vernesong / OpenClash

A Clash Client For OpenWrt
MIT License
15.85k stars 2.95k forks source link

[Bug] douyin下载windows安装器。无法下载安装。 #3773

Closed xiaolongzhou123 closed 4 months ago

xiaolongzhou123 commented 4 months ago

Verify Steps

OpenClash Version

v0.46.001-beta

Bug on Environment

Official OpenWrt

OpenWrt Version

OpenWrt 23.05.2 r23630-842932a63d / LuCI openwrt-23.05 branch git-23.306.39416-c86c256

Bug on Platform

Linux-amd64(x86-64)

Describe the Bug

windows上下载拼音安装器 https://www.douyin.com/download/pc/obj/douyin-pc-client/7044145585217083655/releases/11509980/3.4.0/win32-ia32/douyin-downloader-v3.4.0-win32-ia32-douyinDownload1.exe

下载完成后。 它会下载慢慢下载安装,像xunlei或其它软件一样。目前经过openclash,就不行。安装不成功

image

To Reproduce

第一步下载:https://www.douyin.com/download/pc/obj/douyin-pc-client/7044145585217083655/releases/11509980/3.4.0/win32-ia32/douyin-downloader-v3.4.0-win32-ia32-douyinDownload1.exe 第二步下载:运行安装。就会失败

OpenClash Log

OpenClash 调试日志

生成时间: 2024-02-27 20:31:06
插件版本: v0.46.001-beta
隐私提示: 上传此日志前请注意检查、屏蔽公网IP、节点、密码等相关敏感信息

#===================== 系统信息 =====================#

主机型号: VMware, Inc. VMware Virtual Platform
固件版本: OpenWrt 23.05.2 r23630-842932a63d
LuCI版本: git-23.051.66410-a505bb1
内核版本: 5.15.137
处理器架构: x86_64

#此项有值时,如不使用IPv6,建议到网络-接口-lan的设置中禁用IPV6的DHCP
IPV6-DHCP: 

DNS劫持: 停用
#DNS劫持为Dnsmasq时,此项结果应仅有配置文件的DNS监听地址
Dnsmasq转发设置: 127.0.0.1#5335

#===================== 依赖检查 =====================#

dnsmasq-full: 已安装
coreutils: 已安装
coreutils-nohup: 已安装
bash: 已安装
curl: 已安装
ca-certificates: 已安装
ipset: 已安装
ip-full: 已安装
libcap: 已安装
libcap-bin: 已安装
ruby: 已安装
ruby-yaml: 已安装
ruby-psych: 已安装
ruby-pstore: 已安装
kmod-tun(TUN模式): 已安装
luci-compat(Luci >= 19.07): 已安装
kmod-inet-diag(PROCESS-NAME): 未安装
unzip: 已安装
kmod-nft-tproxy: 已安装

#===================== 内核检查 =====================#

运行状态: 运行中
运行内核:Meta
进程pid: 15545
运行权限: 15545: cap_dac_override,cap_net_bind_service,cap_net_admin,cap_net_raw,cap_sys_ptrace,cap_sys_resource=eip
运行用户: nobody
已选择的架构: linux-amd64

#下方无法显示内核版本号时请确认您的内核版本是否正确或者有无权限
Tun内核版本: 2023.08.17-13-gdcc8d87
Tun内核文件: 存在
Tun内核运行权限: 正常

Dev内核版本: v1.18.0-13-gd034a40
Dev内核文件: 存在
Dev内核运行权限: 正常

Meta内核版本: alpha-g0c384b1
Meta内核文件: 存在
Meta内核运行权限: 正常

#===================== 插件设置 =====================#

当前配置文件: /etc/openclash/config/wgetcloud.yaml
启动配置文件: /etc/openclash/wgetcloud.yaml
运行模式: fake-ip-mix
默认代理模式: rule
UDP流量转发(tproxy): 停用
自定义DNS: 启用
IPV6代理: 停用
IPV6-DNS解析: 停用
禁用Dnsmasq缓存: 启用
自定义规则: 启用
仅允许内网: 启用
仅代理命中规则流量: 启用
仅允许常用端口流量: 停用
绕过中国大陆IP: 停用
路由本机代理: 启用

#启动异常时建议关闭此项后重试
混合节点: 停用
保留配置: 停用

#启动异常时建议关闭此项后重试
第三方规则: 启用

#===================== 自定义规则 一 =====================#
script:
##  shortcuts:
##    Notice: The core timezone is UTC
##    CST 20:00-24:00 = time.now().hour > 12 and time.now().hour < 16
##    内核时区为UTC,故以下time.now()函数的取值需要根据本地时区进行转换
##    北京时间(CST) 20:00-24:00 = time.now().hour > 12 and time.now().hour < 16
##    quic: network == 'udp' and dst_port == 443 and (geoip(resolve_ip(host)) != 'CN' or geoip(dst_ip) != 'CN')
##    time-limit: in_cidr(src_ip,'192.168.1.2/32') and time.now().hour < 20 or time.now().hour > 21
##    time-limit: src_ip == '192.168.1.2' and time.now().hour < 20 or time.now().hour > 21

##  code: |
##    def main(ctx, metadata):
##        directkeywordlist = ["baidu"]
##        for directkeyword in directkeywordlist:
##          if directkeyword in metadata["host"]:
##            ctx.log('[Script] matched keyword %s use direct' % directkeyword)
##            return "DIRECT"

rules:
##- SCRIPT,quic,REJECT #shortcuts rule
##- SCRIPT,time-limit,REJECT #shortcuts rule

