海运的博客

telnet账号：root密码：Zte521
通过telnet登录输入以下命令查看：

sendcmd 1 DB p DevAuthInfo
#sendcmd 1 DB p UserInfo

超级用户登录地址：http://192.168.1.1/cu.html
Openwrt路由下访问光猫web：https://www.haiyun.me/archives/openwrt-modem-web.html

通过dnspod api实现动态ddns更新ip，ipv4和ipv6支持，shell脚本如下：

#!/bin/bash
token="www.haiyun.me"
domain="haiyun.me"
if which jq > /dev/null; then
  json="jq"
elif which jsonfilter > /dev/null; then
  json="jsonfilter"
else
  echo 'please install jq or jsonfilter'
  exit
fi
if ! which curl > /dev/null || ! which curl > /dev/null; then
  echo 'please install curl and grep'
  exit
fi
if [[ $1 == "list" ]]; then
  curl -s -d "login_token=$token&format=json&domain=$domain" "https://dnsapi.cn/Record.List" | jq -r -M '.records[]|.name + "\t\t " + .type + "\t\t " + .value'
  exit
fi
if [[ $1 == "delete" ]]; then
  if [[ ! $3 || ! $2 ]]; then
    echo 'use ddns.sh delete name type'
    exit
  fi
  id=$(curl -s -d "login_token=$token&format=json&domain=$domain" "https://dnsapi.cn/Record.List" | jq -r -e ".records | .[] | select(.name == \"$2\" and .type == \"${3^^}\")|.id")
  if [[ $id ]]; then
    if curl -s -d "login_token=$token&format=json&domain=$domain&record_id=$id" https://dnsapi.cn/Record.Remove | grep -q '"code":"1"'; then
      echo "sus"
    fi
  else
    echo 'no record'
  fi
  exit
fi
if [[ ! $1 || ! $2 ]]; then
  echo 'use ddns.sh name ip'
  echo 'use ddns.sh list'
  echo 'use ddns.sh delete name type'
  exit
fi
name=$1
new_ip=$2
if [[ $new_ip =~ ^[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}$ ]]; then
  #sleep 10
  #curl http://192.168.168.6/announce.php --silent --output /dev/null
  record_type='A'
  echo 'ipv4'
elif [[ $new_ip =~ ^([0-9a-fA-F]{0,4}:){1,7}[0-9a-fA-F]{0,4}$ ]]; then
  echo 'ipv6'
  record_type='AAAA'
else
  echo "invalid IP address $new_ip"
  #logger -t ddns "invalid IP address $new_ip"
  exit
fi
curl -s -d "login_token=$token&format=json&domain=$domain" "https://dnsapi.cn/Record.List" -o /tmp/dns.txt
if ! grep -q '"code":"1"' /tmp/dns.txt; then
  echo 'get record list error'
  exit
fi

if [[ $record_type == "AAAA" ]]; then
  if [[ $json == "jq" ]]; then
    id=$(jq -r -e ".records | .[] | select(.name == \"$name\" and .type == \"AAAA\")|.id" /tmp/dns.txt)
    ip=$(jq -r -e ".records | .[] | select(.name == \"$name\" and .type == \"AAAA\")|.value" /tmp/dns.txt)
  else
    ip=$(jsonfilter -i /tmp/dns.txt -e "@.records[@.name='$name'&&@.type='AAAA'].value")
    id=$(jsonfilter -i /tmp/dns.txt -e "@.records[@.name='$name'&&@.type='AAAA'].id")
  fi
elif [[ $record_type == "A" ]]; then
  if [[ $json == "jq" ]]; then
    id=$(jq -r -e ".records | .[] | select(.name == \"$name\" and .type == \"A\")|.id" /tmp/dns.txt)
    ip=$(jq -r -e ".records | .[] | select(.name == \"$name\" and .type == \"A\")|.value" /tmp/dns.txt)
  else
    ip=$(jsonfilter -i /tmp/dns.txt -e "@.records[@.name='$name'&&@.type='A'].value")
    id=$(jsonfilter -i /tmp/dns.txt -e "@.records[@.name='$name'&&@.type='A'].id")
  fi
fi
#echo $name;
#echo $id;
#echo $ip;
#echo $new_ip;
if [[ $ip == $new_ip ]]; then
  echo 'no update needed'
  exit
fi
if [[ $id ]]; then
  echo "mod ip"
  if curl -s -d "login_token=$token&format=json&domain=$domain&record_id=$id&value=$new_ip&record_type=$record_type&record_line_id=0&sub_domain=$name" https://dnsapi.cn/Record.Modify | grep -q '"code":"1"'; then
    echo "sus"
  fi
else
  echo "add ip"
  if curl -s -d "login_token=$token&format=json&domain=$domain&sub_domain=$name&record_type=$record_type&record_line_id=0&value=$new_ip" https://dnsapi.cn/Record.Create | grep -q '"code":"1"'; then
    echo "sus"
  fi
fi

