search

vernesong / OpenClash

A Clash Client For OpenWrt
MIT License
16.63k stars 3.07k forks source link

openclash能打开youtube网站，但视频一直转圈，打不开。。。 #1990

Closed wangyang8284 closed 2 years ago

wangyang8284 commented 2 years ago

大家帮忙看看怎么解决。。。感谢！

OpenClash 调试日志

生成时间: 2022-01-26 00:03:26 插件版本: v0.44.09-beta 隐私提示: 上传此日志前请注意检查、屏蔽公网IP、节点、密码等相关敏感信息


#===================== 系统信息 =====================#

主机型号: Intel(R) Core(TM) i3-7100U CPU @ 2.40GHz : 1 Core 2 Thread
固件版本: OpenWrt SNAPSHOT r0-3d92784
LuCI版本: git-21.238.35254-83494a9-1
内核版本: 5.4.143
处理器架构: x86_64

#此项有值时,如不使用IPv6,建议到网络-接口-lan的设置中禁用IPV6的DHCP
IPV6-DHCP: 

#此项结果应仅有配置文件的DNS监听地址
Dnsmasq转发设置: 127.0.0.1#5335 127.0.0.1#7053

#===================== 依赖检查 =====================#

dnsmasq-full: 已安装
coreutils: 已安装
coreutils-nohup: 已安装
bash: 已安装
curl: 已安装
ca-certificates: 已安装
ipset: 已安装
ip-full: 已安装
iptables-mod-tproxy: 已安装
kmod-ipt-tproxy: 已安装
iptables-mod-extra: 已安装
kmod-ipt-extra: 已安装
libcap: 已安装
libcap-bin: 已安装
ruby: 已安装
ruby-yaml: 已安装
ruby-psych: 已安装
ruby-pstore: 已安装
ruby-dbm: 已安装
kmod-tun(TUN模式): 已安装
luci-compat(Luci-19.07): 已安装

#===================== 内核检查 =====================#

运行状态: 运行中
进程pid: 23403
运行权限: 23403: cap_dac_override,cap_net_bind_service,cap_net_admin,cap_net_raw,cap_sys_resource=eip
运行用户: nobody
已选择的架构: 未选择架构

#下方无法显示内核版本号时请确认您的内核版本是否正确或者有无权限
Tun内核版本: 2022.01.03
Tun内核文件: 存在
Tun内核运行权限: 正常

Dev内核版本: v1.9.0-1-g8c6d0c6
Dev内核文件: 存在
Dev内核运行权限: 正常

#===================== 插件设置 =====================#

当前配置文件: /etc/openclash/config/Clash.yaml
启动配置文件: /etc/openclash/Clash.yaml
运行模式: fake-ip
默认代理模式: rule
UDP流量转发(tproxy): 停用
DNS劫持: 停用
自定义DNS: 启用
IPV6代理: 停用
IPV6-DNS解析: 停用
禁用Dnsmasq缓存: 停用
自定义规则: 停用
仅允许内网: 停用
仅代理命中规则流量: 停用
仅允许常用端口流量: 停用
绕过中国大陆IP: 停用
DNS远程解析: 启用

#启动异常时建议关闭此项后重试
混合节点: 停用
保留配置: 停用

#启动异常时建议关闭此项后重试
第三方规则: 启用

#===================== 配置文件 =====================#

port: 7890
socks-port: 7891
allow-lan: true
mode: rule
log-level: silent
external-controller: 0.0.0.0:9090

