pre 使用代理的方法, cmwap或许也能用了

mycccc

* I" f+ p' z) ?6 q# f  l) J
+ k+ D0 n' y2 x! V. [4 u
( t$ H+ A2 a/ d( |: @
9 \' a+ t  R; y2 W9 X* F* c5 kpre支持代理的现成软件估计是等不到了
哪怕只是浏览器里加个代理选项,1.4.5没有,2.1也没有
(或者webos有proxy软件么?我找了两天没找到)


3 ~( w& I1 t6 t9 `3 O0 P搜了半天英文方面的资料,还真有
; X9 d9 d. W* q( D& _- l5 e发现在webos上代理实在是太linux了
* d' b# a+ Q- W5 A7 P! `+ X

9 }6 U4 Q# _5 C; r+ z/ S" Y2 s方法如下:
安装squid代理，添加一个节点代理，配置iptables的所有HTTP请求转发代理 。对浏览器等来说透明,这样就可以让不支持代理的各软件都通过代理
# D' C5 H* q  |  W8 S! q
4 ^* u$ J- F/ v3 X) H7 q1 B9 p1 @
+ R* F+ m4 I$ L) p! e- O  D! [
' t& ^5 W+ G6 o6 W& }0 D
" D  l! T: u+ S& x. `
9 H% V/ c) F9 h" A8 ?1 E  `/ `/ A按照这种方式
cmwap应该也可以设置成代理访问的
这下无限流量的cmwaper们该笑了
, t4 o/ v0 b. ]2 b& f9 X
! D6 ]4 I* m% a5 Y, F& ?  W" p! i
原文见这里: http://www.daemon.de/PalmPreHowtoSquid


Transparent Proxy on the palm pre for internet filtering and proxy forwarding

Ok, someone asked for it, so I figured it out, how to do it for fun and profit.

    Transparent Proxy on the palm pre for internet filtering and proxy forwarding
( ^4 @) }( T! B5 z; b! N6 Q        Installing Squid
$ y* F' C) @7 Y- N% g        Create a basic proxy config
& x1 \% \2 ?1 a% C3 A- r        Prepare the directories for squid
        Starting squid
6 Y- p6 Q( e* o7 t1 C        Redirect Web Traffic to the Proxy
% r$ f: \4 Y6 k6 H1 N; {7 |        Add the rules to the squid startup file
+ T/ p/ a; ^0 C' l2 z        Configure network to startup squid if WLAN comes up:
* E! k4 u% z: h- |( e        See it working

Installing Squid

First, you need to have root access to your device. How to get root, is described elsewere in this wiki. It would be a good idea to know a little about linux and networking too. Be warned: this can make your networking unfunctional!

Make your root disk writable:

cd / && mount -v -o remount,rw /

Login to the pre console and type this command to install the squid optware package

root@palm-webos-device: # ipkg-opt update ... root@palm-webos-device: # ipkg-opt install squid Installing squid (2.6.21-2) to root... Downloading http://ipkg.nslu2-linux.org/feed ... id_2.6.21-2_arm.ipk Configuring squid create default cache and logs dir chown: unknown user/group nobody:nobody chown: unknown user/group nobody:nobody FATAL: Could not determine fully qualified hostname.Please set  'visible_hostname'  Squid Cache (Version 2.6.STABLE21): Terminated abnormally. CPU Usage: 0.020 seconds = 0.010 user + 0.010 sys Maximum Resident Size: 0 KB Page faults with physical i/o: 0 Segmentation fault

You should review the configuration file /opt/etc/squid/squid.conf, make any necessary change, and complete the install by running -

/opt/etc/init.d/S80squid start  Successfully terminated.

Ignore the errors for the moment, we'll get to it soon.

