] obfs_param [%s]" %
+                     (protocol, password, method, obfs, obfs_param))
+        if 'server_ipv6' in a_config:
+            try:
+                if len(a_config['server_ipv6']) > 2 and a_config['server_ipv6'][0] == "[" and a_config['server_ipv6'][
+                    -1] == "]":
+                    a_config['server_ipv6'] = a_config['server_ipv6'][1:-1]
+                a_config['server_port'] = int(port)
+                a_config['password'] = password
+                a_config['method'] = method
+                a_config['protocol'] = protocol
+                a_config['protocol_param'] = protocol_param
+                a_config['obfs'] = obfs
+                a_config['obfs_param'] = obfs_param
+                a_config['out_bind'] = bind
+                a_config['out_bindv6'] = bindv6
+                a_config['server'] = a_config['server_ipv6']
+                logging.info("starting server at [%s]:%d" %
+                             (a_config['server'], int(port)))
+                tcp_servers.append(tcprelay.TCPRelay(a_config, dns_resolver, False, stat_counter=stat_counter_dict))
+                udp_servers.append(udprelay.UDPRelay(a_config, dns_resolver, False, stat_counter=stat_counter_dict))
+                if a_config['server_ipv6'] == b"::":
+                    ipv6_ok = True
+            except Exception as e:
+                shell.print_exception(e)
+
+        try:
+            a_config = config.copy()
+            a_config['server_port'] = int(port)
+            a_config['password'] = password
+            a_config['method'] = method
+            a_config['protocol'] = protocol
+            a_config['protocol_param'] = protocol_param
+            a_config['obfs'] = obfs
+            a_config['obfs_param'] = obfs_param
+            a_config['out_bind'] = bind
+            a_config['out_bindv6'] = bindv6
+            logging.info("starting server at %s:%d" %
+                         (a_config['server'], int(port)))
+            tcp_servers.append(tcprelay.TCPRelay(a_config, dns_resolver, False, stat_counter=stat_counter_dict))
+            udp_servers.append(udprelay.UDPRelay(a_config, dns_resolver, False, stat_counter=stat_counter_dict))
+        except Exception as e:
+            if not ipv6_ok:
+                shell.print_exception(e)
+
+    def run_server():
+        def child_handler(signum, _):
+            logging.warn('received SIGQUIT, doing graceful shutting down..')
+            list(map(lambda s: s.close(next_tick=True),
+                     tcp_servers + udp_servers))
+
+        signal.signal(getattr(signal, 'SIGQUIT', signal.SIGTERM),
+                      child_handler)
+
+        def int_handler(signum, _):
+            sys.exit(1)
+
+        signal.signal(signal.SIGINT, int_handler)
+
+        try:
+            loop = eventloop.EventLoop()
+            dns_resolver.add_to_loop(loop)
+            list(map(lambda s: s.add_to_loop(loop), tcp_servers + udp_servers))
+
+            daemon.set_user(config.get('user', None))
+            loop.run()
+        except Exception as e:
+            shell.print_exception(e)
+            sys.exit(1)
+
+    if int(config['workers']) > 1:
+        if os.name == 'posix':
+            children = []
+            is_child = False
+            for i in range(0, int(config['workers'])):
+                r = os.fork()
+                if r == 0:
+                    logging.info('worker started')
+                    is_child = True
+                    run_server()
+                    break
+                else:
+                    children.append(r)
+            if not is_child:
+                def handler(signum, _):
+                    for pid in children:
+                        try:
+                            os.kill(pid, signum)
+                            os.waitpid(pid, 0)
+                        except OSError:  # child may already exited
+                            pass
+                    sys.exit()
+
+                signal.signal(signal.SIGTERM, handler)
+                signal.signal(signal.SIGQUIT, handler)
+                signal.signal(signal.SIGINT, handler)
+
+                # master
+                for a_tcp_server in tcp_servers:
+                    a_tcp_server.close()
+                for a_udp_server in udp_servers:
+                    a_udp_server.close()
+                dns_resolver.close()
+
+                for child in children:
+                    os.waitpid(child, 0)
+        else:
+            logging.warn('worker is only available on Unix/Linux')
+            run_server()
+    else:
+        run_server()
+
+
+if __name__ == '__main__':
+    main()
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/shell.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/shell.py
new file mode 100644
index 0000000000..a1547d0821
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/shell.py
@@ -0,0 +1,451 @@
+#!/usr/bin/python
+# -*- coding: utf-8 -*-
+#
+# Copyright 2015 clowwindy
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+import os
+import json
+import sys
+import getopt
+import logging
+from shadowsocks.common import to_bytes, to_str, IPNetwork, PortRange
+from shadowsocks import encrypt
+
+VERBOSE_LEVEL = 5
+
+verbose = 0
+
+
+def check_python():
+    info = sys.version_info
+    if info[0] == 2 and not info[1] >= 6:
+        print('Python 2.6+ required')
+        sys.exit(1)
+    elif info[0] == 3 and not info[1] >= 3:
+        print('Python 3.3+ required')
+        sys.exit(1)
+    elif info[0] not in [2, 3]:
+        print('Python version not supported')
+        sys.exit(1)
+
+
+def print_exception(e):
+    global verbose
+    logging.error(e)
+    if verbose > 0:
+        import traceback
+        traceback.print_exc()
+
+
+def __version():
+    version_str = ''
+    try:
+        import pkg_resources
+        version_str = pkg_resources.get_distribution('shadowsocks').version
+    except Exception:
+        try:
+            from shadowsocks import version
+            version_str = version.version()
+        except Exception:
+            pass
+    return version_str
+
+
+def print_shadowsocks():
+    print('ShadowsocksR %s' % __version())
+
+
+def log_shadowsocks_version():
+    logging.info('ShadowsocksR %s' % __version())
+
+
+def find_config():
+    user_config_path = 'user-config.json'
+    config_path = 'config.json'
+
+    def sub_find(file_name):
+        if os.path.exists(file_name):
+            return file_name
+        file_name = os.path.join(os.path.abspath('..'), file_name)
+        return file_name if os.path.exists(file_name) else None
+
+    return sub_find(user_config_path) or sub_find(config_path)
+
+
+def check_config(config, is_local):
+    if config.get('daemon', None) == 'stop':
+        # no need to specify configuration for daemon stop
+        return
+
+    if is_local and not config.get('password', None):
+        logging.error('password not specified')
+        print_help(is_local)
+        sys.exit(2)
+
+    if not is_local and not config.get('password', None) \
+            and not config.get('port_password', None):
+        logging.error('password or port_password not specified')
+        print_help(is_local)
+        sys.exit(2)
+
+    if 'local_port' in config:
+        config['local_port'] = int(config['local_port'])
+
+    if 'server_port' in config and type(config['server_port']) != list:
+        config['server_port'] = int(config['server_port'])
+
+    if config.get('local_address', '') in [b'0.0.0.0']:
+        logging.warning('warning: local set to listen on 0.0.0.0, it\'s not safe')
+    if config.get('server', '') in ['127.0.0.1', 'localhost']:
+        logging.warning('warning: server set to listen on %s:%s, are you sure?' %
+                        (to_str(config['server']), config['server_port']))
+    if config.get('timeout', 300) < 100:
+        logging.warning('warning: your timeout %d seems too short' %
+                        int(config.get('timeout')))
+    if config.get('timeout', 300) > 600:
+        logging.warning('warning: your timeout %d seems too long' %
+                        int(config.get('timeout')))
+    if config.get('password') in [b'mypassword']:
+        logging.error('DON\'T USE DEFAULT PASSWORD! Please change it in your '
+                      'config.json!')
+        sys.exit(1)
+    if config.get('user', None) is not None:
+        if os.name != 'posix':
+            logging.error('user can be used only on Unix')
+            sys.exit(1)
+
+    encrypt.try_cipher(config['password'], config['method'])
+
+
+def get_config(is_local):
+    global verbose
+    config = {}
+    config_path = None
+    logging.basicConfig(level=logging.INFO,
+                        format='%(levelname)-s: %(message)s')
+    if is_local:
+        shortopts = 'hd:s:b:p:k:l:m:O:o:G:g:c:t:vq'
+        longopts = ['help', 'fast-open', 'pid-file=', 'log-file=', 'user=',
+                    'version']
+    else:
+        shortopts = 'hd:s:p:k:m:O:o:G:g:c:t:vq'
+        longopts = ['help', 'fast-open', 'pid-file=', 'log-file=', 'workers=',
+                    'forbidden-ip=', 'user=', 'manager-address=', 'version']
+    try:
+        optlist, args = getopt.getopt(sys.argv[1:], shortopts, longopts)
+        for key, value in optlist:
+            if key == '-c':
+                config_path = value
+            elif key in ('-h', '--help'):
+                print_help(is_local)
+                sys.exit(0)
+            elif key == '--version':
+                print_shadowsocks()
+                sys.exit(0)
+            else:
+                continue
+
+        if config_path is None:
+            config_path = find_config()
+
+        if config_path:
+            logging.debug('loading config from %s' % config_path)
+            with open(config_path, 'rb') as f:
+                try:
+                    config = parse_json_in_str(remove_comment(f.read().decode('utf8')))
+                except ValueError as e:
+                    logging.error('found an error in config.json: %s', str(e))
+                    sys.exit(1)
+
+        v_count = 0
+        for key, value in optlist:
+            if key == '-p':
+                config['server_port'] = int(value)
+            elif key == '-k':
+                config['password'] = to_bytes(value)
+            elif key == '-l':
+                config['local_port'] = int(value)
+            elif key == '-s':
+                config['server'] = to_str(value)
+            elif key == '-m':
+                config['method'] = to_str(value)
+            elif key == '-O':
+                config['protocol'] = to_str(value)
+            elif key == '-o':
+                config['obfs'] = to_str(value)
+            elif key == '-G':
+                config['protocol_param'] = to_str(value)
+            elif key == '-g':
+                config['obfs_param'] = to_str(value)
+            elif key == '-b':
+                config['local_address'] = to_str(value)
+            elif key == '-v':
+                v_count += 1
+                # '-vv' turns on more verbose mode
+                config['verbose'] = v_count
+            elif key == '-t':
+                config['timeout'] = int(value)
+            elif key == '--fast-open':
+                config['fast_open'] = True
+            elif key == '--workers':
+                config['workers'] = int(value)
+            elif key == '--manager-address':
+                config['manager_address'] = value
+            elif key == '--user':
+                config['user'] = to_str(value)
+            elif key == '--forbidden-ip':
+                config['forbidden_ip'] = to_str(value)
+
+            elif key == '-d':
+                config['daemon'] = to_str(value)
+            elif key == '--pid-file':
+                config['pid-file'] = to_str(value)
+            elif key == '--log-file':
+                config['log-file'] = to_str(value)
+            elif key == '-q':
+                v_count -= 1
+                config['verbose'] = v_count
+            else:
+                continue
+    except getopt.GetoptError as e:
+        print(e, file=sys.stderr)
+        print_help(is_local)
+        sys.exit(2)
+
+    if not config:
+        logging.error('config not specified')
+        print_help(is_local)
+        sys.exit(2)
+
+    config['password'] = to_bytes(config.get('password', b''))
+    config['method'] = to_str(config.get('method', 'aes-256-cfb'))
+    config['protocol'] = to_str(config.get('protocol', 'origin'))
+    config['protocol_param'] = to_str(config.get('protocol_param', ''))
+    config['obfs'] = to_str(config.get('obfs', 'plain'))
+    config['obfs_param'] = to_str(config.get('obfs_param', ''))
+    config['port_password'] = config.get('port_password', None)
+    config['additional_ports'] = config.get('additional_ports', {})
+    config['additional_ports_only'] = config.get('additional_ports_only', False)
+    config['timeout'] = int(config.get('timeout', 300))
+    config['udp_timeout'] = int(config.get('udp_timeout', 120))
+    config['udp_cache'] = int(config.get('udp_cache', 64))
+    config['fast_open'] = config.get('fast_open', False)
+    config['workers'] = config.get('workers', 1)
+    config['pid-file'] = config.get('pid-file', '/var/run/shadowsocksr.pid')
+    config['log-file'] = config.get('log-file', '/var/log/shadowsocksr.log')
+    config['verbose'] = config.get('verbose', False)
+    config['connect_verbose_info'] = config.get('connect_verbose_info', 0)
+    config['local_address'] = to_str(config.get('local_address', '127.0.0.1'))
+    config['local_port'] = config.get('local_port', 1080)
+    if is_local:
+        if config.get('server', None) is None:
+            logging.error('server addr not specified')
+            print_local_help()
+            sys.exit(2)
+        else:
+            config['server'] = to_str(config['server'])
+    else:
+        config['server'] = to_str(config.get('server', '0.0.0.0'))
+        config['black_hostname_list'] = to_str(config.get('black_hostname_list', '')).split(',')
+        if len(config['black_hostname_list']) == 1 and config['black_hostname_list'][0] == '':
+            config['black_hostname_list'] = []
+        try:
+            config['forbidden_ip'] = \
+                IPNetwork(config.get('forbidden_ip', '127.0.0.0/8,::1/128'))
+        except Exception as e:
+            logging.error(e)
+            sys.exit(2)
+        try:
+            config['forbidden_port'] = PortRange(config.get('forbidden_port', ''))
+        except Exception as e:
+            logging.error(e)
+            sys.exit(2)
+        try:
+            config['ignore_bind'] = \
+                IPNetwork(config.get('ignore_bind', '127.0.0.0/8,::1/128,10.0.0.0/8,192.168.0.0/16'))
+        except Exception as e:
+            logging.error(e)
+            sys.exit(2)
+    config['server_port'] = config.get('server_port', 8388)
+
+    logging.getLogger('').handlers = []
+    logging.addLevelName(VERBOSE_LEVEL, 'VERBOSE')
+    if config['verbose'] >= 2:
+        level = VERBOSE_LEVEL
+    elif config['verbose'] == 1:
+        level = logging.DEBUG
+    elif config['verbose'] == -1:
+        level = logging.WARN
+    elif config['verbose'] <= -2:
+        level = logging.ERROR
+    else:
+        level = logging.INFO
+    verbose = config['verbose']
+    logging.basicConfig(level=level,
+                        format='%(asctime)s %(levelname)-8s %(filename)s:%(lineno)s %(message)s',
+                        datefmt='%Y-%m-%d %H:%M:%S')
+
+    check_config(config, is_local)
+
+    return config
+
+
+def print_help(is_local):
+    if is_local:
+        print_local_help()
+    else:
+        print_server_help()
+
+
+def print_local_help():
+    print('''usage: sslocal [OPTION]...
+A fast tunnel proxy that helps you bypass firewalls.
+
+You can supply configurations via either config file or command line arguments.
+
+Proxy options:
+  -c CONFIG              path to config file
+  -s SERVER_ADDR         server address
+  -p SERVER_PORT         server port, default: 8388
+  -b LOCAL_ADDR          local binding address, default: 127.0.0.1
+  -l LOCAL_PORT          local port, default: 1080
+  -k PASSWORD            password
+  -m METHOD              encryption method, default: aes-256-cfb
+  -o OBFS                obfsplugin, default: http_simple
+  -t TIMEOUT             timeout in seconds, default: 300
+  --fast-open            use TCP_FASTOPEN, requires Linux 3.7+
+
+General options:
+  -h, --help             show this help message and exit
+  -d start/stop/restart  daemon mode
+  --pid-file PID_FILE    pid file for daemon mode
+  --log-file LOG_FILE    log file for daemon mode
+  --user USER            username to run as
+  -v, -vv                verbose mode
+  -q, -qq                quiet mode, only show warnings/errors
+  --version              show version information
+
+Online help: <https://github.com/shadowsocks/shadowsocks>
+''')
+
+
+def print_server_help():
+    print('''usage: ssserver [OPTION]...
+A fast tunnel proxy that helps you bypass firewalls.
+
+You can supply configurations via either config file or command line arguments.
+
+Proxy options:
+  -c CONFIG              path to config file
+  -s SERVER_ADDR         server address, default: 0.0.0.0
+  -p SERVER_PORT         server port, default: 8388
+  -k PASSWORD            password
+  -m METHOD              encryption method, default: aes-256-cfb
+  -o OBFS                obfsplugin, default: http_simple
+  -t TIMEOUT             timeout in seconds, default: 300
+  --fast-open            use TCP_FASTOPEN, requires Linux 3.7+
+  --workers WORKERS      number of workers, available on Unix/Linux
+  --forbidden-ip IPLIST  comma seperated IP list forbidden to connect
+  --manager-address ADDR optional server manager UDP address, see wiki
+
+General options:
+  -h, --help             show this help message and exit
+  -d start/stop/restart  daemon mode
+  --pid-file PID_FILE    pid file for daemon mode
+  --log-file LOG_FILE    log file for daemon mode
+  --user USER            username to run as
+  -v, -vv                verbose mode
+  -q, -qq                quiet mode, only show warnings/errors
+  --version              show version information
+
+Online help: <https://github.com/shadowsocks/shadowsocks>
+''')
+
+
+def _decode_list(data):
+    rv = []
+    for item in data:
+        if hasattr(item, 'encode'):
+            item = item.encode('utf-8')
+        elif isinstance(item, list):
+            item = _decode_list(item)
+        elif isinstance(item, dict):
+            item = _decode_dict(item)
+        rv.append(item)
+    return rv
+
+
+def _decode_dict(data):
+    rv = {}
+    for key, value in data.items():
+        if hasattr(value, 'encode'):
+            value = value.encode('utf-8')
+        elif isinstance(value, list):
+            value = _decode_list(value)
+        elif isinstance(value, dict):
+            value = _decode_dict(value)
+        rv[key] = value
+    return rv
+
+
+class JSFormat:
+    def __init__(self):
+        self.state = 0
+
+    def push(self, ch):
+        ch = ord(ch)
+        if self.state == 0:
+            if ch == ord('"'):
+                self.state = 1
+                return to_str(chr(ch))
+            elif ch == ord('/'):
+                self.state = 3
+            else:
+                return to_str(chr(ch))
+        elif self.state == 1:
+            if ch == ord('"'):
+                self.state = 0
+                return to_str(chr(ch))
+            elif ch == ord('\\'):
+                self.state = 2
+            return to_str(chr(ch))
+        elif self.state == 2:
+            self.state = 1
+            if ch == ord('"'):
+                return to_str(chr(ch))
+            return "\\" + to_str(chr(ch))
+        elif self.state == 3:
+            if ch == ord('/'):
+                self.state = 4
+            else:
+                return "/" + to_str(chr(ch))
+        elif self.state == 4:
+            if ch == ord('\n'):
+                self.state = 0
+                return "\n"
+        return ""
+
+
+def remove_comment(json):
+    fmt = JSFormat()
+    return "".join([fmt.push(c) for c in json])
+
+
+def parse_json_in_str(data):
+    # parse json and convert everything from unicode to str
+    return json.loads(data, object_hook=_decode_dict)
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/stop.sh b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/stop.sh
new file mode 100755
index 0000000000..d7d29589ec
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/stop.sh
@@ -0,0 +1,5 @@
+#!/bin/bash
+
+python_ver=$(ls /usr/bin|grep -e "^python[23]\.[1-9]\+$"|tail -1)
+eval $(ps -ef | grep "[0-9] ${python_ver} server\\.py a" | awk '{print "kill "$2}')
+
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/tail.sh b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/tail.sh
new file mode 100755
index 0000000000..aa37139396
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/tail.sh
@@ -0,0 +1,3 @@
+#!/bin/bash
+
+tail -f ssserver.log
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/tcprelay.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/tcprelay.py
new file mode 100644
index 0000000000..595e2be73f
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/tcprelay.py
@@ -0,0 +1,1476 @@
+#!/usr/bin/python
+# -*- coding: utf-8 -*-
+#
+# Copyright 2015 clowwindy
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+import time
+import socket
+import errno
+import struct
+import logging
+import binascii
+import traceback
+import random
+import platform
+import threading
+
+from shadowsocks import encrypt, obfs, eventloop, shell, common, lru_cache, version
+from shadowsocks.common import pre_parse_header, parse_header
+
+# we clear at most TIMEOUTS_CLEAN_SIZE timeouts each time
+TIMEOUTS_CLEAN_SIZE = 512
+
+MSG_FASTOPEN = 0x20000000
+
+# SOCKS command definition
+CMD_CONNECT = 1
+CMD_BIND = 2
+CMD_UDP_ASSOCIATE = 3
+
+# for each opening port, we have a TCP Relay
+
+# for each connection, we have a TCP Relay Handler to handle the connection
+
+# for each handler, we have 2 sockets:
+#    local:   connected to the client
+#    remote:  connected to remote server
+
+# for each handler, it could be at one of several stages:
+
+# as sslocal:
+# stage 0 SOCKS hello received from local, send hello to local
+# stage 1 addr received from local, query DNS for remote
+# stage 2 UDP assoc
+# stage 3 DNS resolved, connect to remote
+# stage 4 still connecting, more data from local received
+# stage 5 remote connected, piping local and remote
+
+# as ssserver:
+# stage 0 just jump to stage 1
+# stage 1 addr received from local, query DNS for remote
+# stage 3 DNS resolved, connect to remote
+# stage 4 still connecting, more data from local received
+# stage 5 remote connected, piping local and remote
+
+STAGE_INIT = 0
+STAGE_ADDR = 1
+STAGE_UDP_ASSOC = 2
+STAGE_DNS = 3
+STAGE_CONNECTING = 4
+STAGE_STREAM = 5
+STAGE_DESTROYED = -1
+
+# for each handler, we have 2 stream directions:
+#    upstream:    from client to server direction
+#                 read local and write to remote
+#    downstream:  from server to client direction
+#                 read remote and write to local
+
+STREAM_UP = 0
+STREAM_DOWN = 1
+
+# for each stream, it's waiting for reading, or writing, or both
+WAIT_STATUS_INIT = 0
+WAIT_STATUS_READING = 1
+WAIT_STATUS_WRITING = 2
+WAIT_STATUS_READWRITING = WAIT_STATUS_READING | WAIT_STATUS_WRITING
+
+NETWORK_MTU = 1500
+TCP_MSS = NETWORK_MTU - 40
+BUF_SIZE = 32 * 1024
+UDP_MAX_BUF_SIZE = 65536
+
+class SpeedTester(object):
+    def __init__(self, max_speed = 0):
+        self.max_speed = max_speed * 1024
+        self.last_time = time.time()
+        self.sum_len = 0
+
+    def update_limit(self, max_speed):
+        self.max_speed = max_speed * 1024
+
+    def add(self, data_len):
+        if self.max_speed > 0:
+            cut_t = time.time()
+            self.sum_len -= (cut_t - self.last_time) * self.max_speed
+            if self.sum_len < 0:
+                self.sum_len = 0
+            self.last_time = cut_t
+            self.sum_len += data_len
+
+    def isExceed(self):
+        if self.max_speed > 0:
+            cut_t = time.time()
+            self.sum_len -= (cut_t - self.last_time) * self.max_speed
+            if self.sum_len < 0:
+                self.sum_len = 0
+            self.last_time = cut_t
+            return self.sum_len >= self.max_speed
+        return False
+
+class TCPRelayHandler(object):
+    def __init__(self, server, fd_to_handlers, loop, local_sock, config,
+                 dns_resolver, is_local):
+        self._server = server
+        self._fd_to_handlers = fd_to_handlers
+        self._loop = loop
+        self._local_sock = local_sock
+        self._remote_sock = None
+        self._remote_sock_v6 = None
+        self._local_sock_fd = None
+        self._remote_sock_fd = None
+        self._remotev6_sock_fd = None
+        self._remote_udp = False
+        self._config = config
+        self._dns_resolver = dns_resolver
+        self._add_ref = 0
+        if not self._create_encryptor(config):
+            return
+
+        self._client_address = local_sock.getpeername()[:2]
+        self._accept_address = local_sock.getsockname()[:2]
+        self._user = None
+        self._user_id = server._listen_port
+        self._update_tcp_mss(local_sock)
+
+        # TCP Relay works as either sslocal or ssserver
+        # if is_local, this is sslocal
+        self._is_local = is_local
+        self._encrypt_correct = True
+        self._obfs = obfs.obfs(config['obfs'])
+        self._protocol = obfs.obfs(config['protocol'])
+        self._overhead = self._obfs.get_overhead(self._is_local) + self._protocol.get_overhead(self._is_local)
+        self._recv_buffer_size = BUF_SIZE - self._overhead
+
+        server_info = obfs.server_info(server.obfs_data)
+        server_info.host = config['server']
+        server_info.port = server._listen_port
+        #server_info.users = server.server_users
+        #server_info.update_user_func = self._update_user
+        server_info.client = self._client_address[0]
+        server_info.client_port = self._client_address[1]
+        server_info.protocol_param = ''
+        server_info.obfs_param = config['obfs_param']
+        server_info.iv = self._encryptor.cipher_iv
+        server_info.recv_iv = b''
+        server_info.key_str = common.to_bytes(config['password'])
+        server_info.key = self._encryptor.cipher_key
+        server_info.head_len = 30
+        server_info.tcp_mss = self._tcp_mss
+        server_info.buffer_size = self._recv_buffer_size
+        server_info.overhead = self._overhead
+        self._obfs.set_server_info(server_info)
+
+        server_info = obfs.server_info(server.protocol_data)
+        server_info.host = config['server']
+        server_info.port = server._listen_port
+        server_info.users = server.server_users
+        server_info.update_user_func = self._update_user
+        server_info.client = self._client_address[0]
+        server_info.client_port = self._client_address[1]
+        server_info.protocol_param = config['protocol_param']
+        server_info.obfs_param = ''
+        server_info.iv = self._encryptor.cipher_iv
+        server_info.recv_iv = b''
+        server_info.key_str = common.to_bytes(config['password'])
+        server_info.key = self._encryptor.cipher_key
+        server_info.head_len = 30
+        server_info.tcp_mss = self._tcp_mss
+        server_info.buffer_size = self._recv_buffer_size
+        server_info.overhead = self._overhead
+        self._protocol.set_server_info(server_info)
+
+        self._redir_list = config.get('redirect', ["*#0.0.0.0:0"])
+        self._is_redirect = False
+        self._bind = config.get('out_bind', '')
+        self._bindv6 = config.get('out_bindv6', '')
+        self._ignore_bind_list = config.get('ignore_bind', [])
+
+        self._fastopen_connected = False
+        self._data_to_write_to_local = []
+        self._data_to_write_to_remote = []
+        self._udp_data_send_buffer = b''
+        self._upstream_status = WAIT_STATUS_READING
+        self._downstream_status = WAIT_STATUS_INIT
+        self._remote_address = None
+
+        self._forbidden_iplist = config.get('forbidden_ip', None)
+        self._forbidden_portset = config.get('forbidden_port', None)
+        if is_local:
+            self._chosen_server = self._get_a_server()
+
+        self.last_activity = 0
+        self._update_activity()
+        self._server.add_connection(1)
+        self._server.stat_add(self._client_address[0], 1)
+        self._add_ref = 1
+        self.speed_tester_u = SpeedTester(config.get("speed_limit_per_con", 0))
+        self.speed_tester_d = SpeedTester(config.get("speed_limit_per_con", 0))
+        self._recv_u_max_size = BUF_SIZE
+        self._recv_d_max_size = BUF_SIZE
+        self._recv_pack_id = 0
+        self._udp_send_pack_id = 0
+        self._udpv6_send_pack_id = 0
+
+        local_sock.setblocking(False)
+        local_sock.setsockopt(socket.SOL_TCP, socket.TCP_NODELAY, 1)
+        self._local_sock_fd = local_sock.fileno()
+        fd_to_handlers[self._local_sock_fd] = self
+        loop.add(local_sock, eventloop.POLL_IN | eventloop.POLL_ERR, self._server)
+        self._stage = STAGE_INIT
+
+    def __hash__(self):
+        # default __hash__ is id / 16
+        # we want to eliminate collisions
+        return id(self)
+
+    @property
+    def remote_address(self):
+        return self._remote_address
+
+    def _get_a_server(self):
+        server = self._config['server']
+        server_port = self._config['server_port']
+        if type(server_port) == list:
+            server_port = random.choice(server_port)
+        if type(server) == list:
+            server = random.choice(server)
+        logging.debug('chosen server: %s:%d', server, server_port)
+        return server, server_port
+
+    def _update_tcp_mss(self, local_sock):
+        self._tcp_mss = TCP_MSS
+        try:
+            tcp_mss = local_sock.getsockopt(socket.SOL_TCP, socket.TCP_MAXSEG)
+            if tcp_mss > 500 and tcp_mss <= 1500:
+                self._tcp_mss = tcp_mss
+            logging.debug("TCP MSS = %d" % (self._tcp_mss,))
+        except:
+            pass
+
+    def _create_encryptor(self, config):
+        try:
+            self._encryptor = encrypt.Encryptor(config['password'],
+                                                config['method'])
+            return True
+        except Exception:
+            self._stage = STAGE_DESTROYED
+            logging.error('create encryptor fail at port %d', self._server._listen_port)
+
+    def _update_user(self, user):
+        self._user = user
+        self._user_id = struct.unpack('<I', user)[0]
+        if self._user in self._server.server_users_cfg:
+            cfg = self._server.server_users_cfg[self._user]
+            speed = cfg.get('speed_limit_per_con', 0)
+            self.speed_tester_u.update_limit(speed)
+            self.speed_tester_d.update_limit(speed)
+
+    def _update_activity(self, data_len=0):
+        # tell the TCP Relay we have activities recently
+        # else it will think we are inactive and timed out
+        self._server.update_activity(self, data_len)
+
+    def _update_stream(self, stream, status):
+        # update a stream to a new waiting status
+
+        # check if status is changed
+        # only update if dirty
+        dirty = False
+        if stream == STREAM_DOWN:
+            if self._downstream_status != status:
+                self._downstream_status = status
+                dirty = True
+        elif stream == STREAM_UP:
+            if self._upstream_status != status:
+                self._upstream_status = status
+                dirty = True
+        if dirty:
+            if self._local_sock:
+                event = eventloop.POLL_ERR
+                if self._downstream_status & WAIT_STATUS_WRITING:
+                    event |= eventloop.POLL_OUT
+                if self._upstream_status & WAIT_STATUS_READING:
+                    event |= eventloop.POLL_IN
+                self._loop.modify(self._local_sock, event)
+            if self._remote_sock:
+                event = eventloop.POLL_ERR
+                if self._downstream_status & WAIT_STATUS_READING:
+                    event |= eventloop.POLL_IN
+                if self._upstream_status & WAIT_STATUS_WRITING:
+                    event |= eventloop.POLL_OUT
+                self._loop.modify(self._remote_sock, event)
+                if self._remote_sock_v6:
+                    self._loop.modify(self._remote_sock_v6, event)
+
+    def _write_to_sock(self, data, sock):
+        # write data to sock
+        # if only some of the data are written, put remaining in the buffer
+        # and update the stream to wait for writing
+        if not sock:
+            return False
+        uncomplete = False
+        if self._remote_udp and sock == self._remote_sock:
+            try:
+                self._udp_data_send_buffer += data
+                #logging.info('UDP over TCP sendto %d %s' % (len(data), binascii.hexlify(data)))
+                while len(self._udp_data_send_buffer) > 6:
+                    length = struct.unpack('>H', self._udp_data_send_buffer[:2])[0]
+
+                    if length > len(self._udp_data_send_buffer):
+                        break
+
+                    data = self._udp_data_send_buffer[:length]
+                    self._udp_data_send_buffer = self._udp_data_send_buffer[length:]
+
+                    frag = common.ord(data[2])
+                    if frag != 0:
+                        logging.warn('drop a message since frag is %d' % (frag,))
+                        continue
+                    else:
+                        data = data[3:]
+                    header_result = parse_header(data)
+                    if header_result is None:
+                        continue
+                    connecttype, addrtype, dest_addr, dest_port, header_length = header_result
+                    if (addrtype & 7) == 3:
+                        af = common.is_ip(dest_addr)
+                        if af == False:
+                            handler = common.UDPAsyncDNSHandler(data[header_length:])
+                            handler.resolve(self._dns_resolver, (dest_addr, dest_port), self._handle_server_dns_resolved)
+                        else:
+                            return self._handle_server_dns_resolved("", (dest_addr, dest_port), dest_addr, data[header_length:])
+                    else:
+                        return self._handle_server_dns_resolved("", (dest_addr, dest_port), dest_addr, data[header_length:])
+
+            except Exception as e:
+                #trace = traceback.format_exc()
+                #logging.error(trace)
+                error_no = eventloop.errno_from_exception(e)
+                if error_no in (errno.EAGAIN, errno.EINPROGRESS,
+                                errno.EWOULDBLOCK):
+                    uncomplete = True
+                else:
+                    shell.print_exception(e)
+                    logging.error("exception from %s:%d" % (self._client_address[0], self._client_address[1]))
+                    self.destroy()
+                    return False
+            return True
+        else:
+            try:
+                if self._encrypt_correct:
+                    if sock == self._remote_sock:
+                        self._server.add_transfer_u(self._user, len(data))
+                self._update_activity(len(data))
+                if data:
+                    l = len(data)
+                    s = sock.send(data)
+                    if s < l:
+                        data = data[s:]
+                        uncomplete = True
+                else:
+                    return
+            except (OSError, IOError) as e:
+                error_no = eventloop.errno_from_exception(e)
+                if error_no in (errno.EAGAIN, errno.EINPROGRESS,
+                                errno.EWOULDBLOCK):
+                    uncomplete = True
+                else:
+                    #traceback.print_exc()
+                    shell.print_exception(e)
+                    logging.error("exception from %s:%d" % (self._client_address[0], self._client_address[1]))
+                    self.destroy()
+                    return False
+            except Exception as e:
+                shell.print_exception(e)
+                logging.error("exception from %s:%d" % (self._client_address[0], self._client_address[1]))
+                self.destroy()
+                return False
+        if uncomplete:
+            if sock == self._local_sock:
+                self._data_to_write_to_local.append(data)
+                self._update_stream(STREAM_DOWN, WAIT_STATUS_WRITING)
+            elif sock == self._remote_sock:
+                self._data_to_write_to_remote.append(data)
+                self._update_stream(STREAM_UP, WAIT_STATUS_WRITING)
+            else:
+                logging.error('write_all_to_sock:unknown socket from %s:%d' % (self._client_address[0], self._client_address[1]))
+        else:
+            if sock == self._local_sock:
+                self._update_stream(STREAM_DOWN, WAIT_STATUS_READING)
+            elif sock == self._remote_sock:
+                self._update_stream(STREAM_UP, WAIT_STATUS_READING)
+            else:
+                logging.error('write_all_to_sock:unknown socket from %s:%d' % (self._client_address[0], self._client_address[1]))
+        return True
+
+    def _handle_server_dns_resolved(self, error, remote_addr, server_addr, data):
+        if error:
+            return
+        try:
+            addrs = socket.getaddrinfo(server_addr, remote_addr[1], 0, socket.SOCK_DGRAM, socket.SOL_UDP)
+            if not addrs: # drop
+                return
+            af, socktype, proto, canonname, sa = addrs[0]
+            if af == socket.AF_INET6:
+                self._remote_sock_v6.sendto(data, (server_addr, remote_addr[1]))
+                if self._udpv6_send_pack_id == 0:
+                    addr, port = self._remote_sock_v6.getsockname()[:2]
+                    common.connect_log('UDPv6 sendto %s(%s):%d from %s:%d by user %d' %
+                        (common.to_str(remote_addr[0]), common.to_str(server_addr), remote_addr[1], addr, port, self._user_id))
+                self._udpv6_send_pack_id += 1
+            else:
+                self._remote_sock.sendto(data, (server_addr, remote_addr[1]))
+                if self._udp_send_pack_id == 0:
+                    addr, port = self._remote_sock.getsockname()[:2]
+                    common.connect_log('UDP sendto %s(%s):%d from %s:%d by user %d' %
+                        (common.to_str(remote_addr[0]), common.to_str(server_addr), remote_addr[1], addr, port, self._user_id))
+                self._udp_send_pack_id += 1
+            return True
+        except Exception as e:
+            shell.print_exception(e)
+            logging.error("exception from %s:%d" % (self._client_address[0], self._client_address[1]))
+
+    def _get_redirect_host(self, client_address, ogn_data):
+        host_list = self._redir_list or ["*#0.0.0.0:0"]
+
+        if type(host_list) != list:
+            host_list = [host_list]
+
+        items_sum = common.to_str(host_list[0]).rsplit('#', 1)
+        if len(items_sum) < 2:
+            hash_code = binascii.crc32(ogn_data)
+            addrs = socket.getaddrinfo(client_address[0], client_address[1], 0, socket.SOCK_STREAM, socket.SOL_TCP)
+            af, socktype, proto, canonname, sa = addrs[0]
+            address_bytes = common.inet_pton(af, sa[0])
+            if af == socket.AF_INET6:
+                addr = struct.unpack('>Q', address_bytes[8:])[0]
+            elif af == socket.AF_INET:
+                addr = struct.unpack('>I', address_bytes)[0]
+            else:
+                addr = 0
+
+            host_port = []
+            match_port = False
+            for host in host_list:
+                items = common.to_str(host).rsplit(':', 1)
+                if len(items) > 1:
+                    try:
+                        port = int(items[1])
+                        if port == self._server._listen_port:
+                            match_port = True
+                        host_port.append((items[0], port))
+                    except:
+                        pass
+                else:
+                    host_port.append((host, 80))
+
+            if match_port:
+                last_host_port = host_port
+                host_port = []
+                for host in last_host_port:
+                    if host[1] == self._server._listen_port:
+                        host_port.append(host)
+
+            return host_port[((hash_code & 0xffffffff) + addr) % len(host_port)]
+
+        else:
+            host_port = []
+            for host in host_list:
+                items_sum = common.to_str(host).rsplit('#', 1)
+                items_match = common.to_str(items_sum[0]).rsplit(':', 1)
+                items = common.to_str(items_sum[1]).rsplit(':', 1)
+                if len(items_match) > 1:
+                    if items_match[1] != "*":
+                        try:
+                            if self._server._listen_port != int(items_match[1]) and int(items_match[1]) != 0:
+                                continue
+                        except:
+                            pass
+
+                if items_match[0] != "*" and common.match_regex(
+                        items_match[0], ogn_data) == False:
+                    continue
+                if len(items) > 1:
+                    try:
+                        port = int(items[1])
+                        return (items[0], port)
+                    except:
+                        pass
+                else:
+                    return (items[0], 80)
+
+            return ("0.0.0.0", 0)
+
+    def _handel_protocol_error(self, client_address, ogn_data):
+        logging.warn("Protocol ERROR, TCP ogn data %s from %s:%d via port %d by UID %d" % (binascii.hexlify(ogn_data), client_address[0], client_address[1], self._server._listen_port, self._user_id))
+        self._encrypt_correct = False
+        #create redirect or disconnect by hash code
+        host, port = self._get_redirect_host(client_address, ogn_data)
+        if port == 0:
+            raise Exception('can not parse header')
+        data = b"\x03" + common.to_bytes(common.chr(len(host))) + common.to_bytes(host) + struct.pack('>H', port)
+        self._is_redirect = True
+        logging.warn("TCP data redir %s:%d %s" % (host, port, binascii.hexlify(data)))
+        return data + ogn_data
+
+    def _handle_stage_connecting(self, data):
+        if self._is_local:
+            if self._encryptor is not None:
+                data = self._protocol.client_pre_encrypt(data)
+                data = self._encryptor.encrypt(data)
+                data = self._obfs.client_encode(data)
+        if data:
+            self._data_to_write_to_remote.append(data)
+        if self._is_local and not self._fastopen_connected and \
+                self._config['fast_open']:
+            # for sslocal and fastopen, we basically wait for data and use
+            # sendto to connect
+            try:
+                # only connect once
+                self._fastopen_connected = True
+                remote_sock = \
+                    self._create_remote_socket(self._chosen_server[0],
+                                               self._chosen_server[1])
+                self._loop.add(remote_sock, eventloop.POLL_ERR, self._server)
+                data = b''.join(self._data_to_write_to_remote)
+                l = len(data)
+                s = remote_sock.sendto(data, MSG_FASTOPEN, self._chosen_server)
+                if s < l:
+                    data = data[s:]
+                    self._data_to_write_to_remote = [data]
+                else:
+                    self._data_to_write_to_remote = []
+                self._update_stream(STREAM_UP, WAIT_STATUS_READWRITING)
+            except (OSError, IOError) as e:
+                if eventloop.errno_from_exception(e) == errno.EINPROGRESS:
+                    # in this case data is not sent at all
+                    self._update_stream(STREAM_UP, WAIT_STATUS_READWRITING)
+                elif eventloop.errno_from_exception(e) == errno.ENOTCONN:
+                    logging.error('fast open not supported on this OS')
+                    self._config['fast_open'] = False
+                    self.destroy()
+                else:
+                    shell.print_exception(e)
+                    if self._config['verbose']:
+                        traceback.print_exc()
+                    logging.error("exception from %s:%d" % (self._client_address[0], self._client_address[1]))
+                    self.destroy()
+
+    def _get_head_size(self, buf, def_value):
+        if len(buf) < 2:
+            return def_value
+        head_type = common.ord(buf[0]) & 0xF
+        if head_type == 1:
+            return 7
+        if head_type == 4:
+            return 19
+        if head_type == 3:
+            return 4 + common.ord(buf[1])
+        return def_value
+
+    def _handle_stage_addr(self, ogn_data, data):
+        try:
+            if self._is_local:
+                cmd = common.ord(data[1])
+                if cmd == CMD_UDP_ASSOCIATE:
+                    logging.debug('UDP associate')
+                    if self._local_sock.family == socket.AF_INET6:
+                        header = b'\x05\x00\x00\x04'
+                    else:
+                        header = b'\x05\x00\x00\x01'
+                    addr, port = self._local_sock.getsockname()[:2]
+                    addr_to_send = socket.inet_pton(self._local_sock.family,
+                                                    addr)
+                    port_to_send = struct.pack('>H', port)
+                    self._write_to_sock(header + addr_to_send + port_to_send,
+                                        self._local_sock)
+                    self._stage = STAGE_UDP_ASSOC
+                    # just wait for the client to disconnect
+                    return
+                elif cmd == CMD_CONNECT:
+                    # just trim VER CMD RSV
+                    data = data[3:]
+                else:
+                    logging.error('invalid command %d', cmd)
+                    self.destroy()
+                    return
+
+            before_parse_data = data
+            if self._is_local:
+                header_result = parse_header(data)
+            else:
+                data = pre_parse_header(data)
+                if data is None:
+                    data = self._handel_protocol_error(self._client_address, ogn_data)
+                header_result = parse_header(data)
+                if header_result is not None:
+                    try:
+                        common.to_str(header_result[2])
+                    except Exception as e:
+                        header_result = None
+                if header_result is None:
+                    data = self._handel_protocol_error(self._client_address, ogn_data)
+                    header_result = parse_header(data)
+                self._overhead = self._obfs.get_overhead(self._is_local) + self._protocol.get_overhead(self._is_local)
+                self._recv_buffer_size = BUF_SIZE - self._overhead
+                server_info = self._obfs.get_server_info()
+                server_info.buffer_size = self._recv_buffer_size
+                server_info = self._protocol.get_server_info()
+                server_info.buffer_size = self._recv_buffer_size
+            connecttype, addrtype, remote_addr, remote_port, header_length = header_result
+            if connecttype != 0:
+                pass
+                #common.connect_log('UDP over TCP by user %d' %
+                #        (self._user_id, ))
+            else:
+                common.connect_log('TCP request %s:%d by user %d' %
+                        (common.to_str(remote_addr), remote_port, self._user_id))
+            self._remote_address = (common.to_str(remote_addr), remote_port)
+            self._remote_udp = (connecttype != 0)
+            # pause reading
+            self._update_stream(STREAM_UP, WAIT_STATUS_WRITING)
+            self._stage = STAGE_DNS
+            if self._is_local:
+                # forward address to remote
+                self._write_to_sock((b'\x05\x00\x00\x01'
+                                     b'\x00\x00\x00\x00\x10\x10'),
+                                    self._local_sock)
+                head_len = self._get_head_size(data, 30)
+                self._obfs.obfs.server_info.head_len = head_len
+                self._protocol.obfs.server_info.head_len = head_len
+                if self._encryptor is not None:
+                    data = self._protocol.client_pre_encrypt(data)
+                    data_to_send = self._encryptor.encrypt(data)
+                    data_to_send = self._obfs.client_encode(data_to_send)
+                if data_to_send:
+                    self._data_to_write_to_remote.append(data_to_send)
+                # notice here may go into _handle_dns_resolved directly
+                self._dns_resolver.resolve(self._chosen_server[0],
+                                           self._handle_dns_resolved)
+            else:
+                if len(data) > header_length:
+                    self._data_to_write_to_remote.append(data[header_length:])
+                # notice here may go into _handle_dns_resolved directly
+                self._dns_resolver.resolve(remote_addr,
+                                           self._handle_dns_resolved)
+        except Exception as e:
+            self._log_error(e)
+            if self._config['verbose']:
+                traceback.print_exc()
+            self.destroy()
+
+    def _socket_bind_addr(self, sock, af):
+        bind_addr = ''
+        if self._bind and af == socket.AF_INET:
+            bind_addr = self._bind
+        elif self._bindv6 and af == socket.AF_INET6:
+            bind_addr = self._bindv6
+        else:
+            bind_addr = self._accept_address[0]
+
+        bind_addr = bind_addr.replace("::ffff:", "")
+        if bind_addr in self._ignore_bind_list:
+            bind_addr = None
+        if bind_addr:
+            local_addrs = socket.getaddrinfo(bind_addr, 0, 0, socket.SOCK_STREAM, socket.SOL_TCP)
+            if local_addrs[0][0] == af:
+                logging.debug("bind %s" % (bind_addr,))
+                try:
+                    sock.bind((bind_addr, 0))
+                except Exception as e:
+                    logging.warn("bind %s fail" % (bind_addr,))
+
+    def _create_remote_socket(self, ip, port):
+        if self._remote_udp:
+            addrs_v6 = socket.getaddrinfo("::", 0, 0, socket.SOCK_DGRAM, socket.SOL_UDP)
+            addrs = socket.getaddrinfo("0.0.0.0", 0, 0, socket.SOCK_DGRAM, socket.SOL_UDP)
+        else:
+            addrs = socket.getaddrinfo(ip, port, 0, socket.SOCK_STREAM, socket.SOL_TCP)
+        if len(addrs) == 0:
+            raise Exception("getaddrinfo failed for %s:%d" % (ip, port))
+        af, socktype, proto, canonname, sa = addrs[0]
+        if not self._remote_udp and not self._is_redirect:
+            if self._forbidden_iplist:
+                if common.to_str(sa[0]) in self._forbidden_iplist:
+                    if self._remote_address:
+                        raise Exception('IP %s is in forbidden list, when connect to %s:%d via port %d by UID %d' %
+                            (common.to_str(sa[0]), self._remote_address[0], self._remote_address[1], self._server._listen_port, self._user_id))
+                    raise Exception('IP %s is in forbidden list, reject' %
+                                    common.to_str(sa[0]))
+            if self._forbidden_portset:
+                if sa[1] in self._forbidden_portset:
+                    if self._remote_address:
+                        raise Exception('Port %d is in forbidden list, when connect to %s:%d via port %d by UID %d' %
+                            (sa[1], self._remote_address[0], self._remote_address[1], self._server._listen_port, self._user_id))
+                    raise Exception('Port %d is in forbidden list, reject' % sa[1])
+        remote_sock = socket.socket(af, socktype, proto)
+        self._remote_sock = remote_sock
+        self._remote_sock_fd = remote_sock.fileno()
+        self._fd_to_handlers[self._remote_sock_fd] = self
+
+        if self._remote_udp:
+            af, socktype, proto, canonname, sa = addrs_v6[0]
+            remote_sock_v6 = socket.socket(af, socktype, proto)
+            self._remote_sock_v6 = remote_sock_v6
+            self._remotev6_sock_fd = remote_sock_v6.fileno()
+            self._fd_to_handlers[self._remotev6_sock_fd] = self
+
+        remote_sock.setblocking(False)
+        if self._remote_udp:
+            remote_sock_v6.setblocking(False)
+
+            if not self._is_local:
+                self._socket_bind_addr(remote_sock, af)
+                self._socket_bind_addr(remote_sock_v6, af)
+        else:
+            remote_sock.setsockopt(socket.SOL_TCP, socket.TCP_NODELAY, 1)
+            if not self._is_local:
+                self._socket_bind_addr(remote_sock, af)
+        return remote_sock
+
+    def _handle_dns_resolved(self, result, error):
+        if error:
+            self._log_error(error)
+            self.destroy()
+            return
+        if result:
+            ip = result[1]
+            if ip:
+                try:
+                    self._stage = STAGE_CONNECTING
+                    remote_addr = ip
+                    if self._is_local:
+                        remote_port = self._chosen_server[1]
+                    else:
+                        remote_port = self._remote_address[1]
+
+                    if self._is_local and self._config['fast_open']:
+                        # for fastopen:
+                        # wait for more data to arrive and send them in one SYN
+                        self._stage = STAGE_CONNECTING
+                        # we don't have to wait for remote since it's not
+                        # created
+                        self._update_stream(STREAM_UP, WAIT_STATUS_READING)
+                        # TODO when there is already data in this packet
+                    else:
+                        # else do connect
+                        remote_sock = self._create_remote_socket(remote_addr,
+                                                                 remote_port)
+                        if self._remote_udp:
+                            self._loop.add(remote_sock,
+                                           eventloop.POLL_IN,
+                                           self._server)
+                            if self._remote_sock_v6:
+                                self._loop.add(self._remote_sock_v6,
+                                        eventloop.POLL_IN,
+                                        self._server)
+                        else:
+                            try:
+                                remote_sock.connect((remote_addr, remote_port))
+                            except (OSError, IOError) as e:
+                                if eventloop.errno_from_exception(e) in (errno.EINPROGRESS,
+                                        errno.EWOULDBLOCK):
+                                    pass # always goto here
+                                else:
+                                    raise e
+                            addr, port = self._remote_sock.getsockname()[:2]
+                            common.connect_log('TCP connecting %s(%s):%d from %s:%d by user %d' %
+                                (common.to_str(self._remote_address[0]), common.to_str(remote_addr), remote_port, addr, port, self._user_id))
+
+                            self._loop.add(remote_sock,
+                                       eventloop.POLL_ERR | eventloop.POLL_OUT,
+                                       self._server)
+                        self._stage = STAGE_CONNECTING
+                        self._update_stream(STREAM_UP, WAIT_STATUS_READWRITING)
+                        self._update_stream(STREAM_DOWN, WAIT_STATUS_READING)
+                        if self._remote_udp:
+                            while self._data_to_write_to_remote:
+                                data = self._data_to_write_to_remote[0]
+                                del self._data_to_write_to_remote[0]
+                                self._write_to_sock(data, self._remote_sock)
+                    return
+                except Exception as e:
+                    shell.print_exception(e)
+                    if self._config['verbose']:
+                        traceback.print_exc()
+                    logging.error("exception from %s:%d" % (self._client_address[0], self._client_address[1]))
+        self.destroy()
+
+    def _get_read_size(self, sock, recv_buffer_size, up):
+        if self._overhead == 0:
+            return recv_buffer_size
+        buffer_size = len(sock.recv(recv_buffer_size, socket.MSG_PEEK))
+        frame_size = self._tcp_mss - self._overhead
+        if up:
+            buffer_size = min(buffer_size, self._recv_u_max_size)
+            self._recv_u_max_size = min(self._recv_u_max_size + frame_size, BUF_SIZE)
+        else:
+            buffer_size = min(buffer_size, self._recv_d_max_size)
+            self._recv_d_max_size = min(self._recv_d_max_size + frame_size, BUF_SIZE)
+        if buffer_size == recv_buffer_size:
+            return buffer_size
+        if buffer_size > frame_size:
+            buffer_size = int(buffer_size / frame_size) * frame_size
+        return buffer_size
+
+    def _on_local_read(self):
+        # handle all local read events and dispatch them to methods for
+        # each stage
+        if not self._local_sock:
+            return
+        is_local = self._is_local
+        if is_local:
+            recv_buffer_size = self._get_read_size(self._local_sock, self._recv_buffer_size, True)
+        else:
+            recv_buffer_size = BUF_SIZE
+        data = None
+        try:
+            data = self._local_sock.recv(recv_buffer_size)
+        except (OSError, IOError) as e:
+            if eventloop.errno_from_exception(e) in \
+                    (errno.ETIMEDOUT, errno.EAGAIN, errno.EWOULDBLOCK):
+                return
+        if not data:
+            self.destroy()
+            return
+
+        self.speed_tester_u.add(len(data))
+        self._server.speed_tester_u(self._user_id).add(len(data))
+        ogn_data = data
+        if not is_local:
+            if self._encryptor is not None:
+                if self._encrypt_correct:
+                    try:
+                        obfs_decode = self._obfs.server_decode(data)
+                        if self._stage == STAGE_INIT:
+                            self._overhead = self._obfs.get_overhead(self._is_local) + self._protocol.get_overhead(self._is_local)
+                            server_info = self._protocol.get_server_info()
+                            server_info.overhead = self._overhead
+                    except Exception as e:
+                        shell.print_exception(e)
+                        logging.error("exception from %s:%d" % (self._client_address[0], self._client_address[1]))
+                        self.destroy()
+                        return
+                    if obfs_decode[2]:
+                        data = self._obfs.server_encode(b'')
+                        try:
+                            self._write_to_sock(data, self._local_sock)
+                        except Exception as e:
+                            shell.print_exception(e)
+                            if self._config['verbose']:
+                                traceback.print_exc()
+                            logging.error("exception from %s:%d" % (self._client_address[0], self._client_address[1]))
+                            self.destroy()
+                            return
+                    if obfs_decode[1]:
+                        if not self._protocol.obfs.server_info.recv_iv:
+                            iv_len = len(self._protocol.obfs.server_info.iv)
+                            self._protocol.obfs.server_info.recv_iv = obfs_decode[0][:iv_len]
+                        data = self._encryptor.decrypt(obfs_decode[0])
+                    else:
+                        data = obfs_decode[0]
+                    try:
+                        data, sendback = self._protocol.server_post_decrypt(data)
+                        if sendback:
+                            backdata = self._protocol.server_pre_encrypt(b'')
+                            backdata = self._encryptor.encrypt(backdata)
+                            backdata = self._obfs.server_encode(backdata)
+                            try:
+                                self._write_to_sock(backdata, self._local_sock)
+                            except Exception as e:
+                                shell.print_exception(e)
+                                if self._config['verbose']:
+                                    traceback.print_exc()
+                                logging.error("exception from %s:%d" % (self._client_address[0], self._client_address[1]))
+                                self.destroy()
+                                return
+                    except Exception as e:
+                        shell.print_exception(e)
+                        logging.error("exception from %s:%d" % (self._client_address[0], self._client_address[1]))
+                        self.destroy()
+                        return
+            else:
+                return
+            if not data:
+                return
+        if self._stage == STAGE_STREAM:
+            if self._is_local:
+                if self._encryptor is not None:
+                    data = self._protocol.client_pre_encrypt(data)
+                    data = self._encryptor.encrypt(data)
+                    data = self._obfs.client_encode(data)
+            self._write_to_sock(data, self._remote_sock)
+        elif is_local and self._stage == STAGE_INIT:
+            # TODO check auth method
+            self._write_to_sock(b'\x05\00', self._local_sock)
+            self._stage = STAGE_ADDR
+        elif self._stage == STAGE_CONNECTING:
+            self._handle_stage_connecting(data)
+        elif (is_local and self._stage == STAGE_ADDR) or \
+                (not is_local and self._stage == STAGE_INIT):
+            self._handle_stage_addr(ogn_data, data)
+
+    def _on_remote_read(self, is_remote_sock):
+        # handle all remote read events
+        data = None
+        try:
+            if self._remote_udp:
+                if is_remote_sock:
+                    data, addr = self._remote_sock.recvfrom(UDP_MAX_BUF_SIZE)
+                else:
+                    data, addr = self._remote_sock_v6.recvfrom(UDP_MAX_BUF_SIZE)
+                port = struct.pack('>H', addr[1])
+                try:
+                    ip = socket.inet_aton(addr[0])
+                    data = b'\x00\x01' + ip + port + data
+                except Exception as e:
+                    ip = socket.inet_pton(socket.AF_INET6, addr[0])
+                    data = b'\x00\x04' + ip + port + data
+                size = len(data) + 2
+                data = struct.pack('>H', size) + data
+                #logging.info('UDP over TCP recvfrom %s:%d %d bytes to %s:%d' % (addr[0], addr[1], len(data), self._client_address[0], self._client_address[1]))
+            else:
+                if self._is_local:
+                    recv_buffer_size = BUF_SIZE
+                else:
+                    recv_buffer_size = self._get_read_size(self._remote_sock, self._recv_buffer_size, False)
+                data = self._remote_sock.recv(recv_buffer_size)
+                self._recv_pack_id += 1
+        except (OSError, IOError) as e:
+            if eventloop.errno_from_exception(e) in \
+                    (errno.ETIMEDOUT, errno.EAGAIN, errno.EWOULDBLOCK, 10035): #errno.WSAEWOULDBLOCK
+                return
+        if not data:
+            self.destroy()
+            return
+
+        self.speed_tester_d.add(len(data))
+        self._server.speed_tester_d(self._user_id).add(len(data))
+        if self._encryptor is not None:
+            if self._is_local:
+                try:
+                    obfs_decode = self._obfs.client_decode(data)
+                except Exception as e:
+                    shell.print_exception(e)
+                    logging.error("exception from %s:%d" % (self._client_address[0], self._client_address[1]))
+                    self.destroy()
+                    return
+                if obfs_decode[1]:
+                    send_back = self._obfs.client_encode(b'')
+                    self._write_to_sock(send_back, self._remote_sock)
+                if not self._protocol.obfs.server_info.recv_iv:
+                    iv_len = len(self._protocol.obfs.server_info.iv)
+                    self._protocol.obfs.server_info.recv_iv = obfs_decode[0][:iv_len]
+                data = self._encryptor.decrypt(obfs_decode[0])
+                try:
+                    data = self._protocol.client_post_decrypt(data)
+                    if self._recv_pack_id == 1:
+                        self._tcp_mss = self._protocol.get_server_info().tcp_mss
+                except Exception as e:
+                    shell.print_exception(e)
+                    logging.error("exception from %s:%d" % (self._client_address[0], self._client_address[1]))
+                    self.destroy()
+                    return
+            else:
+                if self._encrypt_correct:
+                    data = self._protocol.server_pre_encrypt(data)
+                    data = self._encryptor.encrypt(data)
+                    data = self._obfs.server_encode(data)
+                    self._server.add_transfer_d(self._user, len(data))
+                self._update_activity(len(data))
+        else:
+            return
+        try:
+            self._write_to_sock(data, self._local_sock)
+        except Exception as e:
+            shell.print_exception(e)
+            if self._config['verbose']:
+                traceback.print_exc()
+            logging.error("exception from %s:%d" % (self._client_address[0], self._client_address[1]))
+            self.destroy()
+
+    def _on_local_write(self):
+        # handle local writable event
+        if self._data_to_write_to_local:
+            data = b''.join(self._data_to_write_to_local)
+            self._data_to_write_to_local = []
+            self._write_to_sock(data, self._local_sock)
+        else:
+            self._update_stream(STREAM_DOWN, WAIT_STATUS_READING)
+
+    def _on_remote_write(self):
+        # handle remote writable event
+        self._stage = STAGE_STREAM
+        if self._data_to_write_to_remote:
+            data = b''.join(self._data_to_write_to_remote)
+            self._data_to_write_to_remote = []
+            self._write_to_sock(data, self._remote_sock)
+        else:
+            self._update_stream(STREAM_UP, WAIT_STATUS_READING)
+
+    def _on_local_error(self):
+        if self._local_sock:
+            err = eventloop.get_sock_error(self._local_sock)
+            if err.errno not in [errno.ECONNRESET, errno.EPIPE]:
+                logging.error(err)
+                logging.error("local error, exception from %s:%d" % (self._client_address[0], self._client_address[1]))
+        self.destroy()
+
+    def _on_remote_error(self):
+        if self._remote_sock:
+            err = eventloop.get_sock_error(self._remote_sock)
+            if err.errno not in [errno.ECONNRESET]:
+                logging.error(err)
+                if self._remote_address:
+                    logging.error("remote error, when connect to %s:%d" % (self._remote_address[0], self._remote_address[1]))
+                else:
+                    logging.error("remote error, exception from %s:%d" % (self._client_address[0], self._client_address[1]))
+        self.destroy()
+
+    def handle_event(self, sock, fd, event):
+        # handle all events in this handler and dispatch them to methods
+        handle = False
+        if self._stage == STAGE_DESTROYED:
+            logging.debug('ignore handle_event: destroyed')
+            return True
+        if self._user is not None and self._user not in self._server.server_users:
+            self.destroy()
+            return True
+        if fd == self._remote_sock_fd or fd == self._remotev6_sock_fd:
+            if event & eventloop.POLL_ERR:
+                handle = True
+                self._on_remote_error()
+            elif event & (eventloop.POLL_IN | eventloop.POLL_HUP):
+                if not self.speed_tester_d.isExceed() and not self._server.speed_tester_d(self._user_id).isExceed():
+                    handle = True
+                    self._on_remote_read(sock == self._remote_sock)
+                else:
+                    self._recv_d_max_size = self._tcp_mss - self._overhead
+            elif event & eventloop.POLL_OUT:
+                handle = True
+                self._on_remote_write()
+        elif fd == self._local_sock_fd:
+            if event & eventloop.POLL_ERR:
+                handle = True
+                self._on_local_error()
+            elif event & (eventloop.POLL_IN | eventloop.POLL_HUP):
+                if not self.speed_tester_u.isExceed() and not self._server.speed_tester_u(self._user_id).isExceed():
+                    handle = True
+                    self._on_local_read()
+                else:
+                    self._recv_u_max_size = self._tcp_mss - self._overhead
+            elif event & eventloop.POLL_OUT:
+                handle = True
+                self._on_local_write()
+        else:
+            logging.warn('unknown socket from %s:%d' % (self._client_address[0], self._client_address[1]))
+            try:
+                self._loop.removefd(fd)
+            except Exception as e:
+                shell.print_exception(e)
+            try:
+                del self._fd_to_handlers[fd]
+            except Exception as e:
+                shell.print_exception(e)
+            sock.close()
+
+        return handle
+
+    def _log_error(self, e):
+        logging.error('%s when handling connection from %s:%d' %
+                      (e, self._client_address[0], self._client_address[1]))
+
+    def stage(self):
+        return self._stage
+
+    def destroy(self):
+        # destroy the handler and release any resources
+        # promises:
+        # 1. destroy won't make another destroy() call inside
+        # 2. destroy releases resources so it prevents future call to destroy
+        # 3. destroy won't raise any exceptions
+        # if any of the promises are broken, it indicates a bug has been
+        # introduced! mostly likely memory leaks, etc
+        if self._stage == STAGE_DESTROYED:
+            # this couldn't happen
+            logging.debug('already destroyed')
+            return
+        self._stage = STAGE_DESTROYED
+        if self._remote_address:
+            logging.debug('destroy: %s:%d' %
+                          self._remote_address)
+        else:
+            logging.debug('destroy')
+        if self._remote_sock:
+            logging.debug('destroying remote')
+            try:
+                self._loop.removefd(self._remote_sock_fd)
+            except Exception as e:
+                shell.print_exception(e)
+            try:
+                if self._remote_sock_fd is not None:
+                    del self._fd_to_handlers[self._remote_sock_fd]
+            except Exception as e:
+                shell.print_exception(e)
+            self._remote_sock.close()
+            self._remote_sock = None
+        if self._remote_sock_v6:
+            logging.debug('destroying remote_v6')
+            try:
+                self._loop.removefd(self._remotev6_sock_fd)
+            except Exception as e:
+                shell.print_exception(e)
+            try:
+                if self._remotev6_sock_fd is not None:
+                    del self._fd_to_handlers[self._remotev6_sock_fd]
+            except Exception as e:
+                shell.print_exception(e)
+            self._remote_sock_v6.close()
+            self._remote_sock_v6 = None
+        if self._local_sock:
+            logging.debug('destroying local')
+            try:
+                self._loop.removefd(self._local_sock_fd)
+            except Exception as e:
+                shell.print_exception(e)
+            try:
+                if self._local_sock_fd is not None:
+                    del self._fd_to_handlers[self._local_sock_fd]
+            except Exception as e:
+                shell.print_exception(e)
+            self._local_sock.close()
+            self._local_sock = None
+        if self._obfs:
+            self._obfs.dispose()
+            self._obfs = None
+        if self._protocol:
+            self._protocol.dispose()
+            self._protocol = None
+        self._encryptor = None
+        self._dns_resolver.remove_callback(self._handle_dns_resolved)
+        self._server.remove_handler(self)
+        if self._add_ref > 0:
+            self._server.add_connection(-1)
+            self._server.stat_add(self._client_address[0], -1)
+
+class TCPRelay(object):
+    def __init__(self, config, dns_resolver, is_local, stat_callback=None, stat_counter=None):
+        self._config = config
+        self._is_local = is_local
+        self._dns_resolver = dns_resolver
+        self._closed = False
+        self._eventloop = None
+        self._fd_to_handlers = {}
+        self.server_transfer_ul = 0
+        self.server_transfer_dl = 0
+        self.server_users = {}
+        self.server_users_cfg = {}
+        self.server_user_transfer_ul = {}
+        self.server_user_transfer_dl = {}
+        self.mu = False
+        self._speed_tester_u = {}
+        self._speed_tester_d = {}
+        self.server_connections = 0
+        self.protocol_data = obfs.obfs(config['protocol']).init_data()
+        self.obfs_data = obfs.obfs(config['obfs']).init_data()
+
+        if config.get('connect_verbose_info', 0) > 0:
+            common.connect_log = logging.info
+
+        self._timeout = config['timeout']
+        self._timeout_cache = lru_cache.LRUCache(timeout=self._timeout,
+                                         close_callback=self._close_tcp_client)
+
+        if is_local:
+            listen_addr = config['local_address']
+            listen_port = config['local_port']
+        else:
+            listen_addr = config['server']
+            listen_port = config['server_port']
+        self._listen_port = listen_port
+
+        if common.to_str(config['protocol']) in obfs.mu_protocol():
+            self._update_users(None, None)
+
+        addrs = socket.getaddrinfo(listen_addr, listen_port, 0,
+                                   socket.SOCK_STREAM, socket.SOL_TCP)
+        if len(addrs) == 0:
+            raise Exception("can't get addrinfo for %s:%d" %
+                            (listen_addr, listen_port))
+        af, socktype, proto, canonname, sa = addrs[0]
+        server_socket = socket.socket(af, socktype, proto)
+        server_socket.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
+        server_socket.bind(sa)
+        server_socket.setblocking(False)
+        if config['fast_open']:
+            try:
+                server_socket.setsockopt(socket.SOL_TCP, 23, 5)
+            except socket.error:
+                logging.error('warning: fast open is not available')
+                self._config['fast_open'] = False
+        server_socket.listen(config.get('max_connect', 1024))
+        self._server_socket = server_socket
+        self._server_socket_fd = server_socket.fileno()
+        self._stat_counter = stat_counter
+        self._stat_callback = stat_callback
+
+    def add_to_loop(self, loop):
+        if self._eventloop:
+            raise Exception('already add to loop')
+        if self._closed:
+            raise Exception('already closed')
+        self._eventloop = loop
+        self._eventloop.add(self._server_socket,
+                            eventloop.POLL_IN | eventloop.POLL_ERR, self)
+        self._eventloop.add_periodic(self.handle_periodic)
+
+    def remove_handler(self, client):
+        if hash(client) in self._timeout_cache:
+            del self._timeout_cache[hash(client)]
+
+    def add_connection(self, val):
+        self.server_connections += val
+        logging.debug('server port %5d connections = %d' % (self._listen_port, self.server_connections,))
+
+    def get_ud(self):
+        return (self.server_transfer_ul, self.server_transfer_dl)
+
+    def get_users_ud(self):
+        return (self.server_user_transfer_ul.copy(), self.server_user_transfer_dl.copy())
+
+    def _update_users(self, protocol_param, acl):
+        if protocol_param is None:
+            protocol_param = self._config['protocol_param']
+        param = common.to_bytes(protocol_param).split(b'#')
+        if len(param) == 2:
+            self.mu = True
+            user_list = param[1].split(b',')
+            if user_list:
+                for user in user_list:
+                    items = user.split(b':')
+                    if len(items) == 2:
+                        user_int_id = int(items[0])
+                        uid = struct.pack('<I', user_int_id)
+                        if acl is not None and user_int_id not in acl:
+                            self.del_user(uid)
+                        else:
+                            passwd = items[1]
+                            self.add_user(uid, {'password':passwd})
+
+    def _update_user(self, id, passwd):
+        uid = struct.pack('<I', id)
+        self.add_user(uid, passwd)
+
+    def update_users(self, users):
+        for uid in list(self.server_users.keys()):
+            id = struct.unpack('<I', uid)[0]
+            if id not in users:
+                self.del_user(uid)
+        for id in users:
+            uid = struct.pack('<I', id)
+            self.add_user(uid, users[id])
+
+    def add_user(self, uid, cfg): # user: binstr[4], passwd: str
+        passwd = cfg['password']
+        self.server_users[uid] = common.to_bytes(passwd)
+        self.server_users_cfg[uid] = cfg
+        speed = cfg.get("speed_limit_per_user", 0)
+        if uid in self._speed_tester_u:
+            self._speed_tester_u[uid].update_limit(speed)
+        else:
+            self._speed_tester_u[uid] = SpeedTester(speed)
+        if uid in self._speed_tester_d:
+            self._speed_tester_d[uid].update_limit(speed)
+        else:
+            self._speed_tester_d[uid] = SpeedTester(speed)
+
+    def del_user(self, uid):
+        if uid in self.server_users:
+            del self.server_users[uid]
+        if uid in self.server_users_cfg:
+            del self.server_users_cfg[uid]
+
+    def add_transfer_u(self, user, transfer):
+        if user is None:
+            self.server_transfer_ul += transfer
+        else:
+            if user not in self.server_user_transfer_ul:
+                self.server_user_transfer_ul[user] = 0
+            self.server_user_transfer_ul[user] += transfer + self.server_transfer_ul
+            self.server_transfer_ul = 0
+
+    def add_transfer_d(self, user, transfer):
+        if user is None:
+            self.server_transfer_dl += transfer
+        else:
+            if user not in self.server_user_transfer_dl:
+                self.server_user_transfer_dl[user] = 0
+            self.server_user_transfer_dl[user] += transfer + self.server_transfer_dl
+            self.server_transfer_dl = 0
+
+    def speed_tester_u(self, uid):
+        if uid not in self._speed_tester_u:
+            if self.mu: #TODO
+                self._speed_tester_u[uid] = SpeedTester(self._config.get("speed_limit_per_user", 0))
+            else:
+                self._speed_tester_u[uid] = SpeedTester(self._config.get("speed_limit_per_user", 0))
+        return self._speed_tester_u[uid]
+
+    def speed_tester_d(self, uid):
+        if uid not in self._speed_tester_d:
+            if self.mu: #TODO
+                self._speed_tester_d[uid] = SpeedTester(self._config.get("speed_limit_per_user", 0))
+            else:
+                self._speed_tester_d[uid] = SpeedTester(self._config.get("speed_limit_per_user", 0))
+        return self._speed_tester_d[uid]
+
+    def update_limit(self, uid, max_speed):
+        if uid in self._speed_tester_u:
+            self._speed_tester_u[uid].update_limit(max_speed)
+        if uid in self._speed_tester_d:
+            self._speed_tester_d[uid].update_limit(max_speed)
+
+    def update_stat(self, port, stat_dict, val):
+        newval = stat_dict.get(0, 0) + val
+        stat_dict[0] = newval
+        logging.debug('port %d connections %d' % (port, newval))
+        connections_step = 25
+        if newval >= stat_dict.get(-1, 0) + connections_step:
+            logging.info('port %d connections up to %d' % (port, newval))
+            stat_dict[-1] = stat_dict.get(-1, 0) + connections_step
+        elif newval <= stat_dict.get(-1, 0) - connections_step:
+            logging.info('port %d connections down to %d' % (port, newval))
+            stat_dict[-1] = stat_dict.get(-1, 0) - connections_step
+
+    def stat_add(self, local_addr, val):
+        if self._stat_counter is not None:
+            if self._listen_port not in self._stat_counter:
+                self._stat_counter[self._listen_port] = {}
+            newval = self._stat_counter[self._listen_port].get(local_addr, 0) + val
+            logging.debug('port %d addr %s connections %d' % (self._listen_port, local_addr, newval))
+            self._stat_counter[self._listen_port][local_addr] = newval
+            self.update_stat(self._listen_port, self._stat_counter[self._listen_port], val)
+            if newval <= 0:
+                if local_addr in self._stat_counter[self._listen_port]:
+                    del self._stat_counter[self._listen_port][local_addr]
+
+            newval = self._stat_counter.get(0, 0) + val
+            self._stat_counter[0] = newval
+            logging.debug('Total connections %d' % newval)
+
+            connections_step = 50
+            if newval >= self._stat_counter.get(-1, 0) + connections_step:
+                logging.info('Total connections up to %d' % newval)
+                self._stat_counter[-1] = self._stat_counter.get(-1, 0) + connections_step
+            elif newval <= self._stat_counter.get(-1, 0) - connections_step:
+                logging.info('Total connections down to %d' % newval)
+                self._stat_counter[-1] = self._stat_counter.get(-1, 0) - connections_step
+
+    def update_activity(self, client, data_len):
+        if data_len and self._stat_callback:
+            self._stat_callback(self._listen_port, data_len)
+
+        self._timeout_cache[hash(client)] = client
+
+    def _sweep_timeout(self):
+        self._timeout_cache.sweep()
+
+    def _close_tcp_client(self, client):
+        if client.remote_address:
+            logging.debug('timed out: %s:%d' %
+                         client.remote_address)
+        else:
+            logging.debug('timed out')
+        client.destroy()
+
+    def handle_event(self, sock, fd, event):
+        # handle events and dispatch to handlers
+        handle = False
+        if sock:
+            logging.log(shell.VERBOSE_LEVEL, 'fd %d %s', fd,
+                        eventloop.EVENT_NAMES.get(event, event))
+        if sock == self._server_socket:
+            if event & eventloop.POLL_ERR:
+                # TODO
+                raise Exception('server_socket error')
+            handler = None
+            handle = True
+            try:
+                logging.debug('accept')
+                conn = self._server_socket.accept()
+                handler = TCPRelayHandler(self, self._fd_to_handlers,
+                                self._eventloop, conn[0], self._config,
+                                self._dns_resolver, self._is_local)
+                if handler.stage() == STAGE_DESTROYED:
+                    conn[0].close()
+            except (OSError, IOError) as e:
+                error_no = eventloop.errno_from_exception(e)
+                if error_no in (errno.EAGAIN, errno.EINPROGRESS,
+                                errno.EWOULDBLOCK):
+                    return
+                else:
+                    shell.print_exception(e)
+                    if self._config['verbose']:
+                        traceback.print_exc()
+                    if handler:
+                        handler.destroy()
+        else:
+            if sock:
+                handler = self._fd_to_handlers.get(fd, None)
+                if handler:
+                    handle = handler.handle_event(sock, fd, event)
+                else:
+                    logging.warn('unknown fd')
+                    handle = True
+                    try:
+                        self._eventloop.removefd(fd)
+                    except Exception as e:
+                        shell.print_exception(e)
+                    sock.close()
+            else:
+                logging.warn('poll removed fd')
+                handle = True
+                if fd in self._fd_to_handlers:
+                    try:
+                        del self._fd_to_handlers[fd]
+                    except Exception as e:
+                        shell.print_exception(e)
+        return handle
+
+    def handle_periodic(self):
+        if self._closed:
+            if self._server_socket:
+                self._eventloop.removefd(self._server_socket_fd)
+                self._server_socket.close()
+                self._server_socket = None
+                logging.info('closed TCP port %d', self._listen_port)
+            for handler in list(self._fd_to_handlers.values()):
+                handler.destroy()
+        self._sweep_timeout()
+
+    def close(self, next_tick=False):
+        logging.debug('TCP close')
+        self._closed = True
+        if not next_tick:
+            if self._eventloop:
+                self._eventloop.remove_periodic(self.handle_periodic)
+                self._eventloop.removefd(self._server_socket_fd)
+            self._server_socket.close()
+            for handler in list(self._fd_to_handlers.values()):
+                handler.destroy()
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/udprelay.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/udprelay.py
new file mode 100644
index 0000000000..b9606cd818
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/udprelay.py
@@ -0,0 +1,656 @@
+#!/usr/bin/python
+# -*- coding: utf-8 -*-
+#
+# Copyright 2015 clowwindy
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+# SOCKS5 UDP Request
+# +----+------+------+----------+----------+----------+
+# |RSV | FRAG | ATYP | DST.ADDR | DST.PORT |   DATA   |
+# +----+------+------+----------+----------+----------+
+# | 2  |  1   |  1   | Variable |    2     | Variable |
+# +----+------+------+----------+----------+----------+
+
+# SOCKS5 UDP Response
+# +----+------+------+----------+----------+----------+
+# |RSV | FRAG | ATYP | DST.ADDR | DST.PORT |   DATA   |
+# +----+------+------+----------+----------+----------+
+# | 2  |  1   |  1   | Variable |    2     | Variable |
+# +----+------+------+----------+----------+----------+
+
+# shadowsocks UDP Request (before encrypted)
+# +------+----------+----------+----------+
+# | ATYP | DST.ADDR | DST.PORT |   DATA   |
+# +------+----------+----------+----------+
+# |  1   | Variable |    2     | Variable |
+# +------+----------+----------+----------+
+
+# shadowsocks UDP Response (before encrypted)
+# +------+----------+----------+----------+
+# | ATYP | DST.ADDR | DST.PORT |   DATA   |
+# +------+----------+----------+----------+
+# |  1   | Variable |    2     | Variable |
+# +------+----------+----------+----------+
+
+# shadowsocks UDP Request and Response (after encrypted)
+# +-------+--------------+
+# |   IV  |    PAYLOAD   |
+# +-------+--------------+
+# | Fixed |   Variable   |
+# +-------+--------------+
+
+# HOW TO NAME THINGS
+# ------------------
+# `dest`    means destination server, which is from DST fields in the SOCKS5
+#           request
+# `local`   means local server of shadowsocks
+# `remote`  means remote server of shadowsocks
+# `client`  means UDP clients that connects to other servers
+# `server`  means the UDP server that handles user requests
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+import time
+import socket
+import logging
+import struct
+import errno
+import random
+import binascii
+import traceback
+import threading
+
+from shadowsocks import encrypt, obfs, eventloop, lru_cache, common, shell
+from shadowsocks.common import pre_parse_header, parse_header, pack_addr
+
+# for each handler, we have 2 stream directions:
+#    upstream:    from client to server direction
+#                 read local and write to remote
+#    downstream:  from server to client direction
+#                 read remote and write to local
+
+STREAM_UP = 0
+STREAM_DOWN = 1
+
+# for each stream, it's waiting for reading, or writing, or both
+WAIT_STATUS_INIT = 0
+WAIT_STATUS_READING = 1
+WAIT_STATUS_WRITING = 2
+WAIT_STATUS_READWRITING = WAIT_STATUS_READING | WAIT_STATUS_WRITING
+
+BUF_SIZE = 65536
+DOUBLE_SEND_BEG_IDS = 16
+POST_MTU_MIN = 500
+POST_MTU_MAX = 1400
+SENDING_WINDOW_SIZE = 8192
+
+STAGE_INIT = 0
+STAGE_RSP_ID = 1
+STAGE_DNS = 2
+STAGE_CONNECTING = 3
+STAGE_STREAM = 4
+STAGE_DESTROYED = -1
+
+CMD_CONNECT = 0
+CMD_RSP_CONNECT = 1
+CMD_CONNECT_REMOTE = 2
+CMD_RSP_CONNECT_REMOTE = 3
+CMD_POST = 4
+CMD_SYN_STATUS = 5
+CMD_POST_64 = 6
+CMD_SYN_STATUS_64 = 7
+CMD_DISCONNECT = 8
+
+CMD_VER_STR = b"\x08"
+
+RSP_STATE_EMPTY = b""
+RSP_STATE_REJECT = b"\x00"
+RSP_STATE_CONNECTED = b"\x01"
+RSP_STATE_CONNECTEDREMOTE = b"\x02"
+RSP_STATE_ERROR = b"\x03"
+RSP_STATE_DISCONNECT = b"\x04"
+RSP_STATE_REDIRECT = b"\x05"
+
+def client_key(source_addr, server_af):
+    # notice this is server af, not dest af
+    return '%s:%s:%d' % (source_addr[0], source_addr[1], server_af)
+
+class UDPRelay(object):
+    def __init__(self, config, dns_resolver, is_local, stat_callback=None, stat_counter=None):
+        self._config = config
+        if config.get('connect_verbose_info', 0) > 0:
+            common.connect_log = logging.info
+        if is_local:
+            self._listen_addr = config['local_address']
+            self._listen_port = config['local_port']
+            self._remote_addr = config['server']
+            self._remote_port = config['server_port']
+        else:
+            self._listen_addr = config['server']
+            self._listen_port = config['server_port']
+            self._remote_addr = None
+            self._remote_port = None
+        self._dns_resolver = dns_resolver
+        self._password = common.to_bytes(config['password'])
+        self._method = config['method']
+        self._timeout = config['timeout']
+        self._is_local = is_local
+        self._udp_cache_size = config['udp_cache']
+        self._cache = lru_cache.LRUCache(timeout=config['udp_timeout'],
+                                         close_callback=self._close_client_pair)
+        self._cache_dns_client = lru_cache.LRUCache(timeout=10,
+                                         close_callback=self._close_client_pair)
+        self._client_fd_to_server_addr = {}
+        #self._dns_cache = lru_cache.LRUCache(timeout=1800)
+        self._eventloop = None
+        self._closed = False
+        self.server_transfer_ul = 0
+        self.server_transfer_dl = 0
+        self.server_users = {}
+        self.server_user_transfer_ul = {}
+        self.server_user_transfer_dl = {}
+
+        if common.to_bytes(config['protocol']) in obfs.mu_protocol():
+            self._update_users(None, None)
+
+        self.protocol_data = obfs.obfs(config['protocol']).init_data()
+        self._protocol = obfs.obfs(config['protocol'])
+        server_info = obfs.server_info(self.protocol_data)
+        server_info.host = self._listen_addr
+        server_info.port = self._listen_port
+        server_info.users = self.server_users
+        server_info.protocol_param = config['protocol_param']
+        server_info.obfs_param = ''
+        server_info.iv = b''
+        server_info.recv_iv = b''
+        server_info.key_str = common.to_bytes(config['password'])
+        server_info.key = encrypt.encrypt_key(self._password, self._method)
+        server_info.head_len = 30
+        server_info.tcp_mss = 1452
+        server_info.buffer_size = BUF_SIZE
+        server_info.overhead = 0
+        self._protocol.set_server_info(server_info)
+
+        self._sockets = set()
+        self._fd_to_handlers = {}
+        self._reqid_to_hd = {}
+        self._data_to_write_to_server_socket = []
+
+        self._timeout_cache = lru_cache.LRUCache(timeout=self._timeout,
+                                         close_callback=self._close_tcp_client)
+
+        self._bind = config.get('out_bind', '')
+        self._bindv6 = config.get('out_bindv6', '')
+        self._ignore_bind_list = config.get('ignore_bind', [])
+
+        if 'forbidden_ip' in config:
+            self._forbidden_iplist = config['forbidden_ip']
+        else:
+            self._forbidden_iplist = None
+        if 'forbidden_port' in config:
+            self._forbidden_portset = config['forbidden_port']
+        else:
+            self._forbidden_portset = None
+
+        addrs = socket.getaddrinfo(self._listen_addr, self._listen_port, 0,
+                                   socket.SOCK_DGRAM, socket.SOL_UDP)
+        if len(addrs) == 0:
+            raise Exception("can't get addrinfo for %s:%d" %
+                            (self._listen_addr, self._listen_port))
+        af, socktype, proto, canonname, sa = addrs[0]
+        server_socket = socket.socket(af, socktype, proto)
+        server_socket.bind((self._listen_addr, self._listen_port))
+        server_socket.setblocking(False)
+        self._server_socket = server_socket
+        self._stat_callback = stat_callback
+
+    def _get_a_server(self):
+        server = self._config['server']
+        server_port = self._config['server_port']
+        if type(server_port) == list:
+            server_port = random.choice(server_port)
+        if type(server) == list:
+            server = random.choice(server)
+        logging.debug('chosen server: %s:%d', server, server_port)
+        return server, server_port
+
+    def get_ud(self):
+        return (self.server_transfer_ul, self.server_transfer_dl)
+
+    def get_users_ud(self):
+        ret = (self.server_user_transfer_ul.copy(), self.server_user_transfer_dl.copy())
+        return ret
+
+    def _update_users(self, protocol_param, acl):
+        if protocol_param is None:
+            protocol_param = self._config['protocol_param']
+        param = common.to_bytes(protocol_param).split(b'#')
+        if len(param) == 2:
+            user_list = param[1].split(b',')
+            if user_list:
+                for user in user_list:
+                    items = user.split(b':')
+                    if len(items) == 2:
+                        user_int_id = int(items[0])
+                        uid = struct.pack('<I', user_int_id)
+                        if acl is not None and user_int_id not in acl:
+                            self.del_user(uid)
+                        else:
+                            passwd = items[1]
+                            self.add_user(uid, {'password':passwd})
+
+    def _update_user(self, id, passwd):
+        uid = struct.pack('<I', id)
+        self.add_user(uid, passwd)
+
+    def update_users(self, users):
+        for uid in list(self.server_users.keys()):
+            id = struct.unpack('<I', uid)[0]
+            if id not in users:
+                self.del_user(uid)
+        for id in users:
+            uid = struct.pack('<I', id)
+            self.add_user(uid, users[id])
+
+    def add_user(self, uid, cfg): # user: binstr[4], passwd: str
+        passwd = cfg['password']
+        self.server_users[uid] = common.to_bytes(passwd)
+
+    def del_user(self, uid):
+        if uid in self.server_users:
+            del self.server_users[uid]
+
+    def add_transfer_u(self, user, transfer):
+        if user is None:
+            self.server_transfer_ul += transfer
+        else:
+            if user not in self.server_user_transfer_ul:
+                self.server_user_transfer_ul[user] = 0
+            self.server_user_transfer_ul[user] += transfer + self.server_transfer_ul
+            self.server_transfer_ul = 0
+
+    def add_transfer_d(self, user, transfer):
+        if user is None:
+            self.server_transfer_dl += transfer
+        else:
+            if user not in self.server_user_transfer_dl:
+                self.server_user_transfer_dl[user] = 0
+            self.server_user_transfer_dl[user] += transfer + self.server_transfer_dl
+            self.server_transfer_dl = 0
+
+    def _close_client_pair(self, client_pair):
+        client, uid = client_pair
+        self._close_client(client)
+
+    def _close_client(self, client):
+        if hasattr(client, 'close'):
+            if not self._is_local:
+                if client.fileno() in self._client_fd_to_server_addr:
+                    logging.debug('close_client: %s' %
+                                 (self._client_fd_to_server_addr[client.fileno()],))
+                else:
+                    client.info('close_client')
+            self._sockets.remove(client.fileno())
+            self._eventloop.remove(client)
+            del self._client_fd_to_server_addr[client.fileno()]
+            client.close()
+        else:
+            # just an address
+            client.info('close_client pass %s' % client)
+            pass
+
+    def _handel_protocol_error(self, client_address, ogn_data):
+        #raise Exception('can not parse header')
+        logging.warn("Protocol ERROR, UDP ogn data %s from %s:%d" % (binascii.hexlify(ogn_data), client_address[0], client_address[1]))
+
+    def _socket_bind_addr(self, sock, af):
+        bind_addr = ''
+        if self._bind and af == socket.AF_INET:
+            bind_addr = self._bind
+        elif self._bindv6 and af == socket.AF_INET6:
+            bind_addr = self._bindv6
+
+        bind_addr = bind_addr.replace("::ffff:", "")
+        if bind_addr in self._ignore_bind_list:
+            bind_addr = None
+        if bind_addr:
+            local_addrs = socket.getaddrinfo(bind_addr, 0, 0, socket.SOCK_DGRAM, socket.SOL_UDP)
+            if local_addrs[0][0] == af:
+                logging.debug("bind %s" % (bind_addr,))
+                try:
+                    sock.bind((bind_addr, 0))
+                except Exception as e:
+                    logging.warn("bind %s fail" % (bind_addr,))
+
+    def _handle_server(self):
+        server = self._server_socket
+        data, r_addr = server.recvfrom(BUF_SIZE)
+        ogn_data = data
+        if not data:
+            logging.debug('UDP handle_server: data is empty')
+        if self._stat_callback:
+            self._stat_callback(self._listen_port, len(data))
+        uid = None
+        if self._is_local:
+            frag = common.ord(data[2])
+            if frag != 0:
+                logging.warn('drop a message since frag is not 0')
+                return
+            else:
+                data = data[3:]
+        else:
+            ref_iv = [0]
+            data = encrypt.encrypt_all_iv(self._protocol.obfs.server_info.key, self._method, 0, data, ref_iv)
+            # decrypt data
+            if not data:
+                logging.debug('UDP handle_server: data is empty after decrypt')
+                return
+            self._protocol.obfs.server_info.recv_iv = ref_iv[0]
+            data, uid = self._protocol.server_udp_post_decrypt(data)
+
+        #logging.info("UDP data %s" % (binascii.hexlify(data),))
+        if not self._is_local:
+            data = pre_parse_header(data)
+            if data is None:
+                return
+
+        try:
+            header_result = parse_header(data)
+        except:
+            self._handel_protocol_error(r_addr, ogn_data)
+            return
+
+        if header_result is None:
+            self._handel_protocol_error(r_addr, ogn_data)
+            return
+        connecttype, addrtype, dest_addr, dest_port, header_length = header_result
+
+        if self._is_local:
+            addrtype = 3
+            server_addr, server_port = self._get_a_server()
+        else:
+            server_addr, server_port = dest_addr, dest_port
+
+        if (addrtype & 7) == 3:
+            af = common.is_ip(server_addr)
+            if af == False:
+                handler = common.UDPAsyncDNSHandler((data, r_addr, uid, header_length))
+                handler.resolve(self._dns_resolver, (server_addr, server_port), self._handle_server_dns_resolved)
+            else:
+                self._handle_server_dns_resolved("", (server_addr, server_port), server_addr, (data, r_addr, uid, header_length))
+        else:
+            self._handle_server_dns_resolved("", (server_addr, server_port), server_addr, (data, r_addr, uid, header_length))
+
+    def _handle_server_dns_resolved(self, error, remote_addr, server_addr, params):
+        if error:
+            return
+        data, r_addr, uid, header_length = params
+        user_id = self._listen_port
+        try:
+            server_port = remote_addr[1]
+            addrs = socket.getaddrinfo(server_addr, server_port, 0,
+                                        socket.SOCK_DGRAM, socket.SOL_UDP)
+            if not addrs: # drop
+                return
+            af, socktype, proto, canonname, sa = addrs[0]
+            server_addr = sa[0]
+            key = client_key(r_addr, af)
+            client_pair = self._cache.get(key, None)
+            if client_pair is None:
+                client_pair = self._cache_dns_client.get(key, None)
+            if client_pair is None:
+                if self._forbidden_iplist:
+                    if common.to_str(sa[0]) in self._forbidden_iplist:
+                        logging.debug('IP %s is in forbidden list, drop' % common.to_str(sa[0]))
+                        # drop
+                        return
+                if self._forbidden_portset:
+                    if sa[1] in self._forbidden_portset:
+                        logging.debug('Port %d is in forbidden list, reject' % sa[1])
+                        # drop
+                        return
+                client = socket.socket(af, socktype, proto)
+                client_uid = uid
+                client.setblocking(False)
+                self._socket_bind_addr(client, af)
+                is_dns = False
+                if len(data) > header_length + 13 and data[header_length + 4 : header_length + 12] == b"\x00\x01\x00\x00\x00\x00\x00\x00":
+                    is_dns = True
+                else:
+                    pass
+                if sa[1] == 53 and is_dns: #DNS
+                    logging.debug("DNS query %s from %s:%d" % (common.to_str(sa[0]), r_addr[0], r_addr[1]))
+                    self._cache_dns_client[key] = (client, uid)
+                else:
+                    self._cache[key] = (client, uid)
+                self._client_fd_to_server_addr[client.fileno()] = (r_addr, af)
+
+                self._sockets.add(client.fileno())
+                self._eventloop.add(client, eventloop.POLL_IN, self)
+
+                logging.debug('UDP port %5d sockets %d' % (self._listen_port, len(self._sockets)))
+
+                if uid is not None:
+                    user_id = struct.unpack('<I', client_uid)[0]
+            else:
+                client, client_uid = client_pair
+            self._cache.clear(self._udp_cache_size)
+            self._cache_dns_client.clear(16)
+
+            if self._is_local:
+                ref_iv = [encrypt.encrypt_new_iv(self._method)]
+                self._protocol.obfs.server_info.iv = ref_iv[0]
+                data = self._protocol.client_udp_pre_encrypt(data)
+                #logging.debug("%s" % (binascii.hexlify(data),))
+                data = encrypt.encrypt_all_iv(self._protocol.obfs.server_info.key, self._method, 1, data, ref_iv)
+                if not data:
+                    return
+            else:
+                data = data[header_length:]
+            if not data:
+                return
+        except Exception as e:
+            shell.print_exception(e)
+            logging.error("exception from user %d" % (user_id,))
+
+        try:
+            client.sendto(data, (server_addr, server_port))
+            self.add_transfer_u(client_uid, len(data))
+            if client_pair is None: # new request
+                addr, port = client.getsockname()[:2]
+                common.connect_log('UDP data to %s(%s):%d from %s:%d by user %d' %
+                        (common.to_str(remote_addr[0]), common.to_str(server_addr), server_port, addr, port, user_id))
+        except IOError as e:
+            err = eventloop.errno_from_exception(e)
+            logging.warning('IOError sendto %s:%d by user %d' % (server_addr, server_port, user_id))
+            if err in (errno.EINPROGRESS, errno.EAGAIN):
+                pass
+            else:
+                shell.print_exception(e)
+
+    def _handle_client(self, sock):
+        data, r_addr = sock.recvfrom(BUF_SIZE)
+        if not data:
+            logging.debug('UDP handle_client: data is empty')
+            return
+        if self._stat_callback:
+            self._stat_callback(self._listen_port, len(data))
+
+        client_addr = self._client_fd_to_server_addr.get(sock.fileno())
+        client_uid = None
+        if client_addr:
+            key = client_key(client_addr[0], client_addr[1])
+            client_pair = self._cache.get(key, None)
+            client_dns_pair = self._cache_dns_client.get(key, None)
+            if client_pair:
+                client, client_uid = client_pair
+            elif client_dns_pair:
+                client, client_uid = client_dns_pair
+
+        if not self._is_local:
+            addrlen = len(r_addr[0])
+            if addrlen > 255:
+                # drop
+                return
+            data = pack_addr(r_addr[0]) + struct.pack('>H', r_addr[1]) + data
+            ref_iv = [encrypt.encrypt_new_iv(self._method)]
+            self._protocol.obfs.server_info.iv = ref_iv[0]
+            data = self._protocol.server_udp_pre_encrypt(data, client_uid)
+            response = encrypt.encrypt_all_iv(self._protocol.obfs.server_info.key, self._method, 1,
+                                           data, ref_iv)
+            if not response:
+                return
+        else:
+            ref_iv = [0]
+            data = encrypt.encrypt_all_iv(self._protocol.obfs.server_info.key, self._method, 0,
+                                       data, ref_iv)
+            if not data:
+                return
+            self._protocol.obfs.server_info.recv_iv = ref_iv[0]
+            data = self._protocol.client_udp_post_decrypt(data)
+            header_result = parse_header(data)
+            if header_result is None:
+                return
+            #connecttype, dest_addr, dest_port, header_length = header_result
+            #logging.debug('UDP handle_client %s:%d to %s:%d' % (common.to_str(r_addr[0]), r_addr[1], dest_addr, dest_port))
+
+            response = b'\x00\x00\x00' + data
+
+        if client_addr:
+            if client_uid:
+                self.add_transfer_d(client_uid, len(response))
+            else:
+                self.server_transfer_dl += len(response)
+            self.write_to_server_socket(response, client_addr[0])
+            if client_dns_pair:
+                logging.debug("remove dns client %s:%d" % (client_addr[0][0], client_addr[0][1]))
+                del self._cache_dns_client[key]
+                self._close_client(client_dns_pair[0])
+        else:
+            # this packet is from somewhere else we know
+            # simply drop that packet
+            pass
+
+    def write_to_server_socket(self, data, addr):
+        uncomplete = False
+        retry = 0
+        try:
+            self._server_socket.sendto(data, addr)
+            data = None
+            while self._data_to_write_to_server_socket:
+                data_buf = self._data_to_write_to_server_socket[0]
+                retry = data_buf[1] + 1
+                del self._data_to_write_to_server_socket[0]
+                data, addr = data_buf[0]
+                self._server_socket.sendto(data, addr)
+        except (OSError, IOError) as e:
+            error_no = eventloop.errno_from_exception(e)
+            uncomplete = True
+            if error_no in (errno.EWOULDBLOCK,):
+                pass
+            else:
+                shell.print_exception(e)
+                return False
+        #if uncomplete and data is not None and retry < 3:
+        #    self._data_to_write_to_server_socket.append([(data, addr), retry])
+        #'''
+
+    def add_to_loop(self, loop):
+        if self._eventloop:
+            raise Exception('already add to loop')
+        if self._closed:
+            raise Exception('already closed')
+        self._eventloop = loop
+
+        server_socket = self._server_socket
+        self._eventloop.add(server_socket,
+                            eventloop.POLL_IN | eventloop.POLL_ERR, self)
+        loop.add_periodic(self.handle_periodic)
+
+    def remove_handler(self, client):
+        if hash(client) in self._timeout_cache:
+            del self._timeout_cache[hash(client)]
+
+    def update_activity(self, client):
+        self._timeout_cache[hash(client)] = client
+
+    def _sweep_timeout(self):
+        self._timeout_cache.sweep()
+
+    def _close_tcp_client(self, client):
+        if client.remote_address:
+            logging.debug('timed out: %s:%d' %
+                         client.remote_address)
+        else:
+            logging.debug('timed out')
+        client.destroy()
+        client.destroy_local()
+
+    def handle_event(self, sock, fd, event):
+        if sock == self._server_socket:
+            if event & eventloop.POLL_ERR:
+                logging.error('UDP server_socket err')
+            try:
+                self._handle_server()
+            except Exception as e:
+                shell.print_exception(e)
+                if self._config['verbose']:
+                    traceback.print_exc()
+        elif sock and (fd in self._sockets):
+            if event & eventloop.POLL_ERR:
+                logging.error('UDP client_socket err')
+            try:
+                self._handle_client(sock)
+            except Exception as e:
+                shell.print_exception(e)
+                if self._config['verbose']:
+                    traceback.print_exc()
+        else:
+            if sock:
+                handler = self._fd_to_handlers.get(fd, None)
+                if handler:
+                    handler.handle_event(sock, event)
+            else:
+                logging.warn('poll removed fd')
+
+    def handle_periodic(self):
+        if self._closed:
+            self._cache.clear(0)
+            self._cache_dns_client.clear(0)
+            if self._eventloop:
+                self._eventloop.remove_periodic(self.handle_periodic)
+                self._eventloop.remove(self._server_socket)
+            if self._server_socket:
+                self._server_socket.close()
+                self._server_socket = None
+                logging.info('closed UDP port %d', self._listen_port)
+        else:
+            before_sweep_size = len(self._sockets)
+            self._cache.sweep()
+            self._cache_dns_client.sweep()
+            if before_sweep_size != len(self._sockets):
+                logging.debug('UDP port %5d sockets %d' % (self._listen_port, len(self._sockets)))
+            self._sweep_timeout()
+
+    def close(self, next_tick=False):
+        logging.debug('UDP close')
+        self._closed = True
+        if not next_tick:
+            if self._eventloop:
+                self._eventloop.remove_periodic(self.handle_periodic)
+                self._eventloop.remove(self._server_socket)
+            self._server_socket.close()
+            self._cache.clear(0)
+            self._cache_dns_client.clear(0)
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/version.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/version.py
new file mode 100644
index 0000000000..f3e1ef796d
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/shadowsocks/version.py
@@ -0,0 +1,20 @@
+#!/usr/bin/python
+# -*- coding: utf-8 -*-
+#
+# Copyright 2017 breakwa11
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+def version():
+    return '3.4.0 2017-07-27'
+
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/stop.sh b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/stop.sh
new file mode 100755
index 0000000000..56567daa0c
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/stop.sh
@@ -0,0 +1,5 @@
+#!/bin/bash
+
+python_ver=$(ls /usr/bin|grep -e "^python[23]\.[1-9]\+$"|tail -1)
+eval $(ps -ef | grep "[0-9] ${python_ver} server\\.py m" | awk '{print "kill "$2}')
+
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/switchrule.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/switchrule.py
new file mode 100644
index 0000000000..6687e12cfb
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/switchrule.py
@@ -0,0 +1,8 @@
+def getKeys(key_list):
+	return key_list
+	#return key_list + ['plan'] # append the column name 'plan'
+
+def isTurnOn(row):
+	return True
+	#return row['plan'] == 'B' # then judge here
+
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tail.sh b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tail.sh
new file mode 100755
index 0000000000..f36f605eed
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tail.sh
@@ -0,0 +1,3 @@
+#!/bin/bash
+cd `dirname $0`
+tail -f ssserver.log
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/aes-cfb1.json b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/aes-cfb1.json
new file mode 100644
index 0000000000..40d0b2107e
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/aes-cfb1.json
@@ -0,0 +1,10 @@
+{
+    "server":"127.0.0.1",
+    "server_port":8388,
+    "local_port":1081,
+    "password":"aes_password",
+    "timeout":60,
+    "method":"aes-256-cfb1",
+    "local_address":"127.0.0.1",
+    "fast_open":false
+}
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/aes-cfb8.json b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/aes-cfb8.json
new file mode 100644
index 0000000000..fb7014b1ee
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/aes-cfb8.json
@@ -0,0 +1,10 @@
+{
+    "server":"127.0.0.1",
+    "server_port":8388,
+    "local_port":1081,
+    "password":"aes_password",
+    "timeout":60,
+    "method":"aes-256-cfb8",
+    "local_address":"127.0.0.1",
+    "fast_open":false
+}
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/aes-ctr.json b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/aes-ctr.json
new file mode 100644
index 0000000000..1fed8a8c77
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/aes-ctr.json
@@ -0,0 +1,10 @@
+{
+    "server":"127.0.0.1",
+    "server_port":8388,
+    "local_port":1081,
+    "password":"aes_password",
+    "timeout":60,
+    "method":"aes-256-ctr",
+    "local_address":"127.0.0.1",
+    "fast_open":false
+}
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/aes.json b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/aes.json
new file mode 100644
index 0000000000..a3d95b9b5f
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/aes.json
@@ -0,0 +1,10 @@
+{
+    "server":"127.0.0.1",
+    "server_port":8388,
+    "local_port":1081,
+    "password":"aes_password",
+    "timeout":60,
+    "method":"aes-256-cfb",
+    "local_address":"127.0.0.1",
+    "fast_open":false
+}
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/assert.sh b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/assert.sh
new file mode 100755
index 0000000000..b0c679cbcd
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/assert.sh
@@ -0,0 +1,148 @@
+#!/bin/bash
+# assert.sh 1.0 - bash unit testing framework
+# Copyright (C) 2009, 2010, 2011, 2012 Robert Lehmann
+#
+# http://github.com/lehmannro/assert.sh
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Lesser General Public License as published
+# by the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU Lesser General Public License for more details.
+#
+# You should have received a copy of the GNU Lesser General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+export DISCOVERONLY=${DISCOVERONLY:-}
+export DEBUG=${DEBUG:-}
+export STOP=${STOP:-}
+export INVARIANT=${INVARIANT:-}
+export CONTINUE=${CONTINUE:-}
+
+args="$(getopt -n "$0" -l \
+    verbose,help,stop,discover,invariant,continue vhxdic $*)" \
+|| exit -1
+for arg in $args; do
+    case "$arg" in
+        -h)
+            echo "$0 [-vxidc]" \
+                "[--verbose] [--stop] [--invariant] [--discover] [--continue]"
+            echo "`sed 's/./ /g' <<< "$0"` [-h] [--help]"
+            exit 0;;
+        --help)
+            cat <<EOF
+Usage: $0 [options]
+Language-agnostic unit tests for subprocesses.
+
+Options:
+  -v, --verbose    generate output for every individual test case
+  -x, --stop       stop running tests after the first failure
+  -i, --invariant  do not measure timings to remain invariant between runs
+  -d, --discover   collect test suites only, do not run any tests
+  -c, --continue   do not modify exit code to test suite status
+  -h               show brief usage information and exit
+  --help           show this help message and exit
+EOF
+            exit 0;;
+        -v|--verbose)
+            DEBUG=1;;
+        -x|--stop)
+            STOP=1;;
+        -i|--invariant)
+            INVARIANT=1;;
+        -d|--discover)
+            DISCOVERONLY=1;;
+        -c|--continue)
+            CONTINUE=1;;
+    esac
+done
+
+printf -v _indent "\n\t" # local format helper
+
+_assert_reset() {
+    tests_ran=0
+    tests_failed=0
+    tests_errors=()
+    tests_starttime="$(date +%s.%N)" # seconds_since_epoch.nanoseconds
+}
+
+assert_end() {
+    # assert_end [suite ..]
+    tests_endtime="$(date +%s.%N)"
+    tests="$tests_ran ${*:+$* }tests"
+    [[ -n "$DISCOVERONLY" ]] && echo "collected $tests." && _assert_reset && return
+    [[ -n "$DEBUG" ]] && echo
+    [[ -z "$INVARIANT" ]] && report_time=" in $(bc \
+        <<< "${tests_endtime%.N} - ${tests_starttime%.N}" \
+        | sed -e 's/\.\([0-9]\{0,3\}\)[0-9]*/.\1/' -e 's/^\./0./')s" \
+        || report_time=
+
+    if [[ "$tests_failed" -eq 0 ]]; then
+        echo "all $tests passed$report_time."
+    else
+        for error in "${tests_errors[@]}"; do echo "$error"; done
+        echo "$tests_failed of $tests failed$report_time."
+    fi
+    tests_failed_previous=$tests_failed
+    [[ $tests_failed -gt 0 ]] && tests_suite_status=1
+    _assert_reset
+    return $tests_failed_previous
+}
+
+assert() {
+    # assert <command> <expected stdout> [stdin]
+    (( tests_ran++ )) || :
+    [[ -n "$DISCOVERONLY" ]] && return || true
+    # printf required for formatting
+    printf -v expected "x${2:-}" # x required to overwrite older results
+    result="$(eval 2>/dev/null $1 <<< ${3:-})" || true
+    # Note: $expected is already decorated
+    if [[ "x$result" == "$expected" ]]; then
+        [[ -n "$DEBUG" ]] && echo -n . || true
+        return
+    fi
+    result="$(sed -e :a -e '$!N;s/\n/\\n/;ta' <<< "$result")"
+    [[ -z "$result" ]] && result="nothing" || result="\"$result\""
+    [[ -z "$2" ]] && expected="nothing" || expected="\"$2\""
+    _assert_fail "expected $expected${_indent}got $result" "$1" "$3"
+}
+
+assert_raises() {
+    # assert_raises <command> <expected code> [stdin]
+    (( tests_ran++ )) || :
+    [[ -n "$DISCOVERONLY" ]] && return || true
+    status=0
+    (eval $1 <<< ${3:-}) > /dev/null 2>&1 || status=$?
+    expected=${2:-0}
+    if [[ "$status" -eq "$expected" ]]; then
+        [[ -n "$DEBUG" ]] && echo -n . || true
+        return
+    fi
+    _assert_fail "program terminated with code $status instead of $expected" "$1" "$3"
+}
+
+_assert_fail() {
+    # _assert_fail <failure> <command> <stdin>
+    [[ -n "$DEBUG" ]] && echo -n X
+    report="test #$tests_ran \"$2${3:+ <<< $3}\" failed:${_indent}$1"
+    if [[ -n "$STOP" ]]; then
+        [[ -n "$DEBUG" ]] && echo
+        echo "$report"
+        exit 1
+    fi
+    tests_errors[$tests_failed]="$report"
+    (( tests_failed++ )) || :
+}
+
+_assert_reset
+: ${tests_suite_status:=0}  # remember if any of the tests failed so far
+_assert_cleanup() {
+    local status=$?
+    # modify exit code if it's not already non-zero
+    [[ $status -eq 0 && -z $CONTINUE ]] && exit $tests_suite_status
+}
+trap _assert_cleanup EXIT
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/chacha20.json b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/chacha20.json
new file mode 100644
index 0000000000..541a9beb51
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/chacha20.json
@@ -0,0 +1,10 @@
+{
+    "server":"127.0.0.1",
+    "server_port":8388,
+    "local_port":1081,
+    "password":"salsa20_password",
+    "timeout":60,
+    "method":"chacha20",
+    "local_address":"127.0.0.1",
+    "fast_open":false
+}
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/client-multi-server-ip.json b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/client-multi-server-ip.json
new file mode 100644
index 0000000000..1823c2a758
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/client-multi-server-ip.json
@@ -0,0 +1,10 @@
+{
+    "server":["127.0.0.1", "127.0.0.1"],
+    "server_port":8388,
+    "local_port":1081,
+    "password":"aes_password",
+    "timeout":60,
+    "method":"aes-256-cfb",
+    "local_address":"127.0.0.1",
+    "fast_open":false
+}
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/coverage_server.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/coverage_server.py
new file mode 100644
index 0000000000..23cc8cd71d
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/coverage_server.py
@@ -0,0 +1,45 @@
+#!/usr/bin/env python
+#
+# Copyright 2015 clowwindy
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+if __name__ == '__main__':
+    import tornado.ioloop
+    import tornado.web
+    import urllib
+
+    class MainHandler(tornado.web.RequestHandler):
+        def get(self, project):
+            try:
+                with open('/tmp/%s-coverage' % project, 'rb') as f:
+                    coverage = f.read().strip()
+                    n = int(coverage.strip('%'))
+                    if n >= 80:
+                        color = 'brightgreen'
+                    else:
+                        color = 'yellow'
+                    self.redirect(('https://img.shields.io/badge/'
+                                   'coverage-%s-%s.svg'
+                                   '?style=flat') %
+                                  (urllib.quote(coverage), color))
+            except IOError:
+                raise tornado.web.HTTPError(404)
+
+    application = tornado.web.Application([
+        (r"/([a-zA-Z0-9\-_]+)", MainHandler),
+    ])
+
+    if __name__ == "__main__":
+        application.listen(8888, address='127.0.0.1')
+        tornado.ioloop.IOLoop.instance().start()
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/fastopen.json b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/fastopen.json
new file mode 100644
index 0000000000..f3980b65e5
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/fastopen.json
@@ -0,0 +1,10 @@
+{
+    "server":"127.0.0.1",
+    "server_port":8388,
+    "local_port":1081,
+    "password":"fastopen_password",
+    "timeout":60,
+    "method":"aes-256-cfb",
+    "local_address":"127.0.0.1",
+    "fast_open":true
+}
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/ipv6-client-side.json b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/ipv6-client-side.json
new file mode 100644
index 0000000000..6c3cfaf8d5
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/ipv6-client-side.json
@@ -0,0 +1,10 @@
+{
+    "server":"::1",
+    "server_port":8388,
+    "local_port":1081,
+    "password":"aes_password",
+    "timeout":60,
+    "method":"aes-256-cfb",
+    "local_address":"127.0.0.1",
+    "fast_open":false
+}
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/ipv6.json b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/ipv6.json
new file mode 100644
index 0000000000..d855f9c47b
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/ipv6.json
@@ -0,0 +1,10 @@
+{
+    "server":"::",
+    "server_port":8388,
+    "local_port":1081,
+    "password":"aes_password",
+    "timeout":60,
+    "method":"aes-256-cfb",
+    "local_address":"127.0.0.1",
+    "fast_open":false
+}
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/jenkins.sh b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/jenkins.sh
new file mode 100755
index 0000000000..ea5c1630b8
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/jenkins.sh
@@ -0,0 +1,82 @@
+#!/bin/bash
+
+result=0
+
+function run_test {
+    printf '\e[0;36m'
+    echo "running test: $command $@"
+    printf '\e[0m'
+
+    $command "$@"
+    status=$?
+    if [ $status -ne 0 ]; then
+        printf '\e[0;31m'
+        echo "test failed: $command $@"
+        printf '\e[0m'
+        echo
+        result=1
+    else
+        printf '\e[0;32m'
+        echo OK
+        printf '\e[0m'
+        echo
+    fi
+    return 0
+}
+
+python --version
+coverage erase
+mkdir tmp
+run_test pep8 --ignore=E402 .
+run_test pyflakes .
+run_test coverage run tests/nose_plugin.py -v
+run_test python setup.py sdist
+run_test tests/test_daemon.sh
+run_test python tests/test.py --with-coverage -c tests/aes.json
+run_test python tests/test.py --with-coverage -c tests/aes-ctr.json
+run_test python tests/test.py --with-coverage -c tests/aes-cfb1.json
+run_test python tests/test.py --with-coverage -c tests/aes-cfb8.json
+run_test python tests/test.py --with-coverage -c tests/rc4-md5.json
+run_test python tests/test.py --with-coverage -c tests/salsa20.json
+run_test python tests/test.py --with-coverage -c tests/chacha20.json
+run_test python tests/test.py --with-coverage -c tests/table.json
+run_test python tests/test.py --with-coverage -c tests/server-multi-ports.json
+run_test python tests/test.py --with-coverage -s tests/aes.json -c tests/client-multi-server-ip.json
+run_test python tests/test.py --with-coverage -s tests/server-multi-passwd.json -c tests/server-multi-passwd-client-side.json
+run_test python tests/test.py --with-coverage -c tests/workers.json
+run_test python tests/test.py --with-coverage -s tests/ipv6.json -c tests/ipv6-client-side.json
+run_test python tests/test.py --with-coverage -b "-m rc4-md5 -k testrc4 -s 127.0.0.1 -p 8388 -q" -a "-m rc4-md5 -k testrc4 -s 127.0.0.1 -p 8388 -l 1081 -vv"
+run_test python tests/test.py --with-coverage -b "-m aes-256-cfb -k testrc4 -s 127.0.0.1 -p 8388 --workers 1" -a "-m aes-256-cfb -k testrc4 -s 127.0.0.1 -p 8388 -l 1081 -t 30 -qq -b 127.0.0.1"
+run_test python tests/test.py --with-coverage --should-fail --url="http://127.0.0.1/" -b "-m aes-256-cfb -k testrc4 -s 127.0.0.1 -p 8388 --forbidden-ip=127.0.0.1,::1,8.8.8.8" -a "-m aes-256-cfb -k testrc4 -s 127.0.0.1 -p 8388 -l 1081 -t 30 -b 127.0.0.1"
+
+# test if DNS works
+run_test python tests/test.py --with-coverage -c tests/aes.json --url="https://clients1.google.com/generate_204"
+
+# test localhost is in the forbidden list by default
+run_test python tests/test.py --with-coverage --should-fail --tcp-only --url="http://127.0.0.1/" -b "-m aes-256-cfb -k testrc4 -s 127.0.0.1 -p 8388" -a "-m aes-256-cfb -k testrc4 -s 127.0.0.1 -p 8388 -l 1081 -t 30 -b 127.0.0.1"
+
+# test localhost is available when forbidden list is empty
+run_test python tests/test.py --with-coverage --tcp-only --url="http://127.0.0.1/" -b "-m aes-256-cfb -k testrc4 -s 127.0.0.1 -p 8388 --forbidden-ip=" -a "-m aes-256-cfb -k testrc4 -s 127.0.0.1 -p 8388 -l 1081 -t 30 -b 127.0.0.1"
+
+if [ -f /proc/sys/net/ipv4/tcp_fastopen ] ; then
+    if [ 3 -eq `cat /proc/sys/net/ipv4/tcp_fastopen` ] ; then
+        # we have to run it twice:
+        # the first time there's no syn cookie
+        # the second time there is syn cookie
+        run_test python tests/test.py --with-coverage -c tests/fastopen.json
+        run_test python tests/test.py --with-coverage -c tests/fastopen.json
+    fi
+fi
+
+run_test tests/test_large_file.sh
+run_test tests/test_udp_src.sh
+run_test tests/test_command.sh
+
+coverage combine && coverage report --include=shadowsocks/*
+rm -rf htmlcov
+rm -rf tmp
+coverage html --include=shadowsocks/*
+
+coverage report --include=shadowsocks/* | tail -n1 | rev | cut -d' ' -f 1 | rev > /tmp/shadowsocks-coverage
+
+exit $result
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/libsodium/install.sh b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/libsodium/install.sh
new file mode 100755
index 0000000000..b0e35fa131
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/libsodium/install.sh
@@ -0,0 +1,10 @@
+#!/bin/bash
+
+if [ ! -d libsodium-1.0.1 ]; then
+    wget https://github.com/jedisct1/libsodium/releases/download/1.0.1/libsodium-1.0.1.tar.gz || exit 1
+    tar xf libsodium-1.0.1.tar.gz || exit 1
+fi
+pushd libsodium-1.0.1
+./configure && make -j2 && make install || exit 1
+sudo ldconfig
+popd
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/nose_plugin.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/nose_plugin.py
new file mode 100644
index 0000000000..86b1a86537
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/nose_plugin.py
@@ -0,0 +1,43 @@
+#!/usr/bin/env python
+#
+# Copyright 2015 clowwindy
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+import nose
+from nose.plugins.base import Plugin
+
+
+class ExtensionPlugin(Plugin):
+
+    name = "ExtensionPlugin"
+
+    def options(self, parser, env):
+        Plugin.options(self, parser, env)
+
+    def configure(self, options, config):
+        Plugin.configure(self, options, config)
+        self.enabled = True
+
+    def wantFile(self, file):
+        return file.endswith('.py')
+
+    def wantDirectory(self, directory):
+        return True
+
+    def wantModule(self, file):
+        return True
+
+
+if __name__ == '__main__':
+    nose.main(addplugins=[ExtensionPlugin()])
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/rc4-md5.json b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/rc4-md5.json
new file mode 100644
index 0000000000..26ba0dfa76
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/rc4-md5.json
@@ -0,0 +1,10 @@
+{
+    "server":"127.0.0.1",
+    "server_port":8388,
+    "local_port":1081,
+    "password":"aes_password",
+    "timeout":60,
+    "method":"rc4-md5",
+    "local_address":"127.0.0.1",
+    "fast_open":false
+}
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/salsa20-ctr.json b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/salsa20-ctr.json
new file mode 100644
index 0000000000..5ca6c45f52
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/salsa20-ctr.json
@@ -0,0 +1,10 @@
+{
+    "server":"127.0.0.1",
+    "server_port":8388,
+    "local_port":1081,
+    "password":"salsa20_password",
+    "timeout":60,
+    "method":"salsa20-ctr",
+    "local_address":"127.0.0.1",
+    "fast_open":false
+}
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/salsa20.json b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/salsa20.json
new file mode 100644
index 0000000000..7e303800d8
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/salsa20.json
@@ -0,0 +1,10 @@
+{
+    "server":"127.0.0.1",
+    "server_port":8388,
+    "local_port":1081,
+    "password":"salsa20_password",
+    "timeout":60,
+    "method":"salsa20",
+    "local_address":"127.0.0.1",
+    "fast_open":false
+}
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/server-multi-passwd-client-side.json b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/server-multi-passwd-client-side.json
new file mode 100644
index 0000000000..c822c98b9d
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/server-multi-passwd-client-side.json
@@ -0,0 +1,8 @@
+{
+    "server": "127.0.0.1",
+    "server_port": "8385",
+    "local_port": 1081,
+    "password": "foobar5",
+    "timeout": 60,
+    "method": "aes-256-cfb"
+}
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/server-multi-passwd-table.json b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/server-multi-passwd-table.json
new file mode 100644
index 0000000000..a2c0a80896
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/server-multi-passwd-table.json
@@ -0,0 +1,19 @@
+{
+    "server": "127.0.0.1",
+    "server_port": 8384,
+    "local_port": 1081,
+    "password": "foobar4",
+    "port_password": {
+        "8381": "foobar1",
+        "8382": "foobar2",
+        "8383": "foobar3",
+        "8384": "foobar4",
+        "8385": "foobar5",
+        "8386": "foobar6",
+        "8387": "foobar7",
+        "8388": "foobar8",
+        "8389": "foobar9"
+    },
+    "timeout": 60,
+    "method": "table"
+}
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/server-multi-passwd.json b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/server-multi-passwd.json
new file mode 100644
index 0000000000..b1407f0a17
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/server-multi-passwd.json
@@ -0,0 +1,17 @@
+{
+    "server": "127.0.0.1",
+    "local_port": 1081,
+    "port_password": {
+        "8381": "foobar1",
+        "8382": "foobar2",
+        "8383": "foobar3",
+        "8384": "foobar4",
+        "8385": "foobar5",
+        "8386": "foobar6",
+        "8387": "foobar7",
+        "8388": "foobar8",
+        "8389": "foobar9"
+    },
+    "timeout": 60,
+    "method": "aes-256-cfb"
+}
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/server-multi-ports.json b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/server-multi-ports.json
new file mode 100644
index 0000000000..5bdbcab641
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/server-multi-ports.json
@@ -0,0 +1,8 @@
+{
+    "server": "127.0.0.1",
+    "server_port": [8384, 8345, 8346, 8347],
+    "local_port": 1081,
+    "password": "foobar4",
+    "timeout": 60,
+    "method": "aes-256-cfb"
+}
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/setup_tc.sh b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/setup_tc.sh
new file mode 100755
index 0000000000..1a5fa208bf
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/setup_tc.sh
@@ -0,0 +1,18 @@
+#!/bin/bash
+
+DEV=lo
+PORT=8388
+DELAY=100ms
+
+type tc 2> /dev/null && (
+    tc qdisc add dev $DEV root handle 1: htb
+    tc class add dev $DEV parent 1: classid 1:1 htb rate 2mbps
+    tc class add dev $DEV parent 1:1 classid 1:6 htb rate 2mbps ceil 1mbps prio 0
+    tc filter add dev $DEV parent 1:0 prio 0 protocol ip handle 6 fw flowid 1:6
+
+    tc filter add dev $DEV parent 1:0 protocol ip u32 match ip dport $PORT 0xffff flowid 1:6
+    tc filter add dev $DEV parent 1:0 protocol ip u32 match ip sport $PORT 0xffff flowid 1:6
+
+    tc qdisc show dev lo
+)
+
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/socksify/install.sh b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/socksify/install.sh
new file mode 100755
index 0000000000..8eff72df08
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/socksify/install.sh
@@ -0,0 +1,10 @@
+#!/bin/bash
+
+if [ ! -d dante-1.4.0 ]; then
+    wget http://www.inet.no/dante/files/dante-1.4.0.tar.gz || exit 1
+    tar xf dante-1.4.0.tar.gz || exit 1
+fi
+pushd dante-1.4.0
+./configure && make -j4 && make install || exit 1
+popd
+cp tests/socksify/socks.conf /etc/ || exit 1
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/socksify/socks.conf b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/socksify/socks.conf
new file mode 100644
index 0000000000..13db772fd1
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/socksify/socks.conf
@@ -0,0 +1,5 @@
+route {
+        from: 0.0.0.0/0 to: 0.0.0.0/0 via: 127.0.0.1 port = 1081
+        proxyprotocol: socks_v5
+        method: none
+}
\ No newline at end of file
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/table.json b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/table.json
new file mode 100644
index 0000000000..cca6ac27e4
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/table.json
@@ -0,0 +1,10 @@
+{
+    "server":"127.0.0.1",
+    "server_port":8388,
+    "local_port":1081,
+    "password":"table_password",
+    "timeout":60,
+    "method":"table",
+    "local_address":"127.0.0.1",
+    "fast_open":false
+}
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/test.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/test.py
new file mode 100644
index 0000000000..408340134e
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/test.py
@@ -0,0 +1,158 @@
+#!/usr/bin/python
+# -*- coding: utf-8 -*-
+#
+# Copyright 2015 clowwindy
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+import sys
+import os
+import signal
+import select
+import time
+import argparse
+from subprocess import Popen, PIPE
+
+python = ['python']
+
+default_url = 'http://localhost/'
+
+parser = argparse.ArgumentParser(description='test Shadowsocks')
+parser.add_argument('-c', '--client-conf', type=str, default=None)
+parser.add_argument('-s', '--server-conf', type=str, default=None)
+parser.add_argument('-a', '--client-args', type=str, default=None)
+parser.add_argument('-b', '--server-args', type=str, default=None)
+parser.add_argument('--with-coverage', action='store_true', default=None)
+parser.add_argument('--should-fail', action='store_true', default=None)
+parser.add_argument('--tcp-only', action='store_true', default=None)
+parser.add_argument('--url', type=str, default=default_url)
+parser.add_argument('--dns', type=str, default='8.8.8.8')
+
+config = parser.parse_args()
+
+if config.with_coverage:
+    python = ['coverage', 'run', '-p']
+
+client_args = python + ['shadowsocks/local.py', '-v']
+server_args = python + ['shadowsocks/server.py', '-v']
+
+if config.client_conf:
+    client_args.extend(['-c', config.client_conf])
+    if config.server_conf:
+        server_args.extend(['-c', config.server_conf])
+    else:
+        server_args.extend(['-c', config.client_conf])
+if config.client_args:
+    client_args.extend(config.client_args.split())
+    if config.server_args:
+        server_args.extend(config.server_args.split())
+    else:
+        server_args.extend(config.client_args.split())
+if config.url == default_url:
+    server_args.extend(['--forbidden-ip', ''])
+
+p1 = Popen(server_args, stdin=PIPE, stdout=PIPE, stderr=PIPE, close_fds=True)
+p2 = Popen(client_args, stdin=PIPE, stdout=PIPE, stderr=PIPE, close_fds=True)
+p3 = None
+p4 = None
+p3_fin = False
+p4_fin = False
+
+# 1 shadowsocks started
+# 2 curl started
+# 3 curl finished
+# 4 dig started
+# 5 dig finished
+stage = 1
+
+try:
+    local_ready = False
+    server_ready = False
+    fdset = [p1.stdout, p2.stdout, p1.stderr, p2.stderr]
+    while True:
+        r, w, e = select.select(fdset, [], fdset)
+        if e:
+            break
+
+        for fd in r:
+            line = fd.readline()
+            if not line:
+                if stage == 2 and fd == p3.stdout:
+                    stage = 3
+                if stage == 4 and fd == p4.stdout:
+                    stage = 5
+            if bytes != str:
+                line = str(line, 'utf8')
+            sys.stderr.write(line)
+            if line.find('starting local') >= 0:
+                local_ready = True
+            if line.find('starting server') >= 0:
+                server_ready = True
+
+        if stage == 1:
+            time.sleep(2)
+
+            p3 = Popen(['curl', config.url, '-v', '-L',
+                        '--socks5-hostname', '127.0.0.1:1081',
+                        '-m', '15', '--connect-timeout', '10'],
+                       stdin=PIPE, stdout=PIPE, stderr=PIPE, close_fds=True)
+            if p3 is not None:
+                fdset.append(p3.stdout)
+                fdset.append(p3.stderr)
+                stage = 2
+            else:
+                sys.exit(1)
+
+        if stage == 3 and p3 is not None:
+            fdset.remove(p3.stdout)
+            fdset.remove(p3.stderr)
+            r = p3.wait()
+            if config.should_fail:
+                if r == 0:
+                    sys.exit(1)
+            else:
+                if r != 0:
+                    sys.exit(1)
+            if config.tcp_only:
+                break
+            p4 = Popen(['socksify', 'dig', '@%s' % config.dns,
+                        'www.google.com'],
+                       stdin=PIPE, stdout=PIPE, stderr=PIPE, close_fds=True)
+            if p4 is not None:
+                fdset.append(p4.stdout)
+                fdset.append(p4.stderr)
+                stage = 4
+            else:
+                sys.exit(1)
+
+        if stage == 5:
+            r = p4.wait()
+            if config.should_fail:
+                if r == 0:
+                    sys.exit(1)
+                print('test passed (expecting failure)')
+            else:
+                if r != 0:
+                    sys.exit(1)
+                print('test passed')
+            break
+finally:
+    for p in [p1, p2]:
+        try:
+            os.kill(p.pid, signal.SIGINT)
+            os.waitpid(p.pid, 0)
+        except OSError:
+            pass
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/test_command.sh b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/test_command.sh
new file mode 100755
index 0000000000..a1a777b0d9
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/test_command.sh
@@ -0,0 +1,32 @@
+#!/bin/bash
+
+. tests/assert.sh
+
+PYTHON="coverage run -p"
+LOCAL="$PYTHON shadowsocks/local.py"
+SERVER="$PYTHON shadowsocks/server.py"
+
+assert "$LOCAL --version 2>&1 | grep Shadowsocks | awk -F\" \" '{print \$1}'" "Shadowsocks"
+assert "$SERVER --version 2>&1 | grep Shadowsocks | awk -F\" \" '{print \$1}'" "Shadowsocks"
+
+
+assert "$LOCAL 2>&1 -m rc4-md5 -k testrc4 -s 127.0.0.1 -p 8388 -d start | grep WARNING |  awk -F\"WARNING\" '{print \$2}'" "  warning: server set to listen on 127.0.0.1:8388, are you sure?"
+$LOCAL 2>/dev/null 1>/dev/null -m rc4-md5 -k testrc4 -s 127.0.0.1 -p 8388 -d stop
+
+assert "$LOCAL 2>&1 -m rc4-md5 -k testrc4 -s 0.0.0.0 -p 8388 -t10 -d start | grep WARNING |  awk -F\"WARNING\" '{print \$2}'" "  warning: your timeout 10 seems too short"
+$LOCAL 2>/dev/null 1>/dev/null -m rc4-md5 -k testrc4 -s 127.0.0.1 -p 8388 -d stop
+
+assert "$LOCAL 2>&1 -m rc4-md5 -k testrc4 -s 0.0.0.0 -p 8388 -t1000 -d start | grep WARNING |  awk -F\"WARNING\" '{print \$2}'" "  warning: your timeout 1000 seems too long"
+$LOCAL 2>/dev/null 1>/dev/null -m rc4-md5 -k testrc4 -s 127.0.0.1 -p 8388 -d stop
+
+assert "$LOCAL 2>&1 -m rc4 -k testrc4 -s 0.0.0.0 -p 8388 -d start | grep WARNING |  awk -F\"WARNING\" '{print \$2}'" "  warning: RC4 is not safe; please use a safer cipher, like AES-256-CFB"
+$LOCAL 2>/dev/null 1>/dev/null -m rc4-md5 -k testrc4 -s 127.0.0.1 -p 8388 -d stop
+
+assert "$LOCAL 2>&1 -m rc4-md5 -k mypassword -s 0.0.0.0 -p 8388 -d start | grep ERROR |  awk -F\"ERROR\" '{print \$2}'" "    DON'T USE DEFAULT PASSWORD! Please change it in your config.json!"
+$LOCAL 2>/dev/null 1>/dev/null -m rc4-md5 -k testrc4 -s 127.0.0.1 -p 8388 -d stop
+
+
+assert "$SERVER 2>&1 --forbidden-ip 127.0.0.1/4a -m rc4-md5 -k 12345 -p 8388 -s 0.0.0.0 -d start | grep ERROR |  awk -F\"ERROR\" '{print \$2}'" ": Not a valid CIDR notation: 127.0.0.1/4a"
+$LOCAL 2>/dev/null 1>/dev/null -m rc4-md5 -k testrc4 -s 127.0.0.1 -p 8388 -d stop
+
+assert_end command
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/test_daemon.sh b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/test_daemon.sh
new file mode 100755
index 0000000000..7a192bdb11
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/test_daemon.sh
@@ -0,0 +1,43 @@
+#!/bin/bash
+
+function run_test {
+    expected=$1
+    shift
+    echo "running test: $command $@"
+    $command $@
+    status=$?
+    if [ $status -ne $expected ]; then
+        echo "exit $status != $expected"
+        exit 1
+    fi
+    echo "exit status $status == $expected"
+    echo OK
+    return
+}
+
+for module in local server
+do
+
+command="coverage run -p shadowsocks/$module.py"
+
+mkdir -p tmp
+
+run_test 0 -c tests/aes.json -d stop --pid-file tmp/shadowsocks.pid --log-file tmp/shadowsocks.log
+
+run_test 0 -c tests/aes.json -d start --pid-file tmp/shadowsocks.pid --log-file tmp/shadowsocks.log
+run_test 0 -c tests/aes.json -d stop --pid-file tmp/shadowsocks.pid --log-file tmp/shadowsocks.log
+
+run_test 0 -c tests/aes.json -d start --pid-file tmp/shadowsocks.pid --log-file tmp/shadowsocks.log
+run_test 1 -c tests/aes.json -d start --pid-file tmp/shadowsocks.pid --log-file tmp/shadowsocks.log
+run_test 0 -c tests/aes.json -d stop --pid-file tmp/shadowsocks.pid --log-file tmp/shadowsocks.log
+
+run_test 0 -c tests/aes.json -d start --pid-file tmp/shadowsocks.pid --log-file tmp/shadowsocks.log
+run_test 0 -c tests/aes.json -d restart --pid-file tmp/shadowsocks.pid --log-file tmp/shadowsocks.log
+run_test 0 -c tests/aes.json -d stop --pid-file tmp/shadowsocks.pid --log-file tmp/shadowsocks.log
+
+run_test 0 -c tests/aes.json -d restart --pid-file tmp/shadowsocks.pid --log-file tmp/shadowsocks.log
+run_test 0 -c tests/aes.json -d stop --pid-file tmp/shadowsocks.pid --log-file tmp/shadowsocks.log
+
+run_test 1 -c tests/aes.json -d start --pid-file tmp/not_exist/shadowsocks.pid --log-file tmp/shadowsocks.log
+
+done
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/test_large_file.sh b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/test_large_file.sh
new file mode 100755
index 0000000000..7a61caff14
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/test_large_file.sh
@@ -0,0 +1,24 @@
+#!/bin/bash
+
+PYTHON="coverage run -p"
+URL=http://127.0.0.1/file
+
+mkdir -p tmp
+
+$PYTHON shadowsocks/local.py -c tests/aes.json &
+LOCAL=$!
+
+$PYTHON shadowsocks/server.py -c tests/aes.json --forbidden-ip "" &
+SERVER=$!
+
+sleep 3
+
+time curl -o tmp/expected $URL
+time curl -o tmp/result --socks5-hostname 127.0.0.1:1081 $URL
+
+kill -s SIGINT $LOCAL
+kill -s SIGINT $SERVER
+
+sleep 2
+
+diff tmp/expected tmp/result || exit 1
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/test_udp_src.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/test_udp_src.py
new file mode 100644
index 0000000000..e8fa5057eb
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/test_udp_src.py
@@ -0,0 +1,83 @@
+#!/usr/bin/python
+
+import socket
+import socks
+
+
+SERVER_IP = '127.0.0.1'
+SERVER_PORT = 1081
+
+
+if __name__ == '__main__':
+    # Test 1: same source port IPv4
+    sock_out = socks.socksocket(socket.AF_INET, socket.SOCK_DGRAM,
+                                socket.SOL_UDP)
+    sock_out.set_proxy(socks.SOCKS5, SERVER_IP, SERVER_PORT)
+    sock_out.bind(('127.0.0.1', 9000))
+
+    sock_in1 = socket.socket(socket.AF_INET, socket.SOCK_DGRAM,
+                             socket.SOL_UDP)
+    sock_in2 = socket.socket(socket.AF_INET, socket.SOCK_DGRAM,
+                             socket.SOL_UDP)
+
+    sock_in1.bind(('127.0.0.1', 9001))
+    sock_in2.bind(('127.0.0.1', 9002))
+
+    sock_out.sendto(b'data', ('127.0.0.1', 9001))
+    result1 = sock_in1.recvfrom(8)
+
+    sock_out.sendto(b'data', ('127.0.0.1', 9002))
+    result2 = sock_in2.recvfrom(8)
+
+    sock_out.close()
+    sock_in1.close()
+    sock_in2.close()
+
+    # make sure they're from the same source port
+    assert result1 == result2
+
+    # Test 2: same source port IPv6
+    # try again from the same port but IPv6
+    sock_out = socks.socksocket(socket.AF_INET, socket.SOCK_DGRAM,
+                                socket.SOL_UDP)
+    sock_out.set_proxy(socks.SOCKS5, SERVER_IP, SERVER_PORT)
+    sock_out.bind(('127.0.0.1', 9000))
+
+    sock_in1 = socket.socket(socket.AF_INET6, socket.SOCK_DGRAM,
+                             socket.SOL_UDP)
+    sock_in2 = socket.socket(socket.AF_INET6, socket.SOCK_DGRAM,
+                             socket.SOL_UDP)
+
+    sock_in1.bind(('::1', 9001))
+    sock_in2.bind(('::1', 9002))
+
+    sock_out.sendto(b'data', ('::1', 9001))
+    result1 = sock_in1.recvfrom(8)
+
+    sock_out.sendto(b'data', ('::1', 9002))
+    result2 = sock_in2.recvfrom(8)
+
+    sock_out.close()
+    sock_in1.close()
+    sock_in2.close()
+
+    # make sure they're from the same source port
+    assert result1 == result2
+
+    # Test 3: different source ports IPv6
+    sock_out = socks.socksocket(socket.AF_INET, socket.SOCK_DGRAM,
+                                socket.SOL_UDP)
+    sock_out.set_proxy(socks.SOCKS5, SERVER_IP, SERVER_PORT)
+    sock_out.bind(('127.0.0.1', 9003))
+
+    sock_in1 = socket.socket(socket.AF_INET6, socket.SOCK_DGRAM,
+                             socket.SOL_UDP)
+    sock_in1.bind(('::1', 9001))
+    sock_out.sendto(b'data', ('::1', 9001))
+    result3 = sock_in1.recvfrom(8)
+
+    # make sure they're from different source ports
+    assert result1 != result3
+
+    sock_out.close()
+    sock_in1.close()
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/test_udp_src.sh b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/test_udp_src.sh
new file mode 100755
index 0000000000..6a778abc10
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/test_udp_src.sh
@@ -0,0 +1,23 @@
+#!/bin/bash
+
+PYTHON="coverage run -p"
+
+mkdir -p tmp
+
+$PYTHON shadowsocks/local.py -c tests/aes.json -v &
+LOCAL=$!
+
+$PYTHON shadowsocks/server.py -c tests/aes.json --forbidden-ip "" -v &
+SERVER=$!
+
+sleep 3
+
+python tests/test_udp_src.py
+r=$?
+
+kill -s SIGINT $LOCAL
+kill -s SIGINT $SERVER
+
+sleep 2
+
+exit $r
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/workers.json b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/workers.json
new file mode 100644
index 0000000000..2015ff6c6a
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/tests/workers.json
@@ -0,0 +1,10 @@
+{
+    "server":"127.0.0.1",
+    "server_port":8388,
+    "local_port":1081,
+    "password":"workers_password",
+    "timeout":60,
+    "method":"aes-256-cfb",
+    "local_address":"127.0.0.1",
+    "workers": 4
+}
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/utils/README.md b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/utils/README.md
new file mode 100644
index 0000000000..f624309c72
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/utils/README.md
@@ -0,0 +1,9 @@
+Useful Tools
+===========
+
+autoban.py
+----------
+
+Automatically ban IPs that try to brute force crack the server.
+
+See https://github.com/shadowsocks/shadowsocks/wiki/Ban-Brute-Force-Crackers
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/utils/autoban.py b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/utils/autoban.py
new file mode 100644
index 0000000000..1bbb65c9b7
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/utils/autoban.py
@@ -0,0 +1,53 @@
+#!/usr/bin/python
+# -*- coding: utf-8 -*-
+
+# Copyright (c) 2015 clowwindy
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy
+# of this software and associated documentation files (the "Software"), to deal
+# in the Software without restriction, including without limitation the rights
+# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+# copies of the Software, and to permit persons to whom the Software is
+# furnished to do so, subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in
+# all copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+# SOFTWARE.
