Merge Official Source
This commit is contained in:
@@ -38,6 +38,27 @@ devices_setup()
|
||||
;;
|
||||
esac
|
||||
}
|
||||
|
||||
#自动语言
|
||||
uci set luci.main.lang=auto
|
||||
uci commit luci
|
||||
|
||||
#自动挂载
|
||||
uci set fstab.@global[0].anon_mount=1
|
||||
uci commit fstab
|
||||
|
||||
# 设置主机名映射,解决安卓原生 TV 无法联网的问题
|
||||
uci add dhcp domain
|
||||
uci set "dhcp.@domain[-1].name=time.android.com"
|
||||
uci set "dhcp.@domain[-1].ip=203.107.6.88"
|
||||
|
||||
# 设置所有网口可访问网页终端
|
||||
uci delete ttyd.@ttyd[0].interface
|
||||
|
||||
# 设置所有网口可连接 SSH
|
||||
uci set dropbear.@dropbear[0].Interface=''
|
||||
uci commit
|
||||
|
||||
# 时区设置
|
||||
uci set system.@system[0].zram_comp_algo='lz4'
|
||||
uci set system.@system[0].timezone=CST-8
|
||||
@@ -92,6 +113,117 @@ fi
|
||||
sed -i '/coremark/d' /etc/crontabs/root
|
||||
crontab /etc/crontabs/root
|
||||
|
||||
# einat 启动并确认
|
||||
(
|
||||
if [ -f /etc/init.d/einat ]; then
|
||||
uci set firewall.@defaults[0].fullcone="0"
|
||||
uci set firewall.@defaults[0].brcmfullcone="0"
|
||||
uci commit firewall
|
||||
|
||||
uci set einat.config.enabled="0"
|
||||
uci commit einat
|
||||
|
||||
retry=0
|
||||
wanif=""
|
||||
while [ "$retry" -lt 30 ] && [ -z "$wanif" ]; do
|
||||
wanif=$(ip route show default 2>/dev/null | awk '{print $5; exit}')
|
||||
if [ -z "$wanif" ]; then
|
||||
retry=`expr $retry + 1`
|
||||
sleep 1
|
||||
fi
|
||||
done
|
||||
|
||||
if [ -n "$wanif" ]; then
|
||||
uci set einat.config.ifname="$wanif"
|
||||
uci set einat.config.enabled="1"
|
||||
uci commit einat
|
||||
|
||||
max_retry=10
|
||||
count=0
|
||||
until ps | grep "[e]inat" >/dev/null 2>&1
|
||||
do
|
||||
/etc/init.d/einat start
|
||||
count=`expr $count + 1`
|
||||
if [ "$count" -ge "$max_retry" ]; then
|
||||
break
|
||||
fi
|
||||
sleep 1
|
||||
done
|
||||
fi
|
||||
fi
|
||||
) >/dev/null 2>&1 &
|
||||
|
||||
# 默认开启 Packet Steering
|
||||
uci set network.globals.packet_steering=$(( $(uname -r | grep -q "^5\.15"; echo $?) ? 2 : 1 ))
|
||||
#uci set network.globals.packet_steering='1'
|
||||
uci set network.globals.steering_flows='128'
|
||||
uci commit network
|
||||
|
||||
# 通用即插即用
|
||||
uci set upnpd.config.enabled='1'
|
||||
uci del upnpd.config.force_forwarding
|
||||
uci set upnpd.config.ext_allow_private_ipv4='1'
|
||||
#uci del upnpd.config.use_stun
|
||||
#uci del upnpd.config.stun_host
|
||||
uci commit upnpd
|
||||
|
||||
# 网易云音乐
|
||||
#echo "59.111.239.62 httpdns.n.netease.com" >> /etc/hosts && cat /etc/hosts | sort | uniq > /tmp/tmp_hosts && cat /tmp/tmp_hosts > /etc/hosts
|
||||
echo "10 2 * * * cd /usr/share/unblockneteasemusic/core/ && openssl req -new -x509 -key server.key -out server.crt -days 3650 -subj "/CN=*.music.163.com" && cd" >> /etc/crontabs/root && cat /etc/crontabs/root | sort -u > /tmp/tmp_cron_root && cat /tmp/tmp_cron_root > /etc/crontabs/root
