search

vernesong / OpenClash

A Clash Client For OpenWrt
MIT License
15.96k stars 2.97k forks source link

第一次使用无任何问题，隔天莫名的连不上外网 #1394

Closed momohq closed 2 years ago

momohq commented 3 years ago

===================== 测试本机DNS查询 =====================

Server: 127.0.0.1 Address: 127.0.0.1#53

Name: www.baidu.com www.baidu.com canonical name = www.a.shifen.com Name: www.a.shifen.com Address 1: 180.101.49.11 Address 2: 180.101.49.12 *** Can't find www.baidu.com: No answer 请问V大,这是DNS的问题？但是其他DNS我都没开过

vernesong commented 3 years ago

这里没问题

momohq commented 3 years ago

V大，这个情况一般是DNS的问题吧，但是没有头绪 捕获1

vernesong commented 3 years ago

完整日志发出来

momohq commented 3 years ago

===================== 系统信息 =====================

主机型号: Phicomm N1 固件版本: OpenWrt SNAPSHOT r3210-3403deeaf LuCI版本: git-21.114.56541-974fb04-1 内核版本: 5.4.123-flippy-59+o 处理器架构: aarch64_cortex-a53

此项在使用Tun模式时应为ACCEPT

防火墙转发: ACCEPT

此项有值时建议到网络-接口-lan的设置中禁用IPV6的DHCP

IPV6-DHCP:

此项结果应仅有配置文件的DNS监听地址

Dnsmasq转发设置: 127.0.0.1#7874

===================== 依赖检查 =====================

dnsmasq-full: 已安装 coreutils: 已安装 coreutils-nohup: 已安装 bash: 已安装 curl: 已安装 jsonfilter: 已安装 ca-certificates: 已安装 ipset: 已安装 ip-full: 已安装 iptables-mod-tproxy: 已安装 kmod-ipt-tproxy: 已安装 iptables-mod-extra: 已安装 kmod-ipt-extra: 已安装 libcap: 已安装 libcap-bin: 已安装 ruby: 已安装 ruby-yaml: 已安装 ruby-psych: 已安装 ruby-pstore: 已安装 ruby-dbm: 已安装 kmod-tun(TUN模式): 已安装 luci-compat(Luci-19.07): 已安装

===================== 内核检查 =====================

运行状态: 运行中 进程pid: 22390 运行权限: 22390: = cap_dac_override,cap_net_bind_service,cap_net_admin,cap_net_raw,cap_sys_resource+eip 运行用户: nobody 已选择的架构: linux-armv8

下方无法显示内核版本号时请确认您的内核版本是否正确或者有无权限

Tun内核版本: Tun内核文件: 不存在 Tun内核运行权限: 否

Game内核版本: Game内核文件: 不存在 Game内核运行权限: 否

Dev内核版本: v1.5.0-16-gf375f08 Dev内核文件: 存在 Dev内核运行权限: 正常

===================== 插件设置 =====================

当前配置文件: /etc/openclash/config/mm.yaml 启动配置文件: /etc/openclash/mm.yaml 运行模式: fake-ip 默认代理模式: rule UDP流量转发(tproxy): 启用 DNS劫持: 启用 自定义DNS: 停用 IPV6-DNS解析: 停用 禁用Dnsmasq缓存: 停用 自定义规则: 停用 仅允许内网: 停用 仅代理命中规则流量: 停用 仅允许常用端口流量: 停用 绕过中国大陆IP: 停用

启动异常时建议关闭此项后重试

混合节点: 停用 保留配置: 停用

启动异常时建议关闭此项后重试

第三方规则: 停用

===================== 配置文件 =====================

mixed-port: 7893 allow-lan: true bind-address: "*" mode: rule log-level: silent external-controller: 0.0.0.0:9090 dns: enable: true ipv6: false default-nameserver:

===================== 防火墙设置 =====================

NAT chain

Generated by iptables-save v1.8.4 on Sat Jun 5 23:31:19 2021

*nat :PREROUTING ACCEPT [12:773] :INPUT ACCEPT [12:773] :OUTPUT ACCEPT [87:5860] :POSTROUTING ACCEPT [5:322] :MINIUPNPD - [0:0] :MINIUPNPD-POSTROUTING - [0:0] :openclash - [0:0] :openclash_output - [0:0] :postrouting_lan_rule - [0:0] :postrouting_rule - [0:0] :postrouting_vpn_rule - [0:0] :postrouting_wan_rule - [0:0] :prerouting_lan_rule - [0:0] :prerouting_rule - [0:0] :prerouting_vpn_rule - [0:0] :prerouting_wan_rule - [0:0] :zone_lan_postrouting - [0:0] :zone_lan_prerouting - [0:0] :zone_vpn_postrouting - [0:0] :zone_vpn_prerouting - [0:0] :zone_wan_postrouting - [0:0] :zone_wan_prerouting - [0:0] -A PREROUTING -d 8.8.4.4/32 -p tcp -m tcp --dport 53 -j REDIRECT --to-ports 7892 -A PREROUTING -d 8.8.8.8/32 -p tcp -m tcp --dport 53 -j REDIRECT --to-ports 7892 -A PREROUTING -p udp -m udp --dport 53 -j REDIRECT --to-ports 53 -A PREROUTING -p tcp -m tcp --dport 53 -j REDIRECT --to-ports 53 -A PREROUTING -m comment --comment "!fw3: Custom prerouting rule chain" -j prerouting_rule -A PREROUTING -i eth0 -m comment --comment "!fw3" -j zone_lan_prerouting -A PREROUTING -i tun0 -m comment --comment "!fw3" -j zone_vpn_prerouting -A PREROUTING -p udp -m udp --dport 53 -m comment --comment dns_hijack -j REDIRECT --to-ports 53 -A PREROUTING -p tcp -m tcp --dport 53 -m comment --comment dns_hijack -j REDIRECT --to-ports 53 -A PREROUTING -p tcp -j openclash -A OUTPUT -j openclash_output -A POSTROUTING -o eth0 -j MASQUERADE -A POSTROUTING -m comment --comment "!fw3: Custom postrouting rule chain" -j postrouting_rule -A POSTROUTING -o eth0 -m comment --comment "!fw3" -j zone_lan_postrouting -A POSTROUTING -o tun0 -m comment --comment "!fw3" -j zone_vpn_postrouting -A openclash -m set --match-set localnetwork dst -j RETURN -A openclash -p tcp -j REDIRECT --to-ports 7892 -A openclash_output -p tcp -m tcp --sport 1688 -j RETURN -A openclash_output -p tcp -m tcp --sport 10240 -j RETURN -A openclash_output -p tcp -m tcp --sport 1194 -j RETURN -A openclash_output -m set --match-set localnetwork dst -j RETURN -A openclash_output -d 198.18.0.0/16 -p tcp -m owner ! --uid-owner 65534 -j REDIRECT --to-ports 7892 -A openclash_output -p tcp -m owner ! --uid-owner 65534 -j REDIRECT --to-ports 7892 -A zone_lan_postrouting -j MINIUPNPD-POSTROUTING -A zone_lan_postrouting -m comment --comment "!fw3: Custom lan postrouting rule chain" -j postrouting_lan_rule -A zone_lan_prerouting -j MINIUPNPD -A zone_lan_prerouting -m comment --comment "!fw3: Custom lan prerouting rule chain" -j prerouting_lan_rule -A zone_vpn_postrouting -m comment --comment "!fw3: Custom vpn postrouting rule chain" -j postrouting_vpn_rule -A zone_vpn_postrouting -m comment --comment "!fw3" -j FULLCONENAT -A zone_vpn_prerouting -m comment --comment "!fw3: Custom vpn prerouting rule chain" -j prerouting_vpn_rule -A zone_vpn_prerouting -m comment --comment "!fw3" -j FULLCONENAT -A zone_wan_postrouting -m comment --comment "!fw3: Custom wan postrouting rule chain" -j postrouting_wan_rule -A zone_wan_postrouting -m comment --comment "!fw3" -j FULLCONENAT -A zone_wan_prerouting -m comment --comment "!fw3: Custom wan prerouting rule chain" -j prerouting_wan_rule -A zone_wan_prerouting -m comment --comment "!fw3" -j FULLCONENAT COMMIT

