Redirect problem from NA to China.

[oskneo]

Please answer these questions before submitting your issue. Thanks!

(Please mention that if the issue you filed is solved, you may wish to close it by yourself. Thanks again.)

(PS, you can remove 3 lines above, including this one, before post your issue.)

What version of shadowsocks-libev are you using?

3.2.3

What operating system are you using?

asus-wrt merlin

What did you do?

if iptables -t nat -N SHADOWSOCKS; then iptables -t mangle -N SHADOWSOCKS

IP

    iptables -t nat -A SHADOWSOCKS -d ss-b.vnet.one -j RETURN
    iptables -t nat -A SHADOWSOCKS -d 0.0.0.0/8 -j RETURN
    iptables -t nat -A SHADOWSOCKS -d 10.0.0.0/8 -j RETURN
    iptables -t nat -A SHADOWSOCKS -d 127.0.0.0/8 -j RETURN
    iptables -t nat -A SHADOWSOCKS -d 169.254.0.0/16 -j RETURN
    iptables -t nat -A SHADOWSOCKS -d 172.16.0.0/12 -j RETURN
    iptables -t nat -A SHADOWSOCKS -d 192.168.0.0/16 -j RETURN
    iptables -t nat -A SHADOWSOCKS -d 224.0.0.0/4 -j RETURN
    iptables -t nat -A SHADOWSOCKS -d 240.0.0.0/4 -j RETURN
    #  IP
    iptables -t nat -A SHADOWSOCKS -p tcp -j REDIRECT --to-port 1080
    #iptables -t nat -A SHADOWSOCKS -p icmp -j RETURN
    #iptables -t nat -A SHADOWSOCKS -p udp -j REDIRECT --to-port 1080
    #iptables -t nat -A SHADOWSOCKS -p icmp -j REDIRECT --to-port 1080

    iptables -t nat -A OUTPUT -p tcp -j SHADOWSOCKS

    iptables -t nat -A PREROUTING -p tcp -j SHADOWSOCKS
    iptables -t mangle -A PREROUTING -j SHADOWSOCKS
    /opt/etc/init.d/S22shadowsocks restart
    /opt/etc/init.d/S22ss-tunnel restart

fi

What did you expect to see?

I am in Canada. I want to get back to China to watch shows on bilibili or iqiyi. After executing these commands, I successfully connect to the ss server. My ss service is a route which contains a server in US for entry and a server in China for exit. When I check my ip in baidu, it shows it is in US. I also cannot use the service for bilibili. Of course, all the faults are not from the ss provider. Some ip checking sites which only having a China server shows it is in China.

I use the same setting on the ss windows client, the baidu ip page shows it is in China. How to solve it?

I have tried use dnsmasq and ss-tunnel towards 114.114.114.114, still fails. Thx.

[oakaigh]

@oskneo Please DO NOT expose your server's public address.

iptables -t nat -A SHADOWSOCKS -d s*.one -j RETURN

[oskneo]

@oskneo Please mask your server address first

iptables -t nat -A SHADOWSOCKS -d s*.one -j RETURN

Yes, I did that. You can see my third command. Actually I successfully connect to the ss server, but not in the correct place.

[oskneo]

I assumed it is the problem of dns request. Is it that at the first step, my dns request goes to the dns server at north america, then get the ip of the north america cdn. And the ss server has its strategy to redirect packets. If the destination is not in China, the packets will be redirected from US but not go into the route towards China. Therefore, I need to also send the dns request via the ss tunnel to get the ip of china cdn of the site. Am I correct? However, if I use ss windows, I can get china ip at both bilibili and baidu in both direct mode and pac mode.

Jared Hillier notifications@github.com 于 2018年12月30日周日 上午5:13写道：

@oskneo https://github.com/oskneo #2250 (comment) https://github.com/shadowsocks/shadowsocks-libev/issues/2250#issuecomment-447545577 This is NOT what ss-tunnel should be used for. See https://github.com/shadowsocks/shadowsocks-libev#transparent-proxy

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/shadowsocks/shadowsocks-libev/issues/2255#issuecomment-450559968, or mute the thread https://github.com/notifications/unsubscribe-auth/AYBAcZfk85llQKI9fibBMmkWR1c2VUpVks5u-LwPgaJpZM4Zk3Nk .

[oskneo]

Here are all my setting: dnsmasq.conf.add conf-dir=/jffs/dnsmasq-conf dnsmasq-conf/dns.conf `server=/vnet.one/8.8.8.8

server=/#/127.0.0.1#7913 S22ss-tunnel #!/bin/sh

ENABLED=yes PROCS=ss-tunnel ARGS="-c /opt/etc/shadowsocks.json -b 127.0.0.1 -l 7913 -L 114.114.114.114:53 -u" PREARGS="" DESC=$PROCS PATH=/opt/sbin:/opt/bin:/opt/usr/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

. /opt/etc/init.d/rc.func `

S22shadowsocks `#!/bin/sh

ENABLED=yes PROCS=ss-redir ARGS="-c /opt/etc/shadowsocks.json" PREARGS="" DESC=$PROCS PATH=/opt/sbin:/opt/bin:/opt/usr/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

[ -z "$(which $PROCS)" ] && exit 0

. /opt/etc/init.d/rc.func

`

I also try not delete those dnsmasq settings and disable ss-tunnel then get the same result.

[nkta3m]

GFWlist模式的反向操作，把所有中国大陆的ip放进gfwlist这个ipset集，我在openwrt上是ok的