Article View: cn.comp.hacker
Article #13371SSH tunnel + pac穿越
From: RSS Feed For GFW Blog
Date: Thu, 01 Oct 2009 00:49
Date: Thu, 01 Oct 2009 00:49
85 lines
7866 bytes
7866 bytes
作者:tin 来源:[http://tin.zztin.com/2009/ssh-tunnel-and-pac/][1]
[1]: http://tin.zztin.com/2009/ssh-tunnel-and-pac/
就是穿越我们的墙。以前写过一个我的pac的post,不过那个pac在很多环境不work,那就老实写那个笨的,可是太麻烦了。所以写了个rb脚本生成那个pac。
如下:
#!/usr/bin/env ruby
proxy = 'SOCKS [127.0.0.1:7777][2]'
gfucked_sites = [
'[youtube.com][3]',
'[ytimg.com][4]',
'[googlevideo.com][5]',
'[tinyurl.com][6]',
'[bit.ly][7]',
'[blogspot.com][8]',
'[twitter.com][9]',
'[plurk.com][10]',
'[torproject.org][11]',
'[wikipedia.org][12]',
'[tumblr.com][13]',
'[soup.io][14]',
'[pandora.com][15]',
'[adobe.com][16]',
'[last.fm][17]',
'[photoshop.com][18]',
'[google.com][19]',
'[googlecode.com][20]',
'[appspot.com][21]',
'[acer.com][22]',
'[demonoid.com][23]',
'[alexa.com][24]',
'[wikimedia.org][25]',
'[yahoo.com][26]',
'[zend.com][27]',
'[aptana.com][28]',
'[uncyclopedia.tw][29]',
'[uncyc.org][30]',
'[webarchive.org][31]',
'[pornhub.com][32]',
'[yourporn.com][33]',
'[facebook.com][34]',
'[mail-archive.com][35]',
'[versionapp.com][36]',
'[friendfeed.com][37]',
'[ff.im][38]',
'[chinagfw.org][39]',
'[bullogger.com][40]',
'[mulhollanddrive.com][41]',
'[iphone-dev.org][42]',
'[plurk.com][10]',
'[imageshack.us][43]',
'[zendesk.com][44]',
'[pbwiki.com][45]',
'[chromium.org][46]',
'[typepad.com][47]',
'[ff.im][38]',
'[friendfeed.com][37]',
'[tornadoweb.org][48]',
'[bullogger.com][40]',
'[blogspot.com][8]',
'[zendesk.com][44]'
]
puts "function FindProxyForURL(url, host) {"
gfucked_sites.each do |site|
puts " if (shExpMatch(url, \"*://*.#{site}/*\")) { return \"#{proxy}\"; }"
puts " if (shExpMatch(url, \"*://#{site}/*\")) { return \"#{proxy}\"; }"
end
puts " return \"DIRECT\""
puts "}"
[2]: http://127.0.0.1:7777
[3]: http://youtube.com
[4]: http://ytimg.com
[5]: http://googlevideo.com
[6]: http://tinyurl.com
[7]: http://bit.ly
[8]: http://blogspot.com
[9]: http://twitter.com
[10]: http://plurk.com
[11]: http://torproject.org
[12]: http://wikipedia.org
[13]: http://tumblr.com
[14]: http://soup.io
[15]: http://pandora.com
[16]: http://adobe.com
[17]: http://last.fm
[18]: http://photoshop.com
[19]: http://google.com
[20]: http://googlecode.com
[21]: http://appspot.com
[22]: http://acer.com
[23]: http://demonoid.com
[24]: http://alexa.com
[25]: http://wikimedia.org
[26]: http://yahoo.com
[27]: http://zend.com
[28]: http://aptana.com
[29]: http://uncyclopedia.tw
[30]: http://uncyc.org
[31]: http://webarchive.org
[32]: http://pornhub.com
[33]: http://yourporn.com
[34]: http://facebook.com
[35]: http://mail-archive.com
[36]: http://versionapp.com
[37]: http://friendfeed.com
[38]: http://ff.im
[39]: http://chinagfw.org
[40]: http://bullogger.com
[41]: http://mulhollanddrive.com