dns:
  nameserver:
  - 192.168.1.200
  - 127.0.0.1:5335
  - tcp://127.0.0.1:5335
  enable: true
  ipv6: false
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  listen: 127.0.0.1:7874
  fake-ip-filter:
  - "*.lan"
  - "*.localdomain"
  - "*.example"
  - "*.invalid"
  - "*.localhost"
  - "*.test"
  - "*.local"
  - "*.home.arpa"
  - time.*.com
  - time.*.gov
  - time.*.edu.cn
  - time.*.apple.com
  - time1.*.com
  - time2.*.com
  - time3.*.com
  - time4.*.com
  - time5.*.com
  - time6.*.com
  - time7.*.com
  - ntp.*.com
  - ntp1.*.com
  - ntp2.*.com
  - ntp3.*.com
  - ntp4.*.com
  - ntp5.*.com
  - ntp6.*.com
  - ntp7.*.com
  - "*.time.edu.cn"
  - "*.ntp.org.cn"
  - "+.pool.ntp.org"
  - time1.cloud.tencent.com
  - music.163.com
  - "*.music.163.com"
  - "*.126.net"
  - musicapi.taihe.com
  - music.taihe.com
  - songsearch.kugou.com
  - trackercdn.kugou.com
  - "*.kuwo.cn"
  - api-jooxtt.sanook.com
  - api.joox.com
  - joox.com
  - y.qq.com
  - "*.y.qq.com"
  - streamoc.music.tc.qq.com
  - mobileoc.music.tc.qq.com
  - isure.stream.qqmusic.qq.com
  - dl.stream.qqmusic.qq.com
  - aqqmusic.tc.qq.com
  - amobile.music.tc.qq.com
  - "*.xiami.com"
  - "*.music.migu.cn"
  - music.migu.cn
  - "+.msftconnecttest.com"
  - "+.msftncsi.com"
  - msftconnecttest.com
  - msftncsi.com
  - localhost.ptlogin2.qq.com
  - localhost.sec.qq.com
  - "+.srv.nintendo.net"
  - "+.stun.playstation.net"
  - xbox.*.microsoft.com
  - xnotify.xboxlive.com
  - "+.battlenet.com.cn"
  - "+.wotgame.cn"
  - "+.wggames.cn"
  - "+.wowsgame.cn"
  - "+.wargaming.net"
  - proxy.golang.org
  - stun.*.*
  - stun.*.*.*
  - "+.stun.*.*"
  - "+.stun.*.*.*"
  - "+.stun.*.*.*.*"
  - heartbeat.belkin.com
  - "*.linksys.com"
  - "*.linksyssmartwifi.com"
  - "*.router.asus.com"
  - mesu.apple.com
  - swscan.apple.com
  - swquery.apple.com
  - swdownload.apple.com
  - swcdn.apple.com
  - swdist.apple.com
  - lens.l.google.com
  - stun.l.google.com
  - "+.nflxvideo.net"
  - "*.square-enix.com"
  - "*.finalfantasyxiv.com"
  - "*.ffxiv.com"
  - "*.mcdn.bilivideo.cn"
  - "+.media.dssott.com"
  default-nameserver:
  - 192.168.1.200
  - 127.0.0.1:5335
redir-port: 7892
tproxy-port: 7895
mixed-port: 7893
bind-address: "*"
external-ui: "/usr/share/openclash/dashboard"
ipv6: false
profile:
  store-selected: true
  store-fake-ip: true
rule-providers:
  Reject:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Reject.yaml
    path: "./rule_provider/Reject"
    interval: 86400
  Special:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Special.yaml
    path: "./rule_provider/Special"
    interval: 86400
  Netflix:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/Netflix.yaml
    path: "./rule_provider/Netflix"
    interval: 86400
  Spotify:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/Spotify.yaml
    path: "./rule_provider/Spotify"
    interval: 86400
  YouTube:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/YouTube.yaml
    path: "./rule_provider/YouTube"
    interval: 86400
  Bilibili:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/Bilibili.yaml
    path: "./rule_provider/Bilibili"
    interval: 86400
  IQ:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/IQ.yaml
    path: "./rule_provider/IQI"
    interval: 86400
  IQIYI:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/IQIYI.yaml
    path: "./rule_provider/IQYI"
    interval: 86400
  Letv:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/Letv.yaml
    path: "./rule_provider/Letv"
    interval: 86400
  Netease Music:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/Netease%20Music.yaml
    path: "./rule_provider/Netease_Music"
    interval: 86400
  Tencent Video:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/Tencent%20Video.yaml
    path: "./rule_provider/Tencent_Video"
