search

XX-net / XX-Net

A proxy tool to bypass GFW.
33.02k stars 7.7k forks source link

路由merlin上安装3.9.6，smart router启用失败 #9468

Open flysilkwor opened 6 years ago

flysilkwor commented 6 years ago

Jan 13 01:44:13.843 - [INFO] Load file:/tmp/mnt/sda4/entware-ng.arm/xxnet/code/default/smart_router/local/gfw_black_list.txt Jan 13 01:44:13.893 - [INFO] Load file:/tmp/mnt/sda4/entware-ng.arm/xxnet/code/default/smart_router/local/gfw_white_list.txt Jan 13 01:44:13.914 - [DEBUG] use local DNS server:114.114.114.114 Jan 13 01:44:13.914 - [DEBUG] use local DNS server:180.76.76.76 Jan 13 01:44:13.914 - [DEBUG] use local DNS server:198.15.67.245 Jan 13 01:44:13.915 - [DEBUG] use local DNS server:202.46.32.19 Jan 13 01:44:13.915 - [DEBUG] use local DNS server:64.214.116.84 Jan 13 01:44:13.917 - [INFO] server 127.0.0.1:8086 started. Jan 13 01:44:13.919 - [INFO] Proxy server listen:127.0.0.1:8086. Jan 13 01:44:13.920 - [WARNING] bind DNS 127.0.0.1:53 fail Jan 13 01:44:13.920 - [WARNING] You can try: install libcap2-bin Jan 13 01:44:13.920 - [WARNING] Then: sudo setcap 'cap_net_bind_service=+ep' /usr/bin/python2.7 Jan 13 01:44:13.921 - [WARNING] Or run XX-Net as root Jan 13 01:44:13.921 - [INFO] dns_server stop Jan 13 21:15:35.780 - [DEBUG] Web_control 192.168.0.xx:10311 POST /config Jan 13 21:16:01.107 - [DEBUG] Web_control 192.168.0.xx:10608 POST /config Jan 13 21:16:05.333 - [DEBUG] Web_control 192.168.0.xx:10605 POST /rules Jan 13 21:16:10.134 - [DEBUG] Web_control 192.168.0.xx:10747 POST /cache Jan 13 21:16:11.938 - [DEBUG] Web_control 192.168.0.xx:10747 POST /config Jan 13 21:18:42.862 - [DEBUG] Web_control 192.168.0.xx:4964 POST /config Jan 14 12:03:36.603 - [DEBUG] Web_control 192.168.0.xx:52783 POST /config Jan 14 12:08:00.622 - [DEBUG] Web_control 192.168.0.xx:7093 POST /config Jan 14 12:33:49.215 - [DEBUG] Web_control 192.168.0.xx:9780 POST /config Jan 14 12:34:22.673 - [DEBUG] Web_control 192.168.0.xx:10224 POST /config Jan 14 13:10:42.632 - [DEBUG] Web_control 192.168.0.xx:7874 POST /config

GoodSake commented 6 years ago

merlin路由，什么鬼，还没见过哦。。。

flysilkwor commented 6 years ago

merlin=梅林，一种路由器的定制改版系统

GoodSake commented 6 years ago

It's a firmware's name?

flysilkwor commented 6 years ago

yes

xxnet commented 6 years ago

​路由器还未优化完成，上面的提示

Jan 13 01:44:13.920 - [WARNING] You can try: install libcap2-bin Jan 13 01:44:13.920 - [WARNING] Then: sudo setcap 'cap_net_bind_service=+ep' /usr/bin/python2.7 Jan 13 01:44:13.921 - [WARNING] Or run XX-Net as root 并不适合路由器。

路由器都会启用自身的DNS服务，而且不能替换掉，只能把SmartRouter 的DNS自身启动在别的端口比如5353，然后配置路由器的DNS优先去查询这个端口5353.

参考这篇文章： https://github.com/RMerl/asuswrt-merlin/wiki/Secure-DNS-queries-using-DNSCrypt

先修改SmartRouter的DNS端口： 编辑 data/smart_router/config.json，加入下面一行， "dns_port": 5353

如果没有这个文件，要自己写一个： { "dns_port": 5353 }

然后修改路由器的DNS

echo "no-resolv" > /jffs/configs/dnsmasq.conf.add echo "server=127.0.0.1#5353" >> /jffs/configs/dnsmasq.conf.add

reboot

flysilkwor commented 6 years ago

谢谢xxnet回复，简单看了看merlin改DNS端口的教程，还没试过。有个疑问：这个改DNS的变通办法不知道是否会对路由的正常网关数据传输（非代理流量）产生影响，假如优先解析”5353“端口，是否意味着路由器会将不连接8086代理端口的正常网址解析也是优先通过“5353”解析? 作为私人使用，是希望通过代理和直通网关的通道可以自由选择，如确有影响，不知能否有其它解决方式，会考虑有空时为路由优化一下吗?一点建议而已，不用放在心上，墙内能用上这种工具就已经非常感谢啦，谢谢！

xxnet commented 6 years ago

​ 如果你不启用透明代理，那么不必修改DNS解析，而在需要时指定代理端口。 这样不会影响其他应用。 5353 端口失败，并不会影响8086端口工作。

智能路由的设计目的，是为了实现整个过程自动切换，目前还有很多细节需要改善。

cennong commented 6 years ago

能不能给个梅林装xxnet教程啊 是必须要插个U盘才能装吗？！

xxnet commented 6 years ago

​wiki 里有，一般没有U盘，空间不够的

cennong commented 6 years ago

那我接了个移动硬盘做远程下载 可以安装在移动硬盘里伐 还是必须要单独插个u盘？！

xxnet commented 6 years ago

​移动硬盘和U盘，对linux系统来说没有差别，都是mount一个文件系统