semigodking / redsocks

transparent redirector of any TCP/UDP connection to proxy
Apache License 2.0
1.16k stars 246 forks source link

使用TPROXY代理UDP时,上级的SOCKSIP只有为127.0.0.1时能够正常工作 #198

Open ly-druid opened 4 months ago

ly-druid commented 4 months ago

1715916186.547439 debug redudp.c:239 redudp_drop_client(...) [192.170.5.200:62137->8.8.8.8:53]: Dropping client @ state: 0 1715916187.529520 debug redudp.c:383 redudp_first_pkt_from_client(...) [192.170.5.200:62140->8.8.8.8:53]: got 1st packet from client 1715916187.571826 debug socks5-udp.c:389 socks5_relay_connected(...) [192.170.5.200:62140->8.8.8.8:53]: via 8.27.18.42:1380 1715916187.614254 debug socks5-udp.c:344 socks5_read_auth_methods(...) [192.170.5.200:62140->8.8.8.8:53]: 1715916187.656592 debug socks5-udp.c:307 socks5_read_auth_reply(...) [192.170.5.200:62140->8.8.8.8:53]: 1715916187.698958 debug socks5-udp.c:233 socks5_read_assoc_reply(...) [192.170.5.200:62140->8.8.8.8:53]: 1715916187.698994 notice socks5-udp.c:247 socks5_read_assoc_reply(...) [192.170.5.200:62140->8.8.8.8:53]: Socks5 server status: "server failure" (1)

但本机使用curl,实际上无论请求127.0.0.1还是远端8.27.18.42:1380的socks都正常

ly-druid commented 4 months ago

这是我的配置与iptables base {log_debug = on;log_info = on;log = "file:/tmp/red2.log";daemon = on;redirector = iptables; } redsocks { bind = "127.0.0.1:12345";relay = "8.27.18.42:1380"; type = socks5; } redudp { bind = "127.0.0.1:12346";relay = "8.27.18.42:1380"; type = socks5; udp_timeout = 3;} //relay 为远端地址不工作使用127.0.0.1时完美工作

iptables -t mangle -A PREROUTING -p udp -j TPROXY --on-ip 127.0.0.1 --on-port 12346 --tproxy-mark 1

ip rule add fwmark 1 lookup 100 ip route add local default dev lo table 100

qq71680264 commented 3 months ago

你好,请问你解决这个问题了吗,我也被困在这里了。

semigodking commented 3 months ago

最新版应该解决了

On Fri, Jun 28, 2024, 15:54 Elecrow_Jano @.***> wrote:

你好,请问你解决这个问题了吗,我也被困在这里了。

— Reply to this email directly, view it on GitHub https://github.com/semigodking/redsocks/issues/198#issuecomment-2196348476, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAP2XD5NSAWNCAGSLRVJXLTZJUJDRAVCNFSM6AAAAABH3LFXP2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDCOJWGM2DQNBXGY . You are receiving this because you commented.Message ID: @.***>