|
||||
|
||||
# 定时清理
|
||||
(crontab -l | sed '/find \/tmp/d'; echo "0 0 1 * * find /tmp -type f \( -name \"*.log\" -o -name \"*.txt\" \) -exec sh -c 'rm {} && touch {}' \;") | sed '/^$/d' | crontab -
|
||||
|
||||
# dnsmasq 设置以及开启 IPv6
|
||||
uci del dhcp.lan.ra
|
||||
uci del dhcp.lan.dhcpv6
|
||||
uci del dhcp.lan.ndp
|
||||
uci del dhcp.lan.ra_useleasetime
|
||||
uci del dhcp.lan.preferred_lifetime
|
||||
uci set dhcp.lan.leasetime='12h'
|
||||
uci set dhcp.lan.ra='server'
|
||||
uci del dhcp.lan.ra_flags
|
||||
uci add_list dhcp.lan.ra_flags='none'
|
||||
uci del dhcp.lan.min_preferred_lifetime
|
||||
uci set dhcp.lan.max_preferred_lifetime='2700s'
|
||||
uci del dhcp.lan.min_valid_lifetime
|
||||
uci set dhcp.lan.max_valid_lifetime='5400s'
|
||||
uci set dhcp.lan.dns_service='0'
|
||||
uci set dhcp.@dnsmasq[0].rebind_protection='0'
|
||||
uci commit dhcp
|
||||
uci set network.lan.ip6assign='64'
|
||||
uci set network.lan.ip6ifaceid='eui64'
|
||||
uci delete network.globals.ula_prefix
|
||||
uci commit network
|
||||
sed -i '/log-facility/d' /etc/dnsmasq.conf
|
||||
echo "log-facility=/dev/null" >> /etc/dnsmasq.conf
|
||||
/etc/init.d/odhcpd restart
|
||||
|
||||
# nanopi fix
|
||||
sed -i 's/eth1/eth1.*/g' /etc/hotplug.d/net/40-net-smp-affinity
|
||||
sed -i 's/eth0/eth0.*/g' /etc/hotplug.d/net/40-net-smp-affinity
|
||||
|
||||
# SIP fix
|
||||
sed -i '/sip/d' /etc/modules.d/nf-nathelper-extra
|
||||
|
||||
# 计划任务
|
||||
uci set system.@system[0].cronloglevel="9"
|
||||
uci commit system
|
||||
/etc/init.d/cron restart
|
||||
|
||||
# 软链接
|
||||
[ ! -f '/usr/bin/ip' ] && [ -f '/sbin/ip' ] && ln -sf /sbin/ip /usr/bin/ip
|
||||
[ ! -f '/usr/bin/wget-ssl' ] && [ -f '/usr/bin/wget' ] && ln -sf /usr/bin/wget /usr/bin/wget-ssl
|
||||
#[ ! -f '/usr/bin/ss-local' ] && [ -f '/usr/bin/sslocal' ] && ln -sf /usr/bin/sslocal /usr/bin/ss-local
|
||||
[ ! -f '/usr/sbin/trojan' ] && [ -f '/usr/bin/trojan-go' ] && ln -sf /usr/bin/trojan-go /usr/bin/trojan
|
||||
#[ ! -f '/usr/bin/v2ray' ] && [ -f '/usr/bin/xray' ] && ln -sf /usr/bin/xray /usr/bin/v2ray
|
||||
#[ ! -f '/usr/bin/trojan-go' ] && [ -f '/usr/sbin/trojan-plus' ] && ln -sf /usr/sbin/trojan-plus /usr/bin/trojan-go
|
||||
|
||||
# Flag packages
|
||||
opkg flag hold luci-app-firewall
|
||||
opkg flag hold firewall
|
||||
opkg flag hold dnsmasq-full
|
||||
|
||||
# init
|
||||
devices_setup
|
||||
|
||||
|
||||
@@ -1,57 +1,15 @@
|
||||
msgid "CPU usage"
|
||||
msgstr "CPU 使用率"
|
||||
|
||||
msgid "Confirm Reboot"
|
||||
msgstr "确认重启"
|
||||
|
||||
msgid "Are you sure you want to reboot the system?"
|
||||
msgstr "你确认要重启系统?"