    interval: 86400
  Youku:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/Youku.yaml
    path: "./rule_provider/Youku"
    interval: 86400
  WeTV:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/WeTV.yaml
    path: "./rule_provider/WeTV"
    interval: 86400
  ABC:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/ABC.yaml
    path: "./rule_provider/ABC"
    interval: 86400
  Abema TV:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/Abema%20TV.yaml
    path: "./rule_provider/Abema_TV"
    interval: 86400
  Amazon:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/Amazon.yaml
    path: "./rule_provider/Amazon"
    interval: 86400
  Apple News:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/Apple%20News.yaml
    path: "./rule_provider/Apple_News"
    interval: 86400
  Apple TV:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/Apple%20TV.yaml
    path: "./rule_provider/Apple_TV"
    interval: 86400
  Bahamut:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/Bahamut.yaml
    path: "./rule_provider/Bahamut"
    interval: 86400
  BBC iPlayer:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/BBC%20iPlayer.yaml
    path: "./rule_provider/BBC_iPlayer"
    interval: 86400
  DAZN:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/DAZN.yaml
    path: "./rule_provider/DAZN"
    interval: 86400
  Discovery Plus:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/Discovery%20Plus.yaml
    path: "./rule_provider/Discovery_Plus"
    interval: 86400
  Disney Plus:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/Disney%20Plus.yaml
    path: "./rule_provider/Disney_Plus"
    interval: 86400
  encoreTVB:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/encoreTVB.yaml
    path: "./rule_provider/encoreTVB"
    interval: 86400
  Fox Now:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/Fox%20Now.yaml
    path: "./rule_provider/Fox_Now"
    interval: 86400
  Fox+:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/Fox%2B.yaml
    path: "./rule_provider/Fox+"
    interval: 86400
  HBO Go:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/HBO%20Go.yaml
    path: "./rule_provider/HBO_Go"
    interval: 86400
  HBO Max:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/HBO%20Max.yaml
    path: "./rule_provider/HBO_Max"
    interval: 86400
  Hulu Japan:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/Hulu%20Japan.yaml
    path: "./rule_provider/Hulu_Japan"
    interval: 86400
  Hulu:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/Hulu.yaml
    path: "./rule_provider/Hulu"
    interval: 86400
  Japonx:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/Japonx.yaml
    path: "./rule_provider/Japonx"
    interval: 86400
  JOOX:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/JOOX.yaml
    path: "./rule_provider/JOOX"
    interval: 86400
  KKBOX:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/KKBOX.yaml
    path: "./rule_provider/KKBOX"
    interval: 86400
  KKTV:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/KKTV.yaml
    path: "./rule_provider/KKTV"
    interval: 86400
  Line TV:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/Line%20TV.yaml
    path: "./rule_provider/Line_TV"
    interval: 86400
  myTV SUPER:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/myTV%20SUPER.yaml
    path: "./rule_provider/myTV_SUPER"
    interval: 86400
  Pandora:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/Pandora.yaml
    path: "./rule_provider/Pandora"
    interval: 86400
  PBS:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/PBS.yaml
    path: "./rule_provider/PBS"
    interval: 86400
  Pornhub:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/Pornhub.yaml
    path: "./rule_provider/Pornhub"
    interval: 86400
