EYW-015 commented 1 year ago

Verify Steps

[x] Tracker 我已经在 Issue Tracker 中找过我要提出的问题
[X] Latest 我已经使用最新 Dev 版本测试过，问题依旧存在
[X] Core 这是 OpenClash 存在的问题，并非我所使用的 Clash 或 Meta 等内核的特定问题
[X] Meaningful 我提交的不是无意义的催促更新或修复请求

OpenClash Version

v0.45.121-beta

Bug on Environment

Lean

Bug on Platform

Linux-arm64

To Reproduce

仅特定网站，每天随机时段发生 bing完全不通过代理

Describe the Bug

发生问题的网站

大部分使用NexusPHP架构的PT站，如馒头但同架构的U2从未出错
微软bing

情况描述

红米AX6，lean源码，作为主路由拨号上网使用
由于一直未查到可以解决的Issue，且等一段时间能恢复，就一直没管
当前使用的5个站点中，除U2外的4个站点都会同时无法访问
- 问题从最初使用开始就一直存在，每天都会随机发生几次
- 显示错误已重置链接，持续时间2-10分钟不等，恢复也是同时
- 已重置链接时，clash yacd的连接页面中，没有这些站点的域名
- 在可访问状态下，clash yacd的连接页面中，会存在这些站点的连接状态
- 在不可访问状态下，使用电脑或路由器ping站点，能返回正确的IP地址
bing.com无法通过clash，会直连并被定向至中国版地址cn.bing.com
- 使用lhei1规则，内含规则bing bing.com www.bing.com等
- Microsoft组选择为代理，bing相关域名中，仅有services.bingapis.com通过了clash
- clash内核日志中未见其余bing相关域名

类似的Issue，但不一样

31 #425 #3078

尝试的操作

关闭openclash，依旧无法访问
- 重启路由器，正常访问
- 重启后不开openclash，持续两天未出现相同问题
关闭IPv6
- 原本ISP就未下发v6地址
更新Premium内核版本至2023.05.29
使用clash for windows连接PT或bing正常使用
- 在openclash无法正常连接时，开启cfw代理，立即可以使用，关闭cfw立即无法连接
使用手机clash for android正常使用
- 配置文件均一致
手动设置问题站点的DNS解析地址
修改openclash的Defualt-NameServer、Nameserver与Fallback服务器
添加Fallback-Filter与Nameserver-Policy、fake-ip-filter
开关禁止 Dnsmasq 缓存 DNS
开关禁用QUIC
切换兼容与混合模式
代理改为Global或DIRECT
切换openwrt内核版本5.15/5.10

个人结论

非DNS解析污染问题
- 手动设置Hosts地址，问题复现
- 设置Fallback等，问题复现
非clash内核问题
- 手动替换内核，问题复现
- 使用相同内核的clash for windows、clash for andorid，正常使用
非规则问题
- 多台设备使用相同规则，仅openclash复现
非路由器固件问题
- 自编译不同版本或内核的固件，并曾用不同源码编译，包括不限于lean、Boos4721
- 不开启openclash，连续两天使用均未复现问题

OpenClash Log

内核日志

访问`www.bing.com`时的日志手动过滤了所有来自NAS的连接，此为过滤后的剩余内容 ``` 2023-06-16 22:12:11 INF [TCP] connected lAddr=192.168.60.104:8986 rAddr=login.live.com:443 mode=rule rule=DomainSuffix(live.com) proxy=⌨️ 微软[SG中继] ruleGroup=Microsoft 2023-06-16 22:12:11 INF [TCP] connected lAddr=192.168.60.104:3176 rAddr=aadcdn.msauth.net:443 mode=rule rule=DomainSuffix(msauth.net) proxy=⌨️ 微软[SG中继] ruleGroup=Microsoft 2023-06-16 22:12:09 INF [TCP] connected lAddr=192.168.60.104:3172 rAddr=login.microsoftonline.com:443 mode=rule rule=DomainSuffix(microsoftonline.com) proxy=⌨️ 微软[SG中继] ruleGroup=Microsoft 2023-06-16 22:12:09 INF [TCP] connected lAddr=192.168.60.104:3170 rAddr=login.microsoftonline.com:443 mode=rule rule=DomainSuffix(microsoftonline.com) proxy=⌨️ 微软[SG中继] ruleGroup=Microsoft 2023-06-16 22:12:07 INF [TCP] connected lAddr=192.168.60.104:3162 rAddr=www.google.com:443 mode=rule rule=DomainKeyword(google) proxy=✈️ 代理[🇯🇵 日本 IEPL [04] [Lite]] ruleGroup=PROXY 2023-06-16 22:12:07 INF [TCP] connected lAddr=192.168.60.104:3163 rAddr=www.google.com:443 mode=rule rule=DomainKeyword(google) proxy=✈️ 代理[🇯🇵 日本 IEPL [04] [Lite]] ruleGroup=PROXY 2023-06-16 22:12:05 WRN [TCP] dial failed error=dial tcp4 192.168.31.211:7680: i/o timeout proxy=DIRECT lAddr=192.168.60.104:3159 rAddr=192.168.31.211:7680 rule=IPCIDR rulePayload=192.168.0.0/16 2023-06-16 22:12:03 WRN [TCP] dial failed error=dial tcp4 192.168.8.165:7680: i/o timeout proxy=DIRECT lAddr=192.168.60.104:3154 rAddr=192.168.8.165:7680 rule=IPCIDR rulePayload=192.168.0.0/16 2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.104:3150 rAddr=services.bingapis.com:443 mode=rule rule=DomainSuffix(bingapis.com) proxy=⌨️ 微软[SG中继] ruleGroup=Microsoft 2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.204:59502 rAddr=149.154.175.54:443 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]] 2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.204:59500 rAddr=149.154.175.54:443 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]] 2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.204:60532 rAddr=91.108.56.194:5222 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]] 2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.204:60530 rAddr=91.108.56.194:5222 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]] 2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.204:34448 rAddr=91.108.56.138:443 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]] 2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.204:34444 rAddr=91.108.56.138:443 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]] 2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.204:34446 rAddr=91.108.56.138:443 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]] 2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.204:36930 rAddr=149.154.165.111:443 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]] 2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.204:36928 rAddr=149.154.165.111:443 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]] 2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.204:34438 rAddr=91.108.56.138:443 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]] 2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.104:3132 rAddr=149.154.175.54:443 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]] 2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.104:3133 rAddr=149.154.175.52:80 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]] 2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.104:3131 rAddr=149.154.175.52:443 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]] 2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.104:3134 rAddr=149.154.175.54:80 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]] 2023-06-16 22:11:52 WRN [TCP] dial failed error=dial tcp4 192.168.31.211:7680: i/o timeout proxy=DIRECT lAddr=192.168.60.104:3120 rAddr=192.168.31.211:7680 rule=IPCIDR rulePayload=192.168.0.0/16 2023-06-16 22:11:52 WRN [TCP] dial failed error=dial tcp4 192.168.8.165:7680: i/o timeout proxy=DIRECT lAddr=192.168.60.104:3114 rAddr=192.168.8.165:7680 rule=IPCIDR rulePayload=192.168.0.0/16 2023-06-16 22:11:52 WRN [TCP] dial failed error=dial tcp4 8.222.194.7:27119: i/o timeout proxy=🇨🇳 回国 lAddr=192.168.60.10:50539 rAddr=8.222.194.7:27119 rule=RuleSet rulePayload=Domestic IPs 2023-06-16 22:11:52 WRN [TCP] dial failed error=dial tcp4 192.168.31.211:7680: i/o timeout proxy=DIRECT lAddr=192.168.60.104:3095 rAddr=192.168.31.211:7680 rule=IPCIDR rulePayload=192.168.0.0/16 2023-06-16 22:11:52 WRN [TCP] dial failed error=dial tcp4 192.168.8.165:7680: i/o timeout proxy=DIRECT lAddr=192.168.60.104:3092 rAddr=192.168.8.165:7680 rule=IPCIDR rulePayload=192.168.0.0/16 ... ```