|
||||
|
||||
msgid "Confirm"
|
||||
msgstr "确认"
|
||||
|
||||
msgid "Login"
|
||||
msgstr "登录"
|
||||
|
||||
msgid "Logout"
|
||||
msgstr "退出"
|
||||
|
||||
msgid "Base Setting"
|
||||
msgstr "基本设置"
|
||||
|
||||
msgid "Log"
|
||||
msgstr "日志"
|
||||
|
||||
msgid "NAS"
|
||||
msgstr "网络存储"
|
||||
|
||||
msgid "NFtables Firewall"
|
||||
msgstr "NFtables 防火墙"
|
||||
|
||||
msgid "IPtables Firewall"
|
||||
msgstr "IPtables 防火墙"
|
||||
|
||||
msgid "Refresh interval"
|
||||
msgstr "刷新间隔"
|
||||
|
||||
msgid "Refresh interval in seconds"
|
||||
msgstr "刷新间隔(以秒为单位)"
|
||||
|
||||
msgid "Use as docker root directory (/opt)"
|
||||
msgstr "作为 docker 根目录使用(/opt)"
|
||||
|
||||
msgid "Full Cone NAT"
|
||||
msgstr "全锥形 NAT"
|
||||
|
||||
msgid "Full Cone NAT6"
|
||||
msgstr "全锥形 NAT6"
|
||||
|
||||
msgid "Disable"
|
||||
msgstr "禁用"
|
||||
|
||||
msgid "Nftables Fullcone nat"
|
||||
msgstr "Nftables 全锥形 NAT"
|
||||
|
||||
msgid "Full Cone NAT6"
|
||||
msgstr "全锥形 NAT6"
|
||||
|
||||
msgid "Nftables based fullcone nat scheme."
|
||||
msgstr "基于 Nftables 的全锥形 NAT 方案。"
|
||||
|
||||
@@ -67,11 +25,14 @@ msgstr "IPv6 网络地址转换(NAT6)"
|
||||
msgid "Applicable to internet environments where the router is not assigned an IPv6 prefix, such as when using an upstream optical modem for dial-up."
|
||||
msgstr "适用于没有给路由分配 IPv6 前缀的上网环境,例如:上级光猫拨号"
|
||||
|
||||
msgid "Flow offloading type"
|
||||
msgstr "流量分载类型"
|
||||
|
||||
msgid "Shortcut-FE flow offloading"
|
||||
msgstr "Shortcut-FE 流量卸载"
|
||||
msgstr "Shortcut-FE 流量分载"
|
||||
|
||||
msgid "Shortcut-FE based offloading for routing/NAT"
|
||||
msgstr "基于 Shortcut-FE 的 路由/NAT 卸载"
|
||||
msgstr "基于 Shortcut-FE 的 路由/NAT 分载"
|
||||
|
||||
msgid "Connection Manager"
|
||||
msgstr "连接管理器"
|
||||
@@ -80,10 +41,10 @@ msgid "Set up the Shortcut-FE engine connection manager"
|
||||
msgstr "设置 Shortcut-FE 引擎连接管理器"
|
||||
|
||||
msgid "Natflow offloading"
|
||||
msgstr "Natflow 流量卸载"
|
||||
msgstr "Natflow 流量分载"
|
||||
|
||||
msgid "Natflow based offloading for routing/NAT"
|
||||
msgstr "基于 Natflow 的 路由/NAT 卸载"
|
||||
msgstr "基于 Natflow 的 路由/NAT 分载"
|
||||
|
||||
msgid "Natflow delay packet"
|
||||
msgstr "Natflow 延迟数据包"
|
||||
@@ -91,33 +52,95 @@ msgstr "Natflow 延迟数据包"
|
||||
msgid "Set up the natflow delay packet"
|
||||
msgstr "设置 Natflow 延迟数据包"
|
||||
|
||||
msgid "Software based offloading for routing/NAT."
|
||||
msgstr "基于软件的 路由/NAT 分载。"
|
||||
|
||||
msgid "Hardware based offloading for routing with/without NAT."
|
||||
msgstr "基于硬件的 路由/NAT 分载。"
|
||||
|
||||
msgid "Custom rules allow you to execute arbitrary nft commands which are not otherwise covered by the firewall framework. The rules are executed after each firewall restart, right after the default ruleset has been loaded."
|
||||
msgstr "自定义规则允许您执行不属于防火墙框架的任意 nft 命令。每次重启防火墙时,这些命令在默认的规则运行后立即执行。"
|
||||
|
||||
msgid "Units: milliseconds. 0 means unspecified."
|
||||
msgstr "单位:毫秒。0 表示未指定。"
|
||||
msgid "Enable FullCone NAT"
|
||||
msgstr "启用 FullCone-NAT"
|
||||
|
||||
msgid "BCM FullCone NAT scheme"
|
||||
msgstr "博通全锥型 NAT 方案"
|
||||
|
||||
msgid "Use the Broadcom FullCone NAT scheme if enabled, and use the NFT FullCone scheme if the option is disabled."
