🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: cn.comp.hacker
Article #13371

SSH tunnel + pac穿越

#13371
From: RSS Feed For GFW Blog
Date: Thu, 01 Oct 2009 00:49
85 lines
7866 bytes
作者:tin   来源:[http://tin.zztin.com/2009/ssh-tunnel-and-pac/][1]

   [1]: http://tin.zztin.com/2009/ssh-tunnel-and-pac/

就是穿越我们的墙。以前写过一个我的pac的post,不过那个pac在很多环境不work,那就老实写那个笨的,可是太麻烦了。所以写了个rb脚本生成那个pac。

如下:


    #!/usr/bin/env ruby

    proxy = 'SOCKS [127.0.0.1:7777][2]'

    gfucked_sites = [

      '[youtube.com][3]',

      '[ytimg.com][4]',

       '[googlevideo.com][5]',

      '[tinyurl.com][6]',

      '[bit.ly][7]',

      '[blogspot.com][8]',

       '[twitter.com][9]',

      '[plurk.com][10]',

      '[torproject.org][11]',

      '[wikipedia.org][12]',

       '[tumblr.com][13]',

      '[soup.io][14]',

      '[pandora.com][15]',

      '[adobe.com][16]',

       '[last.fm][17]',

      '[photoshop.com][18]',

      '[google.com][19]',

      '[googlecode.com][20]',

       '[appspot.com][21]',

      '[acer.com][22]',

      '[demonoid.com][23]',

      '[alexa.com][24]',

       '[wikimedia.org][25]',

      '[yahoo.com][26]',

      '[zend.com][27]',

      '[aptana.com][28]',

       '[uncyclopedia.tw][29]',

      '[uncyc.org][30]',

      '[webarchive.org][31]',

      '[pornhub.com][32]',

       '[yourporn.com][33]',

      '[facebook.com][34]',

      '[mail-archive.com][35]',

      '[versionapp.com][36]',

       '[friendfeed.com][37]',

      '[ff.im][38]',

      '[chinagfw.org][39]',

      '[bullogger.com][40]',

       '[mulhollanddrive.com][41]',

      '[iphone-dev.org][42]',

      '[plurk.com][10]',

      '[imageshack.us][43]',

       '[zendesk.com][44]',

      '[pbwiki.com][45]',

      '[chromium.org][46]',

      '[typepad.com][47]',

       '[ff.im][38]',

      '[friendfeed.com][37]',

      '[tornadoweb.org][48]',

      '[bullogger.com][40]',

       '[blogspot.com][8]',

      '[zendesk.com][44]'

    ]

    puts "function FindProxyForURL(url, host) {"

    gfucked_sites.each do |site|

      puts "  if (shExpMatch(url, \"*://*.#{site}/*\")) { return \"#{proxy}\"; }"

       puts "  if (shExpMatch(url, \"*://#{site}/*\")) { return \"#{proxy}\"; }"

    end

    puts "  return \"DIRECT\""

    puts "}"


   [2]: http://127.0.0.1:7777

   [3]: http://youtube.com

   [4]: http://ytimg.com

   [5]: http://googlevideo.com

   [6]: http://tinyurl.com

   [7]: http://bit.ly

   [8]: http://blogspot.com

   [9]: http://twitter.com

   [10]: http://plurk.com

   [11]: http://torproject.org

   [12]: http://wikipedia.org

   [13]: http://tumblr.com

   [14]: http://soup.io

   [15]: http://pandora.com

   [16]: http://adobe.com

   [17]: http://last.fm

   [18]: http://photoshop.com

   [19]: http://google.com

   [20]: http://googlecode.com

   [21]: http://appspot.com

   [22]: http://acer.com

   [23]: http://demonoid.com

   [24]: http://alexa.com

   [25]: http://wikimedia.org

   [26]: http://yahoo.com

   [27]: http://zend.com

   [28]: http://aptana.com

   [29]: http://uncyclopedia.tw

   [30]: http://uncyc.org

   [31]: http://webarchive.org

   [32]: http://pornhub.com

   [33]: http://yourporn.com

   [34]: http://facebook.com

   [35]: http://mail-archive.com

   [36]: http://versionapp.com

   [37]: http://friendfeed.com

   [38]: http://ff.im

   [39]: http://chinagfw.org

   [40]: http://bullogger.com

   [41]: http://mulhollanddrive.com

   [42]: http://iphone-dev.org

   [43]: http://imageshack.us

   [44]: http://zendesk.com

   [45]: http://pbwiki.com

   [46]: http://chromium.org

   [47]: http://typepad.com

   [48]: http://tornadoweb.org

运行一下./gen_pac.rb > tin.pac就会生成tin.pac,我在.profile里面加入这一行并在开机默认启动Terminal就可以每次都更新pac文件了。但是还缺一 个apple script告诉网络连接刷新一下pac文件,下次有空研究一下怎么做。