+
+from __future__ import absolute_import, division, print_function, \
+    with_statement
+
+import os
+import sys
+import argparse
+
+if __name__ == '__main__':
+    parser = argparse.ArgumentParser(description='See README')
+    parser.add_argument('-c', '--count', default=3, type=int,
+                        help='with how many failure times it should be '
+                             'considered as an attack')
+    config = parser.parse_args()
+    ips = {}
+    banned = set()
+    for line in sys.stdin:
+        if 'can not parse header when' in line:
+            ip = line.split()[-1].split(':')[0]
+            if ip not in ips:
+                ips[ip] = 1
+                print(ip)
+                sys.stdout.flush()
+            else:
+                ips[ip] += 1
+            if ip not in banned and ips[ip] >= config.count:
+                banned.add(ip)
+                cmd = 'iptables -A INPUT -s %s -j DROP' % ip
+                print(cmd, file=sys.stderr)
+                sys.stderr.flush()
+                os.system(cmd)
diff --git a/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/utils/fail2ban/shadowsocks.conf b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/utils/fail2ban/shadowsocks.conf
new file mode 100644
index 0000000000..9b1c7ec7aa
--- /dev/null
+++ b/package/lean/luci-app-ssrserver-python/root/usr/share/ssr/utils/fail2ban/shadowsocks.conf
@@ -0,0 +1,5 @@
+[Definition]
+
+_daemon = shadowsocks
+
+failregex = ^\s+ERROR\s+can not parse header when handling connection from <HOST>:\d+$
diff --git a/package/lean/luci-app-syncdial/Makefile b/package/lean/luci-app-syncdial/Makefile
new file mode 100644
index 0000000000..70da338617
--- /dev/null
+++ b/package/lean/luci-app-syncdial/Makefile
@@ -0,0 +1,17 @@
+#
+# Copyright (C) 2008-2014 The LuCI Team <luci@lists.subsignal.org>
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=Virtual WAN config generator
+LUCI_DEPENDS:=+kmod-macvlan +luci-app-mwan3
+PKG_VERSION:=2.0
+PKG_RELEASE:=25
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+#Makefile for syncdial
diff --git a/package/lean/luci-app-syncdial/luasrc/controller/syncdial.lua b/package/lean/luci-app-syncdial/luasrc/controller/syncdial.lua
new file mode 100644
index 0000000000..9e6c707688
--- /dev/null
+++ b/package/lean/luci-app-syncdial/luasrc/controller/syncdial.lua
@@ -0,0 +1,14 @@
+module("luci.controller.syncdial",package.seeall)
+function index()
+if not nixio.fs.access("/etc/config/syncdial")then
+return
+end
+local e
+e=entry({"admin","network","syncdial"},cbi("syncdial"),_("多线多拨"),103)
+e.dependent=true
+e=entry({"admin","network","macvlan_redial"},call("redial"),nil)
+e.leaf=true
+end
+function redial()
+os.execute("killall -9 pppd")
+end
diff --git a/package/lean/luci-app-syncdial/luasrc/model/cbi/syncdial.lua b/package/lean/luci-app-syncdial/luasrc/model/cbi/syncdial.lua
new file mode 100644
index 0000000000..30c7f172c9
--- /dev/null
+++ b/package/lean/luci-app-syncdial/luasrc/model/cbi/syncdial.lua
@@ -0,0 +1,62 @@
+local e=require"nixio.fs"
+require("luci.tools.webadmin")
+local e="mwan3 status | grep -c \"is online and tracking is active\""
+local e=io.popen(e,"r")
+local t=e:read("*a")
+e:close()
+m=Map("syncdial",translate("多线多拨"),
+translate("使用macvlan驱动创建多个虚拟WAN口，支持并发多拨 <br />当前在线接口数量：")..t)
+s=m:section(TypedSection,"syncdial",translate(" "))
+s.anonymous=true
+o=s:option(Flag,"enabled","启用")
+o.rmempty=false
+o=s:option(Flag,"syncon","启用并发多拨")
+o.rmempty=false
+o=s:option(ListValue,"dial_type",translate("多拨类型"))
+o:value("1",translate("单线多拨"))
+o:value("2",translate("双线多拨"))
+o.rmempty=false
+o=s:option(Value,"wanselect",translate("选择外网接口"),translate("指定要多拨的外网接口，如wan"))
+luci.tools.webadmin.cbi_add_networks(o)
+o.optional=false
+o.rmempty=false
+o=s:option(Value,"wannum","虚拟WAN接口数量")
+o.datatype="range(0,249)"
+o.optional=false
+o.default=1
+o=s:option(Flag,"bindwan","绑定物理接口")
+o.rmempty=false
+o=s:option(Value,"wanselect2",translate("选择第二个外网接口"),translate("<font color=\"red\">指定要多拨的第二个外网接口，如wan2</font>"))
+luci.tools.webadmin.cbi_add_networks(o)
+o.optional=false
+o:depends("dial_type","2")
+o=s:option(Value,"wannum2",translate("第二条线虚拟WAN接口数量"),translate("设置第二条线的拨号数"))
+o.datatype="range(0,249)"
+o.optional=false
+o.default=1
+o:depends("dial_type","2")
+o=s:option(Flag,"bindwan2","绑定物理接口","第二条线生成的虚拟接口绑定当前物理接口")
+o.rmempty=false
+o:depends("dial_type","2")
+o=s:option(Flag,"dialchk","启用掉线检测")
+o.rmempty=false
+o=s:option(Value,"dialnum","最低在线接口数量","如果在线接口数量小于这个值则重拨。")
+o.datatype="range(0,248)"
+o.optional=false
+o.default=2
+o=s:option(Value,"dialnum2","第二条线最低在线接口数量","如果第二条线在线接口数量小于这个值则重拨。")
+o.datatype="range(0,248)"
+o.optional=false
+o.default=2
+o:depends("dial_type","2")
+o=s:option(Value,"dialwait","重拨等待时间","重拨时，接口全部下线后下一次拨号前的等待时间。单位：秒 最小值：5秒")
+o.datatype="and(uinteger,min(5))"
+o.optional=false
+o=s:option(Flag,"old_frame","使用旧的macvlan创建方式")
+o.rmempty=false
+o=s:option(Flag,"nomwan","不自动配置MWAN3负载均衡","需要自定义负载均衡设置或者要使用策略路由的用户选择")
+o.rmempty=false
+o=s:option(DummyValue,"_redial","重新并发拨号")
+o.template="syncdial/redial_button"
+o.width="10%"
+return m
diff --git a/package/lean/luci-app-syncdial/luasrc/view/syncdial/redial_button.htm b/package/lean/luci-app-syncdial/luasrc/view/syncdial/redial_button.htm
new file mode 100644
index 0000000000..d1ba683d17
--- /dev/null
+++ b/package/lean/luci-app-syncdial/luasrc/view/syncdial/redial_button.htm
@@ -0,0 +1,17 @@
+<%+cbi/valueheader%>
+<script type="text/javascript" src="<%=resource%>/cbi.js?v=git-17.110.13538-6360059"></script>
+<script type="text/javascript">//<![CDATA[
+
+	function do_macvlan_redial()
+	{
+		XHR.get('<%=luci.dispatcher.build_url("admin", "network", "macvlan_redial")%>', null,
+			function(x, st)
+			{
+				window.location.href='<%=luci.dispatcher.build_url("admin", "network", "network")%>';
+			}
+		);
+	}
+//]]></script>
+
+<input class="cbi-button cbi-input-save" id="cbi-macvlan_rediag-<%=section%>-action" type="button" value="重新拨号" onclick="do_macvlan_redial()" />
+<%+cbi/valuefooter%>
diff --git a/package/lean/luci-app-syncdial/root/bin/genwancfg b/package/lean/luci-app-syncdial/root/bin/genwancfg
new file mode 100755
index 0000000000..6a058b3bca
--- /dev/null
+++ b/package/lean/luci-app-syncdial/root/bin/genwancfg
@@ -0,0 +1,278 @@
+#!/bin/sh
+#macvlan及PPPoE拨号接口配置批量自动生成脚本
+#Copyright (C) 2016
+. /lib/functions.sh
+
+#检测IP列表
+chk_ip_list="www.baidu.com 114.114.114.114 119.29.29.29"
+origfirewall=$(uci get firewall.@zone[1].network)
+backupdev=$(uci get syncdial.config.devbackup)
+norun=$(echo $origfirewall|grep vwan)
+nomwan=$(uci get syncdial.config.nomwan)
+wanselect=$(uci get syncdial.config.wanselect)
+wannum=$(uci get syncdial.config.wannum)
+oldframe=$(uci get syncdial.config.old_frame)
+bindwan=$(uci -q get syncdial.config.bindwan)
+
+dial_type=$(uci get syncdial.config.dial_type)
+[ "$dial_type" -eq 2 ] && {
+	wanselect2=$(uci get syncdial.config.wanselect2)
+	[ $? -ne 0 ] && {
+		logger -t Syncppp  "You must select another pppoe interface ! 启用双线多拨必须同时选择第二个外网接口！"
+		return 0
+	}
+
+	wannum2=$(uci get syncdial.config.wannum2)
+	[ $? -ne 0 ] && {
+		logger -t Syncppp  "When dualdial is enabled, the number of the second virtual WAN cannot be blank! 启用双线多拨时第二个虚拟WAN接口数不能为空！"
+		return 0
+	}
+	bindwan2=$(uci -q get syncdial.config.bindwan2)
+}
+
+#添加MWAN负载均衡相关配置
+#$1:接口名称
+mwan_cfg_add() {
+	#gen mwan3_interface
+	uci set mwan3.${1}=interface
+	uci set mwan3.${1}.enabled=1
+	uci set mwan3.${1}.count=2
+	uci set mwan3.${1}.timeout=2
+	uci set mwan3.${1}.interval=5
+	uci set mwan3.${1}.down=4
+	uci set mwan3.${1}.up=1
+	for i in $chk_ip_list
+	do
+		uci add_list mwan3.${1}.track_ip="$i"
+	done
+	uci set mwan3.${1}.reliability=1
+	uci set mwan3.${1}.initial_state=online
+	uci set mwan3.${1}.family=ipv4
+	uci set mwan3.${1}.track_method=ping
+	uci set mwan3.${1}.size=56
+	uci set mwan3.${1}.failure_interval=5
+	uci set mwan3.${1}.recovery_interval=5
+	uci set mwan3.${1}.flush_conntrack=never
+	#gen mwan3_member
+	uci set mwan3.${1}_m1_w1=member
+	uci set mwan3.${1}_m1_w1.interface=${1}
+	uci set mwan3.${1}_m1_w1.metric=1
+	uci set mwan3.${1}_m1_w1.weight=1
+	#gen mwan3_policy
+	uci add_list mwan3.balanced.use_member=${1}_m1_w1
+}
+
+#删除MWAN负载均衡相关配置
+#$1:接口名称
+mwan_cfg_del() {
+	uci del mwan3.${1}
+	uci del mwan3.${1}_m1_w1
+	uci del_list mwan3.balanced.use_member=${1}_m1_w1
+}
+
+#添加macvlan设备
+#$1:设虚拟备名称 $2:原始设备名称
+macvlan_dev_add() {
+	uci set network.macvlandev_${1}=device
+	uci set network.macvlandev_${1}.name=${1}
+	uci set network.macvlandev_${1}.ifname=${2}
+	uci set network.macvlandev_${1}.type=macvlan
+}
+
+#添加PPPoE接口
+#$1:接口名称 $2:设备名称 $3:账户 $4:密码 $5:网关跃点
+pppoe_if_add() {
+	#gen vwan macaddr
+	NEW_MACADDR=$(openssl rand -hex 6 | sed 's/\(..\)/\1:/g; s/.$//')
+	#gen wan if
+	uci set network.${1}=interface
+	uci set network.${1}.ifname=${2}
+	uci set network.${1}.proto=pppoe
+	uci set network.${1}.username=${3}
+	uci set network.${1}.password=${4}
+	uci set network.${1}.metric=${5}
+	uci set network.${1}.macaddr=$NEW_MACADDR
+	#gen firewall
+	uci add_list firewall.@zone[1].network=${1}
+}
+
+
+orig_firewall_add() {
+	need_del_rule=`uci -q get firewall.@zone[1].network | awk -F"'" '{print $2}'`
+	uci del_list firewall.@zone[1].network="$need_del_rule"
+	for k in $( seq 1 250 )
+	do
+		origdev=$(echo $origfirewall | cut -d " " -f$k)
+		if [ -z "$origdev" ]; then
+			break
+		fi
+		[ -z "$(uci get firewall.@zone[1].network | grep -w $origdev)" ] && uci add_list firewall.@zone[1].network=$origdev
+	done
+}
+
+apply_cfg() {
+	uci commit
+	#/etc/init.d/network restart &
+	logger -t Syncppp  "Apply syncdial configuaration."
+	ifup wan &
+	killall pppconnectcheck
+}
+
+general_config_load() {
+	config_load 'syncdial'
+	config_get_bool enabled 'config' 'enabled'
+	config_get_bool old_frame 'config' 'old_frame'
+	congig_get_bool dial_type 'config' 'dial_type'
+
+	if [ "$enabled" -eq 0 ]; then
+		if [ "$old_frame" -eq 1 ]; then
+			mwan_cfg_add $wanselect
+			if [ "$dial_type" -eq 2 ]; then
+				mwan_cfg_add $wanselect2
+			fi
+		fi
+		echo "Disabled.Exit now."
+		apply_cfg
+		exit 1
+	fi
+  
+	config_load 'network'
+	config_get pppoe_user $wanselect 'username'
+	config_get pppoe_password $wanselect 'password'
+	pppoe_ifname=$(uci get network.$wanselect.ifname)
+	[ "$dial_type" -eq 2 ] && {
+		config_get pppoe_user2 $wanselect2 'username'
+		config_get pppoe_password2 $wanselect2 'password'
+		pppoe_ifname2=$(uci get network.$wanselect2.ifname)
+	}
+
+}
+
+check_remove_device() {
+	local devcfg=${1}
+	[ ${devcfg::11} == 'macvlandev_' ] && uci del network.${devcfg}
+}
+
+check_remove_interface() {
+	local ifcfg=${1}
+	[ ${ifcfg::4} == 'vwan' ] && {
+		uci del network.${ifcfg}
+		uci del_list firewall.@zone[1].network=${ifcfg}
+		[ "$nomwan" -ne 1 ] && mwan_cfg_del ${ifcfg} 
+	}
+	uci set firewall.@zone[1].network="$backupdev"
+}
+
+general_config_remove() {
+	config_load network
+	config_foreach check_remove_device 'device'
+	config_foreach check_remove_interface 'interface'
+	all_macvlans=`ip link show |grep macvlan | awk -F":" '{print $2}' | awk -F"@" '{print $1}'`
+	[ -n "$all_macvlans" ] && {
+		for macvlan in $all_macvlans
+		do
+			ip link delete $macvlan
+		done
+	}
+	[ "$(uci get network.$wanselect.proto)" == "none" ] && {
+		uci set network.$wanselect.proto=pppoe
+	}
+
+	if [ "$oldframe" -eq 0 ]; then
+		[ "$wanselect" != "$(echo $(uci get syncdial.config.devbackup)| cut -d " " -f1)" ] && \
+		[ "$wanselect" != "$(echo $(uci get syncdial.config.devbackup)| cut -d " " -f2)" ] && \
+			[ "$nomwan" -ne 1 ] && mwan_cfg_del $wanselect
+	else
+		[ "$nomwan" -ne 1 ] && mwan_cfg_del $wanselect
+	fi
+
+	[ "$dial_type" -eq 2 ] && {
+		[ $(uci get network.$wanselect2.proto) == "none" ] && {
+			uci set network.$wanselect2.proto=pppoe
+		}
+		
+		if [ "$oldframe" -eq 0 ]; then
+			[ "$wanselect2" != "$(echo $(uci get syncdial.config.devbackup)| cut -d " " -f1)" ] && \
+			[ "$wanselect2" != "$(echo $(uci get syncdial.config.devbackup)| cut -d " " -f2)" ] && \
+				[ "$nomwan" -ne 1 ] && mwan_cfg_del $wanselect2
+		else
+			[ "$nomwan" -ne 1 ] && mwan_cfg_del $wanselect2
+		fi
+	}
+}
+
+
+[ -z "$norun" ] && uci set syncdial.config.devbackup="$origfirewall" && uci commit syncdial
+general_config_remove
+general_config_load
+
+uci set network.$wanselect.metric=40
+if [ "$wannum" -gt 0 ]; then
+	[ "$old_frame" -eq 1 ] && {
+		uci set network.$wanselect.proto=none
+		ifname=$(uci get network.$wanselect.ifname)
+		for i in $(seq 1 $wannum)
+		do
+			ip link add link $ifname name macvlan$i type macvlan
+			ifconfig macvlan$i hw ether $(echo $(cat /sys/class/net/$ifname/address|awk -F ":" '{print $1":"$2":"$3":"$4":"$5":" }')$(echo "" | awk -F ":" '{printf("%X\n", 16+i);}' i=$i))
+			ifconfig macvlan$i up
+		done
+	}
+	[ "$wanselect" != "$(echo $(uci get syncdial.config.devbackup)| cut -d " " -f1)" ] && \
+		[ "$wanselect" != "$(echo $(uci get syncdial.config.devbackup)| cut -d " " -f2)" ] && \
+			[ "$old_frame" -eq 0 -a "$nomwan" -ne 1 ] && mwan_cfg_add $wanselect
+	
+	
+	for i in $(seq 1 $wannum)
+	do
+		[ "$old_frame" -eq 0 ] && macvlan_dev_add macvlan$i $pppoe_ifname
+		if [ "$bindwan" != "" -a "$bindwan" == "1" ]; then
+			pppoe_if_add vwan$i $pppoe_ifname $pppoe_user $pppoe_password $((40+$i))
+		else
+			pppoe_if_add vwan$i macvlan$i $pppoe_user $pppoe_password $((40+$i))
+		fi
+		[ "$nomwan" -ne 1 ] && mwan_cfg_add vwan$i
+	done
+else
+	[ "$nomwan" -ne 1 ] && mwan_cfg_add $wanselect
+fi
+
+###dualdial configuration
+[ "$(uci -q get syncdial.config.dial_type)" = "2" ] && {
+
+	uci set network.$wanselect2.metric=60
+	if [ "$wannum2" -gt 0 ]; then
+		[ "$old_frame" -eq 1 ] && {
+			uci set network.$wanselect2.proto=none
+			ifname2=$(uci get network.$wanselect2.ifname)
+			for i in $(seq 1 $wannum2)
+			do
+				ip link add link $ifname2 name macvlan$(($wannum+$i)) type macvlan
+				ifconfig macvlan$(($wannum+$i)) hw ether $(echo $(cat /sys/class/net/$ifname2/address|awk -F ":" '{print $1":"$2":"$3":"$4":"$5":" }')$(echo "" | awk -F ":" '{printf("%X\n", 16+i);}' i=$i))
+				ifconfig macvlan$(($wannum+$i)) up
+			done
+		}
+		[ "$wanselect2" != "$(echo $(uci get syncdial.config.devbackup)| cut -d " " -f1)" ] && \
+			[ "$wanselect2" != "$(echo $(uci get syncdial.config.devbackup)| cut -d " " -f2)" ] && \
+				[ "$old_frame" -eq 0 -a "$nomwan" -ne 1 ] && mwan_cfg_add $wanselect2
+		
+		
+		for i in $(seq 1 $wannum2)
+		do
+			[ "$old_frame" -eq 0 ] && macvlan_dev_add macvlan$(($wannum+$i)) $pppoe_ifname2
+			if [ "$bindwan2" != "" -a "$bindwan2" == "1" ]; then
+				pppoe_if_add vwan$(($wannum+$i)) $pppoe_ifname2 $pppoe_user2 $pppoe_password2 $((60+$i))
+			else
+				pppoe_if_add vwan$(($wannum+$i)) macvlan$(($wannum+$i)) $pppoe_user2 $pppoe_password2 $((60+$i))
+			fi
+			[ "$nomwan" -ne 1 ] && mwan_cfg_add vwan$(($wannum+$i))
+		done
+	else
+		[ "$nomwan" -ne 1 ] && mwan_cfg_add $wanselect2
+	fi
+}
+
+orig_firewall_add
+apply_cfg
+
+return 0
diff --git a/package/lean/luci-app-syncdial/root/etc/config/syncdial b/package/lean/luci-app-syncdial/root/etc/config/syncdial
new file mode 100644
index 0000000000..5a39e586f8
--- /dev/null
+++ b/package/lean/luci-app-syncdial/root/etc/config/syncdial
@@ -0,0 +1,19 @@
+
+config syncdial 'config'
+	option syncon '1'
+	option dialwait '25'
+	option dialchk '1'
+	option nomwan '0'
+	option wanselect 'wan'
+	option dial_type '2'
+	option wannum '3'
+	option wanselect2 'wan2'
+	option wannum2 '2'
+	option dialnum '3'
+	option dialnum2 '2'
+	option old_frame '1'
+	option devbackup 'wan wan6 wan2'
+	option bindwan '0'
+	option bindwan2 '0'
+	option enabled '0'
+
diff --git a/package/lean/luci-app-syncdial/root/etc/hotplug.d/iface/01-dialcheck b/package/lean/luci-app-syncdial/root/etc/hotplug.d/iface/01-dialcheck
new file mode 100755
index 0000000000..716db654c5
--- /dev/null
+++ b/package/lean/luci-app-syncdial/root/etc/hotplug.d/iface/01-dialcheck
@@ -0,0 +1,36 @@
+#!/bin/sh
+[ "$ACTION" = "ifdown" ] &&	pppconnectcheck &
+
+wanselect=$(uci get syncdial.config.wanselect)
+[ "$(uci get syncdial.config.dial_type)" = "2" ] && {
+	wanselect2=$(uci get syncdial.config.wanselect2)
+}
+
+[ "$(uci get syncdial.config.enabled)" = "1" ] && \
+	[ "$(uci get syncdial.config.old_frame)" = "1" ] && \
+	[ "$DEVICE" = "$(uci get network.$wanselect.ifname)" ] && \
+	[ "$ACTION" = "ifup" ] && {
+	ifname=$(uci get network.$wanselect.ifname)
+	wannum=$(uci get syncdial.config.wannum)
+	for i in $(seq 1 $wannum)
+	do
+		[ -d /sys/class/net/macvlan$i ] || {
+			ip link add link $ifname name macvlan$i type macvlan
+			ifconfig macvlan$i hw ether $(echo $(cat /sys/class/net/$ifname/address|awk -F ":" '{print $1":"$2":"$3":"$4":"$5":" }')$(echo "" | awk -F ":" '{printf("%X\n", 16+i);}' i=$i))
+			ifconfig macvlan$i up
+		}
+	done
+
+	[ "$(uci get syncdial.config.dial_type)" = "2" ] && {
+	ifname2=$(uci get network.$wanselect2.ifname)
+	wannum2=$(uci get syncdial.config.wannum2)
+	for i in $(seq 1 $wannum2)
+	do
+		[ -d /sys/class/net/macvlan$(($wannum+$i)) ] || {
+			ip link add link $ifname2 name macvlan$(($wannum+$i)) type macvlan
+			ifconfig macvlan$(($wannum+$i)) hw ether $(echo $(cat /sys/class/net/$ifname2/address|awk -F ":" '{print $1":"$2":"$3":"$4":"$5":" }')$(echo "" | awk -F ":" '{printf("%X\n", 16+i);}' i=$i))
+			ifconfig macvlan$(($wannum+$i)) up
+		}
+	done
+	}
+}
diff --git a/package/lean/luci-app-syncdial/root/etc/hotplug.d/iface/01-mvifcreate b/package/lean/luci-app-syncdial/root/etc/hotplug.d/iface/01-mvifcreate
new file mode 100755
index 0000000000..426341fed9
--- /dev/null
+++ b/package/lean/luci-app-syncdial/root/etc/hotplug.d/iface/01-mvifcreate
@@ -0,0 +1,16 @@
+#!/bin/sh
+[ "$(uci get syncdial.config.enabled)" = "1" ] && \
+	[ "$(uci get syncdial.config.old_frame)" = "1" ] && \
+	[ "$DEVICE" = "$(uci get network.wan.ifname)" ] && \
+	[ "$ACTION" = "ifup" ] && {
+	ifname=$(uci get network.wan.ifname)
+	wannum=$(uci get syncdial.config.wannum)
+	for i in $(seq 1 $wannum)
+	do
+		[ -d /sys/class/net/macvlan$i ] || {
+			ip link add link $ifname name macvlan$i type macvlan
+			ifconfig macvlan$i hw ether $(echo $(cat /sys/class/net/$ifname/address|awk -F ":" '{print $1":"$2":"$3":"$4":"$5":" }')$(echo "" | awk -F ":" '{printf("%X\n", 16+i);}' i=$i))
+			ifconfig macvlan$i up
+		}
+	done
+}
diff --git a/package/lean/luci-app-syncdial/root/etc/uci-defaults/luci-syncdial b/package/lean/luci-app-syncdial/root/etc/uci-defaults/luci-syncdial
new file mode 100755
index 0000000000..5394164cca
--- /dev/null
+++ b/package/lean/luci-app-syncdial/root/etc/uci-defaults/luci-syncdial
@@ -0,0 +1,12 @@
+#!/bin/sh
+touch /etc/config/syncdial
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@syncdial[-1]
+	add ucitrack syncdial
+	set ucitrack.@syncdial[-1].exec='/bin/genwancfg'
+	commit ucitrack
+EOF
+
+rm -f /tmp/luci-indexcache
+exit 0
diff --git a/package/lean/luci-app-ttyd/Makefile b/package/lean/luci-app-ttyd/Makefile
new file mode 100644
index 0000000000..cd54f30d29
--- /dev/null
+++ b/package/lean/luci-app-ttyd/Makefile
@@ -0,0 +1,17 @@
+# Copyright (C) 2016 Openwrt.org
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI support for ttyd
+LUCI_DEPENDS:=+ttyd
+LUCI_PKGARCH:=all
+PKG_VERSION:=1.0
+PKG_RELEASE:=2
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
diff --git a/package/lean/luci-app-ttyd/luasrc/controller/terminal.lua b/package/lean/luci-app-ttyd/luasrc/controller/terminal.lua
new file mode 100644
index 0000000000..f4618f2da7
--- /dev/null
+++ b/package/lean/luci-app-ttyd/luasrc/controller/terminal.lua
@@ -0,0 +1,9 @@
+module("luci.controller.terminal", package.seeall)
+
+function index()
+	if not (luci.sys.call("pidof ttyd > /dev/null") == 0) then
+		return
+	end
+	
+	entry({"admin", "system", "terminal"}, template("terminal"), _("TTYD Terminal"), 10).leaf = true
+end
diff --git a/package/lean/luci-app-ttyd/luasrc/view/terminal.htm b/package/lean/luci-app-ttyd/luasrc/view/terminal.htm
new file mode 100644
index 0000000000..784f86f4ff
--- /dev/null
+++ b/package/lean/luci-app-ttyd/luasrc/view/terminal.htm
@@ -0,0 +1,9 @@
+<%+header%>
+<div class="cbi-map">
+        <h2 name="content"><%=translate("TTYD Terminal")%></h2>
+        <iframe id="terminal" style="width: 100%; min-height: 500px; border: none; border-radius: 3px;"></iframe>
+</div>
+<script type="text/javascript">
+        document.getElementById("terminal").src = "http://" + window.location.hostname + ":7681";
+</script>
+<%+footer%>
\ No newline at end of file
diff --git a/package/lean/luci-app-ttyd/po/zh-cn/terminal.po b/package/lean/luci-app-ttyd/po/zh-cn/terminal.po
new file mode 100644
index 0000000000..ed7b7523b3
--- /dev/null
+++ b/package/lean/luci-app-ttyd/po/zh-cn/terminal.po
@@ -0,0 +1,5 @@
+msgid ""
+msgstr "Content-Type: text/plain; charset=UTF-8"
+
+msgid "TTYD Terminal"
+msgstr "TTYD 终端"
diff --git a/package/lean/luci-app-ttyd/root/etc/init.d/ttyd b/package/lean/luci-app-ttyd/root/etc/init.d/ttyd
new file mode 100755
index 0000000000..87216650bf
--- /dev/null
+++ b/package/lean/luci-app-ttyd/root/etc/init.d/ttyd
@@ -0,0 +1,26 @@
+#!/bin/sh /etc/rc.common
+
+START=99
+SERVICE_WRITE_PID=1
+SERVICE_DAEMONIZE=1
+
+start() {
+	logger -t TTYD 'Starting ttyd service'
+	service_start /usr/bin/ttyd -i br-lan /bin/login
+	return 0
+}
+
+stop() {
+	if [ -n "`pidof ttyd`" ]; then
+		logger -t TTYD 'Shutting down ttyd service'
+		service_stop /usr/bin/ttyd
+	fi
+	return 0
+}
+
+restart() {
+	logger -t TTYD 'Restarting ttyd service'
+	stop
+	sleep 2
+	start
+}
diff --git a/package/lean/luci-app-unblockmusic/Makefile b/package/lean/luci-app-unblockmusic/Makefile
new file mode 100644
index 0000000000..a50de73a3b
--- /dev/null
+++ b/package/lean/luci-app-unblockmusic/Makefile
@@ -0,0 +1,27 @@
+# Copyright (C) 2016 Openwrt.org
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+# licheng
+# www.maxlicheng.com
+# 2019-06-08
+#
+
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=luci-app-unblockmusic
+PKG_VERSION:=2.2.0
+PKG_RELEASE:=9
+
+PKG_LICENSE:=Apache-2.0
+
+LUCI_TITLE:=LuCI support for Unblock NeteaseCloudMusic
+LUCI_DEPENDS:=+UnblockNeteaseMusic +bash +dnsmasq-full +ipset
+LUCI_PKGARCH:=all
+
+PKG_MAINTAINER:=lean
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
diff --git a/package/lean/luci-app-unblockmusic/luasrc/controller/unblockmusic.lua b/package/lean/luci-app-unblockmusic/luasrc/controller/unblockmusic.lua
new file mode 100644
index 0000000000..231f0bf212
--- /dev/null
+++ b/package/lean/luci-app-unblockmusic/luasrc/controller/unblockmusic.lua
@@ -0,0 +1,22 @@
+
+module("luci.controller.unblockmusic", package.seeall)
+
+function index()
+	if not nixio.fs.access("/etc/config/unblockmusic") then
+		return
+	end
+
+	entry({"admin", "services", "unblockmusic"},firstchild(), _("解锁网易云灰色歌曲"), 50).dependent = false
+	
+	entry({"admin", "services", "unblockmusic", "general"},cbi("unblockmusic"), _("Base Setting"), 1)
+	entry({"admin", "services", "unblockmusic", "log"},form("unblockmusiclog"), _("Log"), 2)
+  
+	entry({"admin", "services", "unblockmusic", "status"},call("act_status")).leaf=true
+end
+
+function act_status()
+  local e={}
+  e.running=luci.sys.call("busybox ps -w | grep app.js | grep -v grep >/dev/null")==0
+  luci.http.prepare_content("application/json")
+  luci.http.write_json(e)
+end
diff --git a/package/lean/luci-app-unblockmusic/luasrc/model/cbi/unblockmusic.lua b/package/lean/luci-app-unblockmusic/luasrc/model/cbi/unblockmusic.lua
new file mode 100644
index 0000000000..436b19a85e
--- /dev/null
+++ b/package/lean/luci-app-unblockmusic/luasrc/model/cbi/unblockmusic.lua
@@ -0,0 +1,74 @@
+
+mp = Map("unblockmusic", translate("解锁网易云灰色歌曲"))
+mp.description = translate("采用 [QQ/虾米/百度/酷狗/酷我/咕咪/JOOX]等音源，替换网易云变灰歌曲链接")
+
+mp:section(SimpleSection).template  = "unblockmusic/unblockmusic_status"
+
+s = mp:section(TypedSection, "unblockmusic")
+s.anonymous=true
+s.addremove=false
+
+enabled = s:option(Flag, "enabled", translate("启用解锁"))
+enabled.default = 0
+enabled.rmempty = false
+enabled.description = translate("启用后，路由器自动分流解锁，大部分设备无需设置代理。<br />苹果系列设备需要设置 WIFI/有线代理方式为 自动 ,并安装 CA根证书并信任。")
+
+speedtype = s:option(ListValue, "musicapptype", translate("音源选择"))
+speedtype:value("default", translate("默认"))
+speedtype:value("netease", translate("网易云音乐"))
+speedtype:value("qq", translate("QQ音乐"))
+speedtype:value("xiami", translate("虾米音乐"))
+speedtype:value("baidu", translate("百度音乐"))
+speedtype:value("kugou", translate("酷狗音乐"))
+speedtype:value("kuwo", translate("酷我音乐(高音质推荐)"))
+speedtype:value("migu", translate("咕咪音乐"))
+speedtype:value("joox", translate("JOOX音乐"))
+
+endpoint = s:option(Value, "endpoint", translate("转发HTTPS音源地址"))
+endpoint.default = "https://music.163.com"
+endpoint.rmempty = true
+endpoint.description = translate("默认为 https://music.163.com")
+
+o = s:option(Button,"certificate",translate("HTTPS 证书"))
+o.inputtitle = translate("下载 CA 根证书")
+o.description = translate("iOS 13 系统需要在“设置 -> 通用 -> 关于本机 -> 证书信任设置” 中，信任 UnblockNeteaseMusic Root CA )")
+o.inputstyle = "apply"
+o.write = function()
+  	Download()
+end
+
+function Download()
+	local t,e
+	t=nixio.open("/usr/share/UnblockNeteaseMusic/ca.crt","r")
+	luci.http.header('Content-Disposition','attachment; filename="ca.crt"')
+	luci.http.prepare_content("application/octet-stream")
+	while true do
+		e=t:read(nixio.const.buffersize)
+		if(not e)or(#e==0)then
+			break
+		else
+			luci.http.write(e)
+		end
+	end
+	t:close()
+	luci.http.close()
+end
+
+o = s:option(Flag, "autoupdate")
+o.title = translate("自动检查更新主程序")
+o.default = 0
+o.rmempty = false
+o.description = translate("每天自动检测并更新到最新版本")
+
+local ver = luci.sys.exec("cat /usr/share/UnblockNeteaseMusic/core_ver")
+
+o = s:option(Button, "restart",translate("手动更新"))
+o.inputtitle = translate("更新核心版本")
+o.description = string.format(translate("目前运行主程序版本") ..  "<strong><font color=\"green\">: %s </font></strong>", ver)
+o.inputstyle = "reload"
+o.write = function()
+	luci.sys.exec("bash /usr/share/UnblockNeteaseMusic/update_core.sh 2>&1")
+  luci.http.redirect(luci.dispatcher.build_url("admin", "services", "unblockmusic"))
+end
+
+return mp
diff --git a/package/lean/luci-app-unblockmusic/luasrc/model/cbi/unblockmusiclog.lua b/package/lean/luci-app-unblockmusic/luasrc/model/cbi/unblockmusiclog.lua
new file mode 100644
index 0000000000..1be151743c
--- /dev/null
+++ b/package/lean/luci-app-unblockmusic/luasrc/model/cbi/unblockmusiclog.lua
@@ -0,0 +1,16 @@
+local fs = require "nixio.fs"
+local conffile = "/tmp/unblockmusic.log"
+local conffile = "/tmp/music.log"
+
+f = SimpleForm("logview")
+
+t = f:field(TextValue, "conf")
+t.rmempty = true
+t.rows = 20
+function t.cfgvalue()
+  luci.sys.exec("grep -B 1 'http' /tmp/unblockmusic.log > /tmp/music.log")
+	return fs.readfile(conffile) or ""
+end
+t.readonly="readonly"
+
+return f
diff --git a/package/lean/luci-app-unblockmusic/luasrc/view/unblockmusic/unblockmusic_status.htm b/package/lean/luci-app-unblockmusic/luasrc/view/unblockmusic/unblockmusic_status.htm
new file mode 100644
index 0000000000..74dd928129
--- /dev/null
+++ b/package/lean/luci-app-unblockmusic/luasrc/view/unblockmusic/unblockmusic_status.htm
@@ -0,0 +1,22 @@
+<script type="text/javascript">//<![CDATA[
+XHR.poll(3, '<%=url([[admin]], [[services]], [[unblockmusic]], [[status]])%>', null,
+	function(x, data) {
+		var tb = document.getElementById('unblockmusic_status');
+		if (data && tb) {
+			if (data.running) {
+				var links = '<em><b><font color=green>UnblockNeteaseMusic <%:RUNNING%></font></b></em>';
+				tb.innerHTML = links;
+			} else {
+				tb.innerHTML = '<em><b><font color=red>UnblockNeteaseMusic <%:NOT RUNNING%></font></b></em>';
+			}
+		}
+	}
+);
+//]]>
+</script>
+<style>.mar-10 {margin-left: 50px; margin-right: 10px;}</style>
+<fieldset class="cbi-section">
+	<p id="unblockmusic_status">
+		<em><%:Collecting data...%></em>
+	</p>
+</fieldset>
\ No newline at end of file
diff --git a/package/lean/luci-app-unblockmusic/root/etc/config/unblockmusic b/package/lean/luci-app-unblockmusic/root/etc/config/unblockmusic
new file mode 100644
index 0000000000..1102183f6f
--- /dev/null
+++ b/package/lean/luci-app-unblockmusic/root/etc/config/unblockmusic
@@ -0,0 +1,10 @@
+
+config unblockmusic
+	option enabled '0'
+	option musicapptype 'default'
+	option port '5200'
+	option enable_ipset '1'
+	option endpoint 'https://music.163.com'
+	option autoupdate '1'
+	
+
diff --git a/package/lean/luci-app-unblockmusic/root/etc/init.d/unblockmusic b/package/lean/luci-app-unblockmusic/root/etc/init.d/unblockmusic
new file mode 100755
index 0000000000..5be5239562
--- /dev/null
+++ b/package/lean/luci-app-unblockmusic/root/etc/init.d/unblockmusic
@@ -0,0 +1,110 @@
+#!/bin/sh /etc/rc.common
+
+START=99
+STOP=10
+
+enable=$(uci get unblockmusic.@unblockmusic[0].enabled)
+TYPE=$(uci get unblockmusic.@unblockmusic[0].musicapptype)
+ROUTE_IP=$(uci get network.lan.ipaddr)
+ENDPOINT=$(uci get unblockmusic.@unblockmusic[0].endpoint)
+AUTOUPDATE=$(uci get unblockmusic.@unblockmusic[0].autoupdate)
+
+CRON_FILE=/etc/crontabs/root
+
+ipt_n="iptables -t nat"
+
+add_rule()
+{
+  ipset -! -N music hash:ip
+	$ipt_n -N cloud_music
+	$ipt_n -A cloud_music -d 0.0.0.0/8 -j RETURN
+	$ipt_n -A cloud_music -d 10.0.0.0/8 -j RETURN
+	$ipt_n -A cloud_music -d 127.0.0.0/8 -j RETURN
+	$ipt_n -A cloud_music -d 169.254.0.0/16 -j RETURN
+	$ipt_n -A cloud_music -d 172.16.0.0/12 -j RETURN
+	$ipt_n -A cloud_music -d 192.168.0.0/16 -j RETURN
+	$ipt_n -A cloud_music -d 224.0.0.0/4 -j RETURN
+	$ipt_n -A cloud_music -d 240.0.0.0/4 -j RETURN
+	$ipt_n -A cloud_music -p tcp -j REDIRECT --to-ports 5202
+	$ipt_n -I PREROUTING -p tcp --dport 80 -m set --match-set music dst -j cloud_music
+}
+
+del_rule(){
+	$ipt_n -D PREROUTING -p tcp --dport 80 -m set --match-set music dst -j cloud_music 2>/dev/null
+	$ipt_n -F cloud_music  2>/dev/null
+	$ipt_n -X cloud_music  2>/dev/null
+	
+	rm -f /tmp/dnsmasq.d/dnsmasq-163.conf
+	/etc/init.d/dnsmasq restart >/dev/null 2>&1
+}
+
+set_firewall(){
+  rm -f /tmp/dnsmasq.d/dnsmasq-163.conf
+  mkdir -p /tmp/dnsmasq.d
+  echo "dhcp-option=252,http://$ROUTE_IP:5200/proxy.pac" > /tmp/dnsmasq.d/dnsmasq-163.conf
+	echo "ipset=/music.163.com/music" >> /tmp/dnsmasq.d/dnsmasq-163.conf
+	echo "ipset=/interface.music.163.com/music" >> /tmp/dnsmasq.d/dnsmasq-163.conf
+	/etc/init.d/dnsmasq restart >/dev/null 2>&1
+	
+	add_rule
+	
+	mkdir -p /var/etc
+	cat > "/var/etc/unblockmusic.include" <<-EOF
+/etc/init.d/unblockmusic restart
+	EOF
+}
+
+add_cron()
+{
+	if [ $AUTOUPDATE -eq 1 ]; then
+    sed -i '/update_core.sh/d' $CRON_FILE
+		echo '0 2 * * * /usr/share/UnblockNeteaseMusic/update_core.sh 2>&1' >> $CRON_FILE
+		crontab $CRON_FILE
+	fi
+}
+
+del_cron()
+{
+	sed -i '/update_core.sh/d' $CRON_FILE
+	/etc/init.d/cron restart
+}
+
+start()
+{
+	stop
+	
+	[ $enable -eq "0" ] && exit 0
+	
+	endponintset="";
+	
+	if [ -n "$ENDPOINT" ]; then
+		endponintset="-e ${ENDPOINT}"
+	fi
+	
+	if [ $TYPE = "default" ]; then
+			node /usr/share/UnblockNeteaseMusic/app.js $endponintset -p 5200:5201 >/tmp/unblockmusic.log 2>&1 &
+			node /usr/share/UnblockNeteaseMusic/app.js -p 5202 >>/tmp/unblockmusic.log 2>&1 &
+	else
+			node /usr/share/UnblockNeteaseMusic/app.js $endponintset -p 5200:5201 -o $TYPE >/tmp/unblockmusic.log 2>&1 &
+			node /usr/share/UnblockNeteaseMusic/app.js -p 5202 -o $TYPE >>/tmp/unblockmusic.log 2>&1 &
+	fi
+	
+	set_firewall
+	add_cron
+	
+	/usr/share/UnblockNeteaseMusic/logcheck.sh >/dev/null 2>&1 &
+}
+
+stop()
+{
+	kill -9 $(busybox ps -w | grep monitor | grep -v grep | awk '{print $1}') >/dev/null 2>&1
+	kill -9 $(busybox ps -w | grep app.js | grep -v grep | awk '{print $1}') >/dev/null 2>&1
+	kill -9 $(busybox ps -w | grep logcheck.sh | grep -v grep | awk '{print $1}') >/dev/null 2>&1
+	rm -f /tmp/unblockmusic.log
+
+	del_rule
+	del_cron
+}
+
+
+
diff --git a/package/lean/luci-app-unblockmusic/root/etc/ppp/ip-up.d/unblockmusic.sh b/package/lean/luci-app-unblockmusic/root/etc/ppp/ip-up.d/unblockmusic.sh
new file mode 100755
index 0000000000..e8844f63ad
--- /dev/null
+++ b/package/lean/luci-app-unblockmusic/root/etc/ppp/ip-up.d/unblockmusic.sh
@@ -0,0 +1,4 @@
+#!/bin/sh
+
+sleep 10
+wget http://httpdns.n.netease.com/httpdns/v2/d?domain=music.163.com,interface.music.163.com,interface3.music.163.com,apm.music.163.com,apm3.music.163.com,clientlog.music.163.com,clientlog3.music.163.com -O- | grep -Eo '[0-9]+?\.[0-9]+?\.[0-9]+?\.[0-9]+?' | sort | uniq | awk '{print "ipset -! add music "$1}' | sh
diff --git a/package/lean/luci-app-unblockmusic/root/etc/uci-defaults/unblockmusic b/package/lean/luci-app-unblockmusic/root/etc/uci-defaults/unblockmusic
new file mode 100755
index 0000000000..38a16d6958
--- /dev/null
+++ b/package/lean/luci-app-unblockmusic/root/etc/uci-defaults/unblockmusic
@@ -0,0 +1,17 @@
+#!/bin/sh
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@unblockmusic[-1]
+	add ucitrack unblockmusic
+	set ucitrack.@unblockmusic[-1].init=unblockmusic
+	commit ucitrack
+	delete firewall.unblockmusic
+	set firewall.unblockmusic=include
+	set firewall.unblockmusic.type=script
+	set firewall.unblockmusic.path=/var/etc/unblockmusic.include
+	set firewall.unblockmusic.reload=1
+	commit firewall
+EOF
+
+rm -f /tmp/luci-indexcache
+exit 0
diff --git a/package/lean/luci-app-unblockmusic/root/usr/share/UnblockNeteaseMusic/logcheck.sh b/package/lean/luci-app-unblockmusic/root/usr/share/UnblockNeteaseMusic/logcheck.sh
new file mode 100755
index 0000000000..168020537d
--- /dev/null
+++ b/package/lean/luci-app-unblockmusic/root/usr/share/UnblockNeteaseMusic/logcheck.sh
@@ -0,0 +1,17 @@
+#!/bin/bash
+
+log_max_size="10" #使用KB计算
+log_file="/tmp/unblockmusic.log"
+
+while true
+do
+  sleep 10s
+  icount=`busybox ps -w | grep app.js |grep -v grep| wc -l`
+  if [ $icount -ne 2 ] ;then 
+    /etc/init.d/unblockmusic restart 
+  fi
+	(( log_size = "$(ls -l "${log_file}" | awk -F ' ' '{print $5}')" / "1024" ))
+	(( "${log_size}" >= "${log_max_size}" )) && echo "" > /tmp/unblockmusic.log
+	sleep 10m
+done
+
diff --git a/package/lean/luci-app-unblockmusic/root/usr/share/UnblockNeteaseMusic/update_core.sh b/package/lean/luci-app-unblockmusic/root/usr/share/UnblockNeteaseMusic/update_core.sh
new file mode 100755
index 0000000000..51705698b8
--- /dev/null
+++ b/package/lean/luci-app-unblockmusic/root/usr/share/UnblockNeteaseMusic/update_core.sh
@@ -0,0 +1,64 @@
+
+
+function check_if_already_running(){
+	running_tasks="$(ps |grep "unblockneteasemusic" |grep "update_core" |grep -v "grep" |awk '{print $1}' |wc -l)"
+	[ "${running_tasks}" -gt "2" ] && echo -e "\nA task is already running." >>/tmp/unblockmusic_update.log && exit 2
+}
+
+function clean_log(){
+	echo "" > /tmp/unblockmusic_update.log
+}
+
+function check_latest_version(){
+	latest_ver="$(wget -O- https://github.com/nondanee/UnblockNeteaseMusic/commits/master |tr -d '\n' |grep -Eo 'commit\/[0-9a-z]+' |sed -n 1p |sed 's#commit/##g')"
+	[ -z "${latest_ver}" ] && echo -e "\nFailed to check latest version, please try again later." >>/tmp/unblockmusic_update.log && exit 1
+	if [ ! -e "/usr/share/UnblockNeteaseMusic/local_ver" ]; then
+		clean_log
+		echo -e "Local version: NOT FOUND, cloud version: ${latest_ver}." >>/tmp/unblockmusic_update.log
+		update_core
+	else
+		if [ "$(cat /usr/share/UnblockNeteaseMusic/local_ver)" != "${latest_ver}" ]; then
+			clean_log
+			echo -e "Local version: $(cat /usr/share/UnblockNeteaseMusic/local_ver 2>/dev/null), cloud version: ${latest_ver}." >>/tmp/unblockmusic_update.log
+			update_core
+		else
+			echo -e "\nLocal version: $(cat /usr/share/UnblockNeteaseMusic/local_ver 2>/dev/null), cloud version: ${latest_ver}." >>/tmp/unblockmusic_update.log
+			echo -e "You're already using the latest version." >>/tmp/unblockmusic_update.log
+			exit 3
+		fi
+	fi
+}
+
+function update_core(){
+	echo -e "Updating core..." >>/tmp/unblockmusic_update.log
+
+	mkdir -p "/tmp/unblockneteasemusic/core" >/dev/null 2>&1
+	rm -rf /tmp/unblockneteasemusic/core/* >/dev/null 2>&1
+
+	wget-ssl --no-check-certificate -t 1 -T 10 -O  /tmp/unblockneteasemusic/core/core.tar.gz "https://github.com/nondanee/UnblockNeteaseMusic/archive/master.tar.gz"  >/dev/null 2>&1
+	tar -zxf "/tmp/unblockneteasemusic/core/core.tar.gz" -C "/tmp/unblockneteasemusic/core/" >/dev/null 2>&1
+	rm -f /tmp/unblockneteasemusic/core/UnblockNeteaseMusic-master/ca.crt /tmp/unblockneteasemusic/core/UnblockNeteaseMusic-master/server.crt /tmp/unblockneteasemusic/core/UnblockNeteaseMusic-master/server.key
+	cp -a /tmp/unblockneteasemusic/core/UnblockNeteaseMusic-master/* "/usr/share/UnblockNeteaseMusic/"
+	rm -rf "/tmp/unblockneteasemusic" >/dev/null 2>&1
+
+	if [ ! -e "/usr/share/UnblockNeteaseMusic/app.js" ]; then
+		echo -e "Failed to download core." >>/tmp/unblockmusic_update.log
+		exit 1
+	else
+		[ "${luci_update}" == "y" ] && touch "/usr/share/unblockneteasemusic/update_successfully"
+		echo -e "${latest_ver}" > /usr/share/UnblockNeteaseMusic/local_ver
+		/etc/init.d/unblockmusic restart
+	fi
+
+	echo -e "Succeeded in updating core." >/tmp/unblockmusic_update.log
+	echo -e "Local version: $(cat /usr/share/UnblockNeteaseMusic/local_ver 2>/dev/null), cloud version: ${latest_ver}.\n" >>/tmp/unblockmusic_update.log
+	node /usr/share/UnblockNeteaseMusic/app.js -v > /usr/share/UnblockNeteaseMusic/core_ver
+}
+
+function main(){
+	check_if_already_running
+	check_latest_version
+}
+
+	[ "$1" == "luci_update" ] && luci_update="y"
+	main
diff --git a/package/lean/luci-app-usb-printer/Makefile b/package/lean/luci-app-usb-printer/Makefile
new file mode 100644
index 0000000000..b213376810
--- /dev/null
+++ b/package/lean/luci-app-usb-printer/Makefile
@@ -0,0 +1,18 @@
+#
+# Copyright (C) 2008-2014 The LuCI Team <luci@lists.subsignal.org>
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=USB Printer Share via TCP/IP
+LUCI_DEPENDS:=+p910nd +kmod-usb-printer
+PKG_VERSION:=1.0
+PKG_RELEASE:=2
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+#applications/luci-app-usb-printer/
+#applications/luci-app-usb-printer/
diff --git a/package/lean/luci-app-usb-printer/ipkg/postinst b/package/lean/luci-app-usb-printer/ipkg/postinst
new file mode 100755
index 0000000000..97a343c7b1
--- /dev/null
+++ b/package/lean/luci-app-usb-printer/ipkg/postinst
@@ -0,0 +1,6 @@
+#!/bin/sh
+[ -n "${IPKG_INSTROOT}" ] || {
+	( . /etc/uci-defaults/luci-usb-printer ) && rm -f /etc/uci-defaults/luci-usb-printer
+	exit 0
+}
+
diff --git a/package/lean/luci-app-usb-printer/luasrc/controller/usb_printer.lua b/package/lean/luci-app-usb-printer/luasrc/controller/usb_printer.lua
new file mode 100644
index 0000000000..ebcee4f79a
--- /dev/null
+++ b/package/lean/luci-app-usb-printer/luasrc/controller/usb_printer.lua
@@ -0,0 +1,29 @@
+--[[
+LuCI - Lua Configuration Interface
+
+Copyright 2008 Steven Barth <steven@midlink.org>
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+$Id$
+]]--
+
+require("luci.sys")
+
+module("luci.controller.usb_printer", package.seeall)
+
+function index()
+	if not nixio.fs.access("/etc/config/usb_printer") then
+		return
+	end
+	
+  entry({"admin", "nas"}, firstchild(), "NAS", 44).dependent = false
+	
+	local page
+
+	page = entry({"admin", "nas", "usb_printer"}, cbi("usb_printer"), _("USB Printer Server"), 50)
+end
diff --git a/package/lean/luci-app-usb-printer/luasrc/model/cbi/usb_printer.lua b/package/lean/luci-app-usb-printer/luasrc/model/cbi/usb_printer.lua
new file mode 100644
index 0000000000..3cc7526ef9
--- /dev/null
+++ b/package/lean/luci-app-usb-printer/luasrc/model/cbi/usb_printer.lua
@@ -0,0 +1,130 @@
+--[[
+LuCI - Lua Configuration Interface
+
+Copyright 2008 Steven Barth <steven@midlink.org>
+Copyright 2005-2013 hackpascal <hackpascal@gmail.com>
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+$Id$
+]]--
+
+require "luci.util"
+local uci = luci.model.uci.cursor_state()
+local net = require "luci.model.network"
+
+m = Map("usb_printer", translate("USB Printer Server"),
+	translate("Shares multiple USB printers via TCP/IP.<br />When modified bingings, re-plug usb connectors to take effect.<br />This module requires kmod-usb-printer."))
+
+function hex_align(hex, num)
+	local len = num - string.len(hex)
+
+	return string.rep("0", len) .. hex
+end
+
+function detect_usb_printers()
+	local data = {}
+
+	local lps = luci.util.execi("/usr/bin/detectlp")
+
+	for value in lps do
+		local row = {}
+
+		--[[
+			detectlp 的输出格式：
+			设备名，VID/PID/?,描述，型号
+		]]--
+
+		local pos = string.find(value, ",")
+
+		local devname = string.sub(value, 1, pos - 1)
+
+		local value = string.sub(value, pos + 1, string.len(value))
+
+		pos = string.find(value, ",")
+		local product = string.sub(value, 1, pos - 1)
+
+		value = string.sub(value, pos + 1, string.len(value))
+
+		pos = string.find(value, ",")
+		local model = string.sub(value, 1, pos - 1)
+
+		local name = string.sub(value, pos + 1, string.len(value))
+
+		pos = string.find(product, "/");
+
+		local vid = string.sub(product, 1, pos - 1)
+
+		local pid = string.sub(product, pos + 1, string.len(product))
+
+		pos = string.find(pid, "/")
+		pid = string.sub(pid, 1, pos - 1)
+
+		row["description"] = name
+		row["model"] = model
+		row["id"] = hex_align(vid, 4) .. ":" .. hex_align(pid, 4)
+		row["name"] = devname
+		row["product"] = product
+
+		table.insert(data, row)
+	end
+
+	return data
+end
+
+local printers = detect_usb_printers()
+
+v = m:section(Table, printers, translate("Detected printers"))
+
+v:option(DummyValue, "description", translate("Description"))
+v:option(DummyValue, "model", translate("Printer Model"))
+v:option(DummyValue, "id", translate("VID/PID"))
+v:option(DummyValue, "name", translate("Device Name"))
+
+net = net.init(m.uci)
+
+s = m:section(TypedSection, "printer", translate("Bindings"))
+s.addremove = true
+s.anonymous = true
+
+s:option(Flag, "enabled", translate("enable"))
+
+d = s:option(Value, "device", translate("Device"))
+d.rmempty = true
+
+for key, item in ipairs(printers) do
+	d:value(item["product"], item["description"] .. " [" .. item["id"] .. "]")
+end
+
+b = s:option(Value, "bind", translate("Interface"), translate("Specifies the interface to listen on."))
+b.template = "cbi/network_netlist"
+b.nocreate = true
+b.unspecified = true
+
+function b.cfgvalue(...)
+	local v = Value.cfgvalue(...)
+	if v then
+		return (net:get_status_by_address(v))
+	end
+end
+
+function b.write(self, section, value)
+	local n = net:get_network(value)
+	if n and n:ipaddr() then
+		Value.write(self, section, n:ipaddr())
+	end
+end
+
+p = s:option(ListValue, "port", translate("Port"), translate("TCP listener port."))
+p.rmempty = true
+for i = 0, 9 do
+	p:value(i, 9100 + i)
+end
+
+s:option(Flag, "bidirectional", translate("Bidirectional mode"))
+
+return m
diff --git a/package/lean/luci-app-usb-printer/po/zh-cn/usb-printer.po b/package/lean/luci-app-usb-printer/po/zh-cn/usb-printer.po
new file mode 100644
index 0000000000..05ce0d1eea
--- /dev/null
+++ b/package/lean/luci-app-usb-printer/po/zh-cn/usb-printer.po
@@ -0,0 +1,65 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2014-05-18 01:34+0800\n"
+"PO-Revision-Date: 2014-05-18 01:34+0800\n"
+"Last-Translator: hackpascal <hackpascal@gmail.com>\n"
+"Language-Team: \n"
+"Language: zh_CN\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+"X-Generator: Pootle 2.0.6\n"
+
+msgid "Bidirectional mode"
+msgstr "双向模式"
+
+msgid "Bindings"
+msgstr "绑定"
+
+msgid "Device"
+msgstr "设备"
+
+msgid "Device Name"
+msgstr "设备名"
+
+msgid "Detected printers"
+msgstr "检测到的打印机"
+
+msgid ""
+"Shares multiple USB printers via TCP/IP.<br />"
+"When modified bingings, re-plug usb connectors to take effect.<br />"
+"This module requires kmod-usb-printer."
+msgstr ""
+"通过 TCP/IP 共享 USB 打印机。<br />修改设置后，请重新连接打印机以使设置生效。<br />"
+"此模块需要 kmod-usb-printer 支持。"
+
+msgid "Port"
+msgstr "端口"
+
+msgid "Printer Model"
+msgstr "打印机型号"
+
+msgid "Settings"
+msgstr "设置"
+
+msgid "TCP listener port."
+msgstr "TCP 监听端口。"
+
+msgid "enable"
+msgstr "启用"
+
+msgid "USB Printer Server"
+msgstr "USB 打印服务器"
+
+msgid "Specifies the interface to listen on."
+msgstr "指定要监听的接口。"
+
+msgid "NAS"
+msgstr "网络存储"
+
+msgid "Architecture"
+msgstr "架构"
+
diff --git a/package/lean/luci-app-usb-printer/root/etc/config/usb_printer b/package/lean/luci-app-usb-printer/root/etc/config/usb_printer
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/package/lean/luci-app-usb-printer/root/etc/hotplug.d/usb/10-usb_printer b/package/lean/luci-app-usb-printer/root/etc/hotplug.d/usb/10-usb_printer
new file mode 100755
index 0000000000..c250fe78fe
--- /dev/null
+++ b/package/lean/luci-app-usb-printer/root/etc/hotplug.d/usb/10-usb_printer
@@ -0,0 +1,7 @@
+#!/bin/sh
+# Copyright (C) 2005-2014 NowRush Studio
+# Author: hackpascal <hackpascal@gmail.com>
+
+if [ x"$INTERFACE" = x"7/1/1" ] || [ x"$INTERFACE" = x"7/1/2" ]; then
+	/usr/bin/usb_printer_hotplug "$PRODUCT" "$ACTION"
+fi
diff --git a/package/lean/luci-app-usb-printer/root/etc/init.d/usb_printer b/package/lean/luci-app-usb-printer/root/etc/init.d/usb_printer
new file mode 100755
index 0000000000..4da5e34456
--- /dev/null
+++ b/package/lean/luci-app-usb-printer/root/etc/init.d/usb_printer
@@ -0,0 +1,22 @@
+#!/bin/sh /etc/rc.common
+# Copyright (C) 2005-2013 NowRush Studio
+# Author: hackpascal <hackpascal@gmail.com>
+
+START=70
+
+stop() {
+	killall p910nd 2>/dev/null
+}
+
+start() {
+	for lps in `/usr/bin/detectlp`; do
+		product=`echo $lps | cut -d , -f 2`
+
+		/usr/bin/usb_printer_hotplug "$product" add
+	done
+}
+
+restart() {
+	stop
+	start
+}
diff --git a/package/lean/luci-app-usb-printer/root/etc/uci-defaults/luci-usb-printer b/package/lean/luci-app-usb-printer/root/etc/uci-defaults/luci-usb-printer
new file mode 100755
index 0000000000..38c214f9c1
--- /dev/null
+++ b/package/lean/luci-app-usb-printer/root/etc/uci-defaults/luci-usb-printer
@@ -0,0 +1,12 @@
+#!/bin/sh
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@usb_printer[-1]
+	add ucitrack usb_printer
+	set ucitrack.@usb_printer[-1].init=usb_printer
+	commit ucitrack
+EOF
+
+[ -f /etc/init.d/p910nd ] && /etc/init.d/p910nd disable
+
+exit 0
diff --git a/package/lean/luci-app-usb-printer/root/usr/bin/detectlp b/package/lean/luci-app-usb-printer/root/usr/bin/detectlp
new file mode 100755
index 0000000000..b69385bb90
--- /dev/null
+++ b/package/lean/luci-app-usb-printer/root/usr/bin/detectlp
@@ -0,0 +1,20 @@
+#!/bin/sh
+
+lp_path=/sys/class/usbmisc
+
+if ! [ -d "$lp_path" ]; then
+	exit
+fi
+
+cd $lp_path
+
+for lps in `ls`; do
+        desc_file=$lp_path/$lps/device/ieee1284_id
+        uevent_file=$lp_path/$lps/device/uevent
+
+        name=`cat $desc_file | sed 's/.*DES:\(.*\);.*/\1/' | cut -d ';' -f 1`
+        model=`cat $desc_file | sed 's/.*MDL:\(.*\);.*/\1/' | cut -d ';' -f 1`
+        product=`cat $uevent_file | grep PRODUCT= | sed 's/PRODUCT=\(.*\)/\1/'`
+
+        echo $lps,$product,$model,$name;
+done
diff --git a/package/lean/luci-app-usb-printer/root/usr/bin/usb_printer_hotplug b/package/lean/luci-app-usb-printer/root/usr/bin/usb_printer_hotplug
new file mode 100755
index 0000000000..e0a60b0033
--- /dev/null
+++ b/package/lean/luci-app-usb-printer/root/usr/bin/usb_printer_hotplug
@@ -0,0 +1,72 @@
+#!/bin/sh
+# Copyright (C) 2005-2014 NowRush Studio
+# Author: hackpascal <hackpascal@gmail.com>
+
+. $IPKG_INSTROOT/lib/functions.sh
+
+PRODUCT=$1
+ACTION=$2
+
+DEVICES=
+
+check_printer() {
+	local cfg=$1
+	local enabled
+	local device_id
+	local bind_ip
+	local port
+	local bidirect
+	local device_file
+	local args=""
+	local pid_file
+
+	config_get_bool enabled "$cfg" enabled 0
+	[ "$enabled" -eq 0 ] && return 0
+
+	config_get device_id "$cfg" device ""
+	config_get bind_ip "$cfg" bind "0.0.0.0"
+	config_get port "$cfg" port ""
+	config_get_bool bidirect "$cfg" bidirectional "0"
+
+	if [ -z "$device_id" ] || [ -z "$port" ]; then
+		return
+	fi
+
+	if [ x"$PRODUCT" != x"$device_id" ]; then
+		return
+	fi
+
+	device_file=`echo $DEVICES | grep $device_id | cut -d , -f 1`
+
+	if [ "$ACTION" = "add" ] && [ -z "$device_file" ]; then
+		return
+	fi
+
+	pid_file=/var/run/p910${port}d.pid
+	[ -f $pid_file ] && kill `cat $pid_file` 2>/dev/null
+
+	if [ "$ACTION" = "add" ]; then
+		if [ "$bidirect" != 0 ]; then
+			args='-b'
+		fi
+
+		logger "usb_printer: start p910nd on $bind_ip:$port for /dev/usb/$device_file"
+		/usr/sbin/p910nd $args -f /dev/usb/$device_file -i $bind_ip $port
+	fi
+}
+
+if [ -z "$PRODUCT" ] || [ -z "$ACTION" ]; then
+	echo "Arguements required"
+	exit 1
+fi
+
+if [ "$ACTION" != "add" ] && [ "$ACTION" != "remove" ]; then
+	echo "Invalid action arguement"
+	exit 1
+fi
+
+DEVICES=`/usr/bin/detectlp`
+
+config_load usb_printer
+
+config_foreach check_printer printer
diff --git a/package/lean/luci-app-v2ray-server/Makefile b/package/lean/luci-app-v2ray-server/Makefile
new file mode 100644
index 0000000000..ec8cd0bf40
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/Makefile
@@ -0,0 +1,18 @@
+# Copyright (C) 2018-2019 Lienol
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI support for V2ray Server
+LUCI_DEPENDS:=+v2ray
+LUCI_PKGARCH:=all
+PKG_VERSION:=1.0
+PKG_RELEASE:=6
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
+
diff --git a/package/lean/luci-app-v2ray-server/luasrc/controller/v2ray_server.lua b/package/lean/luci-app-v2ray-server/luasrc/controller/v2ray_server.lua
new file mode 100644
index 0000000000..5ca8c3d279
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/luasrc/controller/v2ray_server.lua
@@ -0,0 +1,47 @@
+module("luci.controller.v2ray_server",package.seeall)
+local http = require "luci.http"
+local v2ray  = require "luci.model.cbi.v2ray_server.api.v2ray"
+
+function index()
+	if not nixio.fs.access("/etc/config/v2ray_server")then
+		return
+	end
+	entry({"admin","vpn"}, firstchild(), "VPN", 45).dependent = false
+	entry({"admin","vpn","v2ray_server"},cbi("v2ray_server/index"),_("V2ray Server"),3).dependent=true
+	entry({"admin","vpn","v2ray_server","config"},cbi("v2ray_server/config")).leaf=true
+	
+	entry({"admin","vpn","v2ray_server","users_status"},call("v2ray_users_status")).leaf=true
+	entry({"admin", "vpn", "v2ray_server", "check"}, call("v2ray_check")).leaf = true
+	entry({"admin", "vpn", "v2ray_server", "update"}, call("v2ray_update")).leaf = true
+end
+
+local function http_write_json(content)
+	http.prepare_content("application/json")
+	http.write_json(content or { code = 1 })
+end
+
+function v2ray_users_status()
+	local e={}
+	e.index=luci.http.formvalue("index")
+	e.status=luci.sys.call("ps -w| grep -v grep | grep '/var/etc/v2ray_server/" .. luci.http.formvalue("id") .. "' >/dev/null")==0
+	http_write_json(e)
+end
+
+function v2ray_check()
+	local json = v2ray.to_check("")
+	http_write_json(json)
+end
+
+function v2ray_update()
+	local json = nil
+	local task = http.formvalue("task")
+	if task == "extract" then
+		json = v2ray.to_extract(http.formvalue("file"), http.formvalue("subfix"))
+	elseif task == "move" then
+		json = v2ray.to_move(http.formvalue("file"))
+	else
+		json = v2ray.to_download(http.formvalue("url"))
+	end
+
+	http_write_json(json)
+end
\ No newline at end of file
diff --git a/package/lean/luci-app-v2ray-server/luasrc/model/cbi/v2ray_server/api/genv2rayconfig.lua b/package/lean/luci-app-v2ray-server/luasrc/model/cbi/v2ray_server/api/genv2rayconfig.lua
new file mode 100644
index 0000000000..31a99999c3
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/luasrc/model/cbi/v2ray_server/api/genv2rayconfig.lua
@@ -0,0 +1,82 @@
+local ucursor = require "luci.model.uci".cursor()
+local json = require "luci.jsonc"
+local server_section = arg[1]
+local server = ucursor:get_all("v2ray_server", server_section)
+
+local proset
+
+if server.protocol == "vmess" then
+    proset = {
+			clients = {
+				{
+					id = server.VMess_id,
+					alterId = tonumber(server.VMess_alterId),
+					level = tonumber(server.VMess_level)
+				}
+			}
+		}
+else
+    proset = {
+			auth = "password",
+			accounts = {
+				{
+					user = server.Socks_user,
+					pass = server.Socks_pass
+				}
+			}
+		}
+end
+
+
+local v2ray = {
+	log = {
+		--error = "/var/log/v2ray.log",
+		loglevel = "warning"
+	},
+	-- ��������
+	inbound = {
+		port = tonumber(server.port),
+		protocol = server.protocol,
+		settings = proset,
+		-- �ײ㴫������
+		streamSettings = {
+			network = server.transport,
+			security = (server.tls == '1') and "tls" or "none",
+			kcpSettings = (server.transport == "mkcp") and {
+				mtu = tonumber(server.mkcp_mtu),
+				tti = tonumber(server.mkcp_tti),
+				uplinkCapacity = tonumber(server.mkcp_uplinkCapacity),
+				downlinkCapacity = tonumber(server.mkcp_downlinkCapacity),
+				congestion = (server.mkcp_congestion == "1") and true or false,
+				readBufferSize = tonumber(server.mkcp_readBufferSize),
+				writeBufferSize = tonumber(server.mkcp_writeBufferSize),
+				header = {
+					type = server.mkcp_guise
+				}
+			} or nil,
+			httpSettings = (server.transport == "h2") and {
+				path = server.h2_path,
+				host = server.h2_host,
+			} or nil,
+			quicSettings = (server.transport == "quic") and {
+				security = server.quic_security,
+				key = server.quic_key,
+				header = {
+					type = server.quic_guise
+				}
+			} or nil
+		}
+	},
+	-- ��������
+	outbound = {
+		protocol = "freedom"
+	},
+	-- ���⴫������
+	outboundDetour = {
+		{
+			protocol = "blackhole",
+			tag = "blocked"
+		}
+	}
+}
+print(json.stringify(v2ray,1))
\ No newline at end of file
diff --git a/package/lean/luci-app-v2ray-server/luasrc/model/cbi/v2ray_server/api/v2ray.lua b/package/lean/luci-app-v2ray-server/luasrc/model/cbi/v2ray_server/api/v2ray.lua
new file mode 100644
index 0000000000..d7500b4584
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/luasrc/model/cbi/v2ray_server/api/v2ray.lua
@@ -0,0 +1,321 @@
+-- Copyright 2018 Lienol <lienol@qq.com>
+-- Licensed to the public under the Apache License 2.0.
+
+local fs   = require "nixio.fs"
+local sys  = require "luci.sys"
+local uci  = require "luci.model.uci".cursor()
+local util = require "luci.util"
+local i18n = require "luci.i18n"
+
+module("luci.model.cbi.v2ray_server.api.v2ray", package.seeall)
+
+local v2ray_api = "https://api.github.com/repos/v2ray/v2ray-core/releases/latest"
+
+local wget = "/usr/bin/wget"
+local wget_args = { "--no-check-certificate", "--quiet", "--timeout=10", "--tries=2" }
+local curl = "/usr/bin/curl"
+local command_timeout = 40
+
+local function _unpack(t, i)
+	i = i or 1
+	if t[i] ~= nil then
+		return t[i], _unpack(t, i + 1)
+	end
+end
+
+local function exec(cmd, args, writer, timeout)
+	local os = require "os"
+	local nixio = require "nixio"
+
+	local fdi, fdo = nixio.pipe()
+	local pid = nixio.fork()
+
+	if pid > 0 then
+		fdo:close()
+
+		if writer or timeout then
+			local starttime = os.time()
+			while true do
+				if timeout and os.difftime(os.time(), starttime) >= timeout then
+					nixio.kill(pid, nixio.const.SIGTERM)
+					return 1
+				end
+
+				if writer then
+					local buffer = fdi:read(2048)
+					if buffer and #buffer > 0 then
+						writer(buffer)
+					end
+				end
+
+				local wpid, stat, code = nixio.waitpid(pid, "nohang")
+
+				if wpid and stat == "exited" then
+					return code
+				end
+
+				if not writer and timeout then
+					nixio.nanosleep(1)
+				end
+			end
+		else
+			local wpid, stat, code = nixio.waitpid(pid)
+			return wpid and stat == "exited" and code
+		end
+	elseif pid == 0 then
+		nixio.dup(fdo, nixio.stdout)
+		fdi:close()
+		fdo:close()
+		nixio.exece(cmd, args, nil)
+		nixio.stdout:close()
+		os.exit(1)
+	end
+end
+
+local function compare_versions(ver1, comp, ver2)
+	local table = table
+
+	local av1 = util.split(ver1, "[%.%-]", nil, true)
+	local av2 = util.split(ver2, "[%.%-]", nil, true)
+
+	local max = table.getn(av1)
+	local n2 = table.getn(av2)
+	if (max < n2) then
+		max = n2
+	end
+
+	for i = 1, max, 1  do
+		local s1 = av1[i] or ""
+		local s2 = av2[i] or ""
+
+		if comp == "~=" and (s1 ~= s2) then return true end
+		if (comp == "<" or comp == "<=") and (s1 < s2) then return true end
+		if (comp == ">" or comp == ">=") and (s1 > s2) then return true end
+		if (s1 ~= s2) then return false end
+	end
+
+	return not (comp == "<" or comp == ">")
+end
+
+local function auto_get_arch()
+	local arch = nixio.uname().machine or ""
+
+	if arch == "mips" then
+		if fs.access("/usr/lib/os-release") then
+			arch = sys.exec("grep 'LEDE_BOARD' /usr/lib/os-release | grep -oE 'ramips|ar71xx'")
+		elseif fs.access("/etc/openwrt_release") then
+			arch = sys.exec("grep 'DISTRIB_TARGET' /etc/openwrt_release | grep -oE 'ramips|ar71xx'")
+		end
+	end
+
+	return util.trim(arch)
+end
+
+local function get_file_info(arch)
+	local file_tree = ""
+	local sub_version = ""
+
+	if arch == "x86_64" then
+		file_tree = "64"
+	elseif arch == "ramips" then
+		file_tree = "mipsle"
+	elseif arch == "ar71xx" then
+		file_tree = "mips"
+	elseif arch:match("^i[%d]86$") then
+		file_tree = "32"
+	elseif arch:match("^armv[5-8]") then
+		file_tree = "arm"
+		sub_version = arch:match("[5-8]")
+	end
+
+	return file_tree, sub_version
+end
+
+local function get_api_json(url)
+	local jsonc = require "luci.jsonc"
+
+	local output = { }
+	--exec(wget, { "-O-", url, _unpack(wget_args) },
+	--	function(chunk) output[#output + 1] = chunk end)
+	--local json_content = util.trim(table.concat(output))
+
+	local json_content = luci.sys.exec(curl.." -sL "..url)
+	
+	if json_content == "" then
+		return { }
+	end
+
+	return jsonc.parse(json_content) or { }
+end
+
+function get_config_option(option, default)
+	return uci:get("v2ray", "general", option) or default
+end
+
+function get_current_log_file(type)
+	local log_folder = get_config_option("log_folder", "/var/log/v2ray")
+	return "%s/%s.%s.log" % { log_folder, type, "general" }
+end
+
+function is_running(client)
+	if client and client ~= "" then
+		local file_name = client:match(".*/([^/]+)$") or ""
+		if file_name ~= "" then
+			return sys.call("pidof %s >/dev/null" % file_name) == 0
+		end
+	end
+
+	return false
+end
+
+function get_v2ray_version()
+	return luci.sys.exec("/usr/bin/v2ray/v2ray -version | awk '{print $2}' | sed -n 1P")
+end
+
+function to_check(arch)
+	if not arch or arch == "" then
+		arch = auto_get_arch()
+	end
+
+	local file_tree, sub_version = get_file_info(arch)
+
+	if file_tree == "" then
+		return {
+			code = 1,
+			error = i18n.translate("Can't determine ARCH, or ARCH not supported. Please select manually.")
+		}
+	end
+
+	local json = get_api_json(v2ray_api)
+
+	if json.tag_name == nil then
+		return {
+			code = 1,
+			error = i18n.translate("Get remote version info failed.")
+		}
+	end
+
+	local remote_version = json.tag_name:match("[^v]+")
+	local needs_update = compare_versions(get_v2ray_version(), "<", remote_version)
+	local html_url, download_url
+
+	if needs_update then
+		html_url = json.html_url
+		for _, v in ipairs(json.assets) do
+			if v.name and v.name:match("linux%-" .. file_tree) then
+				download_url = v.browser_download_url
+				break
+			end
+		end
+	end
+
+	if needs_update and not download_url then
+		return {
+			code = 1,
+			version = remote_version,
+			html_url = html_url,
+			type = file_tree .. sub_version,
+			error = i18n.translate("New version found, but failed to get new version download url.")
+		}
+	end
+
+	return {
+		code = 0,
+		update = needs_update,
+		version = remote_version,
+		url = {
+			html = html_url,
+			download = download_url
+		},
+		type = file_tree .. sub_version
+	}
+end
+
+function to_download(url)
+	if not url or url == "" then
+		return {
+			code = 1,
+			error = i18n.translate("Download url is required.")
+		}
+	end
+
+	sys.call("/bin/rm -f /tmp/v2ray_download.*")
+
+	local tmp_file = util.trim(util.exec("mktemp -u -t v2ray_download.XXXXXX"))
+
+	local result = exec(wget, {
+		"-O", tmp_file, url, _unpack(wget_args) }, nil, command_timeout) == 0
+
+	if not result then
+		exec("/bin/rm", { "-f", tmp_file })
+		return {
+			code = 1,
+			error = i18n.translatef("File download failed or timed out: %s", url)
+		}
+	end
+
+	return {
+		code = 0,
+		file = tmp_file
+	}
+end
+
+function to_extract(file, subfix)
+	local isinstall_unzip=sys.call("opkg list-installed | grep unzip > /dev/null")==0
+	if not isinstall_unzip then
+		sys.call("opkg update && opkg install unzip > /dev/null")
+	end
+	
+	if not file or file == "" or not fs.access(file) then
+		return {
+			code = 1,
+			error = i18n.translate("File path required.")
+		}
+	end
+
+	sys.call("/bin/rm -rf /tmp/v2ray_extract.*")
+	local tmp_dir = util.trim(util.exec("mktemp -d -t v2ray_extract.XXXXXX"))
+
+	local output = { }
+	exec("/usr/bin/unzip", { "-o", file , "-d", tmp_dir },
+		function(chunk) output[#output + 1] = chunk end)
+
+	local files = util.split(table.concat(output))
+
+	exec("/bin/rm", { "-f", file })
+		
+	return {
+		code = 0,
+		file = tmp_dir
+	}
+end
+
+function to_move(file)
+	if not file or file == "" then
+		sys.call("/bin/rm -rf /tmp/v2ray_extract.*")
+		return {
+			code = 1,
+			error = i18n.translate("Client file is required.")
+		}
+	end
+
+	local client_file = "/usr/bin/v2ray"
+	
+	sys.call("mkdir -p "..client_file)
+	
+	local result = exec("/bin/mv", { "-f", file.."/v2ray", file.."/v2ctl", client_file }, nil, command_timeout) == 0
+
+	if not result or not fs.access(client_file) then
+		sys.call("/bin/rm -rf /tmp/v2ray_extract.*")
+		return {
+			code = 1,
+			error = i18n.translatef("Can't move new file to path: %s", client_file)
+		}
+	end
+
+	exec("/bin/chmod", { "-R", "755", client_file })
+
+	sys.call("/bin/rm -rf /tmp/v2ray_extract.*")
+
+	return { code = 0 }
+end
diff --git a/package/lean/luci-app-v2ray-server/luasrc/model/cbi/v2ray_server/config.lua b/package/lean/luci-app-v2ray-server/luasrc/model/cbi/v2ray_server/config.lua
new file mode 100644
index 0000000000..ddfaa4bb9f
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/luasrc/model/cbi/v2ray_server/config.lua
@@ -0,0 +1,105 @@
+local i="v2ray_server"
+local n=require"luci.dispatcher"
+local a,t,e
+local o={
+"none",
+"srtp",
+"utp",
+"wechat-video",
+"dtls",
+"wireguard",
+}
+a=Map(i,"V2ray "..translate("Server Config"))
+a.redirect=n.build_url("admin","vpn","v2ray_server")
+
+t=a:section(NamedSection,arg[1],"user","")
+t.addremove=false
+t.dynamic=false
+
+e=t:option(Flag,"enable",translate("Enable"))
+e.default="1"
+e.rmempty=false
+
+e=t:option(Value,"remarks",translate("Remarks"))
+e.default=translate("Remarks")
+
+e.rmempty=false
+e=t:option(Value,"port",translate("Port"))
+e.datatype="port"
+e.rmempty=false
+e.default=10086
+
+e=t:option(ListValue,"protocol",translate("Protocol"))
+e:value("vmess",translate("Vmess"))
+e:value("socks",translate("Socks"))
+
+e=t:option(Value,"VMess_id",translate("ID"))
+e.default=luci.sys.exec("cat /proc/sys/kernel/random/uuid")
+e.rmempty=true
+e:depends("protocol","vmess")
+
+e=t:option(Value,"VMess_alterId",translate("Alter ID"))
+e.default=16
+e.rmempty=true
+e:depends("protocol","vmess")
+
+e=t:option(Value,"Socks_user",translate("User name"))
+e.default="lean"
+e.rmempty=true
+e:depends("protocol","socks")
+
+e=t:option(Value,"Socks_pass",translate("Password"))
+e.default="password"
+e.rmempty=true
+e.password=true
+e:depends("protocol","socks")
+
+e=t:option(Value,"VMess_level",translate("User Level"))
+e.default=1
+
+e=t:option(ListValue,"transport",translate("Transport"))
+e.default=tcp
+e:value("tcp","TCP")
+e:value("mkcp","mKCP")
+e:value("quic","QUIC")
+e:depends("protocol","vmess")
+
+e=t:option(ListValue,"tcp_guise",translate("Camouflage Type"))
+e:depends("transport","tcp")
+e:value("none","none")
+e:value("http","http")
+e.default=none
+
+e=t:option(DynamicList,"tcp_guise_http_host",translate("HTTP Host"))
+e:depends("tcp_guise","http")
+e=t:option(DynamicList,"tcp_guise_http_path",translate("HTTP Path"))
+e:depends("tcp_guise","http")
+e=t:option(ListValue,"mkcp_guise",translate("Camouflage Type"))
+for a,t in ipairs(o)do e:value(t)end
+e:depends("transport","mkcp")
+e=t:option(Value,"mkcp_mtu",translate("KCP MTU"))
+e:depends("transport","mkcp")
+e=t:option(Value,"mkcp_tti",translate("KCP TTI"))
+e:depends("transport","mkcp")
+e=t:option(Value,"mkcp_uplinkCapacity",translate("KCP uplinkCapacity"))
+e:depends("transport","mkcp")
+e=t:option(Value,"mkcp_downlinkCapacity",translate("KCP downlinkCapacity"))
+e:depends("transport","mkcp")
+e=t:option(Flag,"mkcp_congestion",translate("KCP Congestion"))
+e:depends("transport","mkcp")
+e=t:option(Value,"mkcp_readBufferSize",translate("KCP readBufferSize"))
+e:depends("transport","mkcp")
+e=t:option(Value,"mkcp_writeBufferSize",translate("KCP writeBufferSize"))
+e:depends("transport","mkcp")
+e=t:option(ListValue,"quic_security",translate("Encrypt Method"))
+e:value("none")
+e:value("aes-128-gcm")
+e:value("chacha20-poly1305")
+e:depends("transport","quic")
+e=t:option(Value,"quic_key",translate("Encrypt Method")..translate("Key"))
+e:depends("transport","quic")
+e=t:option(ListValue,"quic_guise",translate("Camouflage Type"))
+for a,t in ipairs(o)do e:value(t)end
+e:depends("transport","quic")
+
+return a
diff --git a/package/lean/luci-app-v2ray-server/luasrc/model/cbi/v2ray_server/index.lua b/package/lean/luci-app-v2ray-server/luasrc/model/cbi/v2ray_server/index.lua
new file mode 100644
index 0000000000..b6fc41e06e
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/luasrc/model/cbi/v2ray_server/index.lua
@@ -0,0 +1,45 @@
+local i=require"luci.dispatcher"
+local e=require"nixio.fs"
+local e=require"luci.sys"
+local e=luci.model.uci.cursor()
+local o="v2ray_server"
+local a,e,t
+
+a=Map(o,translate("V2ray Server"))
+e=a:section(TypedSection,"global",translate("Global Setting"))
+e.anonymous=true
+e.addremove=false
+t=e:option(Flag,"enable",translate("Enable"))
+t.rmempty=false
+
+e=a:section(TypedSection,"user",translate("Server Setting"))
+e.anonymous=true
+e.addremove=true
+e.template="cbi/tblsection"
+e.extedit=i.build_url("admin","vpn",o,"config","%s")
+
+function e.create(t,e)
+local e=TypedSection.create(t,e)
+luci.http.redirect(i.build_url("admin","vpn",o,"config",e))
+end
+
+function e.remove(e,a)
+e.map.proceed=true
+e.map:del(a)
+luci.http.redirect(i.build_url("admin","vpn",o))
+end
+
+t=e:option(Flag,"enable",translate("Enable"))
+t.width="5%"
+t.rmempty=false
+t=e:option(DummyValue,"status",translate("Status"))
+t.template="v2ray_server/users_status"
+t.value=translate("Collecting data...")
+t=e:option(DummyValue,"remarks",translate("Remarks"))
+t.width="15%"
+t=e:option(DummyValue,"port",translate("Port"))
+t=e:option(DummyValue,"protocol",translate("Protocol"))
+
+a:append(Template("v2ray_server/users_list_status"))
+
+return a
diff --git a/package/lean/luci-app-v2ray-server/luasrc/view/v2ray_server/users_list_status.htm b/package/lean/luci-app-v2ray-server/luasrc/view/v2ray_server/users_list_status.htm
new file mode 100644
index 0000000000..d02ca6157d
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/luasrc/view/v2ray_server/users_list_status.htm
@@ -0,0 +1,28 @@
+<%#
+ Copyright 2018 Lienol
+ Licensed to the public under the Apache License 2.0.
+-%>
+
+<%
+local dsp = require "luci.dispatcher"
+-%>
+
+<script type="text/javascript">
+	//<![CDATA[
+	var v2ray_users_status = document.getElementsByClassName('v2ray_users_status');
+	for(var i = 0; i < v2ray_users_status.length; i++) {
+		var id = v2ray_users_status[i].parentElement.parentElement.parentElement.id;
+		id = id.substr(id.lastIndexOf("-") + 1);
+		XHR.poll(1,'<%=dsp.build_url("admin/vpn/v2ray_server/users_status")%>', {
+				index: i,
+				id: id
+			},
+			function(x, result) {
+				v2ray_users_status[result.index].setAttribute("style","font-weight:bold;");
+				v2ray_users_status[result.index].setAttribute("color",result.status ? "green":"red");
+				v2ray_users_status[result.index].innerHTML = (result.status ? '✓' : 'X');
+			}
+		);
+	}
+	//]]>
+</script>
\ No newline at end of file
diff --git a/package/lean/luci-app-v2ray-server/luasrc/view/v2ray_server/users_status.htm b/package/lean/luci-app-v2ray-server/luasrc/view/v2ray_server/users_status.htm
new file mode 100644
index 0000000000..40c2e3c58c
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/luasrc/view/v2ray_server/users_status.htm
@@ -0,0 +1,3 @@
+<%+cbi/valueheader%>
+<font class="v2ray_users_status" hint="<%=self:cfgvalue(section)%>">--</font>
+<%+cbi/valuefooter%>
\ No newline at end of file
diff --git a/package/lean/luci-app-v2ray-server/luasrc/view/v2ray_server/v2ray.htm b/package/lean/luci-app-v2ray-server/luasrc/view/v2ray_server/v2ray.htm
new file mode 100644
index 0000000000..7208bf7f5f
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/luasrc/view/v2ray_server/v2ray.htm
@@ -0,0 +1,188 @@
+<%#
+ Copyright 2018 <lienol@qq.com>
+ Licensed to the public under the Apache License 2.0.
+-%>
+
+<%
+local v2ray_version=luci.sys.exec("/usr/bin/v2ray/v2ray -version | awk '{print $2}' | sed -n 1P")
+local dsp = require "luci.dispatcher"
+-%>
+
+<script type="text/javascript">
+	//<![CDATA[
+	var v2rayInfo;
+	var tokenStr = '<%=token%>';
+	var noUpdateText = '<%:已是最新版本%>';
+	var updateSuccessText = '<%:更新成功.%>';
+	var clickToUpdateText = '<%:点击更新%>';
+	var inProgressText = '<%:正在更新...%>';
+	var unexpectedErrorText = '<%:意外错误.%>';
+	var updateInProgressNotice = '<%:正在更新，你确认要关闭吗？%>';
+
+	window.onload = function() {
+		var v2rayCheckBtn = document.getElementById('_v2ray-check_btn');
+		var v2rayDetailElm = document.getElementById('_v2ray-check_btn-detail');
+	};
+
+	function addPageNotice_v2ray() {
+		window.onbeforeunload = function(e) {
+			e.returnValue = updateInProgressNotice;
+			return updateInProgressNotice;
+		};
+	}
+
+	function removePageNotice_v2ray() {
+		window.onbeforeunload = undefined;
+	}
+
+	function onUpdateSuccess_v2ray(btn) {
+		alert(updateSuccessText);
+
+		if(btn) {
+			btn.value = updateSuccessText;
+			btn.placeholder = updateSuccessText;
+			btn.disabled = true;
+		}
+
+		window.setTimeout(function() {
+			window.location.reload();
+		}, 1000);
+	}
+
+	function onRequestError_v2ray(btn, errorMessage) {
+		btn.disabled = false;
+		btn.value = btn.placeholder;
+
+		if(errorMessage) {
+			alert(errorMessage);
+		}
+	}
+
+	function doAjaxGet(url, data, onResult) {
+		new XHR().get(url, data, function(_, json) {
+			var resultJson = json || {
+				'code': 1,
+				'error': unexpectedErrorText
+			};
+
+			if(typeof onResult === 'function') {
+				onResult(resultJson);
+			}
+		})
+	}
+
+	function onBtnClick_v2ray(btn) {
+		if(v2rayInfo === undefined) {
+			checkUpdate_v2ray(btn);
+		} else {
+			doUpdate_v2ray(btn);
+		}
+	}
+
+	function checkUpdate_v2ray(btn) {
+		btn.disabled = true;
+		btn.value = inProgressText;
+
+		addPageNotice_v2ray();
+
+		var ckeckDetailElm = document.getElementById(btn.id + '-detail');
+
+		doAjaxGet('<%=dsp.build_url("admin/vpn/v2ray_server/check")%>', {
+			token: tokenStr,
+			arch: ''
+		}, function(json) {
+			removePageNotice_v2ray();
+
+			if(json.code) {
+				v2rayInfo = undefined;
+				onRequestError_v2ray(btn, json.error);
+			} else {
+				if(json.update) {
+					v2rayInfo = json;
+					btn.disabled = false;
+					btn.value = clickToUpdateText;
+					btn.placeholder = clickToUpdateText;
+					
+					if(ckeckDetailElm) {
+						var urlNode = '';
+						if(json.version) {
+							urlNode = '<em style="color:red;">最新版本号：' + json.version + '</em>';
+							if(json.url && json.url.html) {
+								urlNode = '<a href="' + json.url.html + '" target="_blank">' + urlNode + '</a>';
+							}
+						}
+					ckeckDetailElm.innerHTML = urlNode;
+					}
+				} else {
+					btn.disabled = true;
+					btn.value = noUpdateText;
+				}
+			}
+		});
+	}
+
+	function doUpdate_v2ray(btn) {
+		btn.disabled = true;
+		btn.value = '<%:下载中...%>';
+
+		addPageNotice_v2ray();
+
+		var v2rayUpdateUrl = '<%=dsp.build_url("admin/vpn/v2ray_server/update")%>';
+		// Download file
+		doAjaxGet(v2rayUpdateUrl, {
+			token: tokenStr,
+			url: v2rayInfo ? v2rayInfo.url.download : ''
+		}, function(json) {
+			if(json.code) {
+				removePageNotice_v2ray();
+				onRequestError_v2ray(btn, json.error);
+			} else {
+				btn.value = '<%:解压中...%>';
+
+				// Extract file
+				doAjaxGet(v2rayUpdateUrl, {
+					token: tokenStr,
+					task: 'extract',
+					file: json.file,
+					subfix: v2rayInfo ? v2rayInfo.type : ''
+				}, function(json) {
+					if(json.code) {
+						removePageNotice_v2ray();
+						onRequestError_v2ray(btn, json.error);
+					} else {
+						btn.value = '<%:移动中...%>';
+
+						// Move file to target dir
+						doAjaxGet(v2rayUpdateUrl, {
+							token: tokenStr,
+							task: 'move',
+							file: json.file
+						}, function(json) {
+							removePageNotice_v2ray();
+							if(json.code) {
+								onRequestError_v2ray(btn, json.error);
+							} else {
+								onUpdateSuccess_v2ray(btn);
+							}
+						})
+					}
+				})
+			}
+		})
+	}
+	//]]>
+</script>
+
+<div class="cbi-value">
+	<label class="cbi-value-title">V2ray
+		<%:Version%>
+	</label>
+	<div class="cbi-value-field">
+		<div class="cbi-value-description">
+			<img src="/luci-static/resources/cbi/help.gif">
+			<span>【 <%=v2ray_version%>】</span>
+			<input class="cbi-button cbi-input-apply" type="submit" id="_v2ray-check_btn" onclick="onBtnClick_v2ray(this);" value="<%:Manually update%>">
+			<span id="_v2ray-check_btn-detail"></span>
+		</div>
+	</div>
+</div>
\ No newline at end of file
diff --git a/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/Makefile b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/Makefile
new file mode 100644
index 0000000000..ec8cd0bf40
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/Makefile
@@ -0,0 +1,18 @@
+# Copyright (C) 2018-2019 Lienol
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI support for V2ray Server
+LUCI_DEPENDS:=+v2ray
+LUCI_PKGARCH:=all
+PKG_VERSION:=1.0
+PKG_RELEASE:=6
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
+
diff --git a/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/luasrc/controller/v2ray_server.lua b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/luasrc/controller/v2ray_server.lua
new file mode 100644
index 0000000000..5ca8c3d279
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/luasrc/controller/v2ray_server.lua
@@ -0,0 +1,47 @@
+module("luci.controller.v2ray_server",package.seeall)
+local http = require "luci.http"
+local v2ray  = require "luci.model.cbi.v2ray_server.api.v2ray"
+
+function index()
+	if not nixio.fs.access("/etc/config/v2ray_server")then
+		return
+	end
+	entry({"admin","vpn"}, firstchild(), "VPN", 45).dependent = false
+	entry({"admin","vpn","v2ray_server"},cbi("v2ray_server/index"),_("V2ray Server"),3).dependent=true
+	entry({"admin","vpn","v2ray_server","config"},cbi("v2ray_server/config")).leaf=true
+	
+	entry({"admin","vpn","v2ray_server","users_status"},call("v2ray_users_status")).leaf=true
+	entry({"admin", "vpn", "v2ray_server", "check"}, call("v2ray_check")).leaf = true
+	entry({"admin", "vpn", "v2ray_server", "update"}, call("v2ray_update")).leaf = true
+end
+
+local function http_write_json(content)
+	http.prepare_content("application/json")
+	http.write_json(content or { code = 1 })
+end
+
+function v2ray_users_status()
+	local e={}
+	e.index=luci.http.formvalue("index")
+	e.status=luci.sys.call("ps -w| grep -v grep | grep '/var/etc/v2ray_server/" .. luci.http.formvalue("id") .. "' >/dev/null")==0
+	http_write_json(e)
+end
+
+function v2ray_check()
+	local json = v2ray.to_check("")
+	http_write_json(json)
+end
+
+function v2ray_update()
+	local json = nil
+	local task = http.formvalue("task")
+	if task == "extract" then
+		json = v2ray.to_extract(http.formvalue("file"), http.formvalue("subfix"))
+	elseif task == "move" then
+		json = v2ray.to_move(http.formvalue("file"))
+	else
+		json = v2ray.to_download(http.formvalue("url"))
+	end
+
+	http_write_json(json)
+end
\ No newline at end of file
diff --git a/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/luasrc/model/cbi/v2ray_server/api/genv2rayconfig.lua b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/luasrc/model/cbi/v2ray_server/api/genv2rayconfig.lua
new file mode 100644
index 0000000000..31a99999c3
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/luasrc/model/cbi/v2ray_server/api/genv2rayconfig.lua
@@ -0,0 +1,82 @@
+local ucursor = require "luci.model.uci".cursor()
+local json = require "luci.jsonc"
+local server_section = arg[1]
+local server = ucursor:get_all("v2ray_server", server_section)
+
+local proset
+
+if server.protocol == "vmess" then
+    proset = {
+			clients = {
+				{
+					id = server.VMess_id,
+					alterId = tonumber(server.VMess_alterId),
+					level = tonumber(server.VMess_level)
+				}
+			}
+		}
+else
+    proset = {
+			auth = "password",
+			accounts = {
+				{
+					user = server.Socks_user,
+					pass = server.Socks_pass
+				}
+			}
+		}
+end
+
+
+local v2ray = {
+	log = {
+		--error = "/var/log/v2ray.log",
+		loglevel = "warning"
+	},
+	-- ��������
+	inbound = {
+		port = tonumber(server.port),
+		protocol = server.protocol,
+		settings = proset,
+		-- �ײ㴫������
+		streamSettings = {
+			network = server.transport,
+			security = (server.tls == '1') and "tls" or "none",
+			kcpSettings = (server.transport == "mkcp") and {
+				mtu = tonumber(server.mkcp_mtu),
+				tti = tonumber(server.mkcp_tti),
+				uplinkCapacity = tonumber(server.mkcp_uplinkCapacity),
+				downlinkCapacity = tonumber(server.mkcp_downlinkCapacity),
+				congestion = (server.mkcp_congestion == "1") and true or false,
+				readBufferSize = tonumber(server.mkcp_readBufferSize),
+				writeBufferSize = tonumber(server.mkcp_writeBufferSize),
+				header = {
+					type = server.mkcp_guise
+				}
+			} or nil,
+			httpSettings = (server.transport == "h2") and {
+				path = server.h2_path,
+				host = server.h2_host,
+			} or nil,
+			quicSettings = (server.transport == "quic") and {
+				security = server.quic_security,
+				key = server.quic_key,
+				header = {
+					type = server.quic_guise
+				}
+			} or nil
+		}
+	},
+	-- ��������
+	outbound = {
+		protocol = "freedom"
+	},
+	-- ���⴫������
+	outboundDetour = {
+		{
+			protocol = "blackhole",
+			tag = "blocked"
+		}
+	}
+}
+print(json.stringify(v2ray,1))
\ No newline at end of file
diff --git a/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/luasrc/model/cbi/v2ray_server/api/v2ray.lua b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/luasrc/model/cbi/v2ray_server/api/v2ray.lua
new file mode 100644
index 0000000000..d7500b4584
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/luasrc/model/cbi/v2ray_server/api/v2ray.lua
@@ -0,0 +1,321 @@
+-- Copyright 2018 Lienol <lienol@qq.com>
+-- Licensed to the public under the Apache License 2.0.
+
+local fs   = require "nixio.fs"
+local sys  = require "luci.sys"
+local uci  = require "luci.model.uci".cursor()
+local util = require "luci.util"
+local i18n = require "luci.i18n"
+
+module("luci.model.cbi.v2ray_server.api.v2ray", package.seeall)
+
+local v2ray_api = "https://api.github.com/repos/v2ray/v2ray-core/releases/latest"
+
+local wget = "/usr/bin/wget"
+local wget_args = { "--no-check-certificate", "--quiet", "--timeout=10", "--tries=2" }
+local curl = "/usr/bin/curl"
+local command_timeout = 40
+
+local function _unpack(t, i)
+	i = i or 1
+	if t[i] ~= nil then
+		return t[i], _unpack(t, i + 1)
+	end
+end
+
+local function exec(cmd, args, writer, timeout)
+	local os = require "os"
+	local nixio = require "nixio"
+
+	local fdi, fdo = nixio.pipe()
+	local pid = nixio.fork()
+
+	if pid > 0 then
+		fdo:close()
+
+		if writer or timeout then
+			local starttime = os.time()
+			while true do
+				if timeout and os.difftime(os.time(), starttime) >= timeout then
+					nixio.kill(pid, nixio.const.SIGTERM)
+					return 1
+				end
+
+				if writer then
+					local buffer = fdi:read(2048)
+					if buffer and #buffer > 0 then
+						writer(buffer)
+					end
+				end
+
+				local wpid, stat, code = nixio.waitpid(pid, "nohang")
+
+				if wpid and stat == "exited" then
+					return code
+				end
+
+				if not writer and timeout then
+					nixio.nanosleep(1)
+				end
+			end
+		else
+			local wpid, stat, code = nixio.waitpid(pid)
+			return wpid and stat == "exited" and code
+		end
+	elseif pid == 0 then
+		nixio.dup(fdo, nixio.stdout)
+		fdi:close()
+		fdo:close()
+		nixio.exece(cmd, args, nil)
+		nixio.stdout:close()
+		os.exit(1)
+	end
+end
+
+local function compare_versions(ver1, comp, ver2)
+	local table = table
+
+	local av1 = util.split(ver1, "[%.%-]", nil, true)
+	local av2 = util.split(ver2, "[%.%-]", nil, true)
+
+	local max = table.getn(av1)
+	local n2 = table.getn(av2)
+	if (max < n2) then
+		max = n2
+	end
+
+	for i = 1, max, 1  do
+		local s1 = av1[i] or ""
+		local s2 = av2[i] or ""
+
+		if comp == "~=" and (s1 ~= s2) then return true end
+		if (comp == "<" or comp == "<=") and (s1 < s2) then return true end
+		if (comp == ">" or comp == ">=") and (s1 > s2) then return true end
+		if (s1 ~= s2) then return false end
+	end
+
+	return not (comp == "<" or comp == ">")
+end
+
+local function auto_get_arch()
+	local arch = nixio.uname().machine or ""
+
+	if arch == "mips" then
+		if fs.access("/usr/lib/os-release") then
+			arch = sys.exec("grep 'LEDE_BOARD' /usr/lib/os-release | grep -oE 'ramips|ar71xx'")
+		elseif fs.access("/etc/openwrt_release") then
+			arch = sys.exec("grep 'DISTRIB_TARGET' /etc/openwrt_release | grep -oE 'ramips|ar71xx'")
+		end
+	end
+
+	return util.trim(arch)
+end
+
+local function get_file_info(arch)
+	local file_tree = ""
+	local sub_version = ""
+
+	if arch == "x86_64" then
+		file_tree = "64"
+	elseif arch == "ramips" then
+		file_tree = "mipsle"
+	elseif arch == "ar71xx" then
+		file_tree = "mips"
+	elseif arch:match("^i[%d]86$") then
+		file_tree = "32"
+	elseif arch:match("^armv[5-8]") then
+		file_tree = "arm"
+		sub_version = arch:match("[5-8]")
+	end
+
+	return file_tree, sub_version
+end
+
+local function get_api_json(url)
+	local jsonc = require "luci.jsonc"
+
+	local output = { }
+	--exec(wget, { "-O-", url, _unpack(wget_args) },
+	--	function(chunk) output[#output + 1] = chunk end)
+	--local json_content = util.trim(table.concat(output))
+
+	local json_content = luci.sys.exec(curl.." -sL "..url)
+	
+	if json_content == "" then
+		return { }
+	end
+
+	return jsonc.parse(json_content) or { }
+end
+
+function get_config_option(option, default)
+	return uci:get("v2ray", "general", option) or default
+end
+
+function get_current_log_file(type)
+	local log_folder = get_config_option("log_folder", "/var/log/v2ray")
+	return "%s/%s.%s.log" % { log_folder, type, "general" }
+end
+
+function is_running(client)
+	if client and client ~= "" then
+		local file_name = client:match(".*/([^/]+)$") or ""
+		if file_name ~= "" then
+			return sys.call("pidof %s >/dev/null" % file_name) == 0
+		end
+	end
+
+	return false
+end
+
+function get_v2ray_version()
+	return luci.sys.exec("/usr/bin/v2ray/v2ray -version | awk '{print $2}' | sed -n 1P")
+end
+
+function to_check(arch)
+	if not arch or arch == "" then
+		arch = auto_get_arch()
+	end
+
+	local file_tree, sub_version = get_file_info(arch)
+
+	if file_tree == "" then
+		return {
+			code = 1,
+			error = i18n.translate("Can't determine ARCH, or ARCH not supported. Please select manually.")
+		}
+	end
+
+	local json = get_api_json(v2ray_api)
+
+	if json.tag_name == nil then
+		return {
+			code = 1,
+			error = i18n.translate("Get remote version info failed.")
+		}
+	end
+
+	local remote_version = json.tag_name:match("[^v]+")
+	local needs_update = compare_versions(get_v2ray_version(), "<", remote_version)
+	local html_url, download_url
+
+	if needs_update then
+		html_url = json.html_url
+		for _, v in ipairs(json.assets) do
+			if v.name and v.name:match("linux%-" .. file_tree) then
+				download_url = v.browser_download_url
+				break
+			end
+		end
+	end
+
+	if needs_update and not download_url then
+		return {
+			code = 1,
+			version = remote_version,
+			html_url = html_url,
+			type = file_tree .. sub_version,
+			error = i18n.translate("New version found, but failed to get new version download url.")
+		}
+	end
+
+	return {
+		code = 0,
+		update = needs_update,
+		version = remote_version,
+		url = {
+			html = html_url,
+			download = download_url
+		},
+		type = file_tree .. sub_version
+	}
+end
+
+function to_download(url)
+	if not url or url == "" then
+		return {
+			code = 1,
+			error = i18n.translate("Download url is required.")
+		}
+	end
+
+	sys.call("/bin/rm -f /tmp/v2ray_download.*")
+
+	local tmp_file = util.trim(util.exec("mktemp -u -t v2ray_download.XXXXXX"))
+
+	local result = exec(wget, {
+		"-O", tmp_file, url, _unpack(wget_args) }, nil, command_timeout) == 0
+
+	if not result then
+		exec("/bin/rm", { "-f", tmp_file })
+		return {
+			code = 1,
+			error = i18n.translatef("File download failed or timed out: %s", url)
+		}
+	end
+
+	return {
+		code = 0,
+		file = tmp_file
+	}
+end
+
+function to_extract(file, subfix)
+	local isinstall_unzip=sys.call("opkg list-installed | grep unzip > /dev/null")==0
+	if not isinstall_unzip then
+		sys.call("opkg update && opkg install unzip > /dev/null")
+	end
+	
+	if not file or file == "" or not fs.access(file) then
+		return {
+			code = 1,
+			error = i18n.translate("File path required.")
+		}
+	end
+
+	sys.call("/bin/rm -rf /tmp/v2ray_extract.*")
+	local tmp_dir = util.trim(util.exec("mktemp -d -t v2ray_extract.XXXXXX"))
+
+	local output = { }
+	exec("/usr/bin/unzip", { "-o", file , "-d", tmp_dir },
+		function(chunk) output[#output + 1] = chunk end)
+
+	local files = util.split(table.concat(output))
+
+	exec("/bin/rm", { "-f", file })
+		
+	return {
+		code = 0,
+		file = tmp_dir
+	}
+end
+
+function to_move(file)
+	if not file or file == "" then
+		sys.call("/bin/rm -rf /tmp/v2ray_extract.*")
+		return {
+			code = 1,
+			error = i18n.translate("Client file is required.")
+		}
+	end
+
+	local client_file = "/usr/bin/v2ray"
+	
+	sys.call("mkdir -p "..client_file)
+	
+	local result = exec("/bin/mv", { "-f", file.."/v2ray", file.."/v2ctl", client_file }, nil, command_timeout) == 0
+
+	if not result or not fs.access(client_file) then
+		sys.call("/bin/rm -rf /tmp/v2ray_extract.*")
+		return {
+			code = 1,
+			error = i18n.translatef("Can't move new file to path: %s", client_file)
+		}
+	end
+
+	exec("/bin/chmod", { "-R", "755", client_file })
+
+	sys.call("/bin/rm -rf /tmp/v2ray_extract.*")
+
+	return { code = 0 }
+end
diff --git a/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/luasrc/model/cbi/v2ray_server/config.lua b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/luasrc/model/cbi/v2ray_server/config.lua
new file mode 100644
index 0000000000..ddfaa4bb9f
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/luasrc/model/cbi/v2ray_server/config.lua
@@ -0,0 +1,105 @@
+local i="v2ray_server"
+local n=require"luci.dispatcher"
+local a,t,e
+local o={
+"none",
+"srtp",
+"utp",
+"wechat-video",
+"dtls",
+"wireguard",
+}
+a=Map(i,"V2ray "..translate("Server Config"))
+a.redirect=n.build_url("admin","vpn","v2ray_server")
+
+t=a:section(NamedSection,arg[1],"user","")
+t.addremove=false
+t.dynamic=false
+
+e=t:option(Flag,"enable",translate("Enable"))
+e.default="1"
+e.rmempty=false
+
+e=t:option(Value,"remarks",translate("Remarks"))
+e.default=translate("Remarks")
+
+e.rmempty=false
+e=t:option(Value,"port",translate("Port"))
+e.datatype="port"
+e.rmempty=false
+e.default=10086
+
+e=t:option(ListValue,"protocol",translate("Protocol"))
+e:value("vmess",translate("Vmess"))
+e:value("socks",translate("Socks"))
+
+e=t:option(Value,"VMess_id",translate("ID"))
+e.default=luci.sys.exec("cat /proc/sys/kernel/random/uuid")
+e.rmempty=true
+e:depends("protocol","vmess")
+
+e=t:option(Value,"VMess_alterId",translate("Alter ID"))
+e.default=16
+e.rmempty=true
+e:depends("protocol","vmess")
+
+e=t:option(Value,"Socks_user",translate("User name"))
+e.default="lean"
+e.rmempty=true
+e:depends("protocol","socks")
+
+e=t:option(Value,"Socks_pass",translate("Password"))
+e.default="password"
+e.rmempty=true
+e.password=true
+e:depends("protocol","socks")
+
+e=t:option(Value,"VMess_level",translate("User Level"))
+e.default=1
+
+e=t:option(ListValue,"transport",translate("Transport"))
+e.default=tcp
+e:value("tcp","TCP")
+e:value("mkcp","mKCP")
+e:value("quic","QUIC")
+e:depends("protocol","vmess")
+
+e=t:option(ListValue,"tcp_guise",translate("Camouflage Type"))
+e:depends("transport","tcp")
+e:value("none","none")
+e:value("http","http")
+e.default=none
+
+e=t:option(DynamicList,"tcp_guise_http_host",translate("HTTP Host"))
+e:depends("tcp_guise","http")
+e=t:option(DynamicList,"tcp_guise_http_path",translate("HTTP Path"))
+e:depends("tcp_guise","http")
+e=t:option(ListValue,"mkcp_guise",translate("Camouflage Type"))
+for a,t in ipairs(o)do e:value(t)end
+e:depends("transport","mkcp")
+e=t:option(Value,"mkcp_mtu",translate("KCP MTU"))
+e:depends("transport","mkcp")
+e=t:option(Value,"mkcp_tti",translate("KCP TTI"))
+e:depends("transport","mkcp")
+e=t:option(Value,"mkcp_uplinkCapacity",translate("KCP uplinkCapacity"))
+e:depends("transport","mkcp")
+e=t:option(Value,"mkcp_downlinkCapacity",translate("KCP downlinkCapacity"))
+e:depends("transport","mkcp")
+e=t:option(Flag,"mkcp_congestion",translate("KCP Congestion"))
+e:depends("transport","mkcp")
+e=t:option(Value,"mkcp_readBufferSize",translate("KCP readBufferSize"))
+e:depends("transport","mkcp")
+e=t:option(Value,"mkcp_writeBufferSize",translate("KCP writeBufferSize"))
+e:depends("transport","mkcp")
+e=t:option(ListValue,"quic_security",translate("Encrypt Method"))
+e:value("none")
+e:value("aes-128-gcm")
+e:value("chacha20-poly1305")
+e:depends("transport","quic")
+e=t:option(Value,"quic_key",translate("Encrypt Method")..translate("Key"))
+e:depends("transport","quic")
+e=t:option(ListValue,"quic_guise",translate("Camouflage Type"))
+for a,t in ipairs(o)do e:value(t)end
+e:depends("transport","quic")
+
+return a
diff --git a/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/luasrc/model/cbi/v2ray_server/index.lua b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/luasrc/model/cbi/v2ray_server/index.lua
new file mode 100644
index 0000000000..b6fc41e06e
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/luasrc/model/cbi/v2ray_server/index.lua
@@ -0,0 +1,45 @@
+local i=require"luci.dispatcher"
+local e=require"nixio.fs"
+local e=require"luci.sys"
+local e=luci.model.uci.cursor()
+local o="v2ray_server"
+local a,e,t
+
+a=Map(o,translate("V2ray Server"))
+e=a:section(TypedSection,"global",translate("Global Setting"))
+e.anonymous=true
+e.addremove=false
+t=e:option(Flag,"enable",translate("Enable"))
+t.rmempty=false
+
+e=a:section(TypedSection,"user",translate("Server Setting"))
+e.anonymous=true
+e.addremove=true
+e.template="cbi/tblsection"
+e.extedit=i.build_url("admin","vpn",o,"config","%s")
+
+function e.create(t,e)
+local e=TypedSection.create(t,e)
+luci.http.redirect(i.build_url("admin","vpn",o,"config",e))
+end
+
+function e.remove(e,a)
+e.map.proceed=true
+e.map:del(a)
+luci.http.redirect(i.build_url("admin","vpn",o))
+end
+
+t=e:option(Flag,"enable",translate("Enable"))
+t.width="5%"
+t.rmempty=false
+t=e:option(DummyValue,"status",translate("Status"))
+t.template="v2ray_server/users_status"
+t.value=translate("Collecting data...")
+t=e:option(DummyValue,"remarks",translate("Remarks"))
+t.width="15%"
+t=e:option(DummyValue,"port",translate("Port"))
+t=e:option(DummyValue,"protocol",translate("Protocol"))
+
+a:append(Template("v2ray_server/users_list_status"))
+
+return a
diff --git a/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/luasrc/view/v2ray_server/users_list_status.htm b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/luasrc/view/v2ray_server/users_list_status.htm
new file mode 100644
index 0000000000..d02ca6157d
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/luasrc/view/v2ray_server/users_list_status.htm
@@ -0,0 +1,28 @@
+<%#
+ Copyright 2018 Lienol
+ Licensed to the public under the Apache License 2.0.
+-%>
+
+<%
+local dsp = require "luci.dispatcher"
+-%>
+
+<script type="text/javascript">
+	//<![CDATA[
+	var v2ray_users_status = document.getElementsByClassName('v2ray_users_status');
+	for(var i = 0; i < v2ray_users_status.length; i++) {
+		var id = v2ray_users_status[i].parentElement.parentElement.parentElement.id;
+		id = id.substr(id.lastIndexOf("-") + 1);
+		XHR.poll(1,'<%=dsp.build_url("admin/vpn/v2ray_server/users_status")%>', {
+				index: i,
+				id: id
+			},
+			function(x, result) {
+				v2ray_users_status[result.index].setAttribute("style","font-weight:bold;");
+				v2ray_users_status[result.index].setAttribute("color",result.status ? "green":"red");
+				v2ray_users_status[result.index].innerHTML = (result.status ? '✓' : 'X');
+			}
+		);
+	}
+	//]]>
+</script>
\ No newline at end of file
diff --git a/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/luasrc/view/v2ray_server/users_status.htm b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/luasrc/view/v2ray_server/users_status.htm
new file mode 100644
index 0000000000..40c2e3c58c
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/luasrc/view/v2ray_server/users_status.htm
@@ -0,0 +1,3 @@
+<%+cbi/valueheader%>
+<font class="v2ray_users_status" hint="<%=self:cfgvalue(section)%>">--</font>
+<%+cbi/valuefooter%>
\ No newline at end of file
diff --git a/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/luasrc/view/v2ray_server/v2ray.htm b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/luasrc/view/v2ray_server/v2ray.htm
new file mode 100644
index 0000000000..7208bf7f5f
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/luasrc/view/v2ray_server/v2ray.htm
@@ -0,0 +1,188 @@
+<%#
+ Copyright 2018 <lienol@qq.com>
+ Licensed to the public under the Apache License 2.0.
+-%>
+
+<%
+local v2ray_version=luci.sys.exec("/usr/bin/v2ray/v2ray -version | awk '{print $2}' | sed -n 1P")
+local dsp = require "luci.dispatcher"
+-%>
+
+<script type="text/javascript">
+	//<![CDATA[
+	var v2rayInfo;
+	var tokenStr = '<%=token%>';
+	var noUpdateText = '<%:已是最新版本%>';
+	var updateSuccessText = '<%:更新成功.%>';
+	var clickToUpdateText = '<%:点击更新%>';
+	var inProgressText = '<%:正在更新...%>';
+	var unexpectedErrorText = '<%:意外错误.%>';
+	var updateInProgressNotice = '<%:正在更新，你确认要关闭吗？%>';
+
+	window.onload = function() {
+		var v2rayCheckBtn = document.getElementById('_v2ray-check_btn');
+		var v2rayDetailElm = document.getElementById('_v2ray-check_btn-detail');
+	};
+
+	function addPageNotice_v2ray() {
+		window.onbeforeunload = function(e) {
+			e.returnValue = updateInProgressNotice;
+			return updateInProgressNotice;
+		};
+	}
+
+	function removePageNotice_v2ray() {
+		window.onbeforeunload = undefined;
+	}
+
+	function onUpdateSuccess_v2ray(btn) {
+		alert(updateSuccessText);
+
+		if(btn) {
+			btn.value = updateSuccessText;
+			btn.placeholder = updateSuccessText;
+			btn.disabled = true;
+		}
+
+		window.setTimeout(function() {
+			window.location.reload();
+		}, 1000);
+	}
+
+	function onRequestError_v2ray(btn, errorMessage) {
+		btn.disabled = false;
+		btn.value = btn.placeholder;
+
+		if(errorMessage) {
+			alert(errorMessage);
+		}
+	}
+
+	function doAjaxGet(url, data, onResult) {
+		new XHR().get(url, data, function(_, json) {
+			var resultJson = json || {
+				'code': 1,
+				'error': unexpectedErrorText
+			};
+
+			if(typeof onResult === 'function') {
+				onResult(resultJson);
+			}
+		})
+	}
+
+	function onBtnClick_v2ray(btn) {
+		if(v2rayInfo === undefined) {
+			checkUpdate_v2ray(btn);
+		} else {
+			doUpdate_v2ray(btn);
+		}
+	}
+
+	function checkUpdate_v2ray(btn) {
+		btn.disabled = true;
+		btn.value = inProgressText;
+
+		addPageNotice_v2ray();
+
+		var ckeckDetailElm = document.getElementById(btn.id + '-detail');
+
+		doAjaxGet('<%=dsp.build_url("admin/vpn/v2ray_server/check")%>', {
+			token: tokenStr,
+			arch: ''
+		}, function(json) {
+			removePageNotice_v2ray();
+
+			if(json.code) {
+				v2rayInfo = undefined;
+				onRequestError_v2ray(btn, json.error);
+			} else {
+				if(json.update) {
+					v2rayInfo = json;
+					btn.disabled = false;
+					btn.value = clickToUpdateText;
+					btn.placeholder = clickToUpdateText;
+					
+					if(ckeckDetailElm) {
+						var urlNode = '';
+						if(json.version) {
+							urlNode = '<em style="color:red;">最新版本号：' + json.version + '</em>';
+							if(json.url && json.url.html) {
+								urlNode = '<a href="' + json.url.html + '" target="_blank">' + urlNode + '</a>';
+							}
+						}
+					ckeckDetailElm.innerHTML = urlNode;
+					}
+				} else {
+					btn.disabled = true;
+					btn.value = noUpdateText;
+				}
+			}
+		});
+	}
+
+	function doUpdate_v2ray(btn) {
+		btn.disabled = true;
+		btn.value = '<%:下载中...%>';
+
+		addPageNotice_v2ray();
+
+		var v2rayUpdateUrl = '<%=dsp.build_url("admin/vpn/v2ray_server/update")%>';
+		// Download file
+		doAjaxGet(v2rayUpdateUrl, {
+			token: tokenStr,
+			url: v2rayInfo ? v2rayInfo.url.download : ''
+		}, function(json) {
+			if(json.code) {
+				removePageNotice_v2ray();
+				onRequestError_v2ray(btn, json.error);
+			} else {
+				btn.value = '<%:解压中...%>';
+
+				// Extract file
+				doAjaxGet(v2rayUpdateUrl, {
+					token: tokenStr,
+					task: 'extract',
+					file: json.file,
+					subfix: v2rayInfo ? v2rayInfo.type : ''
+				}, function(json) {
+					if(json.code) {
+						removePageNotice_v2ray();
+						onRequestError_v2ray(btn, json.error);
+					} else {
+						btn.value = '<%:移动中...%>';
+
+						// Move file to target dir
+						doAjaxGet(v2rayUpdateUrl, {
+							token: tokenStr,
+							task: 'move',
+							file: json.file
+						}, function(json) {
+							removePageNotice_v2ray();
+							if(json.code) {
+								onRequestError_v2ray(btn, json.error);
+							} else {
+								onUpdateSuccess_v2ray(btn);
+							}
+						})
+					}
+				})
+			}
+		})
+	}
+	//]]>
+</script>
+
+<div class="cbi-value">
+	<label class="cbi-value-title">V2ray
+		<%:Version%>
+	</label>
+	<div class="cbi-value-field">
+		<div class="cbi-value-description">
+			<img src="/luci-static/resources/cbi/help.gif">
+			<span>【 <%=v2ray_version%>】</span>
+			<input class="cbi-button cbi-input-apply" type="submit" id="_v2ray-check_btn" onclick="onBtnClick_v2ray(this);" value="<%:Manually update%>">
+			<span id="_v2ray-check_btn-detail"></span>
+		</div>
+	</div>
+</div>
\ No newline at end of file
diff --git a/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/po/zh-cn/v2ray_server.po b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/po/zh-cn/v2ray_server.po
new file mode 100644
index 0000000000..c5db9b349f
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/po/zh-cn/v2ray_server.po
@@ -0,0 +1,53 @@
+msgid "V2ray Server"
+msgstr "V2ray 服务器"
+
+msgid "Global Settings"
+msgstr "全局设置"
+
+msgid "Server Config"
+msgstr "服务器配置"
+
+msgid "Users Manager"
+msgstr "用户管理"
+
+msgid "Remarks"
+msgstr "备注"
+
+msgid "Port"
+msgstr "端口"
+
+msgid "Password"
+msgstr "密码"
+
+msgid "Protocol"
+msgstr "协议"
+
+msgid "Null"
+msgstr "无"
+
+msgid "Alter ID"
+msgstr "额外ID(AlterID)"
+
+msgid "User Level"
+msgstr "用户等级(Level)"
+
+msgid "Transport"
+msgstr "传输方式"
+
+msgid "Camouflage Type"
+msgstr "伪装类型"
+
+msgid "Enabled"
+msgstr "启用"
+
+msgid "Status"
+msgstr "状态"
+
+msgid "Current Condition"
+msgstr "当前状态"
+
+msgid "NOT RUNNING"
+msgstr "未运行"
+
+msgid "RUNNING"
+msgstr "运行中"
\ No newline at end of file
diff --git a/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/root/etc/config/v2ray_server b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/root/etc/config/v2ray_server
new file mode 100644
index 0000000000..cab9eeb88e
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/root/etc/config/v2ray_server
@@ -0,0 +1,15 @@
+
+config global
+	option enable '0'
+
+config user
+	option enable '1'
+	option remarks '备注222'
+	option protocol 'vmess'
+	option VMess_id 'fd00927a-b0c2-4629-aef7-d9ff15a9d722'
+	option VMess_alterId '16'
+	option VMess_level '1'
+	option transport 'tcp'
+	option tcp_guise 'none'
+	option port '12366'
+
diff --git a/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/root/etc/init.d/v2ray_server b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/root/etc/init.d/v2ray_server
new file mode 100755
index 0000000000..ba4f90653f
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/root/etc/init.d/v2ray_server
@@ -0,0 +1,49 @@
+#!/bin/sh /etc/rc.common
+# Copyright (C) 2018-2019 Lienol <lawlienol@gmail.com>
+
+START=99
+
+CONFIG=v2ray_server
+CONFIG_PATH=/var/etc/$CONFIG
+
+gen_v2ray_config_file() {
+	config_get enable $1 enable
+	[ "$enable" = "0" ] && return 0
+	config_get remarks $1 remarks
+	config_get port $1 port
+	lua /usr/lib/lua/luci/model/cbi/v2ray_server/api/genv2rayconfig.lua $1 > $CONFIG_PATH/$1.json
+	[ -f /var/v2server ] || cp -a /usr/bin/v2ray/v2ray /var/v2server
+	/var/v2server -config $CONFIG_PATH/$1.json >/dev/null 2>&1 &
+}
+
+start_v2ray_server() {
+	config_foreach gen_v2ray_config_file "user"
+	fw3 reload
+}
+
+stop_v2ray_server() {
+	fw3 reload
+	ps -w | grep "$CONFIG_PATH/" | grep -v "grep" | awk '{print $1}' | xargs kill -9 >/dev/null 2>&1 &
+}
+
+start() {
+	config_load $CONFIG
+	enable=$(uci get $CONFIG.@global[0].enable)
+	if [ "$enable" = "0" ];then
+		stop_v2ray_server
+	else
+		mkdir -p $CONFIG_PATH
+		start_v2ray_server
+	fi
+}
+
+stop() {
+	stop_v2ray_server
+	rm -rf $CONFIG_PATH
+}
+
+restart() {
+	stop
+	sleep 1
+	start
+}
\ No newline at end of file
diff --git a/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/root/etc/uci-defaults/luci-app-v2ray-server b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/root/etc/uci-defaults/luci-app-v2ray-server
new file mode 100755
index 0000000000..364f7db225
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/root/etc/uci-defaults/luci-app-v2ray-server
@@ -0,0 +1,21 @@
+#!/bin/sh
+
+uci -q batch <<-EOF >/dev/null
+	delete firewall.v2ray_server
+	set firewall.v2ray_server=include
+	set firewall.v2ray_server.type=script
+	set firewall.v2ray_server.path=/usr/share/v2ray_server/firewall.include
+	set firewall.v2ray_server.reload=1
+EOF
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@v2ray_server[-1]
+	add ucitrack v2ray_server
+	set ucitrack.@v2ray_server[-1].init=v2ray_server
+	commit ucitrack
+EOF
+
+chmod a+x /usr/share/v2ray_server/* >/dev/null 2>&1
+
+rm -f /tmp/luci-indexcache
+exit 0
diff --git a/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/root/usr/share/v2ray_server/firewall.include b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/root/usr/share/v2ray_server/firewall.include
new file mode 100755
index 0000000000..1f06a00b6f
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/luci-app-v2ray-server/root/usr/share/v2ray_server/firewall.include
@@ -0,0 +1,25 @@
+#!/bin/sh
+
+. $IPKG_INSTROOT/lib/functions.sh
+. $IPKG_INSTROOT/lib/functions/service.sh
+
+gen_user_iptables() {
+	config_get enable $1 enable
+	[ "$enable" = "0" ] && return 0
+	config_get remarks $1 remarks
+	config_get port $1 port
+	iptables -A V2RAY-SERVER -p tcp --dport $port -m comment --comment "$remarks" -j ACCEPT
+	iptables -A V2RAY-SERVER -p udp --dport $port -m comment --comment "$remarks" -j ACCEPT
+}
+
+iptables -F V2RAY-SERVER 2>/dev/null
+iptables -D INPUT -j V2RAY-SERVER 2>/dev/null
+iptables -X V2RAY-SERVER 2>/dev/null
+
+enable=$(uci get v2ray_server.@global[0].enable)
+if [ $enable -eq 1 ]; then
+	iptables -N V2RAY-SERVER
+	iptables -I INPUT -j V2RAY-SERVER
+	config_load v2ray_server
+	config_foreach gen_user_iptables "user"
+fi
\ No newline at end of file
diff --git a/package/lean/luci-app-v2ray-server/po/zh-cn/v2ray_server.po b/package/lean/luci-app-v2ray-server/po/zh-cn/v2ray_server.po
new file mode 100644
index 0000000000..c5db9b349f
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/po/zh-cn/v2ray_server.po
@@ -0,0 +1,53 @@
+msgid "V2ray Server"
+msgstr "V2ray 服务器"
+
+msgid "Global Settings"
+msgstr "全局设置"
+
+msgid "Server Config"
+msgstr "服务器配置"
+
+msgid "Users Manager"
+msgstr "用户管理"
+
+msgid "Remarks"
+msgstr "备注"
+
+msgid "Port"
+msgstr "端口"
+
+msgid "Password"
+msgstr "密码"
+
+msgid "Protocol"
+msgstr "协议"
+
+msgid "Null"
+msgstr "无"
+
+msgid "Alter ID"
+msgstr "额外ID(AlterID)"
+
+msgid "User Level"
+msgstr "用户等级(Level)"
+
+msgid "Transport"
+msgstr "传输方式"
+
+msgid "Camouflage Type"
+msgstr "伪装类型"
+
+msgid "Enabled"
+msgstr "启用"
+
+msgid "Status"
+msgstr "状态"
+
+msgid "Current Condition"
+msgstr "当前状态"
+
+msgid "NOT RUNNING"
+msgstr "未运行"
+
+msgid "RUNNING"
+msgstr "运行中"
\ No newline at end of file
diff --git a/package/lean/luci-app-v2ray-server/root/etc/config/v2ray_server b/package/lean/luci-app-v2ray-server/root/etc/config/v2ray_server
new file mode 100644
index 0000000000..cab9eeb88e
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/root/etc/config/v2ray_server
@@ -0,0 +1,15 @@
+
+config global
+	option enable '0'
+
+config user
+	option enable '1'
+	option remarks '备注222'
+	option protocol 'vmess'
+	option VMess_id 'fd00927a-b0c2-4629-aef7-d9ff15a9d722'
+	option VMess_alterId '16'
+	option VMess_level '1'
+	option transport 'tcp'
+	option tcp_guise 'none'
+	option port '12366'
+
diff --git a/package/lean/luci-app-v2ray-server/root/etc/init.d/v2ray_server b/package/lean/luci-app-v2ray-server/root/etc/init.d/v2ray_server
new file mode 100755
index 0000000000..ba4f90653f
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/root/etc/init.d/v2ray_server
@@ -0,0 +1,49 @@
+#!/bin/sh /etc/rc.common
+# Copyright (C) 2018-2019 Lienol <lawlienol@gmail.com>
+
+START=99
+
+CONFIG=v2ray_server
+CONFIG_PATH=/var/etc/$CONFIG
+
+gen_v2ray_config_file() {
+	config_get enable $1 enable
+	[ "$enable" = "0" ] && return 0
+	config_get remarks $1 remarks
+	config_get port $1 port
+	lua /usr/lib/lua/luci/model/cbi/v2ray_server/api/genv2rayconfig.lua $1 > $CONFIG_PATH/$1.json
+	[ -f /var/v2server ] || cp -a /usr/bin/v2ray/v2ray /var/v2server
+	/var/v2server -config $CONFIG_PATH/$1.json >/dev/null 2>&1 &
+}
+
+start_v2ray_server() {
+	config_foreach gen_v2ray_config_file "user"
+	fw3 reload
+}
+
+stop_v2ray_server() {
+	fw3 reload
+	ps -w | grep "$CONFIG_PATH/" | grep -v "grep" | awk '{print $1}' | xargs kill -9 >/dev/null 2>&1 &
+}
+
+start() {
+	config_load $CONFIG
+	enable=$(uci get $CONFIG.@global[0].enable)
+	if [ "$enable" = "0" ];then
+		stop_v2ray_server
+	else
+		mkdir -p $CONFIG_PATH
+		start_v2ray_server
+	fi
+}
+
+stop() {
+	stop_v2ray_server
+	rm -rf $CONFIG_PATH
+}
+
+restart() {
+	stop
+	sleep 1
+	start
+}
\ No newline at end of file
diff --git a/package/lean/luci-app-v2ray-server/root/etc/uci-defaults/luci-app-v2ray-server b/package/lean/luci-app-v2ray-server/root/etc/uci-defaults/luci-app-v2ray-server
new file mode 100755
index 0000000000..364f7db225
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/root/etc/uci-defaults/luci-app-v2ray-server
@@ -0,0 +1,21 @@
+#!/bin/sh
+
+uci -q batch <<-EOF >/dev/null
+	delete firewall.v2ray_server
+	set firewall.v2ray_server=include
+	set firewall.v2ray_server.type=script
+	set firewall.v2ray_server.path=/usr/share/v2ray_server/firewall.include
+	set firewall.v2ray_server.reload=1
+EOF
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@v2ray_server[-1]
+	add ucitrack v2ray_server
+	set ucitrack.@v2ray_server[-1].init=v2ray_server
+	commit ucitrack
+EOF
+
+chmod a+x /usr/share/v2ray_server/* >/dev/null 2>&1
+
+rm -f /tmp/luci-indexcache
+exit 0
diff --git a/package/lean/luci-app-v2ray-server/root/usr/share/v2ray_server/firewall.include b/package/lean/luci-app-v2ray-server/root/usr/share/v2ray_server/firewall.include
new file mode 100755
index 0000000000..1f06a00b6f
--- /dev/null
+++ b/package/lean/luci-app-v2ray-server/root/usr/share/v2ray_server/firewall.include
@@ -0,0 +1,25 @@
+#!/bin/sh
+
+. $IPKG_INSTROOT/lib/functions.sh
+. $IPKG_INSTROOT/lib/functions/service.sh
+
+gen_user_iptables() {
+	config_get enable $1 enable
+	[ "$enable" = "0" ] && return 0
+	config_get remarks $1 remarks
+	config_get port $1 port
+	iptables -A V2RAY-SERVER -p tcp --dport $port -m comment --comment "$remarks" -j ACCEPT
+	iptables -A V2RAY-SERVER -p udp --dport $port -m comment --comment "$remarks" -j ACCEPT
+}
+
+iptables -F V2RAY-SERVER 2>/dev/null
+iptables -D INPUT -j V2RAY-SERVER 2>/dev/null
+iptables -X V2RAY-SERVER 2>/dev/null
+
+enable=$(uci get v2ray_server.@global[0].enable)
+if [ $enable -eq 1 ]; then
+	iptables -N V2RAY-SERVER
+	iptables -I INPUT -j V2RAY-SERVER
+	config_load v2ray_server
+	config_foreach gen_user_iptables "user"
+fi
\ No newline at end of file
diff --git a/package/lean/luci-app-vlmcsd/Makefile b/package/lean/luci-app-vlmcsd/Makefile
new file mode 100644
index 0000000000..2bb1feb9c0
--- /dev/null
+++ b/package/lean/luci-app-vlmcsd/Makefile
@@ -0,0 +1,18 @@
+#
+# Copyright (C) 2008-2014 The LuCI Team <luci@lists.subsignal.org>
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI page for KMS
+LUCI_DEPENDS:=+vlmcsd
+PKG_VERSION:=1.0
+PKG_RELEASE:=5
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
+
diff --git a/package/lean/luci-app-vlmcsd/luasrc/controller/vlmcsd.lua b/package/lean/luci-app-vlmcsd/luasrc/controller/vlmcsd.lua
new file mode 100644
index 0000000000..f540847cbc
--- /dev/null
+++ b/package/lean/luci-app-vlmcsd/luasrc/controller/vlmcsd.lua
@@ -0,0 +1,19 @@
+module("luci.controller.vlmcsd", package.seeall)
+
+function index()
+	if not nixio.fs.access("/etc/config/vlmcsd") then
+		return
+	end
+	local page
+	page = entry({"admin", "services", "vlmcsd"}, cbi("vlmcsd"), _("KMS Server"), 100)
+	page.i18n = "vlmcsd"
+	page.dependent = true
+	entry({"admin","services","vlmcsd","status"},call("act_status")).leaf=true
+end
+
+function act_status()
+  local e={}
+  e.running=luci.sys.call("pgrep vlmcsd >/dev/null")==0
+  luci.http.prepare_content("application/json")
+  luci.http.write_json(e)
+end
diff --git a/package/lean/luci-app-vlmcsd/luasrc/model/cbi/vlmcsd.lua b/package/lean/luci-app-vlmcsd/luasrc/model/cbi/vlmcsd.lua
new file mode 100644
index 0000000000..98c3e16fb1
--- /dev/null
+++ b/package/lean/luci-app-vlmcsd/luasrc/model/cbi/vlmcsd.lua
@@ -0,0 +1,35 @@
+
+
+m = Map("vlmcsd")
+m.title	= translate("vlmcsd config")
+m.description = translate("A KMS Serever Emulator to active your Windows or Office")
+
+m:section(SimpleSection).template  = "vlmcsd/vlmcsd_status"
+
+s = m:section(TypedSection, "vlmcsd")
+s.addremove = false
+s.anonymous = true
+
+s:tab("basic", translate("Basic Setting"))
+enable = s:taboption("basic",Flag, "enabled", translate("Enable"))
+enable.rmempty = false
+
+autoactivate = s:taboption("basic", Flag, "autoactivate", translate("Auto activate"))
+autoactivate.rmempty = false
+
+s:tab("config", translate("Config File"))
+config = s:taboption("config", Value, "config", translate("configfile"), translate("This file is /etc/vlmcsd.ini."), "")
+config.template = "cbi/tvalue"
+config.rows = 13
+config.wrap = "off"
+
+function config.cfgvalue(self, section)
+	return nixio.fs.readfile("/etc/vlmcsd.ini")
+end
+
+function config.write(self, section, value)
+	value = value:gsub("\r\n?", "\n")
+	nixio.fs.writefile("/etc/vlmcsd.ini", value)
+end
+
+return m
diff --git a/package/lean/luci-app-vlmcsd/luasrc/view/vlmcsd/vlmcsd_status.htm b/package/lean/luci-app-vlmcsd/luasrc/view/vlmcsd/vlmcsd_status.htm
new file mode 100644
index 0000000000..d711300e26
--- /dev/null
+++ b/package/lean/luci-app-vlmcsd/luasrc/view/vlmcsd/vlmcsd_status.htm
@@ -0,0 +1,22 @@
+<script type="text/javascript">//<![CDATA[
+XHR.poll(3, '<%=url([[admin]], [[services]], [[vlmcsd]], [[status]])%>', null,
+	function(x, data) {
+		var tb = document.getElementById('vlmcsd_status');
+		if (data && tb) {
+			if (data.running) {
+				var links = '<em><b><font color=green>KMS <%:RUNNING%></font></b></em>';
+				tb.innerHTML = links;
+			} else {
+				tb.innerHTML = '<em><b><font color=red>KMS <%:NOT RUNNING%></font></b></em>';
+			}
+		}
+	}
+);
+//]]>
+</script>
+<style>.mar-10 {margin-left: 50px; margin-right: 10px;}</style>
+<fieldset class="cbi-section">
+	<p id="vlmcsd_status">
+		<em><%:Collecting data...%></em>
+	</p>
+</fieldset>
\ No newline at end of file
diff --git a/package/lean/luci-app-vlmcsd/po/zh-cn/vlmcsd.zh-cn.po b/package/lean/luci-app-vlmcsd/po/zh-cn/vlmcsd.zh-cn.po
new file mode 100644
index 0000000000..eba783c298
--- /dev/null
+++ b/package/lean/luci-app-vlmcsd/po/zh-cn/vlmcsd.zh-cn.po
@@ -0,0 +1,38 @@
+msgid ""
+msgstr ""
+"Language: zh_CN\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+
+msgid "vlmcsd config"
+msgstr "KMS 服务器设置"
+
+msgid "KMS Server"
+msgstr "KMS 服务器"
+
+msgid "Basic Setting"
+msgstr "基本设置"
+
+msgid "Config File"
+msgstr "配置文件"
+
+
+msgid "<b><font color=green>Vlmcsd is running.</font></b>"
+msgstr "<b><font color=green>KMS 服务器运行中</font></b>"
+
+msgid "<b><font color=red>Vlmcsd is not running.</font></b>"
+msgstr "<b><font color=red>KMS 服务器未运行</font></b>"
+
+msgid "Enable"
+msgstr "启用"
+
+msgid "Auto activate"
+msgstr "自动激活局域网客户端"
+
+msgid "configfile"
+msgstr "配置文件"
+
+msgid "This file is /etc/vlmcsd.ini."
+msgstr "这个文件在 /etc/vlmcsd.ini 下，可以增加新的产品主密钥。"
diff --git a/package/lean/luci-app-vlmcsd/root/etc/config/vlmcsd b/package/lean/luci-app-vlmcsd/root/etc/config/vlmcsd
new file mode 100644
index 0000000000..8940d0c0d3
--- /dev/null
+++ b/package/lean/luci-app-vlmcsd/root/etc/config/vlmcsd
@@ -0,0 +1,5 @@
+
+config vlmcsd 'config'
+	option autoactivate '1'
+	option enabled '1'
+
diff --git a/package/lean/luci-app-vlmcsd/root/etc/init.d/kms b/package/lean/luci-app-vlmcsd/root/etc/init.d/kms
new file mode 100755
index 0000000000..7878239e14
--- /dev/null
+++ b/package/lean/luci-app-vlmcsd/root/etc/init.d/kms
@@ -0,0 +1,56 @@
+#!/bin/sh /etc/rc.common
+# Copyright (c) 2011-2015 OpenWrt.org
+
+START=90
+
+get_config() {
+	config_get_bool enabled $1 enabled 0
+	config_get autoactivate $1 autoactivate 1
+}
+
+add_vlmcs_entry() {
+	local new_hostname="$1"
+
+	uci -q batch <<-EOF >/dev/null
+		add dhcp srvhost
+		set dhcp.@srvhost[-1].srv=_vlmcs._tcp
+		set dhcp.@srvhost[-1].target=$new_hostname
+		set dhcp.@srvhost[-1].port=1688
+		set dhcp.@srvhost[-1].class=0
+		set dhcp.@srvhost[-1].weight=100
+		commit dhcp
+	EOF
+
+	/etc/init.d/dnsmasq restart
+	exit 0
+}
+
+start() {
+	config_load vlmcsd
+	config_foreach get_config vlmcsd
+	[ $enabled -eq 0 ] && exit 0
+	/usr/bin/vlmcsd -i /etc/vlmcsd.ini -L 0.0.0.0:1688
+	echo "KMS Server has started."
+
+	if [ $autoactivate -eq 1 ]; then
+		local HOSTNAME=`uci get system.@system[0].hostname`
+
+		local index=$(uci -q show dhcp |grep "].srv='_vlmcs._tcp'") \
+			|| add_vlmcs_entry $HOSTNAME
+		index=${index#*[}
+		index=${index%]*}
+
+		local host_name=$(uci -q get dhcp.@srvhost[$index].target)
+
+		if [ "$HOSTNAME" != "$host_name" ]; then
+			uci delete dhcp.@srvhost[$index]
+			add_vlmcs_entry $HOSTNAME
+		fi
+	fi
+}
+
+stop() {
+    killall -q -9 vlmcsd
+    echo "KMS Server has stopped."
