listen private network only

This commit is contained in:
CN_SZTL 2019-07-03 22:53:12 +08:00
parent 0893e63680
commit 578e47cdca
No known key found for this signature in database
GPG Key ID: 6850B6345C862176

View File

@ -8,6 +8,7 @@ USE_PROCD=1
DNSMASQ_RESTART=N
DNS_SERVER="114.114.114.114,114.114.115.115,223.5.5.5,223.6.6.6,180.76.76.76,119.29.29.29,119.28.28.28,1.2.4.8,210.2.4.8"
IPV6DNS_SERVER="2001:4860:4860::8888,2001:4860:4860::8844,2001:2001::1111,2001:2001::1001,2400:da00::6666,240C::6666,240C::6644"
lan_addr=$(uci get network.lan.ipaddr)
start_pdnsd() {
DNS_SERVER=$(uci get flowoffload.@flow[0].dns_server 2>/dev/null)
@ -25,7 +26,7 @@ global {
perm_cache=1024; # dns缓存大小单位KB建议不要写的太大
cache_dir="/var/dnscache"; # 缓存文件的位置
pid_file = /var/run/dnscache.pid;
server_ip = 0.0.0.0; # pdnsd监听的网卡0.0.0.0是全部网卡
server_ip = ${lan_addr}; # pdnsd监听的网卡0.0.0.0是全部网卡
server_port=5333; # pdnsd监听的端口不要和别的服务冲突即可
status_ctl = on;
paranoid=on; # 二次请求模式如果请求主DNS服务器返回的是垃圾地址就向备用服务器请求
@ -137,9 +138,10 @@ start_dnsforwarder() {
IPV6DNS_SERVER=$(uci get flowoffload.@flow[0].ipv6dns_server 2>/dev/null)
dnscache_enable=$(uci get flowoffload.@flow[0].dnscache_enable 2>/dev/null)
if [ $dnscache_enable = "2" ]; then
localserver=0.0.0.0:5333
localserver=$(echo -e "${lan_addr}:5333")
elif [ $dnscache_enable = "3" ]; then
localserver=0.0.0.0:5383
localserver=$(echo -e "${lan_addr}:5383")
fi
cp -a /usr/bin/dnsforwarder /usr/sbin/dnscache
@ -236,7 +238,7 @@ start_service(){
start_dnsforwarder
elif [ $dnscache_enable = "3" ]; then
start_dnsforwarder
AdGuardHome -c /etc/AdGuardHome/AdGuardHome.yaml -w /etc/AdGuardHome -h 0.0.0.0 -p 3000 >/dev/null 2>&1 &
AdGuardHome -c /etc/AdGuardHome/AdGuardHome.yaml -w /etc/AdGuardHome -h ${lan_addr} -p 3000 >/dev/null 2>&1 &
fi
change_dns
nohup /usr/share/dnscache/dnscache-while.sh > /var/log/dnscache.file 2>&1 &