search

SagerNet / sing-box

The universal proxy platform
https://sing-box.sagernet.org/
Other
19.91k stars 2.36k forks source link

透明代理时，苹果设备无法收到来自 APNs 的推送通知 #760

Closed lflcan closed 1 year ago

lflcan commented 1 year ago

Welcome

Description of the problem

在旁路由（192.168.123.55）上为局域网设备搭建透明代理网关，iPhone（192.168.123.4）将网关与 DNS 均设为该旁路由的 IP 后可正常浏览网页，但无法收到来自苹果的 APNs 服务推送的消息

相似问题可见于 *ray 系内核

https://github.com/XTLS/Xray-core/issues/293 https://github.com/v2ray/v2ray-core/issues/2800

（xray 内核在 sniff 选项下提供了 "domainsExcluded"，将 courier.push.apple.com 域名加入该列表后，iOS设备即可正常收到通知）

旁路由 sing-box 配置文件已删至最简，但设备依然无法收到推送

Version of sing-box

```console sing-box version 1.3.6 Environment: go1.20.6 linux/amd64 Tags: with_gvisor,with_quic,with_dhcp,with_wireguard,with_utls,with_reality_server,with_clash_api Revision: 09ffa2c66e6276fda5fcf3c16da142444a984458 CGO: disabled ```

Server and client configuration file

```console { "log": { "level": "trace", "timestamp": true, "output": "/tmp/box.log" }, "inbounds": [ { "tag": "tproxy-in", "type": "tproxy", "listen": "0.0.0.0", "listen_port": 12345, "sniff": true, "sniff_override_destination": true, "sniff_timeout": "200ms" } ], "outbounds": [ { "tag": "direct-out", "type": "direct" }, { "tag": "dns-out", "type": "dns" } ], "dns": { "final": "dns_direct", "servers": [ { "tag": "dns_direct", "address": "223.5.5.5" } ] }, "route": { "rules": [ { "inbound": "tproxy-in", "port": 53, "outbound": "dns-out" } ], "final": "direct-out" } } ```