调试日志

OpenClash 调试日志生成时间: 2023-06-16 22:19:16 插件版本: v0.45.121-beta 隐私提示: 上传此日志前请注意检查、屏蔽公网IP、节点、密码等相关敏感信息 ``` #===================== 系统信息 =====================# 主机型号: Redmi AX6 固件版本: OpenWrt SNAPSHOT r5894-61b7a5aa7 LuCI版本: git-23.104.57901-bf5e9ad-1 内核版本: 5.10.176 处理器架构: #此项有值时,如不使用IPv6,建议到网络-接口-lan的设置中禁用IPV6的DHCP IPV6-DHCP: DNS劫持: Dnsmasq 转发 #DNS劫持为Dnsmasq时，此项结果应仅有配置文件的DNS监听地址 Dnsmasq转发设置: 127.0.0.1#7874 #===================== 依赖检查 =====================# dnsmasq-full: 已安装 coreutils: 已安装 coreutils-nohup: 已安装 bash: 已安装 curl: 已安装 ca-certificates: 已安装 ipset: 已安装 ip-full: 已安装 libcap: 已安装 libcap-bin: 已安装 ruby: 已安装 ruby-yaml: 已安装 ruby-psych: 已安装 ruby-pstore: 已安装 kmod-tun(TUN模式): 已安装 luci-compat(Luci >= 19.07): 已安装 kmod-inet-diag(PROCESS-NAME): 已安装 unzip: 已安装 iptables-mod-tproxy: 已安装 kmod-ipt-tproxy: 已安装 iptables-mod-extra: 已安装 kmod-ipt-extra: 已安装 kmod-ipt-nat: 已安装 #===================== 内核检查 =====================# 运行状态: 运行中运行内核：TUN 进程pid: 31701 运行权限: 31701: cap_dac_override,cap_net_bind_service,cap_net_admin,cap_net_raw,cap_sys_ptrace,cap_sys_resource=eip 运行用户: nobody 已选择的架构: linux-arm64 #下方无法显示内核版本号时请确认您的内核版本是否正确或者有无权限 Tun内核版本: 2023.05.29 Tun内核文件: 存在 Tun内核运行权限: 正常 Dev内核版本: Dev内核文件: 不存在 Dev内核运行权限: 否 Meta内核版本: Meta内核文件: 不存在 Meta内核运行权限: 否 #===================== 插件设置 =====================# 当前配置文件: /etc/openclash/config/config.yaml 启动配置文件: /etc/openclash/config.yaml 运行模式: redir-host-mix 默认代理模式: rule UDP流量转发(tproxy): 启用自定义DNS: 停用 IPV6代理: 停用 IPV6-DNS解析: 停用禁用Dnsmasq缓存: 启用自定义规则: 停用仅允许内网: 启用仅代理命中规则流量: 停用仅允许常用端口流量: 停用绕过中国大陆IP: 启用路由本机代理: 启用 #启动异常时建议关闭此项后重试混合节点: 停用保留配置: 停用 #启动异常时建议关闭此项后重试第三方规则: 停用 #===================== 配置文件 =====================# port: 7890 socks-port: 7891 mixed-port: 7893 allow-lan: true mode: rule log-level: info external-controller: 0.0.0.0:9090 experimental: sniff-tls-sni: true my_setting: - 3600 - 86400 - 604800 - http://www.apple.com/generate_204 - http://wifi.vivo.com.cn/generate_204 dns: enable: true listen: 0.0.0.0:7874 enhanced-mode: fake-ip fake-ip-range: 198.18.0.1/16 default-nameserver: - 119.29.29.29 - 223.5.5.5 nameserver: - 210.5.56.145 - https://doh.pub/dns-query - https://dns.alidns.com/dns-query fallback: - https://dns.cloudflare.com/dns-query - https://public.dns.iij.jp/dns-query - tls://dot.pub - tls://dns.alidns.com nameserver-policy: "+.163.com": 119.29.29.29 "+.126.com": 119.29.29.29 "+.126.net": 119.29.29.29 "+.127.net": 119.29.29.29 "+.netease.com": 119.29.29.29 "+.taobao.com": 223.5.5.5 "+.tmall.com": 223.5.5.5 "+.alipay.com": 223.5.5.5 "+.alicdn.com": 223.5.5.5 "+.jd.com": 119.29.29.29 "+.qq.com": 119.29.29.29 "+.tencent.com": 119.29.29.29 "+.weixin.com": 119.29.29.29 "+.bilibili.com": 119.29.29.29 "+.hdslb.com": 119.29.29.29 fallback-filter: geoip: false geoip-code: CN ipcidr: - 0.0.0.0/8 - 10.0.0.0/8 - 100.64.0.0/10 - 127.0.0.0/8 - 169.254.0.0/16 - 172.16.0.0/12 - 192.0.0.0/24 - 192.0.2.0/24 - 192.88.99.0/24 - 192.168.0.0/16 - 198.18.0.0/15 - 198.51.100.0/24 - 203.0.113.0/24 - 224.0.0.0/4 - 240.0.0.0/4 - 255.255.255.255/32 fake-ip-filter: - "*.lan" - "*.localdomain" - "*.example" - "*.invalid" - "*.localhost" - "*.test" - "*.local" - "*.home.arpa" - time.*.com - time.*.gov - time.*.edu.cn - time.*.apple.com - time1.*.com - time2.*.com - time3.*.com - time4.*.com - time5.*.com - time6.*.com - time7.*.com - ntp.*.com - ntp1.*.com - ntp2.*.com - ntp3.*.com - ntp4.*.com - ntp5.*.com - ntp6.*.com - ntp7.*.com - "*.time.edu.cn" - "*.ntp.org.cn" - "+.pool.ntp.org" - time1.cloud.tencent.com - music.163.com - "*.music.163.com" - "*.126.net" - musicapi.taihe.com - music.taihe.com - songsearch.kugou.com - trackercdn.kugou.com - "*.kuwo.cn" - api-jooxtt.sanook.com - api.joox.com - joox.com - y.qq.com - "*.y.qq.com" - streamoc.music.tc.qq.com - mobileoc.music.tc.qq.com - isure.stream.qqmusic.qq.com - dl.stream.qqmusic.qq.com - aqqmusic.tc.qq.com - amobile.music.tc.qq.com - "*.xiami.com" - "*.music.migu.cn" - music.migu.cn - "*.msftconnecttest.com" - "*.msftncsi.com" - msftconnecttest.com - msftncsi.com - localhost.ptlogin2.qq.com - localhost.sec.qq.com - "+.srv.nintendo.net" - "+.stun.playstation.net" - xbox.*.microsoft.com - xnotify.xboxlive.com - "+.battlenet.com.cn" - "+.wotgame.cn" - "+.wggames.cn" - "+.wowsgame.cn" - "+.wargaming.net" - proxy.golang.org - stun.*.* - stun.*.*.* - "+.stun.*.*" - "+.stun.*.*.*" - "+.stun.*.*.*.*" - heartbeat.belkin.com - "*.linksys.com" - "*.linksyssmartwifi.com" - "*.router.asus.com" - mesu.apple.com - swscan.apple.com - swquery.apple.com - swdownload.apple.com - swcdn.apple.com - swdist.apple.com - lens.l.google.com - stun.l.google.com - "+.nflxvideo.net" - "*.square-enix.com" - "*.finalfantasyxiv.com" - "*.ffxiv.com" - "+.*" ipv6: false proxy-groups: - name: "✈️ 代理" type: select proxies: - "\U0001F4F6 Auto - UrlTest" - DIRECT - "\U0001F1EF\U0001F1F5 小盖" - "\U0001F1ED\U0001F1F0 香港Auto" - "\U0001F1F9\U0001F1FC 台湾Auto" - "\U0001F1EF\U0001F1F5 日本Auto" - "\U0001F1F8\U0001F1EC 新加坡Auto" - "\U0001F1FA\U0001F1F8 美国Auto" - "\U0001F6F0️ GIAAuto" use: - HK - TW - JP - SG - US - Other-nodes - name: "\U0001F6F0️ GIAAuto" type: select proxies: - DIRECT use: - GIA - name: "\U0001F1E8\U0001F1F3 回国" type: select proxies: - DIRECT - "✈️ 代理" - "⭐️ 个人内网" use: - HK - name: "⭐️ 个人内网" type: select proxies: - DIRECT - "\U0001F1E8\U0001F1F3 回国直连1" - "\U0001F1E8\U0001F1F3 回国直连2" - "\U0001F1E8\U0001F1F3 回国中继香港Ali" - "\U0001F1E8\U0001F1F3 回国中继香港Dmit" - name: "\U0001F4BE SMB" type: select proxies: - DIRECT - "⭐️ 个人内网" - "\U0001F1EF\U0001F1F5 小盖" - name: "\U0001F5A5️ Nas" type: select proxies: - DIRECT - "✈️ 代理" - name: "\U0001F1EF\U0001F1F5 小盖" type: select proxies: - DIRECT - SG中继 - SG233 - name: "\U0001F3F4‍☠️ 其他国家" type: select use: - Other-nodes - name: "\U0001F6A9 Others" type: select proxies: - "✈️ 代理" - DIRECT - name: "\U0001F3AE Steam" type: select proxies: - "✈️ 代理" - DIRECT - "\U0001F1ED\U0001F1F0 香港Auto" - "\U0001F1F9\U0001F1FC 台湾Auto" - "\U0001F1EF\U0001F1F5 日本Auto" - "\U0001F1F8\U0001F1EC 新加坡Auto" - "\U0001F1FA\U0001F1F8 美国Auto" - "\U0001F3F4‍☠️ 其他国家" - name: "⌨️ 微软" type: select proxies: - DIRECT - "✈️ 代理" - "\U0001F1EF\U0001F1F5 小盖" - "\U0001F1ED\U0001F1F0 香港Auto" - "\U0001F1F9\U0001F1FC 台湾Auto" - "\U0001F1EF\U0001F1F5 日本Auto" - "\U0001F1F8\U0001F1EC 新加坡Auto" - "\U0001F1FA\U0001F1F8 美国Auto" - "\U0001F3F4‍☠️ 其他国家" - name: "\U0001F4AC ChatGPT" type: select proxies: - "✈️ 代理" - DIRECT - "\U0001F1EF\U0001F1F5 小盖" - "\U0001F1ED\U0001F1F0 香港Auto" - "\U0001F1F9\U0001F1FC 台湾Auto" - "\U0001F1EF\U0001F1F5 日本Auto" - "\U0001F1F8\U0001F1EC 新加坡Auto" - "\U0001F1FA\U0001F1F8 美国Auto" - "\U0001F3F4‍☠️ 其他国家" - name: "\U0001F6AB AdBlock" type: select proxies: - REJECT - DIRECT - "✈️ 代理" - name: "\U0001F39E️ 国内流媒体" type: select proxies: - DIRECT - "✈️ 代理" - "⭐️ 个人内网" - "\U0001F1ED\U0001F1F0 香港Auto" - "\U0001F1F9\U0001F1FC 台湾Auto" - "\U0001F1EF\U0001F1F5 日本Auto" - name: "\U0001F3AC 国外流媒体" type: select proxies: - "✈️ 代理" - DIRECT - "\U0001F1ED\U0001F1F0 香港Auto" - "\U0001F1EF\U0001F1F5 日本Auto" - "\U0001F1F8\U0001F1EC 新加坡Auto" - "\U0001F1FA\U0001F1F8 美国Auto" - "\U0001F3F4‍☠️ 其他国家" - name: "\U0001F4FA YouTube" type: select proxies: - "✈️ 代理" - DIRECT - "\U0001F1ED\U0001F1F0 香港Auto" - "\U0001F1EF\U0001F1F5 日本Auto" - "\U0001F1F8\U0001F1EC 