  Soundcloud:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/Soundcloud.yaml
    path: "./rule_provider/Soundcloud"
    interval: 86400
  ViuTV:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Media/ViuTV.yaml
    path: "./rule_provider/ViuTV"
    interval: 86400
  Telegram:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Telegram.yaml
    path: "./rule_provider/Telegram"
    interval: 86400
  Steam:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Steam.yaml
    path: "./rule_provider/Steam"
    interval: 86400
  Speedtest:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Speedtest.yaml
    path: "./rule_provider/Speedtest"
    interval: 86400
  PayPal:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/PayPal.yaml
    path: "./rule_provider/PayPal"
    interval: 86400
  Microsoft:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Microsoft.yaml
    path: "./rule_provider/Microsoft"
    interval: 86400
  PROXY:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Proxy.yaml
    path: "./rule_provider/Proxy"
    interval: 86400
  Domestic:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Domestic.yaml
    path: "./rule_provider/Domestic"
    interval: 86400
  Apple:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Apple.yaml
    path: "./rule_provider/Apple"
    interval: 86400
  Google FCM:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Google%20FCM.yaml
    path: "./rule_provider/Google FCM"
    interval: 86400
  Scholar:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Scholar.yaml
    path: "./rule_provider/Scholar"
    interval: 86400
  Domestic IPs:
    type: http
    behavior: ipcidr
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/Domestic%20IPs.yaml
    path: "./rule_provider/Domestic_IPs"
    interval: 86400
  LAN:
    type: http
    behavior: classical
    url: https://raw.lhie1.com/lhie1/Rules/master/Clash/Provider/LAN.yaml
    path: "./rule_provider/LAN"
    interval: 86400
script:
  code: "def main(ctx, metadata):\n    ruleset_action = {\"Reject\": \"\U0001F530
    节点选择\",\n        \"Special\": \"DIRECT\",\n        \"Netflix\": \"\U0001F530 节点选择\",\n
    \       \"Spotify\": \"\U0001F530 节点选择\",\n        \"YouTube\": \"\U0001F530 节点选择\",\n
    \       \"Disney Plus\": \"\U0001F530 节点选择\",\n        \"Bilibili\": \"\U0001F530
    节点选择\",\n        \"IQ\": \"\U0001F530 节点选择\",\n        \"IQIYI\": \"\U0001F530
    节点选择\",\n        \"Letv\": \"\U0001F530 节点选择\",\n        \"Netease Music\": \"\U0001F530
    节点选择\",\n        \"Tencent Video\": \"\U0001F530 节点选择\",\n        \"Youku\": \"\U0001F530
    节点选择\",\n        \"WeTV\": \"\U0001F530 节点选择\",\n        \"ABC\": \"\U0001F530
    节点选择\",\n        \"Abema TV\": \"\U0001F530 节点选择\",\n        \"Amazon\": \"\U0001F530
    节点选择\",\n        \"Apple News\": \"\U0001F530 节点选择\",\n        \"Apple TV\": \"\U0001F530
    节点选择\",\n        \"Bahamut\": \"\U0001F530 节点选择\",\n        \"BBC iPlayer\": \"\U0001F530
    节点选择\",\n        \"DAZN\": \"\U0001F530 节点选择\",\n        \"Discovery Plus\": \"\U0001F530
    节点选择\",\n        \"encoreTVB\": \"\U0001F530 节点选择\",\n        \"Fox Now\": \"\U0001F530
    节点选择\",\n        \"Fox+\": \"\U0001F530 节点选择\",\n        \"HBO Go\": \"\U0001F530
    节点选择\",\n        \"HBO Max\": \"\U0001F530 节点选择\",\n        \"Hulu Japan\": \"\U0001F530
    节点选择\",\n        \"Hulu\": \"\U0001F530 节点选择\",\n        \"Japonx\": \"\U0001F530
    节点选择\",\n        \"JOOX\": \"\U0001F530 节点选择\",\n        \"KKBOX\": \"\U0001F530
    节点选择\",\n        \"KKTV\": \"\U0001F530 节点选择\",\n        \"Line TV\": \"\U0001F530
    节点选择\",\n        \"myTV SUPER\": \"\U0001F530 节点选择\",\n        \"Pandora\": \"\U0001F530
    节点选择\",\n        \"PBS\": \"\U0001F530 节点选择\",\n        \"Pornhub\": \"\U0001F530
