AristotleLai
commented
2 years ago 网站访问检查页面截图如下：
Closed AristotleLai closed 2 years ago
AristotleLai
commented
2 years ago 网站访问检查页面截图如下：
AristotleLai
commented
2 years ago 内核日志： 2022-01-08 16:01:13 level=info msg="[TCP] 192.168.1.2:53034 --> cdn.jsdelivr.net:443 using GLOBAL" 2022-01-08 16:01:13 level=info msg="[TCP] 192.168.1.2:39954 --> raw.githubusercontent.com:443 using GLOBAL" 2022-01-08 16:01:13 level=info msg="[TCP] 192.168.1.2:53026 --> cdn.jsdelivr.net:443 using GLOBAL" 2022-01-08 16:01:13 level=info msg="[TCP] 192.168.1.2:39940 --> raw.githubusercontent.com:443 using GLOBAL" 2022-01-08 15:43:23 level=debug msg="[DNS] response msg empty: &dns.Msg{MsgHdr:dns.MsgHdr{Id:0x65d4, Response:true, Opcode:0, Authoritative:false, Truncated:false, RecursionDesired:true, RecursionAvailable:true, Zero:false, AuthenticatedData:false, CheckingDisabled:false, Rcode:4}, Compress:false, Question:[]dns.Question{dns.Question{Name:\"main.m.taobao.com.w.alikunlun.com.\", Qtype:0x41, Qclass:0x1}}, Answer:[]dns.RR(nil), Ns:[]dns.RR(nil), Extra:[]dns.RR(nil)}" 2022-01-08 15:43:23 level=debug msg="[DNS] response msg empty: &dns.Msg{MsgHdr:dns.MsgHdr{Id:0xc476, Response:true, Opcode:0, Authoritative:false, Truncated:false, RecursionDesired:true, RecursionAvailable:true, Zero:false, AuthenticatedData:false, CheckingDisabled:false, Rcode:4}, Compress:false, Question:[]dns.Question{dns.Question{Name:\"g.cn.miaozhen.com.\", Qtype:0x41, Qclass:0x1}}, Answer:[]dns.RR(nil), Ns:[]dns.RR(nil), Extra:[]dns.RR(nil)}" 2022-01-08 15:43:23 level=debug msg="[DNS] response msg empty: &dns.Msg{MsgHdr:dns.MsgHdr{Id:0xce92, Response:true, Opcode:0, Authoritative:false, Truncated:false, RecursionDesired:true, RecursionAvailable:true, Zero:false, AuthenticatedData:false, CheckingDisabled:false, Rcode:4}, Compress:false, Question:[]dns.Question{dns.Question{Name:\"safebrowsing.googleapis-cn.com.\", Qtype:0x41, Qclass:0x1}}, Answer:[]dns.RR(nil), Ns:[]dns.RR(nil), Extra:[]dns.RR(nil)}" 2022-01-08 15:43:23 level=debug msg="[DNS] response msg empty: &dns.Msg{MsgHdr:dns.MsgHdr{Id:0x927f, Response:true, Opcode:0, Authoritative:false, Truncated:false, RecursionDesired:true, RecursionAvailable:true, Zero:false, AuthenticatedData:false, CheckingDisabled:false, Rcode:4}, Compress:false, Question:[]dns.Question{dns.Question{Name:\"ossgw.alicdn.com.danuoyi.alicdn.com.\", Qtype:0x41, Qclass:0x1}}, Answer:[]dns.RR(nil), Ns:[]dns.RR(nil), Extra:[]dns.RR(nil)}" 2022-01-08 15:43:23 level=debug msg="[DNS] response msg empty: &dns.Msg{MsgHdr:dns.MsgHdr{Id:0xd750, Response:true, Opcode:0, Authoritative:false, Truncated:false, RecursionDesired:true, RecursionAvailable:true, Zero:false, AuthenticatedData:false, CheckingDisabled:false, Rcode:4}, Compress:false, Question:[]dns.Question{dns.Question{Name:\"main.m.taobao.com.\", Qtype:0x41, Qclass:0x1}}, Answer:[]dns.RR(nil), Ns:[]dns.RR(nil), Extra:[]dns.RR(nil)}" 2022-01-08 15:43:23 level=debug msg="[DNS] response msg empty: &dns.Msg{MsgHdr:dns.MsgHdr{Id:0xaf2c, Response:true, Opcode:0, Authoritative:false, Truncated:false, RecursionDesired:true, RecursionAvailable:true, Zero:false, AuthenticatedData:false, CheckingDisabled:false, Rcode:4}, Compress:false, Question:[]dns.Question{dns.Question{Name:\"1595096.sched.d0-dk.tdnsv5.com.\", Qtype:0x41, Qclass:0x1}}, Answer:[]dns.RR(nil), Ns:[]dns.RR(nil), Extra:[]dns.RR(nil)}" 2022-01-08 15:43:23 level=debug msg="[DNS] response msg empty: &dns.Msg{MsgHdr:dns.MsgHdr{Id:0x6c76, Response:true, Opcode:0, Authoritative:false, Truncated:false, RecursionDesired:true, RecursionAvailable:true, Zero:false, AuthenticatedData:false, CheckingDisabled:false, Rcode:4}, Compress:false, Question:[]dns.Question{dns.Question{Name:\"www.zhihu.com.\", Qtype:0x41, Qclass:0x1}}, Answer:[]dns.RR(nil), Ns:[]dns.RR(nil), Extra:[]dns.RR(nil)}" 2022-01-08 15:41:50 level=debug msg="[DNS] response msg empty: &dns.Msg{MsgHdr:dns.MsgHdr{Id:0x8af2, Response:true, Opcode:0, Authoritative:false, Truncated:false, RecursionDesired:true, RecursionAvailable:true, Zero:false, AuthenticatedData:false, CheckingDisabled:false, Rcode:4}, Compress:false, Question:[]dns.Question{dns.Question{Name:\"qb.ias.tencent-cloud.net.\", Qtype:0x41, Qclass:0x1}}, Answer:[]dns.RR(nil), Ns:[]dns.RR(nil), Extra:[]dns.RR(nil)}" 2022-01-08 15:41:31 level=debug msg="[DNS] response msg empty: &dns.Msg{MsgHdr:dns.MsgHdr{Id:0x9a7b, Response:true, Opcode:0, Authoritative:false, Truncated:false, RecursionDesired:true, RecursionAvailable:true, Zero:false, AuthenticatedData:false, CheckingDisabled:false, Rcode:4}, Compress:false, Question:[]dns.Question{dns.Question{Name:\"f7gzyd.a.sohu.com.\", Qtype:0x41, Qclass:0x1}}, Answer:[]dns.RR(nil), Ns:[]dns.RR(nil), Extra:[]dns.RR(nil)}" 2022-01-08 15:37:13 level=debug msg="[DNS] response msg empty: &dns.Msg{MsgHdr:dns.MsgHdr{Id:0x198e, Response:true, Opcode:0, Authoritative:false, Truncated:false, RecursionDesired:true, RecursionAvailable:true, Zero:false, AuthenticatedData:false, CheckingDisabled:false, Rcode:4}, Compress:false, Question:[]dns.Question{dns.Question{Name:\"main.m.taobao.com.\", Qtype:0x41, Qclass:0x1}}, Answer:[]dns.RR(nil), Ns:[]dns.RR(nil), Extra:[]dns.RR(nil)}" 2022-01-08 15:37:13 level=debug msg="[DNS] response msg empty: &dns.Msg{MsgHdr:dns.MsgHdr{Id:0x2637, Response:true, Opcode:0, Authoritative:false, Truncated:false, RecursionDesired:true, RecursionAvailable:true, Zero:false, AuthenticatedData:false, CheckingDisabled:false, Rcode:4}, Compress:false, Question:[]dns.Question{dns.Question{Name:\"zhuanlan.zhihu.com.\", Qtype:0x41, Qclass:0x1}}, Answer:[]dns.RR(nil), Ns:[]dns.RR(nil), Extra:[]dns.RR(nil)}" 2022-01-08 15:36:30 level=info msg="DNS server listening at: 127.0.0.1:7874" 2022-01-08 15:35:43 level=info msg="DNS server listening at: 127.0.0.1:7874" 2022-01-08 15:32:35 level=debug msg="[DNS] response msg empty: &dns.Msg{MsgHdr:dns.MsgHdr{Id:0x480b, Response:true, Opcode:0, Authoritative:false, Truncated:false, RecursionDesired:true, RecursionAvailable:true, Zero:false, AuthenticatedData:false, CheckingDisabled:false, Rcode:4}, Compress:false, Question:[]dns.Question{dns.Question{Name:\"cdn.cvws.apple-dns.net.\", Qtype:0x41, Qclass:0x1}}, Answer:[]dns.RR(nil), Ns:[]dns.RR(nil), Extra:[]dns.RR(nil)}" 2022-01-08 15:31:10 level=info msg="DNS server listening at: 127.0.0.1:7874"
AristotleLai
commented
2 years ago 插件日志： 2022-01-08 15:07:45 OpenClash 启动成功，请等待服务器上线！ 2022-01-08 15:07:45 第十步: 添加计划任务,启动进程守护程序... 2022-01-08 15:07:45 第九步: 重启 Dnsmasq 程序... 2022-01-08 15:07:45 第八步: 设置防火墙规则... 2022-01-08 15:07:45 第七步: 设置控制面板... 2022-01-08 15:07:45 第六步: 等待主程序下载外部文件... 2022-01-08 15:07:42 第五步: 检查内核启动状态... 2022-01-08 15:07:42 提示: 检测到配置了 TUN 内核专属功能，调用 TUN 内核启动... 2022-01-08 15:07:42 第四步: 启动主程序... 2022-01-08 15:07:42 第二步: 组件运行前检查... 2022-01-08 15:07:42 第一步: 获取配置... 2022-01-08 15:07:42 OpenClash 开始启动... 2022-01-08 15:07:42 第六步：删除 OpenClash 残留文件... 2022-01-08 15:07:42 第五步: 重启 Dnsmasq 程序... 2022-01-08 15:07:42 第四步: 关闭 Clash 主程序... 2022-01-08 15:07:42 第三步: 关闭 OpenClash 守护程序... 2022-01-08 15:07:41 第二步: 删除 OpenClash 防火墙规则... 2022-01-08 15:07:41 第一步: 备份当前策略组状态... 2022-01-08 15:07:41 OpenClash 开始关闭...
feng1992
commented
2 years ago OPENCLASH正常运行，可以访问国内网站，但无法科学上网。调试日志如下，烦请各位前辈看看什么情况？
OpenClash 调试日志
生成时间: 2022-01-08 14:07:37 插件版本: v0.44.07-beta 隐私提示: 上传此日志前请注意检查、屏蔽公网IP、节点、密码等相关敏感信息
#===================== 系统信息 =====================# 主机型号: VMware - Intel(R) Core(TM) i5-7300U CPU @ 2.60GHz : 1 Core 2 Thread 固件版本: OpenWrt SNAPSHOT r4059-a859ab9ac LuCI版本: git-21.335.48743-5f363d9-1 内核版本: 5.10.89 处理器架构: x86_64 #此项有值时,如不使用IPv6,建议到网络-接口-lan的设置中禁用IPV6的DHCP IPV6-DHCP: #此项结果应仅有配置文件的DNS监听地址 Dnsmasq转发设置: 127.0.0.1#7874 #===================== 依赖检查 =====================# dnsmasq-full: 已安装 coreutils: 已安装 coreutils-nohup: 已安装 bash: 已安装 curl: 已安装 ca-certificates: 未安装 ipset: 已安装 ip-full: 已安装 iptables-mod-tproxy: 已安装 kmod-ipt-tproxy: 已安装 iptables-mod-extra: 已安装 kmod-ipt-extra: 已安装 libcap: 已安装 libcap-bin: 已安装 ruby: 已安装 ruby-yaml: 已安装 ruby-psych: 已安装 ruby-pstore: 已安装 ruby-dbm: 已安装 kmod-tun(TUN模式): 已安装 luci-compat(Luci-19.07): 已安装 #===================== 内核检查 =====================# 运行状态: 运行中 进程pid: 5349 运行权限: 5349: cap_dac_override,cap_net_bind_service,cap_net_admin,cap_net_raw,cap_sys_resource=eip 运行用户: nobody 已选择的架构: linux-amd64 #下方无法显示内核版本号时请确认您的内核版本是否正确或者有无权限 Tun内核版本: 2022.01.03 Tun内核文件: 存在 Tun内核运行权限: 正常 Dev内核版本: v1.9.0-1-g8c6d0c6 Dev内核文件: 存在 Dev内核运行权限: 正常 #===================== 插件设置 =====================# 当前配置文件: /etc/openclash/config/1634995915745.yaml 启动配置文件: /etc/openclash/1634995915745.yaml 运行模式: redir-host 默认代理模式: global UDP流量转发(tproxy): 启用 DNS劫持: 启用 自定义DNS: 停用 IPV6代理: 停用 IPV6-DNS解析: 停用 禁用Dnsmasq缓存: 停用 自定义规则: 停用 仅允许内网: 停用 仅代理命中规则流量: 停用 仅允许常用端口流量: 停用 绕过中国大陆IP: 停用 DNS远程解析: 启用 #启动异常时建议关闭此项后重试 混合节点: 停用 保留配置: 停用 #启动异常时建议关闭此项后重试 第三方规则: 停用 #===================== 配置文件 =====================# port: 7890 socks-port: 7891 redir-port: 7892 allow-lan: true mode: global log-level: silent external-controller: 0.0.0.0:9090 proxy-groups: - name: 节点选择 type: select proxies: - 香港 - 台湾 - 新加坡 - 日本 - 美国 - DIRECT - name: 香港 type: select proxies: - "[D3/SSR] 香港 01" - "[D3/SSR] 香港 02" - "[D3/SSR] 香港 03" - "[D4/SSR] 香港 01" - "[D4/SSR] 香港 02" - "[D4/SSR] 香港 03" - "[D4/SSR] 香港 04" - "[D1/V2Ray] 香港 01" - "[D1/V2Ray] 香港 02" - "[D1/V2Ray] 香港 03" - "[D1/V2Ray] 香港 04" - "[D1/V2Ray] 香港 05" - "[D1/V2Ray] 香港 06" - "[D1/V2Ray] 香港 07" - "[D1/V2Ray] 香港 08" - "[D1/V2Ray] 香港 09" - "[D1/V2Ray] 香港 10" - "[D1/V2Ray] 香港 11" - "[D1/V2Ray] 香港 12" - "[D2/V2Ray] 香港 01" - "[D2/V2Ray] 香港 02" - "[D2/V2Ray] 香港 03" - "[D2/V2Ray] 香港 04" - "[D2/V2Ray] 香港 05" - "[D2/V2Ray] 香港 06" - "[D3/V2Ray] 香港 01" - "[D3/V2Ray] 香港 02" - "[D3/V2Ray] 香港 03" - "[D4/V2Ray] 香港 01" - "[D4/V2Ray] 香港 02" - "[D4/V2Ray] 香港 03" - "[D4/V2Ray] 香港 04" - name: 台湾 type: select proxies: - "[D3/SSR] 台湾 01" - "[D1/V2Ray] 台湾 01" - "[D1/V2Ray] 台湾 02" - "[D1/V2Ray] 台湾 03" - "[D1/V2Ray] 台湾 04" - "[D2/V2Ray] 台湾 01" - "[D2/V2Ray] 台湾 02" - "[D2/V2Ray] 台湾 03" - "[D2/V2Ray] 台湾 04" - "[D3/V2Ray] 台湾 01" - name: 新加坡 type: select proxies: - "[D3/SSR] 狮城 01" - "[D1/V2Ray] 狮城 01" - "[D1/V2Ray] 狮城 02" - "[D2/V2Ray] 狮城 01" - "[D3/V2Ray] 狮城 01" - name: 日本 type: select proxies: - "[D3/SSR] 日本 01" - "[D1/V2Ray] 日本 01" - "[D1/V2Ray] 日本 02" - "[D2/V2Ray] 日本 01" - "[D3/V2Ray] 日本 