##- PROCESS-NAME,curl,DIRECT #匹配路由自身进程(curl直连)
##- DOMAIN-SUFFIX,google.com,Proxy #匹配域名后缀(交由Proxy代理服务器组)
##- DOMAIN-KEYWORD,google,Proxy #匹配域名关键字(交由Proxy代理服务器组)
##- DOMAIN,google.com,Proxy #匹配域名(交由Proxy代理服务器组)
##- DOMAIN-SUFFIX,ad.com,REJECT #匹配域名后缀(拒绝)
##- IP-CIDR,127.0.0.0/8,DIRECT #匹配数据目标IP(直连)
##- SRC-IP-CIDR,192.168.1.201/32,DIRECT #匹配数据发起IP(直连)
##- DST-PORT,80,DIRECT #匹配数据目标端口(直连)
##- SRC-PORT,7777,DIRECT #匹配数据源端口(直连)

##排序在上的规则优先生效,如添加(去除规则前的#号):
##IP段:192.168.1.2-192.168.1.200 直连
##- SRC-IP-CIDR,192.168.1.2/31,DIRECT
##- SRC-IP-CIDR,192.168.1.4/30,DIRECT
##- SRC-IP-CIDR,192.168.1.8/29,DIRECT
##- SRC-IP-CIDR,192.168.1.16/28,DIRECT
##- SRC-IP-CIDR,192.168.1.32/27,DIRECT
##- SRC-IP-CIDR,192.168.1.64/26,DIRECT
##- SRC-IP-CIDR,192.168.1.128/26,DIRECT
##- SRC-IP-CIDR,192.168.1.192/29,DIRECT
##- SRC-IP-CIDR,192.168.1.200/32,DIRECT

##IP段:192.168.1.202-192.168.1.255 直连
##- SRC-IP-CIDR,192.168.1.202/31,DIRECT
##- SRC-IP-CIDR,192.168.1.204/30,DIRECT
##- SRC-IP-CIDR,192.168.1.208/28,DIRECT
##- SRC-IP-CIDR,192.168.1.224/27,DIRECT

##此时IP为192.168.1.1和192.168.1.201的客户端流量走代理(策略),其余客户端不走代理
##因为Fake-IP模式下,IP地址为192.168.1.1的路由器自身流量可走代理(策略),所以需要排除

##仅设置路由器自身直连:
##- SRC-IP-CIDR,192.168.1.1/32,DIRECT
##- SRC-IP-CIDR,198.18.0.1/32,DIRECT

##DDNS
##- DOMAIN-SUFFIX,checkip.dyndns.org,DIRECT
##- DOMAIN-SUFFIX,checkipv6.dyndns.org,DIRECT
##- DOMAIN-SUFFIX,checkip.synology.com,DIRECT
##- DOMAIN-SUFFIX,ifconfig.co,DIRECT
##- DOMAIN-SUFFIX,api.myip.com,DIRECT
##- DOMAIN-SUFFIX,ip-api.com,DIRECT
##- DOMAIN-SUFFIX,ipapi.co,DIRECT
##- DOMAIN-SUFFIX,ip6.seeip.org,DIRECT
##- DOMAIN-SUFFIX,members.3322.org,DIRECT

##在线IP段转CIDR地址:http://ip2cidr.com
#===================== 自定义规则 二 =====================#
script:
##  shortcuts:
##    common_port: dst_port not in [21, 22, 23, 53, 80, 123, 143, 194, 443, 465, 587, 853, 993, 995, 998, 2052, 2053, 2082, 2083, 2086, 2095, 2096, 5222, 5228, 5229, 5230, 8080, 8443, 8880, 8888, 8889]

##  code: |
##    def main(ctx, metadata):
##        directkeywordlist = ["baidu"]
##        for directkeyword in directkeywordlist:
##          if directkeyword in metadata["host"]:
##            ctx.log('[Script] matched keyword %s use direct' % directkeyword)
##            return "DIRECT"

rules:
##- SCRIPT,common_port,DIRECT #shortcuts rule

##- DOMAIN-SUFFIX,google.com,Proxy #匹配域名后缀(交由Proxy代理服务器组)
##- DOMAIN-KEYWORD,google,Proxy #匹配域名关键字(交由Proxy代理服务器组)
##- DOMAIN,google.com,Proxy #匹配域名(交由Proxy代理服务器组)
##- DOMAIN-SUFFIX,ad.com,REJECT #匹配域名后缀(拒绝)
##- IP-CIDR,127.0.0.0/8,DIRECT #匹配数据目标IP(直连)
##- SRC-IP-CIDR,192.168.1.201/32,DIRECT #匹配数据发起IP(直连)
##- DST-PORT,80,DIRECT #匹配数据目标端口(直连)
##- SRC-PORT,7777,DIRECT #匹配数据源端口(直连)