新加坡Auto" - "\U0001F1FA\U0001F1F8 美国Auto" - "\U0001F3F4‍☠️ 其他国家" - name: "\U0001F1ED\U0001F1F0 香港Auto" type: url-test use: - HK url: http://www.apple.com/generate_204 interval: 3600 - name: "\U0001F1F9\U0001F1FC 台湾Auto" type: url-test use: - TW url: http://www.apple.com/generate_204 interval: 3600 - name: "\U0001F1EF\U0001F1F5 日本Auto" type: url-test use: - JP url: http://www.apple.com/generate_204 interval: 3600 - name: "\U0001F1F8\U0001F1EC 新加坡Auto" type: url-test use: - SG url: http://www.apple.com/generate_204 interval: 3600 - name: "\U0001F1FA\U0001F1F8 美国Auto" type: url-test use: - US url: http://www.apple.com/generate_204 interval: 3600 - name: "\U0001F4F6 Auto - UrlTest" type: url-test use: - HK - JP - SG - US url: http://www.apple.com/generate_204 interval: 3600 rules: - DST-PORT,7895,REJECT - DST-PORT,7892,REJECT - IP-CIDR,198.18.0.1/16,REJECT,no-resolve - "RULE-SET,Reject,\U0001F6AB AdBlock" - RULE-SET,Special,DIRECT - "DST-PORT,445,\U0001F4BE SMB" - DST-PORT,26000,DIRECT - DOMAIN-SUFFIX,evepc.163.com,DIRECT - DOMAIN-SUFFIX,gdl.netease.com,DIRECT - DOMAIN-SUFFIX,reg.163.com,DIRECT - DOMAIN-SUFFIX,kookapp.cn,DIRECT - DOMAIN-SUFFIX,kaiheila.cn,DIRECT - DOMAIN-SUFFIX,vrchat.cloud,✈️ 代理 - DOMAIN-SUFFIX,amplitude.com,✈️ 代理 - IP-CIDR,91.199.81.0/24,✈️ 代理 - IP-CIDR,216.120.180.0/24,✈️ 代理 - PROCESS-NAME,zerotier-one,DIRECT - DOMAIN-SUFFIX,daemon-tools.cc,⭐️ 个人内网 - DOMAIN-SUFFIX,secure.disc-soft.com,⭐️ 个人内网 - DOMAIN-SUFFIX,maven.creeperhost.net,✈️ 代理 - DOMAIN-SUFFIX,fanart.tv,✈️ 代理 - DOMAIN-SUFFIX,cdn.kernel.org,✈️ 代理 - DOMAIN-SUFFIX,sourceware.org,✈️ 代理 - DOMAIN-SUFFIX,mirror.cyberbits.eu,✈️ 代理 - DOMAIN-SUFFIX,ruby-lang.org,✈️ 代理 - "RULE-SET,YouTube,\U0001F4FA YouTube" - "RULE-SET,Steam,\U0001F3AE Steam" - RULE-SET,Microsoft,⌨️ 微软 - "RULE-SET,ChatGPT,\U0001F4AC ChatGPT" - RULE-SET,PROXY,✈️ 代理 - "RULE-SET,Domestic,\U0001F1E8\U0001F1F3 回国" - "RULE-SET,Domestic IPs,\U0001F1E8\U0001F1F3 回国" - "SRC-IP-CIDR,192.168.60.10/32,\U0001F5A5️ Nas" - RULE-SET,LAN,DIRECT - "GEOIP,CN,\U0001F1E8\U0001F1F3 回国" - "MATCH,\U0001F6A9 Others" redir-port: 7892 tproxy-port: 7895 bind-address: "*" external-ui: "/usr/share/openclash/ui" ipv6: false tun: enable: true stack: system auto-route: false auto-detect-interface: false dns-hijack: - tcp://any:53 profile: store-selected: true authentication: - Clash:RvMpADiG #===================== 自定义覆写设置 =====================# #!/bin/sh . /usr/share/openclash/ruby.sh . /usr/share/openclash/log.sh . /lib/functions.sh # This script is called by /etc/init.d/openclash # Add your custom overwrite scripts here, they will be take effict after the OpenClash own srcipts LOG_OUT "Tip: Start Running Custom Overwrite Scripts..." LOGTIME=$(echo $(date "+%Y-%m-%d %H:%M:%S")) LOG_FILE="/tmp/openclash.log" CONFIG_FILE="$1" #config path #Simple Demo: #General Demo #1--config path #2--key name #3--value #ruby_edit "$CONFIG_FILE" "['redir-port']" "7892" #ruby_edit "$CONFIG_FILE" "['secret']" "123456" #ruby_edit "$CONFIG_FILE" "['dns']['enable']" "true" #Hash Demo #1--config path #2--key name #3--hash type value #ruby_edit "$CONFIG_FILE" "['experimental']" "{'sniff-tls-sni'=>true}" #ruby_edit "$CONFIG_FILE" "['sniffer']" "{'sniffing'=>['tls','http']}" #Array Demo: #1--config path #2--key name #3--position(start from 0, end with -1) #4--value #ruby_arr_insert "$CONFIG_FILE" "['dns']['nameserver']" "0" "114.114.114.114" #Array Add From Yaml File Demo: #1--config path #2--key name #3--position(start from 0, end with -1) #4--value file path #5--value key name in #4 file #ruby_arr_add_file "$CONFIG_FILE" "['dns']['fallback-filter']['ipcidr']" "0" "/etc/openclash/custom/openclash_custom_fallback_filter.yaml" "['fallback-filter']['ipcidr']" #Ruby Script Demo: #ruby -ryaml -rYAML -I "/usr/share/openclash" -E UTF-8 -e " # begin # Value = YAML.load_file('$CONFIG_FILE'); # rescue Exception => e # puts '${LOGTIME} Error: Load File Failed,【' + e.message + '】'; # end; #General # begin # Thread.new{ # Value['redir-port']=7892; # Value['tproxy-port']=7895; # Value['port']=7890; # Value['socks-port']=7891; # Value['mixed-port']=7893; # }.join; # rescue Exception => e # puts '${LOGTIME} Error: Set General Failed,【' + e.message + '】'; # ensure # File.open('$CONFIG_FILE','w') {|f| YAML.dump(Value, f)}; # end" 2>/dev/null >> $LOG_FILE exit 0 #===================== 自定义防火墙设置 =====================# #!/bin/sh . /usr/share/openclash/log.sh . /lib/functions.sh # This script is called by /etc/init.d/openclash # Add your custom firewall rules here, they will be added after the end of the OpenClash iptables rules LOG_OUT "Tip: Start Add Custom Firewall Rules..." exit 0 #===================== IPTABLES 防火墙设置 =====================# #IPv4 NAT chain # Generated by iptables-save v1.8.7 on Fri Jun 16 22:19:17 2023 *nat :PREROUTING ACCEPT [27116:1766637] :INPUT ACCEPT [33816:2032025] :OUTPUT ACCEPT [37803:2291413] :POSTROUTING ACCEPT [28291:1597963] :MINIUPNPD - [0:0] :MINIUPNPD-POSTROUTING - [0:0] :openclash - [0:0] :openclash_output - [0:0] :postrouting_iptv_rule - [0:0] :postrouting_lan_rule - [0:0] :postrouting_rule - [0:0] :postrouting_wan_rule - [0:0] :prerouting_iptv_rule - [0:0] :prerouting_lan_rule - [0:0] :prerouting_rule - [0:0] :prerouting_wan_rule - [0:0] :zone_iptv_postrouting - [0:0] :zone_iptv_prerouting - [0:0] :zone_lan_postrouting - [0:0] :zone_lan_prerouting - [0:0] :zone_wan_postrouting - [0:0] :zone_wan_prerouting - [0:0] -A PREROUTING -p tcp -m comment --comment "OpenClash TCP DNS Hijack" -m tcp --dport 53 -j ACCEPT -A PREROUTING -p tcp -m tcp --dport 53 -m comment --comment "OpenClash DNS Hijack" -j REDIRECT --to-ports 53 -A PREROUTING -p udp -m udp --dport 53 -m comment --comment "OpenClash DNS Hijack" -j REDIRECT --to-ports 53 -A PREROUTING -p udp -m udp --dport 53 -j REDIRECT --to-ports 53 -A PREROUTING -p tcp -m tcp --dport 53 -j REDIRECT --to-ports 53 -A PREROUTING -m comment --comment "!fw3: Custom prerouting rule chain" -j prerouting_rule -A PREROUTING -i br-lan -m comment --comment "!fw3" -j zone_lan_prerouting -A PREROUTING -i pppoe-wan -m comment --comment "!fw3" -j zone_wan_prerouting -A PREROUTING -p tcp -j openclash -A OUTPUT -j openclash_output -A POSTROUTING -m comment --comment "!fw3: Custom postrouting rule chain" -j postrouting_rule -A POSTROUTING -o br-lan -m comment --comment "!fw3" -j zone_lan_postrouting -A POSTROUTING -o pppoe-wan -m comment --comment "!fw3" -j zone_wan_postrouting -A openclash -p tcp -m tcp --sport 1688 -j RETURN -A openclash -m set --match-set localnetwork dst -j RETURN -A openclash -m set --match-set china_ip_route dst -m set ! --match-set china_ip_route_pass dst -j RETURN -A openclash -p tcp -j REDIRECT --to-ports 7892 -A openclash_output -p tcp -m tcp --sport 1688 -j RETURN -A openclash_output -m set --match-set localnetwork dst -j RETURN -A openclash_output -m owner ! --uid-owner 65534 -m set --match-set china_ip_route dst -m set ! --match-set china_ip_route_pass dst -j RETURN -A openclash_output -p tcp -m owner ! --uid-owner 65534 -j REDIRECT --to-ports 7892 -A zone_iptv_postrouting -m comment --comment "!fw3: Custom iptv postrouting rule chain" -j postrouting_iptv_rule -A zone_iptv_prerouting -m comment --comment "!fw3: Custom iptv prerouting