Server and client log file

```console +0800 2023-08-09 00:40:51 TRACE initializing inbound/tproxy[tproxy-in] +0800 2023-08-09 00:40:51 INFO inbound/tproxy[tproxy-in]: tcp server started at 0.0.0.0:12345 +0800 2023-08-09 00:40:51 INFO inbound/tproxy[tproxy-in]: udp server started at 0.0.0.0:12345 +0800 2023-08-09 00:40:51 INFO sing-box started (0.00s) +0800 2023-08-09 00:41:05 INFO [3442798421 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:53236 +0800 2023-08-09 00:41:05 INFO [3442798421 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:05 INFO [613108062 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:50398 +0800 2023-08-09 00:41:05 INFO [613108062 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:05 DEBUG [3442798421 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:05 DEBUG [613108062 1ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:05 DEBUG [3442798421 1ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:05 DEBUG [613108062 1ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:05 DEBUG dns: exchange gateway.icloud.com. IN A +0800 2023-08-09 00:41:05 DEBUG dns: exchange apple.com. IN A +0800 2023-08-09 00:41:05 INFO outbound/direct[direct-out]: outbound packet connection to 223.5.5.5:53 +0800 2023-08-09 00:41:05 DEBUG dns: exchanged gateway.icloud.com NOERROR 13 +0800 2023-08-09 00:41:05 INFO dns: exchanged gateway.icloud.com CNAME gateway.icloud.com. 13 IN CNAME gateway.fe.apple-dns.net. +0800 2023-08-09 00:41:05 INFO dns: exchanged gateway.icloud.com A gateway.fe.apple-dns.net. 13 IN A 17.248.226.64 +0800 2023-08-09 00:41:05 DEBUG dns: exchanged apple.com NOERROR 709 +0800 2023-08-09 00:41:05 INFO dns: exchanged apple.com A apple.com. 709 IN A 17.253.144.10 +0800 2023-08-09 00:41:05 INFO dns: exchanged gateway.icloud.com. CNAME gateway.icloud.com. 13 IN CNAME gateway.fe.apple-dns.net. +0800 2023-08-09 00:41:05 INFO dns: exchanged gateway.icloud.com. A gateway.fe.apple-dns.net. 13 IN A 17.248.226.64 +0800 2023-08-09 00:41:05 INFO dns: exchanged apple.com. A apple.com. 709 IN A 17.253.144.10 +0800 2023-08-09 00:41:05 INFO [3618209585 0ms] inbound/tproxy[tproxy-in]: inbound connection from 192.168.123.4:59206 +0800 2023-08-09 00:41:05 INFO [3618209585 0ms] inbound/tproxy[tproxy-in]: inbound connection to 17.57.145.166:5223 +0800 2023-08-09 00:41:05 DEBUG [3618209585 5ms] router: sniffed protocol: tls, domain: courier.push.apple.com +0800 2023-08-09 00:41:05 INFO [3618209585 5ms] outbound/direct[direct-out]: outbound connection to courier.push.apple.com:5223 +0800 2023-08-09 00:41:05 DEBUG [3618209585 5ms] dns: lookup domain courier.push.apple.com +0800 2023-08-09 00:41:05 DEBUG dns: exchanged courier.push.apple.com NOERROR 35 +0800 2023-08-09 00:41:05 INFO dns: exchanged courier.push.apple.com CNAME courier.push.apple.com. 35 IN CNAME courier-push-apple.com.akadns.net. +0800 2023-08-09 00:41:05 INFO dns: exchanged courier.push.apple.com SOA akadns.net. 35 IN SOA internal.akadns.net. hostmaster.akamai.com. 1629813934 90000 90000 90000 180 +0800 2023-08-09 00:41:05 DEBUG dns: exchanged courier.push.apple.com NOERROR 145 +0800 2023-08-09 00:41:05 INFO dns: exchanged courier.push.apple.com CNAME courier.push.apple.com. 145 IN CNAME courier-push-apple.com.akadns.net. +0800 2023-08-09 00:41:05 INFO dns: exchanged courier.push.apple.com SOA akadns.net. 145 IN SOA internal.akadns.net. hostmaster.akamai.com. 1629813934 90000 90000 90000 180 +0800 2023-08-09 00:41:05 DEBUG [3618209585 13ms] dns: nil +0800 2023-08-09 00:41:05 ERROR [3618209585 13ms] inbound/tproxy[tproxy-in]: process connection from 192.168.123.4:59206: name error +0800 2023-08-09 00:41:05 INFO [3560840997 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:54143 +0800 2023-08-09 00:41:05 INFO [3560840997 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:05 INFO [672727563 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:60903 +0800 2023-08-09 00:41:05 INFO [672727563 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:05 DEBUG [3560840997 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:05 DEBUG [3560840997 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:05 DEBUG [672727563 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:05 DEBUG dns: exchange 9-courier.push.apple.com. IN A +0800 2023-08-09 00:41:05 DEBUG [672727563 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:05 DEBUG dns: exchange 9-courier.push.apple.com. IN HTTPS +0800 2023-08-09 00:41:05 DEBUG dns: exchanged 9-courier.push.apple.com NOERROR 17 +0800 2023-08-09 00:41:05 DEBUG dns: exchanged 9-courier.push.apple.com NOERROR 35 +0800 2023-08-09 00:41:05 INFO dns: exchanged 9-courier.push.apple.com CNAME 9-courier.push.apple.com. 35 IN CNAME 9.courier-push-apple.com.akadns.net. +0800 2023-08-09 00:41:05 INFO dns: exchanged 9-courier.push.apple.com CNAME 9.courier-push-apple.com.akadns.net. 35 IN CNAME apac-china-courier-4.push-apple.com.akadns.net. +0800 2023-08-09 00:41:05 INFO dns: exchanged 9-courier.push.apple.com A apac-china-courier-4.push-apple.com.akadns.net. 35 IN A 17.57.145.165 +0800 2023-08-09 00:41:05 INFO dns: exchanged 9-courier.push.apple.com A apac-china-courier-4.push-apple.com.akadns.net. 35 IN A 17.57.145.168 +0800 2023-08-09 00:41:05 INFO dns: exchanged 9-courier.push.apple.com A apac-china-courier-4.push-apple.com.akadns.net. 35 IN A 17.57.145.164 +0800 2023-08-09 00:41:05 INFO dns: exchanged 9-courier.push.apple.com A apac-china-courier-4.push-apple.com.akadns.net. 35 IN A 17.57.145.166 +0800 2023-08-09 00:41:05 INFO dns: exchanged 9-courier.push.apple.com A apac-china-courier-4.push-apple.com.akadns.net. 35 IN A 17.57.145.171 +0800 2023-08-09 00:41:05 INFO dns: exchanged 9-courier.push.apple.com A apac-china-courier-4.push-apple.com.akadns.net. 35 IN A 17.57.145.172 +0800 2023-08-09 00:41:05 INFO dns: exchanged 9-courier.push.apple.com CNAME 9-courier.push.apple.com. 17 IN CNAME 9.courier-push-apple.com.akadns.net. +0800 2023-08-09 00:41:05 INFO dns: exchanged 9-courier.push.apple.com CNAME 9.courier-push-apple.com.akadns.net. 17 IN CNAME apac-china-courier-4.push-apple.com.akadns.net. +0800 2023-08-09 00:41:05 INFO dns: exchanged 9-courier.push.apple.com SOA akadns.net. 17 IN SOA internal.akadns.net. hostmaster.akamai.com. 1629813934 90000 90000 90000 180 +0800 2023-08-09 00:41:05 INFO dns: exchanged 9-courier.push.apple.com. CNAME 9-courier.push.apple.com. 17 IN CNAME 9.courier-push-apple.com.akadns.net. +0800 2023-08-09 00:41:05 INFO dns: exchanged 9-courier.push.apple.com. CNAME 9.courier-push-apple.com.akadns.net. 17 IN CNAME apac-china-courier-4.push-apple.com.akadns.net. +0800 2023-08-09 00:41:05 INFO dns: exchanged 9-courier.push.apple.com A apac-china-courier-4.push-apple.com.akadns.net. 35 IN A 17.57.145.170 +0800 2023-08-09 00:41:05 INFO dns: exchanged 9-courier.push.apple.com A apac-china-courier-4.push-apple.com.akadns.net. 35 IN A 17.57.145.169 +0800 2023-08-09 00:41:05 INFO dns: exchanged 9-courier.push.apple.com. CNAME 9-courier.push.apple.com. 35 IN CNAME 9.courier-push-apple.com.akadns.net. +0800 2023-08-09 00:41:05 INFO dns: exchanged 9-courier.push.apple.com. CNAME 9.courier-push-apple.com.akadns.net. 35 IN CNAME apac-china-courier-4.push-apple.com.akadns.net. +0800 2023-08-09 00:41:05 INFO dns: exchanged 9-courier.push.apple.com. A apac-china-courier-4.push-apple.com.akadns.net. 35 IN A 17.57.145.165 +0800 2023-08-09 00:41:05 INFO dns: exchanged 9-courier.push.apple.com. A apac-china-courier-4.push-apple.com.akadns.net. 35 IN A 17.57.145.168 +0800 2023-08-09 00:41:05 INFO dns: exchanged 9-courier.push.apple.com. A apac-china-courier-4.push-apple.com.akadns.net. 35 IN A 17.57.145.164 +0800 2023-08-09 00:41:05 INFO dns: exchanged 9-courier.push.apple.com. A apac-china-courier-4.push-apple.com.akadns.net. 35 IN A 17.57.145.166 +0800 2023-08-09 00:41:05 INFO dns: exchanged 9-courier.push.apple.com. A apac-china-courier-4.push-apple.com.akadns.net. 35 IN A 17.57.145.171 +0800 2023-08-09 00:41:05 INFO dns: exchanged 9-courier.push.apple.com. A apac-china-courier-4.push-apple.com.akadns.net. 35 IN A 17.57.145.172 +0800 2023-08-09 00:41:05 INFO dns: exchanged 9-courier.push.apple.com. A apac-china-courier-4.push-apple.com.akadns.net. 35 IN A 17.57.145.170 +0800 2023-08-09 00:41:05 INFO dns: exchanged 9-courier.push.apple.com. A apac-china-courier-4.push-apple.com.akadns.net. 35 IN A 17.57.145.169 +0800 2023-08-09 00:41:05 INFO [42657225 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:57438 +0800 2023-08-09 00:41:05 INFO [42657225 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:05 DEBUG [42657225 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:05 DEBUG [42657225 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:05 DEBUG dns: exchange apac-china-courier-4.push-apple.com.akadns.net. IN HTTPS +0800 2023-08-09 00:41:05 DEBUG dns: exchanged apac-china-courier-4.push-apple.com.akadns.net NOERROR 21 +0800 2023-08-09 00:41:05 INFO dns: exchanged apac-china-courier-4.push-apple.com.akadns.net SOA akadns.net. 21 IN SOA internal.akadns.net. hostmaster.akamai.com. 1629813934 90000 90000 90000 180 +0800 2023-08-09 00:41:05 INFO [508834937 0ms] inbound/tproxy[tproxy-in]: inbound connection from 192.168.123.4:59207 +0800 2023-08-09 00:41:05 INFO [508834937 0ms] inbound/tproxy[tproxy-in]: inbound connection to 17.57.145.165:443 +0800 2023-08-09 00:41:05 DEBUG [508834937 0ms] router: sniffed protocol: tls, domain: courier.push.apple.com +0800 2023-08-09 00:41:05 INFO [508834937 0ms] outbound/direct[direct-out]: outbound connection to courier.push.apple.com:443 +0800 2023-08-09 00:41:05 DEBUG [508834937 0ms] dns: lookup domain courier.push.apple.com +0800 2023-08-09 00:41:05 DEBUG [508834937 0ms] dns: nil +0800 2023-08-09 00:41:05 ERROR [508834937 0ms] inbound/tproxy[tproxy-in]: process connection from 192.168.123.4:59207: name error +0800 2023-08-09 00:41:07 INFO [3787603643 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:57191 +0800 2023-08-09 00:41:07 INFO [3787603643 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:07 DEBUG [3787603643 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:07 DEBUG [3787603643 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:07 INFO [2279165384 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:50938 +0800 2023-08-09 00:41:07 INFO [2279165384 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:07 DEBUG [2279165384 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:07 DEBUG [2279165384 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:07 DEBUG dns: exchange 7-courier.push.apple.com. IN A +0800 2023-08-09 00:41:07 DEBUG dns: exchange 7-courier.push.apple.com. IN HTTPS +0800 2023-08-09 00:41:07 DEBUG dns: exchanged 7-courier.push.apple.com NOERROR 43 +0800 2023-08-09 00:41:07 DEBUG dns: exchanged 7-courier.push.apple.com NOERROR 13 +0800 2023-08-09 00:41:07 INFO dns: exchanged 7-courier.push.apple.com CNAME 7-courier.push.apple.com. 13 IN CNAME 7.courier-push-apple.com.akadns.net. +0800 2023-08-09 00:41:07 INFO dns: exchanged 7-courier.push.apple.com CNAME 7.courier-push-apple.com.akadns.net. 13 IN CNAME apac-china-courier-4.push-apple.com.akadns.net. +0800 2023-08-09 00:41:07 INFO dns: exchanged 7-courier.push.apple.com A apac-china-courier-4.push-apple.com.akadns.net. 13 IN A 17.57.145.167 +0800 2023-08-09 00:41:07 INFO dns: exchanged 7-courier.push.apple.com A apac-china-courier-4.push-apple.com.akadns.net. 13 IN A 17.57.145.165 +0800 2023-08-09 00:41:07 INFO dns: exchanged 7-courier.push.apple.com A apac-china-courier-4.push-apple.com.akadns.net. 13 IN A 17.57.145.166 +0800 2023-08-09 00:41:07 INFO dns: exchanged 7-courier.push.apple.com A apac-china-courier-4.push-apple.com.akadns.net. 13 IN A 17.57.145.170 +0800 2023-08-09 00:41:07 INFO dns: exchanged 7-courier.push.apple.com A apac-china-courier-4.push-apple.com.akadns.net. 13 IN A 17.57.145.171 +0800 2023-08-09 00:41:07 INFO dns: exchanged 7-courier.push.apple.com A apac-china-courier-4.push-apple.com.akadns.net. 13 IN A 17.57.145.164 +0800 2023-08-09 00:41:07 INFO dns: exchanged 7-courier.push.apple.com A apac-china-courier-4.push-apple.com.akadns.net. 13 IN A 17.57.145.168 +0800 2023-08-09 00:41:07 INFO dns: exchanged 7-courier.push.apple.com CNAME 7-courier.push.apple.com. 43 IN CNAME 7.courier-push-apple.com.akadns.net. +0800 2023-08-09 00:41:07 INFO dns: exchanged 7-courier.push.apple.com CNAME 7.courier-push-apple.com.akadns.net. 43 IN CNAME apac-china-courier-4.push-apple.com.akadns.net. +0800 2023-08-09 00:41:07 INFO dns: exchanged 7-courier.push.apple.com SOA akadns.net. 43 IN SOA internal.akadns.net. hostmaster.akamai.com. 1629813934 90000 90000 90000 180 +0800 2023-08-09 00:41:07 INFO dns: exchanged 7-courier.push.apple.com. CNAME 7-courier.push.apple.com. 43 IN CNAME 7.courier-push-apple.com.akadns.net. +0800 2023-08-09 00:41:07 INFO dns: exchanged 7-courier.push.apple.com. CNAME 7.courier-push-apple.com.akadns.net. 43 IN CNAME apac-china-courier-4.push-apple.com.akadns.net. +0800 2023-08-09 00:41:07 INFO dns: exchanged 7-courier.push.apple.com A apac-china-courier-4.push-apple.com.akadns.net. 13 IN A 17.57.145.172 +0800 2023-08-09 00:41:07 INFO dns: exchanged 7-courier.push.apple.com. CNAME 7-courier.push.apple.com. 13 IN CNAME 7.courier-push-apple.com.akadns.net. +0800 2023-08-09 00:41:07 INFO dns: exchanged 7-courier.push.apple.com. CNAME 7.courier-push-apple.com.akadns.net. 13 IN CNAME apac-china-courier-4.push-apple.com.akadns.net. +0800 2023-08-09 00:41:07 INFO dns: exchanged 7-courier.push.apple.com. A apac-china-courier-4.push-apple.com.akadns.net. 13 IN A 17.57.145.167 +0800 2023-08-09 00:41:07 INFO dns: exchanged 7-courier.push.apple.com. A apac-china-courier-4.push-apple.com.akadns.net. 13 IN A 17.57.145.165 +0800 2023-08-09 00:41:07 INFO dns: exchanged 7-courier.push.apple.com. A apac-china-courier-4.push-apple.com.akadns.net. 13 IN A 17.57.145.166 +0800 2023-08-09 00:41:07 INFO dns: exchanged 7-courier.push.apple.com. A apac-china-courier-4.push-apple.com.akadns.net. 13 IN A 17.57.145.170 +0800 2023-08-09 00:41:07 INFO dns: exchanged 7-courier.push.apple.com. A apac-china-courier-4.push-apple.com.akadns.net. 13 IN A 17.57.145.171 +0800 2023-08-09 00:41:07 INFO dns: exchanged 7-courier.push.apple.com. A apac-china-courier-4.push-apple.com.akadns.net. 13 IN A 17.57.145.164 +0800 2023-08-09 00:41:07 INFO dns: exchanged 7-courier.push.apple.com. A apac-china-courier-4.push-apple.com.akadns.net. 13 IN A 17.57.145.168 +0800 2023-08-09 00:41:07 INFO dns: exchanged 7-courier.push.apple.com. A apac-china-courier-4.push-apple.com.akadns.net. 13 IN A 17.57.145.172 +0800 2023-08-09 00:41:07 INFO [2365995018 0ms] inbound/tproxy[tproxy-in]: inbound connection from 192.168.123.4:59208 +0800 2023-08-09 00:41:07 INFO [2365995018 0ms] inbound/tproxy[tproxy-in]: inbound connection to 17.57.145.167:5223 +0800 2023-08-09 00:41:07 DEBUG [2365995018 0ms] router: sniffed protocol: tls, domain: courier.push.apple.com +0800 2023-08-09 00:41:07 INFO [2365995018 0ms] outbound/direct[direct-out]: outbound connection to courier.push.apple.com:5223 +0800 2023-08-09 00:41:07 DEBUG [2365995018 1ms] dns: lookup domain courier.push.apple.com +0800 2023-08-09 00:41:07 DEBUG [2365995018 1ms] dns: nil +0800 2023-08-09 00:41:07 ERROR [2365995018 1ms] inbound/tproxy[tproxy-in]: process connection from 192.168.123.4:59208: name error +0800 2023-08-09 00:41:08 INFO [597598451 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:61228 +0800 2023-08-09 00:41:08 INFO [597598451 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:08 INFO [1336160051 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:61719 +0800 2023-08-09 00:41:08 INFO [1336160051 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:08 DEBUG [597598451 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:08 DEBUG [597598451 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:08 DEBUG [1336160051 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:08 DEBUG [1336160051 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:08 DEBUG dns: exchange 11-courier.push.apple.com. IN HTTPS +0800 2023-08-09 00:41:08 DEBUG dns: exchange 11-courier.push.apple.com. IN A +0800 2023-08-09 00:41:08 DEBUG dns: exchanged 11-courier.push.apple.com NOERROR 36 +0800 2023-08-09 00:41:08 INFO dns: exchanged 11-courier.push.apple.com CNAME 11-courier.push.apple.com. 36 IN CNAME 11.courier-push-apple.com.akadns.net. +0800 2023-08-09 00:41:08 INFO dns: exchanged 11-courier.push.apple.com CNAME 11.courier-push-apple.com.akadns.net. 36 IN CNAME apac-china-courier-4.push-apple.com.akadns.net. +0800 2023-08-09 00:41:08 INFO dns: exchanged 11-courier.push.apple.com A apac-china-courier-4.push-apple.com.akadns.net. 36 IN A 17.57.145.170 +0800 2023-08-09 00:41:08 INFO dns: exchanged 11-courier.push.apple.com A apac-china-courier-4.push-apple.com.akadns.net. 36 IN A 17.57.145.169 +0800 2023-08-09 00:41:08 