|
||||
msgstr "启用该选项时使用 Broadcom FullCone NAT 方案,禁用该选项时则使用 nft-fullcone 方案"
|
||||
|
||||
msgid "Enable SQM autorate"
|
||||
msgstr "启用 SQM 自适应速率"
|
||||
|
||||
msgid "Base download speed (kbit/s) (ingress):"
|
||||
msgstr "下载速度(kbit/s)(入口)"
|
||||
|
||||
msgid "Base upload speed (kbit/s) (egress):"
|
||||
msgstr "上传速度(kbit/s)(出口)"
|
||||
|
||||
msgid "Minimum download speed (kbit/s):"
|
||||
msgstr "最低下载速率(kbit/s)"
|
||||
|
||||
msgid "Maximum download speed (kbit/s):"
|
||||
msgstr "最高下载速率(kbit/s)"
|
||||
|
||||
msgid "Minimum upload speed (kbit/s):"
|
||||
msgstr "最低上传速率(kbit/s)"
|
||||
|
||||
msgid "Maximum upload speed (kbit/s):"
|
||||
msgstr "最高上传速率(kbit/s)"
|
||||
|
||||
msgid "Autorate settings"
|
||||
msgstr "自适应速率设置"
|
||||
|
||||
msgid "Output monitoring lines showing processing stats"
|
||||
msgstr "输出监控行(显示处理统计)"
|
||||
|
||||
msgid "Output monitoring lines showing cake bandwidth changes"
|
||||
msgstr "输出监控行(显示 CAKE 带宽变化)"
|
||||
|
||||
msgid "Starlink support"
|
||||
msgstr "Starlink 支持"
|
||||
|
||||
msgid "Reflector ping interval in seconds:"
|
||||
msgstr "反射器ping间隔(秒)"
|
||||
|
||||
msgid "Pingers numbers:"
|
||||
msgstr "Ping 发送器 数量"
|
||||
|
||||
msgid "delay threshold in ms:"
|
||||
msgstr "延迟阈值(毫秒)"
|
||||
|
||||
msgid "Sleep functionnality"
|
||||
msgstr "休眠功能"
|
||||
|
||||
msgid "Threshold in Kbit/s below which dl/ul is considered idle"
|
||||
msgstr "当下行/上行速率低于此阈值 (Kbit/s) 时视为空闲"
|
||||
|
||||
msgid ""
|
||||
"Dictates how long a node assumes a neighbor is reachable after a "
|
||||
"reachability confirmation; published in <abbr title=\"Router "
|
||||
"Advertisement\">RA</abbr> messages."
|
||||
"Time threshold to put pingers to sleep on substained dl/ul achieved rate < "
|
||||
"idle_threshold"
|
||||
msgstr ""
|
||||
"规定节点在确认邻居可达后,假定其保持可达状态的持续时间;通过 <abbr title="
|
||||
"\"Router Advertisement\">RA</abbr> 消息发布。"
|
||||
"当持续的下行/上行速率低于空闲阈值时,使Ping发送器休眠的时间阈值(秒)"
|
||||
|
||||
msgid ""
|
||||
"Dictates how long a node assumes a neighbor is reachable after a "
|
||||
"reachability confirmation; published in <abbr title=\"Router "
|
||||
"Advertisement\">RA</abbr> messages."
|
||||
msgstr ""
|
||||
"规定节点在确认邻居可达后,假定其保持可达状态的持续时间;通过 <abbr title="
|
||||
"\"Router Advertisement\">RA</abbr> 消息发布。"
|
||||
msgid "Number of seconds to wait on startup:"
|
||||
msgstr "启动等待时间(秒)"
|
||||
|
||||
msgid "<abbr title=\"Router Advertisement\">RA</abbr> Retransmission Timer"
|
||||
msgstr "<abbr title=\"Router Advertisement\">RA</abbr> 重传定时器"
|
||||
msgid "Not"
|
||||
msgstr "排除"
|
||||
|
||||
msgid ""
|
||||
"Controls retransmitted Neighbor Solicitation messages; published in <abbr "
|
||||
"title=\"Router Advertisement\">RA</abbr> messages."
|
||||
msgstr "控制重传的邻居请求消息;在 <abbr title=\"Router Advertisement\">路由通告</abb"
|
||||
"r>消息中发布。"
|
||||
msgid "facility:"
|
||||
msgstr "类型:"
|
||||
|
||||
msgid "severity:"
|
||||
msgstr "级别:"
|
||||
|
||||
msgid "including:"
|
||||
msgstr "包含:"
|
||||
|
||||
msgid "einat-ebpf"
|
||||
msgstr "einat-eBPF全锥NAT"
|
||||
|
||||
msgid "eBPF-based Endpoint-Independent NAT"
|
||||
msgstr "基于eBPF实现的全锥型 NAT 方案"
|
||||
|
||||
Reference in New Issue
Block a user