Create a basic proxy config

Change to the directory /opt/etc/squid and move the file squid.conf which is already there to somewhere else. Now create a new squid.conf, which should have the following contents:

visible_hostname localhosthttp_port 3128 transparent                 hierarchy_stoplist cgi-bin ?               access_log /var/cache/squid/squid.log squid          acl QUERY urlpath_regex cgi-bin \?                   cache deny QUERY # replace the ip address with the address of your proxy# replace the port 3128 with the port of your proxycache_peer 192.168.2.205 parent 3128 3130 default # if your proxy requires authentication, use this:# cache_peer 192.168.2.205 parent 3128 3130 default login USERNAME PASSWORDrefresh_pattern ^ftp:           1440    20%     10080refresh_pattern ^gopher:        1440    0%      1440refresh_pattern .               0       20%     4320acl apache rep_header Server ^Apache                broken_vary_encoding allow apache    coredump_dir /var/cache/squid        cache_dir ufs /var/cache/squid 20 5 5access_log /var/cache/squid/squid.logcache_log /var/cache/squid/cache.logcache_store_log /dev/null acl all src 0.0.0.0/0.0.0.0acl manager proto cache_objectacl localhost src 127.0.0.1/255.255.255.255acl to_localhost dst 127.0.0.0/8acl SSL_ports port 443acl Safe_ports port 80          # httpacl Safe_ports port 21          # ftpacl Safe_ports port 443         # httpsacl Safe_ports port 70          # gopheracl Safe_ports port 210         # waisacl Safe_ports port 1025-65535  # unregistered portsacl Safe_ports port 280         # http-mgmtacl Safe_ports port 488         # gss-httpacl Safe_ports port 591         # filemakeracl Safe_ports port 777         # multiling httpacl CONNECT method CONNECThttp_access allow manager localhosthttp_access deny managerhttp_access deny !Safe_portshttp_access deny CONNECT !SSL_ports# example for an ACL, uncomment and modify#acl enemy dstdomain www.apple.com#http_access deny enemy http_access allow allicp_access allow all

Basicly this is a config for a transparent proxy, thus a browser will be redirected to it without knowing that it is actually connected to a proxy. We must configure it this way because the WebOS browser cannot be configured to use a proxy.

Note that we have added a single ACL here, which denies access to some random site *g*. Any other requests will be allowed. SSL (HTTPS) will not be passed through the proxy because this requires the browser to connect to it using a proxy request.

Prepare the directories for squid

Squid needs a directory where to store it's files, as content it caches and logfiles. You may consider to disable caching and logging. But caching may be a good idea if your traffic is limited, so you'll save some. Logging is always usefull for debugging. If you want to turn it off, use /dev/null as target for the logfiles.

mkdir /var/cache/squid chown nobody /var/cache/squid

Next you need let squid to prepare the directory structure using the -z option:

root@palm-webos-device: # squid -z -f squid.conf 2009/11/26 23:19:29| Creating Swap Directories

You should not see any errors here!

Starting squid

The installer already added it to the startup daemons, now we will start it manually:

/opt/etc/init.d/S80squid start

Look in /var/cache/squid/cache.log for any errors. Use ps to see if it really runs. You may consider to install lynx and test the proxy:

ipkg-opt install lynx export http_proxy=http://localhost:3128 lynx www.google.com

If you see a google textmode site, it works.

Redirect Web Traffic to the Proxy

Now comes the ugly part. I'll not explain it in detail: we install some iptable Rules. We tell iptables to forward any traffic destined to tcp port 80 to localhost port 3128 (this is where squid listens for incoming connections). To avoid that the requests of the proxy itself are forwarded to localhost (which would create a loop), we add a rule telling iptables to not forward web traffic if it were generated by user nobody (the user squid runs as):

iptables -t nat -A OUTPUT -p tcp --dport 80 -m owner --gid-owner 65534 -j ACCEPT iptables -t nat -A OUTPUT -p tcp --dport 80 -j DNAT --to-destination 127.0.0.1:3128

You should not get any response from iptables. Let's see if the rules were added correctly:

root@palm-webos-device: # iptables -nL -t natChain PREROUTING (policy ACCEPT)target     prot opt source               destination          Chain POSTROUTING (policy ACCEPT)target     prot opt source               destination          Chain OUTPUT (policy ACCEPT)target     prot opt source               destination         ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:80 owner GID match65534 DNAT       tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:80 to:127.0.0.1:3128 Add the rules to the squid startup file

Edit /opt/etc/init.d/S80squid so that it looks like this:

#! /bin/shcase "$1" in    start)        echo -n "Starting proxy server: "        if [ -n "`pidof quotacheck`" ]; then           #you don't need it if you don't have quota check enable.           echo "Starting squid-cache server after delay for few mins:"           /opt/etc/squid/squid.delay-start.sh&        else           /opt/sbin/squid -f /opt/etc/squid/squid.conf           iptables -t nat -A OUTPUT -p tcp --dport 80 -m owner --gid-owner 65534 -j ACCEPT           iptables -t nat -A OUTPUT -p tcp --dport 80 -j DNAT --to-destination 127.0.0.1:3128           echo "done."        fi        echo "done."        ;;    stop)        echo -n "Stopping proxy server: "        /opt/sbin/squid -f /opt/etc/squid/squid.conf -k shutdown        iptables -t nat -D OUTPUT -p tcp --dport 80 -m owner --gid-owner 65534 -j ACCEPT        iptables -t nat -D OUTPUT -p tcp --dport 80 -j DNAT --to-destination 127.0.0.1:3128        echo "done."        ;;    reload|force-reload)        echo -n "Reloading proxy server configuration files: "        /opt/sbin/squid -f /opt/etc/squid/squid.conf -k reconfigure        echo "done."        ;;    restart)        echo -n "Restarting proxy server: "        /opt/sbin/squid -f /opt/etc/squid/squid.conf -k shutdown        sleep 2        /opt/sbin/squid -f /opt/etc/squid/squid.conf        echo "done."        ;;    *)        echo "Usage: /opt/etc/init.d/S80squid {start|stop|reload|force-reload|restart}"        exit 1        ;;esac Configure network to startup squid if WLAN comes up:

Change to directory /etc/pmnetconfig/.

In the file if-up modify this part:

if [ "$ISPPP" -ne 4 ] && [ "$ISRMNET" -ne 6 ] && [ "$ISTUN" -ne 4 ] && [ "$ISCSCOTUNVPN" -ne 8 ]; then    NetCfgSetAddr    CMSERVICES=$((${CMSERVICES} | ${CMSVCINTERNET})) fi

to

if [ "$ISPPP" -ne 4 ] && [ "$ISRMNET" -ne 6 ] && [ "$ISTUN" -ne 4 ] && [ "$ISCSCOTUNVPN" -ne 8 ]; then    NetCfgSetAddr    CMSERVICES=$((${CMSERVICES} | ${CMSVCINTERNET}))    /usr/bin/logger "wifi up: execute /opt/etc/init.d/S80squid start"     /opt/etc/init.d/S80squid start fi

In the file if-down modify this part:

if [ ${CMINTERFACE} = ${CMBTINTERFACENAME} ] || [ ${CMINTERFACE} = ${CMBRINTERFACENAME} ]; then    ${LOG} "${IPTABLES} -t nat -D POSTROUTING -s  $CMNETADDR/$CMPREFIXLEN -j MASQUERADE"    ${IPTABLES} -t nat -D POSTROUTING -s $CMNETADDR/$CMPREFIXLEN -j MASQUERADE    ${LOG} "${ECHO} 0 >/proc/sys/net/ipv4/ip_forward"    ${ECHO} 0 >/proc/sys/net/ipv4/ip_forward fi

to:

if [ ${CMINTERFACE} = ${CMBTINTERFACENAME} ] || [ ${CMINTERFACE} = ${CMBRINTERFACENAME} ]; then    ${LOG} "${IPTABLES} -t nat -D POSTROUTING -s  $CMNETADDR/$CMPREFIXLEN -j MASQUERADE"    ${IPTABLES} -t nat -D POSTROUTING -s $CMNETADDR/$CMPREFIXLEN -j MASQUERADE    ${LOG} "${ECHO} 0 >/proc/sys/net/ipv4/ip_forward"    ${ECHO} 0 >/proc/sys/net/ipv4/ip_forward    /usr/bin/logger "wifi up: execute /opt/etc/init.d/S80squid stop"         /opt/etc/init.d/S80squid stop          fi See it working

So, let's see how it works. Enable WIFI and fire up the browser and see if it works. You should see your requests on the remote proxy.

If you added an ACL as mentioned earlier, a message like the following should appear if you enter the url of your favourite enemy vendor (the one we configured above):

If it doesn't work, check /var/log/messages and look for "squid"! /var/cache/squid/cache.log is also a good place to look for failures. Good luck!