Completed on Sat Jun 5 23:31:19 2021

Mangle chain

Generated by iptables-save v1.8.4 on Sat Jun 5 23:31:19 2021

*mangle :PREROUTING ACCEPT [1513:268090] :INPUT ACCEPT [1513:268090] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [1848:1006169] :POSTROUTING ACCEPT [1848:1006169] :openclash - [0:0] -A PREROUTING -p udp -j openclash -A openclash -p udp -m udp --dport 1194 -j RETURN -A openclash -p udp -m udp --dport 500 -j RETURN -A openclash -p udp -m udp --dport 546 -j RETURN -A openclash -p udp -m udp --dport 68 -j RETURN -A openclash -m set --match-set localnetwork dst -j RETURN -A openclash -p udp -m udp --dport 53 -j RETURN -A openclash -p udp -j TPROXY --on-port 7892 --on-ip 0.0.0.0 --tproxy-mark 0x162/0xffffffff COMMIT

Completed on Sat Jun 5 23:31:19 2021

===================== IPSET状态 =====================

Name: cn Name: ct Name: cnc Name: cmcc Name: crtc Name: cernet Name: gwbn Name: othernet Name: music Name: mwan3_connected_v4 Name: mwan3_connected_v6 Name: mwan3_source_v6 Name: mwan3_dynamic_v4 Name: mwan3_dynamic_v6 Name: mwan3_custom_v4 Name: mwan3_custom_v6 Name: localnetwork Name: mwan3_connected

===================== 路由表状态 =====================

route -n

Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 192.168.131.1 0.0.0.0 UG 0 0 0 eth0 172.31.0.0 0.0.0.0 255.255.255.0 U 0 0 0 docker0 192.168.131.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0

ip route list

default via 192.168.131.1 dev eth0 proto static 172.31.0.0/24 dev docker0 proto kernel scope link src 172.31.0.1 linkdown 192.168.131.0/24 dev eth0 proto kernel scope link src 192.168.131.2

ip rule show

0: from all lookup local 32765: from all fwmark 0x162 lookup 354 32766: from all lookup main 32767: from all lookup default

===================== 端口占用状态 =====================

tcp 0 0 :::9090 ::: LISTEN 22390/clash tcp 0 0 :::7890 ::: LISTEN 22390/clash tcp 0 0 :::7891 ::: LISTEN 22390/clash tcp 0 0 :::7892 ::: LISTEN 22390/clash tcp 0 0 :::7893 ::: LISTEN 22390/clash udp 0 0 127.0.0.1:7874 0.0.0.0: 22390/clash udp 0 0 :::7891 ::: 22390/clash udp 0 0 :::7892 ::: 22390/clash udp 0 0 :::7893 :::* 22390/clash

===================== 测试本机DNS查询 =====================

Server: 127.0.0.1 Address: 127.0.0.1#53

Name: www.baidu.com Address 1: 198.18.0.3 *** Can't find www.baidu.com: No answer

===================== resolv.conf.d =====================

Interface lan

nameserver 192.168.131.1

===================== 测试本机网络连接 =====================

HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: private, no-cache, no-store, proxy-revalidate, no-transform Connection: keep-alive Content-Length: 277 Content-Type: text/html Date: Sat, 05 Jun 2021 15:31:20 GMT Etag: "575e1f60-115" Last-Modified: Mon, 13 Jun 2016 02:50:08 GMT Pragma: no-cache Server: bfe/1.0.8.18

===================== 测试本机网络下载 =====================

HTTP/1.1 200 OK Connection: keep-alive Content-Length: 80 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "ee0c1b690f6446a4f4d66a86ed3d3b260c267e49d5b96458b21e5afc59cf319d" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 75D0:1F64:7F020:93C78:60B7DEF6 Accept-Ranges: bytes Date: Sat, 05 Jun 2021 15:31:20 GMT Via: 1.1 varnish X-Served-By: cache-hkg17924-HKG X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1622907081.598730,VS0,VE0 Vary: Authorization,Accept-Encoding Access-Control-Allow-Origin: * X-Fastly-Request-ID: 828536f7b62e761a0e5fdbff9997f0a09c874704 Expires: Sat, 05 Jun 2021 15:36:20 GMT Source-Age: 232

vernesong commented 3 years ago

没看出问题，你开控制面板看看链接日志吧

github-actions[bot] commented 2 years ago

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 5 days