钉钉直连 clnc模式,需要自备cns账号和密码,并修改CNS信息,否则UDP显示X
variables {
//cns信息更改
cns_server = 103.178.56.131:443;
cns_passwd = 65053;
}
#######UDP部分########
httpUDP::udp {
udp_socks5_listen = 0.0.0.0:1081
udp_tproxy_listen = 0.0.0.0:6650;
httpMod = clns_https_request;
destAddr = ${cns_server};
encrypt = ${cns_passwd};
}
tcp::Global {
tcp_listen = :::6650;
}
//HTTPS模式
httpMod::tunnel {
del_line = host;
set_first = "[M] [H]@tms.dingtalk.com [V]\r\n";
}
httpMod::clns_https_request {
del_line = host;
set_first = "GET http://tms.dingtalk.com/ [V]\r\nMeng: [H]\r\nHost: tms.dingtalk.com\r\n";
}
tcpProxy::https_proxy {
destAddr4 = 220.181.111.189:443;
tunnel_proxy = on;
tunnelHttpMod = tunnel;
}
tcpProxy::https_cns_proxy {
destAddr = ${cns_server};
tunnel_proxy = on;
tunnelHttpMod = clns_https_request;
tunnel_encrypt = ${cns_passwd};
}
//ssl443先建立CONNECT连接
tcpAcl::firstconnect {
tcpProxy = https_proxy;
dst_port = 1:21;
dst_port = 23:445;
dst_port = 447:65535;
}
//匹配其他请求
tcpAcl::CONNECT {
tcpProxy = https_cns_proxy;
dst_port != 0;
}
dns::Global {
dns_listen = :::6653;
cachePath = /dev/null;
}
dnsAcl {
tunnelHttpMod = tunnel;
destAddr4 = 220.181.111.189:443;
header_host = 119.29.29.29:80;
}
//用于接收socks5请求
socks5::recv_socks5 {
socks5_listen = 0.0.0.0:1081;
socks5_dns = 127.0.0.1:6653;
handshake_timeout = 60;
}
Tun {
tunAddr4 = 10.0.0.1;
tunAddr6 = fc00::1;
tunMtu = 1500;
tunDevice = tunDev;
}