This HOWTO can also be found on the webos-internals wiki.

9 }- O5 z' Y" [2 `7 G( h% b9 @

mycccc

靠
4 A! c5 W: a+ f6 n! ]$ bdiscuz这排版弄得
大家看原文

mycccc

SetupSquidTransparentProxy

Squid Transparent Proxy on Palm Pre
" E/ Z9 D5 Z- A& p+ Y8 G+ W& {+ Y5 C
% l$ b' P3 ?* b6 LOk, someone asked for it, so I figured it out, how to do it for fun and profit:
4 q+ C+ _6 H  L
6 i+ y: ?# O6 D# `1 U- uHide Preparation
: M) t* I  `, |
First, you need to have root access to your device. How to get root, is described here. It would be a good idea to know a little about linux and networking too. Be warned: this can make your networking unfunctional!

3 L' p. U1 V+ W; l8 s; M! pNext thing you need to do is to install the package Optware Advanced Linux Command Line Installer from Preware, which installs ipkg-opt!

# V" t# ]( Z# Y! k: }4 g$ O4 T↑ Jump Back A Section
Hide Installing Squid

% I" O7 F$ \. S. iLogin to the pre console and make your root disk writable:
9 E/ p1 o9 v8 Z1 l! _: j8 P
root@palm-webos-device: # cd / && mount -v -o remount,rw /
, U, ^/ q4 J( O* d3 F6 L5 V7 kType this command to install the squid optware package

0 S8 @* ]% Z8 o; Yroot@palm-webos-device: # ipkg-opt update
      ...
      root@palm-webos-device: # ipkg-opt install squid
7 E2 k. c+ p) K/ U1 V: U8 N7 w      Installing squid (2.6.21-2) to root...
0 b5 a% k0 d5 Z      Downloading http://ipkg.nslu2-linux.org/feed ... id_2.6.21-2_arm.ipk
. W# K% H, [5 }$ `3 A      Configuring squid
+ i5 v7 m6 C3 N/ X" p      create default cache and logs dir
      chown: unknown user/group nobody:nobody
! J1 C, K- v9 i! T, F      chown: unknown user/group nobody:nobody
# E' F3 T  @% B* D- `) ?      FATAL: Could not determine fully qualified hostname.Please set 'visible_hostname'
1 D  L8 r. O" ?" W      
      Squid Cache (Version 2.6.STABLE21): Terminated abnormally.
      CPU Usage: 0.020 seconds = 0.010 user + 0.010 sys
2 [/ b2 b# \& d, C! M      Maximum Resident Size: 0 KB
      Page faults with physical i/o: 0
      Segmentation fault
) Y" M- x+ H, a+ `# ]+ a2 I      
+ T$ h: v& Z/ ^      You should review the configuration file /opt/etc/squid/squid.conf,
      make any necessary change, and complete the install by running -
      /opt/etc/init.d/S80squid start
+ N$ k" [3 C8 N3 L' X$ w. e% Y      
* H2 a8 Z! T  {% [      Successfully terminated.
Ignore the errors for the moment, we'll get to it soon.
) h! l1 {- j  d; ^( a9 R5 ?* D) b
% ~# I, Q  N0 L↑ Jump Back A Section
2 B5 ]+ A/ T3 S$ O; ~& mHide Create a basic proxy config

Change to the directory /opt/etc/squid and move the file squid.conf which is already there to somewhere else. Now create a new squid.conf, which should have the following contents:

visible_hostname localhost
      http_port 3128 transparent                 
1 D5 H4 V2 Q7 `/ e" B: o7 @4 ]      hierarchy_stoplist cgi-bin ?               
* s' N8 ?& Z/ j% k! X      access_log /var/cache/squid/squid.log squid         
$ k6 o+ v: e& r" [8 a" T3 B      acl QUERY urlpath_regex cgi-bin \?                  
      cache deny QUERY
      