    节点选择\",\n        \"Soundcloud\": \"\U0001F530 节点选择\",\n        \"ViuTV\": \"\U0001F530
    节点选择\",\n        \"Telegram\": \"\U0001F530 节点选择\",\n        \"Steam\": \"\U0001F530
    节点选择\",\n        \"Speedtest\": \"\U0001F530 节点选择\",\n        \"PayPal\": \"\U0001F530
    节点选择\",\n        \"Microsoft\": \"\U0001F530 节点选择\",\n        \"Apple\": \"\U0001F530
    节点选择\",\n        \"Google FCM\": \"\U0001F530 节点选择\",\n        \"Scholar\": \"\U0001F530
    节点选择\",\n        \"PROXY\": \"\U0001F530 节点选择\",\n        \"Domestic\": \"\U0001F530
    节点选择\",\n        \"Domestic IPs\": \"\U0001F530 节点选择\",\n        \"LAN\": \"DIRECT\"\n
    \     }\n\n    port = int(metadata[\"dst_port\"])\n\n    if metadata[\"network\"]
    == \"UDP\":\n        if port == 443:\n            ctx.log('[Script] matched QUIC
    traffic use reject')\n            return \"REJECT\"\n\n    port_list = [21, 22,
    23, 53, 80, 123, 143, 194, 443, 465, 587, 853, 993, 995, 998, 2052, 2053, 2082,
    2083, 2086, 2095, 2096, 5222, 5228, 5229, 5230, 8080, 8443, 8880, 8888, 8889]\n
    \   if port not in port_list:\n        ctx.log('[Script] not common port use direct')\n
    \       return \"DIRECT\"\n\n    if metadata[\"dst_ip\"] == \"\":\n        metadata[\"dst_ip\"]
    = ctx.resolve_ip(metadata[\"host\"])\n\n    for ruleset in ruleset_action:\n        if
    ctx.rule_providers[ruleset].match(metadata):\n            return ruleset_action[ruleset]\n\n
    \   if metadata[\"dst_ip\"] == \"\":\n        return \"DIRECT\"\n\n    code =
    ctx.geoip(metadata[\"dst_ip\"])\n    if code == \"CN\":\n        ctx.log('[Script]
    Geoip CN')\n        return \"\U0001F530 节点选择\"\n\n    ctx.log('[Script] FINAL')\n
    \   return \"\U0001F530 节点选择\"\n"
rules:
- IP-CIDR,198.18.0.1/16,REJECT,no-resolve
- "RULE-SET,Reject,\U0001F530 节点选择"
- RULE-SET,Special,DIRECT
- "RULE-SET,Netflix,\U0001F530 节点选择"
- "RULE-SET,Spotify,\U0001F530 节点选择"
- "RULE-SET,YouTube,\U0001F530 节点选择"
- "RULE-SET,Disney Plus,\U0001F530 节点选择"
- "RULE-SET,Bilibili,\U0001F530 节点选择"
- "RULE-SET,IQ,\U0001F530 节点选择"
- "RULE-SET,IQIYI,\U0001F530 节点选择"
- "RULE-SET,Letv,\U0001F530 节点选择"
- "RULE-SET,Netease Music,\U0001F530 节点选择"
- "RULE-SET,Tencent Video,\U0001F530 节点选择"
- "RULE-SET,Youku,\U0001F530 节点选择"
- "RULE-SET,WeTV,\U0001F530 节点选择"
- "RULE-SET,ABC,\U0001F530 节点选择"
- "RULE-SET,Abema TV,\U0001F530 节点选择"
- "RULE-SET,Amazon,\U0001F530 节点选择"
- "RULE-SET,Apple News,\U0001F530 节点选择"
- "RULE-SET,Apple TV,\U0001F530 节点选择"
- "RULE-SET,Bahamut,\U0001F530 节点选择"
- "RULE-SET,BBC iPlayer,\U0001F530 节点选择"
- "RULE-SET,DAZN,\U0001F530 节点选择"
- "RULE-SET,Discovery Plus,\U0001F530 节点选择"
- "RULE-SET,encoreTVB,\U0001F530 节点选择"
- "RULE-SET,Fox Now,\U0001F530 节点选择"
- "RULE-SET,Fox+,\U0001F530 节点选择"
- "RULE-SET,HBO Go,\U0001F530 节点选择"
- "RULE-SET,HBO Max,\U0001F530 节点选择"
- "RULE-SET,Hulu Japan,\U0001F530 节点选择"
- "RULE-SET,Hulu,\U0001F530 节点选择"
- "RULE-SET,Japonx,\U0001F530 节点选择"
- "RULE-SET,JOOX,\U0001F530 节点选择"
- "RULE-SET,KKBOX,\U0001F530 节点选择"
- "RULE-SET,KKTV,\U0001F530 节点选择"
- "RULE-SET,Line TV,\U0001F530 节点选择"
- "RULE-SET,myTV SUPER,\U0001F530 节点选择"
- "RULE-SET,Pandora,\U0001F530 节点选择"
- "RULE-SET,PBS,\U0001F530 节点选择"
- "RULE-SET,Pornhub,\U0001F530 节点选择"
- "RULE-SET,Soundcloud,\U0001F530 节点选择"
- "RULE-SET,ViuTV,\U0001F530 节点选择"
- "RULE-SET,Telegram,\U0001F530 节点选择"
- "RULE-SET,Steam,\U0001F530 节点选择"
- "RULE-SET,Speedtest,\U0001F530 节点选择"
- "RULE-SET,PayPal,\U0001F530 节点选择"
- "RULE-SET,Microsoft,\U0001F530 节点选择"
- "RULE-SET,Apple,\U0001F530 节点选择"
- "RULE-SET,Google FCM,\U0001F530 节点选择"
- "RULE-SET,Scholar,\U0001F530 节点选择"
- "RULE-SET,PROXY,\U0001F530 节点选择"
- "RULE-SET,Domestic,\U0001F530 节点选择"
- "RULE-SET,Domestic IPs,\U0001F530 节点选择"
- RULE-SET,LAN,DIRECT
- "GEOIP,CN,\U0001F530 节点选择"
- "MATCH,\U0001F530 节点选择"
interface-name: eth0