DEBUG dns: exchanged 11-courier.push.apple.com NOERROR 22 +0800 2023-08-09 00:41:08 INFO dns: exchanged 11-courier.push.apple.com A apac-china-courier-4.push-apple.com.akadns.net. 36 IN A 17.57.145.172 +0800 2023-08-09 00:41:08 INFO dns: exchanged 11-courier.push.apple.com A apac-china-courier-4.push-apple.com.akadns.net. 36 IN A 17.57.145.166 +0800 2023-08-09 00:41:08 INFO dns: exchanged 11-courier.push.apple.com A apac-china-courier-4.push-apple.com.akadns.net. 36 IN A 17.57.145.168 +0800 2023-08-09 00:41:08 INFO dns: exchanged 11-courier.push.apple.com A apac-china-courier-4.push-apple.com.akadns.net. 36 IN A 17.57.145.167 +0800 2023-08-09 00:41:08 INFO dns: exchanged 11-courier.push.apple.com A apac-china-courier-4.push-apple.com.akadns.net. 36 IN A 17.57.145.165 +0800 2023-08-09 00:41:08 INFO dns: exchanged 11-courier.push.apple.com A apac-china-courier-4.push-apple.com.akadns.net. 36 IN A 17.57.145.171 +0800 2023-08-09 00:41:08 INFO dns: exchanged 11-courier.push.apple.com. CNAME 11-courier.push.apple.com. 36 IN CNAME 11.courier-push-apple.com.akadns.net. +0800 2023-08-09 00:41:08 INFO dns: exchanged 11-courier.push.apple.com. CNAME 11.courier-push-apple.com.akadns.net. 36 IN CNAME apac-china-courier-4.push-apple.com.akadns.net. +0800 2023-08-09 00:41:08 INFO dns: exchanged 11-courier.push.apple.com. A apac-china-courier-4.push-apple.com.akadns.net. 36 IN A 17.57.145.170 +0800 2023-08-09 00:41:08 INFO dns: exchanged 11-courier.push.apple.com. A apac-china-courier-4.push-apple.com.akadns.net. 36 IN A 17.57.145.169 +0800 2023-08-09 00:41:08 INFO dns: exchanged 11-courier.push.apple.com. A apac-china-courier-4.push-apple.com.akadns.net. 36 IN A 17.57.145.172 +0800 2023-08-09 00:41:08 INFO dns: exchanged 11-courier.push.apple.com. A apac-china-courier-4.push-apple.com.akadns.net. 36 IN A 17.57.145.166 +0800 2023-08-09 00:41:08 INFO dns: exchanged 11-courier.push.apple.com. A apac-china-courier-4.push-apple.com.akadns.net. 36 IN A 17.57.145.168 +0800 2023-08-09 00:41:08 INFO dns: exchanged 11-courier.push.apple.com. A apac-china-courier-4.push-apple.com.akadns.net. 36 IN A 17.57.145.167 +0800 2023-08-09 00:41:08 INFO dns: exchanged 11-courier.push.apple.com. A apac-china-courier-4.push-apple.com.akadns.net. 36 IN A 17.57.145.165 +0800 2023-08-09 00:41:08 INFO dns: exchanged 11-courier.push.apple.com. A apac-china-courier-4.push-apple.com.akadns.net. 36 IN A 17.57.145.171 +0800 2023-08-09 00:41:08 INFO dns: exchanged 11-courier.push.apple.com CNAME 11-courier.push.apple.com. 22 IN CNAME 11.courier-push-apple.com.akadns.net. +0800 2023-08-09 00:41:08 INFO dns: exchanged 11-courier.push.apple.com CNAME 11.courier-push-apple.com.akadns.net. 22 IN CNAME apac-china-courier-4.push-apple.com.akadns.net. +0800 2023-08-09 00:41:08 INFO dns: exchanged 11-courier.push.apple.com SOA akadns.net. 22 IN SOA internal.akadns.net. hostmaster.akamai.com. 1629813934 90000 90000 90000 180 +0800 2023-08-09 00:41:08 INFO dns: exchanged 11-courier.push.apple.com. CNAME 11-courier.push.apple.com. 22 IN CNAME 11.courier-push-apple.com.akadns.net. +0800 2023-08-09 00:41:08 INFO dns: exchanged 11-courier.push.apple.com. CNAME 11.courier-push-apple.com.akadns.net. 22 IN CNAME apac-china-courier-4.push-apple.com.akadns.net. +0800 2023-08-09 00:41:08 INFO [2315440030 0ms] inbound/tproxy[tproxy-in]: inbound connection from 192.168.123.4:59209 +0800 2023-08-09 00:41:08 INFO [2315440030 0ms] inbound/tproxy[tproxy-in]: inbound connection to 17.57.145.167:443 +0800 2023-08-09 00:41:08 DEBUG [2315440030 0ms] router: sniffed protocol: tls, domain: courier.push.apple.com +0800 2023-08-09 00:41:08 INFO [2315440030 0ms] outbound/direct[direct-out]: outbound connection to courier.push.apple.com:443 +0800 2023-08-09 00:41:08 DEBUG [2315440030 0ms] dns: lookup domain courier.push.apple.com +0800 2023-08-09 00:41:08 DEBUG [2315440030 0ms] dns: nil +0800 2023-08-09 00:41:08 ERROR [2315440030 0ms] inbound/tproxy[tproxy-in]: process connection from 192.168.123.4:59209: name error +0800 2023-08-09 00:41:09 INFO [1039896338 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:62978 +0800 2023-08-09 00:41:09 INFO [1039896338 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:09 DEBUG [1039896338 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:09 DEBUG [1039896338 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:09 INFO [684142078 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:49535 +0800 2023-08-09 00:41:09 DEBUG dns: exchange gspe1-ssl.ls.apple.com. IN HTTPS +0800 2023-08-09 00:41:09 INFO [684142078 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:09 DEBUG [684142078 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:09 DEBUG [684142078 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:09 DEBUG dns: exchange gspe1-ssl.ls.apple.com. IN A +0800 2023-08-09 00:41:09 DEBUG dns: exchanged gspe1-ssl.ls.apple.com NOERROR 23 +0800 2023-08-09 00:41:09 INFO dns: exchanged gspe1-ssl.ls.apple.com CNAME gspe1-ssl.ls.apple.com. 23 IN CNAME gspe1-ssl.ls.apple.com.edgesuite.net. +0800 2023-08-09 00:41:09 INFO dns: exchanged gspe1-ssl.ls.apple.com CNAME gspe1-ssl.ls.apple.com.edgesuite.net. 23 IN CNAME a1366.dscapi6.akamai.net. +0800 2023-08-09 00:41:09 INFO dns: exchanged gspe1-ssl.ls.apple.com A a1366.dscapi6.akamai.net. 23 IN A 23.206.171.25 +0800 2023-08-09 00:41:09 INFO dns: exchanged gspe1-ssl.ls.apple.com A a1366.dscapi6.akamai.net. 23 IN A 23.206.171.18 +0800 2023-08-09 00:41:09 INFO dns: exchanged gspe1-ssl.ls.apple.com. CNAME gspe1-ssl.ls.apple.com. 23 IN CNAME gspe1-ssl.ls.apple.com.edgesuite.net. +0800 2023-08-09 00:41:09 INFO dns: exchanged gspe1-ssl.ls.apple.com. CNAME gspe1-ssl.ls.apple.com.edgesuite.net. 23 IN CNAME a1366.dscapi6.akamai.net. +0800 2023-08-09 00:41:09 INFO dns: exchanged gspe1-ssl.ls.apple.com. A a1366.dscapi6.akamai.net. 23 IN A 23.206.171.25 +0800 2023-08-09 00:41:09 INFO dns: exchanged gspe1-ssl.ls.apple.com. A a1366.dscapi6.akamai.net. 23 IN A 23.206.171.18 +0800 2023-08-09 00:41:09 DEBUG dns: exchanged gspe1-ssl.ls.apple.com NOERROR 85 +0800 2023-08-09 00:41:09 INFO dns: exchanged gspe1-ssl.ls.apple.com CNAME gspe1-ssl.ls.apple.com. 85 IN CNAME gspe1-ssl.ls.apple.com.edgesuite.net. +0800 2023-08-09 00:41:09 INFO dns: exchanged gspe1-ssl.ls.apple.com CNAME gspe1-ssl.ls.apple.com.edgesuite.net. 85 IN CNAME a1366.dscapi6.akamai.net. +0800 2023-08-09 00:41:09 INFO dns: exchanged gspe1-ssl.ls.apple.com SOA dscapi6.akamai.net. 85 IN SOA n0dscapi6.akamai.net. hostmaster.akamai.com. 1691512304 1000 1000 1000 1800 +0800 2023-08-09 00:41:09 INFO dns: exchanged gspe1-ssl.ls.apple.com. CNAME gspe1-ssl.ls.apple.com. 85 IN CNAME gspe1-ssl.ls.apple.com.edgesuite.net. +0800 2023-08-09 00:41:09 INFO dns: exchanged gspe1-ssl.ls.apple.com. CNAME gspe1-ssl.ls.apple.com.edgesuite.net. 85 IN CNAME a1366.dscapi6.akamai.net. +0800 2023-08-09 00:41:09 INFO [4122088096 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:57908 +0800 2023-08-09 00:41:09 INFO [4122088096 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:09 DEBUG [4122088096 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:09 DEBUG [4122088096 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:09 DEBUG dns: exchange a1366.dscapi6.akamai.net. IN HTTPS +0800 2023-08-09 00:41:09 DEBUG dns: exchanged a1366.dscapi6.akamai.net NOERROR 467 +0800 2023-08-09 00:41:09 INFO dns: exchanged a1366.dscapi6.akamai.net SOA dscapi6.akamai.net. 467 IN SOA n0dscapi6.akamai.net. hostmaster.akamai.com. 1691512337 1000 1000 1000 1800 +0800 2023-08-09 00:41:10 INFO [415534379 0ms] inbound/tproxy[tproxy-in]: inbound connection from 192.168.123.4:59210 +0800 2023-08-09 00:41:10 INFO [415534379 0ms] inbound/tproxy[tproxy-in]: inbound connection to 23.206.171.25:443 +0800 2023-08-09 00:41:10 DEBUG [415534379 0ms] router: sniffed protocol: tls, domain: gspe1-ssl.ls.apple.com +0800 2023-08-09 00:41:10 INFO [415534379 1ms] outbound/direct[direct-out]: outbound connection to gspe1-ssl.ls.apple.com:443 +0800 2023-08-09 00:41:10 DEBUG [415534379 1ms] dns: lookup domain gspe1-ssl.ls.apple.com +0800 2023-08-09 00:41:10 DEBUG dns: exchanged gspe1-ssl.ls.apple.com NOERROR 10 +0800 2023-08-09 00:41:10 INFO dns: exchanged gspe1-ssl.ls.apple.com CNAME gspe1-ssl.ls.apple.com. 10 IN CNAME gspe1-ssl.ls.apple.com.edgesuite.net. +0800 2023-08-09 00:41:10 INFO dns: exchanged gspe1-ssl.ls.apple.com CNAME gspe1-ssl.ls.apple.com.edgesuite.net. 10 IN CNAME a1366.dscapi6.akamai.net. +0800 