Closed adminidor closed 3 years ago
刚拉包刷机,启动不成功,修改config.yaml文件权限0755,可以启动 2020-11-22 15:13:05 OpenClash Start Successful 2020-11-22 15:13:20 History:【config.yaml】 Restore Successful 2020-11-22 15:13:14 level=info msg="DNS server listening at: 127.0.0.1:7874" 2020-11-22 15:13:14 level=info msg="Start initial rule provider iQiyi" ............................ 修改自定义上游DNS服务器 ,保存并应用,不响应,关闭openclash,再启动,自定义dns生效。
日志 OpenClash 调试日志
生成时间: 2020-11-22 15:20:20 插件版本: v0.41.03-beta 隐私提示: 上传此日志前请注意检查、屏蔽公网IP、节点、密码等相关敏感信息
#===================== 系统信息 =====================# 主机型号: Intel(R) Celeron(R) 固件版本: OpenWrt SNAPSHOT r2951-73e554dab LuCI版本: git-20.256.12360-1a54222-1 内核版本: 5.4.75 处理器架构: x86_64 #此项在使用Tun模式时应为ACCEPT 防火墙转发: ACCEPT #此项有值时建议到网络-接口-lan的设置中禁用IPV6的DHCP IPV6-DHCP: #此项结果应仅有配置文件的DNS监听地址 Dnsmasq转发设置: 127.0.0.1#7874 #===================== 依赖检查 =====================# dnsmasq-full: 已安装 coreutils: 已安装 coreutils-nohup: 已安装 bash: 已安装 curl: 已安装 jsonfilter: 已安装 ca-certificates: 已安装 ipset: 已安装 ip-full: 已安装 iptables-mod-tproxy: 已安装 iptables-mod-extra: 已安装 libcap: 已安装 libcap-bin: 已安装 ruby: 已安装 ruby-yaml: 已安装 kmod-tun(TUN模式): 已安装 luci-compat(Luci-19.07): 已安装 #===================== 内核检查 =====================# 运行状态: 运行中 进程pid: 24524 运行权限: 24524: = cap_dac_override,cap_net_bind_service,cap_net_admin,cap_net_raw,cap_sys_resource+eip 运行用户: nobody 已选择的架构: linux-amd64 #下方无法显示内核版本号时请确认您的内核版本是否正确或者有无权限 Tun内核版本: 2020.11.19.g6e99b3d Tun内核文件: 存在 Tun内核运行权限: 正常 Game内核版本: v0.17.0-228-g9262bd5 Game内核文件: 存在 Game内核运行权限: 正常 Dev内核版本: v1.2.0-19-g9758114 Dev内核文件: 存在 Dev内核运行权限: 正常 #===================== 插件设置 =====================# 当前配置文件: /etc/openclash/config/config.yaml 启动配置文件: /etc/openclash/config.yaml 运行模式: fake-ip-mix 默认代理模式: rule UDP流量转发: 停用 DNS劫持: 启用 自定义DNS: 启用 IPV6-DNS解析: 停用 禁用Dnsmasq缓存: 停用 自定义规则: 停用 仅允许内网: 停用 仅代理命中规则流量: 停用 绕过中国大陆IP: 停用 #启动异常时建议关闭此项后重试 保留配置: 停用 第三方规则: 停用 #===================== 配置文件 =====================# redir-port: 7892 interface-name: pppoe-wan port: 7890 socks-port: 7891 ipv6: false mode: rule log-level: silent external-controller: 0.0.0.0:9090 allow-lan: true bind-address: "*" external-ui: "/usr/share/openclash/dashboard" tun: enable: true stack: system dns-hijack: - tcp://8.8.8.8:53 - tcp://8.8.4.4:53 dns: listen: 127.0.0.1:7874 enable: true ipv6: false enhanced-mode: fake-ip fake-ip-range: 198.18.0.1/16 fake-ip-filter: - "*.lan" - time.windows.com - time.nist.gov - time.apple.com - time.asia.apple.com - "*.ntp.org.cn" - "*.openwrt.pool.ntp.org" - time1.cloud.tencent.com - time.ustc.edu.cn - pool.ntp.org - ntp.ubuntu.com - ntp.aliyun.com - ntp1.aliyun.com - ntp2.aliyun.com - ntp3.aliyun.com - ntp4.aliyun.com - ntp5.aliyun.com - ntp6.aliyun.com - ntp7.aliyun.com - time1.aliyun.com - time2.aliyun.com - time3.aliyun.com - time4.aliyun.com - time5.aliyun.com - time6.aliyun.com - time7.aliyun.com - "*.time.edu.cn" - time1.apple.com - time2.apple.com - time3.apple.com - time4.apple.com - time5.apple.com - time6.apple.com - time7.apple.com - time1.google.com - time2.google.com - time3.google.com - time4.google.com - music.163.com - "*.music.163.com" - "*.126.net" - musicapi.taihe.com - music.taihe.com - songsearch.kugou.com - trackercdn.kugou.com - "*.kuwo.cn" - api-jooxtt.sanook.com - api.joox.com - joox.com - y.qq.com - "*.y.qq.com" - streamoc.music.tc.qq.com - mobileoc.music.tc.qq.com - isure.stream.qqmusic.qq.com - dl.stream.qqmusic.qq.com - aqqmusic.tc.qq.com - amobile.music.tc.qq.com - "*.xiami.com" - "*.music.migu.cn" - music.migu.cn - "*.msftconnecttest.com" - "*.msftncsi.com" - localhost.ptlogin2.qq.com - "+.srv.nintendo.net" - "+.stun.playstation.net" - xbox.*.microsoft.com - "+.xboxlive.com" - proxy.golang.org - stun.*.* - stun.*.*.* - heartbeat.belkin.com - "*.linksys.com" - "*.linksyssmartwifi.com" nameserver: - 114.114.114.114 - 119.29.29.29 - 119.28.28.28 - 223.5.5.5 - https://doh.rixcloud.dev/dns-query - tls://dns.rubyfish.cn:853 fallback: - https://cloudflare-dns.com/dns-query - https://dns.google/dns-query - tls://dns.google:853 - https://1.1.1.1/dns-query - tls://1.1.1.1:853 - tls://8.8.8.8:853 fallback-filter: geoip: true ipcidr: - 0.0.0.0/8 - 10.0.0.0/8 - 100.64.0.0/10 - 127.0.0.0/8 - 169.254.0.0/16 - 172.16.0.0/12 - 192.0.0.0/24 - 192.0.2.0/24 - 192.88.99.0/24 - 192.168.0.0/16 - 198.18.0.0/15 - 198.51.100.0/24 - 203.0.113.0/24 - 224.0.0.0/4 - 240.0.0.0/4 - 255.255.255.255/32 #===================== 防火墙设置 =====================# #NAT chain # Generated by iptables-save v1.8.4 on Sun Nov 22 15:20:21 2020 *nat :PREROUTING ACCEPT [79:4025] :INPUT ACCEPT [352:20188] :OUTPUT ACCEPT [788:48901] :POSTROUTING ACCEPT [161:10417] :MINIUPNPD - [0:0] :MINIUPNPD-POSTROUTING - [0:0] :openclash - [0:0] :openclash_output - [0:0] :postrouting_lan_rule - [0:0] :postrouting_rule - [0:0] :postrouting_wan_rule - [0:0] :prerouting_lan_rule - [0:0] :prerouting_rule - [0:0] :prerouting_wan_rule - [0:0] :zone_lan_postrouting - [0:0] :zone_lan_prerouting - [0:0] :zone_wan_postrouting - [0:0] :zone_wan_prerouting - [0:0] -A PREROUTING -d 8.8.4.4/32 -p tcp -j ACCEPT -A PREROUTING -d 8.8.8.8/32 -p tcp -j ACCEPT -A PREROUTING -p udp -m udp --dport 53 -j REDIRECT --to-ports 53 -A PREROUTING -p tcp -m tcp --dport 53 -j REDIRECT --to-ports 53 -A PREROUTING -m comment --comment "!fw3: Custom prerouting rule chain" -j prerouting_rule -A PREROUTING -i br-lan -m comment --comment "!fw3" -j zone_lan_prerouting -A PREROUTING -i pppoe-wan -m comment --comment "!fw3" -j zone_wan_prerouting -A PREROUTING -p tcp -j openclash -A OUTPUT -j openclash_output -A POSTROUTING -m comment --comment "!fw3: Custom postrouting rule chain" -j postrouting_rule -A