+}
+
diff --git a/package/lean/luci-app-vlmcsd/root/etc/uci-defaults/luci-app-vlmcsd b/package/lean/luci-app-vlmcsd/root/etc/uci-defaults/luci-app-vlmcsd
new file mode 100755
index 0000000000..d28b2ec9f8
--- /dev/null
+++ b/package/lean/luci-app-vlmcsd/root/etc/uci-defaults/luci-app-vlmcsd
@@ -0,0 +1,21 @@
+#!/bin/sh
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@vlmcsd[-1]
+	add ucitrack vlmcsd
+	set ucitrack.@vlmcsd[-1].init=kms
+	commit ucitrack
+EOF
+
+uci delete firewall.kms
+uci add firewall rule 
+uci rename firewall.@rule[-1]="kms"
+uci set firewall.@rule[-1].name="kms"
+uci set firewall.@rule[-1].target="ACCEPT"
+uci set firewall.@rule[-1].src="wan"
+uci set firewall.@rule[-1].proto="tcp"
+uci set firewall.@rule[-1].dest_port="1688"
+uci commit firewall
+
+rm -f /tmp/luci-indexcache
+exit 0
diff --git a/package/lean/luci-app-vsftpd/Makefile b/package/lean/luci-app-vsftpd/Makefile
new file mode 100644
index 0000000000..49b71c9e9f
--- /dev/null
+++ b/package/lean/luci-app-vsftpd/Makefile
@@ -0,0 +1,17 @@
+# Copyright (C) 2016 Openwrt.org
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI support for VSFTPD
+LUCI_DEPENDS:=+vsftpd-alt
+LUCI_PKGARCH:=all
+PKG_VERSION:=1.0
+PKG_RELEASE:=3
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
diff --git a/package/lean/luci-app-vsftpd/luasrc/controller/vsftpd.lua b/package/lean/luci-app-vsftpd/luasrc/controller/vsftpd.lua
new file mode 100644
index 0000000000..de44711dc5
--- /dev/null
+++ b/package/lean/luci-app-vsftpd/luasrc/controller/vsftpd.lua
@@ -0,0 +1,47 @@
+--[[
+LuCI - Lua Configuration Interface
+
+Copyright 2016 Weijie Gao <hackpascal@gmail.com>
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+$Id$
+]]--
+
+require("luci.sys")
+
+module("luci.controller.vsftpd", package.seeall)
+
+function index()
+	if not nixio.fs.access("/etc/config/vsftpd") then
+		return
+	end
+
+	entry({"admin", "nas"}, firstchild(), "NAS", 44).dependent = false
+	entry({"admin", "nas", "vsftpd"},
+		alias("admin", "nas", "vsftpd", "general"),
+		_("FTP Server"))
+
+	entry({"admin", "nas", "vsftpd", "general"},
+		cbi("vsftpd/general"),
+		_("General Settings"), 10).leaf = true
+
+	entry({"admin", "nas", "vsftpd", "users"},
+		cbi("vsftpd/users"),
+		_("Virtual Users"), 20).leaf = true
+
+	entry({"admin", "nas", "vsftpd", "anonymous"},
+		cbi("vsftpd/anonymous"),
+		_("Anonymous User"), 30).leaf = true
+
+	entry({"admin", "nas", "vsftpd", "log"},
+		cbi("vsftpd/log"),
+		_("Log Settings"), 40).leaf = true
+
+	entry({"admin", "nas", "vsftpd", "item"},
+		cbi("vsftpd/item"), nil).leaf = true
+end
diff --git a/package/lean/luci-app-vsftpd/luasrc/model/cbi/vsftpd/anonymous.lua b/package/lean/luci-app-vsftpd/luasrc/model/cbi/vsftpd/anonymous.lua
new file mode 100644
index 0000000000..3ebbb4ba9c
--- /dev/null
+++ b/package/lean/luci-app-vsftpd/luasrc/model/cbi/vsftpd/anonymous.lua
@@ -0,0 +1,44 @@
+--[[
+LuCI - Lua Configuration Interface
+
+Copyright 2016 Weijie Gao <hackpascal@gmail.com>
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+$Id$
+]]--
+
+m = Map("vsftpd", translate("FTP Server - Anonymous Settings"))
+
+sa = m:section(NamedSection, "anonymous", "anonymous", translate("Anonymous Settings"))
+
+o = sa:option(Flag, "enabled", translate("Enabled"))
+o.default = false
+
+o = sa:option(Value, "username", translate("Username"), translate("An actual local user to handle anonymous user"))
+o.default = "ftp"
+
+o = sa:option(Value, "root", translate("Root directory"))
+o.default = "/home/ftp"
+
+o = sa:option(Value, "umask", translate("File mode umask"))
+o.default = "022"
+
+o = sa:option(Value, "maxrate", translate("Max transmit rate"), translate("0 means no limitation"))
+o.default = "0"
+
+o = sa:option(Flag, "writemkdir", translate("Enable write/mkdir"))
+o.default = false
+
+o = sa:option(Flag, "upload", translate("Enable upload"))
+o.default = false
+
+o = sa:option(Flag, "others", translate("Enable other rights"), translate("Include rename, deletion ..."))
+o.default = false
+
+
+return m
diff --git a/package/lean/luci-app-vsftpd/luasrc/model/cbi/vsftpd/general.lua b/package/lean/luci-app-vsftpd/luasrc/model/cbi/vsftpd/general.lua
new file mode 100644
index 0000000000..2de653c798
--- /dev/null
+++ b/package/lean/luci-app-vsftpd/luasrc/model/cbi/vsftpd/general.lua
@@ -0,0 +1,122 @@
+--[[
+LuCI - Lua Configuration Interface
+
+Copyright 2016 Weijie Gao <hackpascal@gmail.com>
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+$Id$
+]]--
+
+m = Map("vsftpd", translate("FTP Server - General Settings"))
+
+sl = m:section(NamedSection, "listen", "listen", translate("Listening Settings"))
+
+o = sl:option(Flag, "enable4", translate("Enable IPv4"))
+o.rmempty = false
+o.default = true
+
+o = sl:option(Value, "ipv4", translate("IPv4 Address"))
+o.datatype = "ip4addr"
+o.default = "0.0.0.0"
+
+o = sl:option(Flag, "enable6", translate("Enable IPv6"))
+o.rmempty = false
+
+o = sl:option(Value, "ipv6", translate("IPv6 Address"))
+o.datatype = "ip6addr"
+o.default = "::"
+
+o = sl:option(Value, "port", translate("Listen Port"))
+o.datatype = "uinteger"
+o.default = "21"
+
+o = sl:option(Value, "dataport", translate("Data Port"))
+o.datatype = "uinteger"
+o.default = "20"
+
+o = sl:option(Value, "pasv_min_port", translate("Pasv Min Port"))
+o.datatype = "uinteger"
+o.default = "50000"
+
+o = sl:option(Value, "pasv_max_port", translate("Pasv Max Port"))
+o.datatype = "uinteger"
+o.default = "51000"
+
+
+sg = m:section(NamedSection, "global", "global", translate("Global Settings"))
+
+o = sg:option(Flag, "write", translate("Enable write"), translate("When disabled, all write request will give permission denied."));
+o.default = true
+
+o = sg:option(Flag, "download", translate("Enable download"), translate("When disabled, all download request will give permission denied."));
+o.default = true
+
+o = sg:option(Flag, "dirlist", translate("Enable directory list"), translate("When disabled, list commands will give permission denied."))
+o.default = true
+
+o = sg:option(Flag, "lsrecurse", translate("Allow directory recursely list"))
+
+o = sg:option(Flag, "dotfile", translate("Show dot files"), translate(". and .. are excluded."));
+o.default = true
+
+o = sg:option(Value, "umask", translate("File mode umask"), translate("Uploaded file mode will be 666 - &lt;umask&gt;; directory mode will be 777 - &lt;umask&gt;."))
+o.default = "022"
+
+o = sg:option(Value, "banner", translate("FTP Banner"))
+
+o = sg:option(Flag, "dirmessage", translate("Enable directory message"), translate("A message will be displayed when entering a directory."))
+
+o = sg:option(Value, "dirmsgfile", translate("Directory message filename"))
+o.default = ".message"
+
+
+sl = m:section(NamedSection, "local", "local", translate("Local Users"))
+
+o = sl:option(Flag, "enabled", translate("Enable local user"))
+o.rmempty = false
+
+o = sl:option(Value, "root", translate("Root directory"), translate("Leave empty will use user's home directory"))
+o.default = ""
+
+
+sc = m:section(NamedSection, "connection", "connection", translate("Connection Settings"))
+
+o = sc:option(Flag, "portmode", translate("Enable PORT mode"))
+o = sc:option(Flag, "pasvmode", translate("Enable PASV mode"))
+
+o = sc:option(ListValue, "ascii", translate("ASCII mode"))
+o:value("disabled", translate("Disabled"))
+o:value("download", translate("Download only"))
+o:value("upload", translate("Upload only"))
+o:value("both", translate("Both download and upload"))
+o.default = "both"
+
+o = sc:option(Value, "idletimeout", translate("Idle session timeout"), translate("in seconds"))
+o.datatype = "uinteger"
+o.default = "1800"
+o = sc:option(Value, "conntimeout", translate("Connection timeout"), translate("in seconds"))
+o.datatype = "uinteger"
+o.default = "120"
+o = sc:option(Value, "dataconntimeout", translate("Data connection timeout"), translate("in seconds"))
+o.datatype = "uinteger"
+o.default = "120"
+o = sc:option(Value, "maxclient", translate("Max clients"), translate("0 means no limitation"))
+o.datatype = "uinteger"
+o.default = "0"
+o = sc:option(Value, "maxperip", translate("Max clients per IP"), translate("0 means no limitation"))
+o.datatype = "uinteger"
+o.default = "0"
+o = sc:option(Value, "maxrate", translate("Max transmit rate"), translate("in KB/s, 0 means no limitation"))
+o.datatype = "uinteger"
+o.default = "0"
+o = sc:option(Value, "maxretry", translate("Max login fail count"), translate("Can not be zero, default is 3"))
+o.datatype = "uinteger"
+o.default = "3"
+
+
+return m
diff --git a/package/lean/luci-app-vsftpd/luasrc/model/cbi/vsftpd/item.lua b/package/lean/luci-app-vsftpd/luasrc/model/cbi/vsftpd/item.lua
new file mode 100644
index 0000000000..2a0003c8bd
--- /dev/null
+++ b/package/lean/luci-app-vsftpd/luasrc/model/cbi/vsftpd/item.lua
@@ -0,0 +1,70 @@
+--[[
+LuCI - Lua Configuration Interface
+
+Copyright 2016 Weijie Gao <hackpascal@gmail.com>
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+$Id$
+]]--
+
+local sid = arg[1]
+local utl = require "luci.util"
+
+m = Map("vsftpd", translate("FTP Server - Virtual User &lt;new&gt;"))
+
+m.redirect = luci.dispatcher.build_url("admin/nas/vsftpd/users")
+
+if m.uci:get("vsftpd", sid) ~= "user" then
+	luci.http.redirect(m.redirect)
+	return
+end
+
+m.uci:foreach("vsftpd", "user",
+	function(s)
+		if s['.name'] == sid and s.username then
+			m.title = translatef("FTP Server - Virtual User %q", s.username)
+			return false
+		end
+	end)
+
+s = m:section(NamedSection, sid, "settings", translate("User Settings"))
+s.addremove = false
+
+o = s:option(Value, "username", translate("Username"))
+o.rmempty = false
+
+function o.validate(self, value)
+	if value == "" then
+		return nil, translate("Username cannot be empty")
+	end
+	return value
+end
+
+o = s:option(Value, "password", translate("Password"))
+o.password = true
+
+o = s:option(Value, "home", translate("Home directory"))
+o.default = "/home/ftp"
+
+o = s:option(Value, "umask", translate("File mode umask"))
+o.default = "022"
+
+o = s:option(Value, "maxrate", translate("Max transmit rate"), translate("0 means no limitation"))
+o.default = "0"
+
+o = s:option(Flag, "writemkdir", translate("Enable write/mkdir"))
+o.default = false
+
+o = s:option(Flag, "upload", translate("Enable upload"))
+o.default = false
+
+o = s:option(Flag, "others", translate("Enable other rights"), translate("Include rename, deletion ..."))
+o.default = false
+
+
+return m
diff --git a/package/lean/luci-app-vsftpd/luasrc/model/cbi/vsftpd/log.lua b/package/lean/luci-app-vsftpd/luasrc/model/cbi/vsftpd/log.lua
new file mode 100644
index 0000000000..969ce817c4
--- /dev/null
+++ b/package/lean/luci-app-vsftpd/luasrc/model/cbi/vsftpd/log.lua
@@ -0,0 +1,29 @@
+--[[
+LuCI - Lua Configuration Interface
+
+Copyright 2016 Weijie Gao <hackpascal@gmail.com>
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+$Id$
+]]--
+
+m = Map("vsftpd", translate("FTP Server - Log Settings"))
+
+sl = m:section(NamedSection, "log", "log", translate("Log Settings"))
+
+o = sl:option(Flag, "syslog", translate("Enable syslog"))
+o.default = false
+
+o = sl:option(Flag, "xreflog", translate("Enable file log"))
+o.default = true
+
+o = sl:option(Value, "file", translate("Log file"))
+o.default = "/var/log/vsftpd.log"
+
+
+return m
diff --git a/package/lean/luci-app-vsftpd/luasrc/model/cbi/vsftpd/users.lua b/package/lean/luci-app-vsftpd/luasrc/model/cbi/vsftpd/users.lua
new file mode 100644
index 0000000000..2ffaf759d5
--- /dev/null
+++ b/package/lean/luci-app-vsftpd/luasrc/model/cbi/vsftpd/users.lua
@@ -0,0 +1,54 @@
+--[[
+LuCI - Lua Configuration Interface
+
+Copyright 2016 Weijie Gao <hackpascal@gmail.com>
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+$Id$
+]]--
+
+m = Map("vsftpd", translate("FTP Server - Virtual User Settings"))
+
+sv = m:section(NamedSection, "vuser", "vuser", translate("Settings"))
+
+o = sv:option(Flag, "enabled", translate("Enabled"))
+o.default = false
+
+o = sv:option(Value, "username", translate("Username"), translate("An actual local user to handle virtual users"))
+o.default = "ftp"
+
+s = m:section(TypedSection, "user", translate("User lists"))
+s.template = "cbi/tblsection"
+s.extedit  = luci.dispatcher.build_url("admin/nas/vsftpd/item/%s")
+s.addremove = true
+s.anonymous = true
+
+function s.create(...)
+	local id = TypedSection.create(...)
+	luci.http.redirect(s.extedit % id)
+end
+
+function s.remove(self, section)
+	return TypedSection.remove(self, section)
+end
+
+o = s:option(DummyValue, "username", translate("Username"))
+function o.cfgvalue(...)
+	local v = Value.cfgvalue(...) or ("<%s>" % translate("Unknown"))
+	return v
+end
+o.rmempty = false
+
+o = s:option(DummyValue, "home", translate("Home directory"))
+function o.cfgvalue(...)
+	local v = Value.cfgvalue(...) or ("/home/ftp")
+	return v
+end
+o.rmempty = false
+
+return m
diff --git a/package/lean/luci-app-vsftpd/po/zh-cn/vsftpd.po b/package/lean/luci-app-vsftpd/po/zh-cn/vsftpd.po
new file mode 100644
index 0000000000..d77cb43adc
--- /dev/null
+++ b/package/lean/luci-app-vsftpd/po/zh-cn/vsftpd.po
@@ -0,0 +1,236 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2016-02-17 18:00+0800\n"\
+"Last-Translator: Weijie Gao <hackpascal@gmail.com>\n"
+"Language-Team: \n"
+"Language: zh_CN\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+"X-Generator: Pootle 2.0.6\n"
+
+msgid "NAS"
+msgstr "网络存储"
+
+msgid ". and .. are excluded."
+msgstr ". 和 .. 将被忽略。"
+
+msgid "0 means no limitation"
+msgstr "0 表明不限制"
+
+msgid "A message will be displayed when entering a directory."
+msgstr "在进入一个新目录时将显示的消息"
+
+msgid "ASCII mode"
+msgstr "ASCII 模式"
+
+msgid "Allow directory recursely list"
+msgstr "允许递归列目录"
+
+msgid "An actual local user to handle anonymous user"
+msgstr "承载匿名用户的本地用户"
+
+msgid "An actual local user to handle virtual users"
+msgstr "承载虚拟用户的本地用户"
+
+msgid "Anonymous Settings"
+msgstr "匿名用户设置"
+
+msgid "Anonymous User"
+msgstr "匿名用户"
+
+msgid "Both download and upload"
+msgstr "下载和上传"
+
+msgid "Can not be zero, default is 3"
+msgstr "不能为 0，默认为 3"
+
+msgid "Connection Settings"
+msgstr "连接设置"
+
+msgid "Connection timeout"
+msgstr "连接超时"
+
+msgid "Data Port"
+msgstr "数据端口"
+
+msgid "Data connection timeout"
+msgstr "数据连接超时"
+
+msgid "Directory message filename"
+msgstr "目录消息文件名"
+
+msgid "Download only"
+msgstr "仅下载"
+
+msgid "Enable IPv4"
+msgstr "启用 IPv4"
+
+msgid "Enable IPv6"
+msgstr "启用 IPv6"
+
+msgid "Enable PASV mode"
+msgstr "启用 PASV 模式"
+
+msgid "Enable PORT mode"
+msgstr "启用 PORT 模式"
+
+msgid "Enable directory list"
+msgstr "允许列目录"
+
+msgid "Enable directory message"
+msgstr "启用目录消息"
+
+msgid "Enable download"
+msgstr "允许下载"
+
+msgid "Enable file log"
+msgstr "启用文件日志"
+
+msgid "Enable local user"
+msgstr "启用本地用户"
+
+msgid "Enable other rights"
+msgstr "允许其它权限"
+
+msgid "Enable syslog"
+msgstr "启用系统日志"
+
+msgid "Enable upload"
+msgstr "允许上传"
+
+msgid "Enable write"
+msgstr "允许写"
+
+msgid "Enable write/mkdir"
+msgstr "允许写/创建目录"
+
+msgid "FTP Banner"
+msgstr "FTP 欢迎提示"
+
+msgid "FTP Server"
+msgstr "FTP 服务器"
+
+msgid "FTP Server - Anonymous Settings"
+msgstr "FTP 服务器 - 匿名用户设置"
+
+msgid "FTP Server - General Settings"
+msgstr "FTP 服务器 - 常规设置"
+
+msgid "FTP Server - Log Settings"
+msgstr "FTP 服务器 - 日志设置"
+
+msgid "FTP Server - Virtual User %q"
+msgstr "FTP 服务器 - 虚拟用户 %q"
+
+msgid "FTP Server - Virtual User &lt;new&gt;"
+msgstr "FTP 服务器 - 虚拟用户 &lt;新用户&gt;"
+
+msgid "FTP Server - Virtual User Settings"
+msgstr "FTP 服务器 - 虚拟用户设置"
+
+msgid "File mode umask"
+msgstr "文件权限掩码"
+
+msgid "General Settings"
+msgstr "常规设置"
+
+msgid "Global Settings"
+msgstr "全局设置"
+
+msgid "Home directory"
+msgstr "主目录"
+
+msgid "IPv4 Address"
+msgstr "IPv4 地址"
+
+msgid "IPv6 Address"
+msgstr "IPv6 地址"
+
+msgid "Idle session timeout"
+msgstr "空闲回话超时"
+
+msgid "Include rename, deletion ..."
+msgstr "包括重命名、删除 ..."
+
+msgid "Leave empty will use user's home directory"
+msgstr "留空将使用用户主目录"
+
+msgid "Listen Port"
+msgstr "监听端口"
+
+msgid "Listening Settings"
+msgstr "监听设置"
+
+msgid "Local Users"
+msgstr "本地用户"
+
+msgid "Log Settings"
+msgstr "日志设置"
+
+msgid "Log file"
+msgstr "日志文件"
+
+msgid "Max clients"
+msgstr "最大连接数"
+
+msgid "Max clients per IP"
+msgstr "同一 IP 的最大连接数"
+
+msgid "Max login fail count"
+msgstr "最大登录尝试数"
+
+msgid "Max transmit rate"
+msgstr "最大传输速率"
+
+msgid "Root directory"
+msgstr "根目录"
+
+msgid "Settings"
+msgstr "设置"
+
+msgid "Show dot files"
+msgstr "显示以点开头的文件 (隐藏文件)"
+
+msgid "Upload only"
+msgstr "仅上传"
+
+msgid "Uploaded file mode will be 666 - &lt;umask&gt;; directory mode will be 777 - &lt;umask&gt;."
+msgstr "上传的文件权限将被设置为 666 - &lt;掩码&gt;；目录权限将被设置为 777 - &lt;掩码&gt;。"
+
+msgid "User Settings"
+msgstr "用户设置"
+
+msgid "User lists"
+msgstr "用户列表"
+
+msgid "Username cannot be empty"
+msgstr "用户名不能为空"
+
+msgid "When disabled, all download request will give permission denied."
+msgstr "如果禁止，所有的下载请求都将被拒绝。"
+
+msgid "When disabled, all write request will give permission denied."
+msgstr "如果禁止，所有的写类型请求都将被拒绝。"
+
+msgid "When disabled, list commands will give permission denied."
+msgstr "如果禁止，列目录命令将被拒绝。"
+
+msgid "Virtual Users"
+msgstr "虚拟用户"
+
+msgid "in seconds"
+msgstr "单位为秒"
+
+msgid "in KB/s, 0 means no limitation"
+msgstr "单位为 KB/s，0 表明不限制"
+
+msgid "Pasv Min Port"
+msgstr "Pasv 模式最小端口"
+
+msgid "Pasv Max Port"
+msgstr "Pasv 模式最大端口"
+
diff --git a/package/lean/luci-app-vsftpd/root/etc/uci-defaults/luci-vsftpd b/package/lean/luci-app-vsftpd/root/etc/uci-defaults/luci-vsftpd
new file mode 100755
index 0000000000..aa2f71a36b
--- /dev/null
+++ b/package/lean/luci-app-vsftpd/root/etc/uci-defaults/luci-vsftpd
@@ -0,0 +1,11 @@
+#!/bin/sh
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@vsftpd[-1]
+	add ucitrack vsftpd
+	set ucitrack.@vsftpd[-1].init=vsftpd
+	commit ucitrack
+EOF
+
+rm -f /tmp/luci-vsftpd
+exit 0
diff --git a/package/lean/luci-app-webadmin/Makefile b/package/lean/luci-app-webadmin/Makefile
new file mode 100644
index 0000000000..711673fab5
--- /dev/null
+++ b/package/lean/luci-app-webadmin/Makefile
@@ -0,0 +1,18 @@
+#
+# Copyright (C) 2008-2014 The LuCI Team <luci@lists.subsignal.org>
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI page for Web Admin
+LUCI_DEPENDS:=+uhttpd
+PKG_VERSION:=1.0
+PKG_RELEASE:=3
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
+
diff --git a/package/lean/luci-app-webadmin/luasrc/controller/webadmin.lua b/package/lean/luci-app-webadmin/luasrc/controller/webadmin.lua
new file mode 100644
index 0000000000..5e3d17d4d3
--- /dev/null
+++ b/package/lean/luci-app-webadmin/luasrc/controller/webadmin.lua
@@ -0,0 +1,17 @@
+-- Copyright 2018 lean <coolsnowwolf@gmail.com>
+-- Licensed to the public under the Apache License 2.0.
+
+module("luci.controller.webadmin", package.seeall)
+
+function index()
+	if not nixio.fs.access("/etc/config/uhttpd") then
+		return
+	end
+
+	local page
+
+	page = entry({"admin", "system", "webadmin"}, cbi("webadmin"), _("Web Admin"), 1)
+	page.leaf = true
+
+end
+
diff --git a/package/lean/luci-app-webadmin/luasrc/model/cbi/webadmin.lua b/package/lean/luci-app-webadmin/luasrc/model/cbi/webadmin.lua
new file mode 100644
index 0000000000..e1872d20d7
--- /dev/null
+++ b/package/lean/luci-app-webadmin/luasrc/model/cbi/webadmin.lua
@@ -0,0 +1,50 @@
+-- Copyright 2015 Daniel Dickinson <openwrt@daniel.thecshore.com>
+-- Licensed to the public under the Apache License 2.0.
+
+local fs = require("nixio.fs")
+
+local m = Map("uhttpd", translate("Web Admin Settings"),
+	      translate("Web Admin Settings Page"))
+
+local ucs = m:section(TypedSection, "uhttpd")
+ucs.addremove = false
+ucs.anonymous = true
+
+lhttp = ucs:option(DynamicList, "listen_http", translate("HTTP listeners (address:port)"), translate("Bind to specific interface:port (by specifying interface address"))
+lhttp.datatype = "list(ipaddrport(1))"
+
+function lhttp.validate(self, value, section)
+        local have_https_listener = false
+        local have_http_listener = false
+	if lhttp and lhttp:formvalue(section) and (#(lhttp:formvalue(section)) > 0) then
+		for k, v in pairs(lhttp:formvalue(section)) do
+			if v and (v ~= "") then
+				have_http_listener = true
+				break
+			end
+		end
+	end
+	if lhttps and lhttps:formvalue(section) and (#(lhttps:formvalue(section)) > 0) then
+		for k, v in pairs(lhttps:formvalue(section)) do
+			if v and (v ~= "") then
+				have_https_listener = true
+				break
+			end
+		end
+	end
+	if not (have_http_listener or have_https_listener) then
+		return nil, "must listen on at list one address:port"
+	end
+	return DynamicList.validate(self, value, section)
+end
+
+o = ucs:option(Flag, "redirect_https", translate("Redirect all HTTP to HTTPS"))
+o.default = o.enabled
+o.rmempty = false
+o.description = translate("Redirect all HTTP to HTTPS when SSl cert was installed")
+
+o = ucs:option(Flag, "rfc1918_filter", translate("Ignore private IPs on public interface"), translate("Prevent access from private (RFC1918) IPs on an interface if it has an public IP address"))
+o.default = o.enabled
+o.rmempty = false
+
+return m
diff --git a/package/lean/luci-app-webadmin/po/zh-cn/webadmin.po b/package/lean/luci-app-webadmin/po/zh-cn/webadmin.po
new file mode 100644
index 0000000000..8370b7174b
--- /dev/null
+++ b/package/lean/luci-app-webadmin/po/zh-cn/webadmin.po
@@ -0,0 +1,41 @@
+msgid ""
+msgstr ""
+"Language: zh_CN\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+
+msgid "Web Admin"
+msgstr "Web 管理"
+
+msgid "Web Admin Settings"
+msgstr "Web 管理页面设置"
+
+msgid "Web Admin Settings Page"
+msgstr "设置更改Web管理页面端口，绑定地址，是否允许从互联网访问等"
+
+msgid "HTTP listeners (address:port)""
+msgstr "HTTP 监听 (IP地址:端口)""
+
+msgid "Bind to specific interface:port (by specifying interface address"
+msgstr "绑定到指定的IP地址:端口"
+
+msgid "Redirect all HTTP to HTTPS"
+msgstr "重定向HTTP到HTTPS"
+
+msgid "Redirect all HTTP to HTTPS when SSl cert was installed"
+msgstr "当安装了SSL证书后，重定向HTTP到HTTPS管理页面"
+
+msgid "Auto activate"
+msgstr "自动激活局域网客户端"
+
+msgid "configfile"
+msgstr "配置文件"
+
+msgid "Ignore private IPs on public interface"
+msgstr "只允许内网访问"
+
+msgid "Prevent access from private (RFC1918) IPs on an interface if it has an public IP address"
+msgstr "拒绝从互联网访问Web管理页面"
+
diff --git a/package/lean/luci-app-wrtbwmon/Makefile b/package/lean/luci-app-wrtbwmon/Makefile
new file mode 100644
index 0000000000..412b35fe52
--- /dev/null
+++ b/package/lean/luci-app-wrtbwmon/Makefile
@@ -0,0 +1,17 @@
+# Copyright (C) 2016 Openwrt.org
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI support for Wrtbwmon
+LUCI_DEPENDS:=+luci-app-nlbwmon
+LUCI_PKGARCH:=all
+PKG_VERSION:=1.0
+PKG_RELEASE:=7
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
diff --git a/package/lean/luci-app-wrtbwmon/htdocs/luci-static/wrtbwmon.js b/package/lean/luci-app-wrtbwmon/htdocs/luci-static/wrtbwmon.js
new file mode 100644
index 0000000000..36812e723b
--- /dev/null
+++ b/package/lean/luci-app-wrtbwmon/htdocs/luci-static/wrtbwmon.js
@@ -0,0 +1,562 @@
+var wrt = {
+    // variables for auto-update, interval is in seconds
+    scheduleTimeout: undefined,
+    updateTimeout: undefined,
+    isScheduled: true,
+    interval: 5,
+    // option on whether to show per host sub-totals
+    perHostTotals: false,
+    // variables for sorting
+    sortData: {
+        column: 7,
+        elId: 'thTotal',
+        dir: 'desc',
+        cache: {}
+    }
+};
+
+(function () {
+    var oldDate, oldValues = [];
+
+    // find base path
+    var re = /(.*?admin\/nlbw\/[^/]+)/;
+    var basePath = window.location.pathname.match(re)[1];
+
+    //----------------------
+    // HELPER FUNCTIONS
+    //----------------------
+
+    /**
+     * Human readable text for size
+     * @param size
+     * @returns {string}
+     */
+    function getSize(size) {
+        var prefix = [' ', 'k', 'M', 'G', 'T', 'P', 'E', 'Z'];
+        var precision, base = 1000, pos = 0;
+        while (size > base) {
+            size /= base;
+            pos++;
+        }
+        if (pos > 2) precision = 1000; else precision = 1;
+        return (Math.round(size * precision) / precision) + ' ' + prefix[pos] + 'B';
+    }
+
+    /**
+     * Human readable text for date
+     * @param date
+     * @returns {string}
+     */
+    function dateToString(date) {
+        return date.toString().substring(0, 24);
+    }
+
+    /**
+     * Gets the string representation of the date received from BE
+     * @param value
+     * @returns {*}
+     */
+    function getDateString(value) {
+        var tmp = value.split('_'),
+            str = tmp[0].split('-').reverse().join('-') + 'T' + tmp[1];
+        return dateToString(new Date(str));
+    }
+
+    /**
+     * Create a `tr` element with content
+     * @param content
+     * @returns {string}
+     */
+    function createTR(content) {
+        var res = '<tr';
+        res += ' class="tr">';
+        res += content;
+        res += '</tr>';
+
+        return res;
+    }
+
+    /**
+     * Create a `th` element with content and options
+     * @param content
+     * @param opts
+     * @returns {string}
+     */
+    function createTH(content, opts) {
+        opts = opts || {};
+        var res = '<th';
+        if (opts.right) {
+            res += ' align="right"';
+        }
+        if (opts.title) {
+            res += ' title="' + opts.title + '"';
+        }
+        if (opts.id) {
+            res += ' id="' + opts.id + '"';
+        }
+        res += ' class="th">';
+        res += content;
+        res += '</th>';
+        return res;
+    }
+
+    /**
+     * Create a `td` element with content and options
+     * @param content
+     * @param opts
+     * @returns {string}
+     */
+    function createTD(content, opts) {
+        opts = opts || {};
+        var res = '<td';
+        if (opts.right) {
+            res += ' align="right"';
+        }
+        if (opts.title) {
+            res += ' title="' + opts.title + '"';
+        }
+        res += ' class="td">';
+        res += content;
+        res += '</td>';
+        return res;
+    }
+
+    /**
+     * Returns true if obj is instance of Array
+     * @param obj
+     * @returns {boolean}
+     */
+    function isArray(obj) {
+        return obj instanceof Array;
+    }
+
+    //----------------------
+    // END HELPER FUNCTIONS
+    //----------------------
+
+    /**
+     * Handle the error that happened during the call to the BE
+     */
+    function handleError() {
+        // TODO handle errors
+        // var message = 'Something went wrong...';
+    }
+
+    /**
+     * Handle the new `values` that were received from the BE
+     * @param values
+     * @returns {string}
+     */
+    function handleValues(values) {
+        if (!isArray(values)) return '';
+
+        // find data and totals
+        var res = parseValues(values);
+        var data = res[0];
+        var totals = res[1];
+
+        // aggregate (sub-total) by hostname (or MAC address) after the global totals are computed, before sort and display
+        aggregateHostTotals(data);
+
+        // store them in cache for quicker re-rendering
+        wrt.sortData.cache.data = data;
+        wrt.sortData.cache.totals = totals;
+
+        renderTableData(data, totals);
+    }
+
+    /**
+     * Renders the table body
+     * @param data
+     * @param totals
+     */
+    function renderTableData(data, totals) {
+        // sort data
+        data.sort(sortingFunction);
+
+        // display data
+        document.getElementById('tableBody').innerHTML = getDisplayData(data, totals);
+
+        // set sorting arrows
+        var el = document.getElementById(wrt.sortData.elId);
+        if (el) {
+            el.innerHTML = el.innerHTML + (wrt.sortData.dir === 'desc' ? '&#x25BC' : '&#x25B2');
+        }
+
+        // register table events
+        registerTableEventHandlers();
+    }
+
+    /**
+     * Parses the values and returns a data array, where each element in the data array is an array with two elements,
+     * and a totals array, that holds aggregated values for each column.
+     * The first element of each row in the data array, is the HTML output of the row as a `tr` element
+     * and the second is the actual data:
+     *  [ result, data ]
+     * @param values The `values` array
+     * @returns {Array}
+     */
+    function parseValues(values) {
+        var data = [], totals = [0, 0, 0, 0, 0];
+        for (var i = 0; i < values.length; i++) {
+            var d = parseValueRow(values[i]);
+            if (d[1]) {
+                data.push(d);
+                // get totals
+                for (var j = 0; j < totals.length; j++) {
+                    totals[j] += d[1][3 + j];
+                }
+            }
+        }
+
+        return [data, totals];
+    }
+
+    /**
+     * Parse each row in the `values` array and return an array with two elements.
+     * The first element is the HTML output of the row as a `tr` element and the second is the actual data
+     *    [ result, data ]
+     * @param data A row from the `values` array
+     * @returns {[ string, [] ]}
+     */
+    function parseValueRow(data) {
+        // check if data is array
+        if (!isArray(data)) return [''];
+
+        // find old data
+        var oldData;
+        for (var i = 0; i < oldValues.length; i++) {
+            var cur = oldValues[i];
+            // compare mac addresses and ip addresses
+            if (oldValues[i][1] === data[1] && oldValues[i][2] === data[2]) {
+                oldData = cur;
+                break;
+            }
+        }
+
+        // find download and upload speeds
+        var dlSpeed = 0, upSpeed = 0;
+        if (oldData) {
+            var now = new Date(),
+                seconds = (now - oldDate) / 1000;
+            dlSpeed = (data[3] - oldData[3]) / seconds;
+            upSpeed = (data[4] - oldData[4]) / seconds;
+        }
+
+        // create rowData
+        var rowData = [];
+        for (var j = 0; j < data.length; j++) {
+            rowData.push(data[j]);
+            if (j === 2) {
+                rowData.push(dlSpeed, upSpeed);
+            }
+        }
+
+        // create displayData
+        var displayData = [
+            createTD(data[0] + '<br />' + data[2], {title: data[1]}),
+            createTD(getSize(dlSpeed) + '/s', {right: true}),
+            createTD(getSize(upSpeed) + '/s', {right: true}),
+            createTD(getSize(data[3]), {right: true}),
+            createTD(getSize(data[4]), {right: true}),
+            createTD(getSize(data[5]), {right: true}),
+            createTD(getDateString(data[6])),
+            createTD(getDateString(data[7]))
+        ];
+
+        // display row data
+        var result = '';
+        for (var k = 0; k < displayData.length; k++) {
+            result += displayData[k];
+        }
+        result = createTR(result);
+        return [result, rowData];
+    }
+
+    /**
+     * Creates the HTML output based on the `data` and `totals` inputs
+     * @param data
+     * @param totals
+     * @returns {string} HTML output
+     */
+    function getDisplayData(data, totals) {
+        var result =
+            createTH('客户端', {id: 'thClient'}) +
+            createTH('下载带宽', {id: 'thDownload'}) +
+            createTH('上传带宽', {id: 'thUpload'}) +
+            createTH('总下载流量', {id: 'thTotalDown'}) +
+            createTH('总上传流量', {id: 'thTotalUp'}) +
+            createTH('流量合计', {id: 'thTotal'}) +
+            createTH('首次上线时间', {id: 'thFirstSeen'}) +
+            createTH('最后上线时间', {id: 'thLastSeen'});
+        result = createTR(result);
+        for (var k = 0; k < data.length; k++) {
+            result += data[k][0];
+        }
+        var totalsRow = createTH('总计');
+        for (var m = 0; m < totals.length; m++) {
+            var t = totals[m];
+            totalsRow += createTD(getSize(t) + (m < 2 ? '/s' : ''), {right: true});
+        }
+        result += createTR(totalsRow);
+        return result;
+    }
+
+    /**
+     * Calculates per host sub-totals and adds them in the data input
+     * @param data The data input
+     */
+    function aggregateHostTotals(data) {
+        if (!wrt.perHostTotals) return;
+
+        var curHost = 0, insertAt = 1;
+        while (curHost < data.length && insertAt < data.length) {
+            // grab the current hostname/mac, and walk the data looking for rows with the same host/mac
+            var hostName = data[curHost][1][0].toLowerCase();
+            for (var k = curHost + 1; k < data.length; k++) {
+                if (data[k][1][0].toLowerCase() === hostName) {
+                    // this is another row for the same host, group it with any other rows for this host
+                    data.splice(insertAt, 0, data.splice(k, 1)[0]);
+                    insertAt++;
+                }
+            }
+
+            // if we found more than one row for the host, add a subtotal row
+            if (insertAt > curHost + 1) {
+                var hostTotals = [data[curHost][1][0], '', '', 0, 0, 0, 0, 0];
+                for (var i = curHost; i < insertAt && i < data.length; i++) {
+                    for (var j = 3; j < hostTotals.length; j++) {
+                        hostTotals[j] += data[i][1][j];
+                    }
+                }
+                var hostTotalRow = createTH(data[curHost][1][0] + '<br/> (host total)', {title: data[curHost][1][1]});
+                for (var m = 3; m < hostTotals.length; m++) {
+                    var t = hostTotals[m];
+                    hostTotalRow += createTD(getSize(t) + (m < 5 ? '/s' : ''), {right: true});
+                }
+                hostTotalRow = createTR(hostTotalRow);
+                data.splice(insertAt, 0, [hostTotalRow, hostTotals]);
+            }
+            curHost = insertAt;
+            insertAt = curHost + 1;
+        }
+    }
+
+    /**
+     * Sorting function used to sort the `data`. Uses the global sort settings
+     * @param x first item to compare
+     * @param y second item to compare
+     * @returns {number} 1 for desc, -1 for asc, 0 for equal
+     */
+    function sortingFunction(x, y) {
+        // get data from global variable
+        var sortColumn = wrt.sortData.column, sortDirection = wrt.sortData.dir;
+        var a = x[1][sortColumn];
+        var b = y[1][sortColumn];
+        if (a === b) {
+            return 0;
+        } else if (sortDirection === 'desc') {
+            return a < b ? 1 : -1;
+        } else {
+            return a > b ? 1 : -1;
+        }
+    }
+
+    /**
+     * Sets the relevant global sort variables and re-renders the table to apply the new sorting
+     * @param elId
+     * @param column
+     */
+    function setSortColumn(elId, column) {
+        if (column === wrt.sortData.column) {
+            // same column clicked, switch direction
+            wrt.sortData.dir = wrt.sortData.dir === 'desc' ? 'asc' : 'desc';
+        } else {
+            // change sort column
+            wrt.sortData.column = column;
+            // reset sort direction
+            wrt.sortData.dir = 'desc';
+        }
+        wrt.sortData.elId = elId;
+
+        // render table data from cache
+        renderTableData(wrt.sortData.cache.data, wrt.sortData.cache.totals);
+    }
+
+    /**
+     * Registers the table events handlers for sorting when clicking the column headers
+     */
+    function registerTableEventHandlers() {
+        // note these ordinals are into the data array, not the table output
+        document.getElementById('thClient').addEventListener('click', function () {
+            setSortColumn(this.id, 0); // hostname
+        });
+        document.getElementById('thDownload').addEventListener('click', function () {
+            setSortColumn(this.id, 3); // dl speed
+        });
+        document.getElementById('thUpload').addEventListener('click', function () {
+            setSortColumn(this.id, 4); // ul speed
+        });
+        document.getElementById('thTotalDown').addEventListener('click', function () {
+            setSortColumn(this.id, 5); // total down
+        });
+        document.getElementById('thTotalUp').addEventListener('click', function () {
+            setSortColumn(this.id, 6); // total up
+        });
+        document.getElementById('thTotal').addEventListener('click', function () {
+            setSortColumn(this.id, 7); // total
+        });
+    }
+
+    /**
+     * Fetches and handles the updated `values` from the BE
+     * @param once If set to true, it re-schedules itself for execution based on selected interval
+     */
+    function receiveData(once) {
+        var ajax = new XMLHttpRequest();
+        ajax.onreadystatechange = function () {
+            // noinspection EqualityComparisonWithCoercionJS
+            if (this.readyState == 4 && this.status == 200) {
+                var re = /(var values = new Array[^;]*;)/,
+                    match = ajax.responseText.match(re);
+                if (!match) {
+                    handleError();
+                } else {
+                    // evaluate values
+                    eval(match[1]);
+                    //noinspection JSUnresolvedVariable
+                    var v = values;
+                    if (!v) {
+                        handleError();
+                    } else {
+                        handleValues(v);
+                        // set old values
+                        oldValues = v;
+                        // set old date
+                        oldDate = new Date();
+                        document.getElementById('updated').innerHTML = '数据更新时间 ' + dateToString(oldDate);
+                    }
+                }
+                var int = wrt.interval;
+                if (!once && int > 0) reschedule(int);
+            }
+        };
+        ajax.open('GET', basePath + '/usage_data', true);
+        ajax.send();
+    }
+
+    /**
+     * Registers DOM event listeners for user interaction
+     */
+    function addEventListeners() {
+        document.getElementById('intervalSelect').addEventListener('change', function () {
+            var int = wrt.interval = this.value;
+            if (int > 0) {
+                // it is not scheduled, schedule it
+                if (!wrt.isScheduled) {
+                    reschedule(int);
+                }
+            } else {
+                // stop the scheduling
+                stopSchedule();
+            }
+        });
+
+        document.getElementById('resetDatabase').addEventListener('click', function () {
+            if (confirm('This will delete the database file. Are you sure?')) {
+                var ajax = new XMLHttpRequest();
+                ajax.onreadystatechange = function () {
+                    // noinspection EqualityComparisonWithCoercionJS
+                    if (this.readyState == 4 && this.status == 204) {
+                        location.reload();
+                    }
+                };
+                ajax.open('GET', basePath + '/usage_reset', true);
+                ajax.send();
+            }
+        });
+
+        document.getElementById('perHostTotals').addEventListener('change', function () {
+            wrt.perHostTotals = !wrt.perHostTotals;
+        });
+    }
+
+    //----------------------
+    // AUTO-UPDATE
+    //----------------------
+
+    /**
+     * Stop auto-update schedule
+     */
+    function stopSchedule() {
+        window.clearTimeout(wrt.scheduleTimeout);
+        window.clearTimeout(wrt.updateTimeout);
+        setUpdateMessage('');
+        wrt.isScheduled = false;
+    }
+
+    /**
+     * Start auto-update schedule
+     * @param seconds
+     */
+    function reschedule(seconds) {
+        wrt.isScheduled = true;
+        seconds = seconds || 60;
+        updateSeconds(seconds);
+        wrt.scheduleTimeout = window.setTimeout(receiveData, seconds * 1000);
+    }
+
+    /**
+     * Sets the text of the `#updating` element
+     * @param msg
+     */
+    function setUpdateMessage(msg) {
+        document.getElementById('updating').innerHTML = msg;
+    }
+
+    /**
+     * Updates the 'Updating in X seconds' message
+     * @param start
+     */
+    function updateSeconds(start) {
+        setUpdateMessage('倒数 <b><font color="blue">' + start + '</font></b> 秒后刷新.');
+        if (start > 0) {
+            wrt.updateTimeout = window.setTimeout(function () {
+                updateSeconds(start - 1);
+            }, 1000);
+        }
+    }
+
+    //----------------------
+    // END AUTO-UPDATE
+    //----------------------
+
+    /**
+     * Check for dependency, and if all is well, run callback
+     * @param cb Callback function
+     */
+    function checkForDependency(cb) {
+        var ajax = new XMLHttpRequest();
+        ajax.onreadystatechange = function () {
+            // noinspection EqualityComparisonWithCoercionJS
+            if (this.readyState == 4 && this.status == 200) {
+                // noinspection EqualityComparisonWithCoercionJS
+                if (ajax.responseText == "1") {
+                    cb();
+                } else {
+                    alert("wrtbwmon is not installed!");
+                }
+            }
+        };
+        ajax.open('GET', basePath + '/check_dependency', true);
+        ajax.send();
+    }
+
+    checkForDependency(function () {
+        // register events
+        addEventListeners();
+        // Main entry point
+        receiveData();
+    });
+
+})();
diff --git a/package/lean/luci-app-wrtbwmon/luasrc/controller/wrtbwmon.lua b/package/lean/luci-app-wrtbwmon/luasrc/controller/wrtbwmon.lua
new file mode 100644
index 0000000000..25909c846d
--- /dev/null
+++ b/package/lean/luci-app-wrtbwmon/luasrc/controller/wrtbwmon.lua
@@ -0,0 +1,43 @@
+module("luci.controller.wrtbwmon", package.seeall)
+
+function index()
+    entry({"admin", "nlbw", "usage"}, alias("admin", "nlbw", "usage", "details"), _("Usage"), 60)
+    entry({"admin", "nlbw", "usage", "details"}, template("wrtbwmon"), _("Details"), 10).leaf=true
+    entry({"admin", "nlbw", "usage", "config"}, cbi("wrtbwmon/config"), _("Configuration"), 20).leaf=true
+    entry({"admin", "nlbw", "usage", "custom"}, form("wrtbwmon/custom"), _("User file"), 30).leaf=true
+    entry({"admin", "nlbw", "usage", "check_dependency"}, call("check_dependency")).dependent=true
+    entry({"admin", "nlbw", "usage", "usage_data"}, call("usage_data")).dependent=true
+    entry({"admin", "nlbw", "usage", "usage_reset"}, call("usage_reset")).dependent=true
+end
+
+function usage_database_path()
+    local cursor = luci.model.uci.cursor()
+    if cursor:get("wrtbwmon", "general", "persist") == "1" then
+        return "/etc/config/usage.db"
+    else
+        return "/tmp/usage.db"
+    end
+end
+
+function check_dependency()
+    local ret = "0"
+    if require("luci.model.ipkg").installed('iptables') then
+        ret = "1"
+    end
+    luci.http.prepare_content("text/plain")
+    luci.http.write(ret)
+end
+
+function usage_data()
+    local db = usage_database_path()
+    local publish_cmd = "wrtbwmon publish " .. db .. " /tmp/usage.htm /etc/config/wrtbwmon.user"
+    local cmd = "wrtbwmon update " .. db .. " && " .. publish_cmd .. " && cat /tmp/usage.htm"
+    luci.http.prepare_content("text/html")
+    luci.http.write(luci.sys.exec(cmd))
+end
+
+function usage_reset()
+    local db = usage_database_path()
+    local ret = luci.sys.call("wrtbwmon update " .. db .. " && rm " .. db)
+    luci.http.status(204)
+end
diff --git a/package/lean/luci-app-wrtbwmon/luasrc/model/cbi/wrtbwmon/config.lua b/package/lean/luci-app-wrtbwmon/luasrc/model/cbi/wrtbwmon/config.lua
new file mode 100644
index 0000000000..469d4f8f2c
--- /dev/null
+++ b/package/lean/luci-app-wrtbwmon/luasrc/model/cbi/wrtbwmon/config.lua
@@ -0,0 +1,18 @@
+local m = Map("wrtbwmon", translate("Details"))
+
+local s = m:section(NamedSection, "general", "wrtbwmon", translate("General settings"))
+
+local o = s:option(Flag, "persist", translate("Persist database"),
+    translate("Check this to persist the database file"))
+o.rmempty = false
+
+function o.write(self, section, value)
+    if value == '1' then
+        luci.sys.call("mv /tmp/usage.db /etc/config/usage.db")
+    elseif value == '0' then
+        luci.sys.call("mv /etc/config/usage.db /tmp/usage.db")
+    end
+    return Flag.write(self, section ,value)
+end
+
+return m
diff --git a/package/lean/luci-app-wrtbwmon/luasrc/model/cbi/wrtbwmon/custom.lua b/package/lean/luci-app-wrtbwmon/luasrc/model/cbi/wrtbwmon/custom.lua
new file mode 100644
index 0000000000..671879b4cc
--- /dev/null
+++ b/package/lean/luci-app-wrtbwmon/luasrc/model/cbi/wrtbwmon/custom.lua
@@ -0,0 +1,23 @@
+local USER_FILE_PATH = "/etc/config/wrtbwmon.user"
+
+local fs = require "nixio.fs"
+
+local f = SimpleForm("wrtbwmon", 
+    translate("Usage - Custom User File"), 
+    translate("This file is used to match users with MAC addresses and it must have the following format: 00:aa:bb:cc:ee:ff,username"))
+
+local o = f:field(Value, "_custom")
+
+o.template = "cbi/tvalue"
+o.rows = 20
+
+function o.cfgvalue(self, section)
+    return fs.readfile(USER_FILE_PATH)
+end
+
+function o.write(self, section, value)
+    value = value:gsub("\r\n?", "\n")
+    fs.writefile(USER_FILE_PATH, value)
+end
+
+return f
diff --git a/package/lean/luci-app-wrtbwmon/luasrc/view/wrtbwmon.htm b/package/lean/luci-app-wrtbwmon/luasrc/view/wrtbwmon.htm
new file mode 100644
index 0000000000..68713b1238
--- /dev/null
+++ b/package/lean/luci-app-wrtbwmon/luasrc/view/wrtbwmon.htm
@@ -0,0 +1,46 @@
+<%+header%>
+<h2><%=translate("Usage")%></h2>
+<p style="position:relative;">
+    <button id="resetDatabase" class="cbi-button" style="position:absolute;right:0;bottom:0;"><%=translate("Reset Database")%></button>
+</p>
+<p>
+    <small><span id="updated"></span> <span id="updating"></span></small>
+    <span style="float:right;text-align:right;">
+        <label>
+            <small><%=translate("Auto Refresh Interval")%></small>
+            <select id="intervalSelect" style="width:90px;height:20px;font-size:11px;">
+                <option value="-1"><%=translate("Disabled")%></option>
+                <option value="1">1 <%=translate("Second")%></option>
+                <option value="2">2 <%=translate("Seconds")%></option>
+                <option value="3">3 <%=translate("Seconds")%></option>
+                <option value="4">4 <%=translate("Seconds")%></option>
+                <option value="5" selected="selected">5 <%=translate("Seconds")%></option>
+                <option value="10">10 <%=translate("Seconds")%></option>
+                <option value="20">20 <%=translate("Seconds")%></option>
+                <option value="30">30 <%=translate("Seconds")%></option>
+                <option value="40">40 <%=translate("Seconds")%></option>
+                <option value="50">50 <%=translate("Seconds")%></option>
+                <option value="60">60 <%=translate("Seconds")%></option>
+                <option value="120">2 <%=translate("Minutes")%></option>
+                <option value="180">3 <%=translate("Minutes")%></option>
+                <option value="240">4 <%=translate("Minutes")%></option>
+                <option value="360">5 <%=translate("Minutes")%></option>
+            </select>
+        </label>
+        <br/>
+        <label>
+            <small><%=translate("Per-host Totals")%></small>
+            <input id="perHostTotals" type="checkbox" style="vertical-align:middle;"/>
+        </label>
+        <!-- label>
+            <small>Show per host aggregates only</small>
+            <input id="showPerHostTotalsOnly" type="checkbox"/>
+        </label -->
+    </span>
+</p>
+<table class="table">
+    <tbody id="tableBody"><tr><td><%=translate("Loading...")%></td></tr></tbody>
+</table>
+<!--suppress HtmlUnknownTarget -->
+<script src="/luci-static/wrtbwmon.js"></script>
+<%+footer%>
diff --git a/package/lean/luci-app-wrtbwmon/po/zh-cn/wrtbwmon.po b/package/lean/luci-app-wrtbwmon/po/zh-cn/wrtbwmon.po
new file mode 100644
index 0000000000..3eb050e3f4
--- /dev/null
+++ b/package/lean/luci-app-wrtbwmon/po/zh-cn/wrtbwmon.po
@@ -0,0 +1,56 @@
+msgid ""
+msgstr "Content-Type: text/plain; charset=UTF-8"
+
+msgid "Usage"
+msgstr "实时流量监测"
+
+msgid "Details"
+msgstr "详细信息"
+
+msgid "Configuration"
+msgstr "配置"
+
+msgid "User file"
+msgstr "自定义主机信息"
+
+msgid "Usage - Configuration"
+msgstr "详细设置"
+
+msgid "General settings"
+msgstr "通用设置"
+
+msgid "Persist database"
+msgstr "写入数据库到硬盘"
+
+msgid "Check this to persist the database file"
+msgstr "把统计数据写入 /etc/config 中避免重启或者升级后丢失"
+
+msgid "Usage - Custom User File"
+msgstr "自定义MAC地址对应的主机名"
+
+msgid "This file is used to match users with MAC addresses and it must have the following format: 00:aa:bb:cc:ee:ff,username"
+msgstr "每一行的格式为  00:aa:bb:cc:ee:ff,username"
+
+msgid "Reset Database"
+msgstr "重置数据库"
+
+msgid "Auto Refresh Interval"
+msgstr "自动刷新间隔"
+
+msgid "Disabled"
+msgstr "禁用"
+
+msgid "Second"
+msgstr "秒"
+
+msgid "Seconds"
+msgstr "秒"
+
+msgid "Minutes"
+msgstr "分钟"
+
+msgid "Per-host Totals"
+msgstr "合并每一客户端数据"
+
+msgid "Loading..."
+msgstr "加载中..."
diff --git a/package/lean/luci-app-wrtbwmon/root/etc/config/wrtbwmon b/package/lean/luci-app-wrtbwmon/root/etc/config/wrtbwmon
new file mode 100644
index 0000000000..419270dbab
--- /dev/null
+++ b/package/lean/luci-app-wrtbwmon/root/etc/config/wrtbwmon
@@ -0,0 +1,4 @@
+
+config wrtbwmon 'general'
+	option persist '0'
+
diff --git a/package/lean/luci-app-wrtbwmon/root/etc/init.d/wrtbwmon b/package/lean/luci-app-wrtbwmon/root/etc/init.d/wrtbwmon
new file mode 100755
index 0000000000..d57c09ae1d
--- /dev/null
+++ b/package/lean/luci-app-wrtbwmon/root/etc/init.d/wrtbwmon
@@ -0,0 +1,22 @@
+#!/bin/sh /etc/rc.common
+#
+# start/stop wrtbwmon bandwidth monitor
+
+### BEGIN INIT INFO
+# Provides:           wrtbwmon
+# Required-Start:     $network $local_fs $remote_fs
+# Required-Stop:      $local_fs $remote_fs
+# Default-Start:      2 3 4 5
+# Default-Stop:       0 1 6
+# Short-Description:  iptables-based bandwidth monitor
+### END INIT INFO
+
+START=91
+
+start(){
+    /usr/sbin/wrtbwmon setup /tmp/usage.db
+}
+
+stop(){
+    /usr/sbin/wrtbwmon remove
+}
diff --git a/package/lean/luci-app-wrtbwmon/root/etc/uci-defaults/luci-wrtbwmon b/package/lean/luci-app-wrtbwmon/root/etc/uci-defaults/luci-wrtbwmon
new file mode 100755
index 0000000000..bcb5b337f3
--- /dev/null
+++ b/package/lean/luci-app-wrtbwmon/root/etc/uci-defaults/luci-wrtbwmon
@@ -0,0 +1,14 @@
+#!/bin/sh
+
+uci -q batch <<-EOF >/dev/null
+	delete firewall.wrtbwmon
+	set firewall.wrtbwmon=include
+	set firewall.wrtbwmon.type=script
+	set firewall.wrtbwmon.path='/etc/wrtbwmon.include'
+	set firewall.wrtbwmon.reload=1
+  commit firewall
+EOF
+
+/etc/init.d/wrtbwmon enable
+/etc/init.d/wrtbwmon start
+exit 0
diff --git a/package/lean/luci-app-wrtbwmon/root/etc/wrtbwmon.include b/package/lean/luci-app-wrtbwmon/root/etc/wrtbwmon.include
new file mode 100755
index 0000000000..39bcf43a10
--- /dev/null
+++ b/package/lean/luci-app-wrtbwmon/root/etc/wrtbwmon.include
@@ -0,0 +1 @@
+/etc/init.d/wrtbwmon restart >/dev/null 2>&1
diff --git a/package/lean/luci-app-wrtbwmon/root/usr/sbin/readDB.awk b/package/lean/luci-app-wrtbwmon/root/usr/sbin/readDB.awk
new file mode 100755
index 0000000000..fe67e4ae8b
--- /dev/null
+++ b/package/lean/luci-app-wrtbwmon/root/usr/sbin/readDB.awk
@@ -0,0 +1,157 @@
+#!/usr/bin/awk
+
+function inInterfaces(host){
+    return(interfaces ~ "(^| )"host"($| )")
+}
+
+function newRule(arp_ip,
+    ipt_cmd){
+    # checking for existing rules shouldn't be necessary if newRule is
+    # always called after db is read, arp table is read, and existing
+    # iptables rules are read.
+    ipt_cmd="iptables -t mangle -j RETURN -s " arp_ip
+    system(ipt_cmd " -C RRDIPT_FORWARD 2>/dev/null || " ipt_cmd " -A RRDIPT_FORWARD")
+    ipt_cmd="iptables -t mangle -j RETURN -d " arp_ip
+    system(ipt_cmd " -C RRDIPT_FORWARD 2>/dev/null || " ipt_cmd " -A RRDIPT_FORWARD")
+}
+
+function total(i){
+    return(bw[i "/in"] + bw[i "/out"])
+}
+
+function date(    cmd, d){
+    cmd="date +%d-%m-%Y_%H:%M:%S"
+    cmd | getline d
+    close(cmd)
+    #!@todo could start a process with "while true; do date ...; done"
+    return(d)
+}
+
+BEGIN {
+    od=""
+    fid=1
+    debug=0
+    rrd=0
+}
+
+/^#/ { # get DB filename
+    FS=","
+    dbFile=FILENAME
+    next
+}
+
+# data from database; first file
+FNR==NR { #!@todo this doesn't help if the DB file is empty.
+    if($2 == "NA")
+	#!@todo could get interface IP here
+	n=$1
+    else
+	n=$2
+
+    hosts[n] = "" # add this host/interface to hosts
+    mac[n]        =  $1
+    ip[n]         =  $2
+    inter[n]      =  $3
+    bw[n "/in"]   =  $4
+    bw[n "/out"]  =  $5
+    firstDate[n]  =  $7
+    lastDate[n]   =  $8
+    next
+}
+
+# not triggered on the first file
+FNR==1 {
+    FS=" "
+    fid++ #!@todo use fid for all files; may be problematic for empty files
+    next
+}
+
+# arp: ip hw flags hw_addr mask device
+fid==2 {
+    #!@todo regex match IPs and MACs for sanity
+    arp_ip    = $1
+    arp_flags = $3
+    arp_mac   = $4
+    arp_dev   = $6
+    if(arp_flags != "0x0" && !(arp_ip in ip)){
+	if(debug)
+	    print "new host:", arp_ip, arp_flags > "/dev/stderr"
+	hosts[arp_ip] = ""
+	mac[arp_ip]   = arp_mac
+	ip[arp_ip]    = arp_ip
+	inter[arp_ip] = arp_dev
+	bw[arp_ip "/in"] = bw[arp_ip "/out"] = 0
+	firstDate[arp_ip] = lastDate[arp_ip] = date()
+    }
+    next
+}
+
+#!@todo could use mangle chain totals or tailing "unnact" rules to
+# account for data for new hosts from their first presence on the
+# network to rule creation. The "unnact" rules would have to be
+# maintained at the end of the list, and new rules would be inserted
+# at the top.
+
+# skip line
+# read the chain name and deal with the data accordingly
+fid==3 && $1 == "Chain"{
+    rrd=$2 ~ /RRDIPT_.*/
+    next
+}
+
+fid==3 && rrd && (NF < 9 || $1=="pkts"){ next }
+
+fid==3 && rrd { # iptables input
+    if($6 != "*"){
+	m=$6
+	n=m "/out"
+    } else if($7 != "*"){
+	m=$7
+	n=m "/in"
+    } else if($8 != "0.0.0.0/0"){
+	m=$8
+	n=m "/out"
+    } else { # $9 != "0.0.0.0/0"
+	m=$9
+	n=m "/in"
+    }
+
+    # remove host from array; any hosts left in array at END get new
+    # iptables rules
+
+    #!@todo this deletes a host if any rule exists; if only one
+    # directional rule is removed, this will not remedy the situation
+    delete hosts[m]
+
+    if($2 > 0){ # counted some bytes
+	if(mode == "diff" || mode == "noUpdate")
+	    print n, $2
+	if(mode!="noUpdate"){
+	    if(inInterfaces(m)){ # if label is an interface
+		if(!(m in mac)){ # if label was not in db (also not in
+				 # arp table, but interfaces won't be
+				 # there anyway)
+		    firstDate[m] = date()
+		    mac[m] = inter[m] = m
+		    ip[m] = "NA"
+		    bw[m "/in"]=bw[m "/out"]= 0
+		}
+	    }
+	    bw[n]+=$2
+	    lastDate[m] = date()
+	}
+    }
+}
+
+END {
+    if(mode=="noUpdate") exit
+    close(dbFile)
+    system("rm -f " dbFile)
+    print "#mac,ip,iface,in,out,total,first_date,last_date" > dbFile
+    OFS=","
+    for(i in mac)
+	print mac[i], ip[i], inter[i], bw[i "/in"], bw[i "/out"], total(i), firstDate[i], lastDate[i] > dbFile
+    close(dbFile)
+    # for hosts without rules
+    for(host in hosts) if(!inInterfaces(host)) newRule(host)
+}
diff --git a/package/lean/luci-app-wrtbwmon/root/usr/sbin/wrtbwmon b/package/lean/luci-app-wrtbwmon/root/usr/sbin/wrtbwmon
new file mode 100755
index 0000000000..b2c0b9a07a
--- /dev/null
+++ b/package/lean/luci-app-wrtbwmon/root/usr/sbin/wrtbwmon
@@ -0,0 +1,301 @@
+#!/bin/sh
+#
+# wrtbwmon: traffic logging tool for routers
+#
+# Peter Bailey (peter.eldridge.bailey+wrtbwmon AT gmail.com)
+#
+# Based on work by:
+# Emmanuel Brucy (e.brucy AT qut.edu.au)
+# Fredrik Erlandsson (erlis AT linux.nu)
+# twist - http://wiki.openwrt.org/RrdTrafficWatch
+
+trap "rm -f /tmp/*_$$.tmp; kill $$" INT
+binDir=/usr/sbin
+dataDir=/usr/share/wrtbwmon
+lockDir=/tmp/wrtbwmon.lock
+pidFile=$lockDir/pid
+networkFuncs=/lib/functions/network.sh
+uci=`which uci 2>/dev/null`
+nslookup=`which nslookup 2>/dev/null`
+nvram=`which nvram 2>/dev/null`
+
+chains='INPUT OUTPUT FORWARD'
+DEBUG=
+interfaces='eth0 tun0' # in addition to detected WAN
+DB=$2
+mode=
+
+# DNS server for reverse lookups provided in "DNS".
+# don't perform reverse DNS lookups by default
+DO_RDNS=${DNS-}
+
+header="#mac,ip,iface,in,out,total,first_date,last_date"
+
+createDbIfMissing()
+{
+    [ ! -f "$DB" ] && echo $header > "$DB"
+}
+
+checkDbArg()
+{
+    [ -z "$DB" ] && echo "ERROR: Missing argument 2 (database file)" && exit 1
+}
+
+checkDB()
+{
+    [ ! -f "$DB" ] && echo "ERROR: $DB does not exist" && exit 1
+    [ ! -w "$DB" ] && echo "ERROR: $DB is not writable" && exit 1   
+}
+
+checkWAN()
+{
+    [ -z "$wan" ] && echo "Warning: failed to detect WAN interface."
+}
+
+lookup()
+{
+    MAC=$1
+    IP=$2
+    userDB=$3
+    for USERSFILE in $userDB /tmp/dhcp.leases /tmp/dnsmasq.conf /etc/dnsmasq.conf /etc/hosts; do
+	[ -e "$USERSFILE" ] || continue
+	case $USERSFILE in
+	    /tmp/dhcp.leases )
+		USER=$(grep -i "$MAC" $USERSFILE | cut -f4 -s -d' ')
+		;;
+	    /etc/hosts )
+		USER=$(grep "^$IP " $USERSFILE | cut -f2 -s -d' ')
+		;;
+	    * )
+		USER=$(grep -i "$MAC" "$USERSFILE" | cut -f2 -s -d,)
+		;;
+	esac
+	[ "$USER" = "*" ] && USER=
+	[ -n "$USER" ] && break
+    done
+    if [ -n "$DO_RDNS" -a -z "$USER" -a "$IP" != "NA" -a -n "$nslookup" ]; then
+	USER=`$nslookup $IP $DNS | awk '!/server can/{if($4){print $4; exit}}' | sed -re 's/[.]$//'`
+    fi
+    [ -z "$USER" ] && USER=${MAC}
+    echo $USER
+}
+
+detectIF()
+{
+    if [ -f "$networkFuncs" ]; then
+	IF=`. $networkFuncs; network_get_device netdev $1; echo $netdev`
+	[ -n "$IF" ] && echo $IF && return
+    fi
+
+    if [ -n "$uci" -a -x "$uci" ]; then
+	IF=`$uci get network.${1}.ifname 2>/dev/null`
+	[ $? -eq 0 -a -n "$IF" ] && echo $IF && return
+    fi
+
+    if [ -n "$nvram" -a -x "$nvram" ]; then
+	IF=`$nvram get ${1}_ifname 2>/dev/null`
+	[ $? -eq 0 -a -n "$IF" ] && echo $IF && return
+    fi
+}
+
+detectLAN()
+{
+    [ -e /sys/class/net/br-lan ] && echo br-lan && return
+    lan=$(detectIF lan)
+    [ -n "$lan" ] && echo $lan && return
+}
+
+detectWAN()
+{
+    [ -n "$WAN_IF" ] && echo $WAN_IF && return
+    wan=$(detectIF wan)
+    [ -n "$wan" ] && echo $wan && return
+    wan=$(ip route show 2>/dev/null | grep default | sed -re '/^default/ s/default.*dev +([^ ]+).*/\1/')
+    [ -n "$wan" ] && echo $wan && return
+    [ -f "$networkFuncs" ] && wan=$(. $networkFuncs; network_find_wan wan; echo $wan)
+    [ -n "$wan" ] && echo $wan && return
+}
+
+lock()
+{
+    attempts=0
+    while [ $attempts -lt 10 ]; do
+	mkdir $lockDir 2>/dev/null && break
+	attempts=$((attempts+1))
+	pid=`cat $pidFile 2>/dev/null`
+	if [ -n "$pid" ]; then
+	    if [ -d "/proc/$pid" ]; then
+		[ -n "$DEBUG" ] && echo "WARNING: Lockfile detected but process $(cat $pidFile) does not exist !"
+		rm -rf $lockDir
+	    else
+		sleep 1
+	    fi
+	fi
+    done
+    mkdir $lockDir 2>/dev/null
+    echo $$ > $pidFile
+    [ -n "$DEBUG" ] && echo $$ "got lock after $attempts attempts"
+    trap '' INT
+}
+
+unlock()
+{
+    rm -rf $lockDir
+    [ -n "$DEBUG" ] && echo $$ "released lock"
+    trap "rm -f /tmp/*_$$.tmp; kill $$" INT
+}
+
+# chain
+newChain()
+{
+    chain=$1
+    # Create the RRDIPT_$chain chain (it doesn't matter if it already exists).
+    iptables -t mangle -N RRDIPT_$chain 2> /dev/null
+    
+    # Add the RRDIPT_$chain CHAIN to the $chain chain if not present
+    iptables -t mangle -C $chain -j RRDIPT_$chain 2>/dev/null
+    if [ $? -ne 0 ]; then
+	[ -n "$DEBUG" ] && echo "DEBUG: iptables chain misplaced, recreating it..."
+	iptables -t mangle -I $chain -j RRDIPT_$chain
+    fi
+}
+
+# chain tun
+newRuleIF()
+{
+    chain=$1
+    IF=$2
+    
+    #!@todo test
+    if [ "$chain" = "OUTPUT" ]; then
+	cmd="iptables -t mangle -o $IF -j RETURN"
+	eval $cmd " -C RRDIPT_$chain 2>/dev/null" || eval $cmd " -A RRDIPT_$chain"
+    elif [ "$chain" = "INPUT" ]; then
+	cmd="iptables -t mangle -i $IF -j RETURN"
+	eval $cmd " -C RRDIPT_$chain 2>/dev/null" || eval $cmd " -A RRDIPT_$chain"
+    fi
+}
+
+update()
+{
+    #!@todo could let readDB.awk handle this; that would place header
+    #!info in fewer places
+    createDbIfMissing
+    
+    checkDB
+    checkWAN
+
+    > /tmp/iptables_$$.tmp
+    lock
+    # only zero our own chains
+    for chain in $chains; do
+	iptables -nvxL RRDIPT_$chain -t mangle -Z >> /tmp/iptables_$$.tmp
+    done
+    # the iptables and readDB commands have to be separate. Otherwise,
+    # they will fight over iptables locks
+    awk -v mode="$mode" -v interfaces=\""$interfaces"\" -f $binDir/readDB.awk \
+	$DB \
+	/proc/net/arp \
+	/tmp/iptables_$$.tmp
+    unlock
+}
+
+############################################################
+
+case $1 in
+    "dump" )
+	checkDbArg
+	lock
+	tr ',' '\t' < "$DB"
+	unlock
+    ;;
+
+    "update" )
+	checkDbArg
+	wan=$(detectWAN)
+	interfaces="$interfaces $wan"
+	update
+	rm -f /tmp/*_$$.tmp
+	exit
+	;;
+
+    "publish" )
+	checkDbArg
+	[ -z "$3" ] && echo "ERROR: Missing argument 3 (output html file)" && exit 1
+	
+	# sort DB
+	lock
+
+	# busybox sort truncates numbers to 32 bits
+	grep -v '^#' $DB | awk -F, '{OFS=","; a=sprintf("%f",$4/1e6); $4=""; print a,$0}' | tr -s ',' | sort -rn | awk -F, '{OFS=",";$1=sprintf("%f",$1*1e6);print}' > /tmp/sorted_$$.tmp
+
+        # create HTML page
+	rm -f $3.tmp
+	cp $dataDir/usage.htm1 $3.tmp
+
+	#!@todo fix publishing
+	while IFS=, read PEAKUSAGE_IN MAC IP IFACE PEAKUSAGE_OUT TOTAL FIRSTSEEN LASTSEEN
+	do
+	    echo "
+new Array(\"$(lookup $MAC $IP $4)\",\"$MAC\",\"$IP\",
+$PEAKUSAGE_IN,$PEAKUSAGE_OUT,$TOTAL,\"$FIRSTSEEN\",\"$LASTSEEN\")," >> $3.tmp
+	done < /tmp/sorted_$$.tmp
+	echo "0);" >> $3.tmp
+	
+	sed "s/(date)/`date`/" < $dataDir/usage.htm2 >> $3.tmp
+	mv $3.tmp $3
+
+	unlock
+	
+	#Free some memory
+	rm -f /tmp/*_$$.tmp
+	;;
+    
+    "setup" )
+	checkDbArg
+	[ -w "$DB" ] && echo "Warning: using existing $DB"
+	createDbIfMissing
+	
+	for chain in $chains; do
+	    newChain $chain
+	done
+
+	#lan=$(detectLAN)
+	wan=$(detectWAN)
+	checkWAN
+	interfaces="$interfaces $wan"
+
+	# track local data
+	for chain in INPUT OUTPUT; do
+	    for interface in $interfaces; do
+		[ -n "$interface" ] && [ -e "/sys/class/net/$interface" ] && newRuleIF $chain $interface
+	    done
+	done
+
+	# this will add rules for hosts in arp table
+	update
+
+	rm -f /tmp/*_$$.tmp
+	;;
+
+    "remove" )
+	iptables-save | grep -v RRDIPT | iptables-restore
+	rm -rf "$lockDir"
+	;;
+
+    *)
+	echo \
+"Usage: $0 {setup|update|publish|remove} [options...]
+Options:
+   $0 setup database_file
+   $0 update database_file
+   $0 publish database_file path_of_html_report [user_file]
+Examples:
+   $0 setup /tmp/usage.db
+   $0 update /tmp/usage.db
+   $0 publish /tmp/usage.db /www/user/usage.htm /jffs/users.txt
+   $0 remove
+Note: [user_file] is an optional file to match users with MAC addresses.
+       Its format is \"00:MA:CA:DD:RE:SS,username\", with one entry per line."
+	;;
+esac
diff --git a/package/lean/luci-app-wrtbwmon/root/usr/share/wrtbwmon/usage.htm1 b/package/lean/luci-app-wrtbwmon/root/usr/share/wrtbwmon/usage.htm1
new file mode 100644
index 0000000000..1f0c342a7c
--- /dev/null
+++ b/package/lean/luci-app-wrtbwmon/root/usr/share/wrtbwmon/usage.htm1
@@ -0,0 +1,23 @@
+<html><head><title>Traffic</title>
+<script type="text/javascript">
+function getSize(size) {
+    var prefix=new Array("","k","M","G","T","P","E","Z"); var base=1000;
+    var pos=0;
+    while (size>base) {
+        size/=base; pos++;
+    }
+    if (pos > 2) precision=1000; else precision = 1;
+    return (Math.round(size*precision)/precision)+' '+prefix[pos];}
+</script></head>
+<body><h1>Total Usage:</h1>
+<table border="1">
+<tr bgcolor=silver>
+<th>User</th>
+<th>Download</th>
+<th>Upload</th>
+<th>Total</th>
+<th>First seen</th>
+<th>Last seen</th>
+</tr>
+<script type="text/javascript">
+var values = new Array(
diff --git a/package/lean/luci-app-wrtbwmon/root/usr/share/wrtbwmon/usage.htm2 b/package/lean/luci-app-wrtbwmon/root/usr/share/wrtbwmon/usage.htm2
new file mode 100644
index 0000000000..b85130b8a6
--- /dev/null
+++ b/package/lean/luci-app-wrtbwmon/root/usr/share/wrtbwmon/usage.htm2
@@ -0,0 +1,14 @@
+var totalIn = 0;
+var totalOut = 0;
+for (i=0; i < values.length-1; i++) {
+    totalIn += values[i][3];
+    totalOut += values[i][4];
+    document.write("<tr><td><div title=\"" + values[i][1] + " (" + values[i][2] + ")" + "\">" + values[i][0] + "</div></td>");
+    for (j=3; j < 6; j++)
+        document.write("<td>" + getSize(values[i][j]) + "</td>");
+    document.write("<td>" + values[i][6] + "</td><td>" + values[i][7] + "</td></tr>");
+}
+document.write("<tr><td>TOTAL</td><td>" + getSize(totalIn) + "</td><td>" + getSize(totalOut) + "</td><td>" + getSize(totalIn + totalOut) + "</td><td></td><td></td></tr>");
+</script></table>
+<br /><small>This page was generated on (date)</small>
+</body></html>
diff --git a/package/lean/luci-app-xlnetacc/Makefile b/package/lean/luci-app-xlnetacc/Makefile
new file mode 100644
index 0000000000..f60c4e4868
--- /dev/null
+++ b/package/lean/luci-app-xlnetacc/Makefile
@@ -0,0 +1,69 @@
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=luci-app-xlnetacc
+PKG_VERSION:=1.0.3
+PKG_RELEASE:=9
+
+PKG_LICENSE:=GPLv2
+PKG_MAINTAINER:=Sense <sensec@gmail.com>
+
+include $(INCLUDE_DIR)/package.mk
+
+define Package/$(PKG_NAME)
+	SECTION:=luci
+	CATEGORY:=LuCI
+	SUBMENU:=3. Applications
+	TITLE:=LuCI Support for XLNetAcc
+	PKGARCH:=all
+	DEPENDS:=+jshn +wget +openssl-util
+endef
+
+define Package/$(PKG_NAME)/description
+	LuCI Support for XLNetAcc.
+endef
+
+define Build/Prepare
+	$(foreach po,$(wildcard ${CURDIR}/files/luci/i18n/*.po), \
+		po2lmo $(po) $(PKG_BUILD_DIR)/$(patsubst %.po,%.lmo,$(notdir $(po)));)
+endef
+
+define Build/Configure
+endef
+
+define Build/Compile
+endef
+
+define Package/$(PKG_NAME)/postinst
+#!/bin/sh
+if [ -z "$${IPKG_INSTROOT}" ]; then
+	( . /etc/uci-defaults/luci-xlnetacc ) && rm -f /etc/uci-defaults/luci-xlnetacc
+fi
+exit 0
+endef
+
+define Package/$(PKG_NAME)/conffiles
+	/etc/config/xlnetacc
+endef
+
+define Package/$(PKG_NAME)/install
+	$(INSTALL_DIR) $(1)/usr/lib/lua/luci/i18n
+	$(INSTALL_DATA) $(PKG_BUILD_DIR)/xlnetacc.*.lmo $(1)/usr/lib/lua/luci/i18n/
+	$(INSTALL_DIR) $(1)/usr/lib/lua/luci/controller
+	$(INSTALL_DATA) ./files/luci/controller/*.lua $(1)/usr/lib/lua/luci/controller/
+	$(INSTALL_DIR) $(1)/usr/lib/lua/luci/model/cbi
+	$(INSTALL_DATA) ./files/luci/model/cbi/*.lua $(1)/usr/lib/lua/luci/model/cbi/
+	$(INSTALL_DIR) $(1)/usr/lib/lua/luci/view/xlnetacc
+	$(INSTALL_DATA) ./files/luci/view/xlnetacc/*.htm $(1)/usr/lib/lua/luci/view/xlnetacc/
+	$(INSTALL_DIR) $(1)/etc/config
+	$(INSTALL_CONF) ./files/root/etc/config/xlnetacc $(1)/etc/config/xlnetacc
+	$(INSTALL_DIR) $(1)/etc/init.d
+	$(INSTALL_BIN) ./files/root/etc/init.d/xlnetacc $(1)/etc/init.d/xlnetacc
+	$(INSTALL_DIR) $(1)/etc/hotplug.d/iface
+	$(INSTALL_BIN) ./files/root/etc/hotplug.d/iface/95-xlnetacc $(1)/etc/hotplug.d/iface/95-xlnetacc
+	$(INSTALL_DIR) $(1)/etc/uci-defaults
+	$(INSTALL_BIN) ./files/root/etc/uci-defaults/luci-xlnetacc $(1)/etc/uci-defaults/luci-xlnetacc
+	$(INSTALL_DIR) $(1)/usr/bin
+	$(INSTALL_BIN) ./files/root/usr/bin/xlnetacc.sh $(1)/usr/bin/xlnetacc.sh
+endef
+
+$(eval $(call BuildPackage,$(PKG_NAME)))
diff --git a/package/lean/luci-app-xlnetacc/files/luci/controller/xlnetacc.lua b/package/lean/luci-app-xlnetacc/files/luci/controller/xlnetacc.lua
new file mode 100644
index 0000000000..ab9d929473
--- /dev/null
+++ b/package/lean/luci-app-xlnetacc/files/luci/controller/xlnetacc.lua
@@ -0,0 +1,47 @@
+module("luci.controller.xlnetacc", package.seeall)
+
+function index()
+	if not nixio.fs.access("/etc/config/xlnetacc") then
+		return
+	end
+
+	entry({"admin", "services", "xlnetacc"},
+		firstchild(), _("XLNetAcc")).dependent = false
+
+	entry({"admin", "services", "xlnetacc", "general"},
+		cbi("xlnetacc"), _("Settings"), 1)
+
+	entry({"admin", "services", "xlnetacc", "log"},
+		template("xlnetacc/logview"), _("Log"), 2)
+
+	entry({"admin", "services", "xlnetacc", "status"}, call("action_status"))
+	entry({"admin", "services", "xlnetacc", "logdata"}, call("action_log"))
+end
+
+local function is_running()
+	return luci.sys.call("(ps | grep xlnetacc.sh | grep -v 'grep') >/dev/null" ) == 0
+end
+
+function action_status()
+	luci.http.prepare_content("application/json")
+	luci.http.write_json({
+		run_state = is_running(),
+		down_state = nixio.fs.readfile("/var/state/xlnetacc_down_state") or "",
+		up_state = nixio.fs.readfile("/var/state/xlnetacc_up_state") or ""
+	})
+end
+
+function action_log()
+	local uci = require "luci.model.uci".cursor()
+	local util = require "luci.util"
+	local log_data = { }
+
+	log_data.syslog = util.trim(util.exec("logread | grep xlnetacc"))
+	if uci:get("xlnetacc", "general", "logging") ~= "0" then
+		log_data.client = nixio.fs.readfile("/var/log/xlnetacc.log") or ""
+	end
+	uci:unload("xlnetacc")
+
+	luci.http.prepare_content("application/json")
+	luci.http.write_json(log_data)
+end
diff --git a/package/lean/luci-app-xlnetacc/files/luci/i18n/xlnetacc.zh-cn.lmo b/package/lean/luci-app-xlnetacc/files/luci/i18n/xlnetacc.zh-cn.lmo
new file mode 100644
index 0000000000..3c07641419
Binary files /dev/null and b/package/lean/luci-app-xlnetacc/files/luci/i18n/xlnetacc.zh-cn.lmo differ
diff --git a/package/lean/luci-app-xlnetacc/files/luci/i18n/xlnetacc.zh-cn.po b/package/lean/luci-app-xlnetacc/files/luci/i18n/xlnetacc.zh-cn.po
new file mode 100644
index 0000000000..80c6b9d23b
--- /dev/null
+++ b/package/lean/luci-app-xlnetacc/files/luci/i18n/xlnetacc.zh-cn.po
@@ -0,0 +1,92 @@
+msgid ""
+msgstr "Content-Type: text/plain; charset=UTF-8\n"
+
+msgid "XLNetAcc"
+msgstr "迅雷快鸟"
+
+msgid "XLNetAcc is a Thunder joint broadband operators launched a commitment to help users solve the low broadband, slow Internet access, poor Internet experience of professional-grade broadband upgrade software."
+msgstr "迅雷快鸟是迅雷联合宽带运营商推出的一款致力于帮助用户解决宽带低、网速慢、上网体验差的专业级宽带加速软件。"
+
+msgid "Settings"
+msgstr "设置"
+
+msgid "Log"
+msgstr "日志"
+
+msgid "Running Status"
+msgstr "运行状态"
+
+msgid "XLNetAcc Running Status"
+msgstr "快鸟运行状态"
+
+msgid "DownLink Upgrade Status"
+msgstr "下行提速状态"
+
+msgid "UpLink Upgrade Status"
+msgstr "上行提速状态"
+
+msgid "RUNNING"
+msgstr "运行中"
+
+msgid "NOT RUNNING"
+msgstr "未运行"
+
+msgid "No upgrade information"
+msgstr "暂无提速信息"
+
+msgid "General Settings"
+msgstr "基本设置"
+
+msgid "Enabled"
+msgstr "启用"
+
+msgid "Enable DownLink Upgrade"
+msgstr "开启下行提速"
+
+msgid "Enable UpLink Upgrade"
+msgstr "开启上行提速"
+
+msgid "Enable Logging"
+msgstr "启用日志记录"
+
+msgid "Enable verbose logging"
+msgstr "启用详细日志"
+
+msgid "Upgrade interface"
+msgstr "指定提速接口"
+
+msgid "XLNetAcc account"
+msgstr "迅雷快鸟帐号"
+
+msgid "XLNetAcc password"
+msgstr "迅雷快鸟密码"
+
+msgid "Does not store the plaintext password, automatically emptied after start."
+msgstr "不存储明文密码，启动后自动清空。"
+
+msgid "Encrypted password"
+msgstr "加密后的密码"
+
+msgid "Auto-generate in accordance with the plaintext password, do not modify it!"
+msgstr "根据明文密码自动生成，请勿修改！"
+
+msgid "Log Data"
+msgstr "日志数据"
+
+msgid "Loading..."
+msgstr "正在加载..."
+
+msgid "Refresh every 5 seconds."
+msgstr "每 5 秒刷新。"
+
+msgid "syslog:"
+msgstr "系统日志："
+
+msgid "log file:"
+msgstr "日志文件："
+
+msgid "No log data."
+msgstr "无日志数据。"
+
+msgid "Error get log data."
+msgstr "获取日志数据失败。"
diff --git a/package/lean/luci-app-xlnetacc/files/luci/model/cbi/xlnetacc.lua b/package/lean/luci-app-xlnetacc/files/luci/model/cbi/xlnetacc.lua
new file mode 100644
index 0000000000..9bef249ce9
--- /dev/null
+++ b/package/lean/luci-app-xlnetacc/files/luci/model/cbi/xlnetacc.lua
@@ -0,0 +1,36 @@
+local m, s, o
+local uci = luci.model.uci.cursor()
+
+m = Map("xlnetacc", "%s - %s" %{translate("XLNetAcc"), translate("Settings")}, translate("XLNetAcc is a Thunder joint broadband operators launched a commitment to help users solve the low broadband, slow Internet access, poor Internet experience of professional-grade broadband upgrade software."))
+m:append(Template("xlnetacc/status"))
+
+s = m:section(NamedSection, "general", "general", translate("General Settings"))
+s.anonymous = true
+s.addremove = false
+
+o = s:option(Flag, "enabled", translate("Enabled"))
+o.rmempty = false
+
+o = s:option(Flag, "down_acc", translate("Enable DownLink Upgrade"))
+
+o = s:option(Flag, "up_acc", translate("Enable UpLink Upgrade"))
+
+o = s:option(Flag, "logging", translate("Enable Logging"))
+o.default = "1"
+
+o = s:option(Flag, "verbose", translate("Enable verbose logging"))
+o:depends("logging", "1")
+
+o = s:option(ListValue, "network", translate("Upgrade interface"))
+uci:foreach("network", "interface", function(section)
+	if section[".name"] ~= "loopback" then
+		o:value(section[".name"])
+	end
+end)
+
+o = s:option(Value, "account", translate("XLNetAcc account"))
+
+o = s:option(Value, "password", translate("XLNetAcc password"))
+o.password = true
+
+return m
diff --git a/package/lean/luci-app-xlnetacc/files/luci/view/xlnetacc/logview.htm b/package/lean/luci-app-xlnetacc/files/luci/view/xlnetacc/logview.htm
new file mode 100644
index 0000000000..a07a27112f
--- /dev/null
+++ b/package/lean/luci-app-xlnetacc/files/luci/view/xlnetacc/logview.htm
@@ -0,0 +1,49 @@
+<% css = [[
+	#log_text {
+		padding: 10px;
+		text-align: left;
+		height: 500px;
+		overflow: auto;
+	}
+	#log_text pre {
+		word-break: break-all;
+		margin: 0;
+	}
+	.description {
+		color: #ffffff;
+		background-color: #0099ff;
+	}
+]]
+%>
+
+<%+header%>
+
+<div class="cbi-map">
+	<h2 name="content"><%:XLNetAcc%> - <%:Log Data%></h2>
+	<fieldset class="cbi-section">
+		<fieldset class="cbi-section-node">
+			<div id="log_text"><img src="<%=resource%>/icons/loading.gif" alt="<%:Loading...%>" style="vertical-align:middle" /><%:Collecting data...%></div>
+			<div style="text-align:right"><small><%:Refresh every 5 seconds.%></small></div>
+		</fieldset>
+	</fieldset>
+</div>
+
+<script type="text/javascript" src="<%=resource%>/cbi.js"></script>
+<script type="text/javascript">//<![CDATA[
+	var log_id = document.getElementById('log_text');
+	XHR.poll(5, '<%=luci.dispatcher.build_url("admin", "services", "xlnetacc", "logdata")%>', null, function(x, data) {
+		if ( log_id && data ) {
+			log_id.innerHTML = String.format(
+				'<pre>%s%s%s%s</pre>',
+				'<span class="description"><strong><%:syslog:%></strong></span><br/>',
+				data.syslog || '<%:No log data.%>',
+				'<br/><br/><span class="description"><strong><%:log file:%></strong></span><br/>',
+				data.client || '<%:No log data.%>'
+			);
+		} else if ( log_id ) {
+			log_id.innerHTML = '<strong><%:Error get log data.%></strong>';
+		}
+	});
+//]]></script>
+
+<%+footer%>
diff --git a/package/lean/luci-app-xlnetacc/files/luci/view/xlnetacc/status.htm b/package/lean/luci-app-xlnetacc/files/luci/view/xlnetacc/status.htm
new file mode 100644
index 0000000000..3da9c4422a
--- /dev/null
+++ b/package/lean/luci-app-xlnetacc/files/luci/view/xlnetacc/status.htm
@@ -0,0 +1,21 @@
+<fieldset class="cbi-section">
+	<legend><%:Running Status%></legend>
+	<table width="100%" cellspacing="10" id="_xlnetacc_status_table">
+		<tr><td width="33%"><%:XLNetAcc Running Status%></td><td id="_run_state"><em><%:Collecting data...%></em></td></tr>
+		<tr><td width="33%"><%:DownLink Upgrade Status%></td><td id="_down_state"><em><%:Collecting data...%></em></td></tr>
+		<tr><td width="33%"><%:UpLink Upgrade Status%></td><td id="_up_state"><em><%:Collecting data...%></em></td></tr>
+	</table>
+</fieldset>
+
+<script type="text/javascript">//<![CDATA[
+	var run_state = document.getElementById('_run_state');
+	var down_state = document.getElementById('_down_state');
+	var up_state = document.getElementById('_up_state');
+	XHR.poll(5, '<%=luci.dispatcher.build_url("admin", "services", "xlnetacc", "status")%>', null, function(x, status) {
+		if ( x && x.status == 200 ) {
+			run_state.innerHTML = status.run_state ? '<em><b><font color=green><%:RUNNING%></font></b></em>' : '<em><b><font color=red><%:NOT RUNNING%></font></b></em>';
+			down_state.innerHTML = status.down_state ? status.down_state : '<%:No upgrade information%>';
+			up_state.innerHTML = status.up_state ? status.up_state : '<%:No upgrade information%>';
+		}
+	});
+//]]></script>
diff --git a/package/lean/luci-app-xlnetacc/files/root/etc/config/xlnetacc b/package/lean/luci-app-xlnetacc/files/root/etc/config/xlnetacc
new file mode 100644
index 0000000000..4345070c4c
--- /dev/null
+++ b/package/lean/luci-app-xlnetacc/files/root/etc/config/xlnetacc
@@ -0,0 +1,5 @@
+
+config general 'general'
+	option enabled '0'
+	option network 'wan'
+
diff --git a/package/lean/luci-app-xlnetacc/files/root/etc/hotplug.d/iface/95-xlnetacc b/package/lean/luci-app-xlnetacc/files/root/etc/hotplug.d/iface/95-xlnetacc
new file mode 100755
index 0000000000..be0271ad8f
--- /dev/null
+++ b/package/lean/luci-app-xlnetacc/files/root/etc/hotplug.d/iface/95-xlnetacc
@@ -0,0 +1,13 @@
+#!/bin/sh
+
+/etc/init.d/xlnetacc enabled || exit 0
+[ "$INTERFACE" != "$(uci get xlnetacc.general.network)" ] && exit 0
+
+case "$ACTION" in
+	ifup)
+		/etc/init.d/xlnetacc start
+		;;
+	ifdown)
+		/etc/init.d/xlnetacc stop
+		;;
+esac
diff --git a/package/lean/luci-app-xlnetacc/files/root/etc/init.d/xlnetacc b/package/lean/luci-app-xlnetacc/files/root/etc/init.d/xlnetacc
new file mode 100755
index 0000000000..d156281136
--- /dev/null
+++ b/package/lean/luci-app-xlnetacc/files/root/etc/init.d/xlnetacc
@@ -0,0 +1,49 @@
+#!/bin/sh /etc/rc.common
+
+START=95
+STOP=10
+SERVICE_DAEMONIZE=1
+
+NAME=xlnetacc
+
+start() {
+	local retry=1
+	while pidof "${NAME}.sh" >/dev/null 2>&1; do
+		[ $retry -ge 10 ] && return 1 || let retry++
+		sleep 1
+	done
+
+	config_load "$NAME"
+	config_get_bool enabled "general" "enabled" 0
+	config_get_bool down_acc "general" "down_acc" 0
+	config_get_bool up_acc "general" "up_acc" 0
+	config_get network "general" "network"
+	config_get username "general" "account"
+	config_get password "general" "password"
+	( [ $enabled -eq 0 ] || [ $down_acc -eq 0 -a $up_acc -eq 0 ] || [ -z "$username" -o -z "$password" -o -z "$network" ] ) && return 2
+
+	logger -p "daemon.notice" -t "$NAME" "XLNetAcc is starting ..."
+	service_start /usr/bin/${NAME}.sh --start
+}
+
+stop() {
+	ps | grep xlnetacc.sh | grep -v 'grep' >/dev/null 2>&1 || return 1
+
+	local pid spid
+	for pid in $(ps | grep xlnetacc.sh | grep -v 'grep' | awk '{print $1}'); do
+		echo "Stop XLNetAcc process PID: $pid"
+		kill -9 $pid >/dev/null 2>&1
+		for spid in $(pgrep -P $pid "sleep"); do
+			echo "Stop XLNetAcc process SPID: $spid"
+			kill -9 $spid >/dev/null 2>&1
+		done
+	done
+	logger -p "daemon.notice" -t "$NAME" "XLNetAcc has stoped."
+	return 0
+}
+
+restart() {
+  rm -rf /tmp/state/xlnetacc*
+	stop && sleep 1
+	start
+}
diff --git a/package/lean/luci-app-xlnetacc/files/root/etc/uci-defaults/luci-xlnetacc b/package/lean/luci-app-xlnetacc/files/root/etc/uci-defaults/luci-xlnetacc
new file mode 100755
index 0000000000..632c026789
--- /dev/null
+++ b/package/lean/luci-app-xlnetacc/files/root/etc/uci-defaults/luci-xlnetacc
@@ -0,0 +1,22 @@
+#!/bin/sh
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@xlnetacc[-1]
+	add ucitrack xlnetacc
+	set ucitrack.@xlnetacc[-1].init=xlnetacc
+	commit ucitrack
+EOF
+
+general=$(uci -q get xlnetacc.@general[-1])
+if [ -z "$general" ]; then
+	uci -q add xlnetacc general
+fi
+if [ "$general"x != "general"x ]; then
+	uci -q batch <<-EOF >/dev/null
+		rename xlnetacc.@general[-1]="general"
+		commit xlnetacc
+	EOF
+fi
+
+rm -rf /tmp/luci-indexcache /tmp/luci-modulecache
+exit 0
diff --git a/package/lean/luci-app-xlnetacc/files/root/usr/bin/xlnetacc.sh b/package/lean/luci-app-xlnetacc/files/root/usr/bin/xlnetacc.sh
new file mode 100755
index 0000000000..57fac717aa
--- /dev/null
+++ b/package/lean/luci-app-xlnetacc/files/root/usr/bin/xlnetacc.sh
@@ -0,0 +1,670 @@
+#!/bin/sh
+
+# 声明常量
+readonly packageName='com.xunlei.vip.swjsq'
+readonly protocolVersion=200
+readonly businessType=68
+readonly sdkVersion='2.1.1.177662'
+readonly clientVersion='2.4.1.3'
+readonly agent_xl="android-async-http/xl-acc-sdk/version-$sdkVersion"
+readonly agent_down='okhttp/3.4.1'
+readonly agent_up='android-async-http/xl-acc-sdk/version-1.0.0.1'
+readonly client_type_down='android-swjsq'
+readonly client_type_up='android-uplink'
+
+# 声明全局变量
+_bind_ip=
+_http_cmd=
+_peerid=
+_devicesign=
+_userid=
+_loginkey=
+_sessionid=
+_portal_down=
+_portal_up=
+_dial_account=
+access_url=
+http_args=
+user_agent=
+link_cn=
+lasterr=
+sequence_xl=1000000
+sequence_down=$(( $(date +%s) / 6 ))
+sequence_up=$sequence_down
+
+# 包含用于解析 JSON 格式返回值的函数
+. /usr/share/libubox/jshn.sh
+
+# 读取 UCI 设置相关函数
+uci_get_by_name() {
+	local ret=$(uci get $NAME.$1.$2 2> /dev/null)
+	echo -n ${ret:=$3}
+}
+uci_get_by_type() {
+	local ret=$(uci get $NAME.@$1[-1].$2 2> /dev/null)
+	echo -n ${ret:=$3}
+}
+uci_get_by_bool() {
+	case $(uci_get_by_name "$1" "$2" "$3") in
+		1|on|true|yes|enabled) echo -n 1;;
+		*) echo -n 0;;
+	esac
+}
+
+# 日志和状态栏输出。1 日志文件, 2 系统日志, 4 详细模式, 8 下行状态栏, 16 上行状态栏, 32 失败状态
+_log() {
+	local msg=$1
+	local flag=$2
+	[ -z "$msg" ] && return
+	[ -z "$flag" ] && flag=1
+	local timestamp=$(date +'%Y/%m/%d %H:%M:%S')
+
+	[ $logging -eq 0 -a $(( $flag & 1 )) -ne 0 ] && flag=$(( $flag ^ 1 ))
+	if [ $verbose -eq 0 -a $(( $flag & 4 )) -ne 0 ]; then
+		[ $(( $flag & 1 )) -ne 0 ] && flag=$(( $flag ^ 1 ))
+		[ $(( $flag & 2 )) -ne 0 ] && flag=$(( $flag ^ 2 ))
+	fi
+	if [ $down_acc -eq 0 -a $(( $flag & 8 )) -ne 0 ]; then
+		flag=$(( $flag ^ 8 ))
+		[ $up_acc -ne 0 ] && flag=$(( $flag | 16 ))
+	fi
+	if [ $up_acc -eq 0 -a $(( $flag & 16 )) -ne 0 ]; then
+		flag=$(( $flag ^ 16 ))
+		[ $down_acc -ne 0 ] && flag=$(( $flag | 8 ))
+	fi
+
+	[ $(( $flag & 1 )) -ne 0 ] && echo "$timestamp $msg" >> $LOGFILE 2> /dev/null
+	[ $(( $flag & 2 )) -ne 0 ] && logger -p "daemon.info" -t "$NAME" "$msg"
+
+	[ $(( $flag & 32 )) -eq 0 ] && local color="green" || local color="red"
+	[ $(( $flag & 8 )) -ne 0 ] && echo -n "<font color=$color>$timestamp $msg</font>" > $down_state_file 2> /dev/null
+	[ $(( $flag & 16 )) -ne 0 ] && echo -n "<font color=$color>$timestamp $msg</font>" > $up_state_file 2> /dev/null
+}
+
+# 清理日志
+clean_log() {
+	[ $logging -eq 1 -a -f "$LOGFILE" ] || return
+	[ $(wc -l "$LOGFILE" | awk '{print $1}') -le 800 ] && return
+	_log "清理日志文件"
+	local logdata=$(tail -n 500 "$LOGFILE")
+	echo "$logdata" > $LOGFILE 2> /dev/null
+	unset logdata
+}
+
+# 获取接口IP地址
+get_bind_ip() {
+	json_cleanup; json_load "$(ubus call network.interface.$network status 2> /dev/null)" >/dev/null 2>&1
+	json_select "ipv4-address" >/dev/null 2>&1; json_select 1 >/dev/null 2>&1
+	json_get_var _bind_ip "address"
+	if [ -z "$_bind_ip" -o "$_bind_ip"x == "0.0.0.0"x ]; then
+		_log "获取网络 $network IP地址失败"
+		return 1
+	else
+		_log "绑定IP地址: $_bind_ip"
+		return 0
+	fi
+}
+
+# 定义基本 HTTP 命令和参数
+gen_http_cmd() {
+	_http_cmd="wget-ssl -nv -t 1 -T 5 -O - --no-check-certificate"
+	_http_cmd="$_http_cmd --bind-address=$_bind_ip"
+}
+
+# 生成设备标识
+gen_device_sign() {
+	local ifname macaddr
+	while : ; do
+		ifname=$(uci get "network.$network.ifname" 2> /dev/null)
+		[ "${ifname:0:1}" == "@" ] && network="${ifname:1}" || break
+	done
+	[ -z "$ifname" ] && { _log "获取网络 $network 信息出错"; return; }
+	json_cleanup; json_load "$(ubus call network.device status {\"name\":\"$ifname\"} 2> /dev/null)" >/dev/null 2>&1
+	json_get_var macaddr "macaddr"
+	[ -z "$macaddr" ] && { _log "获取网络 $network MAC地址出错"; return; }
+	macaddr=$(echo -n "$macaddr" | awk '{print toupper($0)}')
+
+	# 计算peerID
+	local fake_peerid=$(awk -F- '{print toupper($5)}' '/proc/sys/kernel/random/uuid')
+	readonly _peerid="${fake_peerid}004V"
+	_log "_peerid is $_peerid" $(( 1 | 4 ))
+
+	# 计算devicesign
+	# sign = div.10?.device_id + md5(sha1(packageName + businessType + md5(a protocolVersion specific GUID)))
+	local fake_device_id=$(echo -n "${macaddr//:/}" | openssl dgst -md5 | awk '{print $2}')
+	local fake_device_sign=$(echo -n "${fake_device_id}${packageName}${businessType}c7f21687eed3cdb400ca11fc2263c998" \
+		| openssl dgst -sha1 | awk '{print $2}')
+	readonly _devicesign="div101.${fake_device_id}"$(echo -n "$fake_device_sign" | openssl dgst -md5 | awk '{print $2}')
+	_log "_devicesign is $_devicesign" $(( 1 | 4 ))
+}
+
+# 快鸟帐号通用参数
+swjsq_json() {
+	let sequence_xl++
+	# 生成POST数据
+	json_init
+	json_add_string protocolVersion "$protocolVersion"
+	json_add_string sequenceNo "$sequence_xl"
+	json_add_string platformVersion '2'
+	json_add_string isCompressed '0'
+	json_add_string businessType "$businessType"
+	json_add_string clientVersion "$clientVersion"
+	json_add_string peerID "$_peerid"
+	json_add_string appName "ANDROID-$packageName"
+	json_add_string sdkVersion "${sdkVersion##*.}"
+	json_add_string devicesign "$_devicesign"
+	json_add_string deviceModel 'MI'
+	json_add_string deviceName 'Xiaomi Mi'
+	json_add_string OSVersion "7.1.1"
+}
+
+# 帐号登录
+swjsq_login() {
+	swjsq_json
+	if [ -z "$_userid" -o -z "$_loginkey" ]; then
+		access_url='https://mobile-login.xunlei.com/login'
+		json_add_string userName "$username"
+		json_add_string passWord "$password"
+		json_add_string verifyKey
+		json_add_string verifyCode
+	else
+		access_url='https://mobile-login.xunlei.com/loginkey'
+		json_add_string userName "$_userid"
+		json_add_string loginKey "$_loginkey"
+	fi
+	json_close_object
+
+	local ret=$($_http_cmd --user-agent="$agent_xl" "$access_url" --post-data="$(json_dump)")
+	case $? in
+		0)
+			_log "login is $ret" $(( 1 | 4 ))
+			json_cleanup; json_load "$ret" >/dev/null 2>&1
+			json_get_var lasterr "errorCode"
+			;;
+		2) lasterr=-2;;
+		4) lasterr=-3;;
+		*) lasterr=-1;;
+	esac
+
+	case ${lasterr:=-1} in
+		0)
+			json_get_var _userid "userID"
+			json_get_var _loginkey "loginKey"
+			json_get_var _sessionid "sessionID"
+			_log "_sessionid is $_sessionid" $(( 1 | 4 ))
+			local outmsg="帐号登录成功"; _log "$outmsg" $(( 1 | 8 ))
+			;;
+		15) # 身份信息已失效
+			_userid=; _loginkey=;;
+		-1)
+			local outmsg="帐号登录失败。迅雷服务器未响应，请稍候"; _log "$outmsg";;
+		-2)
+			local outmsg="Wget 参数解析错误，请更新 GNU Wget"; _log "$outmsg" $(( 1 | 8 | 32 ));;
+		-3)
+			local outmsg="Wget 网络通信失败，请稍候"; _log "$outmsg";;
+		*)
+			local errorDesc; json_get_var errorDesc "errorDesc"
+			local outmsg="帐号登录失败。错误代码: ${lasterr}"; \
+				[ -n "$errorDesc" ] && outmsg="${outmsg}，原因: $errorDesc"; _log "$outmsg" $(( 1 | 8 | 32 ));;
+	esac
+
+	[ $lasterr -eq 0 ] && return 0 || return 1
+}
+
+# 帐号注销
+swjsq_logout() {
+	swjsq_json
+	json_add_string userID "$_userid"
+	json_add_string sessionID "$_sessionid"
+	json_close_object
+
+	local ret=$($_http_cmd --user-agent="$agent_xl" 'https://mobile-login.xunlei.com/logout' --post-data="$(json_dump)")
+	_log "logout is $ret" $(( 1 | 4 ))
+	json_cleanup; json_load "$ret" >/dev/null 2>&1
+	json_get_var lasterr "errorCode"
+
+	case ${lasterr:=-1} in
+		0)
+			_sessionid=
+			local outmsg="帐号注销成功"; _log "$outmsg" $(( 1 | 8 ));;
+		-1)
+			local outmsg="帐号注销失败。迅雷服务器未响应，请稍候"; _log "$outmsg";;
+		*)
+			local errorDesc; json_get_var errorDesc "errorDesc"
+			local outmsg="帐号注销失败。错误代码: ${lasterr}"; \
+				[ -n "$errorDesc" ] && outmsg="${outmsg}，原因: $errorDesc"; _log "$outmsg" $(( 1 | 8 | 32 ));;
+	esac
+
+	[ $lasterr -eq 0 ] && return 0 || return 1
+}
+
+# 获取用户信息
+swjsq_getuserinfo() {
+	[ $1 -eq 1 ] && local _vasid=14 || local _vasid=33
+	swjsq_json
+	json_add_string userID "$_userid"
+	json_add_string sessionID "$_sessionid"
+	json_add_string vasid "$_vasid"
+	json_close_object
+
+	local ret=$($_http_cmd --user-agent="$agent_xl" 'https://mobile-login.xunlei.com/getuserinfo' --post-data="$(json_dump)")
+	_log "getuserinfo $1 is $ret" $(( 1 | 4 ))
+	json_cleanup; json_load "$ret" >/dev/null 2>&1
+	json_get_var lasterr "errorCode"
+
+	[ $1 -eq 1 ] && local outmsg="下行提速会员" || local outmsg="上行提速会员"
+	case ${lasterr:=-1} in
+		0)
+			local index vasid isVip isYear expireDate can_upgrade
+			json_select "vipList" >/dev/null 2>&1
+			while : ; do
+				json_select ${index:=1} >/dev/null 2>&1
+				[ $? -ne 0 ] && break
+				json_get_var vasid "vasid"
+				json_get_var isVip "isVip"
+				json_get_var isYear "isYear"
+				json_get_var expireDate "expireDate"
+				json_select ".." >/dev/null 2>&1
+				let index++
+				([ $1 -eq 1 -a ${vasid:-0} -eq 2 ] || [ ${vasid:-0} -eq $_vasid ]) && \
+					[ ${isVip:-0} -eq 1 -o ${isYear:-0} -eq 1 ] && { can_upgrade=1; break; }
+			done
+			if [ ${can_upgrade:-0} -eq 1 ]; then
+				outmsg="获取${outmsg}信息成功。会员到期时间：${expireDate:0:4}-${expireDate:4:2}-${expireDate:6:2}"; \
+					_log "$outmsg" $(( 1 | $1 * 8 ))
+			else
+				if [ ${#expireDate} -ge 8 ]; then
+					outmsg="${outmsg}已到期。会员到期时间：${expireDate:0:4}-${expireDate:4:2}-${expireDate:6:2}"
+				else
+					outmsg="${outmsg}无效"
+				fi
+				_log "$outmsg" $(( 1 | $1 * 8 | 32 ))
+				[ $1 -eq 1 ] && down_acc=0 || up_acc=0
+			fi
+			;;
+		-1)
+			outmsg="获取${outmsg}信息失败。迅雷服务器未响应，请稍候"; _log "$outmsg";;
+		*)
+			local errorDesc; json_get_var errorDesc "errorDesc"
+			outmsg="获取${outmsg}信息失败。错误代码: ${lasterr}"; \
+				[ -n "$errorDesc" ] && outmsg="${outmsg}，原因: $errorDesc"; _log "$outmsg" $(( 1 | $1 * 8 | 32 ));;
+	esac
+
+	[ $lasterr -eq 0 ] && return 0 || return 1
+}
+
+# 获取提速入口
+swjsq_portal() {
+	xlnetacc_var $1
+
+	[ $1 -eq 1 ] && access_url='http://api.portal.swjsq.vip.xunlei.com:81/v2/queryportal' || \
+		access_url='http://api.upportal.swjsq.vip.xunlei.com/v2/queryportal'
+	local ret=$($_http_cmd --user-agent="$user_agent" "$access_url")
+	_log "portal $1 is $ret" $(( 1 | 4 ))
+	json_cleanup; json_load "$ret" >/dev/null 2>&1
+	json_get_var lasterr "errno"
+
+	case ${lasterr:=-1} in
+		0)
+			local interface_ip interface_port province sp
+			json_get_var interface_ip "interface_ip"
+			json_get_var interface_port "interface_port"
+			json_get_var province "province_name"
+			json_get_var sp "sp_name"
+			if [ $1 -eq 1 ]; then
+				_portal_down="http://$interface_ip:$interface_port/v2"
+				_log "_portal_down is $_portal_down" $(( 1 | 4 ))
+			else
+				_portal_up="http://$interface_ip:$interface_port/v2"
+				_log "_portal_up is $_portal_up" $(( 1 | 4 ))
+			fi
+			local outmsg="获取${link_cn}提速入口成功"; \
+				[ -n "$province" -a -n "$sp" ] && outmsg="${outmsg}。运营商：${province}${sp}"; _log "$outmsg" $(( 1 | $1 * 8 ))
+			;;
+		-1)
+			local outmsg="获取${link_cn}提速入口失败。迅雷服务器未响应，请稍候"; _log "$outmsg";;
+		*)
+			local message; json_get_var message "message"
+			local outmsg="获取${link_cn}提速入口失败。错误代码: ${lasterr}"; \
+				[ -n "$message" ] && outmsg="${outmsg}，原因: $message"; _log "$outmsg" $(( 1 | $1 * 8 | 32 ));;
+	esac
+
+	[ $lasterr -eq 0 ] && return 0 || return 1
+}
+
+# 获取网络带宽信息
+isp_bandwidth() {
+	xlnetacc_var $1
+
+	local ret=$($_http_cmd --user-agent="$user_agent" "$access_url/bandwidth?${http_args%&dial_account=*}")
+	_log "bandwidth $1 is $ret" $(( 1 | 4 ))
+	json_cleanup; json_load "$ret" >/dev/null 2>&1
+	json_get_var lasterr "errno"
+
+	case ${lasterr:=-1} in
+		0)
+			# 获取带宽数据
+			local can_upgrade bind_dial_account dial_account stream cur_bandwidth max_bandwidth
+			[ $1 -eq 1 ] && stream="downstream" || stream="upstream"
+			json_get_var can_upgrade "can_upgrade"
+			json_get_var bind_dial_account "bind_dial_account"
+			json_get_var dial_account "dial_account"
+			json_select; json_select "bandwidth" >/dev/null 2>&1
+			json_get_var cur_bandwidth "$stream"
+			json_select; json_select "max_bandwidth" >/dev/null 2>&1
+			json_get_var max_bandwidth "$stream"
+			json_select
+			cur_bandwidth=$(expr ${cur_bandwidth:-0} / 1024)
+			max_bandwidth=$(expr ${max_bandwidth:-0} / 1024)
+
+			if [ -n "$bind_dial_account" -a "$bind_dial_account" != "$dial_account" ]; then
+				local outmsg="绑定宽带账号 $bind_dial_account 与当前宽带账号 $dial_account 不一致，请联系迅雷客服解绑（每月仅一次）"; \
+					_log "$outmsg" $(( 1 | 8 | 32 ))
+				down_acc=0; up_acc=0
+			elif [ $can_upgrade -eq 0 ]; then
+				local message; json_get_var message "richmessage"; [ -z "$message" ] && json_get_var message "message"
+				local outmsg="${link_cn}无法提速"; \
+					[ -n "$message" ] && outmsg="${outmsg}，原因: $message"; _log "$outmsg" $(( 1 | $1 * 8 | 32 ))
+				[ $1 -eq 1 ] && down_acc=0 || up_acc=0
+			elif [ $cur_bandwidth -ge $max_bandwidth ]; then
+				local outmsg="${link_cn}无需提速。当前带宽 ${cur_bandwidth}M，超过最大可提升带宽 ${max_bandwidth}M"; \
+					_log "$outmsg" $(( 1 | $1 * 8 ))
+				[ $1 -eq 1 ] && down_acc=0 || up_acc=0
+			else
+				if [ -z "$_dial_account" -a -n "$dial_account" ]; then
+					_dial_account=$dial_account
+					_log "_dial_account is $_dial_account" $(( 1 | 4 ))
+				fi
+				local outmsg="${link_cn}可以提速。当前带宽 ${cur_bandwidth}M，可提升至 ${max_bandwidth}M"; _log "$outmsg" $(( 1 | $1 * 8 ))
+			fi
+			;;
+		724) # 724 账号存在异常
+			lasterr=-2
+			local outmsg="获取${link_cn}网络带宽信息失败。原因: 您的账号存在异常，请联系迅雷客服反馈"; _log "$outmsg" $(( 1 | $1 * 8 | 32 ));;
+		3103) # 3103 线路暂不支持
+			lasterr=0
+			local province sp
+			json_get_var province "province_name"; json_get_var sp "sp_name"
+			local outmsg="${link_cn}无法提速。原因: ${province}${sp}线路暂不支持"; _log "$outmsg" $(( 1 | $1 * 8 | 32 ))
+			[ $1 -eq 1 ] && down_acc=0 || up_acc=0
+			;;
+		-1)
+			local outmsg="获取${link_cn}网络带宽信息失败。运营商服务器未响应，请稍候"; _log "$outmsg";;
+		*)
+			local message; json_get_var message "richmessage"; [ -z "$message" ] && json_get_var message "message"
+			local outmsg="获取${link_cn}网络带宽信息失败。错误代码: ${lasterr}"; \
+				[ -n "$message" ] && outmsg="${outmsg}，原因: $message"; _log "$outmsg" $(( 1 | $1 * 8 | 32 ));;
+	esac
+
+	[ $lasterr -eq 0 ] && return 0 || return 1
+}
+
+# 发送带宽提速信号
+isp_upgrade() {
+	xlnetacc_var $1
+
+	local ret=$($_http_cmd --user-agent="$user_agent" "$access_url/upgrade?$http_args")
+	_log "upgrade $1 is $ret" $(( 1 | 4 ))
+	json_cleanup; json_load "$ret" >/dev/null 2>&1
+	json_get_var lasterr "errno"
+
+	case ${lasterr:=-1} in
+		0)
+			local bandwidth
+			json_select "bandwidth" >/dev/null 2>&1
+			json_get_var bandwidth "downstream"
+			[ ${bandwidth:=0} -ge 1024 ] && bandwidth=$(( $bandwidth / 1024 ))
+			local outmsg="${link_cn}提速成功，带宽已提升到 ${bandwidth}M"; _log "$outmsg" $(( 1 | $1 * 8 ))
+			[ $1 -eq 1 ] && down_acc=2 || up_acc=2
+			;;
+		812) # 812 已处于提速状态
+			lasterr=0
+			local outmsg="${link_cn}提速成功，当前宽带已处于提速状态"; _log "$outmsg" $(( 1 | $1 * 8 ))
+			[ $1 -eq 1 ] && down_acc=2 || up_acc=2
+			;;
+		724) # 724 账号存在异常
+			lasterr=-2
+			local outmsg="${link_cn}提速失败。原因: 您的账号存在异常，请联系迅雷客服反馈"; _log "$outmsg" $(( 1 | $1 * 8 | 32 ));;
+		-1)
+			local outmsg="${link_cn}提速失败。运营商服务器未响应，请稍候"; _log "$outmsg";;
+		*)
+			local message; json_get_var message "richmessage"; [ -z "$message" ] && json_get_var message "message"
+			local outmsg="${link_cn}提速失败。错误代码: ${lasterr}"; \
+				[ -n "$message" ] && outmsg="${outmsg}，原因: $message"; _log "$outmsg" $(( 1 | $1 * 8 | 32 ));;
+	esac
+
+	[ $lasterr -eq 0 ] && return 0 || return 1
+}
+
+# 发送提速心跳信号
+isp_keepalive() {
+	xlnetacc_var $1
+
+	local ret=$($_http_cmd --user-agent="$user_agent" "$access_url/keepalive?$http_args")
+	_log "keepalive $1 is $ret" $(( 1 | 4 ))
+	json_cleanup; json_load "$ret" >/dev/null 2>&1
+	json_get_var lasterr "errno"
+
+	case ${lasterr:=-1} in
+		0)
+			local outmsg="${link_cn}心跳信号返回正常"; _log "$outmsg";;
+		513) # 513 提速通道不存在
+			lasterr=-2
+			local outmsg="${link_cn}提速超时，提速通道不存在"; _log "$outmsg" $(( 1 | $1 * 8 | 32 ));;
+		-1)
+			local outmsg="${link_cn}心跳信号发送失败。运营商服务器未响应，请稍候"; _log "$outmsg";;
+		*)
+			local message; json_get_var message "richmessage"; [ -z "$message" ] && json_get_var message "message"
+			local outmsg="${link_cn}提速失效。错误代码: ${lasterr}"; \
+				[ -n "$message" ] && outmsg="${outmsg}，原因: $message"; _log "$outmsg" $(( 1 | $1 * 8 | 32 ));;
+	esac
+
+	[ $lasterr -eq 0 ] && return 0 || return 1
+}
+
+# 发送带宽恢复信号
+isp_recover() {
+	xlnetacc_var $1
+
+	local ret=$($_http_cmd --user-agent="$user_agent" "$access_url/recover?$http_args")
+	_log "recover $1 is $ret" $(( 1 | 4 ))
+	json_cleanup; json_load "$ret" >/dev/null 2>&1
+	json_get_var lasterr "errno"
+
+	case ${lasterr:=-1} in
+		0)
+			local outmsg="${link_cn}带宽已恢复"; _log "$outmsg" $(( 1 | $1 * 8 ))
+			[ $1 -eq 1 ] && down_acc=1 || up_acc=1;;
+		-1)
+			local outmsg="${link_cn}带宽恢复失败。运营商服务器未响应，请稍候"; _log "$outmsg";;
+		*)
+			local message; json_get_var message "richmessage"; [ -z "$message" ] && json_get_var message "message"
+			local outmsg="${link_cn}带宽恢复失败。错误代码: ${lasterr}"; \
+				[ -n "$message" ] && outmsg="${outmsg}，原因: $message"; _log "$outmsg" $(( 1 | $1 * 8 | 32 ));;
+	esac
+
+	[ $lasterr -eq 0 ] && return 0 || return 1
+}
+
+# 查询提速信息，未使用
+isp_query() {
+	xlnetacc_var $1
+
+	local ret=$($_http_cmd --user-agent="$user_agent" "$access_url/query_try_info?$http_args")
+	_log "query_try_info $1 is $ret" $(( 1 | 4 ))
+	json_cleanup; json_load "$ret" >/dev/null 2>&1
+	json_get_var lasterr "errno"
+
+	[ $lasterr -eq 0 ] && return 0 || return 1
+}
+
+# 设置参数变量
+xlnetacc_var() {
+	if [ $1 -eq 1 ]; then
+		let sequence_down++
+		access_url=$_portal_down
+		http_args="sequence=${sequence_down}&client_type=${client_type_down}-${clientVersion}&client_version=${client_type_down//-/}-${clientVersion}&chanel=umeng-10900011&time_and=$(date +%s)000"
+		user_agent=$agent_down
+		link_cn="下行"
+	else
+		let sequence_up++
+		access_url=$_portal_up
+		http_args="sequence=${sequence_up}&client_type=${client_type_up}-${clientVersion}&client_version=${client_type_up//-/}-${clientVersion}"
+		user_agent=$agent_up
+		link_cn="上行"
+	fi
+	http_args="${http_args}&peerid=${_peerid}&userid=${_userid}&sessionid=${_sessionid}&user_type=1&os=android-7.1.1"
+	[ -n "$_dial_account" ] && http_args="${http_args}&dial_account=${_dial_account}"
+}
+
+# 重试循环
+xlnetacc_retry() {
+	if [ $# -ge 3 -a $3 -ne 0 ]; then
+		[ $2 -eq 1 -a $down_acc -ne $3 ] && return 0
+		[ $2 -eq 2 -a $up_acc -ne $3 ] && return 0
+	fi
+
+	local retry=1
+	while : ; do
+		lasterr=
+		eval $1 $2 && break # 成功
+		[ $# -ge 4 -a $retry -ge $4 ] && break || let retry++ # 重试超时
+		case $lasterr in
+			-1) sleep 5s;; # 服务器未响应
+			-2) break;; # 严重错误
+			*) sleep 3s;; # 其它错误
+		esac
+	done
+
+	[ ${lasterr:-0} -eq 0 ] && return 0 || return 1
+}
+
+# 注销已登录帐号
+xlnetacc_logout() {
+	[ -z "$_sessionid" ] && return 2
+	[ $# -ge 1 ] && local retry=$1 || local retry=1
+
+	xlnetacc_retry 'isp_recover' 1 2 $retry
+	xlnetacc_retry 'isp_recover' 2 2 $retry
+	xlnetacc_retry 'swjsq_logout' 0 0 $retry
+	[ $down_acc -ne 0 ] && down_acc=1; [ $up_acc -ne 0 ] && up_acc=1
+	_sessionid=; _dial_account=
+
+	[ $lasterr -eq 0 ] && return 0 || return 1
+}
+
+# 中止信号处理
+sigterm() {
+	_log "trap sigterm, exit" $(( 1 | 4 ))
+	xlnetacc_logout
+	rm -f "$down_state_file" "$up_state_file"
+	exit 0
+}
+
+# 初始化
+xlnetacc_init() {
+	[ "$1" != "--start" ] && return 1
+
+	# 防止重复启动
+	local pid
+	for pid in $(pidof "${0##*/}"); do
+		[ $pid -ne $$ ] && return 1
+	done
+
+	# 读取设置
+	readonly NAME=xlnetacc
+	readonly LOGFILE=/var/log/${NAME}.log
+	readonly down_state_file=/var/state/${NAME}_down_state
+	readonly up_state_file=/var/state/${NAME}_up_state
+	down_acc=$(uci_get_by_bool "general" "down_acc" 0)
+	up_acc=$(uci_get_by_bool "general" "up_acc" 0)
+	readonly logging=$(uci_get_by_bool "general" "logging" 1)
+	readonly verbose=$(uci_get_by_bool "general" "verbose" 0)
+	network=$(uci_get_by_name "general" "network" "wan")
+	readonly username=$(uci_get_by_name "general" "account")
+	readonly password=$(uci_get_by_name "general" "password")
+	local enabled=$(uci_get_by_bool "general" "enabled" 0)
+	([ $enabled -eq 0 ] || [ $down_acc -eq 0 -a $up_acc -eq 0 ] || [ -z "$username" -o -z "$password" -o -z "$network" ]) && return 2
+
+	[ $logging -eq 1 ] && [ ! -d /var/log ] && mkdir -p /var/log
+	[ -f "$LOGFILE" ] && _log "------------------------------"
+	_log "迅雷快鸟正在启动..."
+
+	# 检查外部调用工具
+	command -v wget-ssl >/dev/null || { _log "GNU Wget 未安装"; return 3; }
+	local opensslchk=$(echo -n 'openssl' | openssl dgst -sha1 | awk '{print $2}')
+	[ "$opensslchk" != 'c898fa1e7226427010e329971e82c669f8d8abb4' ] && { _log "openssl-util 未安装或计算错误"; return 3; }
+
+	# 捕获中止信号
+	trap 'sigterm' INT # Ctrl-C
+	trap 'sigterm' QUIT # Ctrl-\
+	trap 'sigterm' TERM # kill
+
+	# 生成设备标识
+	gen_device_sign
+	[ ${#_peerid} -ne 16 -o ${#_devicesign} -ne 71 ] && return 4
+
+	clean_log
+	[ -d /var/state ] || mkdir -p /var/state
+	return 0
+}
+
+# 程序主体
+xlnetacc_main() {
+	while : ; do
+		# 获取外网IP地址
+		xlnetacc_retry 'get_bind_ip'
+		gen_http_cmd
+
+		# 注销快鸟帐号
+		xlnetacc_logout 3 && sleep 3s
+
+		# 登录快鸟帐号
+		while : ; do
+			lasterr=
+			swjsq_login
+			case $lasterr in
+				0) break;; # 登录成功
+				-1) sleep 5s;; # 服务器未响应
+				-2) return 7;; # Wget 参数解析错误
+				-3) sleep 3s;; # Wget 网络通信失败
+				6) sleep 130m;; # 需要输入验证码
+				8) sleep 3m;; # 服务器系统维护
+				15) sleep 1s;; # 身份信息已失效
+				*) return 5;; # 登录失败
+			esac
+		done
+
+		# 获取用户信息
+		xlnetacc_retry 'swjsq_getuserinfo' 1 1
+		xlnetacc_retry 'swjsq_getuserinfo' 2 1
+		[ $down_acc -eq 0 -a $up_acc -eq 0 ] && break
+		# 获取提速入口
+		xlnetacc_retry 'swjsq_portal' 1 1
+		xlnetacc_retry 'swjsq_portal' 2 1
+		# 获取带宽信息
+		xlnetacc_retry 'isp_bandwidth' 1 1 10 || { sleep 3m; continue; }
+		xlnetacc_retry 'isp_bandwidth' 2 1 10 || { sleep 3m; continue; }
+		[ $down_acc -eq 0 -a $up_acc -eq 0 ] && break
+		# 带宽提速
+		xlnetacc_retry 'isp_upgrade' 1 1 10 || { sleep 3m; continue; }
+		xlnetacc_retry 'isp_upgrade' 2 1 10 || { sleep 3m; continue; }
+
+		# 心跳保持
+#		local retry=1
+		while : ; do
+			clean_log # 清理日志
+			sleep 10m
+#			[ $retry -ge 144 ] && break || let retry++ # 心跳最多保持24小时，144=24*60/10
+			xlnetacc_retry 'isp_keepalive' 1 2 5 || break
+			xlnetacc_retry 'isp_keepalive' 2 2 5 || break
+		done
+	done
+	xlnetacc_logout
+	_log "无法提速，迅雷快鸟已停止。"
+	return 6
+}
+
+# 程序入口
+xlnetacc_init "$@" && xlnetacc_main
+exit $?
diff --git a/package/lean/luci-app-xlnetacc/tools/po2lmo/Makefile b/package/lean/luci-app-xlnetacc/tools/po2lmo/Makefile
new file mode 100644
index 0000000000..ad2c133207
--- /dev/null
+++ b/package/lean/luci-app-xlnetacc/tools/po2lmo/Makefile
@@ -0,0 +1,12 @@
+
+INSTALL = install
+PREFIX  = /usr/bin
+
+po2lmo: src/po2lmo.o src/template_lmo.o
+	$(CC) $(LDFLAGS) -o src/po2lmo src/po2lmo.o src/template_lmo.o
+
+install:
+	$(INSTALL) -m 755 src/po2lmo $(PREFIX)
+
+clean:
+	$(RM) src/po2lmo src/*.o
diff --git a/package/lean/luci-app-xlnetacc/tools/po2lmo/src/po2lmo.c b/package/lean/luci-app-xlnetacc/tools/po2lmo/src/po2lmo.c
new file mode 100644
index 0000000000..0da792b680
--- /dev/null
+++ b/package/lean/luci-app-xlnetacc/tools/po2lmo/src/po2lmo.c
@@ -0,0 +1,247 @@
+/*
+ * lmo - Lua Machine Objects - PO to LMO conversion tool
+ *
+ *   Copyright (C) 2009-2012 Jo-Philipp Wich <xm@subsignal.org>
+ *
+ *  Licensed under the Apache License, Version 2.0 (the "License");
+ *  you may not use this file except in compliance with the License.
+ *  You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  Unless required by applicable law or agreed to in writing, software
+ *  distributed under the License is distributed on an "AS IS" BASIS,
+ *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *  See the License for the specific language governing permissions and
+ *  limitations under the License.
+ */
+
+#include "template_lmo.h"
+
+static void die(const char *msg)
+{
+	fprintf(stderr, "Error: %s\n", msg);
+	exit(1);
+}
+
+static void usage(const char *name)
+{
+	fprintf(stderr, "Usage: %s input.po output.lmo\n", name);
+	exit(1);
+}
+
+static void print(const void *ptr, size_t size, size_t nmemb, FILE *stream)
+{
+	if( fwrite(ptr, size, nmemb, stream) == 0 )
+		die("Failed to write stdout");
+}
+
+static int extract_string(const char *src, char *dest, int len)
+{
+	int pos = 0;
+	int esc = 0;
+	int off = -1;
+
+	for( pos = 0; (pos < strlen(src)) && (pos < len); pos++ )
+	{
+		if( (off == -1) && (src[pos] == '"') )
+		{
+			off = pos + 1;
+		}
+		else if( off >= 0 )
+		{
+			if( esc == 1 )
+			{
+				switch (src[pos])
+				{
+				case '"':
+				case '\\':
+					off++;
+					break;
+				}
+				dest[pos-off] = src[pos];
+				esc = 0;
+			}
+			else if( src[pos] == '\\' )
+			{
+				dest[pos-off] = src[pos];
+				esc = 1;
+			}
+			else if( src[pos] != '"' )
+			{
+				dest[pos-off] = src[pos];
+			}
+			else
+			{
+				dest[pos-off] = '\0';
+				break;
+			}
+		}
+	}
+
+	return (off > -1) ? strlen(dest) : -1;
+}
+
+static int cmp_index(const void *a, const void *b)
+{
+	uint32_t x = ((const lmo_entry_t *)a)->key_id;
+	uint32_t y = ((const lmo_entry_t *)b)->key_id;
+
+	if (x < y)
+		return -1;
+	else if (x > y)
+		return 1;
+
+	return 0;
+}
+
+static void print_uint32(uint32_t x, FILE *out)
+{
+	uint32_t y = htonl(x);
+	print(&y, sizeof(uint32_t), 1, out);
+}
+
+static void print_index(void *array, int n, FILE *out)
+{
+	lmo_entry_t *e;
+
+	qsort(array, n, sizeof(*e), cmp_index);
+
+	for (e = array; n > 0; n--, e++)
+	{
+		print_uint32(e->key_id, out);
+		print_uint32(e->val_id, out);
+		print_uint32(e->offset, out);
+		print_uint32(e->length, out);
+	}
+}
+
+int main(int argc, char *argv[])
+{
+	char line[4096];
+	char key[4096];
+	char val[4096];
+	char tmp[4096];
+	int state  = 0;
+	int offset = 0;
+	int length = 0;
+	int n_entries = 0;
+	void *array = NULL;
+	lmo_entry_t *entry = NULL;
+	uint32_t key_id, val_id;
+
+	FILE *in;
+	FILE *out;
+
+	if( (argc != 3) || ((in = fopen(argv[1], "r")) == NULL) || ((out = fopen(argv[2], "w")) == NULL) )
+		usage(argv[0]);
+
+	memset(line, 0, sizeof(key));
+	memset(key, 0, sizeof(val));
+	memset(val, 0, sizeof(val));
+
+	while( (NULL != fgets(line, sizeof(line), in)) || (state >= 2 && feof(in)) )
+	{
+		if( state == 0 && strstr(line, "msgid \"") == line )
+		{
+			switch(extract_string(line, key, sizeof(key)))
+			{
+				case -1:
+					die("Syntax error in msgid");
+				case 0:
+					state = 1;
+					break;
+				default:
+					state = 2;
+			}
+		}
+		else if( state == 1 || state == 2 )
+		{
+			if( strstr(line, "msgstr \"") == line || state == 2 )
+			{
+				switch(extract_string(line, val, sizeof(val)))
+				{
+					case -1:
+						state = 4;
+						break;
+					default:
+						state = 3;
+				}
+			}
+			else
+			{
+				switch(extract_string(line, tmp, sizeof(tmp)))
+				{
+					case -1:
+						state = 2;
+						break;
+					default:
+						strcat(key, tmp);
+				}
+			}
+		}
+		else if( state == 3 )
+		{
+			switch(extract_string(line, tmp, sizeof(tmp)))
+			{
+				case -1:
+					state = 4;
+					break;
+				default:
+					strcat(val, tmp);
+			}
+		}
+
+		if( state == 4 )
+		{
+			if( strlen(key) > 0 && strlen(val) > 0 )
+			{
+				key_id = sfh_hash(key, strlen(key));
+				val_id = sfh_hash(val, strlen(val));
+
+				if( key_id != val_id )
+				{
+					n_entries++;
+					array = realloc(array, n_entries * sizeof(lmo_entry_t));
+					entry = (lmo_entry_t *)array + n_entries - 1;
+
+					if (!array)
+						die("Out of memory");
+
+					entry->key_id = key_id;
+					entry->val_id = val_id;
+					entry->offset = offset;
+					entry->length = strlen(val);
+
+					length = strlen(val) + ((4 - (strlen(val) % 4)) % 4);
+
+					print(val, length, 1, out);
+					offset += length;
+				}
+			}
+
+			state = 0;
+			memset(key, 0, sizeof(key));
+			memset(val, 0, sizeof(val));
+		}
+
+		memset(line, 0, sizeof(line));
+	}
+
+	print_index(array, n_entries, out);
+
+	if( offset > 0 )
+	{
+		print_uint32(offset, out);
+		fsync(fileno(out));
+		fclose(out);
+	}
+	else
+	{
+		fclose(out);
+		unlink(argv[2]);
+	}
+
+	fclose(in);
+	return(0);
+}
diff --git a/package/lean/luci-app-xlnetacc/tools/po2lmo/src/template_lmo.c b/package/lean/luci-app-xlnetacc/tools/po2lmo/src/template_lmo.c
new file mode 100644
index 0000000000..27205a7228
--- /dev/null
+++ b/package/lean/luci-app-xlnetacc/tools/po2lmo/src/template_lmo.c
@@ -0,0 +1,328 @@
+/*
+ * lmo - Lua Machine Objects - Base functions
+ *
+ *   Copyright (C) 2009-2010 Jo-Philipp Wich <xm@subsignal.org>
+ *
+ *  Licensed under the Apache License, Version 2.0 (the "License");
+ *  you may not use this file except in compliance with the License.
+ *  You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  Unless required by applicable law or agreed to in writing, software
+ *  distributed under the License is distributed on an "AS IS" BASIS,
+ *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *  See the License for the specific language governing permissions and
+ *  limitations under the License.
+ */
+
+#include "template_lmo.h"
+
+/*
+ * Hash function from http://www.azillionmonkeys.com/qed/hash.html
+ * Copyright (C) 2004-2008 by Paul Hsieh
+ */
+
+uint32_t sfh_hash(const char *data, int len)
+{
+	uint32_t hash = len, tmp;
+	int rem;
+
+	if (len <= 0 || data == NULL) return 0;
+
+	rem = len & 3;
+	len >>= 2;
+
+	/* Main loop */
+	for (;len > 0; len--) {
+		hash  += sfh_get16(data);
+		tmp    = (sfh_get16(data+2) << 11) ^ hash;
+		hash   = (hash << 16) ^ tmp;
+		data  += 2*sizeof(uint16_t);
+		hash  += hash >> 11;
+	}
+
+	/* Handle end cases */
+	switch (rem) {
+		case 3: hash += sfh_get16(data);
+			hash ^= hash << 16;
+			hash ^= data[sizeof(uint16_t)] << 18;
+			hash += hash >> 11;
+			break;
+		case 2: hash += sfh_get16(data);
+			hash ^= hash << 11;
+			hash += hash >> 17;
+			break;
+		case 1: hash += *data;
+			hash ^= hash << 10;
+			hash += hash >> 1;
+	}
+
+	/* Force "avalanching" of final 127 bits */
+	hash ^= hash << 3;
+	hash += hash >> 5;
+	hash ^= hash << 4;
+	hash += hash >> 17;
+	hash ^= hash << 25;
+	hash += hash >> 6;
+
+	return hash;
+}
+
+uint32_t lmo_canon_hash(const char *str, int len)
+{
+	char res[4096];
+	char *ptr, prev;
+	int off;
+
+	if (!str || len >= sizeof(res))
+		return 0;
+
+	for (prev = ' ', ptr = res, off = 0; off < len; prev = *str, off++, str++)
+	{
+		if (isspace(*str))
+		{
+			if (!isspace(prev))
+				*ptr++ = ' ';
+		}
+		else
+		{
+			*ptr++ = *str;
+		}
+	}
+
+	if ((ptr > res) && isspace(*(ptr-1)))
+		ptr--;
+
+	return sfh_hash(res, ptr - res);
+}
+
+lmo_archive_t * lmo_open(const char *file)
+{
+	int in = -1;
+	uint32_t idx_offset = 0;
+	struct stat s;
+
+	lmo_archive_t *ar = NULL;
+
+	if (stat(file, &s) == -1)
+		goto err;
+
+	if ((in = open(file, O_RDONLY)) == -1)
+		goto err;
+
+	if ((ar = (lmo_archive_t *)malloc(sizeof(*ar))) != NULL)
+	{
+		memset(ar, 0, sizeof(*ar));
+
+		ar->fd     = in;
+		ar->size = s.st_size;
+
+		fcntl(ar->fd, F_SETFD, fcntl(ar->fd, F_GETFD) | FD_CLOEXEC);
+
+		if ((ar->mmap = mmap(NULL, ar->size, PROT_READ, MAP_SHARED, ar->fd, 0)) == MAP_FAILED)
+			goto err;
+
+		idx_offset = ntohl(*((const uint32_t *)
+		                     (ar->mmap + ar->size - sizeof(uint32_t))));
+
+		if (idx_offset >= ar->size)
+			goto err;
+
+		ar->index  = (lmo_entry_t *)(ar->mmap + idx_offset);
+		ar->length = (ar->size - idx_offset - sizeof(uint32_t)) / sizeof(lmo_entry_t);
+		ar->end    = ar->mmap + ar->size;
+
+		return ar;
+	}
+
+err:
+	if (in > -1)
+		close(in);
+
+	if (ar != NULL)
+	{
+		if ((ar->mmap != NULL) && (ar->mmap != MAP_FAILED))
+			munmap(ar->mmap, ar->size);
+
+		free(ar);
+	}
+
+	return NULL;
+}
+
+void lmo_close(lmo_archive_t *ar)
+{
+	if (ar != NULL)
+	{
+		if ((ar->mmap != NULL) && (ar->mmap != MAP_FAILED))
+			munmap(ar->mmap, ar->size);
+
+		close(ar->fd);
+		free(ar);
+
+		ar = NULL;
+	}
+}
+
+
+lmo_catalog_t *_lmo_catalogs = NULL;
+lmo_catalog_t *_lmo_active_catalog = NULL;
+
+int lmo_load_catalog(const char *lang, const char *dir)
+{
+	DIR *dh = NULL;
+	char pattern[16];
+	char path[PATH_MAX];
+	struct dirent *de = NULL;
+
+	lmo_archive_t *ar = NULL;
+	lmo_catalog_t *cat = NULL;
+
+	if (!lmo_change_catalog(lang))
+		return 0;
+
+	if (!dir || !(dh = opendir(dir)))
+		goto err;
+
+	if (!(cat = malloc(sizeof(*cat))))
+		goto err;
+
+	memset(cat, 0, sizeof(*cat));
+
+	snprintf(cat->lang, sizeof(cat->lang), "%s", lang);
+	snprintf(pattern, sizeof(pattern), "*.%s.lmo", lang);
+
+	while ((de = readdir(dh)) != NULL)
+	{
+		if (!fnmatch(pattern, de->d_name, 0))
+		{
+			snprintf(path, sizeof(path), "%s/%s", dir, de->d_name);
+			ar = lmo_open(path);
+
+			if (ar)
+			{
+				ar->next = cat->archives;
+				cat->archives = ar;
+			}
+		}
+	}
+
+	closedir(dh);
+
+	cat->next = _lmo_catalogs;
+	_lmo_catalogs = cat;
+
+	if (!_lmo_active_catalog)
+		_lmo_active_catalog = cat;
+
+	return 0;
+
+err:
+	if (dh) closedir(dh);
+	if (cat) free(cat);
+
+	return -1;
+}
+
+int lmo_change_catalog(const char *lang)
+{
+	lmo_catalog_t *cat;
+
+	for (cat = _lmo_catalogs; cat; cat = cat->next)
+	{
+		if (!strncmp(cat->lang, lang, sizeof(cat->lang)))
+		{
+			_lmo_active_catalog = cat;
+			return 0;
+		}
+	}
+
+	return -1;
+}
+
+static lmo_entry_t * lmo_find_entry(lmo_archive_t *ar, uint32_t hash)
+{
+	unsigned int m, l, r;
+	uint32_t k;
+
+	l = 0;
+	r = ar->length - 1;
+
+	while (1)
+	{
+		m = l + ((r - l) / 2);
+
+		if (r < l)
+			break;
+
+		k = ntohl(ar->index[m].key_id);
+
+		if (k == hash)
+			return &ar->index[m];
+
+		if (k > hash)
+		{
+			if (!m)
+				break;
+
+			r = m - 1;
+		}
+		else
+		{
+			l = m + 1;
+		}
+	}
+
+	return NULL;
+}
+
+int lmo_translate(const char *key, int keylen, char **out, int *outlen)
+{
+	uint32_t hash;
+	lmo_entry_t *e;
+	lmo_archive_t *ar;
+
+	if (!key || !_lmo_active_catalog)
+		return -2;
+
+	hash = lmo_canon_hash(key, keylen);
+
+	for (ar = _lmo_active_catalog->archives; ar; ar = ar->next)
+	{
+		if ((e = lmo_find_entry(ar, hash)) != NULL)
+		{
+			*out = ar->mmap + ntohl(e->offset);
+			*outlen = ntohl(e->length);
+			return 0;
+		}
+	}
+
+	return -1;
+}
+
+void lmo_close_catalog(const char *lang)
+{
+	lmo_archive_t *ar, *next;
+	lmo_catalog_t *cat, *prev;
+
+	for (prev = NULL, cat = _lmo_catalogs; cat; prev = cat, cat = cat->next)
+	{
+		if (!strncmp(cat->lang, lang, sizeof(cat->lang)))
+		{
+			if (prev)
+				prev->next = cat->next;
+			else
+				_lmo_catalogs = cat->next;
+
+			for (ar = cat->archives; ar; ar = next)
+			{
+				next = ar->next;
+				lmo_close(ar);
+			}
+
+			free(cat);
+			break;
+		}
+	}
+}
diff --git a/package/lean/luci-app-xlnetacc/tools/po2lmo/src/template_lmo.h b/package/lean/luci-app-xlnetacc/tools/po2lmo/src/template_lmo.h
new file mode 100644
index 0000000000..57f59aa56b
--- /dev/null
+++ b/package/lean/luci-app-xlnetacc/tools/po2lmo/src/template_lmo.h
@@ -0,0 +1,92 @@
+/*
+ * lmo - Lua Machine Objects - General header
+ *
+ *   Copyright (C) 2009-2012 Jo-Philipp Wich <xm@subsignal.org>
+ *
+ *  Licensed under the Apache License, Version 2.0 (the "License");
+ *  you may not use this file except in compliance with the License.