#===================== 配置文件 =====================#

port: 7890
socks-port: 7891
allow-lan: true
mode: rule
log-level: info
external-controller: 0.0.0.0:9090
proxy-groups:
- name: "\U0001F530 节点选择"
  type: select
  proxies:
  - "♻️ 自动选择"
  - "\U0001F3AF 全球直连"
  - "\U0001F1ED\U0001F1F0 香港 01"
- name: "♻️ 自动选择"
  type: url-test
  url: http://www.gstatic.com/generate_204
  interval: 180
  proxies:
  - "\U0001F1ED\U0001F1F0 香港 01"
  - "\U0001F1F2\U0001F1FE 马来西亚 01 5"
  tolerance: 100
- name: "\U0001F3A5 NETFLIX"
  type: select
  proxies:
  - "\U0001F530 节点选择"
  - "♻️ 自动选择"
  - "\U0001F3AF 全球直连"
  - "\U0001F1ED\U0001F1F0 香港 01"
  - "\U0001F1F2\U0001F1FE 马来西亚 01 5"
- name: "\U0001F525 USA"
  type: select
  proxies:
  - "\U0001F530 节点选择"
  - "\U0001F3AF 全球直连"
  - "♻️ 自动选择"
  - "\U0001F1FA\U0001F1F8 美国 01"
- name: "\U0001F525 CHATGPT"
  type: select
  proxies:
  - "\U0001F530 节点选择"
  - "\U0001F3AF 全球直连"
  - "♻️ 自动选择"
  - "\U0001F1E8\U0001F1F3 台湾 01"
- name: "\U0001F525 YOUTUBE"
  type: select
  proxies:
  - "\U0001F530 节点选择"
  - "♻️ 自动选择"
  - "\U0001F3AF 全球直连"
  - "\U0001F1ED\U0001F1F0 香港 01"
- name: "\U0001F30D 国外媒体"
  type: select
  proxies:
  - "\U0001F530 节点选择"
  - "♻️ 自动选择"
  - "\U0001F3AF 全球直连"
  - "\U0001F1ED\U0001F1F0 香港 01"
- name: "\U0001F30F 国内媒体"
  type: select
  proxies:
  - "\U0001F3AF 全球直连"
  - "\U0001F1ED\U0001F1F0 香港 01"
  - "\U0001F530 节点选择"
- name: Ⓜ️ 微软服务
  type: select
  proxies:
  - "\U0001F3AF 全球直连"
  - "\U0001F530 节点选择"
  - "\U0001F1ED\U0001F1F0 香港 01"
- name: "\U0001F4F2 电报信息"
  type: select
  proxies:
  - "\U0001F530 节点选择"
  - "\U0001F3AF 全球直连"
  - "\U0001F1ED\U0001F1F0 香港 01"
- name: "\U0001F34E 苹果服务"
  type: select
  proxies:
  - "\U0001F530 节点选择"
  - "\U0001F3AF 全球直连"
  - "♻️ 自动选择"
  - "\U0001F1ED\U0001F1F0 香港 01"
- name: "\U0001F3AF 全球直连"
  type: select
  proxies:
  - DIRECT
- name: "\U0001F6D1 全球拦截"
  type: select
  proxies:
  - REJECT
  - DIRECT
- name: "\U0001F41F 漏网之鱼"
  type: select
  proxies:
  - "\U0001F530 节点选择"
  - "\U0001F3AF 全球直连"
  - "♻️ 自动选择"
  - "\U0001F1ED\U0001F1F0 香港 01"
  - "\U0001F1F2\U0001F1FE 马来西亚 01 5"
rules:
- DST-PORT,7895,REJECT
- DST-PORT,7892,REJECT
- IP-CIDR,198.18.0.1/16,REJECT,no-resolve
- DOMAIN-SUFFIX,awesome-hd.me,DIRECT
- DOMAIN-SUFFIX,broadcasthe.net,DIRECT
- DOMAIN-SUFFIX,tjupt.org,DIRECT
- DOMAIN-SUFFIX,totheglory.im,DIRECT
- DOMAIN-SUFFIX,smtp,DIRECT
- DOMAIN-KEYWORD,announce,DIRECT
- DOMAIN-KEYWORD,torrent,DIRECT
- DOMAIN-KEYWORD,tracker,DIRECT
- "DOMAIN-SUFFIX,local,\U0001F3AF 全球直连"
- "IP-CIDR,192.168.0.0/16,\U0001F3AF 全球直连,no-resolve"
- "IP-CIDR,10.0.0.0/8,\U0001F3AF 全球直连,no-resolve"
- "IP-CIDR,172.16.0.0/12,\U0001F3AF 全球直连,no-resolve"
- "IP-CIDR,127.0.0.0/8,\U0001F3AF 全球直连,no-resolve"
- "IP-CIDR,100.64.0.0/10,\U0001F3AF 全球直连,no-resolve"
- "IP-CIDR6,::1/128,\U0001F3AF 全球直连,no-resolve"
- "IP-CIDR6,fc00::/7,\U0001F3AF 全球直连,no-resolve"
- "IP-CIDR6,fe80::/10,\U0001F3AF 全球直连,no-resolve"
- "IP-CIDR6,fd00::/8,\U0001F3AF 全球直连,no-resolve"
- DOMAIN-KEYWORD,1drv,Ⓜ️ 微软服务
- DOMAIN-KEYWORD,microsoft,Ⓜ️ 微软服务
- DOMAIN-SUFFIX,yammerusercontent.com,Ⓜ️ 微软服务
- "DOMAIN,members.3322.org,\U0001F3AF 全球直连"
- "DOMAIN,pv.sohu.com,\U0001F3AF 全球直连"
- "DOMAIN,speed.neu6.edu.cn,\U0001F3AF 全球直连"
- "DOMAIN-SUFFIX,oray.com,\U0001F3AF 全球直连,DIRECT"
- "DOMAIN-SUFFIX,oray.net,\U0001F3AF 全球直连,DIRECT"
- "DOMAIN-KEYWORD,oray,\U0001F3AF 全球直连,DIRECT"
- "DOMAIN-SUFFIX,netflix.com,\U0001F3A5 NETFLIX"
- "DOMAIN-KEYWORD,dualstack.apiproxy-,\U0001F3A5 NETFLIX"
