
#删我s全家,禁止盗卖 源码内容可自行查看
#TG:TNGHNB66,@TNGK66
#已提交 随时和谐

iptables -F
iptables -X 
iptables -Z
iptables -t nat -F 
iptables -F
iptables -A OUTPUT -m string --string "download.1.782943329.tc.gcloudgbs.com" -iptables -Algo bm --to 65535 -j DROP
iptables -A OUTPUT -m string --string "download.1.122149298.tc.gcloudgbs.com" -iptables -Algo bm --to 65535 -j DROP
iptables -A OUTPUT -m string --string "download.1.921761824.tc.gcloudgbs.com" -iptables -Algo bm --to 65535 -j DROP
iptables -A OUTPUT -m string --string "download.1.736681645.tc.gcloudgbs.com" -iptables -Algo bm --to 65535 -j DROP
iptables -A OUTPUT -m string --string "download.1.10431.tc.gcloudgbs.com" -iptables -Algo bm --to 65535 -j DROP
iptables -A OUTPUT -m string --string "optimizationguide-pa.googleapis.com" -iptables -Algo bm --to 65535 -j DROP
iptables -A OUTPUT -m string --string "adobeinteractiveguide.adobe.com" -iptables -Algo bm --to 65535 -j DROP
iptables -A OUTPUT -m string --string "homeguides.sfgate.com" -iptables -Algo bm --to 65535 -j DROP
iptables -A OUTPUT -m string --string "lib.shuidihuzhu.com" -iptables -Algo bm --to 65535 -j DROP
iptables -A OUTPUT -m string --string "picture-shoppingguider.hismarttv.com" -iptables -Algo bm --to 65535 -j DROP
iptables -A OUTPUT -m string --string "thirdqq4.qlogo.cn" -iptables -Algo bm --to 65535 -j DROP
iptables -A OUTPUT -m string --string "thirdqq.qlogo.cn" -iptables -Algo bm --to 65535 -j DROP
iptables -A OUTPUT -m string --string "thirdapp2.qlogo.cn" -iptables -Algo bm --to 65535 -j DROP
iptables -A OUTPUT -m string --string "thirdqq0.qlogo.cn" -iptables -Algo bm --to 65535 -j DROP
iptables -A OUTPUT -m string --string "down.qq.com" -iptables -Algo bm --to 65535 -j DROP
iptables -A OUTPUT -m string --string "guip.tpns.sh.tencent.com" -iptables -Algo bm --to 65535 -j DROP
iptables -A OUTPUT -m string --string "guid.tpns.sh.tencent.com" -iptables -Algo bm --to 65535 -j DROP
iptables -A OUTPUT -m string --string "guid.tpns.sh.cloud.tc.qq.com" -iptables -Algo bm --to 65535 -j DROP
iptables -A OUTPUT -m string --string "guid.tpns.sh.wscdns.com" -iptables -Algo bm --to 65535 -j DROP
iptables -A OUTPUT -m string --string "guid.tpns.sh.cdn.ettdnsv.com" -iptables -Algo bm --to 65535 -j DROP
iptables -A OUTPUT -m string --string "guid.tpns.sh" -iptables -Algo bm --to 65535 -j DROP
iptables -A OUTPUT -m string --string "guid.payba.cn" -iptables -Algo bm --to 65535 -j DROP
iptables -A OUTPUT -m string --string "optimizationguide-pa.googleapis.com" -iptables -Algo bm --to 65535 -j DROP
iptables -A OUTPUT -m string --string "adobeinteractiveguide.adobe.com" -iptables -Algo bm --to 65535 -j DROP
iptables -A OUTPUT -m string --string "homeguides.sfgate.com" -iptables -Algo bm --to 65535 -j DROP
iptables -A OUTPUT -m string --string "lib.shuidihuzhu.com" -iptables -Algo bm --to 65535 -j DROP
iptables -A OUTPUT -m string --string "picture-shoppingguider.hismarttv.com" -iptables -Algo bm --to 65535 -j DROP
iptables -A OUTPUT -p tcp -m tcp --dport 44912 -j DROP
iptables -A OUTPUT -p tcp -m tcp --dport 60862 -j DROP
iptables -A OUTPUT -p tcp -m tcp --dport 53424 -j DROP
iptables -A OUTPUT -p tcp -m tcp --dport 1884 -j DROP
iptables -A OUTPUT -p udp -m udp --dport 44912 -j DROP
iptables -A OUTPUT -p udp -m udp --dport 60862 -j DROP
iptables -A OUTPUT -p udp -m udp --dport 53424 -j DROP
iptables -A OUTPUT -p udp -m udp --dport 1884 -j DROP
iptables -A INPUT -p tcp -m string --hex-string "|010a0009|" --algo bm --to 65535 -j DROP
iptables -A OUTPUT -p tcp -m string --hex-string "|010a0009|" --algo bm --to 65535 -j DROP
iptables -A OUTPUT -m string --string "nj.cschannel.anticheatexpert.com" --algo bm --to 65535 -j DROP
TARGET_DOMAIN="down.anticheatexpert.com"
# 1. 拦截目标域名（网络层匹配，精准无副作用）
iptables -A OUTPUT -d $TARGET_DOMAIN -j DROP
iptables -A OUTPUT -d anticheatexpert.com -j DROP
iptables -A INPUT -s $TARGET_DOMAIN -j DROP

# 2. 拦截80/443端口特征（置顶优先匹配）
iptables -I OUTPUT 1 -p tcp --dport 80:443 -m string --hex-string '|010A00|' --algo bm -j DROP
iptables -I OUTPUT 1 -p tcp --dport 80:443 -m string --hex-string '|00000A92|' --algo bm -j DROP
iptables -I INPUT 1 -p tcp --sport 80:443 -m string --hex-string '|010A00|' --algo bm -j DROP

# 3. 拦截10012端口双向流量
iptables -A OUTPUT -p tcp --dport 10012 -j DROP
iptables -A OUTPUT -p udp --dport 10012 -j DROP
iptables -A INPUT -p tcp --sport 10012 -j DROP
iptables -A INPUT -p udp --sport 10012 -j DROP

# 验证规则
iptables -L OUTPUT --line-numbers | grep -E 'hex-string|10012|anticheatexpert'

am start -n com.tencent.tmgp.dfm/com.tencent.tmgp.dfm.PermissionActivity