01" - name: 美国 type: select proxies: - "[D3/SSR] 美国 01" - "[D1/V2Ray] 美国 01" - "[D1/V2Ray] 美国 02" - "[D2/V2Ray] 美国 01" - "[D3/V2Ray] 美国 01" - name: Proxy type: select proxies: - "[D3/SSR] 台湾 01" - "[D3/SSR] 日本 01" - "[D3/SSR] 狮城 01" - "[D3/SSR] 美国 01" - "[D3/SSR] 香港 01" - "[D3/SSR] 香港 02" - "[D3/SSR] 香港 03" - "[D4/SSR] 香港 01" - "[D4/SSR] 香港 02" - "[D4/SSR] 香港 03" - "[D4/SSR] 香港 04" - "[D1/V2Ray] 台湾 01" - "[D1/V2Ray] 台湾 02" - "[D1/V2Ray] 台湾 03" - "[D1/V2Ray] 台湾 04" - "[D1/V2Ray] 日本 01" - "[D1/V2Ray] 日本 02" - "[D1/V2Ray] 狮城 01" - "[D1/V2Ray] 狮城 02" - "[D1/V2Ray] 美国 01" - "[D1/V2Ray] 美国 02" - "[D1/V2Ray] 香港 01" - "[D1/V2Ray] 香港 02" - "[D1/V2Ray] 香港 03" - "[D1/V2Ray] 香港 04" - "[D1/V2Ray] 香港 05" - "[D1/V2Ray] 香港 06" - "[D1/V2Ray] 香港 07" - "[D1/V2Ray] 香港 08" - "[D1/V2Ray] 香港 09" - "[D1/V2Ray] 香港 10" - "[D1/V2Ray] 香港 11" - "[D1/V2Ray] 香港 12" - "[D2/V2Ray] 台湾 01" - "[D2/V2Ray] 台湾 02" - "[D2/V2Ray] 台湾 03" - "[D2/V2Ray] 台湾 04" - "[D2/V2Ray] 日本 01" - "[D2/V2Ray] 狮城 01" - "[D2/V2Ray] 美国 01" - "[D2/V2Ray] 香港 01" - "[D2/V2Ray] 香港 02" - "[D2/V2Ray] 香港 03" - "[D2/V2Ray] 香港 04" - "[D2/V2Ray] 香港 05" - "[D2/V2Ray] 香港 06" - "[D3/V2Ray] 台湾 01" - "[D3/V2Ray] 日本 01" - "[D3/V2Ray] 狮城 01" - "[D3/V2Ray] 美国 01" - "[D3/V2Ray] 香港 01" - "[D3/V2Ray] 香港 02" - "[D3/V2Ray] 香港 03" - "[D4/V2Ray] 香港 01" - "[D4/V2Ray] 香港 02" - "[D4/V2Ray] 香港 03" - "[D4/V2Ray] 香港 04" rules: - IP-CIDR,198.18.0.1/16,REJECT,no-resolve - DOMAIN-KEYWORD,epochtimes,REJECT - DOMAIN-SUFFIX,881903.com,REJECT - DOMAIN-SUFFIX,aboluowang.com,REJECT - DOMAIN-SUFFIX,bannedbook.org,REJECT - DOMAIN-SUFFIX,bldaily.com,REJECT - DOMAIN-SUFFIX,china21.org,REJECT - DOMAIN-SUFFIX,chinaaffairs.org,REJECT - DOMAIN-SUFFIX,dajiyuan.com,REJECT - DOMAIN-SUFFIX,dalianmeng.org,REJECT - DOMAIN-SUFFIX,dkn.tv,REJECT - DOMAIN-SUFFIX,dongtaiwang.com,REJECT - DOMAIN-SUFFIX,edoors.com,REJECT - DOMAIN-SUFFIX,epochweekly.com,REJECT - DOMAIN-SUFFIX,falundafa.org,REJECT - DOMAIN-SUFFIX,fgmtv.org,REJECT - DOMAIN-SUFFIX,gardennetworks.com,REJECT - DOMAIN-SUFFIX,gongyiluntan.org,REJECT - DOMAIN-SUFFIX,gpass1.com,REJECT - DOMAIN-SUFFIX,hrichina.org,REJECT - DOMAIN-SUFFIX,huanghuagang.org,REJECT - DOMAIN-SUFFIX,internetfreedom.org,REJECT - DOMAIN-SUFFIX,kanzhongguo.com,REJECT - DOMAIN-SUFFIX,lagranepoca.com,REJECT - DOMAIN-SUFFIX,mh4u.org,REJECT - DOMAIN-SUFFIX,mhradio.org,REJECT - DOMAIN-SUFFIX,minghui.org,REJECT - DOMAIN-SUFFIX,newrealmstudios.ca,REJECT - DOMAIN-SUFFIX,ntdtv.com,REJECT - DOMAIN-SUFFIX,ogate.org,REJECT - DOMAIN-SUFFIX,open.com.hk,REJECT - DOMAIN-SUFFIX,organcare.org.tw,REJECT - DOMAIN-SUFFIX,qxbbs.org,REJECT - DOMAIN-SUFFIX,renminbao.com,REJECT - DOMAIN-SUFFIX,secretchina.com,REJECT - DOMAIN-SUFFIX,shenyun.com,REJECT - DOMAIN-SUFFIX,shenyunperformingarts.org,REJECT - DOMAIN-SUFFIX,shenzhoufilm.com,REJECT - DOMAIN-SUFFIX,soundofhope.org,REJECT - DOMAIN-SUFFIX,theepochtimes.com,REJECT - DOMAIN-SUFFIX,tiandixing.org,REJECT - DOMAIN-SUFFIX,tuidang.org,REJECT - DOMAIN-SUFFIX,velkaepocha.sk,REJECT - DOMAIN-SUFFIX,watchinese.com,REJECT - DOMAIN-SUFFIX,wixsite.com,REJECT - DOMAIN-SUFFIX,wujie.net,REJECT - DOMAIN-SUFFIX,wujieliulan.com,REJECT - DOMAIN-SUFFIX,xinsheng.net,REJECT - DOMAIN-SUFFIX,zhengjian.org,REJECT - DOMAIN-SUFFIX,zhuichaguoji.org,REJECT - DOMAIN-SUFFIX,c4assets.com,节点选择 - DOMAIN-SUFFIX,channel4.com,节点选择 - DOMAIN-SUFFIX,abema.io,节点选择 - DOMAIN-SUFFIX,ameba.jp,节点选择 - DOMAIN-SUFFIX,hayabusa.io,节点选择 - DOMAIN,abematv.akamaized.net,节点选择 - DOMAIN,ds-linear-abematv.akamaized.net,节点选择 - DOMAIN,ds-vod-abematv.akamaized.net,节点选择 - DOMAIN,linear-abematv.akamaized.net,节点选择 - DOMAIN-SUFFIX,primevideo.com,节点选择 - DOMAIN-SUFFIX,bahamut.com.tw,节点选择 - DOMAIN-SUFFIX,gamer.com.tw,节点选择 - DOMAIN,gamer-cds.cdn.hinet.net,节点选择 - DOMAIN,gamer2-cds.cdn.hinet.net,节点选择 - DOMAIN-SUFFIX,bbc.co.uk,节点选择 - DOMAIN-SUFFIX,bbci.co.uk,节点选择 - DOMAIN-KEYWORD,bbcfmt,节点选择 - DOMAIN-KEYWORD,uk-live,节点选择 - DOMAIN-SUFFIX,dazn.com,节点选择 - DOMAIN-SUFFIX,encoretvb.com,节点选择 - DOMAIN,content.jwplatform.com,节点选择 - DOMAIN,videos-f.jwpsrv.com,节点选择 - DOMAIN-SUFFIX,dashasiafox.akamaized.net,节点选择 - DOMAIN-SUFFIX,fox.com,节点选择 - DOMAIN-SUFFIX,foxdcg.com,节点选择 - DOMAIN-SUFFIX,foxplus.com,节点选择 - DOMAIN-SUFFIX,staticasiafox.akamaized.net,节点选择 - DOMAIN-SUFFIX,theplatform.com,节点选择 - DOMAIN-SUFFIX,uplynk.com,节点选择 - DOMAIN-SUFFIX,hbo.com,节点选择 - DOMAIN-SUFFIX,hbogo.com,节点选择 - DOMAIN-SUFFIX,hboasia.com,节点选择 - DOMAIN-SUFFIX,hbogo.com,节点选择 - DOMAIN-SUFFIX,hbogoasia.hk,节点选择 - DOMAIN,44wilhpljf.execute-api.ap-southeast-1.amazonaws.com,节点选择 - DOMAIN,bcbolthboa-a.akamaihd.net,节点选择 - DOMAIN,cf-images.ap-southeast-1.prod.boltdns.net,节点选择 - DOMAIN,manifest.prod.boltdns.net,节点选择 - DOMAIN,s3-ap-southeast-1.amazonaws.com,节点选择 - DOMAIN-SUFFIX,hulu.com,节点选择 - DOMAIN-SUFFIX,huluim.com,节点选择 - DOMAIN-SUFFIX,hulustream.com,节点选择 - DOMAIN-SUFFIX,kktv.com.tw,节点选择 - DOMAIN-SUFFIX,kktv.me,节点选择 - DOMAIN,kktv-theater.kk.stream,节点选择 - DOMAIN-SUFFIX,linetv.tw,节点选择 - DOMAIN,d3c7rimkq79yfu.cloudfront.net,节点选择 - DOMAIN-SUFFIX,happyon.jp,节点选择 - DOMAIN-SUFFIX,hulu.jp,节点选择 - DOMAIN-SUFFIX,litv.tv,节点选择 - DOMAIN,litvfreemobile-hichannel.cdn.hinet.net,节点选择 - DOMAIN-SUFFIX,mytvsuper.com,节点选择 - DOMAIN-SUFFIX,tvb.com,节点选择 - DOMAIN-SUFFIX,netflix.com,节点选择 - DOMAIN-SUFFIX,netflix.net,节点选择 - DOMAIN-SUFFIX,nflxext.com,节点选择 - DOMAIN-SUFFIX,nflximg.com,节点选择 - DOMAIN-SUFFIX,nflximg.net,节点选择 - DOMAIN-SUFFIX,nflxso.net,节点选择 - DOMAIN-SUFFIX,nflxvideo.net,节点选择 - IP-CIDR,23.246.0.0/18,节点选择 - IP-CIDR,37.77.184.0/21,节点选择 - IP-CIDR,45.57.0.0/17,节点选择 - IP-CIDR,64.120.128.0/17,节点选择 - IP-CIDR,66.197.128.0/17,节点选择 - IP-CIDR,108.175.32.0/20,节点选择 - IP-CIDR,192.173.64.0/18,节点选择 - IP-CIDR,198.38.96.0/19,节点选择 - IP-CIDR,198.45.48.0/20,节点选择 - DOMAIN-SUFFIX,pbs.org,节点选择 - DOMAIN-SUFFIX,phncdn.com,节点选择 - DOMAIN-SUFFIX,pornhub.com,节点选择 - DOMAIN-SUFFIX,pornhubpremium.com,节点选择 - DOMAIN-SUFFIX,twitch.tv,节点选择 - DOMAIN-SUFFIX,twitchcdn.net,节点选择 - DOMAIN-SUFFIX,ttvnw.net,节点选择 - DOMAIN-SUFFIX,viu.com,节点选择 - DOMAIN-SUFFIX,viu.tv,节点选择 - DOMAIN,api.viu.now.com,节点选择 - DOMAIN,d1k2us671qcoau.cloudfront.net,节点选择 - DOMAIN,d2anahhhmp1ffz.cloudfront.net,节点选择 - DOMAIN,dfp6rglgjqszk.cloudfront.net,节点选择 - DOMAIN-SUFFIX,googlevideo.com,节点选择 - DOMAIN-SUFFIX,youtube.com,节点选择 - DOMAIN,youtubei.googleapis.com,节点选择 - DOMAIN-SUFFIX,deezer.com,节点选择 - DOMAIN-SUFFIX,dzcdn.net,节点选择 - DOMAIN-SUFFIX,kkbox.com,节点选择 - DOMAIN-SUFFIX,kkbox.com.tw,节点选择 - DOMAIN-SUFFIX,kfs.io,节点选择 - DOMAIN-SUFFIX,joox.com,节点选择 - DOMAIN-SUFFIX,pandora.com,节点选择 - DOMAIN-SUFFIX,pscdn.co,节点选择 - DOMAIN-SUFFIX,scdn.co,节点选择 - DOMAIN-SUFFIX,spotify.com,节点选择 - DOMAIN-SUFFIX,spoti.fi,节点选择 - IP-CIDR,35.186.224.47/32,节点选择 - DOMAIN-SUFFIX,tidal.com,节点选择 - DOMAIN-SUFFIX,appspot.com,节点选择 - DOMAIN-SUFFIX,blogger.com,节点选择 - DOMAIN-SUFFIX,getoutline.org,节点选择 - DOMAIN-SUFFIX,gvt0.com,节点选择 - DOMAIN-SUFFIX,gvt1.com,节点选择 - DOMAIN-SUFFIX,gvt3.com,节点选择 - DOMAIN-SUFFIX,xn--ngstr-lra8j.com,节点选择 - DOMAIN-KEYWORD,google,节点选择 - DOMAIN-KEYWORD,blogspot,节点选择 - DOMAIN-SUFFIX,onedrive.live.com,节点选择 - DOMAIN-SUFFIX,xboxlive.com,节点选择 - DOMAIN-SUFFIX,cdninstagram.com,节点选择 - DOMAIN-SUFFIX,fb.com,节点选择 - DOMAIN-SUFFIX,fb.me,节点选择 - DOMAIN-SUFFIX,fbaddins.com,节点选择 - DOMAIN-SUFFIX,fbcdn.net,节点选择 - DOMAIN-SUFFIX,fbsbx.com,节点选择 - DOMAIN-SUFFIX,fbworkmail.com,节点选择 - DOMAIN-SUFFIX,instagram.com,节点选择 - DOMAIN-SUFFIX,m.me,节点选择 - DOMAIN-SUFFIX,messenger.com,节点选择 - DOMAIN-SUFFIX,oculus.com,节点选择 - DOMAIN-SUFFIX,oculuscdn.com,节点选择 - DOMAIN-SUFFIX,rocksdb.org,节点选择 - DOMAIN-SUFFIX,whatsapp.com,节点选择 - DOMAIN-SUFFIX,whatsapp.net,节点选择 - DOMAIN-KEYWORD,facebook,节点选择 - DOMAIN-SUFFIX,pscp.tv,节点选择 - DOMAIN-SUFFIX,periscope.tv,节点选择 - DOMAIN-SUFFIX,t.co,节点选择 - DOMAIN-SUFFIX,twimg.co,节点选择 - DOMAIN-SUFFIX,twimg.com,节点选择 - DOMAIN-SUFFIX,twitpic.com,节点选择 - DOMAIN-SUFFIX,vine.co,节点选择 - DOMAIN-KEYWORD,twitter,节点选择 - DOMAIN-SUFFIX,t.me,节点选择 - DOMAIN-SUFFIX,tdesktop.com,节点选择 - DOMAIN-SUFFIX,telegra.ph,节点选择 - DOMAIN-SUFFIX,telegram.me,节点选择 - DOMAIN-SUFFIX,telegram.org,节点选择 - IP-CIDR,67.198.55.0/24,节点选择 - IP-CIDR,91.108.4.0/22,节点选择 - IP-CIDR,91.108.8.0/22,节点选择 - IP-CIDR,91.108.12.0/22,节点选择 - IP-CIDR,91.108.16.0/22,节点选择 - IP-CIDR,91.108.56.0/22,节点选择 - IP-CIDR,109.239.140.0/24,节点选择 - IP-CIDR,149.154.160.0/20,节点选择 - IP-CIDR,205.172.60.0/22,节点选择 - DOMAIN-SUFFIX,line.me,节点选择 - DOMAIN-SUFFIX,line-apps.com,节点选择 - DOMAIN-SUFFIX,line-scdn.net,节点选择 - DOMAIN-SUFFIX,naver.jp,节点选择 - IP-CIDR,103.2.30.0/23,节点选择 - IP-CIDR,125.209.208.0/20,节点选择 - IP-CIDR,147.92.128.0/17,节点选择 - IP-CIDR,203.104.144.0/21,节点选择 - DOMAIN-SUFFIX,4shared.com,节点选择 - DOMAIN-SUFFIX,520cc.cc,节点选择 - DOMAIN-SUFFIX,881903.com,节点选择 - DOMAIN-SUFFIX,9cache.com,节点选择 - DOMAIN-SUFFIX,9gag.com,节点选择 - DOMAIN-SUFFIX,abc.com,节点选择 - DOMAIN-SUFFIX,abc.net.au,节点选择 - DOMAIN-SUFFIX,abebooks.com,节点选择 - DOMAIN-SUFFIX,amazon.co.jp,节点选择 - DOMAIN-SUFFIX,apigee.com,节点选择 - DOMAIN-SUFFIX,apk-dl.com,节点选择 - DOMAIN-SUFFIX,apkfind.com,节点选择 - DOMAIN-SUFFIX,apkmirror.com,节点选择 - DOMAIN-SUFFIX,apkmonk.com,节点选择 - DOMAIN-SUFFIX,apkpure.com,节点选择 - DOMAIN-SUFFIX,aptoide.com,节点选择 - DOMAIN-SUFFIX,archive.is,节点选择 - DOMAIN-SUFFIX,archive.org,节点选择 - DOMAIN-SUFFIX,arte.tv,节点选择 - DOMAIN-SUFFIX,artstation.com,节点选择 - DOMAIN-SUFFIX,arukas.io,节点选择 - DOMAIN-SUFFIX,ask.com,节点选择 - DOMAIN-SUFFIX,avgle.com,节点选择 - DOMAIN-SUFFIX,badoo.com,节点选择 - DOMAIN-SUFFIX,bandwagonhost.com,节点选择 - DOMAIN-SUFFIX,bbc.com,节点选择 - DOMAIN-SUFFIX,behance.net,节点选择 - DOMAIN-SUFFIX,bibox.com,节点选择 - DOMAIN-SUFFIX,biggo.com.tw,节点选择 - DOMAIN-SUFFIX,binance.com,节点选择 - DOMAIN-SUFFIX,bitcointalk.org,节点选择 - DOMAIN-SUFFIX,bitfinex.com,节点选择 - DOMAIN-SUFFIX,bitmex.com,节点选择 - DOMAIN-SUFFIX,bit-z.com,节点选择 - DOMAIN-SUFFIX,bloglovin.com,节点选择 - DOMAIN-SUFFIX,bloomberg.cn,节点选择 - DOMAIN-SUFFIX,bloomberg.com,节点选择 - DOMAIN-SUFFIX,blubrry.com,节点选择 - DOMAIN-SUFFIX,book.com.tw,节点选择 - DOMAIN-SUFFIX,booklive.jp,节点选择 - DOMAIN-SUFFIX,books.com.tw,节点选择 - DOMAIN-SUFFIX,box.com,节点选择 - DOMAIN-SUFFIX,businessinsider.com,节点选择 - DOMAIN-SUFFIX,bwh1.net,节点选择 - DOMAIN-SUFFIX,castbox.fm,节点选择 - DOMAIN-SUFFIX,cbc.ca,节点选择 - DOMAIN-SUFFIX,cccat.cc,节点选择 - DOMAIN-SUFFIX,cdw.com,节点选择 - DOMAIN-SUFFIX,change.org,节点选择 - DOMAIN-SUFFIX,ck101.com,节点选择 - DOMAIN-SUFFIX,clarionproject.org,节点选择 - DOMAIN-SUFFIX,clyp.it,节点选择 - DOMAIN-SUFFIX,cna.com.tw,节点选择 - DOMAIN-SUFFIX,comparitech.com,节点选择 - DOMAIN-SUFFIX,conoha.jp,节点选择 - DOMAIN-SUFFIX,crucial.com,节点选择 - DOMAIN-SUFFIX,cts.com.tw,节点选择 - DOMAIN-SUFFIX,cw.com.tw,节点选择 - DOMAIN-SUFFIX,cyberctm.com,节点选择 - DOMAIN-SUFFIX,dailymotion.com,节点选择 - DOMAIN-SUFFIX,dailyview.tw,节点选择 - DOMAIN-SUFFIX,daum.net,节点选择 - DOMAIN-SUFFIX,daumcdn.net,节点选择 - DOMAIN-SUFFIX,dcard.tw,节点选择 - DOMAIN-SUFFIX,deepdiscount.com,节点选择 - DOMAIN-SUFFIX,depositphotos.com,节点选择 - DOMAIN-SUFFIX,deviantart.com,节点选择 - DOMAIN-SUFFIX,disconnect.me,节点选择 - DOMAIN-SUFFIX,discordapp.com,节点选择 - DOMAIN-SUFFIX,discordapp.net,节点选择 - DOMAIN-SUFFIX,disqus.com,节点选择 - DOMAIN-SUFFIX,dns2go.com,节点选择 - DOMAIN-SUFFIX,dowjones.com,节点选择 - DOMAIN-SUFFIX,dropbox.com,节点选择 - DOMAIN-SUFFIX,dropboxusercontent.com,节点选择 - DOMAIN-SUFFIX,duckduckgo.com,节点选择 - DOMAIN-SUFFIX,dw.com,节点选择 - DOMAIN-SUFFIX,dynu.com,节点选择 - DOMAIN-SUFFIX,earthcam.com,节点选择 - DOMAIN-SUFFIX,ebookservice.tw,节点选择 - DOMAIN-SUFFIX,economist.com,节点选择 - DOMAIN-SUFFIX,edgecastcdn.net,节点选择 - DOMAIN-SUFFIX,edu,节点选择 - DOMAIN-SUFFIX,elpais.com,节点选择 - DOMAIN-SUFFIX,enanyang.my,节点选择 - DOMAIN-SUFFIX,esoir.be,节点选择 - DOMAIN-SUFFIX,euronews.com,节点选择 - DOMAIN-SUFFIX,feedly.com,节点选择 - DOMAIN-SUFFIX,firech.at,节点选择 - DOMAIN-SUFFIX,flickr.com,节点选择 - DOMAIN-SUFFIX,flitto.com,节点选择 - DOMAIN-SUFFIX,foreignpolicy.com,节点选择 - DOMAIN-SUFFIX,friday.tw,节点选择 - DOMAIN-SUFFIX,ftchinese.com,节点选择 - DOMAIN-SUFFIX,gate.io,节点选择 - DOMAIN-SUFFIX,getlantern.org,节点选择 - DOMAIN-SUFFIX,getsync.com,节点选择 - DOMAIN-SUFFIX,globalvoices.org,节点选择 - DOMAIN-SUFFIX,goo.ne.jp,节点选择 - DOMAIN-SUFFIX,goodreads.com,节点选择 - DOMAIN-SUFFIX,gov,节点选择 - DOMAIN-SUFFIX,gov.tw,节点选择 - DOMAIN-SUFFIX,gumroad.com,节点选择 - DOMAIN-SUFFIX,hbg.com,节点选择 - DOMAIN-SUFFIX,heroku.com,节点选择 - DOMAIN-SUFFIX,hightail.com,节点选择 - DOMAIN-SUFFIX,hk01.com,节点选择 - DOMAIN-SUFFIX,hkbf.org,节点选择 - DOMAIN-SUFFIX,hkbookcity.com,节点选择 - DOMAIN-SUFFIX,hkej.com,节点选择 - DOMAIN-SUFFIX,hket.com,节点选择 - DOMAIN-SUFFIX,hkgolden.com,节点选择 - DOMAIN-SUFFIX,hootsuite.com,节点选择 - DOMAIN-SUFFIX,hudson.org,节点选择 - DOMAIN-SUFFIX,hyread.com.tw,节点选择 - DOMAIN-SUFFIX,ibtimes.com,节点选择 - DOMAIN-SUFFIX,i-cable.com,节点选择 - DOMAIN-SUFFIX,icij.org,节点选择 - DOMAIN-SUFFIX,icoco.com,节点选择 - DOMAIN-SUFFIX,imgur.com,节点选择 - DOMAIN-SUFFIX,initiummall.com,节点选择 - DOMAIN-SUFFIX,insecam.org,节点选择 - DOMAIN-SUFFIX,ipfs.io,节点选择 - DOMAIN-SUFFIX,issuu.com,节点选择 - DOMAIN-SUFFIX,istockphoto.com,节点选择 - DOMAIN-SUFFIX,japantimes.co.jp,节点选择 - DOMAIN-SUFFIX,jiji.com,节点选择 - DOMAIN-SUFFIX,jinx.com,节点选择 - DOMAIN-SUFFIX,jkforum.net,节点选择 - DOMAIN-SUFFIX,joinmastodon.org,节点选择 - DOMAIN-SUFFIX,justpaste.it,节点选择 - DOMAIN-SUFFIX,kakao.com,节点选择 - DOMAIN-SUFFIX,kakaocorp.com,节点选择 - DOMAIN-SUFFIX,kik.com,节点选择 - DOMAIN-SUFFIX,kobo.com,节点选择 - DOMAIN-SUFFIX,kobobooks.com,节点选择 - DOMAIN-SUFFIX,kodingen.com,节点选择 - DOMAIN-SUFFIX,lemonde.fr,节点选择 - DOMAIN-SUFFIX,lepoint.fr,节点选择 - DOMAIN-SUFFIX,lihkg.com,节点选择 - DOMAIN-SUFFIX,listennotes.com,节点选择 - DOMAIN-SUFFIX,livestream.com,节点选择 - DOMAIN-SUFFIX,logmein.com,节点选择 - DOMAIN-SUFFIX,mail.ru,节点选择 - DOMAIN-SUFFIX,mailchimp.com,节点选择 - DOMAIN-SUFFIX,marc.info,节点选择 - DOMAIN-SUFFIX,matters.news,节点选择 - DOMAIN-SUFFIX,medium.com,节点选择 - DOMAIN-SUFFIX,mega.nz,节点选择 - DOMAIN-SUFFIX,mil,节点选择 - DOMAIN-SUFFIX,mingpao.com,节点选择 - DOMAIN-SUFFIX,mobile01.com,节点选择 - DOMAIN-SUFFIX,myspace.com,节点选择 - DOMAIN-SUFFIX,myspacecdn.com,节点选择 - DOMAIN-SUFFIX,nanyang.com,节点选择 - DOMAIN-SUFFIX,naver.com,节点选择 - DOMAIN-SUFFIX,newstapa.org,节点选择 - DOMAIN-SUFFIX,nhk.or.jp,节点选择 - DOMAIN-SUFFIX,nicovideo.jp,节点选择 - DOMAIN-SUFFIX,nii.ac.jp,节点选择 - DOMAIN-SUFFIX,nikkei.com,节点选择 - DOMAIN-SUFFIX,nofile.io,节点选择 - DOMAIN-SUFFIX,now.com,节点选择 - DOMAIN-SUFFIX,nrk.no,节点选择 - DOMAIN-SUFFIX,nyt.com,节点选择 - DOMAIN-SUFFIX,nytchina.com,节点选择 - DOMAIN-SUFFIX,nytcn.me,节点选择 - DOMAIN-SUFFIX,nytco.com,节点选择 - DOMAIN-SUFFIX,nytimes.com,节点选择 - DOMAIN-SUFFIX,nytimg.com,节点选择 - DOMAIN-SUFFIX,nytlog.com,节点选择 - DOMAIN-SUFFIX,nytstyle.com,节点选择 - DOMAIN-SUFFIX,ok.ru,节点选择 - DOMAIN-SUFFIX,okex.com,节点选择 - DOMAIN-SUFFIX,on.cc,节点选择 - DOMAIN-SUFFIX,orientaldaily.com.my,节点选择 - DOMAIN-SUFFIX,overcast.fm,节点选择 - DOMAIN-SUFFIX,paltalk.com,节点选择 - DOMAIN-SUFFIX,pbxes.com,节点选择 - DOMAIN-SUFFIX,pcdvd.com.tw,节点选择 - DOMAIN-SUFFIX,pchome.com.tw,节点选择 - DOMAIN-SUFFIX,pcloud.com,节点选择 - DOMAIN-SUFFIX,picacomic.com,节点选择 - DOMAIN-SUFFIX,pinimg.com,节点选择 - DOMAIN-SUFFIX,pixiv.net,节点选择 - DOMAIN-SUFFIX,player.fm,节点选择 - DOMAIN-SUFFIX,plurk.com,节点选择 - DOMAIN-SUFFIX,po18.tw,节点选择 - DOMAIN-SUFFIX,prism-break.org,节点选择 - DOMAIN-SUFFIX,proxifier.com,节点选择 - DOMAIN-SUFFIX,pts.org.tw,节点选择 - DOMAIN-SUFFIX,pubu.com.tw,节点选择 - DOMAIN-SUFFIX,pubu.tw,节点选择 - DOMAIN-SUFFIX,pureapk.com,节点选择 - DOMAIN-SUFFIX,quora.com,节点选择 - DOMAIN-SUFFIX,quoracdn.net,节点选择 - DOMAIN-SUFFIX,rakuten.co.jp,节点选择 - DOMAIN-SUFFIX,readingtimes.com.tw,节点选择 - DOMAIN-SUFFIX,readmoo.com,节点选择 - DOMAIN-SUFFIX,reddit.com,节点选择 - DOMAIN-SUFFIX,redditmedia.com,节点选择 - DOMAIN-SUFFIX,resilio.com,节点选择 - DOMAIN-SUFFIX,reuters.com,节点选择 - DOMAIN-SUFFIX,rfi.fr,节点选择 - DOMAIN-SUFFIX,roadshow.hk,节点选择 - DOMAIN-SUFFIX,scmp.com,节点选择 - DOMAIN-SUFFIX,scribd.com,节点选择 - DOMAIN-SUFFIX,seatguru.com,节点选择 - DOMAIN-SUFFIX,shadowsocks.org,节点选择 - DOMAIN-SUFFIX,shopee.tw,节点选择 - DOMAIN-SUFFIX,slideshare.net,节点选择 - DOMAIN-SUFFIX,softfamous.com,节点选择 - DOMAIN-SUFFIX,soundcloud.com,节点选择 - DOMAIN-SUFFIX,startpage.com,节点选择 - DOMAIN-SUFFIX,steamcommunity.com,节点选择 - DOMAIN-SUFFIX,steemit.com,节点选择 - DOMAIN-SUFFIX,steemitwallet.com,节点选择 - DOMAIN-SUFFIX,t66y.com,节点选择 - DOMAIN-SUFFIX,tapatalk.com,节点选择 - DOMAIN-SUFFIX,teco-hk.org,节点选择 - DOMAIN-SUFFIX,teco-mo.org,节点选择 - DOMAIN-SUFFIX,teddysun.com,节点选择 - DOMAIN-SUFFIX,theguardian.com,节点选择 - DOMAIN-SUFFIX,theinitium.com,节点选择 - DOMAIN-SUFFIX,tineye.com,节点选择 - DOMAIN-SUFFIX,torproject.org,节点选择 - DOMAIN-SUFFIX,tumblr.com,节点选择 - DOMAIN-SUFFIX,turbobit.net,节点选择 - DOMAIN-SUFFIX,tutanota.com,节点选择 - DOMAIN-SUFFIX,tvboxnow.com,节点选择 - DOMAIN-SUFFIX,udn.com,节点选择 - DOMAIN-SUFFIX,unseen.is,节点选择 - DOMAIN-SUFFIX,upmedia.mg,节点选择 - DOMAIN-SUFFIX,uptodown.com,节点选择 - DOMAIN-SUFFIX,ustream.tv,节点选择 - DOMAIN-SUFFIX,uwants.com,节点选择 - DOMAIN-SUFFIX,v2ray.com,节点选择 - DOMAIN-SUFFIX,viber.com,节点选择 - DOMAIN-SUFFIX,videopress.com,节点选择 - DOMAIN-SUFFIX,vimeo.com,节点选择 - DOMAIN-SUFFIX,voachinese.com,节点选择 - DOMAIN-SUFFIX,voanews.com,节点选择 - DOMAIN-SUFFIX,voxer.com,节点选择 - DOMAIN-SUFFIX,vzw.com,节点选择 - DOMAIN-SUFFIX,w3schools.com,节点选择 - DOMAIN-SUFFIX,washingtonpost.com,节点选择 - DOMAIN-SUFFIX,wattpad.com,节点选择 - DOMAIN-SUFFIX,whoer.net,节点选择 - DOMAIN-SUFFIX,wikimapia.org,节点选择 - DOMAIN-SUFFIX,wikipedia.org,节点选择 - DOMAIN-SUFFIX,winudf.com,节点选择 - DOMAIN-SUFFIX,wire.com,节点选择 - DOMAIN-SUFFIX,wordpress.com,节点选择 - DOMAIN-SUFFIX,workflow.is,节点选择 - DOMAIN-SUFFIX,worldcat.org,节点选择 - DOMAIN-SUFFIX,wsj.com,节点选择 - DOMAIN-SUFFIX,wsj.net,节点选择 - DOMAIN-SUFFIX,xhamster.com,节点选择 - DOMAIN-SUFFIX,xnxx.com,节点选择 - DOMAIN-SUFFIX,xvideos.com,节点选择 - DOMAIN-SUFFIX,yahoo.com,节点选择 - DOMAIN-SUFFIX,yandex.ru,节点选择 - DOMAIN-SUFFIX,ycombinator.com,节点选择 - DOMAIN-SUFFIX,yesasia.com,节点选择 - DOMAIN-SUFFIX,yes-news.com,节点选择 - DOMAIN-SUFFIX,yomiuri.co.jp,节点选择 - DOMAIN-SUFFIX,you-get.org,节点选择 - DOMAIN-SUFFIX,zaobao.com,节点选择 - DOMAIN-SUFFIX,zb.com,节点选择 - DOMAIN-SUFFIX,zello.com,节点选择 - DOMAIN-SUFFIX,zeronet.io,节点选择 - DOMAIN-KEYWORD,github,节点选择 - DOMAIN-KEYWORD,jav,节点选择 - DOMAIN-KEYWORD,pinterest,节点选择 - DOMAIN-KEYWORD,porn,节点选择 - DOMAIN-KEYWORD,wikileaks,节点选择 - DOMAIN-SUFFIX,apartmentratings.com,节点选择 - DOMAIN-SUFFIX,apartments.com,节点选择 - DOMAIN-SUFFIX,bankmobilevibe.com,节点选择 - DOMAIN-SUFFIX,bing.com,节点选择 - DOMAIN-SUFFIX,booktopia.com.au,节点选择 - DOMAIN-SUFFIX,centauro.com.br,节点选择 - DOMAIN-SUFFIX,clearsurance.com,节点选择 - DOMAIN-SUFFIX,costco.com,节点选择 - DOMAIN-SUFFIX,crackle.com,节点选择 - DOMAIN-SUFFIX,depositphotos.cn,节点选择 - DOMAIN-SUFFIX,dish.com,节点选择 - DOMAIN-SUFFIX,dmm.co.jp,节点选择 - DOMAIN-SUFFIX,dmm.com,节点选择 - DOMAIN-SUFFIX,dnvod.tv,节点选择 - DOMAIN-SUFFIX,esurance.com,节点选择 - DOMAIN-SUFFIX,extmatrix.com,节点选择 - DOMAIN-SUFFIX,fastpic.ru,节点选择 - DOMAIN-SUFFIX,flipboard.com,节点选择 - DOMAIN-SUFFIX,fnac.be,节点选择 - DOMAIN-SUFFIX,fnac.com,节点选择 - DOMAIN-SUFFIX,funkyimg.com,节点选择 - DOMAIN-SUFFIX,fxnetworks.com,节点选择 - DOMAIN-SUFFIX,gettyimages.com,节点选择 - DOMAIN-SUFFIX,go.com,节点选择 - DOMAIN-SUFFIX,here.com,节点选择 - DOMAIN-SUFFIX,jcpenney.com,节点选择 - DOMAIN-SUFFIX,jiehua.tv,节点选择 - DOMAIN-SUFFIX,kknews.cc,节点选择 - DOMAIN-SUFFIX,mailfence.com,节点选择 - DOMAIN-SUFFIX,nationwide.com,节点选择 - DOMAIN-SUFFIX,nbc.com,节点选择 - DOMAIN-SUFFIX,nexon.com,节点选择 - DOMAIN-SUFFIX,nordstrom.com,节点选择 - DOMAIN-SUFFIX,nordstromimage.com,节点选择 - DOMAIN-SUFFIX,nordstromrack.com,节点选择 - DOMAIN-SUFFIX,read01.com,节点选择 - DOMAIN-SUFFIX,superpages.com,节点选择 - DOMAIN-SUFFIX,target.com,节点选择 - DOMAIN-SUFFIX,thinkgeek.com,节点选择 - DOMAIN-SUFFIX,tracfone.com,节点选择 - DOMAIN-SUFFIX,uploader.jp,节点选择 - DOMAIN-SUFFIX,vevo.com,节点选择 - DOMAIN-SUFFIX,viu.tv,节点选择 - DOMAIN-SUFFIX,vk.com,节点选择 - DOMAIN-SUFFIX,vsco.co,节点选择 - DOMAIN-SUFFIX,xfinity.com,节点选择 - DOMAIN-SUFFIX,zattoo.com,节点选择 - DOMAIN,testflight.apple.com,节点选择 - DOMAIN-SUFFIX,appsto.re,节点选择 - DOMAIN,books.itunes.apple.com,节点选择 - DOMAIN,hls.itunes.apple.com,节点选择 - DOMAIN,apps.apple.com,节点选择 - DOMAIN,itunes.apple.com,节点选择 - DOMAIN,api-glb-sea.smoot.apple.com,节点选择 - DOMAIN,lookup-api.apple.com,节点选择 - DOMAIN,gspe1-ssl.ls.apple.com,节点选择 - DOMAIN-SUFFIX,apple.news,节点选择 - DOMAIN,news-client.apple.com,节点选择 - DOMAIN,news-edge.apple.com,节点选择 - DOMAIN,news-events.apple.com,节点选择 - DOMAIN,apple.comscoreresearch.com,节点选择 - DOMAIN-SUFFIX,abc.xyz,节点选择 - DOMAIN-SUFFIX,android.com,节点选择 - DOMAIN-SUFFIX,androidify.com,节点选择 - DOMAIN-SUFFIX,dialogflow.com,节点选择 - DOMAIN-SUFFIX,autodraw.com,节点选择 - DOMAIN-SUFFIX,capitalg.com,节点选择 - DOMAIN-SUFFIX,certificate-transparency.org,节点选择 - DOMAIN-SUFFIX,chrome.com,节点选择 - DOMAIN-SUFFIX,chromeexperiments.com,节点选择 - DOMAIN-SUFFIX,chromestatus.com,节点选择 - DOMAIN-SUFFIX,chromium.org,节点选择 - DOMAIN-SUFFIX,creativelab5.com,节点选择 - DOMAIN-SUFFIX,debug.com,节点选择 - DOMAIN-SUFFIX,deepmind.com,节点选择 - DOMAIN-SUFFIX,firebaseio.com,节点选择 - DOMAIN-SUFFIX,getmdl.io,节点选择 - DOMAIN-SUFFIX,ggpht.com,节点选择 - DOMAIN-SUFFIX,gmail.com,节点选择 - DOMAIN-SUFFIX,gmodules.com,节点选择 - DOMAIN-SUFFIX,godoc.org,节点选择 - DOMAIN-SUFFIX,golang.org,节点选择 - DOMAIN-SUFFIX,gstatic.com,节点选择 - DOMAIN-SUFFIX,gv.com,节点选择 - DOMAIN-SUFFIX,gwtproject.org,节点选择 - DOMAIN-SUFFIX,itasoftware.com,节点选择 - DOMAIN-SUFFIX,madewithcode.com,节点选择 - DOMAIN-SUFFIX,material.io,节点选择 - DOMAIN-SUFFIX,polymer-project.org,节点选择 - DOMAIN-SUFFIX,admin.recaptcha.net,节点选择 - DOMAIN-SUFFIX,recaptcha.net,节点选择 - DOMAIN-SUFFIX,shattered.io,节点选择 - DOMAIN-SUFFIX,synergyse.com,节点选择 - DOMAIN-SUFFIX,tensorflow.org,节点选择 - DOMAIN-SUFFIX,tfhub.dev,节点选择 - DOMAIN-SUFFIX,tiltbrush.com,节点选择 - DOMAIN-SUFFIX,waveprotocol.org,节点选择 - DOMAIN-SUFFIX,waymo.com,节点选择 - DOMAIN-SUFFIX,webmproject.org,节点选择 - DOMAIN-SUFFIX,webrtc.org,节点选择 - DOMAIN-SUFFIX,whatbrowser.org,节点选择 - DOMAIN-SUFFIX,widevine.com,节点选择 - DOMAIN-SUFFIX,x.company,节点选择 - DOMAIN-SUFFIX,youtu.be,节点选择 - DOMAIN-SUFFIX,yt.be,节点选择 - DOMAIN-SUFFIX,ytimg.com,节点选择 - DOMAIN-SUFFIX,1drv.com,节点选择 - DOMAIN-SUFFIX,1drv.ms,节点选择 - DOMAIN-SUFFIX,live.com,节点选择 - DOMAIN-SUFFIX,live.net,节点选择 - DOMAIN-SUFFIX,livefilestore.com,节点选择 - DOMAIN-SUFFIX,storage.msn.com,节点选择 - DOMAIN-SUFFIX,0rz.tw,节点选择 - DOMAIN-SUFFIX,4bluestones.biz,节点选择 - DOMAIN-SUFFIX,9bis.net,节点选择 - DOMAIN-SUFFIX,allconnected.co,节点选择 - DOMAIN-SUFFIX,amazonaws.com,节点选择 - DOMAIN-SUFFIX,aol.com,节点选择 - DOMAIN-SUFFIX,bcc.com.tw,节点选择 - DOMAIN-SUFFIX,bit.ly,节点选择 - DOMAIN-SUFFIX,bitshare.com,节点选择 - DOMAIN-SUFFIX,blog.jp,节点选择 - DOMAIN-SUFFIX,blogimg.jp,节点选择 - DOMAIN-SUFFIX,blogtd.org,节点选择 - DOMAIN-SUFFIX,broadcast.co.nz,节点选择 - DOMAIN-SUFFIX,camfrog.com,节点选择 - DOMAIN-SUFFIX,cfos.de,节点选择 - DOMAIN-SUFFIX,citypopulation.de,节点选择 - DOMAIN-SUFFIX,cloudfront.net,节点选择 - DOMAIN-SUFFIX,ctitv.com.tw,节点选择 - DOMAIN-SUFFIX,cuhk.edu.hk,节点选择 - DOMAIN-SUFFIX,cusu.hk,节点选择 - DOMAIN-SUFFIX,discuss.com.hk,节点选择 - DOMAIN-SUFFIX,dropboxapi.com,节点选择 - DOMAIN-SUFFIX,duolingo.cn,节点选择 - DOMAIN-SUFFIX,edditstatic.com,节点选择 - DOMAIN-SUFFIX,flickriver.com,节点选择 - DOMAIN-SUFFIX,focustaiwan.tw,节点选择 - DOMAIN-SUFFIX,free.fr,节点选择 - DOMAIN-SUFFIX,gigacircle.com,节点选择 - DOMAIN-SUFFIX,hk-pub.com,节点选择 - DOMAIN-SUFFIX,hosting.co.uk,节点选择 - DOMAIN-SUFFIX,hwcdn.net,节点选择 - DOMAIN-SUFFIX,iphone4hongkong.com,节点选择 - DOMAIN-SUFFIX,iphonetaiwan.org,节点选择 - DOMAIN-SUFFIX,iptvbin.com,节点选择 - DOMAIN-SUFFIX,jtvnw.net,节点选择 - DOMAIN-SUFFIX,linksalpha.com,节点选择 - DOMAIN-SUFFIX,manyvids.com,节点选择 - DOMAIN-SUFFIX,myactimes.com,节点选择 - DOMAIN-SUFFIX,newsblur.com,节点选择 - DOMAIN-SUFFIX,now.im,节点选择 - DOMAIN-SUFFIX,nowe.com,节点选择 - DOMAIN-SUFFIX,redditlist.com,节点选择 - DOMAIN-SUFFIX,signal.org,节点选择 - DOMAIN-SUFFIX,smartmailcloud.com,节点选择 - DOMAIN-SUFFIX,sparknotes.com,节点选择 - DOMAIN-SUFFIX,streetvoice.com,节点选择 - DOMAIN-SUFFIX,supertop.co,节点选择 - DOMAIN-SUFFIX,tv.com,节点选择 - DOMAIN-SUFFIX,typepad.com,节点选择 - DOMAIN-SUFFIX,udnbkk.com,节点选择 - DOMAIN-SUFFIX,urbanairship.com,节点选择 - DOMAIN-SUFFIX,whispersystems.org,节点选择 - DOMAIN-SUFFIX,wikia.com,节点选择 - DOMAIN-SUFFIX,wn.com,节点选择 - DOMAIN-SUFFIX,wolframalpha.com,节点选择 - DOMAIN-SUFFIX,x-art.com,节点选择 - DOMAIN-SUFFIX,yimg.com,节点选择 - DOMAIN-SUFFIX,qhres.com,DIRECT - DOMAIN-SUFFIX,qhimg.com,DIRECT - DOMAIN-SUFFIX,akadns.net,DIRECT - DOMAIN-SUFFIX,alibaba.com,DIRECT - DOMAIN-SUFFIX,alicdn.com,DIRECT - DOMAIN-SUFFIX,alikunlun.com,DIRECT - DOMAIN-SUFFIX,alipay.com,DIRECT - DOMAIN-SUFFIX,amap.com,DIRECT - DOMAIN-SUFFIX,dingtalk.com,DIRECT - DOMAIN-SUFFIX,taobao.com,DIRECT - DOMAIN-SUFFIX,tmall.com,DIRECT - DOMAIN-SUFFIX,tmall.hk,DIRECT - DOMAIN-SUFFIX,ykimg.com,DIRECT - DOMAIN-SUFFIX,youku.com,DIRECT - DOMAIN-SUFFIX,xiami.com,DIRECT - DOMAIN-SUFFIX,xiami.net,DIRECT - DOMAIN-SUFFIX,aaplimg.com,DIRECT - DOMAIN-SUFFIX,apple.co,DIRECT - DOMAIN-SUFFIX,apple.com,DIRECT - DOMAIN-SUFFIX,appstore.com,DIRECT - DOMAIN-SUFFIX,cdn-apple.com,DIRECT - DOMAIN-SUFFIX,crashlytics.com,DIRECT - DOMAIN-SUFFIX,icloud.com,DIRECT - DOMAIN-SUFFIX,icloud-content.com,DIRECT - DOMAIN-SUFFIX,me.com,DIRECT - DOMAIN-SUFFIX,mzstatic.com,DIRECT - IP-CIDR,17.0.0.0/8,DIRECT - DOMAIN-SUFFIX,baidu.com,DIRECT - DOMAIN-SUFFIX,baidubcr.com,DIRECT - DOMAIN-SUFFIX,bdstatic.com,DIRECT - DOMAIN-SUFFIX,acgvideo.com,DIRECT - DOMAIN-SUFFIX,biliapi.com,DIRECT - DOMAIN-SUFFIX,biliapi.net,DIRECT - DOMAIN-SUFFIX,bilibili.com,DIRECT - DOMAIN-SUFFIX,hdslb.com,DIRECT - DOMAIN-SUFFIX,blizzard.com,DIRECT - DOMAIN-SUFFIX,battle.net,DIRECT - DOMAIN,blzddist1-a.akamaihd.net,DIRECT - DOMAIN-SUFFIX,feiliao.com,DIRECT - DOMAIN-SUFFIX,pstatp.com,DIRECT - DOMAIN-SUFFIX,snssdk.com,DIRECT - DOMAIN-SUFFIX,iesdouyin.com,DIRECT - DOMAIN-SUFFIX,toutiao.com,DIRECT - DOMAIN-SUFFIX,343480.com,DIRECT - DOMAIN-SUFFIX,baduziyuan.com,DIRECT - DOMAIN-SUFFIX,com-hs-hkdy.com,DIRECT - DOMAIN-SUFFIX,czybjz.com,DIRECT - DOMAIN-SUFFIX,dandanzan.com,DIRECT - DOMAIN-SUFFIX,fjhps.com,DIRECT - DOMAIN-SUFFIX,kuyunbo.club,DIRECT - DOMAIN-SUFFIX,21cn.com,DIRECT - DOMAIN-SUFFIX,hitv.com,DIRECT - DOMAIN-SUFFIX,mgtv.com,DIRECT - DOMAIN-SUFFIX,iqiyi.com,DIRECT - DOMAIN-SUFFIX,iqiyipic.com,DIRECT - DOMAIN-SUFFIX,71.am.com,DIRECT - DOMAIN-SUFFIX,jd.com,DIRECT - DOMAIN-SUFFIX,jd.hk,DIRECT - DOMAIN-SUFFIX,360buyimg.com,DIRECT - DOMAIN-SUFFIX,iciba.com,DIRECT - DOMAIN-SUFFIX,ksosoft.com,DIRECT - DOMAIN-SUFFIX,meitu.com,DIRECT - DOMAIN-SUFFIX,meitudata.com,DIRECT - DOMAIN-SUFFIX,meitustat.com,DIRECT - DOMAIN-SUFFIX,meipai.com,DIRECT - DOMAIN-SUFFIX,duokan.com,DIRECT - DOMAIN-SUFFIX,mi-img.com,DIRECT - DOMAIN-SUFFIX,miui.com,DIRECT - DOMAIN-SUFFIX,xiaomi.com,DIRECT - DOMAIN-SUFFIX,microsoft.com,DIRECT - DOMAIN-SUFFIX,windows.com,DIRECT - DOMAIN-SUFFIX,windowsupdate.com,DIRECT - DOMAIN-SUFFIX,visualstudio.com,DIRECT - DOMAIN-SUFFIX,msecnd.net,DIRECT - DOMAIN,officecdn-microsoft-com.akamaized.net,DIRECT - DOMAIN-SUFFIX,163.com,DIRECT - DOMAIN-SUFFIX,126.net,DIRECT - DOMAIN-SUFFIX,127.net,DIRECT - DOMAIN-SUFFIX,163yun.com,DIRECT - DOMAIN-SUFFIX,lofter.com,DIRECT - DOMAIN-SUFFIX,ydstatic.com,DIRECT - DOMAIN-SUFFIX,sina.com,DIRECT - DOMAIN-SUFFIX,weibo.com,DIRECT - DOMAIN-SUFFIX,sohu.com,DIRECT - DOMAIN-SUFFIX,sohucs.com,DIRECT - DOMAIN-SUFFIX,sohu-inc.com,DIRECT - DOMAIN-SUFFIX,v-56.com,DIRECT - DOMAIN-SUFFIX,sogo.com,DIRECT - DOMAIN-SUFFIX,sogou.com,DIRECT - DOMAIN-SUFFIX,sogoucdn.com,DIRECT - DOMAIN-SUFFIX,steampowered.com,DIRECT - DOMAIN-SUFFIX,steam-chat.com,DIRECT - DOMAIN-SUFFIX,steamgames.com,DIRECT - DOMAIN-SUFFIX,steamusercontent.com,DIRECT - DOMAIN-SUFFIX,steamcontent.com,DIRECT - DOMAIN-SUFFIX,steamstatic.com,DIRECT - DOMAIN-SUFFIX,steamcdn-a.akamaihd.net,DIRECT - DOMAIN-SUFFIX,qq.com,DIRECT - DOMAIN-SUFFIX,tencent.com,DIRECT - DOMAIN-SUFFIX,jstucdn.com,DIRECT - DOMAIN-SUFFIX,zimuzu.io,DIRECT - DOMAIN-SUFFIX,zimuzu.tv,DIRECT - DOMAIN-SUFFIX,zmz2019.com,DIRECT - DOMAIN-SUFFIX,zmzapi.com,DIRECT - DOMAIN-SUFFIX,zmzapi.net,DIRECT - DOMAIN-SUFFIX,zmzfile.com,DIRECT - DOMAIN-SUFFIX,chinanetcenter.com,DIRECT - DOMAIN-SUFFIX,wangsu.com,DIRECT - DOMAIN-SUFFIX,meixincdn.com,DIRECT - DOMAIN-SUFFIX,ipip.net,DIRECT - DOMAIN-SUFFIX,ip.la,DIRECT - DOMAIN-SUFFIX,ip-cdn.com,DIRECT - DOMAIN-SUFFIX,ipv6-test.com,DIRECT - DOMAIN-SUFFIX,test-ipv6.com,DIRECT - DOMAIN-SUFFIX,whatismyip.com,DIRECT - DOMAIN,ip.bjango.com,DIRECT - DOMAIN-SUFFIX,netspeedtestmaster.com,DIRECT - DOMAIN,speedtest.macpaw.com,DIRECT - DOMAIN-SUFFIX,awesome-hd.me,DIRECT - DOMAIN-SUFFIX,broadcasthe.net,DIRECT - DOMAIN-SUFFIX,chdbits.co,DIRECT - DOMAIN-SUFFIX,classix-unlimited.co.uk,DIRECT - DOMAIN-SUFFIX,empornium.me,DIRECT - DOMAIN-SUFFIX,gazellegames.net,DIRECT - DOMAIN-SUFFIX,hdchina.org,DIRECT - DOMAIN-SUFFIX,hdsky.me,DIRECT - DOMAIN-SUFFIX,jpopsuki.eu,DIRECT - DOMAIN-SUFFIX,keepfrds.com,DIRECT - DOMAIN-SUFFIX,m-team.cc,DIRECT - DOMAIN-SUFFIX,nanyangpt.com,DIRECT - DOMAIN-SUFFIX,ncore.cc,DIRECT - DOMAIN-SUFFIX,open.cd,DIRECT - DOMAIN-SUFFIX,ourbits.club,DIRECT - DOMAIN-SUFFIX,passthepopcorn.me,DIRECT - DOMAIN-SUFFIX,privatehd.to,DIRECT - DOMAIN-SUFFIX,redacted.ch,DIRECT - DOMAIN-SUFFIX,springsunday.net,DIRECT - DOMAIN-SUFFIX,tjupt.org,DIRECT - DOMAIN-SUFFIX,totheglory.im,DIRECT - DOMAIN-SUFFIX,cn,DIRECT - DOMAIN-SUFFIX,8686c.com,DIRECT - DOMAIN-SUFFIX,aixifan.com,DIRECT - DOMAIN-SUFFIX,beitaichufang.com,DIRECT - DOMAIN-SUFFIX,booking.com,DIRECT - DOMAIN-SUFFIX,bstatic.com,DIRECT - DOMAIN-SUFFIX,cailianpress.com,DIRECT - DOMAIN-SUFFIX,chunyu.mobi,DIRECT - DOMAIN-SUFFIX,chushou.tv,DIRECT - DOMAIN-SUFFIX,cmbchina.com,DIRECT - DOMAIN-SUFFIX,cmbimg.com,DIRECT - DOMAIN-SUFFIX,ctrip.com,DIRECT - DOMAIN-SUFFIX,dfcfw.com,DIRECT - DOMAIN-SUFFIX,douban.com,DIRECT - DOMAIN-SUFFIX,doubanio.com,DIRECT - DOMAIN-SUFFIX,douyu.com,DIRECT - DOMAIN-SUFFIX,dxycdn.com,DIRECT - DOMAIN-SUFFIX,eastmoney.com,DIRECT - DOMAIN-SUFFIX,futunn.com,DIRECT - DOMAIN-SUFFIX,geilicdn.com,DIRECT - DOMAIN-SUFFIX,hicloud.com,DIRECT - DOMAIN-SUFFIX,hostbuf.com,DIRECT - DOMAIN-SUFFIX,huya.com,DIRECT - DOMAIN-SUFFIX,infinitynewtab.com,DIRECT - DOMAIN-SUFFIX,ithome.com,DIRECT - DOMAIN-SUFFIX,keepcdn.com,DIRECT - DOMAIN-SUFFIX,kkmh.com,DIRECT - DOMAIN-SUFFIX,luojilab.com,DIRECT - DOMAIN-SUFFIX,maoyun.tv,DIRECT - DOMAIN-SUFFIX,meituan.net,DIRECT - DOMAIN-SUFFIX,mobike.com,DIRECT - DOMAIN-SUFFIX,mubu.com,DIRECT - DOMAIN-SUFFIX,myzaker.com,DIRECT - DOMAIN-SUFFIX,nvidia.com,DIRECT - DOMAIN-SUFFIX,paypal.com,DIRECT - DOMAIN-SUFFIX,paypalobjects.com,DIRECT - DOMAIN-SUFFIX,qyer.com,DIRECT - DOMAIN-SUFFIX,qyerstatic.com,DIRECT - DOMAIN-SUFFIX,ronghub.com,DIRECT - DOMAIN-SUFFIX,ruguoapp.com,DIRECT - DOMAIN-SUFFIX,smzdm.com,DIRECT - DOMAIN-SUFFIX,snapdrop.net,DIRECT - DOMAIN-SUFFIX,sspai.com,DIRECT - DOMAIN-SUFFIX,teamviewer.com,DIRECT - DOMAIN-SUFFIX,tianyancha.com,DIRECT - DOMAIN-SUFFIX,udacity.com,DIRECT - DOMAIN-SUFFIX,uning.com,DIRECT - DOMAIN-SUFFIX,weather.com,DIRECT - DOMAIN-SUFFIX,weidian.com,DIRECT - DOMAIN-SUFFIX,xmcdn.com,DIRECT - DOMAIN-SUFFIX,yangkeduo.com,DIRECT - DOMAIN-SUFFIX,zhangzishi.cc,DIRECT - DOMAIN-SUFFIX,zhihu.com,DIRECT - DOMAIN-SUFFIX,zhimg.com,DIRECT - DOMAIN-SUFFIX,zhuihd.com,DIRECT - DOMAIN,download.jetbrains.com,DIRECT - DOMAIN-SUFFIX,local,DIRECT - IP-CIDR,192.168.0.0/16,DIRECT - IP-CIDR,10.0.0.0/8,DIRECT - IP-CIDR,172.16.0.0/12,DIRECT - IP-CIDR,127.0.0.0/8,DIRECT - IP-CIDR,100.64.0.0/10,DIRECT - GEOIP,CN,DIRECT - MATCH,节点选择 dns: nameserver: - 192.168.1.1 - 114.114.114.114 - 119.29.29.29 - https://doh.pub/dns-query - https://dns.alidns.com/dns-query fallback: - https://dns.cloudflare.com/dns-query - "[2001:da8::666]:53" - https://public.dns.iij.jp/dns-query - https://jp.tiar.app/dns-query - https://jp.tiarap.org/dns-query - tls://dot.tiar.app enable: true ipv6: false enhanced-mode: fake-ip fake-ip-range: 198.18.0.1/16 listen: 127.0.0.1:7874 fake-ip-filter: - "+.