rule chain" -j prerouting_iptv_rule -A zone_lan_postrouting -m comment --comment "!fw3: Custom lan postrouting rule chain" -j postrouting_lan_rule -A zone_lan_prerouting -m comment --comment "!fw3: Custom lan prerouting rule chain" -j prerouting_lan_rule -A zone_wan_postrouting -j MINIUPNPD-POSTROUTING -A zone_wan_postrouting -m comment --comment "!fw3: Custom wan postrouting rule chain" -j postrouting_wan_rule -A zone_wan_postrouting -m comment --comment "!fw3" -j MASQUERADE --mode fullcone -A zone_wan_prerouting -j MINIUPNPD -A zone_wan_prerouting -m comment --comment "!fw3: Custom wan prerouting rule chain" -j prerouting_wan_rule COMMIT # Completed on Fri Jun 16 22:19:18 2023 #IPv4 Mangle chain # Generated by iptables-save v1.8.7 on Fri Jun 16 22:19:18 2023 *mangle :PREROUTING ACCEPT [30652362:14108104877] :INPUT ACCEPT [989063:734380910] :FORWARD ACCEPT [29667683:13374421561] :OUTPUT ACCEPT [684738:675606992] :POSTROUTING ACCEPT [30350940:14049869619] :openclash - [0:0] :openclash_dns_hijack - [0:0] :openclash_upnp - [0:0] -A PREROUTING -p udp -j openclash -A PREROUTING -p tcp -m tcp --dport 53 -j openclash_dns_hijack -A FORWARD -o pppoe-wan -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu -A FORWARD -i pppoe-wan -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu -A openclash -p udp -m udp --sport 500 -j RETURN -A openclash -p udp -m udp --sport 68 -j RETURN -A openclash -i utun -j RETURN -A openclash -m set --match-set localnetwork dst -j RETURN -A openclash -m set --match-set china_ip_route dst -m set ! --match-set china_ip_route_pass dst -j RETURN -A openclash -p udp -j openclash_upnp -A openclash -j MARK --set-xmark 0x162/0xffffffff -A openclash_dns_hijack -p tcp -m comment --comment "OpenClash TCP DNS Hijack" -m tcp --dport 53 -j MARK --set-xmark 0x162/0xffffffff COMMIT # Completed on Fri Jun 16 22:19:18 2023 #IPv4 Filter chain # Generated by iptables-save v1.8.7 on Fri Jun 16 22:19:18 2023 *filter :INPUT ACCEPT [0:0] :FORWARD DROP [0:0] :OUTPUT ACCEPT [0:0] :MINIUPNPD - [0:0] :V2RAY-SERVER - [0:0] :forwarding_iptv_rule - [0:0] :forwarding_lan_rule - [0:0] :forwarding_rule - [0:0] :forwarding_wan_rule - [0:0] :input_iptv_rule - [0:0] :input_lan_rule - [0:0] :input_rule - [0:0] :input_wan_rule - [0:0] :openclash_wan_input - [0:0] :output_iptv_rule - [0:0] :output_lan_rule - [0:0] :output_rule - [0:0] :output_wan_rule - [0:0] :reject - [0:0] :syn_flood - [0:0] :zone_iptv_dest_ACCEPT - [0:0] :zone_iptv_dest_REJECT - [0:0] :zone_iptv_forward - [0:0] :zone_iptv_input - [0:0] :zone_iptv_output - [0:0] :zone_iptv_src_ACCEPT - [0:0] :zone_lan_dest_ACCEPT - [0:0] :zone_lan_forward - [0:0] :zone_lan_input - [0:0] :zone_lan_output - [0:0] :zone_lan_src_ACCEPT - [0:0] :zone_wan_dest_ACCEPT - [0:0] :zone_wan_dest_REJECT - [0:0] :zone_wan_forward - [0:0] :zone_wan_input - [0:0] :zone_wan_output - [0:0] :zone_wan_src_REJECT - [0:0] -A INPUT -i pppoe-wan -m set ! --match-set localnetwork src -j openclash_wan_input -A INPUT -j V2RAY-SERVER -A INPUT -i lo -m comment --comment "!fw3" -j ACCEPT -A INPUT -m comment --comment "!fw3: Custom input rule chain" -j input_rule -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment "!fw3" -j ACCEPT -A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m comment --comment "!fw3" -j syn_flood -A INPUT -i br-lan -m comment --comment "!fw3" -j zone_lan_input -A INPUT -i pppoe-wan -m comment --comment "!fw3" -j zone_wan_input -A FORWARD -o utun -p udp -m udp --dport 443 -m comment --comment "OpenClash QUIC REJECT" -m set ! --match-set china_ip_route dst -j REJECT --reject-with icmp-port-unreachable -A FORWARD -o utun -m comment --comment "OpenClash TUN Forward" -j ACCEPT -A FORWARD -m physdev --physdev-is-bridged -j ACCEPT -A FORWARD -m physdev --physdev-is-bridged -j ACCEPT -A FORWARD -m physdev --physdev-is-bridged -j ACCEPT -A FORWARD -m physdev --physdev-is-bridged -j ACCEPT -A FORWARD -m comment --comment "!fw3: Custom forwarding rule chain" -j forwarding_rule -A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment "!fw3" -j ACCEPT -A FORWARD -i br-lan -m comment --comment "!fw3" -j zone_lan_forward -A FORWARD -i pppoe-wan -m comment --comment "!fw3" -j zone_wan_forward -A FORWARD -m comment --comment "!fw3" -j reject -A FORWARD -m physdev --physdev-is-bridged -j ACCEPT -A OUTPUT -o lo -m comment --comment "!fw3" -j ACCEPT -A OUTPUT -m comment --comment "!fw3: Custom output rule chain" -j output_rule -A OUTPUT -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment "!fw3" -j ACCEPT -A OUTPUT -o br-lan -m comment --comment "!fw3" -j zone_lan_output -A OUTPUT -o pppoe-wan -m comment --comment "!fw3" -j zone_wan_output -A V2RAY-SERVER -p tcp -m tcp --dport 10251 -m comment --comment ss -j ACCEPT -A V2RAY-SERVER -p udp -m udp --dport 10251 -m comment --comment ss -j ACCEPT -A openclash_wan_input -p udp -m multiport --dports 7892,7895,9090,7890,7891,7893,7874 -j REJECT --reject-with icmp-port-unreachable -A openclash_wan_input -p tcp -m multiport --dports 7892,7895,9090,7890,7891,7893,7874 -j REJECT --reject-with icmp-port-unreachable -A reject -p tcp -m comment --comment "!fw3" -j REJECT --reject-with tcp-reset -A reject -m comment --comment "!fw3" -j REJECT --reject-with icmp-port-unreachable -A syn_flood -m limit --limit 25/sec --limit-burst 50 -m comment --comment "!fw3" -j RETURN -A syn_flood -m comment --comment "!fw3" -j DROP -A zone_iptv_forward -m comment --comment "!fw3: Custom iptv forwarding rule chain" -j forwarding_iptv_rule -A zone_iptv_forward -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port forwards" -j ACCEPT -A zone_iptv_forward -m comment --comment "!fw3" -j zone_iptv_dest_REJECT -A zone_iptv_input -m comment --comment "!fw3: Custom iptv input rule chain" -j input_iptv_rule -A zone_iptv_input -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port redirections" -j ACCEPT -A zone_iptv_input -m comment --comment "!fw3" -j zone_iptv_src_ACCEPT -A zone_iptv_output -m comment --comment "!fw3: Custom iptv output rule chain" -j output_iptv_rule -A zone_iptv_output -m comment --comment "!fw3" -j zone_iptv_dest_ACCEPT -A zone_lan_dest_ACCEPT -o br-lan -m comment --comment "!fw3" -j ACCEPT -A zone_lan_forward -m comment --comment "!fw3: Custom lan forwarding rule chain" -j forwarding_lan_rule -A zone_lan_forward -m comment --comment "!fw3: Zone lan to wan forwarding policy" -j zone_wan_dest_ACCEPT -A zone_lan_forward -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port forwards" -j ACCEPT -A zone_lan_forward -m comment --comment "!fw3" -j zone_lan_dest_ACCEPT -A zone_lan_input -m comment --comment "!fw3: Custom lan input rule chain" -j input_lan_rule -A zone_lan_input -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port redirections" -j ACCEPT -A zone_lan_input -m comment --comment "!fw3" -j zone_lan_src_ACCEPT -A zone_lan_output -m comment --comment "!fw3: Custom lan output rule chain" -j output_lan_rule -A zone_lan_output -m comment --comment "!fw3" -j zone_lan_dest_ACCEPT -A zone_lan_src_ACCEPT -i br-lan -m conntrack --ctstate NEW,UNTRACKED -m comment --comment "!fw3" -j ACCEPT -A zone_wan_dest_ACCEPT -o pppoe-wan -m conntrack --ctstate INVALID -m comment --comment "!fw3: Prevent NAT leakage" -j DROP -A zone_wan_dest_ACCEPT -o pppoe-wan -m comment --comment "!fw3" -j ACCEPT -A zone_wan_dest_REJECT -o pppoe-wan -m comment --comment "!fw3" -j reject -A zone_wan_forward -j MINIUPNPD -A zone_wan_forward -m comment --comment "!fw3: Custom wan forwarding rule chain" -j forwarding_wan_rule -A zone_wan_forward -p esp -m comment --comment "!fw3: Allow-IPSec-ESP" -j zone_lan_dest_ACCEPT -A zone_wan_forward -p udp -m udp --dport 500 -m comment --comment "!fw3: Allow-ISAKMP" -j zone_lan_dest_ACCEPT -A zone_wan_forward -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port forwards" -j ACCEPT -A zone_wan_forward -m comment --comment "!fw3" -j zone_wan_dest_REJECT -A zone_wan_input -m comment --comment "!fw3: Custom wan input rule chain" -j input_wan_rule -A zone_wan_input -p udp -m udp --dport 68 -m comment --comment "!fw3: Allow-DHCP-Renew" -j ACCEPT -A zone_wan_input -p icmp -m icmp --icmp-type 8 -m comment --comment "!fw3: Allow-Ping" -j ACCEPT -A zone_wan_input -p igmp -m comment --comment "!fw3: Allow-IGMP" -j ACCEPT -A zone_wan_input -p tcp -m tcp --dport 1688 -m comment --comment "!fw3: kms" -j ACCEPT -A zone_wan_input -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port redirections" -j ACCEPT -A zone_wan_input -m comment --comment "!fw3" -j zone_wan_src_REJECT -A zone_wan_output -m comment --comment "!fw3: Custom wan output rule chain" -j output_wan_rule -A zone_wan_output -m comment --comment "!fw3" -j zone_wan_dest_ACCEPT -A zone_wan_src_REJECT -i pppoe-wan -m comment --comment "!fw3" -j reject COMMIT # Completed on Fri Jun 16 22:19:18 2023 #IPv6 NAT chain #IPv6 Mangle chain #IPv6 Filter chain #===================== IPSET状态 =====================# Name: localnetwork Type: hash:net Revision: 6 Header: family inet hashsize 1024 maxelem 65536 Size in memory: 1096 References: 4 Number of entries: 10 Name: china_ip_route Type: hash:net Revision: 6 Header: family inet hashsize 4096 maxelem 1000000 Size in memory: 248400 References: 4 Number of entries: 8616 Name: china_ip_route_pass Type: hash:net Revision: 6 Header: family inet hashsize 1024 maxelem 1000000 Size in memory: 456 References: 3 Number of entries: 0 #===================== 路由表状态 =====================# #IPv4 #route -n Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 *WAN IP*.1 0.0.0.0 UG 10 0 0 pppoe-wan *WAN IP*.1 0.0.0.0 255.255.255.255 UH 0 0 0 pppoe-wan 192.168.60.0 0.0.0.0 255.255.255.0 U 20 0 0 br-lan 198.18.0.0 0.0.0.0 255.255.0.0 U 0 0 0 utun #ip route list default via *WAN IP*.1 dev pppoe-wan proto static metric 10 *WAN IP*.1 dev pppoe-wan proto kernel scope link src *WAN IP*.193 192.168.60.0/24 dev br-lan proto static scope link metric 20 198.18.0.0/16 dev utun proto kernel scope link src 198.18.0.1 #ip rule show 0: from all lookup local 32763: from all fwmark 0x162 lookup 354 32764: from all fwmark 0x162 lookup 354 32765: from all fwmark 0x162 lookup 354 32766: from all lookup main 32767: from all lookup default #IPv6 #route -A inet6 Kernel IPv6 routing table Destination Next Hop Flags Metric Ref Use Iface ::/0 :: !n -1 1 0 lo fe80::/64 :: U 256 1 0 br-lan fe80::/64 :: U 256 1 0 wlan0 fe80::/64 :: U 256 1 0 utun ::/0 :: !n -1 1 0 lo ::1/128 :: Un 0 6 0 lo fe80::/128 :: Un 0 4 0 br-lan fe80::/128 :: Un 0 3 0 wlan0 fe80::/128 :: Un 0 3 0 utun fe80::9e9d:7eff:fe55:e24/128 :: Un 0 4 0 br-lan fe80::9e9d:7eff:fe55:e25/128 :: Un 0 2 0 wlan0 fe80::e5c4:ab38:817e:8932/128 :: Un 0 2 0 utun ff00::/8 :: U 256 6 0 br-lan ff00::/8 :: U 256 1 0 wlan0 ff00::/8 :: U 256 1 0 utun ::/0 :: !n -1 1 0 lo #ip -6 route list fe80::/64 dev br-lan proto kernel metric 256 pref medium fe80::/64 dev wlan0 proto kernel metric 256 pref medium fe80::/64 dev utun proto kernel metric 256 pref medium #ip -6 rule show 0: from all lookup local 32765: from all fwmark 0x162 lookup 354 32766: from all lookup main 4200000001: from all iif lo failed_policy 4200000009: from all iif br-lan failed_policy 4200000029: from all iif pppoe-wan failed_policy #===================== Tun设备状态 =====================# utun: tun pi multi_queue filter #===================== 端口占用状态 =====================# tcp 0 0 198.18.0.1:7777 0.0.0.0:* LISTEN 31701/clash tcp 0 0 :::7890 :::* LISTEN 31701/clash tcp 0 0 :::7891 :::* LISTEN 31701/clash tcp 0 0 :::7892 :::* LISTEN 31701/clash tcp 0 0 :::7893 :::* LISTEN 31701/clash tcp 0 0 :::7895 :::* LISTEN 31701/clash tcp 0 0 :::9090 :::* LISTEN 31701/clash udp 0 0 :::7874 :::* 31701/clash udp 0 0 :::7891 :::* 31701/clash udp 0 0 :::7892 :::* 31701/clash udp 0 0 :::7893 :::* 31701/clash udp 0 0 :::7895 :::* 31701/clash #===================== 测试本机DNS查询(www.baidu.com) =====================# Server: 127.0.0.1 Address: 127.0.0.1:53 www.baidu.com canonical name = www.a.shifen.com www.a.shifen.com canonical name = www.wshifen.com Name: www.wshifen.com #===================== 测试内核DNS查询(www.instagram.com) =====================# Status: 0 TC: false RD: true RA: true AD: false CD: false Question: Name: www.instagram.com. Qtype: 1 Qclass: 1 Answer: TTL: 146 data: ******** name: www.instagram.com. type: 1 Additional: TTL: 0 data: ON:; EDNS: version 0; flags:; udp: 4096 name: . type: 41 Dnsmasq 当前默认 resolv 文件：/tmp/resolv.conf.d/resolv.conf.auto #===================== /tmp/resolv.conf.d/resolv.conf.auto =====================# # Interface lan nameserver 119.29.29.29 nameserver 8.8.8.8 #===================== 测试本机网络连接(www.baidu.com) =====================# HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: private, no-cache, no-store, proxy-revalidate, no-transform Connection: keep-alive Content-Length: 277 Content-Type: text/html Date: Fri, 16 Jun 2023 14:19:18 GMT Etag: "575e1f65-115" Last-Modified: Mon, 13 Jun 2016 02:50:13 GMT Pragma: no-cache Server: bfe/1.0.8.18 #===================== 测试本机网络下载(raw.githubusercontent.com) =====================# HTTP/2 200 cache-control: max-age=300 content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox content-type: text/plain; charset=utf-8 etag: "20367810d6b16552859ed1f051bfbd4e18233617a5eb4443364fd2b5d49bb469" strict-transport-security: max-age=31536000 x-content-type-options: nosniff x-frame-options: deny x-xss-protection: 1; mode=block x-github-request-id: 562A:717A:5D7E76:6C6A37:646D0382 accept-ranges: bytes date: Fri, 16 Jun 2023 14:19:19 GMT via: 1.1 varnish x-served-by: cache-nrt-rjtf7700047-NRT x-cache: HIT x-cache-hits: 1 x-timer: S1686925160.639208,VS0,VE1 vary: Authorization,Accept-Encoding,Origin access-control-allow-origin: * cross-origin-resource-policy: cross-origin x-fastly-request-id: 090b3daf096b49d27c9bd3ef229969bd0ff710a8 expires: Fri, 16 Jun 2023 14:24:19 GMT source-age: 53 content-length: 83 #===================== 最近运行日志(自动切换为Debug模式) =====================# 14:19:26 INF [TCP] connected lAddr=192.168.60.10:49061 rAddr=116.202.198.46:43560 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT] 14:19:26 INF [TCP] connected lAddr=192.168.60.10:47059 rAddr=176.9.114.184:7053 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT] 14:19:27 WRN [TCP] dial failed error=dial tcp4 192.168.31.211:7680: i/o timeout proxy=DIRECT lAddr=192.168.60.104:2967 rAddr=192.168.31.211:7680 rule=IPCIDR rulePayload=192.168.0.0/16 14:19:27 DBG [TCP] accept