& S6 Z+ J8 ~6 F4 w      # replace the ip address with the address of your proxy
      # replace the port 3128 with the port of your proxy
      cache_peer 192.168.2.205 parent 3128 3130 default
- g0 e' ]( ~# I. {1 X" U      
/ k( p8 K1 r) H# D      # if your proxy requires authentication, use this:
; i( A. A' X4 B) V2 Q3 j# Y! a* C5 C  v4 S      # cache_peer 192.168.2.205 parent 3128 3130 default login USERNAME PASSWORD
! F1 J0 c2 j, e1 }" D/ T& O: {      
* ^' U+ f! }( B" L: Z      refresh_pattern ^ftp:           1440    20%     10080
      refresh_pattern ^gopher:        1440    0%      1440
9 }9 R* V- f/ v3 S      refresh_pattern .               0       20%     4320
      acl apache rep_header Server ^Apache               
      broken_vary_encoding allow apache   
      coredump_dir /var/cache/squid        
      cache_dir ufs /var/cache/squid 20 5 5
      access_log /var/cache/squid/squid.log
5 m6 d0 `! K  G9 Z. D( u! j5 a      cache_log /var/cache/squid/cache.log
" [, k. p: Z: Z1 ^) p& R9 G# B      cache_store_log /dev/null
& ~5 J* r" Y( z9 o5 s- y      
      acl all src 0.0.0.0/0.0.0.0
% X7 o- y  p# }  F5 I) x$ U# ~' r      acl manager proto cache_object
      acl localhost src 127.0.0.1/255.255.255.255
( z/ Z' I1 W" w0 ?. c% h/ s# u      acl to_localhost dst 127.0.0.0/8
7 Q9 }  z# h$ C, y# U0 E: t! I6 v      acl SSL_ports port 443
      acl Safe_ports port 80          # http
      acl Safe_ports port 21          # ftp
9 F9 m. c' d: d/ [& C' x      acl Safe_ports port 443         # https
+ P' P7 b' r. D; B3 u- }0 W      acl Safe_ports port 70          # gopher
      acl Safe_ports port 210         # wais
2 F1 R( f/ h2 ^      acl Safe_ports port 1025-65535  # unregistered ports
  u8 y! n( P# W) R# J      acl Safe_ports port 280         # http-mgmt
      acl Safe_ports port 488         # gss-http
      acl Safe_ports port 591         # filemaker
1 K4 ?+ N3 d5 k" J/ V$ v( D1 Y8 ~3 i      acl Safe_ports port 777         # multiling http
6 K4 \7 Q+ D7 R3 C      acl CONNECT method CONNECT
' A2 J/ z' T2 G+ a& s+ S' G$ @      http_access allow manager localhost
      http_access deny manager
7 J4 o6 t0 f4 X+ D* C' N$ L      http_access deny !Safe_ports
4 J$ @; l2 W$ V4 o! u$ E      http_access deny CONNECT !SSL_ports
$ E% A! D: \5 V7 t4 b' f# z( G7 w. _      # example for an ACL, uncomment and modify
' T4 @% X  d6 k. N* Q) c  i# {6 J      #acl enemy dstdomain www.apple.com
' D  y/ C3 L: W! @. J8 E1 H      #http_access deny enemy
      
' n1 S- S& ]& a. e$ b8 b  o8 Q      http_access allow all
      icp_access allow all
Basically this is a config for a transparent proxy, thus a browser will be redirected to it without knowing that it is actually connected to a proxy. We must configure it this way because the WebOS browser cannot be configured to use a proxy.
" `2 Q2 Y2 c. R! ?4 R
: R0 z. ~" `9 ~& P3 Z, NNote that we have added a single ACL here, which denies access to some random site *g*. Any other requests will be allowed. SSL (HTTPS) will not be passed through the proxy because this requires the browser to connect to it using a proxy request.

You WILL need to modify the squid.conf variable cache_peer, it points to your upstream proxy, e.g. your companys proxy. Refer to the comments for the syntax.
. F" G# W7 h, b; V  h) u6 t1 r
" O, a$ U& t7 s' b5 z% W↑ Jump Back A Section
Hide Prepare the directories for squid

6 `) Z8 _, k. L/ PSquid needs a directory where to store it's files, as content it caches and logfiles. You may consider to disable caching and logging. But caching may be a good idea if your traffic is limited, so you'll save some. Logging is always usefull for debugging. If you want to turn it off, use /dev/null as target for the logfiles.