+ *  You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  Unless required by applicable law or agreed to in writing, software
+ *  distributed under the License is distributed on an "AS IS" BASIS,
+ *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *  See the License for the specific language governing permissions and
+ *  limitations under the License.
+ */
+
+#ifndef _TEMPLATE_LMO_H_
+#define _TEMPLATE_LMO_H_
+
+#include <stdlib.h>
+#include <stdio.h>
+#include <stdint.h>
+#include <string.h>
+#include <fcntl.h>
+#include <sys/stat.h>
+#include <sys/mman.h>
+#include <arpa/inet.h>
+#include <unistd.h>
+#include <errno.h>
+#include <fnmatch.h>
+#include <dirent.h>
+#include <ctype.h>
+#include <limits.h>
+
+#if (defined(__GNUC__) && defined(__i386__))
+#define sfh_get16(d) (*((const uint16_t *) (d)))
+#else
+#define sfh_get16(d) ((((uint32_t)(((const uint8_t *)(d))[1])) << 8)\
+					   +(uint32_t)(((const uint8_t *)(d))[0]) )
+#endif
+
+
+struct lmo_entry {
+	uint32_t key_id;
+	uint32_t val_id;
+	uint32_t offset;
+	uint32_t length;
+} __attribute__((packed));
+
+typedef struct lmo_entry lmo_entry_t;
+
+
+struct lmo_archive {
+	int         fd;
+	int	        length;
+	uint32_t    size;
+	lmo_entry_t *index;
+	char        *mmap;
+	char		*end;
+	struct lmo_archive *next;
+};
+
+typedef struct lmo_archive lmo_archive_t;
+
+
+struct lmo_catalog {
+	char lang[6];
+	struct lmo_archive *archives;
+	struct lmo_catalog *next;
+};
+
+typedef struct lmo_catalog lmo_catalog_t;
+
+
+uint32_t sfh_hash(const char *data, int len);
+uint32_t lmo_canon_hash(const char *data, int len);
+
+lmo_archive_t * lmo_open(const char *file);
+void lmo_close(lmo_archive_t *ar);
+
+
+extern lmo_catalog_t *_lmo_catalogs;
+extern lmo_catalog_t *_lmo_active_catalog;
+
+int lmo_load_catalog(const char *lang, const char *dir);
+int lmo_change_catalog(const char *lang);
+int lmo_translate(const char *key, int keylen, char **out, int *outlen);
+void lmo_close_catalog(const char *lang);
+
+#endif
diff --git a/package/lean/luci-app-zerotier/Makefile b/package/lean/luci-app-zerotier/Makefile
new file mode 100644
index 0000000000..4769dbccb3
--- /dev/null
+++ b/package/lean/luci-app-zerotier/Makefile
@@ -0,0 +1,19 @@
+#
+# Copyright (C) 2008-2014 The LuCI Team <luci@lists.subsignal.org>
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI for Zerotier
+LUCI_DEPENDS:=+zerotier
+LUCI_PKGARCH:=all
+PKG_VERSION:=1.0
+PKG_RELEASE:=15
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
+
diff --git a/package/lean/luci-app-zerotier/luasrc/controller/zerotier.lua b/package/lean/luci-app-zerotier/luasrc/controller/zerotier.lua
new file mode 100644
index 0000000000..e02a4f793e
--- /dev/null
+++ b/package/lean/luci-app-zerotier/luasrc/controller/zerotier.lua
@@ -0,0 +1,23 @@
+module("luci.controller.zerotier",package.seeall)
+
+function index()
+  if not nixio.fs.access("/etc/config/zerotier")then
+return
+end
+
+entry({"admin","vpn"}, firstchild(), "VPN", 45).dependent = false
+
+entry({"admin", "vpn", "zerotier"},firstchild(), _("ZeroTier")).dependent = false
+
+entry({"admin", "vpn", "zerotier", "general"},cbi("zerotier/settings"), _("Base Setting"), 1)
+entry({"admin", "vpn", "zerotier", "log"},form("zerotier/info"), _("Interface Info"), 2)
+
+entry({"admin","vpn","zerotier","status"},call("act_status"))
+end
+
+function act_status()
+local e={}
+  e.running=luci.sys.call("pgrep /usr/bin/zerotier-one >/dev/null")==0
+  luci.http.prepare_content("application/json")
+  luci.http.write_json(e)
+end
diff --git a/package/lean/luci-app-zerotier/luasrc/model/cbi/zerotier/info.lua b/package/lean/luci-app-zerotier/luasrc/model/cbi/zerotier/info.lua
new file mode 100644
index 0000000000..9bc3824cfc
--- /dev/null
+++ b/package/lean/luci-app-zerotier/luasrc/model/cbi/zerotier/info.lua
@@ -0,0 +1,15 @@
+local fs = require "nixio.fs"
+local conffile = "/tmp/zero.info"
+
+f = SimpleForm("logview")
+
+t = f:field(TextValue, "conf")
+t.rmempty = true
+t.rows = 15
+function t.cfgvalue()
+  luci.sys.exec("ifconfig $(ifconfig | grep zt | awk '{print $1}') > /tmp/zero.info")
+	return fs.readfile(conffile) or ""
+end
+t.readonly="readonly"
+
+return f
\ No newline at end of file
diff --git a/package/lean/luci-app-zerotier/luasrc/model/cbi/zerotier/settings.lua b/package/lean/luci-app-zerotier/luasrc/model/cbi/zerotier/settings.lua
new file mode 100644
index 0000000000..14f4bdce05
--- /dev/null
+++ b/package/lean/luci-app-zerotier/luasrc/model/cbi/zerotier/settings.lua
@@ -0,0 +1,26 @@
+
+a=Map("zerotier",translate("ZeroTier"),translate("Zerotier is an open source, cross-platform and easy to use virtual LAN"))
+a:section(SimpleSection).template  = "zerotier/zerotier_status"
+
+t=a:section(NamedSection,"sample_config","zerotier")
+t.anonymous=true
+t.addremove=false
+
+e=t:option(Flag,"enabled",translate("Enable"))
+e.default=0
+e.rmempty=false
+
+e=t:option(DynamicList,"join",translate('ZeroTier Network ID'))
+e.password=true
+e.rmempty=false
+
+e=t:option(Flag,"nat",translate("Auto NAT Clients"))
+e.default=0
+e.rmempty=false
+e.description = translate("Allow zerotier clients access your LAN network")
+
+e=t:option(DummyValue,"opennewwindow" , 
+	translate("<input type=\"button\" class=\"cbi-button cbi-button-apply\" value=\"Zerotier.com\" onclick=\"window.open('https://my.zerotier.com/network')\" />"))
+e.description = translate("Create or manage your zerotier network, and auth clients who could access")
+
+return a
diff --git a/package/lean/luci-app-zerotier/luasrc/view/zerotier/zerotier_status.htm b/package/lean/luci-app-zerotier/luasrc/view/zerotier/zerotier_status.htm
new file mode 100644
index 0000000000..9d216c5d93
--- /dev/null
+++ b/package/lean/luci-app-zerotier/luasrc/view/zerotier/zerotier_status.htm
@@ -0,0 +1,22 @@
+<script type="text/javascript">//<![CDATA[
+XHR.poll(3, '<%=url([[admin]], [[vpn]], [[zerotier]], [[status]])%>', null,
+	function(x, data) {
+		var tb = document.getElementById('zerotier_status');
+		if (data && tb) {
+			if (data.running) {
+				var links = '<em><b><font color=green>Zerotier <%:RUNNING%></font></b></em>';
+				tb.innerHTML = links;
+			} else {
+				tb.innerHTML = '<em><b><font color=red>Zerotier <%:NOT RUNNING%></font></b></em>';
+			}
+		}
+	}
+);
+//]]>
+</script>
+<style>.mar-10 {margin-left: 50px; margin-right: 10px;}</style>
+<fieldset class="cbi-section">
+	<p id="zerotier_status">
+		<em><%:Collecting data...%></em>
+	</p>
+</fieldset>
diff --git a/package/lean/luci-app-zerotier/po/zh-cn/zerotier.po b/package/lean/luci-app-zerotier/po/zh-cn/zerotier.po
new file mode 100644
index 0000000000..3787a890d5
--- /dev/null
+++ b/package/lean/luci-app-zerotier/po/zh-cn/zerotier.po
@@ -0,0 +1,22 @@
+msgid ""
+msgstr ""
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: Gtranslator 2.91.7\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+
+msgid "Zerotier is an open source, cross-platform and easy to use virtual LAN"
+msgstr "Zerotier是一个开源，跨平台，而且适合内网穿透互联的傻瓜配置虚拟 VPN LAN"
+
+msgid "Auto NAT Clients"
+msgstr "自动允许客户端NAT"
+
+msgid "Allow zerotier clients access your LAN network"
+msgstr "允许Zerotier的拨入客户端访问路由器LAN资源（需要在 Zerotier管理页面设定到LAN网段的路由表）"
+
+msgid "Create or manage your zerotier network, and auth clients who could access"
+msgstr "点击跳转到Zerotier官网管理平台，新建或者管理网络，并允许客户端接入访问你私人网路（新接入的节点默认不允许访问）"
+
+msgid "Interface Info"
+msgstr "接口信息"
diff --git a/package/lean/luci-app-zerotier/root/etc/init.d/zerotier b/package/lean/luci-app-zerotier/root/etc/init.d/zerotier
new file mode 100755
index 0000000000..bb0fe92e7c
--- /dev/null
+++ b/package/lean/luci-app-zerotier/root/etc/init.d/zerotier
@@ -0,0 +1,101 @@
+#!/bin/sh /etc/rc.common
+
+START=90
+
+USE_PROCD=1
+
+PROG=/usr/bin/zerotier-one
+CONFIG_PATH=/var/lib/zerotier-one
+
+section_enabled() {
+	config_get_bool enabled "$1" 'enabled' 0
+	[ $enabled -gt 0 ]
+}
+
+start_instance() {
+	local cfg="$1"
+	local port secret config_path
+	local ARGS=""
+
+	if ! section_enabled "$cfg"; then
+		echo "disabled in config"
+		return 1
+	fi
+  
+  [ -d /etc/config/zero ] || mkdir -p /etc/config/zero
+  config_path=/etc/config/zero
+  
+	config_get_bool port $cfg 'port'
+	config_get secret $cfg 'secret'
+
+	# Remove existing link or folder
+	rm -rf $CONFIG_PATH
+
+	# Create link from CONFIG_PATH to config_path
+	if [ -n "$config_path" -a "$config_path" != $CONFIG_PATH ]; then
+		if [ ! -d "$config_path" ]; then
+			echo "ZeroTier config_path does not exist: $config_path"
+			return
+		fi
+
+		ln -s $config_path $CONFIG_PATH
+	fi
+
+	mkdir -p $CONFIG_PATH/networks.d
+
+	if [ -n "$port" ]; then
+		ARGS="$ARGS -p$port"
+	fi
+
+	if [ "$secret" = "generate" ]; then
+		echo "Generate secret - please wait..."
+		local sf="/tmp/zt.$cfg.secret"
+
+		zerotier-idtool generate "$sf" > /dev/null
+		[ $? -ne 0 ] && return 1
+
+		secret="$(cat $sf)"
+		rm "$sf"
+
+		uci set zerotier.$cfg.secret="$secret"
+		uci commit zerotier
+	fi
+
+	if [ -n "$secret" ]; then
+		echo "$secret" > $CONFIG_PATH/identity.secret
+		# make sure there is not previous identity.public
+		rm -f $CONFIG_PATH/identity.public
+	fi
+
+	add_join() {
+		# an (empty) config file will cause ZT to join a network
+		touch $CONFIG_PATH/networks.d/$1.conf
+	}
+
+	config_list_foreach $cfg 'join' add_join
+
+	procd_open_instance
+	procd_set_param command $PROG $ARGS $CONFIG_PATH
+	procd_set_param stderr 1
+	procd_close_instance
+}
+
+start_service() {
+	config_load 'zerotier'
+	config_foreach start_instance 'zerotier'
+	touch /tmp/zero.log && nohup /etc/zerotier.start > /tmp/zero.log 2>&1 &
+}
+
+stop_instance() {
+  rm -f /tmp/zero.log
+	local cfg="$1"
+
+	# Remove existing link or folder
+	rm -rf $CONFIG_PATH
+}
+
+stop_service() {
+	config_load 'zerotier'
+	config_foreach stop_instance 'zerotier'
+}
+
diff --git a/package/lean/luci-app-zerotier/root/etc/uci-defaults/40_luci-zerotier b/package/lean/luci-app-zerotier/root/etc/uci-defaults/40_luci-zerotier
new file mode 100755
index 0000000000..95f0ccfc96
--- /dev/null
+++ b/package/lean/luci-app-zerotier/root/etc/uci-defaults/40_luci-zerotier
@@ -0,0 +1,17 @@
+#!/bin/sh
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@zerotier[-1]
+	add ucitrack zerotier
+	set ucitrack.@zerotier[-1].init=zerotier
+	commit ucitrack
+  delete firewall.zerotier
+	set firewall.zerotier=include
+	set firewall.zerotier.type=script
+	set firewall.zerotier.path=/etc/zerotier.start
+	set firewall.zerotier.reload=1
+	commit firewall
+EOF
+
+rm -f /tmp/luci-indexcache
+exit 0
diff --git a/package/lean/luci-app-zerotier/root/etc/zerotier.start b/package/lean/luci-app-zerotier/root/etc/zerotier.start
new file mode 100755
index 0000000000..98fcf4eaa6
--- /dev/null
+++ b/package/lean/luci-app-zerotier/root/etc/zerotier.start
@@ -0,0 +1,29 @@
+#!/bin/sh
+
+zero_enable=$(uci get zerotier.sample_config.enabled)
+
+if [ $zero_enable -eq 1 ]; then
+
+if [ -f /tmp/zero.log ];then
+while [ "$(ifconfig | grep zt | awk '{print $1}')" = "" ]  
+do 
+   sleep 1
+done
+fi
+
+nat_enable=$(uci get zerotier.sample_config.nat)
+zt0=$(ifconfig | grep zt | awk '{print $1}')
+echo "zt interface $zt0 is started!"
+echo $zt0 > /tmp/zt.nif
+iptables -D FORWARD -i $zt0 -j ACCEPT 2>/dev/null
+iptables -D FORWARD -o $zt0 -j ACCEPT 2>/dev/null
+iptables -t nat -D POSTROUTING -o $zt0 -j MASQUERADE 2>/dev/null
+if [ $nat_enable -eq 1 ]; then
+  iptables -I FORWARD -i $zt0 -j ACCEPT
+  iptables -I FORWARD -o $zt0 -j ACCEPT
+  iptables -t nat -I POSTROUTING -o $zt0 -j MASQUERADE
+  ip_segment=$(ip route | grep "dev $zt0 proto" | awk '{print $1}')
+  iptables -t nat -I POSTROUTING -s $ip_segment -j MASQUERADE
+fi
+
+fi
diff --git a/package/lean/luci-app-zerotier/root/etc/zerotier.stop b/package/lean/luci-app-zerotier/root/etc/zerotier.stop
new file mode 100755
index 0000000000..68f3b718a6
--- /dev/null
+++ b/package/lean/luci-app-zerotier/root/etc/zerotier.stop
@@ -0,0 +1,12 @@
+#!/bin/sh
+
+zt0=$(ifconfig | grep zt | awk '{print $1}')
+if [ "$zt0" = "" ]; then
+  zt0=$(cat /tmp/cat /tmp/zt.nif)
+fi
+echo "zt interface $zt0 is stopped!"
+iptables -D FORWARD -i $zt0 -j ACCEPT 2>/dev/null
+iptables -D FORWARD -o $zt0 -j ACCEPT 2>/dev/null
+iptables -t nat -D POSTROUTING -o $zt0 -j MASQUERADE 2>/dev/null
+ip_segment=$(ip route | grep "dev $zt0 proto" | awk '{print $1}')
+iptables -t nat -D POSTROUTING -s $ip_segment -j MASQUERADE 2>/dev/null
diff --git a/package/lean/luci-app-zerotier/root/etc/zerotier/zerotier.log b/package/lean/luci-app-zerotier/root/etc/zerotier/zerotier.log
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/package/lean/luci-lib-fs/Makefile b/package/lean/luci-lib-fs/Makefile
new file mode 100644
index 0000000000..9d78a29713
--- /dev/null
+++ b/package/lean/luci-lib-fs/Makefile
@@ -0,0 +1,49 @@
+#
+# Copyright (C) 2009 OpenWrt.org
+#
+# This is free software, licensed under the GNU General Public License v2.
+# See /LICENSE for more information.
+#
+
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=luci-lib-fs
+PKG_VERSION:=1.0
+PKG_RELEASE:=1
+
+PKG_BUILD_DIR := $(BUILD_DIR)/$(PKG_NAME)
+PKG_INSTALL:=1
+
+include $(INCLUDE_DIR)/package.mk
+
+define Package/luci-lib-fs
+  SUBMENU:=Lua
+  SECTION:=lang
+  CATEGORY:=Languages
+  TITLE:=luci-lib-fs
+  PKGARCH:=all
+  URL:=https://github.com/lbthomsen/openwrt-luci
+  DEPENDS:=+luci +luci-lib-nixio
+endef
+
+define Package/luci-lib-fs/description
+  luci-lib-fs
+endef
+
+define Build/Configure
+endef
+
+define Build/Compile
+endef
+
+define Build/Install
+endef
+
+
+define Package/luci-lib-fs/install
+	$(INSTALL_DIR) $(1)/usr/lib/lua/luci
+	$(CP) ./files/*.lua $(1)/usr/lib/lua/luci
+	
+endef
+
+$(eval $(call BuildPackage,luci-lib-fs))
diff --git a/package/lean/luci-lib-fs/files/fs.lua b/package/lean/luci-lib-fs/files/fs.lua
new file mode 100644
index 0000000000..a81ff675d4
--- /dev/null
+++ b/package/lean/luci-lib-fs/files/fs.lua
@@ -0,0 +1,244 @@
+--[[
+LuCI - Filesystem tools
+
+Description:
+A module offering often needed filesystem manipulation functions
+
+FileId:
+$Id$
+
+License:
+Copyright 2008 Steven Barth <steven@midlink.org>
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+]]--
+
+local io    = require "io"
+local os    = require "os"
+local ltn12 = require "luci.ltn12"
+local fs	= require "nixio.fs"
+local nutil = require "nixio.util"
+
+local type  = type
+
+--- LuCI filesystem library.
+module "luci.fs"
+
+--- Test for file access permission on given path.
+-- @class		function
+-- @name		access
+-- @param str	String value containing the path
+-- @return		Number containing the return code, 0 on sucess or nil on error
+-- @return		String containing the error description (if any)
+-- @return		Number containing the os specific errno (if any)
+access = fs.access
+
+--- Evaluate given shell glob pattern and return a table containing all matching
+-- file and directory entries.
+-- @class			function
+-- @name			glob
+-- @param filename	String containing the path of the file to read
+-- @return			Table containing file and directory entries or nil if no matches
+-- @return			String containing the error description (if no matches)
+-- @return			Number containing the os specific errno (if no matches)
+function glob(...)
+	local iter, code, msg = fs.glob(...)
+	if iter then
+		return nutil.consume(iter)
+	else
+		return nil, code, msg
+	end
+end
+
+--- Checks wheather the given path exists and points to a regular file.
+-- @param filename	String containing the path of the file to test
+-- @return			Boolean indicating wheather given path points to regular file
+function isfile(filename)
+	return fs.stat(filename, "type") == "reg"
+end
+
+--- Checks wheather the given path exists and points to a directory.
+-- @param dirname	String containing the path of the directory to test
+-- @return			Boolean indicating wheather given path points to directory
+function isdirectory(dirname)
+	return fs.stat(dirname, "type") == "dir"
+end
+
+--- Read the whole content of the given file into memory.
+-- @param filename	String containing the path of the file to read
+-- @return			String containing the file contents or nil on error
+-- @return			String containing the error message on error
+readfile = fs.readfile
+
+--- Write the contents of given string to given file.
+-- @param filename	String containing the path of the file to read
+-- @param data		String containing the data to write
+-- @return			Boolean containing true on success or nil on error
+-- @return			String containing the error message on error
+writefile = fs.writefile
+
+--- Copies a file.
+-- @param source	Source file
+-- @param dest		Destination
+-- @return			Boolean containing true on success or nil on error
+copy = fs.datacopy
+
+--- Renames a file.
+-- @param source	Source file
+-- @param dest		Destination
+-- @return			Boolean containing true on success or nil on error
+rename = fs.move
+
+--- Get the last modification time of given file path in Unix epoch format.
+-- @param path	String containing the path of the file or directory to read
+-- @return		Number containing the epoch time or nil on error
+-- @return		String containing the error description (if any)
+-- @return		Number containing the os specific errno (if any)
+function mtime(path)
+	return fs.stat(path, "mtime")
+end
+
+--- Set the last modification time  of given file path in Unix epoch format.
+-- @param path	String containing the path of the file or directory to read
+-- @param mtime	Last modification timestamp
+-- @param atime Last accessed timestamp
+-- @return		0 in case of success nil on error
+-- @return		String containing the error description (if any)
+-- @return		Number containing the os specific errno (if any)
+function utime(path, mtime, atime)
+	return fs.utimes(path, atime, mtime)
+end
+
+--- Return the last element - usually the filename - from the given path with
+-- the directory component stripped.
+-- @class		function
+-- @name		basename
+-- @param path	String containing the path to strip
+-- @return		String containing the base name of given path
+-- @see			dirname
+basename = fs.basename
+
+--- Return the directory component of the given path with the last element
+-- stripped of.
+-- @class		function
+-- @name		dirname
+-- @param path	String containing the path to strip
+-- @return		String containing the directory component of given path
+-- @see			basename
+dirname = fs.dirname
+
+--- Return a table containing all entries of the specified directory.
+-- @class		function
+-- @name		dir
+-- @param path	String containing the path of the directory to scan
+-- @return		Table containing file and directory entries or nil on error
+-- @return		String containing the error description on error
+-- @return		Number containing the os specific errno on error
+function dir(...)
+	local iter, code, msg = fs.dir(...)
+	if iter then
+		local t = nutil.consume(iter)
+		t[#t+1] = "."
+		t[#t+1] = ".."
+		return t
+	else
+		return nil, code, msg
+	end
+end
+
+--- Create a new directory, recursively on demand.
+-- @param path		String with the name or path of the directory to create
+-- @param recursive	Create multiple directory levels (optional, default is true)
+-- @return			Number with the return code, 0 on sucess or nil on error
+-- @return			String containing the error description on error
+-- @return			Number containing the os specific errno on error
+function mkdir(path, recursive)
+	return recursive and fs.mkdirr(path) or fs.mkdir(path)
+end
+
+--- Remove the given empty directory.
+-- @class		function
+-- @name		rmdir
+-- @param path	String containing the path of the directory to remove
+-- @return		Number with the return code, 0 on sucess or nil on error
+-- @return		String containing the error description on error
+-- @return		Number containing the os specific errno on error
+rmdir = fs.rmdir
+
+local stat_tr = {
+	reg = "regular",
+	dir = "directory",
+	lnk = "link",
+	chr = "character device",
+	blk = "block device",
+	fifo = "fifo",
+	sock = "socket"
+}
+--- Get information about given file or directory.
+-- @class		function
+-- @name		stat
+-- @param path	String containing the path of the directory to query
+-- @return		Table containing file or directory properties or nil on error
+-- @return		String containing the error description on error
+-- @return		Number containing the os specific errno on error
+function stat(path, key)
+	local data, code, msg = fs.stat(path)
+	if data then
+		data.mode = data.modestr
+		data.type = stat_tr[data.type] or "?"
+	end
+	return key and data and data[key] or data, code, msg
+end
+
+--- Set permissions on given file or directory.
+-- @class		function
+-- @name		chmod
+-- @param path	String containing the path of the directory
+-- @param perm	String containing the permissions to set ([ugoa][+-][rwx])
+-- @return		Number with the return code, 0 on sucess or nil on error
+-- @return		String containing the error description on error
+-- @return		Number containing the os specific errno on error
+chmod = fs.chmod
+
+--- Create a hard- or symlink from given file (or directory) to specified target
+-- file (or directory) path.
+-- @class			function
+-- @name			link
+-- @param path1		String containing the source path to link
+-- @param path2		String containing the destination path for the link
+-- @param symlink	Boolean indicating wheather to create a symlink (optional)
+-- @return			Number with the return code, 0 on sucess or nil on error
+-- @return			String containing the error description on error
+-- @return			Number containing the os specific errno on error
+function link(src, dest, sym)
+	return sym and fs.symlink(src, dest) or fs.link(src, dest)
+end
+
+--- Remove the given file.
+-- @class		function
+-- @name		unlink
+-- @param path	String containing the path of the file to remove
+-- @return		Number with the return code, 0 on sucess or nil on error
+-- @return		String containing the error description on error
+-- @return		Number containing the os specific errno on error
+unlink = fs.unlink
+
+--- Retrieve target of given symlink.
+-- @class		function
+-- @name		readlink
+-- @param path	String containing the path of the symlink to read
+-- @return		String containing the link target or nil on error
+-- @return		String containing the error description on error
+-- @return		Number containing the os specific errno on error
+readlink = fs.readlink
diff --git a/package/lean/luci-proto-bonding/Makefile b/package/lean/luci-proto-bonding/Makefile
new file mode 100644
index 0000000000..ab73de0f02
--- /dev/null
+++ b/package/lean/luci-proto-bonding/Makefile
@@ -0,0 +1,18 @@
+#
+# Copyright (C) 2017 TDT AG <development@tdt.de>
+#
+# This is free software, licensed under the Apache License Version 2.0.
+# See https://www.apache.org/licenses/LICENSE-2.0 for more information.
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=Support for Link Aggregation (Channel Bonding)
+LUCI_DEPENDS:=+proto-bonding
+LUCI_PKGARCH:=all
+
+PKG_MAINTAINER:=Helge Mader <ma@dev.tdt.de>
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
diff --git a/package/lean/luci-proto-bonding/luasrc/model/cbi/admin_network/proto_bonding.lua b/package/lean/luci-proto-bonding/luasrc/model/cbi/admin_network/proto_bonding.lua
new file mode 100644
index 0000000000..898a6587c7
--- /dev/null
+++ b/package/lean/luci-proto-bonding/luasrc/model/cbi/admin_network/proto_bonding.lua
@@ -0,0 +1,386 @@
+--[[
+
+Copyright (C) 2018 TDT AG <development@tdt.de>
+
+This is free software, licensed under the Apache License Version 2.0.
+See https://www.apache.org/licenses/LICENSE-2.0 for more information.
+
+]]--
+
+local map, section, net = ...
+
+local ipaddr, netmask, gateway, broadcast
+
+local SYS = require "luci.sys"
+
+local dhcp, slaves, bonding_policy, primary, primary_reselect, min_links, ad_actor_sys_prio, ad_actor_system
+local ad_select, lacp_rate, packets_per_slave, lp_interval, tlb_dynamic_lb, fail_over_mac
+local num_grat_arp__num_unsol_na, xmit_hash_policy, resend_igmp, all_slaves_active, link_monitoring
+local arp_interval, arp_ip_target, arp_all_targets, arp_validate, miimon, downdelay, updelay, use_carrier
+
+local function get_selectable_slaves(field)
+	m.uci:foreach("network", "interface",
+		function (section)
+			if section[".name"] ~= "loopback" then
+				local network_section_ifname = m.uci:get("network", section['.name'], "ifname")
+				local in_use = false
+
+				m.uci:foreach("network", "interface",
+					function (section)
+						if m.uci:get("network", section['.name'], "proto") == "bonding" then
+
+							local bonding_section_slaves = m.uci:get("network", section['.name'], "slaves")
+
+							if bonding_section_slaves ~= nil then
+
+								for this_slave in bonding_section_slaves:gmatch("[%S-]+") do
+
+									if network_section_ifname == this_slave:gsub("-", "") and section['.name'] ~= arg[1] then
+										in_use = true
+									end
+								end
+							end
+						end
+					end
+					)
+
+				if in_use == false and network_section_ifname ~= nil then
+					if network_section_ifname:find("eth") ~= nil then
+						field:value(network_section_ifname, network_section_ifname)
+					end
+				end
+			end
+		end
+	)
+end
+
+
+local function get_selectable_slaves_from_proc(field)
+	local interfaces = SYS.exec("cat /proc/net/dev | grep 'eth' | awk '\{print \$1\}' | tr ':\n' ' '")
+
+	if interfaces ~= nil then
+		for this_interface in interfaces:gmatch("[%S-]+") do
+			local in_use = false
+
+			m.uci:foreach("network", "interface",
+				function (section)
+					if m.uci:get("network", section['.name'], "proto") == "bonding" then
+						local bonding_section_slaves = m.uci:get("network", section['.name'], "slaves")
+
+						if bonding_section_slaves ~= nil then
+
+							for this_slave in bonding_section_slaves:gmatch("[%S-]+") do
+
+								if this_interface == this_slave and section['.name'] ~= arg[1] then
+									in_use = true
+								end
+							end
+						end
+					end
+				end	
+				)
+
+			if in_use == false then
+				field:value(this_interface, this_interface)
+			end
+		end
+	end
+end
+
+
+ipaddr = section:taboption("general", Value, "ipaddr",
+	translate("IPv4 address"))
+ipaddr.datatype = "ip4addr"
+ipaddr.optional = false
+ipaddr.rmempty = false
+
+
+netmask = section:taboption("general", Value, "netmask",
+	translate("IPv4 netmask"))
+netmask.datatype = "ip4addr"
+netmask.optional = false
+netmask.rmempty = false
+netmask:value("255.255.255.0")
+netmask:value("255.255.0.0")
+netmask:value("255.0.0.0")
+
+
+-- dhcp = section:taboption("general", Flag, "dhcp",
+-- 	translate("Use DHCP (Client Mode)"),
+-- 	translate("Specifies whether the bonding interface should use DHCP client mode"))
+-- dhcp.default = dhcp.disabled
+-- dhcp.rmempty = false
+
+slaves = section:taboption("advanced", MultiValue, "slaves",
+        translate ("Slave Interfaces"),
+        translate("Specifies which slave interfaces should be attached to this bonding interface"))
+slaves.oneline = true
+slaves.widget = "checkbox"
+
+get_selectable_slaves_from_proc(slaves)
+
+bonding_policy = section:taboption("advanced", ListValue, "bonding_policy",
+	translate("Bonding Policy"),
+	translate("Specifies the mode to be used for this bonding interface"))
+bonding_policy.default = "balance-rr"
+bonding_policy:value("balance-rr", translate("Round-Robin policy (balance-rr, 0)"))
+bonding_policy:value("active-backup", translate("Active-Backup policy (active-backup, 1)"))
+bonding_policy:value("balance-xor", translate("XOR policy (balance-xor, 2)"))
+bonding_policy:value("broadcast", translate("Broadcast policy (broadcast, 3)"))
+bonding_policy:value("802.3ad", translate("IEEE 802.3ad Dynamic link aggregation (802.3ad, 4)"))
+bonding_policy:value("balance-tlb", translate("Adaptive transmit load balancing (balance-tlb, 5)"))
+bonding_policy:value("balance-alb", translate("Adaptive load balancing (balance-alb, 6)"))
+
+primary = section:taboption("advanced", ListValue, "primary",
+	translate("Primary Slave"),
+	translate("Specifies which slave is the primary device. It will always be the active slave while it is available"))
+primary.widget = "radio"
+primary.orientation = "horizontal"
+primary:depends("bonding_policy", "active-backup")
+primary:depends("bonding_policy", "balance-tlb")
+primary:depends("bonding_policy", "balance-alb")
+
+get_selectable_slaves_from_proc(primary)
+
+primary_reselect = section:taboption("advanced", ListValue, "primary_reselect",
+	translate("Reselection policy for primary slave"),
+	translate("Specifies the reselection policy for the primary slave when failure of the active slave or recovery of the primary slave occurs"))
+primary_reselect.default = "always"
+primary_reselect:value("always", translate("Primary becomes active slave whenever it comes back up (always, 0)"))
+primary_reselect:value("better", translate("Primary becomes active slave when it comes back up if speed and duplex better than current slave (better, 1)"))
+primary_reselect:value("failure", translate("Only if current active slave fails and the primary slave is up (failure, 2)"))
+primary_reselect:depends("bonding_policy", "active-backup")
+primary_reselect:depends("bonding_policy", "balance-tlb")
+primary_reselect:depends("bonding_policy", "balance-alb")
+
+min_links = section:taboption("advanced", Value, "min_links",
+	translate("Minimum Number of Links"),
+	translate("Specifies the minimum number of links that must be active before asserting carrier"))
+min_links.datatype = "uinteger"
+min_links.default = 0
+min_links:depends("bonding_policy", "802.3ad")
+
+ad_actor_sys_prio = section:taboption("advanced", Value, "ad_actor_sys_prio",
+	translate("System Priority"),
+	translate("Specifies the system priority"))
+ad_actor_sys_prio.datatype = "range(1,65535)"
+ad_actor_sys_prio.default = 65535
+ad_actor_sys_prio:depends("bonding_policy", "802.3ad")
+
+ad_actor_system = section:taboption("advanced", Value, "ad_actor_system",
+	translate("MAC Address For The Actor"),
+	translate("Specifies the mac-address for the actor in protocol packet exchanges (LACPDUs). If empty, masters' mac address defaults to system default"))
+ad_actor_system.datatype = "macaddr"
+ad_actor_system.default = ""
+ad_actor_system:depends("bonding_policy", "802.3ad")
+
+ad_select = section:taboption("advanced", ListValue, "ad_select",
+	translate("Aggregation Selection Logic"),
+	translate("Specifies the aggregation selection logic to use"))
+ad_select.default = "stable"
+ad_select:value("stable", translate("Aggregator: All slaves down or has no slaves (stable, 0)"))
+ad_select:value("bandwidth", translate("Aggregator: Slave added/removed or state changes (bandwidth, 1)"))
+ad_select:value("count", translate("Aggregator: Chosen by the largest number of ports + slave added/removed or state changes (count, 2)"))
+ad_select:depends("bonding_policy", "802.3ad")
+
+lacp_rate = section:taboption("advanced", ListValue, "lacp_rate",
+	translate("LACPDU Packets"),
+	translate("Specifies the rate in which the link partner will be asked to transmit LACPDU packets"))
+lacp_rate.default = "slow"
+lacp_rate:value("slow", translate("Every 30 seconds (slow, 0)"))
+lacp_rate:value("fast", translate("Every second (fast, 1)"))
+lacp_rate:depends("bonding_policy", "802.3ad")
+
+packets_per_slave = section:taboption("advanced", Value, "packets_per_slave",
+	translate("Packets To Transmit Before Moving To Next Slave"),
+	translate("Specifies the number of packets to transmit through a slave before moving to the next one"))
+packets_per_slave.datatype = "range(0,65535)"
+packets_per_slave.default = 1
+packets_per_slave:depends("bonding_policy", "balance-rr")
+
+lp_interval = section:taboption("advanced", Value, "lp_interval",
+	translate("Interval For Sending Learning Packets"),
+	translate("Specifies the number of seconds between instances where the bonding	driver sends learning packets to each slaves peer switch"))
+lp_interval.datatype = "range(1,2147483647)"
+lp_interval.default = 1
+lp_interval:depends("bonding_policy", "balance-tlb")
+lp_interval:depends("bonding_policy", "balance-alb")
+
+tlb_dynamic_lb = section:taboption("advanced", ListValue, "tlb_dynamic_lb",
+	translate("Enable Dynamic Shuffling Of Flows"),
+	translate("Specifies whether to shuffle active flows across slaves based on the load"))
+tlb_dynamic_lb.default = "1"
+tlb_dynamic_lb:value("1", translate("Yes"))
+tlb_dynamic_lb:value("0", translate("No"))
+tlb_dynamic_lb:depends("bonding_policy", "balance-tlb")
+
+fail_over_mac = section:taboption("advanced", ListValue, "fail_over_mac",
+	translate("Set same MAC Address to all slaves"),
+	translate("Specifies whether active-backup mode should set all slaves to the same MAC address at enslavement"))
+fail_over_mac.default = "none"
+fail_over_mac:value("none", translate("Yes (none, 0)"))
+fail_over_mac:value("active", translate("Set to currently active slave (active, 1)"))
+fail_over_mac:value("follow", translate("Set to first slave added to the bond (follow, 2)"))
+fail_over_mac:depends("bonding_policy", "active-backup")
+
+num_grat_arp__num_unsol_na = section:taboption("advanced", Value, "num_grat_arp__num_unsol_na",
+	translate("Number of peer notifications after failover event"),
+	translate("Specifies the number of peer notifications (gratuitous ARPs and unsolicited IPv6 Neighbor Advertisements) to be issued after a failover event"))
+num_grat_arp__num_unsol_na.datatype = "range(0,255)"
+num_grat_arp__num_unsol_na.default = 1
+num_grat_arp__num_unsol_na:depends("bonding_policy", "active-backup")
+
+xmit_hash_policy = section:taboption("advanced", ListValue, "xmit_hash_policy",
+	translate("Transmit Hash Policy"),
+	translate("Selects the transmit hash policy to use for slave selection"))
+xmit_hash_policy.default = "layer2"
+xmit_hash_policy:value("layer2", translate("Use XOR of hardware MAC addresses (layer2)"))
+xmit_hash_policy:value("layer2+3", translate("Use XOR of hardware MAC addresses and IP addresses (layer2+3)"))
+xmit_hash_policy:value("layer3+4", translate("Use upper layer protocol information (layer3+4)"))
+xmit_hash_policy:value("encap2+3", translate("Use XOR of hardware MAC addresses and IP addresses, rely on skb_flow_dissect (encap2+3)"))
+xmit_hash_policy:value("encap3+4", translate("Use upper layer protocol information, rely on skb_flow_dissect (encap3+4)"))
+xmit_hash_policy:depends("bonding_policy", "balance-rr")
+xmit_hash_policy:depends("bonding_policy", "active-backup")
+xmit_hash_policy:depends("bonding_policy", "balance-tlb")
+xmit_hash_policy:depends("bonding_policy", "balance-alb")
+xmit_hash_policy:depends("bonding_policy", "balance-xor")
+
+resend_igmp = section:taboption("advanced", Value, "resend_igmp",
+	translate("Number of IGMP membership reports"),
+	translate("Specifies the number of IGMP membership reports to be issued after a failover event in 200ms intervals"))
+resend_igmp.datatype = "range(0,255)"
+resend_igmp.default = 1
+resend_igmp:depends("bonding_policy", "balance-tlb")
+resend_igmp:depends("bonding_policy", "balance-alb")
+
+all_slaves_active = section:taboption("advanced", ListValue, "all_slaves_active",
+	translate("Drop Duplicate Frames"),
+	translate("Specifies that duplicate frames (received on inactive ports) should be dropped or delivered"))
+all_slaves_active.default = "0"
+all_slaves_active:value("0", translate("Yes"))
+all_slaves_active:value("1", translate("No"))
+
+link_monitoring = section:taboption("advanced", ListValue, "link_monitoring",
+	translate("Link Monitoring"),
+	translate("Method of link monitoring"))
+link_monitoring.default = "off"
+link_monitoring:value("off", translate("Off"))
+link_monitoring:value("arp", translate("ARP"))
+link_monitoring:value("mii", translate("MII"))
+
+arp_interval = section:taboption("advanced", Value, "arp_interval",
+	translate("ARP Interval"),
+	translate("Specifies the ARP link monitoring frequency in milliseconds"))
+arp_interval.datatype = "uinteger"
+arp_interval.default = 0
+arp_interval:depends("link_monitoring", "arp")
+
+arp_ip_target = section:taboption("advanced", DynamicList, "arp_ip_target",
+	translate("ARP IP Targets"),
+	translate("Specifies the IP addresses to use for ARP monitoring"))
+arp_ip_target.datatype = "ipaddr"
+arp_ip_target.cast = "string"
+arp_ip_target:depends("link_monitoring", "arp")
+
+arp_all_targets = section:taboption("advanced", ListValue, "arp_all_targets",
+	translate("ARP mode to consider a slave as being up"),
+	translate("Specifies the quantity of ARP IP targets that must be reachable"))
+arp_all_targets.default = "any"
+arp_all_targets:value("any", translate("Consider the slave up when any ARP IP target is reachable (any, 0)"))
+arp_all_targets:value("all", translate("Consider the slave up when all ARP IP targets are reachable (all, 1)"))
+arp_all_targets:depends({link_monitoring="arp", bonding_policy="active-backup"})
+
+arp_validate = section:taboption("advanced", ListValue, "arp_validate",
+	translate("ARP Validation"),
+	translate("Specifies whether ARP probes and replies should be validated or non-ARP traffic should be filtered for link monitoring"))
+arp_validate.default = "filter"
+arp_validate:value("none", translate("No validation or filtering "))
+arp_validate:value("active", translate("Validation only for active slave"))
+arp_validate:value("backup", translate("Validation only for backup slaves"))
+arp_validate:value("all", translate("Validation for all slaves"))
+arp_validate:value("filter", translate("Filtering for all slaves, no validation"))
+arp_validate:value("filter_active", translate("Filtering for all slaves, validation only for active slave"))
+arp_validate:value("filter_backup", translate("Filtering for all slaves, validation only for backup slaves"))
+arp_validate:depends("link_monitoring", "arp")
+
+miimon = section:taboption("advanced", Value, "miimon",
+	translate("MII Interval"),
+	translate("Specifies the MII link monitoring frequency in milliseconds"))
+miimon.datatype = "uinteger"
+miimon.default = 0
+miimon:depends("link_monitoring", "mii")
+
+downdelay = section:taboption("advanced", Value, "downdelay",
+	translate("Down Delay"),
+	translate("Specifies the time in milliseconds to wait before disabling a slave after a link failure detection"))
+downdelay.datatype = "uinteger"
+downdelay.default = 0
+downdelay:depends("link_monitoring", "mii")
+
+updelay = section:taboption("advanced", Value, "updelay",
+	translate("Up Delay"),
+	translate("Specifies the time in milliseconds to wait before enabling a slave after a link recovery detection"))
+updelay.datatype = "uinteger"
+updelay.default = 0
+updelay:depends("link_monitoring", "mii")
+
+use_carrier = section:taboption("advanced", ListValue, "use_carrier",
+	translate("Method to determine link status"),
+	translate("Specifies whether or not miimon should use MII or ETHTOOL ioctls vs. netif_carrier_ok()"))
+use_carrier.default = "1"
+use_carrier:value("0", translate("MII / ETHTOOL ioctls"))
+use_carrier:value("1", translate("netif_carrier_ok()"))
+use_carrier:depends("link_monitoring", "mii")
+
+
+-- we use the bondig_policy validate function to check for other required values
+-- (e.g. slave interfaces, primary interface, ARP targets, ...) as validate functions
+-- are not called for _empty_ fields. bonding_policy will never be empty.
+function bonding_policy.validate(self, value, section)
+
+	local selected_link_monitoring = link_monitoring:formvalue(section)
+	local selected_arp_ip_targets = arp_ip_target:formvalue(section)
+
+	local selected_policy = bonding_policy:formvalue(section)
+
+	local selected_slaves = slaves:formvalue(section)
+	local selected_primary = primary:formvalue(section)
+
+	if selected_link_monitoring == "arp" then
+		if selected_policy == "802.3ad" or selected_policy == "balance-tlb" or selected_policy == "balance-alb" then
+			return nil, translate("ARP monitoring is not supported for the selected policy")
+		end
+
+		if #selected_arp_ip_targets == 0 then
+			return nil, translate("You must select at least one ARP IP target if ARP monitoring is selected")
+		end
+
+	end
+
+	if selected_slaves == nil then
+		return nil, translate("You must select at least one slave interface")
+	end
+
+	if selected_policy == "active-backup" or selected_policy == "balance-tlb" or selected_policy == "balance-alb" then
+		if selected_primary == nil then
+			return nil, translate("You must select a primary interface for the selected policy")
+		else
+			if (type(selected_slaves) == "table") then
+				for key,slave_value in pairs(selected_slaves) do
+					if slave_value == selected_primary then
+						return value
+					end
+				end
+			else
+				if selected_slaves == selected_primary then
+					return value
+				end
+			end
+		end
+
+		return nil, translate("You must select a primary interface which is included in selected slave interfaces")
+	end
+
+	return value
+end
+
diff --git a/package/lean/luci-proto-bonding/luasrc/model/network/proto_bonding.lua b/package/lean/luci-proto-bonding/luasrc/model/network/proto_bonding.lua
new file mode 100644
index 0000000000..2c0e3ddbc3
--- /dev/null
+++ b/package/lean/luci-proto-bonding/luasrc/model/network/proto_bonding.lua
@@ -0,0 +1,31 @@
+--[[
+
+Copyright (C) 2018 TDT AG <development@tdt.de>
+
+This is free software, licensed under the Apache License Version 2.0.
+See https://www.apache.org/licenses/LICENSE-2.0 for more information.
+
+]]--
+
+local proto = luci.model.network:register_protocol("bonding")
+
+function proto.get_i18n(self)
+	return luci.i18n.translate("Link Aggregation (Channel Bonding)")
+end
+
+function proto.is_installed(self)
+	return nixio.fs.access("/lib/netifd/proto/bonding.sh")
+end
+
+function proto.is_virtual(self)
+	return true
+end
+
+function proto.is_floating(self)
+	return true
+end
+
+function proto.opkg_package(self)
+	return "bonding"
+end
+
diff --git a/package/lean/luci-proto-bonding/po/de/bonding.po b/package/lean/luci-proto-bonding/po/de/bonding.po
new file mode 100644
index 0000000000..fc2c1e3c30
--- /dev/null
+++ b/package/lean/luci-proto-bonding/po/de/bonding.po
@@ -0,0 +1,398 @@
+msgid ""
+msgstr "Content-Type: text/plain; charset=UTF-8\n"
+
+msgid "ARP"
+msgstr ""
+
+msgid "ARP IP Targets"
+msgstr "ARP IP Ziele"
+
+msgid "ARP Interval"
+msgstr "ARP Intervall"
+
+msgid "ARP Validation"
+msgstr "ARP Überprüfung"
+
+msgid "ARP mode to consider a slave as being up"
+msgstr "ARP Methode um ein Slave als UP zu betrachten"
+
+msgid "ARP monitoring is not supported for the selected policy"
+msgstr "ARP Monitoring wird für die gewählte Bonding Methode nicht unterstützt"
+
+msgid "Active-Backup policy (active-backup, 1)"
+msgstr "Aktiv-Backup (active-backup, 1)"
+
+msgid "Adaptive load balancing (balance-alb, 6)"
+msgstr "Adaptives Load Balancing (balance-alb, 6)"
+
+msgid "Adaptive transmit load balancing (balance-tlb, 5)"
+msgstr "Adaptives Sende Load Balancing (balance-tlb, 5)"
+
+msgid "Aggregation Selection Logic"
+msgstr "Gruppierungslogik"
+
+msgid "Aggregator: All slaves down or has no slaves (stable, 0)"
+msgstr "Aggregator: Alle Slaves Down oder keine Slaves vorhanden (stable, 0)"
+
+msgid ""
+"Aggregator: Chosen by the largest number of ports + slave added/removed or "
+"state changes (count, 2)"
+msgstr ""
+"Aggregator: Ausgewählt durch die höchsten Portnummern + Slave hinzugefügt/"
+"entfernt oder Statuswechsel (count, 2)"
+
+msgid "Aggregator: Slave added/removed or state changes (bandwidth, 1)"
+msgstr ""
+"Aggregator:  Slave hinzugefügt/entfernt oder Statuswechsel (bandwidth, 1)"
+
+msgid "Bonding Policy"
+msgstr "Bonding Methode"
+
+msgid "Broadcast policy (broadcast, 3)"
+msgstr "Broadcast (broadcast, 3)"
+
+msgid "Consider the slave up when all ARP IP targets are reachable (all, 1)"
+msgstr ""
+"Slave wird als aktiv angesehen, wenn alle ARP IP Ziele erreichbar sind (all, "
+"1)"
+
+msgid "Consider the slave up when any ARP IP target is reachable (any, 0)"
+msgstr ""
+"Slave wird als aktiv angesehen, wenn irgendein ARP IP Ziel erreichbar ist "
+"(any, 0)"
+
+msgid "Down Delay"
+msgstr "Down Verzögerung"
+
+msgid "Drop Duplicate Frames"
+msgstr "Doppelte Frames verwerfen"
+
+msgid "Enable Dynamic Shuffling Of Flows"
+msgstr "Dynamisches Verteilen von Flows aktivieren"
+
+msgid "Every 30 seconds (slow, 0)"
+msgstr "Alle 30 Sekunden (slow, 0)"
+
+msgid "Every second (fast, 1)"
+msgstr "Jede Sekunde (fast, 1)"
+
+msgid "Filtering for all slaves, no validation"
+msgstr "Alle Slaves filtern, keine Überprüfung"
+
+msgid "Filtering for all slaves, validation only for active slave"
+msgstr "Alle Slaves filtern, Überprüfung nur für aktive Slaves"
+
+msgid "Filtering for all slaves, validation only for backup slaves"
+msgstr "Alle Slaves filtern, Überprüfung nur für Backup Slaves"
+
+msgid "IEEE 802.3ad Dynamic link aggregation (802.3ad, 4)"
+msgstr ""
+
+msgid "IPv4 address"
+msgstr "IPv4 Adresse"
+
+msgid "IPv4 netmask"
+msgstr "IPv4 Netzmaske"
+
+msgid "Interval For Sending Learning Packets"
+msgstr "Interval zum Senden von 'Learning Packets'"
+
+msgid "LACPDU Packets"
+msgstr "LACPDU Pakete"
+
+msgid "Link Aggregation (Channel Bonding)"
+msgstr "Link Aggregation (Kanalbündelung)"
+
+msgid "Link Monitoring"
+msgstr "Link Überwachung"
+
+msgid "MAC Address For The Actor"
+msgstr "MAC Adresse für den Aktor"
+
+msgid "MII"
+msgstr ""
+
+msgid "MII / ETHTOOL ioctls"
+msgstr ""
+
+msgid "MII Interval"
+msgstr "MII Intervall"
+
+msgid "Method of link monitoring"
+msgstr "Art der Link Überwachung"
+
+msgid "Method to determine link status"
+msgstr "Methode um Link Status festzustellen"
+
+msgid "Minimum Number of Links"
+msgstr "Minimale Anzahl von Links"
+
+msgid "No"
+msgstr "Nein"
+
+msgid "No validation or filtering"
+msgstr "Keine Überprüfung oder Filterung"
+
+msgid "Number of IGMP membership reports"
+msgstr "Anzahl von IGMP Zugehörigkeitsmeldungen"
+
+msgid "Number of peer notifications after failover event"
+msgstr "Anzahl von Peer Benachrichtigungen nach einem Failover Ereignis"
+
+msgid "Off"
+msgstr "Aus"
+
+msgid ""
+"Only if current active slave fails and the primary slave is up (failure, 2)"
+msgstr ""
+"Nur wenn das derzeit aktive Slave fehlschlägt und das primäre Slave Up ist "
+"(failure, 2)"
+
+msgid "Packets To Transmit Before Moving To Next Slave"
+msgstr "Zu übertragende Pakete vor Wechsel zum nächsten Slave"
+
+msgid "Primary Slave"
+msgstr "Primäres Slave"
+
+msgid ""
+"Primary becomes active slave when it comes back up if speed and duplex "
+"better than current slave (better, 1)"
+msgstr ""
+"Primäres Slave wird zum aktiven Slave wenn es wieder Up ist und "
+"Geschwindikkeit/Duplex besser als derzeitiges Slave (better, 1)"
+
+msgid "Primary becomes active slave whenever it comes back up (always, 0)"
+msgstr ""
+"Primäres Slave wird zum aktiven Slave wenn es wieder Up ist (always, 0)"
+
+msgid "Reselection policy for primary slave"
+msgstr "Methode zur Neuauswahl des primären Slaves"
+
+msgid "Round-Robin policy (balance-rr, 0)"
+msgstr "Round-Robin (balance-rr, 0)"
+
+msgid "Selects the transmit hash policy to use for slave selection"
+msgstr "Selektiert die Hash Übertragunsmethode zur Slave Auswahl"
+
+msgid "Set same MAC Address to all slaves"
+msgstr "Gleiche MAC Adresse für alle Slaves verwenden"
+
+msgid "Set to currently active slave (active, 1)"
+msgstr "Entsprechend dem derzeit aktiven Slave (active, 1)"
+
+msgid "Set to first slave added to the bond (follow, 2)"
+msgstr "Entsprechend dem ersten hinzugefügten Slave (follow, 2)"
+
+msgid "Slave Interfaces"
+msgstr ""
+
+msgid ""
+"Specifies that duplicate frames (received on inactive ports) should be "
+"dropped or delivered"
+msgstr ""
+"Spezifiziert ob doppelte Frames (empfangen auf inaktiven Ports) verworfen "
+"oder zugestellt werden"
+
+msgid "Specifies the ARP link monitoring frequency in milliseconds"
+msgstr "Häufigkeit des ARP Link Monitorings in Millisekunden"
+
+msgid "Specifies the IP addresses to use for ARP monitoring"
+msgstr "Für ARP Monitoring zu verwendende IP Adressen"
+
+msgid "Specifies the MII link monitoring frequency in milliseconds"
+msgstr "Häufigkeit des MII Link Monitorings in Millisekunden"
+
+msgid "Specifies the aggregation selection logic to use"
+msgstr "Spezifiziert die zu verwendende Gruppierungslogik"
+
+msgid ""
+"Specifies the mac-address for the actor in protocol packet exchanges "
+"(LACPDUs). If empty, masters' mac address defaults to system default"
+msgstr ""
+"Selektiert die MAC Adresse für den Aktor für LACPDUs. Wenn nicht angegeben "
+"entspricht die Master Mac Adresse der System Voreinstellung"
+
+msgid ""
+"Specifies the minimum number of links that must be active before asserting "
+"carrier"
+msgstr ""
+"Spezifiziert die minimale Anzahl aktiver Links bevor Carrier signalisiert "
+"wird"
+
+msgid "Specifies the mode to be used for this bonding interface"
+msgstr ""
+"Spezifizert die zu benutzende Bonding Methode für dieses Bonding Interface"
+
+msgid ""
+"Specifies the number of IGMP membership reports to be issued after a "
+"failover event in 200ms intervals"
+msgstr ""
+"Spezifiziert die Anzahl von IGMP Zugehörigkeitsmeldungen nach einem Failover "
+"Ereignis in 200ms Intervallen"
+
+msgid ""
+"Specifies the number of packets to transmit through a slave before moving to "
+"the next one"
+msgstr ""
+"Spezifiziert die Anzahl der auf einem Slave zu übertragenden Pakete vor "
+"Wechsel zum nächsten Slave"
+
+msgid ""
+"Specifies the number of peer notifications (gratuitous ARPs and unsolicited "
+"IPv6 Neighbor Advertisements) to be issued after a failover event"
+msgstr ""
+"Spezifiziert die Anzahl der Peer Benachrichtigungen (gratuitous ARPs and "
+"unsolicited IPv6 Neighbor Advertisements) nach einem Failover Ereignis"
+
+msgid ""
+"Specifies the number of seconds between instances where the bonding driver "
+"sends learning packets to each slaves peer switch"
+msgstr ""
+
+msgid "Specifies the quantity of ARP IP targets that must be reachable"
+msgstr "Spezifizert die Anzahl der ARP IP Ziele die erreichbar sein müssen"
+
+msgid ""
+"Specifies the rate in which the link partner will be asked to transmit "
+"LACPDU packets"
+msgstr ""
+"Spezifiziert die Häufigkeit in welcher der Link Partner aufgefordert wird "
+"LACPDU Pakete zu senden"
+
+msgid ""
+"Specifies the reselection policy for the primary slave when failure of the "
+"active slave or recovery of the primary slave occurs"
+msgstr ""
+"Spezifiziert die Neuauswahl für das primäre Slave wenn ein Ausfall des "
+"aktiven Slaves oder ein Recovery des primären Slaves passiert"
+
+msgid "Specifies the system priority"
+msgstr "Spezifiziert die System Priorität"
+
+msgid ""
+"Specifies the time in milliseconds to wait before disabling a slave after a "
+"link failure detection"
+msgstr ""
+"Spezifizert die Zeit in Millisekunden bevor ein Slave nach Erkennung eines "
+"Link Fehlers deaktiviert wird"
+
+msgid ""
+"Specifies the time in milliseconds to wait before enabling a slave after a "
+"link recovery detection"
+msgstr ""
+"Spezifizert die Zeit in Millisekunden nach der ein Slave nach Erkennung "
+"eines Link Recoveries aktiviert wird"
+
+msgid ""
+"Specifies whether ARP probes and replies should be validated or non-ARP "
+"traffic should be filtered for link monitoring"
+msgstr ""
+"Spezifiziert ob ARP Anfragen und Antworten überprüft oder nicht ARP "
+"Datenverkehr für das Link Monitoring gefiltert werden sollen"
+
+msgid ""
+"Specifies whether active-backup mode should set all slaves to the same MAC "
+"address at enslavement"
+msgstr ""
+"Spezifiziert ob 'active-backup' Modus allen Slaves die gleiche MAC Adresse "
+"beim Zusammenschluss zuweisen soll"
+
+msgid ""
+"Specifies whether or not miimon should use MII or ETHTOOL ioctls vs. "
+"netif_carrier_ok()"
+msgstr ""
+"Spezifiziert ob 'miimon' MII oder ETHTOOL ioctls verwenden soll oder "
+"netif_carrier_ok()"
+
+msgid "Specifies whether the bonding interface should use DHCP client mode"
+msgstr ""
+"Spezifiziert ob das Bonding Interface im DHCP Client Modus arbeiten soll"
+
+msgid ""
+"Specifies whether to shuffle active flows across slaves based on the load"
+msgstr ""
+"Spezifiziert ob aktiver Datenverkehr über Slaves lastabhängig verteilt "
+"werden soll"
+
+msgid ""
+"Specifies which slave interfaces should be attached to this bonding interface"
+msgstr ""
+"Spezifiziert welche Slave Interfaces diesem Bonding Interface zugeordnet "
+"werden sollen"
+
+msgid ""
+"Specifies which slave is the primary device. It will always be the active "
+"slave while it is available"
+msgstr ""
+"Spezifiziert welches Slave Interface als primäres Slave verwendet werden "
+"soll. Es wird immer als aktives Slave verwendet sofern es verfügbar ist."
+
+msgid "System Priority"
+msgstr "System Priorität"
+
+msgid "Transmit Hash Policy"
+msgstr "Hash Übertragungsmethode"
+
+msgid "Up Delay"
+msgstr "Up Verzögerung"
+
+msgid "Use DHCP (Client Mode)"
+msgstr "DHCP Client Mode verwenden"
+
+msgid "Use XOR of hardware MAC addresses (layer2)"
+msgstr "XOR der Hardware MAC Adressen verwenden (layer2)"
+
+msgid "Use XOR of hardware MAC addresses and IP addresses (layer2+3)"
+msgstr "XOR der Hardware MAC und IP Adressen verwenden (layer2+3)"
+
+msgid ""
+"Use XOR of hardware MAC addresses and IP addresses, rely on skb_flow_dissect "
+"(encap2+3)"
+msgstr ""
+"XOR der Hardware MAC und IP Adressen basierend auf skb_flow_dissect "
+"verwenden (encap2+3)"
+
+msgid "Use upper layer protocol information (layer3+4)"
+msgstr "Übergeordnete Protokollschicht Informationen verwenden (layer3+4)"
+
+msgid ""
+"Use upper layer protocol information, rely on skb_flow_dissect (encap3+4)"
+msgstr ""
+"Übergeordnete Protokollschicht Informationen basierend auf skb_flow_dissect "
+"verwenden (encap3+4)"
+
+msgid "Validation for all slaves"
+msgstr "Validierung für alle Slaves"
+
+msgid "Validation only for active slave"
+msgstr "Validierung nur für aktives Slave"
+
+msgid "Validation only for backup slaves"
+msgstr "Validierung nur für Backup Slaves"
+
+msgid "XOR policy (balance-xor, 2)"
+msgstr ""
+
+msgid "Yes"
+msgstr "Ja"
+
+msgid "Yes (none, 0)"
+msgstr "Ja (none, 0)"
+
+msgid "You must select a primary interface for the selected policy"
+msgstr "Für die gewählte Bonding Methode ist ein Primäres Slave erforderlich"
+
+msgid ""
+"You must select a primary interface which is included in selected slave "
+"interfaces"
+msgstr "Das primäre Interface muss in den selektierten Slaves enthalten sein"
+
+msgid ""
+"You must select at least one ARP IP target if ARP monitoring is selected"
+msgstr "Es muss mindestens ein ARP IP Ziel für ARP Monitoring definiert werden"
+
+msgid "You must select at least one slave interface"
+msgstr "Bitte mindestens ein Slave Interface auswählen"
+
+msgid "netif_carrier_ok()"
+msgstr ""
diff --git a/package/lean/luci-proto-bonding/po/en/bonding.po b/package/lean/luci-proto-bonding/po/en/bonding.po
new file mode 100644
index 0000000000..8f734db3de
--- /dev/null
+++ b/package/lean/luci-proto-bonding/po/en/bonding.po
@@ -0,0 +1,345 @@
+msgid "ARP"
+msgstr ""
+
+msgid "ARP IP Targets"
+msgstr ""
+
+msgid "ARP Interval"
+msgstr ""
+
+msgid "ARP Validation"
+msgstr ""
+
+msgid "ARP mode to consider a slave as being up"
+msgstr ""
+
+msgid "ARP monitoring is not supported for the selected policy"
+msgstr ""
+
+msgid "Active-Backup policy (active-backup, 1)"
+msgstr ""
+
+msgid "Adaptive load balancing (balance-alb, 6)"
+msgstr ""
+
+msgid "Adaptive transmit load balancing (balance-tlb, 5)"
+msgstr ""
+
+msgid "Aggregation Selection Logic"
+msgstr ""
+
+msgid "Aggregator: All slaves down or has no slaves (stable, 0)"
+msgstr ""
+
+msgid ""
+"Aggregator: Chosen by the largest number of ports + slave added/removed or "
+"state changes (count, 2)"
+msgstr ""
+
+msgid "Aggregator: Slave added/removed or state changes (bandwidth, 1)"
+msgstr ""
+
+msgid "Bonding Policy"
+msgstr ""
+
+msgid "Broadcast policy (broadcast, 3)"
+msgstr ""
+
+msgid "Consider the slave up when all ARP IP targets are reachable (all, 1)"
+msgstr ""
+
+msgid "Consider the slave up when any ARP IP target is reachable (any, 0)"
+msgstr ""
+
+msgid "Down Delay"
+msgstr ""
+
+msgid "Drop Duplicate Frames"
+msgstr ""
+
+msgid "Enable Dynamic Shuffling Of Flows"
+msgstr ""
+
+msgid "Every 30 seconds (slow, 0)"
+msgstr ""
+
+msgid "Every second (fast, 1)"
+msgstr ""
+
+msgid "Filtering for all slaves, no validation"
+msgstr ""
+
+msgid "Filtering for all slaves, validation only for active slave"
+msgstr ""
+
+msgid "Filtering for all slaves, validation only for backup slaves"
+msgstr ""
+
+msgid "IEEE 802.3ad Dynamic link aggregation (802.3ad, 4)"
+msgstr ""
+
+msgid "IPv4 address"
+msgstr ""
+
+msgid "IPv4 netmask"
+msgstr ""
+
+msgid "Interval For Sending Learning Packets"
+msgstr ""
+
+msgid "LACPDU Packets"
+msgstr ""
+
+msgid "Link Aggregation (Channel Bonding)"
+msgstr ""
+
+msgid "Link Monitoring"
+msgstr ""
+
+msgid "MAC Address For The Actor"
+msgstr ""
+
+msgid "MII"
+msgstr ""
+
+msgid "MII / ETHTOOL ioctls"
+msgstr ""
+
+msgid "MII Interval"
+msgstr ""
+
+msgid "Method of link monitoring"
+msgstr ""
+
+msgid "Method to determine link status"
+msgstr ""
+
+msgid "Minimum Number of Links"
+msgstr ""
+
+msgid "No"
+msgstr ""
+
+msgid "No validation or filtering"
+msgstr ""
+
+msgid "Number of IGMP membership reports"
+msgstr ""
+
+msgid "Number of peer notifications after failover event"
+msgstr ""
+
+msgid "Off"
+msgstr ""
+
+msgid ""
+"Only if current active slave fails and the primary slave is up (failure, 2)"
+msgstr ""
+
+msgid "Packets To Transmit Before Moving To Next Slave"
+msgstr ""
+
+msgid "Primary Slave"
+msgstr ""
+
+msgid ""
+"Primary becomes active slave when it comes back up if speed and duplex "
+"better than current slave (better, 1)"
+msgstr ""
+
+msgid "Primary becomes active slave whenever it comes back up (always, 0)"
+msgstr ""
+
+msgid "Reselection policy for primary slave"
+msgstr ""
+
+msgid "Round-Robin policy (balance-rr, 0)"
+msgstr ""
+
+msgid "Selects the transmit hash policy to use for slave selection"
+msgstr ""
+
+msgid "Set same MAC Address to all slaves"
+msgstr ""
+
+msgid "Set to currently active slave (active, 1)"
+msgstr ""
+
+msgid "Set to first slave added to the bond (follow, 2)"
+msgstr ""
+
+msgid "Slave Interfaces"
+msgstr ""
+
+msgid ""
+"Specifies that duplicate frames (received on inactive ports) should be "
+"dropped or delivered"
+msgstr ""
+
+msgid "Specifies the ARP link monitoring frequency in milliseconds"
+msgstr ""
+
+msgid "Specifies the IP addresses to use for ARP monitoring"
+msgstr ""
+
+msgid "Specifies the MII link monitoring frequency in milliseconds"
+msgstr ""
+
+msgid "Specifies the aggregation selection logic to use"
+msgstr ""
+
+msgid ""
+"Specifies the mac-address for the actor in protocol packet exchanges "
+"(LACPDUs). If empty, masters' mac address defaults to system default"
+msgstr ""
+
+msgid ""
+"Specifies the minimum number of links that must be active before asserting "
+"carrier"
+msgstr ""
+
+msgid "Specifies the mode to be used for this bonding interface"
+msgstr ""
+
+msgid ""
+"Specifies the number of IGMP membership reports to be issued after a "
+"failover event in 200ms intervals"
+msgstr ""
+
+msgid ""
+"Specifies the number of packets to transmit through a slave before moving to "
+"the next one"
+msgstr ""
+
+msgid ""
+"Specifies the number of peer notifications (gratuitous ARPs and unsolicited "
+"IPv6 Neighbor Advertisements) to be issued after a failover event"
+msgstr ""
+
+msgid ""
+"Specifies the number of seconds between instances where the bonding driver "
+"sends learning packets to each slaves peer switch"
+msgstr ""
+
+msgid "Specifies the quantity of ARP IP targets that must be reachable"
+msgstr ""
+
+msgid ""
+"Specifies the rate in which the link partner will be asked to transmit "
+"LACPDU packets"
+msgstr ""
+
+msgid ""
+"Specifies the reselection policy for the primary slave when failure of the "
+"active slave or recovery of the primary slave occurs"
+msgstr ""
+
+msgid "Specifies the system priority"
+msgstr ""
+
+msgid ""
+"Specifies the time in milliseconds to wait before disabling a slave after a "
+"link failure detection"
+msgstr ""
+
+msgid ""
+"Specifies the time in milliseconds to wait before enabling a slave after a "
+"link recovery detection"
+msgstr ""
+
+msgid ""
+"Specifies whether ARP probes and replies should be validated or non-ARP "
+"traffic should be filtered for link monitoring"
+msgstr ""
+
+msgid ""
+"Specifies whether active-backup mode should set all slaves to the same MAC "
+"address at enslavement"
+msgstr ""
+
+msgid ""
+"Specifies whether or not miimon should use MII or ETHTOOL ioctls vs. "
+"netif_carrier_ok()"
+msgstr ""
+
+msgid "Specifies whether the bonding interface should use DHCP client mode"
+msgstr ""
+
+msgid ""
+"Specifies whether to shuffle active flows across slaves based on the load"
+msgstr ""
+
+msgid ""
+"Specifies which slave interfaces should be attached to this bonding interface"
+msgstr ""
+
+msgid ""
+"Specifies which slave is the primary device. It will always be the active "
+"slave while it is available"
+msgstr ""
+
+msgid "System Priority"
+msgstr ""
+
+msgid "Transmit Hash Policy"
+msgstr ""
+
+msgid "Up Delay"
+msgstr ""
+
+msgid "Use DHCP (Client Mode)"
+msgstr ""
+
+msgid "Use XOR of hardware MAC addresses (layer2)"
+msgstr ""
+
+msgid "Use XOR of hardware MAC addresses and IP addresses (layer2+3)"
+msgstr ""
+
+msgid ""
+"Use XOR of hardware MAC addresses and IP addresses, rely on skb_flow_dissect "
+"(encap2+3)"
+msgstr ""
+
+msgid "Use upper layer protocol information (layer3+4)"
+msgstr ""
+
+msgid ""
+"Use upper layer protocol information, rely on skb_flow_dissect (encap3+4)"
+msgstr ""
+
+msgid "Validation for all slaves"
+msgstr ""
+
+msgid "Validation only for active slave"
+msgstr ""
+
+msgid "Validation only for backup slaves"
+msgstr ""
+
+msgid "XOR policy (balance-xor, 2)"
+msgstr ""
+
+msgid "Yes"
+msgstr ""
+
+msgid "Yes (none, 0)"
+msgstr ""
+
+msgid "You must select a primary interface for the selected policy"
+msgstr ""
+
+msgid ""
+"You must select a primary interface which is included in selected slave "
+"interfaces"
+msgstr ""
+
+msgid ""
+"You must select at least one ARP IP target if ARP monitoring is selected"
+msgstr ""
+
+msgid "You must select at least one slave interface"
+msgstr ""
+
+msgid "netif_carrier_ok()"
+msgstr ""
diff --git a/package/lean/luci-proto-bonding/po/templates/bonding.pot b/package/lean/luci-proto-bonding/po/templates/bonding.pot
new file mode 100644
index 0000000000..96878ec981
--- /dev/null
+++ b/package/lean/luci-proto-bonding/po/templates/bonding.pot
@@ -0,0 +1,348 @@
+msgid ""
+msgstr "Content-Type: text/plain; charset=UTF-8"
+
+msgid "ARP"
+msgstr ""
+
+msgid "ARP IP Targets"
+msgstr ""
+
+msgid "ARP Interval"
+msgstr ""
+
+msgid "ARP Validation"
+msgstr ""
+
+msgid "ARP mode to consider a slave as being up"
+msgstr ""
+
+msgid "ARP monitoring is not supported for the selected policy"
+msgstr ""
+
+msgid "Active-Backup policy (active-backup, 1)"
+msgstr ""
+
+msgid "Adaptive load balancing (balance-alb, 6)"
+msgstr ""
+
+msgid "Adaptive transmit load balancing (balance-tlb, 5)"
+msgstr ""
+
+msgid "Aggregation Selection Logic"
+msgstr ""
+
+msgid "Aggregator: All slaves down or has no slaves (stable, 0)"
+msgstr ""
+
+msgid ""
+"Aggregator: Chosen by the largest number of ports + slave added/removed or "
+"state changes (count, 2)"
+msgstr ""
+
+msgid "Aggregator: Slave added/removed or state changes (bandwidth, 1)"
+msgstr ""
+
+msgid "Bonding Policy"
+msgstr ""
+
+msgid "Broadcast policy (broadcast, 3)"
+msgstr ""
+
+msgid "Consider the slave up when all ARP IP targets are reachable (all, 1)"
+msgstr ""
+
+msgid "Consider the slave up when any ARP IP target is reachable (any, 0)"
+msgstr ""
+
+msgid "Down Delay"
+msgstr ""
+
+msgid "Drop Duplicate Frames"
+msgstr ""
+
+msgid "Enable Dynamic Shuffling Of Flows"
+msgstr ""
+
+msgid "Every 30 seconds (slow, 0)"
+msgstr ""
+
+msgid "Every second (fast, 1)"
+msgstr ""
+
+msgid "Filtering for all slaves, no validation"
+msgstr ""
+
+msgid "Filtering for all slaves, validation only for active slave"
+msgstr ""
+
+msgid "Filtering for all slaves, validation only for backup slaves"
+msgstr ""
+
+msgid "IEEE 802.3ad Dynamic link aggregation (802.3ad, 4)"
+msgstr ""
+
+msgid "IPv4 address"
+msgstr ""
+
+msgid "IPv4 netmask"
+msgstr ""
+
+msgid "Interval For Sending Learning Packets"
+msgstr ""
+
+msgid "LACPDU Packets"
+msgstr ""
+
+msgid "Link Aggregation (Channel Bonding)"
+msgstr ""
+
+msgid "Link Monitoring"
+msgstr ""
+
+msgid "MAC Address For The Actor"
+msgstr ""
+
+msgid "MII"
+msgstr ""
+
+msgid "MII / ETHTOOL ioctls"
+msgstr ""
+
+msgid "MII Interval"
+msgstr ""
+
+msgid "Method of link monitoring"
+msgstr ""
+
+msgid "Method to determine link status"
+msgstr ""
+
+msgid "Minimum Number of Links"
+msgstr ""
+
+msgid "No"
+msgstr ""
+
+msgid "No validation or filtering"
+msgstr ""
+
+msgid "Number of IGMP membership reports"
+msgstr ""
+
+msgid "Number of peer notifications after failover event"
+msgstr ""
+
+msgid "Off"
+msgstr ""
+
+msgid ""
+"Only if current active slave fails and the primary slave is up (failure, 2)"
+msgstr ""
+
+msgid "Packets To Transmit Before Moving To Next Slave"
+msgstr ""
+
+msgid "Primary Slave"
+msgstr ""
+
+msgid ""
+"Primary becomes active slave when it comes back up if speed and duplex "
+"better than current slave (better, 1)"
+msgstr ""
+
+msgid "Primary becomes active slave whenever it comes back up (always, 0)"
+msgstr ""
+
+msgid "Reselection policy for primary slave"
+msgstr ""
+
+msgid "Round-Robin policy (balance-rr, 0)"
+msgstr ""
+
+msgid "Selects the transmit hash policy to use for slave selection"
+msgstr ""
+
+msgid "Set same MAC Address to all slaves"
+msgstr ""
+
+msgid "Set to currently active slave (active, 1)"
+msgstr ""
+
+msgid "Set to first slave added to the bond (follow, 2)"
+msgstr ""
+
+msgid "Slave Interfaces"
+msgstr ""
+
+msgid ""
+"Specifies that duplicate frames (received on inactive ports) should be "
+"dropped or delivered"
+msgstr ""
+
+msgid "Specifies the ARP link monitoring frequency in milliseconds"
+msgstr ""
+
+msgid "Specifies the IP addresses to use for ARP monitoring"
+msgstr ""
+
+msgid "Specifies the MII link monitoring frequency in milliseconds"
+msgstr ""
+
+msgid "Specifies the aggregation selection logic to use"
+msgstr ""
+
+msgid ""
+"Specifies the mac-address for the actor in protocol packet exchanges "
+"(LACPDUs). If empty, masters' mac address defaults to system default"
+msgstr ""
+
+msgid ""
+"Specifies the minimum number of links that must be active before asserting "
+"carrier"
+msgstr ""
+
+msgid "Specifies the mode to be used for this bonding interface"
+msgstr ""
+
+msgid ""
+"Specifies the number of IGMP membership reports to be issued after a "
+"failover event in 200ms intervals"
+msgstr ""
+
+msgid ""
+"Specifies the number of packets to transmit through a slave before moving to "
+"the next one"
+msgstr ""
+
+msgid ""
+"Specifies the number of peer notifications (gratuitous ARPs and unsolicited "
+"IPv6 Neighbor Advertisements) to be issued after a failover event"
+msgstr ""
+
+msgid ""
+"Specifies the number of seconds between instances where the bonding driver "
+"sends learning packets to each slaves peer switch"
+msgstr ""
+
+msgid "Specifies the quantity of ARP IP targets that must be reachable"
+msgstr ""
+
+msgid ""
+"Specifies the rate in which the link partner will be asked to transmit "
+"LACPDU packets"
+msgstr ""
+
+msgid ""
+"Specifies the reselection policy for the primary slave when failure of the "
+"active slave or recovery of the primary slave occurs"
+msgstr ""
+
+msgid "Specifies the system priority"
+msgstr ""
+
+msgid ""
+"Specifies the time in milliseconds to wait before disabling a slave after a "
+"link failure detection"
+msgstr ""
+
+msgid ""
+"Specifies the time in milliseconds to wait before enabling a slave after a "
+"link recovery detection"
+msgstr ""
+
+msgid ""
+"Specifies whether ARP probes and replies should be validated or non-ARP "
+"traffic should be filtered for link monitoring"
+msgstr ""
+
+msgid ""
+"Specifies whether active-backup mode should set all slaves to the same MAC "
+"address at enslavement"
+msgstr ""
+
+msgid ""
+"Specifies whether or not miimon should use MII or ETHTOOL ioctls vs. "
+"netif_carrier_ok()"
+msgstr ""
+
+msgid "Specifies whether the bonding interface should use DHCP client mode"
+msgstr ""
+
+msgid ""
+"Specifies whether to shuffle active flows across slaves based on the load"
+msgstr ""
+
+msgid ""
+"Specifies which slave interfaces should be attached to this bonding interface"
+msgstr ""
+
+msgid ""
+"Specifies which slave is the primary device. It will always be the active "
+"slave while it is available"
+msgstr ""
+
+msgid "System Priority"
+msgstr ""
+
+msgid "Transmit Hash Policy"
+msgstr ""
+
+msgid "Up Delay"
+msgstr ""
+
+msgid "Use DHCP (Client Mode)"
+msgstr ""
+
+msgid "Use XOR of hardware MAC addresses (layer2)"
+msgstr ""
+
+msgid "Use XOR of hardware MAC addresses and IP addresses (layer2+3)"
+msgstr ""
+
+msgid ""
+"Use XOR of hardware MAC addresses and IP addresses, rely on skb_flow_dissect "
+"(encap2+3)"
+msgstr ""
+
+msgid "Use upper layer protocol information (layer3+4)"
+msgstr ""
+
+msgid ""
+"Use upper layer protocol information, rely on skb_flow_dissect (encap3+4)"
+msgstr ""
+
+msgid "Validation for all slaves"
+msgstr ""
+
+msgid "Validation only for active slave"
+msgstr ""
+
+msgid "Validation only for backup slaves"
+msgstr ""
+
+msgid "XOR policy (balance-xor, 2)"
+msgstr ""
+
+msgid "Yes"
+msgstr ""
+
+msgid "Yes (none, 0)"
+msgstr ""
+
+msgid "You must select a primary interface for the selected policy"
+msgstr ""
+
+msgid ""
+"You must select a primary interface which is included in selected slave "
+"interfaces"
+msgstr ""
+
+msgid ""
+"You must select at least one ARP IP target if ARP monitoring is selected"
+msgstr ""
+
+msgid "You must select at least one slave interface"
+msgstr ""
+
+msgid "netif_carrier_ok()"
+msgstr ""
diff --git a/package/lean/n2n_v2/Makefile b/package/lean/n2n_v2/Makefile
new file mode 100644
index 0000000000..01f0415c59
--- /dev/null
+++ b/package/lean/n2n_v2/Makefile
@@ -0,0 +1,53 @@
+#
+# Copyright (C) 2007-2012 OpenWrt.org
+#
+# This is free software, licensed under the GNU General Public License v2.
+# See /LICENSE for more information.
+#
+
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=n2n_v2
+PKG_VERSION:=2.4
+PKG_RELEASE:=1
+PKG_REV=25563f31d9aba5f61b3e2fb42941b66dad1f531f
+
+PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION)-r$(PKG_REV).tar.bz2
+PKG_SOURCE_SUBDIR:=$(PKG_NAME)-$(PKG_VERSION)
+PKG_SOURCE_PROTO:=git
+PKG_SOURCE_VERSION:=$(PKG_REV)
+PKG_SOURCE_URL:=https://github.com/ntop/n2n.git
+
+include $(INCLUDE_DIR)/package.mk
+
+define Package/n2n_v2
+  SECTION:=net
+  CATEGORY:=Network
+  TITLE:=N2N VPN tunneling daemon(V2)
+  URL:=http://www.ntop.org/n2n/
+  SUBMENU:=VPN
+  DEPENDS:=+libpthread +kmod-tun +libopenssl
+endef
+
+define Build/Compile
+	$(MAKE) -C $(PKG_BUILD_DIR) \
+		$(TARGET_CONFIGURE_OPTS) \
+		CFLAGS="$(TARGET_CFLAGS)" \
+		INSTALL_PROG=":"
+endef
+
+define Package/n2n_v2/install
+	$(INSTALL_DIR) $(1)/usr/sbin
+	$(INSTALL_BIN) $(PKG_BUILD_DIR)/edge $(1)/usr/sbin/
+	$(INSTALL_BIN) $(PKG_BUILD_DIR)/supernode $(1)/usr/sbin/
+	$(INSTALL_DIR) $(1)/etc/config
+	$(INSTALL_DATA) ./files/n2n_v2.config $(1)/etc/config/n2n_v2
+	$(INSTALL_DIR) $(1)/etc/init.d
+	$(INSTALL_BIN) ./files/n2n_v2.init $(1)/etc/init.d/n2n_v2
+endef
+
+define Package/n2n_v2/conffiles
+/etc/config/n2n_v2
+endef
+
+$(eval $(call BuildPackage,n2n_v2))
diff --git a/package/lean/n2n_v2/files/n2n_v2.config b/package/lean/n2n_v2/files/n2n_v2.config
new file mode 100755
index 0000000000..c765d02dd2
--- /dev/null
+++ b/package/lean/n2n_v2/files/n2n_v2.config
@@ -0,0 +1,15 @@
+config edge
+	option enabled      '0'
+	option tunname      'n2n_edge'
+	option mode         'static'
+	option ipaddr		'10.0.0.100'
+	option netmask      '255.255.255.0'
+	option supernode	'1.2.3.4'
+	option port         '1234'
+	option community	'example'
+	option key          'password'
+	option route		'0'
+
+config supernode
+	option enabled      '0'
+	option port         '1235'
diff --git a/package/lean/n2n_v2/files/n2n_v2.init b/package/lean/n2n_v2/files/n2n_v2.init
new file mode 100755
index 0000000000..87efbfde76
--- /dev/null
+++ b/package/lean/n2n_v2/files/n2n_v2.init
@@ -0,0 +1,62 @@
+#!/bin/sh /etc/rc.common
+# Copyright (C) 2008-2012 OpenWrt.org
+
+START=90
+
+start_instance() {
+	local cfg="$1"
+
+	config_get type "$cfg" TYPE
+
+	case "$type" in
+	  edge)
+        config_get_bool enabled "$cfg" 'enabled' '0'
+        [ "$enabled" = "0" ] && return 1
+        config_get tunname "$cfg" 'tunname'
+        config_get mode "$cfg" 'mode'
+		config_get ipaddr "$cfg" 'ipaddr'
+        config_get netmask "$cfg" 'netmask'
+		config_get supernode "$cfg" 'supernode'
+		config_get port "$cfg" 'port'
+		config_get community "$cfg" 'community'
+		config_get key "$cfg" 'key'
+		config_get_bool route "$cfg" 'route' '0'
+		[ "$route" = "1" ] && args='-r'
+        [ "$mode" = 'dhcp' ] && ipaddr='0.0.0.0'
+        /usr/sbin/edge -d $tunname -a ${mode}:${ipaddr} -c $community $([ -n "$key" ] && echo -k $key) -s ${netmask} -l ${supernode}:${port} $args
+		;;
+	  supernode)
+        config_get_bool enabled "$cfg" 'enabled' '0'
+        [ "$enabled" = "0" ] && return 1
+		config_get port "$cfg" port
+		/usr/sbin/supernode -l $port &
+		;;
+	esac
+}
+
+stop_instance() {
+	local cfg="$1"
+
+	config_get type "$cfg" TYPE
+
+	case "$type" in
+	  edge)
+		killall -9 edge
+		;;
+	  supernode)
+		killall -9 supernode
+		;;
+	esac
+}
+
+start() {
+	config_load 'n2n_v2'
+	config_foreach start_instance 'edge'
+	config_foreach start_instance 'supernode'
+}
+
+stop() {
+	config_load 'n2n_v2'
+    killall -9 edge
+    killall -9 supernode
+}
diff --git a/package/lean/nft-qos/Makefile b/package/lean/nft-qos/Makefile
new file mode 100644
index 0000000000..78e0ec2b95
--- /dev/null
+++ b/package/lean/nft-qos/Makefile
@@ -0,0 +1,59 @@
+#
+# Copyright (C) 2018 rosysong@rosinson.com
+#
+# This is free software, licensed under the GNU General Public License v2.
+# See /LICENSE for more information.
+#
+
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=nft-qos
+PKG_VERSION:=1.0.6
+PKG_RELEASE:=1
+PKG_LICENSE:=GPL-2.0
+
+PKG_MAINTAINER:=Rosy Song <rosysong@rosinson.com>
+
+PKG_BUILD_DIR := $(BUILD_DIR)/$(PKG_NAME)
+
+include $(INCLUDE_DIR)/package.mk
+
+define Package/nft-qos
+  SECTION:=utils
+  CATEGORY:=Base system
+  DEPENDS:=+nftables +kmod-nft-netdev +kmod-nft-bridge
+  TITLE:=QoS scripts over nftables
+  PKGARCH:=all
+endef
+
+define Package/nft-qos/description
+ This package provides implementation for qos over nftables.
+ Currently, static/dynamic qos and traffic shaping are supported.
+endef
+
+define Package/nft-qos/conffiles
+/etc/config/nft-qos
+endef
+
+define Build/Prepare
+endef
+
+define Build/Configure
+endef
+
+define Build/Compile
+endef
+
+define Package/nft-qos/install
+	$(INSTALL_DIR) $(1)/lib/nft-qos
+	$(INSTALL_DATA) ./files/lib/* $(1)/lib/nft-qos/
+	$(INSTALL_DIR) $(1)/etc/config
+	$(INSTALL_CONF) ./files/nft-qos.config $(1)/etc/config/nft-qos
+	$(INSTALL_DIR) $(1)/etc/init.d
+	$(INSTALL_BIN) ./files/nft-qos.init $(1)/etc/init.d/nft-qos
+	$(INSTALL_DIR) $(1)/etc/hotplug.d/dhcp
+	$(INSTALL_BIN) ./files/nft-qos-monitor.hotplug $(1)/etc/hotplug.d/dhcp/00-nft-qos-monitor
+	$(INSTALL_BIN) ./files/nft-qos-dynamic.hotplug $(1)/etc/hotplug.d/dhcp/01-nft-qos-dynamic
+endef
+
+$(eval $(call BuildPackage,nft-qos))
diff --git a/package/lean/nft-qos/files/lib/core.sh b/package/lean/nft-qos/files/lib/core.sh
new file mode 100755
index 0000000000..d3c9d641f2
--- /dev/null
+++ b/package/lean/nft-qos/files/lib/core.sh
@@ -0,0 +1,93 @@
+#!/bin/sh
+#
+# Copyright (C) 2018 rosysong@rosinson.com
+#
+
+# for uci_validate_section()
+. /lib/functions/procd.sh
+
+NFT_QOS_HAS_BRIDGE=
+NFT_QOS_INET_FAMILY=ip
+NFT_QOS_SCRIPT_TEXT=
+NFT_QOS_SCRIPT_FILE=/tmp/qos.nft
+
+qosdef_appendx() { # <string to be appended>
+	NFT_QOS_SCRIPT_TEXT="$NFT_QOS_SCRIPT_TEXT""$1"
+}
+
+qosdef_append_chain_def() { # <type> <hook> <priority> <policy>
+	qosdef_appendx "\t\ttype $1 hook $2 priority $3; policy $4;\n"
+}
+
+qosdef_append_chain_ingress() { # <type> <device> <priority> <policy>
+	qosdef_appendx "\t\ttype $1 hook ingress device $2 priority $3; policy $4;\n"
+}
+
+# qosdef_append_rule_{MATCH}_{STATEMENT}
+qosdef_append_rule_ip_limit() { # <ipaddr> <operator> <unit> <rate>
+	local ipaddr=$1
+	local operator=$2
+	local unit=$3
+	local rate=$4
+
+	qosdef_appendx \
+	    "\t\tip $operator $ipaddr limit rate over $rate $unit/second drop\n"
+}
+
+# qosdef_append_rule_{MATCH}_{POLICY}
+qosdef_append_rule_ip_policy() { # <operator> <ipaddr> <policy>
+	qosdef_appendx "\t\tip $1 $2 $3\n"
+}
+
+_handle_limit_whitelist() { # <value> <chain>
+	local ipaddr=$1
+	local operator
+
+	[ -z "$ipaddr" ] && return
+
+	case "$2" in
+		download) operator="daddr";;
+		upload) operator="saddr";;
+	esac
+
+	qosdef_append_rule_ip_policy $operator $ipaddr accept
+}
+
+qosdef_append_rule_limit_whitelist() { # <chain>
+	config_list_foreach default limit_whitelist _handle_limit_whitelist $1
+}
+
+qosdef_flush_table() { # <family> <table>
+	nft flush table $1 $2 2>/dev/null
+}
+
+qosdef_remove_table() { # <family> <table>
+	nft delete table $1 $2 2>/dev/null
+}
+
+qosdef_init_header() { # add header for nft script
+	qosdef_appendx "#!/usr/sbin/nft -f\n"
+	qosdef_appendx "# Copyright (C) 2018 rosysong@rosinson.com\n"
+	qosdef_appendx "#\n\n"
+}
+
+qosdef_init_env() {
+	# check interface type of lan
+	local lt="$(uci_get "network.lan.type")"
+	[ "$lt" = "bridge" ] && export NFT_QOS_HAS_BRIDGE="y"
+
+	# check if ipv6 support
+	[ -e /proc/sys/net/ipv6 ] && export NFT_QOS_INET_FAMILY="inet"
+}
+
+qosdef_clean_cache() {
+	rm -f $NFT_QOS_SCRIPT_FILE
+}
+
+qosdef_init_done() {
+	echo -e $NFT_QOS_SCRIPT_TEXT > $NFT_QOS_SCRIPT_FILE 2>/dev/null
+}
+
+qosdef_start() {
+	nft -f $NFT_QOS_SCRIPT_FILE 2>/dev/null
+}
diff --git a/package/lean/nft-qos/files/lib/dynamic.sh b/package/lean/nft-qos/files/lib/dynamic.sh
new file mode 100755
index 0000000000..207daca3f6
--- /dev/null
+++ b/package/lean/nft-qos/files/lib/dynamic.sh
@@ -0,0 +1,90 @@
+#!/bin/sh
+#
+# Copyright (C) 2018 rosysong@rosinson.com
+#
+
+. /lib/nft-qos/core.sh
+
+qosdef_validate_dynamic() {
+	uci_load_validate nft-qos default "$1" "$2" \
+		'limit_enable:bool:0' \
+		'limit_type:maxlength(8)' \
+		'dynamic_bw_up:uinteger:100' \
+		'dynamic_bw_down:uinteger:100'
+}
+
+# return average rate for dhcp leases
+qosdef_dynamic_rate() { # <bandwidth>
+	local c=0 c6=0
+
+	[ ! -e /tmp/dhcp.leases -a \
+	  ! -e /var/dhcp6.leases ] && return
+
+	[ -e /tmp/dhcp.leases ] && \
+	  c=$(wc -l < /tmp/dhcp.leases 2>/dev/null)
+	[ -e /var/dhcp6.leases ] && \
+	  c6=$(wc -l < /var/dhcp6.leases 2>/dev/null)
+	[ $c -eq 0 -a $c6 -eq 0 ] && \
+	  { echo 12500; return; }
+
+	echo $(($1 / ($c + $c6)))
+}
+
+qosdef_append_chain_dym() { # <hook> <name> <bandwidth>
+	local cidr cidr6
+	local operator rate
+	local hook=$1 name=$2 bandwidth=$3
+
+	config_get cidr default 'dynamic_cidr'
+	config_get cidr6 default 'dynamic_cidr6'
+
+	[ -z "$cidr" -a -z "$cidr6" ] && return
+
+	case "$2" in
+		download) operator=daddr;;
+		upload) operator=saddr;;
+	esac
+
+	rate=$(qosdef_dynamic_rate $bandwidth)
+
+	qosdef_appendx "\tchain $name {\n"
+	qosdef_append_chain_def filter $hook 0 accept
+	qosdef_append_rule_limit_whitelist $name
+	[ -n "$cidr" ] && \
+		qosdef_append_rule_ip_limit $cidr $operator kbytes $rate
+	[ -n "$cidr6" ] && \
+		qosdef_append_rule_ip_limit $cidr6 $operator kbytes $rate
+	qosdef_appendx "\t}\n"
+}
+
+qosdef_flush_dynamic() {
+	qosdef_flush_table "$NFT_QOS_INET_FAMILY" nft-qos-dynamic
+}
+
+# init dynamic qos
+qosdef_init_dynamic() {
+	local hook_ul="prerouting" hook_dl="postrouting"
+
+	[ "$2" = 0 ] || {
+		logger -t nft-qos-dynamic "validation failed"
+		return 1
+	}
+
+	[ $limit_enable -eq 0 -o \
+		"$limit_type" = "static" ] && return 1
+
+	# Transfer mbits/s to mbytes/s
+	# e.g. 100,000 kbits == 12,500 kbytes
+	dynamic_bw_up=$(($dynamic_bw_up * 1000 / 8))
+	dynamic_bw_down=$(($dynamic_bw_down * 1000 / 8))
+
+	[ -z "$NFT_QOS_HAS_BRIDGE" ] && {
+		hook_ul="postrouting"
+		hook_dl="prerouting"
+	}
+
+	qosdef_appendx "table $NFT_QOS_INET_FAMILY nft-qos-dynamic {\n"
+	qosdef_append_chain_dym $hook_ul upload $dynamic_bw_up
+	qosdef_append_chain_dym $hook_dl download $dynamic_bw_down
+	qosdef_appendx "}\n"
+}
diff --git a/package/lean/nft-qos/files/lib/monitor.sh b/package/lean/nft-qos/files/lib/monitor.sh
new file mode 100755
index 0000000000..54de88eb36
--- /dev/null
+++ b/package/lean/nft-qos/files/lib/monitor.sh
@@ -0,0 +1,39 @@
+#!/bin/sh
+#
+# Copyright (C) 2018 rosysong@rosinson.com
+#
+
+. /lib/nft-qos/core.sh
+
+qosdef_monitor_get_ip_handle() { # <family> <chain> <ip>
+	echo $(nft list chain $1 nft-qos-monitor $2 -a 2>/dev/null | grep $3 | awk '{print $11}')
+}
+
+qosdef_monitor_add() { # <mac> <ip> <hostname>
+	handle_dl=$(qosdef_monitor_get_ip_handle $NFT_QOS_INET_FAMILY download $2)
+	[ -z "$handle_dl" ] && nft add rule $NFT_QOS_INET_FAMILY nft-qos-monitor download ip daddr $2 counter
+	handle_ul=$(qosdef_monitor_get_ip_handle $NFT_QOS_INET_FAMILY upload $2)
+	[ -z "$handle_ul" ] && nft add rule $NFT_QOS_INET_FAMILY nft-qos-monitor upload ip saddr $2 counter
+}
+
+qosdef_monitor_del() { # <mac> <ip> <hostname>
+	local handle_dl handle_ul
+	handle_dl=$(qosdef_monitor_get_ip_handle $NFT_QOS_INET_FAMILY download $2)
+	handle_ul=$(qosdef_monitor_get_ip_handle $NFT_QOS_INET_FAMILY upload $2)
+	[ -n "$handle_dl" ] && nft delete handle $handle_dl
+	[ -n "$handle_ul" ] && nft delete handle $handle_ul
+}
+
+# init qos monitor
+qosdef_init_monitor() {
+	local hook_ul="prerouting" hook_dl="postrouting"
+
+	[ -z "$NFT_QOS_HAS_BRIDGE" ] && {
+		hook_ul="postrouting"
+		hook_dl="prerouting"
+	}
+
+	nft add table $NFT_QOS_INET_FAMILY nft-qos-monitor
+	nft add chain $NFT_QOS_INET_FAMILY nft-qos-monitor upload { type filter hook $hook_ul priority 0\; }
+	nft add chain $NFT_QOS_INET_FAMILY nft-qos-monitor download { type filter hook $hook_dl priority 0\; }
+}
diff --git a/package/lean/nft-qos/files/lib/priority.sh b/package/lean/nft-qos/files/lib/priority.sh
new file mode 100755
index 0000000000..081b13f48c
--- /dev/null
+++ b/package/lean/nft-qos/files/lib/priority.sh
@@ -0,0 +1,93 @@
+#!/bin/sh
+#
+# Copyright (C) 2018 rosysong@rosinson.com
+#
+
+. /lib/functions/network.sh
+. /lib/nft-qos/core.sh
+
+P1=""; P2=""; P3=""; P4=""; P5=""; P6="";
+P7=""; P8=""; P9=""; P10=""; P11="";
+
+qosdef_validate_priority() {
+	uci_load_validate nft-qos default "$1" "$2" \
+		'priority_enable:bool:0' \
+		'priority_netdev:maxlength(8)'
+}
+
+_qosdef_handle_protox() { # <priority> <rule>
+	case "$1" in
+		-400) P1="$P1""$2";;
+		-300) P2="$P2""$2";;
+		-225) P3="$P3""$2";;
+		-200) P4="$P4""$2";;
+		-150) P5="$P5""$2";;
+		-100) P6="$P6""$2";;
+		0) P7="$P7""$2";;
+		50) P8="$P8""$2";;
+		100) P9="$P9""$2";;
+		225) P10="$P10""$2";;
+		300) P11="$P11""$2";;
+	esac
+}
+
+qosdef_handle_protox() { # <section>
+	local proto prio srv
+
+	config_get proto $1 'protocol'
+	config_get prio $1 'priority'
+	config_get srv $1 'service'
+
+	[ -z "$proto" -o \
+		-z "$prio" -o \
+		-z "$srv" ] && return
+
+	_qosdef_handle_protox $prio \
+	    "\t\t$proto dport { $srv } accept\n"
+}
+
+qosdef_append_rule_protox() { # <section>
+	config_foreach qosdef_handle_protox $1
+	qosdef_appendx \
+		"${P1}${P2}${P3}${P4}${P5}${P6}${P7}${P8}${P9}${P10}${P11}"
+}
+
+qosdef_append_chain_priority() { # <name> <section> <device>
+	local name=$1 device=$3
+
+	qosdef_appendx "\tchain $name {\n"
+	qosdef_append_chain_ingress filter $device 0 accept
+	qosdef_append_rule_protox $2
+	qosdef_appendx "\t}\n"
+}
+
+qosdef_remove_priority() {
+	qosdef_remove_table netdev nft-qos-priority
+}
+
+# init traffic priority
+qosdef_init_priority() {
+	local ifname="br-lan"
+
+	[ "$2" = 0 ] || {
+		logger -t nft-qos-priority "validation failed"
+		return 1
+	}
+
+	[ $priority_enable -eq 0 ] && return 1
+
+	case "$priority_netdev" in
+		lan) [ "$(uci_get network.lan.type)" != "bridge" ] && {
+				network_get_device ifname "$priority_netdev" || \
+				ifname="$(uci_get network.lan.ifname)"
+			}
+		;;
+		wan*) network_get_device ifname "$priority_netdev" || \
+			ifname="$(uci_get network.$priority_netdev.ifname)"
+		;;
+	esac
+
+	qosdef_appendx "table netdev nft-qos-priority {\n"
+	qosdef_append_chain_priority filter priority $ifname
+	qosdef_appendx "}\n"
+}
diff --git a/package/lean/nft-qos/files/lib/static.sh b/package/lean/nft-qos/files/lib/static.sh
new file mode 100755
index 0000000000..051c0ba3d6
--- /dev/null
+++ b/package/lean/nft-qos/files/lib/static.sh
@@ -0,0 +1,74 @@
+#!/bin/sh
+#
+# Copyright (C) 2018 rosysong@rosinson.com
+#
+
+. /lib/nft-qos/core.sh
+
+qosdef_validate_static() {
+	uci_load_validate nft-qos default "$1" "$2" \
+		'limit_enable:bool:0' \
+		'limit_type:maxlength(8)' \
+		'static_unit_dl:string:kbytes' \
+		'static_unit_ul:string:kbytes' \
+		'static_rate_dl:uinteger:50' \
+		'static_rate_ul:uinteger:50'
+}
+
+# append rule for static qos
+qosdef_append_rule_sta() { # <section> <operator> <default-unit> <default-rate>
+	local ipaddr unit rate
+	local operator=$2
+
+	config_get ipaddr $1 ipaddr
+	config_get unit $1 unit $3
+	config_get rate $1 rate $4
+
+	[ -z "$ipaddr" ] && return
+
+	qosdef_append_rule_ip_limit $ipaddr $operator $unit $rate
+}
+
+# append chain for static qos
+qosdef_append_chain_sta() { # <hook> <name> <section> <unit> <rate>
+	local hook=$1 name=$2
+	local config=$3 operator
+
+	case "$name" in
+		download) operator="daddr";;
+		upload) operator="saddr";;
+	esac
+
+	qosdef_appendx "\tchain $name {\n"
+	qosdef_append_chain_def filter $hook 0 accept
+	qosdef_append_rule_limit_whitelist $name
+	config_foreach qosdef_append_rule_sta $config $operator $4 $5
+	qosdef_appendx "\t}\n"
+}
+
+qosdef_flush_static() {
+	qosdef_flush_table "$NFT_QOS_INET_FAMILY" nft-qos-static
+}
+
+# static limit rate init
+qosdef_init_static() {
+	local hook_ul="prerouting" hook_dl="postrouting"
+
+	[ "$2" = 0 ] || {
+		logger -t nft-qos-static "validation failed"
+		return 1
+	}
+
+	[ $limit_enable -eq 0 -o \
+		$limit_type = "dynamic" ] && return 1
+
+	[ -z "$NFT_QOS_HAS_BRIDGE" ] && {
+		hook_ul="postrouting"
+		hook_dl="prerouting"
+	}
+
+	qosdef_appendx "table $NFT_QOS_INET_FAMILY nft-qos-static {\n"
+	qosdef_append_chain_sta $hook_ul upload upload $static_unit_ul $static_rate_ul
+	qosdef_append_chain_sta $hook_dl download download $static_unit_dl $static_rate_dl
+	qosdef_appendx "}\n"
+}
diff --git a/package/lean/nft-qos/files/nft-qos-dynamic.hotplug b/package/lean/nft-qos/files/nft-qos-dynamic.hotplug
new file mode 100755
index 0000000000..b81fa94a89
--- /dev/null
+++ b/package/lean/nft-qos/files/nft-qos-dynamic.hotplug
@@ -0,0 +1,36 @@
+#!/bin/sh
+#
+# Copyright 2018 rosysong@rosinson.com
+#
+
+export initscript="nft-qos-dynamic"
+
+. /lib/functions.sh
+. /lib/nft-qos/core.sh
+. /lib/nft-qos/dynamic.sh
+
+NFT_QOS_DYNAMIC_ON=
+
+qosdef_check_if_dynamic() {
+	[ $limit_enable -eq 1 -a \
+	  "$limit_type" = "dynamic" ] && \
+	    NFT_QOS_DYNAMIC_ON="y"
+}
+
+
+logger -t nft-qos-dynamic "ACTION=$ACTION, MACADDR=$MACADDR, IPADDR=$IPADDR, HOSTNAME=$HOSTNAME"
+
+case "$ACTION" in
+	add | update | remove)
+		qosdef_validate_dynamic default qosdef_check_if_dynamic
+		[ -z "$NFT_QOS_DYNAMIC_ON" ] && return
+
+		qosdef_init_env
+		qosdef_flush_dynamic
+
+		qosdef_init_header
+		qosdef_validate_dynamic default qosdef_init_dynamic
+		qosdef_init_done
+		qosdef_start
+		;;
+esac
diff --git a/package/lean/nft-qos/files/nft-qos-monitor.hotplug b/package/lean/nft-qos/files/nft-qos-monitor.hotplug
new file mode 100755
index 0000000000..5868bb1ea0
--- /dev/null
+++ b/package/lean/nft-qos/files/nft-qos-monitor.hotplug
@@ -0,0 +1,23 @@
+#!/bin/sh
+#
+# Copyright 2018 rosysong@rosinson.com
+#
+
+export initscript="nft-qos-monitor"
+
+. /lib/nft-qos/monitor.sh
+
+logger -t nft-qos-monitor "ACTION=$ACTION, MACADDR=$MACADDR, IPADDR=$IPADDR, HOSTNAME=$HOSTNAME"
+
+case "$ACTION" in
+	add | update)
+		qosdef_init_env
+		qosdef_init_monitor
+		qosdef_monitor_add $MACADDR $IPADDR $HOSTNAME
+	;;
+	remove)
+		qosdef_init_env
+		qosdef_init_monitor
+		qosdef_monitor_del $MACADDR $IPADDR $HOSTNAME
+	;;
+esac
diff --git a/package/lean/nft-qos/files/nft-qos.config b/package/lean/nft-qos/files/nft-qos.config
new file mode 100755
index 0000000000..24eadb0feb
--- /dev/null
+++ b/package/lean/nft-qos/files/nft-qos.config
@@ -0,0 +1,107 @@
+#
+# Copyright (C) 2018 rosysong@rosinson.com
+#
+# This is the sample for nft-qos configuration file,
+# which will generate a nftables script in /tmp/qos.nft
+#
+
+# Getting Started
+# Official site      :
+#  https://netfilter.org/projects/nftables/index.html
+# What is nftables   :
+#  https://wiki.nftables.org/wiki-nftables/index.php/Main_Page
+#
+
+# Basic Operations
+# Configuring Tables :
+#  https://wiki.nftables.org/wiki-nftables/index.php/Configuring_tables
+# Configuring Chains :
+#  https://wiki.nftables.org/wiki-nftables/index.php/Configuring_chains
+# Configuring Rules  :
+#  https://wiki.nftables.org/wiki-nftables/index.php/Simple_rule_management
+# Quick Reference (recommended)   :
+#  https://wiki.nftables.org/wiki-nftables/index.php/Quick_reference-nftables_in_10_minutes
+#  https://netfilter.org/projects/nftables/manpage.html
+#
+
+config default default
+	# Enable Flag for limit rate
+	option limit_enable '0'
+
+	# Options for enable Static QoS (rate limit)
+	option limit_type 'static'
+	# Options for Static QoS (rate limit)
+	option static_unit_dl 'kbytes'
+	option static_unit_ul 'kbytes'
+	option static_rate_dl '50'
+	option static_rate_ul '50'
+
+	# Options for enable Dynamic QoS
+	# This option can not compatible with Static QoS
+	# option limit_type 'dynamic'
+
+	# For Dynamic QoS Samples (unit of bandwidth is Mbps):
+	option dynamic_cidr '192.168.1.0/24'
+	option dynamic_cidr6 'AAAA:BBBB::1/64'
+	option dynamic_bw_up '100'
+	option dynamic_bw_down '100'
+
+	# White list for static/dynamic limit
+	# list limit_whitelist '192.168.1.225'
+	# list limit_whitelist '192.168.1.0/24'
+	# list limit_whitelist 'ABCD:CDEF::1/64'
+
+	# Options for Traffic Priority
+	option priority_enable '0'
+	option priority_netdev 'lan'
+
+
+#
+# For Static QoS Rate Limit Samples :
+#
+# For Download :
+#config download
+#	option hostname 'My PC'
+#	option unit 'kbytes'
+#	option ipaddr '192.168.1.224'
+#	option rate '128'
+#
+# For Upload :
+#config upload
+#	option hostname 'office-pc'
+#	option unit 'mbytes'
+#	option ipaddr 'ABCD:FFED::1/64'
+#	option rate '1024'
+#
+#
+# Traffic Priority Samples :
+#
+# protocol : tcp, udp, udplite, sctp, dccp, tcp is default
+# priority : integer between 1-11, 1 is default and the highest
+# service : you can input a integer or service name,
+#           e.g. '22', '11-22', 'telnet', 'ssh, http, ftp', etc
+#
+#config priority
+#	option protocol 'tcp'
+#	option priority '-400'
+#	option service '23'
+#	option comment '?'
+#
+#config priority
+#	option protocol 'udp'
+#	option priority '-400'
+#	option service 'https'
+#	option comment '?'
+#
+#config priority
+#	option protocol 'dccp'
+#	option priority '0'
+#	option service '22-35'
+#	option comment '?'
+#
+#config priority
+#	option protocol 'dccp'
+#	option priority '300'
+#	option service 'ftp,ssh,http'
+#	option comment '?'
+#
diff --git a/package/lean/nft-qos/files/nft-qos.init b/package/lean/nft-qos/files/nft-qos.init
new file mode 100755
index 0000000000..7a56ec7c69
--- /dev/null
+++ b/package/lean/nft-qos/files/nft-qos.init
@@ -0,0 +1,47 @@
+#!/bin/sh /etc/rc.common
+#
+# Copyright (C) 2018 rosysong@rosinson.com
+#
+
+. /lib/nft-qos/core.sh
+. /lib/nft-qos/monitor.sh
+. /lib/nft-qos/dynamic.sh
+. /lib/nft-qos/static.sh
+. /lib/nft-qos/priority.sh
+
+START=99
+USE_PROCD=1
+
+service_triggers() {
+	procd_add_reload_trigger nft-qos
+
+	procd_open_validate
+	qosdef_validate_dynamic
+	qosdef_validate_static
+	qosdef_validate_priority
+	procd_close_validate
+}
+
+start_service() {
+	config_load nft-qos
+
+	qosdef_init_env
+	qosdef_flush_static
+	qosdef_flush_dynamic
+	qosdef_remove_priority
+
+	qosdef_init_header
+	qosdef_init_monitor
+	qosdef_validate_dynamic default qosdef_init_dynamic
+	qosdef_validate_static default qosdef_init_static
+	qosdef_validate_priority default qosdef_init_priority
+	qosdef_init_done
+	qosdef_start
+}
+
+stop_service() {
+	qosdef_flush_dynamic
+	qosdef_flush_static
+	qosdef_remove_priority
+	qosdef_clean_cache
+}
diff --git a/package/lean/npc/Makefile b/package/lean/npc/Makefile
new file mode 100644
index 0000000000..882fe69bf1
--- /dev/null
+++ b/package/lean/npc/Makefile
@@ -0,0 +1,70 @@
+#
+# Copyright (C) 2015-2016 OpenWrt.org
+#
+# This is free software, licensed under the GNU General Public License v3.
+#
+
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=npc
+PKG_VERSION:=0.23.2
+PKG_RELEASE:=1
+
+ifeq ($(ARCH),mipsel)
+	NPC_ARCH:=mipsle
+endif
+ifeq ($(ARCH),mips)
+	NPC_ARCH:=mips
+endif
+ifeq ($(ARCH),i386)
+	NPC_ARCH:=386
+endif
+ifeq ($(ARCH),x86_64)
+	NPC_ARCH:=amd64
+endif
+ifeq ($(ARCH),arm)
+	NPC_ARCH:=arm
+endif
+ifeq ($(ARCH),aarch64)
+	NPC_ARCH:=arm64
+endif
+
+PKG_LICENSE:=Apache-2.0
+
+PKG_SOURCE_URL:=https://github.com/cnlh/nps/releases/download/v$(PKG_VERSION)
+PKG_SOURCE:=linux_$(NPC_ARCH)_client.tar.gz
+PKG_BUILD_DIR:=$(BUILD_DIR)/nps
+PKG_HASH:=skip
+
+include $(INCLUDE_DIR)/package.mk
+
+define Package/$(PKG_NAME)
+	SECTION:=net
+	CATEGORY:=Network
+	TITLE:=NPC Client
+	DEPENDS:=
+	URL:=https://github.com/cnlh/nps/releases
+endef
+
+
+
+define Package/$(PKG_NAME)/description
+npc is a fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet
+endef
+
+define Build/Prepare
+	$(PKG_UNPACK)
+endef
+
+define Build/Configure
+endef
+
+define Build/Compile
+endef
+
+define Package/$(PKG_NAME)/install
+	$(INSTALL_DIR) $(1)/usr/bin
+	$(INSTALL_BIN) $(PKG_BUILD_DIR)/npc $(1)/usr/bin/
+endef
+
+$(eval $(call BuildPackage,$(PKG_NAME)))
diff --git a/package/lean/npc/npc/Makefile b/package/lean/npc/npc/Makefile
new file mode 100644
index 0000000000..882fe69bf1
--- /dev/null
+++ b/package/lean/npc/npc/Makefile
@@ -0,0 +1,70 @@
+#
+# Copyright (C) 2015-2016 OpenWrt.org
+#
+# This is free software, licensed under the GNU General Public License v3.
+#
+
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=npc
+PKG_VERSION:=0.23.2
+PKG_RELEASE:=1
+
+ifeq ($(ARCH),mipsel)
+	NPC_ARCH:=mipsle
+endif
+ifeq ($(ARCH),mips)
+	NPC_ARCH:=mips
+endif
+ifeq ($(ARCH),i386)
+	NPC_ARCH:=386
+endif
+ifeq ($(ARCH),x86_64)
+	NPC_ARCH:=amd64
+endif
+ifeq ($(ARCH),arm)
+	NPC_ARCH:=arm
+endif
+ifeq ($(ARCH),aarch64)
+	NPC_ARCH:=arm64
+endif
+
+PKG_LICENSE:=Apache-2.0
+
+PKG_SOURCE_URL:=https://github.com/cnlh/nps/releases/download/v$(PKG_VERSION)
+PKG_SOURCE:=linux_$(NPC_ARCH)_client.tar.gz
+PKG_BUILD_DIR:=$(BUILD_DIR)/nps
+PKG_HASH:=skip
+
+include $(INCLUDE_DIR)/package.mk
+
+define Package/$(PKG_NAME)
+	SECTION:=net
+	CATEGORY:=Network
+	TITLE:=NPC Client
+	DEPENDS:=
+	URL:=https://github.com/cnlh/nps/releases
+endef
+
+
+
+define Package/$(PKG_NAME)/description
+npc is a fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet
+endef
+
+define Build/Prepare
+	$(PKG_UNPACK)
+endef
+
+define Build/Configure
+endef
+
+define Build/Compile
+endef
+
+define Package/$(PKG_NAME)/install
+	$(INSTALL_DIR) $(1)/usr/bin
+	$(INSTALL_BIN) $(PKG_BUILD_DIR)/npc $(1)/usr/bin/
+endef
+
+$(eval $(call BuildPackage,$(PKG_NAME)))
diff --git a/package/lean/openwrt-fullconenat/Makefile b/package/lean/openwrt-fullconenat/Makefile
new file mode 100644
index 0000000000..aa1c02b1d9
--- /dev/null
+++ b/package/lean/openwrt-fullconenat/Makefile
@@ -0,0 +1,65 @@
+#
+# Copyright (C) 2018 Chion Tang <tech@chionlab.moe>
+#
+# This is free software, licensed under the GNU General Public License v2.
+# See /LICENSE for more information.
+#
+
+include $(TOPDIR)/rules.mk
+include $(INCLUDE_DIR)/kernel.mk
+
+PKG_NAME:=fullconenat
+PKG_RELEASE:=1
+
+PKG_SOURCE_DATE:=2019-10-21
+PKG_SOURCE_PROTO:=git
+PKG_SOURCE_URL:=https://github.com/Chion82/netfilter-full-cone-nat.git
+PKG_SOURCE_VERSION:=0cf3b48fd7d2fa81d0297d1fff12bbd0580fc435
+
+PKG_LICENSE:=GPL-2.0
+PKG_LICENSE_FILES:=LICENSE
+
+include $(INCLUDE_DIR)/package.mk
+
+define Package/iptables-mod-fullconenat
+  SUBMENU:=Firewall
+  SECTION:=net
+  CATEGORY:=Network
+  TITLE:=FULLCONENAT iptables extension
+  DEPENDS:=+iptables +kmod-ipt-fullconenat
+  MAINTAINER:=Chion Tang <tech@chionlab.moe>
+endef
+
+define Package/iptables-mod-fullconenat/install
+	$(INSTALL_DIR) $(1)/usr/lib/iptables
+	$(INSTALL_BIN) $(PKG_BUILD_DIR)/libipt_FULLCONENAT.so $(1)/usr/lib/iptables
+endef
+
+define KernelPackage/ipt-fullconenat
+  SUBMENU:=Netfilter Extensions
+  TITLE:=FULLCONENAT netfilter module
+  DEPENDS:=+kmod-nf-ipt +kmod-nf-nat
+  MAINTAINER:=Chion Tang <tech@chionlab.moe>
+  KCONFIG:=CONFIG_NF_CONNTRACK_EVENTS=y CONFIG_NF_CONNTRACK_CHAIN_EVENTS=y
+  FILES:=$(PKG_BUILD_DIR)/xt_FULLCONENAT.ko
+endef
+
+include $(INCLUDE_DIR)/kernel-defaults.mk
+
+define Build/Prepare
+	$(call Build/Prepare/Default)
+	$(CP) ./files/Makefile $(PKG_BUILD_DIR)/
+endef
+
+define Build/Compile
+	+$(MAKE) $(PKG_JOBS) -C "$(LINUX_DIR)" \
+        CROSS_COMPILE="$(TARGET_CROSS)" \
+        ARCH="$(LINUX_KARCH)" \
+        SUBDIRS="$(PKG_BUILD_DIR)" \
+        EXTRA_CFLAGS="$(BUILDFLAGS)" \
+        modules
+	$(call Build/Compile/Default)
+endef
+
+$(eval $(call BuildPackage,iptables-mod-fullconenat))
+$(eval $(call KernelPackage,ipt-fullconenat))
diff --git a/package/lean/openwrt-fullconenat/files/Makefile b/package/lean/openwrt-fullconenat/files/Makefile
new file mode 100644
index 0000000000..da52a2a4ed
--- /dev/null
+++ b/package/lean/openwrt-fullconenat/files/Makefile
@@ -0,0 +1,7 @@
+libipt_FULLCONENAT.so: libipt_FULLCONENAT.o
+	$(CC) -shared -lxtables -o $@ $^;
+libipt_FULLCONENAT.o: libipt_FULLCONENAT.c
+	$(CC) ${CFLAGS} -fPIC -D_INIT=$*_init -c -o $@ $<;
+
+obj-m += xt_FULLCONENAT.o
+
diff --git a/package/lean/openwrt-fullconenat/patches/000-printk.patch b/package/lean/openwrt-fullconenat/patches/000-printk.patch
new file mode 100644
index 0000000000..cc0193f820
--- /dev/null
+++ b/package/lean/openwrt-fullconenat/patches/000-printk.patch
@@ -0,0 +1,17 @@
+diff --git a/xt_FULLCONENAT.c b/xt_FULLCONENAT.c
+index 9e52eba..8658c5f 100644
+--- a/xt_FULLCONENAT.c
++++ b/xt_FULLCONENAT.c
+@@ -697,9 +697,11 @@ static struct xt_target tg_reg[] __read_mostly = {
+ 
+ static int __init fullconenat_tg_init(void)
+ {
++  printk(KERN_INFO "xt_FULLCONENAT: RFC3489 Full Cone NAT module\n"
++	"xt_FULLCONENAT: Copyright (C) 2018 Chion Tang <tech@chionlab.moe>\n");
+   wq = create_singlethread_workqueue("xt_FULLCONENAT");
+   if (wq == NULL) {
+-    printk("xt_FULLCONENAT: warning: failed to create workqueue\n");
++    printk(KERN_WARNING "xt_FULLCONENAT: warning: failed to create workqueue\n");
+   }
+ 
+   return xt_register_targets(tg_reg, ARRAY_SIZE(tg_reg));
diff --git a/package/lean/polarssl/Makefile b/package/lean/polarssl/Makefile
new file mode 100644
index 0000000000..57fa81e91c
--- /dev/null
+++ b/package/lean/polarssl/Makefile
@@ -0,0 +1,74 @@
+#
+# Copyright (C) 2011-2015 OpenWrt.org
+#
+# This is free software, licensed under the GNU General Public License v2.
+# See /LICENSE for more information.
+#
+
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=polarssl
+SRC_PKG_NAME:=mbedtls
+PKG_VERSION:=1.3.16
+PKG_RELEASE:=1
+PKG_USE_MIPS16:=0
+
+PKG_SOURCE:=$(SRC_PKG_NAME)-$(PKG_VERSION)-gpl.tgz
+PKG_SOURCE_URL:=https://polarssl.org/download/
+PKG_MD5SUM:=66ebbbf67e8a9463041846822b0a1692
+
+PKG_BUILD_DIR:=$(BUILD_DIR)/$(SRC_PKG_NAME)-$(PKG_VERSION)
+
+PKG_BUILD_PARALLEL:=1
+PKG_LICENSE:=GPL-2.0+
+
+include $(INCLUDE_DIR)/package.mk
+include $(INCLUDE_DIR)/cmake.mk
+
+define Package/polarssl/Default
+  SUBMENU:=SSL
+  TITLE:=Embedded SSL
+  URL:=http://polarssl.org/
+endef
+
+define Package/polarssl/Default/description
+The aim of the PolarSSL project is to provide a quality, open-source
+cryptographic library written in C and targeted at embedded systems.
+endef
+
+define Package/libpolarssl
+$(call Package/polarssl/Default)
+  SECTION:=libs
+  CATEGORY:=Libraries
+  TITLE+= (library)
+  ABI_VERSION:=$(PKG_VERSION)-$(PKG_RELEASE)
+endef
+
+define Package/libpolarssl/description
+$(call Package/polarssl/Default/description)
+This package contains the PolarSSL library.
+endef
+
+PKG_INSTALL:=1
+
+CMAKE_OPTIONS += \
+	-DCMAKE_BUILD_TYPE:String="Release" \
+	-DUSE_SHARED_MBEDTLS_LIBRARY:Bool=ON \
+	-DENABLE_TESTING:Bool=OFF \
+	-DENABLE_PROGRAMS:Bool=OFF \
+
+define Build/InstallDev
+	$(INSTALL_DIR) $(1)/usr/include
+	$(CP) $(PKG_INSTALL_DIR)/usr/include/polarssl $(1)/usr/include/
+	$(INSTALL_DIR) $(1)/usr/lib
+	$(CP) $(PKG_INSTALL_DIR)/usr/lib/libmbedtls.so.* $(1)/usr/lib/
+	$(LN) libmbedtls.so.$(PKG_VERSION) $(1)/usr/lib/libpolarssl.so
+endef
+
+define Package/libpolarssl/install
+	$(INSTALL_DIR) $(1)/usr/lib
+	$(CP) $(PKG_INSTALL_DIR)/usr/lib/libmbedtls.so.* $(1)/usr/lib/
+	$(LN) libmbedtls.so.$(PKG_VERSION) $(1)/usr/lib/libpolarssl.so
+endef
+
+$(eval $(call BuildPackage,libpolarssl))
diff --git a/package/lean/polarssl/patches/100-disable_sslv3.patch b/package/lean/polarssl/patches/100-disable_sslv3.patch
new file mode 100644
index 0000000000..56c6c4d235
--- /dev/null
+++ b/package/lean/polarssl/patches/100-disable_sslv3.patch
@@ -0,0 +1,12 @@
+--- a/include/polarssl/config.h
++++ b/include/polarssl/config.h
+@@ -1011,8 +1011,8 @@
+  *           POLARSSL_SHA1_C
+  *
+  * Comment this macro to disable support for SSL 3.0
+- */
+ #define POLARSSL_SSL_PROTO_SSL3
++ */
+ 
+ /**
+  * \def POLARSSL_SSL_PROTO_TLS1
diff --git a/package/lean/polarssl/patches/200-reduce_config.patch b/package/lean/polarssl/patches/200-reduce_config.patch
new file mode 100644
index 0000000000..6fef1a6f5c
--- /dev/null
+++ b/package/lean/polarssl/patches/200-reduce_config.patch
@@ -0,0 +1,252 @@
+--- a/include/polarssl/config.h
++++ b/include/polarssl/config.h
+@@ -432,8 +432,8 @@
+  * Requires: POLARSSL_HMAC_DRBG_C
+  *
+  * Comment this macro to disable deterministic ECDSA.
+- */
+ #define POLARSSL_ECDSA_DETERMINISTIC
++ */
+ 
+ /**
+  * \def POLARSSL_KEY_EXCHANGE_PSK_ENABLED
+@@ -454,8 +454,8 @@
+  *      TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256
+  *      TLS_PSK_WITH_3DES_EDE_CBC_SHA
+  *      TLS_PSK_WITH_RC4_128_SHA
+- */
+ #define POLARSSL_KEY_EXCHANGE_PSK_ENABLED
++ */
+ 
+ /**
+  * \def POLARSSL_KEY_EXCHANGE_DHE_PSK_ENABLED
+@@ -478,8 +478,8 @@
+  *      TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
+  *      TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA
+  *      TLS_DHE_PSK_WITH_RC4_128_SHA
+- */
+ #define POLARSSL_KEY_EXCHANGE_DHE_PSK_ENABLED
++ */
+ 
+ /**
+  * \def POLARSSL_KEY_EXCHANGE_ECDHE_PSK_ENABLED
+@@ -498,8 +498,8 @@
+  *      TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
+  *      TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA
+  *      TLS_ECDHE_PSK_WITH_RC4_128_SHA
+- */
+ #define POLARSSL_KEY_EXCHANGE_ECDHE_PSK_ENABLED
++ */
+ 
+ /**
+  * \def POLARSSL_KEY_EXCHANGE_RSA_PSK_ENABLED
+@@ -523,8 +523,8 @@
+  *      TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256
+  *      TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA
+  *      TLS_RSA_PSK_WITH_RC4_128_SHA
+- */
+ #define POLARSSL_KEY_EXCHANGE_RSA_PSK_ENABLED
++ */
+ 
+ /**
+  * \def POLARSSL_KEY_EXCHANGE_RSA_ENABLED
+@@ -602,8 +602,8 @@
+  *      TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
+  *      TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
+  *      TLS_ECDHE_RSA_WITH_RC4_128_SHA
+- */
+ #define POLARSSL_KEY_EXCHANGE_ECDHE_RSA_ENABLED
++ */
+ 
+ /**
+  * \def POLARSSL_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
+@@ -626,8 +626,8 @@
+  *      TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
+  *      TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
+  *      TLS_ECDHE_ECDSA_WITH_RC4_128_SHA
+- */
+ #define POLARSSL_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
++ */
+ 
+ /**
+  * \def POLARSSL_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
+@@ -650,8 +650,8 @@
+  *      TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
+  *      TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
+  *      TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
+- */
+ #define POLARSSL_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
++ */
+ 
+ /**
+  * \def POLARSSL_KEY_EXCHANGE_ECDH_RSA_ENABLED
+@@ -674,8 +674,8 @@
+  *      TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384
+  *      TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256
+  *      TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384
+- */
+ #define POLARSSL_KEY_EXCHANGE_ECDH_RSA_ENABLED
++ */
+ 
+ /**
+  * \def POLARSSL_PK_PARSE_EC_EXTENDED
+@@ -835,8 +835,8 @@
+  * \def POLARSSL_SELF_TEST
+  *
+  * Enable the checkup functions (*_self_test).
+- */
+ #define POLARSSL_SELF_TEST
++ */
+ 
+ /**
+  * \def POLARSSL_SSL_AEAD_RANDOM_IV
+@@ -1151,8 +1151,8 @@
+  * Requires: POLARSSL_VERSION_C
+  *
+  * Comment this to disable run-time checking and save ROM space
+- */
+ #define POLARSSL_VERSION_FEATURES
++ */
+ 
+ /**
+  * \def POLARSSL_X509_ALLOW_EXTENSIONS_NON_V3
+@@ -1470,8 +1470,8 @@
+  *      TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384
+  *      TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256
+  *      TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256
+- */
+ #define POLARSSL_CAMELLIA_C
++ */
+ 
+ /**
+  * \def POLARSSL_CCM_C
+@@ -1498,8 +1498,8 @@
+  * Requires: POLARSSL_PEM_PARSE_C
+  *
+  * This module is used for testing (ssl_client/server).
+- */
+ #define POLARSSL_CERTS_C
++ */
+ 
+ /**
+  * \def POLARSSL_CIPHER_C
+@@ -1538,8 +1538,8 @@
+  *          library/ssl_tls.c
+  *
+  * This module provides debugging functions.
+- */
+ #define POLARSSL_DEBUG_C
++ */
+ 
+ /**
+  * \def POLARSSL_DES_C
+@@ -1594,8 +1594,8 @@
+  *      ECDHE-ECDSA, ECDHE-RSA, DHE-PSK
+  *
+  * Requires: POLARSSL_ECP_C
+- */
+ #define POLARSSL_ECDH_C
++ */
+ 
+ /**
+  * \def POLARSSL_ECDSA_C
+@@ -1609,8 +1609,8 @@
+  *      ECDHE-ECDSA
+  *
+  * Requires: POLARSSL_ECP_C, POLARSSL_ASN1_WRITE_C, POLARSSL_ASN1_PARSE_C
+- */
+ #define POLARSSL_ECDSA_C
++ */
+ 
+ /**
+  * \def POLARSSL_ECP_C
+@@ -1622,8 +1622,8 @@
+  *          library/ecdsa.c
+  *
+  * Requires: POLARSSL_BIGNUM_C and at least one POLARSSL_ECP_DP_XXX_ENABLED
+- */
+ #define POLARSSL_ECP_C
++ */
+ 
+ /**
+  * \def POLARSSL_ENTROPY_C
+@@ -1662,8 +1662,8 @@
+  *
+  * This module enables the AES-GCM and CAMELLIA-GCM ciphersuites, if other
+  * requisites are enabled as well.
+- */
+ #define POLARSSL_GCM_C
++ */
+ 
+ /**
+  * \def POLARSSL_HAVEGE_C
+@@ -1699,8 +1699,8 @@
+  * Requires: POLARSSL_MD_C
+  *
+  * Uncomment to enable the HMAC_DRBG random number geerator.
+- */
+ #define POLARSSL_HMAC_DRBG_C
++ */
+ 
+ /**
+  * \def POLARSSL_MD_C
+@@ -1826,8 +1826,8 @@
+  * Requires: POLARSSL_HAVE_ASM
+  *
+  * This modules adds support for the VIA PadLock on x86.
+- */
+ #define POLARSSL_PADLOCK_C
++ */
+ 
+ /**
+  * \def POLARSSL_PBKDF2_C
+@@ -1992,8 +1992,8 @@
+  * Module:  library/ripemd160.c
+  * Caller:  library/md.c
+  *
+- */
+ #define POLARSSL_RIPEMD160_C
++ */
+ 
+ /**
+  * \def POLARSSL_RSA_C
+@@ -2072,8 +2072,8 @@
+  * Caller:
+  *
+  * Requires: POLARSSL_SSL_CACHE_C
+- */
+ #define POLARSSL_SSL_CACHE_C
++ */
+ 
+ /**
+  * \def POLARSSL_SSL_CLI_C
+@@ -2149,8 +2149,8 @@
+  * Caller:  library/havege.c
+  *
+  * This module is used by the HAVEGE random number generator.
+- */
+ #define POLARSSL_TIMING_C
++ */
+ 
+ /**
+  * \def POLARSSL_VERSION_C
+@@ -2160,8 +2160,8 @@
+  * Module:  library/version.c
+  *
+  * This module provides run-time version information.
+- */
+ #define POLARSSL_VERSION_C
++ */
+ 
+ /**
+  * \def POLARSSL_X509_USE_C
+@@ -2270,8 +2270,8 @@
+  *
+  * Module:  library/xtea.c
+  * Caller:
+- */
+ #define POLARSSL_XTEA_C
++ */
+ 
+ /* \} name SECTION: mbed TLS modules */
+ 
diff --git a/package/lean/qt5/Makefile b/package/lean/qt5/Makefile
new file mode 100644
index 0000000000..739bfb33f4
--- /dev/null
+++ b/package/lean/qt5/Makefile
@@ -0,0 +1,233 @@
+#
+# Copyright (C) 2013 Riccardo Ferrazzo <f.riccardo87@gmail.com>
+# Copyright (C) 2017 Paweł Knioła <pawel.kn@gmail.com>
+#
+# This is free software, licensed under the GNU General Public License v2.
+# See /LICENSE for more information.
+#
+
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=qt5
+PKG_VERSION:=5.13
+PKG_RELEASE:=1
+PKG_MD5SUM:=d66b1da335d0c25325fdf493e9044c38
+
+PKG_SOURCE:=qt-everywhere-src-$(PKG_VERSION).$(PKG_RELEASE).tar.xz
+PKG_SOURCE_URL:=http://download.qt-project.org/archive/qt/$(PKG_VERSION)/$(PKG_VERSION).$(PKG_RELEASE)/single
+PKG_BUILD_DIR=$(BUILD_DIR)/qt-everywhere-src-$(PKG_VERSION).$(PKG_RELEASE)
+PKG_BUILD_PARALLEL:=1
+PKG_USE_MIPS16:=0
+
+
+include $(INCLUDE_DIR)/package.mk
+
+# not using sstrip here as this fucks up the .so's somehow
+STRIP:=/bin/true
+RSTRIP:= \
+  NM="$(TOOLCHAIN_DIR)/bin/$(TARGET_CROSS)nm" \
+  STRIP="$(STRIP)" \
+  STRIP_KMOD="$(STRIP)" \
+  $(SCRIPT_DIR)/rstrip.sh
+
+define Package/qt5/Default
+  SECTION:=libs
+  CATEGORY:=Libraries
+  SUBMENU:=Qt5
+  TITLE:=qt5
+  URL:=http://qt-project.org
+  DEPENDS:=+libatomic +libstdcpp +libopenssl +zlib +icu @!LINUX_2_6
+endef
+
+define Package/qt5-core
+  $(call Package/qt5/Default)
+  TITLE+=core
+endef
+
+define Package/qt5-concurrent
+  $(call Package/qt5/Default)
+  TITLE+=concurrent
+  DEPENDS+=+qt5-core
+endef
+
+define Package/qt5-network
+  $(call Package/qt5/Default)
+  TITLE+=network
+  DEPENDS+=+qt5-core
+endef
+
+define Package/qt5-widgets
+  $(call Package/qt5/Default)
+  TITLE+=widgets
+  DEPENDS+=+qt5-core +qt5-network
+endef
+
+define Package/qt5-sql
+  $(call Package/qt5/Default)
+  TITLE+=sql
+  DEPENDS+=+qt5-core +libmariadbclient
+endef
+
+define Package/qt5-xml
+  $(call Package/qt5/Default)
+  TITLE+=xml
+  DEPENDS+=+qt5-core
+endef
+
+define Package/qt5-serialport
+  $(call Package/qt5/Default)
+  TITLE+=serialport
+  DEPENDS+=+qt5-core
+endef
+
+define Package/qt5-xmlpatterns
+  $(call Package/qt5/Default)
+  TITLE+=xmlpatterns
+  DEPENDS+=+qt5-core +qt5-network
+endef
+
+define Package/qt5-test
+  $(call Package/qt5/Default)
+  TITLE+=test
+  DEPENDS+=+qt5-core
+endef
+
+define Build/Configure
+	$(INSTALL_DIR) $(PKG_BUILD_DIR)/qtbase/mkspecs/linux-openwrt-g++
+	$(CP) ./files/qplatformdefs.h $(PKG_BUILD_DIR)/qtbase/mkspecs/linux-openwrt-g++/qplatformdefs.h
+	$(CP) ./files/qmake.conf $(PKG_BUILD_DIR)/qtbase/mkspecs/linux-openwrt-g++/qmake.conf
+	$(SED) 's@$$$$(TARGET_CROSS)@$(TARGET_CROSS)@g' $(PKG_BUILD_DIR)/qtbase/mkspecs/linux-openwrt-g++/qmake.conf
+	( cd $(PKG_BUILD_DIR) ; \
+		./configure \
+			-prefix $(TOOLCHAIN_DIR) \
+			-xplatform linux-openwrt-g++ \
+			-opensource \
+			-confirm-license \
+			-no-iconv \
+			-no-pch \
+			-no-rpath \
+			-no-strip \
+			-no-cups \
+			-no-dbus \
+			-no-eglfs \
+			-no-kms \
+			-no-opengl \
+			-no-directfb \
+			-no-xcb \
+			-openssl-runtime \
+			-qt-zlib \
+			-qt-pcre \
+			-qt-freetype \
+			-make libs \
+			-nomake examples \
+			-nomake tools \
+			-nomake tests \
+			-skip qtdeclarative \
+			-skip qtmultimedia \
+			-skip activeqt \
+			-skip qtdoc \
+			-skip qtconnectivity \
+			-skip wayland \
+			-skip qtscript \
+			-v \
+	)
+endef
+
+define Build/Compile
+	$(MAKE) $(PKG_JOBS) -C $(PKG_BUILD_DIR)
+endef
+
+define Build/InstallDev
+	$(MAKE) -C $(PKG_BUILD_DIR) install
+	$(CP) $(PKG_BUILD_DIR)/qtbase/bin/qmake $(TOOLCHAIN_DIR)/bin/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/bin/qt.conf $(TOOLCHAIN_DIR)/bin/
+endef
+
+define Package/qt5-core/install
+	$(INSTALL_DIR) $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/lib/libQt5Core.so* $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/lib/libQt5Core.prl $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/lib/libQt5Core.la $(1)/usr/lib/
+endef
+
+define Package/qt5-concurrent/install
+	$(INSTALL_DIR) $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/lib/libQt5Concurrent.so* $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/lib/libQt5Concurrent.prl $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/lib/libQt5Concurrent.la $(1)/usr/lib/
+endef
+
+define Package/qt5-network/install
+	$(INSTALL_DIR) $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/lib/libQt5Network.so* $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/lib/libQt5Network.prl $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/lib/libQt5Network.la $(1)/usr/lib/
+endef
+
+define Package/qt5-widgets/install
+	$(INSTALL_DIR) $(1)/usr/lib/
+	$(INSTALL_DIR) $(1)/usr/lib/Qt/plugins/generic/
+	$(INSTALL_DIR) $(1)/usr/lib/Qt/plugins/platforms/
+	$(INSTALL_DIR) $(1)/usr/lib/Qt/plugins/imageformats/
+	$(INSTALL_DIR) $(1)/usr/lib/fonts/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/lib/libQt5Gui.so* $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/lib/libQt5Gui.prl $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/lib/libQt5Gui.la 	$(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtsvg/lib/libQt5Svg.so* $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtsvg/lib/libQt5Svg.prl $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtsvg/lib/libQt5Svg.la $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/lib/libQt5Widgets.so* $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/lib/libQt5Widgets.prl $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/lib/libQt5Widgets.la $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/plugins/generic/*.so $(1)/usr/lib/Qt/plugins/generic/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/plugins/platforms/*.so $(1)/usr/lib/Qt/plugins/platforms/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/plugins/imageformats/*.so $(1)/usr/lib/Qt/plugins/imageformats/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/lib/fonts/* $(1)/usr/lib/fonts/
+endef
+
+define Package/qt5-sql/install
+	$(INSTALL_DIR) $(1)/usr/lib/
+	$(INSTALL_DIR) $(1)/usr/lib/Qt/plugins/sqldrivers/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/lib/libQt5Sql.so* $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/lib/libQt5Sql.prl $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/lib/libQt5Sql.la 	$(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/plugins/sqldrivers/*.so $(1)/usr/lib/Qt/plugins/sqldrivers/
+endef
+
+define Package/qt5-xml/install
+	$(INSTALL_DIR) $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/lib/libQt5Xml.so* $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/lib/libQt5Xml.prl $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/lib/libQt5Xml.la 	$(1)/usr/lib/
+endef
+
+define Package/qt5-serialport/install
+	$(INSTALL_DIR) $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtserialport/lib/libQt5SerialPort.so* $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtserialport/lib/libQt5SerialPort.prl $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtserialport/lib/libQt5SerialPort.la 	$(1)/usr/lib/
+endef
+
+define Package/qt5-xmlpatterns/install
+	$(INSTALL_DIR) $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtxmlpatterns/lib/libQt5XmlPatterns.so* $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtxmlpatterns/lib/libQt5XmlPatterns.prl $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtxmlpatterns/lib/libQt5XmlPatterns.la $(1)/usr/lib/
+endef
+
+define Package/qt5-test/install
+	$(INSTALL_DIR) $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/lib/libQt5Test.so* $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/lib/libQt5Test.prl $(1)/usr/lib/
+	$(CP) $(PKG_BUILD_DIR)/qtbase/lib/libQt5Test.la $(1)/usr/lib/
+endef
+
+$(eval $(call BuildPackage,qt5-core))
+$(eval $(call BuildPackage,qt5-concurrent))
+$(eval $(call BuildPackage,qt5-network))
+$(eval $(call BuildPackage,qt5-widgets))
+$(eval $(call BuildPackage,qt5-sql))
+$(eval $(call BuildPackage,qt5-xml))
+$(eval $(call BuildPackage,qt5-serialport))
+$(eval $(call BuildPackage,qt5-xmlpatterns))
+$(eval $(call BuildPackage,qt5-test))
diff --git a/package/lean/qt5/files/qmake.conf b/package/lean/qt5/files/qmake.conf
new file mode 100644
index 0000000000..20491903ac
--- /dev/null
+++ b/package/lean/qt5/files/qmake.conf
@@ -0,0 +1,33 @@
+#
+# qmake configuration for building with linux-openwrt-g++
+#
+
+MAKEFILE_GENERATOR      = UNIX
+CONFIG                 += incremental
+QMAKE_INCREMENTAL_STYLE = sublib
+
+include(../common/linux.conf)
+include(../common/gcc-base-unix.conf)
+include(../common/g++-unix.conf)
+
+# modifications to g++.conf
+QMAKE_CC                = $(TARGET_CROSS)gcc
+QMAKE_CXX               = $(TARGET_CROSS)g++
+
+QMAKE_CFLAGS           += $$(TARGET_CFLAGS)
+QMAKE_CXXFLAGS         += $$(TARGET_CXXFLAGS)
+QMAKE_LFLAGS           += $$(TARGET_LDFLAGS)
+
+QMAKE_LINK_C            = $$QMAKE_CC
+QMAKE_LINK_C_SHLIB      = $$QMAKE_CC
+QMAKE_LINK              = $$QMAKE_CXX
+QMAKE_LINK_SHLIB        = $$QMAKE_CXX
+
+# modifications to linux.conf
+QMAKE_AR                = $(TARGET_CROSS)ar cqs
+QMAKE_OBJCOPY           = $(TARGET_CROSS)objcopy
+QMAKE_NM                = $(TARGET_CROSS)nm -P
+QMAKE_STRIP             = $(TARGET_CROSS)strip
+
+
+load(qt_config)
diff --git a/package/lean/qt5/files/qplatformdefs.h b/package/lean/qt5/files/qplatformdefs.h
new file mode 100644
index 0000000000..aedffeb1ef
--- /dev/null
+++ b/package/lean/qt5/files/qplatformdefs.h
@@ -0,0 +1,40 @@
+/****************************************************************************
+**
+** Copyright (C) 2016 The Qt Company Ltd.
