search

vernesong / OpenClash

A Clash Client For OpenWrt
MIT License
17.51k stars 3.18k forks source link

无法科学上网 #414

Closed miroda closed 4 years ago

miroda commented 4 years ago

全部按着你的配置走，已经成功运行，ipv6也关闭了，就是不能科学上网

企业微信20200505013034

vernesong commented 4 years ago

发调试日志

miroda commented 4 years ago

time="2020-05-05T05:26:57Z" level=info msg="Start initial compatible provider Domestic" time="2020-05-05T05:26:57Z" level=info msg="Start initial compatible provider Netease Music" time="2020-05-05T05:26:57Z" level=info msg="Start initial compatible provider PayPal" time="2020-05-05T05:26:57Z" level=info msg="Start initial compatible provider Apple" time="2020-05-05T05:26:57Z" level=info msg="Start initial compatible provider Others" time="2020-05-05T05:26:57Z" level=info msg="Start initial compatible provider Auto - UrlTest" time="2020-05-05T05:26:57Z" level=info msg="Start initial compatible provider Proxy" time="2020-05-05T05:26:57Z" level=info msg="Start initial compatible provider Telegram" time="2020-05-05T05:26:57Z" level=info msg="Start initial compatible provider Steam" time="2020-05-05T05:26:57Z" level=info msg="Start initial compatible provider Spotify" time="2020-05-05T05:26:57Z" level=info msg="Start initial compatible provider Speedtest" time="2020-05-05T05:26:57Z" level=info msg="Start initial compatible provider Netflix" time="2020-05-05T05:26:57Z" level=info msg="Start initial compatible provider GlobalTV" time="2020-05-05T05:26:57Z" level=info msg="Start initial compatible provider AsianTV" time="2020-05-05T05:26:57Z" level=info msg="Start initial compatible provider Microsoft" time="2020-05-05T05:26:57Z" level=info msg="Start initial compatible provider AdBlock" 2020-05-05 13:26:51 OpenClash Start Successful, Please Note That Network May Abnormal With IPV6's DHCP Server time="2020-05-05T05:34:19Z" level=info msg="Start initial compatible provider GlobalTV" time="2020-05-05T05:34:19Z" level=info msg="Start initial compatible provider AsianTV" time="2020-05-05T05:34:19Z" level=info msg="Start initial compatible provider Apple" time="2020-05-05T05:34:19Z" level=info msg="Start initial compatible provider Proxy" time="2020-05-05T05:34:19Z" level=info msg="Start initial compatible provider Domestic" time="2020-05-05T05:34:19Z" level=info msg="Start initial compatible provider AdBlock" time="2020-05-05T05:34:19Z" level=info msg="Start initial compatible provider PayPal" time="2020-05-05T05:34:19Z" level=info msg="Start initial compatible provider Others" time="2020-05-05T05:34:19Z" level=info msg="Start initial compatible provider Telegram" time="2020-05-05T05:34:19Z" level=info msg="Start initial compatible provider Auto - UrlTest" time="2020-05-05T05:34:19Z" level=info msg="Start initial compatible provider Spotify" time="2020-05-05T05:34:19Z" level=info msg="Start initial compatible provider Speedtest" time="2020-05-05T05:34:19Z" level=info msg="Start initial compatible provider Netflix" time="2020-05-05T05:34:19Z" level=info msg="Start initial compatible provider Microsoft" time="2020-05-05T05:34:19Z" level=info msg="Start initial compatible provider Netease Music" time="2020-05-05T05:34:19Z" level=info msg="Start initial compatible provider Steam" 2020-05-05 13:34:13 OpenClash Start Successful, Please Note That Network May Abnormal With IPV6's DHCP Server 2020-05-05 13:35:27 OpenClash 【Dev】 Core Update Error