mkdir /var/cache/squid
      chown nobody /var/cache/squid
, h3 O  o. v7 R& YNext you need let squid to prepare the directory structure using the -z option:
$ L2 b9 z2 D7 C$ p
root@palm-webos-device: # squid -z -f squid.conf
: O5 S! _/ _0 A. E      2009/11/26 23:19:29| Creating Swap Directories
3 O  c& V0 n! ~# g9 e: i9 |; ^4 }( rYou should not see any errors here!
$ k/ z) F/ o, ~) W
↑ Jump Back A Section
) c; E: O# I2 q2 ^$ oHide Starting squid
& i0 o# ^5 P$ O0 g/ f1 G) J8 A
The installer already added it to the startup daemons, now we will start it manually:
( L$ L! J0 m; @7 N
/opt/etc/init.d/S80squid start
3 ?/ z5 X+ K/ j8 O( cLook in /var/cache/squid/cache.log for any errors. Use ps to see if it really runs. You may consider to install lynx and test the proxy:

ipkg-opt install lynx
      export http_proxy=http://localhost:3128
! e1 _8 _) [7 [* n: i$ u      lynx www.google.com
4 m5 w; T) C& `6 M; Y2 C4 p2 jIf you see a google textmode site, it works.

# N$ U5 K  }0 `4 y! [/ v9 \Turn it off if everything is ok:

! l& r& V3 ?8 a& U6 {8 o/opt/etc/init.d/S80squid stop
5 {+ I' M4 X  I7 m↑ Jump Back A Section
Hide Add the rules to the squid startup file
0 d0 F  {4 t: ]  _0 a3 [9 ?) Q8 J
/ r3 A9 w' s2 k# ONow comes the ugly part. I'll not explain it in detail: we install some iptable Rules. We tell iptables to forward any traffic destined to tcp port 80 to localhost port 3128 (this is where squid listens for incoming connections). To avoid that the requests of the proxy itself are forwarded to localhost (which would create a loop), we add a rule telling iptables to not forward web traffic if it were generated by user nobody (the user squid runs as).
, R$ B" K2 L3 x/ J+ _
To do that, edit /opt/etc/init.d/S80squid so that it looks like this:

#! /bin/sh
! r$ ^. `5 f. P6 v# P9 v8 |      
      case "$1" in
) I& F" D. r" m          start)
  h2 B4 `4 Y" y. \              echo -n "Starting proxy server: "
7 [: y) {! S  [6 @              if [ -n "`pidof quotacheck`" ]; then
9 s( D  D5 M) r. v7 {$ A" W                 #you don't need it if you don't have quota check enable.
9 U6 \) F- R3 X+ s$ S                 echo "Starting squid-cache server after delay for few mins:"
* Z7 ?: ^7 @9 p                 /opt/etc/squid/squid.delay-start.sh&
1 [; f& ]  U& W* `: K              else
# S1 k4 ^" s- R& l                 /opt/sbin/squid -f /opt/etc/squid/squid.conf
, d- c# m0 g6 B. m1 z' u0 n                 iptables -t nat -A OUTPUT -p tcp --dport 80 -m owner --gid-owner 65534 -j ACCEPT
' P* t+ N& C( |; f: s. r2 b1 `                 iptables -t nat -A OUTPUT -p tcp --dport 80 -j DNAT --to-destination 127.0.0.1:3128
! ]! m% z! n( ?% c; K' `" ?                 echo "done."
              fi
* H& E6 w  r( [% v6 P              echo "done."
+ \# o$ x1 g7 N  i1 p1 b              ;;
  q3 M/ p9 v, ]% Q8 q5 |          stop)
              echo -n "Stopping proxy server: "
# y; x5 }/ E  W- z              /opt/sbin/squid -f /opt/etc/squid/squid.conf -k shutdown
7 w: K8 }' Y) \  p              iptables -t nat -D OUTPUT -p tcp --dport 80 -m owner --gid-owner 65534 -j ACCEPT
              iptables -t nat -D OUTPUT -p tcp --dport 80 -j DNAT --to-destination 127.0.0.1:3128
              echo "done."
              ;;
          reload|force-reload)
( B' ~2 C4 L+ U6 z/ x& C              echo -n "Reloading proxy server configuration files: "
2 _- Q$ o& W1 y+ {  q. N3 z2 T              /opt/sbin/squid -f /opt/etc/squid/squid.conf -k reconfigure
              echo "done."
              ;;
          restart)
* j! J& H$ W1 V% Z+ J6 e              echo -n "Restarting proxy server: "
              /opt/sbin/squid -f /opt/etc/squid/squid.conf -k shutdown
1 g, D6 `  j  W. u              sleep 2
4 C8 i! ~( C8 G) H8 t( n              /opt/sbin/squid -f /opt/etc/squid/squid.conf
6 u  W9 {5 y  ~# x) j0 R              echo "done."
! M  ?2 E; A6 R' c2 N, f* @) G              ;;
0 q% W: _3 n4 n. Z& a, j- P          *)
              echo "Usage: /opt/etc/init.d/S80squid {start|stop|reload|force-reload|restart}"
              exit 1
              ;;
& K4 ^! T: {6 _/ s      esac
5 c% E& N, w( @! H# ?" Y" }" U↑ Jump Back A Section
Hide Configure network to startup squid if WIFI comes up

