SagerNet / sing-box

The universal proxy platform
https://sing-box.sagernet.org/
Other
20.15k stars 2.4k forks source link

route 中 "action": "sniff" 下面的第一条 "domain_suffix" 规则不生效 #2265

Closed SimonTLS closed 1 week ago

SimonTLS commented 1 week ago

操作系统

Windows

系统版本

Windows 11 LTSC

安装类型

sing-box 原始命令行程序

如果您使用图形客户端程序,请提供该程序版本。

No response

版本

sing-box version 1.11.0-alpha.12

Environment: go1.23.3 windows/amd64
Tags: with_gvisor,with_quic,with_dhcp,with_wireguard,with_ech,with_utls,with_reality_server,with_acme,with_clash_api
Revision: 26064a9fdc53b90612bfb4f0b86aa339a2f3ac6f
CGO: disabled

描述

route 中 "action": "sniff" 下面的第一条 "domain_suffix" 规则不生效

备注:使用规则 {"inbound":"socks-in","action": "sniff"} 时,sniff 未正常启用,日志中无 sniff 信息

重现方式

curl https://one.one.one.one --proxy socks5://127.0.0.1:11223 curl: (35) Recv failure: Connection was reset

(测试配置中写了两条 one.one.one.one,使用不同域名或调换位置,表现一致 hysteria2 inbound 的服务端测试,也存在同样问题)

{ "log": { "level": "debug", "timestamp": true }, "dns": { "servers": [ { "tag": "local", "address": "udp://223.5.5.5", "detour": "direct" } ], "strategy": "ipv4_only" }, "inbounds": [ { "type": "socks", "tag": "socks-in", "listen": "127.0.0.1", "listen_port": 11223 } ], "outbounds": [ { "type": "direct", "tag": "direct" } ], "route": { "rules": [ { "action": "sniff" }, { "domain_suffix": "one.one.one.one", "outbound": "direct" }, { "domain_suffix": "one.one.one.one", "action": "reject", "method": "default" }, { "ip_cidr": [ "1.1.1.1/32", "1.0.0.1/32" ], "outbound": "direct" } ] } }

日志

.\sing-box.exe run -c .\0.json
+0800 2024-11-12 01:03:12 ERROR network: check interface: find updated interface: 以太网: route ip+net : no such network interface
+0800 2024-11-12 01:03:12 INFO inbound/socks[socks-in]: tcp server started at 127.0.0.1:11223
+0800 2024-11-12 01:03:12 INFO sing-box started (0.11s)
+0800 2024-11-12 01:03:16 INFO [2096135238 0ms] inbound/socks[socks-in]: inbound connection from 127.0.0.1:3372
+0800 2024-11-12 01:03:16 INFO [2096135238 8ms] inbound/socks[socks-in]: inbound connection to 1.0.0.1:443
+0800 2024-11-12 01:03:16 DEBUG [2096135238 8ms] router: match[0] => sniff
+0800 2024-11-12 01:03:16 DEBUG [2096135238 11ms] router: sniffed protocol: tls, domain: one.one.one.one
+0800 2024-11-12 01:03:16 DEBUG [2096135238 11ms] router: match[0] domain_suffix=one.one.one.one => reject

支持我们

完整性要求

SimonTLS commented 1 week ago

1.11.0-alpha.13 Fixed Thanks! 谢谢