2023-08-09 00:41:10 INFO dns: exchanged gspe1-ssl.ls.apple.com AAAA a1366.dscapi6.akamai.net. 10 IN AAAA 2600:1417:4400:10::1731:6834 +0800 2023-08-09 00:41:10 INFO dns: exchanged gspe1-ssl.ls.apple.com AAAA a1366.dscapi6.akamai.net. 10 IN AAAA 2600:1417:4400:10::1731:6837 +0800 2023-08-09 00:41:10 DEBUG [415534379 8ms] dns: lookup succeed for gspe1-ssl.ls.apple.com: 23.206.171.25 23.206.171.18 2600:1417:4400:10::1731:6834 2600:1417:4400:10::1731:6837 +0800 2023-08-09 00:41:15 DEBUG [656436080 10.2s] inbound/tproxy[tproxy-in]: connection closed: upstream: context canceled | io: read/write on closed pipe +0800 2023-08-09 00:41:15 DEBUG [330431261 10.2s] inbound/tproxy[tproxy-in]: connection closed: upstream: context canceled | io: read/write on closed pipe +0800 2023-08-09 00:41:15 DEBUG [1994282463 10.0s] inbound/tproxy[tproxy-in]: connection closed: upstream: context canceled | io: read/write on closed pipe +0800 2023-08-09 00:41:15 DEBUG [3471628807 10.0s] inbound/tproxy[tproxy-in]: connection closed: upstream: context canceled | io: read/write on closed pipe +0800 2023-08-09 00:41:15 DEBUG [3192838519 10.0s] inbound/tproxy[tproxy-in]: connection closed: upstream: context canceled | io: read/write on closed pipe +0800 2023-08-09 00:41:17 DEBUG [1919978351 10.1s] inbound/tproxy[tproxy-in]: connection closed: upstream: context canceled | io: read/write on closed pipe +0800 2023-08-09 00:41:17 DEBUG [2002014007 10.1s] inbound/tproxy[tproxy-in]: connection closed: upstream: context canceled | io: read/write on closed pipe +0800 2023-08-09 00:41:18 DEBUG [3631823981 10.0s] inbound/tproxy[tproxy-in]: connection closed: upstream: context canceled | io: read/write on closed pipe +0800 2023-08-09 00:41:18 DEBUG [2350928687 10.0s] inbound/tproxy[tproxy-in]: connection closed: upstream: context canceled | io: read/write on closed pipe +0800 2023-08-09 00:41:19 DEBUG [2294026086 10.0s] inbound/tproxy[tproxy-in]: connection closed: upstream: context canceled | io: read/write on closed pipe +0800 2023-08-09 00:41:19 DEBUG [1301599280 10.0s] inbound/tproxy[tproxy-in]: connection closed: upstream: context canceled | io: read/write on closed pipe +0800 2023-08-09 00:41:19 DEBUG [2476441977 10.0s] inbound/tproxy[tproxy-in]: connection closed: upstream: context canceled | io: read/write on closed pipe +0800 2023-08-09 00:41:22 INFO [2895465900 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:57337 +0800 2023-08-09 00:41:22 INFO [2895465900 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:22 DEBUG [2895465900 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:22 DEBUG [2895465900 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:22 INFO [710329622 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:54904 +0800 2023-08-09 00:41:22 INFO [710329622 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:22 DEBUG [710329622 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:22 DEBUG [710329622 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:22 DEBUG dns: exchange mesu.apple.com. IN A +0800 2023-08-09 00:41:22 DEBUG dns: exchange mesu.apple.com. IN HTTPS +0800 2023-08-09 00:41:22 DEBUG dns: exchanged mesu.apple.com NOERROR 19 +0800 2023-08-09 00:41:22 INFO dns: exchanged mesu.apple.com CNAME mesu.apple.com. 19 IN CNAME mesu-cdn.apple.com.akadns.net. +0800 2023-08-09 00:41:22 DEBUG dns: exchanged mesu.apple.com NOERROR 5 +0800 2023-08-09 00:41:22 INFO dns: exchanged mesu.apple.com CNAME mesu.apple.com. 5 IN CNAME mesu-cdn.apple.com.akadns.net. +0800 2023-08-09 00:41:22 INFO dns: exchanged mesu.apple.com CNAME mesu-cdn.apple.com.akadns.net. 5 IN CNAME mesu-china.apple.com.akadns.net. +0800 2023-08-09 00:41:22 INFO dns: exchanged mesu.apple.com CNAME mesu-china.apple.com.akadns.net. 5 IN CNAME ioshost.qtlcdn.com. +0800 2023-08-09 00:41:22 INFO dns: exchanged mesu.apple.com A ioshost.qtlcdn.com. 5 IN A 220.177.176.109 +0800 2023-08-09 00:41:22 INFO dns: exchanged mesu.apple.com A ioshost.qtlcdn.com. 5 IN A 222.218.186.75 +0800 2023-08-09 00:41:22 INFO dns: exchanged mesu.apple.com. CNAME mesu.apple.com. 5 IN CNAME mesu-cdn.apple.com.akadns.net. +0800 2023-08-09 00:41:22 INFO dns: exchanged mesu.apple.com. CNAME mesu-cdn.apple.com.akadns.net. 5 IN CNAME mesu-china.apple.com.akadns.net. +0800 2023-08-09 00:41:22 INFO dns: exchanged mesu.apple.com CNAME mesu-cdn.apple.com.akadns.net. 19 IN CNAME mesu-china.apple.com.akadns.net. +0800 2023-08-09 00:41:22 INFO dns: exchanged mesu.apple.com CNAME mesu-china.apple.com.akadns.net. 19 IN CNAME ioshost.qtlcdn.com. +0800 2023-08-09 00:41:22 INFO dns: exchanged mesu.apple.com SOA qtlcdn.com. 19 IN SOA a.qtlcdncn.info. webmaster.qtlcdn.com. 1661483737 10800 3600 604800 60 +0800 2023-08-09 00:41:22 INFO dns: exchanged mesu.apple.com. CNAME mesu.apple.com. 19 IN CNAME mesu-cdn.apple.com.akadns.net. +0800 2023-08-09 00:41:22 INFO dns: exchanged mesu.apple.com. CNAME mesu-cdn.apple.com.akadns.net. 19 IN CNAME mesu-china.apple.com.akadns.net. +0800 2023-08-09 00:41:22 INFO dns: exchanged mesu.apple.com. CNAME mesu-china.apple.com.akadns.net. 19 IN CNAME ioshost.qtlcdn.com. +0800 2023-08-09 00:41:22 INFO dns: exchanged mesu.apple.com. CNAME mesu-china.apple.com.akadns.net. 5 IN CNAME ioshost.qtlcdn.com. +0800 2023-08-09 00:41:22 INFO dns: exchanged mesu.apple.com. A ioshost.qtlcdn.com. 5 IN A 220.177.176.109 +0800 2023-08-09 00:41:22 INFO dns: exchanged mesu.apple.com. A ioshost.qtlcdn.com. 5 IN A 222.218.186.75 +0800 2023-08-09 00:41:22 INFO [1692932505 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:60316 +0800 2023-08-09 00:41:22 INFO [1692932505 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:22 DEBUG [1692932505 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:22 DEBUG [1692932505 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:22 DEBUG dns: exchange ioshost.qtlcdn.com. IN HTTPS +0800 2023-08-09 00:41:22 DEBUG dns: exchanged ioshost.qtlcdn.com NOERROR 28 +0800 2023-08-09 00:41:22 INFO dns: exchanged ioshost.qtlcdn.com SOA qtlcdn.com. 28 IN SOA a.qtlcdncn.info. webmaster.qtlcdn.com. 1661483737 10800 3600 604800 60 +0800 2023-08-09 00:41:22 INFO [948025990 0ms] inbound/tproxy[tproxy-in]: inbound connection from 192.168.123.4:59211 +0800 2023-08-09 00:41:22 INFO [948025990 0ms] inbound/tproxy[tproxy-in]: inbound connection to 220.177.176.109:443 +0800 2023-08-09 00:41:22 DEBUG [948025990 0ms] router: sniffed protocol: tls, domain: mesu.apple.com +0800 2023-08-09 00:41:22 INFO [948025990 0ms] outbound/direct[direct-out]: outbound connection to mesu.apple.com:443 +0800 2023-08-09 00:41:22 DEBUG [948025990 0ms] dns: lookup domain mesu.apple.com +0800 2023-08-09 00:41:22 DEBUG dns: exchanged mesu.apple.com NOERROR 23 +0800 2023-08-09 00:41:22 INFO dns: exchanged mesu.apple.com CNAME mesu.apple.com. 23 IN CNAME mesu-cdn.apple.com.akadns.net. +0800 2023-08-09 00:41:22 INFO dns: exchanged mesu.apple.com CNAME mesu-cdn.apple.com.akadns.net. 23 IN CNAME mesu-china.apple.com.akadns.net. +0800 2023-08-09 00:41:22 INFO dns: exchanged mesu.apple.com CNAME mesu-china.apple.com.akadns.net. 23 IN CNAME ioshost.qtlcdn.com. +0800 2023-08-09 00:41:22 INFO dns: exchanged mesu.apple.com SOA qtlcdn.com. 23 IN SOA a.qtlcdncn.info. webmaster.qtlcdn.com. 1661483737 10800 3600 604800 60 +0800 2023-08-09 00:41:22 DEBUG [948025990 7ms] dns: lookup succeed for mesu.apple.com: 220.177.176.109 222.218.186.75 +0800 2023-08-09 00:41:22 INFO [2547121430 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:53260 +0800 2023-08-09 00:41:22 INFO [2547121430 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:22 INFO [253617167 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:54104 +0800 2023-08-09 00:41:22 DEBUG [2547121430 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:22 INFO [2658890767 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:64308 +0800 2023-08-09 00:41:22 INFO [3866509697 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:59578 +0800 2023-08-09 00:41:22 INFO [3866509697 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:22 DEBUG [3866509697 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:22 DEBUG [3866509697 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:22 DEBUG [2547121430 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:22 INFO [253617167 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:22 DEBUG dns: exchange sp2.baidu.com. IN A +0800 2023-08-09 00:41:22 DEBUG dns: exchange sp2.baidu.com. IN