Acris / shadowsocks-asuswrt-merlin

Shadowsock for Asuswrt-Merlin New Gen
MIT License
255 stars 44 forks source link

Incorect traffic redirection #53

Closed ssivtsov closed 1 year ago

ssivtsov commented 1 year ago

Hi, I've put just 3 domains to user_domain_name_gfwlist.txt, and then I started ss-merlin and noticed youtube and google used shadowsocks, could you please help me to understand what is wrong?

My configuration is:

Route mode

0: GFW list.

mode=0

UDP support

1: Enable UDP, require server side support.

udp=1

ssivtsov commented 1 year ago

The root cause is an ip included in dnsmasq_gfwlist_ipset.conf.bak list and it's added to gfwlist ipset. According to the script logic gfwlist is redirected to shadowsocks: if [[ ${mode} -eq 0 ]]; then iptables -t nat -A SHADOWSOCKS_TCP -p tcp -s ${lan_ips} -m set --match-set gfwlist dst -j REDIRECT --to-ports ${local_redir_port} else