shadowsocks / ChinaDNS

Protect yourself against DNS poisoning in China.
GNU General Public License v3.0
3.6k stars 1.29k forks source link

双向过滤 bug #103

Closed 4ft35t closed 9 years ago

4ft35t commented 9 years ago

开启双向过滤,当一个查询结果既有国内 ip,又有国外 ip 时,全都被 filter 了

root@OpenWrt:~# nslookup www.mp4ba.com '114.114.114.114'
Server:    114.114.114.114
Address 1: 114.114.114.114 public1.114dns.com

Name:      www.mp4ba.com
Address 1: 43.227.113.5 //国外
Address 2: 117.25.129.243 //国内
root@OpenWrt:~# nslookup www.mp4ba.com '127.0.0.1:5353'
Server:    127.0.0.1
Address 1: 127.0.0.1 localhost

Name:      www.mp4ba.com
Address 1: 43.227.113.5
Address 2: 117.25.129.243

ChinaDNS 日志

Thu Jun 25 18:27:52 2015 request www.mp4ba.com
Thu Jun 25 18:27:52 2015 response www.mp4ba.com from 114.114.114.114:53 - filter
Thu Jun 25 18:27:53 2015 response www.mp4ba.com from 127.0.0.1:5353 - pass
Thu Jun 25 18:27:53 2015 request www.mp4ba.com
Thu Jun 25 18:27:53 2015 response www.mp4ba.com from 114.114.114.114:53 - 43.227.113.5, filter
Thu Jun 25 18:27:53 2015 response www.mp4ba.com from 127.0.0.1:5353 - 117.25.129.243, filter
Thu Jun 25 18:27:58 2015 request www.mp4ba.com
Thu Jun 25 18:27:58 2015 response www.mp4ba.com from 114.114.114.114:53 - 117.25.129.243, 43.227.113.5, filter
Thu Jun 25 18:27:58 2015 response www.mp4ba.com from 127.0.0.1:5353 - 117.25.129.243, filter
Thu Jun 25 18:28:03 2015 request www.mp4ba.com
Thu Jun 25 18:28:03 2015 response www.mp4ba.com from 114.114.114.114:53 - 43.227.113.5, filter
Thu Jun 25 18:28:03 2015 response www.mp4ba.com from 127.0.0.1:5353 - 117.25.129.243, filter
Thu Jun 25 18:28:08 2015 request www.mp4ba.com
Thu Jun 25 18:28:08 2015 response www.mp4ba.com from 114.114.114.114:53 - 117.25.129.243, 43.227.113.5, filter
Thu Jun 25 18:28:08 2015 response www.mp4ba.com from 127.0.0.1:5353 - 117.25.129.243, filter
clowwindy commented 9 years ago

双向过滤不应该打开,它不是给普通人用的。