HTTPS +0800 2023-08-09 00:41:22 INFO [2658890767 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:22 DEBUG [2658890767 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:22 DEBUG [2658890767 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:22 DEBUG [253617167 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:22 DEBUG [253617167 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:22 DEBUG dns: exchange sp1.baidu.com. IN HTTPS +0800 2023-08-09 00:41:22 DEBUG dns: exchange sp1.baidu.com. IN A +0800 2023-08-09 00:41:22 DEBUG dns: exchanged sp1.baidu.com NOERROR 23 +0800 2023-08-09 00:41:22 DEBUG dns: exchanged sp2.baidu.com NOERROR 500 +0800 2023-08-09 00:41:22 INFO dns: exchanged sp2.baidu.com CNAME sp2.baidu.com. 500 IN CNAME www.a.shifen.com. +0800 2023-08-09 00:41:22 DEBUG dns: exchanged sp2.baidu.com NOERROR 22 +0800 2023-08-09 00:41:22 DEBUG dns: exchanged sp1.baidu.com NOERROR 139 +0800 2023-08-09 00:41:22 INFO dns: exchanged sp1.baidu.com CNAME sp1.baidu.com. 139 IN CNAME www.a.shifen.com. +0800 2023-08-09 00:41:22 INFO dns: exchanged sp1.baidu.com SOA a.shifen.com. 139 IN SOA ns1.a.shifen.com. baidu_dns_master.baidu.com. 2308090002 5 5 2592000 3600 +0800 2023-08-09 00:41:22 INFO dns: exchanged sp1.baidu.com. CNAME sp1.baidu.com. 139 IN CNAME www.a.shifen.com. +0800 2023-08-09 00:41:22 INFO dns: exchanged sp2.baidu.com CNAME sp2.baidu.com. 22 IN CNAME www.a.shifen.com. +0800 2023-08-09 00:41:22 INFO dns: exchanged sp2.baidu.com A www.a.shifen.com. 22 IN A 14.119.104.189 +0800 2023-08-09 00:41:22 INFO dns: exchanged sp2.baidu.com A www.a.shifen.com. 22 IN A 14.119.104.254 +0800 2023-08-09 00:41:22 INFO dns: exchanged sp2.baidu.com. CNAME sp2.baidu.com. 22 IN CNAME www.a.shifen.com. +0800 2023-08-09 00:41:22 INFO dns: exchanged sp2.baidu.com. A www.a.shifen.com. 22 IN A 14.119.104.189 +0800 2023-08-09 00:41:22 INFO dns: exchanged sp2.baidu.com. A www.a.shifen.com. 22 IN A 14.119.104.254 +0800 2023-08-09 00:41:22 INFO dns: exchanged sp1.baidu.com CNAME sp1.baidu.com. 23 IN CNAME www.a.shifen.com. +0800 2023-08-09 00:41:22 INFO dns: exchanged sp1.baidu.com A www.a.shifen.com. 23 IN A 14.119.104.254 +0800 2023-08-09 00:41:22 INFO dns: exchanged sp1.baidu.com A www.a.shifen.com. 23 IN A 14.119.104.189 +0800 2023-08-09 00:41:22 INFO dns: exchanged sp1.baidu.com. CNAME sp1.baidu.com. 23 IN CNAME www.a.shifen.com. +0800 2023-08-09 00:41:22 INFO dns: exchanged sp2.baidu.com SOA a.shifen.com. 500 IN SOA ns1.a.shifen.com. baidu_dns_master.baidu.com. 2308090002 5 5 2592000 3600 +0800 2023-08-09 00:41:22 INFO dns: exchanged sp1.baidu.com. A www.a.shifen.com. 23 IN A 14.119.104.254 +0800 2023-08-09 00:41:22 INFO dns: exchanged sp2.baidu.com. CNAME sp2.baidu.com. 500 IN CNAME www.a.shifen.com. +0800 2023-08-09 00:41:22 INFO dns: exchanged sp1.baidu.com. A www.a.shifen.com. 23 IN A 14.119.104.189 +0800 2023-08-09 00:41:22 INFO [2799375856 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:53860 +0800 2023-08-09 00:41:22 INFO [2799375856 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:22 DEBUG [2799375856 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:22 DEBUG [2799375856 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:22 DEBUG dns: exchange www.a.shifen.com. IN HTTPS +0800 2023-08-09 00:41:22 DEBUG dns: exchanged www.a.shifen.com NOERROR 47 +0800 2023-08-09 00:41:22 INFO dns: exchanged www.a.shifen.com SOA a.shifen.com. 47 IN SOA ns1.a.shifen.com. baidu_dns_master.baidu.com. 2308090001 5 5 2592000 3600 +0800 2023-08-09 00:41:22 INFO [476805586 0ms] inbound/tproxy[tproxy-in]: inbound connection from 192.168.123.4:59212 +0800 2023-08-09 00:41:22 INFO [476805586 0ms] inbound/tproxy[tproxy-in]: inbound connection to 14.119.104.254:443 +0800 2023-08-09 00:41:22 INFO [991427382 0ms] inbound/tproxy[tproxy-in]: inbound connection from 192.168.123.4:59213 +0800 2023-08-09 00:41:22 INFO [991427382 0ms] inbound/tproxy[tproxy-in]: inbound connection to 14.119.104.254:443 +0800 2023-08-09 00:41:22 DEBUG [476805586 0ms] router: sniffed protocol: tls, domain: sp1.baidu.com +0800 2023-08-09 00:41:22 INFO [476805586 0ms] outbound/direct[direct-out]: outbound connection to sp1.baidu.com:443 +0800 2023-08-09 00:41:22 DEBUG [476805586 0ms] dns: lookup domain sp1.baidu.com +0800 2023-08-09 00:41:22 DEBUG [991427382 4ms] router: sniffed protocol: tls, domain: sp2.baidu.com +0800 2023-08-09 00:41:22 INFO [991427382 4ms] outbound/direct[direct-out]: outbound connection to sp2.baidu.com:443 +0800 2023-08-09 00:41:22 DEBUG [991427382 4ms] dns: lookup domain sp2.baidu.com +0800 2023-08-09 00:41:22 DEBUG dns: exchanged sp1.baidu.com NOERROR 2 +0800 2023-08-09 00:41:22 INFO dns: exchanged sp1.baidu.com CNAME sp1.baidu.com. 2 IN CNAME www.a.shifen.com. +0800 2023-08-09 00:41:22 INFO dns: exchanged sp1.baidu.com SOA a.shifen.com. 2 IN SOA ns1.a.shifen.com. baidu_dns_master.baidu.com. 2308090001 5 5 2592000 3600 +0800 2023-08-09 00:41:22 DEBUG [476805586 7ms] dns: lookup succeed for sp1.baidu.com: 14.119.104.254 14.119.104.189 +0800 2023-08-09 00:41:22 DEBUG dns: exchanged sp2.baidu.com NOERROR 32 +0800 2023-08-09 00:41:22 INFO dns: exchanged sp2.baidu.com CNAME sp2.baidu.com. 32 IN CNAME www.a.shifen.com. +0800 2023-08-09 00:41:22 INFO dns: exchanged sp2.baidu.com SOA a.shifen.com. 32 IN SOA ns1.a.shifen.com. baidu_dns_master.baidu.com. 2308090001 5 5 2592000 3600 +0800 2023-08-09 00:41:22 DEBUG [991427382 11ms] dns: lookup succeed for sp2.baidu.com: 14.119.104.189 14.119.104.254 +0800 2023-08-09 00:41:22 INFO [2144165480 0ms] inbound/tproxy[tproxy-in]: inbound connection from 192.168.123.4:59214 +0800 2023-08-09 00:41:22 INFO [2144165480 0ms] inbound/tproxy[tproxy-in]: inbound connection to 14.119.104.254:443 +0800 2023-08-09 00:41:22 DEBUG [2144165480 0ms] router: sniffed protocol: tls, domain: sp1.baidu.com +0800 2023-08-09 00:41:22 INFO [2144165480 0ms] outbound/direct[direct-out]: outbound connection to sp1.baidu.com:443 +0800 2023-08-09 00:41:22 DEBUG [2144165480 0ms] dns: lookup domain sp1.baidu.com +0800 2023-08-09 00:41:22 DEBUG [2144165480 0ms] dns: lookup succeed for sp1.baidu.com: 14.119.104.254 14.119.104.189 +0800 2023-08-09 00:41:22 INFO [1748860210 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:52144 +0800 2023-08-09 00:41:22 INFO [1748860210 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:22 DEBUG [1748860210 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:22 DEBUG [1748860210 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:22 DEBUG dns: exchange www.baidu.com. IN HTTPS +0800 2023-08-09 00:41:22 INFO [343506312 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:53005 +0800 2023-08-09 00:41:22 INFO [343506312 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:22 DEBUG [343506312 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:22 DEBUG [343506312 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:22 DEBUG dns: exchange www.baidu.com. IN A +0800 2023-08-09 00:41:22 DEBUG dns: exchanged www.baidu.com NOERROR 28 +0800 2023-08-09 00:41:22 INFO dns: exchanged www.baidu.com CNAME www.baidu.com. 28 IN CNAME www.a.shifen.com. +0800 2023-08-09 00:41:22 INFO dns: exchanged www.baidu.com A www.a.shifen.com. 28 IN A 14.119.104.189 +0800 2023-08-09 00:41:22 INFO dns: exchanged www.baidu.com A www.a.shifen.com. 28 IN A 14.119.104.254 +0800 2023-08-09 00:41:22 INFO dns: exchanged www.baidu.com. CNAME www.baidu.com. 28 IN CNAME www.a.shifen.com. +0800 2023-08-09 00:41:22 INFO dns: exchanged www.baidu.com. A www.a.shifen.com. 28 IN A 14.119.104.189 +0800 2023-08-09 00:41:22 INFO dns: exchanged www.baidu.com. A www.a.shifen.com. 28 IN A 14.119.104.254 +0800 2023-08-09 00:41:22 DEBUG dns: exchanged www.baidu.com NOERROR 504 +0800 2023-08-09 00:41:22 INFO dns: exchanged www.baidu.com CNAME www.baidu.com. 504 IN CNAME www.a.shifen.com. +0800 2023-08-09 00:41:22 INFO dns: exchanged www.baidu.com SOA a.shifen.com. 504 IN SOA ns1.a.shifen.com. baidu_dns_master.baidu.com. 2308090002 5 5 2592000 3600 +0800 2023-08-09 00:41:22 INFO dns: exchanged www.baidu.com. CNAME www.baidu.com. 504 IN CNAME www.a.shifen.com. +0800 2023-08-09 00:41:22 INFO [1229103670 0ms] inbound/tproxy[tproxy-in]: inbound connection from 192.168.123.4:59215 +0800 2023-08-09 00:41:22 INFO [1229103670 0ms] inbound/tproxy[tproxy-in]: inbound connection to 14.119.104.189:443 +0800 2023-08-09 00:41:22 DEBUG [1229103670 0ms] router: sniffed protocol: tls, domain: www.baidu.com +0800 2023-08-09 