miroda commented 4 years ago

调试日志在哪里能看 ，我这边只有运行日志

miroda commented 4 years ago

我把ipv6关闭之后 后面的日志是这样的 2020-05-05 20:33:05 OpenClash Reload After Firewall Restart time="2020-05-05T12:33:40Z" level=info msg="Start initial compatible provider Auto - UrlTest" time="2020-05-05T12:33:40Z" level=info msg="Start initial compatible provider Apple" time="2020-05-05T12:33:40Z" level=info msg="Start initial compatible provider Proxy" time="2020-05-05T12:33:40Z" level=info msg="Start initial compatible provider PayPal" time="2020-05-05T12:33:40Z" level=info msg="Start initial compatible provider Netflix" time="2020-05-05T12:33:40Z" level=info msg="Start initial compatible provider Domestic" time="2020-05-05T12:33:40Z" level=info msg="Start initial compatible provider Speedtest" time="2020-05-05T12:33:40Z" level=info msg="Start initial compatible provider Others" time="2020-05-05T12:33:40Z" level=info msg="Start initial compatible provider GlobalTV" time="2020-05-05T12:33:40Z" level=info msg="Start initial compatible provider AsianTV" time="2020-05-05T12:33:40Z" level=info msg="Start initial compatible provider Steam" time="2020-05-05T12:33:40Z" level=info msg="Start initial compatible provider AdBlock" time="2020-05-05T12:33:40Z" level=info msg="Start initial compatible provider Netease Music" time="2020-05-05T12:33:40Z" level=info msg="Start initial compatible provider Spotify" time="2020-05-05T12:33:40Z" level=info msg="Start initial compatible provider Microsoft" time="2020-05-05T12:33:40Z" level=info msg="Start initial compatible provider Telegram" 2020-05-05 20:33:32 OpenClash Start Successful

adminidor commented 4 years ago

@miroda 2020-05-05_221538 这个日志

miroda commented 4 years ago

OpenClash 调试日志

生成时间: 2020-05-06 09:54:42 插件版本: v0.37.6-beta

===================== 系统信息 =====================

主机型号: Intel(R) Celeron(R) CPU J1900 @ 1.99GHz : 4 Core 4 Thread 固件版本: OpenWrt SNAPSHOT r0-6b142ba LuCI版本: git-20.088.29068-cebe120-1 内核版本: 4.19.108 处理器架构: x86_64

此项在使用Tun模式时应为ACCEPT

防火墙转发: ACCEPT

此项有值时建议到网络-接口-lan的设置中禁用IPV6的DHCP

IPV6-DHCP: server

此项结果应仅有配置文件的DNS监听地址

Dnsmasq转发设置: 127.0.0.1#7874

===================== 依赖检查 =====================

dnsmasq-full: 已安装 coreutils: 已安装 coreutils-nohup: 已安装 bash: 已安装 curl: 已安装 jsonfilter: 已安装 ca-certificates: 已安装 ipset: 已安装 ip-full: 已安装 iptables-mod-tproxy: 已安装 kmod-tun(TUN模式): 已安装 luci-compat(Luci-19.07): 未安装

===================== 内核检查 =====================

运行状态: 运行中 已选择的架构: linux-386

下方无法显示内核版本号时请确认您的内核版本是否正确或者有无权限

Tun内核版本: Tun内核文件: 不存在 Tun内核运行权限: 否

Game内核版本: Game内核文件: 不存在 Game内核运行权限: 否

Dev内核版本: v0.19.0-26-g94e0e4b Dev内核文件: 存在 Dev内核运行权限: 正常

===================== 插件设置 =====================

当前配置文件: /etc/openclash/config/dler cloud.yaml 运行模式: fake-ip 默认代理模式: Rule UDP流量转发: 停用 DNS劫持: 启用 自定义DNS: 停用 IPV6-DNS解析: 停用 Real-IP-DNS地址: 禁用Dnsmasq缓存: 停用 自定义规则: 停用 仅允许内网: 停用 仅代理命中规则流量: 启用

启动异常时建议关闭此项后重试

保留配置: 停用 第三方规则: 停用

===================== 配置文件 =====================

port: 7890 socks-port: 7891 redir-port: 7892 allow-lan: true bind-address: "*" mode: Rule log-level: info external-controller: 0.0.0.0:9090 experimental: ignore-resolve-fail: true secret: "123456" external-ui: "/usr/share/openclash/dashboard" dns: enable: true ipv6: false enhanced-mode: fake-ip fake-ip-range: 198.18.0.1/16 listen: 127.0.0.1:7874 nameserver:

===================== 防火墙设置 =====================

NAT chain

Chain PREROUTING (policy ACCEPT) num target prot opt source destination
1 REDIRECT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53 redir ports 53 2 REDIRECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 redir ports 53 3 prerouting_rule all -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Custom prerouting rule chain / 4 zone_lan_prerouting all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 / 5 zone_wan_prerouting all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 / 6 zone_wan_prerouting all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 / 7 zone_vpn_prerouting all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 / 8 openclash tcp -- 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT) num target prot opt source destination
1 REDIRECT tcp -- 0.0.0.0/0 198.18.0.0/16 redir ports 7892