#===================== 防火墙设置 =====================#

#IPv4 NAT chain

# Generated by iptables-save v1.8.7 on Wed Jan 26 00:03:27 2022
*nat
:PREROUTING ACCEPT [7862:6959186]
:INPUT ACCEPT [2694:171018]
:OUTPUT ACCEPT [9862:695425]
:POSTROUTING ACCEPT [16858:7140371]
:ADBYBY - [0:0]
:MINIUPNPD - [0:0]
:MINIUPNPD-POSTROUTING - [0:0]
:openclash - [0:0]
:openclash_output - [0:0]
:postrouting_lan_rule - [0:0]
:postrouting_rule - [0:0]
:postrouting_wan_rule - [0:0]
:prerouting_lan_rule - [0:0]
:prerouting_rule - [0:0]
:prerouting_wan_rule - [0:0]
:zone_lan_postrouting - [0:0]
:zone_lan_prerouting - [0:0]
:zone_wan_postrouting - [0:0]
:zone_wan_prerouting - [0:0]
-A PREROUTING -d 8.8.4.4/32 -p tcp -m comment --comment "OpenClash Google DNS Hijack" -m tcp --dport 53 -j REDIRECT --to-ports 7892
-A PREROUTING -d 8.8.8.8/32 -p tcp -m comment --comment "OpenClash Google DNS Hijack" -m tcp --dport 53 -j REDIRECT --to-ports 7892
-A PREROUTING -p tcp -m tcp --dport 80 -j ADBYBY
-A PREROUTING -m comment --comment "!fw3: Custom prerouting rule chain" -j prerouting_rule
-A PREROUTING -i eth0 -m comment --comment "!fw3" -j zone_lan_prerouting
-A PREROUTING -p udp -m udp --dport 53 -j REDIRECT --to-ports 53
-A PREROUTING -p tcp -m tcp --dport 53 -j REDIRECT --to-ports 53
-A PREROUTING -d 192.168.1.1/32 -p tcp -m tcp --dport 53 -j REDIRECT --to-ports 7053
-A PREROUTING -d 192.168.1.1/32 -p udp -m udp --dport 53 -j REDIRECT --to-ports 7053
-A PREROUTING -p tcp -j openclash
-A OUTPUT -j openclash_output
-A POSTROUTING -m comment --comment "!fw3: Custom postrouting rule chain" -j postrouting_rule
-A POSTROUTING -o eth0 -m comment --comment "!fw3" -j zone_lan_postrouting
-A ADBYBY -d 0.0.0.0/8 -j RETURN
-A ADBYBY -d 10.0.0.0/8 -j RETURN
-A ADBYBY -d 127.0.0.0/8 -j RETURN
-A ADBYBY -d 169.254.0.0/16 -j RETURN
-A ADBYBY -d 172.16.0.0/12 -j RETURN
-A ADBYBY -d 192.168.0.0/16 -j RETURN
-A ADBYBY -d 224.0.0.0/4 -j RETURN
-A ADBYBY -d 240.0.0.0/4 -j RETURN
-A ADBYBY -m set --match-set adbyby_esc dst -j RETURN
-A ADBYBY -m set ! --match-set adbyby_wan dst -j RETURN
-A ADBYBY -p tcp -j REDIRECT --to-ports 8118
-A MINIUPNPD -p tcp -m tcp --dport 43825 -j DNAT --to-destination 192.168.1.1:13480
-A MINIUPNPD -p udp -m udp --dport 43192 -j DNAT --to-destination 192.168.1.1:13480
-A MINIUPNPD-POSTROUTING -s 192.168.1.1/32 -p tcp -m tcp --sport 13480 -j MASQUERADE --to-ports 43825
-A MINIUPNPD-POSTROUTING -s 192.168.1.1/32 -p udp -m udp --sport 13480 -j MASQUERADE --to-ports 43192
-A openclash -p tcp -m tcp --sport 1688 -j RETURN
-A openclash -m set --match-set localnetwork dst -j RETURN
-A openclash -p tcp -j REDIRECT --to-ports 7892
-A openclash_output -p tcp -m tcp --sport 1688 -j RETURN
-A openclash_output -m set --match-set localnetwork dst -j RETURN
-A zone_lan_postrouting -j MINIUPNPD-POSTROUTING
-A zone_lan_postrouting -m comment --comment "!fw3: Custom lan postrouting rule chain" -j postrouting_lan_rule
-A zone_lan_prerouting -j MINIUPNPD
-A zone_lan_prerouting -m comment --comment "!fw3: Custom lan prerouting rule chain" -j prerouting_lan_rule
-A zone_wan_postrouting -m comment --comment "!fw3: Custom wan postrouting rule chain" -j postrouting_wan_rule
-A zone_wan_postrouting -m comment --comment "!fw3" -j MASQUERADE
-A zone_wan_prerouting -m comment --comment "!fw3: Custom wan prerouting rule chain" -j prerouting_wan_rule
COMMIT
# Completed on Wed Jan 26 00:03:27 2022