- "DOMAIN-KEYWORD,dualstack.ichnaea-web-,\U0001F3A5 NETFLIX"
- "IP-CIDR,23.246.0.0/18,\U0001F3A5 NETFLIX,no-resolve"
- "IP-CIDR,37.77.184.0/21,\U0001F3A5 NETFLIX,no-resolve"
- "IP-CIDR,45.57.0.0/17,\U0001F3A5 NETFLIX,no-resolve"
- "IP-CIDR,64.120.128.0/17,\U0001F3A5 NETFLIX,no-resolve"
- "IP-CIDR,66.197.128.0/17,\U0001F3A5 NETFLIX,no-resolve"
- "IP-CIDR,108.175.32.0/20,\U0001F3A5 NETFLIX,no-resolve"
- "IP-CIDR,192.173.64.0/18,\U0001F3A5 NETFLIX,no-resolve"
- "IP-CIDR,198.38.96.0/19,\U0001F3A5 NETFLIX,no-resolve"
- "IP-CIDR,198.45.48.0/20,\U0001F3A5 NETFLIX,no-resolve"
- "IP-CIDR,34.210.42.111/32,\U0001F3A5 NETFLIX,no-resolve"
- "IP-CIDR,52.89.124.203/32,\U0001F3A5 NETFLIX,no-resolve"
- "IP-CIDR,54.148.37.5/32,\U0001F3A5 NETFLIX,no-resolve"
- "DOMAIN-SUFFIX,encoretvb.com,\U0001F525 USA"
- "DOMAIN,edge.api.brightcove.com,\U0001F525 USA"
- "DOMAIN,bcbolt446c5271-a.akamaihd.net,\U0001F525 USA"
- "DOMAIN-SUFFIX,pluto.tv,\U0001F525 USA"
- "DOMAIN-SUFFIX,pluto.tv:443,\U0001F525 USA"
- "DOMAIN-SUFFIX,cbsi.com,\U0001F525 USA"
- "DOMAIN-SUFFIX,cbsaavideo.com,\U0001F525 USA"
- "DOMAIN-SUFFIX,cbsivideo.com,\U0001F525 USA"
- "DOMAIN-SUFFIX,paramountplus.com,\U0001F525 USA"
- "DOMAIN-SUFFIX,pplusstatic.com,\U0001F525 USA"
- "DOMAIN,cbsi.live.ott.irdeto.com,\U0001F525 USA"
- "DOMAIN,cbsplaylistserver.aws.syncbak.com,\U0001F525 USA"
- "DOMAIN,cbsservice.aws.syncbak.com,\U0001F525 USA"
- "DOMAIN,link.theplatform.com,\U0001F525 USA"
- "DOMAIN-SUFFIX,pbs.org,\U0001F525 USA"
- "DOMAIN-SUFFIX,bing.com,\U0001F525 USA"
- "DOMAIN-SUFFIX,bing.net,\U0001F525 USA"
- "DOMAIN-SUFFIX,bingapis.com,\U0001F525 USA"
- "DOMAIN,designer.microsoft.com,\U0001F525 USA"
- "DOMAIN-SUFFIX,openai.com,\U0001F525 CHATGPT"
- "DOMAIN,youtubei.googleapis.com,\U0001F525 YOUTUBE"
- "DOMAIN,yt3.ggpht.com,\U0001F525 YOUTUBE"
- "DOMAIN-SUFFIX,.youtube,\U0001F525 YOUTUBE"
- "DOMAIN-SUFFIX,ggpht.cn,\U0001F525 YOUTUBE"
- "DOMAIN-SUFFIX,ggpht.com,\U0001F525 YOUTUBE"
- "DOMAIN-SUFFIX,googlevideo.com,\U0001F525 YOUTUBE"
- "DOMAIN-SUFFIX,gvt2.com,\U0001F525 YOUTUBE"
- "DOMAIN-SUFFIX,withyoutube.com,\U0001F525 YOUTUBE"
- "DOMAIN-SUFFIX,youtu.be,\U0001F525 YOUTUBE"
- "DOMAIN-SUFFIX,youtube-nocookie.com,\U0001F525 YOUTUBE"
- "DOMAIN-SUFFIX,youtube.ae,\U0001F525 YOUTUBE"
- "DOMAIN-SUFFIX,youtubei.googleapis.com,\U0001F525 YOUTUBE"
- "DOMAIN-SUFFIX,youtubekids.com,\U0001F525 YOUTUBE"
- "DOMAIN-SUFFIX,youtubemobilesupport.com,\U0001F525 YOUTUBE"
- "DOMAIN-SUFFIX,yt.be,\U0001F525 YOUTUBE"
- "DOMAIN-SUFFIX,ytimg.com,\U0001F525 YOUTUBE"
- "DOMAIN-KEYWORD,youtube,\U0001F525 YOUTUBE"
- "IP-CIDR,172.110.32.0/21,\U0001F525 YOUTUBE,no-resolve"
- "IP-CIDR,216.73.80.0/20,\U0001F525 YOUTUBE,no-resolve"
- "IP-CIDR6,2620:120:e000::/40,\U0001F525 YOUTUBE,no-resolve"
- "DOMAIN-SUFFIX,acg.tv,\U0001F30F 国内媒体"
- "DOMAIN-SUFFIX,intl.iqiyi.com,\U0001F30F 国内媒体"
- "DOMAIN-SUFFIX,iq.com,\U0001F30F 国内媒体"
- "IP-CIDR,103.44.56.0/22,\U0001F30F 国内媒体,no-resolve"
- "IP-CIDR,118.26.120.0/24,\U0001F30F 国内媒体,no-resolve"
- "IP-CIDR,118.26.32.0/23,\U0001F30F 国内媒体,no-resolve"
- "IP-CIDR,223.119.62.225/28,\U0001F30F 国内媒体,no-resolve"
- "IP-CIDR,23.40.241.251/32,\U0001F30F 国内媒体,no-resolve"
- "IP-CIDR,23.40.242.10/32,\U0001F30F 国内媒体,no-resolve"
- "DOMAIN-SUFFIX,api.mob.app.letv.com,\U0001F30F 国内媒体"
- "DOMAIN-SUFFIX,v.smtcdns.com,\U0001F30F 国内媒体"
- "DOMAIN-SUFFIX,vv.video.qq.com,\U0001F30F 国内媒体"
- "DOMAIN-SUFFIX,youku.com,\U0001F30F 国内媒体"
- "IP-CIDR,106.11.0.0/16,\U0001F30F 国内媒体,no-resolve"
- "DOMAIN-SUFFIX,t.me,\U0001F4F2 电报信息"