Mangle chain

Chain PREROUTING (policy ACCEPT) num target prot opt source destination
Chain OUTPUT (policy ACCEPT) num target prot opt source destination

===================== 路由表状态 =====================

route -n

Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 192.168.1.1 0.0.0.0 UG 0 0 0 eth1 192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1 192.168.100.0 0.0.0.0 255.255.255.0 U 0 0 0 br-lan

ip route list

default via 192.168.1.1 dev eth1 proto static src 192.168.1.22 192.168.1.0/24 dev eth1 proto kernel scope link src 192.168.1.22 192.168.100.0/24 dev br-lan proto kernel scope link src 192.168.100.1

ip rule show

0: from all lookup local 32766: from all lookup main 32767: from all lookup default

===================== 端口占用状态 =====================

tcp 0 0 :::9090 ::: LISTEN 5799/clash tcp 0 0 :::7890 ::: LISTEN 5799/clash tcp 0 0 :::7891 ::: LISTEN 5799/clash tcp 0 0 :::7892 ::: LISTEN 5799/clash udp 0 0 127.0.0.1:7874 0.0.0.0: 5799/clash udp 0 0 :::7891 ::: 5799/clash udp 0 0 :::7892 :::* 5799/clash

===================== 测试本机DNS查询 =====================

Server: 127.0.0.1 Address: 127.0.0.1#53

Name: www.baidu.com Address 1: 198.18.0.2 *** Can't find www.baidu.com: No answer

===================== resolv.conf.auto =====================

Interface wan

nameserver 192.168.1.1

===================== 测试本机网络连接 =====================

===================== 测试本机网络下载 =====================

===================== 最近运行日志 =====================

time="2020-05-06T01:54:30Z" level=info msg="Start initial compatible provider Speedtest" time="2020-05-06T01:54:30Z" level=info msg="Start initial compatible provider AdBlock" time="2020-05-06T01:54:30Z" level=info msg="Start initial compatible provider Microsoft" time="2020-05-06T01:54:30Z" level=info msg="Start initial compatible provider Others" time="2020-05-06T01:54:30Z" level=info msg="Start initial compatible provider Domestic" time="2020-05-06T01:54:30Z" level=info msg="Start initial compatible provider Proxy" time="2020-05-06T01:54:30Z" level=info msg="Start initial compatible provider Spotify" time="2020-05-06T01:54:30Z" level=info msg="Start initial compatible provider Netease Music" time="2020-05-06T01:54:30Z" level=info msg="Start initial compatible provider Steam" time="2020-05-06T01:54:30Z" level=info msg="Start initial compatible provider Telegram" time="2020-05-06T01:54:30Z" level=info msg="Start initial compatible provider Auto - UrlTest" time="2020-05-06T01:54:30Z" level=info msg="Start initial compatible provider Netflix" time="2020-05-06T01:54:30Z" level=info msg="Start initial compatible provider GlobalTV" time="2020-05-06T01:54:30Z" level=info msg="Start initial compatible provider Apple" time="2020-05-06T01:54:30Z" level=info msg="Start initial compatible provider AsianTV" time="2020-05-06T01:54:30Z" level=info msg="Start initial compatible provider PayPal" time="2020-05-06T01:54:30Z" level=info msg="HTTP proxy listening at: :7890" time="2020-05-06T01:54:30Z" level=info msg="RESTful API listening at: 0.0.0.0:9090" time="2020-05-06T01:54:30Z" level=info msg="Redir proxy listening at: :7892" time="2020-05-06T01:54:30Z" level=info msg="DNS server listening at: 127.0.0.1:7874" time="2020-05-06T01:54:30Z" level=info msg="SOCKS proxy listening at: :7891" time="2020-05-06T01:54:33Z" level=info msg="[TCP] 192.168.100.215:53235 --> 123.151.71.114 match GeoIP using Domestic[DIRECT]" 2020-05-06 09:54:23 OpenClash Start Successful, Please Note That Network May Abnormal With IPV6's DHCP Server

vernesong commented 4 years ago

到网络-接口-lan的设置中禁用IPV6的DHCP，并重启客户端

miroda commented 4 years ago

关闭了ipv6 dhcp，这是调试日志 OpenClash 调试日志

生成时间: 2020-05-06 10:57:39 插件版本: v0.37.6-beta

===================== 系统信息 =====================

主机型号: Intel(R) Celeron(R) CPU J1900 @ 1.99GHz : 4 Core 4 Thread 固件版本: OpenWrt SNAPSHOT r0-6b142ba LuCI版本: git-20.088.29068-cebe120-1 内核版本: 4.19.108 处理器架构: x86_64