*" default-nameserver: - 192.168.1.1 - 114.114.114.114 - 119.29.29.29 - "[2001:da8::666]:53" tproxy-port: 7895 mixed-port: 7893 bind-address: "*" external-ui: "/usr/share/openclash/dashboard" ipv6: false profile: store-selected: true store-fake-ip: true #===================== 防火墙设置 =====================# #IPv4 NAT chain # Generated by iptables-save v1.8.7 on Sat Jan 8 14:07:38 2022 *nat :PREROUTING ACCEPT [6788:771151] :INPUT ACCEPT [7201:753318] :OUTPUT ACCEPT [9639:644533] :POSTROUTING ACCEPT [9647:645013] :ADBYBY - [0:0] :MINIUPNPD - [0:0] :MINIUPNPD-POSTROUTING - [0:0] :openclash - [0:0] :openclash_output - [0:0] :postrouting_VPN_rule - [0:0] :postrouting_lan_rule - [0:0] :postrouting_rule - [0:0] :postrouting_wan_rule - [0:0] :prerouting_VPN_rule - [0:0] :prerouting_lan_rule - [0:0] :prerouting_rule - [0:0] :prerouting_wan_rule - [0:0] :zone_VPN_postrouting - [0:0] :zone_VPN_prerouting - [0:0] :zone_lan_postrouting - [0:0] :zone_lan_prerouting - [0:0] :zone_wan_postrouting - [0:0] :zone_wan_prerouting - [0:0] -A PREROUTING -p tcp -m tcp --dport 80 -j ADBYBY -A PREROUTING -d 8.8.4.4/32 -p tcp -m comment --comment "OpenClash Google DNS Hijack" -m tcp --dport 53 -j REDIRECT --to-ports 7892 -A PREROUTING -d 8.8.8.8/32 -p tcp -m comment --comment "OpenClash Google DNS Hijack" -m tcp --dport 53 -j REDIRECT --to-ports 7892 -A PREROUTING -p tcp -m tcp --dport 53 -m comment --comment "DNS Hijack" -j REDIRECT --to-ports 53 -A PREROUTING -p udp -m udp --dport 53 -m comment --comment "DNS Hijack" -j REDIRECT --to-ports 53 -A PREROUTING -m comment --comment "!fw3: Custom prerouting rule chain" -j prerouting_rule -A PREROUTING -i br-lan -m comment --comment "!fw3" -j zone_lan_prerouting -A PREROUTING -i eth1 -m comment --comment "!fw3" -j zone_wan_prerouting -A PREROUTING -i ipsec0 -m comment --comment "!fw3" -j zone_VPN_prerouting -A PREROUTING -p udp -m udp --dport 53 -j REDIRECT --to-ports 53 -A PREROUTING -p tcp -m tcp --dport 53 -j REDIRECT --to-ports 53 -A PREROUTING -p tcp -j openclash -A OUTPUT -j openclash_output -A POSTROUTING -m comment --comment "!fw3: Custom postrouting rule chain" -j postrouting_rule -A POSTROUTING -o br-lan -m comment --comment "!fw3" -j zone_lan_postrouting -A POSTROUTING -o eth1 -m comment --comment "!fw3" -j zone_wan_postrouting -A POSTROUTING -o ipsec0 -m comment --comment "!fw3" -j zone_VPN_postrouting -A ADBYBY -d 0.0.0.0/8 -j RETURN -A ADBYBY -d 10.0.0.0/8 -j RETURN -A ADBYBY -d 127.0.0.0/8 -j RETURN -A ADBYBY -d 169.254.0.0/16 -j RETURN -A ADBYBY -d 172.16.0.0/12 -j RETURN -A ADBYBY -d 192.168.0.0/16 -j RETURN -A ADBYBY -d 224.0.0.0/4 -j RETURN -A ADBYBY -d 240.0.0.0/4 -j RETURN -A ADBYBY -m set --match-set adbyby_esc dst -j RETURN -A ADBYBY -m set --match-set music dst -j RETURN -A ADBYBY -p tcp -j REDIRECT --to-ports 8118 -A openclash -p tcp -m tcp --sport 1688 -j RETURN -A openclash -m set --match-set localnetwork dst -j RETURN -A openclash -p tcp -j REDIRECT --to-ports 7892 -A openclash_output -p tcp -m tcp --sport 1688 -j RETURN -A openclash_output -m set --match-set localnetwork dst -j RETURN -A openclash_output -p tcp -m owner ! --uid-owner 65534 -j REDIRECT --to-ports 7892 -A zone_VPN_postrouting -m comment --comment "!fw3: Custom VPN postrouting rule chain" -j postrouting_VPN_rule -A zone_VPN_prerouting -m comment --comment "!fw3: Custom VPN prerouting rule chain" -j prerouting_VPN_rule -A zone_lan_postrouting -j MINIUPNPD-POSTROUTING -A zone_lan_postrouting -m comment --comment "!fw3: Custom lan postrouting rule chain" -j postrouting_lan_rule -A zone_lan_prerouting -j MINIUPNPD -A zone_lan_prerouting -m comment --comment "!fw3: Custom lan prerouting rule chain" -j prerouting_lan_rule -A zone_wan_postrouting -m comment --comment "!fw3: Custom wan postrouting rule chain" -j postrouting_wan_rule -A zone_wan_postrouting -m comment --comment "!fw3" -j FULLCONENAT -A zone_wan_prerouting -m comment --comment "!fw3: Custom wan prerouting rule chain" -j prerouting_wan_rule -A zone_wan_prerouting -m comment --comment "!fw3" -j FULLCONENAT COMMIT # Completed on Sat Jan 8 14:07:38 2022 #IPv4 Mangle chain # Generated by iptables-save v1.8.7 on Sat Jan 8 14:07:38 2022 *mangle :PREROUTING ACCEPT [215720:56170595] :INPUT ACCEPT [213420:55657750] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [197881:31627692] :POSTROUTING ACCEPT [198561:31788172] :openclash - [0:0] -A PREROUTING -p udp -j openclash -A FORWARD -o eth1 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu -A FORWARD -i eth1 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu -A openclash -p udp -m udp --sport 4500 -j RETURN -A openclash -p udp -m udp --sport 500 -j RETURN -A openclash -p udp -m udp --sport 500 -j RETURN -A openclash -p udp -m udp --sport 68 -j RETURN -A openclash -m set --match-set localnetwork dst -j RETURN -A openclash -p udp -m udp --dport 53 -j RETURN -A openclash -p udp -j TPROXY --on-port 7892 --on-ip 0.0.0.0 --tproxy-mark 0x162/0xffffffff COMMIT # Completed on Sat Jan 8 14:07:38 2022 #IPv6 NAT chain # Generated by ip6tables-save v1.8.7 on Sat Jan 8 14:07:38 2022 *nat :PREROUTING ACCEPT [42168:5210160] :INPUT ACCEPT [0:0] :OUTPUT ACCEPT [2060:306615] :POSTROUTING ACCEPT [2060:306615] COMMIT # Completed on Sat Jan 8 14:07:38 2022 #IPv6 Mangle chain # Generated by ip6tables-save v1.8.7 on Sat Jan 8 14:07:38 2022 *mangle :PREROUTING ACCEPT [43236:5294904] :INPUT ACCEPT [812:66148] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [2188:323150] :POSTROUTING ACCEPT [2188:323150] -A FORWARD -o eth1 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu -A FORWARD -i eth1 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu COMMIT # Completed on Sat Jan 8 14:07:38 2022 #===================== IPSET状态 =====================# Name: china Name: music Name: adbyby_esc Name: blockip Name: gfwlist Name: china_ip_route Name: localnetwork #===================== 路由表状态 =====================# #route -n Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 192.168.1.1 0.0.0.0 UG 0 0 0 br-lan 192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 br-lan #ip route list default via 192.168.1.1 dev br-lan proto static 192.168.1.0/24 dev br-lan proto kernel scope link src 192.168.1.2 #ip rule show 0: from all lookup local 32765: from all fwmark 0x162 lookup 354 32766: from all lookup main 32767: from all lookup default #===================== 端口占用状态 =====================# tcp 0 0 :::9090 :::* LISTEN 5349/clash tcp 0 0 :::7890 :::* LISTEN 5349/clash tcp 0 0 :::7891 :::* LISTEN 5349/clash tcp 0 0 :::7892 :::* LISTEN 5349/clash tcp 0 0 :::7893 :::* LISTEN 5349/clash tcp 0 0 :::7895 :::* LISTEN 5349/clash udp 0 0 127.0.0.1:7874 0.0.0.0:* 5349/clash udp 0 0 :::7891 :::* 5349/clash udp 0 0 :::7892 :::* 5349/clash udp 0 0 :::7893 :::* 5349/clash udp 0 0 :::7895 :::* 5349/clash #===================== 测试本机DNS查询 =====================# Server: 127.0.0.1 Address: 127.0.0.1#53 Non-authoritative answer: www.baidu.com canonical name = www.a.shifen.com. Name: www.a.shifen.com Address: 183.232.231.172 Name: www.a.shifen.com Address: 183.232.231.174 #===================== 测试本机网络连接 =====================# HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: private, no-cache, no-store, proxy-revalidate, no-transform Connection: keep-alive Content-Length: 277 Content-Type: text/html Date: Sat, 08 Jan 2022 06:07:38 GMT Etag: "575e1f6f-115" Last-Modified: Mon, 13 Jun 2016 02:50:23 GMT Pragma: no-cache Server: bfe/1.0.8.18 #===================== 测试本机网络下载 =====================# #===================== 最近运行日志 =====================# time="2022-01-05T09:12:47Z" level=info msg="Start initial compatible provider 美国" time="2022-01-05T09:12:47Z" level=info msg="Start initial compatible provider 日本" time="2022-01-05T09:12:47Z" level=info msg="Start initial compatible provider 新加坡" 2022-01-05 17:12:50 Step 6: Wait For The File Downloading... 2022-01-05 17:12:50 Step 7: Set Control Panel... 2022-01-05 17:12:50 Step 8: Set Firewall Rules... 2022-01-05 17:12:50 Step 9: Restart Dnsmasq... 2022-01-05 17:12:50 Step 10: Add Cron Rules, Start Daemons... 2022-01-05 17:12:50 OpenClash Start Successful! 2022-01-05 17:55:13 Start Downloading Geoip Database... 2022-01-05 17:55:14 Geoip Database Download Success, Check Updated... 2022-01-05 17:55:14 Geoip Database Has Been Updated, Starting To Replace The Old Version... 2022-01-05 17:55:14 Geoip Database Update Successful! 2022-01-05 17:55:17 OpenClash Stoping... 2022-01-05 17:55:17 Step 1: Backup The Current Groups State... 2022-01-05 17:55:17 Step 2: Delete OpenClash Firewall Rules... 2022-01-05 17:55:17 Step 3: Close The OpenClash Daemons... 2022-01-05 17:55:17 Step 4: Close The Clash Core Process... 2022-01-05 17:55:17 Step 5: Restart Dnsmasq... 2022-01-05 17:55:17 Step 6: Delete OpenClash Residue File... 2022-01-05 17:55:17 OpenClash Start Running... 2022-01-05 17:55:17 Step 1: Get The Configuration... 2022-01-05 17:55:17 Step 2: Check The Components... 2022-01-05 17:55:18 Tip: Because of the file【 /etc/openclash/Country.mmdb 】modificated, Pause quick start... 2022-01-05 17:55:18 Step 3: Modify The Config File... 2022-01-05 17:55:18 Step 4: Start Running The Clash Core... 2022-01-05 17:55:18 Tip: No Special Configuration Detected, Use Dev Core to Start... 2022-01-05 17:55:18 Step 5: Check The Core Status... time="2022-01-05T09:55:19Z" level=info msg="Start initial compatible provider 美国" time="2022-01-05T09:55:19Z" level=info msg="Start initial compatible provider 日本" time="2022-01-05T09:55:19Z" level=info msg="Start initial compatible provider 新加坡" time="2022-01-05T09:55:19Z" level=info msg="Start initial compatible provider 台湾" time="2022-01-05T09:55:19Z" level=info msg="Start initial compatible provider 香港" time="2022-01-05T09:55:19Z" level=info msg="Start initial compatible provider Proxy" time="2022-01-05T09:55:19Z" level=info msg="Start initial compatible provider 节点选择" 2022-01-05 17:55:21 Step 6: Wait For The File Downloading... 2022-01-05 17:55:22 Step 7: Set Control Panel... 2022-01-05 17:55:22 Step 8: Set Firewall Rules... 2022-01-05 17:55:22 Step 9: Restart Dnsmasq... 2022-01-05 17:55:22 Start Downloading The Chnroute Cidr List... 2022-01-05 17:55:22 Step 10: Add Cron Rules, Start Daemons... 2022-01-05 17:55:22 OpenClash Start Successful! 2022-01-05 17:55:23 Chnroute Cidr List Download Success, Check Updated... 2022-01-05 17:55:23 Updated Chnroute Cidr List No Change, Do Nothing... 2022-01-05 17:55:26 Start Downloading The Chnroute6 Cidr List... 2022-01-05 17:55:26 Chnroute6 Cidr List Download Success, Check Updated... 2022-01-05 17:55:26 Updated Chnroute6 Cidr List No Change, Do Nothing... 2022-01-05 18:02:01 Start Downloading Geoip Database... 2022-01-05 18:02:01 Geoip Database Download Success, Check Updated... 2022-01-05 18:02:01 Updated Geoip Database No Change, Do Nothing... #===================== 活动连接信息 =====================#