[42]: http://iphone-dev.org
[43]: http://imageshack.us
[44]: http://zendesk.com
[45]: http://pbwiki.com
[46]: http://chromium.org
[47]: http://typepad.com
[48]: http://tornadoweb.org
运行一下./gen_pac.rb > tin.pac就会生成tin.pac,我在.profile里面加入这一行并在开机默认启动Terminal就可以每次都更新pac文件了。但是还缺一 个apple script告诉网络连接刷新一下pac文件,下次有空研究一下怎么做。
打开ssh tunnel我没有使用自动的方式,我设置了这个alias:
alias px='ssh -qTfnNC -D 7777 [user@yourdomain.com][49]'
[49]: mailto:user@yourdomain.com
然后每次用ssh-tunnel的时候只需要去Terminal执行一下px就好了。
在Mac里面我可以给每一块网卡指定系统级别的自动代理脚本pac文件:Air port图标-> Open Network preference->解锁->选择你的网络连接-> Advance …->Proxies->Automatice Proxy
Configuration,让它指向你的pac文件。然后整个系统都回使用它作为代理了,如此Tweetie就可以非常爽的工作了。此法对于使用Tor 的用户一样有效,修改一下pac生成脚本里面的`proxy = 'SOCKS [127.0.0.1:7777][50]'`到`proxy = 'HTTP
127.0.0.1:tor_port'`就可以了。``
[50]: http://127.0.0.1:7777
敬请订阅我们:http://feeds2.feedburner.com/chinagfwblog,在twitter跟随我们:http://twitter.com/cdt。翻墙工具介绍和下载:http://www.sesawe.org/和http://www.sesawwe.net/。![][51]
[51]: https://blogger.googleusercontent.com/tracker/5500297126185736776-8514603091029968117?l=www.chinagfw.org
Contentes HTML URL: http://www.chinagfw.org/2009/09/ssh-tunnel-pac.html
Send By Feed RSS2eMail BOT V2.65
Admin By Liuxing99
Technical Details
Message-ID:
<4ac43d36$1@news.liuxing99.3322.org>Path:
arc1-ca.pugleaf.net!g2news2.google.com!news3.google.com!feeder3.cambriumusenet.nl!feed.tweaknews.nl!217.73.144.44.MISMATCH!feeder.ecngs.de!ecngs!feeder2.ecngs.de!194.25.134.126.MISMATCH!newsfeed01.sul.t-online.de!t-online.de!61.160.212.82.MISMATCH!www.shinco.com!news.liuxing99.3322.org!not-for-mailShow Full Headers
Complete Article Headers
X-Google-Thread: 85629cb6ee,c7e07981608f891f,start X-Google-Attributes: gid85629cb6ee,public,usenet X-Google-NewGroupId: yes X-Google-Language: Chinese,GB Path: arc1-ca.pugleaf.net!g2news2.google.com!news3.google.com!feeder3.cambriumusenet.nl!feed.tweaknews.nl!217.73.144.44.MISMATCH!feeder.ecngs.de!ecngs!feeder2.ecngs.de!194.25.134.126.MISMATCH!newsfeed01.sul.t-online.de!t-online.de!61.160.212.82.MISMATCH!www.shinco.com!news.liuxing99.3322.org!not-for-mail From: RSS Feed For GFW Blog <gfwblog-list@szb66.vicp.net> Newsgroups: cn.comp.hacker Subject: SSH tunnel + pac穿越 Date: Thu, 01 Oct 2009 00:49:00 -0000 Organization: A poorly-installed InterNetNews site Lines: 85 Message-ID: <4ac43d36$1@news.liuxing99.3322.org> NNTP-Posting-Host: 58.209.241.41 Mime-Version: 1.0 Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 X-Trace: www.shinco.com 1254374796 11090 58.209.241.41 (1 Oct 2009 05:26:36 GMT) X-Complaints-To: news@www.shinco.com NNTP-Posting-Date: Thu, 1 Oct 2009 05:26:36 +0000 (UTC) Received-Path: <gfwblog-list@szb66.vicp.net> X-Feed-By: news.liuxing99.3322.org User-Agent: Feed RSS2eMail BOT V2.65 X-Gateway-Administrator: bianlule@bianlule.3322.org X-Gateway-From: dnews-gateway@news.liuxing99.3322.org