此项在使用Tun模式时应为ACCEPT

防火墙转发: ACCEPT

此项有值时建议到网络-接口-lan的设置中禁用IPV6的DHCP

IPV6-DHCP:

此项结果应仅有配置文件的DNS监听地址

Dnsmasq转发设置: 127.0.0.1#7874

===================== 依赖检查 =====================

dnsmasq-full: 已安装 coreutils: 已安装 coreutils-nohup: 已安装 bash: 已安装 curl: 已安装 jsonfilter: 已安装 ca-certificates: 已安装 ipset: 已安装 ip-full: 已安装 iptables-mod-tproxy: 已安装 kmod-tun(TUN模式): 已安装 luci-compat(Luci-19.07): 未安装

===================== 内核检查 =====================

运行状态: 运行中 已选择的架构: linux-386

下方无法显示内核版本号时请确认您的内核版本是否正确或者有无权限

Tun内核版本: Tun内核文件: 不存在 Tun内核运行权限: 否

Game内核版本: Game内核文件: 不存在 Game内核运行权限: 否

Dev内核版本: v0.19.0-26-g94e0e4b Dev内核文件: 存在 Dev内核运行权限: 正常

===================== 插件设置 =====================

当前配置文件: /etc/openclash/config/dler cloud.yaml 运行模式: fake-ip 默认代理模式: Rule UDP流量转发: 停用 DNS劫持: 启用 自定义DNS: 停用 IPV6-DNS解析: 停用 Real-IP-DNS地址: 禁用Dnsmasq缓存: 停用 自定义规则: 停用 仅允许内网: 停用 仅代理命中规则流量: 启用

启动异常时建议关闭此项后重试

保留配置: 停用 第三方规则: 停用

===================== 配置文件 =====================

port: 7890 socks-port: 7891 redir-port: 7892 allow-lan: true bind-address: "*" mode: Rule log-level: info external-controller: 0.0.0.0:9090 experimental: ignore-resolve-fail: true secret: "123456" external-ui: "/usr/share/openclash/dashboard" dns: enable: true ipv6: false enhanced-mode: fake-ip fake-ip-range: 198.18.0.1/16 listen: 127.0.0.1:7874 nameserver:

===================== 防火墙设置 =====================

NAT chain

Chain PREROUTING (policy ACCEPT) num target prot opt source destination
1 REDIRECT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53 redir ports 53 2 REDIRECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 redir ports 53 3 prerouting_rule all -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Custom prerouting rule chain / 4 zone_lan_prerouting all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 / 5 zone_wan_prerouting all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 / 6 zone_wan_prerouting all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 / 7 zone_vpn_prerouting all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 / 8 openclash tcp -- 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT) num target prot opt source destination
1 REDIRECT tcp -- 0.0.0.0/0 198.18.0.0/16 redir ports 7892

Mangle chain

Chain PREROUTING (policy ACCEPT) num target prot opt source destination
Chain OUTPUT (policy ACCEPT) num target prot opt source destination

===================== 路由表状态 =====================

route -n

Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 192.168.1.1 0.0.0.0 UG 0 0 0 eth1 192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1 192.168.100.0 0.0.0.0 255.255.255.0 U 0 0 0 br-lan

ip route list

default via 192.168.1.1 dev eth1 proto static src 192.168.1.22 192.168.1.0/24 dev eth1 proto kernel scope link src 192.168.1.22 192.168.100.0/24 dev br-lan proto kernel scope link src 192.168.100.1

ip rule show

0: from all lookup local 32766: from all lookup main 32767: from all lookup default

===================== 端口占用状态 =====================

tcp 0 0 :::9090 ::: LISTEN 8263/clash tcp 0 0 :::7890 ::: LISTEN 8263/clash tcp 0 0 :::7891 ::: LISTEN 8263/clash tcp 0 0 :::7892 ::: LISTEN 8263/clash udp 0 0 127.0.0.1:7874 0.0.0.0: 8263/clash udp 0 0 :::7891 ::: 8263/clash udp 0 0 :::7892 :::* 8263/clash