禁用dnsmasq缓存勾上
AristotleLai
commented
2 years ago 已经勾上了的，就是不行。
feng1992
commented
2 years ago 已经勾上了的，就是不行。
勾上禁止缓存，重启设备还有客户端，还不行？你不会是旁路由吧？
AristotleLai
commented
2 years ago 已经勾上了的，就是不行。
勾上禁止缓存，重启设备还有客户端，还不行？你不会是旁路由吧？
是的，旁路由，重启也不行，编译的时候有这些错误： ./etc/init.d/openclash: line 3: /usr/share/openclash/openclash_ps.sh: No such file or directory ./etc/init.d/openclash: line 4: /usr/share/openclash/ruby.sh: No such file or directory ./etc/init.d/openclash: line 5: /usr/share/openclash/log.sh: No such file or directory ./etc/init.d/openclash: line 14: uci: command not found ./etc/init.d/openclash: line 15: uci: command not found ./etc/init.d/openclash: line 20: uci: command not found
blizzardster
commented
2 years ago 我也遇到了同样的问题，运行全局代理干脆上不去了，我换个老版本试试
vernesong
commented
2 years ago -A PREROUTING -p tcp -m tcp --dport 80 -j ADBYBY
关了
AristotleLai
commented
2 years ago -A PREROUTING -p tcp -m tcp --dport 80 -j ADBYBY 关了仍旧不行， 是否dns server的配置问题？ 调试日志里，下载网络以及活动连接皆没有任何日志信息。我的科学上网DNS为192.168.1.2 ，不是192.168.1.1（主路由网关） 。请问DNS server的配置文件在什么地方？ 如下： proxy-groups: rules:
- IP-CIDR,198.18.0.1/16,REJECT,no-resolve dns: nameserver:
- 211.136.192.6
- 192.168.1.1
调试日志如下：
OpenClash 调试日志
生成时间: 2022-01-09 15:35:46 插件版本: v0.44.07-beta 隐私提示: 上传此日志前请注意检查、屏蔽公网IP、节点、密码等相关敏感信息
#===================== 系统信息 =====================#
主机型号: VMware - Intel(R) Core(TM) i5-7300U CPU @ 2.60GHz : 1 Core 2 Thread
固件版本: OpenWrt SNAPSHOT r4059-a859ab9ac
LuCI版本: git-21.335.48743-5f363d9-1
内核版本: 5.10.89
处理器架构: x86_64
#此项有值时,如不使用IPv6,建议到网络-接口-lan的设置中禁用IPV6的DHCP
IPV6-DHCP:
#此项结果应仅有配置文件的DNS监听地址
Dnsmasq转发设置: 127.0.0.1#7874
#===================== 依赖检查 =====================#
dnsmasq-full: 已安装
coreutils: 已安装
coreutils-nohup: 已安装
bash: 已安装
curl: 已安装
ca-certificates: 未安装
ipset: 已安装
ip-full: 已安装
iptables-mod-tproxy: 已安装
kmod-ipt-tproxy: 已安装
iptables-mod-extra: 已安装
kmod-ipt-extra: 已安装
libcap: 已安装
libcap-bin: 已安装
ruby: 已安装
ruby-yaml: 已安装
ruby-psych: 已安装
ruby-pstore: 已安装
ruby-dbm: 已安装
kmod-tun(TUN模式): 已安装
luci-compat(Luci-19.07): 已安装
#===================== 内核检查 =====================#
运行状态: 运行中
进程pid: 28525
运行权限: 28525: cap_dac_override,cap_net_bind_service,cap_net_admin,cap_net_raw,cap_sys_resource=eip
运行用户: nobody
已选择的架构: linux-amd64
#下方无法显示内核版本号时请确认您的内核版本是否正确或者有无权限
Tun内核版本: 2022.01.03
Tun内核文件: 存在
Tun内核运行权限: 正常
Dev内核版本: v1.9.0-1-g8c6d0c6
Dev内核文件: 存在
Dev内核运行权限: 正常
#===================== 插件设置 =====================#
当前配置文件: /etc/openclash/config/1634995915745.yaml
启动配置文件: /etc/openclash/1634995915745.yaml
运行模式: redir-host
默认代理模式: global
UDP流量转发(tproxy): 启用
DNS劫持: 启用
自定义DNS: 停用
IPV6代理: 停用
IPV6-DNS解析: 停用
禁用Dnsmasq缓存: 启用
自定义规则: 停用
仅允许内网: 停用
仅代理命中规则流量: 停用
仅允许常用端口流量: 停用
绕过中国大陆IP: 停用
DNS远程解析: 启用
#启动异常时建议关闭此项后重试
混合节点: 停用
保留配置: 停用
#启动异常时建议关闭此项后重试
第三方规则: 启用
#===================== 配置文件 =====================#
proxy-groups:
rules:
- IP-CIDR,198.18.0.1/16,REJECT,no-resolve
dns:
nameserver:
- 211.136.192.6
- 192.168.1.1
- 114.114.114.114
- 119.29.29.29
- https://doh.pub/dns-query
- https://dns.alidns.com/dns-query
fallback:
- https://dns.cloudflare.com/dns-query
- https://public.dns.iij.jp/dns-query
- https://jp.tiar.app/dns-query
- https://jp.tiarap.org/dns-query
- tls://dot.tiar.app
enable: true
ipv6: false
enhanced-mode: fake-ip
fake-ip-range: 198.18.0.1/16
listen: 127.0.0.1:7874
fake-ip-filter:
- "+.*"
default-nameserver:
- 211.136.192.6
- 192.168.1.1
- 114.114.114.114
- 119.29.29.29
redir-port: 7892
tproxy-port: 7895
port: 7890
socks-port: 7891
mixed-port: 7893
mode: global
log-level: silent
allow-lan: true
external-controller: 0.0.0.0:9090
bind-address: "*"
external-ui: "/usr/share/openclash/dashboard"
ipv6: false
profile:
store-selected: true
store-fake-ip: true
#===================== 防火墙设置 =====================#
#IPv4 NAT chain
# Generated by iptables-save v1.8.7 on Sun Jan 9 15:35:46 2022
*nat
:PREROUTING ACCEPT [17:1272]
:INPUT ACCEPT [28:1987]
:OUTPUT ACCEPT [199:12357]
:POSTROUTING ACCEPT [201:12477]
:MINIUPNPD - [0:0]
:MINIUPNPD-POSTROUTING - [0:0]
:openclash - [0:0]
:openclash_output - [0:0]
:postrouting_VPN_rule - [0:0]
:postrouting_lan_rule - [0:0]
:postrouting_rule - [0:0]
:postrouting_wan_rule - [0:0]
:prerouting_VPN_rule - [0:0]
:prerouting_lan_rule - [0:0]
:prerouting_rule - [0:0]
:prerouting_wan_rule - [0:0]
:zone_VPN_postrouting - [0:0]
:zone_VPN_prerouting - [0:0]
:zone_lan_postrouting - [0:0]
:zone_lan_prerouting - [0:0]
:zone_wan_postrouting - [0:0]
:zone_wan_prerouting - [0:0]
-A PREROUTING -d 8.8.4.4/32 -p tcp -m comment --comment "OpenClash Google DNS Hijack" -m tcp --dport 53 -j REDIRECT --to-ports 7892
-A PREROUTING -d 8.8.8.8/32 -p tcp -m comment --comment "OpenClash Google DNS Hijack" -m tcp --dport 53 -j REDIRECT --to-ports 7892
-A PREROUTING -p tcp -m tcp --dport 53 -m comment --comment "DNS Hijack" -j REDIRECT --to-ports 53
-A PREROUTING -p udp -m udp --dport 53 -m comment --comment "DNS Hijack" -j REDIRECT --to-ports 53
-A PREROUTING -p udp -m udp --dport 53 -j REDIRECT --to-ports 53
-A PREROUTING -p tcp -m tcp --dport 53 -j REDIRECT --to-ports 53
-A PREROUTING -m comment --comment "!fw3: Custom prerouting rule chain" -j prerouting_rule
-A PREROUTING -i br-lan -m comment --comment "!fw3" -j zone_lan_prerouting
-A PREROUTING -i eth1 -m comment --comment "!fw3" -j zone_wan_prerouting
-A PREROUTING -i ipsec0 -m comment --comment "!fw3" -j zone_VPN_prerouting
-A PREROUTING -p tcp -j openclash
-A OUTPUT -j openclash_output
-A POSTROUTING -m comment --comment "!fw3: Custom postrouting rule chain" -j postrouting_rule
-A POSTROUTING -o br-lan -m comment --comment "!fw3" -j zone_lan_postrouting
-A POSTROUTING -o eth1 -m comment --comment "!fw3" -j zone_wan_postrouting
-A POSTROUTING -o ipsec0 -m comment --comment "!fw3" -j zone_VPN_postrouting
-A openclash -p tcp -m tcp --sport 1688 -j RETURN
-A openclash -m set --match-set localnetwork dst -j RETURN
-A openclash -p tcp -j REDIRECT --to-ports 7892
-A openclash_output -p tcp -m tcp --sport 1688 -j RETURN
-A openclash_output -m set --match-set localnetwork dst -j RETURN
-A openclash_output -p tcp -m owner ! --uid-owner 65534 -j REDIRECT --to-ports 7892
-A zone_VPN_postrouting -m comment --comment "!fw3: Custom VPN postrouting rule chain" -j postrouting_VPN_rule
-A zone_VPN_prerouting -m comment --comment "!fw3: Custom VPN prerouting rule chain" -j prerouting_VPN_rule
-A zone_lan_postrouting -j MINIUPNPD-POSTROUTING
-A zone_lan_postrouting -m comment --comment "!fw3: Custom lan postrouting rule chain" -j postrouting_lan_rule
-A zone_lan_prerouting -j MINIUPNPD
-A zone_lan_prerouting -m comment --comment "!fw3: Custom lan prerouting rule chain" -j prerouting_lan_rule
-A zone_wan_postrouting -m comment --comment "!fw3: Custom wan postrouting rule chain" -j postrouting_wan_rule
-A zone_wan_postrouting -m comment --comment "!fw3" -j FULLCONENAT
-A zone_wan_prerouting -m comment --comment "!fw3: Custom wan prerouting rule chain" -j prerouting_wan_rule
-A zone_wan_prerouting -m comment --comment "!fw3" -j FULLCONENAT
COMMIT
# Completed on Sun Jan 9 15:35:46 2022
#IPv4 Mangle chain
# Generated by iptables-save v1.8.7 on Sun Jan 9 15:35:46 2022
*mangle
:PREROUTING ACCEPT [920:150260]
:INPUT ACCEPT [920:150260]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1149:321056]
:POSTROUTING ACCEPT [1149:321056]
:openclash - [0:0]
-A PREROUTING -p udp -j openclash
-A FORWARD -o eth1 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
-A FORWARD -i eth1 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
-A openclash -p udp -m udp --sport 4500 -j RETURN
-A openclash -p udp -m udp --sport 500 -j RETURN
-A openclash -p udp -m udp --sport 500 -j RETURN
-A openclash -p udp -m udp --sport 68 -j RETURN
-A openclash -m set --match-set localnetwork dst -j RETURN
-A openclash -p udp -m udp --dport 53 -j RETURN
-A openclash -p udp -j TPROXY --on-port 7892 --on-ip 0.0.0.0 --tproxy-mark 0x162/0xffffffff
COMMIT
# Completed on Sun Jan 9 15:35:46 2022
#IPv6 NAT chain
# Generated by ip6tables-save v1.8.7 on Sun Jan 9 15:35:46 2022
*nat
:PREROUTING ACCEPT [64:7473]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [32:3925]
:POSTROUTING ACCEPT [32:3925]
COMMIT
# Completed on Sun Jan 9 15:35:46 2022
#IPv6 Mangle chain
# Generated by ip6tables-save v1.8.7 on Sun Jan 9 15:35:46 2022
*mangle
:PREROUTING ACCEPT [137:17569]
:INPUT ACCEPT [75:10330]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [82:12345]
:POSTROUTING ACCEPT [84:12449]
-A FORWARD -o eth1 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
-A FORWARD -i eth1 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
COMMIT
# Completed on Sun Jan 9 15:35:46 2022
#===================== IPSET状态 =====================#
Name: china_ip_route
Name: localnetwork
Name: china
Name: music
#===================== 路由表状态 =====================#
#route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 192.168.1.1 0.0.0.0 UG 0 0 0 br-lan
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 br-lan
#ip route list
default via 192.168.1.1 dev br-lan proto static
192.168.1.0/24 dev br-lan proto kernel scope link src 192.168.1.2
#ip rule show
0: from all lookup local
32765: from all fwmark 0x162 lookup 354
32766: from all lookup main
32767: from all lookup default
#===================== 端口占用状态 =====================#
tcp 0 0 :::7895 :::* LISTEN 28525/clash
tcp 0 0 :::9090 :::* LISTEN 28525/clash
tcp 0 0 :::7890 :::* LISTEN 28525/clash
tcp 0 0 :::7891 :::* LISTEN 28525/clash
tcp 0 0 :::7892 :::* LISTEN 28525/clash
tcp 0 0 :::7893 :::* LISTEN 28525/clash
udp 0 0 127.0.0.1:7874 0.0.0.0:* 28525/clash
udp 0 0 :::7891 :::* 28525/clash
udp 0 0 :::7892 :::* 28525/clash
udp 0 0 :::7893 :::* 28525/clash
udp 0 0 :::7895 :::* 28525/clash
#===================== 测试本机DNS查询 =====================#
Server: 127.0.0.1
Address: 127.0.0.1#53
www.baidu.com canonical name = www.a.shifen.com.