connection lAddr=192.168.60.10:51191 rAddr=107.189.11.95:55555 inbound=Redir 14:19:27 DBG [TCP] accept connection lAddr=192.168.60.10:57497 rAddr=195.154.187.122:55582 inbound=Redir 14:19:27 DBG [TCP] accept connection lAddr=192.168.60.10:59661 rAddr=185.198.26.40:46881 inbound=Redir 14:19:27 DBG [TCP] accept connection lAddr=192.168.60.10:48185 rAddr=183.178.197.34:37967 inbound=Redir 14:19:27 DBG [Matcher] find process failed error=process not found addr=195.154.187.122 14:19:27 DBG [TCP] accept connection lAddr=192.168.60.10:32797 rAddr=162.55.244.56:2468 inbound=Redir 14:19:27 DBG [Matcher] find process failed error=process not found addr=185.198.26.40 14:19:27 DBG [Matcher] find process failed error=process not found addr=107.189.11.95 14:19:27 DBG [TCP] accept connection lAddr=192.168.60.10:34761 rAddr=213.133.102.181:60131 inbound=Redir 14:19:27 DBG [TCP] accept connection lAddr=192.168.60.10:35261 rAddr=23.121.156.209:7777 inbound=Redir 14:19:27 DBG [Matcher] find process failed error=process not found addr=162.55.244.56 14:19:27 DBG [Matcher] find process failed error=process not found addr=183.178.197.34 14:19:27 DBG [TCP] accept connection lAddr=192.168.60.10:44351 rAddr=220.141.202.167:50567 inbound=Redir 14:19:27 DBG [TCP] accept connection lAddr=192.168.60.10:44451 rAddr=73.155.149.103:29570 inbound=Redir 14:19:27 DBG [Matcher] find process failed error=process not found addr=23.121.156.209 14:19:27 DBG [TCP] accept connection lAddr=192.168.60.10:40717 rAddr=81.171.17.155:38167 inbound=Redir 14:19:27 DBG [TCP] accept connection lAddr=192.168.60.10:45861 rAddr=141.144.245.66:40268 inbound=Redir 14:19:27 DBG [TCP] accept connection lAddr=192.168.60.10:34575 rAddr=89.58.28.39:58660 inbound=Redir 14:19:27 WRN [TCP] dial failed error=dial tcp4 23.121.156.209:7777: i/o timeout proxy=🖥️ Nas lAddr=192.168.60.10:33771 rAddr=23.121.156.209:7777 rule=SrcIPCIDR rulePayload=192.168.60.10/32 14:19:27 DBG [Matcher] find process failed error=process not found addr=213.133.102.181 14:19:27 DBG [Matcher] find process failed error=process not found addr=81.171.17.155 14:19:27 DBG [Matcher] find process failed error=process not found addr=220.141.202.167 14:19:27 DBG [TCP] accept connection lAddr=192.168.60.10:35097 rAddr=107.189.11.95:55555 inbound=Redir 14:19:27 DBG [Matcher] find process failed error=process not found addr=141.144.245.66 14:19:27 DBG [Matcher] find process failed error=process not found addr=73.155.149.103 14:19:27 DBG [Matcher] find process failed error=process not found addr=89.58.28.39 14:19:27 DBG [Matcher] find process failed error=process not found addr=107.189.11.95 14:19:27 WRN [TCP] dial failed error=dial tcp4 88.198.230.185:22810: i/o timeout proxy=🖥️ Nas lAddr=192.168.60.10:48191 rAddr=88.198.230.185:22810 rule=SrcIPCIDR rulePayload=192.168.60.10/32 14:19:27 INF [TCP] connected lAddr=192.168.60.10:48185 rAddr=183.178.197.34:37967 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT] 14:19:27 INF [TCP] connected lAddr=192.168.60.10:44351 rAddr=220.141.202.167:50567 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT] 14:19:27 INF [TCP] connected lAddr=192.168.60.10:59661 rAddr=185.198.26.40:46881 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT] 14:19:27 INF [TCP] connected lAddr=192.168.60.10:44117 rAddr=220.135.63.177:55065 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT] 14:19:27 INF [TCP] connected lAddr=192.168.60.10:57497 rAddr=195.154.187.122:55582 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT] 14:19:27 INF [TCP] connected lAddr=192.168.60.10:34575 rAddr=89.58.28.39:58660 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT] 14:19:27 INF [TCP] connected lAddr=192.168.60.10:40717 rAddr=81.171.17.155:38167 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT] 14:19:27 INF [TCP] connected lAddr=192.168.60.10:51191 rAddr=107.189.11.95:55555 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT] 14:19:27 INF [TCP] connected lAddr=192.168.60.10:40283 rAddr=107.189.11.95:55555 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT] 14:19:27 INF [TCP] connected lAddr=192.168.60.10:34761 rAddr=213.133.102.181:60131 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT] 14:19:27 INF [TCP] connected lAddr=192.168.60.10:32797 rAddr=162.55.244.56:2468 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT] 14:19:27 INF [TCP] connected lAddr=192.168.60.10:35097 rAddr=107.189.11.95:55555 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT] 14:19:28 DBG [TCP] accept connection lAddr=192.168.60.204:34628 rAddr=91.108.56.138:443 inbound=Redir 14:19:28 DBG [Matcher] find process failed error=process not found addr=91.108.56.138 14:19:28 INF [TCP] connected lAddr=192.168.60.204:34628 rAddr=91.108.56.138:443 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [02] [Lite]] 14:19:28 WRN [TCP] dial failed error=dial tcp4 23.121.156.209:7777: i/o timeout proxy=🖥️ Nas lAddr=192.168.60.10:58439 rAddr=23.121.156.209:7777 rule=SrcIPCIDR rulePayload=192.168.60.10/32 14:19:28 DBG [TCP] accept connection lAddr=192.168.60.10:34297 rAddr=83.69.106.79:48990 inbound=Redir 14:19:28 DBG [TCP] accept connection lAddr=192.168.60.10:48915 rAddr=23.121.156.209:7777 inbound=Redir 14:19:28 DBG [TCP] accept connection lAddr=192.168.60.10:34205 rAddr=162.55.244.56:2468 inbound=Redir 14:19:28 DBG [TCP] accept connection lAddr=192.168.60.10:44163 rAddr=111.252.181.121:44554 inbound=Redir 14:19:28 DBG [Matcher] find process failed error=process not found addr=23.121.156.209 14:19:28 DBG [TCP] accept connection lAddr=192.168.60.10:60327 rAddr=176.9.114.184:7053 inbound=Redir 14:19:28 DBG [TCP] accept connection lAddr=192.168.60.10:53485 rAddr=107.189.11.95:55555 inbound=Redir 14:19:28 DBG [TCP] accept connection lAddr=192.168.60.10:50941 rAddr=176.9.114.184:7053 inbound=Redir 14:19:28 DBG [TCP] accept connection lAddr=192.168.60.10:36859 rAddr=209.141.62.252:45000 inbound=Redir 14:19:28 DBG [TCP] accept connection lAddr=192.168.60.10:59891 rAddr=107.189.11.95:55555 inbound=Redir 14:19:28 DBG [TCP] accept connection lAddr=192.168.60.10:51905 rAddr=23.121.156.209:7777 inbound=Redir 14:19:28 DBG [Matcher] find process failed error=process not found addr=107.189.11.95 14:19:28 DBG [Matcher] find process failed error=process not found addr=162.55.244.56 14:19:28 DBG [Matcher] find process failed error=process not found addr=83.69.106.79 14:19:28 DBG [Matcher] find process failed error=process not found addr=209.141.62.252 14:19:28 DBG [Matcher] find process failed error=process not found addr=111.252.181.121 14:19:28 DBG [Matcher] find process failed error=process not found addr=176.9.114.184 14:19:28 DBG [Matcher] find process failed error=process not found addr=176.9.114.184 14:19:28 DBG [Matcher] find process failed error=process not found addr=23.121.156.209 14:19:28 DBG [Matcher] find process failed error=process not found addr=107.189.11.95 14:19:28 INF [TCP] connected lAddr=192.168.60.10:36859 rAddr=209.141.62.252:45000 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT] 14:19:28 INF [TCP] connected lAddr=192.168.60.10:44451 rAddr=73.155.149.103:29570 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT] 14:19:28 INF [TCP] connected