===================== 测试本机DNS查询 =====================

Server: 127.0.0.1 Address: 127.0.0.1#53

Name: www.baidu.com Address 1: 198.18.0.10 *** Can't find www.baidu.com: No answer

===================== resolv.conf.auto =====================

Interface wan

nameserver 192.168.1.1

===================== 测试本机网络连接 =====================

===================== 测试本机网络下载 =====================

===================== 最近运行日志 =====================

time="2020-05-06T02:57:00Z" level=info msg="Start initial compatible provider AdBlock" time="2020-05-06T02:57:00Z" level=info msg="Start initial compatible provider Others" time="2020-05-06T02:57:00Z" level=info msg="Start initial compatible provider AsianTV" time="2020-05-06T02:57:00Z" level=info msg="Start initial compatible provider Auto - UrlTest" time="2020-05-06T02:57:00Z" level=info msg="Start initial compatible provider GlobalTV" time="2020-05-06T02:57:00Z" level=info msg="Start initial compatible provider Apple" time="2020-05-06T02:57:00Z" level=info msg="Start initial compatible provider Steam" time="2020-05-06T02:57:00Z" level=info msg="Start initial compatible provider Proxy" time="2020-05-06T02:57:00Z" level=info msg="Start initial compatible provider Domestic" time="2020-05-06T02:57:00Z" level=info msg="Start initial compatible provider Spotify" time="2020-05-06T02:57:00Z" level=info msg="Start initial compatible provider PayPal" time="2020-05-06T02:57:00Z" level=info msg="HTTP proxy listening at: :7890" time="2020-05-06T02:57:00Z" level=info msg="Redir proxy listening at: :7892" time="2020-05-06T02:57:00Z" level=info msg="RESTful API listening at: 0.0.0.0:9090" time="2020-05-06T02:57:00Z" level=info msg="DNS server listening at: 127.0.0.1:7874" time="2020-05-06T02:57:00Z" level=info msg="SOCKS proxy listening at: :7891" 2020-05-06 10:56:54 OpenClash Start Successful time="2020-05-06T02:57:14Z" level=info msg="[TCP] 192.168.100.215:57613 --> 47.99.141.188 match GeoIP using Domestic[DIRECT]" time="2020-05-06T02:57:14Z" level=info msg="[TCP] 192.168.100.215:57615 --> 47.99.141.188 match GeoIP using Domestic[DIRECT]" time="2020-05-06T02:57:20Z" level=info msg="[TCP] 192.168.100.215:63485 --> 198.18.0.5 match IPCIDR using REJECT" time="2020-05-06T02:57:20Z" level=info msg="[TCP] 192.168.100.215:63486 --> init.itunes.apple.com match DomainSuffix using Apple[DIRECT]" time="2020-05-06T02:57:22Z" level=info msg="[TCP] 192.168.100.215:57623 --> 101.89.38.96 match GeoIP using Domestic[DIRECT]" time="2020-05-06T02:57:24Z" level=info msg="[TCP] 192.168.100.215:63487 --> p54-keyvalueservice.icloud.com match DomainSuffix using Apple[DIRECT]" time="2020-05-06T02:57:24Z" level=info msg="[TCP] 192.168.100.215:57626 --> 47.99.141.188 match GeoIP using Domestic[DIRECT]" time="2020-05-06T02:57:24Z" level=info msg="[TCP] 192.168.100.215:63488 --> m.baidu.com match DomainSuffix using Domestic[DIRECT]" time="2020-05-06T02:57:24Z" level=info msg="[TCP] 192.168.100.215:63489 --> www.google.cn match DomainKeyword using Proxy[🇭🇰 香港 NTT 01]" time="2020-05-06T02:57:25Z" level=info msg="[TCP] 192.168.100.215:63490 --> www.google.cn match DomainKeyword using Proxy[🇭🇰 香港 NTT 01]" time="2020-05-06T02:57:26Z" level=info msg="[TCP] 192.168.100.215:57631 --> 123.151.79.122 match GeoIP using Domestic[DIRECT]" time="2020-05-06T02:57:27Z" level=info msg="[TCP] 192.168.100.215:63491 --> 17.248.161.9 match IPCIDR using Apple[DIRECT]" time="2020-05-06T02:57:28Z" level=info msg="[TCP] 192.168.100.215:57633 --> 123.151.71.114 match GeoIP using Domestic[DIRECT]"