- "DOMAIN-SUFFIX,tdesktop.com,\U0001F4F2 电报信息"
- "DOMAIN-SUFFIX,telegra.ph,\U0001F4F2 电报信息"
- "DOMAIN-SUFFIX,telegram.me,\U0001F4F2 电报信息"
- "DOMAIN-SUFFIX,telegram.org,\U0001F4F2 电报信息"
- "DOMAIN-SUFFIX,telesco.pe,\U0001F4F2 电报信息"
- "IP-CIDR6,2001:b28:f23c::/48,\U0001F4F2 电报信息,no-resolve"
- "IP-CIDR6,2a0a:f280::/32,\U0001F4F2 电报信息,no-resolve"
- "DOMAIN-SUFFIX,aaplimg.com,\U0001F34E 苹果服务"
- "DOMAIN-SUFFIX,apple.co,\U0001F34E 苹果服务"
- "DOMAIN-SUFFIX,apple.com,\U0001F34E 苹果服务"
- "DOMAIN-SUFFIX,apple.com.cn,\U0001F34E 苹果服务"
- "DOMAIN-SUFFIX,apple-cloudkit.com,\U0001F34E 苹果服务"
- "DOMAIN-SUFFIX,appstore.com,\U0001F34E 苹果服务"
- "DOMAIN-SUFFIX,cdn-apple.com,\U0001F34E 苹果服务"
- "DOMAIN-SUFFIX,icloud.com,\U0001F34E 苹果服务"
- "DOMAIN-SUFFIX,icloud.com.cn,\U0001F34E 苹果服务"
- "DOMAIN-SUFFIX,icloud-content.com,\U0001F34E 苹果服务"
- "DOMAIN-SUFFIX,me.com,\U0001F34E 苹果服务"
- "DOMAIN-SUFFIX,mzstatic.com,\U0001F34E 苹果服务"
- "DOMAIN-KEYWORD,apple.com.akadns.net,\U0001F34E 苹果服务"
- "DOMAIN-KEYWORD,icloud.com.akadns.net,\U0001F34E 苹果服务"
- "IP-CIDR,17.0.0.0/8,\U0001F34E 苹果服务,no-resolve"
- "IP-CIDR,63.92.224.0/19,\U0001F34E 苹果服务,no-resolve"
- "IP-CIDR,65.199.22.0/23,\U0001F34E 苹果服务,no-resolve"
- "IP-CIDR,139.178.128.0/18,\U0001F34E 苹果服务,no-resolve"
- "IP-CIDR,144.178.0.0/19,\U0001F34E 苹果服务,no-resolve"
- "IP-CIDR,192.35.50.0/24,\U0001F34E 苹果服务,no-resolve"
- "IP-CIDR,198.183.17.0/24,\U0001F34E 苹果服务,no-resolve"
- "IP-CIDR,205.180.175.0/24,\U0001F34E 苹果服务,no-resolve"
- "PROCESS-NAME,aria2c,\U0001F3AF 全球直连"
- "PROCESS-NAME,fdm,\U0001F3AF 全球直连"
- "PROCESS-NAME,Folx,\U0001F3AF 全球直连"
- "PROCESS-NAME,NetTransport,\U0001F3AF 全球直连"
- "PROCESS-NAME,Thunder,\U0001F3AF 全球直连"
- "PROCESS-NAME,Transmission,\U0001F3AF 全球直连"
- "PROCESS-NAME,uTorrent,\U0001F3AF 全球直连"
- "PROCESS-NAME,WebTorrent,\U0001F3AF 全球直连"
- "PROCESS-NAME,WebTorrent Helper,\U0001F3AF 全球直连"
- "PROCESS-NAME,DownloadService,\U0001F3AF 全球直连"
- "PROCESS-NAME,Weiyun,\U0001F3AF 全球直连"
- "DOMAIN-KEYWORD,aria2,\U0001F3AF 全球直连"
- "DOMAIN-KEYWORD,xunlei,\U0001F3AF 全球直连"
- "DOMAIN-KEYWORD,yunpan,\U0001F3AF 全球直连"
- "DOMAIN-KEYWORD,Thunder,\U0001F3AF 全球直连"
- "DOMAIN-KEYWORD,XLLiveUD,\U0001F3AF 全球直连"
- "GEOIP,CN,\U0001F3AF 全球直连"
- PROCESS-NAME,aria2c,DIRECT
- PROCESS-NAME,BitComet,DIRECT
- PROCESS-NAME,fdm,DIRECT
- PROCESS-NAME,NetTransport,DIRECT
- PROCESS-NAME,qbittorrent,DIRECT
- PROCESS-NAME,Thunder,DIRECT
- PROCESS-NAME,transmission-daemon,DIRECT
- PROCESS-NAME,transmission-qt,DIRECT
- PROCESS-NAME,uTorrent,DIRECT
- PROCESS-NAME,WebTorrent,DIRECT
- PROCESS-NAME,aria2c,DIRECT
- PROCESS-NAME,fdm,DIRECT
- PROCESS-NAME,Folx,DIRECT
- PROCESS-NAME,NetTransport,DIRECT
- PROCESS-NAME,qbittorrent,DIRECT
- PROCESS-NAME,Thunder,DIRECT
- PROCESS-NAME,Transmission,DIRECT
- PROCESS-NAME,transmission,DIRECT
- PROCESS-NAME,uTorrent,DIRECT
- PROCESS-NAME,WebTorrent,DIRECT
- PROCESS-NAME,WebTorrent Helper,DIRECT
- PROCESS-NAME,v2ray,DIRECT
- PROCESS-NAME,ss-local,DIRECT
- PROCESS-NAME,ssr-local,DIRECT
- PROCESS-NAME,ss-redir,DIRECT
- PROCESS-NAME,ssr-redir,DIRECT
- PROCESS-NAME,ss-server,DIRECT
- PROCESS-NAME,trojan-go,DIRECT
- PROCESS-NAME,xray,DIRECT
- PROCESS-NAME,hysteria,DIRECT
- PROCESS-NAME,UUBooster,DIRECT
- PROCESS-NAME,uugamebooster,DIRECT
- "DST-PORT,80,\U0001F41F 漏网之鱼"
- "DST-PORT,443,\U0001F41F 漏网之鱼"
- "DST-PORT,22,\U0001F41F 漏网之鱼"
- MATCH,DIRECT
redir-port: 7892
tproxy-port: 7895
mixed-port: 7893
bind-address: "*"
external-ui: "/usr/share/openclash/ui"
ipv6: false
geodata-mode: true