+** Contact: https://www.qt.io/licensing/
+**
+** This file is part of the qmake spec of the Qt Toolkit.
+**
+** $QT_BEGIN_LICENSE:LGPL$
+** Commercial License Usage
+** Licensees holding valid commercial Qt licenses may use this file in
+** accordance with the commercial license agreement provided with the
+** Software or, alternatively, in accordance with the terms contained in
+** a written agreement between you and The Qt Company. For licensing terms
+** and conditions see https://www.qt.io/terms-conditions. For further
+** information use the contact form at https://www.qt.io/contact-us.
+**
+** GNU Lesser General Public License Usage
+** Alternatively, this file may be used under the terms of the GNU Lesser
+** General Public License version 3 as published by the Free Software
+** Foundation and appearing in the file LICENSE.LGPL3 included in the
+** packaging of this file. Please review the following information to
+** ensure the GNU Lesser General Public License version 3 requirements
+** will be met: https://www.gnu.org/licenses/lgpl-3.0.html.
+**
+** GNU General Public License Usage
+** Alternatively, this file may be used under the terms of the GNU
+** General Public License version 2.0 or (at your option) the GNU General
+** Public license version 3 or any later version approved by the KDE Free
+** Qt Foundation. The licenses are as published by the Free Software
+** Foundation and appearing in the file LICENSE.GPL2 and LICENSE.GPL3
+** included in the packaging of this file. Please review the following
+** information to ensure the GNU General Public License requirements will
+** be met: https://www.gnu.org/licenses/gpl-2.0.html and
+** https://www.gnu.org/licenses/gpl-3.0.html.
+**
+** $QT_END_LICENSE$
+**
+****************************************************************************/
+
+#include "../linux-g++/qplatformdefs.h"
diff --git a/package/lean/rblibtorrent/Makefile b/package/lean/rblibtorrent/Makefile
new file mode 100644
index 0000000000..c15101e08d
--- /dev/null
+++ b/package/lean/rblibtorrent/Makefile
@@ -0,0 +1,71 @@
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=rblibtorrent
+PKG_VERSION:=1.1.13
+PKG_RELEASE=1
+
+PKG_SOURCE_PROTO:=git
+PKG_SOURCE_URL:=https://github.com/arvidn/libtorrent.git
+PKG_SOURCE_SUBDIR:=$(PKG_NAME)-$(PKG_VERSION)
+PKG_SOURCE_VERSION:=6f1250c6535730897909240ea0f4f2a81937d21a
+PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
+
+PKG_LICENSE:=BSD
+PKG_LICENSE_FILES:=COPYING
+
+PKG_USE_MIPS16:=0
+PKG_BUILD_PARALLEL:=1
+PKG_INSTALL:=1
+
+include $(INCLUDE_DIR)/package.mk
+
+define Package/rblibtorrent
+  SECTION:=libs
+  CATEGORY:=Libraries
+  TITLE:=Rasterbar BitTorrent library
+  URL:=https://www.libtorrent.org/
+  DEPENDS:=+libstdcpp +libopenssl +boost +boost-system +boost-chrono +boost-random
+  MAINTAINER:=Arvid Norberg <arvid@libtorrent.org>
+endef
+
+define Package/rblibtorrent/description
+Rasterbar libtorrent is a C++ library that aims to be a good alternative to
+all the other bittorrent implementations around. It is a library and not a
+full featured client, although it comes with a working example client.
+endef
+
+TARGET_CFLAGS += $(if $(CONFIG_SOFT_FLOAT),-DBOOST_NO_FENV_H) -fPIC
+
+EXTRA_CXXFLAGS += $(if $(CONFIG_GCC_VERSION_4_8),-std=gnu++11,-std=gnu++14)
+
+TARGET_LDFLAGS += -lstdc++
+
+CONFIGURE_ARGS += \
+	--prefix /usr \
+	--enable-shared \
+	--enable-static \
+	--disable-debug \
+	--enable-encryption \
+	--with-boost=$(STAGING_DIR)/usr
+
+define Build/Configure
+	cd $(PKG_BUILD_DIR) ; \
+		sh autotool.sh
+	$(call Build/Configure/Default)
+endef
+
+define Build/InstallDev
+	$(INSTALL_DIR) $(1)/usr/include
+	$(CP) $(PKG_INSTALL_DIR)/usr/include/libtorrent $(1)/usr/include/
+	$(INSTALL_DIR) $(1)/usr/lib
+	$(CP) $(PKG_INSTALL_DIR)/usr/lib/libtorrent-rasterbar.{a,so*} $(1)/usr/lib/
+	$(INSTALL_DIR) $(1)/usr/lib/pkgconfig
+	$(CP) $(PKG_INSTALL_DIR)/usr/lib/pkgconfig/libtorrent-rasterbar.pc $(1)/usr/lib/pkgconfig/
+endef
+
+define Package/rblibtorrent/install
+	$(INSTALL_DIR) $(1)/usr/lib
+	$(CP) $(PKG_INSTALL_DIR)/usr/lib/libtorrent-rasterbar.so.* $(1)/usr/lib/
+endef
+
+$(eval $(call BuildPackage,rblibtorrent))
diff --git a/package/lean/samba4/Config.in b/package/lean/samba4/Config.in
new file mode 100644
index 0000000000..99157702a4
--- /dev/null
+++ b/package/lean/samba4/Config.in
@@ -0,0 +1,84 @@
+config SAMBA4_SERVER_ACL
+	bool "ACL support (xattr)"
+	depends on PACKAGE_samba4-server
+	help
+		installs: sharesec
+			modules: vfs_acl_xattr vfs_acl_tdb vfs_posixacl
+
+		Extended access control list support
+	default n
+
+config SAMBA4_SERVER_AD_DC
+	bool "Active Directory Domain Controller support (requires krb5-server) (EXPERIMENTAL)"
+	depends on PACKAGE_samba4-server
+	select PACKAGE_python-crypto
+	help
+		installs: samba (meta-daemon) python-crypto ntlm_auth
+			scripts: samba-tool
+
+		Run as a Active Directory Domain Controller
+		see: https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller
+		HINT: see section (# Using the Domain Controller as a File Server)
+		NOTE: Extroot is recommend for this setup, as it is not optimized to run completely from RAM/tempfs!
+	default n
+
+config SAMBA4_SERVER_AVAHI
+	bool "Avahi support"
+	depends on PACKAGE_samba4-server
+	select SAMBA4_SERVER_VFS
+	help
+		Announce Samba resources via DNS/DNS-SD using the Avahi daemon, for Linux/Mac clients.
+	default y
+
+config SAMBA4_SERVER_VFS
+	bool "Common VFS modules"
+	depends on PACKAGE_samba4-server
+	help
+		installs:
+			modules: (vfs_btrfs) vfs_fruit vfs_shadow_copy2 vfs_recycle vfs_fake_perms vfs_readonly vfs_cap vfs_offline vfs_crossrename vfs_catia vfs_streams_xattr
+
+		Commonly used VFS modules, vfs_btrfs requires kmod-fs-btrfs to be selected separately
+        default y
+
+config SAMBA4_SERVER_QUOTAS
+	bool "Disk quota support"
+	depends on PACKAGE_samba4-server
+	help
+		installs:
+			modules: vfs_default_quota
+
+		Support for disk quotas using the quotas VFS module (vfs_default_quota)
+	default n
+
+config SAMBA4_SERVER_VFSX
+	bool "Extended VFS modules"
+	depends on PACKAGE_samba4-server
+	help
+		installs:
+			modules: vfs_virusfilter vfs_shell_snap vfs_commit vfs_worm vfs_xattr_tdb vfs_aio_fork vfs_aio_pthread (vfs_linux_xfs_sgid) vfs_netatalk vfs_dirsort vfs_fileid
+
+		Additional VFS modules that aren't commonly used, vfs_linux_xfs_sgid requires kmod-fs-xfs to be selected separately
+	default n
+
+config SAMBA4_SERVER_NETBIOS
+	bool "NetBIOS support"
+	depends on PACKAGE_samba4-server
+	help
+		installs: nmbd (daemon)
+
+		Announce Samba resources via NetBIOS using the nmbd daemon
+		WSD (Web Services for Devices) replaces the functionality of NetBIOS and is provided by the wsdd2 package (selected by default).
+		Note: As of Windows 10 Fall Creators Update (1709) NetBIOS isn't supported unless the old SMB1 feature is reinstalled (not recommended).
+		Network shares can be directly accessed via network paths '\\hostname\sharename' and mounted via 'map network drive' without NetBIOS or WSD.
+	default y
+
+config SAMBA4_SERVER_WINBIND
+	bool "Winbind support"
+	depends on PACKAGE_samba4-server
+	help
+		installs: winbindd (daemon) wbinfo
+
+		Support using domain users and groups in local commands, such as chown and chgrp.
+		Display domain users and groups in local command's output, such as ls.
+		see: https://wiki.samba.org/index.php/Configuring_Winbindd_on_a_Samba_AD_DC
+	default n
diff --git a/package/lean/samba4/Makefile b/package/lean/samba4/Makefile
new file mode 100644
index 0000000000..ce43061c0a
--- /dev/null
+++ b/package/lean/samba4/Makefile
@@ -0,0 +1,479 @@
+# Based partially on (wongsyrone/hbl0307106015) versions
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=samba
+PKG_VERSION:=4.9.11
+PKG_RELEASE:=3
+
+PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
+PKG_SOURCE_URL:=https://ftp.heanet.ie/mirrors/ftp.samba.org/stable/ \
+		https://ftp.gwdg.de/pub/samba/stable/ \
+		https://ftp.riken.jp/net/samba/samba/stable/ \
+		http://www.nic.funet.fi/index/samba/pub/samba/stable/ \
+		http://samba.mirror.bit.nl/samba/ftp/stable/ \
+		https://download.samba.org/pub/samba/stable/
+PKG_HASH:=bb736624d16f7369e395de2f15fec153b554f76f95864015b4ce1f2ae53e817b
+
+PKG_MAINTAINER:=Andy Walsh <andy.walsh44+github@gmail.com>
+PKG_LICENSE:=GPL-3.0-only
+PKG_LICENSE_FILES:=COPYING
+
+# samba4=(asn1_compile) e2fsprogs=(compile_et) nfs-kernel-server=(rpcgen)
+HOST_BUILD_DEPENDS:=python/host nfs-kernel-server/host e2fsprogs/host
+PKG_BUILD_DEPENDS:=samba4/host
+
+PKG_CONFIG_DEPENDS:= \
+	CONFIG_SAMBA4_SERVER_NETBIOS \
+	CONFIG_SAMBA4_SERVER_AVAHI \
+	CONFIG_SAMBA4_SERVER_VFS \
+	CONFIG_SAMBA4_SERVER_VFSX \
+	CONFIG_SAMBA4_SERVER_QUOTAS \
+	CONFIG_SAMBA4_SERVER_ACL \
+	CONFIG_SAMBA4_SERVER_AD_DC \
+	CONFIG_SAMBA4_SERVER_WINBIND \
+	CONFIG_PACKAGE_kmod-fs-btrfs \
+	CONFIG_PACKAGE_kmod-fs-xfs
+
+include $(INCLUDE_DIR)/package.mk
+include $(INCLUDE_DIR)/host-build.mk
+include $(INCLUDE_DIR)/kernel.mk
+include $(INCLUDE_DIR)/version.mk
+
+define Package/samba4/Default
+  SECTION:=net
+  CATEGORY:=Network
+  TITLE:=Samba $(PKG_VERSION)
+  URL:=https://www.samba.org/
+endef
+
+define Package/samba4/Default/description
+  The Samba software suite is a collection of programs that implements the
+  SMB/CIFS protocol for UNIX systems, allowing you to serve files and printers.
+
+  Samba 4 implements up-to protocol version SMB v3.1.1 (Win10), supports mDNS via AVAHI and a AD-DC setup via krb5.
+  NOTE: No cluster and printer support.
+endef
+
+define Package/samba4-libs
+  $(call Package/samba4/Default)
+  TITLE+= libs
+  DEPENDS:= +zlib +libtirpc +libpopt +libcomerr +libreadline \
+	+PACKAGE_libcap:libcap +PACKAGE_libpthread:libpthread +PACKAGE_libnettle:libnettle \
+	+PACKAGE_libgcrypt:libgcrypt +PACKAGE_libpam:libpam +PACKAGE_dbus:dbus +PACKAGE_libavahi-client:libavahi-client \
+	+SAMBA4_SERVER_VFS:attr \
+	+SAMBA4_SERVER_ACL:acl +SAMBA4_SERVER_ACL:attr \
+	+SAMBA4_SERVER_AVAHI:libavahi-client \
+	+SAMBA4_SERVER_AD_DC:python-base +SAMBA4_SERVER_AD_DC:libopenssl +SAMBA4_SERVER_AD_DC:libgnutls +SAMBA4_SERVER_AD_DC:libopenldap +SAMBA4_SERVER_AD_DC:jansson +SAMBA4_SERVER_AD_DC:libarchive
+endef
+
+define Package/samba4-server
+  $(call Package/samba4/Default)
+  TITLE+= server
+  DEPENDS:= +samba4-libs
+  EXTRA_DEPENDS:=$(if $(CONFIG_SAMBA4_SERVER_AD_DC),python-crypto,)
+endef
+
+define Package/samba4-server/description
+  installs: smbd, nmbd (daemon) smbpasswd pdbedit testparm
+
+  This provides the basic fileserver service and is the minimum needed to serve file shares.
+  HINT: https://fitzcarraldoblog.wordpress.com/2016/10/17/a-correct-method-of-configuring-samba-for-browsing-smb-shares-in-a-home-network/
+endef
+
+# BUG: We cant add DEPENDS:= +SAMBA4_SERVER_AD_DC:python-crypto, so this only happens here via select!
+define Package/samba4-server/config
+  select PACKAGE_wsdd2
+  source "$(SOURCE)/Config.in"
+endef
+
+define Package/samba4-client
+  $(call Package/samba4/Default)
+  TITLE+= client
+  DEPENDS:= +samba4-libs
+endef
+
+define Package/samba4-client/description
+  installs: smbclient cifsdd
+
+  The smbclient program implements a simple ftp-like client for accessing SMB shares
+endef
+
+define Package/samba4-admin
+  $(call Package/samba4/Default)
+  TITLE+= admin tools
+  DEPENDS:= +samba4-libs
+endef
+
+define Package/samba4-admin/description
+  installs: net smbcontrol profiles rpcclient smbcacls smbcquotas
+
+  Administration tools collection
+endef
+
+define Package/samba4-utils
+  $(call Package/samba4/Default)
+  TITLE+= utils
+  DEPENDS:= +samba4-libs
+endef
+
+define Package/samba4-utils/description
+  installs: smbstatus smbtree smbget nmblookup mvxattr
+
+  Utilities collection
+endef
+
+TARGET_CFLAGS += -ffunction-sections -fdata-sections
+TARGET_LDFLAGS += -Wl,--gc-sections
+
+CONFIGURE_VARS += \
+	CPP="$(TARGET_CROSS)cpp"
+
+CONFIGURE_CMD = ./buildtools/bin/waf
+HOST_CONFIGURE_CMD = ./buildtools/bin/waf
+
+# Strip options that WAF configure script does not recognize
+CONFIGURE_ARGS:=$(filter-out	\
+	--target=%			\
+	--host=%			\
+	--build=%			\
+	--program-prefix=%	\
+	--program-suffix=% 	\
+	--disable-nls		\
+	--disable-ipv6		\
+	, $(CONFIGURE_ARGS))
+
+HOST_CONFIGURE_ARGS:=$(filter-out	\
+	--target=%			\
+	--host=%			\
+	--build=%			\
+	--program-prefix=%	\
+	--program-suffix=% 	\
+	--disable-nls		\
+	--disable-ipv6		\
+	, $(HOST_CONFIGURE_ARGS))
+
+# Waf needs the "configure" argument
+CONFIGURE_ARGS:=configure $(CONFIGURE_ARGS)
+HOST_CONFIGURE_ARGS:=configure $(HOST_CONFIGURE_ARGS)
+
+CONFIGURE_ARGS += \
+		--hostcc="$(HOSTCC)" \
+		--cross-compile \
+		--cross-answers=cross-answers.txt \
+		--disable-cups \
+		--disable-iprint \
+		--disable-cephfs \
+		--disable-fault-handling \
+		--disable-glusterfs \
+		--disable-rpath \
+		--disable-rpath-install \
+		--disable-rpath-private-install \
+		--enable-fhs \
+		--without-automount \
+		--without-iconv \
+		--without-lttng \
+		--without-ntvfs-fileserver \
+		--without-pam \
+		--without-systemd \
+		--without-utmp \
+		--without-dmapi \
+		--without-fam \
+		--without-gettext \
+		--without-regedit \
+		--without-gpgme
+
+HOST_CONFIGURE_ARGS += \
+		--hostcc="$(HOSTCC)" \
+		--disable-cups \
+		--disable-iprint \
+		--disable-cephfs \
+		--disable-fault-handling \
+		--disable-glusterfs \
+		--disable-rpath \
+		--disable-rpath-install \
+		--disable-rpath-private-install \
+		--enable-fhs \
+		--without-automount \
+		--without-iconv \
+		--without-lttng \
+		--without-ntvfs-fileserver \
+		--without-pam \
+		--without-systemd \
+		--without-utmp \
+		--without-dmapi \
+		--without-fam \
+		--without-gettext \
+		--without-regedit \
+		--without-gpgme
+
+HOST_CONFIGURE_ARGS += --disable-avahi --without-quotas --without-acl-support --without-winbind \
+	--without-ad-dc --without-json-audit --without-libarchive --disable-python --nopyc --nopyo \
+	--disable-gnutls --without-dnsupdate --without-ads --without-ldap
+HOST_CONFIGURE_VARS += python_LDFLAGS="" python_LIBDIR=""
+
+# Optional AES-NI support - https://lists.samba.org/archive/samba-technical/2017-September/122738.html
+# Support for Nettle wasn't comitted
+ifdef CONFIG_TARGET_x86_64
+	CONFIGURE_ARGS += --accel-aes=intelaesni
+else
+	CONFIGURE_ARGS += --accel-aes=none
+endif
+
+CONFIGURE_ARGS += \
+		--with-lockdir=/var/lock \
+		--with-logfilebase=/var/log \
+		--with-piddir=/var/run \
+		--with-privatedir=/etc/samba
+
+ifeq ($(CONFIG_SAMBA4_SERVER_AVAHI),y)
+	CONFIGURE_ARGS += --enable-avahi
+else
+	CONFIGURE_ARGS += --disable-avahi
+endif
+ifeq ($(CONFIG_SAMBA4_SERVER_QUOTAS),y)
+	CONFIGURE_ARGS += --with-quotas
+else
+	CONFIGURE_ARGS += --without-quotas
+endif
+ifeq ($(CONFIG_SAMBA4_SERVER_ACL),y)
+	CONFIGURE_ARGS += --with-acl-support
+else
+	CONFIGURE_ARGS += --without-acl-support
+endif
+ifeq ($(CONFIG_SAMBA4_SERVER_AD_DC),y)
+	CONFIGURE_ARGS += --enable-gnutls --with-dnsupdate --with-ads --with-ldap
+	TARGET_CFLAGS := -I$(STAGING_DIR)/usr/include/python2.7 $(TARGET_CFLAGS)
+else
+	CONFIGURE_ARGS += --without-ad-dc --without-json-audit --without-libarchive --disable-python --nopyc --nopyo \
+		--disable-gnutls --without-dnsupdate --without-ads --without-ldap
+	CONFIGURE_VARS += \
+		python_LDFLAGS="" \
+		python_LIBDIR=""
+endif
+ifeq ($(CONFIG_SAMBA4_SERVER_WINBIND),y)
+	CONFIGURE_ARGS += --with-winbind
+else
+	CONFIGURE_ARGS += --without-winbind
+endif
+
+SAMBA4_IDMAP_MODULES :=
+SAMBA4_IDMAP_MODULES_SHARED :=
+SAMBA4_PDB_MODULES :=pdb_smbpasswd,pdb_tdbsam,
+SAMBA4_AUTH_MODULES :=auth_builtin,auth_sam,auth_unix,auth_script,
+SAMBA4_VFS_MODULES :=vfs_default,
+SAMBA4_VFS_MODULES_SHARED :=
+ifeq ($(CONFIG_SAMBA4_SERVER_VFS),y)
+	SAMBA4_VFS_MODULES_SHARED :=$(SAMBA4_VFS_MODULES_SHARED)vfs_fruit,vfs_shadow_copy2,vfs_recycle,vfs_fake_perms,vfs_readonly,vfs_cap,vfs_offline,vfs_crossrename,vfs_catia,vfs_streams_xattr,vfs_xattr_tdb,
+ifeq ($(CONFIG_PACKAGE_kmod-fs-btrfs),y)
+	SAMBA4_VFS_MODULES_SHARED :=$(SAMBA4_VFS_MODULES_SHARED)vfs_btrfs,
+endif
+endif
+ifeq ($(CONFIG_SAMBA4_SERVER_VFSX),y)
+	SAMBA4_VFS_MODULES_SHARED :=$(SAMBA4_VFS_MODULES_SHARED)vfs_virusfilter,vfs_shell_snap,vfs_commit,vfs_worm,vfs_aio_fork,vfs_aio_pthread,vfs_netatalk,vfs_dirsort,vfs_fileid,
+ifeq ($(CONFIG_PACKAGE_kmod-fs-xfs),y)
+	SAMBA4_VFS_MODULES_SHARED :=$(SAMBA4_VFS_MODULES_SHARED)vfs_linux_xfs_sgid,
+endif
+endif
+ifeq ($(CONFIG_SAMBA4_SERVER_QUOTAS),y)
+	SAMBA4_VFS_MODULES_SHARED :=$(SAMBA4_VFS_MODULES_SHARED)vfs_default_quota,
+endif
+ifeq ($(CONFIG_SAMBA4_SERVER_ACL),y)
+	SAMBA4_VFS_MODULES :=$(SAMBA4_VFS_MODULES)vfs_posixacl,
+	SAMBA4_VFS_MODULES_SHARED :=$(SAMBA4_VFS_MODULES_SHARED)vfs_acl_xattr,vfs_acl_tdb,
+	# vfs_zfsacl needs https://github.com/zfsonlinux/zfs/tree/master/include/sys/zfs_acl.h
+	# vfs_nfs4acl_xattr needs https://github.com/notriddle/libdrpc/blob/master/rpc/xdr.h
+endif
+ifeq ($(CONFIG_SAMBA4_SERVER_AD_DC),y)
+	SAMBA4_PDB_MODULES :=$(SAMBA4_PDB_MODULES)pdb_samba_dsdb,pdb_ldapsam,
+	SAMBA4_AUTH_MODULES :=$(SAMBA4_AUTH_MODULES)auth_samba4,
+	SAMBA4_VFS_MODULES_SHARED :=$(SAMBA4_VFS_MODULES_SHARED)vfs_audit,vfs_extd_audit,vfs_full_audit,
+endif
+ifeq ($(CONFIG_SAMBA4_SERVER_WINBIND),y)
+	SAMBA4_IDMAP_MODULES :=$(SAMBA4_IDMAP_MODULES)idmap_tdb,idmap_passdb,idmap_nss,nss_info_template,
+	SAMBA4_IDMAP_MODULES_SHARED :=$(SAMBA4_IDMAP_MODULES_SHARED)idmap_autorid,idmap_rid,idmap_hash,idmap_tdb2,idmap_script,
+ifeq ($(CONFIG_SAMBA4_SERVER_AD_DC),y)
+	SAMBA4_IDMAP_MODULES_SHARED :=$(SAMBA4_IDMAP_MODULES_SHARED)idmap_ad,idmap_ldap,idmap_rfc2307,
+	# idmap_ad needs --with-ads
+	# idmap_rfc2307 needs ldap headers
+endif
+	SAMBA4_AUTH_MODULES :=$(SAMBA4_AUTH_MODULES)auth_winbind,
+endif
+
+SAMBA4_MODULES :=${SAMBA4_VFS_MODULES}${SAMBA4_AUTH_MODULES}${SAMBA4_PDB_MODULES}${SAMBA4_IDMAP_MODULES}
+SAMBA4_MODULES_SHARDED :=${SAMBA4_VFS_MODULES_SHARED}${SAMBA4_IDMAP_MODULES_SHARED}
+
+CONFIGURE_ARGS += \
+		--with-static-modules=$(SAMBA4_MODULES)!DEFAULT,!FORCED \
+		--with-shared-modules=$(SAMBA4_MODULES_SHARDED)!DEFAULT,!FORCED
+
+HOST_CONFIGURE_ARGS += \
+		--with-static-modules=!DEFAULT,!FORCED \
+		--with-shared-modules=!DEFAULT,!FORCED
+
+# Setup build/install targets
+# CONFIG_PACKAGE_samba4-server
+BUILD_TARGETS_SERVER :=smbd/smbd,smbpasswd,pdbedit,testparm
+# Optional server targets
+ifeq ($(CONFIG_SAMBA4_SERVER_ACL),y)
+	BUILD_TARGETS_SERVER :=$(BUILD_TARGETS_SERVER),sharesec
+endif
+ifeq ($(CONFIG_SAMBA4_SERVER_NETBIOS),y)
+	BUILD_TARGETS_SERVER :=$(BUILD_TARGETS_SERVER),nmbd
+endif
+ifeq ($(CONFIG_SAMBA4_SERVER_AD_DC),y)
+	BUILD_TARGETS_SERVER :=$(BUILD_TARGETS_SERVER),samba,nsstest,ntlm_auth,samba4kinit,samba4kgetcred,samba4kpasswd,samba4ktutil
+endif
+ifeq ($(CONFIG_SAMBA4_SERVER_WINBIND),y)
+	BUILD_TARGETS_SERVER :=$(BUILD_TARGETS_SERVER),winbindd,wbinfo,winbind_krb5_locator
+endif
+# CONFIG_PACKAGE_samba4-client
+BUILD_TARGETS_CLIENT :=client/smbclient,client/cifsdd
+# CONFIG_PACKAGE_samba4-admin
+BUILD_TARGETS_ADMIN :=net,smbcontrol,profiles,rpcclient,smbcacls,smbcquotas,eventlogadm
+# CONFIG_PACKAGE_samba4-utils
+BUILD_TARGETS_UTILS :=smbstatus,smbtree,smbget,mvxattr,nmblookup
+
+# lib bundling
+# NOTE: bundle + make private, we want to avoid version configuration (build, link) conflicts
+CONFIGURE_ARGS += --builtin-libraries=talloc,tevent,tevent-util,texpect,tdb,ldb,tdr,cmocka
+HOST_CONFIGURE_ARGS += --builtin-libraries=replace --nonshared-binary=asn1_compile
+
+ifeq ($(CONFIG_SAMBA4_SERVER_AD_DC),y)
+CONFIGURE_ARGS += --bundled-libraries=talloc,tevent,tevent-util,texpect,tdb,ldb,tdr,cmocka,replace,pytalloc-util,pyldb-util,roken,wind,hx509,asn1,heimbase,hcrypto,krb5,gssapi,heimntlm,hdb,kdc,NONE
+else
+CONFIGURE_ARGS += --bundled-libraries=talloc,tevent,tevent-util,texpect,tdb,ldb,tdr,cmocka,replace,roken,wind,hx509,asn1,heimbase,hcrypto,krb5,gssapi,heimntlm,hdb,kdc,NONE
+endif
+# BUG: --private-libraries, Does not work for System possible libs, will not get "samba4" suffix!
+CONFIGURE_ARGS += --private-libraries=talloc,tevent,tevent-util,texpect,tdb,ldb,tdr,cmocka,replace
+# CONFIGURE_ARGS += --disable-symbol-versions
+
+define Host/Compile
+	(cd $(HOST_BUILD_DIR); \
+		./buildtools/bin/waf build \
+		--targets=asn1_compile \
+	)
+endef
+
+define Host/Install
+	$(INSTALL_DIR) $(STAGING_DIR_HOSTPKG)/bin/
+	$(INSTALL_BIN) $(HOST_BUILD_DIR)/bin/asn1_compile $(STAGING_DIR_HOSTPKG)/bin/
+endef
+
+define Build/Prepare
+	$(Build/Prepare/Default)
+ifeq ($(CONFIG_SAMBA4_SERVER_AD_DC),)
+	# un-bundle dnspython
+	$(SED) '/"dns.resolver":/d' $(PKG_BUILD_DIR)/third_party/wscript
+	# unbundle iso8601
+	$(SED) '/"iso8601":/d' $(PKG_BUILD_DIR)/third_party/wscript
+endif
+endef
+
+define Build/Configure
+	$(CP) ./waf-cross-answers/$(ARCH).txt $(PKG_BUILD_DIR)/cross-answers.txt
+	echo 'Checking uname machine type: "$(ARCH)"' >> $(PKG_BUILD_DIR)/cross-answers.txt
+	echo 'Checking uname release type: "$(LINUX_VERSION)"' >> $(PKG_BUILD_DIR)/cross-answers.txt
+	echo 'Checking uname version type: "$(VERSION_DIST) Linux-$(LINUX_VERSION) $(shell date +%Y-%m-%d)"' >> $(PKG_BUILD_DIR)/cross-answers.txt
+	# NOTE: For some unknown reason this answer is not needed on some hosts/distros, yet needed on others?
+	echo 'Checking whether POSIX capabilities are available: OK' >> $(PKG_BUILD_DIR)/cross-answers.txt
+	$(call Build/Configure/Default)
+endef
+
+# BUG: We need to use "waf install --targets=" otherwise a "make install" or "waf install" will retrigger a full recompile of all possible targets!
+define Build/Compile
+	(cd $(PKG_BUILD_DIR); \
+		./buildtools/bin/waf install \
+		--jobs=$(shell nproc) \
+		--destdir="$(PKG_INSTALL_DIR)" \
+		--targets=$(SAMBA4_MODULES)$(SAMBA4_MODULES_SHARDED)$(BUILD_TARGETS_SERVER),$(BUILD_TARGETS_UTILS),$(BUILD_TARGETS_ADMIN),$(BUILD_TARGETS_CLIENT) \
+	)
+endef
+
+# No default install see above
+define Build/Install
+endef
+
+define Package/samba4-libs/install
+	$(INSTALL_DIR) $(1)/usr/lib
+	$(CP) $(PKG_INSTALL_DIR)/usr/lib/*.so* $(1)/usr/lib/
+	$(CP) $(PKG_INSTALL_DIR)/usr/lib/samba/*.so* $(1)/usr/lib/
+	
+	$(INSTALL_DIR) $(1)/usr/lib/samba/vfs $(1)/usr/lib/samba/idmap $(1)/usr/lib/samba/ldb $(1)/usr/lib/samba/krb5
+	if [ -d $(PKG_INSTALL_DIR)/usr/lib/samba/idmap ]; then \
+		$(CP) $(PKG_INSTALL_DIR)/usr/lib/samba/idmap $(1)/usr/lib/samba/; \
+	fi
+	if [ -d $(PKG_INSTALL_DIR)/usr/lib/samba/vfs ]; then \
+		$(CP) $(PKG_INSTALL_DIR)/usr/lib/samba/vfs $(1)/usr/lib/samba/; \
+	fi
+	if [ -d $(PKG_INSTALL_DIR)/usr/lib/samba/krb5 ]; then \
+		$(CP) $(PKG_INSTALL_DIR)/usr/lib/samba/krb5 $(1)/usr/lib/samba/; \
+	fi
+ifeq ($(CONFIG_SAMBA4_SERVER_AD_DC),y)
+	$(INSTALL_DIR) $(1)/usr/lib/python2.7
+	$(CP) $(PKG_INSTALL_DIR)/usr/lib/python2.7 $(1)/usr/lib/
+endif
+endef
+
+define Package/samba4-client/install
+	$(INSTALL_DIR) $(1)/usr/bin
+	$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/{smbclient,cifsdd} $(1)/usr/bin/
+endef
+
+define Package/samba4-admin/install
+	$(INSTALL_DIR) $(1)/usr/bin
+	$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/{net,smbcontrol,profiles,rpcclient,smbcacls,smbcquotas} $(1)/usr/bin/
+	$(INSTALL_DIR) $(1)/usr/sbin
+	$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/eventlogadm $(1)/usr/sbin/
+endef
+
+define Package/samba4-utils/install
+	$(INSTALL_DIR) $(1)/usr/bin
+	$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/{smbstatus,smbtree,smbget,mvxattr,nmblookup} $(1)/usr/bin/
+endef
+
+define Package/samba4-server/install
+	$(INSTALL_DIR) $(1)/usr/bin
+	$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/{smbpasswd,pdbedit,testparm} $(1)/usr/bin/
+	$(INSTALL_DIR) $(1)/usr/sbin
+	$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/smbd $(1)/usr/sbin/
+ifeq ($(CONFIG_SAMBA4_SERVER_AD_DC),y)
+	$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/{samba-tool,ntlm_auth,smbtar} $(1)/usr/bin/
+	$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/{samba,samba-gpupdate,samba_dnsupdate,samba_kcc,samba_spnupdate,samba_upgradedns} $(1)/usr/sbin/
+	# waf does not install those?
+	$(INSTALL_BIN) $(PKG_BUILD_DIR)/bin/{samba4kinit,samba4kgetcred,samba4kpasswd,samba4ktutil} $(1)/usr/bin/
+endif
+ifeq ($(CONFIG_SAMBA4_SERVER_NETBIOS),y)
+	$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/nmbd $(1)/usr/sbin/
+endif
+ifeq ($(CONFIG_SAMBA4_SERVER_WINBIND),y)
+	$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/wbinfo $(1)/usr/bin/
+	$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/winbindd $(1)/usr/sbin/
+endif
+ifeq ($(CONFIG_SAMBA4_SERVER_ACL),y)
+	$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/sharesec $(1)/usr/bin/
+endif
+	$(INSTALL_DIR) $(1)/etc/config $(1)/etc/samba $(1)/etc/init.d
+	$(INSTALL_CONF) ./files/samba.config $(1)/etc/config/samba4
+	$(INSTALL_DATA) ./files/smb.conf.template $(1)/etc/samba
+	$(INSTALL_BIN) ./files/samba.init $(1)/etc/init.d/samba4
+endef
+
+define Package/samba4-server/conffiles
+/etc/config/samba4
+/etc/samba/smb.conf.template
+/etc/samba/smb.conf
+/etc/samba/smbpasswd
+/etc/samba/secrets.tdb
+/etc/samba/passdb.tdb
+/etc/samba/idmap.ldb
+/etc/samba/lmhosts
+/etc/nsswitch.conf
+/etc/krb5.conf
+endef
+
+$(eval $(call HostBuild))
+$(eval $(call BuildPackage,samba4-libs))
+$(eval $(call BuildPackage,samba4-server))
+$(eval $(call BuildPackage,samba4-client))
+$(eval $(call BuildPackage,samba4-admin))
+$(eval $(call BuildPackage,samba4-utils))
diff --git a/package/lean/samba4/files/samba.config b/package/lean/samba4/files/samba.config
new file mode 100644
index 0000000000..332bb27914
--- /dev/null
+++ b/package/lean/samba4/files/samba.config
@@ -0,0 +1,6 @@
+config samba
+	option 'workgroup'		'WORKGROUP'
+	option 'description'	'Samba on OpenWrt'
+	option 'charset' 		'UTF-8'
+	option 'homes'			'0'
+
diff --git a/package/lean/samba4/files/samba.init b/package/lean/samba4/files/samba.init
new file mode 100644
index 0000000000..d7eed562aa
--- /dev/null
+++ b/package/lean/samba4/files/samba.init
@@ -0,0 +1,219 @@
+#!/bin/sh /etc/rc.common
+
+START=98
+USE_PROCD=1
+
+smb_header() {
+	config_get samba_iface $1 interface "loopback lan"
+
+	# resolve interfaces
+	local interfaces
+	interfaces=$(
+		. /lib/functions/network.sh
+
+		local net
+		for net in $samba_iface; do
+			local device
+			network_is_up $net || continue
+			network_get_device device "$net"
+			printf "%s " "${device:-$net}"
+		done
+	)
+
+	local workgroup description charset
+	# we dont use netbios anymore as default and wsd/avahi is dns based
+	local hostname
+	hostname="$(cat /proc/sys/kernel/hostname)"
+
+	config_get workgroup		$1 workgroup	"WORKGROUP"
+	config_get description		$1 description	"Samba on OpenWrt"
+	config_get charset		$1 charset	"UTF-8"
+
+	config_get_bool MACOS		$1 macos		0
+	config_get_bool DISABLE_NETBIOS	$1 disable_netbios	0
+	config_get_bool DISABLE_AD_DC	$1 disable_ad_dc	0
+	config_get_bool DISABLE_WINBIND	$1 disable_winbind	0
+
+	mkdir -p /var/etc
+	sed -e "s#|NAME|#$hostname#g" \
+	    -e "s#|WORKGROUP|#$workgroup#g" \
+	    -e "s#|DESCRIPTION|#$description#g" \
+	    -e "s#|INTERFACES|#$interfaces#g" \
+	    -e "s#|CHARSET|#$charset#g" \
+	    /etc/samba/smb.conf.template > /var/etc/smb.conf
+
+	{
+		printf "\n######### Dynamic written config options #########\n"
+		if [ "$DISABLE_NETBIOS" -eq 1 ] || [ ! -x /usr/sbin/nmbd ]; then
+			printf "\tdisable netbios = yes\n"
+		fi
+
+		local homes
+		config_get_bool homes $1 homes 0
+		[ $homes -gt 0 ] && {
+			cat <<EOT
+
+[homes]
+	comment     = Home Directories
+	browsable   = no
+	writable = yes
+	read only   = no
+	create mask = 0750
+EOT
+		}
+	} >> /var/etc/smb.conf
+
+	[ -e /etc/samba/smb.conf ] || ln -nsf /var/etc/smb.conf /etc/samba/smb.conf
+
+	if ! [ -L /etc/samba/smb.conf ]; then
+		logger -t 'samba4-server' "Local custom /etc/samba/smb.conf file detected, all luci/config settings are ignored!"
+	fi
+
+}
+
+smb_add_share() {
+	local name
+	local path
+	local users
+	local create_mask
+	local dir_mask
+	local browseable
+	local read_only
+	local writeable
+	local guest_ok
+	local guest_only
+	local inherit_owner
+	local vfs_objects
+	local timemachine
+	local timemachine_maxsize
+	local force_root
+	local write_list
+	local read_list
+
+	config_get name $1 name
+	config_get path $1 path
+	config_get users $1 users
+	config_get create_mask $1 create_mask
+	config_get dir_mask $1 dir_mask
+	config_get browseable $1 browseable
+	config_get read_only $1 read_only
+	config_get writeable $1 writeable
+	config_get guest_ok $1 guest_ok
+	config_get guest_only $1 guest_only
+	config_get inherit_owner $1 inherit_owner
+	config_get vfs_objects $1 vfs_objects
+	config_get_bool timemachine	$1 timemachine	0
+	config_get timemachine_maxsize $1 timemachine_maxsize
+	config_get_bool force_root	$1 force_root	0
+	config_get write_list $1 write_list
+	config_get read_list $1 read_list
+
+	[ -z "$name" ] || [ -z "$path" ] && return
+
+	{
+		printf "\n[$name]\n\tpath = %s\n" "$path"
+
+		if [ "$force_root" -eq 1 ]; then
+			printf "\tforce user = root\n"
+			printf "\tforce group = root\n"
+		else
+			[ -n "$users" ] && printf "\tvalid users = %s\n" "$users"
+		fi
+
+		[ -n "$create_mask" ] && printf "\tcreate mask = %s\n" "$create_mask"
+		[ -n "$dir_mask" ] && printf "\tdirectory mask = %s\n" "$dir_mask"
+
+		[ -n "$browseable" ] && printf "\tbrowseable = %s\n" "$browseable"
+		[ -n "$read_only" ] && printf "\tread only = %s\n" "$read_only"
+		[ -n "$writeable" ] && printf "\twriteable = %s\n" "$writeable"
+		[ -n "$guest_ok" ] && printf "\tguest ok = %s\n" "$guest_ok"
+		[ -n "$guest_only" ] && printf "\tguest only = %s\n" "$guest_only"
+		[ -n "$inherit_owner" ] && printf "\tinherit owner = %s\n" "$inherit_owner"
+
+		[ -n "$write_list" ] && printf "\twrite list = %s\n" "$write_list"
+		[ -n "$read_list" ] && printf "\tread list = %s\n" "$read_list"
+
+		if [ "$MACOS" -eq 1 ]; then
+			vfs_objects="catia fruit streams_xattr $vfs_objects"
+			printf "\tfruit:encoding = native\n"
+			printf "\tfruit:metadata = stream\n"
+			printf "\tfruit:veto_appledouble = no\n"
+			# avoid mixed shares order for aapl
+			if [ "$timemachine" -eq 1 ]; then
+				printf "\tfruit:time machine = yes\n"
+				[ -n "$timemachine_maxsize" ] && printf "\tfruit:time machine max size = %sG\n" "${timemachine_maxsize}"
+			fi
+		fi
+
+		[ -n "$vfs_objects" ] && printf "\tvfs objects = %s\n" "$vfs_objects"
+	} >> /var/etc/smb.conf
+}
+
+init_config() {
+	# Create samba dirs
+	[ -d /var/lib/samba ] || mkdir -p /var/lib/samba
+	[ -d /var/cache/samba ] || mkdir -p /var/cache/samba
+	[ -d /var/run/samba ] || mkdir -p /var/run/samba
+	[ -d /var/log/samba ] || mkdir -p /var/log/samba
+	[ -d /var/lock ] || mkdir -p /var/lock
+	chmod 0755 /var/lock
+
+	config_load samba4
+	config_foreach smb_header samba
+	config_foreach smb_add_share sambashare
+}
+
+service_triggers() {
+	PROCD_RELOAD_DELAY=2000
+
+	procd_add_reload_trigger "dhcp" "system" "samba4"
+
+	local i
+	for i in $samba_iface; do
+		procd_add_reload_interface_trigger $i
+	done
+}
+
+start_service() {
+	init_config
+
+	# start main AD-DC daemon, will spawn (smbd,nmbd,winbindd) as needed/configured.
+	if [ "$DISABLE_AD_DC" -ne 1 ] && [ -x /usr/sbin/samba ]; then
+		procd_open_instance
+		procd_set_param command /usr/sbin/samba -F
+		procd_set_param respawn
+		procd_set_param file /var/etc/smb.conf
+		procd_close_instance
+	else
+		# start fileserver daemon
+		procd_open_instance
+		procd_set_param command /usr/sbin/smbd -F
+		procd_set_param respawn
+		procd_set_param file /var/etc/smb.conf
+		procd_close_instance
+
+		# start netbios daemon
+		if [ "$DISABLE_NETBIOS" -ne 1 ] && [ -x /usr/sbin/nmbd ]; then
+			procd_open_instance
+			procd_set_param command /usr/sbin/nmbd -F
+			procd_set_param respawn
+			procd_set_param file /var/etc/smb.conf
+			procd_close_instance
+		fi
+		# start winbind daemon
+		if [ "$DISABLE_WINBIND" -ne 1 ] && [ -x /usr/sbin/winbindd ]; then
+			procd_open_instance
+			procd_set_param command /usr/sbin/winbindd -F
+			procd_set_param respawn
+			procd_set_param file /var/etc/smb.conf
+			procd_close_instance
+		fi
+	fi
+	# lower priority using renice (if found)
+	if [ -x /usr/bin/renice ]; then
+		[ -x /usr/sbin/samba ] && renice -n 2 "$(pidof samba)"
+		[ -x /usr/sbin/smbd ] && renice -n 2 "$(pidof smbd)"
+		[ -x /usr/sbin/nmbd ] && renice -n 2 "$(pidof nmbd)"
+		[ -x /usr/sbin/winbindd ] && renice -n 2 "$(pidof winbindd)"
+	fi
+}
diff --git a/package/lean/samba4/files/smb.conf.template b/package/lean/samba4/files/smb.conf.template
new file mode 100644
index 0000000000..9c18184b3f
--- /dev/null
+++ b/package/lean/samba4/files/smb.conf.template
@@ -0,0 +1,107 @@
+[global]
+	netbios name = |NAME| 
+	interfaces = |INTERFACES|
+	server string = |DESCRIPTION|
+	unix charset = |CHARSET|
+	workgroup = |WORKGROUP|
+
+	## This global parameter allows the Samba admin to limit what interfaces on a machine will serve SMB requests.
+	bind interfaces only = yes
+	
+	## time for inactive connections to-be closed in minutes
+	deadtime = 15
+	
+	## disable core dumps
+	enable core files = no
+	
+	## set security (auto, user, domain, ads)
+	security = user
+	
+	## This parameter controls whether a remote client is allowed or required to use SMB encryption.
+	## It has different effects depending on whether the connection uses SMB1 or SMB2 and newer:
+    ## If the connection uses SMB1, then this option controls the use of a Samba-specific extension to the SMB protocol introduced in Samba 3.2 that makes use of the Unix extensions.
+	## If the connection uses SMB2 or newer, then this option controls the use of the SMB-level encryption that is supported in SMB version 3.0 and above and available in Windows 8 and newer. 
+	##(default/auto,desired,required,off)
+	#smb encrypt = default
+	
+	## set invalid users
+	invalid users = root
+	
+	## map unknow users to guest
+	map to guest = Bad User
+
+	## allow client access to accounts that have null passwords. 
+	null passwords = yes
+	
+	## The old plaintext passdb backend. Some Samba features will not work if this passdb backend is used. (NOTE: enabled for size reasons)
+	## (tdbsam,smbpasswd,ldapsam)
+	passdb backend = smbpasswd
+	
+	## Set location of smbpasswd ('smbd -b' will show default compiled location)
+	#smb passwd file = /etc/samba/smbpasswd 
+	
+	## LAN/WAN options (IPTOS_LOWDELAY TCP_NODELAY) WAN (IPTOS_THROUGHPUT)
+	socket options = IPTOS_LOWDELAY TCP_NODELAY
+	
+	## lower CPU useage if supported
+	use sendfile = yes
+	
+	## samba will behave as previous versions of Samba would and will fail the lock request immediately if the lock range cannot be obtained.
+	#blocking locks = No
+	
+	## disable loading of all printcap printers by default (iprint, cups, lpstat)
+	load printers = No
+	printcap name = /dev/null
+
+	## Enabling this parameter will disable Samba's support for the SPOOLSS set of MS-RPC's.
+	disable spoolss = yes
+	
+	## This parameters controls how printer status information is interpreted on your system.
+	## (BSD, AIX, LPRNG, PLP, SYSV, HPUX, QNX, SOFTQ)
+	printing = bsd
+	
+	## Disable that nmbd is acting as a WINS server for unknow netbios names
+	#dns proxy = No
+	
+	## win/unix user mapping backend
+	#idmap config * : backend = tdb
+	
+	## Allows the server name that is advertised through MDNS to be set to the hostname rather than the Samba NETBIOS name.
+	## This allows an administrator to make Samba registered MDNS records match the case of the hostname rather than being in all capitals.
+	## (netbios, mdns)
+	mdns name = mdns
+	
+	## Clients that only support netbios won't be able to see your samba server when netbios support is disabled.
+	#disable netbios = Yes
+	
+	## Setting this value to no will cause nmbd never to become a local master browser.
+	#local master = no
+
+	## (auto, yes) If this is set to yes, on startup, nmbd will force an election, and it will have a slight advantage in winning the election. It is recommended that this parameter is used in conjunction with domain master = yes, so that nmbd can guarantee becoming a domain master. 
+	#preferred master = yes
+
+	## (445 139) Specifies which ports the server should listen on for SMB traffic.
+	## 139 is netbios/nmbd
+	#smb ports = 445 139
+	
+	## This is a list of files and directories that are neither visible nor accessible.
+	## Each entry in the list must be separated by a '/', which allows spaces to be included in the entry. '*' and '?' can be used to specify multiple files or directories as in DOS wildcards.
+	veto files = /Thumbs.db/.DS_Store/._.DS_Store/.apdisk/
+	
+	## If a directory that is to be deleted contains nothing but veto files this deletion will fail unless you also set the delete veto files parameter to yes.
+	delete veto files = yes
+	
+################ Filesystem and creation rules ################
+	## reported filesystem type (NTFS,Samba,FAT)
+	#fstype = FAT
+	
+	## Allows a user who has write access to the file (by whatever means, including an ACL permission) to modify the permissions (including ACL) on it.
+	#dos filemode = Yes
+	
+	## file/dir creating rules
+	#create mask = 0666
+	#directory mask = 0777
+	#force group = root
+	#force user = root
+	#inherit owner = windows and unix
+################################################################
diff --git a/package/lean/samba4/patches/001-samba-4.4.0-pam.patch b/package/lean/samba4/patches/001-samba-4.4.0-pam.patch
new file mode 100644
index 0000000000..efd81f4d3e
--- /dev/null
+++ b/package/lean/samba4/patches/001-samba-4.4.0-pam.patch
@@ -0,0 +1,29 @@
+--- a/source3/wscript
++++ b/source3/wscript
+@@ -843,7 +843,7 @@ msg.msg_accrightslen = sizeof(fd);
+         if conf.env.with_iconv:
+             conf.DEFINE('HAVE_ICONV', 1)
+ 
+-    if Options.options.with_pam:
++    if Options.options.with_pam != False:
+         use_pam=True
+         conf.CHECK_HEADERS('security/pam_appl.h pam/pam_appl.h')
+         if not conf.CONFIG_SET('HAVE_SECURITY_PAM_APPL_H') and not conf.CONFIG_SET('HAVE_PAM_PAM_APPL_H'):
+@@ -920,6 +920,17 @@ int i; i = PAM_RADIO_TYPE;
+                        "or headers not found. Use --without-pam to disable "
+                        "PAM support.");
+ 
++    else:
++        Logs.warn("PAM disabled")
++        use_pam=False
++        conf.undefine('WITH_PAM')
++        conf.undefine('WITH_PAM_MODULES')
++        conf.undefine('HAVE_SECURITY_PAM_APPL_H')
++        conf.undefine('PAM_RHOST')
++        conf.undefine('PAM_TTY')
++        conf.undefine('HAVE_PAM_PAM_APPL_H')
++
++
+     seteuid = False
+ 
+ #
diff --git a/package/lean/samba4/patches/002-dnsserver-4.7.0.patch b/package/lean/samba4/patches/002-dnsserver-4.7.0.patch
new file mode 100644
index 0000000000..0c7592f8e2
--- /dev/null
+++ b/package/lean/samba4/patches/002-dnsserver-4.7.0.patch
@@ -0,0 +1,19 @@
+samba: build dnsserver_common code
+
+Just 'install' does not seem to do it.
+
+Upstream-Status: Pending
+
+Signed-off-by: Joe Slater <joe.slater@windriver.com>
+
+--- a/source4/dns_server/wscript_build
++++ b/source4/dns_server/wscript_build
+@@ -4,7 +4,7 @@ bld.SAMBA_LIBRARY('dnsserver_common',
+         source='dnsserver_common.c',
+         deps='samba-util samba-errors ldbsamba clidns',
+         private_library=True,
+-        install=bld.AD_DC_BUILD_IS_ENABLED()
++        enabled=bld.AD_DC_BUILD_IS_ENABLED()
+         )
+ 
+ bld.SAMBA_MODULE('service_dns',
diff --git a/package/lean/samba4/patches/010-source3-msgsock-nvram-fix.patch b/package/lean/samba4/patches/010-source3-msgsock-nvram-fix.patch
new file mode 100644
index 0000000000..4c93a5a3ea
--- /dev/null
+++ b/package/lean/samba4/patches/010-source3-msgsock-nvram-fix.patch
@@ -0,0 +1,20 @@
+--- a/source3/lib/messages.c
++++ b/source3/lib/messages.c
+@@ -518,7 +518,7 @@ static NTSTATUS messaging_init_internal(
+ 		return NT_STATUS_ACCESS_DENIED;
+ 	}
+ 
+-	priv_path = private_path("msg.sock");
++	priv_path = lock_path("msg.sock");
+ 	if (priv_path == NULL) {
+ 		return NT_STATUS_NO_MEMORY;
+ 	}
+@@ -662,7 +662,7 @@ NTSTATUS messaging_reinit(struct messagi
+ 
+ 	msg_ctx->msg_dgm_ref = messaging_dgm_ref(
+ 		msg_ctx, msg_ctx->event_ctx, &msg_ctx->id.unique_id,
+-		private_path("msg.sock"), lck_path,
++		lock_path("msg.sock"), lck_path,
+ 		messaging_recv_cb, msg_ctx, &ret);
+ 
+ 	if (msg_ctx->msg_dgm_ref == NULL) {
diff --git a/package/lean/samba4/patches/011-source4-msgsock-nvram-fix.patch b/package/lean/samba4/patches/011-source4-msgsock-nvram-fix.patch
new file mode 100644
index 0000000000..5271740011
--- /dev/null
+++ b/package/lean/samba4/patches/011-source4-msgsock-nvram-fix.patch
@@ -0,0 +1,11 @@
+--- a/source4/lib/messaging/messaging.c
++++ b/source4/lib/messaging/messaging.c
+@@ -350,7 +350,7 @@ static struct imessaging_context *imessa
+ 		goto fail;
+ 	}
+ 
+-	msg->sock_dir = lpcfg_private_path(msg, lp_ctx, "msg.sock");
++	msg->sock_dir = lpcfg_lock_path(msg, lp_ctx, "msg.sock");
+ 	if (msg->sock_dir == NULL) {
+ 		goto fail;
+ 	}
diff --git a/package/lean/samba4/patches/101-do-not-check-xsltproc-manpages.patch b/package/lean/samba4/patches/101-do-not-check-xsltproc-manpages.patch
new file mode 100644
index 0000000000..2b5bcdf578
--- /dev/null
+++ b/package/lean/samba4/patches/101-do-not-check-xsltproc-manpages.patch
@@ -0,0 +1,37 @@
+Don't check xsltproc manpages
+
+Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com>
+
+--- a/lib/ldb/wscript
++++ b/lib/ldb/wscript
+@@ -152,7 +152,7 @@ def configure(conf):
+         conf.DEFINE('EXPECTED_SYSTEM_LDB_VERSION_RELEASE', int(v[2]))
+ 
+     if conf.env.standalone_ldb:
+-        conf.CHECK_XSLTPROC_MANPAGES()
++        #conf.CHECK_XSLTPROC_MANPAGES()
+ 
+         # we need this for the ldap backend
+         if conf.CHECK_FUNCS_IN('ber_flush ldap_open ldap_initialize', 'lber ldap', headers='lber.h ldap.h'):
+--- a/lib/talloc/wscript
++++ b/lib/talloc/wscript
+@@ -49,7 +49,7 @@ def configure(conf):
+         conf.env.PKGCONFIGDIR = '${LIBDIR}/pkgconfig'
+         conf.env.TALLOC_VERSION = VERSION
+ 
+-    conf.CHECK_XSLTPROC_MANPAGES()
++    #conf.CHECK_XSLTPROC_MANPAGES()
+ 
+     conf.CHECK_HEADERS('sys/auxv.h')
+     conf.CHECK_FUNCS('getauxval')
+--- a/lib/tdb/wscript
++++ b/lib/tdb/wscript
+@@ -89,7 +89,7 @@ def configure(conf):
+         not conf.env.disable_tdb_mutex_locking):
+         conf.define('USE_TDB_MUTEX_LOCKING', 1)
+ 
+-    conf.CHECK_XSLTPROC_MANPAGES()
++    #conf.CHECK_XSLTPROC_MANPAGES()
+ 
+     if not conf.env.disable_python:
+         # also disable if we don't have the python libs installed
diff --git a/package/lean/samba4/patches/102-samba-4.8.5-unbundle-libbsd.patch b/package/lean/samba4/patches/102-samba-4.8.5-unbundle-libbsd.patch
new file mode 100644
index 0000000000..c8eae598da
--- /dev/null
+++ b/package/lean/samba4/patches/102-samba-4.8.5-unbundle-libbsd.patch
@@ -0,0 +1,77 @@
+--- a/lib/crypto/wscript_configure
++++ b/lib/crypto/wscript_configure
+@@ -2,11 +2,11 @@
+ import Options
+ import Utils
+ 
+-if not conf.CHECK_FUNCS_IN('MD5Init', 'bsd', headers='bsd/md5.h',
+-    checklibc=True):
+-    conf.CHECK_FUNCS_IN('MD5Init', 'md5', headers='sys/md5.h',
+-                        checklibc=True)
+-    conf.CHECK_FUNCS_IN('MD5Init', 'md', headers='sys/md5.h',
++# if not conf.CHECK_FUNCS_IN('MD5Init', 'bsd', headers='bsd/md5.h',
++    # checklibc=True):
++conf.CHECK_FUNCS_IN('MD5Init', 'md5', headers='sys/md5.h',
++					checklibc=True)
++conf.CHECK_FUNCS_IN('MD5Init', 'md', headers='sys/md5.h',
+                         checklibc=True)
+ conf.CHECK_FUNCS_IN('CC_MD5_Init', '', headers='CommonCrypto/CommonDigest.h',
+     checklibc=True)
+--- a/lib/replace/wscript
++++ b/lib/replace/wscript
+@@ -340,22 +340,13 @@ def configure(conf):
+ 
+     conf.CHECK_FUNCS('prctl dirname basename')
+ 
+-    strlcpy_in_bsd = False
++    # Not checking for libbsd
++    conf.CHECK_FUNCS('strlcpy strlcat')
++    conf.CHECK_FUNCS('getpeereid')
++    conf.CHECK_FUNCS_IN('setproctitle', 'setproctitle', headers='setproctitle.h')
++    conf.CHECK_FUNCS('setproctitle_init')
+ 
+-    # libbsd on some platforms provides strlcpy and strlcat
+-    if not conf.CHECK_FUNCS('strlcpy strlcat'):
+-        if conf.CHECK_FUNCS_IN('strlcpy strlcat', 'bsd', headers='bsd/string.h',
+-                               checklibc=True):
+-            strlcpy_in_bsd = True
+-    if not conf.CHECK_FUNCS('getpeereid'):
+-        conf.CHECK_FUNCS_IN('getpeereid', 'bsd', headers='sys/types.h bsd/unistd.h')
+-    if not conf.CHECK_FUNCS_IN('setproctitle', 'setproctitle', headers='setproctitle.h'):
+-        conf.CHECK_FUNCS_IN('setproctitle', 'bsd', headers='sys/types.h bsd/unistd.h')
+-    if not conf.CHECK_FUNCS('setproctitle_init'):
+-        conf.CHECK_FUNCS_IN('setproctitle_init', 'bsd', headers='sys/types.h bsd/unistd.h')
+-
+-    if not conf.CHECK_FUNCS('closefrom'):
+-        conf.CHECK_FUNCS_IN('closefrom', 'bsd', headers='bsd/unistd.h')
++    conf.CHECK_FUNCS('closefrom')
+ 
+     conf.CHECK_CODE('''
+                 struct ucred cred;
+@@ -698,9 +689,6 @@ def configure(conf):
+ 
+     # look for a method of finding the list of network interfaces
+     for method in ['HAVE_IFACE_GETIFADDRS', 'HAVE_IFACE_AIX', 'HAVE_IFACE_IFCONF', 'HAVE_IFACE_IFREQ']:
+-        bsd_for_strlcpy = ''
+-        if strlcpy_in_bsd:
+-            bsd_for_strlcpy = ' bsd'
+         if conf.CHECK_CODE('''
+                            #define %s 1
+                            #define NO_CONFIG_H 1
+@@ -713,7 +701,7 @@ def configure(conf):
+                            #include "test/getifaddrs.c"
+                            ''' % method,
+                            method,
+-                           lib='nsl socket' + bsd_for_strlcpy,
++                           lib='nsl socket',
+                            addmain=False,
+                            execute=True):
+             break
+@@ -761,7 +749,6 @@ def build(bld):
+                 break
+ 
+     extra_libs = ''
+-    if bld.CONFIG_SET('HAVE_LIBBSD'): extra_libs += ' bsd'
+ 
+     bld.SAMBA_SUBSYSTEM('LIBREPLACE_HOSTCC',
+         REPLACE_HOSTCC_SOURCE,
diff --git a/package/lean/samba4/patches/103-tmsize-overflow-fix.patch b/package/lean/samba4/patches/103-tmsize-overflow-fix.patch
new file mode 100644
index 0000000000..5d6cebe162
--- /dev/null
+++ b/package/lean/samba4/patches/103-tmsize-overflow-fix.patch
@@ -0,0 +1,21 @@
+--- a/source3/modules/vfs_fruit.c	2019-07-09
++++ b/source3/modules/vfs_fruit.c	2019-07-09
+@@ -6995,12 +6995,12 @@ static bool fruit_tmsize_do_dirent(vfs_h
+ 		return true;
+ 	}
+ 
+-	if (bandsize > SIZE_MAX/nbands) {
+-		DBG_ERR("tmsize overflow: bandsize [%zu] nbands [%zu]\n",
+-			bandsize, nbands);
+-		return false;
+-	}
+-	tm_size = bandsize * nbands;
++	// if (bandsize > SIZE_MAX/nbands) {
++		// DBG_ERR("tmsize overflow: bandsize [%zu] nbands [%zu]\n",
++			// bandsize, nbands);
++		// return false;
++	// }
++	tm_size = (off_t)bandsize * (off_t)nbands;
+ 
+ 	if (state->total_size + tm_size < state->total_size) {
+ 		DBG_ERR("tmsize overflow: bandsize [%zu] nbands [%zu]\n",
diff --git a/package/lean/samba4/waf-cross-answers/aarch64.txt b/package/lean/samba4/waf-cross-answers/aarch64.txt
new file mode 100644
index 0000000000..9aae22c36a
--- /dev/null
+++ b/package/lean/samba4/waf-cross-answers/aarch64.txt
@@ -0,0 +1,34 @@
+Checking uname sysname type: "Linux"
+Checking simple C program: "hello world"
+rpath library support: OK
+-Wl,--version-script support: OK
+Checking getconf LFS_CFLAGS: NO
+Checking for large file support without additional flags: OK
+Checking correct behavior of strtoll: OK
+Checking for working strptime: NO
+Checking for C99 vsnprintf: "1"
+Checking for HAVE_SHARED_MMAP: OK
+Checking for HAVE_MREMAP: OK
+Checking for HAVE_INCOHERENT_MMAP: NO
+Checking for HAVE_SECURE_MKSTEMP: OK
+Checking for HAVE_IFACE_GETIFADDRS: OK
+Checking value of NSIG: "65"
+Checking value of _NSIG: "65"
+Checking value of SIGRTMAX: "64"
+Checking value of SIGRTMIN: "35"
+Checking for a 64-bit host to support lmdb: NO
+Checking whether the WRFILE -keytab is supported: OK
+Checking errno of iconv for illegal multibyte sequence: OK
+Checking for kernel change notify support: OK
+Checking for Linux kernel oplocks: OK
+Checking for kernel share modes: OK
+Checking if can we convert from CP850 to UCS-2LE: OK
+Checking if can we convert from UTF-8 to UCS-2LE: OK
+vfs_fileid checking for statfs() and struct statfs.f_fsid: OK
+Checking whether we can use Linux thread-specific credentials: "OK"
+Checking whether fcntl locking is available: OK
+Checking whether fcntl lock supports open file description locks: NO
+Checking for the maximum value of the 'time_t' type: OK
+Checking whether the realpath function allows a NULL argument: OK
+Checking for ftruncate extend: OK
+getcwd takes a NULL argument: OK
diff --git a/package/lean/samba4/waf-cross-answers/arc.txt b/package/lean/samba4/waf-cross-answers/arc.txt
new file mode 100644
index 0000000000..57f38119ff
--- /dev/null
+++ b/package/lean/samba4/waf-cross-answers/arc.txt
@@ -0,0 +1,37 @@
+Checking uname sysname type: "Linux"
+Checking simple C program: "hello world"
+rpath library support: OK
+-Wl,--version-script support: OK
+Checking getconf LFS_CFLAGS: NO
+Checking for large file support without additional flags: OK
+Checking correct behavior of strtoll: OK
+Checking for working strptime: NO
+Checking for C99 vsnprintf: "1"
+Checking for HAVE_SHARED_MMAP: OK
+Checking for HAVE_MREMAP: OK
+Checking for HAVE_INCOHERENT_MMAP: NO
+Checking for HAVE_SECURE_MKSTEMP: OK
+Checking for HAVE_IFACE_GETIFADDRS: OK
+Checking value of NSIG: "65"
+Checking value of _NSIG: "65"
+Checking value of SIGRTMAX: "64"
+Checking value of SIGRTMIN: "35"
+Checking for a 64-bit host to support lmdb: NO
+Checking whether the WRFILE -keytab is supported: OK
+Checking errno of iconv for illegal multibyte sequence: OK
+Checking for kernel change notify support: OK
+Checking for Linux kernel oplocks: OK
+Checking for kernel share modes: OK
+Checking if can we convert from CP850 to UCS-2LE: OK
+Checking if can we convert from UTF-8 to UCS-2LE: OK
+vfs_fileid checking for statfs() and struct statfs.f_fsid: OK
+Checking whether we can use Linux thread-specific credentials: "OK"
+Checking whether fcntl locking is available: OK
+Checking whether fcntl lock supports open file description locks: NO
+Checking for the maximum value of the 'time_t' type: NO
+Checking whether the realpath function allows a NULL argument: OK
+Checking for ftruncate extend: OK
+getcwd takes a NULL argument: OK
+Checking whether setreuid is available: NO
+Checking whether setresuid is available: NO
+Checking whether seteuid is available: NO
diff --git a/package/lean/samba4/waf-cross-answers/arm.txt b/package/lean/samba4/waf-cross-answers/arm.txt
new file mode 100644
index 0000000000..79ba994be2
--- /dev/null
+++ b/package/lean/samba4/waf-cross-answers/arm.txt
@@ -0,0 +1,34 @@
+Checking uname sysname type: "Linux"
+Checking simple C program: "hello world"
+rpath library support: OK
+-Wl,--version-script support: OK
+Checking getconf LFS_CFLAGS: NO
+Checking for large file support without additional flags: OK
+Checking correct behavior of strtoll: OK
+Checking for working strptime: NO
+Checking for C99 vsnprintf: "1"
+Checking for HAVE_SHARED_MMAP: OK
+Checking for HAVE_MREMAP: OK
+Checking for HAVE_INCOHERENT_MMAP: NO
+Checking for HAVE_SECURE_MKSTEMP: OK
+Checking for HAVE_IFACE_GETIFADDRS: OK
+Checking value of NSIG: "65"
+Checking value of _NSIG: "65"
+Checking value of SIGRTMAX: "64"
+Checking value of SIGRTMIN: "35"
+Checking for a 64-bit host to support lmdb: NO
+Checking whether the WRFILE -keytab is supported: OK
+Checking errno of iconv for illegal multibyte sequence: OK
+Checking for kernel change notify support: OK
+Checking for Linux kernel oplocks: OK
+Checking for kernel share modes: OK
+Checking if can we convert from CP850 to UCS-2LE: OK
+Checking if can we convert from UTF-8 to UCS-2LE: OK
+vfs_fileid checking for statfs() and struct statfs.f_fsid: OK
+Checking whether we can use Linux thread-specific credentials with 32-bit system calls: "OK"
+Checking whether fcntl locking is available: OK
+Checking whether fcntl lock supports open file description locks: NO
+Checking for the maximum value of the 'time_t' type: NO
+Checking whether the realpath function allows a NULL argument: OK
+Checking for ftruncate extend: OK
+getcwd takes a NULL argument: OK
diff --git a/package/lean/samba4/waf-cross-answers/armeb.txt b/package/lean/samba4/waf-cross-answers/armeb.txt
new file mode 100644
index 0000000000..79ba994be2
--- /dev/null
+++ b/package/lean/samba4/waf-cross-answers/armeb.txt
@@ -0,0 +1,34 @@
+Checking uname sysname type: "Linux"
+Checking simple C program: "hello world"
+rpath library support: OK
+-Wl,--version-script support: OK
+Checking getconf LFS_CFLAGS: NO
+Checking for large file support without additional flags: OK
+Checking correct behavior of strtoll: OK
+Checking for working strptime: NO
+Checking for C99 vsnprintf: "1"
+Checking for HAVE_SHARED_MMAP: OK
+Checking for HAVE_MREMAP: OK
+Checking for HAVE_INCOHERENT_MMAP: NO
+Checking for HAVE_SECURE_MKSTEMP: OK
+Checking for HAVE_IFACE_GETIFADDRS: OK
+Checking value of NSIG: "65"
+Checking value of _NSIG: "65"
+Checking value of SIGRTMAX: "64"
+Checking value of SIGRTMIN: "35"
+Checking for a 64-bit host to support lmdb: NO
+Checking whether the WRFILE -keytab is supported: OK
+Checking errno of iconv for illegal multibyte sequence: OK
+Checking for kernel change notify support: OK
+Checking for Linux kernel oplocks: OK
+Checking for kernel share modes: OK
+Checking if can we convert from CP850 to UCS-2LE: OK
+Checking if can we convert from UTF-8 to UCS-2LE: OK
+vfs_fileid checking for statfs() and struct statfs.f_fsid: OK
+Checking whether we can use Linux thread-specific credentials with 32-bit system calls: "OK"
+Checking whether fcntl locking is available: OK
+Checking whether fcntl lock supports open file description locks: NO
+Checking for the maximum value of the 'time_t' type: NO
+Checking whether the realpath function allows a NULL argument: OK
+Checking for ftruncate extend: OK
+getcwd takes a NULL argument: OK
diff --git a/package/lean/samba4/waf-cross-answers/i386.txt b/package/lean/samba4/waf-cross-answers/i386.txt
new file mode 100644
index 0000000000..79ba994be2
--- /dev/null
+++ b/package/lean/samba4/waf-cross-answers/i386.txt
@@ -0,0 +1,34 @@
+Checking uname sysname type: "Linux"
+Checking simple C program: "hello world"
+rpath library support: OK
+-Wl,--version-script support: OK
+Checking getconf LFS_CFLAGS: NO
+Checking for large file support without additional flags: OK
+Checking correct behavior of strtoll: OK
+Checking for working strptime: NO
+Checking for C99 vsnprintf: "1"
+Checking for HAVE_SHARED_MMAP: OK
+Checking for HAVE_MREMAP: OK
+Checking for HAVE_INCOHERENT_MMAP: NO
+Checking for HAVE_SECURE_MKSTEMP: OK
+Checking for HAVE_IFACE_GETIFADDRS: OK
+Checking value of NSIG: "65"
+Checking value of _NSIG: "65"
+Checking value of SIGRTMAX: "64"
+Checking value of SIGRTMIN: "35"
+Checking for a 64-bit host to support lmdb: NO
+Checking whether the WRFILE -keytab is supported: OK
+Checking errno of iconv for illegal multibyte sequence: OK
+Checking for kernel change notify support: OK
+Checking for Linux kernel oplocks: OK
+Checking for kernel share modes: OK
+Checking if can we convert from CP850 to UCS-2LE: OK
+Checking if can we convert from UTF-8 to UCS-2LE: OK
+vfs_fileid checking for statfs() and struct statfs.f_fsid: OK
+Checking whether we can use Linux thread-specific credentials with 32-bit system calls: "OK"
+Checking whether fcntl locking is available: OK
+Checking whether fcntl lock supports open file description locks: NO
+Checking for the maximum value of the 'time_t' type: NO
+Checking whether the realpath function allows a NULL argument: OK
+Checking for ftruncate extend: OK
+getcwd takes a NULL argument: OK
diff --git a/package/lean/samba4/waf-cross-answers/mips.txt b/package/lean/samba4/waf-cross-answers/mips.txt
new file mode 100644
index 0000000000..9c1a2c67ef
--- /dev/null
+++ b/package/lean/samba4/waf-cross-answers/mips.txt
@@ -0,0 +1,34 @@
+Checking uname sysname type: "Linux"
+Checking simple C program: "hello world"
+rpath library support: OK
+-Wl,--version-script support: OK
+Checking getconf LFS_CFLAGS: NO
+Checking for large file support without additional flags: OK
+Checking correct behavior of strtoll: OK
+Checking for working strptime: NO
+Checking for C99 vsnprintf: "1"
+Checking for HAVE_SHARED_MMAP: OK
+Checking for HAVE_MREMAP: OK
+Checking for HAVE_INCOHERENT_MMAP: NO
+Checking for HAVE_SECURE_MKSTEMP: OK
+Checking for HAVE_IFACE_GETIFADDRS: OK
+Checking value of NSIG: "128"
+Checking value of _NSIG: "128"
+Checking value of SIGRTMAX: "127"
+Checking value of SIGRTMIN: "35"
+Checking for a 64-bit host to support lmdb: NO
+Checking whether the WRFILE -keytab is supported: OK
+Checking errno of iconv for illegal multibyte sequence: OK
+Checking for kernel change notify support: OK
+Checking for Linux kernel oplocks: OK
+Checking for kernel share modes: OK
+Checking if can we convert from CP850 to UCS-2LE: OK
+Checking if can we convert from UTF-8 to UCS-2LE: OK
+vfs_fileid checking for statfs() and struct statfs.f_fsid: OK
+Checking whether we can use Linux thread-specific credentials: "OK"
+Checking whether fcntl locking is available: OK
+Checking whether fcntl lock supports open file description locks: NO
+Checking for the maximum value of the 'time_t' type: NO
+Checking whether the realpath function allows a NULL argument: OK
+Checking for ftruncate extend: OK
+getcwd takes a NULL argument: OK
diff --git a/package/lean/samba4/waf-cross-answers/mips64.txt b/package/lean/samba4/waf-cross-answers/mips64.txt
new file mode 100644
index 0000000000..a270f0860c
--- /dev/null
+++ b/package/lean/samba4/waf-cross-answers/mips64.txt
@@ -0,0 +1,34 @@
+Checking uname sysname type: "Linux"
+Checking simple C program: "hello world"
+rpath library support: OK
+-Wl,--version-script support: OK
+Checking getconf LFS_CFLAGS: NO
+Checking for large file support without additional flags: OK
+Checking correct behavior of strtoll: OK
+Checking for working strptime: NO
+Checking for C99 vsnprintf: "1"
+Checking for HAVE_SHARED_MMAP: OK
+Checking for HAVE_MREMAP: OK
+Checking for HAVE_INCOHERENT_MMAP: NO
+Checking for HAVE_SECURE_MKSTEMP: OK
+Checking for HAVE_IFACE_GETIFADDRS: OK
+Checking value of NSIG: "128"
+Checking value of _NSIG: "128"
+Checking value of SIGRTMAX: "127"
+Checking value of SIGRTMIN: "35"
+Checking for a 64-bit host to support lmdb: NO
+Checking whether the WRFILE -keytab is supported: OK
+Checking errno of iconv for illegal multibyte sequence: OK
+Checking for kernel change notify support: OK
+Checking for Linux kernel oplocks: OK
+Checking for kernel share modes: OK
+Checking if can we convert from CP850 to UCS-2LE: OK
+Checking if can we convert from UTF-8 to UCS-2LE: OK
+vfs_fileid checking for statfs() and struct statfs.f_fsid: OK
+Checking whether we can use Linux thread-specific credentials: "OK"
+Checking whether fcntl locking is available: OK
+Checking whether fcntl lock supports open file description locks: NO
+Checking for the maximum value of the 'time_t' type: OK
+Checking whether the realpath function allows a NULL argument: OK
+Checking for ftruncate extend: OK
+getcwd takes a NULL argument: OK
diff --git a/package/lean/samba4/waf-cross-answers/mips64el.txt b/package/lean/samba4/waf-cross-answers/mips64el.txt
new file mode 100644
index 0000000000..a270f0860c
--- /dev/null
+++ b/package/lean/samba4/waf-cross-answers/mips64el.txt
@@ -0,0 +1,34 @@
+Checking uname sysname type: "Linux"
+Checking simple C program: "hello world"
+rpath library support: OK
+-Wl,--version-script support: OK
+Checking getconf LFS_CFLAGS: NO
+Checking for large file support without additional flags: OK
+Checking correct behavior of strtoll: OK
+Checking for working strptime: NO
+Checking for C99 vsnprintf: "1"
+Checking for HAVE_SHARED_MMAP: OK
+Checking for HAVE_MREMAP: OK
+Checking for HAVE_INCOHERENT_MMAP: NO
+Checking for HAVE_SECURE_MKSTEMP: OK
+Checking for HAVE_IFACE_GETIFADDRS: OK
+Checking value of NSIG: "128"
+Checking value of _NSIG: "128"
+Checking value of SIGRTMAX: "127"
+Checking value of SIGRTMIN: "35"
+Checking for a 64-bit host to support lmdb: NO
+Checking whether the WRFILE -keytab is supported: OK
+Checking errno of iconv for illegal multibyte sequence: OK
+Checking for kernel change notify support: OK
+Checking for Linux kernel oplocks: OK
+Checking for kernel share modes: OK
+Checking if can we convert from CP850 to UCS-2LE: OK
+Checking if can we convert from UTF-8 to UCS-2LE: OK
+vfs_fileid checking for statfs() and struct statfs.f_fsid: OK
+Checking whether we can use Linux thread-specific credentials: "OK"
+Checking whether fcntl locking is available: OK
+Checking whether fcntl lock supports open file description locks: NO
+Checking for the maximum value of the 'time_t' type: OK
+Checking whether the realpath function allows a NULL argument: OK
+Checking for ftruncate extend: OK
+getcwd takes a NULL argument: OK
diff --git a/package/lean/samba4/waf-cross-answers/mipsel.txt b/package/lean/samba4/waf-cross-answers/mipsel.txt
new file mode 100644
index 0000000000..9c1a2c67ef
--- /dev/null
+++ b/package/lean/samba4/waf-cross-answers/mipsel.txt
@@ -0,0 +1,34 @@
+Checking uname sysname type: "Linux"
+Checking simple C program: "hello world"
+rpath library support: OK
+-Wl,--version-script support: OK
+Checking getconf LFS_CFLAGS: NO
+Checking for large file support without additional flags: OK
+Checking correct behavior of strtoll: OK
+Checking for working strptime: NO
+Checking for C99 vsnprintf: "1"
+Checking for HAVE_SHARED_MMAP: OK
+Checking for HAVE_MREMAP: OK
+Checking for HAVE_INCOHERENT_MMAP: NO
+Checking for HAVE_SECURE_MKSTEMP: OK
+Checking for HAVE_IFACE_GETIFADDRS: OK
+Checking value of NSIG: "128"
+Checking value of _NSIG: "128"
+Checking value of SIGRTMAX: "127"
+Checking value of SIGRTMIN: "35"
+Checking for a 64-bit host to support lmdb: NO
+Checking whether the WRFILE -keytab is supported: OK
+Checking errno of iconv for illegal multibyte sequence: OK
+Checking for kernel change notify support: OK
+Checking for Linux kernel oplocks: OK
+Checking for kernel share modes: OK
+Checking if can we convert from CP850 to UCS-2LE: OK
+Checking if can we convert from UTF-8 to UCS-2LE: OK
+vfs_fileid checking for statfs() and struct statfs.f_fsid: OK
+Checking whether we can use Linux thread-specific credentials: "OK"
+Checking whether fcntl locking is available: OK
+Checking whether fcntl lock supports open file description locks: NO
+Checking for the maximum value of the 'time_t' type: NO
+Checking whether the realpath function allows a NULL argument: OK
+Checking for ftruncate extend: OK
+getcwd takes a NULL argument: OK
diff --git a/package/lean/samba4/waf-cross-answers/powerpc.txt b/package/lean/samba4/waf-cross-answers/powerpc.txt
new file mode 100644
index 0000000000..4912acbde9
--- /dev/null
+++ b/package/lean/samba4/waf-cross-answers/powerpc.txt
@@ -0,0 +1,34 @@
+Checking uname sysname type: "Linux"
+Checking simple C program: "hello world"
+rpath library support: OK
+-Wl,--version-script support: OK
+Checking getconf LFS_CFLAGS: NO
+Checking for large file support without additional flags: OK
+Checking correct behavior of strtoll: OK
+Checking for working strptime: NO
+Checking for C99 vsnprintf: "1"
+Checking for HAVE_SHARED_MMAP: OK
+Checking for HAVE_MREMAP: OK
+Checking for HAVE_INCOHERENT_MMAP: NO
+Checking for HAVE_SECURE_MKSTEMP: OK
+Checking for HAVE_IFACE_GETIFADDRS: OK
+Checking value of NSIG: "65"
+Checking value of _NSIG: "65"
+Checking value of SIGRTMAX: "64"
+Checking value of SIGRTMIN: "35"
+Checking for a 64-bit host to support lmdb: NO
+Checking whether the WRFILE -keytab is supported: OK
+Checking errno of iconv for illegal multibyte sequence: OK
+Checking for kernel change notify support: OK
+Checking for Linux kernel oplocks: OK
+Checking for kernel share modes: OK
+Checking if can we convert from CP850 to UCS-2LE: OK
+Checking if can we convert from UTF-8 to UCS-2LE: OK
+vfs_fileid checking for statfs() and struct statfs.f_fsid: OK
+Checking whether we can use Linux thread-specific credentials: "OK"
+Checking whether fcntl locking is available: OK
+Checking whether fcntl lock supports open file description locks: NO
+Checking for the maximum value of the 'time_t' type: NO
+Checking whether the realpath function allows a NULL argument: OK
+Checking for ftruncate extend: OK
+getcwd takes a NULL argument: OK
diff --git a/package/lean/samba4/waf-cross-answers/x86_64.txt b/package/lean/samba4/waf-cross-answers/x86_64.txt
new file mode 100644
index 0000000000..9aae22c36a
--- /dev/null
+++ b/package/lean/samba4/waf-cross-answers/x86_64.txt
@@ -0,0 +1,34 @@
+Checking uname sysname type: "Linux"
+Checking simple C program: "hello world"
+rpath library support: OK
+-Wl,--version-script support: OK
+Checking getconf LFS_CFLAGS: NO
+Checking for large file support without additional flags: OK
+Checking correct behavior of strtoll: OK
+Checking for working strptime: NO
+Checking for C99 vsnprintf: "1"
+Checking for HAVE_SHARED_MMAP: OK
+Checking for HAVE_MREMAP: OK
+Checking for HAVE_INCOHERENT_MMAP: NO
+Checking for HAVE_SECURE_MKSTEMP: OK
+Checking for HAVE_IFACE_GETIFADDRS: OK
+Checking value of NSIG: "65"
+Checking value of _NSIG: "65"
+Checking value of SIGRTMAX: "64"
+Checking value of SIGRTMIN: "35"
+Checking for a 64-bit host to support lmdb: NO
+Checking whether the WRFILE -keytab is supported: OK
+Checking errno of iconv for illegal multibyte sequence: OK
+Checking for kernel change notify support: OK
+Checking for Linux kernel oplocks: OK
+Checking for kernel share modes: OK
+Checking if can we convert from CP850 to UCS-2LE: OK
+Checking if can we convert from UTF-8 to UCS-2LE: OK
+vfs_fileid checking for statfs() and struct statfs.f_fsid: OK
+Checking whether we can use Linux thread-specific credentials: "OK"
+Checking whether fcntl locking is available: OK
+Checking whether fcntl lock supports open file description locks: NO
+Checking for the maximum value of the 'time_t' type: OK
+Checking whether the realpath function allows a NULL argument: OK
+Checking for ftruncate extend: OK
+getcwd takes a NULL argument: OK
diff --git a/package/lean/shortcut-fe/Makefile b/package/lean/shortcut-fe/Makefile
new file mode 100644
index 0000000000..9f49cb90c5
--- /dev/null
+++ b/package/lean/shortcut-fe/Makefile
@@ -0,0 +1,121 @@
+#
+# Copyright (c) 2014 The Linux Foundation. All rights reserved.
+# Permission to use, copy, modify, and/or distribute this software for
+# any purpose with or without fee is hereby granted, provided that the
+# above copyright notice and this permission notice appear in all copies.
+# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT
+# OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+#
+include $(TOPDIR)/rules.mk
+include $(INCLUDE_DIR)/kernel.mk
+
+PKG_NAME:=shortcut-fe
+PKG_RELEASE:=9
+
+include $(INCLUDE_DIR)/package.mk
+
+define KernelPackage/shortcut-fe
+  SECTION:=kernel
+  CATEGORY:=Kernel modules
+  SUBMENU:=Network Support
+  DEPENDS:=@IPV6 @LINUX_4_9
+  TITLE:=Kernel driver for SFE
+  FILES:=$(PKG_BUILD_DIR)/shortcut-fe.ko $(PKG_BUILD_DIR)/shortcut-fe-ipv6.ko
+  KCONFIG:=CONFIG_NF_CONNTRACK_EVENTS=y CONFIG_SHORTCUT_FE=y
+  AUTOLOAD:=$(call AutoProbe,shortcut-fe shortcut-fe-ipv6)
+endef
+
+define KernelPackage/shortcut-fe/Description
+Shortcut is an in-Linux-kernel IP packet forwarding engine.
+endef
+
+define KernelPackage/shortcut-fe-cm
+  SECTION:=kernel
+  CATEGORY:=Kernel modules
+  SUBMENU:=Network Support
+  DEPENDS:=+kmod-ipt-conntrack +kmod-shortcut-fe
+  TITLE:=Kernel driver for SFE
+  FILES:=$(PKG_BUILD_DIR)/shortcut-fe-cm.ko
+  KCONFIG:=CONFIG_NF_CONNTRACK_CHAIN_EVENTS=y CONFIG_NF_CONNTRACK_MARK=y
+  AUTOLOAD:=$(call AutoProbe,shortcut-fe-cm)
+endef
+
+define KernelPackage/shortcut-fe-cm/Description
+Simple connection manager for the Shortcut forwarding engine.
+endef
+
+define KernelPackage/fast-classifier
+  SECTION:=kernel
+  CATEGORY:=Kernel modules
+  SUBMENU:=Network Support
+  DEPENDS:=+kmod-ipt-conntrack +kmod-shortcut-fe
+  TITLE:=Kernel driver for FAST Classifier
+  FILES:=$(PKG_BUILD_DIR)/fast-classifier.ko
+  KCONFIG:=CONFIG_NF_CONNTRACK_CHAIN_EVENTS=y CONFIG_NF_CONNTRACK_MARK=y
+  AUTOLOAD:=$(call AutoLoad,z,fast-classifier)
+  PROVIDES:=$(PKG_NAME)
+endef
+
+define KernelPackage/fast-classifier/description
+FAST Classifier connection manager for Shortcut forwarding engine. 
+It talks to SFE to make decisions about offloading connections.
+endef
+
+define Package/fast-classifier-example
+  TITLE:=Example user space program for fast-classifier
+  DEPENDS:=+libnl +kmod-fast-classifier
+endef
+
+define Package/fast-classifier-example/description
+Example user space program that communicates with fast
+classifier kernel module
+endef
+
+MAKE_OPTS:= \
+		ARCH="$(LINUX_KARCH)" \
+		CROSS_COMPILE="$(TARGET_CROSS)" \
+		SUBDIRS="$(PKG_BUILD_DIR)" \
+		EXTRA_CFLAGS="$(EXTRA_CFLAGS)"
+
+define Build/Compile
+	$(MAKE) -C "$(LINUX_DIR)" \
+		$(MAKE_OPTS) \
+		modules
+	$(if $(CONFIG_PACKAGE_fast-classifier-example),$(Build/Compile/fast-classifier-example))
+endef
+
+define Build/Compile/fast-classifier-example
+	$(TARGET_CC) -o $(PKG_BUILD_DIR)/userspace_fast_classifier \
+		-I $(PKG_BUILD_DIR) \
+		-I$(STAGING_DIR)/usr/include/libnl \
+		-I$(STAGING_DIR)/usr/include/libnl3 \
+		-lnl-genl-3 -lnl-3 \
+		$(PKG_BUILD_DIR)/nl_classifier_test.c
+endef
+
+ifneq ($(CONFIG_PACKAGE_kmod-shortcut-fe)$(CONFIG_PACKAGE_kmod-shortcut-fe-cm)$(CONFIG_PACKAGE_kmod-fast-classifier),)
+define Build/InstallDev
+	$(INSTALL_DIR) $(1)/usr/include/shortcut-fe
+	$(CP) -rf $(PKG_BUILD_DIR)/sfe.h $(1)/usr/include/shortcut-fe
+ifneq ($(CONFIG_PACKAGE_kmod-fast-classifier),)
+	$(INSTALL_DIR) $(1)/usr/include
+	$(CP) $(PKG_BUILD_DIR)/fast-classifier.h $(1)/usr/include/
+endif
+endef
+endif
+
+define Package/fast-classifier-example/install
+	$(INSTALL_DIR) $(1)/sbin
+	$(CP) $(PKG_BUILD_DIR)/userspace_fast_classifier $(1)/sbin/
+endef
+
+$(eval $(call KernelPackage,shortcut-fe))
+$(eval $(call KernelPackage,shortcut-fe-cm))
+$(eval $(call KernelPackage,fast-classifier))
+#$(eval $(call BuildPackage,fast-classifier-example))
+
diff --git a/package/lean/shortcut-fe/src/Kconfig b/package/lean/shortcut-fe/src/Kconfig
new file mode 100644
index 0000000000..487f1e065e
--- /dev/null
+++ b/package/lean/shortcut-fe/src/Kconfig
@@ -0,0 +1,14 @@
+#
+# Shortcut forwarding engine
+#
+
+config SHORTCUT_FE
+	tristate "Shortcut Forwarding Engine"
+	depends on NF_CONNTRACK
+	---help---
+	  Shortcut is a fast in-kernel packet forwarding engine.
+
+	  To compile this code as a module, choose M here: the module will be
+	  called shortcut-fe.
+
+	  If unsure, say N.
diff --git a/package/lean/shortcut-fe/src/Makefile b/package/lean/shortcut-fe/src/Makefile
new file mode 100644
index 0000000000..88d95d232e
--- /dev/null
+++ b/package/lean/shortcut-fe/src/Makefile
@@ -0,0 +1,14 @@
+#
+# Makefile for Shortcut FE.
+#
+
+obj-m += shortcut-fe.o shortcut-fe-ipv6.o shortcut-fe-cm.o fast-classifier.o
+
+shortcut-fe-objs := \
+	sfe_ipv4.o
+
+shortcut-fe-ipv6-objs := \
+	sfe_ipv6.o
+
+shortcut-fe-cm-objs := \
+	sfe_cm.o
diff --git a/package/lean/shortcut-fe/src/README b/package/lean/shortcut-fe/src/README
new file mode 100644
index 0000000000..1bf1cc2555
--- /dev/null
+++ b/package/lean/shortcut-fe/src/README
@@ -0,0 +1,122 @@
+Shortcut Forwarding Engine
+--------------------------
+
+Welcome to "Shortcut" :-)
+
+Here's a quick FAQ:
+
+
+Q) What is Shortcut?
+
+A) Shortcut is an in-Linux-kernel IP packet forwarding engine.  It's designed
+to offer very high speed IP packet forwarding based on IP connection tracking.
+It's dramatically faster than the standard netfilter-based NAT forwarding path
+but is designed to synchronise state back to netfilter/conntrack so that it
+doesn't need to deal with all of the complexities of special cases.
+
+
+Q) What versions of IP does it support?
+
+A) The current version only supports IPv4 but will be extended to support IPv6 in
+the future.
+
+
+Q) What transport protocols does it support?
+
+A) TCP and UDP.  It also knows enough about ICMP to spot ICMP error messages
+related to TCP and UDP and handle things accordingly.
+
+
+Q) Is there a design spec for this software?
+
+A) Not at the moment.  I'll write one when I get more time.  The code is
+intended to be a good tutorial though - it's very heavily commented.  If you
+find yourself reading something and not understanding it then I take that to
+mean I've probably not done a sufficently good job of explaining what it's
+doing in the comments.  Let me know - I will try to fix it :-)
+
+
+Q) Why was it written?
+
+A) It was written as a demonstration of what can be done to provide high
+performance forwarding inside the kernel.  There were two initial motivations:
+
+1) To provide a platform to enable research into how QoS analysis systems can
+offload work and avoid huge Linux overheads.
+
+2) To provide a tool to investigate the behaviour of various processors, SoCs
+and software sets so that we can characterize and design new network processor
+SoCs.
+
+
+Q) How much faster is it than the Linux kernel forwarding path?
+
+A) At the time of pushing this to github it's been tested on a QCA AP135.
+This has a Scorpion (QCA Scopion, not the QMC one :-)) SoC, QCA9550.  The
+SoC's processor is a MIPS74K running at 720 MHz and with a DDR2 memory
+subsystem that offers a peak of 600 MT/s (16-bit transfers).
+
+Running IPv4 NAT forwarding of UDP between the board's 2 GMAC ports and
+using a SmartBits 200 as a traffic generator Linux is able to forward 70k PPS.
+Once the SFE code is invoked this will increase to 350k PPS!
+
+There's also a slightly hacky mode which causes SFE to bypass the Linux
+bridge layer, but this isn't really ready for use because it doesn't have
+sufficient MAC address checks or integration of statistics back to the
+Ethernet bridge, but that runs at 436k PPS.
+
+
+Q) Are there any diagnostics?
+
+A) Yes, this is a research tool after all!  There's a complex way to do this
+that's more general purpose and a simple one - here's the simple one:
+
+	mknod /dev/sfe c 253 0
+
+The file /dev/sfe is an XML-ish output and provides details of all the
+network connections currently being offloaded.  It also reports the numbers
+of packets that took various "exception" paths within the code.  In addition
+it provides a summary of the number of connections, attempts to accelerate
+connections, cancel accelerations, etc.  It also reports the numbers of
+packets that were forwarded and not forwarded by the engine and has some
+stats on the effectiveness of the hashing algorithm it uses.
+
+
+Q) How does the code interact with Linux?
+
+A) There are four minor patches required to make this software run with
+Linux.  These are currently against a 3.3.8 or 3.4.0 kernel:
+
+* (net/core/dev.c) adds a hook to allow packets to be extracted out.
+
+* (net/netfilter/nf_conntrack_proto_tcp.c) exposes a state variable inside
+  netfilter that's necessary to enable TCP sequence and ACK checking within
+  the offload path.  Note that this specific patch is against the QCA QSDK
+  patched version of 3.3.8 - there's a slightly braindead "performance"
+  patch in that kernel, courtesy of the OpenWrt community that makes the
+  Linux forwarding path slightly faster at the expense of losing
+  functionality :-(
+
+* (net/Kconfig) adds the shortcut-fe option.
+
+* (net/Makefile) adds the shortcut-fe build support.
+
+Once these are applied and the module is loaded then everything else
+is automatic :-)  The patches are in this git repo.
+
+
+Q) Are any of the pieces reused from other projects?
+
+A) Yes!  Some of the forwarding concepts are reused from the Ubicom Network
+Accelerator that morphed into part of the Akronite NSS.  This code has all
+been substantially changed though to accomodate Linux's needs.
+
+There are also some pieces that I borrowed from the QCA "FastNAT" software
+written by Xiaoping Fan <xfan@qca.qualcomm.com>.  Xiaoping's code was the
+first actual demonstration within QCA that this in-kernel concept could yield
+signficant performance gains.
+
+
+Enjoy!
+Dave Hudson <dhudson@qti.qualcomm.com>
+
diff --git a/package/lean/shortcut-fe/src/fast-classifier.c b/package/lean/shortcut-fe/src/fast-classifier.c
new file mode 100644
index 0000000000..48a2d27f4d
--- /dev/null
+++ b/package/lean/shortcut-fe/src/fast-classifier.c
@@ -0,0 +1,1892 @@
+/*
+ * fast-classifier.c
+ *	Shortcut forwarding engine connection manager.
+ *	fast-classifier
+ *
+ * Copyright (c) 2013-2016 The Linux Foundation. All rights reserved.
+ * Permission to use, copy, modify, and/or distribute this software for
+ * any purpose with or without fee is hereby granted, provided that the
+ * above copyright notice and this permission notice appear in all copies.
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT
+ * OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+#include <linux/module.h>
+#include <linux/sysfs.h>
+#include <linux/skbuff.h>
+#include <net/route.h>
+#include <net/ip6_route.h>
+#include <net/addrconf.h>
+#include <net/dsfield.h>
+#include <linux/inetdevice.h>
+#include <linux/netfilter_bridge.h>
+#include <linux/netfilter_ipv6.h>
+#include <net/netfilter/nf_conntrack_acct.h>
+#include <net/netfilter/nf_conntrack_helper.h>
+#include <net/netfilter/nf_conntrack_zones.h>
+#include <net/netfilter/nf_conntrack_core.h>
+#include <net/netfilter/nf_conntrack_timeout.h>
+#include <linux/netfilter/xt_dscp.h>
+#include <net/genetlink.h>
+#include <linux/spinlock.h>
+#include <linux/if_bridge.h>
+#include <linux/hashtable.h>
+#include <net/pkt_sched.h>
+
+#include "sfe_backport.h"
+#include "sfe.h"
+#include "sfe_cm.h"
+#include "fast-classifier.h"
+
+typedef enum fast_classifier_exception {
+	FAST_CL_EXCEPTION_PACKET_BROADCAST,
+	FAST_CL_EXCEPTION_PACKET_MULTICAST,
+	FAST_CL_EXCEPTION_NO_IIF,
+	FAST_CL_EXCEPTION_NO_CT,
+	FAST_CL_EXCEPTION_CT_NO_TRACK,
+	FAST_CL_EXCEPTION_CT_NO_CONFIRM,
+	FAST_CL_EXCEPTION_CT_IS_ALG,
+	FAST_CL_EXCEPTION_IS_IPV4_MCAST,
+	FAST_CL_EXCEPTION_IS_IPV6_MCAST,
+	FAST_CL_EXCEPTION_TCP_NOT_ASSURED,
+	FAST_CL_EXCEPTION_TCP_NOT_ESTABLISHED,
+	FAST_CL_EXCEPTION_UNKNOW_PROTOCOL,
+	FAST_CL_EXCEPTION_NO_SRC_DEV,
+	FAST_CL_EXCEPTION_NO_SRC_XLATE_DEV,
+	FAST_CL_EXCEPTION_NO_DEST_DEV,
+	FAST_CL_EXCEPTION_NO_DEST_XLATE_DEV,
+	FAST_CL_EXCEPTION_NO_BRIDGE,
+	FAST_CL_EXCEPTION_LOCAL_OUT,
+	FAST_CL_EXCEPTION_WAIT_FOR_ACCELERATION,
+	FAST_CL_EXCEPTION_UPDATE_PROTOCOL_FAIL,
+	FAST_CL_EXCEPTION_CT_DESTROY_MISS,
+	FAST_CL_EXCEPTION_MAX
+} fast_classifier_exception_t;
+
+static char *fast_classifier_exception_events_string[FAST_CL_EXCEPTION_MAX] = {
+	"PACKET_BROADCAST",
+	"PACKET_MULTICAST",
+	"NO_IIF",
+	"NO_CT",
+	"CT_NO_TRACK",
+	"CT_NO_CONFIRM",
+	"CT_IS_ALG",
+	"IS_IPV4_MCAST",
+	"IS_IPV6_MCAST",
+	"TCP_NOT_ASSURED",
+	"TCP_NOT_ESTABLISHED",
+	"UNKNOW_PROTOCOL",
+	"NO_SRC_DEV",
+	"NO_SRC_XLATE_DEV",
+	"NO_DEST_DEV",
+	"NO_DEST_XLATE_DEV",
+	"NO_BRIDGE",
+	"LOCAL_OUT",
+	"WAIT_FOR_ACCELERATION",
+	"UPDATE_PROTOCOL_FAIL",
+	"CT_DESTROY_MISS",
+};
+
+/*
+ * Per-module structure.
+ */
+struct fast_classifier {
+	spinlock_t lock;		/* Lock for SMP correctness */
+
+	/*
+	 * Control state.
+	 */
+	struct kobject *sys_fast_classifier;	/* sysfs linkage */
+
+	/*
+	 * Callback notifiers.
+	 */
+	struct notifier_block dev_notifier;	/* Device notifier */
+	struct notifier_block inet_notifier;	/* IPv4 notifier */
+	struct notifier_block inet6_notifier;	/* IPv6 notifier */
+	u32 exceptions[FAST_CL_EXCEPTION_MAX];
+};
+
+static struct fast_classifier __fsc;
+
+static struct nla_policy fast_classifier_genl_policy[FAST_CLASSIFIER_A_MAX + 1] = {
+	[FAST_CLASSIFIER_A_TUPLE] = {
+		.type = NLA_UNSPEC,
+		.len = sizeof(struct fast_classifier_tuple)
+	},
+};
+
+static struct genl_multicast_group fast_classifier_genl_mcgrp[] = {
+	{
+		.name = FAST_CLASSIFIER_GENL_MCGRP,
+	},
+};
+
+static struct genl_family fast_classifier_gnl_family = {
+	.id = GENL_ID_GENERATE,
+	.hdrsize = FAST_CLASSIFIER_GENL_HDRSIZE,
+	.name = FAST_CLASSIFIER_GENL_NAME,
+	.version = FAST_CLASSIFIER_GENL_VERSION,
+	.maxattr = FAST_CLASSIFIER_A_MAX,
+};
+
+static int fast_classifier_offload_genl_msg(struct sk_buff *skb, struct genl_info *info);
+static int fast_classifier_nl_genl_msg_DUMP(struct sk_buff *skb, struct netlink_callback *cb);
+
+static struct genl_ops fast_classifier_gnl_ops[] = {
+	{
+		.cmd = FAST_CLASSIFIER_C_OFFLOAD,
+		.flags = 0,
+		.policy = fast_classifier_genl_policy,
+		.doit = fast_classifier_offload_genl_msg,
+		.dumpit = NULL,
+	},
+	{
+		.cmd = FAST_CLASSIFIER_C_OFFLOADED,
+		.flags = 0,
+		.policy = fast_classifier_genl_policy,
+		.doit = NULL,
+		.dumpit = fast_classifier_nl_genl_msg_DUMP,
+	},
+	{
+		.cmd = FAST_CLASSIFIER_C_DONE,
+		.flags = 0,
+		.policy = fast_classifier_genl_policy,
+		.doit = NULL,
+		.dumpit = fast_classifier_nl_genl_msg_DUMP,
+	},
+};
+
+static atomic_t offload_msgs = ATOMIC_INIT(0);
+static atomic_t offload_no_match_msgs = ATOMIC_INIT(0);
+static atomic_t offloaded_msgs = ATOMIC_INIT(0);
+static atomic_t done_msgs = ATOMIC_INIT(0);
+
+static atomic_t offloaded_fail_msgs = ATOMIC_INIT(0);
+static atomic_t done_fail_msgs = ATOMIC_INIT(0);
+
+/*
+ * Accelerate incoming packets destined for bridge device
+ * 	If a incoming packet is ultimatly destined for
+ * 	a bridge device we will first see the packet coming
+ * 	from the phyiscal device, we can skip straight to
+ * 	processing the packet like it came from the bridge
+ * 	for some more performance gains
+ *
+ * 	This only works when the hook is above the bridge. We
+ * 	only implement ingress for now, because for egress we
+ * 	want to have the bridge devices qdiscs be used.
+ */
+static bool skip_to_bridge_ingress;
+
+/*
+ * fast_classifier_incr_exceptions()
+ *	increase an exception counter.
+ */
+static inline void fast_classifier_incr_exceptions(fast_classifier_exception_t except)
+{
+	struct fast_classifier *sc = &__fsc;
+
+	spin_lock_bh(&sc->lock);
+	sc->exceptions[except]++;
+	spin_unlock_bh(&sc->lock);
+}
+
+/*
+ * fast_classifier_recv()
+ *	Handle packet receives.
+ *
+ * Returns 1 if the packet is forwarded or 0 if it isn't.
+ */
+static int fast_classifier_recv(struct sk_buff *skb)
+{
+	struct net_device *dev;
+	struct net_device *master_dev = NULL;
+	int ret = 0;
+
+	/*
+	 * We know that for the vast majority of packets we need the transport
+	 * layer header so we may as well start to fetch it now!
+	 */
+	prefetch(skb->data + 32);
+	barrier();
+
+	dev = skb->dev;
+
+	/*
+	 * Process packet like it arrived on the bridge device
+	 */
+	if (skip_to_bridge_ingress &&
+	    (dev->priv_flags & IFF_BRIDGE_PORT)) {
+		master_dev = sfe_dev_get_master(dev);
+		if (!master_dev) {
+			DEBUG_WARN("master dev is NULL %s\n");
+			goto rx_exit;
+		}
+		dev = master_dev;
+	}
+
+#ifdef CONFIG_NET_CLS_ACT
+	/*
+	 * If ingress Qdisc configured, and packet not processed by ingress Qdisc yet
+	 * We cannot accelerate this packet.
+	 */
+	if (dev->ingress_queue && !(skb->tc_verd & TC_NCLS)) {
+		goto rx_exit;
+	}
+#endif
+
+	/*
+	 * We're only interested in IPv4 and IPv6 packets.
+	 */
+	if (likely(htons(ETH_P_IP) == skb->protocol)) {
+		struct in_device *in_dev;
+
+		/*
+		 * Does our input device support IP processing?
+		 */
+		in_dev = (struct in_device *)dev->ip_ptr;
+		if (unlikely(!in_dev)) {
+			DEBUG_TRACE("no IP processing for device: %s\n", dev->name);
+			goto rx_exit;
+		}
+
+		/*
+		 * Does it have an IP address?  If it doesn't then we can't do anything
+		 * interesting here!
+		 */
+		if (unlikely(!in_dev->ifa_list)) {
+			DEBUG_TRACE("no IP address for device: %s\n", dev->name);
+			goto rx_exit;
+		}
+
+		ret = sfe_ipv4_recv(dev, skb);
+
+	} else if (likely(htons(ETH_P_IPV6) == skb->protocol)) {
+		struct inet6_dev *in_dev;
+
+		/*
+		 * Does our input device support IPv6 processing?
+		 */
+		in_dev = (struct inet6_dev *)dev->ip6_ptr;
+		if (unlikely(!in_dev)) {
+			DEBUG_TRACE("no IPv6 processing for device: %s\n", dev->name);
+			goto rx_exit;
+		}
+
+		/*
+		 * Does it have an IPv6 address?  If it doesn't then we can't do anything
+		 * interesting here!
+		 */
+		if (unlikely(list_empty(&in_dev->addr_list))) {
+			DEBUG_TRACE("no IPv6 address for device: %s\n", dev->name);
+			goto rx_exit;
+		}
+
+		ret = sfe_ipv6_recv(dev, skb);
+
+	} else {
+		DEBUG_TRACE("not IP packet\n");
+	}
+
+rx_exit:
+	if (master_dev) {
+		dev_put(master_dev);
+	}
+
+	return ret;
+}
+
+/*
+ * fast_classifier_find_dev_and_mac_addr()
+ *	Find the device and MAC address for a given IPv4 address.
+ *
+ * Returns true if we find the device and MAC address, otherwise false.
+ *
+ * We look up the rtable entry for the address and, from its neighbour
+ * structure, obtain the hardware address.  This means this function also
+ * works if the neighbours are routers too.
+ */
+static bool fast_classifier_find_dev_and_mac_addr(sfe_ip_addr_t *addr, struct net_device **dev, u8 *mac_addr, bool is_v4)
+{
+	struct neighbour *neigh;
+	struct rtable *rt;
+	struct rt6_info *rt6;
+	struct dst_entry *dst;
+	struct net_device *mac_dev;
+
+	/*
+	 * Look up the rtable entry for the IP address then get the hardware
+	 * address from its neighbour structure.  This means this works when the
+	 * neighbours are routers too.
+	 */
+	if (is_v4) {
+		rt = ip_route_output(&init_net, addr->ip, 0, 0, 0);
+		if (unlikely(IS_ERR(rt))) {
+			goto ret_fail;
+		}
+
+		dst = (struct dst_entry *)rt;
+	} else {
+		rt6 = rt6_lookup(&init_net, (struct in6_addr *)addr->ip6, 0, 0, 0);
+		if (!rt6) {
+			goto ret_fail;
+		}
+
+		dst = (struct dst_entry *)rt6;
+	}
+
+	rcu_read_lock();
+	neigh = dst_neigh_lookup(dst, addr);
+	if (unlikely(!neigh)) {
+		rcu_read_unlock();
+		dst_release(dst);
+		goto ret_fail;
+	}
+
+	if (unlikely(!(neigh->nud_state & NUD_VALID))) {
+		rcu_read_unlock();
+		neigh_release(neigh);
+		dst_release(dst);
+		goto ret_fail;
+	}
+
+	mac_dev = neigh->dev;
+	if (!mac_dev) {
+		rcu_read_unlock();
+		neigh_release(neigh);
+		dst_release(dst);
+		goto ret_fail;
+	}
+
+	memcpy(mac_addr, neigh->ha, (size_t)mac_dev->addr_len);
+
+	dev_hold(mac_dev);
+	*dev = mac_dev;
+	rcu_read_unlock();
+	neigh_release(neigh);
+	dst_release(dst);
+
+	return true;
+
+ret_fail:
+	DEBUG_TRACE("failed to find MAC address for IP: %pIS\n", addr);
+
+	return false;
+}
+
+static DEFINE_SPINLOCK(sfe_connections_lock);
+
+struct sfe_connection {
+	struct hlist_node hl;
+	struct sfe_connection_create *sic;
+	struct nf_conn *ct;
+	int hits;
+	int offload_permit;
+	int offloaded;
+	bool is_v4;
+	unsigned char smac[ETH_ALEN];
+	unsigned char dmac[ETH_ALEN];
+};
+
+static int sfe_connections_size;
+
+#define FC_CONN_HASH_ORDER 13
+static DEFINE_HASHTABLE(fc_conn_ht, FC_CONN_HASH_ORDER);
+
+static u32 fc_conn_hash(sfe_ip_addr_t *saddr, sfe_ip_addr_t *daddr,
+			unsigned short sport, unsigned short dport, bool is_v4)
+{
+	u32 idx, cnt = ((is_v4 ? sizeof(saddr->ip) : sizeof(saddr->ip6))/sizeof(u32));
+	u32 hash = 0;
+
+	for (idx = 0; idx < cnt; idx++) {
+		hash ^= ((u32 *)saddr)[idx] ^ ((u32 *)daddr)[idx];
+	}
+
+	return hash ^ (sport | (dport << 16));
+}
+
+/*
+ * fast_classifier_update_protocol()
+ * 	Update sfe_ipv4_create struct with new protocol information before we offload
+ */
+static int fast_classifier_update_protocol(struct sfe_connection_create *p_sic, struct nf_conn *ct)
+{
+	switch (p_sic->protocol) {
+	case IPPROTO_TCP:
+		p_sic->src_td_window_scale = ct->proto.tcp.seen[0].td_scale;
+		p_sic->src_td_max_window = ct->proto.tcp.seen[0].td_maxwin;
+		p_sic->src_td_end = ct->proto.tcp.seen[0].td_end;
+		p_sic->src_td_max_end = ct->proto.tcp.seen[0].td_maxend;
+		p_sic->dest_td_window_scale = ct->proto.tcp.seen[1].td_scale;
+		p_sic->dest_td_max_window = ct->proto.tcp.seen[1].td_maxwin;
+		p_sic->dest_td_end = ct->proto.tcp.seen[1].td_end;
+		p_sic->dest_td_max_end = ct->proto.tcp.seen[1].td_maxend;
+
+		if (nf_ct_tcp_no_window_check
+		    || (ct->proto.tcp.seen[0].flags & IP_CT_TCP_FLAG_BE_LIBERAL)
+		    || (ct->proto.tcp.seen[1].flags & IP_CT_TCP_FLAG_BE_LIBERAL)) {
+			p_sic->flags |= SFE_CREATE_FLAG_NO_SEQ_CHECK;
+		}
+
+		/*
+		 * If the connection is shutting down do not manage it.
+		 * state can not be SYN_SENT, SYN_RECV because connection is assured
+		 * Not managed states: FIN_WAIT, CLOSE_WAIT, LAST_ACK, TIME_WAIT, CLOSE.
+		 */
+		spin_lock_bh(&ct->lock);
+		if (ct->proto.tcp.state != TCP_CONNTRACK_ESTABLISHED) {
+			spin_unlock_bh(&ct->lock);
+			fast_classifier_incr_exceptions(FAST_CL_EXCEPTION_TCP_NOT_ESTABLISHED);
+			DEBUG_TRACE("connection in termination state: %#x, s: %pI4:%u, d: %pI4:%u\n",
+				    ct->proto.tcp.state, &p_sic->src_ip, ntohs(p_sic->src_port),
+				    &p_sic->dest_ip, ntohs(p_sic->dest_port));
+			return 0;
+		}
+		spin_unlock_bh(&ct->lock);
+		break;
+
+	case IPPROTO_UDP:
+		break;
+
+	default:
+		fast_classifier_incr_exceptions(FAST_CL_EXCEPTION_UNKNOW_PROTOCOL);
+		DEBUG_TRACE("unhandled protocol %d\n", p_sic->protocol);
+		return 0;
+	}
+
+	return 1;
+}
+
+/* fast_classifier_send_genl_msg()
+ * 	Function to send a generic netlink message
+ */
+static void fast_classifier_send_genl_msg(int msg, struct fast_classifier_tuple *fc_msg)
+{
+	struct sk_buff *skb;
+	int rc;
+	int buf_len;
+	int total_len;
+	void *msg_head;
+
+	/*
+	 * Calculate our packet payload size.
+	 * Start with our family header.
+	 */
+	buf_len = fast_classifier_gnl_family.hdrsize;
+
+	/*
+	 * Add the nla_total_size of each attribute we're going to nla_put().
+	 */
+	buf_len += nla_total_size(sizeof(*fc_msg));
+
+	/*
+	 * Lastly we need to add space for the NL message header since
+	 * genlmsg_new only accounts for the GENL header and not the
+	 * outer NL header. To do this, we use a NL helper function which
+	 * calculates the total size of a netlink message given a payload size.
+	 * Note this value does not include the GENL header, but that's
+	 * added automatically by genlmsg_new.
+	 */
+	total_len = nlmsg_total_size(buf_len);
+	skb = genlmsg_new(total_len, GFP_ATOMIC);
+	if (!skb)
+		return;
+
+	msg_head = genlmsg_put(skb, 0, 0, &fast_classifier_gnl_family, 0, msg);
+	if (!msg_head) {
+		nlmsg_free(skb);
+		return;
+	}
+
+	rc = nla_put(skb, FAST_CLASSIFIER_A_TUPLE, sizeof(struct fast_classifier_tuple), fc_msg);
+	if (rc != 0) {
+		genlmsg_cancel(skb, msg_head);
+		nlmsg_free(skb);
+		return;
+	}
+
+	genlmsg_end(skb, msg_head);
+	if (rc < 0) {
+		genlmsg_cancel(skb, msg_head);
+		nlmsg_free(skb);
+		return;
+	}
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 13, 0))
+	rc = genlmsg_multicast(&fast_classifier_gnl_family, skb, 0, 0, GFP_ATOMIC);
+#else
+	rc = genlmsg_multicast(skb, 0, fast_classifier_genl_mcgrp[0].id, GFP_ATOMIC);
+#endif
+	switch (msg) {
+	case FAST_CLASSIFIER_C_OFFLOADED:
+		atomic_inc(&offloaded_msgs);
+		if (rc != 0)
+			atomic_inc(&offloaded_fail_msgs);
+		break;
+	case FAST_CLASSIFIER_C_DONE:
+		atomic_inc(&done_msgs);
+		if (rc != 0)
+			atomic_inc(&done_fail_msgs);
+		break;
+	default:
+		DEBUG_ERROR("fast-classifer: Unknown message type sent!\n");
+		break;
+	}
+
+	DEBUG_TRACE("Notify NL message %d ", msg);
+	DEBUG_TRACE("sip=%pIS dip=%pIS ", &fc_msg->src_saddr, &fc_msg->dst_saddr);
+	DEBUG_TRACE("protocol=%d sport=%d dport=%d smac=%pM dmac=%pM\n",
+		    fc_msg->proto, fc_msg->sport, fc_msg->dport, fc_msg->smac, fc_msg->dmac);
+}
+
+/*
+ * fast_classifier_find_conn()
+ * 	find a connection object in the hash table
+ *      @pre the sfe_connection_lock must be held before calling this function
+ */
+static struct sfe_connection *
+fast_classifier_find_conn(sfe_ip_addr_t *saddr, sfe_ip_addr_t *daddr,
+			  unsigned short sport, unsigned short dport,
+			  unsigned char proto, bool is_v4)
+{
+	struct sfe_connection_create *p_sic;
+	struct sfe_connection *conn;
+	u32 key;
+
+	key = fc_conn_hash(saddr, daddr, sport, dport, is_v4);
+
+	sfe_hash_for_each_possible(fc_conn_ht, conn, hl, key) {
+		if (conn->is_v4 != is_v4) {
+			continue;
+		}
+
+		p_sic = conn->sic;
+
+		if (p_sic->protocol == proto &&
+		    p_sic->src_port == sport &&
+		    p_sic->dest_port == dport &&
+		    sfe_addr_equal(&p_sic->src_ip, saddr, is_v4) &&
+		    sfe_addr_equal(&p_sic->dest_ip, daddr, is_v4)) {
+			return conn;
+		}
+	}
+
+	DEBUG_TRACE("connection not found\n");
+	return NULL;
+}
+
+/*
+ * fast_classifier_sb_find_conn()
+ * 	find a connection object in the hash table according to information of packet
+ *	if not found, reverse the tuple and try again.
+ *      @pre the sfe_connection_lock must be held before calling this function
+ */
+static struct sfe_connection *
+fast_classifier_sb_find_conn(sfe_ip_addr_t *saddr, sfe_ip_addr_t *daddr,
+			  unsigned short sport, unsigned short dport,
+			  unsigned char proto, bool is_v4)
+{
+	struct sfe_connection_create *p_sic;
+	struct sfe_connection *conn;
+	u32 key;
+
+	key = fc_conn_hash(saddr, daddr, sport, dport, is_v4);
+
+	sfe_hash_for_each_possible(fc_conn_ht, conn, hl, key) {
+		if (conn->is_v4 != is_v4) {
+			continue;
+		}
+
+		p_sic = conn->sic;
+
+		if (p_sic->protocol == proto &&
+		    p_sic->src_port == sport &&
+		    p_sic->dest_port_xlate == dport &&
+		    sfe_addr_equal(&p_sic->src_ip, saddr, is_v4) &&
+		    sfe_addr_equal(&p_sic->dest_ip_xlate, daddr, is_v4)) {
+			return conn;
+		}
+	}
+
+	/*
+	 * Reverse the tuple and try again
+	 */
+	key = fc_conn_hash(daddr, saddr, dport, sport, is_v4);
+
+	sfe_hash_for_each_possible(fc_conn_ht, conn, hl, key) {
+		if (conn->is_v4 != is_v4) {
+			continue;
+		}
+
+		p_sic = conn->sic;
+
+		if (p_sic->protocol == proto &&
+		    p_sic->src_port == dport &&
+		    p_sic->dest_port_xlate == sport &&
+		    sfe_addr_equal(&p_sic->src_ip, daddr, is_v4) &&
+		    sfe_addr_equal(&p_sic->dest_ip_xlate, saddr, is_v4)) {
+			return conn;
+		}
+	}
+
+	DEBUG_TRACE("connection not found\n");
+	return NULL;
+}
+
+/*
+ * fast_classifier_add_conn()
+ *	add a connection object in the hash table if no duplicate
+ *	@conn connection to add
+ *	@return conn if successful, NULL if duplicate
+ */
+static struct sfe_connection *
+fast_classifier_add_conn(struct sfe_connection *conn)
+{
+	struct sfe_connection_create *sic = conn->sic;
+	u32 key;
+
+	spin_lock_bh(&sfe_connections_lock);
+	if (fast_classifier_find_conn(&sic->src_ip, &sic->dest_ip, sic->src_port,
+					sic->dest_port, sic->protocol, conn->is_v4)) {
+		spin_unlock_bh(&sfe_connections_lock);
+		return NULL;
+	}
+
+	key = fc_conn_hash(&sic->src_ip, &sic->dest_ip,
+			   sic->src_port, sic->dest_port, conn->is_v4);
+
+	hash_add(fc_conn_ht, &conn->hl, key);
+	sfe_connections_size++;
+	spin_unlock_bh(&sfe_connections_lock);
+
+	DEBUG_TRACE(" -> adding item to sfe_connections, new size: %d\n", sfe_connections_size);
+
+	DEBUG_TRACE("new offloadable: key: %u proto: %d src_ip: %pIS dst_ip: %pIS, src_port: %d, dst_port: %d\n",
+		key, sic->protocol, &(sic->src_ip), &(sic->dest_ip), sic->src_port, sic->dest_port);
+
+	return conn;
+}
+
+/*
+ * fast_classifier_offload_genl_msg()
+ * 	Called from user space to offload a connection
+ */
+static int
+fast_classifier_offload_genl_msg(struct sk_buff *skb, struct genl_info *info)
+{
+	struct nlattr *na;
+	struct fast_classifier_tuple *fc_msg;
+	struct sfe_connection *conn;
+
+	na = info->attrs[FAST_CLASSIFIER_A_TUPLE];
+	fc_msg = nla_data(na);
+
+	DEBUG_TRACE("want to offload: %d-%d, %pIS, %pIS, %d, %d SMAC=%pM DMAC=%pM\n",
+		fc_msg->ethertype,
+		fc_msg->proto,
+		&fc_msg->src_saddr,
+		&fc_msg->dst_saddr,
+		fc_msg->sport,
+		fc_msg->dport,
+		fc_msg->smac,
+		fc_msg->dmac);
+
+	spin_lock_bh(&sfe_connections_lock);
+	conn = fast_classifier_sb_find_conn((sfe_ip_addr_t *)&fc_msg->src_saddr,
+					 (sfe_ip_addr_t *)&fc_msg->dst_saddr,
+					 fc_msg->sport,
+					 fc_msg->dport,
+					 fc_msg->proto,
+					 (fc_msg->ethertype == AF_INET));
+	if (!conn) {
+		spin_unlock_bh(&sfe_connections_lock);
+		DEBUG_TRACE("REQUEST OFFLOAD NO MATCH\n");
+		atomic_inc(&offload_no_match_msgs);
+		return 0;
+	}
+
+	conn->offload_permit = 1;
+	spin_unlock_bh(&sfe_connections_lock);
+	atomic_inc(&offload_msgs);
+
+	DEBUG_TRACE("INFO: calling sfe rule creation!\n");
+	return 0;
+}
+
+/*
+ * fast_classifier_nl_genl_msg_DUMP()
+ *	ignore fast_classifier_messages OFFLOADED and DONE
+ */
+static int fast_classifier_nl_genl_msg_DUMP(struct sk_buff *skb,
+					    struct netlink_callback *cb)
+{
+	return 0;
+}
+
+/* auto offload connection once we have this many packets*/
+static int offload_at_pkts = 128;
+
+/*
+ * fast_classifier_post_routing()
+ *	Called for packets about to leave the box - either locally generated or forwarded from another interface
+ */
+static unsigned int fast_classifier_post_routing(struct sk_buff *skb, bool is_v4)
+{
+	int ret;
+	struct sfe_connection_create sic;
+	struct sfe_connection_create *p_sic;
+	struct net_device *in;
+	struct nf_conn *ct;
+	enum ip_conntrack_info ctinfo;
+	struct net_device *dev;
+	struct net_device *src_dev;
+	struct net_device *dest_dev;
+	struct net_device *src_br_dev = NULL;
+	struct net_device *dest_br_dev = NULL;
+	struct nf_conntrack_tuple orig_tuple;
+	struct nf_conntrack_tuple reply_tuple;
+	struct sfe_connection *conn;
+	SFE_NF_CONN_ACCT(acct);
+
+	/*
+	 * Don't process broadcast or multicast packets.
+	 */
+	if (unlikely(skb->pkt_type == PACKET_BROADCAST)) {
+		fast_classifier_incr_exceptions(FAST_CL_EXCEPTION_PACKET_BROADCAST);
+		DEBUG_TRACE("broadcast, ignoring\n");
+		return NF_ACCEPT;
+	}
+	if (unlikely(skb->pkt_type == PACKET_MULTICAST)) {
+		fast_classifier_incr_exceptions(FAST_CL_EXCEPTION_PACKET_MULTICAST);
+		DEBUG_TRACE("multicast, ignoring\n");
+		return NF_ACCEPT;
+	}
+
+	/*
+	 * Don't process packets that are not being forwarded.
+	 */
+	in = dev_get_by_index(&init_net, skb->skb_iif);
+	if (!in) {
+		fast_classifier_incr_exceptions(FAST_CL_EXCEPTION_NO_IIF);
+		DEBUG_TRACE("packet not forwarding\n");
+		return NF_ACCEPT;
+	}
+
+	dev_put(in);
+
+	/*
+	 * Don't process packets that aren't being tracked by conntrack.
+	 */
+	ct = nf_ct_get(skb, &ctinfo);
+	if (unlikely(!ct)) {
+		fast_classifier_incr_exceptions(FAST_CL_EXCEPTION_NO_CT);
+		DEBUG_TRACE("no conntrack connection, ignoring\n");
+		return NF_ACCEPT;
+	}
+
+	/*
+	 * Don't process untracked connections.
+	 */
+	if (unlikely(nf_ct_is_untracked(ct))) {
+		fast_classifier_incr_exceptions(FAST_CL_EXCEPTION_CT_NO_TRACK);
+		DEBUG_TRACE("untracked connection\n");
+		return NF_ACCEPT;
+	}
+
+	/*
+	 * Unconfirmed connection may be dropped by Linux at the final step,
+	 * So we don't process unconfirmed connections.
+	 */
+	if (!nf_ct_is_confirmed(ct)) {
+		fast_classifier_incr_exceptions(FAST_CL_EXCEPTION_CT_NO_CONFIRM);
+		DEBUG_TRACE("unconfirmed connection\n");
+		return NF_ACCEPT;
+	}
+
+	/*
+	 * Don't process connections that require support from a 'helper' (typically a NAT ALG).
+	 */
+	if (unlikely(nfct_help(ct))) {
+		fast_classifier_incr_exceptions(FAST_CL_EXCEPTION_CT_IS_ALG);
+		DEBUG_TRACE("connection has helper\n");
+		return NF_ACCEPT;
+	}
+
+	/*
+	 * Check if the acceleration of a flow could be rejected quickly.
+	 */
+	acct = nf_conn_acct_find(ct);
+	if (acct) {
+		long long packets = atomic64_read(&SFE_ACCT_COUNTER(acct)[CTINFO2DIR(ctinfo)].packets);
+		if ((packets > 0xff) && (packets & 0xff)) {
+			/*
+			 * Connection hits slow path at least 256 times, so it must be not able to accelerate.
+			 * But we also give it a chance to walk through ECM every 256 packets
+			 */
+			return NF_ACCEPT;
+		}
+	}
+
+	memset(&sic, 0, sizeof(sic));
+
+	/*
+	 * Look up the details of our connection in conntrack.
+	 *
+	 * Note that the data we get from conntrack is for the "ORIGINAL" direction
+	 * but our packet may actually be in the "REPLY" direction.
+	 */
+	orig_tuple = ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple;
+	reply_tuple = ct->tuplehash[IP_CT_DIR_REPLY].tuple;
+	sic.protocol = (s32)orig_tuple.dst.protonum;
+
+	sic.flags = 0;
+
+	/*
+	 * Get addressing information, non-NAT first
+	 */
+	if (is_v4) {
+		u32 dscp;
+
+		sic.src_ip.ip = (__be32)orig_tuple.src.u3.ip;
+		sic.dest_ip.ip = (__be32)orig_tuple.dst.u3.ip;
+
+		if (ipv4_is_multicast(sic.src_ip.ip) || ipv4_is_multicast(sic.dest_ip.ip)) {
+			fast_classifier_incr_exceptions(FAST_CL_EXCEPTION_IS_IPV4_MCAST);
+			DEBUG_TRACE("multicast address\n");
+			return NF_ACCEPT;
+		}
+
+		/*
+		 * NAT'ed addresses - note these are as seen from the 'reply' direction
+		 * When NAT does not apply to this connection these will be identical to the above.
+		 */
+		sic.src_ip_xlate.ip = (__be32)reply_tuple.dst.u3.ip;
+		sic.dest_ip_xlate.ip = (__be32)reply_tuple.src.u3.ip;
+
+		dscp = ipv4_get_dsfield(ip_hdr(skb)) >> XT_DSCP_SHIFT;
+		if (dscp) {
+			sic.dest_dscp = dscp;
+			sic.src_dscp = sic.dest_dscp;
+			sic.flags |= SFE_CREATE_FLAG_REMARK_DSCP;
+		}
+	} else {
+		u32 dscp;
+
+		sic.src_ip.ip6[0] = *((struct sfe_ipv6_addr *)&orig_tuple.src.u3.in6);
+		sic.dest_ip.ip6[0] = *((struct sfe_ipv6_addr *)&orig_tuple.dst.u3.in6);
+
+		if (ipv6_addr_is_multicast((struct in6_addr *)sic.src_ip.ip6) ||
+		    ipv6_addr_is_multicast((struct in6_addr *)sic.dest_ip.ip6)) {
+			fast_classifier_incr_exceptions(FAST_CL_EXCEPTION_IS_IPV6_MCAST);
+			DEBUG_TRACE("multicast address\n");
+			return NF_ACCEPT;
+		}
+
+		/*
+		 * NAT'ed addresses - note these are as seen from the 'reply' direction
+		 * When NAT does not apply to this connection these will be identical to the above.
+		 */
+		sic.src_ip_xlate.ip6[0] = *((struct sfe_ipv6_addr *)&reply_tuple.dst.u3.in6);
+		sic.dest_ip_xlate.ip6[0] = *((struct sfe_ipv6_addr *)&reply_tuple.src.u3.in6);
+
+		dscp = ipv6_get_dsfield(ipv6_hdr(skb)) >> XT_DSCP_SHIFT;
+		if (dscp) {
+			sic.dest_dscp = dscp;
+			sic.src_dscp = sic.dest_dscp;
+			sic.flags |= SFE_CREATE_FLAG_REMARK_DSCP;
+		}
+	}
+
+	switch (sic.protocol) {
+	case IPPROTO_TCP:
+		sic.src_port = orig_tuple.src.u.tcp.port;
+		sic.dest_port = orig_tuple.dst.u.tcp.port;
+		sic.src_port_xlate = reply_tuple.dst.u.tcp.port;
+		sic.dest_port_xlate = reply_tuple.src.u.tcp.port;
+
+		/*
+		 * Don't try to manage a non-established connection.
+		 */
+		if (!test_bit(IPS_ASSURED_BIT, &ct->status)) {
+			fast_classifier_incr_exceptions(FAST_CL_EXCEPTION_TCP_NOT_ASSURED);
+			DEBUG_TRACE("non-established connection\n");
+			return NF_ACCEPT;
+		}
+
+		break;
+
+	case IPPROTO_UDP:
+		sic.src_port = orig_tuple.src.u.udp.port;
+		sic.dest_port = orig_tuple.dst.u.udp.port;
+		sic.src_port_xlate = reply_tuple.dst.u.udp.port;
+		sic.dest_port_xlate = reply_tuple.src.u.udp.port;
+		break;
+
+	default:
+		fast_classifier_incr_exceptions(FAST_CL_EXCEPTION_UNKNOW_PROTOCOL);
+		DEBUG_TRACE("unhandled protocol %d\n", sic.protocol);
+		return NF_ACCEPT;
+	}
+
+#ifdef CONFIG_XFRM
+	sic.original_accel = 1;
+	sic.reply_accel = 1;
+#endif
+
+	/*
+	 * Get QoS information
+	 */
+	if (skb->priority) {
+		sic.dest_priority = skb->priority;
+		sic.src_priority = sic.dest_priority;
+		sic.flags |= SFE_CREATE_FLAG_REMARK_PRIORITY;
+	}
+
+	DEBUG_TRACE("POST_ROUTE: checking new connection: %d src_ip: %pIS dst_ip: %pIS, src_port: %d, dst_port: %d\n",
+		sic.protocol, &sic.src_ip, &sic.dest_ip, sic.src_port, sic.dest_port);
+
+	/*
+	 * If we already have this connection in our list, skip it
+	 * XXX: this may need to be optimized
+	 */
+	spin_lock_bh(&sfe_connections_lock);
+
+	conn = fast_classifier_find_conn(&sic.src_ip, &sic.dest_ip, sic.src_port, sic.dest_port, sic.protocol, is_v4);
+	if (conn) {
+		conn->hits++;
+
+		if (!conn->offloaded) {
+			if (conn->offload_permit || conn->hits >= offload_at_pkts) {
+				DEBUG_TRACE("OFFLOADING CONNECTION, TOO MANY HITS\n");
+
+				if (fast_classifier_update_protocol(conn->sic, conn->ct) == 0) {
+					spin_unlock_bh(&sfe_connections_lock);
+					fast_classifier_incr_exceptions(FAST_CL_EXCEPTION_UPDATE_PROTOCOL_FAIL);
+					DEBUG_TRACE("UNKNOWN PROTOCOL OR CONNECTION CLOSING, SKIPPING\n");
+					return NF_ACCEPT;
+				}
+
+				DEBUG_TRACE("INFO: calling sfe rule creation!\n");
+				spin_unlock_bh(&sfe_connections_lock);
+
+				ret = is_v4 ? sfe_ipv4_create_rule(conn->sic) : sfe_ipv6_create_rule(conn->sic);
+				if ((ret == 0) || (ret == -EADDRINUSE)) {
+					struct fast_classifier_tuple fc_msg;
+
+					if (is_v4) {
+						fc_msg.ethertype = AF_INET;
+						fc_msg.src_saddr.in = *((struct in_addr *)&sic.src_ip);
+						fc_msg.dst_saddr.in = *((struct in_addr *)&sic.dest_ip_xlate);
+					} else {
+						fc_msg.ethertype = AF_INET6;
+						fc_msg.src_saddr.in6 = *((struct in6_addr *)&sic.src_ip);
+						fc_msg.dst_saddr.in6 = *((struct in6_addr *)&sic.dest_ip_xlate);
+					}
+
+					fc_msg.proto = sic.protocol;
+					fc_msg.sport = sic.src_port;
+					fc_msg.dport = sic.dest_port_xlate;
+					memcpy(fc_msg.smac, conn->smac, ETH_ALEN);
+					memcpy(fc_msg.dmac, conn->dmac, ETH_ALEN);
+					fast_classifier_send_genl_msg(FAST_CLASSIFIER_C_OFFLOADED, &fc_msg);
+					conn->offloaded = 1;
+				}
+
+				return NF_ACCEPT;
+			}
+		}
+
+		spin_unlock_bh(&sfe_connections_lock);
+		if (conn->offloaded) {
+			is_v4 ? sfe_ipv4_update_rule(conn->sic) : sfe_ipv6_update_rule(conn->sic);
+		}
+
+		DEBUG_TRACE("FOUND, SKIPPING\n");
+		fast_classifier_incr_exceptions(FAST_CL_EXCEPTION_WAIT_FOR_ACCELERATION);
+		return NF_ACCEPT;
+	}
+
+	spin_unlock_bh(&sfe_connections_lock);
+
+	/*
+	 * Get the net device and MAC addresses that correspond to the various source and
+	 * destination host addresses.
+	 */
+	if (!fast_classifier_find_dev_and_mac_addr(&sic.src_ip, &src_dev, sic.src_mac, is_v4)) {
+		fast_classifier_incr_exceptions(FAST_CL_EXCEPTION_NO_SRC_DEV);
+		return NF_ACCEPT;
+	}
+
+	if (!fast_classifier_find_dev_and_mac_addr(&sic.src_ip_xlate, &dev, sic.src_mac_xlate, is_v4)) {
+		fast_classifier_incr_exceptions(FAST_CL_EXCEPTION_NO_SRC_XLATE_DEV);
+		goto done1;
+	}
+
+	dev_put(dev);
+
+	if (!fast_classifier_find_dev_and_mac_addr(&sic.dest_ip, &dev, sic.dest_mac, is_v4)) {
+		fast_classifier_incr_exceptions(FAST_CL_EXCEPTION_NO_DEST_DEV);
+		goto done1;
+	}
+
+	dev_put(dev);
+
+	if (!fast_classifier_find_dev_and_mac_addr(&sic.dest_ip_xlate, &dest_dev, sic.dest_mac_xlate, is_v4)) {
+		fast_classifier_incr_exceptions(FAST_CL_EXCEPTION_NO_DEST_XLATE_DEV);
+		goto done1;
+	}
+
+	/*
+	 * Our devices may actually be part of a bridge interface.  If that's
+	 * the case then find the bridge interface instead.
+	 */
+	if (src_dev->priv_flags & IFF_BRIDGE_PORT) {
+		src_br_dev = sfe_dev_get_master(src_dev);
+		if (!src_br_dev) {
+			fast_classifier_incr_exceptions(FAST_CL_EXCEPTION_NO_BRIDGE);
+			DEBUG_TRACE("no bridge found for: %s\n", src_dev->name);
+			goto done2;
+		}
+
+		src_dev = src_br_dev;
+	}
+
+	if (dest_dev->priv_flags & IFF_BRIDGE_PORT) {
+		dest_br_dev = sfe_dev_get_master(dest_dev);
+		if (!dest_br_dev) {
+			fast_classifier_incr_exceptions(FAST_CL_EXCEPTION_NO_BRIDGE);
+			DEBUG_TRACE("no bridge found for: %s\n", dest_dev->name);
+			goto done3;
+		}
+
+		dest_dev = dest_br_dev;
+	}
+
+	sic.src_dev = src_dev;
+	sic.dest_dev = dest_dev;
+
+	sic.src_mtu = src_dev->mtu;
+	sic.dest_mtu = dest_dev->mtu;
+
+	if (skb->mark) {
+		DEBUG_TRACE("SKB MARK NON ZERO %x\n", skb->mark);
+	}
+	sic.mark = skb->mark;
+
+	conn = kmalloc(sizeof(*conn), GFP_ATOMIC);
+	if (!conn) {
+		printk(KERN_CRIT "ERROR: no memory for sfe\n");
+		goto done3;
+	}
+	conn->hits = 0;
+	conn->offload_permit = 0;
+	conn->offloaded = 0;
+	conn->is_v4 = is_v4;
+	DEBUG_TRACE("Source MAC=%pM\n", sic.src_mac);
+	memcpy(conn->smac, sic.src_mac, ETH_ALEN);
+	memcpy(conn->dmac, sic.dest_mac_xlate, ETH_ALEN);
+
+	p_sic = kmalloc(sizeof(*p_sic), GFP_ATOMIC);
+	if (!p_sic) {
+		printk(KERN_CRIT "ERROR: no memory for sfe\n");
+		kfree(conn);
+		goto done3;
+	}
+
+	memcpy(p_sic, &sic, sizeof(sic));
+	conn->sic = p_sic;
+	conn->ct = ct;
+
+	if (!fast_classifier_add_conn(conn)) {
+		kfree(conn->sic);
+		kfree(conn);
+	}
+
+	/*
+	 * If we had bridge ports then release them too.