miroda commented 4 years ago

image

miroda commented 4 years ago

结果还是不行

vernesong commented 4 years ago

clash正常了，但是你的路由自身要确保能上网。

miroda commented 4 years ago

image

vernesong commented 4 years ago

是确认你的路由器自身能够连上网，这里检查的是你电脑的情况。

miroda commented 4 years ago

image 果然是 wrt本身不能上网

miroda commented 4 years ago

可是连接软路由的其他设备都能上网

miroda commented 4 years ago

image

miroda commented 4 years ago

root@Openwrt:~# cat /etc/config/network

config interface 'loopback' option ifname 'lo' option proto 'static' option ipaddr '127.0.0.1' option netmask '255.0.0.0'

config interface 'lan' option type 'bridge' option ifname 'eth0 eht2 eth3' option proto 'static' option ipaddr '192.168.100.1' option netmask '255.255.255.0' option ip6assign '60' option mtu '1492'

config interface 'wan' option ifname 'eth1' option proto 'dhcp'

config interface 'wan6' option ifname 'eth3' option proto 'dhcpv6'

config route

config interface 'vpn0' option ifname 'tun0' option proto 'none'

vernesong commented 4 years ago

把lan的网关和dns填一下，填主路由的

miroda commented 4 years ago

我这边是软路由下面接入的普通路由器，你说的主路由是光猫吗，光猫现在是192.168.1.1，软路由现在的地址是 192.168.100.1，请问网关填多少

vernesong commented 4 years ago

谁分配dhcp填谁

miroda commented 4 years ago

192.168.1.1填了以后没有效果，192.168.100.1填了以后 不能上网

miroda commented 4 years ago

你这个插件 劫持dns，把clash关闭之后，openwrt路由器就能上网了，

PING openwrt.org (139.59.209.225): 56 data bytes 64 bytes from 139.59.209.225: seq=0 ttl=52 time=223.262 ms 64 bytes from 139.59.209.225: seq=1 ttl=52 time=223.322 ms 64 bytes from 139.59.209.225: seq=2 ttl=52 time=223.072 ms 64 bytes from 139.59.209.225: seq=4 ttl=52 time=223.106 ms

--- openwrt.org ping statistics --- 5 packets transmitted, 4 packets received, 20% packet loss round-trip min/avg/max = 223.072/223.190/223.322 ms

vernesong commented 4 years ago

你这个插件 劫持dns，把clash关闭之后，openwrt路由器就能上网了，

PING openwrt.org (139.59.209.225): 56 data bytes 64 bytes from 139.59.209.225: seq=0 ttl=52 time=223.262 ms 64 bytes from 139.59.209.225: seq=1 ttl=52 time=223.322 ms 64 bytes from 139.59.209.225: seq=2 ttl=52 time=223.072 ms 64 bytes from 139.59.209.225: seq=4 ttl=52 time=223.106 ms

--- openwrt.org ping statistics --- 5 packets transmitted, 4 packets received, 20% packet loss round-trip min/avg/max = 223.072/223.190/223.322 ms

那应该没问题了啊，你是不是还开了其他插件？防火墙里有条VPN的规则

eorendel commented 4 years ago

我也出现了同样的问题，现在也没解决

eorendel commented 4 years ago

换了个机场就正常了，这难道与机场有关？ 而且在fake-ip模式下，在路由器里ping网站是不通的，但客户端确实可以正常打开网页的。

iguoli commented 4 years ago

有解决的吗，我也遇到同样问题，电脑上开的Clash都可正常科学上网，在软路由里的OpenClash，显示配置都成功，就是不能科学上网。

ennnnny commented 4 years ago

同样问题，由于开启openclash之后，路由器内没法上网，在控制面板那能发现一条线路都连不了。不管是Redir-Host或是Fake-IP模式都不行

vernesong commented 4 years ago

一些机场的配置文件写的DNS端口可能在本地被占用了，你们发调试日志来提问题，一句话说完我也没办法解决

ennnnny commented 4 years ago

OpenClash 调试日志

生成时间: 2020-07-10 21:02:02 插件版本: v0.39.2-beta

===================== 系统信息 =====================

主机型号: Intel(R) Celeron(R) CPU J3455 @ 1.50GHz : 2 Core 2 Thread 固件版本: OpenWrt 19.07-SNAPSHOT r0-96489df LuCI版本: git-ba036b3-1 内核版本: 4.14.180 处理器架构: x86_64