#IPv4 Mangle chain

# Generated by iptables-save v1.8.7 on Wed Jan 26 00:03:27 2022
*mangle
:PREROUTING ACCEPT [422367:524502352]
:INPUT ACCEPT [387332:492974139]
:FORWARD ACCEPT [34387:31035075]
:OUTPUT ACCEPT [188395:502273538]
:POSTROUTING ACCEPT [222790:533310501]
:openclash - [0:0]
-A PREROUTING -p udp -j openclash
-A openclash -p udp -m udp --sport 4500 -j RETURN
-A openclash -p udp -m udp --sport 500 -j RETURN
-A openclash -p udp -m udp --sport 500 -j RETURN
-A openclash -p udp -m udp --sport 68 -j RETURN
-A openclash -d 198.18.0.0/16 -p udp -j TPROXY --on-port 7892 --on-ip 0.0.0.0 --tproxy-mark 0x162/0xffffffff
COMMIT
# Completed on Wed Jan 26 00:03:27 2022

#IPv6 NAT chain

#IPv6 Mangle chain

#===================== IPSET状态 =====================#

Name: adbyby_esc
Name: adbyby_wan
Name: blockip
Name: china_ip_route
Name: localnetwork

#===================== 路由表状态 =====================#

#route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.168.1.200   0.0.0.0         UG    0      0        0 eth0
192.168.1.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
#ip route list
default via 192.168.1.200 dev eth0 proto static 
192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.1 
#ip rule show
0:  from all lookup local
32765:  from all fwmark 0x162 lookup 354
32766:  from all lookup main
32767:  from all lookup default

#===================== 端口占用状态 =====================#

tcp        0      0 :::7890                 :::*                    LISTEN      23403/clash
tcp        0      0 :::7891                 :::*                    LISTEN      23403/clash
tcp        0      0 :::7892                 :::*                    LISTEN      23403/clash
tcp        0      0 :::7893                 :::*                    LISTEN      23403/clash
tcp        0      0 :::7895                 :::*                    LISTEN      23403/clash
tcp        0      0 :::9090                 :::*                    LISTEN      23403/clash
udp        0      0 127.0.0.1:7874          0.0.0.0:*                           23403/clash
udp        0      0 :::7891                 :::*                                23403/clash
udp        0      0 :::7892                 :::*                                23403/clash
udp        0      0 :::7893                 :::*                                23403/clash
udp        0      0 :::7895                 :::*                                23403/clash

#===================== 测试本机DNS查询 =====================#

Server:     127.0.0.1
Address:    127.0.0.1:53

Non-authoritative answer:
www.baidu.com   canonical name = www.wshifen.com
Name:   www.wshifen.com
Address: 103.235.46.39