+	 */
+	if (dest_br_dev) {
+		dev_put(dest_br_dev);
+	}
+
+done3:
+	if (src_br_dev) {
+		dev_put(src_br_dev);
+	}
+
+done2:
+	dev_put(dest_dev);
+
+done1:
+	dev_put(src_dev);
+
+	return NF_ACCEPT;
+}
+
+/*
+ * fast_classifier_ipv4_post_routing_hook()
+ *	Called for packets about to leave the box - either locally generated or forwarded from another interface
+ */
+fast_classifier_ipv4_post_routing_hook(hooknum, ops, skb, in_unused, out, okfn)
+{
+	return fast_classifier_post_routing(skb, true);
+}
+
+/*
+ * fast_classifier_ipv6_post_routing_hook()
+ *	Called for packets about to leave the box - either locally generated or forwarded from another interface
+ */
+fast_classifier_ipv6_post_routing_hook(hooknum, ops, skb, in_unused, out, okfn)
+{
+	return fast_classifier_post_routing(skb, false);
+}
+
+/*
+ * fast_classifier_update_mark()
+ *	updates the mark for a fast-classifier connection
+ */
+static void fast_classifier_update_mark(struct sfe_connection_mark *mark, bool is_v4)
+{
+	struct sfe_connection *conn;
+
+	spin_lock_bh(&sfe_connections_lock);
+
+	conn = fast_classifier_find_conn(&mark->src_ip, &mark->dest_ip,
+					 mark->src_port, mark->dest_port,
+					 mark->protocol, is_v4);
+	if (conn) {
+		conn->sic->mark = mark->mark;
+	}
+
+	spin_unlock_bh(&sfe_connections_lock);
+}
+
+#ifdef CONFIG_NF_CONNTRACK_EVENTS
+/*
+ * fast_classifier_conntrack_event()
+ *	Callback event invoked when a conntrack connection's state changes.
+ */
+#ifdef CONFIG_NF_CONNTRACK_CHAIN_EVENTS
+static int fast_classifier_conntrack_event(struct notifier_block *this,
+					   unsigned long events, void *ptr)
+#else
+static int fast_classifier_conntrack_event(unsigned int events, struct nf_ct_event *item)
+#endif
+{
+#ifdef CONFIG_NF_CONNTRACK_CHAIN_EVENTS
+	struct nf_ct_event *item = ptr;
+#endif
+	struct sfe_connection_destroy sid;
+	struct nf_conn *ct = item->ct;
+	struct nf_conntrack_tuple orig_tuple;
+	struct sfe_connection *conn;
+	struct fast_classifier_tuple fc_msg;
+	int offloaded = 0;
+	bool is_v4;
+
+	/*
+	 * If we don't have a conntrack entry then we're done.
+	 */
+	if (unlikely(!ct)) {
+		DEBUG_WARN("no ct in conntrack event callback\n");
+		return NOTIFY_DONE;
+	}
+
+	/*
+	 * If this is an untracked connection then we can't have any state either.
+	 */
+	if (unlikely(nf_ct_is_untracked(ct))) {
+		DEBUG_TRACE("ignoring untracked conn\n");
+		return NOTIFY_DONE;
+	}
+
+	orig_tuple = ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple;
+	sid.protocol = (s32)orig_tuple.dst.protonum;
+
+	/*
+	 * Extract information from the conntrack connection.  We're only interested
+	 * in nominal connection information (i.e. we're ignoring any NAT information).
+	 */
+	if (likely(nf_ct_l3num(ct) == AF_INET)) {
+		sid.src_ip.ip = (__be32)orig_tuple.src.u3.ip;
+		sid.dest_ip.ip = (__be32)orig_tuple.dst.u3.ip;
+		is_v4 = true;
+	} else if (likely(nf_ct_l3num(ct) == AF_INET6)) {
+		sid.src_ip.ip6[0] = *((struct sfe_ipv6_addr *)&orig_tuple.src.u3.in6);
+		sid.dest_ip.ip6[0] = *((struct sfe_ipv6_addr *)&orig_tuple.dst.u3.in6);
+		is_v4 = false;
+	} else {
+		DEBUG_TRACE("ignoring non-IPv4 and non-IPv6 connection\n");
+		return NOTIFY_DONE;
+	}
+
+	switch (sid.protocol) {
+	case IPPROTO_TCP:
+		sid.src_port = orig_tuple.src.u.tcp.port;
+		sid.dest_port = orig_tuple.dst.u.tcp.port;
+		break;
+
+	case IPPROTO_UDP:
+		sid.src_port = orig_tuple.src.u.udp.port;
+		sid.dest_port = orig_tuple.dst.u.udp.port;
+		break;
+
+	default:
+		DEBUG_TRACE("unhandled protocol: %d\n", sid.protocol);
+		return NOTIFY_DONE;
+	}
+
+	/*
+	 * Check for an updated mark
+	 */
+	if ((events & (1 << IPCT_MARK)) && (ct->mark != 0)) {
+		struct sfe_connection_mark mark;
+
+		mark.protocol = sid.protocol;
+		mark.src_ip = sid.src_ip;
+		mark.dest_ip = sid.dest_ip;
+		mark.src_port = sid.src_port;
+		mark.dest_port = sid.dest_port;
+		mark.mark = ct->mark;
+
+		is_v4 ? sfe_ipv4_mark_rule(&mark) : sfe_ipv6_mark_rule(&mark);
+		fast_classifier_update_mark(&mark, is_v4);
+	}
+
+	/*
+	 * We're only interested in destroy events at this point
+	 */
+	if (unlikely(!(events & (1 << IPCT_DESTROY)))) {
+		DEBUG_TRACE("ignoring non-destroy event\n");
+		return NOTIFY_DONE;
+	}
+
+	DEBUG_TRACE("Try to clean up: proto: %d src_ip: %pIS dst_ip: %pIS, src_port: %d, dst_port: %d\n",
+		sid.protocol, &sid.src_ip, &sid.dest_ip, sid.src_port, sid.dest_port);
+
+	spin_lock_bh(&sfe_connections_lock);
+
+	conn = fast_classifier_find_conn(&sid.src_ip, &sid.dest_ip, sid.src_port, sid.dest_port, sid.protocol, is_v4);
+	if (conn && conn->offloaded) {
+		if (is_v4) {
+			fc_msg.ethertype = AF_INET;
+			fc_msg.src_saddr.in = *((struct in_addr *)&conn->sic->src_ip);
+			fc_msg.dst_saddr.in = *((struct in_addr *)&conn->sic->dest_ip_xlate);
+		} else {
+			fc_msg.ethertype = AF_INET6;
+			fc_msg.src_saddr.in6 = *((struct in6_addr *)&conn->sic->src_ip);
+			fc_msg.dst_saddr.in6 = *((struct in6_addr *)&conn->sic->dest_ip_xlate);
+		}
+
+		fc_msg.proto = conn->sic->protocol;
+		fc_msg.sport = conn->sic->src_port;
+		fc_msg.dport = conn->sic->dest_port_xlate;
+		memcpy(fc_msg.smac, conn->smac, ETH_ALEN);
+		memcpy(fc_msg.dmac, conn->dmac, ETH_ALEN);
+		offloaded = 1;
+	}
+
+	if (conn) {
+		DEBUG_TRACE("Free connection\n");
+
+		hash_del(&conn->hl);
+		sfe_connections_size--;
+		kfree(conn->sic);
+		kfree(conn);
+	} else {
+		fast_classifier_incr_exceptions(FAST_CL_EXCEPTION_CT_DESTROY_MISS);
+	}
+
+	spin_unlock_bh(&sfe_connections_lock);
+
+	is_v4 ? sfe_ipv4_destroy_rule(&sid) : sfe_ipv6_destroy_rule(&sid);
+
+	if (offloaded) {
+		fast_classifier_send_genl_msg(FAST_CLASSIFIER_C_DONE, &fc_msg);
+	}
+
+	return NOTIFY_DONE;
+}
+
+/*
+ * Netfilter conntrack event system to monitor connection tracking changes
+ */
+#ifdef CONFIG_NF_CONNTRACK_CHAIN_EVENTS
+static struct notifier_block fast_classifier_conntrack_notifier = {
+	.notifier_call = fast_classifier_conntrack_event,
+};
+#else
+static struct nf_ct_event_notifier fast_classifier_conntrack_notifier = {
+	.fcn = fast_classifier_conntrack_event,
+};
+#endif
+#endif
+
+/*
+ * Structure to establish a hook into the post routing netfilter point - this
+ * will pick up local outbound and packets going from one interface to another.
+ *
+ * Note: see include/linux/netfilter_ipv4.h for info related to priority levels.
+ * We want to examine packets after NAT translation and any ALG processing.
+ */
+static struct nf_hook_ops fast_classifier_ops_post_routing[] __read_mostly = {
+	SFE_IPV4_NF_POST_ROUTING_HOOK(__fast_classifier_ipv4_post_routing_hook),
+	SFE_IPV6_NF_POST_ROUTING_HOOK(__fast_classifier_ipv6_post_routing_hook),
+};
+
+/*
+ * fast_classifier_sync_rule()
+ *	Synchronize a connection's state.
+ */
+static void fast_classifier_sync_rule(struct sfe_connection_sync *sis)
+{
+	struct nf_conntrack_tuple_hash *h;
+	struct nf_conntrack_tuple tuple;
+	struct nf_conn *ct;
+	SFE_NF_CONN_ACCT(acct);
+
+	/*
+	 * Create a tuple so as to be able to look up a connection
+	 */
+	memset(&tuple, 0, sizeof(tuple));
+	tuple.src.u.all = (__be16)sis->src_port;
+	tuple.dst.dir = IP_CT_DIR_ORIGINAL;
+	tuple.dst.protonum = (u8)sis->protocol;
+	tuple.dst.u.all = (__be16)sis->dest_port;
+
+	if (sis->is_v6) {
+		tuple.src.u3.in6 = *((struct in6_addr *)sis->src_ip.ip6);
+		tuple.dst.u3.in6 = *((struct in6_addr *)sis->dest_ip.ip6);
+		tuple.src.l3num = AF_INET6;
+
+		DEBUG_TRACE("update connection - p: %d, s: %pI6:%u, d: %pI6:%u\n",
+			    (int)tuple.dst.protonum,
+			    &tuple.src.u3.in6, (unsigned int)ntohs(tuple.src.u.all),
+			    &tuple.dst.u3.in6, (unsigned int)ntohs(tuple.dst.u.all));
+	} else {
+		tuple.src.u3.ip = sis->src_ip.ip;
+		tuple.dst.u3.ip = sis->dest_ip.ip;
+		tuple.src.l3num = AF_INET;
+
+		DEBUG_TRACE("update connection - p: %d, s: %pI4:%u, d: %pI4:%u\n",
+			    (int)tuple.dst.protonum,
+			    &tuple.src.u3.ip, (unsigned int)ntohs(tuple.src.u.all),
+			    &tuple.dst.u3.ip, (unsigned int)ntohs(tuple.dst.u.all));
+	}
+
+	/*
+	 * Update packet count for ingress on bridge device
+	 */
+	if (skip_to_bridge_ingress) {
+		struct rtnl_link_stats64 nlstats;
+		nlstats.tx_packets = 0;
+		nlstats.tx_bytes = 0;
+
+		if (sis->src_dev && IFF_EBRIDGE &&
+		    (sis->src_new_packet_count || sis->src_new_byte_count)) {
+			nlstats.rx_packets = sis->src_new_packet_count;
+			nlstats.rx_bytes = sis->src_new_byte_count;
+			spin_lock_bh(&sfe_connections_lock);
+			br_dev_update_stats(sis->src_dev, &nlstats);
+			spin_unlock_bh(&sfe_connections_lock);
+		}
+		if (sis->dest_dev && IFF_EBRIDGE &&
+		    (sis->dest_new_packet_count || sis->dest_new_byte_count)) {
+			nlstats.rx_packets = sis->dest_new_packet_count;
+			nlstats.rx_bytes = sis->dest_new_byte_count;
+			spin_lock_bh(&sfe_connections_lock);
+			br_dev_update_stats(sis->dest_dev, &nlstats);
+			spin_unlock_bh(&sfe_connections_lock);
+		}
+	}
+
+	/*
+	 * Look up conntrack connection
+	 */
+	h = nf_conntrack_find_get(&init_net, SFE_NF_CT_DEFAULT_ZONE, &tuple);
+	if (unlikely(!h)) {
+		DEBUG_TRACE("no connection found\n");
+		return;
+	}
+
+	ct = nf_ct_tuplehash_to_ctrack(h);
+	NF_CT_ASSERT(ct->timeout.data == (unsigned long)ct);
+
+	/*
+	 * Only update if this is not a fixed timeout
+	 */
+	if (!test_bit(IPS_FIXED_TIMEOUT_BIT, &ct->status)) {
+		spin_lock_bh(&ct->lock);
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 9, 0))
+		ct->timeout += sis->delta_jiffies;
+#else
+		ct->timeout.expires += sis->delta_jiffies;
+#endif
+		spin_unlock_bh(&ct->lock);
+	}
+
+	acct = nf_conn_acct_find(ct);
+	if (acct) {
+		spin_lock_bh(&ct->lock);
+		atomic64_add(sis->src_new_packet_count, &SFE_ACCT_COUNTER(acct)[IP_CT_DIR_ORIGINAL].packets);
+		atomic64_add(sis->src_new_byte_count, &SFE_ACCT_COUNTER(acct)[IP_CT_DIR_ORIGINAL].bytes);
+		atomic64_add(sis->dest_new_packet_count, &SFE_ACCT_COUNTER(acct)[IP_CT_DIR_REPLY].packets);
+		atomic64_add(sis->dest_new_byte_count, &SFE_ACCT_COUNTER(acct)[IP_CT_DIR_REPLY].bytes);
+		spin_unlock_bh(&ct->lock);
+	}
+
+	switch (sis->protocol) {
+	case IPPROTO_TCP:
+		spin_lock_bh(&ct->lock);
+		if (ct->proto.tcp.seen[0].td_maxwin < sis->src_td_max_window) {
+			ct->proto.tcp.seen[0].td_maxwin = sis->src_td_max_window;
+		}
+		if ((s32)(ct->proto.tcp.seen[0].td_end - sis->src_td_end) < 0) {
+			ct->proto.tcp.seen[0].td_end = sis->src_td_end;
+		}
+		if ((s32)(ct->proto.tcp.seen[0].td_maxend - sis->src_td_max_end) < 0) {
+			ct->proto.tcp.seen[0].td_maxend = sis->src_td_max_end;
+		}
+		if (ct->proto.tcp.seen[1].td_maxwin < sis->dest_td_max_window) {
+			ct->proto.tcp.seen[1].td_maxwin = sis->dest_td_max_window;
+		}
+		if ((s32)(ct->proto.tcp.seen[1].td_end - sis->dest_td_end) < 0) { 
+			ct->proto.tcp.seen[1].td_end = sis->dest_td_end;
+		}
+		if ((s32)(ct->proto.tcp.seen[1].td_maxend - sis->dest_td_max_end) < 0) {
+			ct->proto.tcp.seen[1].td_maxend = sis->dest_td_max_end;
+		}
+		spin_unlock_bh(&ct->lock);
+		break;
+
+	case IPPROTO_UDP:
+		/*
+		 * In Linux connection track, UDP flow has two timeout values:
+		 * /proc/sys/net/netfilter/nf_conntrack_udp_timeout:
+		 * 	this is for uni-direction UDP flow, normally its value is 60 seconds
+		 * /proc/sys/net/netfilter/nf_conntrack_udp_timeout_stream:
+		 * 	this is for bi-direction UDP flow, normally its value is 180 seconds
+		 *
+		 * Linux will update timer of UDP flow to stream timeout once it seen packets
+		 * in reply direction. But if flow is accelerated by NSS or SFE, Linux won't
+		 * see any packets. So we have to do the same thing in our stats sync message.
+		 */
+		if (!test_bit(IPS_ASSURED_BIT, &ct->status) && acct) {
+			u_int64_t reply_pkts = atomic64_read(&SFE_ACCT_COUNTER(acct)[IP_CT_DIR_REPLY].packets);
+
+			if (reply_pkts != 0) {
+				struct nf_conntrack_l4proto *l4proto;
+				unsigned int *timeouts;
+
+				set_bit(IPS_SEEN_REPLY_BIT, &ct->status);
+				set_bit(IPS_ASSURED_BIT, &ct->status);
+
+				l4proto = __nf_ct_l4proto_find((sis->is_v6 ? AF_INET6 : AF_INET), IPPROTO_UDP);
+				timeouts = nf_ct_timeout_lookup(&init_net, ct, l4proto);
+
+				spin_lock_bh(&ct->lock);
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 9, 0)) 
+				ct->timeout = nfct_time_stamp + timeouts[UDP_CT_REPLIED];
+#else
+				ct->timeout.expires = jiffies + timeouts[UDP_CT_REPLIED];
+#endif
+				spin_unlock_bh(&ct->lock);
+			}
+		}
+		break;
+	}
+
+	/*
+	 * Release connection
+	 */
+	nf_ct_put(ct);
+}
+
+/*
+ * fast_classifier_device_event()
+ */
+static int fast_classifier_device_event(struct notifier_block *this, unsigned long event, void *ptr)
+{
+	struct net_device *dev = SFE_DEV_EVENT_PTR(ptr);
+
+	if (dev && (event == NETDEV_DOWN)) {
+		sfe_ipv4_destroy_all_rules_for_dev(dev);
+		sfe_ipv6_destroy_all_rules_for_dev(dev);
+	}
+
+	return NOTIFY_DONE;
+}
+
+/*
+ * fast_classifier_inet_event()
+ */
+static int fast_classifier_inet_event(struct notifier_block *this, unsigned long event, void *ptr)
+{
+	struct net_device *dev = ((struct in_ifaddr *)ptr)->ifa_dev->dev;
+
+	if (dev && (event == NETDEV_DOWN)) {
+		sfe_ipv4_destroy_all_rules_for_dev(dev);
+	}
+
+	return NOTIFY_DONE;
+}
+
+/*
+ * fast_classifier_inet6_event()
+ */
+static int fast_classifier_inet6_event(struct notifier_block *this, unsigned long event, void *ptr)
+{
+	struct net_device *dev = ((struct inet6_ifaddr *)ptr)->idev->dev;
+
+	if (dev && (event == NETDEV_DOWN)) {
+		sfe_ipv6_destroy_all_rules_for_dev(dev);
+	}
+
+	return NOTIFY_DONE;
+}
+
+/*
+ * fast_classifier_get_offload_at_pkts()
+ */
+static ssize_t fast_classifier_get_offload_at_pkts(struct device *dev,
+						   struct device_attribute *attr,
+						   char *buf)
+{
+	return snprintf(buf, (ssize_t)PAGE_SIZE, "%d\n", offload_at_pkts);
+}
+
+/*
+ * fast_classifier_set_offload_at_pkts()
+ */
+static ssize_t fast_classifier_set_offload_at_pkts(struct device *dev,
+						   struct device_attribute *attr,
+						   const char *buf, size_t size)
+{
+	long new;
+	int ret;
+
+	ret = kstrtol(buf, 0, &new);
+	if (ret == -EINVAL || ((int)new != new))
+		return -EINVAL;
+
+	offload_at_pkts = new;
+
+	return size;
+}
+
+/*
+ * fast_classifier_get_debug_info()
+ */
+static ssize_t fast_classifier_get_debug_info(struct device *dev,
+				      struct device_attribute *attr,
+				      char *buf)
+{
+	size_t len = 0;
+	struct sfe_connection *conn;
+	u32 i;
+
+	spin_lock_bh(&sfe_connections_lock);
+	len += scnprintf(buf, PAGE_SIZE - len, "size=%d offload=%d offload_no_match=%d"
+			" offloaded=%d done=%d offl_dbg_msg_fail=%d done_dbg_msg_fail=%d\n",
+			sfe_connections_size,
+			atomic_read(&offload_msgs),
+			atomic_read(&offload_no_match_msgs),
+			atomic_read(&offloaded_msgs),
+			atomic_read(&done_msgs),
+			atomic_read(&offloaded_fail_msgs),
+			atomic_read(&done_fail_msgs));
+	sfe_hash_for_each(fc_conn_ht, i, conn, hl) {
+		len += scnprintf(buf + len, PAGE_SIZE - len,
+				(conn->is_v4 ? "o=%d, p=%d [%pM]:%pI4:%u %pI4:%u:[%pM] m=%08x h=%d\n" : "o=%d, p=%d [%pM]:%pI6:%u %pI6:%u:[%pM] m=%08x h=%d\n"),
+				conn->offloaded,
+				conn->sic->protocol,
+				conn->sic->src_mac,
+				&conn->sic->src_ip,
+				conn->sic->src_port,
+				&conn->sic->dest_ip,
+				conn->sic->dest_port,
+				conn->sic->dest_mac_xlate,
+				conn->sic->mark,
+				conn->hits);
+	}
+	spin_unlock_bh(&sfe_connections_lock);
+
+	return len;
+}
+
+/*
+ * fast_classifier_get_skip_bridge_ingress()
+ */
+static ssize_t fast_classifier_get_skip_bridge_ingress(struct device *dev,
+						       struct device_attribute *attr,
+						       char *buf)
+{
+	return snprintf(buf, (ssize_t)PAGE_SIZE, "%d\n", skip_to_bridge_ingress);
+}
+
+/*
+ * fast_classifier_set_skip_bridge_ingress()
+ */
+static ssize_t fast_classifier_set_skip_bridge_ingress(struct device *dev,
+						       struct device_attribute *attr,
+						       const char *buf, size_t size)
+{
+	long new;
+	int ret;
+
+	ret = kstrtol(buf, 0, &new);
+	if (ret == -EINVAL || ((int)new != new))
+		return -EINVAL;
+
+	skip_to_bridge_ingress = new ? 1 : 0;
+
+	return size;
+}
+
+/*
+ * fast_classifier_get_exceptions
+ * 	dump exception counters
+ */
+static ssize_t fast_classifier_get_exceptions(struct device *dev,
+				     struct device_attribute *attr,
+				     char *buf)
+{
+	int idx, len;
+	struct fast_classifier *sc = &__fsc;
+
+	spin_lock_bh(&sc->lock);
+	for (len = 0, idx = 0; idx < FAST_CL_EXCEPTION_MAX; idx++) {
+		if (sc->exceptions[idx]) {
+			len += snprintf(buf + len, (ssize_t)(PAGE_SIZE - len), "%s = %d\n", fast_classifier_exception_events_string[idx], sc->exceptions[idx]);
+		}
+	}
+	spin_unlock_bh(&sc->lock);
+
+	return len;
+}
+
+/*
+ * sysfs attributes.
+ */
+static const struct device_attribute fast_classifier_attrs[] = {
+	__ATTR(offload_at_pkts, S_IWUSR | S_IRUGO, fast_classifier_get_offload_at_pkts, fast_classifier_set_offload_at_pkts),
+	__ATTR(debug_info, S_IRUGO, fast_classifier_get_debug_info, NULL),
+	__ATTR(skip_to_bridge_ingress, S_IWUSR | S_IRUGO, fast_classifier_get_skip_bridge_ingress, fast_classifier_set_skip_bridge_ingress),
+	__ATTR(exceptions, S_IRUGO, fast_classifier_get_exceptions, NULL),
+};
+
+/*
+ * fast_classifier_init()
+ */
+static int __init fast_classifier_init(void)
+{
+	struct fast_classifier *sc = &__fsc;
+	int result = -1;
+	size_t i, j;
+
+	printk(KERN_ALERT "fast-classifier: starting up\n");
+	DEBUG_INFO("SFE CM init\n");
+
+	hash_init(fc_conn_ht);
+
+	/*
+	 * Create sys/fast_classifier
+	 */
+	sc->sys_fast_classifier = kobject_create_and_add("fast_classifier", NULL);
+	if (!sc->sys_fast_classifier) {
+		DEBUG_ERROR("failed to register fast_classifier\n");
+		goto exit1;
+	}
+
+	for (i = 0; i < ARRAY_SIZE(fast_classifier_attrs); i++) {
+		result = sysfs_create_file(sc->sys_fast_classifier, &fast_classifier_attrs[i].attr);
+		if (result) {
+			DEBUG_ERROR("failed to register %s : %d\n",
+				    fast_classifier_attrs[i].attr.name, result);
+			goto exit2;
+		}
+	}
+
+	sc->dev_notifier.notifier_call = fast_classifier_device_event;
+	sc->dev_notifier.priority = 1;
+	register_netdevice_notifier(&sc->dev_notifier);
+
+	sc->inet_notifier.notifier_call = fast_classifier_inet_event;
+	sc->inet_notifier.priority = 1;
+	register_inetaddr_notifier(&sc->inet_notifier);
+
+	sc->inet6_notifier.notifier_call = fast_classifier_inet6_event;
+	sc->inet6_notifier.priority = 1;
+	register_inet6addr_notifier(&sc->inet6_notifier);
+
+	/*
+	 * Register our netfilter hooks.
+	 */
+	result = nf_register_hooks(fast_classifier_ops_post_routing, ARRAY_SIZE(fast_classifier_ops_post_routing));
+	if (result < 0) {
+		DEBUG_ERROR("can't register nf post routing hook: %d\n", result);
+		goto exit3;
+	}
+
+#ifdef CONFIG_NF_CONNTRACK_EVENTS
+	/*
+	 * Register a notifier hook to get fast notifications of expired connections.
+	 * Note: In CONFIG_NF_CONNTRACK_CHAIN_EVENTS enabled case, nf_conntrack_register_notifier()
+	 * function always returns 0.
+	 */
+
+#ifdef CONFIG_NF_CONNTRACK_CHAIN_EVENTS
+	(void)nf_conntrack_register_notifier(&init_net, &fast_classifier_conntrack_notifier);
+#else
+	result = nf_conntrack_register_notifier(&init_net, &fast_classifier_conntrack_notifier);
+	if (result < 0) {
+		DEBUG_ERROR("can't register nf notifier hook: %d\n", result);
+		goto exit4;
+	}
+#endif
+#endif
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 13, 0))
+	result = genl_register_family_with_ops_groups(&fast_classifier_gnl_family,
+						      fast_classifier_gnl_ops,
+						      fast_classifier_genl_mcgrp);
+	if (result) {
+		DEBUG_ERROR("failed to register genl ops: %d\n", result);
+		goto exit5;
+	}
+#else
+	result = genl_register_family(&fast_classifier_gnl_family);
+	if (result) {
+		printk(KERN_CRIT "unable to register genl family\n");
+		goto exit5;
+	}
+
+	result = genl_register_ops(&fast_classifier_gnl_family, fast_classifier_gnl_ops);
+	if (result) {
+		printk(KERN_CRIT "unable to register ops\n");
+		goto exit6;
+	}
+
+	result = genl_register_mc_group(&fast_classifier_gnl_family,
+					fast_classifier_genl_mcgrp);
+	if (result) {
+		printk(KERN_CRIT "unable to register multicast group\n");
+		goto exit6;
+	}
+#endif
+
+	printk(KERN_ALERT "fast-classifier: registered\n");
+
+	spin_lock_init(&sc->lock);
+
+	/*
+	 * Hook the receive path in the network stack.
+	 */
+	BUG_ON(fast_nat_recv);
+	RCU_INIT_POINTER(fast_nat_recv, fast_classifier_recv);
+
+	/*
+	 * Hook the shortcut sync callback.
+	 */
+	sfe_ipv4_register_sync_rule_callback(fast_classifier_sync_rule);
+	sfe_ipv6_register_sync_rule_callback(fast_classifier_sync_rule);
+	return 0;
+
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(3, 13, 0))
+exit6:
+	genl_unregister_family(&fast_classifier_gnl_family);
+#endif
+
+exit5:
+#ifdef CONFIG_NF_CONNTRACK_EVENTS
+	nf_conntrack_unregister_notifier(&init_net, &fast_classifier_conntrack_notifier);
+
+exit4:
+#endif
+	nf_unregister_hooks(fast_classifier_ops_post_routing, ARRAY_SIZE(fast_classifier_ops_post_routing));
+
+exit3:
+	unregister_inetaddr_notifier(&sc->inet_notifier);
+	unregister_inet6addr_notifier(&sc->inet6_notifier);
+	unregister_netdevice_notifier(&sc->dev_notifier);
+
+exit2:
+	for (j = 0; j < i; j++) {
+		sysfs_remove_file(sc->sys_fast_classifier, &fast_classifier_attrs[j].attr);
+	}
+	kobject_put(sc->sys_fast_classifier);
+
+exit1:
+	return result;
+}
+
+/*
+ * fast_classifier_exit()
+ */
+static void __exit fast_classifier_exit(void)
+{
+	struct fast_classifier *sc = &__fsc;
+	int result = -1;
+
+	DEBUG_INFO("SFE CM exit\n");
+	printk(KERN_ALERT "fast-classifier: shutting down\n");
+
+	/*
+	 * Unregister our sync callback.
+	 */
+	sfe_ipv4_register_sync_rule_callback(NULL);
+	sfe_ipv6_register_sync_rule_callback(NULL);
+
+	/*
+	 * Unregister our receive callback.
+	 */
+	RCU_INIT_POINTER(fast_nat_recv, NULL);
+
+	/*
+	 * Wait for all callbacks to complete.
+	 */
+	rcu_barrier();
+
+	/*
+	 * Destroy all connections.
+	 */
+	sfe_ipv4_destroy_all_rules_for_dev(NULL);
+	sfe_ipv6_destroy_all_rules_for_dev(NULL);
+
+#if (LINUX_VERSION_CODE < KERNEL_VERSION(3, 13, 0))
+	result = genl_unregister_ops(&fast_classifier_gnl_family, fast_classifier_gnl_ops);
+	if (result != 0) {
+		printk(KERN_CRIT "Unable to unreigster genl_ops\n");
+	}
+#endif
+
+	result = genl_unregister_family(&fast_classifier_gnl_family);
+	if (result != 0) {
+		printk(KERN_CRIT "Unable to unreigster genl_family\n");
+	}
+
+#ifdef CONFIG_NF_CONNTRACK_EVENTS
+	nf_conntrack_unregister_notifier(&init_net, &fast_classifier_conntrack_notifier);
+
+#endif
+	nf_unregister_hooks(fast_classifier_ops_post_routing, ARRAY_SIZE(fast_classifier_ops_post_routing));
+
+	unregister_inet6addr_notifier(&sc->inet6_notifier);
+	unregister_inetaddr_notifier(&sc->inet_notifier);
+	unregister_netdevice_notifier(&sc->dev_notifier);
+
+	kobject_put(sc->sys_fast_classifier);
+}
+
+module_init(fast_classifier_init)
+module_exit(fast_classifier_exit)
+
+MODULE_DESCRIPTION("Shortcut Forwarding Engine - Connection Manager");
+MODULE_LICENSE("Dual BSD/GPL");
+
diff --git a/package/lean/shortcut-fe/src/fast-classifier.h b/package/lean/shortcut-fe/src/fast-classifier.h
new file mode 100644
index 0000000000..6b7a18cf6a
--- /dev/null
+++ b/package/lean/shortcut-fe/src/fast-classifier.h
@@ -0,0 +1,57 @@
+/*
+ * User space header to send message to the fast classifier
+ *
+ * Copyright (c) 2013,2016 The Linux Foundation. All rights reserved.
+ * Permission to use, copy, modify, and/or distribute this software for
+ * any purpose with or without fee is hereby granted, provided that the
+ * above copyright notice and this permission notice appear in all copies.
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT
+ * OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#include <linux/if_ether.h>
+
+#define FAST_CLASSIFIER_GENL_VERSION	(1)
+#define FAST_CLASSIFIER_GENL_NAME	"FC"
+#define FAST_CLASSIFIER_GENL_MCGRP	"FC_MCGRP"
+#define FAST_CLASSIFIER_GENL_HDRSIZE	(0)
+
+enum {
+	FAST_CLASSIFIER_A_UNSPEC,
+	FAST_CLASSIFIER_A_TUPLE,
+	__FAST_CLASSIFIER_A_MAX,
+};
+
+#define FAST_CLASSIFIER_A_MAX (__FAST_CLASSIFIER_A_MAX - 1)
+
+enum {
+	FAST_CLASSIFIER_C_UNSPEC,
+	FAST_CLASSIFIER_C_OFFLOAD,
+	FAST_CLASSIFIER_C_OFFLOADED,
+	FAST_CLASSIFIER_C_DONE,
+	__FAST_CLASSIFIER_C_MAX,
+};
+
+#define FAST_CLASSIFIER_C_MAX (__FAST_CLASSIFIER_C_MAX - 1)
+
+struct fast_classifier_tuple {
+	unsigned short ethertype;
+	unsigned char proto;
+	union {
+		struct in_addr in;
+		struct in6_addr in6;
+	} src_saddr;
+	union {
+		struct in_addr in;
+		struct in6_addr in6;
+	} dst_saddr;
+	unsigned short sport;
+	unsigned short dport;
+	unsigned char smac[ETH_ALEN];
+	unsigned char dmac[ETH_ALEN];
+};
diff --git a/package/lean/shortcut-fe/src/nl_classifier_test.c b/package/lean/shortcut-fe/src/nl_classifier_test.c
new file mode 100644
index 0000000000..639417964d
--- /dev/null
+++ b/package/lean/shortcut-fe/src/nl_classifier_test.c
@@ -0,0 +1,281 @@
+/*
+ * Copyright (c) 2016 The Linux Foundation. All rights reserved.
+ * Permission to use, copy, modify, and/or distribute this software for
+ * any purpose with or without fee is hereby granted, provided that the
+ * above copyright notice and this permission notice appear in all copies.
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT
+ * OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#include <netlink/genl/genl.h>
+#include <netlink/genl/ctrl.h>
+#include <errno.h>
+#include <stdio.h>
+#include <signal.h>
+#include <arpa/inet.h>
+
+#define NL_CLASSIFIER_GENL_VERSION	1
+#define NL_CLASSIFIER_GENL_FAMILY	"FC"
+#define NL_CLASSIFIER_GENL_GROUP	"FC_MCGRP"
+#define NL_CLASSIFIER_GENL_HDRSIZE	0
+
+enum NL_CLASSIFIER_CMD {
+	NL_CLASSIFIER_CMD_UNSPEC,
+	NL_CLASSIFIER_CMD_ACCEL,
+	NL_CLASSIFIER_CMD_ACCEL_OK,
+	NL_CLASSIFIER_CMD_CONNECTION_CLOSED,
+	NL_CLASSIFIER_CMD_MAX,
+};
+
+enum NL_CLASSIFIER_ATTR {
+	NL_CLASSIFIER_ATTR_UNSPEC,
+	NL_CLASSIFIER_ATTR_TUPLE,
+	NL_CLASSIFIER_ATTR_MAX,
+};
+
+union nl_classifier_tuple_ip {
+	struct in_addr in;
+	struct in6_addr in6;
+};
+
+struct nl_classifier_tuple {
+	unsigned short af;
+	unsigned char proto;
+	union nl_classifier_tuple_ip src_ip;
+	union nl_classifier_tuple_ip dst_ip;
+	unsigned short sport;
+	unsigned short dport;
+	unsigned char smac[6];
+	unsigned char dmac[6];
+};
+
+struct nl_classifier_instance {
+	struct nl_sock *sock;
+	int family_id;
+	int group_id;
+	int stop;
+};
+
+struct nl_classifier_instance nl_cls_inst;
+
+static struct nla_policy nl_classifier_genl_policy[(NL_CLASSIFIER_ATTR_MAX+1)] = {
+	[NL_CLASSIFIER_ATTR_TUPLE] = { .type = NLA_UNSPEC },
+};
+
+void nl_classifier_dump_nl_tuple(struct nl_classifier_tuple *tuple)
+{
+	char ip_str[64];
+
+	printf("protocol = %s\n", (tuple->proto == IPPROTO_UDP) ? "udp" : ((tuple->proto == IPPROTO_TCP) ? "tcp" : "unknown"));
+	printf("source ip = %s\n", inet_ntop(tuple->af, &tuple->src_ip, ip_str, sizeof(ip_str)));
+	printf("destination ip = %s\n", inet_ntop(tuple->af, &tuple->dst_ip, ip_str, sizeof(ip_str)));
+	printf("source port = %d\n", ntohs(tuple->sport));
+	printf("destination port = %d\n", ntohs(tuple->dport));
+}
+
+int nl_classifier_msg_recv(struct nl_msg *msg, void *arg)
+{
+	struct nlmsghdr *nlh = nlmsg_hdr(msg);
+	struct genlmsghdr *gnlh = nlmsg_data(nlh);
+	struct nlattr *attrs[(NL_CLASSIFIER_ATTR_MAX+1)];
+
+	genlmsg_parse(nlh, NL_CLASSIFIER_GENL_HDRSIZE, attrs, NL_CLASSIFIER_ATTR_MAX, nl_classifier_genl_policy);
+
+	switch (gnlh->cmd) {
+	case NL_CLASSIFIER_CMD_ACCEL_OK:
+		printf("Acceleration successful:\n");
+		nl_classifier_dump_nl_tuple(nla_data(attrs[NL_CLASSIFIER_ATTR_TUPLE]));
+		return NL_OK;
+	case NL_CLASSIFIER_CMD_CONNECTION_CLOSED:
+		printf("Connection is closed:\n");
+		nl_classifier_dump_nl_tuple(nla_data(attrs[NL_CLASSIFIER_ATTR_TUPLE]));
+		return NL_OK;
+	default:
+		printf("nl classifier received unknow message %d\n", gnlh->cmd);
+	}
+
+	return NL_SKIP;
+}
+
+void nl_classifier_offload(struct nl_classifier_instance *inst,
+			   unsigned char proto, unsigned long *src_saddr,
+			   unsigned long *dst_saddr, unsigned short sport,
+			   unsigned short dport, int af)
+{
+	struct nl_msg *msg;
+	int ret;
+	struct nl_classifier_tuple classifier_msg;
+
+	memset(&classifier_msg, 0, sizeof(classifier_msg));
+	classifier_msg.af = af;
+	classifier_msg.proto = proto;
+	memcpy(&classifier_msg.src_ip, src_saddr, (af == AF_INET ? 4 : 16));
+	memcpy(&classifier_msg.dst_ip, dst_saddr, (af == AF_INET ? 4 : 16));
+	classifier_msg.sport = sport;
+	classifier_msg.dport = dport;
+
+	msg = nlmsg_alloc();
+	if (!msg) {
+		printf("Unable to allocate message\n");
+		return;
+	}
+
+	genlmsg_put(msg, NL_AUTO_PID, NL_AUTO_SEQ, inst->family_id,
+		    NL_CLASSIFIER_GENL_HDRSIZE, NLM_F_REQUEST,
+		    NL_CLASSIFIER_CMD_ACCEL, NL_CLASSIFIER_GENL_VERSION);
+	nla_put(msg, NL_CLASSIFIER_ATTR_TUPLE, sizeof(classifier_msg), &classifier_msg);
+
+	ret = nl_send_auto(inst->sock, msg);
+	if (ret < 0) {
+		printf("send netlink message failed.\n");
+		nlmsg_free(msg);
+		return;
+	}
+
+	nlmsg_free(msg);
+	printf("nl classifier offload connection successful\n");
+}
+
+int nl_classifier_init(struct nl_classifier_instance *inst)
+{
+	int ret;
+
+	inst->sock = nl_socket_alloc();
+	if (!inst->sock) {
+		printf("Unable to allocation socket.\n");
+		return -1;
+	}
+	genl_connect(inst->sock);
+
+	inst->family_id = genl_ctrl_resolve(inst->sock, NL_CLASSIFIER_GENL_FAMILY);
+	if (inst->family_id < 0) {
+		printf("Unable to resolve family %s\n", NL_CLASSIFIER_GENL_FAMILY);
+		goto init_failed;
+	}
+
+	inst->group_id = genl_ctrl_resolve_grp(inst->sock, NL_CLASSIFIER_GENL_FAMILY, NL_CLASSIFIER_GENL_GROUP);
+	if (inst->group_id < 0) {
+		printf("Unable to resolve mcast group %s\n", NL_CLASSIFIER_GENL_GROUP);
+		goto init_failed;
+	}
+
+	ret = nl_socket_add_membership(inst->sock, inst->group_id);
+	if (ret < 0) {
+		printf("Unable to add membership\n");
+		goto init_failed;
+	}
+
+	nl_socket_disable_seq_check(inst->sock);
+	nl_socket_modify_cb(inst->sock, NL_CB_VALID, NL_CB_CUSTOM, nl_classifier_msg_recv, NULL);
+
+	printf("nl classifier init successful\n");
+	return 0;
+
+init_failed:
+	if (inst->sock) {
+		nl_close(inst->sock);
+		nl_socket_free(inst->sock);
+		inst->sock = NULL;
+	}
+	return -1;
+}
+
+void nl_classifier_exit(struct nl_classifier_instance *inst)
+{
+	if (inst->sock) {
+		nl_close(inst->sock);
+		nl_socket_free(inst->sock);
+		inst->sock = NULL;
+	}
+	printf("nl classifier exit successful\n");
+}
+
+int nl_classifier_parse_arg(int argc, char *argv[], unsigned char *proto, unsigned long *src_saddr,
+			    unsigned long *dst_saddr, unsigned short *sport, unsigned short *dport, int *af)
+{
+	int ret;
+	unsigned short port;
+
+	if (argc < 7) {
+		printf("help: nl_classifier <v4|v6> <udp|tcp> <source ip> <destination ip> <source port> <destination port>\n");
+		return -1;
+	}
+
+	if (0 == strncmp(argv[1], "v4", 2)) {
+		*af = AF_INET;
+	} else if (0 == strncmp(argv[1], "v6", 2)) {
+		*af = AF_INET6;
+	} else {
+		printf("Address family is not supported");
+		return -1;
+	}
+
+	if (0 == strncmp(argv[2], "udp", 3)) {
+		*proto = IPPROTO_UDP;
+	} else if (0 == strncmp(argv[2], "tcp", 3)) {
+		*proto = IPPROTO_TCP;
+	} else {
+		printf("Protocol is not supported");
+		return -1;
+	}
+
+	ret = inet_pton(*af, argv[3], src_saddr);
+	if (ret <= 0) {
+		printf("source ip has wrong format\n");
+		return -1;
+	}
+
+	ret = inet_pton(*af, argv[4], dst_saddr);
+	if (ret <= 0) {
+		printf("destination ip has wrong format\n");
+		return -1;
+	}
+
+	port = strtol(argv[5], NULL, 0);
+	*sport = htons(port);
+	port = strtol(argv[6], NULL, 0);
+	*dport = htons(port);
+
+	printf("nl classifier parse arguments successful\n");
+	return 0;
+}
+
+int main(int argc, char *argv[])
+{
+	struct nl_classifier_instance *inst = &nl_cls_inst;
+	unsigned char proto;
+	unsigned long src_addr[4];
+	unsigned long dst_addr[4];
+	unsigned short sport;
+	unsigned short dport;
+	int af;
+	int ret;
+
+	ret = nl_classifier_parse_arg(argc, argv, &proto, src_addr, dst_addr, &sport, &dport, &af);
+	if (ret < 0) {
+		printf("Failed to parse arguments\n");
+		return ret;
+	}
+
+	ret = nl_classifier_init(inst);
+	if (ret < 0) {
+		printf("Unable to init generic netlink\n");
+		return ret;
+	}
+
+	nl_classifier_offload(inst, proto, src_addr, dst_addr, sport, dport, af);
+
+	/* main loop to listen on message */
+	while (!inst->stop) {
+		nl_recvmsgs_default(inst->sock);
+	}
+
+	nl_classifier_exit(inst);
+
+	return 0;
+}
diff --git a/package/lean/shortcut-fe/src/sfe.h b/package/lean/shortcut-fe/src/sfe.h
new file mode 100644
index 0000000000..21a1275560
--- /dev/null
+++ b/package/lean/shortcut-fe/src/sfe.h
@@ -0,0 +1,61 @@
+/*
+ * sfe.h
+ *	Shortcut forwarding engine.
+ *
+ * Copyright (c) 2013-2016 The Linux Foundation. All rights reserved.
+ * Permission to use, copy, modify, and/or distribute this software for
+ * any purpose with or without fee is hereby granted, provided that the
+ * above copyright notice and this permission notice appear in all copies.
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT
+ * OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+/*
+ * Debug output verbosity level.
+ */
+#define DEBUG_LEVEL 0
+
+#if (DEBUG_LEVEL < 1)
+#define DEBUG_ERROR(s, ...)
+#else
+#define DEBUG_ERROR(s, ...) \
+do { \
+	printk("%s[%u]: ERROR:", __FILE__, __LINE__); \
+	printk(s, ##__VA_ARGS__); \
+} while (0)
+#endif
+
+#if (DEBUG_LEVEL < 2)
+#define DEBUG_WARN(s, ...)
+#else
+#define DEBUG_WARN(s, ...) \
+do { \
+	printk("%s[%u]: WARN:", __FILE__, __LINE__); \
+	printk(s, ##__VA_ARGS__); \
+} while (0)
+#endif
+
+#if (DEBUG_LEVEL < 3)
+#define DEBUG_INFO(s, ...)
+#else
+#define DEBUG_INFO(s, ...) \
+do { \
+	printk("%s[%u]: INFO:", __FILE__, __LINE__); \
+	printk(s, ##__VA_ARGS__); \
+} while (0)
+#endif
+
+#if (DEBUG_LEVEL < 4)
+#define DEBUG_TRACE(s, ...)
+#else
+#define DEBUG_TRACE(s, ...) \
+do { \
+	printk("%s[%u]: TRACE:", __FILE__, __LINE__); \
+	printk(s, ##__VA_ARGS__); \
+} while (0)
+#endif
diff --git a/package/lean/shortcut-fe/src/sfe_backport.h b/package/lean/shortcut-fe/src/sfe_backport.h
new file mode 100644
index 0000000000..b24f6e67e6
--- /dev/null
+++ b/package/lean/shortcut-fe/src/sfe_backport.h
@@ -0,0 +1,138 @@
+/*
+ * sfe_backport.h
+ *	Shortcut forwarding engine compatible header file.
+ *
+ * Copyright (c) 2014-2016 The Linux Foundation. All rights reserved.
+ * Permission to use, copy, modify, and/or distribute this software for
+ * any purpose with or without fee is hereby granted, provided that the
+ * above copyright notice and this permission notice appear in all copies.
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT
+ * OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#include <linux/version.h>
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 4, 0))
+#define sfe_define_post_routing_hook(FN_NAME, HOOKNUM, OPS, SKB, UNUSED, OUT, OKFN) \
+static unsigned int FN_NAME(void *priv, \
+			    struct sk_buff *SKB, \
+			    const struct nf_hook_state *state)
+#elif (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 13, 0))
+#define sfe_define_post_routing_hook(FN_NAME, HOOKNUM, OPS, SKB, UNUSED, OUT, OKFN) \
+static unsigned int FN_NAME(const struct nf_hook_ops *OPS, \
+			    struct sk_buff *SKB, \
+			    const struct net_device *UNUSED, \
+			    const struct net_device *OUT, \
+			    int (*OKFN)(struct sk_buff *))
+#else
+#define sfe_define_post_routing_hook(FN_NAME, HOOKNUM, OPS, SKB, UNUSED, OUT, OKFN) \
+static unsigned int FN_NAME(unsigned int HOOKNUM, \
+			    struct sk_buff *SKB, \
+			    const struct net_device *UNUSED, \
+			    const struct net_device *OUT, \
+			    int (*OKFN)(struct sk_buff *))
+#endif
+
+#define sfe_cm_ipv4_post_routing_hook(HOOKNUM, OPS, SKB, UNUSED, OUT, OKFN) \
+	sfe_define_post_routing_hook(__sfe_cm_ipv4_post_routing_hook, HOOKNUM, OPS, SKB, UNUSED, OUT, OKFN)
+#define sfe_cm_ipv6_post_routing_hook(HOOKNUM, OPS, SKB, UNUSED, OUT, OKFN) \
+	sfe_define_post_routing_hook(__sfe_cm_ipv6_post_routing_hook, HOOKNUM, OPS, SKB, UNUSED, OUT, OKFN)
+#define fast_classifier_ipv4_post_routing_hook(HOOKNUM, OPS, SKB, UNUSED, OUT, OKFN) \
+	sfe_define_post_routing_hook(__fast_classifier_ipv4_post_routing_hook, HOOKNUM, OPS, SKB, UNUSED, OUT, OKFN)
+#define fast_classifier_ipv6_post_routing_hook(HOOKNUM, OPS, SKB, UNUSED, OUT, OKFN) \
+	sfe_define_post_routing_hook(__fast_classifier_ipv6_post_routing_hook, HOOKNUM, OPS, SKB, UNUSED, OUT, OKFN)
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 4, 0))
+#define SFE_IPV4_NF_POST_ROUTING_HOOK(fn) \
+	{						\
+		.hook = fn,				\
+		.pf = NFPROTO_IPV4,			\
+		.hooknum = NF_INET_POST_ROUTING,	\
+		.priority = NF_IP_PRI_NAT_SRC + 1,	\
+	}
+#else
+#define SFE_IPV4_NF_POST_ROUTING_HOOK(fn) \
+	{						\
+		.hook = fn,				\
+		.owner = THIS_MODULE,			\
+		.pf = NFPROTO_IPV4,			\
+		.hooknum = NF_INET_POST_ROUTING,	\
+		.priority = NF_IP_PRI_NAT_SRC + 1,	\
+	}
+#endif
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 4, 0))
+#define SFE_IPV6_NF_POST_ROUTING_HOOK(fn) \
+	{						\
+		.hook = fn,				\
+		.pf = NFPROTO_IPV6,			\
+		.hooknum = NF_INET_POST_ROUTING,	\
+		.priority = NF_IP_PRI_NAT_SRC + 1,	\
+	}
+#else
+#define SFE_IPV6_NF_POST_ROUTING_HOOK(fn) \
+	{						\
+		.hook = fn,				\
+		.owner = THIS_MODULE,			\
+		.pf = NFPROTO_IPV6,			\
+		.hooknum = NF_INET_POST_ROUTING,	\
+		.priority = NF_IP6_PRI_NAT_SRC + 1,	\
+	}
+#endif
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 3, 0))
+#define SFE_NF_CT_DEFAULT_ZONE (&nf_ct_zone_dflt)
+#else
+#define SFE_NF_CT_DEFAULT_ZONE NF_CT_DEFAULT_ZONE
+#endif
+
+/*
+ * sfe_dev_get_master
+ * 	get master of bridge port, and hold it
+ */
+static inline struct net_device *sfe_dev_get_master(struct net_device *dev)
+{
+	struct net_device *master;
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 9, 0))
+	rcu_read_lock();
+	master = netdev_master_upper_dev_get_rcu(dev);
+	if (master)
+		dev_hold(master);
+
+	rcu_read_unlock();
+#else
+	master = dev->master;
+	if (master)
+		dev_hold(master);
+#endif
+	return master;
+}
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 11, 0))
+#define SFE_DEV_EVENT_PTR(PTR) netdev_notifier_info_to_dev(PTR)
+#else
+#define SFE_DEV_EVENT_PTR(PTR) (struct net_device *)(PTR)
+#endif
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 13, 0))
+#define SFE_NF_CONN_ACCT(NM) struct nf_conn_acct *NM
+#else
+#define SFE_NF_CONN_ACCT(NM) struct nf_conn_counter *NM
+#endif
+
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 13, 0))
+#define SFE_ACCT_COUNTER(NM) ((NM)->counter)
+#else
+#define SFE_ACCT_COUNTER(NM) (NM)
+#endif
+
+#define sfe_hash_for_each_possible(name, obj, member, key) \
+	hash_for_each_possible(name, obj, member, key)
+
+#define sfe_hash_for_each(name, bkt, obj, member) \
+	hash_for_each(name, bkt, obj, member)
diff --git a/package/lean/shortcut-fe/src/sfe_cm.c b/package/lean/shortcut-fe/src/sfe_cm.c
new file mode 100644
index 0000000000..6d3e21085a
--- /dev/null
+++ b/package/lean/shortcut-fe/src/sfe_cm.c
@@ -0,0 +1,1203 @@
+/*
+ * sfe-cm.c
+ *	Shortcut forwarding engine connection manager.
+ *
+ * Copyright (c) 2013-2016 The Linux Foundation. All rights reserved.
+ * Permission to use, copy, modify, and/or distribute this software for
+ * any purpose with or without fee is hereby granted, provided that the
+ * above copyright notice and this permission notice appear in all copies.
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT
+ * OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#include <linux/module.h>
+#include <linux/sysfs.h>
+#include <linux/skbuff.h>
+#include <net/route.h>
+#include <net/ip6_route.h>
+#include <net/addrconf.h>
+#include <net/dsfield.h>
+#include <linux/inetdevice.h>
+#include <linux/netfilter_bridge.h>
+#include <linux/netfilter_ipv6.h>
+#include <net/netfilter/nf_conntrack_acct.h>
+#include <net/netfilter/nf_conntrack_helper.h>
+#include <net/netfilter/nf_conntrack_zones.h>
+#include <net/netfilter/nf_conntrack_core.h>
+#include <net/netfilter/nf_conntrack_timeout.h>
+#include <linux/netfilter/xt_dscp.h>
+#include <linux/if_bridge.h>
+#include <net/pkt_sched.h>
+
+#include "sfe.h"
+#include "sfe_cm.h"
+#include "sfe_backport.h"
+
+typedef enum sfe_cm_exception {
+	SFE_CM_EXCEPTION_PACKET_BROADCAST,
+	SFE_CM_EXCEPTION_PACKET_MULTICAST,
+	SFE_CM_EXCEPTION_NO_IIF,
+	SFE_CM_EXCEPTION_NO_CT,
+	SFE_CM_EXCEPTION_CT_NO_TRACK,
+	SFE_CM_EXCEPTION_CT_NO_CONFIRM,
+	SFE_CM_EXCEPTION_CT_IS_ALG,
+	SFE_CM_EXCEPTION_IS_IPV4_MCAST,
+	SFE_CM_EXCEPTION_IS_IPV6_MCAST,
+	SFE_CM_EXCEPTION_TCP_NOT_ASSURED,
+	SFE_CM_EXCEPTION_TCP_NOT_ESTABLISHED,
+	SFE_CM_EXCEPTION_UNKNOW_PROTOCOL,
+	SFE_CM_EXCEPTION_NO_SRC_DEV,
+	SFE_CM_EXCEPTION_NO_SRC_XLATE_DEV,
+	SFE_CM_EXCEPTION_NO_DEST_DEV,
+	SFE_CM_EXCEPTION_NO_DEST_XLATE_DEV,
+	SFE_CM_EXCEPTION_NO_BRIDGE,
+	SFE_CM_EXCEPTION_LOCAL_OUT,
+	SFE_CM_EXCEPTION_MAX
+} sfe_cm_exception_t;
+
+static char *sfe_cm_exception_events_string[SFE_CM_EXCEPTION_MAX] = {
+	"PACKET_BROADCAST",
+	"PACKET_MULTICAST",
+	"NO_IIF",
+	"NO_CT",
+	"CT_NO_TRACK",
+	"CT_NO_CONFIRM",
+	"CT_IS_ALG",
+	"IS_IPV4_MCAST",
+	"IS_IPV6_MCAST",
+	"TCP_NOT_ASSURED",
+	"TCP_NOT_ESTABLISHED",
+	"UNKNOW_PROTOCOL",
+	"NO_SRC_DEV",
+	"NO_SRC_XLATE_DEV",
+	"NO_DEST_DEV",
+	"NO_DEST_XLATE_DEV",
+	"NO_BRIDGE",
+	"LOCAL_OUT"
+};
+
+/*
+ * Per-module structure.
+ */
+struct sfe_cm {
+	spinlock_t lock;		/* Lock for SMP correctness */
+
+	/*
+	 * Control state.
+	 */
+	struct kobject *sys_sfe_cm;	/* sysfs linkage */
+
+	/*
+	 * Callback notifiers.
+	 */
+	struct notifier_block dev_notifier;	/* Device notifier */
+	struct notifier_block inet_notifier;	/* IPv4 notifier */
+	struct notifier_block inet6_notifier;	/* IPv6 notifier */
+	u32 exceptions[SFE_CM_EXCEPTION_MAX];
+};
+
+static struct sfe_cm __sc;
+
+
+/*
+ * sfe_cm_incr_exceptions()
+ *	increase an exception counter.
+ */
+static inline void sfe_cm_incr_exceptions(sfe_cm_exception_t except)
+{
+	struct sfe_cm *sc = &__sc;
+
+	spin_lock_bh(&sc->lock);
+	sc->exceptions[except]++;
+	spin_unlock_bh(&sc->lock);
+}
+
+/*
+ * sfe_cm_recv()
+ *	Handle packet receives.
+ *
+ * Returns 1 if the packet is forwarded or 0 if it isn't.
+ */
+static int sfe_cm_recv(struct sk_buff *skb)
+{
+	struct net_device *dev;
+
+	/*
+	 * We know that for the vast majority of packets we need the transport
+	 * layer header so we may as well start to fetch it now!
+	 */
+	prefetch(skb->data + 32);
+	barrier();
+
+	dev = skb->dev;
+
+#ifdef CONFIG_NET_CLS_ACT
+	/*
+	 * If ingress Qdisc configured, and packet not processed by ingress Qdisc yet
+	 * We cannot accelerate this packet.
+	 */
+	if (dev->ingress_queue && !(skb->tc_verd & TC_NCLS)) {
+		return 0;
+	}
+#endif
+
+	/*
+	 * We're only interested in IPv4 and IPv6 packets.
+	 */
+	if (likely(htons(ETH_P_IP) == skb->protocol)) {
+		struct in_device *in_dev;
+
+		/*
+		 * Does our input device support IP processing?
+		 */
+		in_dev = (struct in_device *)dev->ip_ptr;
+		if (unlikely(!in_dev)) {
+			DEBUG_TRACE("no IP processing for device: %s\n", dev->name);
+			return 0;
+		}
+
+		/*
+		 * Does it have an IP address?  If it doesn't then we can't do anything
+		 * interesting here!
+		 */
+		if (unlikely(!in_dev->ifa_list)) {
+			DEBUG_TRACE("no IP address for device: %s\n", dev->name);
+			return 0;
+		}
+
+		return sfe_ipv4_recv(dev, skb);
+	}
+
+	if (likely(htons(ETH_P_IPV6) == skb->protocol)) {
+		struct inet6_dev *in_dev;
+
+		/*
+		 * Does our input device support IPv6 processing?
+		 */
+		in_dev = (struct inet6_dev *)dev->ip6_ptr;
+		if (unlikely(!in_dev)) {
+			DEBUG_TRACE("no IPv6 processing for device: %s\n", dev->name);
+			return 0;
+		}
+
+		/*
+		 * Does it have an IPv6 address?  If it doesn't then we can't do anything
+		 * interesting here!
+		 */
+		if (unlikely(list_empty(&in_dev->addr_list))) {
+			DEBUG_TRACE("no IPv6 address for device: %s\n", dev->name);
+			return 0;
+		}
+
+		return sfe_ipv6_recv(dev, skb);
+	}
+
+	DEBUG_TRACE("not IP packet\n");
+	return 0;
+}
+
+/*
+ * sfe_cm_find_dev_and_mac_addr()
+ *	Find the device and MAC address for a given IPv4/IPv6 address.
+ *
+ * Returns true if we find the device and MAC address, otherwise false.
+ *
+ * We look up the rtable entry for the address and, from its neighbour
+ * structure, obtain the hardware address.  This means this function also
+ * works if the neighbours are routers too.
+ */
+static bool sfe_cm_find_dev_and_mac_addr(sfe_ip_addr_t *addr, struct net_device **dev, u8 *mac_addr, int is_v4)
+{
+	struct neighbour *neigh;
+	struct rtable *rt;
+	struct rt6_info *rt6;
+	struct dst_entry *dst;
+	struct net_device *mac_dev;
+
+	/*
+	 * Look up the rtable entry for the IP address then get the hardware
+	 * address from its neighbour structure.  This means this work when the
+	 * neighbours are routers too.
+	 */
+	if (likely(is_v4)) {
+		rt = ip_route_output(&init_net, addr->ip, 0, 0, 0);
+		if (unlikely(IS_ERR(rt))) {
+			goto ret_fail;
+		}
+
+		dst = (struct dst_entry *)rt;
+	} else {
+		rt6 = rt6_lookup(&init_net, (struct in6_addr *)addr->ip6, 0, 0, 0);
+		if (!rt6) {
+			goto ret_fail;
+		}
+
+		dst = (struct dst_entry *)rt6;
+	}
+
+	rcu_read_lock();
+	neigh = dst_neigh_lookup(dst, addr);
+	if (unlikely(!neigh)) {
+		rcu_read_unlock();
+		dst_release(dst);
+		goto ret_fail;
+	}
+
+	if (unlikely(!(neigh->nud_state & NUD_VALID))) {
+		rcu_read_unlock();
+		neigh_release(neigh);
+		dst_release(dst);
+		goto ret_fail;
+	}
+
+	mac_dev = neigh->dev;
+	if (!mac_dev) {
+		rcu_read_unlock();
+		neigh_release(neigh);
+		dst_release(dst);
+		goto ret_fail;
+	}
+
+	memcpy(mac_addr, neigh->ha, (size_t)mac_dev->addr_len);
+
+	dev_hold(mac_dev);
+	*dev = mac_dev;
+	rcu_read_unlock();
+	neigh_release(neigh);
+	dst_release(dst);
+
+	return true;
+
+ret_fail:
+	if (is_v4) {
+		DEBUG_TRACE("failed to find MAC address for IP: %pI4\n", &addr->ip);
+
+	} else {
+		DEBUG_TRACE("failed to find MAC address for IP: %pI6\n", addr->ip6);
+	}
+
+	return false;
+}
+
+/*
+ * sfe_cm_post_routing()
+ *	Called for packets about to leave the box - either locally generated or forwarded from another interface
+ */
+static unsigned int sfe_cm_post_routing(struct sk_buff *skb, int is_v4)
+{
+	struct sfe_connection_create sic;
+	struct net_device *in;
+	struct nf_conn *ct;
+	enum ip_conntrack_info ctinfo;
+	struct net_device *dev;
+	struct net_device *src_dev;
+	struct net_device *dest_dev;
+	struct net_device *src_br_dev = NULL;
+	struct net_device *dest_br_dev = NULL;
+	struct nf_conntrack_tuple orig_tuple;
+	struct nf_conntrack_tuple reply_tuple;
+	SFE_NF_CONN_ACCT(acct);
+
+	/*
+	 * Don't process broadcast or multicast packets.
+	 */
+	if (unlikely(skb->pkt_type == PACKET_BROADCAST)) {
+		sfe_cm_incr_exceptions(SFE_CM_EXCEPTION_PACKET_BROADCAST);
+		DEBUG_TRACE("broadcast, ignoring\n");
+		return NF_ACCEPT;
+	}
+	if (unlikely(skb->pkt_type == PACKET_MULTICAST)) {
+		sfe_cm_incr_exceptions(SFE_CM_EXCEPTION_PACKET_MULTICAST);
+		DEBUG_TRACE("multicast, ignoring\n");
+		return NF_ACCEPT;
+	}
+
+#ifdef CONFIG_XFRM
+	/*
+	 * Packet to xfrm for encapsulation, we can't process it
+	 */
+	if (unlikely(skb_dst(skb)->xfrm)) {
+		DEBUG_TRACE("packet to xfrm, ignoring\n");
+		return NF_ACCEPT;
+	}
+#endif
+
+	/*
+	 * Don't process locally generated packets.
+	 */
+	if (skb->sk) {
+		sfe_cm_incr_exceptions(SFE_CM_EXCEPTION_LOCAL_OUT);
+		DEBUG_TRACE("skip local out packet\n");
+		return NF_ACCEPT;
+	}
+
+	/*
+	 * Don't process packets that are not being forwarded.
+	 */
+	in = dev_get_by_index(&init_net, skb->skb_iif);
+	if (!in) {
+		sfe_cm_incr_exceptions(SFE_CM_EXCEPTION_NO_IIF);
+		DEBUG_TRACE("packet not forwarding\n");
+		return NF_ACCEPT;
+	}
+
+	dev_put(in);
+
+	/*
+	 * Don't process packets that aren't being tracked by conntrack.
+	 */
+	ct = nf_ct_get(skb, &ctinfo);
+	if (unlikely(!ct)) {
+		sfe_cm_incr_exceptions(SFE_CM_EXCEPTION_NO_CT);
+		DEBUG_TRACE("no conntrack connection, ignoring\n");
+		return NF_ACCEPT;
+	}
+
+	/*
+	 * Don't process untracked connections.
+	 */
+	if (unlikely(nf_ct_is_untracked(ct))) {
+		sfe_cm_incr_exceptions(SFE_CM_EXCEPTION_CT_NO_TRACK);
+		DEBUG_TRACE("untracked connection\n");
+		return NF_ACCEPT;
+	}
+
+	/*
+	 * Unconfirmed connection may be dropped by Linux at the final step,
+	 * So we don't process unconfirmed connections.
+	 */
+	if (!nf_ct_is_confirmed(ct)) {
+		sfe_cm_incr_exceptions(SFE_CM_EXCEPTION_CT_NO_CONFIRM);
+		DEBUG_TRACE("unconfirmed connection\n");
+		return NF_ACCEPT;
+	}
+
+	/*
+	 * Don't process connections that require support from a 'helper' (typically a NAT ALG).
+	 */
+	if (unlikely(nfct_help(ct))) {
+		sfe_cm_incr_exceptions(SFE_CM_EXCEPTION_CT_IS_ALG);
+		DEBUG_TRACE("connection has helper\n");
+		return NF_ACCEPT;
+	}
+
+	/*
+	 * Check if the acceleration of a flow could be rejected quickly.
+	 */
+	acct = nf_conn_acct_find(ct);
+	if (acct) {
+		long long packets = atomic64_read(&SFE_ACCT_COUNTER(acct)[CTINFO2DIR(ctinfo)].packets);
+		if ((packets > 0xff) && (packets & 0xff)) {
+			/*
+			 * Connection hits slow path at least 256 times, so it must be not able to accelerate.
+			 * But we also give it a chance to walk through ECM every 256 packets
+			 */
+			return NF_ACCEPT;
+		}
+	}
+
+	/*
+	 * Look up the details of our connection in conntrack.
+	 *
+	 * Note that the data we get from conntrack is for the "ORIGINAL" direction
+	 * but our packet may actually be in the "REPLY" direction.
+	 */
+	orig_tuple = ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple;
+	reply_tuple = ct->tuplehash[IP_CT_DIR_REPLY].tuple;
+	sic.protocol = (s32)orig_tuple.dst.protonum;
+
+	sic.flags = 0;
+
+	/*
+	 * Get addressing information, non-NAT first
+	 */
+	if (likely(is_v4)) {
+		u32 dscp;
+
+		sic.src_ip.ip = (__be32)orig_tuple.src.u3.ip;
+		sic.dest_ip.ip = (__be32)orig_tuple.dst.u3.ip;
+
+		if (ipv4_is_multicast(sic.src_ip.ip) || ipv4_is_multicast(sic.dest_ip.ip)) {
+			sfe_cm_incr_exceptions(SFE_CM_EXCEPTION_IS_IPV4_MCAST);
+			DEBUG_TRACE("multicast address\n");
+			return NF_ACCEPT;
+		}
+
+		/*
+		 * NAT'ed addresses - note these are as seen from the 'reply' direction
+		 * When NAT does not apply to this connection these will be identical to the above.
+		 */
+		sic.src_ip_xlate.ip = (__be32)reply_tuple.dst.u3.ip;
+		sic.dest_ip_xlate.ip = (__be32)reply_tuple.src.u3.ip;
+
+		dscp = ipv4_get_dsfield(ip_hdr(skb)) >> XT_DSCP_SHIFT;
+		if (dscp) {
+			sic.dest_dscp = dscp;
+			sic.src_dscp = sic.dest_dscp;
+			sic.flags |= SFE_CREATE_FLAG_REMARK_DSCP;
+		}
+	} else {
+		u32 dscp;
+
+		sic.src_ip.ip6[0] = *((struct sfe_ipv6_addr *)&orig_tuple.src.u3.in6);
+		sic.dest_ip.ip6[0] = *((struct sfe_ipv6_addr *)&orig_tuple.dst.u3.in6);
+
+		if (ipv6_addr_is_multicast((struct in6_addr *)sic.src_ip.ip6) ||
+		    ipv6_addr_is_multicast((struct in6_addr *)sic.dest_ip.ip6)) {
+			sfe_cm_incr_exceptions(SFE_CM_EXCEPTION_IS_IPV6_MCAST);
+			DEBUG_TRACE("multicast address\n");
+			return NF_ACCEPT;
+		}
+
+		/*
+		 * NAT'ed addresses - note these are as seen from the 'reply' direction
+		 * When NAT does not apply to this connection these will be identical to the above.
+		 */
+		sic.src_ip_xlate.ip6[0] = *((struct sfe_ipv6_addr *)&reply_tuple.dst.u3.in6);
+		sic.dest_ip_xlate.ip6[0] = *((struct sfe_ipv6_addr *)&reply_tuple.src.u3.in6);
+
+		dscp = ipv6_get_dsfield(ipv6_hdr(skb)) >> XT_DSCP_SHIFT;
+		if (dscp) {
+			sic.dest_dscp = dscp;
+			sic.src_dscp = sic.dest_dscp;
+			sic.flags |= SFE_CREATE_FLAG_REMARK_DSCP;
+		}
+	}
+
+	switch (sic.protocol) {
+	case IPPROTO_TCP:
+		sic.src_port = orig_tuple.src.u.tcp.port;
+		sic.dest_port = orig_tuple.dst.u.tcp.port;
+		sic.src_port_xlate = reply_tuple.dst.u.tcp.port;
+		sic.dest_port_xlate = reply_tuple.src.u.tcp.port;
+		sic.src_td_window_scale = ct->proto.tcp.seen[0].td_scale;
+		sic.src_td_max_window = ct->proto.tcp.seen[0].td_maxwin;
+		sic.src_td_end = ct->proto.tcp.seen[0].td_end;
+		sic.src_td_max_end = ct->proto.tcp.seen[0].td_maxend;
+		sic.dest_td_window_scale = ct->proto.tcp.seen[1].td_scale;
+		sic.dest_td_max_window = ct->proto.tcp.seen[1].td_maxwin;
+		sic.dest_td_end = ct->proto.tcp.seen[1].td_end;
+		sic.dest_td_max_end = ct->proto.tcp.seen[1].td_maxend;
+
+		if (nf_ct_tcp_no_window_check
+		    || (ct->proto.tcp.seen[0].flags & IP_CT_TCP_FLAG_BE_LIBERAL)
+		    || (ct->proto.tcp.seen[1].flags & IP_CT_TCP_FLAG_BE_LIBERAL)) {
+			sic.flags |= SFE_CREATE_FLAG_NO_SEQ_CHECK;
+		}
+
+		/*
+		 * Don't try to manage a non-established connection.
+		 */
+		if (!test_bit(IPS_ASSURED_BIT, &ct->status)) {
+			sfe_cm_incr_exceptions(SFE_CM_EXCEPTION_TCP_NOT_ASSURED);
+			DEBUG_TRACE("non-established connection\n");
+			return NF_ACCEPT;
+		}
+
+		/*
+		 * If the connection is shutting down do not manage it.
+		 * state can not be SYN_SENT, SYN_RECV because connection is assured
+		 * Not managed states: FIN_WAIT, CLOSE_WAIT, LAST_ACK, TIME_WAIT, CLOSE.
+		 */
+		spin_lock_bh(&ct->lock);
+		if (ct->proto.tcp.state != TCP_CONNTRACK_ESTABLISHED) {
+			spin_unlock_bh(&ct->lock);
+			sfe_cm_incr_exceptions(SFE_CM_EXCEPTION_TCP_NOT_ESTABLISHED);
+			DEBUG_TRACE("connection in termination state: %#x, s: %pI4:%u, d: %pI4:%u\n",
+				    ct->proto.tcp.state, &sic.src_ip, ntohs(sic.src_port),
+				    &sic.dest_ip, ntohs(sic.dest_port));
+			return NF_ACCEPT;
+		}
+		spin_unlock_bh(&ct->lock);
+		break;
+
+	case IPPROTO_UDP:
+		sic.src_port = orig_tuple.src.u.udp.port;
+		sic.dest_port = orig_tuple.dst.u.udp.port;
+		sic.src_port_xlate = reply_tuple.dst.u.udp.port;
+		sic.dest_port_xlate = reply_tuple.src.u.udp.port;
+		break;
+
+	default:
+		sfe_cm_incr_exceptions(SFE_CM_EXCEPTION_UNKNOW_PROTOCOL);
+		DEBUG_TRACE("unhandled protocol %d\n", sic.protocol);
+		return NF_ACCEPT;
+	}
+
+#ifdef CONFIG_XFRM
+	sic.original_accel = 1;
+	sic.reply_accel = 1;
+
+	/*
+	 * For packets de-capsulated from xfrm, we still can accelerate it
+	 * on the direction we just received the packet.
+	 */
+	if (unlikely(skb->sp)) {
+		if (sic.protocol == IPPROTO_TCP &&
+		    !(sic.flags & SFE_CREATE_FLAG_NO_SEQ_CHECK)) {
+			return NF_ACCEPT;
+		}
+
+		if (CTINFO2DIR(ctinfo) == IP_CT_DIR_ORIGINAL) {
+			sic.reply_accel = 0;
+		} else {
+			sic.original_accel = 0;
+		}
+	}
+#endif
+
+	/*
+	 * Get QoS information
+	 */
+	if (skb->priority) {
+		sic.dest_priority = skb->priority;
+		sic.src_priority = sic.dest_priority;
+		sic.flags |= SFE_CREATE_FLAG_REMARK_PRIORITY;
+	}
+
+	/*
+	 * Get the net device and MAC addresses that correspond to the various source and
+	 * destination host addresses.
+	 */
+	if (!sfe_cm_find_dev_and_mac_addr(&sic.src_ip, &src_dev, sic.src_mac, is_v4)) {
+		sfe_cm_incr_exceptions(SFE_CM_EXCEPTION_NO_SRC_DEV);
+		return NF_ACCEPT;
+	}
+
+	if (!sfe_cm_find_dev_and_mac_addr(&sic.src_ip_xlate, &dev, sic.src_mac_xlate, is_v4)) {
+		sfe_cm_incr_exceptions(SFE_CM_EXCEPTION_NO_SRC_XLATE_DEV);
+		goto done1;
+	}
+
+	dev_put(dev);
+
+	if (!sfe_cm_find_dev_and_mac_addr(&sic.dest_ip, &dev, sic.dest_mac, is_v4)) {
+		sfe_cm_incr_exceptions(SFE_CM_EXCEPTION_NO_DEST_DEV);
+		goto done1;
+	}
+
+	dev_put(dev);
+
+	if (!sfe_cm_find_dev_and_mac_addr(&sic.dest_ip_xlate, &dest_dev, sic.dest_mac_xlate, is_v4)) {
+		sfe_cm_incr_exceptions(SFE_CM_EXCEPTION_NO_DEST_XLATE_DEV);
+		goto done1;
+	}
+
+	/*
+	 * Our devices may actually be part of a bridge interface.  If that's
+	 * the case then find the bridge interface instead.
+	 */
+	if (src_dev->priv_flags & IFF_BRIDGE_PORT) {
+		src_br_dev = sfe_dev_get_master(src_dev);
+		if (!src_br_dev) {
+			sfe_cm_incr_exceptions(SFE_CM_EXCEPTION_NO_BRIDGE);
+			DEBUG_TRACE("no bridge found for: %s\n", src_dev->name);
+			goto done2;
+		}
+
+		src_dev = src_br_dev;
+	}
+
+	if (dest_dev->priv_flags & IFF_BRIDGE_PORT) {
+		dest_br_dev = sfe_dev_get_master(dest_dev);
+		if (!dest_br_dev) {
+			sfe_cm_incr_exceptions(SFE_CM_EXCEPTION_NO_BRIDGE);
+			DEBUG_TRACE("no bridge found for: %s\n", dest_dev->name);
+			goto done3;
+		}
+
+		dest_dev = dest_br_dev;
+	}
+
+	sic.src_dev = src_dev;
+	sic.dest_dev = dest_dev;
+
+	sic.src_mtu = src_dev->mtu;
+	sic.dest_mtu = dest_dev->mtu;
+	sic.mark = skb->mark;
+	if (likely(is_v4)) {
+		sfe_ipv4_create_rule(&sic);
+	} else {
+		sfe_ipv6_create_rule(&sic);
+	}
+
+	/*
+	 * If we had bridge ports then release them too.
+	 */
+	if (dest_br_dev) {
+		dev_put(dest_br_dev);
+	}
+
+done3:
+	if (src_br_dev) {
+		dev_put(src_br_dev);
+	}
+
+done2:
+	dev_put(dest_dev);
+
+done1:
+	dev_put(src_dev);
+
+	return NF_ACCEPT;
+}
+
+/*
+ * sfe_cm_ipv4_post_routing_hook()
+ *	Called for packets about to leave the box - either locally generated or forwarded from another interface
+ */
+sfe_cm_ipv4_post_routing_hook(hooknum, ops, skb, in_unused, out, okfn)
+{
+	return sfe_cm_post_routing(skb, true);
+}
+
+/*
+ * sfe_cm_ipv6_post_routing_hook()
+ *	Called for packets about to leave the box - either locally generated or forwarded from another interface
+ */
+sfe_cm_ipv6_post_routing_hook(hooknum, ops, skb, in_unused, out, okfn)
+{
+	return sfe_cm_post_routing(skb, false);
+}
+
+#ifdef CONFIG_NF_CONNTRACK_EVENTS
+/*
+ * sfe_cm_conntrack_event()
+ *	Callback event invoked when a conntrack connection's state changes.
+ */
+#ifdef CONFIG_NF_CONNTRACK_CHAIN_EVENTS
+static int sfe_cm_conntrack_event(struct notifier_block *this,
+				  unsigned long events, void *ptr)
+#else
+static int sfe_cm_conntrack_event(unsigned int events, struct nf_ct_event *item)
+#endif
+{
+#ifdef CONFIG_NF_CONNTRACK_CHAIN_EVENTS
+	struct nf_ct_event *item = ptr;
+#endif
+	struct sfe_connection_destroy sid;
+	struct nf_conn *ct = item->ct;
+	struct nf_conntrack_tuple orig_tuple;
+
+	/*
+	 * If we don't have a conntrack entry then we're done.
+	 */
+	if (unlikely(!ct)) {
+		DEBUG_WARN("no ct in conntrack event callback\n");
+		return NOTIFY_DONE;
+	}
+
+	/*
+	 * If this is an untracked connection then we can't have any state either.
+	 */
+	if (unlikely(nf_ct_is_untracked(ct))) {
+		DEBUG_TRACE("ignoring untracked conn\n");
+		return NOTIFY_DONE;
+	}
+
+	/*
+	 * We're only interested in destroy events.
+	 */
+	if (unlikely(!(events & (1 << IPCT_DESTROY)))) {
+		DEBUG_TRACE("ignoring non-destroy event\n");
+		return NOTIFY_DONE;
+	}
+
+	orig_tuple = ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple;
+	sid.protocol = (s32)orig_tuple.dst.protonum;
+
+	/*
+	 * Extract information from the conntrack connection.  We're only interested
+	 * in nominal connection information (i.e. we're ignoring any NAT information).
+	 */
+	switch (sid.protocol) {
+	case IPPROTO_TCP:
+		sid.src_port = orig_tuple.src.u.tcp.port;
+		sid.dest_port = orig_tuple.dst.u.tcp.port;
+		break;
+
+	case IPPROTO_UDP:
+		sid.src_port = orig_tuple.src.u.udp.port;
+		sid.dest_port = orig_tuple.dst.u.udp.port;
+		break;
+
+	default:
+		DEBUG_TRACE("unhandled protocol: %d\n", sid.protocol);
+		return NOTIFY_DONE;
+	}
+
+	if (likely(nf_ct_l3num(ct) == AF_INET)) {
+		sid.src_ip.ip = (__be32)orig_tuple.src.u3.ip;
+		sid.dest_ip.ip = (__be32)orig_tuple.dst.u3.ip;
+
+		sfe_ipv4_destroy_rule(&sid);
+	} else if (likely(nf_ct_l3num(ct) == AF_INET6)) {
+		sid.src_ip.ip6[0] = *((struct sfe_ipv6_addr *)&orig_tuple.src.u3.in6);
+		sid.dest_ip.ip6[0] = *((struct sfe_ipv6_addr *)&orig_tuple.dst.u3.in6);
+
+		sfe_ipv6_destroy_rule(&sid);
+	} else {
+		DEBUG_TRACE("ignoring non-IPv4 and non-IPv6 connection\n");
+	}
+
+	return NOTIFY_DONE;
+}
+
+/*
+ * Netfilter conntrack event system to monitor connection tracking changes
+ */
+#ifdef CONFIG_NF_CONNTRACK_CHAIN_EVENTS
+static struct notifier_block sfe_cm_conntrack_notifier = {
+	.notifier_call = sfe_cm_conntrack_event,
+};
+#else
+static struct nf_ct_event_notifier sfe_cm_conntrack_notifier = {
+	.fcn = sfe_cm_conntrack_event,
+};
+#endif
+#endif
+
+/*
+ * Structure to establish a hook into the post routing netfilter point - this
+ * will pick up local outbound and packets going from one interface to another.
+ *
+ * Note: see include/linux/netfilter_ipv4.h for info related to priority levels.
+ * We want to examine packets after NAT translation and any ALG processing.
+ */
+static struct nf_hook_ops sfe_cm_ops_post_routing[] __read_mostly = {
+	SFE_IPV4_NF_POST_ROUTING_HOOK(__sfe_cm_ipv4_post_routing_hook),
+	SFE_IPV6_NF_POST_ROUTING_HOOK(__sfe_cm_ipv6_post_routing_hook),
+};
+
+/*
+ * sfe_cm_sync_rule()
+ *	Synchronize a connection's state.
+ */
+static void sfe_cm_sync_rule(struct sfe_connection_sync *sis)
+{
+	struct nf_conntrack_tuple_hash *h;
+	struct nf_conntrack_tuple tuple;
+	struct nf_conn *ct;
+	SFE_NF_CONN_ACCT(acct);
+
+	/*
+	 * Create a tuple so as to be able to look up a connection
+	 */
+	memset(&tuple, 0, sizeof(tuple));
+	tuple.src.u.all = (__be16)sis->src_port;
+	tuple.dst.dir = IP_CT_DIR_ORIGINAL;
+	tuple.dst.protonum = (u8)sis->protocol;
+	tuple.dst.u.all = (__be16)sis->dest_port;
+
+	if (sis->is_v6) {
+		tuple.src.u3.in6 = *((struct in6_addr *)sis->src_ip.ip6);
+		tuple.dst.u3.in6 = *((struct in6_addr *)sis->dest_ip.ip6);
+		tuple.src.l3num = AF_INET6;
+
+		DEBUG_TRACE("update connection - p: %d, s: %pI6:%u, d: %pI6:%u\n",
+			    (int)tuple.dst.protonum,
+			    &tuple.src.u3.in6, (unsigned int)ntohs(tuple.src.u.all),
+			    &tuple.dst.u3.in6, (unsigned int)ntohs(tuple.dst.u.all));
+	} else {
+		tuple.src.u3.ip = sis->src_ip.ip;
+		tuple.dst.u3.ip = sis->dest_ip.ip;
+		tuple.src.l3num = AF_INET;
+
+		DEBUG_TRACE("update connection - p: %d, s: %pI4:%u, d: %pI4:%u\n",
+			    (int)tuple.dst.protonum,
+			    &tuple.src.u3.ip, (unsigned int)ntohs(tuple.src.u.all),
+			    &tuple.dst.u3.ip, (unsigned int)ntohs(tuple.dst.u.all));
+	}
+
+	/*
+	 * Look up conntrack connection
+	 */
+	h = nf_conntrack_find_get(&init_net, SFE_NF_CT_DEFAULT_ZONE, &tuple);
+	if (unlikely(!h)) {
+		DEBUG_TRACE("no connection found\n");
+		return;
+	}
+
+	ct = nf_ct_tuplehash_to_ctrack(h);
+	NF_CT_ASSERT(ct->timeout.data == (unsigned long)ct);
+
+	/*
+	 * Only update if this is not a fixed timeout
+	 */
+	if (!test_bit(IPS_FIXED_TIMEOUT_BIT, &ct->status)) {
+		spin_lock_bh(&ct->lock);
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 9, 0)) 
+		ct->timeout += sis->delta_jiffies;
+#else
+		ct->timeout.expires += sis->delta_jiffies;
+#endif
+		spin_unlock_bh(&ct->lock);
+	}
+
+	acct = nf_conn_acct_find(ct);
+	if (acct) {
+		spin_lock_bh(&ct->lock);
+		atomic64_add(sis->src_new_packet_count, &SFE_ACCT_COUNTER(acct)[IP_CT_DIR_ORIGINAL].packets);
+		atomic64_add(sis->src_new_byte_count, &SFE_ACCT_COUNTER(acct)[IP_CT_DIR_ORIGINAL].bytes);
+		atomic64_add(sis->dest_new_packet_count, &SFE_ACCT_COUNTER(acct)[IP_CT_DIR_REPLY].packets);
+		atomic64_add(sis->dest_new_byte_count, &SFE_ACCT_COUNTER(acct)[IP_CT_DIR_REPLY].bytes);
+		spin_unlock_bh(&ct->lock);
+	}
+
+	switch (sis->protocol) {
+	case IPPROTO_TCP:
+		spin_lock_bh(&ct->lock);
+		if (ct->proto.tcp.seen[0].td_maxwin < sis->src_td_max_window) {
+			ct->proto.tcp.seen[0].td_maxwin = sis->src_td_max_window;
+		}
+		if ((s32)(ct->proto.tcp.seen[0].td_end - sis->src_td_end) < 0) {
+			ct->proto.tcp.seen[0].td_end = sis->src_td_end;
+		}
+		if ((s32)(ct->proto.tcp.seen[0].td_maxend - sis->src_td_max_end) < 0) {
+			ct->proto.tcp.seen[0].td_maxend = sis->src_td_max_end;
+		}
+		if (ct->proto.tcp.seen[1].td_maxwin < sis->dest_td_max_window) {
+			ct->proto.tcp.seen[1].td_maxwin = sis->dest_td_max_window;
+		}
+		if ((s32)(ct->proto.tcp.seen[1].td_end - sis->dest_td_end) < 0) {
+			ct->proto.tcp.seen[1].td_end = sis->dest_td_end;
+		}
+		if ((s32)(ct->proto.tcp.seen[1].td_maxend - sis->dest_td_max_end) < 0) {
+			ct->proto.tcp.seen[1].td_maxend = sis->dest_td_max_end;
+		}
+		spin_unlock_bh(&ct->lock);
+		break;
+	case IPPROTO_UDP:
+		/*
+		 * In Linux connection track, UDP flow has two timeout values:
+		 * /proc/sys/net/netfilter/nf_conntrack_udp_timeout:
+		 * 	this is for uni-direction UDP flow, normally its value is 60 seconds
+		 * /proc/sys/net/netfilter/nf_conntrack_udp_timeout_stream:
+		 * 	this is for bi-direction UDP flow, normally its value is 180 seconds
+		 *
+		 * Linux will update timer of UDP flow to stream timeout once it seen packets
+		 * in reply direction. But if flow is accelerated by NSS or SFE, Linux won't
+		 * see any packets. So we have to do the same thing in our stats sync message.
+		 */
+		if (!test_bit(IPS_ASSURED_BIT, &ct->status) && acct) {
+			u_int64_t reply_pkts = atomic64_read(&SFE_ACCT_COUNTER(acct)[IP_CT_DIR_REPLY].packets);
+
+			if (reply_pkts != 0) {
+				struct nf_conntrack_l4proto *l4proto;
+				unsigned int *timeouts;
+
+				set_bit(IPS_SEEN_REPLY_BIT, &ct->status);
+				set_bit(IPS_ASSURED_BIT, &ct->status);
+
+				l4proto = __nf_ct_l4proto_find((sis->is_v6 ? AF_INET6 : AF_INET), IPPROTO_UDP);
+				timeouts = nf_ct_timeout_lookup(&init_net, ct, l4proto);
+
+				spin_lock_bh(&ct->lock);
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(4, 9, 0))
+				ct->timeout = nfct_time_stamp + timeouts[UDP_CT_REPLIED];
+#else
+				ct->timeout.expires = jiffies + timeouts[UDP_CT_REPLIED];
+#endif
+				spin_unlock_bh(&ct->lock);
+			}
+		}
+		break;
+	}
+
+	/*
+	 * Release connection
+	 */
+	nf_ct_put(ct);
+}
+
+/*
+ * sfe_cm_device_event()
+ */
+static int sfe_cm_device_event(struct notifier_block *this, unsigned long event, void *ptr)
+{
+	struct net_device *dev = SFE_DEV_EVENT_PTR(ptr);
+
+	if (dev && (event == NETDEV_DOWN)) {
+		sfe_ipv4_destroy_all_rules_for_dev(dev);
+		sfe_ipv6_destroy_all_rules_for_dev(dev);
+	}
+
+	return NOTIFY_DONE;
+}
+
+/*
+ * sfe_cm_inet_event()
+ */
+static int sfe_cm_inet_event(struct notifier_block *this, unsigned long event, void *ptr)
+{
+	struct net_device *dev = ((struct in_ifaddr *)ptr)->ifa_dev->dev;
+
+	if (dev && (event == NETDEV_DOWN)) {
+		sfe_ipv4_destroy_all_rules_for_dev(dev);
+	}
+
+	return NOTIFY_DONE;
+}
+
+/*
+ * sfe_cm_inet6_event()
+ */
+static int sfe_cm_inet6_event(struct notifier_block *this, unsigned long event, void *ptr)
+{
+	struct net_device *dev = ((struct inet6_ifaddr *)ptr)->idev->dev;
+
+	if (dev && (event == NETDEV_DOWN)) {
+		sfe_ipv6_destroy_all_rules_for_dev(dev);
+	}
+
+	return NOTIFY_DONE;
+}
+
+/*
+ * sfe_cm_get_exceptions
+ * 	dump exception counters
+ */
+static ssize_t sfe_cm_get_exceptions(struct device *dev,
+				     struct device_attribute *attr,
+				     char *buf)
+{
+	int idx, len;
+	struct sfe_cm *sc = &__sc;
+
+	spin_lock_bh(&sc->lock);
+	for (len = 0, idx = 0; idx < SFE_CM_EXCEPTION_MAX; idx++) {
+		if (sc->exceptions[idx]) {
+			len += snprintf(buf + len, (ssize_t)(PAGE_SIZE - len), "%s = %d\n", sfe_cm_exception_events_string[idx], sc->exceptions[idx]);
+		}
+	}
+	spin_unlock_bh(&sc->lock);
+
+	return len;
+}
+
+/*
+ * sfe_cm_get_stop
+ * 	dump stop
+ */
+static ssize_t sfe_cm_get_stop(struct device *dev,
+                               struct device_attribute *attr,
+                               char *buf)
+{
+	int (*fast_recv)(struct sk_buff *skb);
+	rcu_read_lock();
+	fast_recv = rcu_dereference(fast_nat_recv);
+	rcu_read_unlock();
+	return snprintf(buf, (ssize_t)PAGE_SIZE, "%d\n", fast_recv ? 0 : 1);
+}
+
+static ssize_t sfe_cm_set_stop(struct device *dev,
+                               struct device_attribute *attr,
+                               const char *buf, size_t count)
+{
+	int ret;
+	u32 num;
+	int (*fast_recv)(struct sk_buff *skb);
+
+	ret = kstrtou32(buf, 0, &num);
+	if (ret)
+		return ret;
+
+	/*
+	 * Hook/Unhook the receive path in the network stack.
+	 */
+	if (num) {
+		RCU_INIT_POINTER(fast_nat_recv, NULL);
+	} else {
+		rcu_read_lock();
+		fast_recv = rcu_dereference(fast_nat_recv);
+		rcu_read_unlock();
+		if (!fast_recv) {
+			BUG_ON(fast_nat_recv);
+			RCU_INIT_POINTER(fast_nat_recv, sfe_cm_recv);
+		}
+	}
+
+	DEBUG_TRACE("sfe_cm_stop = %d\n", num);
+	return count;
+}
+
+/*
+ * sfe_cm_get_defunct_all
+ * 	dump state of SFE
+ */
+static ssize_t sfe_cm_get_defunct_all(struct device *dev,
+                                      struct device_attribute *attr,
+                                      char *buf)
+{
+	return snprintf(buf, (ssize_t)PAGE_SIZE, "%d\n", 0);
+}
+
+static ssize_t sfe_cm_set_defunct_all(struct device *dev,
+                                      struct device_attribute *attr,
+                                      const char *buf, size_t count)
+{
+	sfe_ipv4_destroy_all_rules_for_dev(NULL);
+	sfe_ipv6_destroy_all_rules_for_dev(NULL);
+	return count;
+}
+
+/*
+ * sysfs attributes.
+ */
+static const struct device_attribute sfe_attrs[] = {
+	__ATTR(exceptions, S_IRUGO, sfe_cm_get_exceptions, NULL),
+	__ATTR(stop, S_IWUSR | S_IRUGO, sfe_cm_get_stop, sfe_cm_set_stop),
+	__ATTR(defunct_all, S_IWUSR | S_IRUGO, sfe_cm_get_defunct_all, sfe_cm_set_defunct_all),
+};
+
+/*
+ * sfe_cm_init()
+ */
+static int __init sfe_cm_init(void)
+{
+	struct sfe_cm *sc = &__sc;
+	int result = -1;
+	size_t i, j;
+
+	DEBUG_INFO("SFE CM init\n");
+
+	/*
+	 * Create sys/sfe_cm
+	 */
+	sc->sys_sfe_cm = kobject_create_and_add("sfe_cm", NULL);
+	if (!sc->sys_sfe_cm) {
+		DEBUG_ERROR("failed to register sfe_cm\n");
+		goto exit1;
+	}
+
+	for (i = 0; i < ARRAY_SIZE(sfe_attrs); i++) {
+		result = sysfs_create_file(sc->sys_sfe_cm, &sfe_attrs[i].attr);
+		if (result) {
+			DEBUG_ERROR("failed to register %s : %d\n",
+				    sfe_attrs[i].attr.name, result);
+			goto exit2;
+		}
+	}
+
+	sc->dev_notifier.notifier_call = sfe_cm_device_event;
+	sc->dev_notifier.priority = 1;
+	register_netdevice_notifier(&sc->dev_notifier);
+
+	sc->inet_notifier.notifier_call = sfe_cm_inet_event;
+	sc->inet_notifier.priority = 1;
+	register_inetaddr_notifier(&sc->inet_notifier);
+
+	sc->inet6_notifier.notifier_call = sfe_cm_inet6_event;
+	sc->inet6_notifier.priority = 1;
+	register_inet6addr_notifier(&sc->inet6_notifier);
+	/*
+	 * Register our netfilter hooks.
+	 */
+	result = nf_register_hooks(sfe_cm_ops_post_routing, ARRAY_SIZE(sfe_cm_ops_post_routing));
+	if (result < 0) {
+		DEBUG_ERROR("can't register nf post routing hook: %d\n", result);
+		goto exit3;
+	}
+
+#ifdef CONFIG_NF_CONNTRACK_EVENTS
+	/*
+	 * Register a notifier hook to get fast notifications of expired connections.
+	 * Note: In CONFIG_NF_CONNTRACK_CHAIN_EVENTS enabled case, nf_conntrack_register_notifier()
+	 * function always returns 0.
+	 */
+
+#ifdef CONFIG_NF_CONNTRACK_CHAIN_EVENTS
+	(void)nf_conntrack_register_notifier(&init_net, &sfe_cm_conntrack_notifier);
+#else
+	result = nf_conntrack_register_notifier(&init_net, &sfe_cm_conntrack_notifier);
+	if (result < 0) {
+		DEBUG_ERROR("can't register nf notifier hook: %d\n", result);
+		goto exit4;
+	}
+#endif
+#endif
+
+	spin_lock_init(&sc->lock);
+
+	/*
+	 * Hook the shortcut sync callback.
+	 */
+	sfe_ipv4_register_sync_rule_callback(sfe_cm_sync_rule);
+	sfe_ipv6_register_sync_rule_callback(sfe_cm_sync_rule);
+	return 0;
+
+#ifdef CONFIG_NF_CONNTRACK_EVENTS
+#ifndef CONFIG_NF_CONNTRACK_CHAIN_EVENTS
+exit4:
+	nf_unregister_hooks(sfe_cm_ops_post_routing, ARRAY_SIZE(sfe_cm_ops_post_routing));
+#endif
+#endif
+exit3:
+	unregister_inet6addr_notifier(&sc->inet6_notifier);
+	unregister_inetaddr_notifier(&sc->inet_notifier);
+	unregister_netdevice_notifier(&sc->dev_notifier);
+exit2:
+	for (j = 0; j < i; j++) {
+		sysfs_remove_file(sc->sys_sfe_cm, &sfe_attrs[j].attr);
+	}
+	kobject_put(sc->sys_sfe_cm);
+
+exit1:
+	return result;
+}
+
+/*
+ * sfe_cm_exit()
+ */
+static void __exit sfe_cm_exit(void)
+{
+	struct sfe_cm *sc = &__sc;
+
+	DEBUG_INFO("SFE CM exit\n");
+
+	/*
+	 * Unregister our sync callback.
+	 */
+	sfe_ipv4_register_sync_rule_callback(NULL);
+	sfe_ipv6_register_sync_rule_callback(NULL);
+
+	/*
+	 * Unregister our receive callback.
+	 */
+	RCU_INIT_POINTER(fast_nat_recv, NULL);
+
+	/*
+	 * Wait for all callbacks to complete.
+	 */
+	rcu_barrier();
+
+	/*
+	 * Destroy all connections.
+	 */
+	sfe_ipv4_destroy_all_rules_for_dev(NULL);
+	sfe_ipv6_destroy_all_rules_for_dev(NULL);
+
+#ifdef CONFIG_NF_CONNTRACK_EVENTS
+	nf_conntrack_unregister_notifier(&init_net, &sfe_cm_conntrack_notifier);
+
+#endif
+	nf_unregister_hooks(sfe_cm_ops_post_routing, ARRAY_SIZE(sfe_cm_ops_post_routing));
+
+	unregister_inet6addr_notifier(&sc->inet6_notifier);
+	unregister_inetaddr_notifier(&sc->inet_notifier);
+	unregister_netdevice_notifier(&sc->dev_notifier);
+
+	kobject_put(sc->sys_sfe_cm);
+}
+
+module_init(sfe_cm_init)
+module_exit(sfe_cm_exit)
+
+MODULE_DESCRIPTION("Shortcut Forwarding Engine - Connection Manager");
+MODULE_LICENSE("Dual BSD/GPL");
+
diff --git a/package/lean/shortcut-fe/src/sfe_cm.h b/package/lean/shortcut-fe/src/sfe_cm.h
new file mode 100644
index 0000000000..6f2a819d12
--- /dev/null
+++ b/package/lean/shortcut-fe/src/sfe_cm.h
@@ -0,0 +1,222 @@
+/*
+ * sfe_cm.h
+ *	Shortcut forwarding engine.
+ *
+ * Copyright (c) 2013-2016 The Linux Foundation. All rights reserved.
+ * Permission to use, copy, modify, and/or distribute this software for
+ * any purpose with or without fee is hereby granted, provided that the
+ * above copyright notice and this permission notice appear in all copies.
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT
+ * OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+/*
+ * connection flags.
+ */
+#define SFE_CREATE_FLAG_NO_SEQ_CHECK BIT(0)
+					/* Indicates that we should not check sequence numbers */
+#define SFE_CREATE_FLAG_REMARK_PRIORITY BIT(1)
+					/* Indicates that we should remark priority of skb */
+#define SFE_CREATE_FLAG_REMARK_DSCP BIT(2)
+					/* Indicates that we should remark DSCP of packet */
+
+/*
+ * IPv6 address structure
+ */
+struct sfe_ipv6_addr {
+	__be32 addr[4];
+};
+
+typedef union {
+	__be32			ip;
+	struct sfe_ipv6_addr	ip6[1];
+} sfe_ip_addr_t;
+
+/*
+ * connection creation structure.
+ */
+struct sfe_connection_create {
+	int protocol;
+	struct net_device *src_dev;
+	struct net_device *dest_dev;
+	u32 flags;
+	u32 src_mtu;
+	u32 dest_mtu;
+	sfe_ip_addr_t src_ip;
+	sfe_ip_addr_t src_ip_xlate;
+	sfe_ip_addr_t dest_ip;
+	sfe_ip_addr_t dest_ip_xlate;
+	__be16 src_port;
+	__be16 src_port_xlate;
+	__be16 dest_port;
+	__be16 dest_port_xlate;
+	u8 src_mac[ETH_ALEN];
+	u8 src_mac_xlate[ETH_ALEN];
+	u8 dest_mac[ETH_ALEN];
+	u8 dest_mac_xlate[ETH_ALEN];
+	u8 src_td_window_scale;
+	u32 src_td_max_window;
+	u32 src_td_end;
+	u32 src_td_max_end;
+	u8 dest_td_window_scale;
+	u32 dest_td_max_window;
+	u32 dest_td_end;
+	u32 dest_td_max_end;
+	u32 mark;
+#ifdef CONFIG_XFRM
+	u32 original_accel;
+	u32 reply_accel;
+#endif
+	u32 src_priority;
+	u32 dest_priority;
+	u32 src_dscp;
+	u32 dest_dscp;
+};
+
+/*
+ * connection destruction structure.
+ */
+struct sfe_connection_destroy {
+	int protocol;
+	sfe_ip_addr_t src_ip;
+	sfe_ip_addr_t dest_ip;
+	__be16 src_port;
+	__be16 dest_port;
+};
+
+typedef enum sfe_sync_reason {
+	SFE_SYNC_REASON_STATS,	/* Sync is to synchronize stats */
+	SFE_SYNC_REASON_FLUSH,	/* Sync is to flush a entry */
+	SFE_SYNC_REASON_DESTROY	/* Sync is to destroy a entry(requested by connection manager) */
+} sfe_sync_reason_t;
+
+/*
+ * Structure used to sync connection stats/state back within the system.
+ *
+ * NOTE: The addresses here are NON-NAT addresses, i.e. the true endpoint addressing.
+ * 'src' is the creator of the connection.
+ */
+struct sfe_connection_sync {
+	struct net_device *src_dev;
+	struct net_device *dest_dev;
+	int is_v6;			/* Is it for ipv6? */
+	int protocol;			/* IP protocol number (IPPROTO_...) */
+	sfe_ip_addr_t src_ip;		/* Non-NAT source address, i.e. the creator of the connection */
+	sfe_ip_addr_t src_ip_xlate;	/* NATed source address */
+	__be16 src_port;		/* Non-NAT source port */
+	__be16 src_port_xlate;		/* NATed source port */
+	sfe_ip_addr_t dest_ip;		/* Non-NAT destination address, i.e. to whom the connection was created */
+	sfe_ip_addr_t dest_ip_xlate;	/* NATed destination address */
+	__be16 dest_port;		/* Non-NAT destination port */
+	__be16 dest_port_xlate;		/* NATed destination port */
+	u32 src_td_max_window;
+	u32 src_td_end;
+	u32 src_td_max_end;
+	u64 src_packet_count;
+	u64 src_byte_count;
+	u32 src_new_packet_count;
+	u32 src_new_byte_count;
+	u32 dest_td_max_window;
+	u32 dest_td_end;
+	u32 dest_td_max_end;
+	u64 dest_packet_count;
+	u64 dest_byte_count;
+	u32 dest_new_packet_count;
+	u32 dest_new_byte_count;
+	u32 reason;		/* reason for stats sync message, i.e. destroy, flush, period sync */
+	u64 delta_jiffies;		/* Time to be added to the current timeout to keep the connection alive */
+};
+
+/*
+ * connection mark structure
+ */
+struct sfe_connection_mark {
+	int protocol;
+	sfe_ip_addr_t src_ip;
+	sfe_ip_addr_t dest_ip;
+	__be16 src_port;
+	__be16 dest_port;
+	u32 mark;
+};
+
+/*
+ * Expose the hook for the receive processing.
+ */
+extern int (*fast_nat_recv)(struct sk_buff *skb);
+
+/*
+ * Expose what should be a static flag in the TCP connection tracker.
+ */
+extern int nf_ct_tcp_no_window_check;
+
+/*
+ * This callback will be called in a timer
+ * at 100 times per second to sync stats back to
+ * Linux connection track.
+ *
+ * A RCU lock is taken to prevent this callback
+ * from unregistering.
+ */
+typedef void (*sfe_sync_rule_callback_t)(struct sfe_connection_sync *);
+
+/*
+ * IPv4 APIs used by connection manager
+ */
+int sfe_ipv4_recv(struct net_device *dev, struct sk_buff *skb);
+int sfe_ipv4_create_rule(struct sfe_connection_create *sic);
+void sfe_ipv4_destroy_rule(struct sfe_connection_destroy *sid);
+void sfe_ipv4_destroy_all_rules_for_dev(struct net_device *dev);
+void sfe_ipv4_register_sync_rule_callback(sfe_sync_rule_callback_t callback);
+void sfe_ipv4_update_rule(struct sfe_connection_create *sic);
+void sfe_ipv4_mark_rule(struct sfe_connection_mark *mark);
+
+/*
+ * IPv6 APIs used by connection manager
+ */
+int sfe_ipv6_recv(struct net_device *dev, struct sk_buff *skb);
+int sfe_ipv6_create_rule(struct sfe_connection_create *sic);
+void sfe_ipv6_destroy_rule(struct sfe_connection_destroy *sid);
+void sfe_ipv6_destroy_all_rules_for_dev(struct net_device *dev);
+void sfe_ipv6_register_sync_rule_callback(sfe_sync_rule_callback_t callback);
+void sfe_ipv6_update_rule(struct sfe_connection_create *sic);
+void sfe_ipv6_mark_rule(struct sfe_connection_mark *mark);
+
+/*
+ * sfe_ipv6_addr_equal()
+ *	compare ipv6 address
+ *
+ * return: 1, equal; 0, no equal
+ */
+static inline int sfe_ipv6_addr_equal(struct sfe_ipv6_addr *a,
+				      struct sfe_ipv6_addr *b)
+{
+	return a->addr[0] == b->addr[0] &&
+	       a->addr[1] == b->addr[1] &&
+	       a->addr[2] == b->addr[2] &&
+	       a->addr[3] == b->addr[3];
+}
+
+/*
+ * sfe_ipv4_addr_equal()
+ *	compare ipv4 address
+ *
+ * return: 1, equal; 0, no equal
+ */
+#define sfe_ipv4_addr_equal(a, b) ((u32)(a) == (u32)(b))
+
+/*
+ * sfe_addr_equal()
+ *	compare ipv4 or ipv6 address
+ *
+ * return: 1, equal; 0, no equal
+ */
+static inline int sfe_addr_equal(sfe_ip_addr_t *a,
+				 sfe_ip_addr_t *b, int is_v4)
+{
+	return is_v4 ? sfe_ipv4_addr_equal(a->ip, b->ip) : sfe_ipv6_addr_equal(a->ip6, b->ip6);
+}
diff --git a/package/lean/shortcut-fe/src/sfe_ipv4.c b/package/lean/shortcut-fe/src/sfe_ipv4.c
new file mode 100644
index 0000000000..34ed09b58a
--- /dev/null
+++ b/package/lean/shortcut-fe/src/sfe_ipv4.c
@@ -0,0 +1,3369 @@
+/*
+ * sfe_ipv4.c
+ *	Shortcut forwarding engine - IPv4 edition.
+ *
+ * Copyright (c) 2013-2016 The Linux Foundation. All rights reserved.
+ * Permission to use, copy, modify, and/or distribute this software for
+ * any purpose with or without fee is hereby granted, provided that the
+ * above copyright notice and this permission notice appear in all copies.
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT
+ * OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#include <linux/module.h>
+#include <linux/sysfs.h>
+#include <linux/skbuff.h>
+#include <linux/icmp.h>
+#include <net/tcp.h>
+#include <linux/etherdevice.h>
+#include <net/checksum.h>
+
+#include "sfe.h"
+#include "sfe_cm.h"
+
+/*
+ * By default Linux IP header and transport layer header structures are
+ * unpacked, assuming that such headers should be 32-bit aligned.
+ * Unfortunately some wireless adaptors can't cope with this requirement and
+ * some CPUs can't handle misaligned accesses.  For those platforms we
+ * define SFE_IPV4_UNALIGNED_IP_HEADER and mark the structures as packed.
+ * When we do this the compiler will generate slightly worse code than for the
+ * aligned case (on most platforms) but will be much quicker than fixing
+ * things up in an unaligned trap handler.
+ */
+#define SFE_IPV4_UNALIGNED_IP_HEADER 1
+#if SFE_IPV4_UNALIGNED_IP_HEADER
+#define SFE_IPV4_UNALIGNED_STRUCT __attribute__((aligned(4)))
+#else
+#define SFE_IPV4_UNALIGNED_STRUCT
+#endif
+
+/*
+ * An Ethernet header, but with an optional "packed" attribute to
+ * help with performance on some platforms (see the definition of
+ * SFE_IPV4_UNALIGNED_STRUCT)
+ */
+struct sfe_ipv4_eth_hdr {
+	__be16 h_dest[ETH_ALEN / 2];
+	__be16 h_source[ETH_ALEN / 2];
+	__be16 h_proto;
+} SFE_IPV4_UNALIGNED_STRUCT;
+
+#define SFE_IPV4_DSCP_MASK 0x3
+#define SFE_IPV4_DSCP_SHIFT 2
+
+/*
+ * An IPv4 header, but with an optional "packed" attribute to
+ * help with performance on some platforms (see the definition of
+ * SFE_IPV4_UNALIGNED_STRUCT)
+ */
+struct sfe_ipv4_ip_hdr {
+#if defined(__LITTLE_ENDIAN_BITFIELD)
+	__u8 ihl:4,
+	     version:4;
+#elif defined (__BIG_ENDIAN_BITFIELD)
+	__u8 version:4,
+	     ihl:4;
+#else
+#error	"Please fix <asm/byteorder.h>"
+#endif
+	__u8 tos;
+	__be16 tot_len;
+	__be16 id;
+	__be16 frag_off;
+	__u8 ttl;
+	__u8 protocol;
+	__sum16 check;
+	__be32 saddr;
+	__be32 daddr;
+
+	/*
+	 * The options start here.
+	 */
+} SFE_IPV4_UNALIGNED_STRUCT;
+
+/*
+ * A UDP header, but with an optional "packed" attribute to
+ * help with performance on some platforms (see the definition of
+ * SFE_IPV4_UNALIGNED_STRUCT)
+ */
+struct sfe_ipv4_udp_hdr {
+	__be16 source;
+	__be16 dest;
+	__be16 len;
+	__sum16 check;
+} SFE_IPV4_UNALIGNED_STRUCT;
+
+/*
+ * A TCP header, but with an optional "packed" attribute to
+ * help with performance on some platforms (see the definition of
+ * SFE_IPV4_UNALIGNED_STRUCT)
+ */
+struct sfe_ipv4_tcp_hdr {
+	__be16 source;
+	__be16 dest;
+	__be32 seq;
+	__be32 ack_seq;
+#if defined(__LITTLE_ENDIAN_BITFIELD)
+	__u16 res1:4,
+	      doff:4,
+	      fin:1,
+	      syn:1,
+	      rst:1,
+	      psh:1,
+	      ack:1,
+	      urg:1,
+	      ece:1,
+	      cwr:1;
+#elif defined(__BIG_ENDIAN_BITFIELD)
+	__u16 doff:4,
+	      res1:4,
+	      cwr:1,
+	      ece:1,
+	      urg:1,
+	      ack:1,
+	      psh:1,
+	      rst:1,
+	      syn:1,
+	      fin:1;
+#else
+#error	"Adjust your <asm/byteorder.h> defines"
+#endif
+	__be16 window;
+	__sum16	check;
+	__be16 urg_ptr;
+} SFE_IPV4_UNALIGNED_STRUCT;
+
+/*
+ * Specifies the lower bound on ACK numbers carried in the TCP header
+ */
+#define SFE_IPV4_TCP_MAX_ACK_WINDOW 65520
+
+/*
+ * IPv4 TCP connection match additional data.
+ */
+struct sfe_ipv4_tcp_connection_match {
+	u8 win_scale;		/* Window scale */
+	u32 max_win;		/* Maximum window size seen */
+	u32 end;			/* Sequence number of the next byte to send (seq + segment length) */
+	u32 max_end;		/* Sequence number of the last byte to ack */
+};
+
+/*
+ * Bit flags for IPv4 connection matching entry.
+ */
+#define SFE_IPV4_CONNECTION_MATCH_FLAG_XLATE_SRC (1<<0)
+					/* Perform source translation */
+#define SFE_IPV4_CONNECTION_MATCH_FLAG_XLATE_DEST (1<<1)
+					/* Perform destination translation */
+#define SFE_IPV4_CONNECTION_MATCH_FLAG_NO_SEQ_CHECK (1<<2)
+					/* Ignore TCP sequence numbers */
+#define SFE_IPV4_CONNECTION_MATCH_FLAG_WRITE_FAST_ETH_HDR (1<<3)
+					/* Fast Ethernet header write */
+#define SFE_IPV4_CONNECTION_MATCH_FLAG_WRITE_L2_HDR (1<<4)
+					/* Fast Ethernet header write */
+#define SFE_IPV4_CONNECTION_MATCH_FLAG_PRIORITY_REMARK (1<<5)
+					/* remark priority of SKB */
+#define SFE_IPV4_CONNECTION_MATCH_FLAG_DSCP_REMARK (1<<6)
+					/* remark DSCP of packet */
+
+/*
+ * IPv4 connection matching structure.
+ */
+struct sfe_ipv4_connection_match {
+	/*
+	 * References to other objects.
+	 */
+	struct sfe_ipv4_connection_match *next;
+	struct sfe_ipv4_connection_match *prev;
+	struct sfe_ipv4_connection *connection;
+	struct sfe_ipv4_connection_match *counter_match;
+					/* Matches the flow in the opposite direction as the one in *connection */
+	struct sfe_ipv4_connection_match *active_next;
+	struct sfe_ipv4_connection_match *active_prev;
+	bool active;			/* Flag to indicate if we're on the active list */
+
+	/*
+	 * Characteristics that identify flows that match this rule.
+	 */
+	struct net_device *match_dev;	/* Network device */
+	u8 match_protocol;		/* Protocol */
+	__be32 match_src_ip;		/* Source IP address */
+	__be32 match_dest_ip;		/* Destination IP address */
+	__be16 match_src_port;		/* Source port/connection ident */
+	__be16 match_dest_port;		/* Destination port/connection ident */
+
+	/*
+	 * Control the operations of the match.
+	 */
+	u32 flags;			/* Bit flags */
+#ifdef CONFIG_XFRM
+	u32 flow_accel;             /* The flow accelerated or not */
+#endif
+
+	/*
+	 * Connection state that we track once we match.
+	 */
+	union {				/* Protocol-specific state */
+		struct sfe_ipv4_tcp_connection_match tcp;
+	} protocol_state;
+	/*
+	 * Stats recorded in a sync period. These stats will be added to
+	 * rx_packet_count64/rx_byte_count64 after a sync period.
+	 */
+	u32 rx_packet_count;
+	u32 rx_byte_count;
+
+	/*
+	 * Packet translation information.
+	 */
+	__be32 xlate_src_ip;		/* Address after source translation */
+	__be16 xlate_src_port;	/* Port/connection ident after source translation */
+	u16 xlate_src_csum_adjustment;
+					/* Transport layer checksum adjustment after source translation */
+	u16 xlate_src_partial_csum_adjustment;
+					/* Transport layer pseudo header checksum adjustment after source translation */
+
+	__be32 xlate_dest_ip;		/* Address after destination translation */
+	__be16 xlate_dest_port;	/* Port/connection ident after destination translation */
+	u16 xlate_dest_csum_adjustment;
+					/* Transport layer checksum adjustment after destination translation */
+	u16 xlate_dest_partial_csum_adjustment;
+					/* Transport layer pseudo header checksum adjustment after destination translation */
+
+	/*
+	 * QoS information
+	 */
+	u32 priority;
+	u32 dscp;
+
+	/*
+	 * Packet transmit information.
+	 */
+	struct net_device *xmit_dev;	/* Network device on which to transmit */
+	unsigned short int xmit_dev_mtu;
+					/* Interface MTU */
+	u16 xmit_dest_mac[ETH_ALEN / 2];
+					/* Destination MAC address to use when forwarding */
+	u16 xmit_src_mac[ETH_ALEN / 2];
+					/* Source MAC address to use when forwarding */
+
+	/*
+	 * Summary stats.
+	 */
+	u64 rx_packet_count64;
+	u64 rx_byte_count64;
+};
+
+/*
+ * Per-connection data structure.
+ */
+struct sfe_ipv4_connection {
+	struct sfe_ipv4_connection *next;
+					/* Pointer to the next entry in a hash chain */
+	struct sfe_ipv4_connection *prev;
+					/* Pointer to the previous entry in a hash chain */
+	int protocol;			/* IP protocol number */
+	__be32 src_ip;			/* Src IP addr pre-translation */
+	__be32 src_ip_xlate;		/* Src IP addr post-translation */
+	__be32 dest_ip;			/* Dest IP addr pre-translation */
+	__be32 dest_ip_xlate;		/* Dest IP addr post-translation */
+	__be16 src_port;		/* Src port pre-translation */
+	__be16 src_port_xlate;		/* Src port post-translation */
+	__be16 dest_port;		/* Dest port pre-translation */
+	__be16 dest_port_xlate;		/* Dest port post-translation */
+	struct sfe_ipv4_connection_match *original_match;
+					/* Original direction matching structure */
+	struct net_device *original_dev;
+					/* Original direction source device */
+	struct sfe_ipv4_connection_match *reply_match;
+					/* Reply direction matching structure */
+	struct net_device *reply_dev;	/* Reply direction source device */
+	u64 last_sync_jiffies;		/* Jiffies count for the last sync */
+	struct sfe_ipv4_connection *all_connections_next;
+					/* Pointer to the next entry in the list of all connections */
+	struct sfe_ipv4_connection *all_connections_prev;
+					/* Pointer to the previous entry in the list of all connections */
+	u32 mark;			/* mark for outgoing packet */
+	u32 debug_read_seq;		/* sequence number for debug dump */
+};
+
+/*
+ * IPv4 connections and hash table size information.
+ */
+#define SFE_IPV4_CONNECTION_HASH_SHIFT 12
+#define SFE_IPV4_CONNECTION_HASH_SIZE (1 << SFE_IPV4_CONNECTION_HASH_SHIFT)
+#define SFE_IPV4_CONNECTION_HASH_MASK (SFE_IPV4_CONNECTION_HASH_SIZE - 1)
+
+enum sfe_ipv4_exception_events {
+	SFE_IPV4_EXCEPTION_EVENT_UDP_HEADER_INCOMPLETE,
+	SFE_IPV4_EXCEPTION_EVENT_UDP_NO_CONNECTION,
+	SFE_IPV4_EXCEPTION_EVENT_UDP_IP_OPTIONS_OR_INITIAL_FRAGMENT,
+	SFE_IPV4_EXCEPTION_EVENT_UDP_SMALL_TTL,
+	SFE_IPV4_EXCEPTION_EVENT_UDP_NEEDS_FRAGMENTATION,
+	SFE_IPV4_EXCEPTION_EVENT_TCP_HEADER_INCOMPLETE,
+	SFE_IPV4_EXCEPTION_EVENT_TCP_NO_CONNECTION_SLOW_FLAGS,
+	SFE_IPV4_EXCEPTION_EVENT_TCP_NO_CONNECTION_FAST_FLAGS,
+	SFE_IPV4_EXCEPTION_EVENT_TCP_IP_OPTIONS_OR_INITIAL_FRAGMENT,
+	SFE_IPV4_EXCEPTION_EVENT_TCP_SMALL_TTL,
+	SFE_IPV4_EXCEPTION_EVENT_TCP_NEEDS_FRAGMENTATION,
+	SFE_IPV4_EXCEPTION_EVENT_TCP_FLAGS,
+	SFE_IPV4_EXCEPTION_EVENT_TCP_SEQ_EXCEEDS_RIGHT_EDGE,
+	SFE_IPV4_EXCEPTION_EVENT_TCP_SMALL_DATA_OFFS,
+	SFE_IPV4_EXCEPTION_EVENT_TCP_BAD_SACK,
+	SFE_IPV4_EXCEPTION_EVENT_TCP_BIG_DATA_OFFS,
+	SFE_IPV4_EXCEPTION_EVENT_TCP_SEQ_BEFORE_LEFT_EDGE,
+	SFE_IPV4_EXCEPTION_EVENT_TCP_ACK_EXCEEDS_RIGHT_EDGE,
+	SFE_IPV4_EXCEPTION_EVENT_TCP_ACK_BEFORE_LEFT_EDGE,
+	SFE_IPV4_EXCEPTION_EVENT_ICMP_HEADER_INCOMPLETE,
+	SFE_IPV4_EXCEPTION_EVENT_ICMP_UNHANDLED_TYPE,
+	SFE_IPV4_EXCEPTION_EVENT_ICMP_IPV4_HEADER_INCOMPLETE,
+	SFE_IPV4_EXCEPTION_EVENT_ICMP_IPV4_NON_V4,
+	SFE_IPV4_EXCEPTION_EVENT_ICMP_IPV4_IP_OPTIONS_INCOMPLETE,
+	SFE_IPV4_EXCEPTION_EVENT_ICMP_IPV4_UDP_HEADER_INCOMPLETE,
+	SFE_IPV4_EXCEPTION_EVENT_ICMP_IPV4_TCP_HEADER_INCOMPLETE,
+	SFE_IPV4_EXCEPTION_EVENT_ICMP_IPV4_UNHANDLED_PROTOCOL,
+	SFE_IPV4_EXCEPTION_EVENT_ICMP_NO_CONNECTION,
+	SFE_IPV4_EXCEPTION_EVENT_ICMP_FLUSHED_CONNECTION,
+	SFE_IPV4_EXCEPTION_EVENT_HEADER_INCOMPLETE,
+	SFE_IPV4_EXCEPTION_EVENT_BAD_TOTAL_LENGTH,
+	SFE_IPV4_EXCEPTION_EVENT_NON_V4,
+	SFE_IPV4_EXCEPTION_EVENT_NON_INITIAL_FRAGMENT,
+	SFE_IPV4_EXCEPTION_EVENT_DATAGRAM_INCOMPLETE,
+	SFE_IPV4_EXCEPTION_EVENT_IP_OPTIONS_INCOMPLETE,
+	SFE_IPV4_EXCEPTION_EVENT_UNHANDLED_PROTOCOL,
+	SFE_IPV4_EXCEPTION_EVENT_CSUM_ERROR,
+	SFE_IPV4_EXCEPTION_EVENT_LAST
+};
+
+static char *sfe_ipv4_exception_events_string[SFE_IPV4_EXCEPTION_EVENT_LAST] = {
+	"UDP_HEADER_INCOMPLETE",
+	"UDP_NO_CONNECTION",
+	"UDP_IP_OPTIONS_OR_INITIAL_FRAGMENT",
+	"UDP_SMALL_TTL",
+	"UDP_NEEDS_FRAGMENTATION",
+	"TCP_HEADER_INCOMPLETE",
+	"TCP_NO_CONNECTION_SLOW_FLAGS",
+	"TCP_NO_CONNECTION_FAST_FLAGS",
+	"TCP_IP_OPTIONS_OR_INITIAL_FRAGMENT",
+	"TCP_SMALL_TTL",
+	"TCP_NEEDS_FRAGMENTATION",
+	"TCP_FLAGS",
+	"TCP_SEQ_EXCEEDS_RIGHT_EDGE",
+	"TCP_SMALL_DATA_OFFS",
+	"TCP_BAD_SACK",
+	"TCP_BIG_DATA_OFFS",
+	"TCP_SEQ_BEFORE_LEFT_EDGE",
+	"TCP_ACK_EXCEEDS_RIGHT_EDGE",
+	"TCP_ACK_BEFORE_LEFT_EDGE",
+	"ICMP_HEADER_INCOMPLETE",
+	"ICMP_UNHANDLED_TYPE",
+	"ICMP_IPV4_HEADER_INCOMPLETE",
+	"ICMP_IPV4_NON_V4",
+	"ICMP_IPV4_IP_OPTIONS_INCOMPLETE",
+	"ICMP_IPV4_UDP_HEADER_INCOMPLETE",
+	"ICMP_IPV4_TCP_HEADER_INCOMPLETE",
+	"ICMP_IPV4_UNHANDLED_PROTOCOL",
+	"ICMP_NO_CONNECTION",
+	"ICMP_FLUSHED_CONNECTION",
+	"HEADER_INCOMPLETE",
+	"BAD_TOTAL_LENGTH",
+	"NON_V4",
+	"NON_INITIAL_FRAGMENT",
+	"DATAGRAM_INCOMPLETE",
+	"IP_OPTIONS_INCOMPLETE",
+	"UNHANDLED_PROTOCOL",
+	"CSUM_ERROR"
+};
+
+/*
+ * Per-module structure.
+ */
+struct sfe_ipv4 {
+	spinlock_t lock;		/* Lock for SMP correctness */
+	struct sfe_ipv4_connection_match *active_head;
+					/* Head of the list of recently active connections */
+	struct sfe_ipv4_connection_match *active_tail;
+					/* Tail of the list of recently active connections */
+	struct sfe_ipv4_connection *all_connections_head;
+					/* Head of the list of all connections */
+	struct sfe_ipv4_connection *all_connections_tail;
+					/* Tail of the list of all connections */
+	unsigned int num_connections;	/* Number of connections */
+	struct timer_list timer;	/* Timer used for periodic sync ops */
+	sfe_sync_rule_callback_t __rcu sync_rule_callback;
+					/* Callback function registered by a connection manager for stats syncing */
+	struct sfe_ipv4_connection *conn_hash[SFE_IPV4_CONNECTION_HASH_SIZE];
+					/* Connection hash table */
+	struct sfe_ipv4_connection_match *conn_match_hash[SFE_IPV4_CONNECTION_HASH_SIZE];
+					/* Connection match hash table */
+
+	/*
+	 * Stats recorded in a sync period. These stats will be added to
+	 * connection_xxx64 after a sync period.
+	 */
+	u32 connection_create_requests;
+					/* Number of IPv4 connection create requests */
+	u32 connection_create_collisions;
+					/* Number of IPv4 connection create requests that collided with existing hash table entries */
+	u32 connection_destroy_requests;
+					/* Number of IPv4 connection destroy requests */
+	u32 connection_destroy_misses;
+					/* Number of IPv4 connection destroy requests that missed our hash table */
+	u32 connection_match_hash_hits;
+					/* Number of IPv4 connection match hash hits */
+	u32 connection_match_hash_reorders;
+					/* Number of IPv4 connection match hash reorders */
+	u32 connection_flushes;		/* Number of IPv4 connection flushes */
+	u32 packets_forwarded;		/* Number of IPv4 packets forwarded */
+	u32 packets_not_forwarded;	/* Number of IPv4 packets not forwarded */
+	u32 exception_events[SFE_IPV4_EXCEPTION_EVENT_LAST];
+
+	/*
+	 * Summary statistics.
+	 */
+	u64 connection_create_requests64;
+					/* Number of IPv4 connection create requests */
+	u64 connection_create_collisions64;
+					/* Number of IPv4 connection create requests that collided with existing hash table entries */
+	u64 connection_destroy_requests64;
+					/* Number of IPv4 connection destroy requests */
+	u64 connection_destroy_misses64;
+					/* Number of IPv4 connection destroy requests that missed our hash table */
+	u64 connection_match_hash_hits64;
+					/* Number of IPv4 connection match hash hits */
+	u64 connection_match_hash_reorders64;
+					/* Number of IPv4 connection match hash reorders */
+	u64 connection_flushes64;	/* Number of IPv4 connection flushes */
+	u64 packets_forwarded64;	/* Number of IPv4 packets forwarded */
+	u64 packets_not_forwarded64;
+					/* Number of IPv4 packets not forwarded */
+	u64 exception_events64[SFE_IPV4_EXCEPTION_EVENT_LAST];
+
+	/*
+	 * Control state.
+	 */
+	struct kobject *sys_sfe_ipv4;	/* sysfs linkage */
+	int debug_dev;			/* Major number of the debug char device */
+	u32 debug_read_seq;	/* sequence number for debug dump */
+};
+
+/*
+ * Enumeration of the XML output.
+ */
+enum sfe_ipv4_debug_xml_states {
+	SFE_IPV4_DEBUG_XML_STATE_START,
+	SFE_IPV4_DEBUG_XML_STATE_CONNECTIONS_START,
+	SFE_IPV4_DEBUG_XML_STATE_CONNECTIONS_CONNECTION,
+	SFE_IPV4_DEBUG_XML_STATE_CONNECTIONS_END,
+	SFE_IPV4_DEBUG_XML_STATE_EXCEPTIONS_START,
+	SFE_IPV4_DEBUG_XML_STATE_EXCEPTIONS_EXCEPTION,
+	SFE_IPV4_DEBUG_XML_STATE_EXCEPTIONS_END,
+	SFE_IPV4_DEBUG_XML_STATE_STATS,
+	SFE_IPV4_DEBUG_XML_STATE_END,
+	SFE_IPV4_DEBUG_XML_STATE_DONE
+};
+
+/*
+ * XML write state.
+ */
+struct sfe_ipv4_debug_xml_write_state {
+	enum sfe_ipv4_debug_xml_states state;
+					/* XML output file state machine state */
+	int iter_exception;		/* Next exception iterator */
+};
+
+typedef bool (*sfe_ipv4_debug_xml_write_method_t)(struct sfe_ipv4 *si, char *buffer, char *msg, size_t *length,
+						  int *total_read, struct sfe_ipv4_debug_xml_write_state *ws);
+
+static struct sfe_ipv4 __si;
+
+/*
+ * sfe_ipv4_gen_ip_csum()
+ *	Generate the IP checksum for an IPv4 header.
+ *
+ * Note that this function assumes that we have only 20 bytes of IP header.
+ */
+static inline u16 sfe_ipv4_gen_ip_csum(struct sfe_ipv4_ip_hdr *iph)
+{
+	u32 sum;
+	u16 *i = (u16 *)iph;
+
+	iph->check = 0;
+
+	/*
+	 * Generate the sum.
+	 */
+	sum = i[0] + i[1] + i[2] + i[3] + i[4] + i[5] + i[6] + i[7] + i[8] + i[9];
+
+	/*
+	 * Fold it to ones-complement form.
+	 */
+	sum = (sum & 0xffff) + (sum >> 16);
+	sum = (sum & 0xffff) + (sum >> 16);
+
+	return (u16)sum ^ 0xffff;
+}
+
+/*
+ * sfe_ipv4_get_connection_match_hash()
+ *	Generate the hash used in connection match lookups.
+ */
+static inline unsigned int sfe_ipv4_get_connection_match_hash(struct net_device *dev, u8 protocol,
+							      __be32 src_ip, __be16 src_port,
+							      __be32 dest_ip, __be16 dest_port)
+{
+	size_t dev_addr = (size_t)dev;
+	u32 hash = ((u32)dev_addr) ^ ntohl(src_ip ^ dest_ip) ^ protocol ^ ntohs(src_port ^ dest_port);
+	return ((hash >> SFE_IPV4_CONNECTION_HASH_SHIFT) ^ hash) & SFE_IPV4_CONNECTION_HASH_MASK;
+}
+
+/*
+ * sfe_ipv4_find_sfe_ipv4_connection_match()
+ *	Get the IPv4 flow match info that corresponds to a particular 5-tuple.
+ *
+ * On entry we must be holding the lock that protects the hash table.
+ */
+static struct sfe_ipv4_connection_match *
+sfe_ipv4_find_sfe_ipv4_connection_match(struct sfe_ipv4 *si, struct net_device *dev, u8 protocol,
+					__be32 src_ip, __be16 src_port,
+					__be32 dest_ip, __be16 dest_port)
+{
+	struct sfe_ipv4_connection_match *cm;
+	struct sfe_ipv4_connection_match *head;
+	unsigned int conn_match_idx;
+
+	conn_match_idx = sfe_ipv4_get_connection_match_hash(dev, protocol, src_ip, src_port, dest_ip, dest_port);
+	cm = si->conn_match_hash[conn_match_idx];
+
+	/*
+	 * If we don't have anything in this chain then bail.
+	 */
+	if (unlikely(!cm)) {
+		return NULL;
+	}
+
+	/*
+	 * Hopefully the first entry is the one we want.
+	 */
+	if ((cm->match_src_port == src_port)
+	    && (cm->match_dest_port == dest_port)
+	    && (cm->match_src_ip == src_ip)
+	    && (cm->match_dest_ip == dest_ip)
+	    && (cm->match_protocol == protocol)
+	    && (cm->match_dev == dev)) {
+		si->connection_match_hash_hits++;
+		return cm;
+	}
+
+	/*
+	 * Unfortunately we didn't find it at head, so we search it in chain and
+	 * move matching entry to the top of the hash chain. We presume that this
+	 * will be reused again very quickly.
+	 */
+	head = cm;
+	do {
+		cm = cm->next;
+	} while (cm && (cm->match_src_port != src_port
+		 || cm->match_dest_port != dest_port
+		 || cm->match_src_ip != src_ip
+		 || cm->match_dest_ip != dest_ip
+		 || cm->match_protocol != protocol
+		 || cm->match_dev != dev));
+
+	/*
+	 * Not found then we're done.
+	 */
+	if (unlikely(!cm)) {
+		return NULL;
+	}
+
+	/*
+	 * We found a match so move it.
+	 */
+	if (cm->next) {
+		cm->next->prev = cm->prev;
+	}
+	cm->prev->next = cm->next;
+	cm->prev = NULL;
+	cm->next = head;
+	head->prev = cm;
+	si->conn_match_hash[conn_match_idx] = cm;
+	si->connection_match_hash_reorders++;
+
+	return cm;
+}
+
+/*
+ * sfe_ipv4_connection_match_update_summary_stats()
+ *	Update the summary stats for a connection match entry.
+ */
+static inline void sfe_ipv4_connection_match_update_summary_stats(struct sfe_ipv4_connection_match *cm)
+{
+	cm->rx_packet_count64 += cm->rx_packet_count;
+	cm->rx_packet_count = 0;
+	cm->rx_byte_count64 += cm->rx_byte_count;
+	cm->rx_byte_count = 0;
+}
+
+/*
+ * sfe_ipv4_connection_match_compute_translations()
+ *	Compute port and address translations for a connection match entry.
+ */
+static void sfe_ipv4_connection_match_compute_translations(struct sfe_ipv4_connection_match *cm)
+{
+	/*
+	 * Before we insert the entry look to see if this is tagged as doing address
+	 * translations.  If it is then work out the adjustment that we need to apply
+	 * to the transport checksum.
+	 */
+	if (cm->flags & SFE_IPV4_CONNECTION_MATCH_FLAG_XLATE_SRC) {
+		/*
+		 * Precompute an incremental checksum adjustment so we can
+		 * edit packets in this stream very quickly.  The algorithm is from RFC1624.
+		 */
+		u16 src_ip_hi = cm->match_src_ip >> 16;
+		u16 src_ip_lo = cm->match_src_ip & 0xffff;
+		u32 xlate_src_ip = ~cm->xlate_src_ip;
+		u16 xlate_src_ip_hi = xlate_src_ip >> 16;
+		u16 xlate_src_ip_lo = xlate_src_ip & 0xffff;
+		u16 xlate_src_port = ~cm->xlate_src_port;
+		u32 adj;
+
+		/*
+		 * When we compute this fold it down to a 16-bit offset
+		 * as that way we can avoid having to do a double
+		 * folding of the twos-complement result because the
+		 * addition of 2 16-bit values cannot cause a double
+		 * wrap-around!
+		 */
+		adj = src_ip_hi + src_ip_lo + cm->match_src_port
+		      + xlate_src_ip_hi + xlate_src_ip_lo + xlate_src_port;
+		adj = (adj & 0xffff) + (adj >> 16);
+		adj = (adj & 0xffff) + (adj >> 16);
+		cm->xlate_src_csum_adjustment = (u16)adj;
+
+	}
+
+	if (cm->flags & SFE_IPV4_CONNECTION_MATCH_FLAG_XLATE_DEST) {
+		/*
+		 * Precompute an incremental checksum adjustment so we can
+		 * edit packets in this stream very quickly.  The algorithm is from RFC1624.
+		 */
+		u16 dest_ip_hi = cm->match_dest_ip >> 16;
+		u16 dest_ip_lo = cm->match_dest_ip & 0xffff;
+		u32 xlate_dest_ip = ~cm->xlate_dest_ip;
+		u16 xlate_dest_ip_hi = xlate_dest_ip >> 16;
+		u16 xlate_dest_ip_lo = xlate_dest_ip & 0xffff;
+		u16 xlate_dest_port = ~cm->xlate_dest_port;
+		u32 adj;
+
+		/*
+		 * When we compute this fold it down to a 16-bit offset
+		 * as that way we can avoid having to do a double
+		 * folding of the twos-complement result because the
+		 * addition of 2 16-bit values cannot cause a double
+		 * wrap-around!
+		 */
+		adj = dest_ip_hi + dest_ip_lo + cm->match_dest_port
+		      + xlate_dest_ip_hi + xlate_dest_ip_lo + xlate_dest_port;
+		adj = (adj & 0xffff) + (adj >> 16);
+		adj = (adj & 0xffff) + (adj >> 16);
+		cm->xlate_dest_csum_adjustment = (u16)adj;
+	}
+
+	if (cm->flags & SFE_IPV4_CONNECTION_MATCH_FLAG_XLATE_SRC) {
+		u32 adj = ~cm->match_src_ip + cm->xlate_src_ip;
+		if (adj < cm->xlate_src_ip) {
+			adj++;
+		}
+
+		adj = (adj & 0xffff) + (adj >> 16);
+		adj = (adj & 0xffff) + (adj >> 16);
+		cm->xlate_src_partial_csum_adjustment = (u16)adj;
+	}
+
+	if (cm->flags & SFE_IPV4_CONNECTION_MATCH_FLAG_XLATE_DEST) {
+		u32 adj = ~cm->match_dest_ip + cm->xlate_dest_ip;
+		if (adj < cm->xlate_dest_ip) {
+			adj++;
+		}
+
+		adj = (adj & 0xffff) + (adj >> 16);
+		adj = (adj & 0xffff) + (adj >> 16);
+		cm->xlate_dest_partial_csum_adjustment = (u16)adj;
+	}
+
+}
+
+/*
+ * sfe_ipv4_update_summary_stats()
+ *	Update the summary stats.
+ */
+static void sfe_ipv4_update_summary_stats(struct sfe_ipv4 *si)
+{
+	int i;
+
+	si->connection_create_requests64 += si->connection_create_requests;
+	si->connection_create_requests = 0;
+	si->connection_create_collisions64 += si->connection_create_collisions;
+	si->connection_create_collisions = 0;
+	si->connection_destroy_requests64 += si->connection_destroy_requests;
+	si->connection_destroy_requests = 0;
+	si->connection_destroy_misses64 += si->connection_destroy_misses;
+	si->connection_destroy_misses = 0;
+	si->connection_match_hash_hits64 += si->connection_match_hash_hits;
+	si->connection_match_hash_hits = 0;
+	si->connection_match_hash_reorders64 += si->connection_match_hash_reorders;
+	si->connection_match_hash_reorders = 0;
+	si->connection_flushes64 += si->connection_flushes;
+	si->connection_flushes = 0;
+	si->packets_forwarded64 += si->packets_forwarded;
+	si->packets_forwarded = 0;
+	si->packets_not_forwarded64 += si->packets_not_forwarded;
+	si->packets_not_forwarded = 0;
+
+	for (i = 0; i < SFE_IPV4_EXCEPTION_EVENT_LAST; i++) {
+		si->exception_events64[i] += si->exception_events[i];
+		si->exception_events[i] = 0;
+	}
+}
+
+/*
+ * sfe_ipv4_insert_sfe_ipv4_connection_match()
+ *	Insert a connection match into the hash.
+ *
+ * On entry we must be holding the lock that protects the hash table.
+ */
+static inline void sfe_ipv4_insert_sfe_ipv4_connection_match(struct sfe_ipv4 *si,
+							     struct sfe_ipv4_connection_match *cm)
+{
+	struct sfe_ipv4_connection_match **hash_head;
+	struct sfe_ipv4_connection_match *prev_head;
+	unsigned int conn_match_idx
+		= sfe_ipv4_get_connection_match_hash(cm->match_dev, cm->match_protocol,
+						     cm->match_src_ip, cm->match_src_port,
+						     cm->match_dest_ip, cm->match_dest_port);
+
+	hash_head = &si->conn_match_hash[conn_match_idx];
+	prev_head = *hash_head;
+	cm->prev = NULL;
+	if (prev_head) {
+		prev_head->prev = cm;
+	}
+
+	cm->next = prev_head;
+	*hash_head = cm;
+}
+
+/*
+ * sfe_ipv4_remove_sfe_ipv4_connection_match()
+ *	Remove a connection match object from the hash.
+ *
+ * On entry we must be holding the lock that protects the hash table.
