shadowsocksrr / shadowsocksr-android

A ShadowsocksR client for Android
7.72k stars 1.32k forks source link

DNS highjacking #209

Open Heclalava opened 5 years ago

Heclalava commented 5 years ago

Can you add a feature to forward DNS requests to remote server like in the regular Shadowsocks? In Thailand they block websites by DNS hijacking and unable to use SSR to bypass that, can only use SS as they have the option to forward DNS requests to they remote server.

soenggam commented 5 years ago

hey guy,you did not see this?

the UDP Forwarding

img_20190206_222156_701

Heclalava commented 5 years ago

UDP packet forwarding doesn't work. I tried. Only forward DNS requests to server in the regular Shadowsocks works to unlock websites blocked in Thailand, but then no obfuscation.

On Wed, 6 Feb 2019, 21:26 soenggam <notifications@github.com wrote:

hey guy,you did not see this? the UDP Forwarding

[image: img_20190206_222156_701] https://user-images.githubusercontent.com/42244552/52347903-02932180-2a5e-11e9-8c81-2b100b98014d.jpg

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/shadowsocksrr/shadowsocksr-android/issues/209#issuecomment-461041312, or mute the thread https://github.com/notifications/unsubscribe-auth/AH9Hbx_nIKFxOLr5yIFL0wkRN8BWX5zsks5vKuYWgaJpZM4akR5C .

Heclalava commented 5 years ago

Ok I was using the latest alpha release (3.5.4) and it wasn't working. I switched to the latest release 3.5.3 and UDP packet forwarding works to unblock those sites in Thailand. So it's a bug then in version 3.5.4.

On Wed, 6 Feb 2019, 21:34 Dr Shaun Hutchinson <drshaunhutchinson@gmail.com wrote:

UDP packet forwarding doesn't work. I tried. Only forward DNS requests to server in the regular Shadowsocks works to unlock websites blocked in Thailand, but then no obfuscation.

On Wed, 6 Feb 2019, 21:26 soenggam <notifications@github.com wrote:

hey guy,you did not see this? the UDP Forwarding

[image: img_20190206_222156_701] https://user-images.githubusercontent.com/42244552/52347903-02932180-2a5e-11e9-8c81-2b100b98014d.jpg

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/shadowsocksrr/shadowsocksr-android/issues/209#issuecomment-461041312, or mute the thread https://github.com/notifications/unsubscribe-auth/AH9Hbx_nIKFxOLr5yIFL0wkRN8BWX5zsks5vKuYWgaJpZM4akR5C .

soenggam commented 5 years ago

@Heclalava have you ever tried use another DNS or change dns port?I guess your ISP may hijack the 53 port.

Akkariiin commented 5 years ago

If you enable UDP Forward, all UDP include DNS will requests to remte proxy server. If you disable UDP Forward, a small dns server will run on the local , it resolve all the DNS request on the remote proxy server.

so, if you get DNS issue, please check the DNS server seting first.