Now we need to alter the behavior of the palm network manager so that it starts squid if WIFI comes up and stops it when WIFI goes down.
6 Q) P$ z! D1 D, {; r: n9 i
Change to directory /etc/pmnetconfig/.
9 X0 u+ v% n6 F/ P
# L, f* Z# F. s2 ]# \  N2 P* HIn the file if-up modify this part:

+ W  x7 F1 e4 |0 n- M$ w if [ "$ISPPP" -ne 4 ] && [ "$ISRMNET" -ne 6 ] && [ "$ISTUN" -ne 4 ] && [ "$ISCSCOTUNVPN" -ne 8 ]; then
          NetCfgSetAddr
          CMSERVICES=$((${CMSERVICES} | ${CMSVCINTERNET}))
" A  I. o. S4 [0 Y$ a: r, D3 N       fi
to

if [ "$ISPPP" -ne 4 ] && [ "$ISRMNET" -ne 6 ] && [ "$ISTUN" -ne 4 ] && [ "$ISCSCOTUNVPN" -ne 8 ]; then
& x9 F2 [4 A+ \8 M' l) `          NetCfgSetAddr
          CMSERVICES=$((${CMSERVICES} | ${CMSVCINTERNET}))
; V) S: r6 {: B) o          /usr/bin/logger "wifi up: execute /opt/etc/init.d/S80squid start"
, C. s; W( V% X7 l: r# ]1 p          /opt/etc/init.d/S80squid start
$ r+ _0 M; y. B9 J7 q, f6 C& s5 Y       fi
7 K+ Y; m6 d# ]In the file if-down modify this part:

if [ ${CMINTERFACE} = ${CMBTINTERFACENAME} ] || [ ${CMINTERFACE} = ${CMBRINTERFACENAME} ]; then
          ${LOG} "${IPTABLES} -t nat -D POSTROUTING -s  $CMNETADDR/$CMPREFIXLEN -j MASQUERADE"
. F3 W8 Y: G6 L) B3 t2 r          ${IPTABLES} -t nat -D POSTROUTING -s $CMNETADDR/$CMPREFIXLEN -j MASQUERADE
. Z( O+ y3 V' t" Q+ K' b          ${LOG} "${ECHO} 0 >/proc/sys/net/ipv4/ip_forward"
8 w: c! y! H7 t- |' D5 u$ p9 d4 A          ${ECHO} 0 >/proc/sys/net/ipv4/ip_forward
3 Q4 \: ~2 ?, A/ Z: @) O  G       fi
to:
* J$ H* k) W* q: o, S
/ ^& S2 q' I; ]) N: V if [ ${CMINTERFACE} = ${CMBTINTERFACENAME} ] || [ ${CMINTERFACE} = ${CMBRINTERFACENAME} ]; then
% [, @3 w  L* [8 ?# r- o/ J          ${LOG} "${IPTABLES} -t nat -D POSTROUTING -s  $CMNETADDR/$CMPREFIXLEN -j MASQUERADE"
          ${IPTABLES} -t nat -D POSTROUTING -s $CMNETADDR/$CMPREFIXLEN -j MASQUERADE
" N& ~3 X' F8 C! X. `          ${LOG} "${ECHO} 0 >/proc/sys/net/ipv4/ip_forward"
          ${ECHO} 0 >/proc/sys/net/ipv4/ip_forward
  m& y7 |$ p, v, z          /usr/bin/logger "wifi up: execute /opt/etc/init.d/S80squid stop"     
" u: R8 C- F2 A, b0 j% U; t* v' z$ m# ^          /opt/etc/init.d/S80squid stop         
       fi
* _6 ]" `, m1 @' k( S/ e1 r↑ Jump Back A Section
Hide Make your root disk read-only again
* X5 O9 E  q( F: b- O. M
5 L  k/ y+ n# jroot@palm-webos-device: # cd / && mount -v -o remount,ro /
↑ Jump Back A Section
Hide See it working
$ x" h  c9 D. K: ?/ \' d8 q
  B, o& x6 B/ G, F2 oSo, let's see how it works. Enable WIFI and fire up the browser and see if it works. You should see your requests on the remote proxy.