此项在使用Tun模式时应为ACCEPT

防火墙转发: ACCEPT

此项有值时建议到网络-接口-lan的设置中禁用IPV6的DHCP

IPV6-DHCP:

此项结果应仅有配置文件的DNS监听地址

Dnsmasq转发设置: 127.0.0.1#7874

===================== 依赖检查 =====================

dnsmasq-full: 已安装 coreutils: 已安装 coreutils-nohup: 已安装 bash: 已安装 curl: 已安装 jsonfilter: 已安装 ca-certificates: 已安装 ipset: 已安装 ip-full: 已安装 iptables-mod-tproxy: 已安装 kmod-tun(TUN模式): 已安装 luci-compat(Luci-19.07): 已安装

===================== 内核检查 =====================

运行状态: 运行中 已选择的架构: linux-amd64

下方无法显示内核版本号时请确认您的内核版本是否正确或者有无权限

Tun内核版本: Tun内核文件: 不存在 Tun内核运行权限: 否

Game内核版本: Game内核文件: 不存在 Game内核运行权限: 否

Dev内核版本: premium-29-g99b34e8 Dev内核文件: 存在 Dev内核运行权限: 正常

===================== 插件设置 =====================

当前配置文件: /etc/openclash/config/paomian.yaml 运行模式: redir-host 默认代理模式: Rule UDP流量转发: 启用 DNS劫持: 启用 自定义DNS: 停用 IPV6-DNS解析: 停用 禁用Dnsmasq缓存: 停用 自定义规则: 停用 仅允许内网: 停用 仅代理命中规则流量: 停用

启动异常时建议关闭此项后重试

保留配置: 停用 第三方规则: 停用

===================== 配置文件 =====================

port: 7890 socks-port: 7891 allow-lan: true bind-address: "*" ipv6: false mode: Rule log-level: silent external-controller: 0.0.0.0:9090 redir-port: 7892 secret: "123456" external-ui: "/usr/share/openclash/dashboard" hosts:

Custom HOSTS

experimental hosts, support wildcard (e.g. .clash.dev Even .foo.*.example.com)

static domain has a higher priority than wildcard domain (foo.example.com > *.example.com)

NOTE: hosts don't work with fake-ip

'*.clash.dev': 127.0.0.1

'alpha.clash.dev': '::1'

Custom HOSTS END

dns: enable: true ipv6: false enhanced-mode: redir-host listen: 127.0.0.1:7874 nameserver:

===================== 防火墙设置 =====================

NAT chain

Chain PREROUTING (policy ACCEPT) num target prot opt source destination
1 REDIRECT tcp -- 0.0.0.0/0 8.8.4.4 redir ports 7892 2 REDIRECT tcp -- 0.0.0.0/0 8.8.8.8 redir ports 7892 3 prerouting_rule all -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Custom prerouting rule chain / 4 zone_lan_prerouting all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 / 5 zone_wan_prerouting all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 / 6 openclash tcp -- 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT) num target prot opt source destination

Mangle chain

Chain PREROUTING (policy ACCEPT) num target prot opt source destination
1 openclash udp -- 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT) num target prot opt source destination

===================== 路由表状态 =====================

route -n

Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 10.137.32.1 0.0.0.0 UG 0 0 0 pppoe-wan 10.137.32.1 0.0.0.0 255.255.255.255 UH 0 0 0 pppoe-wan 192.168.18.0 0.0.0.0 255.255.255.0 U 0 0 0 br-lan

ip route list

default via 10.137.32.1 dev pppoe-wan proto static 10.137.32.1 dev pppoe-wan proto kernel scope link src 10.137.46.112 192.168.18.0/24 dev br-lan proto kernel scope link src 192.168.18.1

ip rule show

0: from all lookup local 32765: from all fwmark 0x162 lookup 354 32766: from all lookup main 32767: from all lookup default

===================== 端口占用状态 =====================

tcp 0 0 0.0.0.0:9090 0.0.0.0: LISTEN 12405/clash tcp 0 0 0.0.0.0:7890 0.0.0.0: LISTEN 12405/clash tcp 0 0 0.0.0.0:7891 0.0.0.0: LISTEN 12405/clash tcp 0 0 0.0.0.0:7892 0.0.0.0: LISTEN 12405/clash udp 0 0 127.0.0.1:7874 0.0.0.0: 12405/clash udp 0 0 0.0.0.0:7891 0.0.0.0: 12405/clash