POSTROUTING -o br-lan -m comment --comment "!fw3" -j zone_lan_postrouting -A POSTROUTING -o pppoe-wan -m comment --comment "!fw3" -j zone_wan_postrouting -A openclash -m set --match-set localnetwork dst -j RETURN -A openclash -p tcp -j REDIRECT --to-ports 7892 -A openclash_output -m set --match-set localnetwork dst -j RETURN -A openclash_output -p tcp -m owner ! --uid-owner 65534 -m multiport --dports 80,443 -j REDIRECT --to-ports 7892 -A openclash_output -d 198.18.0.0/16 -p tcp -m owner ! --uid-owner 65534 -j REDIRECT --to-ports 7892 -A zone_lan_postrouting -m comment --comment "!fw3: Custom lan postrouting rule chain" -j postrouting_lan_rule -A zone_lan_prerouting -m comment --comment "!fw3: Custom lan prerouting rule chain" -j prerouting_lan_rule -A zone_wan_postrouting -j MINIUPNPD-POSTROUTING -A zone_wan_postrouting -m comment --comment "!fw3: Custom wan postrouting rule chain" -j postrouting_wan_rule -A zone_wan_postrouting -m comment --comment "!fw3" -j FULLCONENAT -A zone_wan_prerouting -j MINIUPNPD -A zone_wan_prerouting -m comment --comment "!fw3: Custom wan prerouting rule chain" -j prerouting_wan_rule -A zone_wan_prerouting -m comment --comment "!fw3" -j FULLCONENAT COMMIT # Completed on Sun Nov 22 15:20:21 2020 #Mangle chain # Generated by iptables-save v1.8.4 on Sun Nov 22 15:20:21 2020 *mangle :PREROUTING ACCEPT [38988:41196436] :INPUT ACCEPT [38625:41082047] :FORWARD ACCEPT [363:114389] :OUTPUT ACCEPT [22447:41993167] :POSTROUTING ACCEPT [22812:42108028] :openclash - [0:0] :openclash_dns_hijack - [0:0] :openclash_output - [0:0] -A PREROUTING -p udp -j openclash -A PREROUTING -p tcp -m tcp --dport 53 -j openclash_dns_hijack -A FORWARD -o pppoe-wan -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu -A OUTPUT -j openclash_output -A openclash -p udp -m udp --dport 500 -j RETURN -A openclash -p udp -m udp --dport 546 -j RETURN -A openclash -p udp -m udp --dport 68 -j RETURN -A openclash -m set --match-set localnetwork dst -j RETURN -A openclash -j MARK --set-xmark 0x162/0xffffffff -A openclash_dns_hijack -d 8.8.8.8/32 -j MARK --set-xmark 0x162/0xffffffff -A openclash_dns_hijack -d 8.8.4.4/32 -j MARK --set-xmark 0x162/0xffffffff -A openclash_output -p udp -m udp --sport 500 -j RETURN -A openclash_output -p udp -m udp --sport 546 -j RETURN -A openclash_output -p udp -m udp --sport 68 -j RETURN -A openclash_output -m set --match-set localnetwork dst -j RETURN -A openclash_output -d 198.18.0.0/16 -p udp -m owner ! --uid-owner 65534 -j MARK --set-xmark 0x162/0xffffffff COMMIT # Completed on Sun Nov 22 15:20:21 2020 #===================== Tun设备状态 =====================# utun: tun pi filter #===================== 端口占用状态 =====================# tcp 0 0 198.18.0.1:7777 0.0.0.0:* LISTEN 24524/clash tcp 0 0 :::7890 :::* LISTEN 24524/clash tcp 0 0 :::7891 :::* LISTEN 24524/clash tcp 0 0 :::7892 :::* LISTEN 24524/clash tcp 0 0 :::7893 :::* LISTEN 24524/clash tcp 0 0 :::9090 :::* LISTEN 24524/clash udp 0 0 198.18.0.1:7777 0.0.0.0:* 24524/clash udp 0 0 127.0.0.1:7874 0.0.0.0:* 24524/clash udp 0 0 :::7891 :::* 24524/clash udp 0 0 :::7892 :::* 24524/clash udp 0 0 :::7893 :::* 24524/clash #===================== 测试本机DNS查询 =====================# Server: 127.0.0.1 Address: 127.0.0.1#53 Name: www.baidu.com Address 1: 198.18.0.38 *** Can't find www.baidu.com: No answer #===================== 测试本机网络连接 =====================# HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: private, no-cache, no-store, proxy-revalidate, no-transform Connection: keep-alive Content-Length: 277 Content-Type: text/html Date: Sun, 22 Nov 2020 07:20:17 GMT Etag: "575e1f72-115" Last-Modified: Mon, 13 Jun 2016 02:50:26 GMT Pragma: no-cache Server: bfe/1.0.8.18 #===================== 测试本机网络下载 =====================# HTTP/1.1 200 OK Connection: keep-alive Content-Length: 80 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "9800ab8bb9b01921d97e32e232fedabf52521de9588f3b40b5e93a47fc383e0e" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block Via: 1.1 varnish (Varnish/6.0), 1.1 varnish X-GitHub-Request-Id: D2F6:67F2:A8C5C:C9F09:5FBA072D Accept-Ranges: bytes Date: Sun, 22 Nov 2020 07:20:17 GMT X-Served-By: cache-hkg17924-HKG X-Cache: HIT, HIT X-Cache-Hits: 1, 2 X-Timer: S1606029618.797673,VS0,VE0 Vary: Authorization,Accept-Encoding Access-Control-Allow-Origin: * X-Fastly-Request-ID: 669bd2213a10a0f4332f1cad88116de5143568f3 Expires: Sun, 22 Nov 2020 07:25:17 GMT Source-Age: 262 #===================== 最近运行日志 =====================# time="2020-11-22T07:13:14Z" level=info msg="Start initial compatible provider Others" time="2020-11-22T07:13:14Z" level=info msg="Start initial rule provider KKTV" time="2020-11-22T07:13:14Z" level=info msg="Start initial rule provider Soundcloud" time="2020-11-22T07:13:14Z" level=info msg="Start initial rule provider myTV SUPER" ................................................ time="2020-11-22T07:13:14Z" level=info msg="DNS server listening at: 127.0.0.1:7874" 2020-11-22 15:13:20 History:【config.yaml】 Restore Successful 2020-11-22 15:13:05 OpenClash Start Successful
权限是哪个路径的提示? 只有在关闭状态下应用,dns才会修改?
就配置文件config.yaml 权限,改成755权限 自定义dns保存并应用,不响应,不提示,也不报错
刚拉包刷机,启动不成功,修改config.yaml文件权限0755,可以启动 2020-11-22 15:13:05 OpenClash Start Successful 2020-11-22 15:13:20 History:【config.yaml】 Restore Successful 2020-11-22 15:13:14 level=info msg="DNS server listening at: 127.0.0.1:7874" 2020-11-22 15:13:14 level=info msg="Start initial rule provider iQiyi" ............................ 修改自定义上游DNS服务器 ,保存并应用,不响应,关闭openclash,再启动,自定义dns生效。
日志 OpenClash 调试日志
生成时间: 2020-11-22 15:20:20 插件版本: v0.41.03-beta 隐私提示: 上传此日志前请注意检查、屏蔽公网IP、节点、密码等相关敏感信息