search

vernesong / OpenClash

A Clash Client For OpenWrt
MIT License
16.4k stars 3.03k forks source link

openwrt作为旁路由，控制面板无法测速，手机网关DNS改为旁路由无法科学上网 #2303

Closed xiaoxiaohuangya closed 2 years ago

xiaoxiaohuangya commented 2 years ago

主机型号: Intel(R) Core(TM)2 Duo CPU T7700 @ 2.40GHz : 1 Core 1 Thread 固件版本: OpenWrt SNAPSHOT r1-83fb5d95b LuCI版本: git-21.088.17646-3fe6408-1 内核版本: 5.4.108 处理器架构: x86_64

此项在使用Tun模式时应为ACCEPT

防火墙转发: ACCEPT

此项有值时建议到网络-接口-lan的设置中禁用IPV6的DHCP

IPV6-DHCP:

此项结果应仅有配置文件的DNS监听地址

Dnsmasq转发设置: 127.0.0.1#7874

===================== 依赖检查 =====================

dnsmasq-full: 已安装 coreutils: 已安装 coreutils-nohup: 已安装 bash: 已安装 curl: 已安装 jsonfilter: 已安装 ca-certificates: 已安装 ipset: 已安装 ip-full: 已安装 iptables-mod-tproxy: 已安装 kmod-ipt-tproxy: 已安装 iptables-mod-extra: 已安装 kmod-ipt-extra: 已安装 libcap: 已安装 libcap-bin: 已安装 ruby: 已安装 ruby-yaml: 已安装 ruby-psych: 已安装 ruby-pstore: 已安装 ruby-dbm: 已安装 kmod-tun(TUN模式): 已安装 luci-compat(Luci-19.07): 已安装

===================== 内核检查 =====================

运行状态: 运行中 进程pid: 30874 运行权限: 30874: = cap_dac_override,cap_net_bind_service,cap_net_admin,cap_net_raw,cap_sys_resource+eip 运行用户: nobody 已选择的架构: linux-amd64

下方无法显示内核版本号时请确认您的内核版本是否正确或者有无权限

Tun内核版本: Tun内核文件: 不存在 Tun内核运行权限: 否

Game内核版本: Game内核文件: 不存在 Game内核运行权限: 否

Dev内核版本: v1.10.0-3-gdd9bdf4 Dev内核文件: 存在 Dev内核运行权限: 正常

===================== 插件设置 =====================

当前配置文件: /etc/openclash/config/樱花.yaml 启动配置文件: /etc/openclash/樱花.yaml 运行模式: redir-host 默认代理模式: rule UDP流量转发(tproxy): 停用 DNS劫持: 启用 自定义DNS: 停用 IPV6-DNS解析: 停用 禁用Dnsmasq缓存: 启用 自定义规则: 停用 仅允许内网: 停用 仅代理命中规则流量: 停用 仅允许常用端口流量: 停用 绕过中国大陆IP: 停用

启动异常时建议关闭此项后重试

混合节点: 停用 保留配置: 停用

启动异常时建议关闭此项后重试

第三方规则: 停用

===================== 配置文件 =====================

port: 7890 socks-port: 7891 redir-port: 7892 allow-lan: true mode: rule log-level: silent external-controller: 0.0.0.0:9090 dns: enable: true ipv6: false listen: 127.0.0.1:7874 enhanced-mode: redir-host nameserver:

===================== 防火墙设置 =====================

NAT chain

Generated by iptables-save v1.8.4 on Fri Apr 22 14:39:51 2022

*nat :PREROUTING ACCEPT [233:34253] :INPUT ACCEPT [348:25297] :OUTPUT ACCEPT [927:61762] :POSTROUTING ACCEPT [174:11969] :MINIUPNPD - [0:0] :MINIUPNPD-POSTROUTING - [0:0] :openclash - [0:0] :openclash_output - [0:0] :postrouting_lan_rule - [0:0] :postrouting_rule - [0:0] :prerouting_lan_rule - [0:0] :prerouting_rule - [0:0] :zone_lan_postrouting - [0:0] :zone_lan_prerouting - [0:0] -A PREROUTING -d 8.8.4.4/32 -p tcp -m tcp --dport 53 -j REDIRECT --to-ports 7892 -A PREROUTING -d 8.8.8.8/32 -p tcp -m tcp --dport 53 -j REDIRECT --to-ports 7892 -A PREROUTING -p udp -m udp --dport 53 -j REDIRECT --to-ports 53 -A PREROUTING -p tcp -m tcp --dport 53 -j REDIRECT --to-ports 53 -A PREROUTING -m comment --comment "!fw3: Custom prerouting rule chain" -j prerouting_rule -A PREROUTING -i eth0 -m comment --comment "!fw3" -j zone_lan_prerouting -A PREROUTING -p udp -m udp --dport 53 -m comment --comment dns_hijack -j REDIRECT --to-ports 53 -A PREROUTING -p tcp -m tcp --dport 53 -m comment --comment dns_hijack -j REDIRECT --to-ports 53 -A PREROUTING -p tcp -j openclash -A OUTPUT -j openclash_output -A POSTROUTING -o eth0 -j MASQUERADE -A POSTROUTING -m comment --comment "!fw3: Custom postrouting rule chain" -j postrouting_rule -A POSTROUTING -o eth0 -m comment --comment "!fw3" -j zone_lan_postrouting -A openclash -m set --match-set localnetwork dst -j RETURN -A openclash -p tcp -j REDIRECT --to-ports 7892 -A openclash_output -m set --match-set localnetwork dst -j RETURN -A openclash_output -p tcp -m owner ! --uid-owner 65534 -j REDIRECT --to-ports 7892 -A zone_lan_postrouting -j MINIUPNPD-POSTROUTING -A zone_lan_postrouting -m comment --comment "!fw3: Custom lan postrouting rule chain" -j postrouting_lan_rule -A zone_lan_prerouting -j MINIUPNPD -A zone_lan_prerouting -m comment --comment "!fw3: Custom lan prerouting rule chain" -j prerouting_lan_rule COMMIT