9 F" B, b) G  q7 R* `+ KIf you added an ACL as mentioned earlier, a message like the following should appear if you enter the url of your favourite enemy vendor (the one we configured above):



↑ Jump Back A Section
Hide Blocking Adverts
; Z8 I% R! n. A
Now squid is set up, we can use it for ad blocking. There are two steps to this:
4 S! {( I) {% ]) T
Obtain a block list

! m$ l% R! F! W6 m/ FAn excellent ad block list is maintained at http://pgl.yoyo.org/as/. We need to download it in a suitable format for squid, which can be done by running the following command:
, w& T, M( X0 O) v& \- d
wget -q -O/opt/etc/squid/blocklist 'http://pgl.yoyo.org/as/serverlist.php?hostformat=squid-dstdom-regex;showintro=0&nohtml=true&mimetype=plaintext > /opt/etc/squid/blocklist
(Technical details: the wget command downloads the URL given in single quotes, then we strip the HTML mark-up and blank lines using grep. The filename at the end is where the black list will be stored.)

" K: \) M! S5 X: uConfigure squid to use the block list

Now we need to tell squid to block the list of URLs in the file we've just created. Open the /opt/etc/squid/squid.conf file we created above, and scroll down to where it reads:
" y5 o, @4 n) L& K
! Q: x& }  a& Yacl enemy dstdomain www.apple.com
Replace this line with:

acl enemy dstdom_regex "/opt/etc/squid/blocklist"
Finally, restart squid:
& B( S; K+ C2 j( ]% ]: ~
/opt/etc/init.d/S80squid restart
To test it's working, open a browser and try to visit ads.msn.com (one of the blocked URLs). The error given should be similar to the screenshot given above.

If in the future you need to update the ad blocking list, run the commands:

  h, f- g' k! D9 ?" |( Dcd / && mount -v -o remount,rw /
2 F7 W; N8 D2 g) D( N( I" ?7 w      wget -q -O - 'http://pgl.yoyo.org/as/serverlist.php?hostformat=squid-dstdom-regex;showintro=0'  | grep -v ">" | grep "." > /opt/etc/squid/blocklist
      /opt/etc/init.d/S80squid restart
1 P7 b% z. H( y8 H- M2 ?. h6 NFor further details of filtering URLs using squid, please refer to the excelent documentation of the squid cache project.

睡务干部

英文还给老师了  求大神  直接出方法
% X' Q6 J# H0 ~/ m4 V/ r

signning

这里有跟详细参数 看下http://bbs.gfan.com/?fromuid=179411

mycccc

5楼骗链接

laris

如果有td的模块就好了
0 y( h( K+ O, p- J1 k9 ?; e

choujiangang

我现在在用prejvm+UC+qq,可以上网

suede77

这个教程有点难度~~~可以写的详细一些吗，就是把每一步做什么，需要安装什么，怎么设置仔细写出来，求大神给个图文并茂的帖子，相信cmwap包月吧不限流量的同学回顶礼膜拜的！

choujiangang

是啊，希望有哪位大大可以把步骤简化一下，期待cmwap可以用啊
: X( C, x. O& I* l8 M& D

mayday1234

这完全是跑了个linux小程序