00:41:22 INFO [1229103670 0ms] outbound/direct[direct-out]: outbound connection to www.baidu.com:443 +0800 2023-08-09 00:41:22 DEBUG [1229103670 0ms] dns: lookup domain www.baidu.com +0800 2023-08-09 00:41:22 DEBUG dns: exchanged www.baidu.com NOERROR 2 +0800 2023-08-09 00:41:22 INFO dns: exchanged www.baidu.com CNAME www.baidu.com. 2 IN CNAME www.a.shifen.com. +0800 2023-08-09 00:41:22 INFO dns: exchanged www.baidu.com SOA a.shifen.com. 2 IN SOA ns1.a.shifen.com. baidu_dns_master.baidu.com. 2308090001 5 5 2592000 3600 +0800 2023-08-09 00:41:22 DEBUG [1229103670 7ms] dns: lookup succeed for www.baidu.com: 14.119.104.189 14.119.104.254 +0800 2023-08-09 00:41:22 INFO [2011922090 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:64367 +0800 2023-08-09 00:41:22 INFO [2011922090 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:22 DEBUG [2011922090 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:22 DEBUG [2011922090 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:22 DEBUG dns: exchange gateway.fe.apple-dns.net. IN HTTPS +0800 2023-08-09 00:41:22 INFO [1239307371 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:63673 +0800 2023-08-09 00:41:22 INFO [1239307371 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:22 DEBUG [1239307371 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:22 DEBUG [1239307371 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:22 DEBUG dns: exchange gateway.fe.apple-dns.net. IN A +0800 2023-08-09 00:41:22 DEBUG dns: exchanged gateway.fe.apple-dns.net NOERROR 70 +0800 2023-08-09 00:41:22 INFO dns: exchanged gateway.fe.apple-dns.net A gateway.fe.apple-dns.net. 70 IN A 17.248.226.65 +0800 2023-08-09 00:41:22 INFO dns: exchanged gateway.fe.apple-dns.net. A gateway.fe.apple-dns.net. 70 IN A 17.248.226.65 +0800 2023-08-09 00:41:22 DEBUG dns: exchanged gateway.fe.apple-dns.net NOERROR 22 +0800 2023-08-09 00:41:22 INFO dns: exchanged gateway.fe.apple-dns.net SOA fe.apple-dns.net. 22 IN SOA ns-287.awsdns-35.com. hostmaster.apple.com. 1 7200 900 1209600 86400 +0800 2023-08-09 00:41:22 INFO [900666460 0ms] inbound/tproxy[tproxy-in]: inbound connection from 192.168.123.4:59216 +0800 2023-08-09 00:41:22 INFO [900666460 0ms] inbound/tproxy[tproxy-in]: inbound connection to 17.248.226.64:443 +0800 2023-08-09 00:41:22 DEBUG [900666460 0ms] router: sniffed protocol: tls, domain: gateway.icloud.com +0800 2023-08-09 00:41:22 INFO [900666460 0ms] outbound/direct[direct-out]: outbound connection to gateway.icloud.com:443 +0800 2023-08-09 00:41:22 DEBUG [900666460 0ms] dns: lookup domain gateway.icloud.com +0800 2023-08-09 00:41:22 DEBUG dns: exchanged gateway.icloud.com NOERROR 118 +0800 2023-08-09 00:41:22 INFO dns: exchanged gateway.icloud.com CNAME gateway.icloud.com. 118 IN CNAME gateway.fe.apple-dns.net. +0800 2023-08-09 00:41:22 INFO dns: exchanged gateway.icloud.com A gateway.fe.apple-dns.net. 118 IN A 17.248.226.69 +0800 2023-08-09 00:41:22 DEBUG dns: exchanged gateway.icloud.com NOERROR 73 +0800 2023-08-09 00:41:22 INFO dns: exchanged gateway.icloud.com CNAME gateway.icloud.com. 73 IN CNAME gateway.fe.apple-dns.net. +0800 2023-08-09 00:41:22 INFO dns: exchanged gateway.icloud.com AAAA gateway.fe.apple-dns.net. 73 IN AAAA 2403:300:a41:d03::9 +0800 2023-08-09 00:41:22 INFO dns: exchanged gateway.icloud.com AAAA gateway.fe.apple-dns.net. 73 IN AAAA 2403:300:a41:d01::5 +0800 2023-08-09 00:41:22 INFO dns: exchanged gateway.icloud.com AAAA gateway.fe.apple-dns.net. 73 IN AAAA 2403:300:a41:d01::f +0800 2023-08-09 00:41:22 INFO dns: exchanged gateway.icloud.com AAAA gateway.fe.apple-dns.net. 73 IN AAAA 2403:300:a41:d0b::e +0800 2023-08-09 00:41:22 INFO dns: exchanged gateway.icloud.com AAAA gateway.fe.apple-dns.net. 73 IN AAAA 2403:300:a41:d02::10 +0800 2023-08-09 00:41:22 INFO dns: exchanged gateway.icloud.com AAAA gateway.fe.apple-dns.net. 73 IN AAAA 2403:300:a41:d00::10 +0800 2023-08-09 00:41:22 INFO dns: exchanged gateway.icloud.com AAAA gateway.fe.apple-dns.net. 73 IN AAAA 2403:300:a41:d01::e +0800 2023-08-09 00:41:22 INFO dns: exchanged gateway.icloud.com AAAA gateway.fe.apple-dns.net. 73 IN AAAA 2403:300:a41:d03::10 +0800 2023-08-09 00:41:22 DEBUG [900666460 14ms] dns: lookup succeed for gateway.icloud.com: 17.248.226.69 2403:300:a41:d03::9 2403:300:a41:d01::5 2403:300:a41:d01::f 2403:300:a41:d0b::e 2403:300:a41:d02::10 2403:300:a41:d00::10 2403:300:a41:d01::e 2403:300:a41:d03::10 +0800 2023-08-09 00:41:22 INFO [1635371853 0ms] inbound/tproxy[tproxy-in]: inbound connection from 192.168.123.4:59217 +0800 2023-08-09 00:41:22 INFO [1635371853 0ms] inbound/tproxy[tproxy-in]: inbound connection to 14.119.104.189:443 +0800 2023-08-09 00:41:22 DEBUG [1635371853 0ms] router: sniffed protocol: tls, domain: www.baidu.com +0800 2023-08-09 00:41:22 INFO [1635371853 0ms] outbound/direct[direct-out]: outbound connection to www.baidu.com:443 +0800 2023-08-09 00:41:22 DEBUG [1635371853 0ms] dns: lookup domain www.baidu.com +0800 2023-08-09 00:41:22 DEBUG [1635371853 0ms] dns: lookup succeed for www.baidu.com: 14.119.104.189 14.119.104.254 +0800 2023-08-09 00:41:23 INFO [755146012 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:55450 +0800 2023-08-09 00:41:23 INFO [755146012 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:23 INFO [269992531 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:62320 +0800 2023-08-09 00:41:23 DEBUG [755146012 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:23 DEBUG [755146012 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:23 INFO [269992531 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:23 DEBUG dns: exchange passport.baidu.com. IN HTTPS +0800 2023-08-09 00:41:23 DEBUG [269992531 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:23 DEBUG [269992531 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:23 DEBUG dns: exchange passport.baidu.com. IN A +0800 2023-08-09 00:41:23 DEBUG dns: exchanged passport.baidu.com NOERROR 252 +0800 2023-08-09 00:41:23 DEBUG dns: exchanged passport.baidu.com NOERROR 300 +0800 2023-08-09 00:41:23 INFO dns: exchanged passport.baidu.com CNAME passport.baidu.com. 300 IN CNAME passport.n.shifen.com. +0800 2023-08-09 00:41:23 INFO dns: exchanged passport.baidu.com SOA n.shifen.com. 300 IN SOA ns1.n.shifen.com. baidu_dns_master.baidu.com. 2308090002 5 5 2592000 3600 +0800 2023-08-09 00:41:23 INFO dns: exchanged passport.baidu.com. CNAME passport.baidu.com. 300 IN CNAME passport.n.shifen.com. +0800 2023-08-09 00:41:23 INFO dns: exchanged passport.baidu.com CNAME passport.baidu.com. 252 IN CNAME passport.n.shifen.com. +0800 2023-08-09 00:41:23 INFO dns: exchanged passport.baidu.com A passport.n.shifen.com. 252 IN A 180.101.49.186 +0800 2023-08-09 00:41:23 INFO dns: exchanged passport.baidu.com. CNAME passport.baidu.com. 252 IN CNAME passport.n.shifen.com. +0800 2023-08-09 00:41:23 INFO dns: exchanged passport.baidu.com. A passport.n.shifen.com. 252 IN A 180.101.49.186 +0800 2023-08-09 00:41:23 INFO [1058581708 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:65150 +0800 2023-08-09 00:41:23 INFO [1058581708 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:23 DEBUG [1058581708 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:23 DEBUG [1058581708 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:23 DEBUG dns: exchange passport.n.shifen.com. IN HTTPS +0800 2023-08-09 00:41:23 DEBUG dns: exchanged passport.n.shifen.com NOERROR 158 +0800 2023-08-09 00:41:23 INFO dns: exchanged passport.n.shifen.com SOA n.shifen.com. 158 IN SOA ns1.n.shifen.com. baidu_dns_master.baidu.com. 2308090002 5 5 2592000 3600 +0800 2023-08-09 00:41:23 INFO [3619678513 0ms] inbound/tproxy[tproxy-in]: inbound connection from 192.168.123.4:59218 +0800 2023-08-09 00:41:23 INFO [3619678513 0ms] inbound/tproxy[tproxy-in]: inbound connection to 180.101.49.186:443 +0800 2023-08-09 00:41:23 DEBUG [3619678513 0ms] router: sniffed protocol: tls, domain: passport.baidu.com +0800 2023-08-09 00:41:23 INFO [3619678513 0ms] outbound/direct[direct-out]: outbound connection to passport.baidu.com:443 +0800 2023-08-09 00:41:23 DEBUG [3619678513 0ms] dns: lookup domain passport.baidu.com +0800 2023-08-09 00:41:23 DEBUG dns: exchanged passport.baidu.com NOERROR 225 +0800 2023-08-09 00:41:23 INFO dns: exchanged passport.baidu.com CNAME passport.baidu.com. 225 IN CNAME passport.n.shifen.com. +0800 2023-08-09 00:41:23 INFO dns: exchanged passport.baidu.com AAAA passport.n.shifen.com. 225 IN AAAA 240e:e9:800e:110:0:ff:b00b:456d +0800 2023-08-09 00:41:23 INFO dns: exchanged passport.baidu.com AAAA passport.n.shifen.com. 225 IN AAAA 240e:e9:6002:183:0:ff:b028:4679 +0800 2023-08-09 00:41:23 DEBUG [3619678513 7ms] dns: lookup succeed for passport.baidu.com: 180.101.49.186 240e:e9:800e:110:0:ff:b00b:456d 240e:e9:6002:183:0:ff:b028:4679 +0800 2023-08-09 00:41:28 INFO [4272382217 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:54263 +0800 2023-08-09 00:41:28 INFO [4272382217 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:28 DEBUG [4272382217 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:28 DEBUG [4272382217 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:28 INFO [900737436 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:62841 +0800 2023-08-09 00:41:28 INFO [900737436 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:28 DEBUG [900737436 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:28 DEBUG dns: exchange hectorstatic.baidu.com. IN HTTPS +0800 2023-08-09 00:41:28 DEBUG [900737436 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:28 DEBUG dns: exchange hectorstatic.baidu.com. IN A +0800 2023-08-09 00:41:28 DEBUG dns: exchanged hectorstatic.baidu.com NOERROR 29 +0800 2023-08-09 00:41:28 DEBUG dns: exchanged hectorstatic.baidu.com NOERROR 66 +0800 2023-08-09 00:41:28 INFO dns: exchanged hectorstatic.baidu.com CNAME hectorstatic.baidu.com. 29 IN CNAME hectorstatic.baidu.com.a.bdydns.com. +0800 2023-08-09 00:41:28 INFO dns: exchanged hectorstatic.baidu.com CNAME hectorstatic.baidu.com. 66 IN CNAME hectorstatic.baidu.com.a.bdydns.com. +0800 2023-08-09 00:41:28 INFO dns: exchanged hectorstatic.baidu.com CNAME hectorstatic.baidu.com.a.bdydns.com. 66 IN CNAME opencdnbd.jomodns.com. +0800 2023-08-09 00:41:28 INFO dns: exchanged hectorstatic.baidu.com SOA jomodns.com. 66 IN SOA ns1.jomodns.com. baidu_dns_master.baidu.com. 2308090023 45 5 2592000 3600 +0800 2023-08-09 00:41:28 INFO dns: exchanged hectorstatic.baidu.com. CNAME hectorstatic.baidu.com. 66 IN CNAME hectorstatic.baidu.com.a.bdydns.com. +0800 2023-08-09 00:41:28 INFO dns: exchanged hectorstatic.baidu.com. CNAME hectorstatic.baidu.com.a.bdydns.com. 66 IN CNAME opencdnbd.jomodns.com. +0800 2023-08-09 00:41:28 INFO dns: exchanged hectorstatic.baidu.com CNAME hectorstatic.baidu.com.a.bdydns.com. 29 IN CNAME opencdnbd.jomodns.com. +0800 2023-08-09 00:41:28 INFO dns: exchanged hectorstatic.baidu.com A opencdnbd.jomodns.com. 29 IN A 119.96.52.38 +0800 2023-08-09 00:41:28 INFO dns: exchanged hectorstatic.baidu.com. CNAME hectorstatic.baidu.com. 29 IN CNAME hectorstatic.baidu.com.a.bdydns.com. +0800 2023-08-09 00:41:28 INFO dns: exchanged hectorstatic.baidu.com. CNAME hectorstatic.baidu.com.a.bdydns.com. 29 IN CNAME opencdnbd.jomodns.com. +0800 2023-08-09 00:41:28 INFO dns: exchanged hectorstatic.baidu.com. A opencdnbd.jomodns.com. 29 IN A 119.96.52.38 +0800 2023-08-09 00:41:28 INFO [1421099145 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:61523 +0800 2023-08-09 00:41:28 INFO [1421099145 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:28 DEBUG [1421099145 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:28 DEBUG [1421099145 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:28 DEBUG dns: exchange opencdnbd.jomodns.com. IN HTTPS +0800 2023-08-09 00:41:28 DEBUG dns: exchanged opencdnbd.jomodns.com NOERROR 84 +0800 2023-08-09 00:41:28 INFO dns: exchanged opencdnbd.jomodns.com SOA jomodns.com. 84 IN SOA ns1.jomodns.com. baidu_dns_master.baidu.com. 2308090023 45 5 2592000 3600 +0800 2023-08-09 00:41:28 INFO [2974545244 0ms] inbound/tproxy[tproxy-in]: inbound connection from 192.168.123.4:59219 +0800 2023-08-09 00:41:28 INFO [2974545244 0ms] inbound/tproxy[tproxy-in]: inbound connection to 119.96.52.38:443 +0800 2023-08-09 00:41:28 DEBUG [2974545244 0ms] router: sniffed protocol: tls, domain: hectorstatic.baidu.com +0800 2023-08-09 00:41:28 INFO [2974545244 0ms] outbound/direct[direct-out]: outbound connection to hectorstatic.baidu.com:443 +0800 2023-08-09 00:41:28 DEBUG [2974545244 0ms] dns: lookup domain hectorstatic.baidu.com +0800 2023-08-09 00:41:28 DEBUG dns: exchanged hectorstatic.baidu.com NOERROR 1 +0800 2023-08-09 00:41:28 INFO dns: exchanged hectorstatic.baidu.com CNAME hectorstatic.baidu.com. 1 IN CNAME hectorstatic.baidu.com.a.bdydns.com. +0800 2023-08-09 00:41:28 INFO dns: exchanged hectorstatic.baidu.com CNAME hectorstatic.baidu.com.a.bdydns.com. 1 IN CNAME opencdnbd.jomodns.com. +0800 2023-08-09 00:41:28 INFO dns: exchanged hectorstatic.baidu.com AAAA opencdnbd.jomodns.com. 1 IN AAAA 240e:95c:3004:15::7760:3426 +0800 2023-08-09 00:41:28 INFO dns: exchanged hectorstatic.baidu.com AAAA opencdnbd.jomodns.com. 1 IN AAAA 240e:cf:8800:b::6ae1:c226 +0800 2023-08-09 00:41:28 DEBUG [2974545244 7ms] dns: lookup succeed for hectorstatic.baidu.com: 119.96.52.38 240e:95c:3004:15::7760:3426 240e:cf:8800:b::6ae1:c226 +0800 2023-08-09 00:41:28 INFO [1600988299 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:52008 +0800 2023-08-09 00:41:28 INFO [1600988299 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:28 DEBUG [1600988299 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:28 DEBUG [1600988299 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:28 INFO [2768056365 0ms] inbound/tproxy[tproxy-in]: inbound packet connection from 192.168.123.4:65463 +0800 2023-08-09 00:41:28 INFO [2768056365 0ms] inbound/tproxy[tproxy-in]: inbound packet connection to 192.168.123.55:53 +0800 2023-08-09 00:41:28 DEBUG [2768056365 0ms] router: sniffed packet protocol: dns +0800 2023-08-09 00:41:28 DEBUG [2768056365 0ms] router: match[0] inbound=tproxy-in port=53 => dns-out +0800 2023-08-09 00:41:28 DEBUG dns: exchange sp3.baidu.com. IN A +0800 2023-08-09 00:41:28 DEBUG dns: exchange sp3.baidu.com. IN HTTPS +0800 2023-08-09 00:41:28 DEBUG dns: exchanged sp3.baidu.com NOERROR 107 +0800 2023-08-09 00:41:28 INFO dns: exchanged sp3.baidu.com CNAME sp3.baidu.com. 107 IN CNAME www.a.shifen.com. +0800 2023-08-09 00:41:28 INFO dns: exchanged sp3.baidu.com A www.a.shifen.com. 107 IN A 14.119.104.254 +0800 2023-08-09 00:41:28 INFO dns: exchanged sp3.baidu.com A www.a.shifen.com. 107 IN A 14.119.104.189 +0800 2023-08-09 00:41:28 INFO dns: exchanged sp3.baidu.com. CNAME sp3.baidu.com. 107 IN CNAME www.a.shifen.com. +0800 2023-08-09 00:41:28 INFO dns: exchanged sp3.baidu.com. A www.a.shifen.com. 107 IN A 14.119.104.254 +0800 2023-08-09 00:41:28 INFO dns: exchanged sp3.baidu.com. A www.a.shifen.com. 107 IN A 14.119.104.189 +0800 2023-08-09 00:41:28 DEBUG dns: exchanged sp3.baidu.com NOERROR 340 +0800 2023-08-09 00:41:28 INFO dns: exchanged sp3.baidu.com CNAME sp3.baidu.com. 340 IN CNAME www.a.shifen.com. +0800 2023-08-09 00:41:28 INFO dns: exchanged sp3.baidu.com SOA a.shifen.com. 340 IN SOA ns1.a.shifen.com. baidu_dns_master.baidu.com. 2308090002 5 5 2592000 3600 +0800 2023-08-09 00:41:28 INFO dns: exchanged sp3.baidu.com. CNAME sp3.baidu.com. 340 IN CNAME www.a.shifen.com. +0800 2023-08-09 00:41:28 INFO [3124626430 0ms] inbound/tproxy[tproxy-in]: inbound connection from 192.168.123.4:59220 +0800 2023-08-09 00:41:28 INFO [3124626430 0ms] inbound/tproxy[tproxy-in]: inbound connection to 14.119.104.254:443 +0800 2023-08-09 00:41:28 DEBUG [3124626430 0ms] router: sniffed protocol: tls, domain: sp3.baidu.com +0800 2023-08-09 00:41:28 INFO [3124626430 0ms] outbound/direct[direct-out]: outbound connection to sp3.baidu.com:443 +0800 2023-08-09 00:41:28 DEBUG [3124626430 0ms] dns: lookup domain sp3.baidu.com +0800 2023-08-09 00:41:28 DEBUG dns: exchanged sp3.baidu.com NOERROR 418 +0800 2023-08-09 00:41:28 INFO dns: exchanged sp3.baidu.com CNAME sp3.baidu.com. 418 IN CNAME www.a.shifen.com. +0800 2023-08-09 00:41:28 INFO dns: exchanged sp3.baidu.com SOA a.shifen.com. 418 IN SOA ns1.a.shifen.com. baidu_dns_master.baidu.com. 2308090002 5 5 2592000 3600 +0800 2023-08-09 00:41:28 DEBUG [3124626430 7ms] dns: lookup succeed for sp3.baidu.com: 14.119.104.254 14.119.104.189 +0800 2023-08-09 00:41:31 TRACE closing inbound/tproxy[0] +0800 2023-08-09 00:41:31 TRACE closing outbound/direct[0] +0800 2023-08-09 00:41:31 TRACE closing outbound/dns[1] +0800 2023-08-09 00:41:31 TRACE closing router +0800 2023-08-09 00:41:31 TRACE router: closing rule[0] +0800 2023-08-09 00:41:31 TRACE router: closing transport[0] +0800 2023-08-09 00:41:31 TRACE closing log factory
nekohasekai commented 1 year ago

禁用来自 *ray 系的历史遗留垃圾功能 sniff_override_destination。