#gost一键脚本
wget --no-check-certificate -O gost.sh https://raw.githubusercontent.com/KANIKIG/Multi-EasyGost/master/gost.sh && chmod +x gost.sh && ./gost.sh
#gost一键脚本命令
./gost.sh

#gost手动命令(转发机)
gost -L tcp://:(转发机端口) -F relay+ws://(落地机ip):(落地机端口)
#gost手动命令(落地机)
gost -L tcp://:(落地机端口) -F relay+ws://127.0.0.1:(代理端口)

#gost搭建ss
#服务端
gost -L=ss+ws://aes-256-gcm:密码@:端口
nohup gost -L=ss+ws://aes-256-gcm:密码@:端口 > /dev/null 2>&1 &    #后台运行
#客户端
gost -L=:代理端口 -F=ss+ws://aes-256-gcm:密码@服务端ip:服务端端口

#gost内网穿透
#公网机
gost -L socks5+ws://:接收端口
#内网机
gost -L rtcp://:公网映射端口/:内网端口 -F socks5+ws://公网ip:接收端口

#关闭iptables
systemctl stop iptables
systemctl disable iptables

#安装firewalld
yum install firewalld
#apt-get install firewalld
systemctl start  firewalld
systemctl enable firewalld.service
systemctl status firewalld

#启动端口转发
echo 1 > /proc/sys/net/ipv4/ip_forward
sysctl -p
reboot

#修改配置文件
vim /etc/firewalld/zones/public.xml

<?xml version="1.0" encoding="utf-8"?>
<zone>
  <short>Public</short>
  <description>For use in public areas. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.</description>
  <service name="ssh"/>
  <service name="dhcpv6-client"/>
  <port protocol="tcp" port="10-65000"/>
  <port protocol="udp" port="10-65000"/>
  <masquerade/>
  <forward-port to-addr="转发ip" to-port="转发端口" protocol="tcp" port="本机端口"/>
  <forward-port to-addr="转发ip" to-port="转发端口" protocol="udp" port="本机端口"/>
</zone>

systemctl restart firewalld.service