+ */
+static inline void sfe_ipv4_remove_sfe_ipv4_connection_match(struct sfe_ipv4 *si, struct sfe_ipv4_connection_match *cm)
+{
+	/*
+	 * Unlink the connection match entry from the hash.
+	 */
+	if (cm->prev) {
+		cm->prev->next = cm->next;
+	} else {
+		unsigned int conn_match_idx
+			= sfe_ipv4_get_connection_match_hash(cm->match_dev, cm->match_protocol,
+							     cm->match_src_ip, cm->match_src_port,
+							     cm->match_dest_ip, cm->match_dest_port);
+		si->conn_match_hash[conn_match_idx] = cm->next;
+	}
+
+	if (cm->next) {
+		cm->next->prev = cm->prev;
+	}
+
+	/*
+	 * If the connection match entry is in the active list remove it.
+	 */
+	if (cm->active) {
+		if (likely(cm->active_prev)) {
+			cm->active_prev->active_next = cm->active_next;
+		} else {
+			si->active_head = cm->active_next;
+		}
+
+		if (likely(cm->active_next)) {
+			cm->active_next->active_prev = cm->active_prev;
+		} else {
+			si->active_tail = cm->active_prev;
+		}
+	}
+}
+
+/*
+ * sfe_ipv4_get_connection_hash()
+ *	Generate the hash used in connection lookups.
+ */
+static inline unsigned int sfe_ipv4_get_connection_hash(u8 protocol, __be32 src_ip, __be16 src_port,
+							__be32 dest_ip, __be16 dest_port)
+{
+	u32 hash = ntohl(src_ip ^ dest_ip) ^ protocol ^ ntohs(src_port ^ dest_port);
+	return ((hash >> SFE_IPV4_CONNECTION_HASH_SHIFT) ^ hash) & SFE_IPV4_CONNECTION_HASH_MASK;
+}
+
+/*
+ * sfe_ipv4_find_sfe_ipv4_connection()
+ *	Get the IPv4 connection info that corresponds to a particular 5-tuple.
+ *
+ * On entry we must be holding the lock that protects the hash table.
+ */
+static inline struct sfe_ipv4_connection *sfe_ipv4_find_sfe_ipv4_connection(struct sfe_ipv4 *si, u32 protocol,
+									    __be32 src_ip, __be16 src_port,
+									    __be32 dest_ip, __be16 dest_port)
+{
+	struct sfe_ipv4_connection *c;
+	unsigned int conn_idx = sfe_ipv4_get_connection_hash(protocol, src_ip, src_port, dest_ip, dest_port);
+	c = si->conn_hash[conn_idx];
+
+	/*
+	 * If we don't have anything in this chain then bale.
+	 */
+	if (unlikely(!c)) {
+		return NULL;
+	}
+
+	/*
+	 * Hopefully the first entry is the one we want.
+	 */
+	if ((c->src_port == src_port)
+	    && (c->dest_port == dest_port)
+	    && (c->src_ip == src_ip)
+	    && (c->dest_ip == dest_ip)
+	    && (c->protocol == protocol)) {
+		return c;
+	}
+
+	/*
+	 * Unfortunately we didn't find it at head, so we search it in chain.
+	 */
+	do {
+		c = c->next;
+	} while (c && (c->src_port != src_port
+		 || c->dest_port != dest_port
+		 || c->src_ip != src_ip
+		 || c->dest_ip != dest_ip
+		 || c->protocol != protocol));
+
+	/*
+	 * Will need connection entry for next create/destroy metadata,
+	 * So no need to re-order entry for these requests
+	 */
+	return c;
+}
+
+/*
+ * sfe_ipv4_mark_rule()
+ *	Updates the mark for a current offloaded connection
+ *
+ * Will take hash lock upon entry
+ */
+void sfe_ipv4_mark_rule(struct sfe_connection_mark *mark)
+{
+	struct sfe_ipv4 *si = &__si;
+	struct sfe_ipv4_connection *c;
+
+	spin_lock_bh(&si->lock);
+	c = sfe_ipv4_find_sfe_ipv4_connection(si, mark->protocol,
+					      mark->src_ip.ip, mark->src_port,
+					      mark->dest_ip.ip, mark->dest_port);
+	if (c) {
+		WARN_ON((0 != c->mark) && (0 == mark->mark));
+		c->mark = mark->mark;
+	}
+	spin_unlock_bh(&si->lock);
+
+	if (c) {
+		DEBUG_TRACE("Matching connection found for mark, "
+			    "setting from %08x to %08x\n",
+			    c->mark, mark->mark);
+	}
+}
+
+/*
+ * sfe_ipv4_insert_sfe_ipv4_connection()
+ *	Insert a connection into the hash.
+ *
+ * On entry we must be holding the lock that protects the hash table.
+ */
+static void sfe_ipv4_insert_sfe_ipv4_connection(struct sfe_ipv4 *si, struct sfe_ipv4_connection *c)
+{
+	struct sfe_ipv4_connection **hash_head;
+	struct sfe_ipv4_connection *prev_head;
+	unsigned int conn_idx;
+
+	/*
+	 * Insert entry into the connection hash.
+	 */
+	conn_idx = sfe_ipv4_get_connection_hash(c->protocol, c->src_ip, c->src_port,
+						c->dest_ip, c->dest_port);
+	hash_head = &si->conn_hash[conn_idx];
+	prev_head = *hash_head;
+	c->prev = NULL;
+	if (prev_head) {
+		prev_head->prev = c;
+	}
+
+	c->next = prev_head;
+	*hash_head = c;
+
+	/*
+	 * Insert entry into the "all connections" list.
+	 */
+	if (si->all_connections_tail) {
+		c->all_connections_prev = si->all_connections_tail;
+		si->all_connections_tail->all_connections_next = c;
+	} else {
+		c->all_connections_prev = NULL;
+		si->all_connections_head = c;
+	}
+
+	si->all_connections_tail = c;
+	c->all_connections_next = NULL;
+	si->num_connections++;
+
+	/*
+	 * Insert the connection match objects too.
+	 */
+	sfe_ipv4_insert_sfe_ipv4_connection_match(si, c->original_match);
+	sfe_ipv4_insert_sfe_ipv4_connection_match(si, c->reply_match);
+}
+
+/*
+ * sfe_ipv4_remove_sfe_ipv4_connection()
+ *	Remove a sfe_ipv4_connection object from the hash.
+ *
+ * On entry we must be holding the lock that protects the hash table.
+ */
+static void sfe_ipv4_remove_sfe_ipv4_connection(struct sfe_ipv4 *si, struct sfe_ipv4_connection *c)
+{
+	/*
+	 * Remove the connection match objects.
+	 */
+	sfe_ipv4_remove_sfe_ipv4_connection_match(si, c->reply_match);
+	sfe_ipv4_remove_sfe_ipv4_connection_match(si, c->original_match);
+
+	/*
+	 * Unlink the connection.
+	 */
+	if (c->prev) {
+		c->prev->next = c->next;
+	} else {
+		unsigned int conn_idx = sfe_ipv4_get_connection_hash(c->protocol, c->src_ip, c->src_port,
+								     c->dest_ip, c->dest_port);
+		si->conn_hash[conn_idx] = c->next;
+	}
+
+	if (c->next) {
+		c->next->prev = c->prev;
+	}
+
+	/*
+	 * Unlink connection from all_connections list
+	 */
+	if (c->all_connections_prev) {
+		c->all_connections_prev->all_connections_next = c->all_connections_next;
+	} else {
+		si->all_connections_head = c->all_connections_next;
+	}
+
+	if (c->all_connections_next) {
+		c->all_connections_next->all_connections_prev = c->all_connections_prev;
+	} else {
+		si->all_connections_tail = c->all_connections_prev;
+	}
+
+	si->num_connections--;
+}
+
+/*
+ * sfe_ipv4_sync_sfe_ipv4_connection()
+ *	Sync a connection.
+ *
+ * On entry to this function we expect that the lock for the connection is either
+ * already held or isn't required.
+ */
+static void sfe_ipv4_gen_sync_sfe_ipv4_connection(struct sfe_ipv4 *si, struct sfe_ipv4_connection *c,
+						  struct sfe_connection_sync *sis, sfe_sync_reason_t reason,
+						  u64 now_jiffies)
+{
+	struct sfe_ipv4_connection_match *original_cm;
+	struct sfe_ipv4_connection_match *reply_cm;
+
+	/*
+	 * Fill in the update message.
+	 */
+	sis->is_v6 = 0;
+	sis->protocol = c->protocol;
+	sis->src_ip.ip = c->src_ip;
+	sis->src_ip_xlate.ip = c->src_ip_xlate;
+	sis->dest_ip.ip = c->dest_ip;
+	sis->dest_ip_xlate.ip = c->dest_ip_xlate;
+	sis->src_port = c->src_port;
+	sis->src_port_xlate = c->src_port_xlate;
+	sis->dest_port = c->dest_port;
+	sis->dest_port_xlate = c->dest_port_xlate;
+
+	original_cm = c->original_match;
+	reply_cm = c->reply_match;
+	sis->src_td_max_window = original_cm->protocol_state.tcp.max_win;
+	sis->src_td_end = original_cm->protocol_state.tcp.end;
+	sis->src_td_max_end = original_cm->protocol_state.tcp.max_end;
+	sis->dest_td_max_window = reply_cm->protocol_state.tcp.max_win;
+	sis->dest_td_end = reply_cm->protocol_state.tcp.end;
+	sis->dest_td_max_end = reply_cm->protocol_state.tcp.max_end;
+
+	sis->src_new_packet_count = original_cm->rx_packet_count;
+	sis->src_new_byte_count = original_cm->rx_byte_count;
+	sis->dest_new_packet_count = reply_cm->rx_packet_count;
+	sis->dest_new_byte_count = reply_cm->rx_byte_count;
+
+	sfe_ipv4_connection_match_update_summary_stats(original_cm);
+	sfe_ipv4_connection_match_update_summary_stats(reply_cm);
+
+	sis->src_dev = original_cm->match_dev;
+	sis->src_packet_count = original_cm->rx_packet_count64;
+	sis->src_byte_count = original_cm->rx_byte_count64;
+
+	sis->dest_dev = reply_cm->match_dev;
+	sis->dest_packet_count = reply_cm->rx_packet_count64;
+	sis->dest_byte_count = reply_cm->rx_byte_count64;
+
+	sis->reason = reason;
+
+	/*
+	 * Get the time increment since our last sync.
+	 */
+	sis->delta_jiffies = now_jiffies - c->last_sync_jiffies;
+	c->last_sync_jiffies = now_jiffies;
+}
+
+/*
+ * sfe_ipv4_flush_sfe_ipv4_connection()
+ *	Flush a connection and free all associated resources.
+ *
+ * We need to be called with bottom halves disabled locally as we need to acquire
+ * the connection hash lock and release it again.  In general we're actually called
+ * from within a BH and so we're fine, but we're also called when connections are
+ * torn down.
+ */
+static void sfe_ipv4_flush_sfe_ipv4_connection(struct sfe_ipv4 *si,
+					       struct sfe_ipv4_connection *c,
+					       sfe_sync_reason_t reason)
+{
+	struct sfe_connection_sync sis;
+	u64 now_jiffies;
+	sfe_sync_rule_callback_t sync_rule_callback;
+
+	rcu_read_lock();
+	spin_lock_bh(&si->lock);
+	si->connection_flushes++;
+	sync_rule_callback = rcu_dereference(si->sync_rule_callback);
+	spin_unlock_bh(&si->lock);
+
+	if (sync_rule_callback) {
+		/*
+		 * Generate a sync message and then sync.
+		 */
+		now_jiffies = get_jiffies_64();
+		sfe_ipv4_gen_sync_sfe_ipv4_connection(si, c, &sis, reason, now_jiffies);
+		sync_rule_callback(&sis);
+	}
+
+	rcu_read_unlock();
+
+	/*
+	 * Release our hold of the source and dest devices and free the memory
+	 * for our connection objects.
+	 */
+	dev_put(c->original_dev);
+	dev_put(c->reply_dev);
+	kfree(c->original_match);
+	kfree(c->reply_match);
+	kfree(c);
+}
+
+/*
+ * sfe_ipv4_recv_udp()
+ *	Handle UDP packet receives and forwarding.
+ */
+static int sfe_ipv4_recv_udp(struct sfe_ipv4 *si, struct sk_buff *skb, struct net_device *dev,
+			     unsigned int len, struct sfe_ipv4_ip_hdr *iph, unsigned int ihl, bool flush_on_find)
+{
+	struct sfe_ipv4_udp_hdr *udph;
+	__be32 src_ip;
+	__be32 dest_ip;
+	__be16 src_port;
+	__be16 dest_port;
+	struct sfe_ipv4_connection_match *cm;
+	u8 ttl;
+	struct net_device *xmit_dev;
+
+	/*
+	 * Is our packet too short to contain a valid UDP header?
+	 */
+	if (unlikely(!pskb_may_pull(skb, (sizeof(struct sfe_ipv4_udp_hdr) + ihl)))) {
+		spin_lock_bh(&si->lock);
+		si->exception_events[SFE_IPV4_EXCEPTION_EVENT_UDP_HEADER_INCOMPLETE]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("packet too short for UDP header\n");
+		return 0;
+	}
+
+	/*
+	 * Read the IP address and port information.  Read the IP header data first
+	 * because we've almost certainly got that in the cache.  We may not yet have
+	 * the UDP header cached though so allow more time for any prefetching.
+	 */
+	src_ip = iph->saddr;
+	dest_ip = iph->daddr;
+
+	udph = (struct sfe_ipv4_udp_hdr *)(skb->data + ihl);
+	src_port = udph->source;
+	dest_port = udph->dest;
+
+	spin_lock_bh(&si->lock);
+
+	/*
+	 * Look for a connection match.
+	 */
+	cm = sfe_ipv4_find_sfe_ipv4_connection_match(si, dev, IPPROTO_UDP, src_ip, src_port, dest_ip, dest_port);
+	if (unlikely(!cm)) {
+		si->exception_events[SFE_IPV4_EXCEPTION_EVENT_UDP_NO_CONNECTION]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("no connection found\n");
+		return 0;
+	}
+
+	/*
+	 * If our packet has beern marked as "flush on find" we can't actually
+	 * forward it in the fast path, but now that we've found an associated
+	 * connection we can flush that out before we process the packet.
+	 */
+	if (unlikely(flush_on_find)) {
+		struct sfe_ipv4_connection *c = cm->connection;
+		sfe_ipv4_remove_sfe_ipv4_connection(si, c);
+		si->exception_events[SFE_IPV4_EXCEPTION_EVENT_UDP_IP_OPTIONS_OR_INITIAL_FRAGMENT]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("flush on find\n");
+		sfe_ipv4_flush_sfe_ipv4_connection(si, c, SFE_SYNC_REASON_FLUSH);
+		return 0;
+	}
+
+#ifdef CONFIG_XFRM
+	/*
+	 * We can't accelerate the flow on this direction, just let it go
+	 * through the slow path.
+	 */
+	if (unlikely(!cm->flow_accel)) {
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+		return 0;
+	}
+#endif
+
+	/*
+	 * Does our TTL allow forwarding?
+	 */
+	ttl = iph->ttl;
+	if (unlikely(ttl < 2)) {
+		struct sfe_ipv4_connection *c = cm->connection;
+		sfe_ipv4_remove_sfe_ipv4_connection(si, c);
+		si->exception_events[SFE_IPV4_EXCEPTION_EVENT_UDP_SMALL_TTL]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("ttl too low\n");
+		sfe_ipv4_flush_sfe_ipv4_connection(si, c, SFE_SYNC_REASON_FLUSH);
+		return 0;
+	}
+
+	/*
+	 * If our packet is larger than the MTU of the transmit interface then
+	 * we can't forward it easily.
+	 */
+	if (unlikely(len > cm->xmit_dev_mtu)) {
+		struct sfe_ipv4_connection *c = cm->connection;
+		sfe_ipv4_remove_sfe_ipv4_connection(si, c);
+		si->exception_events[SFE_IPV4_EXCEPTION_EVENT_UDP_NEEDS_FRAGMENTATION]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("larger than mtu\n");
+		sfe_ipv4_flush_sfe_ipv4_connection(si, c, SFE_SYNC_REASON_FLUSH);
+		return 0;
+	}
+
+	/*
+	 * From this point on we're good to modify the packet.
+	 */
+
+	/*
+	 * Update DSCP
+	 */
+	if (unlikely(cm->flags & SFE_IPV4_CONNECTION_MATCH_FLAG_DSCP_REMARK)) {
+		iph->tos = (iph->tos & SFE_IPV4_DSCP_MASK) | cm->dscp;
+	}
+
+	/*
+	 * Decrement our TTL.
+	 */
+	iph->ttl = ttl - 1;
+
+	/*
+	 * Do we have to perform translations of the source address/port?
+	 */
+	if (unlikely(cm->flags & SFE_IPV4_CONNECTION_MATCH_FLAG_XLATE_SRC)) {
+		u16 udp_csum;
+
+		iph->saddr = cm->xlate_src_ip;
+		udph->source = cm->xlate_src_port;
+
+		/*
+		 * Do we have a non-zero UDP checksum?  If we do then we need
+		 * to update it.
+		 */
+		udp_csum = udph->check;
+		if (likely(udp_csum)) {
+			u32 sum;
+
+			if (unlikely(skb->ip_summed == CHECKSUM_PARTIAL)) {
+				sum = udp_csum + cm->xlate_src_partial_csum_adjustment;
+			} else {
+				sum = udp_csum + cm->xlate_src_csum_adjustment;
+			}
+
+			sum = (sum & 0xffff) + (sum >> 16);
+			udph->check = (u16)sum;
+		}
+	}
+
+	/*
+	 * Do we have to perform translations of the destination address/port?
+	 */
+	if (unlikely(cm->flags & SFE_IPV4_CONNECTION_MATCH_FLAG_XLATE_DEST)) {
+		u16 udp_csum;
+
+		iph->daddr = cm->xlate_dest_ip;
+		udph->dest = cm->xlate_dest_port;
+
+		/*
+		 * Do we have a non-zero UDP checksum?  If we do then we need
+		 * to update it.
+		 */
+		udp_csum = udph->check;
+		if (likely(udp_csum)) {
+			u32 sum;
+
+			if (unlikely(skb->ip_summed == CHECKSUM_PARTIAL)) {
+				sum = udp_csum + cm->xlate_dest_partial_csum_adjustment;
+			} else {
+				sum = udp_csum + cm->xlate_dest_csum_adjustment;
+			}
+
+			sum = (sum & 0xffff) + (sum >> 16);
+			udph->check = (u16)sum;
+		}
+	}
+
+	/*
+	 * Replace the IP checksum.
+	 */
+	iph->check = sfe_ipv4_gen_ip_csum(iph);
+
+	/*
+	 * Update traffic stats.
+	 */
+	cm->rx_packet_count++;
+	cm->rx_byte_count += len;
+
+	/*
+	 * If we're not already on the active list then insert ourselves at the tail
+	 * of the current list.
+	 */
+	if (unlikely(!cm->active)) {
+		cm->active = true;
+		cm->active_prev = si->active_tail;
+		if (likely(si->active_tail)) {
+			si->active_tail->active_next = cm;
+		} else {
+			si->active_head = cm;
+		}
+		si->active_tail = cm;
+	}
+
+	xmit_dev = cm->xmit_dev;
+	skb->dev = xmit_dev;
+
+	/*
+	 * Check to see if we need to write a header.
+	 */
+	if (likely(cm->flags & SFE_IPV4_CONNECTION_MATCH_FLAG_WRITE_L2_HDR)) {
+		if (unlikely(!(cm->flags & SFE_IPV4_CONNECTION_MATCH_FLAG_WRITE_FAST_ETH_HDR))) {
+			dev_hard_header(skb, xmit_dev, ETH_P_IP,
+					cm->xmit_dest_mac, cm->xmit_src_mac, len);
+		} else {
+			/*
+			 * For the simple case we write this really fast.
+			 */
+			struct sfe_ipv4_eth_hdr *eth = (struct sfe_ipv4_eth_hdr *)__skb_push(skb, ETH_HLEN);
+			eth->h_proto = htons(ETH_P_IP);
+			eth->h_dest[0] = cm->xmit_dest_mac[0];
+			eth->h_dest[1] = cm->xmit_dest_mac[1];
+			eth->h_dest[2] = cm->xmit_dest_mac[2];
+			eth->h_source[0] = cm->xmit_src_mac[0];
+			eth->h_source[1] = cm->xmit_src_mac[1];
+			eth->h_source[2] = cm->xmit_src_mac[2];
+		}
+	}
+
+	/*
+	 * Update priority of skb.
+	 */
+	if (unlikely(cm->flags & SFE_IPV4_CONNECTION_MATCH_FLAG_PRIORITY_REMARK)) {
+		skb->priority = cm->priority;
+	}
+
+	/*
+	 * Mark outgoing packet.
+	 */
+	skb->mark = cm->connection->mark;
+	if (skb->mark) {
+		DEBUG_TRACE("SKB MARK is NON ZERO %x\n", skb->mark);
+	}
+
+	si->packets_forwarded++;
+	spin_unlock_bh(&si->lock);
+
+	/*
+	 * We're going to check for GSO flags when we transmit the packet so
+	 * start fetching the necessary cache line now.
+	 */
+	prefetch(skb_shinfo(skb));
+
+	/*
+	 * Mark that this packet has been fast forwarded.
+	 */
+	skb->fast_forwarded = 1;
+
+	/*
+	 * Send the packet on its way.
+	 */
+	dev_queue_xmit(skb);
+
+	return 1;
+}
+
+/*
+ * sfe_ipv4_process_tcp_option_sack()
+ *	Parse TCP SACK option and update ack according
+ */
+static bool sfe_ipv4_process_tcp_option_sack(const struct sfe_ipv4_tcp_hdr *th, const u32 data_offs,
+					     u32 *ack)
+{
+	u32 length = sizeof(struct sfe_ipv4_tcp_hdr);
+	u8 *ptr = (u8 *)th + length;
+
+	/*
+	 * Ignore processing if TCP packet has only TIMESTAMP option.
+	 */
+	if (likely(data_offs == length + TCPOLEN_TIMESTAMP + 1 + 1)
+	    && likely(ptr[0] == TCPOPT_NOP)
+	    && likely(ptr[1] == TCPOPT_NOP)
+	    && likely(ptr[2] == TCPOPT_TIMESTAMP)
+	    && likely(ptr[3] == TCPOLEN_TIMESTAMP)) {
+		return true;
+	}
+
+	/*
+	 * TCP options. Parse SACK option.
+	 */
+	while (length < data_offs) {
+		u8 size;
+		u8 kind;
+
+		ptr = (u8 *)th + length;
+		kind = *ptr;
+
+		/*
+		 * NOP, for padding
+		 * Not in the switch because to fast escape and to not calculate size
+		 */
+		if (kind == TCPOPT_NOP) {
+			length++;
+			continue;
+		}
+
+		if (kind == TCPOPT_SACK) {
+			u32 sack = 0;
+			u8 re = 1 + 1;
+
+			size = *(ptr + 1);
+			if ((size < (1 + 1 + TCPOLEN_SACK_PERBLOCK))
+			    || ((size - (1 + 1)) % (TCPOLEN_SACK_PERBLOCK))
+			    || (size > (data_offs - length))) {
+				return false;
+			}
+
+			re += 4;
+			while (re < size) {
+				u32 sack_re;
+				u8 *sptr = ptr + re;
+				sack_re = (sptr[0] << 24) | (sptr[1] << 16) | (sptr[2] << 8) | sptr[3];
+				if (sack_re > sack) {
+					sack = sack_re;
+				}
+				re += TCPOLEN_SACK_PERBLOCK;
+			}
+			if (sack > *ack) {
+				*ack = sack;
+			}
+			length += size;
+			continue;
+		}
+		if (kind == TCPOPT_EOL) {
+			return true;
+		}
+		size = *(ptr + 1);
+		if (size < 2) {
+			return false;
+		}
+		length += size;
+	}
+
+	return true;
+}
+
+/*
+ * sfe_ipv4_recv_tcp()
+ *	Handle TCP packet receives and forwarding.
+ */
+static int sfe_ipv4_recv_tcp(struct sfe_ipv4 *si, struct sk_buff *skb, struct net_device *dev,
+			     unsigned int len, struct sfe_ipv4_ip_hdr *iph, unsigned int ihl, bool flush_on_find)
+{
+	struct sfe_ipv4_tcp_hdr *tcph;
+	__be32 src_ip;
+	__be32 dest_ip;
+	__be16 src_port;
+	__be16 dest_port;
+	struct sfe_ipv4_connection_match *cm;
+	struct sfe_ipv4_connection_match *counter_cm;
+	u8 ttl;
+	u32 flags;
+	struct net_device *xmit_dev;
+
+	/*
+	 * Is our packet too short to contain a valid UDP header?
+	 */
+	if (unlikely(!pskb_may_pull(skb, (sizeof(struct sfe_ipv4_tcp_hdr) + ihl)))) {
+		spin_lock_bh(&si->lock);
+		si->exception_events[SFE_IPV4_EXCEPTION_EVENT_TCP_HEADER_INCOMPLETE]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("packet too short for TCP header\n");
+		return 0;
+	}
+
+	/*
+	 * Read the IP address and port information.  Read the IP header data first
+	 * because we've almost certainly got that in the cache.  We may not yet have
+	 * the TCP header cached though so allow more time for any prefetching.
+	 */
+	src_ip = iph->saddr;
+	dest_ip = iph->daddr;
+
+	tcph = (struct sfe_ipv4_tcp_hdr *)(skb->data + ihl);
+	src_port = tcph->source;
+	dest_port = tcph->dest;
+	flags = tcp_flag_word(tcph);
+
+	spin_lock_bh(&si->lock);
+
+	/*
+	 * Look for a connection match.
+	 */
+	cm = sfe_ipv4_find_sfe_ipv4_connection_match(si, dev, IPPROTO_TCP, src_ip, src_port, dest_ip, dest_port);
+	if (unlikely(!cm)) {
+		/*
+		 * We didn't get a connection but as TCP is connection-oriented that
+		 * may be because this is a non-fast connection (not running established).
+		 * For diagnostic purposes we differentiate this here.
+		 */
+		if (likely((flags & (TCP_FLAG_SYN | TCP_FLAG_RST | TCP_FLAG_FIN | TCP_FLAG_ACK)) == TCP_FLAG_ACK)) {
+			si->exception_events[SFE_IPV4_EXCEPTION_EVENT_TCP_NO_CONNECTION_FAST_FLAGS]++;
+			si->packets_not_forwarded++;
+			spin_unlock_bh(&si->lock);
+
+			DEBUG_TRACE("no connection found - fast flags\n");
+			return 0;
+		}
+		si->exception_events[SFE_IPV4_EXCEPTION_EVENT_TCP_NO_CONNECTION_SLOW_FLAGS]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("no connection found - slow flags: 0x%x\n",
+			    flags & (TCP_FLAG_SYN | TCP_FLAG_RST | TCP_FLAG_FIN | TCP_FLAG_ACK));
+		return 0;
+	}
+
+	/*
+	 * If our packet has beern marked as "flush on find" we can't actually
+	 * forward it in the fast path, but now that we've found an associated
+	 * connection we can flush that out before we process the packet.
+	 */
+	if (unlikely(flush_on_find)) {
+		struct sfe_ipv4_connection *c = cm->connection;
+		sfe_ipv4_remove_sfe_ipv4_connection(si, c);
+		si->exception_events[SFE_IPV4_EXCEPTION_EVENT_TCP_IP_OPTIONS_OR_INITIAL_FRAGMENT]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("flush on find\n");
+		sfe_ipv4_flush_sfe_ipv4_connection(si, c, SFE_SYNC_REASON_FLUSH);
+		return 0;
+	}
+
+#ifdef CONFIG_XFRM
+	/*
+	 * We can't accelerate the flow on this direction, just let it go
+	 * through the slow path.
+	 */
+	if (unlikely(!cm->flow_accel)) {
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+		return 0;
+	}
+#endif
+	/*
+	 * Does our TTL allow forwarding?
+	 */
+	ttl = iph->ttl;
+	if (unlikely(ttl < 2)) {
+		struct sfe_ipv4_connection *c = cm->connection;
+		sfe_ipv4_remove_sfe_ipv4_connection(si, c);
+		si->exception_events[SFE_IPV4_EXCEPTION_EVENT_TCP_SMALL_TTL]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("ttl too low\n");
+		sfe_ipv4_flush_sfe_ipv4_connection(si, c, SFE_SYNC_REASON_FLUSH);
+		return 0;
+	}
+
+	/*
+	 * If our packet is larger than the MTU of the transmit interface then
+	 * we can't forward it easily.
+	 */
+	if (unlikely((len > cm->xmit_dev_mtu) && !skb_is_gso(skb))) {
+		struct sfe_ipv4_connection *c = cm->connection;
+		sfe_ipv4_remove_sfe_ipv4_connection(si, c);
+		si->exception_events[SFE_IPV4_EXCEPTION_EVENT_TCP_NEEDS_FRAGMENTATION]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("larger than mtu\n");
+		sfe_ipv4_flush_sfe_ipv4_connection(si, c, SFE_SYNC_REASON_FLUSH);
+		return 0;
+	}
+
+	/*
+	 * Look at our TCP flags.  Anything missing an ACK or that has RST, SYN or FIN
+	 * set is not a fast path packet.
+	 */
+	if (unlikely((flags & (TCP_FLAG_SYN | TCP_FLAG_RST | TCP_FLAG_FIN | TCP_FLAG_ACK)) != TCP_FLAG_ACK)) {
+		struct sfe_ipv4_connection *c = cm->connection;
+		sfe_ipv4_remove_sfe_ipv4_connection(si, c);
+		si->exception_events[SFE_IPV4_EXCEPTION_EVENT_TCP_FLAGS]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("TCP flags: 0x%x are not fast\n",
+			    flags & (TCP_FLAG_SYN | TCP_FLAG_RST | TCP_FLAG_FIN | TCP_FLAG_ACK));
+		sfe_ipv4_flush_sfe_ipv4_connection(si, c, SFE_SYNC_REASON_FLUSH);
+		return 0;
+	}
+
+	counter_cm = cm->counter_match;
+
+	/*
+	 * Are we doing sequence number checking?
+	 */
+	if (likely(!(cm->flags & SFE_IPV4_CONNECTION_MATCH_FLAG_NO_SEQ_CHECK))) {
+		u32 seq;
+		u32 ack;
+		u32 sack;
+		u32 data_offs;
+		u32 end;
+		u32 left_edge;
+		u32 scaled_win;
+		u32 max_end;
+
+		/*
+		 * Is our sequence fully past the right hand edge of the window?
+		 */
+		seq = ntohl(tcph->seq);
+		if (unlikely((s32)(seq - (cm->protocol_state.tcp.max_end + 1)) > 0)) {
+			struct sfe_ipv4_connection *c = cm->connection;
+			sfe_ipv4_remove_sfe_ipv4_connection(si, c);
+			si->exception_events[SFE_IPV4_EXCEPTION_EVENT_TCP_SEQ_EXCEEDS_RIGHT_EDGE]++;
+			si->packets_not_forwarded++;
+			spin_unlock_bh(&si->lock);
+
+			DEBUG_TRACE("seq: %u exceeds right edge: %u\n",
+				    seq, cm->protocol_state.tcp.max_end + 1);
+			sfe_ipv4_flush_sfe_ipv4_connection(si, c, SFE_SYNC_REASON_FLUSH);
+			return 0;
+		}
+
+		/*
+		 * Check that our TCP data offset isn't too short.
+		 */
+		data_offs = tcph->doff << 2;
+		if (unlikely(data_offs < sizeof(struct sfe_ipv4_tcp_hdr))) {
+			struct sfe_ipv4_connection *c = cm->connection;
+			sfe_ipv4_remove_sfe_ipv4_connection(si, c);
+			si->exception_events[SFE_IPV4_EXCEPTION_EVENT_TCP_SMALL_DATA_OFFS]++;
+			si->packets_not_forwarded++;
+			spin_unlock_bh(&si->lock);
+
+			DEBUG_TRACE("TCP data offset: %u, too small\n", data_offs);
+			sfe_ipv4_flush_sfe_ipv4_connection(si, c, SFE_SYNC_REASON_FLUSH);
+			return 0;
+		}
+
+		/*
+		 * Update ACK according to any SACK option.
+		 */
+		ack = ntohl(tcph->ack_seq);
+		sack = ack;
+		if (unlikely(!sfe_ipv4_process_tcp_option_sack(tcph, data_offs, &sack))) {
+			struct sfe_ipv4_connection *c = cm->connection;
+			sfe_ipv4_remove_sfe_ipv4_connection(si, c);
+			si->exception_events[SFE_IPV4_EXCEPTION_EVENT_TCP_BAD_SACK]++;
+			si->packets_not_forwarded++;
+			spin_unlock_bh(&si->lock);
+
+			DEBUG_TRACE("TCP option SACK size is wrong\n");
+			sfe_ipv4_flush_sfe_ipv4_connection(si, c, SFE_SYNC_REASON_FLUSH);
+			return 0;
+		}
+
+		/*
+		 * Check that our TCP data offset isn't past the end of the packet.
+		 */
+		data_offs += sizeof(struct sfe_ipv4_ip_hdr);
+		if (unlikely(len < data_offs)) {
+			struct sfe_ipv4_connection *c = cm->connection;
+			sfe_ipv4_remove_sfe_ipv4_connection(si, c);
+			si->exception_events[SFE_IPV4_EXCEPTION_EVENT_TCP_BIG_DATA_OFFS]++;
+			si->packets_not_forwarded++;
+			spin_unlock_bh(&si->lock);
+
+			DEBUG_TRACE("TCP data offset: %u, past end of packet: %u\n",
+				    data_offs, len);
+			sfe_ipv4_flush_sfe_ipv4_connection(si, c, SFE_SYNC_REASON_FLUSH);
+			return 0;
+		}
+
+		end = seq + len - data_offs;
+
+		/*
+		 * Is our sequence fully before the left hand edge of the window?
+		 */
+		if (unlikely((s32)(end - (cm->protocol_state.tcp.end
+						- counter_cm->protocol_state.tcp.max_win - 1)) < 0)) {
+			struct sfe_ipv4_connection *c = cm->connection;
+			sfe_ipv4_remove_sfe_ipv4_connection(si, c);
+			si->exception_events[SFE_IPV4_EXCEPTION_EVENT_TCP_SEQ_BEFORE_LEFT_EDGE]++;
+			si->packets_not_forwarded++;
+			spin_unlock_bh(&si->lock);
+
+			DEBUG_TRACE("seq: %u before left edge: %u\n",
+				    end, cm->protocol_state.tcp.end - counter_cm->protocol_state.tcp.max_win - 1);
+			sfe_ipv4_flush_sfe_ipv4_connection(si, c, SFE_SYNC_REASON_FLUSH);
+			return 0;
+		}
+
+		/*
+		 * Are we acking data that is to the right of what has been sent?
+		 */
+		if (unlikely((s32)(sack - (counter_cm->protocol_state.tcp.end + 1)) > 0)) {
+			struct sfe_ipv4_connection *c = cm->connection;
+			sfe_ipv4_remove_sfe_ipv4_connection(si, c);
+			si->exception_events[SFE_IPV4_EXCEPTION_EVENT_TCP_ACK_EXCEEDS_RIGHT_EDGE]++;
+			si->packets_not_forwarded++;
+			spin_unlock_bh(&si->lock);
+
+			DEBUG_TRACE("ack: %u exceeds right edge: %u\n",
+				    sack, counter_cm->protocol_state.tcp.end + 1);
+			sfe_ipv4_flush_sfe_ipv4_connection(si, c, SFE_SYNC_REASON_FLUSH);
+			return 0;
+		}
+
+		/*
+		 * Is our ack too far before the left hand edge of the window?
+		 */
+		left_edge = counter_cm->protocol_state.tcp.end
+			    - cm->protocol_state.tcp.max_win
+			    - SFE_IPV4_TCP_MAX_ACK_WINDOW
+			    - 1;
+		if (unlikely((s32)(sack - left_edge) < 0)) {
+			struct sfe_ipv4_connection *c = cm->connection;
+			sfe_ipv4_remove_sfe_ipv4_connection(si, c);
+			si->exception_events[SFE_IPV4_EXCEPTION_EVENT_TCP_ACK_BEFORE_LEFT_EDGE]++;
+			si->packets_not_forwarded++;
+			spin_unlock_bh(&si->lock);
+
+			DEBUG_TRACE("ack: %u before left edge: %u\n", sack, left_edge);
+			sfe_ipv4_flush_sfe_ipv4_connection(si, c, SFE_SYNC_REASON_FLUSH);
+			return 0;
+		}
+
+		/*
+		 * Have we just seen the largest window size yet for this connection?  If yes
+		 * then we need to record the new value.
+		 */
+		scaled_win = ntohs(tcph->window) << cm->protocol_state.tcp.win_scale;
+		scaled_win += (sack - ack);
+		if (unlikely(cm->protocol_state.tcp.max_win < scaled_win)) {
+			cm->protocol_state.tcp.max_win = scaled_win;
+		}
+
+		/*
+		 * If our sequence and/or ack numbers have advanced then record the new state.
+		 */
+		if (likely((s32)(end - cm->protocol_state.tcp.end) >= 0)) {
+			cm->protocol_state.tcp.end = end;
+		}
+
+		max_end = sack + scaled_win;
+		if (likely((s32)(max_end - counter_cm->protocol_state.tcp.max_end) >= 0)) {
+			counter_cm->protocol_state.tcp.max_end = max_end;
+		}
+	}
+
+	/*
+	 * From this point on we're good to modify the packet.
+	 */
+
+	/*
+	 * Update DSCP
+	 */
+	if (unlikely(cm->flags & SFE_IPV4_CONNECTION_MATCH_FLAG_DSCP_REMARK)) {
+		iph->tos = (iph->tos & SFE_IPV4_DSCP_MASK) | cm->dscp;
+	}
+
+	/*
+	 * Decrement our TTL.
+	 */
+	iph->ttl = ttl - 1;
+
+	/*
+	 * Do we have to perform translations of the source address/port?
+	 */
+	if (unlikely(cm->flags & SFE_IPV4_CONNECTION_MATCH_FLAG_XLATE_SRC)) {
+		u16 tcp_csum;
+		u32 sum;
+
+		iph->saddr = cm->xlate_src_ip;
+		tcph->source = cm->xlate_src_port;
+
+		/*
+		 * Do we have a non-zero UDP checksum?  If we do then we need
+		 * to update it.
+		 */
+		tcp_csum = tcph->check;
+		if (unlikely(skb->ip_summed == CHECKSUM_PARTIAL)) {
+			sum = tcp_csum + cm->xlate_src_partial_csum_adjustment;
+		} else {
+			sum = tcp_csum + cm->xlate_src_csum_adjustment;
+		}
+
+		sum = (sum & 0xffff) + (sum >> 16);
+		tcph->check = (u16)sum;
+	}
+
+	/*
+	 * Do we have to perform translations of the destination address/port?
+	 */
+	if (unlikely(cm->flags & SFE_IPV4_CONNECTION_MATCH_FLAG_XLATE_DEST)) {
+		u16 tcp_csum;
+		u32 sum;
+
+		iph->daddr = cm->xlate_dest_ip;
+		tcph->dest = cm->xlate_dest_port;
+
+		/*
+		 * Do we have a non-zero UDP checksum?  If we do then we need
+		 * to update it.
+		 */
+		tcp_csum = tcph->check;
+		if (unlikely(skb->ip_summed == CHECKSUM_PARTIAL)) {
+			sum = tcp_csum + cm->xlate_dest_partial_csum_adjustment;
+		} else {
+			sum = tcp_csum + cm->xlate_dest_csum_adjustment;
+		}
+
+		sum = (sum & 0xffff) + (sum >> 16);
+		tcph->check = (u16)sum;
+	}
+
+	/*
+	 * Replace the IP checksum.
+	 */
+	iph->check = sfe_ipv4_gen_ip_csum(iph);
+
+	/*
+	 * Update traffic stats.
+	 */
+	cm->rx_packet_count++;
+	cm->rx_byte_count += len;
+
+	/*
+	 * If we're not already on the active list then insert ourselves at the tail
+	 * of the current list.
+	 */
+	if (unlikely(!cm->active)) {
+		cm->active = true;
+		cm->active_prev = si->active_tail;
+		if (likely(si->active_tail)) {
+			si->active_tail->active_next = cm;
+		} else {
+			si->active_head = cm;
+		}
+		si->active_tail = cm;
+	}
+
+	xmit_dev = cm->xmit_dev;
+	skb->dev = xmit_dev;
+
+	/*
+	 * Check to see if we need to write a header.
+	 */
+	if (likely(cm->flags & SFE_IPV4_CONNECTION_MATCH_FLAG_WRITE_L2_HDR)) {
+		if (unlikely(!(cm->flags & SFE_IPV4_CONNECTION_MATCH_FLAG_WRITE_FAST_ETH_HDR))) {
+			dev_hard_header(skb, xmit_dev, ETH_P_IP,
+					cm->xmit_dest_mac, cm->xmit_src_mac, len);
+		} else {
+			/*
+			 * For the simple case we write this really fast.
+			 */
+			struct sfe_ipv4_eth_hdr *eth = (struct sfe_ipv4_eth_hdr *)__skb_push(skb, ETH_HLEN);
+			eth->h_proto = htons(ETH_P_IP);
+			eth->h_dest[0] = cm->xmit_dest_mac[0];
+			eth->h_dest[1] = cm->xmit_dest_mac[1];
+			eth->h_dest[2] = cm->xmit_dest_mac[2];
+			eth->h_source[0] = cm->xmit_src_mac[0];
+			eth->h_source[1] = cm->xmit_src_mac[1];
+			eth->h_source[2] = cm->xmit_src_mac[2];
+		}
+	}
+
+	/*
+	 * Update priority of skb.
+	 */
+	if (unlikely(cm->flags & SFE_IPV4_CONNECTION_MATCH_FLAG_PRIORITY_REMARK)) {
+		skb->priority = cm->priority;
+	}
+
+	/*
+	 * Mark outgoing packet
+	 */
+	skb->mark = cm->connection->mark;
+	if (skb->mark) {
+		DEBUG_TRACE("SKB MARK is NON ZERO %x\n", skb->mark);
+	}
+
+	si->packets_forwarded++;
+	spin_unlock_bh(&si->lock);
+
+	/*
+	 * We're going to check for GSO flags when we transmit the packet so
+	 * start fetching the necessary cache line now.
+	 */
+	prefetch(skb_shinfo(skb));
+
+	/*
+	 * Mark that this packet has been fast forwarded.
+	 */
+	skb->fast_forwarded = 1;
+
+	/*
+	 * Send the packet on its way.
+	 */
+	dev_queue_xmit(skb);
+
+	return 1;
+}
+
+/*
+ * sfe_ipv4_recv_icmp()
+ *	Handle ICMP packet receives.
+ *
+ * ICMP packets aren't handled as a "fast path" and always have us process them
+ * through the default Linux stack.  What we do need to do is look for any errors
+ * about connections we are handling in the fast path.  If we find any such
+ * connections then we want to flush their state so that the ICMP error path
+ * within Linux has all of the correct state should it need it.
+ */
+static int sfe_ipv4_recv_icmp(struct sfe_ipv4 *si, struct sk_buff *skb, struct net_device *dev,
+			      unsigned int len, struct sfe_ipv4_ip_hdr *iph, unsigned int ihl)
+{
+	struct icmphdr *icmph;
+	struct sfe_ipv4_ip_hdr *icmp_iph;
+	unsigned int icmp_ihl_words;
+	unsigned int icmp_ihl;
+	u32 *icmp_trans_h;
+	struct sfe_ipv4_udp_hdr *icmp_udph;
+	struct sfe_ipv4_tcp_hdr *icmp_tcph;
+	__be32 src_ip;
+	__be32 dest_ip;
+	__be16 src_port;
+	__be16 dest_port;
+	struct sfe_ipv4_connection_match *cm;
+	struct sfe_ipv4_connection *c;
+	u32 pull_len = sizeof(struct icmphdr) + ihl;
+
+	/*
+	 * Is our packet too short to contain a valid ICMP header?
+	 */
+	len -= ihl;
+	if (!pskb_may_pull(skb, pull_len)) {
+		spin_lock_bh(&si->lock);
+		si->exception_events[SFE_IPV4_EXCEPTION_EVENT_ICMP_HEADER_INCOMPLETE]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("packet too short for ICMP header\n");
+		return 0;
+	}
+
+	/*
+	 * We only handle "destination unreachable" and "time exceeded" messages.
+	 */
+	icmph = (struct icmphdr *)(skb->data + ihl);
+	if ((icmph->type != ICMP_DEST_UNREACH)
+	    && (icmph->type != ICMP_TIME_EXCEEDED)) {
+		spin_lock_bh(&si->lock);
+		si->exception_events[SFE_IPV4_EXCEPTION_EVENT_ICMP_UNHANDLED_TYPE]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("unhandled ICMP type: 0x%x\n", icmph->type);
+		return 0;
+	}
+
+	/*
+	 * Do we have the full embedded IP header?
+	 */
+	len -= sizeof(struct icmphdr);
+	pull_len += sizeof(struct sfe_ipv4_ip_hdr);
+	if (!pskb_may_pull(skb, pull_len)) {
+		spin_lock_bh(&si->lock);
+		si->exception_events[SFE_IPV4_EXCEPTION_EVENT_ICMP_IPV4_HEADER_INCOMPLETE]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("Embedded IP header not complete\n");
+		return 0;
+	}
+
+	/*
+	 * Is our embedded IP version wrong?
+	 */
+	icmp_iph = (struct sfe_ipv4_ip_hdr *)(icmph + 1);
+	if (unlikely(icmp_iph->version != 4)) {
+		spin_lock_bh(&si->lock);
+		si->exception_events[SFE_IPV4_EXCEPTION_EVENT_ICMP_IPV4_NON_V4]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("IP version: %u\n", icmp_iph->version);
+		return 0;
+	}
+
+	/*
+	 * Do we have the full embedded IP header, including any options?
+	 */
+	icmp_ihl_words = icmp_iph->ihl;
+	icmp_ihl = icmp_ihl_words << 2;
+	pull_len += icmp_ihl - sizeof(struct sfe_ipv4_ip_hdr);
+	if (!pskb_may_pull(skb, pull_len)) {
+		spin_lock_bh(&si->lock);
+		si->exception_events[SFE_IPV4_EXCEPTION_EVENT_ICMP_IPV4_IP_OPTIONS_INCOMPLETE]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("Embedded header not large enough for IP options\n");
+		return 0;
+	}
+
+	len -= icmp_ihl;
+	icmp_trans_h = ((u32 *)icmp_iph) + icmp_ihl_words;
+
+	/*
+	 * Handle the embedded transport layer header.
+	 */
+	switch (icmp_iph->protocol) {
+	case IPPROTO_UDP:
+		/*
+		 * We should have 8 bytes of UDP header - that's enough to identify
+		 * the connection.
+		 */
+		pull_len += 8;
+		if (!pskb_may_pull(skb, pull_len)) {
+			spin_lock_bh(&si->lock);
+			si->exception_events[SFE_IPV4_EXCEPTION_EVENT_ICMP_IPV4_UDP_HEADER_INCOMPLETE]++;
+			si->packets_not_forwarded++;
+			spin_unlock_bh(&si->lock);
+
+			DEBUG_TRACE("Incomplete embedded UDP header\n");
+			return 0;
+		}
+
+		icmp_udph = (struct sfe_ipv4_udp_hdr *)icmp_trans_h;
+		src_port = icmp_udph->source;
+		dest_port = icmp_udph->dest;
+		break;
+
+	case IPPROTO_TCP:
+		/*
+		 * We should have 8 bytes of TCP header - that's enough to identify
+		 * the connection.
+		 */
+		pull_len += 8;
+		if (!pskb_may_pull(skb, pull_len)) {
+			spin_lock_bh(&si->lock);
+			si->exception_events[SFE_IPV4_EXCEPTION_EVENT_ICMP_IPV4_TCP_HEADER_INCOMPLETE]++;
+			si->packets_not_forwarded++;
+			spin_unlock_bh(&si->lock);
+
+			DEBUG_TRACE("Incomplete embedded TCP header\n");
+			return 0;
+		}
+
+		icmp_tcph = (struct sfe_ipv4_tcp_hdr *)icmp_trans_h;
+		src_port = icmp_tcph->source;
+		dest_port = icmp_tcph->dest;
+		break;
+
+	default:
+		spin_lock_bh(&si->lock);
+		si->exception_events[SFE_IPV4_EXCEPTION_EVENT_ICMP_IPV4_UNHANDLED_PROTOCOL]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("Unhandled embedded IP protocol: %u\n", icmp_iph->protocol);
+		return 0;
+	}
+
+	src_ip = icmp_iph->saddr;
+	dest_ip = icmp_iph->daddr;
+
+	spin_lock_bh(&si->lock);
+
+	/*
+	 * Look for a connection match.  Note that we reverse the source and destination
+	 * here because our embedded message contains a packet that was sent in the
+	 * opposite direction to the one in which we just received it.  It will have
+	 * been sent on the interface from which we received it though so that's still
+	 * ok to use.
+	 */
+	cm = sfe_ipv4_find_sfe_ipv4_connection_match(si, dev, icmp_iph->protocol, dest_ip, dest_port, src_ip, src_port);
+	if (unlikely(!cm)) {
+		si->exception_events[SFE_IPV4_EXCEPTION_EVENT_ICMP_NO_CONNECTION]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("no connection found\n");
+		return 0;
+	}
+
+	/*
+	 * We found a connection so now remove it from the connection list and flush
+	 * its state.
+	 */
+	c = cm->connection;
+	sfe_ipv4_remove_sfe_ipv4_connection(si, c);
+	si->exception_events[SFE_IPV4_EXCEPTION_EVENT_ICMP_FLUSHED_CONNECTION]++;
+	si->packets_not_forwarded++;
+	spin_unlock_bh(&si->lock);
+
+	sfe_ipv4_flush_sfe_ipv4_connection(si, c, SFE_SYNC_REASON_FLUSH);
+	return 0;
+}
+
+/*
+ * sfe_ipv4_recv()
+ *	Handle packet receives and forwaring.
+ *
+ * Returns 1 if the packet is forwarded or 0 if it isn't.
+ */
+int sfe_ipv4_recv(struct net_device *dev, struct sk_buff *skb)
+{
+	struct sfe_ipv4 *si = &__si;
+	unsigned int len;
+	unsigned int tot_len;
+	unsigned int frag_off;
+	unsigned int ihl;
+	bool flush_on_find;
+	bool ip_options;
+	struct sfe_ipv4_ip_hdr *iph;
+	u32 protocol;
+
+	/*
+	 * Check that we have space for an IP header here.
+	 */
+	len = skb->len;
+	if (unlikely(!pskb_may_pull(skb, sizeof(struct sfe_ipv4_ip_hdr)))) {
+		spin_lock_bh(&si->lock);
+		si->exception_events[SFE_IPV4_EXCEPTION_EVENT_HEADER_INCOMPLETE]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("len: %u is too short\n", len);
+		return 0;
+	}
+
+	/*
+	 * Check that our "total length" is large enough for an IP header.
+	 */
+	iph = (struct sfe_ipv4_ip_hdr *)skb->data;
+	tot_len = ntohs(iph->tot_len);
+	if (unlikely(tot_len < sizeof(struct sfe_ipv4_ip_hdr))) {
+		spin_lock_bh(&si->lock);
+		si->exception_events[SFE_IPV4_EXCEPTION_EVENT_BAD_TOTAL_LENGTH]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("tot_len: %u is too short\n", tot_len);
+		return 0;
+	}
+
+	/*
+	 * Is our IP version wrong?
+	 */
+	if (unlikely(iph->version != 4)) {
+		spin_lock_bh(&si->lock);
+		si->exception_events[SFE_IPV4_EXCEPTION_EVENT_NON_V4]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("IP version: %u\n", iph->version);
+		return 0;
+	}
+
+	/*
+	 * Does our datagram fit inside the skb?
+	 */
+	if (unlikely(tot_len > len)) {
+		spin_lock_bh(&si->lock);
+		si->exception_events[SFE_IPV4_EXCEPTION_EVENT_DATAGRAM_INCOMPLETE]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("tot_len: %u, exceeds len: %u\n", tot_len, len);
+		return 0;
+	}
+
+	/*
+	 * Do we have a non-initial fragment?
+	 */
+	frag_off = ntohs(iph->frag_off);
+	if (unlikely(frag_off & IP_OFFSET)) {
+		spin_lock_bh(&si->lock);
+		si->exception_events[SFE_IPV4_EXCEPTION_EVENT_NON_INITIAL_FRAGMENT]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("non-initial fragment\n");
+		return 0;
+	}
+
+	/*
+	 * If we have a (first) fragment then mark it to cause any connection to flush.
+	 */
+	flush_on_find = unlikely(frag_off & IP_MF) ? true : false;
+
+	/*
+	 * Do we have any IP options?  That's definite a slow path!  If we do have IP
+	 * options we need to recheck our header size.
+	 */
+	ihl = iph->ihl << 2;
+	ip_options = unlikely(ihl != sizeof(struct sfe_ipv4_ip_hdr)) ? true : false;
+	if (unlikely(ip_options)) {
+		if (unlikely(len < ihl)) {
+			spin_lock_bh(&si->lock);
+			si->exception_events[SFE_IPV4_EXCEPTION_EVENT_IP_OPTIONS_INCOMPLETE]++;
+			si->packets_not_forwarded++;
+			spin_unlock_bh(&si->lock);
+
+			DEBUG_TRACE("len: %u is too short for header of size: %u\n", len, ihl);
+			return 0;
+		}
+
+		flush_on_find = true;
+	}
+
+	if (unlikely(ip_fast_csum((u8 *)iph, iph->ihl))) {
+		spin_lock_bh(&si->lock);
+		si->exception_events[SFE_IPV4_EXCEPTION_EVENT_CSUM_ERROR]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("checksum of ipv4 header is invalid\n");
+		return 0;
+	}
+
+	protocol = iph->protocol;
+	if (IPPROTO_UDP == protocol) {
+		return sfe_ipv4_recv_udp(si, skb, dev, len, iph, ihl, flush_on_find);
+	}
+
+	if (IPPROTO_TCP == protocol) {
+		return sfe_ipv4_recv_tcp(si, skb, dev, len, iph, ihl, flush_on_find);
+	}
+
+	if (IPPROTO_ICMP == protocol) {
+		return sfe_ipv4_recv_icmp(si, skb, dev, len, iph, ihl);
+	}
+
+	spin_lock_bh(&si->lock);
+	si->exception_events[SFE_IPV4_EXCEPTION_EVENT_UNHANDLED_PROTOCOL]++;
+	si->packets_not_forwarded++;
+	spin_unlock_bh(&si->lock);
+
+	DEBUG_TRACE("not UDP, TCP or ICMP: %u\n", protocol);
+	return 0;
+}
+
+static void
+sfe_ipv4_update_tcp_state(struct sfe_ipv4_connection *c,
+			  struct sfe_connection_create *sic)
+{
+	struct sfe_ipv4_connection_match *orig_cm;
+	struct sfe_ipv4_connection_match *repl_cm;
+	struct sfe_ipv4_tcp_connection_match *orig_tcp;
+	struct sfe_ipv4_tcp_connection_match *repl_tcp;
+
+	orig_cm = c->original_match;
+	repl_cm = c->reply_match;
+	orig_tcp = &orig_cm->protocol_state.tcp;
+	repl_tcp = &repl_cm->protocol_state.tcp;
+
+	/* update orig */
+	if (orig_tcp->max_win < sic->src_td_max_window) {
+		orig_tcp->max_win = sic->src_td_max_window;
+	}
+	if ((s32)(orig_tcp->end - sic->src_td_end) < 0) {
+		orig_tcp->end = sic->src_td_end;
+	}
+	if ((s32)(orig_tcp->max_end - sic->src_td_max_end) < 0) {
+		orig_tcp->max_end = sic->src_td_max_end;
+	}
+
+	/* update reply */
+	if (repl_tcp->max_win < sic->dest_td_max_window) {
+		repl_tcp->max_win = sic->dest_td_max_window;
+	}
+	if ((s32)(repl_tcp->end - sic->dest_td_end) < 0) {
+		repl_tcp->end = sic->dest_td_end;
+	}
+	if ((s32)(repl_tcp->max_end - sic->dest_td_max_end) < 0) {
+		repl_tcp->max_end = sic->dest_td_max_end;
+	}
+
+	/* update match flags */
+	orig_cm->flags &= ~SFE_IPV4_CONNECTION_MATCH_FLAG_NO_SEQ_CHECK;
+	repl_cm->flags &= ~SFE_IPV4_CONNECTION_MATCH_FLAG_NO_SEQ_CHECK;
+	if (sic->flags & SFE_CREATE_FLAG_NO_SEQ_CHECK) {
+		orig_cm->flags |= SFE_IPV4_CONNECTION_MATCH_FLAG_NO_SEQ_CHECK;
+		repl_cm->flags |= SFE_IPV4_CONNECTION_MATCH_FLAG_NO_SEQ_CHECK;
+	}
+}
+
+static void
+sfe_ipv4_update_protocol_state(struct sfe_ipv4_connection *c,
+			       struct sfe_connection_create *sic)
+{
+	switch (sic->protocol) {
+	case IPPROTO_TCP:
+		sfe_ipv4_update_tcp_state(c, sic);
+		break;
+	}
+}
+
+void sfe_ipv4_update_rule(struct sfe_connection_create *sic)
+{
+	struct sfe_ipv4_connection *c;
+	struct sfe_ipv4 *si = &__si;
+
+	spin_lock_bh(&si->lock);
+
+	c = sfe_ipv4_find_sfe_ipv4_connection(si,
+					      sic->protocol,
+					      sic->src_ip.ip,
+					      sic->src_port,
+					      sic->dest_ip.ip,
+					      sic->dest_port);
+	if (c != NULL) {
+		sfe_ipv4_update_protocol_state(c, sic);
+	}
+
+	spin_unlock_bh(&si->lock);
+}
+
+/*
+ * sfe_ipv4_create_rule()
+ *	Create a forwarding rule.
+ */
+int sfe_ipv4_create_rule(struct sfe_connection_create *sic)
+{
+	struct sfe_ipv4 *si = &__si;
+	struct sfe_ipv4_connection *c;
+	struct sfe_ipv4_connection_match *original_cm;
+	struct sfe_ipv4_connection_match *reply_cm;
+	struct net_device *dest_dev;
+	struct net_device *src_dev;
+
+	dest_dev = sic->dest_dev;
+	src_dev = sic->src_dev;
+
+	if (unlikely((dest_dev->reg_state != NETREG_REGISTERED) ||
+		     (src_dev->reg_state != NETREG_REGISTERED))) {
+		return -EINVAL;
+	}
+
+	spin_lock_bh(&si->lock);
+	si->connection_create_requests++;
+
+	/*
+	 * Check to see if there is already a flow that matches the rule we're
+	 * trying to create.  If there is then we can't create a new one.
+	 */
+	c = sfe_ipv4_find_sfe_ipv4_connection(si,
+					      sic->protocol,
+					      sic->src_ip.ip,
+					      sic->src_port,
+					      sic->dest_ip.ip,
+					      sic->dest_port);
+	if (c != NULL) {
+		si->connection_create_collisions++;
+
+		/*
+		 * If we already have the flow then it's likely that this
+		 * request to create the connection rule contains more
+		 * up-to-date information. Check and update accordingly.
+		 */
+		sfe_ipv4_update_protocol_state(c, sic);
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("connection already exists - mark: %08x, p: %d\n"
+			    "  s: %s:%pM:%pI4:%u, d: %s:%pM:%pI4:%u\n",
+			    sic->mark, sic->protocol,
+			    sic->src_dev->name, sic->src_mac, &sic->src_ip.ip, ntohs(sic->src_port),
+			    sic->dest_dev->name, sic->dest_mac, &sic->dest_ip.ip, ntohs(sic->dest_port));
+		return -EADDRINUSE;
+	}
+
+	/*
+	 * Allocate the various connection tracking objects.
+	 */
+	c = (struct sfe_ipv4_connection *)kmalloc(sizeof(struct sfe_ipv4_connection), GFP_ATOMIC);
+	if (unlikely(!c)) {
+		spin_unlock_bh(&si->lock);
+		return -ENOMEM;
+	}
+
+	original_cm = (struct sfe_ipv4_connection_match *)kmalloc(sizeof(struct sfe_ipv4_connection_match), GFP_ATOMIC);
+	if (unlikely(!original_cm)) {
+		spin_unlock_bh(&si->lock);
+		kfree(c);
+		return -ENOMEM;
+	}
+
+	reply_cm = (struct sfe_ipv4_connection_match *)kmalloc(sizeof(struct sfe_ipv4_connection_match), GFP_ATOMIC);
+	if (unlikely(!reply_cm)) {
+		spin_unlock_bh(&si->lock);
+		kfree(original_cm);
+		kfree(c);
+		return -ENOMEM;
+	}
+
+	/*
+	 * Fill in the "original" direction connection matching object.
+	 * Note that the transmit MAC address is "dest_mac_xlate" because
+	 * we always know both ends of a connection by their translated
+	 * addresses and not their public addresses.
+	 */
+	original_cm->match_dev = src_dev;
+	original_cm->match_protocol = sic->protocol;
+	original_cm->match_src_ip = sic->src_ip.ip;
+	original_cm->match_src_port = sic->src_port;
+	original_cm->match_dest_ip = sic->dest_ip.ip;
+	original_cm->match_dest_port = sic->dest_port;
+	original_cm->xlate_src_ip = sic->src_ip_xlate.ip;
+	original_cm->xlate_src_port = sic->src_port_xlate;
+	original_cm->xlate_dest_ip = sic->dest_ip_xlate.ip;
+	original_cm->xlate_dest_port = sic->dest_port_xlate;
+	original_cm->rx_packet_count = 0;
+	original_cm->rx_packet_count64 = 0;
+	original_cm->rx_byte_count = 0;
+	original_cm->rx_byte_count64 = 0;
+	original_cm->xmit_dev = dest_dev;
+	original_cm->xmit_dev_mtu = sic->dest_mtu;
+	memcpy(original_cm->xmit_src_mac, dest_dev->dev_addr, ETH_ALEN);
+	memcpy(original_cm->xmit_dest_mac, sic->dest_mac_xlate, ETH_ALEN);
+	original_cm->connection = c;
+	original_cm->counter_match = reply_cm;
+	original_cm->flags = 0;
+	if (sic->flags & SFE_CREATE_FLAG_REMARK_PRIORITY) {
+		original_cm->priority = sic->src_priority;
+		original_cm->flags |= SFE_IPV4_CONNECTION_MATCH_FLAG_PRIORITY_REMARK;
+	}
+	if (sic->flags & SFE_CREATE_FLAG_REMARK_DSCP) {
+		original_cm->dscp = sic->src_dscp << SFE_IPV4_DSCP_SHIFT;
+		original_cm->flags |= SFE_IPV4_CONNECTION_MATCH_FLAG_DSCP_REMARK;
+	}
+#ifdef CONFIG_XFRM
+	original_cm->flow_accel = sic->original_accel;
+#endif
+	original_cm->active_next = NULL;
+	original_cm->active_prev = NULL;
+	original_cm->active = false;
+
+	/*
+	 * For PPP links we don't write an L2 header.  For everything else we do.
+	 */
+	if (!(dest_dev->flags & IFF_POINTOPOINT)) {
+		original_cm->flags |= SFE_IPV4_CONNECTION_MATCH_FLAG_WRITE_L2_HDR;
+
+		/*
+		 * If our dev writes Ethernet headers then we can write a really fast
+		 * version.
+		 */
+		if (dest_dev->header_ops) {
+			if (dest_dev->header_ops->create == eth_header) {
+				original_cm->flags |= SFE_IPV4_CONNECTION_MATCH_FLAG_WRITE_FAST_ETH_HDR;
+			}
+		}
+	}
+
+	/*
+	 * Fill in the "reply" direction connection matching object.
+	 */
+	reply_cm->match_dev = dest_dev;
+	reply_cm->match_protocol = sic->protocol;
+	reply_cm->match_src_ip = sic->dest_ip_xlate.ip;
+	reply_cm->match_src_port = sic->dest_port_xlate;
+	reply_cm->match_dest_ip = sic->src_ip_xlate.ip;
+	reply_cm->match_dest_port = sic->src_port_xlate;
+	reply_cm->xlate_src_ip = sic->dest_ip.ip;
+	reply_cm->xlate_src_port = sic->dest_port;
+	reply_cm->xlate_dest_ip = sic->src_ip.ip;
+	reply_cm->xlate_dest_port = sic->src_port;
+	reply_cm->rx_packet_count = 0;
+	reply_cm->rx_packet_count64 = 0;
+	reply_cm->rx_byte_count = 0;
+	reply_cm->rx_byte_count64 = 0;
+	reply_cm->xmit_dev = src_dev;
+	reply_cm->xmit_dev_mtu = sic->src_mtu;
+	memcpy(reply_cm->xmit_src_mac, src_dev->dev_addr, ETH_ALEN);
+	memcpy(reply_cm->xmit_dest_mac, sic->src_mac, ETH_ALEN);
+	reply_cm->connection = c;
+	reply_cm->counter_match = original_cm;
+	reply_cm->flags = 0;
+	if (sic->flags & SFE_CREATE_FLAG_REMARK_PRIORITY) {
+		reply_cm->priority = sic->dest_priority;
+		reply_cm->flags |= SFE_IPV4_CONNECTION_MATCH_FLAG_PRIORITY_REMARK;
+	}
+	if (sic->flags & SFE_CREATE_FLAG_REMARK_DSCP) {
+		reply_cm->dscp = sic->dest_dscp << SFE_IPV4_DSCP_SHIFT;
+		reply_cm->flags |= SFE_IPV4_CONNECTION_MATCH_FLAG_DSCP_REMARK;
+	}
+#ifdef CONFIG_XFRM
+	reply_cm->flow_accel = sic->reply_accel;
+#endif
+	reply_cm->active_next = NULL;
+	reply_cm->active_prev = NULL;
+	reply_cm->active = false;
+
+	/*
+	 * For PPP links we don't write an L2 header.  For everything else we do.
+	 */
+	if (!(src_dev->flags & IFF_POINTOPOINT)) {
+		reply_cm->flags |= SFE_IPV4_CONNECTION_MATCH_FLAG_WRITE_L2_HDR;
+
+		/*
+		 * If our dev writes Ethernet headers then we can write a really fast
+		 * version.
+		 */
+		if (src_dev->header_ops) {
+			if (src_dev->header_ops->create == eth_header) {
+				reply_cm->flags |= SFE_IPV4_CONNECTION_MATCH_FLAG_WRITE_FAST_ETH_HDR;
+			}
+		}
+	}
+
+
+	if (sic->dest_ip.ip != sic->dest_ip_xlate.ip || sic->dest_port != sic->dest_port_xlate) {
+		original_cm->flags |= SFE_IPV4_CONNECTION_MATCH_FLAG_XLATE_DEST;
+		reply_cm->flags |= SFE_IPV4_CONNECTION_MATCH_FLAG_XLATE_SRC;
+	}
+
+	if (sic->src_ip.ip != sic->src_ip_xlate.ip || sic->src_port != sic->src_port_xlate) {
+		original_cm->flags |= SFE_IPV4_CONNECTION_MATCH_FLAG_XLATE_SRC;
+		reply_cm->flags |= SFE_IPV4_CONNECTION_MATCH_FLAG_XLATE_DEST;
+	}
+
+	c->protocol = sic->protocol;
+	c->src_ip = sic->src_ip.ip;
+	c->src_ip_xlate = sic->src_ip_xlate.ip;
+	c->src_port = sic->src_port;
+	c->src_port_xlate = sic->src_port_xlate;
+	c->original_dev = src_dev;
+	c->original_match = original_cm;
+	c->dest_ip = sic->dest_ip.ip;
+	c->dest_ip_xlate = sic->dest_ip_xlate.ip;
+	c->dest_port = sic->dest_port;
+	c->dest_port_xlate = sic->dest_port_xlate;
+	c->reply_dev = dest_dev;
+	c->reply_match = reply_cm;
+	c->mark = sic->mark;
+	c->debug_read_seq = 0;
+	c->last_sync_jiffies = get_jiffies_64();
+
+	/*
+	 * Take hold of our source and dest devices for the duration of the connection.
+	 */
+	dev_hold(c->original_dev);
+	dev_hold(c->reply_dev);
+
+	/*
+	 * Initialize the protocol-specific information that we track.
+	 */
+	switch (sic->protocol) {
+	case IPPROTO_TCP:
+		original_cm->protocol_state.tcp.win_scale = sic->src_td_window_scale;
+		original_cm->protocol_state.tcp.max_win = sic->src_td_max_window ? sic->src_td_max_window : 1;
+		original_cm->protocol_state.tcp.end = sic->src_td_end;
+		original_cm->protocol_state.tcp.max_end = sic->src_td_max_end;
+		reply_cm->protocol_state.tcp.win_scale = sic->dest_td_window_scale;
+		reply_cm->protocol_state.tcp.max_win = sic->dest_td_max_window ? sic->dest_td_max_window : 1;
+		reply_cm->protocol_state.tcp.end = sic->dest_td_end;
+		reply_cm->protocol_state.tcp.max_end = sic->dest_td_max_end;
+		if (sic->flags & SFE_CREATE_FLAG_NO_SEQ_CHECK) {
+			original_cm->flags |= SFE_IPV4_CONNECTION_MATCH_FLAG_NO_SEQ_CHECK;
+			reply_cm->flags |= SFE_IPV4_CONNECTION_MATCH_FLAG_NO_SEQ_CHECK;
+		}
+		break;
+	}
+
+	sfe_ipv4_connection_match_compute_translations(original_cm);
+	sfe_ipv4_connection_match_compute_translations(reply_cm);
+	sfe_ipv4_insert_sfe_ipv4_connection(si, c);
+
+	spin_unlock_bh(&si->lock);
+
+	/*
+	 * We have everything we need!
+	 */
+	DEBUG_INFO("new connection - mark: %08x, p: %d\n"
+		   "  s: %s:%pM(%pM):%pI4(%pI4):%u(%u)\n"
+		   "  d: %s:%pM(%pM):%pI4(%pI4):%u(%u)\n",
+		   sic->mark, sic->protocol,
+		   sic->src_dev->name, sic->src_mac, sic->src_mac_xlate,
+		   &sic->src_ip.ip, &sic->src_ip_xlate.ip, ntohs(sic->src_port), ntohs(sic->src_port_xlate),
+		   dest_dev->name, sic->dest_mac, sic->dest_mac_xlate,
+		   &sic->dest_ip.ip, &sic->dest_ip_xlate.ip, ntohs(sic->dest_port), ntohs(sic->dest_port_xlate));
+
+	return 0;
+}
+
+/*
+ * sfe_ipv4_destroy_rule()
+ *	Destroy a forwarding rule.
+ */
+void sfe_ipv4_destroy_rule(struct sfe_connection_destroy *sid)
+{
+	struct sfe_ipv4 *si = &__si;
+	struct sfe_ipv4_connection *c;
+
+	spin_lock_bh(&si->lock);
+	si->connection_destroy_requests++;
+
+	/*
+	 * Check to see if we have a flow that matches the rule we're trying
+	 * to destroy.  If there isn't then we can't destroy it.
+	 */
+	c = sfe_ipv4_find_sfe_ipv4_connection(si, sid->protocol, sid->src_ip.ip, sid->src_port,
+					      sid->dest_ip.ip, sid->dest_port);
+	if (!c) {
+		si->connection_destroy_misses++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("connection does not exist - p: %d, s: %pI4:%u, d: %pI4:%u\n",
+			    sid->protocol, &sid->src_ip, ntohs(sid->src_port),
+			    &sid->dest_ip, ntohs(sid->dest_port));
+		return;
+	}
+
+	/*
+	 * Remove our connection details from the hash tables.
+	 */
+	sfe_ipv4_remove_sfe_ipv4_connection(si, c);
+	spin_unlock_bh(&si->lock);
+
+	sfe_ipv4_flush_sfe_ipv4_connection(si, c, SFE_SYNC_REASON_DESTROY);
+
+	DEBUG_INFO("connection destroyed - p: %d, s: %pI4:%u, d: %pI4:%u\n",
+		   sid->protocol, &sid->src_ip.ip, ntohs(sid->src_port),
+		   &sid->dest_ip.ip, ntohs(sid->dest_port));
+}
+
+/*
+ * sfe_ipv4_register_sync_rule_callback()
+ *	Register a callback for rule synchronization.
+ */
+void sfe_ipv4_register_sync_rule_callback(sfe_sync_rule_callback_t sync_rule_callback)
+{
+	struct sfe_ipv4 *si = &__si;
+
+	spin_lock_bh(&si->lock);
+	rcu_assign_pointer(si->sync_rule_callback, sync_rule_callback);
+	spin_unlock_bh(&si->lock);
+}
+
+/*
+ * sfe_ipv4_get_debug_dev()
+ */
+static ssize_t sfe_ipv4_get_debug_dev(struct device *dev,
+				      struct device_attribute *attr,
+				      char *buf)
+{
+	struct sfe_ipv4 *si = &__si;
+	ssize_t count;
+	int num;
+
+	spin_lock_bh(&si->lock);
+	num = si->debug_dev;
+	spin_unlock_bh(&si->lock);
+
+	count = snprintf(buf, (ssize_t)PAGE_SIZE, "%d\n", num);
+	return count;
+}
+
+/*
+ * sysfs attributes.
+ */
+static const struct device_attribute sfe_ipv4_debug_dev_attr =
+	__ATTR(debug_dev, S_IWUSR | S_IRUGO, sfe_ipv4_get_debug_dev, NULL);
+
+/*
+ * sfe_ipv4_destroy_all_rules_for_dev()
+ *	Destroy all connections that match a particular device.
+ *
+ * If we pass dev as NULL then this destroys all connections.
+ */
+void sfe_ipv4_destroy_all_rules_for_dev(struct net_device *dev)
+{
+	struct sfe_ipv4 *si = &__si;
+	struct sfe_ipv4_connection *c;
+
+another_round:
+	spin_lock_bh(&si->lock);
+
+	for (c = si->all_connections_head; c; c = c->all_connections_next) {
+		/*
+		 * Does this connection relate to the device we are destroying?
+		 */
+		if (!dev
+		    || (dev == c->original_dev)
+		    || (dev == c->reply_dev)) {
+			break;
+		}
+	}
+
+	if (c) {
+		sfe_ipv4_remove_sfe_ipv4_connection(si, c);
+	}
+
+	spin_unlock_bh(&si->lock);
+
+	if (c) {
+		sfe_ipv4_flush_sfe_ipv4_connection(si, c, SFE_SYNC_REASON_DESTROY);
+		goto another_round;
+	}
+}
+
+/*
+ * sfe_ipv4_periodic_sync()
+ */
+static void sfe_ipv4_periodic_sync(unsigned long arg)
+{
+	struct sfe_ipv4 *si = (struct sfe_ipv4 *)arg;
+	u64 now_jiffies;
+	int quota;
+	sfe_sync_rule_callback_t sync_rule_callback;
+
+	now_jiffies = get_jiffies_64();
+
+	rcu_read_lock();
+	sync_rule_callback = rcu_dereference(si->sync_rule_callback);
+	if (!sync_rule_callback) {
+		rcu_read_unlock();
+		goto done;
+	}
+
+	spin_lock_bh(&si->lock);
+	sfe_ipv4_update_summary_stats(si);
+
+	/*
+	 * Get an estimate of the number of connections to parse in this sync.
+	 */
+	quota = (si->num_connections + 63) / 64;
+
+	/*
+	 * Walk the "active" list and sync the connection state.
+	 */
+	while (quota--) {
+		struct sfe_ipv4_connection_match *cm;
+		struct sfe_ipv4_connection_match *counter_cm;
+		struct sfe_ipv4_connection *c;
+		struct sfe_connection_sync sis;
+
+		cm = si->active_head;
+		if (!cm) {
+			break;
+		}
+
+		/*
+		 * There's a possibility that our counter match is in the active list too.
+		 * If it is then remove it.
+		 */
+		counter_cm = cm->counter_match;
+		if (counter_cm->active) {
+			counter_cm->active = false;
+
+			/*
+			 * We must have a connection preceding this counter match
+			 * because that's the one that got us to this point, so we don't have
+			 * to worry about removing the head of the list.
+			 */
+			counter_cm->active_prev->active_next = counter_cm->active_next;
+
+			if (likely(counter_cm->active_next)) {
+				counter_cm->active_next->active_prev = counter_cm->active_prev;
+			} else {
+				si->active_tail = counter_cm->active_prev;
+			}
+
+			counter_cm->active_next = NULL;
+			counter_cm->active_prev = NULL;
+		}
+
+		/*
+		 * Now remove the head of the active scan list.
+		 */
+		cm->active = false;
+		si->active_head = cm->active_next;
+		if (likely(cm->active_next)) {
+			cm->active_next->active_prev = NULL;
+		} else {
+			si->active_tail = NULL;
+		}
+		cm->active_next = NULL;
+
+		/*
+		 * Sync the connection state.
+		 */
+		c = cm->connection;
+		sfe_ipv4_gen_sync_sfe_ipv4_connection(si, c, &sis, SFE_SYNC_REASON_STATS, now_jiffies);
+
+		/*
+		 * We don't want to be holding the lock when we sync!
+		 */
+		spin_unlock_bh(&si->lock);
+		sync_rule_callback(&sis);
+		spin_lock_bh(&si->lock);
+	}
+
+	spin_unlock_bh(&si->lock);
+	rcu_read_unlock();
+
+done:
+	mod_timer(&si->timer, jiffies + ((HZ + 99) / 100));
+}
+
+#define CHAR_DEV_MSG_SIZE 768
+
+/*
+ * sfe_ipv4_debug_dev_read_start()
+ *	Generate part of the XML output.
+ */
+static bool sfe_ipv4_debug_dev_read_start(struct sfe_ipv4 *si, char *buffer, char *msg, size_t *length,
+					  int *total_read, struct sfe_ipv4_debug_xml_write_state *ws)
+{
+	int bytes_read;
+
+	si->debug_read_seq++;
+
+	bytes_read = snprintf(msg, CHAR_DEV_MSG_SIZE, "<sfe_ipv4>\n");
+	if (copy_to_user(buffer + *total_read, msg, CHAR_DEV_MSG_SIZE)) {
+		return false;
+	}
+
+	*length -= bytes_read;
+	*total_read += bytes_read;
+
+	ws->state++;
+	return true;
+}
+
+/*
+ * sfe_ipv4_debug_dev_read_connections_start()
+ *	Generate part of the XML output.
+ */
+static bool sfe_ipv4_debug_dev_read_connections_start(struct sfe_ipv4 *si, char *buffer, char *msg, size_t *length,
+						      int *total_read, struct sfe_ipv4_debug_xml_write_state *ws)
+{
+	int bytes_read;
+
+	bytes_read = snprintf(msg, CHAR_DEV_MSG_SIZE, "\t<connections>\n");
+	if (copy_to_user(buffer + *total_read, msg, CHAR_DEV_MSG_SIZE)) {
+		return false;
+	}
+
+	*length -= bytes_read;
+	*total_read += bytes_read;
+
+	ws->state++;
+	return true;
+}
+
+/*
+ * sfe_ipv4_debug_dev_read_connections_connection()
+ *	Generate part of the XML output.
+ */
+static bool sfe_ipv4_debug_dev_read_connections_connection(struct sfe_ipv4 *si, char *buffer, char *msg, size_t *length,
+							   int *total_read, struct sfe_ipv4_debug_xml_write_state *ws)
+{
+	struct sfe_ipv4_connection *c;
+	struct sfe_ipv4_connection_match *original_cm;
+	struct sfe_ipv4_connection_match *reply_cm;
+	int bytes_read;
+	int protocol;
+	struct net_device *src_dev;
+	__be32 src_ip;
+	__be32 src_ip_xlate;
+	__be16 src_port;
+	__be16 src_port_xlate;
+	u64 src_rx_packets;
+	u64 src_rx_bytes;
+	struct net_device *dest_dev;
+	__be32 dest_ip;
+	__be32 dest_ip_xlate;
+	__be16 dest_port;
+	__be16 dest_port_xlate;
+	u64 dest_rx_packets;
+	u64 dest_rx_bytes;
+	u64 last_sync_jiffies;
+	u32 mark, src_priority, dest_priority, src_dscp, dest_dscp;
+
+	spin_lock_bh(&si->lock);
+
+	for (c = si->all_connections_head; c; c = c->all_connections_next) {
+		if (c->debug_read_seq < si->debug_read_seq) {
+			c->debug_read_seq = si->debug_read_seq;
+			break;
+		}
+	}
+
+	/*
+	 * If there were no connections then move to the next state.
+	 */
+	if (!c) {
+		spin_unlock_bh(&si->lock);
+		ws->state++;
+		return true;
+	}
+
+	original_cm = c->original_match;
+	reply_cm = c->reply_match;
+
+	protocol = c->protocol;
+	src_dev = c->original_dev;
+	src_ip = c->src_ip;
+	src_ip_xlate = c->src_ip_xlate;
+	src_port = c->src_port;
+	src_port_xlate = c->src_port_xlate;
+	src_priority = original_cm->priority;
+	src_dscp = original_cm->dscp >> SFE_IPV4_DSCP_SHIFT;
+
+	sfe_ipv4_connection_match_update_summary_stats(original_cm);
+	sfe_ipv4_connection_match_update_summary_stats(reply_cm);
+
+	src_rx_packets = original_cm->rx_packet_count64;
+	src_rx_bytes = original_cm->rx_byte_count64;
+	dest_dev = c->reply_dev;
+	dest_ip = c->dest_ip;
+	dest_ip_xlate = c->dest_ip_xlate;
+	dest_port = c->dest_port;
+	dest_port_xlate = c->dest_port_xlate;
+	dest_priority = reply_cm->priority;
+	dest_dscp = reply_cm->dscp >> SFE_IPV4_DSCP_SHIFT;
+	dest_rx_packets = reply_cm->rx_packet_count64;
+	dest_rx_bytes = reply_cm->rx_byte_count64;
+	last_sync_jiffies = get_jiffies_64() - c->last_sync_jiffies;
+	mark = c->mark;
+
+	spin_unlock_bh(&si->lock);
+
+	bytes_read = snprintf(msg, CHAR_DEV_MSG_SIZE, "\t\t<connection "
+				"protocol=\"%u\" "
+				"src_dev=\"%s\" "
+				"src_ip=\"%pI4\" src_ip_xlate=\"%pI4\" "
+				"src_port=\"%u\" src_port_xlate=\"%u\" "
+				"src_priority=\"%u\" src_dscp=\"%u\" "
+				"src_rx_pkts=\"%llu\" src_rx_bytes=\"%llu\" "
+				"dest_dev=\"%s\" "
+				"dest_ip=\"%pI4\" dest_ip_xlate=\"%pI4\" "
+				"dest_port=\"%u\" dest_port_xlate=\"%u\" "
+				"dest_priority=\"%u\" dest_dscp=\"%u\" "
+				"dest_rx_pkts=\"%llu\" dest_rx_bytes=\"%llu\" "
+				"last_sync=\"%llu\" "
+				"mark=\"%08x\" />\n",
+				protocol,
+				src_dev->name,
+				&src_ip, &src_ip_xlate,
+				ntohs(src_port), ntohs(src_port_xlate),
+				src_priority, src_dscp,
+				src_rx_packets, src_rx_bytes,
+				dest_dev->name,
+				&dest_ip, &dest_ip_xlate,
+				ntohs(dest_port), ntohs(dest_port_xlate),
+				dest_priority, dest_dscp,
+				dest_rx_packets, dest_rx_bytes,
+				last_sync_jiffies, mark);
+
+	if (copy_to_user(buffer + *total_read, msg, CHAR_DEV_MSG_SIZE)) {
+		return false;
+	}
+
+	*length -= bytes_read;
+	*total_read += bytes_read;
+
+	return true;
+}
+
+/*
+ * sfe_ipv4_debug_dev_read_connections_end()
+ *	Generate part of the XML output.
+ */
+static bool sfe_ipv4_debug_dev_read_connections_end(struct sfe_ipv4 *si, char *buffer, char *msg, size_t *length,
+						    int *total_read, struct sfe_ipv4_debug_xml_write_state *ws)
+{
+	int bytes_read;
+
+	bytes_read = snprintf(msg, CHAR_DEV_MSG_SIZE, "\t</connections>\n");
+	if (copy_to_user(buffer + *total_read, msg, CHAR_DEV_MSG_SIZE)) {
+		return false;
+	}
+
+	*length -= bytes_read;
+	*total_read += bytes_read;
+
+	ws->state++;
+	return true;
+}
+
+/*
+ * sfe_ipv4_debug_dev_read_exceptions_start()
+ *	Generate part of the XML output.
+ */
+static bool sfe_ipv4_debug_dev_read_exceptions_start(struct sfe_ipv4 *si, char *buffer, char *msg, size_t *length,
+						     int *total_read, struct sfe_ipv4_debug_xml_write_state *ws)
+{
+	int bytes_read;
+
+	bytes_read = snprintf(msg, CHAR_DEV_MSG_SIZE, "\t<exceptions>\n");
+	if (copy_to_user(buffer + *total_read, msg, CHAR_DEV_MSG_SIZE)) {
+		return false;
+	}
+
+	*length -= bytes_read;
+	*total_read += bytes_read;
+
+	ws->state++;
+	return true;
+}
+
+/*
+ * sfe_ipv4_debug_dev_read_exceptions_exception()
+ *	Generate part of the XML output.
+ */
+static bool sfe_ipv4_debug_dev_read_exceptions_exception(struct sfe_ipv4 *si, char *buffer, char *msg, size_t *length,
+							 int *total_read, struct sfe_ipv4_debug_xml_write_state *ws)
+{
+	u64 ct;
+
+	spin_lock_bh(&si->lock);
+	ct = si->exception_events64[ws->iter_exception];
+	spin_unlock_bh(&si->lock);
+
+	if (ct) {
+		int bytes_read;
+
+		bytes_read = snprintf(msg, CHAR_DEV_MSG_SIZE,
+				      "\t\t<exception name=\"%s\" count=\"%llu\" />\n",
+				      sfe_ipv4_exception_events_string[ws->iter_exception],
+				      ct);
+		if (copy_to_user(buffer + *total_read, msg, CHAR_DEV_MSG_SIZE)) {
+			return false;
+		}
+
+		*length -= bytes_read;
+		*total_read += bytes_read;
+	}
+
+	ws->iter_exception++;
+	if (ws->iter_exception >= SFE_IPV4_EXCEPTION_EVENT_LAST) {
+		ws->iter_exception = 0;
+		ws->state++;
+	}
+
+	return true;
+}
+
+/*
+ * sfe_ipv4_debug_dev_read_exceptions_end()
+ *	Generate part of the XML output.
+ */
+static bool sfe_ipv4_debug_dev_read_exceptions_end(struct sfe_ipv4 *si, char *buffer, char *msg, size_t *length,
+						   int *total_read, struct sfe_ipv4_debug_xml_write_state *ws)
+{
+	int bytes_read;
+
+	bytes_read = snprintf(msg, CHAR_DEV_MSG_SIZE, "\t</exceptions>\n");
+	if (copy_to_user(buffer + *total_read, msg, CHAR_DEV_MSG_SIZE)) {
+		return false;
+	}
+
+	*length -= bytes_read;
+	*total_read += bytes_read;
+
+	ws->state++;
+	return true;
+}
+
+/*
+ * sfe_ipv4_debug_dev_read_stats()
+ *	Generate part of the XML output.
+ */
+static bool sfe_ipv4_debug_dev_read_stats(struct sfe_ipv4 *si, char *buffer, char *msg, size_t *length,
+					  int *total_read, struct sfe_ipv4_debug_xml_write_state *ws)
+{
+	int bytes_read;
+	unsigned int num_connections;
+	u64 packets_forwarded;
+	u64 packets_not_forwarded;
+	u64 connection_create_requests;
+	u64 connection_create_collisions;
+	u64 connection_destroy_requests;
+	u64 connection_destroy_misses;
+	u64 connection_flushes;
+	u64 connection_match_hash_hits;
+	u64 connection_match_hash_reorders;
+
+	spin_lock_bh(&si->lock);
+	sfe_ipv4_update_summary_stats(si);
+
+	num_connections = si->num_connections;
+	packets_forwarded = si->packets_forwarded64;
+	packets_not_forwarded = si->packets_not_forwarded64;
+	connection_create_requests = si->connection_create_requests64;
+	connection_create_collisions = si->connection_create_collisions64;
+	connection_destroy_requests = si->connection_destroy_requests64;
+	connection_destroy_misses = si->connection_destroy_misses64;
+	connection_flushes = si->connection_flushes64;
+	connection_match_hash_hits = si->connection_match_hash_hits64;
+	connection_match_hash_reorders = si->connection_match_hash_reorders64;
+	spin_unlock_bh(&si->lock);
+
+	bytes_read = snprintf(msg, CHAR_DEV_MSG_SIZE, "\t<stats "
+			      "num_connections=\"%u\" "
+			      "pkts_forwarded=\"%llu\" pkts_not_forwarded=\"%llu\" "
+			      "create_requests=\"%llu\" create_collisions=\"%llu\" "
+			      "destroy_requests=\"%llu\" destroy_misses=\"%llu\" "
+			      "flushes=\"%llu\" "
+			      "hash_hits=\"%llu\" hash_reorders=\"%llu\" />\n",
+			      num_connections,
+			      packets_forwarded,
+			      packets_not_forwarded,
+			      connection_create_requests,
+			      connection_create_collisions,
+			      connection_destroy_requests,
+			      connection_destroy_misses,
+			      connection_flushes,
+			      connection_match_hash_hits,
+			      connection_match_hash_reorders);
+	if (copy_to_user(buffer + *total_read, msg, CHAR_DEV_MSG_SIZE)) {
+		return false;
+	}
+
+	*length -= bytes_read;
+	*total_read += bytes_read;
+
+	ws->state++;
+	return true;
+}
+
+/*
+ * sfe_ipv4_debug_dev_read_end()
+ *	Generate part of the XML output.
+ */
+static bool sfe_ipv4_debug_dev_read_end(struct sfe_ipv4 *si, char *buffer, char *msg, size_t *length,
+					int *total_read, struct sfe_ipv4_debug_xml_write_state *ws)
+{
+	int bytes_read;
+
+	bytes_read = snprintf(msg, CHAR_DEV_MSG_SIZE, "</sfe_ipv4>\n");
+	if (copy_to_user(buffer + *total_read, msg, CHAR_DEV_MSG_SIZE)) {
+		return false;
+	}
+
+	*length -= bytes_read;
+	*total_read += bytes_read;
+
+	ws->state++;
+	return true;
+}
+
+/*
+ * Array of write functions that write various XML elements that correspond to
+ * our XML output state machine.
+ */
+static sfe_ipv4_debug_xml_write_method_t sfe_ipv4_debug_xml_write_methods[SFE_IPV4_DEBUG_XML_STATE_DONE] = {
+	sfe_ipv4_debug_dev_read_start,
+	sfe_ipv4_debug_dev_read_connections_start,
+	sfe_ipv4_debug_dev_read_connections_connection,
+	sfe_ipv4_debug_dev_read_connections_end,
+	sfe_ipv4_debug_dev_read_exceptions_start,
+	sfe_ipv4_debug_dev_read_exceptions_exception,
+	sfe_ipv4_debug_dev_read_exceptions_end,
+	sfe_ipv4_debug_dev_read_stats,
+	sfe_ipv4_debug_dev_read_end,
+};
+
+/*
+ * sfe_ipv4_debug_dev_read()
+ *	Send info to userspace upon read request from user
+ */
+static ssize_t sfe_ipv4_debug_dev_read(struct file *filp, char *buffer, size_t length, loff_t *offset)
+{
+	char msg[CHAR_DEV_MSG_SIZE];
+	int total_read = 0;
+	struct sfe_ipv4_debug_xml_write_state *ws;
+	struct sfe_ipv4 *si = &__si;
+
+	ws = (struct sfe_ipv4_debug_xml_write_state *)filp->private_data;
+	while ((ws->state != SFE_IPV4_DEBUG_XML_STATE_DONE) && (length > CHAR_DEV_MSG_SIZE)) {
+		if ((sfe_ipv4_debug_xml_write_methods[ws->state])(si, buffer, msg, &length, &total_read, ws)) {
+			continue;
+		}
+	}
+
+	return total_read;
+}
+
+/*
+ * sfe_ipv4_debug_dev_write()
+ *	Write to char device resets some stats
+ */
+static ssize_t sfe_ipv4_debug_dev_write(struct file *filp, const char *buffer, size_t length, loff_t *offset)
+{
+	struct sfe_ipv4 *si = &__si;
+
+	spin_lock_bh(&si->lock);
+	sfe_ipv4_update_summary_stats(si);
+
+	si->packets_forwarded64 = 0;
+	si->packets_not_forwarded64 = 0;
+	si->connection_create_requests64 = 0;
+	si->connection_create_collisions64 = 0;
+	si->connection_destroy_requests64 = 0;
+	si->connection_destroy_misses64 = 0;
+	si->connection_flushes64 = 0;
+	si->connection_match_hash_hits64 = 0;
+	si->connection_match_hash_reorders64 = 0;
+	spin_unlock_bh(&si->lock);
+
+	return length;
+}
+
+/*
+ * sfe_ipv4_debug_dev_open()
+ */
+static int sfe_ipv4_debug_dev_open(struct inode *inode, struct file *file)
+{
+	struct sfe_ipv4_debug_xml_write_state *ws;
+
+	ws = (struct sfe_ipv4_debug_xml_write_state *)file->private_data;
+	if (!ws) {
+		ws = kzalloc(sizeof(struct sfe_ipv4_debug_xml_write_state), GFP_KERNEL);
+		if (!ws) {
+			return -ENOMEM;
+		}
+
+		ws->state = SFE_IPV4_DEBUG_XML_STATE_START;
+		file->private_data = ws;
+	}
+
+	return 0;
+}
+
+/*
+ * sfe_ipv4_debug_dev_release()
+ */
+static int sfe_ipv4_debug_dev_release(struct inode *inode, struct file *file)
+{
+	struct sfe_ipv4_debug_xml_write_state *ws;
+
+	ws = (struct sfe_ipv4_debug_xml_write_state *)file->private_data;
+	if (ws) {
+		/*
+		 * We've finished with our output so free the write state.
+		 */
+		kfree(ws);
+	}
+
+	return 0;
+}
+
+/*
+ * File operations used in the debug char device
+ */
+static struct file_operations sfe_ipv4_debug_dev_fops = {
+	.read = sfe_ipv4_debug_dev_read,
+	.write = sfe_ipv4_debug_dev_write,
+	.open = sfe_ipv4_debug_dev_open,
+	.release = sfe_ipv4_debug_dev_release
+};
+
+/*
+ * sfe_ipv4_init()
+ */
+static int __init sfe_ipv4_init(void)
+{
+	struct sfe_ipv4 *si = &__si;
+	int result = -1;
+
+	DEBUG_INFO("SFE IPv4 init\n");
+
+	/*
+	 * Create sys/sfe_ipv4
+	 */
+	si->sys_sfe_ipv4 = kobject_create_and_add("sfe_ipv4", NULL);
+	if (!si->sys_sfe_ipv4) {
+		DEBUG_ERROR("failed to register sfe_ipv4\n");
+		goto exit1;
+	}
+
+	/*
+	 * Create files, one for each parameter supported by this module.
+	 */
+	result = sysfs_create_file(si->sys_sfe_ipv4, &sfe_ipv4_debug_dev_attr.attr);
+	if (result) {
+		DEBUG_ERROR("failed to register debug dev file: %d\n", result);
+		goto exit2;
+	}
+
+	/*
+	 * Register our debug char device.
+	 */
+	result = register_chrdev(0, "sfe_ipv4", &sfe_ipv4_debug_dev_fops);
+	if (result < 0) {
+		DEBUG_ERROR("Failed to register chrdev: %d\n", result);
+		goto exit3;
+	}
+
+	si->debug_dev = result;
+
+	/*
+	 * Create a timer to handle periodic statistics.
+	 */
+	setup_timer(&si->timer, sfe_ipv4_periodic_sync, (unsigned long)si);
+	mod_timer(&si->timer, jiffies + ((HZ + 99) / 100));
+
+	spin_lock_init(&si->lock);
+
+	return 0;
+
+exit3:
+	sysfs_remove_file(si->sys_sfe_ipv4, &sfe_ipv4_debug_dev_attr.attr);
+
+exit2:
+	kobject_put(si->sys_sfe_ipv4);
+
+exit1:
+	return result;
+}
+
+/*
+ * sfe_ipv4_exit()
+ */
+static void __exit sfe_ipv4_exit(void)
+{
+	struct sfe_ipv4 *si = &__si;
+
+	DEBUG_INFO("SFE IPv4 exit\n");
+
+	/*
+	 * Destroy all connections.
+	 */
+	sfe_ipv4_destroy_all_rules_for_dev(NULL);
+
+	del_timer_sync(&si->timer);
+
+	unregister_chrdev(si->debug_dev, "sfe_ipv4");
+
+	sysfs_remove_file(si->sys_sfe_ipv4, &sfe_ipv4_debug_dev_attr.attr);
+
+	kobject_put(si->sys_sfe_ipv4);
+
+}
+
+module_init(sfe_ipv4_init)
+module_exit(sfe_ipv4_exit)
+
+EXPORT_SYMBOL(sfe_ipv4_recv);
+EXPORT_SYMBOL(sfe_ipv4_create_rule);
+EXPORT_SYMBOL(sfe_ipv4_destroy_rule);
+EXPORT_SYMBOL(sfe_ipv4_destroy_all_rules_for_dev);
+EXPORT_SYMBOL(sfe_ipv4_register_sync_rule_callback);
+EXPORT_SYMBOL(sfe_ipv4_mark_rule);
+EXPORT_SYMBOL(sfe_ipv4_update_rule);
+
+MODULE_DESCRIPTION("Shortcut Forwarding Engine - IPv4 edition");
+MODULE_LICENSE("Dual BSD/GPL");
+
diff --git a/package/lean/shortcut-fe/src/sfe_ipv6.c b/package/lean/shortcut-fe/src/sfe_ipv6.c
new file mode 100644
index 0000000000..16f460723a
--- /dev/null
+++ b/package/lean/shortcut-fe/src/sfe_ipv6.c
@@ -0,0 +1,3361 @@
+/*
+ * sfe_ipv6.c
+ *	Shortcut forwarding engine - IPv6 support.
+ *
+ * Copyright (c) 2015-2016 The Linux Foundation. All rights reserved.
+ * Permission to use, copy, modify, and/or distribute this software for
+ * any purpose with or without fee is hereby granted, provided that the
+ * above copyright notice and this permission notice appear in all copies.
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT
+ * OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#include <linux/module.h>
+#include <linux/sysfs.h>
+#include <linux/skbuff.h>
+#include <linux/icmp.h>
+#include <net/tcp.h>
+#include <linux/etherdevice.h>
+
+#include "sfe.h"
+#include "sfe_cm.h"
+
+/*
+ * By default Linux IP header and transport layer header structures are
+ * unpacked, assuming that such headers should be 32-bit aligned.
+ * Unfortunately some wireless adaptors can't cope with this requirement and
+ * some CPUs can't handle misaligned accesses.  For those platforms we
+ * define SFE_IPV6_UNALIGNED_IP_HEADER and mark the structures as packed.
+ * When we do this the compiler will generate slightly worse code than for the
+ * aligned case (on most platforms) but will be much quicker than fixing
+ * things up in an unaligned trap handler.
+ */
+#define SFE_IPV6_UNALIGNED_IP_HEADER 1
+#if SFE_IPV6_UNALIGNED_IP_HEADER
+#define SFE_IPV6_UNALIGNED_STRUCT __attribute__((aligned(4)))
+#else
+#define SFE_IPV6_UNALIGNED_STRUCT
+#endif
+
+#define CHAR_DEV_MSG_SIZE 768
+
+/*
+ * An Ethernet header, but with an optional "packed" attribute to
+ * help with performance on some platforms (see the definition of
+ * SFE_IPV6_UNALIGNED_STRUCT)
+ */
+struct sfe_ipv6_eth_hdr {
+	__be16 h_dest[ETH_ALEN / 2];
+	__be16 h_source[ETH_ALEN / 2];
+	__be16 h_proto;
+} SFE_IPV6_UNALIGNED_STRUCT;
+
+#define SFE_IPV6_DSCP_MASK 0xf03f
+#define SFE_IPV6_DSCP_SHIFT 2
+
+/*
+ * An IPv6 header, but with an optional "packed" attribute to
+ * help with performance on some platforms (see the definition of
+ * SFE_IPV6_UNALIGNED_STRUCT)
+ */
+struct sfe_ipv6_ip_hdr {
+#if defined(__LITTLE_ENDIAN_BITFIELD)
+	__u8 priority:4,
+	     version:4;
+#elif defined(__BIG_ENDIAN_BITFIELD)
+	__u8 version:4,
+	     priority:4;
+#else
+#error	"Please fix <asm/byteorder.h>"
+#endif
+	__u8 flow_lbl[3];
+	__be16 payload_len;
+	__u8 nexthdr;
+	__u8 hop_limit;
+	struct sfe_ipv6_addr saddr;
+	struct sfe_ipv6_addr daddr;
+
+	/*
+	 * The extension header start here.
+	 */
+} SFE_IPV6_UNALIGNED_STRUCT;
+
+#define SFE_IPV6_EXT_HDR_HOP 0
+#define SFE_IPV6_EXT_HDR_ROUTING 43
+#define SFE_IPV6_EXT_HDR_FRAG 44
+#define SFE_IPV6_EXT_HDR_ESP 50
+#define SFE_IPV6_EXT_HDR_AH 51
+#define SFE_IPV6_EXT_HDR_NONE 59
+#define SFE_IPV6_EXT_HDR_DST 60
+#define SFE_IPV6_EXT_HDR_MH 135
+
+/*
+ * fragmentation header
+ */
+
+struct sfe_ipv6_frag_hdr {
+	__u8	nexthdr;
+	__u8	reserved;
+	__be16	frag_off;
+	__be32	identification;
+};
+
+#define	SFE_IPV6_FRAG_OFFSET	0xfff8
+
+/*
+ * generic IPv6 extension header
+ */
+struct sfe_ipv6_ext_hdr {
+	__u8 next_hdr;
+	__u8 hdr_len;
+	__u8 padding[6];
+} SFE_IPV6_UNALIGNED_STRUCT;
+
+/*
+ * A UDP header, but with an optional "packed" attribute to
+ * help with performance on some platforms (see the definition of
+ * SFE_IPV6_UNALIGNED_STRUCT)
+ */
+struct sfe_ipv6_udp_hdr {
+	__be16 source;
+	__be16 dest;
+	__be16 len;
+	__sum16 check;
+} SFE_IPV6_UNALIGNED_STRUCT;
+
+/*
+ * A TCP header, but with an optional "packed" attribute to
+ * help with performance on some platforms (see the definition of
+ * SFE_IPV6_UNALIGNED_STRUCT)
+ */
+struct sfe_ipv6_tcp_hdr {
+	__be16 source;
+	__be16 dest;
+	__be32 seq;
+	__be32 ack_seq;
+#if defined(__LITTLE_ENDIAN_BITFIELD)
+	__u16 res1:4,
+	      doff:4,
+	      fin:1,
+	      syn:1,
+	      rst:1,
+	      psh:1,
+	      ack:1,
+	      urg:1,
+	      ece:1,
+	      cwr:1;
+#elif defined(__BIG_ENDIAN_BITFIELD)
+	__u16 doff:4,
+	      res1:4,
+	      cwr:1,
+	      ece:1,
+	      urg:1,
+	      ack:1,
+	      psh:1,
+	      rst:1,
+	      syn:1,
+	      fin:1;
+#else
+#error	"Adjust your <asm/byteorder.h> defines"
+#endif
+	__be16 window;
+	__sum16	check;
+	__be16 urg_ptr;
+} SFE_IPV6_UNALIGNED_STRUCT;
+
+/*
+ * Specifies the lower bound on ACK numbers carried in the TCP header
+ */
+#define SFE_IPV6_TCP_MAX_ACK_WINDOW 65520
+
+/*
+ * IPv6 TCP connection match additional data.
+ */
+struct sfe_ipv6_tcp_connection_match {
+	u8 win_scale;		/* Window scale */
+	u32 max_win;		/* Maximum window size seen */
+	u32 end;		/* Sequence number of the next byte to send (seq + segment length) */
+	u32 max_end;		/* Sequence number of the last byte to ack */
+};
+
+/*
+ * Bit flags for IPv6 connection matching entry.
+ */
+#define SFE_IPV6_CONNECTION_MATCH_FLAG_XLATE_SRC (1<<0)
+					/* Perform source translation */
+#define SFE_IPV6_CONNECTION_MATCH_FLAG_XLATE_DEST (1<<1)
+					/* Perform destination translation */
+#define SFE_IPV6_CONNECTION_MATCH_FLAG_NO_SEQ_CHECK (1<<2)
+					/* Ignore TCP sequence numbers */
+#define SFE_IPV6_CONNECTION_MATCH_FLAG_WRITE_FAST_ETH_HDR (1<<3)
+					/* Fast Ethernet header write */
+#define SFE_IPV6_CONNECTION_MATCH_FLAG_WRITE_L2_HDR (1<<4)
+					/* Fast Ethernet header write */
+#define SFE_IPV6_CONNECTION_MATCH_FLAG_PRIORITY_REMARK (1<<5)
+					/* remark priority of SKB */
+#define SFE_IPV6_CONNECTION_MATCH_FLAG_DSCP_REMARK (1<<6)
+					/* remark DSCP of packet */
+
+/*
+ * IPv6 connection matching structure.
+ */
+struct sfe_ipv6_connection_match {
+	/*
+	 * References to other objects.
+	 */
+	struct sfe_ipv6_connection_match *next;
+	struct sfe_ipv6_connection_match *prev;
+	struct sfe_ipv6_connection *connection;
+	struct sfe_ipv6_connection_match *counter_match;
+					/* Matches the flow in the opposite direction as the one in connection */
+	struct sfe_ipv6_connection_match *active_next;
+	struct sfe_ipv6_connection_match *active_prev;
+	bool active;			/* Flag to indicate if we're on the active list */
+
+	/*
+	 * Characteristics that identify flows that match this rule.
+	 */
+	struct net_device *match_dev;	/* Network device */
+	u8 match_protocol;		/* Protocol */
+	struct sfe_ipv6_addr match_src_ip[1];	/* Source IP address */
+	struct sfe_ipv6_addr match_dest_ip[1];	/* Destination IP address */
+	__be16 match_src_port;		/* Source port/connection ident */
+	__be16 match_dest_port;		/* Destination port/connection ident */
+
+	/*
+	 * Control the operations of the match.
+	 */
+	u32 flags;			/* Bit flags */
+#ifdef CONFIG_XFRM
+	u32 flow_accel;            	/* The flow accelerated or not */
+#endif
+
+	/*
+	 * Connection state that we track once we match.
+	 */
+	union {				/* Protocol-specific state */
+		struct sfe_ipv6_tcp_connection_match tcp;
+	} protocol_state;
+	/*
+	 * Stats recorded in a sync period. These stats will be added to
+	 * rx_packet_count64/rx_byte_count64 after a sync period.
+	 */
+	u32 rx_packet_count;
+	u32 rx_byte_count;
+
+	/*
+	 * Packet translation information.
+	 */
+	struct sfe_ipv6_addr xlate_src_ip[1];	/* Address after source translation */
+	__be16 xlate_src_port;	/* Port/connection ident after source translation */
+	u16 xlate_src_csum_adjustment;
+					/* Transport layer checksum adjustment after source translation */
+	struct sfe_ipv6_addr xlate_dest_ip[1];	/* Address after destination translation */
+	__be16 xlate_dest_port;	/* Port/connection ident after destination translation */
+	u16 xlate_dest_csum_adjustment;
+					/* Transport layer checksum adjustment after destination translation */
+
+	/*
+	 * QoS information
+	 */
+	u32 priority;
+	u32 dscp;
+
+	/*
+	 * Packet transmit information.
+	 */
+	struct net_device *xmit_dev;	/* Network device on which to transmit */
+	unsigned short int xmit_dev_mtu;
+					/* Interface MTU */
+	u16 xmit_dest_mac[ETH_ALEN / 2];
+					/* Destination MAC address to use when forwarding */
+	u16 xmit_src_mac[ETH_ALEN / 2];
+					/* Source MAC address to use when forwarding */
+
+	/*
+	 * Summary stats.
+	 */
+	u64 rx_packet_count64;
+	u64 rx_byte_count64;
+};
+
+/*
+ * Per-connection data structure.
+ */
+struct sfe_ipv6_connection {
+	struct sfe_ipv6_connection *next;
+					/* Pointer to the next entry in a hash chain */
+	struct sfe_ipv6_connection *prev;
+					/* Pointer to the previous entry in a hash chain */
+	int protocol;			/* IP protocol number */
+	struct sfe_ipv6_addr src_ip[1];		/* Src IP addr pre-translation */
+	struct sfe_ipv6_addr src_ip_xlate[1];	/* Src IP addr post-translation */
+	struct sfe_ipv6_addr dest_ip[1];	/* Dest IP addr pre-translation */
+	struct sfe_ipv6_addr dest_ip_xlate[1];	/* Dest IP addr post-translation */
+	__be16 src_port;		/* Src port pre-translation */
+	__be16 src_port_xlate;		/* Src port post-translation */
+	__be16 dest_port;		/* Dest port pre-translation */
+	__be16 dest_port_xlate;		/* Dest port post-translation */
+	struct sfe_ipv6_connection_match *original_match;
+					/* Original direction matching structure */
+	struct net_device *original_dev;
+					/* Original direction source device */
+	struct sfe_ipv6_connection_match *reply_match;
+					/* Reply direction matching structure */
+	struct net_device *reply_dev;	/* Reply direction source device */
+	u64 last_sync_jiffies;		/* Jiffies count for the last sync */
+	struct sfe_ipv6_connection *all_connections_next;
+					/* Pointer to the next entry in the list of all connections */
+	struct sfe_ipv6_connection *all_connections_prev;
+					/* Pointer to the previous entry in the list of all connections */
+	u32 mark;			/* mark for outgoing packet */
+	u32 debug_read_seq;		/* sequence number for debug dump */
+};
+
+/*
+ * IPv6 connections and hash table size information.
+ */
+#define SFE_IPV6_CONNECTION_HASH_SHIFT 12
+#define SFE_IPV6_CONNECTION_HASH_SIZE (1 << SFE_IPV6_CONNECTION_HASH_SHIFT)
+#define SFE_IPV6_CONNECTION_HASH_MASK (SFE_IPV6_CONNECTION_HASH_SIZE - 1)
+
+enum sfe_ipv6_exception_events {
+	SFE_IPV6_EXCEPTION_EVENT_UDP_HEADER_INCOMPLETE,
+	SFE_IPV6_EXCEPTION_EVENT_UDP_NO_CONNECTION,
+	SFE_IPV6_EXCEPTION_EVENT_UDP_IP_OPTIONS_OR_INITIAL_FRAGMENT,
+	SFE_IPV6_EXCEPTION_EVENT_UDP_SMALL_TTL,
+	SFE_IPV6_EXCEPTION_EVENT_UDP_NEEDS_FRAGMENTATION,
+	SFE_IPV6_EXCEPTION_EVENT_TCP_HEADER_INCOMPLETE,
+	SFE_IPV6_EXCEPTION_EVENT_TCP_NO_CONNECTION_SLOW_FLAGS,
+	SFE_IPV6_EXCEPTION_EVENT_TCP_NO_CONNECTION_FAST_FLAGS,
+	SFE_IPV6_EXCEPTION_EVENT_TCP_IP_OPTIONS_OR_INITIAL_FRAGMENT,
+	SFE_IPV6_EXCEPTION_EVENT_TCP_SMALL_TTL,
+	SFE_IPV6_EXCEPTION_EVENT_TCP_NEEDS_FRAGMENTATION,
+	SFE_IPV6_EXCEPTION_EVENT_TCP_FLAGS,
+	SFE_IPV6_EXCEPTION_EVENT_TCP_SEQ_EXCEEDS_RIGHT_EDGE,
+	SFE_IPV6_EXCEPTION_EVENT_TCP_SMALL_DATA_OFFS,
+	SFE_IPV6_EXCEPTION_EVENT_TCP_BAD_SACK,
+	SFE_IPV6_EXCEPTION_EVENT_TCP_BIG_DATA_OFFS,
+	SFE_IPV6_EXCEPTION_EVENT_TCP_SEQ_BEFORE_LEFT_EDGE,
+	SFE_IPV6_EXCEPTION_EVENT_TCP_ACK_EXCEEDS_RIGHT_EDGE,
+	SFE_IPV6_EXCEPTION_EVENT_TCP_ACK_BEFORE_LEFT_EDGE,
+	SFE_IPV6_EXCEPTION_EVENT_ICMP_HEADER_INCOMPLETE,
+	SFE_IPV6_EXCEPTION_EVENT_ICMP_UNHANDLED_TYPE,
+	SFE_IPV6_EXCEPTION_EVENT_ICMP_IPV6_HEADER_INCOMPLETE,
+	SFE_IPV6_EXCEPTION_EVENT_ICMP_IPV6_NON_V6,
+	SFE_IPV6_EXCEPTION_EVENT_ICMP_IPV6_IP_OPTIONS_INCOMPLETE,
+	SFE_IPV6_EXCEPTION_EVENT_ICMP_IPV6_UDP_HEADER_INCOMPLETE,
+	SFE_IPV6_EXCEPTION_EVENT_ICMP_IPV6_TCP_HEADER_INCOMPLETE,
+	SFE_IPV6_EXCEPTION_EVENT_ICMP_IPV6_UNHANDLED_PROTOCOL,
+	SFE_IPV6_EXCEPTION_EVENT_ICMP_NO_CONNECTION,
+	SFE_IPV6_EXCEPTION_EVENT_ICMP_FLUSHED_CONNECTION,
+	SFE_IPV6_EXCEPTION_EVENT_HEADER_INCOMPLETE,
+	SFE_IPV6_EXCEPTION_EVENT_BAD_TOTAL_LENGTH,
+	SFE_IPV6_EXCEPTION_EVENT_NON_V6,
+	SFE_IPV6_EXCEPTION_EVENT_NON_INITIAL_FRAGMENT,
+	SFE_IPV6_EXCEPTION_EVENT_DATAGRAM_INCOMPLETE,
+	SFE_IPV6_EXCEPTION_EVENT_IP_OPTIONS_INCOMPLETE,
+	SFE_IPV6_EXCEPTION_EVENT_UNHANDLED_PROTOCOL,
+	SFE_IPV6_EXCEPTION_EVENT_FLOW_COOKIE_ADD_FAIL,
+	SFE_IPV6_EXCEPTION_EVENT_LAST
+};
+
+static char *sfe_ipv6_exception_events_string[SFE_IPV6_EXCEPTION_EVENT_LAST] = {
+	"UDP_HEADER_INCOMPLETE",
+	"UDP_NO_CONNECTION",
+	"UDP_IP_OPTIONS_OR_INITIAL_FRAGMENT",
+	"UDP_SMALL_TTL",
+	"UDP_NEEDS_FRAGMENTATION",
+	"TCP_HEADER_INCOMPLETE",
+	"TCP_NO_CONNECTION_SLOW_FLAGS",
+	"TCP_NO_CONNECTION_FAST_FLAGS",
+	"TCP_IP_OPTIONS_OR_INITIAL_FRAGMENT",
+	"TCP_SMALL_TTL",
+	"TCP_NEEDS_FRAGMENTATION",
+	"TCP_FLAGS",
+	"TCP_SEQ_EXCEEDS_RIGHT_EDGE",
+	"TCP_SMALL_DATA_OFFS",
+	"TCP_BAD_SACK",
+	"TCP_BIG_DATA_OFFS",
+	"TCP_SEQ_BEFORE_LEFT_EDGE",
+	"TCP_ACK_EXCEEDS_RIGHT_EDGE",
+	"TCP_ACK_BEFORE_LEFT_EDGE",
+	"ICMP_HEADER_INCOMPLETE",
+	"ICMP_UNHANDLED_TYPE",
+	"ICMP_IPV6_HEADER_INCOMPLETE",
+	"ICMP_IPV6_NON_V6",
+	"ICMP_IPV6_IP_OPTIONS_INCOMPLETE",
+	"ICMP_IPV6_UDP_HEADER_INCOMPLETE",
+	"ICMP_IPV6_TCP_HEADER_INCOMPLETE",
+	"ICMP_IPV6_UNHANDLED_PROTOCOL",
+	"ICMP_NO_CONNECTION",
+	"ICMP_FLUSHED_CONNECTION",
+	"HEADER_INCOMPLETE",
+	"BAD_TOTAL_LENGTH",
+	"NON_V6",
+	"NON_INITIAL_FRAGMENT",
+	"DATAGRAM_INCOMPLETE",
+	"IP_OPTIONS_INCOMPLETE",
+	"UNHANDLED_PROTOCOL",
+	"FLOW_COOKIE_ADD_FAIL"
+};
+
+/*
+ * Per-module structure.
+ */
+struct sfe_ipv6 {
+	spinlock_t lock;		/* Lock for SMP correctness */
+	struct sfe_ipv6_connection_match *active_head;
+					/* Head of the list of recently active connections */
+	struct sfe_ipv6_connection_match *active_tail;
+					/* Tail of the list of recently active connections */
+	struct sfe_ipv6_connection *all_connections_head;
+					/* Head of the list of all connections */
+	struct sfe_ipv6_connection *all_connections_tail;
+					/* Tail of the list of all connections */
+	unsigned int num_connections;	/* Number of connections */
+	struct timer_list timer;	/* Timer used for periodic sync ops */
+	sfe_sync_rule_callback_t __rcu sync_rule_callback;
+					/* Callback function registered by a connection manager for stats syncing */
+	struct sfe_ipv6_connection *conn_hash[SFE_IPV6_CONNECTION_HASH_SIZE];
+					/* Connection hash table */
+	struct sfe_ipv6_connection_match *conn_match_hash[SFE_IPV6_CONNECTION_HASH_SIZE];
+					/* Connection match hash table */
+
+	/*
+	 * Stats recorded in a sync period. These stats will be added to
+	 * connection_xxx64 after a sync period.
+	 */
+	u32 connection_create_requests;
+					/* Number of IPv6 connection create requests */
+	u32 connection_create_collisions;
+					/* Number of IPv6 connection create requests that collided with existing hash table entries */
+	u32 connection_destroy_requests;
+					/* Number of IPv6 connection destroy requests */
+	u32 connection_destroy_misses;
+					/* Number of IPv6 connection destroy requests that missed our hash table */
+	u32 connection_match_hash_hits;
+					/* Number of IPv6 connection match hash hits */
+	u32 connection_match_hash_reorders;
+					/* Number of IPv6 connection match hash reorders */
+	u32 connection_flushes;		/* Number of IPv6 connection flushes */
+	u32 packets_forwarded;		/* Number of IPv6 packets forwarded */
+	u32 packets_not_forwarded;	/* Number of IPv6 packets not forwarded */
+	u32 exception_events[SFE_IPV6_EXCEPTION_EVENT_LAST];
+
+	/*
+	 * Summary statistics.
+	 */
+	u64 connection_create_requests64;
+					/* Number of IPv6 connection create requests */
+	u64 connection_create_collisions64;
+					/* Number of IPv6 connection create requests that collided with existing hash table entries */
+	u64 connection_destroy_requests64;
+					/* Number of IPv6 connection destroy requests */
+	u64 connection_destroy_misses64;
+					/* Number of IPv6 connection destroy requests that missed our hash table */
+	u64 connection_match_hash_hits64;
+					/* Number of IPv6 connection match hash hits */
+	u64 connection_match_hash_reorders64;
+					/* Number of IPv6 connection match hash reorders */
+	u64 connection_flushes64;	/* Number of IPv6 connection flushes */
+	u64 packets_forwarded64;	/* Number of IPv6 packets forwarded */
+	u64 packets_not_forwarded64;
+					/* Number of IPv6 packets not forwarded */
+	u64 exception_events64[SFE_IPV6_EXCEPTION_EVENT_LAST];
+
+	/*
+	 * Control state.
+	 */
+	struct kobject *sys_sfe_ipv6;	/* sysfs linkage */
+	int debug_dev;			/* Major number of the debug char device */
+	u32 debug_read_seq;		/* sequence number for debug dump */
+};
+
+/*
+ * Enumeration of the XML output.
+ */
+enum sfe_ipv6_debug_xml_states {
+	SFE_IPV6_DEBUG_XML_STATE_START,
+	SFE_IPV6_DEBUG_XML_STATE_CONNECTIONS_START,
+	SFE_IPV6_DEBUG_XML_STATE_CONNECTIONS_CONNECTION,
+	SFE_IPV6_DEBUG_XML_STATE_CONNECTIONS_END,
+	SFE_IPV6_DEBUG_XML_STATE_EXCEPTIONS_START,
+	SFE_IPV6_DEBUG_XML_STATE_EXCEPTIONS_EXCEPTION,
+	SFE_IPV6_DEBUG_XML_STATE_EXCEPTIONS_END,
+	SFE_IPV6_DEBUG_XML_STATE_STATS,
+	SFE_IPV6_DEBUG_XML_STATE_END,
+	SFE_IPV6_DEBUG_XML_STATE_DONE
+};
+
+/*
+ * XML write state.
+ */
+struct sfe_ipv6_debug_xml_write_state {
+	enum sfe_ipv6_debug_xml_states state;
+					/* XML output file state machine state */
+	int iter_exception;		/* Next exception iterator */
+};
+
+typedef bool (*sfe_ipv6_debug_xml_write_method_t)(struct sfe_ipv6 *si, char *buffer, char *msg, size_t *length,
+						  int *total_read, struct sfe_ipv6_debug_xml_write_state *ws);
+
+static struct sfe_ipv6 __si6;
+
+/*
+ * sfe_ipv6_get_debug_dev()
+ */
+static ssize_t sfe_ipv6_get_debug_dev(struct device *dev, struct device_attribute *attr, char *buf);
+
+/*
+ * sysfs attributes.
+ */
+static const struct device_attribute sfe_ipv6_debug_dev_attr =
+	__ATTR(debug_dev, S_IWUSR | S_IRUGO, sfe_ipv6_get_debug_dev, NULL);
+
+/*
+ * sfe_ipv6_is_ext_hdr()
+ *	check if we recognize ipv6 extension header
+ */
+static inline bool sfe_ipv6_is_ext_hdr(u8 hdr)
+{
+	return (hdr == SFE_IPV6_EXT_HDR_HOP) ||
+		(hdr == SFE_IPV6_EXT_HDR_ROUTING) ||
+		(hdr == SFE_IPV6_EXT_HDR_FRAG) ||
+		(hdr == SFE_IPV6_EXT_HDR_AH) ||
+		(hdr == SFE_IPV6_EXT_HDR_DST) ||
+		(hdr == SFE_IPV6_EXT_HDR_MH);
+}
+
+/*
+ * sfe_ipv6_change_dsfield()
+ *	change dscp field in IPv6 packet
+ */
+static inline void sfe_ipv6_change_dsfield(struct sfe_ipv6_ip_hdr *iph, u8 dscp)
+{
+	__be16 *p = (__be16 *)iph;
+
+	*p = ((*p & htons(SFE_IPV6_DSCP_MASK)) | htons((u16)dscp << 4));
+}
+
+/*
+ * sfe_ipv6_get_connection_match_hash()
+ *	Generate the hash used in connection match lookups.
+ */
+static inline unsigned int sfe_ipv6_get_connection_match_hash(struct net_device *dev, u8 protocol,
+							      struct sfe_ipv6_addr *src_ip, __be16 src_port,
+							      struct sfe_ipv6_addr *dest_ip, __be16 dest_port)
+{
+	u32 idx, hash = 0;
+	size_t dev_addr = (size_t)dev;
+
+	for (idx = 0; idx < 4; idx++) {
+		hash ^= src_ip->addr[idx] ^ dest_ip->addr[idx];
+	}
+	hash = ((u32)dev_addr) ^ hash ^ protocol ^ ntohs(src_port ^ dest_port);
+	return ((hash >> SFE_IPV6_CONNECTION_HASH_SHIFT) ^ hash) & SFE_IPV6_CONNECTION_HASH_MASK;
+}
+
+/*
+ * sfe_ipv6_find_connection_match()
+ *	Get the IPv6 flow match info that corresponds to a particular 5-tuple.
+ *
+ * On entry we must be holding the lock that protects the hash table.
+ */
+static struct sfe_ipv6_connection_match *
+sfe_ipv6_find_connection_match(struct sfe_ipv6 *si, struct net_device *dev, u8 protocol,
+					struct sfe_ipv6_addr *src_ip, __be16 src_port,
+					struct sfe_ipv6_addr *dest_ip, __be16 dest_port)
+{
+	struct sfe_ipv6_connection_match *cm;
+	struct sfe_ipv6_connection_match *head;
+	unsigned int conn_match_idx;
+
+	conn_match_idx = sfe_ipv6_get_connection_match_hash(dev, protocol, src_ip, src_port, dest_ip, dest_port);
+	cm = si->conn_match_hash[conn_match_idx];
+
+	/*
+	 * If we don't have anything in this chain then bail.
+	 */
+	if (unlikely(!cm)) {
+		return NULL;
+	}
+
+	/*
+	 * Hopefully the first entry is the one we want.
+	 */
+	if ((cm->match_src_port == src_port)
+	    && (cm->match_dest_port == dest_port)
+	    && (sfe_ipv6_addr_equal(cm->match_src_ip, src_ip))
+	    && (sfe_ipv6_addr_equal(cm->match_dest_ip, dest_ip))
+	    && (cm->match_protocol == protocol)
+	    && (cm->match_dev == dev)) {
+		si->connection_match_hash_hits++;
+		return cm;
+	}
+
+	/*
+	 * Unfortunately we didn't find it at head, so we search it in chain and
+	 * move matching entry to the top of the hash chain. We presume that this
+	 * will be reused again very quickly.
+	 */
+	head = cm;
+	do {
+		cm = cm->next;
+	} while (cm && (cm->match_src_port != src_port
+		 || cm->match_dest_port != dest_port
+		 || !sfe_ipv6_addr_equal(cm->match_src_ip, src_ip)
+		 || !sfe_ipv6_addr_equal(cm->match_dest_ip, dest_ip)
+		 || cm->match_protocol != protocol
+		 || cm->match_dev != dev));
+
+	/*
+	 * Not found then we're done.
+	 */
+	if (unlikely(!cm)) {
+		return NULL;
+	}
+
+	/*
+	 * We found a match so move it.
+	 */
+	if (cm->next) {
+		cm->next->prev = cm->prev;
+	}
+	cm->prev->next = cm->next;
+	cm->prev = NULL;
+	cm->next = head;
+	head->prev = cm;
+	si->conn_match_hash[conn_match_idx] = cm;
+	si->connection_match_hash_reorders++;
+
+	return cm;
+}
+
+/*
+ * sfe_ipv6_connection_match_update_summary_stats()
+ *	Update the summary stats for a connection match entry.
+ */
+static inline void sfe_ipv6_connection_match_update_summary_stats(struct sfe_ipv6_connection_match *cm)
+{
+	cm->rx_packet_count64 += cm->rx_packet_count;
+	cm->rx_packet_count = 0;
+	cm->rx_byte_count64 += cm->rx_byte_count;
+	cm->rx_byte_count = 0;
+}
+
+/*
+ * sfe_ipv6_connection_match_compute_translations()
+ *	Compute port and address translations for a connection match entry.
+ */
+static void sfe_ipv6_connection_match_compute_translations(struct sfe_ipv6_connection_match *cm)
+{
+	u32 diff[9];
+	u32 *idx_32;
+	u16 *idx_16;
+
+	/*
+	 * Before we insert the entry look to see if this is tagged as doing address
+	 * translations.  If it is then work out the adjustment that we need to apply
+	 * to the transport checksum.
+	 */
+	if (cm->flags & SFE_IPV6_CONNECTION_MATCH_FLAG_XLATE_SRC) {
+		u32 adj = 0;
+		u32 carry = 0;
+
+		/*
+		 * Precompute an incremental checksum adjustment so we can
+		 * edit packets in this stream very quickly.  The algorithm is from RFC1624.
+		 */
+		idx_32 = diff;
+		*(idx_32++) = cm->match_src_ip->addr[0];
+		*(idx_32++) = cm->match_src_ip->addr[1];
+		*(idx_32++) = cm->match_src_ip->addr[2];
+		*(idx_32++) = cm->match_src_ip->addr[3];
+
+		idx_16 = (u16 *)idx_32;
+		*(idx_16++) = cm->match_src_port;
+		*(idx_16++) = ~cm->xlate_src_port;
+		idx_32 = (u32 *)idx_16;
+
+		*(idx_32++) = ~cm->xlate_src_ip->addr[0];
+		*(idx_32++) = ~cm->xlate_src_ip->addr[1];
+		*(idx_32++) = ~cm->xlate_src_ip->addr[2];
+		*(idx_32++) = ~cm->xlate_src_ip->addr[3];
+
+		/*
+		 * When we compute this fold it down to a 16-bit offset
+		 * as that way we can avoid having to do a double
+		 * folding of the twos-complement result because the
+		 * addition of 2 16-bit values cannot cause a double
+		 * wrap-around!
+		 */
+		for (idx_32 = diff; idx_32 < diff + 9; idx_32++) {
+			u32 w = *idx_32;
+			adj += carry;
+			adj += w;
+			carry = (w > adj);
+		}
+		adj += carry;
+		adj = (adj & 0xffff) + (adj >> 16);
+		adj = (adj & 0xffff) + (adj >> 16);
+		cm->xlate_src_csum_adjustment = (u16)adj;
+	}
+
+	if (cm->flags & SFE_IPV6_CONNECTION_MATCH_FLAG_XLATE_DEST) {
+		u32 adj = 0;
+		u32 carry = 0;
+
+		/*
+		 * Precompute an incremental checksum adjustment so we can
+		 * edit packets in this stream very quickly.  The algorithm is from RFC1624.
+		 */
+		idx_32 = diff;
+		*(idx_32++) = cm->match_dest_ip->addr[0];
+		*(idx_32++) = cm->match_dest_ip->addr[1];
+		*(idx_32++) = cm->match_dest_ip->addr[2];
+		*(idx_32++) = cm->match_dest_ip->addr[3];
+
+		idx_16 = (u16 *)idx_32;
+		*(idx_16++) = cm->match_dest_port;
+		*(idx_16++) = ~cm->xlate_dest_port;
+		idx_32 = (u32 *)idx_16;
+
+		*(idx_32++) = ~cm->xlate_dest_ip->addr[0];
+		*(idx_32++) = ~cm->xlate_dest_ip->addr[1];
+		*(idx_32++) = ~cm->xlate_dest_ip->addr[2];
+		*(idx_32++) = ~cm->xlate_dest_ip->addr[3];
+
+		/*
+		 * When we compute this fold it down to a 16-bit offset
+		 * as that way we can avoid having to do a double
+		 * folding of the twos-complement result because the
+		 * addition of 2 16-bit values cannot cause a double
+		 * wrap-around!
+		 */
+		for (idx_32 = diff; idx_32 < diff + 9; idx_32++) {
+			u32 w = *idx_32;
+			adj += carry;
+			adj += w;
+			carry = (w > adj);
+		}
+		adj += carry;
+		adj = (adj & 0xffff) + (adj >> 16);
+		adj = (adj & 0xffff) + (adj >> 16);
+		cm->xlate_dest_csum_adjustment = (u16)adj;
+	}
+}
+
+/*
+ * sfe_ipv6_update_summary_stats()
+ *	Update the summary stats.
+ */
+static void sfe_ipv6_update_summary_stats(struct sfe_ipv6 *si)
+{
+	int i;
+
+	si->connection_create_requests64 += si->connection_create_requests;
+	si->connection_create_requests = 0;
+	si->connection_create_collisions64 += si->connection_create_collisions;
+	si->connection_create_collisions = 0;
+	si->connection_destroy_requests64 += si->connection_destroy_requests;
+	si->connection_destroy_requests = 0;
+	si->connection_destroy_misses64 += si->connection_destroy_misses;
+	si->connection_destroy_misses = 0;
+	si->connection_match_hash_hits64 += si->connection_match_hash_hits;
+	si->connection_match_hash_hits = 0;
+	si->connection_match_hash_reorders64 += si->connection_match_hash_reorders;
+	si->connection_match_hash_reorders = 0;
+	si->connection_flushes64 += si->connection_flushes;
+	si->connection_flushes = 0;
+	si->packets_forwarded64 += si->packets_forwarded;
+	si->packets_forwarded = 0;
+	si->packets_not_forwarded64 += si->packets_not_forwarded;
+	si->packets_not_forwarded = 0;
+
+	for (i = 0; i < SFE_IPV6_EXCEPTION_EVENT_LAST; i++) {
+		si->exception_events64[i] += si->exception_events[i];
+		si->exception_events[i] = 0;
+	}
+}
+
+/*
+ * sfe_ipv6_insert_connection_match()
+ *	Insert a connection match into the hash.
+ *
+ * On entry we must be holding the lock that protects the hash table.
+ */
+static inline void sfe_ipv6_insert_connection_match(struct sfe_ipv6 *si,
+						    struct sfe_ipv6_connection_match *cm)
+{
+	struct sfe_ipv6_connection_match **hash_head;
+	struct sfe_ipv6_connection_match *prev_head;
+	unsigned int conn_match_idx
+		= sfe_ipv6_get_connection_match_hash(cm->match_dev, cm->match_protocol,
+						     cm->match_src_ip, cm->match_src_port,
+						     cm->match_dest_ip, cm->match_dest_port);
+
+	hash_head = &si->conn_match_hash[conn_match_idx];
+	prev_head = *hash_head;
+	cm->prev = NULL;
+	if (prev_head) {
+		prev_head->prev = cm;
+	}
+
+	cm->next = prev_head;
+	*hash_head = cm;
+}
+
+/*
+ * sfe_ipv6_remove_connection_match()
+ *	Remove a connection match object from the hash.
+ *
+ * On entry we must be holding the lock that protects the hash table.
+ */
+static inline void sfe_ipv6_remove_connection_match(struct sfe_ipv6 *si, struct sfe_ipv6_connection_match *cm)
+{
+	/*
+	 * Unlink the connection match entry from the hash.
+	 */
+	if (cm->prev) {
+		cm->prev->next = cm->next;
+	} else {
+		unsigned int conn_match_idx
+			= sfe_ipv6_get_connection_match_hash(cm->match_dev, cm->match_protocol,
+							     cm->match_src_ip, cm->match_src_port,
+							     cm->match_dest_ip, cm->match_dest_port);
+		si->conn_match_hash[conn_match_idx] = cm->next;
+	}
+
+	if (cm->next) {
+		cm->next->prev = cm->prev;
+	}
+
+	/*
+	 * If the connection match entry is in the active list remove it.
+	 */
+	if (cm->active) {
+		if (likely(cm->active_prev)) {
+			cm->active_prev->active_next = cm->active_next;
+		} else {
+			si->active_head = cm->active_next;
+		}
+
+		if (likely(cm->active_next)) {
+			cm->active_next->active_prev = cm->active_prev;
+		} else {
+			si->active_tail = cm->active_prev;
+		}
+	}
+}
+
+/*
+ * sfe_ipv6_get_connection_hash()
+ *	Generate the hash used in connection lookups.
+ */
+static inline unsigned int sfe_ipv6_get_connection_hash(u8 protocol, struct sfe_ipv6_addr *src_ip, __be16 src_port,
+							struct sfe_ipv6_addr *dest_ip, __be16 dest_port)
+{
+	u32 idx, hash = 0;
+
+	for (idx = 0; idx < 4; idx++) {
+		hash ^= src_ip->addr[idx] ^ dest_ip->addr[idx];
+	}
+	hash = hash ^ protocol ^ ntohs(src_port ^ dest_port);
+	return ((hash >> SFE_IPV6_CONNECTION_HASH_SHIFT) ^ hash) & SFE_IPV6_CONNECTION_HASH_MASK;
+}
+
+/*
+ * sfe_ipv6_find_connection()
+ *	Get the IPv6 connection info that corresponds to a particular 5-tuple.
+ *
+ * On entry we must be holding the lock that protects the hash table.
+ */
+static inline struct sfe_ipv6_connection *sfe_ipv6_find_connection(struct sfe_ipv6 *si, u32 protocol,
+								   struct sfe_ipv6_addr *src_ip, __be16 src_port,
+								   struct sfe_ipv6_addr *dest_ip, __be16 dest_port)
+{
+	struct sfe_ipv6_connection *c;
+	unsigned int conn_idx = sfe_ipv6_get_connection_hash(protocol, src_ip, src_port, dest_ip, dest_port);
+	c = si->conn_hash[conn_idx];
+
+	/*
+	 * If we don't have anything in this chain then bale.
+	 */
+	if (unlikely(!c)) {
+		return NULL;
+	}
+
+	/*
+	 * Hopefully the first entry is the one we want.
+	 */
+	if ((c->src_port == src_port)
+	    && (c->dest_port == dest_port)
+	    && (sfe_ipv6_addr_equal(c->src_ip, src_ip))
+	    && (sfe_ipv6_addr_equal(c->dest_ip, dest_ip))
+	    && (c->protocol == protocol)) {
+		return c;
+	}
+
+	/*
+	 * Unfortunately we didn't find it at head, so we search it in chain.
+	 */
+	do {
+		c = c->next;
+	} while (c && (c->src_port != src_port
+		 || c->dest_port != dest_port
+		 || !sfe_ipv6_addr_equal(c->src_ip, src_ip)
+		 || !sfe_ipv6_addr_equal(c->dest_ip, dest_ip)
+		 || c->protocol != protocol));
+
+	/*
+	 * Will need connection entry for next create/destroy metadata,
+	 * So no need to re-order entry for these requests
+	 */
+	return c;
+}
+
+/*
+ * sfe_ipv6_mark_rule()
+ *	Updates the mark for a current offloaded connection
+ *
+ * Will take hash lock upon entry
+ */
+void sfe_ipv6_mark_rule(struct sfe_connection_mark *mark)
+{
+	struct sfe_ipv6 *si = &__si6;
+	struct sfe_ipv6_connection *c;
+
+	spin_lock_bh(&si->lock);
+	c = sfe_ipv6_find_connection(si, mark->protocol,
+				     mark->src_ip.ip6, mark->src_port,
+				     mark->dest_ip.ip6, mark->dest_port);
+	if (c) {
+		WARN_ON((0 != c->mark) && (0 == mark->mark));
+		c->mark = mark->mark;
+	}
+	spin_unlock_bh(&si->lock);
+
+	if (c) {
+		DEBUG_TRACE("Matching connection found for mark, "
+			    "setting from %08x to %08x\n",
+			    c->mark, mark->mark);
+	}
+}
+
+/*
+ * sfe_ipv6_insert_connection()
+ *	Insert a connection into the hash.
+ *
+ * On entry we must be holding the lock that protects the hash table.
+ */
+static void sfe_ipv6_insert_connection(struct sfe_ipv6 *si, struct sfe_ipv6_connection *c)
+{
+	struct sfe_ipv6_connection **hash_head;
+	struct sfe_ipv6_connection *prev_head;
+	unsigned int conn_idx;
+
+	/*
+	 * Insert entry into the connection hash.
+	 */
+	conn_idx = sfe_ipv6_get_connection_hash(c->protocol, c->src_ip, c->src_port,
+						c->dest_ip, c->dest_port);
+	hash_head = &si->conn_hash[conn_idx];
+	prev_head = *hash_head;
+	c->prev = NULL;
+	if (prev_head) {
+		prev_head->prev = c;
+	}
+
+	c->next = prev_head;
+	*hash_head = c;
+
+	/*
+	 * Insert entry into the "all connections" list.
+	 */
+	if (si->all_connections_tail) {
+		c->all_connections_prev = si->all_connections_tail;
+		si->all_connections_tail->all_connections_next = c;
+	} else {
+		c->all_connections_prev = NULL;
+		si->all_connections_head = c;
+	}
+
+	si->all_connections_tail = c;
+	c->all_connections_next = NULL;
+	si->num_connections++;
+
+	/*
+	 * Insert the connection match objects too.
+	 */
+	sfe_ipv6_insert_connection_match(si, c->original_match);
+	sfe_ipv6_insert_connection_match(si, c->reply_match);
+}
+
+/*
+ * sfe_ipv6_remove_connection()
+ *	Remove a sfe_ipv6_connection object from the hash.
+ *
+ * On entry we must be holding the lock that protects the hash table.
+ */
+static void sfe_ipv6_remove_connection(struct sfe_ipv6 *si, struct sfe_ipv6_connection *c)
+{
+	/*
+	 * Remove the connection match objects.
+	 */
+	sfe_ipv6_remove_connection_match(si, c->reply_match);
+	sfe_ipv6_remove_connection_match(si, c->original_match);
+
+	/*
+	 * Unlink the connection.
+	 */
+	if (c->prev) {
+		c->prev->next = c->next;
+	} else {
+		unsigned int conn_idx = sfe_ipv6_get_connection_hash(c->protocol, c->src_ip, c->src_port,
+								     c->dest_ip, c->dest_port);
+		si->conn_hash[conn_idx] = c->next;
+	}
+
+	if (c->next) {
+		c->next->prev = c->prev;
+	}
+
+	/*
+	 * Unlink connection from all_connections list
+	 */
+	if (c->all_connections_prev) {
+		c->all_connections_prev->all_connections_next = c->all_connections_next;
+	} else {
+		si->all_connections_head = c->all_connections_next;
+	}
+
+	if (c->all_connections_next) {
+		c->all_connections_next->all_connections_prev = c->all_connections_prev;
+	} else {
+		si->all_connections_tail = c->all_connections_prev;
+	}
+
+	si->num_connections--;
+}
+
+/*
+ * sfe_ipv6_gen_sync_connection()
+ *	Sync a connection.
