Docker
/
docker-openwrt
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

dns interceptor

pull/1/head
Jordan Sokolic 2020-02-14 18:19:22 +02:00
parent b8e572ac4b
commit b4de7bc4e3
1 changed files with 22 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
etc/intercept-dns.sh 100644
View File

@ -0,0 +1,22 @@
#!/bin/sh
###
# DNS interceptor
# iptables equivalent:
# sudo iptables -t nat -A PREROUTING -p udp --dport 53 -j REDIRECT
#
# can be applied by:
# $ cat intercept-dns.sh | docker exec -i openwrt_1 sh
###
uci -q delete firewall.dns_int
/sbin/uci batch <<EOF
set firewall.dns_int="redirect"
set firewall.dns_int.name="Intercept-DNS"
set firewall.dns_int.src="lan"
set firewall.dns_int.src_dport="53"
set firewall.dns_int.family="ipv4"
set firewall.dns_int.proto="tcp udp"
set firewall.dns_int.target="DNAT"
set firewall.dns_int.dest='lan'
EOF
uci commit firewall
/etc/init.d/firewall restart