<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="generator" content="AsciiDoc 8.6.9"> <title>ss-nat(1)</title> </head> <body> <h1>ss-nat(1)</h1> <p> </p> <hr> <h2><a name="_name"></a>NAME</h2> <p>ss-nat - helper script to setup NAT rules for transparent proxy</p> <hr> <h2><a name="_synopsis"></a>SYNOPSIS</h2> <p><strong>ss-nat</strong> [-ouUfh] [-s <emphasis><server_ip></emphasis>] [-S <emphasis><server_ip></emphasis>] [-l <emphasis><local_port></emphasis>] [-L <emphasis><local_port></emphasis>] [-i <emphasis><ip_list_file></emphasis>] [-a <emphasis><lan_ips></emphasis>] [-b <emphasis><wan_ips></emphasis>] [-w <emphasis><wan_ips></emphasis>] [-e <emphasis><extra_options></emphasis>]</p> <hr> <h2><a name="_description"></a>DESCRIPTION</h2> <p><strong>Shadowsocks-libev</strong> is a lightweight and secure socks5 proxy. It is a port of the original shadowsocks created by clowwindy. <strong>Shadowsocks-libev</strong> is written in pure C and takes advantage of libev to achieve both high performance and low resource consumption.</p> <p><code>ss-nat</code>(1) sets up NAT rules for <code>ss-redir</code>(1) to provide traffic redirection. It requires netfilter’s NAT module and <code>iptables</code>(8). For more information, check out <code>shadowsocks-libev</code>(8) and the following <em>EXAMPLE</em> section.</p> <hr> <h2><a name="_options"></a>OPTIONS</h2> <dl> <dt> -s <emphasis><server_ip></emphasis> </dt> <dd> <p> IP address of shadowsocks remote server </p> </dd> <dt> -l <emphasis><local_port></emphasis> </dt> <dd> <p> Port number of shadowsocks local server </p> </dd> <dt> -S <emphasis><server_ip></emphasis> </dt> <dd> <p> IP address of shadowsocks remote UDP server </p> </dd> <dt> -L <emphasis><local_port></emphasis> </dt> <dd> <p> Port number of shadowsocks local UDP server </p> </dd> <dt> -i <emphasis><ip_list_file></emphasis> </dt> <dd> <p> a file whose content is bypassed ip list </p> </dd> <dt> -a <emphasis><lan_ips></emphasis> </dt> <dd> <p> LAN IP of access control, need a prefix to define access control mode </p> </dd> <dt> -b <emphasis><wan_ips></emphasis> </dt> <dd> <p> WAN IP of will be bypassed </p> </dd> <dt> -w <emphasis><wan_ips></emphasis> </dt> <dd> <p> WAN IP of will be forwarded </p> </dd> <dt> -e <emphasis><extra_options></emphasis> </dt> <dd> <p> Extra options for iptables </p> </dd> <dt> -o </dt> <dd> <p> Apply the rules to the OUTPUT chain </p> </dd> <dt> -u </dt> <dd> <p> Enable udprelay mode, TPROXY is required </p> </dd> <dt> -U </dt> <dd> <p> Enable udprelay mode, using different IP and ports for TCP and UDP </p> </dd> <dt> -f </dt> <dd> <p> Flush the rules </p> </dd> <dt> -h </dt> <dd> <p> Show this help message and exit </p> </dd> </dl> <hr> <h2><a name="_example"></a>EXAMPLE</h2> <p><code>ss-nat</code> requires <code>iptables</code>(8). Here is an example:</p> <pre><code># Enable NAT rules for shadowsocks, # with both TCP and UDP redirection enabled, # and applied for both PREROUTING and OUTPUT chains root@Wrt:~# ss-nat -s 192.168.1.100 -l 1080 -u -o # Disable and flush all NAT rules for shadowsocks root@Wrt:~# ss-nat -f</code></pre> <hr> <h2><a name="_see_also"></a>SEE ALSO</h2> <p><code>ss-local</code>(1), <code>ss-server</code>(1), <code>ss-tunnel</code>(1), <code>ss-manager</code>(1), <code>shadowsocks-libev</code>(8), <code>iptables</code>(8), /etc/shadowsocks-libev/config.json</p> <p></p> <p></p> <hr><p><small> Last updated 2017-06-27 06:33:10 UTC </small></p> </body> </html>
distrib
>
Mageia
>
6
>
x86_64
>
media
>
core-updates
>
by-pkgid
>
4266f34df60651c5354368b73e314991
>
files
>
17