lAddr=192.168.60.10:45861 rAddr=141.144.245.66:40268 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT] 14:19:28 INF [TCP] connected lAddr=192.168.60.10:53485 rAddr=107.189.11.95:55555 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT] 14:19:28 INF [TCP] connected lAddr=192.168.60.10:59891 rAddr=107.189.11.95:55555 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT] 14:19:28 INF [TCP] connected lAddr=192.168.60.10:34205 rAddr=162.55.244.56:2468 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT] 14:19:29 INF [TCP] connected lAddr=192.168.60.10:60327 rAddr=176.9.114.184:7053 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT] 14:19:29 INF [TCP] connected lAddr=192.168.60.10:50941 rAddr=176.9.114.184:7053 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT] 14:19:29 INF [TCP] connected lAddr=192.168.60.10:34297 rAddr=83.69.106.79:48990 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT] 14:19:29 DBG [TCP] accept connection lAddr=192.168.60.204:34630 rAddr=91.108.56.138:443 inbound=Redir 14:19:29 DBG [TCP] accept connection lAddr=192.168.60.204:34632 rAddr=91.108.56.138:443 inbound=Redir 14:19:29 DBG [Matcher] find process failed error=process not found addr=91.108.56.138 14:19:29 DBG [Matcher] find process failed error=process not found addr=91.108.56.138 14:19:29 INF [TCP] connected lAddr=192.168.60.204:34630 rAddr=91.108.56.138:443 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [02] [Lite]] 14:19:29 INF [TCP] connected lAddr=192.168.60.204:34632 rAddr=91.108.56.138:443 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [02] [Lite]] 14:19:29 DBG [TCP] accept connection lAddr=192.168.60.10:46115 rAddr=120.154.21.201:55209 inbound=Redir 14:19:29 DBG [TCP] accept connection lAddr=192.168.60.10:53923 rAddr=162.55.244.56:2468 inbound=Redir 14:19:29 DBG [TCP] accept connection lAddr=192.168.60.10:36927 rAddr=81.171.17.155:38167 inbound=Redir 14:19:29 DBG [TCP] accept connection lAddr=192.168.60.10:54701 rAddr=73.155.149.103:29570 inbound=Redir 14:19:29 DBG [TCP] accept connection lAddr=192.168.60.10:45503 rAddr=81.171.17.155:38167 inbound=Redir 14:19:29 DBG [Matcher] find process failed error=process not found addr=162.55.244.56 14:19:29 DBG [Matcher] find process failed error=process not found addr=120.154.21.201 14:19:29 DBG [Matcher] find process failed error=process not found addr=73.155.149.103 14:19:29 DBG [TCP] accept connection lAddr=192.168.60.10:45007 rAddr=42.188.6.98:1733 inbound=Redir 14:19:29 DBG [Matcher] find process failed error=process not found addr=81.171.17.155 14:19:29 DBG [Matcher] find process failed error=process not found addr=81.171.17.155 14:19:29 DBG [Matcher] find process failed error=process not found addr=42.188.6.98 14:19:29 WRN [TCP] dial failed error=dial tcp4 35.150.151.9:36922: i/o timeout proxy=🖥️ Nas lAddr=192.168.60.10:58817 rAddr=35.150.151.9:36922 rule=SrcIPCIDR rulePayload=192.168.60.10/32 14:19:29 WRN [TCP] dial failed error=dial tcp4 139.162.154.69:58660: i/o timeout proxy=🖥️ Nas lAddr=192.168.60.10:39451 rAddr=139.162.154.69:58660 rule=SrcIPCIDR rulePayload=192.168.60.10/32 14:19:29 INF [TCP] connected lAddr=192.168.60.10:54701 rAddr=73.155.149.103:29570 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT] 14:19:29 INF [TCP] connected lAddr=192.168.60.10:36927 rAddr=81.171.17.155:38167 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT] 14:19:29 INF [TCP] connected lAddr=192.168.60.10:45503 rAddr=81.171.17.155:38167 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT] 14:19:29 INF [TCP] connected lAddr=192.168.60.10:46115 rAddr=120.154.21.201:55209 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT] #===================== 最近运行日志获取完成(自动切换为silent模式) =====================# #===================== 活动连接信息 =====================# 1. SourceIP:【192.168.60.104】 - Host:【edge-mqtt.facebook.com】 - DestinationIP:【128.242.245.189】 - Network:【tcp】 - RulePayload:【facebook】 - Lastchain:【🇯🇵 日本 IEPL [02] [Lite]】 2. SourceIP:【192.168.60.10】 - Host:【azusa.wiki】 - DestinationIP:【172.64.99.15】 - Network:【tcp】 - RulePayload:【azusa.wiki】 - Lastchain:【DIRECT】 3. SourceIP:【192.168.60.204】 - Host:【Empty】 - DestinationIP:【91.108.56.194】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【🇯🇵 日本 IEPL [02] [Lite]】 4. SourceIP:【192.168.60.104】 - Host:【graph.oculus.com】 - DestinationIP:【157.240.211.54】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【🇯🇵 日本 IEPL [02] [Lite]】 5. SourceIP:【192.168.60.204】 - Host:【mtalk.google.com】 - DestinationIP:【74.125.203.188】 - Network:【tcp】 - RulePayload:【google】 - Lastchain:【🇯🇵 日本 IEPL [02] [Lite]】 6. SourceIP:【192.168.60.104】 - Host:【graph.oculus.com】 - DestinationIP:【157.240.211.54】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【🇯🇵 日本 IEPL [02] [Lite]】 7. SourceIP:【192.168.60.104】 - Host:【services.bingapis.com】 - DestinationIP:【13.107.5.80】 - Network:【tcp】 - RulePayload:【bingapis.com】 - Lastchain:【SG中继】 8. SourceIP:【192.168.60.104】 - Host:【edge-mqtt.facebook.com】 - DestinationIP:【128.242.245.189】 - Network:【tcp】 - RulePayload:【facebook】 - Lastchain:【🇯🇵 日本 IEPL [02] [Lite]】 9. SourceIP:【192.168.60.204】 - Host:【Empty】 - DestinationIP:【91.108.56.138】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【🇯🇵 日本 IEPL [02] [Lite]】 10. SourceIP:【192.168.60.204】 - Host:【Empty】 - DestinationIP:【91.108.56.138】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【🇯🇵 日本 IEPL [02] [Lite]】 11. SourceIP:【192.168.60.204】 - Host:【clients3.google.com】 - DestinationIP:【172.217.163.46】 - Network:【tcp】 - RulePayload:【google】 - Lastchain:【🇯🇵 日本 IEPL [02] [Lite]】 12. SourceIP:【192.168.60.10】 - Host:【Empty】 - DestinationIP:【107.189.11.95】 - Network:【tcp】 - RulePayload:【192.168.60.10/32】 - Lastchain:【DIRECT】 13. SourceIP:【192.168.60.104】 - Host:【graph.oculus.com】 - DestinationIP:【157.240.211.54】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【🇯🇵 日本 IEPL [02] [Lite]】 14. SourceIP:【192.168.60.10】 - Host:【Empty】 - DestinationIP:【178.170.48.9】 - Network:【tcp】 - RulePayload:【192.168.60.10/32】 - Lastchain:【DIRECT】 15. SourceIP:【192.168.60.10】 - Host:【pt.2xfree.org】 - DestinationIP:【104.21.27.109】 - Network:【tcp】 - RulePayload:【2xfree.org】 - Lastchain:【DIRECT】 16. SourceIP:【192.168.60.204】 - Host:【Empty】 - DestinationIP:【91.108.56.138】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【🇯🇵 日本 IEPL [02] [Lite]】 17. SourceIP:【192.168.60.10】 - Host:【Empty】 - DestinationIP:【209.141.62.252】 - Network:【tcp】 - RulePayload:【192.168.60.10/32】 - Lastchain:【DIRECT】 18. SourceIP:【192.168.60.10】 - Host:【Empty】 - DestinationIP:【183.178.197.34】 - Network:【tcp】 - RulePayload:【192.168.60.10/32】 - Lastchain:【DIRECT】 19. SourceIP:【192.168.60.204】 - Host:【Empty】 - DestinationIP:【91.108.56.138】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【🇯🇵 日本 IEPL [02] [Lite]】 20. SourceIP:【192.168.60.10】 - Host:【Empty】 - DestinationIP:【81.171.17.155】 - Network:【tcp】 - RulePayload:【192.168.60.10/32】 - Lastchain:【DIRECT】 21. SourceIP:【192.168.60.10】 - Host:【Empty】 - DestinationIP:【183.178.197.34】 - Network:【tcp】 - RulePayload:【192.168.60.10/32】 - Lastchain:【DIRECT】 22. SourceIP:【192.168.60.10】 - Host:【Empty】 - DestinationIP:【183.178.197.34】 - Network:【tcp】 - RulePayload:【192.168.60.10/32】 - Lastchain:【DIRECT】 ```

