A wrapper for force_bind that allows programs compatible with ld_preload to be restricted to the cjdns ipv6 address on a given cjdns tun device when run.
- cjdns: https://github.com/cjdelisle/cjdns
- force_bind: http://kernel.embedromix.ro/us/
- Copy
cjdnsify.conf
to/etc/default/cjdnsify
. - Open
/etc/default/cjdnsify
and edit the variables to match the location offorce_bind.so
and name of your cjdns tun device on your system. - If cjdroute is running, you can now run cjdnsify with a command and its options as arguments.
- Note: Test each program to make sure it's been successfully restricted before using.
cjdnsify lynx [fc13:6176:aaca:8c7f:9f55:924f:26b3:4b14]:82
cjdnsify wget http://[fc13:6176:aaca:8c7f:9f55:924f:26b3:4b14]:82/testdownload.txt
The lists below are a small sample of programs I've tested and the results I got. That said, other versions of the same program might have different results, and it seems possible that build flags and patches used by different distributions might have an affect on the results as well (I tested using packages build by Arch Linux).
- chromium v35.0.1916.153
- curl v7.37.0
- firefox v30.0
- hexchat v2.10.0
- links v2.8
- lynx v2.8.8
- wget v1.15
- host (from dnsutils 9.9.2.P2)
- ping (from iputils v20121221)
Written by Kevin MacMartin: GitHub Projects | Arch Linux AUR Packages
This script is open source and licensed under the GPLv3.