geodata-loader: standard
tcp-concurrent: true
unified-delay: true
dns:
  enable: true
  ipv6: false
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  listen: 0.0.0.0:7874
  nameserver:
  - 202.106.195.68
  - 223.5.5.5
  - https://doh.pub/dns-query
  - https://dns.alidns.com/dns-query
  fallback:
  - "https://dns.cloudflare.com/dns-query#\U0001F525 USA"
  - "https://1.1.1.1/dns-query#\U0001F525 USA"
  - "https://public.dns.iij.jp/dns-query#\U0001F525 USA"
  - "https://doh.mullvad.net/dns-query#\U0001F525 USA"
  fake-ip-filter:
  - "*.lan"
  - "*.localdomain"
  - "*.example"
  - "*.invalid"
  - "*.localhost"
  - "*.test"
  - "*.local"
  - "*.home.arpa"
  - time.*.com
  - time.*.gov
  - time.*.edu.cn
  - time.*.apple.com
  - time-ios.apple.com
  - time1.*.com
  - time2.*.com
  - time3.*.com
  - time4.*.com
  - time5.*.com
  - time6.*.com
  - time7.*.com
  - ntp.*.com
  - ntp1.*.com
  - ntp2.*.com
  - ntp3.*.com
  - ntp4.*.com
  - ntp5.*.com
  - ntp6.*.com
  - ntp7.*.com
  - "*.time.edu.cn"
  - "*.ntp.org.cn"
  - "+.pool.ntp.org"
  - time1.cloud.tencent.com
  - music.163.com
  - "*.music.163.com"
  - "*.126.net"
  - musicapi.taihe.com
  - music.taihe.com
  - songsearch.kugou.com
  - trackercdn.kugou.com
  - "*.kuwo.cn"
  - api-jooxtt.sanook.com
  - api.joox.com
  - joox.com
  - y.qq.com
  - "*.y.qq.com"
  - streamoc.music.tc.qq.com
  - mobileoc.music.tc.qq.com
  - isure.stream.qqmusic.qq.com
  - dl.stream.qqmusic.qq.com
  - aqqmusic.tc.qq.com
  - amobile.music.tc.qq.com
  - "*.xiami.com"
  - "*.music.migu.cn"
  - music.migu.cn
  - "+.msftconnecttest.com"
  - "+.msftncsi.com"
  - localhost.ptlogin2.qq.com
  - localhost.sec.qq.com
  - "+.qq.com"
  - "+.tencent.com"
  - "+.srv.nintendo.net"
  - "*.n.n.srv.nintendo.net"
  - "+.stun.playstation.net"
  - xbox.*.*.microsoft.com
  - "*.*.xboxlive.com"
  - xbox.*.microsoft.com
  - xnotify.xboxlive.com
  - "+.battlenet.com.cn"
  - "+.wotgame.cn"
  - "+.wggames.cn"
  - "+.wowsgame.cn"
  - "+.wargaming.net"
  - proxy.golang.org
  - stun.*.*
  - stun.*.*.*
  - "+.stun.*.*"
  - "+.stun.*.*.*"
  - "+.stun.*.*.*.*"
  - "+.stun.*.*.*.*.*"
  - heartbeat.belkin.com
  - "*.linksys.com"
  - "*.linksyssmartwifi.com"
  - "*.router.asus.com"
  - mesu.apple.com
  - swscan.apple.com
  - swquery.apple.com
  - swdownload.apple.com
  - swcdn.apple.com
  - swdist.apple.com
  - lens.l.google.com
  - stun.l.google.com
  - na.b.g-tun.com
  - "+.nflxvideo.net"
  - "*.square-enix.com"
  - "*.finalfantasyxiv.com"
  - "*.ffxiv.com"
  - "*.ff14.sdo.com"
  - ff.dorado.sdo.com
  - "*.mcdn.bilivideo.cn"
  - "+.media.dssott.com"
  - shark007.net
  - Mijia Cloud
  - "+.cmbchina.com"
  - "+.cmbimg.com"
  - local.adguard.org
  - "+.sandai.net"
  - "+.n0808.com"
  - "+.baidu.com"
  - "+.metahubs.cn"
  - "+.3322.org"
  - services.googleapis.cn
sniffer:
  enable: true
  force-domain:
  - "+.netflix.com"
  - "+.nflxvideo.net"
  - "+.amazonaws.com"
  - "+.media.dssott.com"
  - "+.civitai.com"
  - "+.reddit.com"
  - "+.stability.ai"
  - "+.bing.com"
  - "+.bing.net"
  - "+.bingapis.com"
  - "+.githubusercontent.com"
  skip-domain:
  - "+.apple.com"
  - Mijia Cloud
  - dlg.io.mi.com
  sniff:
    TLS:
    HTTP:
      ports:
      - 80
      - 8080-8880
      override-destination: true
tun:
  enable: true
  stack: system
  device: utun
  auto-route: false
  auto-detect-interface: false
  dns-hijack:
  - tcp://any:53
profile:
  store-selected: true
  store-fake-ip: true
authentication:
- Clash:123456