在/lib/netifd/ppp-up文件内调用上面的脚本，当pppoe网络连接成功时会执行此文件，$4变量为pppoe连接的本地IP。

/usr/bin/update-ip.sh name $4 > /dev/null 2>&1 &

pppoe只能传递公网ipv4，使用ifstatus可获取pppoe接口ipv6地址和分配内网的ipv6前缀，根据mac生成的ipv6后缀可为内网其它机器做ddns。

ifstatus wan_6
ifstatus wan
ubus call network.interface dump
jsonfilter -i /tmp/wan6.txt -e '@["ipv6-prefix"][0].address'
jsonfilter -i /tmp/wan6.txt -e '@["ipv6-address"][0].address' 

PHP版本：
https://www.haiyun.me/archives/1186.html

安装：

apt install php7.2-dev libleveldb-dev
git clone https://github.com/reeze/php-leveldb.git
cd php-leveldb/
phpize
./configure 
#arm64
#./configure --with-leveldb=/usr/lib/aarch64-linux-gnu/ 
make && make install
echo 'extension=leveldb.so' > /etc/php/7.2/cli/conf.d/40-leveldb.ini

查看是否加载：

php -m|grep leveldb

将所有的ipv6地址设置为private-address，这样unbound转发域名有ipv6结果时不返回给查询的客户端。
如果对单独的域名进行过滤新建一个server实例，然后forward-zone转发特定域名到过滤ipv6的端口。

server:
 port: 5350
 do-ip4: yes
 do-ip6: no 
 private-address: ::/0
 interface: 0.0.0.0
 access-control: 127.0.0.0/8 allow
 access-control: 192.168.0.0/16 allow
 msg-cache-size: 4m
 rrset-cache-size: 4m
 cache-max-ttl: 3600
 cache-min-ttl: 300
 hide-identity: yes
 hide-version: yes
 prefetch: yes
 num-threads: 4
 do-not-query-localhost: no
#minimal-responses: yes
#qname-minimisation: yes
#tcp-upstream: yes
#verbosity: 1
#logfile: "/var/log/unbound.log"

forward-zone:
  name: "."
  forward-addr: 114.114.114.114

prefetch当查询时且缓存离过期时间还有10%时预请求并更新dns缓存，如果期间无查询请求不更新。
参考：
https://lost-and-found-narihiro.blogspot.com/2011/10/unbound-prefetch.html
https://nlnetlabs.nl/pipermail/unbound-users/2018-January/010444.html
https://calomel.org/unbound_dns.html
https://nlnetlabs.nl/documentation/unbound/unbound.conf/
https://www.nlnetlabs.nl/svn/unbound/trunk/doc/example.conf.in

类似于linux下设置ipv4优先，将::ffff:0:0/96的优先级调高即可。
查看优先级顺序：

netsh interface ipv6 show prefixpolicies

修改优先级：

netsh interface ipv6 set prefixpolicy ::ffff:0:0/96 100 4

查看修改后的优先级：

更新：此方法有问题，重启电脑后ipv6优先级不正常，暂不使用。
参考：
http://blog.ilc.edu.tw/blog/index.php?op=printView&articleId=622435&blogId=25793