+ *
+ * On entry to this function we expect that the lock for the connection is either
+ * already held or isn't required.
+ */
+static void sfe_ipv6_gen_sync_connection(struct sfe_ipv6 *si, struct sfe_ipv6_connection *c,
+					struct sfe_connection_sync *sis, sfe_sync_reason_t reason,
+					u64 now_jiffies)
+{
+	struct sfe_ipv6_connection_match *original_cm;
+	struct sfe_ipv6_connection_match *reply_cm;
+
+	/*
+	 * Fill in the update message.
+	 */
+	sis->is_v6 = 1;
+	sis->protocol = c->protocol;
+	sis->src_ip.ip6[0] = c->src_ip[0];
+	sis->src_ip_xlate.ip6[0] = c->src_ip_xlate[0];
+	sis->dest_ip.ip6[0] = c->dest_ip[0];
+	sis->dest_ip_xlate.ip6[0] = c->dest_ip_xlate[0];
+	sis->src_port = c->src_port;
+	sis->src_port_xlate = c->src_port_xlate;
+	sis->dest_port = c->dest_port;
+	sis->dest_port_xlate = c->dest_port_xlate;
+
+	original_cm = c->original_match;
+	reply_cm = c->reply_match;
+	sis->src_td_max_window = original_cm->protocol_state.tcp.max_win;
+	sis->src_td_end = original_cm->protocol_state.tcp.end;
+	sis->src_td_max_end = original_cm->protocol_state.tcp.max_end;
+	sis->dest_td_max_window = reply_cm->protocol_state.tcp.max_win;
+	sis->dest_td_end = reply_cm->protocol_state.tcp.end;
+	sis->dest_td_max_end = reply_cm->protocol_state.tcp.max_end;
+
+	sis->src_new_packet_count = original_cm->rx_packet_count;
+	sis->src_new_byte_count = original_cm->rx_byte_count;
+	sis->dest_new_packet_count = reply_cm->rx_packet_count;
+	sis->dest_new_byte_count = reply_cm->rx_byte_count;
+
+	sfe_ipv6_connection_match_update_summary_stats(original_cm);
+	sfe_ipv6_connection_match_update_summary_stats(reply_cm);
+
+	sis->src_dev = original_cm->match_dev;
+	sis->src_packet_count = original_cm->rx_packet_count64;
+	sis->src_byte_count = original_cm->rx_byte_count64;
+
+	sis->dest_dev = reply_cm->match_dev;
+	sis->dest_packet_count = reply_cm->rx_packet_count64;
+	sis->dest_byte_count = reply_cm->rx_byte_count64;
+
+	sis->reason = reason;
+
+	/*
+	 * Get the time increment since our last sync.
+	 */
+	sis->delta_jiffies = now_jiffies - c->last_sync_jiffies;
+	c->last_sync_jiffies = now_jiffies;
+}
+
+/*
+ * sfe_ipv6_flush_connection()
+ *	Flush a connection and free all associated resources.
+ *
+ * We need to be called with bottom halves disabled locally as we need to acquire
+ * the connection hash lock and release it again.  In general we're actually called
+ * from within a BH and so we're fine, but we're also called when connections are
+ * torn down.
+ */
+static void sfe_ipv6_flush_connection(struct sfe_ipv6 *si,
+				      struct sfe_ipv6_connection *c,
+				      sfe_sync_reason_t reason)
+{
+	struct sfe_connection_sync sis;
+	u64 now_jiffies;
+	sfe_sync_rule_callback_t sync_rule_callback;
+
+	rcu_read_lock();
+	spin_lock_bh(&si->lock);
+	si->connection_flushes++;
+	sync_rule_callback = rcu_dereference(si->sync_rule_callback);
+	spin_unlock_bh(&si->lock);
+
+	if (sync_rule_callback) {
+		/*
+		 * Generate a sync message and then sync.
+		 */
+		now_jiffies = get_jiffies_64();
+		sfe_ipv6_gen_sync_connection(si, c, &sis, reason, now_jiffies);
+		sync_rule_callback(&sis);
+	}
+
+	rcu_read_unlock();
+
+	/*
+	 * Release our hold of the source and dest devices and free the memory
+	 * for our connection objects.
+	 */
+	dev_put(c->original_dev);
+	dev_put(c->reply_dev);
+	kfree(c->original_match);
+	kfree(c->reply_match);
+	kfree(c);
+}
+
+/*
+ * sfe_ipv6_recv_udp()
+ *	Handle UDP packet receives and forwarding.
+ */
+static int sfe_ipv6_recv_udp(struct sfe_ipv6 *si, struct sk_buff *skb, struct net_device *dev,
+			     unsigned int len, struct sfe_ipv6_ip_hdr *iph, unsigned int ihl, bool flush_on_find)
+{
+	struct sfe_ipv6_udp_hdr *udph;
+	struct sfe_ipv6_addr *src_ip;
+	struct sfe_ipv6_addr *dest_ip;
+	__be16 src_port;
+	__be16 dest_port;
+	struct sfe_ipv6_connection_match *cm;
+	struct net_device *xmit_dev;
+
+	/*
+	 * Is our packet too short to contain a valid UDP header?
+	 */
+	if (!pskb_may_pull(skb, (sizeof(struct sfe_ipv6_udp_hdr) + ihl))) {
+		spin_lock_bh(&si->lock);
+		si->exception_events[SFE_IPV6_EXCEPTION_EVENT_UDP_HEADER_INCOMPLETE]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("packet too short for UDP header\n");
+		return 0;
+	}
+
+	/*
+	 * Read the IP address and port information.  Read the IP header data first
+	 * because we've almost certainly got that in the cache.  We may not yet have
+	 * the UDP header cached though so allow more time for any prefetching.
+	 */
+	src_ip = &iph->saddr;
+	dest_ip = &iph->daddr;
+
+	udph = (struct sfe_ipv6_udp_hdr *)(skb->data + ihl);
+	src_port = udph->source;
+	dest_port = udph->dest;
+
+	spin_lock_bh(&si->lock);
+
+	/*
+	 * Look for a connection match.
+	 */
+	cm = sfe_ipv6_find_connection_match(si, dev, IPPROTO_UDP, src_ip, src_port, dest_ip, dest_port);
+	if (unlikely(!cm)) {
+		si->exception_events[SFE_IPV6_EXCEPTION_EVENT_UDP_NO_CONNECTION]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("no connection found\n");
+		return 0;
+	}
+
+	/*
+	 * If our packet has beern marked as "flush on find" we can't actually
+	 * forward it in the fast path, but now that we've found an associated
+	 * connection we can flush that out before we process the packet.
+	 */
+	if (unlikely(flush_on_find)) {
+		struct sfe_ipv6_connection *c = cm->connection;
+		sfe_ipv6_remove_connection(si, c);
+		si->exception_events[SFE_IPV6_EXCEPTION_EVENT_UDP_IP_OPTIONS_OR_INITIAL_FRAGMENT]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("flush on find\n");
+		sfe_ipv6_flush_connection(si, c, SFE_SYNC_REASON_FLUSH);
+		return 0;
+	}
+
+#ifdef CONFIG_XFRM
+	/*
+	 * We can't accelerate the flow on this direction, just let it go
+	 * through the slow path.
+	 */
+	if (unlikely(!cm->flow_accel)) {
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+		return 0;
+	}
+#endif
+
+	/*
+	 * Does our hop_limit allow forwarding?
+	 */
+	if (unlikely(iph->hop_limit < 2)) {
+		struct sfe_ipv6_connection *c = cm->connection;
+		sfe_ipv6_remove_connection(si, c);
+		si->exception_events[SFE_IPV6_EXCEPTION_EVENT_UDP_SMALL_TTL]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("hop_limit too low\n");
+		sfe_ipv6_flush_connection(si, c, SFE_SYNC_REASON_FLUSH);
+		return 0;
+	}
+
+	/*
+	 * If our packet is larger than the MTU of the transmit interface then
+	 * we can't forward it easily.
+	 */
+	if (unlikely(len > cm->xmit_dev_mtu)) {
+		struct sfe_ipv6_connection *c = cm->connection;
+		sfe_ipv6_remove_connection(si, c);
+		si->exception_events[SFE_IPV6_EXCEPTION_EVENT_UDP_NEEDS_FRAGMENTATION]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("larger than mtu\n");
+		sfe_ipv6_flush_connection(si, c, SFE_SYNC_REASON_FLUSH);
+		return 0;
+	}
+
+	/*
+	 * From this point on we're good to modify the packet.
+	 */
+
+	/*
+	 * Update DSCP
+	 */
+	if (unlikely(cm->flags & SFE_IPV6_CONNECTION_MATCH_FLAG_DSCP_REMARK)) {
+		sfe_ipv6_change_dsfield(iph, cm->dscp);
+	}
+
+	/*
+	 * Decrement our hop_limit.
+	 */
+	iph->hop_limit -= 1;
+
+	/*
+	 * Do we have to perform translations of the source address/port?
+	 */
+	if (unlikely(cm->flags & SFE_IPV6_CONNECTION_MATCH_FLAG_XLATE_SRC)) {
+		u16 udp_csum;
+
+		iph->saddr = cm->xlate_src_ip[0];
+		udph->source = cm->xlate_src_port;
+
+		/*
+		 * Do we have a non-zero UDP checksum?  If we do then we need
+		 * to update it.
+		 */
+		udp_csum = udph->check;
+		if (likely(udp_csum)) {
+			u32 sum = udp_csum + cm->xlate_src_csum_adjustment;
+			sum = (sum & 0xffff) + (sum >> 16);
+			udph->check = (u16)sum;
+		}
+	}
+
+	/*
+	 * Do we have to perform translations of the destination address/port?
+	 */
+	if (unlikely(cm->flags & SFE_IPV6_CONNECTION_MATCH_FLAG_XLATE_DEST)) {
+		u16 udp_csum;
+
+		iph->daddr = cm->xlate_dest_ip[0];
+		udph->dest = cm->xlate_dest_port;
+
+		/*
+		 * Do we have a non-zero UDP checksum?  If we do then we need
+		 * to update it.
+		 */
+		udp_csum = udph->check;
+		if (likely(udp_csum)) {
+			u32 sum = udp_csum + cm->xlate_dest_csum_adjustment;
+			sum = (sum & 0xffff) + (sum >> 16);
+			udph->check = (u16)sum;
+		}
+	}
+
+	/*
+	 * Update traffic stats.
+	 */
+	cm->rx_packet_count++;
+	cm->rx_byte_count += len;
+
+	/*
+	 * If we're not already on the active list then insert ourselves at the tail
+	 * of the current list.
+	 */
+	if (unlikely(!cm->active)) {
+		cm->active = true;
+		cm->active_prev = si->active_tail;
+		if (likely(si->active_tail)) {
+			si->active_tail->active_next = cm;
+		} else {
+			si->active_head = cm;
+		}
+		si->active_tail = cm;
+	}
+
+	xmit_dev = cm->xmit_dev;
+	skb->dev = xmit_dev;
+
+	/*
+	 * Check to see if we need to write a header.
+	 */
+	if (likely(cm->flags & SFE_IPV6_CONNECTION_MATCH_FLAG_WRITE_L2_HDR)) {
+		if (unlikely(!(cm->flags & SFE_IPV6_CONNECTION_MATCH_FLAG_WRITE_FAST_ETH_HDR))) {
+			dev_hard_header(skb, xmit_dev, ETH_P_IPV6,
+					cm->xmit_dest_mac, cm->xmit_src_mac, len);
+		} else {
+			/*
+			 * For the simple case we write this really fast.
+			 */
+			struct sfe_ipv6_eth_hdr *eth = (struct sfe_ipv6_eth_hdr *)__skb_push(skb, ETH_HLEN);
+			eth->h_proto = htons(ETH_P_IPV6);
+			eth->h_dest[0] = cm->xmit_dest_mac[0];
+			eth->h_dest[1] = cm->xmit_dest_mac[1];
+			eth->h_dest[2] = cm->xmit_dest_mac[2];
+			eth->h_source[0] = cm->xmit_src_mac[0];
+			eth->h_source[1] = cm->xmit_src_mac[1];
+			eth->h_source[2] = cm->xmit_src_mac[2];
+		}
+	}
+
+	/*
+	 * Update priority of skb.
+	 */
+	if (unlikely(cm->flags & SFE_IPV6_CONNECTION_MATCH_FLAG_PRIORITY_REMARK)) {
+		skb->priority = cm->priority;
+	}
+
+	/*
+	 * Mark outgoing packet.
+	 */
+	skb->mark = cm->connection->mark;
+	if (skb->mark) {
+		DEBUG_TRACE("SKB MARK is NON ZERO %x\n", skb->mark);
+	}
+
+	si->packets_forwarded++;
+	spin_unlock_bh(&si->lock);
+
+	/*
+	 * We're going to check for GSO flags when we transmit the packet so
+	 * start fetching the necessary cache line now.
+	 */
+	prefetch(skb_shinfo(skb));
+
+	/*
+	 * Mark that this packet has been fast forwarded.
+	 */
+	skb->fast_forwarded = 1;
+
+	/*
+	 * Send the packet on its way.
+	 */
+	dev_queue_xmit(skb);
+
+	return 1;
+}
+
+/*
+ * sfe_ipv6_process_tcp_option_sack()
+ *	Parse TCP SACK option and update ack according
+ */
+static bool sfe_ipv6_process_tcp_option_sack(const struct sfe_ipv6_tcp_hdr *th, const u32 data_offs,
+					     u32 *ack)
+{
+	u32 length = sizeof(struct sfe_ipv6_tcp_hdr);
+	u8 *ptr = (u8 *)th + length;
+
+	/*
+	 * Ignore processing if TCP packet has only TIMESTAMP option.
+	 */
+	if (likely(data_offs == length + TCPOLEN_TIMESTAMP + 1 + 1)
+	    && likely(ptr[0] == TCPOPT_NOP)
+	    && likely(ptr[1] == TCPOPT_NOP)
+	    && likely(ptr[2] == TCPOPT_TIMESTAMP)
+	    && likely(ptr[3] == TCPOLEN_TIMESTAMP)) {
+		return true;
+	}
+
+	/*
+	 * TCP options. Parse SACK option.
+	 */
+	while (length < data_offs) {
+		u8 size;
+		u8 kind;
+
+		ptr = (u8 *)th + length;
+		kind = *ptr;
+
+		/*
+		 * NOP, for padding
+		 * Not in the switch because to fast escape and to not calculate size
+		 */
+		if (kind == TCPOPT_NOP) {
+			length++;
+			continue;
+		}
+
+		if (kind == TCPOPT_SACK) {
+			u32 sack = 0;
+			u8 re = 1 + 1;
+
+			size = *(ptr + 1);
+			if ((size < (1 + 1 + TCPOLEN_SACK_PERBLOCK))
+			    || ((size - (1 + 1)) % (TCPOLEN_SACK_PERBLOCK))
+			    || (size > (data_offs - length))) {
+				return false;
+			}
+
+			re += 4;
+			while (re < size) {
+				u32 sack_re;
+				u8 *sptr = ptr + re;
+				sack_re = (sptr[0] << 24) | (sptr[1] << 16) | (sptr[2] << 8) | sptr[3];
+				if (sack_re > sack) {
+					sack = sack_re;
+				}
+				re += TCPOLEN_SACK_PERBLOCK;
+			}
+			if (sack > *ack) {
+				*ack = sack;
+			}
+			length += size;
+			continue;
+		}
+		if (kind == TCPOPT_EOL) {
+			return true;
+		}
+		size = *(ptr + 1);
+		if (size < 2) {
+			return false;
+		}
+		length += size;
+	}
+
+	return true;
+}
+
+/*
+ * sfe_ipv6_recv_tcp()
+ *	Handle TCP packet receives and forwarding.
+ */
+static int sfe_ipv6_recv_tcp(struct sfe_ipv6 *si, struct sk_buff *skb, struct net_device *dev,
+			     unsigned int len, struct sfe_ipv6_ip_hdr *iph, unsigned int ihl, bool flush_on_find)
+{
+	struct sfe_ipv6_tcp_hdr *tcph;
+	struct sfe_ipv6_addr *src_ip;
+	struct sfe_ipv6_addr *dest_ip;
+	__be16 src_port;
+	__be16 dest_port;
+	struct sfe_ipv6_connection_match *cm;
+	struct sfe_ipv6_connection_match *counter_cm;
+	u32 flags;
+	struct net_device *xmit_dev;
+
+	/*
+	 * Is our packet too short to contain a valid UDP header?
+	 */
+	if (!pskb_may_pull(skb, (sizeof(struct sfe_ipv6_tcp_hdr) + ihl))) {
+		spin_lock_bh(&si->lock);
+		si->exception_events[SFE_IPV6_EXCEPTION_EVENT_TCP_HEADER_INCOMPLETE]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("packet too short for TCP header\n");
+		return 0;
+	}
+
+	/*
+	 * Read the IP address and port information.  Read the IP header data first
+	 * because we've almost certainly got that in the cache.  We may not yet have
+	 * the TCP header cached though so allow more time for any prefetching.
+	 */
+	src_ip = &iph->saddr;
+	dest_ip = &iph->daddr;
+
+	tcph = (struct sfe_ipv6_tcp_hdr *)(skb->data + ihl);
+	src_port = tcph->source;
+	dest_port = tcph->dest;
+	flags = tcp_flag_word(tcph);
+
+	spin_lock_bh(&si->lock);
+
+	/*
+	 * Look for a connection match.
+	 */
+	cm = sfe_ipv6_find_connection_match(si, dev, IPPROTO_TCP, src_ip, src_port, dest_ip, dest_port);
+	if (unlikely(!cm)) {
+		/*
+		 * We didn't get a connection but as TCP is connection-oriented that
+		 * may be because this is a non-fast connection (not running established).
+		 * For diagnostic purposes we differentiate this here.
+		 */
+		if (likely((flags & (TCP_FLAG_SYN | TCP_FLAG_RST | TCP_FLAG_FIN | TCP_FLAG_ACK)) == TCP_FLAG_ACK)) {
+			si->exception_events[SFE_IPV6_EXCEPTION_EVENT_TCP_NO_CONNECTION_FAST_FLAGS]++;
+			si->packets_not_forwarded++;
+			spin_unlock_bh(&si->lock);
+
+			DEBUG_TRACE("no connection found - fast flags\n");
+			return 0;
+		}
+		si->exception_events[SFE_IPV6_EXCEPTION_EVENT_TCP_NO_CONNECTION_SLOW_FLAGS]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("no connection found - slow flags: 0x%x\n",
+			    flags & (TCP_FLAG_SYN | TCP_FLAG_RST | TCP_FLAG_FIN | TCP_FLAG_ACK));
+		return 0;
+	}
+
+	/*
+	 * If our packet has beern marked as "flush on find" we can't actually
+	 * forward it in the fast path, but now that we've found an associated
+	 * connection we can flush that out before we process the packet.
+	 */
+	if (unlikely(flush_on_find)) {
+		struct sfe_ipv6_connection *c = cm->connection;
+		sfe_ipv6_remove_connection(si, c);
+		si->exception_events[SFE_IPV6_EXCEPTION_EVENT_TCP_IP_OPTIONS_OR_INITIAL_FRAGMENT]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("flush on find\n");
+		sfe_ipv6_flush_connection(si, c, SFE_SYNC_REASON_FLUSH);
+		return 0;
+	}
+
+#ifdef CONFIG_XFRM
+	/*
+	 * We can't accelerate the flow on this direction, just let it go
+	 * through the slow path.
+	 */
+	if (unlikely(!cm->flow_accel)) {
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+		return 0;
+	}
+#endif
+
+	/*
+	 * Does our hop_limit allow forwarding?
+	 */
+	if (unlikely(iph->hop_limit < 2)) {
+		struct sfe_ipv6_connection *c = cm->connection;
+		sfe_ipv6_remove_connection(si, c);
+		si->exception_events[SFE_IPV6_EXCEPTION_EVENT_TCP_SMALL_TTL]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("hop_limit too low\n");
+		sfe_ipv6_flush_connection(si, c, SFE_SYNC_REASON_FLUSH);
+		return 0;
+	}
+
+	/*
+	 * If our packet is larger than the MTU of the transmit interface then
+	 * we can't forward it easily.
+	 */
+	if (unlikely((len > cm->xmit_dev_mtu) && !skb_is_gso(skb))) {
+		struct sfe_ipv6_connection *c = cm->connection;
+		sfe_ipv6_remove_connection(si, c);
+		si->exception_events[SFE_IPV6_EXCEPTION_EVENT_TCP_NEEDS_FRAGMENTATION]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("larger than mtu\n");
+		sfe_ipv6_flush_connection(si, c, SFE_SYNC_REASON_FLUSH);
+		return 0;
+	}
+
+	/*
+	 * Look at our TCP flags.  Anything missing an ACK or that has RST, SYN or FIN
+	 * set is not a fast path packet.
+	 */
+	if (unlikely((flags & (TCP_FLAG_SYN | TCP_FLAG_RST | TCP_FLAG_FIN | TCP_FLAG_ACK)) != TCP_FLAG_ACK)) {
+		struct sfe_ipv6_connection *c = cm->connection;
+		sfe_ipv6_remove_connection(si, c);
+		si->exception_events[SFE_IPV6_EXCEPTION_EVENT_TCP_FLAGS]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("TCP flags: 0x%x are not fast\n",
+			    flags & (TCP_FLAG_SYN | TCP_FLAG_RST | TCP_FLAG_FIN | TCP_FLAG_ACK));
+		sfe_ipv6_flush_connection(si, c, SFE_SYNC_REASON_FLUSH);
+		return 0;
+	}
+
+	counter_cm = cm->counter_match;
+
+	/*
+	 * Are we doing sequence number checking?
+	 */
+	if (likely(!(cm->flags & SFE_IPV6_CONNECTION_MATCH_FLAG_NO_SEQ_CHECK))) {
+		u32 seq;
+		u32 ack;
+		u32 sack;
+		u32 data_offs;
+		u32 end;
+		u32 left_edge;
+		u32 scaled_win;
+		u32 max_end;
+
+		/*
+		 * Is our sequence fully past the right hand edge of the window?
+		 */
+		seq = ntohl(tcph->seq);
+		if (unlikely((s32)(seq - (cm->protocol_state.tcp.max_end + 1)) > 0)) {
+			struct sfe_ipv6_connection *c = cm->connection;
+			sfe_ipv6_remove_connection(si, c);
+			si->exception_events[SFE_IPV6_EXCEPTION_EVENT_TCP_SEQ_EXCEEDS_RIGHT_EDGE]++;
+			si->packets_not_forwarded++;
+			spin_unlock_bh(&si->lock);
+
+			DEBUG_TRACE("seq: %u exceeds right edge: %u\n",
+				    seq, cm->protocol_state.tcp.max_end + 1);
+			sfe_ipv6_flush_connection(si, c, SFE_SYNC_REASON_FLUSH);
+			return 0;
+		}
+
+		/*
+		 * Check that our TCP data offset isn't too short.
+		 */
+		data_offs = tcph->doff << 2;
+		if (unlikely(data_offs < sizeof(struct sfe_ipv6_tcp_hdr))) {
+			struct sfe_ipv6_connection *c = cm->connection;
+			sfe_ipv6_remove_connection(si, c);
+			si->exception_events[SFE_IPV6_EXCEPTION_EVENT_TCP_SMALL_DATA_OFFS]++;
+			si->packets_not_forwarded++;
+			spin_unlock_bh(&si->lock);
+
+			DEBUG_TRACE("TCP data offset: %u, too small\n", data_offs);
+			sfe_ipv6_flush_connection(si, c, SFE_SYNC_REASON_FLUSH);
+			return 0;
+		}
+
+		/*
+		 * Update ACK according to any SACK option.
+		 */
+		ack = ntohl(tcph->ack_seq);
+		sack = ack;
+		if (unlikely(!sfe_ipv6_process_tcp_option_sack(tcph, data_offs, &sack))) {
+			struct sfe_ipv6_connection *c = cm->connection;
+			sfe_ipv6_remove_connection(si, c);
+			si->exception_events[SFE_IPV6_EXCEPTION_EVENT_TCP_BAD_SACK]++;
+			si->packets_not_forwarded++;
+			spin_unlock_bh(&si->lock);
+
+			DEBUG_TRACE("TCP option SACK size is wrong\n");
+			sfe_ipv6_flush_connection(si, c, SFE_SYNC_REASON_FLUSH);
+			return 0;
+		}
+
+		/*
+		 * Check that our TCP data offset isn't past the end of the packet.
+		 */
+		data_offs += sizeof(struct sfe_ipv6_ip_hdr);
+		if (unlikely(len < data_offs)) {
+			struct sfe_ipv6_connection *c = cm->connection;
+			sfe_ipv6_remove_connection(si, c);
+			si->exception_events[SFE_IPV6_EXCEPTION_EVENT_TCP_BIG_DATA_OFFS]++;
+			si->packets_not_forwarded++;
+			spin_unlock_bh(&si->lock);
+
+			DEBUG_TRACE("TCP data offset: %u, past end of packet: %u\n",
+				    data_offs, len);
+			sfe_ipv6_flush_connection(si, c, SFE_SYNC_REASON_FLUSH);
+			return 0;
+		}
+
+		end = seq + len - data_offs;
+
+		/*
+		 * Is our sequence fully before the left hand edge of the window?
+		 */
+		if (unlikely((s32)(end - (cm->protocol_state.tcp.end
+						- counter_cm->protocol_state.tcp.max_win - 1)) < 0)) {
+			struct sfe_ipv6_connection *c = cm->connection;
+			sfe_ipv6_remove_connection(si, c);
+			si->exception_events[SFE_IPV6_EXCEPTION_EVENT_TCP_SEQ_BEFORE_LEFT_EDGE]++;
+			si->packets_not_forwarded++;
+			spin_unlock_bh(&si->lock);
+
+			DEBUG_TRACE("seq: %u before left edge: %u\n",
+				    end, cm->protocol_state.tcp.end - counter_cm->protocol_state.tcp.max_win - 1);
+			sfe_ipv6_flush_connection(si, c, SFE_SYNC_REASON_FLUSH);
+			return 0;
+		}
+
+		/*
+		 * Are we acking data that is to the right of what has been sent?
+		 */
+		if (unlikely((s32)(sack - (counter_cm->protocol_state.tcp.end + 1)) > 0)) {
+			struct sfe_ipv6_connection *c = cm->connection;
+			sfe_ipv6_remove_connection(si, c);
+			si->exception_events[SFE_IPV6_EXCEPTION_EVENT_TCP_ACK_EXCEEDS_RIGHT_EDGE]++;
+			si->packets_not_forwarded++;
+			spin_unlock_bh(&si->lock);
+
+			DEBUG_TRACE("ack: %u exceeds right edge: %u\n",
+				    sack, counter_cm->protocol_state.tcp.end + 1);
+			sfe_ipv6_flush_connection(si, c, SFE_SYNC_REASON_FLUSH);
+			return 0;
+		}
+
+		/*
+		 * Is our ack too far before the left hand edge of the window?
+		 */
+		left_edge = counter_cm->protocol_state.tcp.end
+			    - cm->protocol_state.tcp.max_win
+			    - SFE_IPV6_TCP_MAX_ACK_WINDOW
+			    - 1;
+		if (unlikely((s32)(sack - left_edge) < 0)) {
+			struct sfe_ipv6_connection *c = cm->connection;
+			sfe_ipv6_remove_connection(si, c);
+			si->exception_events[SFE_IPV6_EXCEPTION_EVENT_TCP_ACK_BEFORE_LEFT_EDGE]++;
+			si->packets_not_forwarded++;
+			spin_unlock_bh(&si->lock);
+
+			DEBUG_TRACE("ack: %u before left edge: %u\n", sack, left_edge);
+			sfe_ipv6_flush_connection(si, c, SFE_SYNC_REASON_FLUSH);
+			return 0;
+		}
+
+		/*
+		 * Have we just seen the largest window size yet for this connection?  If yes
+		 * then we need to record the new value.
+		 */
+		scaled_win = ntohs(tcph->window) << cm->protocol_state.tcp.win_scale;
+		scaled_win += (sack - ack);
+		if (unlikely(cm->protocol_state.tcp.max_win < scaled_win)) {
+			cm->protocol_state.tcp.max_win = scaled_win;
+		}
+
+		/*
+		 * If our sequence and/or ack numbers have advanced then record the new state.
+		 */
+		if (likely((s32)(end - cm->protocol_state.tcp.end) >= 0)) {
+			cm->protocol_state.tcp.end = end;
+		}
+
+		max_end = sack + scaled_win;
+		if (likely((s32)(max_end - counter_cm->protocol_state.tcp.max_end) >= 0)) {
+			counter_cm->protocol_state.tcp.max_end = max_end;
+		}
+	}
+
+	/*
+	 * From this point on we're good to modify the packet.
+	 */
+
+	/*
+	 * Update DSCP
+	 */
+	if (unlikely(cm->flags & SFE_IPV6_CONNECTION_MATCH_FLAG_DSCP_REMARK)) {
+		sfe_ipv6_change_dsfield(iph, cm->dscp);
+	}
+
+	/*
+	 * Decrement our hop_limit.
+	 */
+	iph->hop_limit -= 1;
+
+	/*
+	 * Do we have to perform translations of the source address/port?
+	 */
+	if (unlikely(cm->flags & SFE_IPV6_CONNECTION_MATCH_FLAG_XLATE_SRC)) {
+		u16 tcp_csum;
+		u32 sum;
+
+		iph->saddr = cm->xlate_src_ip[0];
+		tcph->source = cm->xlate_src_port;
+
+		/*
+		 * Do we have a non-zero UDP checksum?  If we do then we need
+		 * to update it.
+		 */
+		tcp_csum = tcph->check;
+		sum = tcp_csum + cm->xlate_src_csum_adjustment;
+		sum = (sum & 0xffff) + (sum >> 16);
+		tcph->check = (u16)sum;
+	}
+
+	/*
+	 * Do we have to perform translations of the destination address/port?
+	 */
+	if (unlikely(cm->flags & SFE_IPV6_CONNECTION_MATCH_FLAG_XLATE_DEST)) {
+		u16 tcp_csum;
+		u32 sum;
+
+		iph->daddr = cm->xlate_dest_ip[0];
+		tcph->dest = cm->xlate_dest_port;
+
+		/*
+		 * Do we have a non-zero UDP checksum?  If we do then we need
+		 * to update it.
+		 */
+		tcp_csum = tcph->check;
+		sum = tcp_csum + cm->xlate_dest_csum_adjustment;
+		sum = (sum & 0xffff) + (sum >> 16);
+		tcph->check = (u16)sum;
+	}
+
+	/*
+	 * Update traffic stats.
+	 */
+	cm->rx_packet_count++;
+	cm->rx_byte_count += len;
+
+	/*
+	 * If we're not already on the active list then insert ourselves at the tail
+	 * of the current list.
+	 */
+	if (unlikely(!cm->active)) {
+		cm->active = true;
+		cm->active_prev = si->active_tail;
+		if (likely(si->active_tail)) {
+			si->active_tail->active_next = cm;
+		} else {
+			si->active_head = cm;
+		}
+		si->active_tail = cm;
+	}
+
+	xmit_dev = cm->xmit_dev;
+	skb->dev = xmit_dev;
+
+	/*
+	 * Check to see if we need to write a header.
+	 */
+	if (likely(cm->flags & SFE_IPV6_CONNECTION_MATCH_FLAG_WRITE_L2_HDR)) {
+		if (unlikely(!(cm->flags & SFE_IPV6_CONNECTION_MATCH_FLAG_WRITE_FAST_ETH_HDR))) {
+			dev_hard_header(skb, xmit_dev, ETH_P_IPV6,
+					cm->xmit_dest_mac, cm->xmit_src_mac, len);
+		} else {
+			/*
+			 * For the simple case we write this really fast.
+			 */
+			struct sfe_ipv6_eth_hdr *eth = (struct sfe_ipv6_eth_hdr *)__skb_push(skb, ETH_HLEN);
+			eth->h_proto = htons(ETH_P_IPV6);
+			eth->h_dest[0] = cm->xmit_dest_mac[0];
+			eth->h_dest[1] = cm->xmit_dest_mac[1];
+			eth->h_dest[2] = cm->xmit_dest_mac[2];
+			eth->h_source[0] = cm->xmit_src_mac[0];
+			eth->h_source[1] = cm->xmit_src_mac[1];
+			eth->h_source[2] = cm->xmit_src_mac[2];
+		}
+	}
+
+	/*
+	 * Update priority of skb.
+	 */
+	if (unlikely(cm->flags & SFE_IPV6_CONNECTION_MATCH_FLAG_PRIORITY_REMARK)) {
+		skb->priority = cm->priority;
+	}
+
+	/*
+	 * Mark outgoing packet
+	 */
+	skb->mark = cm->connection->mark;
+	if (skb->mark) {
+		DEBUG_TRACE("SKB MARK is NON ZERO %x\n", skb->mark);
+	}
+
+	si->packets_forwarded++;
+	spin_unlock_bh(&si->lock);
+
+	/*
+	 * We're going to check for GSO flags when we transmit the packet so
+	 * start fetching the necessary cache line now.
+	 */
+	prefetch(skb_shinfo(skb));
+
+	/*
+	 * Mark that this packet has been fast forwarded.
+	 */
+	skb->fast_forwarded = 1;
+
+	/*
+	 * Send the packet on its way.
+	 */
+	dev_queue_xmit(skb);
+
+	return 1;
+}
+
+/*
+ * sfe_ipv6_recv_icmp()
+ *	Handle ICMP packet receives.
+ *
+ * ICMP packets aren't handled as a "fast path" and always have us process them
+ * through the default Linux stack.  What we do need to do is look for any errors
+ * about connections we are handling in the fast path.  If we find any such
+ * connections then we want to flush their state so that the ICMP error path
+ * within Linux has all of the correct state should it need it.
+ */
+static int sfe_ipv6_recv_icmp(struct sfe_ipv6 *si, struct sk_buff *skb, struct net_device *dev,
+			      unsigned int len, struct sfe_ipv6_ip_hdr *iph, unsigned int ihl)
+{
+	struct icmp6hdr *icmph;
+	struct sfe_ipv6_ip_hdr *icmp_iph;
+	struct sfe_ipv6_udp_hdr *icmp_udph;
+	struct sfe_ipv6_tcp_hdr *icmp_tcph;
+	struct sfe_ipv6_addr *src_ip;
+	struct sfe_ipv6_addr *dest_ip;
+	__be16 src_port;
+	__be16 dest_port;
+	struct sfe_ipv6_connection_match *cm;
+	struct sfe_ipv6_connection *c;
+	u8 next_hdr;
+
+	/*
+	 * Is our packet too short to contain a valid ICMP header?
+	 */
+	len -= ihl;
+	if (!pskb_may_pull(skb, ihl + sizeof(struct icmp6hdr))) {
+		spin_lock_bh(&si->lock);
+		si->exception_events[SFE_IPV6_EXCEPTION_EVENT_ICMP_HEADER_INCOMPLETE]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("packet too short for ICMP header\n");
+		return 0;
+	}
+
+	/*
+	 * We only handle "destination unreachable" and "time exceeded" messages.
+	 */
+	icmph = (struct icmp6hdr *)(skb->data + ihl);
+	if ((icmph->icmp6_type != ICMPV6_DEST_UNREACH)
+	    && (icmph->icmp6_type != ICMPV6_TIME_EXCEED)) {
+		spin_lock_bh(&si->lock);
+		si->exception_events[SFE_IPV6_EXCEPTION_EVENT_ICMP_UNHANDLED_TYPE]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("unhandled ICMP type: 0x%x\n", icmph->icmp6_type);
+		return 0;
+	}
+
+	/*
+	 * Do we have the full embedded IP header?
+	 * We should have 8 bytes of next L4 header - that's enough to identify
+	 * the connection.
+	 */
+	len -= sizeof(struct icmp6hdr);
+	ihl += sizeof(struct icmp6hdr);
+	if (!pskb_may_pull(skb, ihl + sizeof(struct sfe_ipv6_ip_hdr) + sizeof(struct sfe_ipv6_ext_hdr))) {
+		spin_lock_bh(&si->lock);
+		si->exception_events[SFE_IPV6_EXCEPTION_EVENT_ICMP_IPV6_HEADER_INCOMPLETE]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("Embedded IP header not complete\n");
+		return 0;
+	}
+
+	/*
+	 * Is our embedded IP version wrong?
+	 */
+	icmp_iph = (struct sfe_ipv6_ip_hdr *)(icmph + 1);
+	if (unlikely(icmp_iph->version != 6)) {
+		spin_lock_bh(&si->lock);
+		si->exception_events[SFE_IPV6_EXCEPTION_EVENT_ICMP_IPV6_NON_V6]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("IP version: %u\n", icmp_iph->version);
+		return 0;
+	}
+
+	len -= sizeof(struct sfe_ipv6_ip_hdr);
+	ihl += sizeof(struct sfe_ipv6_ip_hdr);
+	next_hdr = icmp_iph->nexthdr;
+	while (unlikely(sfe_ipv6_is_ext_hdr(next_hdr))) {
+		struct sfe_ipv6_ext_hdr *ext_hdr;
+		unsigned int ext_hdr_len;
+
+		ext_hdr = (struct sfe_ipv6_ext_hdr *)(skb->data + ihl);
+		if (next_hdr == SFE_IPV6_EXT_HDR_FRAG) {
+			struct sfe_ipv6_frag_hdr *frag_hdr = (struct sfe_ipv6_frag_hdr *)ext_hdr;
+			unsigned int frag_off = ntohs(frag_hdr->frag_off);
+
+			if (frag_off & SFE_IPV6_FRAG_OFFSET) {
+				spin_lock_bh(&si->lock);
+				si->exception_events[SFE_IPV6_EXCEPTION_EVENT_NON_INITIAL_FRAGMENT]++;
+				si->packets_not_forwarded++;
+				spin_unlock_bh(&si->lock);
+
+				DEBUG_TRACE("non-initial fragment\n");
+				return 0;
+			}
+		}
+
+		ext_hdr_len = ext_hdr->hdr_len;
+		ext_hdr_len <<= 3;
+		ext_hdr_len += sizeof(struct sfe_ipv6_ext_hdr);
+		len -= ext_hdr_len;
+		ihl += ext_hdr_len;
+		/*
+		 * We should have 8 bytes of next header - that's enough to identify
+		 * the connection.
+		 */
+		if (!pskb_may_pull(skb, ihl + sizeof(struct sfe_ipv6_ext_hdr))) {
+			spin_lock_bh(&si->lock);
+			si->exception_events[SFE_IPV6_EXCEPTION_EVENT_HEADER_INCOMPLETE]++;
+			si->packets_not_forwarded++;
+			spin_unlock_bh(&si->lock);
+
+			DEBUG_TRACE("extension header %d not completed\n", next_hdr);
+			return 0;
+		}
+
+		next_hdr = ext_hdr->next_hdr;
+	}
+
+	/*
+	 * Handle the embedded transport layer header.
+	 */
+	switch (next_hdr) {
+	case IPPROTO_UDP:
+		icmp_udph = (struct sfe_ipv6_udp_hdr *)(skb->data + ihl);
+		src_port = icmp_udph->source;
+		dest_port = icmp_udph->dest;
+		break;
+
+	case IPPROTO_TCP:
+		icmp_tcph = (struct sfe_ipv6_tcp_hdr *)(skb->data + ihl);
+		src_port = icmp_tcph->source;
+		dest_port = icmp_tcph->dest;
+		break;
+
+	default:
+		spin_lock_bh(&si->lock);
+		si->exception_events[SFE_IPV6_EXCEPTION_EVENT_ICMP_IPV6_UNHANDLED_PROTOCOL]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("Unhandled embedded IP protocol: %u\n", next_hdr);
+		return 0;
+	}
+
+	src_ip = &icmp_iph->saddr;
+	dest_ip = &icmp_iph->daddr;
+
+	spin_lock_bh(&si->lock);
+
+	/*
+	 * Look for a connection match.  Note that we reverse the source and destination
+	 * here because our embedded message contains a packet that was sent in the
+	 * opposite direction to the one in which we just received it.  It will have
+	 * been sent on the interface from which we received it though so that's still
+	 * ok to use.
+	 */
+	cm = sfe_ipv6_find_connection_match(si, dev, icmp_iph->nexthdr, dest_ip, dest_port, src_ip, src_port);
+	if (unlikely(!cm)) {
+		si->exception_events[SFE_IPV6_EXCEPTION_EVENT_ICMP_NO_CONNECTION]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("no connection found\n");
+		return 0;
+	}
+
+	/*
+	 * We found a connection so now remove it from the connection list and flush
+	 * its state.
+	 */
+	c = cm->connection;
+	sfe_ipv6_remove_connection(si, c);
+	si->exception_events[SFE_IPV6_EXCEPTION_EVENT_ICMP_FLUSHED_CONNECTION]++;
+	si->packets_not_forwarded++;
+	spin_unlock_bh(&si->lock);
+
+	sfe_ipv6_flush_connection(si, c, SFE_SYNC_REASON_FLUSH);
+	return 0;
+}
+
+/*
+ * sfe_ipv6_recv()
+ *	Handle packet receives and forwaring.
+ *
+ * Returns 1 if the packet is forwarded or 0 if it isn't.
+ */
+int sfe_ipv6_recv(struct net_device *dev, struct sk_buff *skb)
+{
+	struct sfe_ipv6 *si = &__si6;
+	unsigned int len;
+	unsigned int payload_len;
+	unsigned int ihl = sizeof(struct sfe_ipv6_ip_hdr);
+	bool flush_on_find = false;
+	struct sfe_ipv6_ip_hdr *iph;
+	u8 next_hdr;
+
+	/*
+	 * Check that we have space for an IP header and an uplayer header here.
+	 */
+	len = skb->len;
+	if (!pskb_may_pull(skb, ihl + sizeof(struct sfe_ipv6_ext_hdr))) {
+		spin_lock_bh(&si->lock);
+		si->exception_events[SFE_IPV6_EXCEPTION_EVENT_HEADER_INCOMPLETE]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("len: %u is too short\n", len);
+		return 0;
+	}
+
+	/*
+	 * Is our IP version wrong?
+	 */
+	iph = (struct sfe_ipv6_ip_hdr *)skb->data;
+	if (unlikely(iph->version != 6)) {
+		spin_lock_bh(&si->lock);
+		si->exception_events[SFE_IPV6_EXCEPTION_EVENT_NON_V6]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("IP version: %u\n", iph->version);
+		return 0;
+	}
+
+	/*
+	 * Does our datagram fit inside the skb?
+	 */
+	payload_len = ntohs(iph->payload_len);
+	if (unlikely(payload_len > (len - ihl))) {
+		spin_lock_bh(&si->lock);
+		si->exception_events[SFE_IPV6_EXCEPTION_EVENT_DATAGRAM_INCOMPLETE]++;
+		si->packets_not_forwarded++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("payload_len: %u, exceeds len: %u\n", payload_len, (len - sizeof(struct sfe_ipv6_ip_hdr)));
+		return 0;
+	}
+
+	next_hdr = iph->nexthdr;
+	while (unlikely(sfe_ipv6_is_ext_hdr(next_hdr))) {
+		struct sfe_ipv6_ext_hdr *ext_hdr;
+		unsigned int ext_hdr_len;
+
+		ext_hdr = (struct sfe_ipv6_ext_hdr *)(skb->data + ihl);
+		if (next_hdr == SFE_IPV6_EXT_HDR_FRAG) {
+			struct sfe_ipv6_frag_hdr *frag_hdr = (struct sfe_ipv6_frag_hdr *)ext_hdr;
+			unsigned int frag_off = ntohs(frag_hdr->frag_off);
+
+			if (frag_off & SFE_IPV6_FRAG_OFFSET) {
+				spin_lock_bh(&si->lock);
+				si->exception_events[SFE_IPV6_EXCEPTION_EVENT_NON_INITIAL_FRAGMENT]++;
+				si->packets_not_forwarded++;
+				spin_unlock_bh(&si->lock);
+
+				DEBUG_TRACE("non-initial fragment\n");
+				return 0;
+			}
+		}
+
+		ext_hdr_len = ext_hdr->hdr_len;
+		ext_hdr_len <<= 3;
+		ext_hdr_len += sizeof(struct sfe_ipv6_ext_hdr);
+		ihl += ext_hdr_len;
+		if (!pskb_may_pull(skb, ihl + sizeof(struct sfe_ipv6_ext_hdr))) {
+			spin_lock_bh(&si->lock);
+			si->exception_events[SFE_IPV6_EXCEPTION_EVENT_HEADER_INCOMPLETE]++;
+			si->packets_not_forwarded++;
+			spin_unlock_bh(&si->lock);
+
+			DEBUG_TRACE("extension header %d not completed\n", next_hdr);
+			return 0;
+		}
+
+		flush_on_find = true;
+		next_hdr = ext_hdr->next_hdr;
+	}
+
+	if (IPPROTO_UDP == next_hdr) {
+		return sfe_ipv6_recv_udp(si, skb, dev, len, iph, ihl, flush_on_find);
+	}
+
+	if (IPPROTO_TCP == next_hdr) {
+		return sfe_ipv6_recv_tcp(si, skb, dev, len, iph, ihl, flush_on_find);
+	}
+
+	if (IPPROTO_ICMPV6 == next_hdr) {
+		return sfe_ipv6_recv_icmp(si, skb, dev, len, iph, ihl);
+	}
+
+	spin_lock_bh(&si->lock);
+	si->exception_events[SFE_IPV6_EXCEPTION_EVENT_UNHANDLED_PROTOCOL]++;
+	si->packets_not_forwarded++;
+	spin_unlock_bh(&si->lock);
+
+	DEBUG_TRACE("not UDP, TCP or ICMP: %u\n", next_hdr);
+	return 0;
+}
+
+/*
+ * sfe_ipv6_update_tcp_state()
+ *	update TCP window variables.
+ */
+static void
+sfe_ipv6_update_tcp_state(struct sfe_ipv6_connection *c,
+			  struct sfe_connection_create *sic)
+{
+	struct sfe_ipv6_connection_match *orig_cm;
+	struct sfe_ipv6_connection_match *repl_cm;
+	struct sfe_ipv6_tcp_connection_match *orig_tcp;
+	struct sfe_ipv6_tcp_connection_match *repl_tcp;
+
+	orig_cm = c->original_match;
+	repl_cm = c->reply_match;
+	orig_tcp = &orig_cm->protocol_state.tcp;
+	repl_tcp = &repl_cm->protocol_state.tcp;
+
+	/* update orig */
+	if (orig_tcp->max_win < sic->src_td_max_window) {
+		orig_tcp->max_win = sic->src_td_max_window;
+	}
+	if ((s32)(orig_tcp->end - sic->src_td_end) < 0) {
+		orig_tcp->end = sic->src_td_end;
+	}
+	if ((s32)(orig_tcp->max_end - sic->src_td_max_end) < 0) {
+		orig_tcp->max_end = sic->src_td_max_end;
+	}
+
+	/* update reply */
+	if (repl_tcp->max_win < sic->dest_td_max_window) {
+		repl_tcp->max_win = sic->dest_td_max_window;
+	}
+	if ((s32)(repl_tcp->end - sic->dest_td_end) < 0) {
+		repl_tcp->end = sic->dest_td_end;
+	}
+	if ((s32)(repl_tcp->max_end - sic->dest_td_max_end) < 0) {
+		repl_tcp->max_end = sic->dest_td_max_end;
+	}
+
+	/* update match flags */
+	orig_cm->flags &= ~SFE_IPV6_CONNECTION_MATCH_FLAG_NO_SEQ_CHECK;
+	repl_cm->flags &= ~SFE_IPV6_CONNECTION_MATCH_FLAG_NO_SEQ_CHECK;
+	if (sic->flags & SFE_CREATE_FLAG_NO_SEQ_CHECK) {
+		orig_cm->flags |= SFE_IPV6_CONNECTION_MATCH_FLAG_NO_SEQ_CHECK;
+		repl_cm->flags |= SFE_IPV6_CONNECTION_MATCH_FLAG_NO_SEQ_CHECK;
+	}
+}
+
+/*
+ * sfe_ipv6_update_protocol_state()
+ *	update protocol specified state machine.
+ */
+static void
+sfe_ipv6_update_protocol_state(struct sfe_ipv6_connection *c,
+			       struct sfe_connection_create *sic)
+{
+	switch (sic->protocol) {
+	case IPPROTO_TCP:
+		sfe_ipv6_update_tcp_state(c, sic);
+		break;
+	}
+}
+
+/*
+ * sfe_ipv6_update_rule()
+ *	update forwarding rule after rule is created.
+ */
+void sfe_ipv6_update_rule(struct sfe_connection_create *sic)
+{
+	struct sfe_ipv6_connection *c;
+	struct sfe_ipv6 *si = &__si6;
+
+	spin_lock_bh(&si->lock);
+
+	c = sfe_ipv6_find_connection(si,
+				     sic->protocol,
+				     sic->src_ip.ip6,
+				     sic->src_port,
+				     sic->dest_ip.ip6,
+				     sic->dest_port);
+	if (c != NULL) {
+		sfe_ipv6_update_protocol_state(c, sic);
+	}
+
+	spin_unlock_bh(&si->lock);
+}
+
+/*
+ * sfe_ipv6_create_rule()
+ *	Create a forwarding rule.
+ */
+int sfe_ipv6_create_rule(struct sfe_connection_create *sic)
+{
+	struct sfe_ipv6 *si = &__si6;
+	struct sfe_ipv6_connection *c;
+	struct sfe_ipv6_connection_match *original_cm;
+	struct sfe_ipv6_connection_match *reply_cm;
+	struct net_device *dest_dev;
+	struct net_device *src_dev;
+
+	dest_dev = sic->dest_dev;
+	src_dev = sic->src_dev;
+
+	if (unlikely((dest_dev->reg_state != NETREG_REGISTERED) ||
+		     (src_dev->reg_state != NETREG_REGISTERED))) {
+		return -EINVAL;
+	}
+
+	spin_lock_bh(&si->lock);
+	si->connection_create_requests++;
+
+	/*
+	 * Check to see if there is already a flow that matches the rule we're
+	 * trying to create.  If there is then we can't create a new one.
+	 */
+	c = sfe_ipv6_find_connection(si,
+				     sic->protocol,
+				     sic->src_ip.ip6,
+				     sic->src_port,
+				     sic->dest_ip.ip6,
+				     sic->dest_port);
+	if (c != NULL) {
+		si->connection_create_collisions++;
+
+		/*
+		 * If we already have the flow then it's likely that this
+		 * request to create the connection rule contains more
+		 * up-to-date information. Check and update accordingly.
+		 */
+		sfe_ipv6_update_protocol_state(c, sic);
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("connection already exists - mark: %08x, p: %d\n"
+			    "  s: %s:%pM:%pI6:%u, d: %s:%pM:%pI6:%u\n",
+			    sic->mark, sic->protocol,
+			    sic->src_dev->name, sic->src_mac, sic->src_ip.ip6, ntohs(sic->src_port),
+			    sic->dest_dev->name, sic->dest_mac, sic->dest_ip.ip6, ntohs(sic->dest_port));
+		return -EADDRINUSE;
+	}
+
+	/*
+	 * Allocate the various connection tracking objects.
+	 */
+	c = (struct sfe_ipv6_connection *)kmalloc(sizeof(struct sfe_ipv6_connection), GFP_ATOMIC);
+	if (unlikely(!c)) {
+		spin_unlock_bh(&si->lock);
+		return -ENOMEM;
+	}
+
+	original_cm = (struct sfe_ipv6_connection_match *)kmalloc(sizeof(struct sfe_ipv6_connection_match), GFP_ATOMIC);
+	if (unlikely(!original_cm)) {
+		spin_unlock_bh(&si->lock);
+		kfree(c);
+		return -ENOMEM;
+	}
+
+	reply_cm = (struct sfe_ipv6_connection_match *)kmalloc(sizeof(struct sfe_ipv6_connection_match), GFP_ATOMIC);
+	if (unlikely(!reply_cm)) {
+		spin_unlock_bh(&si->lock);
+		kfree(original_cm);
+		kfree(c);
+		return -ENOMEM;
+	}
+
+	/*
+	 * Fill in the "original" direction connection matching object.
+	 * Note that the transmit MAC address is "dest_mac_xlate" because
+	 * we always know both ends of a connection by their translated
+	 * addresses and not their public addresses.
+	 */
+	original_cm->match_dev = src_dev;
+	original_cm->match_protocol = sic->protocol;
+	original_cm->match_src_ip[0] = sic->src_ip.ip6[0];
+	original_cm->match_src_port = sic->src_port;
+	original_cm->match_dest_ip[0] = sic->dest_ip.ip6[0];
+	original_cm->match_dest_port = sic->dest_port;
+	original_cm->xlate_src_ip[0] = sic->src_ip_xlate.ip6[0];
+	original_cm->xlate_src_port = sic->src_port_xlate;
+	original_cm->xlate_dest_ip[0] = sic->dest_ip_xlate.ip6[0];
+	original_cm->xlate_dest_port = sic->dest_port_xlate;
+	original_cm->rx_packet_count = 0;
+	original_cm->rx_packet_count64 = 0;
+	original_cm->rx_byte_count = 0;
+	original_cm->rx_byte_count64 = 0;
+	original_cm->xmit_dev = dest_dev;
+	original_cm->xmit_dev_mtu = sic->dest_mtu;
+	memcpy(original_cm->xmit_src_mac, dest_dev->dev_addr, ETH_ALEN);
+	memcpy(original_cm->xmit_dest_mac, sic->dest_mac_xlate, ETH_ALEN);
+	original_cm->connection = c;
+	original_cm->counter_match = reply_cm;
+	original_cm->flags = 0;
+	if (sic->flags & SFE_CREATE_FLAG_REMARK_PRIORITY) {
+		original_cm->priority = sic->src_priority;
+		original_cm->flags |= SFE_IPV6_CONNECTION_MATCH_FLAG_PRIORITY_REMARK;
+	}
+	if (sic->flags & SFE_CREATE_FLAG_REMARK_DSCP) {
+		original_cm->dscp = sic->src_dscp << SFE_IPV6_DSCP_SHIFT;
+		original_cm->flags |= SFE_IPV6_CONNECTION_MATCH_FLAG_DSCP_REMARK;
+	}
+#ifdef CONFIG_XFRM
+	original_cm->flow_accel = sic->original_accel;
+#endif
+	original_cm->active_next = NULL;
+	original_cm->active_prev = NULL;
+	original_cm->active = false;
+
+	/*
+	 * For PPP links we don't write an L2 header.  For everything else we do.
+	 */
+	if (!(dest_dev->flags & IFF_POINTOPOINT)) {
+		original_cm->flags |= SFE_IPV6_CONNECTION_MATCH_FLAG_WRITE_L2_HDR;
+
+		/*
+		 * If our dev writes Ethernet headers then we can write a really fast
+		 * version.
+		 */
+		if (dest_dev->header_ops) {
+			if (dest_dev->header_ops->create == eth_header) {
+				original_cm->flags |= SFE_IPV6_CONNECTION_MATCH_FLAG_WRITE_FAST_ETH_HDR;
+			}
+		}
+	}
+
+	/*
+	 * Fill in the "reply" direction connection matching object.
+	 */
+	reply_cm->match_dev = dest_dev;
+	reply_cm->match_protocol = sic->protocol;
+	reply_cm->match_src_ip[0] = sic->dest_ip_xlate.ip6[0];
+	reply_cm->match_src_port = sic->dest_port_xlate;
+	reply_cm->match_dest_ip[0] = sic->src_ip_xlate.ip6[0];
+	reply_cm->match_dest_port = sic->src_port_xlate;
+	reply_cm->xlate_src_ip[0] = sic->dest_ip.ip6[0];
+	reply_cm->xlate_src_port = sic->dest_port;
+	reply_cm->xlate_dest_ip[0] = sic->src_ip.ip6[0];
+	reply_cm->xlate_dest_port = sic->src_port;
+	reply_cm->rx_packet_count = 0;
+	reply_cm->rx_packet_count64 = 0;
+	reply_cm->rx_byte_count = 0;
+	reply_cm->rx_byte_count64 = 0;
+	reply_cm->xmit_dev = src_dev;
+	reply_cm->xmit_dev_mtu = sic->src_mtu;
+	memcpy(reply_cm->xmit_src_mac, src_dev->dev_addr, ETH_ALEN);
+	memcpy(reply_cm->xmit_dest_mac, sic->src_mac, ETH_ALEN);
+	reply_cm->connection = c;
+	reply_cm->counter_match = original_cm;
+	reply_cm->flags = 0;
+	if (sic->flags & SFE_CREATE_FLAG_REMARK_PRIORITY) {
+		reply_cm->priority = sic->dest_priority;
+		reply_cm->flags |= SFE_IPV6_CONNECTION_MATCH_FLAG_PRIORITY_REMARK;
+	}
+	if (sic->flags & SFE_CREATE_FLAG_REMARK_DSCP) {
+		reply_cm->dscp = sic->dest_dscp << SFE_IPV6_DSCP_SHIFT;
+		reply_cm->flags |= SFE_IPV6_CONNECTION_MATCH_FLAG_DSCP_REMARK;
+	}
+#ifdef CONFIG_XFRM
+	reply_cm->flow_accel = sic->reply_accel;
+#endif
+	reply_cm->active_next = NULL;
+	reply_cm->active_prev = NULL;
+	reply_cm->active = false;
+
+	/*
+	 * For PPP links we don't write an L2 header.  For everything else we do.
+	 */
+	if (!(src_dev->flags & IFF_POINTOPOINT)) {
+		reply_cm->flags |= SFE_IPV6_CONNECTION_MATCH_FLAG_WRITE_L2_HDR;
+
+		/*
+		 * If our dev writes Ethernet headers then we can write a really fast
+		 * version.
+		 */
+		if (src_dev->header_ops) {
+			if (src_dev->header_ops->create == eth_header) {
+				reply_cm->flags |= SFE_IPV6_CONNECTION_MATCH_FLAG_WRITE_FAST_ETH_HDR;
+			}
+		}
+	}
+
+
+	if (!sfe_ipv6_addr_equal(sic->dest_ip.ip6, sic->dest_ip_xlate.ip6) || sic->dest_port != sic->dest_port_xlate) {
+		original_cm->flags |= SFE_IPV6_CONNECTION_MATCH_FLAG_XLATE_DEST;
+		reply_cm->flags |= SFE_IPV6_CONNECTION_MATCH_FLAG_XLATE_SRC;
+	}
+
+	if (!sfe_ipv6_addr_equal(sic->src_ip.ip6, sic->src_ip_xlate.ip6) || sic->src_port != sic->src_port_xlate) {
+		original_cm->flags |= SFE_IPV6_CONNECTION_MATCH_FLAG_XLATE_SRC;
+		reply_cm->flags |= SFE_IPV6_CONNECTION_MATCH_FLAG_XLATE_DEST;
+	}
+
+	c->protocol = sic->protocol;
+	c->src_ip[0] = sic->src_ip.ip6[0];
+	c->src_ip_xlate[0] = sic->src_ip_xlate.ip6[0];
+	c->src_port = sic->src_port;
+	c->src_port_xlate = sic->src_port_xlate;
+	c->original_dev = src_dev;
+	c->original_match = original_cm;
+	c->dest_ip[0] = sic->dest_ip.ip6[0];
+	c->dest_ip_xlate[0] = sic->dest_ip_xlate.ip6[0];
+	c->dest_port = sic->dest_port;
+	c->dest_port_xlate = sic->dest_port_xlate;
+	c->reply_dev = dest_dev;
+	c->reply_match = reply_cm;
+	c->mark = sic->mark;
+	c->debug_read_seq = 0;
+	c->last_sync_jiffies = get_jiffies_64();
+
+	/*
+	 * Take hold of our source and dest devices for the duration of the connection.
+	 */
+	dev_hold(c->original_dev);
+	dev_hold(c->reply_dev);
+
+	/*
+	 * Initialize the protocol-specific information that we track.
+	 */
+	switch (sic->protocol) {
+	case IPPROTO_TCP:
+		original_cm->protocol_state.tcp.win_scale = sic->src_td_window_scale;
+		original_cm->protocol_state.tcp.max_win = sic->src_td_max_window ? sic->src_td_max_window : 1;
+		original_cm->protocol_state.tcp.end = sic->src_td_end;
+		original_cm->protocol_state.tcp.max_end = sic->src_td_max_end;
+		reply_cm->protocol_state.tcp.win_scale = sic->dest_td_window_scale;
+		reply_cm->protocol_state.tcp.max_win = sic->dest_td_max_window ? sic->dest_td_max_window : 1;
+		reply_cm->protocol_state.tcp.end = sic->dest_td_end;
+		reply_cm->protocol_state.tcp.max_end = sic->dest_td_max_end;
+		if (sic->flags & SFE_CREATE_FLAG_NO_SEQ_CHECK) {
+			original_cm->flags |= SFE_IPV6_CONNECTION_MATCH_FLAG_NO_SEQ_CHECK;
+			reply_cm->flags |= SFE_IPV6_CONNECTION_MATCH_FLAG_NO_SEQ_CHECK;
+		}
+		break;
+	}
+
+	sfe_ipv6_connection_match_compute_translations(original_cm);
+	sfe_ipv6_connection_match_compute_translations(reply_cm);
+	sfe_ipv6_insert_connection(si, c);
+
+	spin_unlock_bh(&si->lock);
+
+	/*
+	 * We have everything we need!
+	 */
+	DEBUG_INFO("new connection - mark: %08x, p: %d\n"
+		   "  s: %s:%pM(%pM):%pI6(%pI6):%u(%u)\n"
+		   "  d: %s:%pM(%pM):%pI6(%pI6):%u(%u)\n",
+		   sic->mark, sic->protocol,
+		   sic->src_dev->name, sic->src_mac, sic->src_mac_xlate,
+		   sic->src_ip.ip6, sic->src_ip_xlate.ip6, ntohs(sic->src_port), ntohs(sic->src_port_xlate),
+		   dest_dev->name, sic->dest_mac, sic->dest_mac_xlate,
+		   sic->dest_ip.ip6, sic->dest_ip_xlate.ip6, ntohs(sic->dest_port), ntohs(sic->dest_port_xlate));
+
+	return 0;
+}
+
+/*
+ * sfe_ipv6_destroy_rule()
+ *	Destroy a forwarding rule.
+ */
+void sfe_ipv6_destroy_rule(struct sfe_connection_destroy *sid)
+{
+	struct sfe_ipv6 *si = &__si6;
+	struct sfe_ipv6_connection *c;
+
+	spin_lock_bh(&si->lock);
+	si->connection_destroy_requests++;
+
+	/*
+	 * Check to see if we have a flow that matches the rule we're trying
+	 * to destroy.  If there isn't then we can't destroy it.
+	 */
+	c = sfe_ipv6_find_connection(si, sid->protocol, sid->src_ip.ip6, sid->src_port,
+				     sid->dest_ip.ip6, sid->dest_port);
+	if (!c) {
+		si->connection_destroy_misses++;
+		spin_unlock_bh(&si->lock);
+
+		DEBUG_TRACE("connection does not exist - p: %d, s: %pI6:%u, d: %pI6:%u\n",
+			    sid->protocol, sid->src_ip.ip6, ntohs(sid->src_port),
+			    sid->dest_ip.ip6, ntohs(sid->dest_port));
+		return;
+	}
+
+	/*
+	 * Remove our connection details from the hash tables.
+	 */
+	sfe_ipv6_remove_connection(si, c);
+	spin_unlock_bh(&si->lock);
+
+	sfe_ipv6_flush_connection(si, c, SFE_SYNC_REASON_DESTROY);
+
+	DEBUG_INFO("connection destroyed - p: %d, s: %pI6:%u, d: %pI6:%u\n",
+		   sid->protocol, sid->src_ip.ip6, ntohs(sid->src_port),
+		   sid->dest_ip.ip6, ntohs(sid->dest_port));
+}
+
+/*
+ * sfe_ipv6_register_sync_rule_callback()
+ *	Register a callback for rule synchronization.
+ */
+void sfe_ipv6_register_sync_rule_callback(sfe_sync_rule_callback_t sync_rule_callback)
+{
+	struct sfe_ipv6 *si = &__si6;
+
+	spin_lock_bh(&si->lock);
+	rcu_assign_pointer(si->sync_rule_callback, sync_rule_callback);
+	spin_unlock_bh(&si->lock);
+}
+
+/*
+ * sfe_ipv6_get_debug_dev()
+ */
+static ssize_t sfe_ipv6_get_debug_dev(struct device *dev,
+				      struct device_attribute *attr,
+				      char *buf)
+{
+	struct sfe_ipv6 *si = &__si6;
+	ssize_t count;
+	int num;
+
+	spin_lock_bh(&si->lock);
+	num = si->debug_dev;
+	spin_unlock_bh(&si->lock);
+
+	count = snprintf(buf, (ssize_t)PAGE_SIZE, "%d\n", num);
+	return count;
+}
+
+/*
+ * sfe_ipv6_destroy_all_rules_for_dev()
+ *	Destroy all connections that match a particular device.
+ *
+ * If we pass dev as NULL then this destroys all connections.
+ */
+void sfe_ipv6_destroy_all_rules_for_dev(struct net_device *dev)
+{
+	struct sfe_ipv6 *si = &__si6;
+	struct sfe_ipv6_connection *c;
+
+another_round:
+	spin_lock_bh(&si->lock);
+
+	for (c = si->all_connections_head; c; c = c->all_connections_next) {
+		/*
+		 * Does this connection relate to the device we are destroying?
+		 */
+		if (!dev
+		    || (dev == c->original_dev)
+		    || (dev == c->reply_dev)) {
+			break;
+		}
+	}
+
+	if (c) {
+		sfe_ipv6_remove_connection(si, c);
+	}
+
+	spin_unlock_bh(&si->lock);
+
+	if (c) {
+		sfe_ipv6_flush_connection(si, c, SFE_SYNC_REASON_DESTROY);
+		goto another_round;
+	}
+}
+
+/*
+ * sfe_ipv6_periodic_sync()
+ */
+static void sfe_ipv6_periodic_sync(unsigned long arg)
+{
+	struct sfe_ipv6 *si = (struct sfe_ipv6 *)arg;
+	u64 now_jiffies;
+	int quota;
+	sfe_sync_rule_callback_t sync_rule_callback;
+
+	now_jiffies = get_jiffies_64();
+
+	rcu_read_lock();
+	sync_rule_callback = rcu_dereference(si->sync_rule_callback);
+	if (!sync_rule_callback) {
+		rcu_read_unlock();
+		goto done;
+	}
+
+	spin_lock_bh(&si->lock);
+	sfe_ipv6_update_summary_stats(si);
+
+	/*
+	 * Get an estimate of the number of connections to parse in this sync.
+	 */
+	quota = (si->num_connections + 63) / 64;
+
+	/*
+	 * Walk the "active" list and sync the connection state.
+	 */
+	while (quota--) {
+		struct sfe_ipv6_connection_match *cm;
+		struct sfe_ipv6_connection_match *counter_cm;
+		struct sfe_ipv6_connection *c;
+		struct sfe_connection_sync sis;
+
+		cm = si->active_head;
+		if (!cm) {
+			break;
+		}
+
+		/*
+		 * There's a possibility that our counter match is in the active list too.
+		 * If it is then remove it.
+		 */
+		counter_cm = cm->counter_match;
+		if (counter_cm->active) {
+			counter_cm->active = false;
+
+			/*
+			 * We must have a connection preceding this counter match
+			 * because that's the one that got us to this point, so we don't have
+			 * to worry about removing the head of the list.
+			 */
+			counter_cm->active_prev->active_next = counter_cm->active_next;
+
+			if (likely(counter_cm->active_next)) {
+				counter_cm->active_next->active_prev = counter_cm->active_prev;
+			} else {
+				si->active_tail = counter_cm->active_prev;
+			}
+
+			counter_cm->active_next = NULL;
+			counter_cm->active_prev = NULL;
+		}
+
+		/*
+		 * Now remove the head of the active scan list.
+		 */
+		cm->active = false;
+		si->active_head = cm->active_next;
+		if (likely(cm->active_next)) {
+			cm->active_next->active_prev = NULL;
+		} else {
+			si->active_tail = NULL;
+		}
+		cm->active_next = NULL;
+
+		/*
+		 * Sync the connection state.
+		 */
+		c = cm->connection;
+		sfe_ipv6_gen_sync_connection(si, c, &sis, SFE_SYNC_REASON_STATS, now_jiffies);
+
+		/*
+		 * We don't want to be holding the lock when we sync!
+		 */
+		spin_unlock_bh(&si->lock);
+		sync_rule_callback(&sis);
+		spin_lock_bh(&si->lock);
+	}
+
+	spin_unlock_bh(&si->lock);
+	rcu_read_unlock();
+
+done:
+	mod_timer(&si->timer, jiffies + ((HZ + 99) / 100));
+}
+
+/*
+ * sfe_ipv6_debug_dev_read_start()
+ *	Generate part of the XML output.
+ */
+static bool sfe_ipv6_debug_dev_read_start(struct sfe_ipv6 *si, char *buffer, char *msg, size_t *length,
+					  int *total_read, struct sfe_ipv6_debug_xml_write_state *ws)
+{
+	int bytes_read;
+
+	si->debug_read_seq++;
+
+	bytes_read = snprintf(msg, CHAR_DEV_MSG_SIZE, "<sfe_ipv6>\n");
+	if (copy_to_user(buffer + *total_read, msg, CHAR_DEV_MSG_SIZE)) {
+		return false;
+	}
+
+	*length -= bytes_read;
+	*total_read += bytes_read;
+
+	ws->state++;
+	return true;
+}
+
+/*
+ * sfe_ipv6_debug_dev_read_connections_start()
+ *	Generate part of the XML output.
+ */
+static bool sfe_ipv6_debug_dev_read_connections_start(struct sfe_ipv6 *si, char *buffer, char *msg, size_t *length,
+						      int *total_read, struct sfe_ipv6_debug_xml_write_state *ws)
+{
+	int bytes_read;
+
+	bytes_read = snprintf(msg, CHAR_DEV_MSG_SIZE, "\t<connections>\n");
+	if (copy_to_user(buffer + *total_read, msg, CHAR_DEV_MSG_SIZE)) {
+		return false;
+	}
+
+	*length -= bytes_read;
+	*total_read += bytes_read;
+
+	ws->state++;
+	return true;
+}
+
+/*
+ * sfe_ipv6_debug_dev_read_connections_connection()
+ *	Generate part of the XML output.
+ */
+static bool sfe_ipv6_debug_dev_read_connections_connection(struct sfe_ipv6 *si, char *buffer, char *msg, size_t *length,
+							   int *total_read, struct sfe_ipv6_debug_xml_write_state *ws)
+{
+	struct sfe_ipv6_connection *c;
+	struct sfe_ipv6_connection_match *original_cm;
+	struct sfe_ipv6_connection_match *reply_cm;
+	int bytes_read;
+	int protocol;
+	struct net_device *src_dev;
+	struct sfe_ipv6_addr src_ip;
+	struct sfe_ipv6_addr src_ip_xlate;
+	__be16 src_port;
+	__be16 src_port_xlate;
+	u64 src_rx_packets;
+	u64 src_rx_bytes;
+	struct net_device *dest_dev;
+	struct sfe_ipv6_addr dest_ip;
+	struct sfe_ipv6_addr dest_ip_xlate;
+	__be16 dest_port;
+	__be16 dest_port_xlate;
+	u64 dest_rx_packets;
+	u64 dest_rx_bytes;
+	u64 last_sync_jiffies;
+	u32 mark, src_priority, dest_priority, src_dscp, dest_dscp;
+
+	spin_lock_bh(&si->lock);
+
+	for (c = si->all_connections_head; c; c = c->all_connections_next) {
+		if (c->debug_read_seq < si->debug_read_seq) {
+			c->debug_read_seq = si->debug_read_seq;
+			break;
+		}
+	}
+
+	/*
+	 * If there were no connections then move to the next state.
+	 */
+	if (!c) {
+		spin_unlock_bh(&si->lock);
+		ws->state++;
+		return true;
+	}
+
+	original_cm = c->original_match;
+	reply_cm = c->reply_match;
+
+	protocol = c->protocol;
+	src_dev = c->original_dev;
+	src_ip = c->src_ip[0];
+	src_ip_xlate = c->src_ip_xlate[0];
+	src_port = c->src_port;
+	src_port_xlate = c->src_port_xlate;
+	src_priority = original_cm->priority;
+	src_dscp = original_cm->dscp >> SFE_IPV6_DSCP_SHIFT;
+
+	sfe_ipv6_connection_match_update_summary_stats(original_cm);
+	sfe_ipv6_connection_match_update_summary_stats(reply_cm);
+
+	src_rx_packets = original_cm->rx_packet_count64;
+	src_rx_bytes = original_cm->rx_byte_count64;
+	dest_dev = c->reply_dev;
+	dest_ip = c->dest_ip[0];
+	dest_ip_xlate = c->dest_ip_xlate[0];
+	dest_port = c->dest_port;
+	dest_port_xlate = c->dest_port_xlate;
+	dest_priority = reply_cm->priority;
+	dest_dscp = reply_cm->dscp >> SFE_IPV6_DSCP_SHIFT;
+	dest_rx_packets = reply_cm->rx_packet_count64;
+	dest_rx_bytes = reply_cm->rx_byte_count64;
+	last_sync_jiffies = get_jiffies_64() - c->last_sync_jiffies;
+	mark = c->mark;
+
+	spin_unlock_bh(&si->lock);
+
+	bytes_read = snprintf(msg, CHAR_DEV_MSG_SIZE, "\t\t<connection "
+				"protocol=\"%u\" "
+				"src_dev=\"%s\" "
+				"src_ip=\"%pI6\" src_ip_xlate=\"%pI6\" "
+				"src_port=\"%u\" src_port_xlate=\"%u\" "
+				"src_priority=\"%u\" src_dscp=\"%u\" "
+				"src_rx_pkts=\"%llu\" src_rx_bytes=\"%llu\" "
+				"dest_dev=\"%s\" "
+				"dest_ip=\"%pI6\" dest_ip_xlate=\"%pI6\" "
+				"dest_port=\"%u\" dest_port_xlate=\"%u\" "
+				"dest_priority=\"%u\" dest_dscp=\"%u\" "
+				"dest_rx_pkts=\"%llu\" dest_rx_bytes=\"%llu\" "
+				"last_sync=\"%llu\" "
+				"mark=\"%08x\" />\n",
+				protocol,
+				src_dev->name,
+				&src_ip, &src_ip_xlate,
+				ntohs(src_port), ntohs(src_port_xlate),
+				src_priority, src_dscp,
+				src_rx_packets, src_rx_bytes,
+				dest_dev->name,
+				&dest_ip, &dest_ip_xlate,
+				ntohs(dest_port), ntohs(dest_port_xlate),
+				dest_priority, dest_dscp,
+				dest_rx_packets, dest_rx_bytes,
+				last_sync_jiffies, mark);
+
+	if (copy_to_user(buffer + *total_read, msg, CHAR_DEV_MSG_SIZE)) {
+		return false;
+	}
+
+	*length -= bytes_read;
+	*total_read += bytes_read;
+
+	return true;
+}
+
+/*
+ * sfe_ipv6_debug_dev_read_connections_end()
+ *	Generate part of the XML output.
+ */
+static bool sfe_ipv6_debug_dev_read_connections_end(struct sfe_ipv6 *si, char *buffer, char *msg, size_t *length,
+						    int *total_read, struct sfe_ipv6_debug_xml_write_state *ws)
+{
+	int bytes_read;
+
+	bytes_read = snprintf(msg, CHAR_DEV_MSG_SIZE, "\t</connections>\n");
+	if (copy_to_user(buffer + *total_read, msg, CHAR_DEV_MSG_SIZE)) {
+		return false;
+	}
+
+	*length -= bytes_read;
+	*total_read += bytes_read;
+
+	ws->state++;
+	return true;
+}
+
+/*
+ * sfe_ipv6_debug_dev_read_exceptions_start()
+ *	Generate part of the XML output.
+ */
+static bool sfe_ipv6_debug_dev_read_exceptions_start(struct sfe_ipv6 *si, char *buffer, char *msg, size_t *length,
+						     int *total_read, struct sfe_ipv6_debug_xml_write_state *ws)
+{
+	int bytes_read;
+
+	bytes_read = snprintf(msg, CHAR_DEV_MSG_SIZE, "\t<exceptions>\n");
+	if (copy_to_user(buffer + *total_read, msg, CHAR_DEV_MSG_SIZE)) {
+		return false;
+	}
+
+	*length -= bytes_read;
+	*total_read += bytes_read;
+
+	ws->state++;
+	return true;
+}
+
+/*
+ * sfe_ipv6_debug_dev_read_exceptions_exception()
+ *	Generate part of the XML output.
+ */
+static bool sfe_ipv6_debug_dev_read_exceptions_exception(struct sfe_ipv6 *si, char *buffer, char *msg, size_t *length,
+							 int *total_read, struct sfe_ipv6_debug_xml_write_state *ws)
+{
+	u64 ct;
+
+	spin_lock_bh(&si->lock);
+	ct = si->exception_events64[ws->iter_exception];
+	spin_unlock_bh(&si->lock);
+
+	if (ct) {
+		int bytes_read;
+
+		bytes_read = snprintf(msg, CHAR_DEV_MSG_SIZE,
+				      "\t\t<exception name=\"%s\" count=\"%llu\" />\n",
+				      sfe_ipv6_exception_events_string[ws->iter_exception],
+				      ct);
+		if (copy_to_user(buffer + *total_read, msg, CHAR_DEV_MSG_SIZE)) {
+			return false;
+		}
+
+		*length -= bytes_read;
+		*total_read += bytes_read;
+	}
+
+	ws->iter_exception++;
+	if (ws->iter_exception >= SFE_IPV6_EXCEPTION_EVENT_LAST) {
+		ws->iter_exception = 0;
+		ws->state++;
+	}
+
+	return true;
+}
+
+/*
+ * sfe_ipv6_debug_dev_read_exceptions_end()
+ *	Generate part of the XML output.
+ */
+static bool sfe_ipv6_debug_dev_read_exceptions_end(struct sfe_ipv6 *si, char *buffer, char *msg, size_t *length,
+						   int *total_read, struct sfe_ipv6_debug_xml_write_state *ws)
+{
+	int bytes_read;
+
+	bytes_read = snprintf(msg, CHAR_DEV_MSG_SIZE, "\t</exceptions>\n");
+	if (copy_to_user(buffer + *total_read, msg, CHAR_DEV_MSG_SIZE)) {
+		return false;
+	}
+
+	*length -= bytes_read;
+	*total_read += bytes_read;
+
+	ws->state++;
+	return true;
+}
+
+/*
+ * sfe_ipv6_debug_dev_read_stats()
+ *	Generate part of the XML output.
+ */
+static bool sfe_ipv6_debug_dev_read_stats(struct sfe_ipv6 *si, char *buffer, char *msg, size_t *length,
+					  int *total_read, struct sfe_ipv6_debug_xml_write_state *ws)
+{
+	int bytes_read;
+	unsigned int num_connections;
+	u64 packets_forwarded;
+	u64 packets_not_forwarded;
+	u64 connection_create_requests;
+	u64 connection_create_collisions;
+	u64 connection_destroy_requests;
+	u64 connection_destroy_misses;
+	u64 connection_flushes;
+	u64 connection_match_hash_hits;
+	u64 connection_match_hash_reorders;
+
+	spin_lock_bh(&si->lock);
+	sfe_ipv6_update_summary_stats(si);
+
+	num_connections = si->num_connections;
+	packets_forwarded = si->packets_forwarded64;
+	packets_not_forwarded = si->packets_not_forwarded64;
+	connection_create_requests = si->connection_create_requests64;
+	connection_create_collisions = si->connection_create_collisions64;
+	connection_destroy_requests = si->connection_destroy_requests64;
+	connection_destroy_misses = si->connection_destroy_misses64;
+	connection_flushes = si->connection_flushes64;
+	connection_match_hash_hits = si->connection_match_hash_hits64;
+	connection_match_hash_reorders = si->connection_match_hash_reorders64;
+	spin_unlock_bh(&si->lock);
+
+	bytes_read = snprintf(msg, CHAR_DEV_MSG_SIZE, "\t<stats "
+			      "num_connections=\"%u\" "
+			      "pkts_forwarded=\"%llu\" pkts_not_forwarded=\"%llu\" "
+			      "create_requests=\"%llu\" create_collisions=\"%llu\" "
+			      "destroy_requests=\"%llu\" destroy_misses=\"%llu\" "
+			      "flushes=\"%llu\" "
+			      "hash_hits=\"%llu\" hash_reorders=\"%llu\" />\n",
+			      num_connections,
+			      packets_forwarded,
+			      packets_not_forwarded,
+			      connection_create_requests,
+			      connection_create_collisions,
+			      connection_destroy_requests,
+			      connection_destroy_misses,
+			      connection_flushes,
+			      connection_match_hash_hits,
+			      connection_match_hash_reorders);
+	if (copy_to_user(buffer + *total_read, msg, CHAR_DEV_MSG_SIZE)) {
+		return false;
+	}
+
+	*length -= bytes_read;
+	*total_read += bytes_read;
+
+	ws->state++;
+	return true;
+}
+
+/*
+ * sfe_ipv6_debug_dev_read_end()
+ *	Generate part of the XML output.
+ */
+static bool sfe_ipv6_debug_dev_read_end(struct sfe_ipv6 *si, char *buffer, char *msg, size_t *length,
+					int *total_read, struct sfe_ipv6_debug_xml_write_state *ws)
+{
+	int bytes_read;
+
+	bytes_read = snprintf(msg, CHAR_DEV_MSG_SIZE, "</sfe_ipv6>\n");
+	if (copy_to_user(buffer + *total_read, msg, CHAR_DEV_MSG_SIZE)) {
+		return false;
+	}
+
+	*length -= bytes_read;
+	*total_read += bytes_read;
+
+	ws->state++;
+	return true;
+}
+
+/*
+ * Array of write functions that write various XML elements that correspond to
+ * our XML output state machine.
+ */
+static sfe_ipv6_debug_xml_write_method_t sfe_ipv6_debug_xml_write_methods[SFE_IPV6_DEBUG_XML_STATE_DONE] = {
+	sfe_ipv6_debug_dev_read_start,
+	sfe_ipv6_debug_dev_read_connections_start,
+	sfe_ipv6_debug_dev_read_connections_connection,
+	sfe_ipv6_debug_dev_read_connections_end,
+	sfe_ipv6_debug_dev_read_exceptions_start,
+	sfe_ipv6_debug_dev_read_exceptions_exception,
+	sfe_ipv6_debug_dev_read_exceptions_end,
+	sfe_ipv6_debug_dev_read_stats,
+	sfe_ipv6_debug_dev_read_end,
+};
+
+/*
+ * sfe_ipv6_debug_dev_read()
+ *	Send info to userspace upon read request from user
+ */
+static ssize_t sfe_ipv6_debug_dev_read(struct file *filp, char *buffer, size_t length, loff_t *offset)
+{
+	char msg[CHAR_DEV_MSG_SIZE];
+	int total_read = 0;
+	struct sfe_ipv6_debug_xml_write_state *ws;
+	struct sfe_ipv6 *si = &__si6;
+
+	ws = (struct sfe_ipv6_debug_xml_write_state *)filp->private_data;
+	while ((ws->state != SFE_IPV6_DEBUG_XML_STATE_DONE) && (length > CHAR_DEV_MSG_SIZE)) {
+		if ((sfe_ipv6_debug_xml_write_methods[ws->state])(si, buffer, msg, &length, &total_read, ws)) {
+			continue;
+		}
+	}
+
+	return total_read;
+}
+
+/*
+ * sfe_ipv6_debug_dev_write()
+ *	Write to char device resets some stats
+ */
+static ssize_t sfe_ipv6_debug_dev_write(struct file *filp, const char *buffer, size_t length, loff_t *offset)
+{
+	struct sfe_ipv6 *si = &__si6;
+
+	spin_lock_bh(&si->lock);
+	sfe_ipv6_update_summary_stats(si);
+
+	si->packets_forwarded64 = 0;
+	si->packets_not_forwarded64 = 0;
+	si->connection_create_requests64 = 0;
+	si->connection_create_collisions64 = 0;
+	si->connection_destroy_requests64 = 0;
+	si->connection_destroy_misses64 = 0;
+	si->connection_flushes64 = 0;
+	si->connection_match_hash_hits64 = 0;
+	si->connection_match_hash_reorders64 = 0;
+	spin_unlock_bh(&si->lock);
+
+	return length;
+}
+
+/*
+ * sfe_ipv6_debug_dev_open()
+ */
+static int sfe_ipv6_debug_dev_open(struct inode *inode, struct file *file)
+{
+	struct sfe_ipv6_debug_xml_write_state *ws;
+
+	ws = (struct sfe_ipv6_debug_xml_write_state *)file->private_data;
+	if (ws) {
+		return 0;
+	}
+
+	ws = kzalloc(sizeof(struct sfe_ipv6_debug_xml_write_state), GFP_KERNEL);
+	if (!ws) {
+		return -ENOMEM;
+	}
+
+	ws->state = SFE_IPV6_DEBUG_XML_STATE_START;
+	file->private_data = ws;
+
+	return 0;
+}
+
+/*
+ * sfe_ipv6_debug_dev_release()
+ */
+static int sfe_ipv6_debug_dev_release(struct inode *inode, struct file *file)
+{
+	struct sfe_ipv6_debug_xml_write_state *ws;
+
+	ws = (struct sfe_ipv6_debug_xml_write_state *)file->private_data;
+	if (ws) {
+		/*
+		 * We've finished with our output so free the write state.
+		 */
+		kfree(ws);
+	}
+
+	return 0;
+}
+
+/*
+ * File operations used in the debug char device
+ */
+static struct file_operations sfe_ipv6_debug_dev_fops = {
+	.read = sfe_ipv6_debug_dev_read,
+	.write = sfe_ipv6_debug_dev_write,
+	.open = sfe_ipv6_debug_dev_open,
+	.release = sfe_ipv6_debug_dev_release
+};
+
+/*
+ * sfe_ipv6_init()
+ */
+static int __init sfe_ipv6_init(void)
+{
+	struct sfe_ipv6 *si = &__si6;
+	int result = -1;
+
+	DEBUG_INFO("SFE IPv6 init\n");
+
+	/*
+	 * Create sys/sfe_ipv6
+	 */
+	si->sys_sfe_ipv6 = kobject_create_and_add("sfe_ipv6", NULL);
+	if (!si->sys_sfe_ipv6) {
+		DEBUG_ERROR("failed to register sfe_ipv6\n");
+		goto exit1;
+	}
+
+	/*
+	 * Create files, one for each parameter supported by this module.
+	 */
+	result = sysfs_create_file(si->sys_sfe_ipv6, &sfe_ipv6_debug_dev_attr.attr);
+	if (result) {
+		DEBUG_ERROR("failed to register debug dev file: %d\n", result);
+		goto exit2;
+	}
+
+	/*
+	 * Register our debug char device.
+	 */
+	result = register_chrdev(0, "sfe_ipv6", &sfe_ipv6_debug_dev_fops);
+	if (result < 0) {
+		DEBUG_ERROR("Failed to register chrdev: %d\n", result);
+		goto exit3;
+	}
+
+	si->debug_dev = result;
+
+	/*
+	 * Create a timer to handle periodic statistics.
+	 */
+	setup_timer(&si->timer, sfe_ipv6_periodic_sync, (unsigned long)si);
+	mod_timer(&si->timer, jiffies + ((HZ + 99) / 100));
+
+	spin_lock_init(&si->lock);
+
+	return 0;
+
+exit3:
+	sysfs_remove_file(si->sys_sfe_ipv6, &sfe_ipv6_debug_dev_attr.attr);
+
+exit2:
+	kobject_put(si->sys_sfe_ipv6);
+
+exit1:
+	return result;
+}
+
+/*
+ * sfe_ipv6_exit()
+ */
+static void __exit sfe_ipv6_exit(void)
+{
+	struct sfe_ipv6 *si = &__si6;
+
+	DEBUG_INFO("SFE IPv6 exit\n");
+
+	/*
+	 * Destroy all connections.
+	 */
+	sfe_ipv6_destroy_all_rules_for_dev(NULL);
+
+	del_timer_sync(&si->timer);
+
+	unregister_chrdev(si->debug_dev, "sfe_ipv6");
+
+	sysfs_remove_file(si->sys_sfe_ipv6, &sfe_ipv6_debug_dev_attr.attr);
+
+	kobject_put(si->sys_sfe_ipv6);
+}
+
+module_init(sfe_ipv6_init)
+module_exit(sfe_ipv6_exit)
+
+EXPORT_SYMBOL(sfe_ipv6_recv);
+EXPORT_SYMBOL(sfe_ipv6_create_rule);
+EXPORT_SYMBOL(sfe_ipv6_destroy_rule);
+EXPORT_SYMBOL(sfe_ipv6_destroy_all_rules_for_dev);
+EXPORT_SYMBOL(sfe_ipv6_register_sync_rule_callback);
+EXPORT_SYMBOL(sfe_ipv6_mark_rule);
+EXPORT_SYMBOL(sfe_ipv6_update_rule);
+
+MODULE_DESCRIPTION("Shortcut Forwarding Engine - IPv6 support");
+MODULE_LICENSE("Dual BSD/GPL");
+
diff --git a/package/lean/shortcut-fe/src/userspace_example.c b/package/lean/shortcut-fe/src/userspace_example.c
new file mode 100644
index 0000000000..8bdd4670cd
--- /dev/null
+++ b/package/lean/shortcut-fe/src/userspace_example.c
@@ -0,0 +1,232 @@
+/*
+ * Copyright (c) 2013,2016 The Linux Foundation. All rights reserved.
+ * Permission to use, copy, modify, and/or distribute this software for
+ * any purpose with or without fee is hereby granted, provided that the
+ * above copyright notice and this permission notice appear in all copies.
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT
+ * OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#include <netlink/genl/genl.h>
+#include <netlink/genl/ctrl.h>
+#include <errno.h>
+#include <stdio.h>
+#include <arpa/inet.h>
+
+#include "fast-classifier.h"
+
+static struct nl_sock *sock;
+static struct nl_sock *sock_event;
+static int family;
+static int grp_id;
+
+static struct nla_policy fast_classifier_genl_policy[FAST_CLASSIFIER_A_MAX + 1] = {
+	[FAST_CLASSIFIER_A_TUPLE] = { .type = NLA_UNSPEC },
+};
+
+void dump_fc_tuple(struct fast_classifier_tuple *fc_msg)
+{
+	char src_str[INET_ADDRSTRLEN];
+	char dst_str[INET_ADDRSTRLEN];
+
+	printf("TUPLE: %d, %s, %s, %d, %d"
+			" SMAC=%02x:%02x:%02x:%02x:%02x:%02x",
+			" DMAC=%02x:%02x:%02x:%02x:%02x:%02x\n",
+				fc_msg->proto,
+				inet_ntop(AF_INET,
+					  &fc_msg->src_saddr.in.s_addr,
+					  src_str,
+					  INET_ADDRSTRLEN),
+				inet_ntop(AF_INET,
+					  &fc_msg->dst_saddr.in.s_addr,
+					  dst_str,
+					  INET_ADDRSTRLEN),
+				fc_msg->sport, fc_msg->dport,
+				fc_msg->smac[0], fc_msg->smac[1], fc_msg->smac[2],
+				fc_msg->smac[3], fc_msg->smac[4], fc_msg->smac[5],
+				fc_msg->dmac[0], fc_msg->dmac[1], fc_msg->dmac[2],
+				fc_msg->dmac[3], fc_msg->dmac[4], fc_msg->dmac[5]);
+}
+
+static int parse_cb(struct nl_msg *msg, void *arg)
+{
+	struct nlmsghdr *nlh = nlmsg_hdr(msg);
+	struct genlmsghdr *gnlh = nlmsg_data(nlh);
+	struct nlattr *attrs[FAST_CLASSIFIER_A_MAX];
+
+	genlmsg_parse(nlh, 0, attrs, FAST_CLASSIFIER_A_MAX, fast_classifier_genl_policy);
+
+	switch (gnlh->cmd) {
+	case FAST_CLASSIFIER_C_OFFLOADED:
+		printf("Got a offloaded message\n");
+		dump_fc_tuple(nla_data(attrs[FAST_CLASSIFIER_A_TUPLE]));
+		return NL_OK;
+	case FAST_CLASSIFIER_C_DONE:
+		printf("Got a done message\n");
+		dump_fc_tuple(nla_data(attrs[FAST_CLASSIFIER_A_TUPLE]));
+		return NL_OK;
+	}
+
+	return NL_SKIP;
+}
+
+int fast_classifier_init(void)
+{
+	int err;
+
+	sock = nl_socket_alloc();
+	if (!sock) {
+		printf("Unable to allocation socket.\n");
+		return -1;
+	}
+	genl_connect(sock);
+
+	sock_event = nl_socket_alloc();
+	if (!sock_event) {
+		nl_close(sock);
+		nl_socket_free(sock);
+		printf("Unable to allocation socket.\n");
+		return -1;
+	}
+	genl_connect(sock_event);
+
+	family = genl_ctrl_resolve(sock, FAST_CLASSIFIER_GENL_NAME);
+	if (family < 0) {
+		nl_close(sock_event);
+		nl_close(sock);
+		nl_socket_free(sock);
+		nl_socket_free(sock_event);
+		printf("Unable to resolve family\n");
+		return -1;
+	}
+
+	grp_id = genl_ctrl_resolve_grp(sock, FAST_CLASSIFIER_GENL_NAME,
+				       FAST_CLASSIFIER_GENL_MCGRP);
+	if (grp_id < 0) {
+		printf("Unable to resolve mcast group\n");
+		return -1;
+	}
+
+	err = nl_socket_add_membership(sock_event, grp_id);
+	if (err < 0) {
+		printf("Unable to add membership\n");
+		return -1;
+	}
+
+	nl_socket_disable_seq_check(sock_event);
+	nl_socket_modify_cb(sock_event, NL_CB_VALID, NL_CB_CUSTOM, parse_cb, NULL);
+
+	return 0;
+}
+
+void fast_classifier_close(void)
+{
+	nl_close(sock_event);
+	nl_close(sock);
+	nl_socket_free(sock_event);
+	nl_socket_free(sock);
+}
+
+void fast_classifier_ipv4_offload(unsigned char proto, unsigned long src_saddr,
+				  unsigned long dst_saddr, unsigned short sport,
+				  unsigned short dport)
+{
+	struct nl_msg *msg;
+	int ret;
+#ifdef DEBUG
+	char src_str[INET_ADDRSTRLEN];
+	char dst_str[INET_ADDRSTRLEN];
+#endif
+	struct fast_classifier_tuple fc_msg;
+
+#ifdef DEBUG
+	printf("DEBUG: would offload: %d, %s, %s, %d, %d\n", proto,
+	       inet_ntop(AF_INET, &src_saddr,  src_str, INET_ADDRSTRLEN),
+	       inet_ntop(AF_INET, &dst_saddr,  dst_str, INET_ADDRSTRLEN),
+	       sport, dport);
+#endif
+
+	fc_msg.proto = proto;
+	fc_msg.src_saddr.in.s_addr = src_saddr;
+	fc_msg.dst_saddr.in.s_addr = dst_saddr;
+	fc_msg.sport = sport;
+	fc_msg.dport = dport;
+	fc_msg.smac[0] = 'a';
+	fc_msg.smac[1] = 'b';
+	fc_msg.smac[2] = 'c';
+	fc_msg.smac[3] = 'd';
+	fc_msg.smac[4] = 'e';
+	fc_msg.smac[5] = 'f';
+	fc_msg.dmac[0] = 'f';
+	fc_msg.dmac[1] = 'e';
+	fc_msg.dmac[2] = 'd';
+	fc_msg.dmac[3] = 'c';
+	fc_msg.dmac[4] = 'b';
+	fc_msg.dmac[5] = 'a';
+
+	if (fast_classifier_init() < 0) {
+		printf("Unable to init generic netlink\n");
+		exit(1);
+	}
+
+	msg = nlmsg_alloc();
+	if (!msg) {
+		nl_socket_free(sock);
+		printf("Unable to allocate message\n");
+		return;
+	}
+
+	genlmsg_put(msg, NL_AUTO_PID, NL_AUTO_SEQ, family,
+		    FAST_CLASSIFIER_GENL_HDRSIZE, NLM_F_REQUEST,
+		    FAST_CLASSIFIER_C_OFFLOAD, FAST_CLASSIFIER_GENL_VERSION);
+	nla_put(msg, 1, sizeof(fc_msg), &fc_msg);
+
+	ret = nl_send_auto_complete(sock, msg);
+
+	nlmsg_free(msg);
+	if (ret < 0) {
+		printf("nlmsg_free failed");
+		nl_close(sock);
+		nl_socket_free(sock);
+		return;
+	}
+
+	ret = nl_wait_for_ack(sock);
+	if (ret < 0) {
+		printf("wait for ack failed");
+		nl_close(sock);
+		nl_socket_free(sock);
+		return;
+	}
+}
+
+void fast_classifier_listen_for_messages(void)
+{
+	printf("waiting for netlink events\n");
+
+	while (1) {
+		nl_recvmsgs_default(sock_event);
+	}
+}
+
+int main(int argc, char *argv[])
+{
+	if (fast_classifier_init() < 0) {
+		printf("Unable to init generic netlink\n");
+		exit(1);
+	}
+
+	fast_classifier_ipv4_offload('a', 0, 0, 0, 0);
+
+	/* this never returns */
+	fast_classifier_listen_for_messages();
+
+	fast_classifier_close();
+
+	return 0;
+}
diff --git a/package/lean/vlmcsd/Makefile b/package/lean/vlmcsd/Makefile
new file mode 100644
index 0000000000..201754e828
--- /dev/null
+++ b/package/lean/vlmcsd/Makefile
@@ -0,0 +1,47 @@
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=vlmcsd
+PKG_VERSION:=svn1112
+PKG_RELEASE:=1
+
+PKG_MAINTAINER:=fuyumi <280604399@qq.com>
+PKG_LICENSE:=MIT
+PKG_LICENSE_FILES:=LICENSE
+
+PKG_SOURCE_PROTO:=git
+PKG_SOURCE_URL:=https://github.com/etnperlong/vlmcsd.git
+PKG_SOURCE_VERSION:=88007b3578cab6324241ae6e636d8e6503cd611c
+
+PKG_SOURCE_SUBDIR:=$(PKG_NAME)
+PKG_SOURCE:=$(PKG_SOURCE_SUBDIR)-$(PKG_VERSION).tar.gz
+PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_SOURCE_SUBDIR)
+PKG_BUILD_PARALLEL:=1
+
+include $(INCLUDE_DIR)/package.mk
+
+define Package/vlmcsd
+	SECTION:=net
+	CATEGORY:=Network
+	TITLE:=vlmcsd for OpenWRT
+	URL:=http://forums.mydigitallife.info/threads/50234
+	DEPENDS:=+libpthread
+endef
+
+define Package/vlmcsd/description
+	vlmcsd is a KMS Emulator in C.
+endef
+
+MAKE_FLAGS += \
+	-C $(PKG_BUILD_DIR)
+
+define Package/vlmcsd/install
+	$(INSTALL_DIR) $(1)/usr/bin
+	$(INSTALL_BIN) $(PKG_BUILD_DIR)/bin/vlmcsd $(1)/usr/bin/vlmcsd
+	#$(INSTALL_BIN) $(PKG_BUILD_DIR)/bin/vlmcs $(1)/usr/bin/vlmcs
+	$(INSTALL_DIR) $(1)/etc
+	$(INSTALL_BIN) ./files/vlmcsd.ini $(1)/etc/vlmcsd.ini
+	#$(INSTALL_DIR) $(1)/etc/init.d
+	#$(INSTALL_BIN) ./files/vlmcsd.init $(1)/etc/init.d/vlmcsd
+endef
+
+$(eval $(call BuildPackage,vlmcsd))
diff --git a/package/lean/vlmcsd/files/vlmcsd.ini b/package/lean/vlmcsd/files/vlmcsd.ini
new file mode 100755
index 0000000000..c69d079d1b
--- /dev/null
+++ b/package/lean/vlmcsd/files/vlmcsd.ini
@@ -0,0 +1,59 @@
+#ePID/HwId设置为Windows显式
+;55c92734-d682-4d71-983e-d6ec3f16059f = 06401-00206-271-392041-03-1033-9600.0000-3622014 / 01 02 03 04 05 06 07 08
+
+#ePID设置为Office2010（包含Visio和Project）显式
+;59a52881-a989-479d-af46-f275c6370663 = 06401-00096-199-496023-03-1033-9600.0000-3622014
+
+#ePID设置为Office2013（包含Visio和Project）显式
+;0ff1ce15-a989-479d-af46-f275c6370663 = 06401-00206-234-409313-03-1033-9600.0000-3622014
+
+#使用自定义TCP端口
+;Port = 1688
+
+#监听所有IPv4地址（默认端口1688）
+;Listen = 0.0.0.0:1688
+
+#监听所有IPv6地址（默认端口1688）
+;Listen = [::]:1688
+
+#程序启动时随机ePIDs（只有那些未显式指定的）
+;RandomizationLevel = 1
+
+#在ePIDs中使用特定区域 (1033 = 美国英语)，即使ePID是随机的
+;LCID = 1033
+
+#设置最多4个同时工作（分叉进程或线程）
+;MaxWorkers = 4
+
+#闲置30秒后断开用户
+;ConnectionTimeout = 30
+
+#每次请求后立即断开客户端
+;DisconnectClientsImmediately = yes
+
+#写一个pid文件（包含vlmcsd的进程ID的文件）
+;PidFile = /var/run/vlmcsd.pid
+
+#写日志到/var/log/vlmcsd.log
+;LogFile = /var/log/vlmcsd.log
+
+#创建详细日志
+;LogVerbose = true
+
+#设置激活间隔2小时
+;ActivationInterval = 2h
+
+#设置更新间隔7天
+;RenewalInterval = 7d
+
+#运行程序的用户为vlmcsduser
+;user = vlmcsduser
+
+#运行程序的组为vlmcsdgroup
+;group = vlmcsdgroup 
+
+#禁用或启用RPC的NDR64传输语法（默认启用）
+;UseNDR64 = true
+
+#禁用或启用RPC的绑定时间特性协商（默认启用）
+;UseBTFN = true
diff --git a/package/lean/vlmcsd/files/vlmcsd.init b/package/lean/vlmcsd/files/vlmcsd.init
new file mode 100755
index 0000000000..fe628d708a
--- /dev/null
+++ b/package/lean/vlmcsd/files/vlmcsd.init
@@ -0,0 +1,37 @@
+#!/bin/sh /etc/rc.common
+# Copyright (c) 2011-2015 OpenWrt.org
+
+START=90
+
+start(){
+	if [ ! -f "/tmp/vlmcsd.pid" ]; then
+		/usr/bin/vlmcsd -i /etc/vlmcsd.ini -p /tmp/vlmcsd.pid -L 0.0.0.0:1688
+		iptables -D input_rule -p tcp --dport 1688 -j ACCEPT
+		iptables -A input_rule -p tcp --dport 1688 -j ACCEPT 
+		sed -i '/## luci-app-vlmcsd/d' /etc/firewall.user
+		echo "iptables -A input_rule -p tcp --dport 1688 -j ACCEPT ## luci-app-vlmcsd" >> /etc/firewall.user
+		echo "KMS Server has started."
+	else
+		echo "KMS Server has already started."
+	fi
+}
+
+stop(){
+	if [ ! -f "/tmp/vlmcsd.pid" ]; then
+		echo "KMS Server is not running."
+	else
+		pid=`cat /tmp/vlmcsd.pid`
+		kill $pid
+		rm -f /tmp/vlmcsd.pid
+		iptables -D input_rule -p tcp --dport 1688 -j ACCEPT
+		sed -i '/## luci-app-vlmcsd/d' /etc/firewall.user
+		echo "KMS Server has stopped."
+	fi
+}
+
+restart(){
+	stop
+	sleep 2
+	start
+	echo "KMS Server has restarted."
+}
diff --git a/package/lean/vsftpd-alt/Makefile b/package/lean/vsftpd-alt/Makefile
new file mode 100644
index 0000000000..c8cbecdd9e
--- /dev/null
+++ b/package/lean/vsftpd-alt/Makefile
@@ -0,0 +1,113 @@
+#
+# Copyright (C) 2006-2014 OpenWrt.org
+#
+# This is free software, licensed under the GNU General Public License v2.
+# See /LICENSE for more information.
+#
+
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=vsftpd-alt
+PKG_VERSION:=3.0.3
+PKG_RELEASE:=7
+
+PKG_SOURCE:=vsftpd-$(PKG_VERSION).tar.gz
+PKG_SOURCE_URL:=https://security.appspot.com/downloads/
+PKG_MD5SUM:=da119d084bd3f98664636ea05b5bb398
+PKG_LICENSE:=GPLv2
+
+BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION)
+PKG_BUILD_DIR:=$(BUILD_DIR)/vsftpd-$(PKG_VERSION)
+
+include $(INCLUDE_DIR)/package.mk
+
+define Package/vsftpd-alt/Default
+  SUBMENU:=File Transfer
+  SECTION:=net
+  CATEGORY:=Network
+  TITLE:=A fast and secure FTP server (with aio support)
+  URL:=http://vsftpd.beasts.org/
+  MAINTAINER:=Cezary Jackiewicz <cezary@eko.one.pl>
+  DEPENDS=+libuci 
+  #+PACKAGE_libpam:libpam 
+endef
+
+define Package/vsftpd-alt/conffiles
+/etc/vsftpd.conf
+endef
+
+#EXTRA_LDFLAGS:= -lcrypt -lcrypto -lssl
+
+define Package/vsftpd-alt/config
+config VSFTPD_USE_UCI_SCRIPTS
+	bool "Uses UCI scripts"
+	depends on PACKAGE_vsftpd-alt
+	default y
+#config VSFTPD_ENABLE_AIO
+#	bool "Enable async I/O (Currently Buggy)"
+#	depends on PACKAGE_vsftpd-alt
+#	default n
+endef
+
+ifneq ($(CONFIG_USE_MUSL),)
+  NLSSTRING:=-lcrypt
+else
+  NLSSTRING:=-lcrypt -lnsl
+endif
+
+TARGET_CFLAGS += -D_GNU_SOURCE -include fcntl.h
+
+#ifdef CONFIG_PACKAGE_libpam
+#  EXTRA_LDFLAGS += -lpam
+#endif
+
+#ifeq ($(CONFIG_VSFTPD_ENABLE_AIO),y)
+#define Package/vsftpd-alt
+#$(call Package/vsftpd-alt/Default)
+#  DEPENDS=+PACKAGE_libpam:libpam +libopenssl +libuci +libaio
+#endef
+#  EXTRA_LDFLAGS += -laio
+#  EXTRA_CFLAGS += -DVSFTPD_ASYNC_IO
+#else
+define Package/vsftpd-alt
+$(call Package/vsftpd-alt/Default)
+endef
+#endif
+
+
+define Build/Compile
+	$(SED) 's/-lcrypt -lnsl/$(NLSSTRING)/' $(PKG_BUILD_DIR)/Makefile
+	$(MAKE) -C $(PKG_BUILD_DIR) \
+		CC="$(TARGET_CC)" \
+		CFLAGS="$(TARGET_CFLAGS)" \
+		LDFLAGS="$(TARGET_LDFLAGS)" \
+		vsftpd
+endef
+
+ifeq ($(CONFIG_VSFTPD_USE_UCI_SCRIPTS),y)
+define Package/vsftpd-alt/install
+$(call Package/vsftpd-alt/install/default, $(1))
+	$(INSTALL_DIR) $(1)/etc/init.d
+	$(INSTALL_DIR) $(1)/etc/config
+ifdef CONFIG_PACKAGE_libpam
+	$(INSTALL_DIR) $(1)/etc/pam.d
+endif
+	$(INSTALL_DIR) $(1)/usr/sbin
+	$(INSTALL_BIN) $(PKG_BUILD_DIR)/vsftpd $(1)/usr/sbin
+	$(INSTALL_BIN) ./files/vsftpd-uci.init $(1)/etc/init.d/vsftpd
+	$(INSTALL_BIN) ./files/vsftpd.uci $(1)/etc/config/vsftpd
+	$(INSTALL_BIN) ./files/vsftpd_wrapper $(1)/usr/sbin
+	$(INSTALL_BIN) ./files/vsftpd_prepare $(1)/usr/sbin
+endef
+else
+define Package/vsftpd-alt/install
+$(call Package/vsftpd-alt/install/default, $(1))
+	$(INSTALL_DIR) $(1)/etc/init.d
+	$(INSTALL_DIR) $(1)/usr/sbin
+	$(INSTALL_CONF) ./files/vsftpd.conf $(1)/etc/vsftpd.conf
+	$(INSTALL_BIN) ./files/vsftpd.init $(1)/etc/init.d/vsftpd
+	$(INSTALL_BIN) $(PKG_BUILD_DIR)/vsftpd $(1)/usr/sbin	
+endef
+endif
+
+$(eval $(call BuildPackage,vsftpd-alt))
diff --git a/package/lean/vsftpd-alt/files/vsftpd-uci.init b/package/lean/vsftpd-alt/files/vsftpd-uci.init
new file mode 100755
index 0000000000..a5af8b79b3
--- /dev/null
+++ b/package/lean/vsftpd-alt/files/vsftpd-uci.init
@@ -0,0 +1,14 @@
+#!/bin/sh /etc/rc.common
+# Copyright (C) 2006-2011 OpenWrt.org
+
+START=50
+
+start() {
+	/usr/sbin/vsftpd_prepare
+	service_start /usr/sbin/vsftpd_wrapper ipv4
+	service_start /usr/sbin/vsftpd_wrapper ipv6
+}
+
+stop() {
+	service_stop /usr/sbin/vsftpd
+}
diff --git a/package/lean/vsftpd-alt/files/vsftpd.conf b/package/lean/vsftpd-alt/files/vsftpd.conf
new file mode 100644
index 0000000000..7d46506e92
--- /dev/null
+++ b/package/lean/vsftpd-alt/files/vsftpd.conf
@@ -0,0 +1,30 @@
+background=YES
+listen=YES
+anonymous_enable=NO
+local_enable=YES
+write_enable=YES
+local_umask=022
+check_shell=NO
+#dirmessage_enable=YES
+#ftpd_banner=Welcome to blah FTP service.
+session_support=NO
+#syslog_enable=YES
+#userlist_enable=YES
+#userlist_deny=NO
+#userlist_file=/etc/vsftpd.users
+#xferlog_enable=YES
+#xferlog_file=/var/log/vsftpd.log
+#xferlog_std_format=YES
+###
+### TLS/SSL options
+### example key generation: openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/config/vsftpd_privkey.pem -out /etc/config/vsftpd_cert.pem -subj /C="DE"/ST="Saxony"/L="Leipzig"/CN="OpenWrt"
+#ssl_enable=YES
+#allow_anon_ssl=NO
+#force_local_data_ssl=NO
+#force_local_logins_ssl=NO
+#ssl_tlsv1=YES
+#ssl_sslv2=NO
+#ssl_sslv3=NO
+#rsa_cert_file=/etc/config/vsftpd_cert.pem
+#rsa_private_key_file=/etc/config/vsftpd_privkey.pem
+
diff --git a/package/lean/vsftpd-alt/files/vsftpd.init b/package/lean/vsftpd-alt/files/vsftpd.init
new file mode 100755
index 0000000000..ad3e23da5f
--- /dev/null
+++ b/package/lean/vsftpd-alt/files/vsftpd.init
@@ -0,0 +1,13 @@
+#!/bin/sh /etc/rc.common
+# Copyright (C) 2006-2011 OpenWrt.org
+
+START=50
+
+start() {
+	mkdir -m 0755 -p /var/run/vsftpd
+	service_start /usr/sbin/vsftpd
+}
+
+stop() {
+	service_stop /usr/sbin/vsftpd
+}
diff --git a/package/lean/vsftpd-alt/files/vsftpd.uci b/package/lean/vsftpd-alt/files/vsftpd.uci
new file mode 100755
index 0000000000..e856c16dc6
--- /dev/null
+++ b/package/lean/vsftpd-alt/files/vsftpd.uci
@@ -0,0 +1,50 @@
+
+config listen 'listen'
+	option enable4 '1'
+	option ipv4 '0.0.0.0'
+	option enable6 '0'
+	option ipv6 '::1'
+	option port '21'
+	option dataport '20'
+
+config local 'local'
+	option enabled '1'
+
+config global 'global'
+	option write '1'
+	option download '1'
+	option dotfile '0'
+	option umask '022'
+	option dirlist '1'
+	option dirmsgfile '.message'
+
+config connection 'connection'
+	option portmode '1'
+	option pasvmode '1'
+	option ascii 'both'
+	option idletimeout '1800'
+	option conntimeout '120'
+	option dataconntimeout '120'
+	option maxclient '0'
+	option maxperip '0'
+	option maxrate '0'
+	option maxretry '3'
+
+config anonymous 'anonymous'
+	option enabled '0'
+	option username 'ftp'
+	option root '/home/ftp'
+	option umask '022'
+	option writemkdir '0'
+	option upload '0'
+	option others '0'
+	option maxrate '0'
+
+config log 'log'
+	option syslog '0'
+	option xreflog '1'
+	option file '/var/log/vsftpd.log'
+
+config vuser 'vuser'
+	option enabled '0'
+	option username 'ftp'
diff --git a/package/lean/vsftpd-alt/files/vsftpd_prepare b/package/lean/vsftpd-alt/files/vsftpd_prepare
new file mode 100755
index 0000000000..29169ab33c
--- /dev/null
+++ b/package/lean/vsftpd-alt/files/vsftpd_prepare
@@ -0,0 +1,257 @@
+#!/bin/sh
+# Copyright (C) 2005-2016 Weijie Gao <hackpascal@gmail.com>
+
+. $IPKG_INSTROOT/lib/functions.sh
+
+output_field()
+{
+	local UCI_SECTION=$1
+	local KEY=$2
+	local INIFIELD=$3
+	local DEFVALUE=$4
+	local value
+
+	if [ -z "$INIFIELD" ]; then INIFIELD=$KEY; fi
+
+	config_get value "$UCI_SECTION" "$KEY"
+	if [ -z "$value" ]; then value=$DEFVALUE; fi
+
+	echo "$INIFIELD=$value" >> $CONF
+}
+
+output_bool()
+{
+	local UCI_SECTION=$1
+	local KEY=$2
+	local INIFIELD=$3
+	local DEFVALUE=$4
+	local value
+
+	if [ -z "$INIFIELD" ]; then INIFIELD=$KEY; fi
+
+	config_get value "$UCI_SECTION" "$KEY"
+	if [ -z "$value" ]; then value=$DEFVALUE; fi
+	if [ x"$value" != x0 ] && [ x"$value" != x1 ]; then value=0; fi
+
+	if [ "$value" == 0 ]; then
+		value=NO
+	else
+		value=YES
+	fi
+
+	echo "$INIFIELD=$value" >> $CONF
+}
+
+output_const()
+{
+	local INIFIELD=$1
+	local value=$2
+
+	echo "$INIFIELD=$value" >> $CONF
+}
+
+get_value()
+{
+	local UCI_SECTION=$1
+	local KEY=$2
+	local value
+
+	config_get value "$UCI_SECTION" "$KEY"
+
+	echo $value
+}
+
+vusers_iterate()
+{
+	local config=$1
+	local name
+	local password
+	local owner
+	local home
+	local _umask
+	local maxrate
+	local write_enable
+	local upload_enable
+	local mkdir_enable
+	local others_enable
+
+	config_get name "$config" username
+	config_get password "$config" password
+	config_get home "$config" home
+	config_get _umask "$config" "umask"
+	config_get maxrate "$config" maxrate
+	config_get write_enable "$config" writemkdir
+	config_get upload_enable "$config" upload
+	config_get others_enable "$config" others
+
+	config_get owner "vuser" username
+
+	rm -f $VUSER_CONF_DIR/$name
+	touch $VUSER_CONF_DIR/$name
+
+	if [ -z $home ]; then home=$CHROOT_DIR; fi
+
+	echo "local_root=$home" >> $VUSER_CONF_DIR/$name
+
+	if [ x$write_enable = x1 ]; then write_enable=YES; else write_enable=NO; fi
+	if [ x$upload_enable = x1 ]; then upload_enable=YES; else upload_enable=NO; fi
+	if [ x$others_enable = x1 ]; then others_enable=YES; else others_enable=NO; fi
+	if [ -z $_umask ]; then _umask=022; fi
+	if [ -z $maxrate ]; then maxrate=0; fi
+
+	echo "anon_world_readable_only=NO" >> $VUSER_CONF_DIR/$name
+	echo "anon_mkdir_write_enable=$write_enable" >> $VUSER_CONF_DIR/$name
+	echo "write_enable=$write_enable" >> $VUSER_CONF_DIR/$name
+	echo "anon_upload_enable=$upload_enable" >> $VUSER_CONF_DIR/$name
+	echo "anon_other_write_enable=$others_enable" >> $VUSER_CONF_DIR/$name
+	echo "anon_umask=$_umask" >> $VUSER_CONF_DIR/$name
+	echo "anon_max_rate=$maxrate" >> $VUSER_CONF_DIR/$name
+
+	if ! [ -d "$home" ]; then
+		mkdir -p $home
+		chown $owner:$owner $home
+		chmod -R a+w $home
+	fi
+}
+
+VAR=/var/run/vsftpd
+CONF=$VAR/vsftpd.conf
+VUSER_DB=$VAR/vusers
+VUSER_CONF_DIR=$VAR/users
+CHROOT_DIR=$VAR/empty
+
+rm -f $CONF
+rm -rf $VUSER_CONF_DIR $CHROOT_DIR
+
+mkdir -m 0755 -p $VAR
+mkdir -p $VUSER_CONF_DIR
+mkdir -p $CHROOT_DIR
+
+config_load vsftpd
+
+# listen
+output_const "background" YES
+output_field listen port "listen_port" 21
+output_field listen dataport "ftp_data_port" 20
+output_field listen pasv_min_port "pasv_min_port" 50000
+output_field listen pasv_max_port "pasv_max_port" 51000
+
+# global
+output_bool global 'write' "write_enable" 1
+output_bool global download "download_enable" 1
+output_bool global dirlist "dirlist_enable" 1
+output_bool global lsrecurse "ls_recurse_enable"
+output_bool global dotfile "force_dot_files"
+output_field global 'umask' "local_umask" 022
+
+ftpd_banner=`get_value global ftpd_banner`
+if ! [ -z $ftpd_banner ]; then
+	output_const "ftpd_banner" $ftpd_banner
+fi
+
+output_bool global dirmessage "dirmessage_enable"
+output_field global dirmsgfile "message_file" ".message"
+
+# connection
+output_bool connection portmode "port_enable" 1
+output_bool connection pasvmode "pasv_enable" 1
+
+ascii_download_enable=NO
+ascii_upload_enable=NO
+case `get_value connection ascii` in
+download)
+	ascii_download_enable=YES
+;;
+upload)
+	ascii_upload_enable=YES
+;;
+both)
+	ascii_download_enable=YES
+	ascii_upload_enable=YES
+esac
+output_const "ascii_download_enable" $ascii_download_enable
+output_const "ascii_upload_enable" $ascii_upload_enable
+
+output_field connection idletimeout "idle_session_timeout" 1800
+output_field connection conntimeout "connect_timeout" 120
+output_field connection dataconntimeout "data_connection_timeout" 120
+output_field connection maxclient "max_clients" 0
+output_field connection maxperip "max_per_ip" 0
+output_field connection maxrate "local_max_rate" 0
+
+max_login_fails=`get_value connection maxretry`
+if [ -z $max_login_fails ] || [ $max_login_fails -lt 1 ]; then max_login_fails=3; fi
+output_const "max_login_fails" $max_login_fails
+
+# anonymous
+ftp_username=`get_value anonymous ftp_username`
+if [ -z $ftp_username ]; then ftp_username="ftp"; fi
+output_const "ftp_username" $ftp_username
+
+mkdir -m 0755 -p /home/$ftp_username
+chown $ftp_username:$ftp_username /home/$ftp_username
+
+output_const "anon_world_readable_only" NO
+
+anon_enable=`get_value anonymous enabled`
+if [ x$anon_enable = x1 ]; then
+	anon_root=`get_value anonymous root`
+	if [ -z $anon_root ]; then anon_root="/home/ftp"; fi
+
+	output_const "anonymous_enable" YES
+	output_const "no_anon_password" YES
+	output_const "anon_root" $anon_root
+	output_field anonymous 'umask' "anon_umask" 022
+	output_field anonymous maxrate "anon_max_rate" 0
+	output_bool anonymous writemkdir "anon_mkdir_write_enable" 0
+	output_bool anonymous upload "anon_upload_enable" 0
+	output_bool anonymous others "anon_other_write_enable" 0
+
+	mkdir -p $anon_root
+	chown -R $ftp_username:$ftp_username $anon_root
+else
+	output_const "anonymous_enable" NO
+fi
+
+# log
+output_bool log syslog "syslog_enable" 0
+output_bool log xreflog "xferlog_enable" 0
+output_field log 'file' "vsftpd_log_file" 0
+
+# users
+vuser_enabled=0
+if [ x`get_value vuser enabled` = x1 ]; then
+	vuser_enabled=1
+
+	output_const "guest_enable" YES
+	output_field vuser username "guest_username" ftp
+
+	output_const "uci_config_name" vsftpd
+	output_const "user_config_dir" "/var/run/vsftpd/users"
+
+	config_foreach vusers_iterate user
+fi
+
+# local user
+output_const "allow_writeable_chroot" YES
+output_const "secure_chroot_dir" $CHROOT_DIR
+
+local_root=$(get_value 'local' root)
+if ! [ -z $local_root ]; then
+	output_const "local_root" $local_root
+fi
+
+local_enable=`get_value 'local' enabled`
+if [ x$local_enable = x1 ]; then
+	output_const "local_enable" YES
+else
+	if [ $vuser_enabled = 1 ]; then
+		output_const "local_enable" YES
+	else
+		output_const "local_enable" NO
+	fi
+fi
+
+output_const "seccomp_sandbox" NO
+
+exit 0
diff --git a/package/lean/vsftpd-alt/files/vsftpd_wrapper b/package/lean/vsftpd-alt/files/vsftpd_wrapper
new file mode 100755
index 0000000000..73a2ef4ea0
--- /dev/null
+++ b/package/lean/vsftpd-alt/files/vsftpd_wrapper
@@ -0,0 +1,49 @@
+#!/bin/sh
+# Copyright (C) 2005-2016 Weijie Gao <hackpascal@gmail.com>
+
+. $IPKG_INSTROOT/lib/functions.sh
+
+VAR=/var/run/vsftpd
+CONF=$VAR/vsftpd.conf
+listen_addr=
+enabled=
+param=""
+listen4=
+listen6=
+protocol=$1
+
+config_load vsftpd
+
+if ! [ -f $CONF ]; then
+	echo "/usr/bin/vsftpd_prepare must be executed before this script"
+	exit 1
+fi
+
+case $protocol in
+ipv6)
+	config_get enabled listen enable6
+
+	if [ x$enabled != x1 ]; then exit 0; fi
+
+	config_get listen_addr listen ipv6
+	param="6"
+	listen4="-olisten=NO"
+	listen6="-olisten_ipv6=YES"
+
+	if [ -z $listen_addr ]; then listen_addr="::"; fi
+;;
+*)
+	config_get enabled listen enable4
+
+	if [ x$enabled != x1 ]; then exit 0; fi
+
+	config_get listen_addr listen ipv4
+	listen4="-olisten=YES"
+	listen6="-olisten_ipv6=NO"
+
+	if [ -z $listen_addr ]; then listen_addr="0.0.0.0"; fi
+esac
+
+exec /usr/sbin/vsftpd "-olisten_address${param}=${listen_addr}" ${listen4} ${listen6} $CONF
+
+exit 1
diff --git a/package/lean/vsftpd-alt/patches/001-destdir.patch b/package/lean/vsftpd-alt/patches/001-destdir.patch
new file mode 100644
index 0000000000..b0274ac865
--- /dev/null
+++ b/package/lean/vsftpd-alt/patches/001-destdir.patch
@@ -0,0 +1,47 @@
+--- a/Makefile
++++ b/Makefile
+@@ -22,6 +22,8 @@ OBJS	=	main.o utility.o prelogin.o ftpcm
+     seccompsandbox.o
+ 
+ 
++DESTDIR =
++
+ .c.o:
+ 	$(CC) -c $*.c $(CFLAGS) $(IFLAGS)
+ 
+@@ -29,21 +31,20 @@ vsftpd: $(OBJS)
+ 	$(CC) -o vsftpd $(OBJS) $(LINK) $(LDFLAGS) $(LIBS)
+ 
+ install:
+-	if [ -x /usr/local/sbin ]; then \
+-		$(INSTALL) -m 755 vsftpd /usr/local/sbin/vsftpd; \
+-	else \
+-		$(INSTALL) -m 755 vsftpd /usr/sbin/vsftpd; fi
+-	if [ -x /usr/local/man ]; then \
+-		$(INSTALL) -m 644 vsftpd.8 /usr/local/man/man8/vsftpd.8; \
+-		$(INSTALL) -m 644 vsftpd.conf.5 /usr/local/man/man5/vsftpd.conf.5; \
+-	elif [ -x /usr/share/man ]; then \
+-		$(INSTALL) -m 644 vsftpd.8 /usr/share/man/man8/vsftpd.8; \
+-		$(INSTALL) -m 644 vsftpd.conf.5 /usr/share/man/man5/vsftpd.conf.5; \
+-	else \
+-		$(INSTALL) -m 644 vsftpd.8 /usr/man/man8/vsftpd.8; \
+-		$(INSTALL) -m 644 vsftpd.conf.5 /usr/man/man5/vsftpd.conf.5; fi
+-	if [ -x /etc/xinetd.d ]; then \
+-		$(INSTALL) -m 644 xinetd.d/vsftpd /etc/xinetd.d/vsftpd; fi
++	mkdir -p $(DESTDIR)/usr/sbin
++	$(INSTALL) -m 755 vsftpd $(DESTDIR)/usr/sbin/
++	mkdir -p $(DESTDIR)/usr/share/man/man8
++	$(INSTALL) -m 644 vsftpd.8 $(DESTDIR)/usr/share/man/man8/
++	mkdir -p $(DESTDIR)/usr/share/man/man5
++	$(INSTALL) -m 644 vsftpd.conf.5 $(DESTDIR)/usr/share/man/man5/
++	mkdir -p $(DESTDIR)/etc/xinetd.d
++	$(INSTALL) -m 644 xinetd.d/vsftpd $(DESTDIR)/etc/xinetd.d/
++
++uninstall:
++	rm -f $(DESTDIR)/usr/sbin/vsftpd
++	rm -f $(DESTDIR)/usr/share/man/man8/vsftpd.8
++	rm -f $(DESTDIR)/usr/share/man/man5/vsftpd.conf.5
++	rm -f $(DESTDIR)/etc/xinetd.d/vsftpd
+ 
+ clean:
+ 	rm -f *.o *.swp vsftpd
diff --git a/package/lean/vsftpd-alt/patches/002-find_libs.patch b/package/lean/vsftpd-alt/patches/002-find_libs.patch
new file mode 100644
index 0000000000..4e95248ce1
--- /dev/null
+++ b/package/lean/vsftpd-alt/patches/002-find_libs.patch
@@ -0,0 +1,13 @@
+--- a/Makefile
++++ b/Makefile
+@@ -8,8 +8,8 @@ CFLAGS	=	-O2 -fPIE -fstack-protector --p
+ 	-D_FORTIFY_SOURCE=2 \
+ 	#-pedantic -Wconversion
+ 
+-LIBS	=	`./vsf_findlibs.sh`
+-LINK	=	-Wl,-s
++LIBS	=	-lcrypt -lnsl -luci
++LINK	=
+ LDFLAGS	=	-fPIE -pie -Wl,-z,relro -Wl,-z,now
+ 
+ OBJS	=	main.o utility.o prelogin.o ftpcmdio.o postlogin.o privsock.o \
diff --git a/package/lean/vsftpd-alt/patches/003-chroot.patch b/package/lean/vsftpd-alt/patches/003-chroot.patch
new file mode 100644
index 0000000000..8965da4179
--- /dev/null
+++ b/package/lean/vsftpd-alt/patches/003-chroot.patch
@@ -0,0 +1,11 @@
+--- a/tunables.c
++++ b/tunables.c
+@@ -254,7 +254,7 @@ tunables_load_defaults()
+   /* -rw------- */
+   tunable_chown_upload_mode = 0600;
+ 
+-  install_str_setting("/usr/share/empty", &tunable_secure_chroot_dir);
++  install_str_setting("/var/run/vsftpd", &tunable_secure_chroot_dir);
+   install_str_setting("ftp", &tunable_ftp_username);
+   install_str_setting("root", &tunable_chown_username);
+   install_str_setting("/var/log/xferlog", &tunable_xferlog_file);
diff --git a/package/lean/vsftpd-alt/patches/004-disable-capabilities.patch b/package/lean/vsftpd-alt/patches/004-disable-capabilities.patch
new file mode 100644
index 0000000000..7aa6330b81
--- /dev/null
+++ b/package/lean/vsftpd-alt/patches/004-disable-capabilities.patch
@@ -0,0 +1,12 @@
+--- a/sysdeputil.c
++++ b/sysdeputil.c
+@@ -165,6 +165,9 @@
+ #endif
+ /* END config */
+ 
++#undef VSF_SYSDEP_HAVE_CAPABILITIES
++#undef VSF_SYSDEP_HAVE_LIBCAP
++
+ /* PAM support - we include our own dummy version if the system lacks this */
+ #include <security/pam_appl.h>
+ 
diff --git a/package/lean/vsftpd-alt/patches/005-disable-pam.patch b/package/lean/vsftpd-alt/patches/005-disable-pam.patch
new file mode 100644
index 0000000000..ebb72447f5
--- /dev/null
+++ b/package/lean/vsftpd-alt/patches/005-disable-pam.patch
@@ -0,0 +1,11 @@
+--- a/builddefs.h
++++ b/builddefs.h
+@@ -2,7 +2,7 @@
+ #define VSF_BUILDDEFS_H
+ 
+ #undef VSF_BUILD_TCPWRAPPERS
+-#define VSF_BUILD_PAM
++#undef VSF_BUILD_PAM
+ #undef VSF_BUILD_SSL
+ 
+ #endif /* VSF_BUILDDEFS_H */
diff --git a/package/lean/vsftpd-alt/patches/006-musl-compatibility.patch b/package/lean/vsftpd-alt/patches/006-musl-compatibility.patch
new file mode 100644
index 0000000000..9eefec79d3
--- /dev/null
+++ b/package/lean/vsftpd-alt/patches/006-musl-compatibility.patch
@@ -0,0 +1,13 @@
+--- a/sysdeputil.c
++++ b/sysdeputil.c
+@@ -58,7 +58,9 @@
+ #define VSF_SYSDEP_HAVE_SHADOW
+ #define VSF_SYSDEP_HAVE_USERSHELL
+ #define VSF_SYSDEP_HAVE_LIBCAP
+-#define VSF_SYSDEP_HAVE_UTMPX
++#if defined(__GLIBC__) || defined(__UCLIBC__)
++  #define VSF_SYSDEP_HAVE_UTMPX
++#endif
+ 
+ #define __USE_GNU
+ #include <utmpx.h>
diff --git a/package/lean/vsftpd-alt/patches/007-CVE-2015-1419.patch b/package/lean/vsftpd-alt/patches/007-CVE-2015-1419.patch
new file mode 100644
index 0000000000..173027a1d5
--- /dev/null
+++ b/package/lean/vsftpd-alt/patches/007-CVE-2015-1419.patch
@@ -0,0 +1,98 @@
+Description: CVE-2015-1419: config option deny_file is not handled correctly
+Author: Marcus Meissner <meissner@suse.com>
+Origin: https://bugzilla.novell.com/show_bug.cgi?id=CVE-2015-1419
+Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776922
+Last-Update: 2015-02-24
+---
+This patch header follows DEP-3: http://dep.debian.net/deps/dep3/
+--- a/ls.c
++++ b/ls.c
+@@ -7,6 +7,7 @@
+  * Would you believe, code to handle directory listing.
+  */
+ 
++#include <stdlib.h>
+ #include "ls.h"
+ #include "access.h"
+ #include "defs.h"
+@@ -243,11 +244,42 @@ vsf_filename_passes_filter(const struct
+   struct mystr temp_str = INIT_MYSTR;
+   struct mystr brace_list_str = INIT_MYSTR;
+   struct mystr new_filter_str = INIT_MYSTR;
++  struct mystr normalize_filename_str = INIT_MYSTR;
++  const char *normname;
++  const char *path;
+   int ret = 0;
+   char last_token = 0;
+   int must_match_at_current_pos = 1;
++
+   str_copy(&filter_remain_str, p_filter_str);
+-  str_copy(&name_remain_str, p_filename_str);
++
++  /* normalize filepath */
++  path = str_strdup(p_filename_str);
++  normname = realpath(path, NULL);
++  if (normname == NULL)
++     goto out;
++  str_alloc_text(&normalize_filename_str, normname);
++
++  if (!str_isempty (&filter_remain_str) && !str_isempty(&normalize_filename_str)) {
++    if (str_get_char_at(p_filter_str, 0) == '/') {
++      if (str_get_char_at(&normalize_filename_str, 0) != '/') {
++        str_getcwd (&name_remain_str);
++
++        if (str_getlen(&name_remain_str) > 1) /* cwd != root dir */
++          str_append_char (&name_remain_str, '/');
++
++        str_append_str (&name_remain_str, &normalize_filename_str);
++      }
++      else
++       str_copy (&name_remain_str, &normalize_filename_str);
++    } else {
++      if (str_get_char_at(p_filter_str, 0) != '{')
++        str_basename (&name_remain_str, &normalize_filename_str);
++      else
++        str_copy (&name_remain_str, &normalize_filename_str);
++    }
++  } else
++    str_copy(&name_remain_str, &normalize_filename_str);
+ 
+   while (!str_isempty(&filter_remain_str) && *iters < VSFTP_MATCHITERS_MAX)
+   {
+@@ -360,6 +392,9 @@ vsf_filename_passes_filter(const struct
+     ret = 0;
+   }
+ out:
++  free(normname);
++  free(path);
++  str_free(&normalize_filename_str);
+   str_free(&filter_remain_str);
+   str_free(&name_remain_str);
+   str_free(&temp_str);
+--- a/str.c
++++ b/str.c
+@@ -711,3 +711,14 @@ str_replace_unprintable(struct mystr* p_
+   }
+ }
+ 
++void
++str_basename (struct mystr* d_str, const struct mystr* path)
++{
++  static struct mystr tmp;
++
++  str_copy (&tmp, path);
++  str_split_char_reverse(&tmp, d_str, '/');
++
++  if (str_isempty(d_str))
++   str_copy (d_str, path);
++}
+--- a/str.h
++++ b/str.h
+@@ -100,6 +100,7 @@ void str_replace_unprintable(struct myst
+ int str_atoi(const struct mystr* p_str);
+ filesize_t str_a_to_filesize_t(const struct mystr* p_str);
+ unsigned int str_octal_to_uint(const struct mystr* p_str);
++void str_basename (struct mystr* d_str, const struct mystr* path);
+ 
+ /* PURPOSE: Extract a line of text (delimited by \n or EOF) from a string
+  * buffer, starting at character position 'p_pos'. The extracted line will
diff --git a/package/lean/vsftpd-alt/patches/100-add-uci-auth-support.patch b/package/lean/vsftpd-alt/patches/100-add-uci-auth-support.patch
new file mode 100644
index 0000000000..3b805645dc
--- /dev/null
+++ b/package/lean/vsftpd-alt/patches/100-add-uci-auth-support.patch
@@ -0,0 +1,127 @@
+--- a/parseconf.c
++++ b/parseconf.c
+@@ -178,6 +178,7 @@
+   { "rsa_private_key_file", &tunable_rsa_private_key_file },
+   { "dsa_private_key_file", &tunable_dsa_private_key_file },
+   { "ca_certs_file", &tunable_ca_certs_file },
++  { "uci_config_name", &tunable_uci_config_name },
+   { "cmds_denied", &tunable_cmds_denied },
+   { 0, 0 }
+ };
+--- a/sysdeputil.c
++++ b/sysdeputil.c
+@@ -175,6 +175,8 @@
+ #include <pwd.h>
+ #include <unistd.h>
+ #include <crypt.h>
++/* Include uci headers */
++#include <uci.h>
+ #endif
+
+ /* Prefer libcap based capabilities over raw syscall capabilities */
+@@ -237,14 +239,24 @@
+ void vsf_remove_uwtmp(void);
+
+ #ifndef VSF_SYSDEP_HAVE_PAM
++static int
++vsf_sysdep_check_auth_uci(struct mystr* p_user_str,
++                      const struct mystr* p_pass_str);
++
+ int
+ vsf_sysdep_check_auth(struct mystr* p_user_str,
+                       const struct mystr* p_pass_str,
+                       const struct mystr* p_remote_host)
+ {
+   const char* p_crypted;
+-  const struct passwd* p_pwd = getpwnam(str_getbuf(p_user_str));
++  const struct passwd* p_pwd;
+   (void) p_remote_host;
++
++  /* Try UCI first */
++  if (vsf_sysdep_check_auth_uci(p_user_str, p_pass_str))
++    return 1;
++
++  p_pwd = getpwnam(str_getbuf(p_user_str));
+   if (p_pwd == NULL)
+   {
+     return 0;
+@@ -300,6 +312,51 @@
+   return 0;
+ }
+
++static int
++vsf_sysdep_check_auth_uci(struct mystr* p_user_str,
++                      const struct mystr* p_pass_str)
++{
++  struct uci_context *uctx;
++  struct uci_package *pkg = NULL;
++  struct uci_element *e = NULL;
++  struct uci_section *s;
++  const char *user, *passwd;
++  int ret = 0;
++
++  if (!tunable_uci_config_name)
++    return 0;
++
++  uctx = uci_alloc_context();
++  if (!uctx)
++    return 0;
++
++  if (uci_load(uctx, tunable_uci_config_name, &pkg) != UCI_OK)
++    goto cleanup;
++
++  uci_foreach_element(&pkg->sections, e)
++  {
++    s = uci_to_section(e);
++    if (!(user = uci_lookup_option_string(uctx, s, "username")))
++      continue;
++    if (vsf_sysutil_strcmp(user, str_getbuf(p_user_str)))
++      continue;
++    if (!(passwd = uci_lookup_option_string(uctx, s, "password")))
++      continue;
++    if (!vsf_sysutil_strcmp(passwd, str_getbuf(p_pass_str)))
++    {
++      ret = 1;
++      break;
++    }
++  }
++
++cleanup:
++  if (pkg)
++    uci_unload(uctx, pkg);
++  uci_free_context(uctx);
++
++  return ret;
++}
++
+ #else /* VSF_SYSDEP_HAVE_PAM */
+
+ #if (defined(__sun) || defined(__hpux)) && \
+--- a/tunables.c
++++ b/tunables.c
+@@ -142,6 +142,7 @@
+ const char* tunable_rsa_private_key_file;
+ const char* tunable_dsa_private_key_file;
+ const char* tunable_ca_certs_file;
++const char* tunable_uci_config_name;
+
+ static void install_str_setting(const char* p_value, const char** p_storage);
+
+@@ -288,6 +289,7 @@
+   install_str_setting(0, &tunable_rsa_private_key_file);
+   install_str_setting(0, &tunable_dsa_private_key_file);
+   install_str_setting(0, &tunable_ca_certs_file);
++  install_str_setting(0, &tunable_uci_config_name);
+ }
+
+ void
+--- a/tunables.h
++++ b/tunables.h
+@@ -144,6 +144,7 @@
+ extern const char* tunable_rsa_private_key_file;
+ extern const char* tunable_dsa_private_key_file;
+ extern const char* tunable_ca_certs_file;
++extern const char* tunable_uci_config_name;
+ extern const char* tunable_cmds_denied;
+
+ #endif /* VSF_TUNABLES_H */
diff --git a/package/lean/vsftpd-alt/patches/101-enable-chroot-on-writable-dir.patch b/package/lean/vsftpd-alt/patches/101-enable-chroot-on-writable-dir.patch
new file mode 100644
index 0000000000..c7a6b05fd2
--- /dev/null
+++ b/package/lean/vsftpd-alt/patches/101-enable-chroot-on-writable-dir.patch
@@ -0,0 +1,14 @@
+--- a/secutil.c
++++ b/secutil.c
+@@ -135,10 +135,12 @@
+   if ((options & VSF_SECUTIL_OPTION_CHROOT) &&
+       !(options & VSF_SECUTIL_OPTION_ALLOW_WRITEABLE_ROOT))
+   {
++  /*
+     if (vsf_sysutil_write_access("/"))
+     {
+       die("vsftpd: refusing to run with writable root inside chroot()");
+     }
++  */
+   }
+ }
diff --git a/package/lean/vsftpd-alt/patches/102-keep-local-user-rights.patch b/package/lean/vsftpd-alt/patches/102-keep-local-user-rights.patch
new file mode 100644
index 0000000000..f5ee25d761
--- /dev/null
+++ b/package/lean/vsftpd-alt/patches/102-keep-local-user-rights.patch
@@ -0,0 +1,11 @@
+--- a/twoprocess.c
++++ b/twoprocess.c
+@@ -426,7 +426,7 @@
+      */
+     vsf_set_die_if_parent_dies();
+     priv_sock_set_child_context(p_sess);
+-    if (tunable_guest_enable && !anon)
++    if (tunable_guest_enable && !anon && !str_getpwnam(p_user_str))
+     {
+       p_sess->is_guest = 1;
+       /* Remap to the guest user */