github/wangyu-udp2raw
1
0
Fork 0
mirror of https://github.com/wangyu-/udp2raw.git synced 2025-02-08 16:19:35 +08:00
Code Issues Packages Projects Releases Wiki Activity

Created run udp2raw with non root account (markdown)

wangyu- 2017-12-14 08:39:07 -08:00
parent 5e11154498
commit 50148df1a8
1 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
run-udp2raw-with-non-root-account.md Normal file

@ -0,0 +1,16 @@
It's not security secure to run udp2raw with root. This page demonstrates how to run udp2raw as a non-root account.
You must have `setcap` as a prerequisite. `setcap` is shipped with most desktop linux distributions by defualt. But its seems to be missing on OpenWRT/LEDE.
```
sudo setcap cap_net_raw+ep udp2raw_amd64
./udp2raw_amd64 -s -l0.0.0.0:4096 -r 127.0.0.1:7777 -k "passwd" --raw-mode faketcp -g #use -g option instead of -a, then udp2raw will generate a iptables rule for you
sudo iptables -I INPUT -p tcp -m tcp --dport 4096 -j DROP # add the generated iptables rule manually
./udp2raw_amd64 -s -l0.0.0.0:4096 -r 127.0.0.1:7777 -k "passwd" --raw-mode faketcp #then run udp2raw without -g option
```
It works for both client and server.