secubox-openwrt/package/secubox/secubox-app-tor/files/etc/config/tor-shield
CyberMind-FR e364595b16 feat(ai-insights,tor-shield): KISS cyberpunk theme and domain exclusions
AI Insights Dashboard:
- Rewrite CSS with KISS cyberpunk theme (dark bg, neon accents, glowing effects)
- Fix CVE feed RPCD for OpenWrt/BusyBox compatibility (date format, JSON building)
- Add wget fallback for CVE fetch

Tor Shield:
- Add excluded_domains support for bypassing Tor routing
- Resolve domains via nslookup and add to iptables RETURN rules
- Default exclusions: openwrt.org, downloads.openwrt.org, services.nvd.nist.gov

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-12 10:00:38 +01:00

66 lines
1.5 KiB
Plaintext

# SecuBox Tor Shield configuration
# /etc/config/tor-shield
config tor-shield 'main'
option enabled '0'
option mode 'transparent'
option dns_over_tor '1'
option kill_switch '1'
option auto_bridges '0'
config preset 'anonymous'
option name 'Full Anonymity'
option icon 'shield'
option mode 'transparent'
option dns_over_tor '1'
option kill_switch '1'
config preset 'selective'
option name 'Selective Apps'
option icon 'target'
option mode 'socks'
option dns_over_tor '0'
option kill_switch '0'
config preset 'censored'
option name 'Bypass Censorship'
option icon 'unlock'
option mode 'transparent'
option use_bridges '1'
option dns_over_tor '1'
config preset 'server'
option name 'Server Mode'
option icon 'server'
option mode 'transparent'
option dns_over_tor '1'
option kill_switch '1'
option lan_proxy '1'
option wan_input_allow '1'
config proxy 'socks'
option port '9050'
option address '127.0.0.1'
config transparent 'trans'
option port '9040'
option dns_port '9053'
option lan_proxy '0'
list excluded_ips '192.168.0.0/16'
list excluded_ips '10.0.0.0/8'
list excluded_ips '172.16.0.0/12'
list excluded_ips '127.0.0.0/8'
# Domains excluded from Tor routing (for opkg, NTP, etc)
list excluded_domains 'downloads.openwrt.org'
list excluded_domains 'openwrt.org'
list excluded_domains 'services.nvd.nist.gov'
config bridges 'bridges'
option enabled '0'
option type 'obfs4'
config security 'security'
option exit_nodes ''
option exclude_exit_nodes ''
option strict_nodes '0'