Completed on Fri Apr 22 14:39:51 2022

Mangle chain

Generated by iptables-save v1.8.4 on Fri Apr 22 14:39:51 2022

*mangle :PREROUTING ACCEPT [612718:716950928] :INPUT ACCEPT [552247:689689118] :FORWARD ACCEPT [36274:24011769] :OUTPUT ACCEPT [523269:591379710] :POSTROUTING ACCEPT [559675:615401228] COMMIT

Completed on Fri Apr 22 14:39:51 2022

===================== IPSET状态 =====================

Name: music Name: localnetwork

===================== 路由表状态 =====================

route -n

Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 192.168.2.1 0.0.0.0 UG 0 0 0 eth0 192.168.2.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0

ip route list

default via 192.168.2.1 dev eth0 proto static 192.168.2.0/24 dev eth0 proto kernel scope link src 192.168.2.66

ip rule show

0: from all lookup local 32766: from all lookup main 32767: from all lookup default

===================== 端口占用状态 =====================

tcp 0 0 :::7890 ::: LISTEN 30874/clash tcp 0 0 :::7891 ::: LISTEN 30874/clash tcp 0 0 :::7892 ::: LISTEN 30874/clash tcp 0 0 :::7893 ::: LISTEN 30874/clash tcp 0 0 :::9090 ::: LISTEN 30874/clash udp 0 0 127.0.0.1:7874 0.0.0.0: 30874/clash udp 0 0 :::7891 ::: 30874/clash udp 0 0 :::7892 ::: 30874/clash udp 0 0 :::7893 :::* 30874/clash

===================== 测试本机DNS查询 =====================

Server: 127.0.0.1 Address: 127.0.0.1#53

Name: www.baidu.com www.baidu.com canonical name = www.a.shifen.com Name: www.a.shifen.com Address 1: 180.97.34.94 Address 2: 180.97.34.96 *** Can't find www.baidu.com: No answer

===================== resolv.conf.d =====================

Interface lan

nameserver 192.168.2.1 nameserver 114.114.114.114

===================== 测试本机网络连接 =====================

HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: private, no-cache, no-store, proxy-revalidate, no-transform Connection: keep-alive Content-Length: 277 Content-Type: text/html Date: Fri, 22 Apr 2022 06:39:51 GMT Etag: "575e1f60-115" Last-Modified: Mon, 13 Jun 2016 02:50:08 GMT Pragma: no-cache Server: bfe/1.0.8.18

===================== 测试本机网络下载 =====================

===================== 最近运行日志 =====================

time="2022-04-22T06:32:57Z" level=info msg="Start initial compatible provider 🔰国外流量" time="2022-04-22T06:32:57Z" level=info msg="Start initial compatible provider 🎬国外媒体" time="2022-04-22T06:32:57Z" level=info msg="Start initial compatible provider ⚓️其他流量" time="2022-04-22T06:32:57Z" level=info msg="Start initial compatible provider 🚀直接连接" time="2022-04-22T06:32:57Z" level=info msg="Start initial compatible provider 🎬Youtube" time="2022-04-22T06:32:57Z" level=info msg="Start initial compatible provider 🍎苹果服务" time="2022-04-22T06:32:57Z" level=info msg="Start initial compatible provider 🎬哔哩哔哩" time="2022-04-22T06:32:57Z" level=info msg="Start initial compatible provider 🎬Netflix" time="2022-04-22T06:32:57Z" level=info msg="Start initial compatible provider ✈️Telegram" 2022-04-22 14:33:01 Groups History:【樱花.yaml】 Restore Successful 2022-04-22 14:32:44 OpenClash Start Successful

xiaoxiaohuangya commented 2 years ago

image

xiaoxiaohuangya commented 2 years ago

image

xiaoxiaohuangya commented 2 years ago

开passwall可以科学，已将passwall关闭

vernesong commented 2 years ago

升级

xiaoxiaohuangya commented 2 years ago

升级

好的 我试试

xiaoxiaohuangya commented 2 years ago

升级 升级哪个呢？

image

vernesong commented 2 years ago

全部，开旁路由兼容

github-actions[bot] commented 2 years ago

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 5 days