打开ssh tunnel我没有使用自动的方式,我设置了这个alias:


    alias px='ssh -qTfnNC -D 7777 [user@yourdomain.com][49]'

   [49]: mailto:user@yourdomain.com

然后每次用ssh-tunnel的时候只需要去Terminal执行一下px就好了。

在Mac里面我可以给每一块网卡指定系统级别的自动代理脚本pac文件:Air port图标-> Open Network preference->解锁->选择你的网络连接-> Advance …->Proxies->Automatice Proxy
Configuration,让它指向你的pac文件。然后整个系统都回使用它作为代理了,如此Tweetie就可以非常爽的工作了。此法对于使用Tor 的用户一样有效,修改一下pac生成脚本里面的`proxy = 'SOCKS [127.0.0.1:7777][50]'`到`proxy = 'HTTP
127.0.0.1:tor_port'`就可以了。``

   [50]: http://127.0.0.1:7777

敬请订阅我们:http://feeds2.feedburner.com/chinagfwblog,在twitter跟随我们:http://twitter.com/cdt。翻墙工具介绍和下载:http://www.sesawe.org/和http://www.sesawwe.net/。![][51]

   [51]: https://blogger.googleusercontent.com/tracker/5500297126185736776-8514603091029968117?l=www.chinagfw.org

Contentes HTML URL: http://www.chinagfw.org/2009/09/ssh-tunnel-pac.html

Send By Feed RSS2eMail BOT V2.65
Admin By Liuxing99
Technical Details
Message-ID: <4ac43d36$1@news.liuxing99.3322.org>
Path: arc1-ca.pugleaf.net!g2news2.google.com!news3.google.com!feeder3.cambriumusenet.nl!feed.tweaknews.nl!217.73.144.44.MISMATCH!feeder.ecngs.de!ecngs!feeder2.ecngs.de!194.25.134.126.MISMATCH!newsfeed01.sul.t-online.de!t-online.de!61.160.212.82.MISMATCH!www.shinco.com!news.liuxing99.3322.org!not-for-mail

Show Full Headers
Complete Article Headers
X-Google-Thread: 85629cb6ee,c7e07981608f891f,start
X-Google-Attributes: gid85629cb6ee,public,usenet
X-Google-NewGroupId: yes
X-Google-Language: Chinese,GB
Path: arc1-ca.pugleaf.net!g2news2.google.com!news3.google.com!feeder3.cambriumusenet.nl!feed.tweaknews.nl!217.73.144.44.MISMATCH!feeder.ecngs.de!ecngs!feeder2.ecngs.de!194.25.134.126.MISMATCH!newsfeed01.sul.t-online.de!t-online.de!61.160.212.82.MISMATCH!www.shinco.com!news.liuxing99.3322.org!not-for-mail
From: RSS Feed For GFW Blog <gfwblog-list@szb66.vicp.net>
Newsgroups: cn.comp.hacker
Subject:  SSH tunnel + pac穿越
Date: Thu, 01 Oct 2009 00:49:00 -0000
Organization: A poorly-installed InterNetNews site
Lines: 85
Message-ID: <4ac43d36$1@news.liuxing99.3322.org>
NNTP-Posting-Host: 58.209.241.41
Mime-Version: 1.0
Content-Type: text/plain; charset="gb2312"
Content-Transfer-Encoding: base64
X-Trace: www.shinco.com 1254374796 11090 58.209.241.41 (1 Oct 2009 05:26:36 GMT)
X-Complaints-To: news@www.shinco.com
NNTP-Posting-Date: Thu, 1 Oct 2009 05:26:36 +0000 (UTC)
Received-Path: <gfwblog-list@szb66.vicp.net>
X-Feed-By: news.liuxing99.3322.org
User-Agent: Feed RSS2eMail BOT V2.65
X-Gateway-Administrator: bianlule@bianlule.3322.org
X-Gateway-From: dnews-gateway@news.liuxing99.3322.org