Name: www.a.shifen.com
Address: 183.232.231.172
Name: www.a.shifen.com
Address: 183.232.231.174
#===================== resolv.conf.d =====================#
# Interface lan
nameserver 211.136.192.6
#===================== 测试本机网络连接 =====================#
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: private, no-cache, no-store, proxy-revalidate, no-transform
Connection: keep-alive
Content-Length: 277
Content-Type: text/html
Date: Sun, 09 Jan 2022 07:35:46 GMT
Etag: "575e1f6f-115"
Last-Modified: Mon, 13 Jun 2016 02:50:23 GMT
Pragma: no-cache
Server: bfe/1.0.8.18
#===================== 测试本机网络下载 =====================#
#===================== 最近运行日志 =====================#
2022-01-09 15:35:16 OpenClash Stoping...
2022-01-09 15:35:16 Step 1: Backup The Current Groups State...
2022-01-09 15:35:16 Step 2: Delete OpenClash Firewall Rules...
2022-01-09 15:35:16 Step 3: Close The OpenClash Daemons...
2022-01-09 15:35:16 Step 4: Close The Clash Core Process...
2022-01-09 15:35:16 Step 5: Restart Dnsmasq...
2022-01-09 15:35:16 Step 6: Delete OpenClash Residue File...
2022-01-09 15:35:16 OpenClash Start Running...
2022-01-09 15:35:16 Step 1: Get The Configuration...
2022-01-09 15:35:16 Step 2: Check The Components...
2022-01-09 15:35:16 Step 3: Modify The Config File...
2022-01-09 15:35:17 Warning: Because of The Different Porxy-Group's Name, Stop Setting The Other Rules!
2022-01-09 15:35:17 Step 4: Start Running The Clash Core...
2022-01-09 15:35:17 Tip: Detected The Exclusive Function of The TUN Core, Use TUN Core to Start...
time="2022-01-09T07:35:17Z" level=info msg="DNS server listening at: 127.0.0.1:7874"
2022-01-09 15:35:17 Step 5: Check The Core Status...
2022-01-09 15:35:20 Step 6: Wait For The File Downloading...
2022-01-09 15:35:20 Step 7: Set Control Panel...
2022-01-09 15:35:20 Step 8: Set Firewall Rules...
2022-01-09 15:35:20 Step 9: Restart Dnsmasq...
2022-01-09 15:35:20 Step 10: Add Cron Rules, Start Daemons...
2022-01-09 15:35:20 OpenClash Start Successful!
#===================== 活动连接信息 =====================#
-A PREROUTING -p tcp -m tcp --dport 80 -j ADBYBY 关了仍旧不行， 是否dns server的配置问题？ 调试日志里，下载网络以及活动连接皆没有任何日志信息。我的科学上网DNS为192.168.1.2 ，不是192.168.1.1（主路由网关） 。请问DNS server的配置文件在什么地方？ 如下： proxy-groups: rules:
IP-CIDR,198.18.0.1/16,REJECT,no-resolve dns: nameserver:
- 211.136.192.6
- 192.168.1.1
调试日志如下：
OpenClash 调试日志
生成时间: 2022-01-09 15:35:46 插件版本: v0.44.07-beta 隐私提示: 上传此日志前请注意检查、屏蔽公网IP、节点、密码等相关敏感信息
#===================== 系统信息 =====================# 主机型号: VMware - Intel(R) Core(TM) i5-7300U CPU @ 2.60GHz : 1 Core 2 Thread 固件版本: OpenWrt SNAPSHOT r4059-a859ab9ac LuCI版本: git-21.335.48743-5f363d9-1 内核版本: 5.10.89 处理器架构: x86_64 #此项有值时,如不使用IPv6,建议到网络-接口-lan的设置中禁用IPV6的DHCP IPV6-DHCP: #此项结果应仅有配置文件的DNS监听地址 Dnsmasq转发设置: 127.0.0.1#7874 #===================== 依赖检查 =====================# dnsmasq-full: 已安装 coreutils: 已安装 coreutils-nohup: 已安装 bash: 已安装 curl: 已安装 ca-certificates: 未安装 ipset: 已安装 ip-full: 已安装 iptables-mod-tproxy: 已安装 kmod-ipt-tproxy: 已安装 iptables-mod-extra: 已安装 kmod-ipt-extra: 已安装 libcap: 已安装 libcap-bin: 已安装 ruby: 已安装 ruby-yaml: 已安装 ruby-psych: 已安装 ruby-pstore: 已安装 ruby-dbm: 已安装 kmod-tun(TUN模式): 已安装 luci-compat(Luci-19.07): 已安装 #===================== 内核检查 =====================# 运行状态: 运行中 进程pid: 28525 运行权限: 28525: cap_dac_override,cap_net_bind_service,cap_net_admin,cap_net_raw,cap_sys_resource=eip 运行用户: nobody 已选择的架构: linux-amd64 #下方无法显示内核版本号时请确认您的内核版本是否正确或者有无权限 Tun内核版本: 2022.01.03 Tun内核文件: 存在 Tun内核运行权限: 正常 Dev内核版本: v1.9.0-1-g8c6d0c6 Dev内核文件: 存在 Dev内核运行权限: 正常 #===================== 插件设置 =====================# 当前配置文件: /etc/openclash/config/1634995915745.yaml 启动配置文件: /etc/openclash/1634995915745.yaml 运行模式: redir-host 默认代理模式: global UDP流量转发(tproxy): 启用 DNS劫持: 启用 自定义DNS: 停用 IPV6代理: 停用 IPV6-DNS解析: 停用 禁用Dnsmasq缓存: 启用 自定义规则: 停用 仅允许内网: 停用 仅代理命中规则流量: 停用 仅允许常用端口流量: 停用 绕过中国大陆IP: 停用 DNS远程解析: 启用 #启动异常时建议关闭此项后重试 混合节点: 停用 保留配置: 停用 #启动异常时建议关闭此项后重试 第三方规则: 启用 #===================== 配置文件 =====================# proxy-groups: rules: - IP-CIDR,198.18.0.1/16,REJECT,no-resolve dns: nameserver: - 211.136.192.6 - 192.168.1.1 - 114.114.114.114 - 119.29.29.29 - https://doh.pub/dns-query - https://dns.alidns.com/dns-query fallback: - https://dns.cloudflare.com/dns-query - https://public.dns.iij.jp/dns-query - https://jp.tiar.app/dns-query - https://jp.tiarap.org/dns-query - tls://dot.tiar.app enable: true ipv6: false enhanced-mode: fake-ip fake-ip-range: 198.18.0.1/16 listen: 127.0.0.1:7874 fake-ip-filter: - "+.*" default-nameserver: - 211.136.192.6 - 192.168.1.1 - 114.114.114.114 - 119.29.29.29 redir-port: 7892 tproxy-port: 7895 port: 7890 socks-port: 7891 mixed-port: 7893 mode: global log-level: silent allow-lan: true external-controller: 0.0.0.0:9090 bind-address: "*" external-ui: "/usr/share/openclash/dashboard" ipv6: false profile: store-selected: true store-fake-ip: true #===================== 防火墙设置 =====================# #IPv4 NAT chain # Generated by iptables-save v1.8.7 on Sun Jan 9 15:35:46 2022 *nat :PREROUTING ACCEPT [17:1272] :INPUT ACCEPT [28:1987] :OUTPUT ACCEPT [199:12357] :POSTROUTING ACCEPT [201:12477] :MINIUPNPD - [0:0] :MINIUPNPD-POSTROUTING - [0:0] :openclash - [0:0] :openclash_output - [0:0] :postrouting_VPN_rule - [0:0] :postrouting_lan_rule - [0:0] :postrouting_rule - [0:0] :postrouting_wan_rule - [0:0] :prerouting_VPN_rule - [0:0] :prerouting_lan_rule - [0:0] :prerouting_rule - [0:0] :prerouting_wan_rule - [0:0] :zone_VPN_postrouting - [0:0] :zone_VPN_prerouting - [0:0] :zone_lan_postrouting - [0:0] :zone_lan_prerouting - [0:0] :zone_wan_postrouting - [0:0] :zone_wan_prerouting - [0:0] -A PREROUTING -d 8.8.4.4/32 -p tcp -m comment --comment "OpenClash Google DNS Hijack" -m tcp --dport 53 -j REDIRECT --to-ports 7892 -A PREROUTING -d 8.8.8.8/32 -p tcp -m comment --comment "OpenClash Google DNS Hijack" -m tcp --dport 53 -j REDIRECT --to-ports 7892 -A PREROUTING -p tcp -m tcp --dport 53 -m comment --comment "DNS Hijack" -j REDIRECT --to-ports 53 -A PREROUTING -p udp -m udp --dport 53 -m comment --comment "DNS Hijack" -j REDIRECT --to-ports 53 -A PREROUTING -p udp -m udp --dport 53 -j REDIRECT --to-ports 53 -A PREROUTING -p tcp -m tcp --dport 53 -j REDIRECT --to-ports 53 -A PREROUTING -m comment --comment "!fw3: Custom prerouting rule chain" -j prerouting_rule -A PREROUTING -i br-lan -m comment --comment "!fw3" -j zone_lan_prerouting -A PREROUTING -i eth1 -m comment --comment "!fw3" -j zone_wan_prerouting -A PREROUTING -i ipsec0 -m comment --comment "!fw3" -j zone_VPN_prerouting -A PREROUTING -p tcp -j openclash -A OUTPUT -j openclash_output -A POSTROUTING -m comment --comment "!fw3: Custom postrouting rule chain" -j postrouting_rule -A POSTROUTING -o br-lan -m comment --comment "!fw3" -j zone_lan_postrouting -A POSTROUTING -o eth1 -m comment --comment "!fw3" -j zone_wan_postrouting -A POSTROUTING -o ipsec0 -m comment --comment "!fw3" -j zone_VPN_postrouting -A openclash -p tcp -m tcp --sport 1688 -j RETURN -A openclash -m set --match-set localnetwork dst -j RETURN -A openclash -p tcp -j REDIRECT --to-ports 7892 -A openclash_output -p tcp -m tcp --sport 1688 -j RETURN -A openclash_output -m set --match-set localnetwork dst -j RETURN -A openclash_output -p tcp -m owner ! --uid-owner 65534 -j REDIRECT --to-ports 7892 -A zone_VPN_postrouting -m comment --comment "!fw3: Custom VPN postrouting rule chain" -j postrouting_VPN_rule -A zone_VPN_prerouting -m comment --comment "!fw3: Custom VPN prerouting rule chain" -j prerouting_VPN_rule -A zone_lan_postrouting -j MINIUPNPD-POSTROUTING -A zone_lan_postrouting -m comment --comment "!fw3: Custom lan postrouting rule chain" -j postrouting_lan_rule -A zone_lan_prerouting -j MINIUPNPD -A zone_lan_prerouting -m comment --comment "!fw3: Custom lan prerouting rule chain" -j prerouting_lan_rule -A zone_wan_postrouting -m comment --comment "!fw3: Custom wan postrouting rule chain" -j postrouting_wan_rule -A zone_wan_postrouting -m comment --comment "!fw3" -j FULLCONENAT -A zone_wan_prerouting -m comment --comment "!fw3: Custom wan prerouting rule chain" -j prerouting_wan_rule -A zone_wan_prerouting -m comment --comment "!fw3" -j FULLCONENAT COMMIT # Completed on Sun Jan 9 15:35:46 2022 #IPv4 Mangle chain # Generated by iptables-save v1.8.7 on Sun Jan 9 15:35:46 2022 *mangle :PREROUTING ACCEPT [920:150260] :INPUT ACCEPT [920:150260] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [1149:321056] :POSTROUTING ACCEPT [1149:321056] :openclash - [0:0] -A PREROUTING -p udp -j openclash -A FORWARD -o eth1 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu -A FORWARD -i eth1 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu -A openclash -p udp -m udp --sport 4500 -j RETURN -A openclash -p udp -m udp --sport 500 -j RETURN -A openclash -p udp -m udp --sport 500 -j RETURN -A openclash -p udp -m udp --sport 68 -j RETURN -A openclash -m set --match-set localnetwork dst -j RETURN -A openclash -p udp -m udp --dport 53 -j RETURN -A openclash -p udp -j TPROXY --on-port 7892 --on-ip 0.0.0.0 --tproxy-mark 0x162/0xffffffff COMMIT # Completed on Sun Jan 9 15:35:46 2022 #IPv6 NAT chain # Generated by ip6tables-save v1.8.7 on Sun Jan 9 15:35:46 2022 *nat :PREROUTING ACCEPT [64:7473] :INPUT ACCEPT [0:0] :OUTPUT ACCEPT [32:3925] :POSTROUTING ACCEPT [32:3925] COMMIT # Completed on Sun Jan 9 15:35:46 2022 #IPv6 Mangle chain # Generated by ip6tables-save v1.8.7 on Sun Jan 9 15:35:46 2022 *mangle :PREROUTING ACCEPT [137:17569] :INPUT ACCEPT [75:10330] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [82:12345] :POSTROUTING ACCEPT [84:12449] -A FORWARD -o eth1 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu -A FORWARD -i eth1 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu COMMIT # Completed on Sun Jan 9 15:35:46 2022 #===================== IPSET状态 =====================# Name: china_ip_route Name: localnetwork Name: china Name: music #===================== 路由表状态 =====================# #route -n Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 192.168.1.1 0.0.0.0 UG 0 0 0 br-lan 192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 br-lan #ip route list default via 192.168.1.1 dev br-lan proto static 192.168.1.0/24 dev br-lan proto kernel scope link src 192.168.1.2 #ip rule show 0: from all lookup local 32765: from all fwmark 0x162 lookup 354 32766: from all lookup main 32767: from all lookup default #===================== 端口占用状态 =====================# tcp 0 0 :::7895 :::* LISTEN 28525/clash tcp 0 0 :::9090 :::* LISTEN 28525/clash tcp 0 0 :::7890 :::* LISTEN 28525/clash tcp 0 0 :::7891 :::* LISTEN 28525/clash tcp 0 0 :::7892 :::* LISTEN 28525/clash tcp 0 0 :::7893 :::* LISTEN 28525/clash udp 0 0 127.0.0.1:7874 0.0.0.0:* 28525/clash udp 0 0 :::7891 :::* 28525/clash udp 0 0 :::7892 :::* 28525/clash udp 0 0 :::7893 :::* 28525/clash udp 0 0 :::7895 :::* 28525/clash #===================== 测试本机DNS查询 =====================# Server: 127.0.0.1 Address: 127.0.0.1#53 www.baidu.com canonical name = www.a.shifen.com. Name: www.a.shifen.com Address: 183.232.231.172 Name: www.a.shifen.com Address: 183.232.231.174 #===================== resolv.conf.d =====================# # Interface lan nameserver 211.136.192.6 #===================== 测试本机网络连接 =====================# HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: private, no-cache, no-store, proxy-revalidate, no-transform Connection: keep-alive Content-Length: 277 Content-Type: text/html Date: Sun, 09 Jan 2022 07:35:46 GMT Etag: "575e1f6f-115" Last-Modified: Mon, 13 Jun 2016 02:50:23 GMT Pragma: no-cache Server: bfe/1.0.8.18 #===================== 测试本机网络下载 =====================# #===================== 最近运行日志 =====================# 2022-01-09 15:35:16 OpenClash Stoping... 2022-01-09 15:35:16 Step 1: Backup The Current Groups State... 2022-01-09 15:35:16 Step 2: Delete OpenClash Firewall Rules... 2022-01-09 15:35:16 Step 3: Close The OpenClash Daemons... 2022-01-09 15:35:16 Step 4: Close The Clash Core Process... 2022-01-09 15:35:16 Step 5: Restart Dnsmasq... 2022-01-09 15:35:16 Step 6: Delete OpenClash Residue File... 2022-01-09 15:35:16 OpenClash Start Running... 2022-01-09 15:35:16 Step 1: Get The Configuration... 2022-01-09 15:35:16 Step 2: Check The Components... 2022-01-09 15:35:16 Step 3: Modify The Config File... 2022-01-09 15:35:17 Warning: Because of The Different Porxy-Group's Name, Stop Setting The Other Rules! 2022-01-09 15:35:17 Step 4: Start Running The Clash Core... 2022-01-09 15:35:17 Tip: Detected The Exclusive Function of The TUN Core, Use TUN Core to Start... time="2022-01-09T07:35:17Z" level=info msg="DNS server listening at: 127.0.0.1:7874" 2022-01-09 15:35:17 Step 5: Check The Core Status... 2022-01-09 15:35:20 Step 6: Wait For The File Downloading... 2022-01-09 15:35:20 Step 7: Set Control Panel... 2022-01-09 15:35:20 Step 8: Set Firewall Rules... 2022-01-09 15:35:20 Step 9: Restart Dnsmasq... 2022-01-09 15:35:20 Step 10: Add Cron Rules, Start Daemons... 2022-01-09 15:35:20 OpenClash Start Successful! #===================== 活动连接信息 =====================#
