#!/bin/bash
openURL http://wapedia.mobi # safari oeffnen, erzwingt Verbindung ins netz
killall -KILL socks # alten socks-proxy abschiessen
socks -p8081 -i127.0.0.1 & # neuen socks-proxy starten
while true; do
	ping -c 1 -i 10 -n 193.99.144.85 | grep time=  # verbindung offen halten
sleep 3 
done

#!/bin/sh

# alten itunnel abschiessen
killall -TERM itunnel
sleep 1
killall -KILL itunnel

# neuen itunnel starten
/usr/local/bin/itunnel &

ssh -p 3023 -L8081:127.0.0.1:8081 \
	  -L3025:127.0.0.1:22 root@localhost \
	  /var/mobile/usbconnect.sh

#!/bin/sh   
 
IPTABLES="/sbin/iptables"
 
TRANSOCKS_PORT="8082"
SOCKS_HOST="127.0.0.1"
SOCKS_PORT="8081"

# clear
iptables -F -v
iptables -F -t nat -v
iptables -X

echo 1 > /proc/sys/net/ipv4/ip_forward

# Create our own chain
$IPTABLES -t nat -N TRANSOCKS
 
# Do not try to redirect local traffic
$IPTABLES -t nat -I TRANSOCKS -o lo -j RETURN
 
# Do not redirect LAN traffic and some other reserved addresses.
$IPTABLES -t nat -A TRANSOCKS -d 0.0.0.0/8 -j RETURN
$IPTABLES -t nat -A TRANSOCKS -d 10.0.0.0/8 -j RETURN
$IPTABLES -t nat -A TRANSOCKS -d 127.0.0.0/8 -j RETURN
$IPTABLES -t nat -A TRANSOCKS -d 169.254.0.0/16 -j RETURN
$IPTABLES -t nat -A TRANSOCKS -d 172.16.0.0/12 -j RETURN
$IPTABLES -t nat -A TRANSOCKS -d 192.168.0.0/16 -j RETURN
$IPTABLES -t nat -A TRANSOCKS -d 224.0.0.0/4 -j RETURN  
$IPTABLES -t nat -A TRANSOCKS -d 240.0.0.0/4 -j RETURN

# Do not redirect traffic for the SOCKS server (not needed if server is 
# already excluded by above rules)
$IPTABLES -t nat -I TRANSOCKS -p tcp -d $SOCKS_HOST --dport $SOCKS_PORT -j RETURN
	
# Redirect all traffic that gets to the end of our chain
$IPTABLES -t nat -A TRANSOCKS -p tcp -j REDIRECT --to-port $TRANSOCKS_PORT
 
# Filter  all traffic that is routed over this host
# (für den Betrieb dieses Rechners als Router)
$IPTABLES -t nat -A PREROUTING -p tcp -j TRANSOCKS
#$IPTABLES -t nat -A PREROUTING -p tcp -s 172.19.42.0/24 --syn -j TRANSOCKS
 
## Filter all traffic from the own host 
# (damit Programme auf diesem Rechner aufs Internet zugreifen können)
$IPTABLES -t nat -A OUTPUT -p tcp -j TRANSOCKS

# ethernet-Karte mit IP versehen,
ifconfig eth0 172.19.42.1 netmask 255.255.255.0 up

# Alle Datenpakete auf einen nicht existierenden Router leiten
route add default gateway 172.19.42.254

# transocks_ev starten
# (socks-tunnel-endpunkt ist 127.0.0.1 mit Port 8081,
# 8082 ist der Kontrollport von transocks_ev
transocks_ev -s 8081 -S 127.0.0.1 -H 0.0.0.0 -p 8082

# iptables konfigurieren
/usr/local/bin/transocks.sh

global {
 perm_cache=1024;
 cache_dir="/var/cache/pdnsd";
 pid_file = /var/run/pdnsd.pid;
 run_as="nobody";
 server_ip = eth0;  # Use eth0 here if you want to allow other
	                            # machines on your network to query pdnsd.
 status_ctl = on;
#       paranoid=on;       # This option reduces the chance of cache poisoning
	                         # but may make pdnsd less efficient, unfortunately.
 query_method=tcp_only;
 min_ttl=15m;       # Retain cached entries at least 15 minutes.
 max_ttl=1w;        # One week.
 timeout=10;        # Global timeout option (10 seconds).
}

server {
 label = "opendns";
 ip = 208.67.222.222, 208.67.220.220;
 reject = 67.215.65.132/32;  # You may need to add additional address ranges
 proxy_only=on;
 reject_policy = fail;     # If you do not provide any alternative server
	                           # sections, like the following root-server
	                           # example, "negate" may be more appropriate here.
 timeout = 4;
}

rr {
 name=localhost;
 reverse=on;
 a=127.0.0.1;
 owner=localhost;
 soa=localhost,root.localhost,42,86400,900,86400,86400;
}

#!/bin/sh
# alten itunnel abschiessen
killall -TERM itunnel
sleep 3
killall -KILL itunnel
sleep 1

# neuen itunnel starten
/usr/local/bin/itunnel &
sleep 1

# aufraeumen
killall -KILL transocks_ev
killall -KILL pdnsd
iptables -F -v ; iptables -F -t nat -v ; iptables -X

# ethernet-interface konfigurieren
ifconfig eth0 172.19.42.1 netmask 255.255.255.0 up
route add default gateway 172.19.42.254

# socks transparent machen
/usr/local/sbin/transocks_ev -s 8081 -S 127.0.0.1 -H 0.0.0.0 -p 8082
/usr/local/sbin/transocks.sh

# anderes
/usr/local/sbin/pdnsd -d
echo "nameserver 172.19.42.1" > /etc/resolv.conf

# ssh-tunnel (mit oeffentlich erreichbarem socks-tunnel)
ssh -p 3023 -L0.0.0.0:8081:127.0.0.1:8081 \
	  -L3025:127.0.0.1:22 root@localhost \
	  /var/mobile/usbconnect.sh