#===================== 自定义覆写设置 =====================#

#!/bin/sh
. /usr/share/openclash/ruby.sh
. /usr/share/openclash/log.sh
. /lib/functions.sh

# This script is called by /etc/init.d/openclash
# Add your custom overwrite scripts here, they will be take effict after the OpenClash own srcipts

LOG_OUT "Tip: Start Running Custom Overwrite Scripts..."
LOGTIME=$(echo $(date "+%Y-%m-%d %H:%M:%S"))
LOG_FILE="/tmp/openclash.log"
CONFIG_FILE="$1" #config path

#Simple Demo:
    #General Demo
    #1--config path
    #2--key name
    #3--value
    #ruby_edit "$CONFIG_FILE" "['redir-port']" "7892"
    #ruby_edit "$CONFIG_FILE" "['secret']" "123456"
    #ruby_edit "$CONFIG_FILE" "['dns']['enable']" "true"

    #Hash Demo
    #1--config path
    #2--key name
    #3--hash type value
    #ruby_edit "$CONFIG_FILE" "['experimental']" "{'sniff-tls-sni'=>true}"
    #ruby_edit "$CONFIG_FILE" "['sniffer']" "{'sniffing'=>['tls','http']}"

    #Array Demo:
    #1--config path
    #2--key name
    #3--position(start from 0, end with -1)
    #4--value
    #ruby_arr_insert "$CONFIG_FILE" "['dns']['nameserver']" "0" "114.114.114.114"

    #Array Add From Yaml File Demo:
    #1--config path
    #2--key name
    #3--position(start from 0, end with -1)
    #4--value file path
    #5--value key name in #4 file
    #ruby_arr_add_file "$CONFIG_FILE" "['dns']['fallback-filter']['ipcidr']" "0" "/etc/openclash/custom/openclash_custom_fallback_filter.yaml" "['fallback-filter']['ipcidr']"

#Ruby Script Demo:
    #ruby -ryaml -rYAML -I "/usr/share/openclash" -E UTF-8 -e "
    #   begin
    #      Value = YAML.load_file('$CONFIG_FILE');
    #   rescue Exception => e
    #      puts '${LOGTIME} Error: Load File Failed,【' + e.message + '】';
    #   end;

        #General
    #   begin
    #   Thread.new{
    #      Value['redir-port']=7892;
    #      Value['tproxy-port']=7895;
    #      Value['port']=7890;
    #      Value['socks-port']=7891;
    #      Value['mixed-port']=7893;
    #   }.join;

    #   rescue Exception => e
    #      puts '${LOGTIME} Error: Set General Failed,【' + e.message + '】';
    #   ensure
    #      File.open('$CONFIG_FILE','w') {|f| YAML.dump(Value, f)};
    #   end" 2>/dev/null >> $LOG_FILE

exit 0
#===================== 自定义防火墙设置 =====================#

#!/bin/sh
. /usr/share/openclash/log.sh
. /lib/functions.sh

# This script is called by /etc/init.d/openclash
# Add your custom firewall rules here, they will be added after the end of the OpenClash iptables rules

LOG_OUT "Tip: Start Add Custom Firewall Rules..."

exit 0
#===================== IPTABLES 防火墙设置 =====================#

#IPv4 NAT chain

#IPv4 Mangle chain

#IPv4 Filter chain

#IPv6 NAT chain

#IPv6 Mangle chain

#IPv6 Filter chain

#===================== NFTABLES 防火墙设置 =====================#

table inet fw4 {
    chain input {
        type filter hook input priority filter; policy accept;
        iifname "lo" accept comment "!fw4: Accept traffic from loopback"
        ct state established,related accept comment "!fw4: Allow inbound established and related flows"
        iifname { "eth0", "utun" } jump input_lan comment "!fw4: Handle lan IPv4/IPv6 input traffic"
    }
}
table inet fw4 {
    chain forward {
        type filter hook forward priority filter; policy accept;
        oifname "utun" udp dport 443 ip daddr != @china_ip_route counter packets 866 bytes 1057822 reject with icmp port-unreachable comment "OpenClash QUIC REJECT"
        meta l4proto { tcp, udp } oifname "utun" counter packets 37333 bytes 18031885 accept comment "OpenClash TUN Forward"
        ct state established,related accept comment "!fw4: Allow forwarded established and related flows"
        iifname { "eth0", "utun" } jump forward_lan comment "!fw4: Handle lan IPv4/IPv6 forward traffic"
    }
}
table inet fw4 {
    chain dstnat {
        type nat hook prerouting priority dstnat; policy accept;
        iifname { "eth0", "utun" } jump dstnat_lan comment "!fw4: Handle lan IPv4/IPv6 dstnat traffic"
        ip protocol tcp counter packets 18049 bytes 1179992 jump openclash
    }
}
table inet fw4 {
    chain srcnat {
        type nat hook postrouting priority srcnat; policy accept;
        meta nfproto ipv4 counter packets 310322 bytes 21742274 jump openclash_post comment "OpenClash Bypass Gateway Compatible"
    }
}
table inet fw4 {
    chain nat_output {
        type nat hook output priority filter - 1; policy accept;
        ip protocol tcp counter packets 188068 bytes 11287220 jump openclash_output
    }
}
table inet fw4 {
    chain mangle_prerouting {
        type filter hook prerouting priority mangle; policy accept;
        ip protocol udp counter packets 371660 bytes 131328995 jump openclash_mangle
        jump pbr_prerouting comment "Jump into pbr prerouting chain"
    }
}
table inet fw4 {
    chain mangle_output {
        type route hook output priority mangle; policy accept;
        jump pbr_output comment "Jump into pbr output chain"
        meta nfproto ipv4 meta l4proto { tcp, udp } counter packets 4342602 bytes 7574062299 jump openclash_mangle_output
    }
}
table inet fw4 {
    chain openclash {
        ip daddr @localnetwork counter packets 260 bytes 14980 return
        ip protocol tcp counter packets 17789 bytes 1165012 redirect to :7892
    }
}
table inet fw4 {
    chain openclash_mangle {
        meta l4proto { tcp, udp } iifname "utun" counter packets 61651 bytes 43497680 return
        ip daddr @localnetwork counter packets 270675 bytes 68657061 return
        ip protocol udp counter packets 39334 bytes 19174254 jump openclash_upnp
        meta l4proto { tcp, udp } th dport 0-65535 meta mark set 0x00000162 counter packets 39334 bytes 19174254
    }
}
table inet fw4 {
    chain openclash_mangle_output {
        ip daddr @localnetwork counter packets 2269344 bytes 7364675697 return
        meta skuid != 65534 udp dport 0-65535 ip daddr 198.18.0.0/16 meta mark set 0x00000162 counter packets 174 bytes 10788
    }
}
table inet fw4 {
    chain openclash_output {
        ip daddr @localnetwork counter packets 58910 bytes 3537740 return
        ip protocol tcp ip daddr 198.18.0.0/16 meta skuid != 65534 counter packets 354 bytes 21240 redirect to :7892
        ip protocol tcp meta skuid != 65534 counter packets 4931 bytes 295860 redirect to :7892
    }
}
table inet fw4 {
    chain openclash_post {
        meta mark 0x00000162 counter packets 1867 bytes 592411 accept
        ip daddr @localnetwork counter packets 108004 bytes 7455092 return
        meta nfproto ipv4 fib saddr type != local meta skuid != 65534 counter packets 0 bytes 0 masquerade
    }
}
table inet fw4 {
    chain openclash_dns_hijack {
    }
}