OpenClash Config

lean lede 5.10.176
Redmi_AX6 arm64
openclash 0.45.121
core clash_tun premium 2023.05.29
redir-host混合模式，网络栈类型System
路由本机代理，禁用QUIC，绕过大陆IP，仅允许内网，仅允许常用端口流量(停用)
使用Dnsmasq转发，禁止Dnsmasq缓存DNS
防火墙默认未改
未安装其他DNS插件

Expected Behavior

bing以及pt站点域名能正常通过clash，避免偶发断连

Screenshots

No response

taoletsgo commented 1 year ago

那pt站就别直连，或者启用ipv6，套cf的v6污染很少

EYW-015 commented 1 year ago

那pt站就别直连，或者启用ipv6，套cf的v6污染很少

不是分流的问题，是根本就没有经过内核，不过内核怎么走代理？另外已经手动设置了解析IP，同样会出现该状况，判断不是DNS污染问题另外我家没有v6，不是设备不支持，是ISP没有下发

ghost commented 1 year ago

我是bypass 最近遇到跟楼主一毛一样的问题 6月20号以后开始发生的这之前没任何事也是套了cloudflare CDN的网站其中5个固定间歇性连接被重置然后多刷新几次（运气好2、3次，运气不好10几次）就进去了进去后不会再重置然后关了网页几分钟不上又是上述同样问题连接被重置。。。已经无语了 openclash bypass passwall我全试了个遍无解也排除ISP 因为在其他网络环境下（同ISP无梯）手机4G都是1下正常打开不存在上面说的但是家里就是不行 edge chrome 都是一样的

shangji666 commented 1 year ago

我也遇到bing间歇性代理不上的问题

EYW-015 commented 1 year ago

我是bypass 最近遇到跟楼主一毛一样的问题 6月20号以后开始发生的这之前没任何事也是pt站十几个站其中5个固定间歇性连接被重置然后多刷新几次（运气好2、3次，运气不好10几次）就进去了进去后不会再重置然后关了网页几分钟不上又是上述同样问题连接被重置。。。已经无语了 openclash bypass passwall我全试了个遍无解也排除ISP 因为在单位（同ISP无梯）手机4G都是1下正常打开不存在上面说的但是家里就是不行 edge chrome 都是一样的

我的情况至少在一年以前就出现了，因为等一段时间就恢复，而且不是大范围网站影响，所以一直没开issue

Mashiro69 commented 1 year ago

我也是NewBing不走代理，Clash For Windows正常，微软的代理一直比较麻烦，微软商店和XBOX代理反而经常出现无法连接，而像OneDrive和sharepoint这种网站不需要代理的时候常常也在微软的规则里

2thcmoon commented 1 year ago

可能是绕过大陆ip的原因

tigerinus commented 1 year ago

可能是绕过大陆ip的原因

确实是这个原因。有没有办法把 Bing 和 LinkedIn 排除在大陆 IP 以外？

2thcmoon commented 1 year ago

可能是绕过大陆ip的原因

确实是这个原因。有没有办法把 Bing 和 LinkedIn 排除在大陆 IP 以外？

你可以尝试在插件设置-流量控制-绕过中国大陆 IPv4 黑名单中填写他们的域名，对于bing来说就是bing.com。如果不生效，尝试将bing.com 解析的ip填进去。

EYW-015 commented 1 year ago

可能是绕过大陆ip的原因

尝试用了一段时间，不绕过大陆IP也依旧出现PT站重置链接的问题，关闭clash无效，重启路由器恢复正常

refined-fish commented 1 year ago

可能是绕过大陆ip的原因

确实是这个原因。有没有办法把 Bing 和 LinkedIn 排除在大陆 IP 以外？

你可以尝试在插件设置-流量控制-绕过中国大陆 IPv4 黑名单中填写他们的域名，对于bing来说就是bing.com。如果不生效，尝试将bing.com 解析的ip填进去。

之前填入bing.com是生效的，最近突然又不行了，能使用edge侧边栏的bing，但死活进不去网页版的bing，填入解析的ip也是一样的，真的是试了好多办法都不行，又不能关闭绕过大陆

github-actions[bot] commented 11 months ago

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 5 days

vernesong / OpenClash

[Bug] 部分网站(PT,NewBing)流量间歇性不经过内核，已重置连接 #3345

Verify Steps

OpenClash Version

Bug on Environment

Bug on Platform

To Reproduce

Describe the Bug

发生问题的网站

情况描述

类似的Issue，但不一样

31 #425 #3078

尝试的操作

个人结论

OpenClash Log

内核日志

调试日志

OpenClash Config

Expected Behavior

Screenshots