killswitch/killswitch.example.json at master · asciimoth/killswitch · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
{
  "interface_types": [
    "device"
  ],
  "interface_names": [
    "eth0",
    "wlan0"
  ],
  "interface_regexps": [
    "^(en|wl|ww)"
  ],
  "ignored_interface_types": [
    "bridge"
  ],
  "ignored_interface_names": [
    "docker0"
  ],
  "ignored_interface_regexps": [
    "^(veth|br-)"
  ],
  "admin_api": {
    "socket_path": "/run/killswitch/admin.sock",
    "debug": true,
    "auth": {
      "groupnames": [
        "killswitch",
        "wheel"
      ]
    }
  },
  "socks_proxy": {
    "enabled": true,
    "port": 1080,
    "fwmark": "0xeb9f0001",
    "dns_server": "8.8.8.8",
    "protected": {
      "uids": [
        0, 1000
      ],
      "usernames": [
        "root", "moth"
      ]
    }
  },
  "rulesets": {
    "wireguard-up": {
      "disabled": false,
      "match": "or",
      "trigger": {
        "interface_names": [
          "wg0"
        ],
        "ip_addrs": [
          "10.64.0.2"
        ],
        "ssids": [
          "Office WiFi"
        ],
        "bssids": [
          "aa:bb:cc:dd:ee:ff"
        ],
        "gateway_macs": [
          "00:11:22:33:44:55"
        ]
      },
      "enable_v4": true,
      "enable_v6": true,
      "allowed_ports": [
        "udp/53"
      ],
      "allowed_v4_hosts": [
        "10.64.0.1"
      ]
    }
  },
  "allow_all": false,
  "enable_v4": true,
  "enable_v6": true,
  "allowed_marks": [
    "0xeb9f0001",
    "0x42",
    "100"
  ],
  "allowed_ports": [],
  "allowed_v4_hosts": [
    "198.51.100.10",
    "203.0.113.20"
  ],
  "allowed_v6_hosts": [
    "2001:db8::10",
    "2001:db8::20"
  ],
  "allowed_v4_hostports": [
    "tcp/198.51.100.10:443",
    "udp/203.0.113.20:51820"
  ],
  "allowed_v6_hostports": [
    "tcp/[2001:db8::10]:443",
    "udp/[2001:db8::20]:51820"
  ]
}