#===================== IPSET状态 =====================#

#===================== 路由表状态 =====================#

#IPv4

#route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.168.24.1    0.0.0.0         UG    0      0        0 eth0
192.168.24.0    0.0.0.0         255.255.255.0   U     0      0        0 eth0
198.18.0.0      0.0.0.0         255.255.255.252 U     0      0        0 utun

#ip route list
default via 192.168.24.1 dev eth0 proto static 
192.168.24.0/24 dev eth0 proto kernel scope link src 192.168.24.3 
198.18.0.0/30 dev utun proto kernel scope link src 198.18.0.1 

#ip rule show
0:  from all lookup local
32765:  from all fwmark 0x162 lookup 354
32766:  from all lookup main
32767:  from all lookup default

#IPv6

#route -A inet6
Kernel IPv6 routing table
Destination                                 Next Hop                                Flags Metric Ref    Use Iface
fd4d:a2c9:9a3b::/48                         ::                                      !n    2147483647 2        0 lo      
fe80::/64                                   ::                                      U     256    1        0 eth0    
fe80::/64                                   ::                                      U     256    1        0 utun    
::/0                                        ::                                      !n    -1     1        0 lo      
::1/128                                     ::                                      Un    0      3        0 lo      
fe80::/128                                  ::                                      Un    0      3        0 eth0    
fe80::/128                                  ::                                      Un    0      3        0 utun    
fe80::20c:29ff:fe35:63cc/128                ::                                      Un    0      5        0 eth0    
fe80::41b7:607d:f844:84aa/128               ::                                      Un    0      2        0 utun    
ff00::/8                                    ::                                      U     256    2        0 eth0    
ff00::/8                                    ::                                      U     256    2        0 utun    
::/0                                        ::                                      !n    -1     1        0 lo      

#ip -6 route list
unreachable fd4d:a2c9:9a3b::/48 dev lo proto static metric 2147483647 pref medium
fe80::/64 dev eth0 proto kernel metric 256 pref medium
fe80::/64 dev utun proto kernel metric 256 pref medium

#ip -6 rule show
0:  from all lookup local
32766:  from all lookup main

#===================== Tun设备状态 =====================#

utun: tun

#===================== 端口占用状态 =====================#

tcp        0      0 198.18.0.1:37245        0.0.0.0:*               LISTEN      15545/clash
tcp        0      0 :::9090                 :::*                    LISTEN      15545/clash
tcp        0      0 :::7893                 :::*                    LISTEN      15545/clash
tcp        0      0 :::7892                 :::*                    LISTEN      15545/clash
tcp        0      0 :::7895                 :::*                    LISTEN      15545/clash
tcp        0      0 :::7891                 :::*                    LISTEN      15545/clash
tcp        0      0 :::7890                 :::*                    LISTEN      15545/clash
udp        0      0 :::7874                 :::*                                15545/clash
udp        0      0 :::7891                 :::*                                15545/clash
udp        0      0 :::7892                 :::*                                15545/clash
udp        0      0 :::7893                 :::*                                15545/clash
udp        0      0 :::7895                 :::*                                15545/clash
udp        0      0 :::48419                :::*                                15545/clash

#===================== 测试本机DNS查询(www.baidu.com) =====================#

Server:     127.0.0.1
Address:    127.0.0.1:53

www.baidu.com   canonical name = www.a.shifen.com
Name:   www.a.shifen.com
Address: 111.206.208.134

#===================== 测试内核DNS查询(www.instagram.com) =====================#

Status: 0
TC: false
RD: true
RA: true
AD: false
CD: false

Question: 
  Name: www.instagram.com.
  Qtype: 1
  Qclass: 1

Answer: 
  TTL: 3511
  data: geo-p42.instagram.com.
  name: www.instagram.com.
  type: 5

  TTL: 3511
  data: z-p42-instagram.c10r.instagram.com.
  name: geo-p42.instagram.com.
  type: 5

  TTL: 22
  data: 157.240.22.174
  name: z-p42-instagram.c10r.instagram.com.
  type: 1

Dnsmasq 当前默认 resolv 文件:/tmp/resolv.conf.d/resolv.conf.auto

#===================== /tmp/resolv.conf.d/resolv.conf.auto =====================#

# Interface lan
nameserver 202.106.195.68

OpenClash Config

No response

Expected Behavior

希望能。经过oc之后,也能安装成功

Additional Context

No response

xiaolongzhou123 commented 4 months ago

我的问题。刷了新固件好了