Non-authoritative answer:
www.baidu.com   canonical name = www.wshifen.com

#===================== resolv.conf.d =====================#

# Interface lan
nameserver 192.168.1.1

#===================== 测试本机网络连接 =====================#

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: private, no-cache, no-store, proxy-revalidate, no-transform
Connection: keep-alive
Content-Length: 277
Content-Type: text/html
Date: Tue, 25 Jan 2022 16:03:28 GMT
Etag: "575e1f6f-115"
Last-Modified: Mon, 13 Jun 2016 02:50:23 GMT
Pragma: no-cache
Server: bfe/1.0.8.18

#===================== 测试本机网络下载 =====================#

HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 80
Cache-Control: max-age=300
Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox
Content-Type: text/plain; charset=utf-8
ETag: "d4e60d9a3856c12991dd63fedfa9268ee6b68ea052f1be85a56a3886d9c16009"
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-XSS-Protection: 1; mode=block
X-GitHub-Request-Id: C6CA:152B:23BE15:312DEB:61EF4673
Accept-Ranges: bytes
Date: Tue, 25 Jan 2022 16:03:28 GMT
Via: 1.1 varnish
X-Served-By: cache-hkg17933-HKG
X-Cache: HIT
X-Cache-Hits: 5
X-Timer: S1643126609.868499,VS0,VE0
Vary: Authorization,Accept-Encoding,Origin
Access-Control-Allow-Origin: *
X-Fastly-Request-ID: d77831dbdf380e7e9c56a4fbf8886bed26c29b97
Expires: Tue, 25 Jan 2022 16:08:28 GMT
Source-Age: 211

#===================== 最近运行日志 =====================#

time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider KKBOX"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Pandora"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Netease Music"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider HBO Go"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Amazon"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Telegram"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider PROXY"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider LAN"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider HBO Max"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Domestic IPs"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider encoreTVB"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Pornhub"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Reject"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Microsoft"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Fox+"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Line TV"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Discovery Plus"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Scholar"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider JOOX"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Steam"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Apple"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider IQIYI"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Fox Now"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Tencent Video"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Google FCM"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Netflix"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Apple News"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Bahamut"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Youku"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Spotify"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Speedtest"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Bilibili"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Domestic"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider IQ"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Apple TV"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Soundcloud"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Special"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Hulu"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Japonx"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider PayPal"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider BBC iPlayer"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Abema TV"
time="2022-01-25T15:25:08Z" level=info msg="Start initial rule provider Letv"
time="2022-01-25T15:25:08Z" level=info msg="DNS server listening at: 127.0.0.1:7874"
2022-01-25 23:25:11 Step 6: Wait For The File Downloading...
2022-01-25 23:25:11 Step 7: Set Control Panel...
2022-01-25 23:25:11 Step 8: Set Firewall Rules...
2022-01-25 23:25:11 Step 9: Restart Dnsmasq...
2022-01-25 23:25:12 Step 10: Add Cron Rules, Start Daemons...
2022-01-25 23:25:12 OpenClash Start Successful!
aguero119 commented 2 years ago

节点太戳

JefferyW1 commented 2 years ago

关闭ipv6试试， openwrt的dhcp里把 ipv6禁用。 我n1 旁路由，只要开了ipv6 ，就不行，关了就可以

wangyang8284 commented 2 years ago

感谢！我ipv6一直禁用的，还是不行的。

More500code commented 2 years ago

是DNS的问题，在默认设置下，本地DNS劫持、自定义上游DNS服务器、禁止Dnsmasq缓存DNS都打开就没问题的

wangyang8284 commented 2 years ago

是DNS的问题，在默认设置下，本地DNS劫持、自定义上游DNS服务器、禁止Dnsmasq缓存DNS都打开就没问题的

感谢，解决。

hongqixaidedan commented 2 years ago

是DNS的劫持在默认设置下，本地DNS持证自定义DNS服务器、禁止缓存、DNS都打开问题、问题的

什莫意思老哥，看不懂

github-actions[bot] commented 2 years ago

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 5 days

alanzhu2019 commented 2 years ago

所以大佬们问题解决了吗，我也是这种现象。