fix the iptables bug

manifest.json

@@ -2,7 +2,7 @@
 "package_id"      : "com.modouwifi.vpnss",
 "os_version"      : "0.6.33",
 "name"            : "魔豆shadowsocks",
-"author"          : "shadow",
+"author"          : "yinkeedai",
 "author_mail"     : "[email protected]",
 "homepage"        : "shadowsocks.org",
 "version"         : "0.2.0",

sbin/ss-transp.sh

@@ -7,7 +7,7 @@ passwd=$4
 ssIptablesAdd()
 {
     # create new chain
-    iptables -t nat -N SHADOWSOCKS
+    iptables -t nat -N SHADOWSOCKS 1>/dev/null 2>&1
     # ignore server addr
     iptables -t nat -A SHADOWSOCKS -d $serveraddr -j RETURN
     # ignore LANs addr
@@ -20,15 +20,13 @@ ssIptablesAdd()
     # anything else will be redirected to ss local port
     iptables -t nat -A SHADOWSOCKS -p tcp -j REDIRECT --to-ports 1080
     # apply the rules
-    #iptables -t nat -A OUTPUT -p tcp -j SHADOWSOCKS
     iptables -t nat -I PREROUTING -p tcp -j SHADOWSOCKS
     return 0
 }
 
 ssIptablesClear()
 {
     iptables -t nat -F SHADOWSOCKS
-    iptables -t nat -F OUTPUT
     iptables -t nat -D PREROUTING -p tcp -j SHADOWSOCKS
 }
 ssRedirStop()
@@ -38,11 +36,11 @@ ssRedirStop()
 
 ssRedirStart()
 {
-    $CURWDIR/../bin/ss-redir -s $serveraddr -p $serverport -l 1080 -k $passwd -b 0.0.0.0 -m $secmode -v
+    $CURWDIR/../bin/ss-redir -s $serveraddr -p $serverport -l 1080 -k $passwd -b 0.0.0.0 -m $secmode -v &
 }
 
 # main
-ssIptablesClear;
 ssRedirStop;
 ssRedirStart;
+ssIptablesClear;
 ssIptablesAdd;

sbin/ss.sh

@@ -136,7 +136,7 @@ ssStart()
     secmode=`head -n 3 $SETCONF | tail -n 1 | cut -d ' ' -f2-`;
     passwd=`head -n 4 $SETCONF | tail -n 1 | cut -d ' ' -f2-`;
     $SSSHELL $serveraddr $serverport $secmode $passwd &
-    sleep 1
+    sleep 2
     genCustomConfig;
     pid=`cat $PIDFILE 2>/dev/null`;
     kill -SIGUSR1 $pid >/dev/null 2>&1;
@@ -146,9 +146,9 @@ ssStart()
 ssStop()
 {
     killall ss-redir 1>/dev/null 2>&1;
-    iptables -t nat -F SHADOWSOCKS
-    iptables -t nat -F OUTPUT
-    iptables -t nat -D PREROUTING -p tcp -j SHADOWSOCKS
+    iptables -t nat -F SHADOWSOCKS 1>/dev/null 2>&1
+    iptables -t nat -F OUTPUT 1>/dev/null 2>&1
+    iptables -t nat -D PREROUTING -p tcp -j SHADOWSOCKS 1>/dev/null 2>&1
     genCustomConfig;
     pid=`cat $PIDFILE 2>/dev/null`;
     kill -SIGUSR1 $pid >/dev/null 2>&1;