clean-clash-tun.sh

#!/bin/bash

exec 1> /dev/null
exec 2> /dev/null

ip link set dev "$PROXY_TUN_DEVICE_NAME" down
ip tuntap del "$PROXY_TUN_DEVICE_NAME" mode tun

ip route del default dev "$PROXY_TUN_DEVICE_NAME" table "$PROXY_ROUTE_TABLE"
ip rule del fwmark "$PROXY_FWMARK" lookup "$PROXY_ROUTE_TABLE"

iptables -t mangle -D OUTPUT -j CLASH
iptables -t nat -D OUTPUT -p udp --dport 53 -j CLASH_DNS

if [ $ENABLE_PREROUTING = 1 ];then
  iptables -t mangle -D PREROUTING -m set ! --match-set localnetwork dst -j MARK --set-mark "$PROXY_FWMARK"
  iptables -t nat -D PREROUTING -p udp --dport 53 -j REDIRECT --to-ports "$PROXY_DNS_PORT"
fi

iptables -t mangle -F CLASH
iptables -t mangle -X CLASH

iptables -t nat -F CLASH_DNS
iptables -t nat -X CLASH_DNS

ipset destroy localnetwork

if [ $ENABLE_IPv6 = 1 ];then
  ip -6 route del default dev "$PROXY_TUN_DEVICE_NAME" table "$PROXY_ROUTE_TABLE"
  ip -6 rule del fwmark "$PROXY_FWMARK" lookup "$PROXY_ROUTE_TABLE"

  ip6tables -t mangle -D OUTPUT -j CLASH6
  ip6tables -t nat -D OUTPUT -p udp --dport 53 -j CLASH_DNS6

  if [ $ENABLE_PREROUTING = 1 ];then
    ip6tables -t mangle -D PREROUTING -m set ! --match-set localnetwork6 dst -j MARK --set-mark "$PROXY_FWMARK"
    ip6tables -t nat -D PREROUTING -p udp --dport 53 -j REDIRECT --to-ports "$PROXY_DNS_PORT"
  fi

  ip6tables -t mangle -F CLASH6
  ip6tables -t mangle -X CLASH6

  ip6tables -t nat -F CLASH_DNS6
  ip6tables -t nat -X CLASH_DNS6

  ipset destroy localnetwork6
fi

exit 0