下面设备的DNS和网关要指向OC的机器IP，如果是指向其他机器，你要自己做好转发
AristotleLai
commented
2 years ago -A PREROUTING -p tcp -m tcp --dport 80 -j ADBYBY 关了仍旧不行， 是否dns server的配置问题？ 调试日志里，下载网络以及活动连接皆没有任何日志信息。我的科学上网DNS为192.168.1.2 ，不是192.168.1.1（主路由网关） 。请问DNS server的配置文件在什么地方？ 如下： proxy-groups: rules:
IP-CIDR,198.18.0.1/16,REJECT,no-resolve dns: nameserver:
- 211.136.192.6
- 192.168.1.1
调试日志如下： OpenClash 调试日志 生成时间: 2022-01-09 15:35:46 插件版本: v0.44.07-beta 隐私提示: 上传此日志前请注意检查、屏蔽公网IP、节点、密码等相关敏感信息
#===================== 系统信息 =====================# 主机型号: VMware - Intel(R) Core(TM) i5-7300U CPU @ 2.60GHz : 1 Core 2 Thread 固件版本: OpenWrt SNAPSHOT r4059-a859ab9ac LuCI版本: git-21.335.48743-5f363d9-1 内核版本: 5.10.89 处理器架构: x86_64 #此项有值时,如不使用IPv6,建议到网络-接口-lan的设置中禁用IPV6的DHCP IPV6-DHCP: #此项结果应仅有配置文件的DNS监听地址 Dnsmasq转发设置: 127.0.0.1#7874 #===================== 依赖检查 =====================# dnsmasq-full: 已安装 coreutils: 已安装 coreutils-nohup: 已安装 bash: 已安装 curl: 已安装 ca-certificates: 未安装 ipset: 已安装 ip-full: 已安装 iptables-mod-tproxy: 已安装 kmod-ipt-tproxy: 已安装 iptables-mod-extra: 已安装 kmod-ipt-extra: 已安装 libcap: 已安装 libcap-bin: 已安装 ruby: 已安装 ruby-yaml: 已安装 ruby-psych: 已安装 ruby-pstore: 已安装 ruby-dbm: 已安装 kmod-tun(TUN模式): 已安装 luci-compat(Luci-19.07): 已安装 #===================== 内核检查 =====================# 运行状态: 运行中 进程pid: 28525 运行权限: 28525: cap_dac_override,cap_net_bind_service,cap_net_admin,cap_net_raw,cap_sys_resource=eip 运行用户: nobody 已选择的架构: linux-amd64 #下方无法显示内核版本号时请确认您的内核版本是否正确或者有无权限 Tun内核版本: 2022.01.03 Tun内核文件: 存在 Tun内核运行权限: 正常 Dev内核版本: v1.9.0-1-g8c6d0c6 Dev内核文件: 存在 Dev内核运行权限: 正常 #===================== 插件设置 =====================# 当前配置文件: /etc/openclash/config/1634995915745.yaml 启动配置文件: /etc/openclash/1634995915745.yaml 运行模式: redir-host 默认代理模式: global UDP流量转发(tproxy): 启用 DNS劫持: 启用 自定义DNS: 停用 IPV6代理: 停用 IPV6-DNS解析: 停用 禁用Dnsmasq缓存: 启用 自定义规则: 停用 仅允许内网: 停用 仅代理命中规则流量: 停用 仅允许常用端口流量: 停用 绕过中国大陆IP: 停用 DNS远程解析: 启用 #启动异常时建议关闭此项后重试 混合节点: 停用 保留配置: 停用 #启动异常时建议关闭此项后重试 第三方规则: 启用 #===================== 配置文件 =====================# proxy-groups: rules: - IP-CIDR,198.18.0.1/16,REJECT,no-resolve dns: nameserver: - 211.136.192.6 - 192.168.1.1 - 114.114.114.114 - 119.29.29.29 - https://doh.pub/dns-query - https://dns.alidns.com/dns-query fallback: - https://dns.cloudflare.com/dns-query - https://public.dns.iij.jp/dns-query - https://jp.tiar.app/dns-query - https://jp.tiarap.org/dns-query - tls://dot.tiar.app enable: true ipv6: false enhanced-mode: fake-ip fake-ip-range: 198.18.0.1/16 listen: 127.0.0.1:7874 fake-ip-filter: - "+.*" default-nameserver: - 211.136.192.6 - 192.168.1.1 - 114.114.114.114 - 119.29.29.29 redir-port: 7892 tproxy-port: 7895 port: 7890 socks-port: 7891 mixed-port: 7893 mode: global log-level: silent allow-lan: true external-controller: 0.0.0.0:9090 bind-address: "*" external-ui: "/usr/share/openclash/dashboard" ipv6: false profile: store-selected: true store-fake-ip: true #===================== 防火墙设置 =====================# #IPv4 NAT chain # Generated by iptables-save v1.8.7 on Sun Jan 9 15:35:46 2022 *nat :PREROUTING ACCEPT [17:1272] :INPUT ACCEPT [28:1987] :OUTPUT ACCEPT [199:12357] :POSTROUTING ACCEPT [201:12477] :MINIUPNPD - [0:0] :MINIUPNPD-POSTROUTING - [0:0] :openclash - [0:0] :openclash_output - [0:0] :postrouting_VPN_rule - [0:0] :postrouting_lan_rule - [0:0] :postrouting_rule - [0:0] :postrouting_wan_rule - [0:0] :prerouting_VPN_rule - [0:0] :prerouting_lan_rule - [0:0] :prerouting_rule - [0:0] :prerouting_wan_rule - [0:0] :zone_VPN_postrouting - [0:0] :zone_VPN_prerouting - [0:0] :zone_lan_postrouting - [0:0] :zone_lan_prerouting - [0:0] :zone_wan_postrouting - [0:0] :zone_wan_prerouting - [0:0] -A PREROUTING -d 8.8.4.4/32 -p tcp -m comment --comment "OpenClash Google DNS Hijack" -m tcp --dport 53 -j REDIRECT --to-ports 7892 -A PREROUTING -d 8.8.8.8/32 -p tcp -m comment --comment "OpenClash Google DNS Hijack" -m tcp --dport 53 -j REDIRECT --to-ports 7892 -A PREROUTING -p tcp -m tcp --dport 53 -m comment --comment "DNS Hijack" -j REDIRECT --to-ports 53 -A PREROUTING -p udp -m udp --dport 53 -m comment --comment "DNS Hijack" -j REDIRECT --to-ports 53 -A PREROUTING -p udp -m udp --dport 53 -j REDIRECT --to-ports 53 -A PREROUTING -p tcp -m tcp --dport 53 -j REDIRECT --to-ports 53 -A PREROUTING -m comment --comment "!fw3: Custom prerouting rule chain" -j prerouting_rule -A PREROUTING -i br-lan -m comment --comment "!fw3" -j zone_lan_prerouting -A PREROUTING -i eth1 -m comment --comment "!fw3" -j zone_wan_prerouting -A PREROUTING -i ipsec0 -m comment --comment "!fw3" -j zone_VPN_prerouting -A PREROUTING -p tcp -j openclash -A OUTPUT -j openclash_output -A POSTROUTING -m comment --comment "!fw3: Custom postrouting rule chain" -j postrouting_rule -A POSTROUTING -o br-lan -m comment --comment "!fw3" -j zone_lan_postrouting -A POSTROUTING -o eth1 -m comment --comment "!fw3" -j zone_wan_postrouting -A POSTROUTING -o ipsec0 -m comment --comment "!fw3" -j zone_VPN_postrouting -A openclash -p tcp -m tcp --sport 1688 -j RETURN -A openclash -m set --match-set localnetwork dst -j RETURN -A openclash -p tcp -j REDIRECT --to-ports 7892 -A openclash_output -p tcp -m tcp --sport 1688 -j RETURN -A openclash_output -m set --match-set localnetwork dst -j RETURN -A openclash_output -p tcp -m owner ! --uid-owner 65534 -j REDIRECT --to-ports 7892 -A zone_VPN_postrouting -m comment --comment "!fw3: Custom VPN postrouting rule chain" -j postrouting_VPN_rule -A zone_VPN_prerouting -m comment --comment "!fw3: Custom VPN prerouting rule chain" -j prerouting_VPN_rule -A zone_lan_postrouting -j MINIUPNPD-POSTROUTING -A zone_lan_postrouting -m comment --comment "!fw3: Custom lan postrouting rule chain" -j postrouting_lan_rule -A zone_lan_prerouting -j MINIUPNPD -A zone_lan_prerouting -m comment --comment "!fw3: Custom lan prerouting rule chain" -j prerouting_lan_rule -A zone_wan_postrouting -m comment --comment "!fw3: Custom wan postrouting rule chain" -j postrouting_wan_rule -A zone_wan_postrouting -m comment --comment "!fw3" -j FULLCONENAT -A zone_wan_prerouting -m comment --comment "!fw3: Custom wan prerouting rule chain" -j prerouting_wan_rule -A zone_wan_prerouting -m comment --comment "!fw3" -j FULLCONENAT COMMIT # Completed on Sun Jan 9 15:35:46 2022 #IPv4 Mangle chain # Generated by iptables-save v1.8.7 on Sun Jan 9 15:35:46 2022 *mangle :PREROUTING ACCEPT [920:150260] :INPUT ACCEPT [920:150260] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [1149:321056] :POSTROUTING ACCEPT [1149:321056] :openclash - [0:0] -A PREROUTING -p udp -j openclash -A FORWARD -o eth1 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu -A FORWARD -i eth1 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu -A openclash -p udp -m udp --sport 4500 -j RETURN -A openclash -p udp -m udp --sport 500 -j RETURN -A openclash -p udp -m udp --sport 500 -j RETURN -A openclash -p udp -m udp --sport 68 -j RETURN -A openclash -m set --match-set localnetwork dst -j RETURN -A openclash -p udp -m udp --dport 53 -j RETURN -A openclash -p udp -j TPROXY --on-port 7892 --on-ip 0.0.0.0 --tproxy-mark 0x162/0xffffffff COMMIT # Completed on Sun Jan 9 15:35:46 2022 #IPv6 NAT chain # Generated by ip6tables-save v1.8.7 on Sun Jan 9 15:35:46 2022 *nat :PREROUTING ACCEPT [64:7473] :INPUT ACCEPT [0:0] :OUTPUT ACCEPT [32:3925] :POSTROUTING ACCEPT [32:3925] COMMIT # Completed on Sun Jan 9 15:35:46 2022 #IPv6 Mangle chain # Generated by ip6tables-save v1.8.7 on Sun Jan 9 15:35:46 2022 *mangle :PREROUTING ACCEPT [137:17569] :INPUT ACCEPT [75:10330] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [82:12345] :POSTROUTING ACCEPT [84:12449] -A FORWARD -o eth1 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu -A FORWARD -i eth1 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu COMMIT # Completed on Sun Jan 9 15:35:46 2022 #===================== IPSET状态 =====================# Name: china_ip_route Name: localnetwork Name: china Name: music #===================== 路由表状态 =====================# #route -n Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 192.168.1.1 0.0.0.0 UG 0 0 0 br-lan 192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 br-lan #ip route list default via 192.168.1.1 dev br-lan proto static 192.168.1.0/24 dev br-lan proto kernel scope link src 192.168.1.2 #ip rule show 0: from all lookup local 32765: from all fwmark 0x162 lookup 354 32766: from all lookup main 32767: from all lookup default #===================== 端口占用状态 =====================# tcp 0 0 :::7895 :::* LISTEN 28525/clash tcp 0 0 :::9090 :::* LISTEN 28525/clash tcp 0 0 :::7890 :::* LISTEN 28525/clash tcp 0 0 :::7891 :::* LISTEN 28525/clash tcp 0 0 :::7892 :::* LISTEN 28525/clash tcp 0 0 :::7893 :::* LISTEN 28525/clash udp 0 0 127.0.0.1:7874 0.0.0.0:* 28525/clash udp 0 0 :::7891 :::* 28525/clash udp 0 0 :::7892 :::* 28525/clash udp 0 0 :::7893 :::* 28525/clash udp 0 0 :::7895 :::* 28525/clash #===================== 测试本机DNS查询 =====================# Server: 127.0.0.1 Address: 127.0.0.1#53 www.baidu.com canonical name = www.a.shifen.com. Name: www.a.shifen.com Address: 183.232.231.172 Name: www.a.shifen.com Address: 183.232.231.174 #===================== resolv.conf.d =====================# # Interface lan nameserver 211.136.192.6 #===================== 测试本机网络连接 =====================# HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: private, no-cache, no-store, proxy-revalidate, no-transform Connection: keep-alive Content-Length: 277 Content-Type: text/html Date: Sun, 09 Jan 2022 07:35:46 GMT Etag: "575e1f6f-115" Last-Modified: Mon, 13 Jun 2016 02:50:23 GMT Pragma: no-cache Server: bfe/1.0.8.18 #===================== 测试本机网络下载 =====================# #===================== 最近运行日志 =====================# 2022-01-09 15:35:16 OpenClash Stoping... 2022-01-09 15:35:16 Step 1: Backup The Current Groups State... 2022-01-09 15:35:16 Step 2: Delete OpenClash Firewall Rules... 2022-01-09 15:35:16 Step 3: Close The OpenClash Daemons... 2022-01-09 15:35:16 Step 4: Close The Clash Core Process... 2022-01-09 15:35:16 Step 5: Restart Dnsmasq... 2022-01-09 15:35:16 Step 6: Delete OpenClash Residue File... 2022-01-09 15:35:16 OpenClash Start Running... 2022-01-09 15:35:16 Step 1: Get The Configuration... 2022-01-09 15:35:16 Step 2: Check The Components... 2022-01-09 15:35:16 Step 3: Modify The Config File... 2022-01-09 15:35:17 Warning: Because of The Different Porxy-Group's Name, Stop Setting The Other Rules! 2022-01-09 15:35:17 Step 4: Start Running The Clash Core... 2022-01-09 15:35:17 Tip: Detected The Exclusive Function of The TUN Core, Use TUN Core to Start... time="2022-01-09T07:35:17Z" level=info msg="DNS server listening at: 127.0.0.1:7874" 2022-01-09 15:35:17 Step 5: Check The Core Status... 2022-01-09 15:35:20 Step 6: Wait For The File Downloading... 2022-01-09 15:35:20 Step 7: Set Control Panel... 2022-01-09 15:35:20 Step 8: Set Firewall Rules... 2022-01-09 15:35:20 Step 9: Restart Dnsmasq... 2022-01-09 15:35:20 Step 10: Add Cron Rules, Start Daemons... 2022-01-09 15:35:20 OpenClash Start Successful! #===================== 活动连接信息 =====================#下面设备的DNS和网关要指向OC的机器IP，如果是指向其他机器，你要自己做好转发
网关也要指向OC？ 我目前是指向光猫，使用AC的DHCP下发至下面所有设备。
AristotleLai
commented
2 years ago 确认按照这个方向改完配置后，可以科学上网了。非常感谢。这个issue可以关闭了。
OPENCLASH正常运行，可以访问国内网站，但无法科学上网。调试日志如下，烦请各位前辈看看什么情况？
OpenClash 调试日志
生成时间: 2022-01-08 14:07:37 插件版本: v0.44.07-beta 隐私提示: 上传此日志前请注意检查、屏蔽公网IP、节点、密码等相关敏感信息