===================== 测试本机DNS查询 =====================

Server: 127.0.0.1 Address: 127.0.0.1#53

Name: www.baidu.com www.baidu.com canonical name = www.a.shifen.com Name: www.a.shifen.com Address 1: 163.177.151.110 Address 2: 163.177.151.109

===================== resolv.conf.auto =====================

Interface wan

nameserver 116.116.116.116 nameserver 221.5.88.88

===================== 测试本机网络连接 =====================

HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: private, no-cache, no-store, proxy-revalidate, no-transform Connection: keep-alive Content-Length: 277 Content-Type: text/html Date: Fri, 10 Jul 2020 13:02:03 GMT Etag: "575e1f72-115" Last-Modified: Mon, 13 Jun 2016 02:50:26 GMT Pragma: no-cache Server: bfe/1.0.8.18

===================== 测试本机网络下载 =====================

HTTP/1.1 200 Connection established

===================== 最近运行日志 =====================

2020-07-10 20:58:14 Config 【paomian】 Update Successful time="2020-07-10T20:58:43+08:00" level=info msg="Start initial compatible provider 🐟 漏网之鱼" time="2020-07-10T20:58:43+08:00" level=info msg="Start initial compatible provider 🛑 全球拦截" time="2020-07-10T20:58:43+08:00" level=info msg="Start initial compatible provider 🌍 国外媒体" time="2020-07-10T20:58:43+08:00" level=info msg="Start initial compatible provider 📢 谷歌FCM" time="2020-07-10T20:58:43+08:00" level=info msg="Start initial compatible provider 🍎 苹果服务" time="2020-07-10T20:58:43+08:00" level=info msg="Start initial compatible provider ♻️ 自动选择" time="2020-07-10T20:58:43+08:00" level=info msg="Start initial compatible provider 🚀 节点选择" time="2020-07-10T20:58:43+08:00" level=info msg="Start initial compatible provider 🎯 全球直连" time="2020-07-10T20:58:43+08:00" level=info msg="Start initial compatible provider 🍃 应用净化" time="2020-07-10T20:58:43+08:00" level=info msg="Start initial compatible provider Ⓜ️ 微软服务" time="2020-07-10T20:58:43+08:00" level=info msg="Start initial compatible provider 📲 电报信息" 2020-07-10 20:58:36 OpenClash Start Successful

image image

软路由编译地址为：https://github.com/ennnnny/Actions-OpenWrt 配置文件用的是：https://acl4ssr.netlify.app/

vernesong commented 4 years ago

221.5.88.88

路由器wan口指定个114的DNS，你节点的域名可能解析失败了所以连不上

ennnnny commented 4 years ago

image 指定了，但还是一样的情况

y934007090 commented 4 years ago

image

y934007090 commented 4 years ago

我也上不去- -!

vernesong commented 4 years ago

电脑cmd nslookup www.baidu.com

q736178471 commented 3 years ago

电脑cmd nslookup www.baidu.com

电脑可以解析也可以请求 就是路由器本身 只要开了openclash就没法访问地址了 不仅仅是ping curl 也会返回连接被拒绝 之前开了问题但是您似乎没有回答也没有后续的消息了

同样的问题 请问解决了没有 插件都显示正常

q736178471 commented 3 years ago

开了clash后路由器dns可以解析出地址，但是ping不通百度

y934007090 commented 3 years ago

放弃了，早没弄了

------------------ 原始邮件 ------------------ 发件人: "vernesong/OpenClash" <notifications@github.com>; 发送时间: 2020年11月20日(星期五) 上午10:11 收件人: "vernesong/OpenClash"<OpenClash@noreply.github.com>; 抄送: "‪"<934007090@qq.com>;"Comment"<comment@noreply.github.com>; 主题: Re: [vernesong/OpenClash] 无法科学上网 (#414)

电脑cmd nslookup www.baidu.com

电脑可以解析也可以请求 就是路由器本身 只要开了openclash就没法访问地址了 不仅仅是ping curl 也会返回连接被拒绝 之前开了问题但是您似乎没有回答也没有后续的消息了

同样的问题 请问解决了没有 插件都显示正常

— You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

potterlee0574 commented 3 years ago

同样的问题，换个机场就好了

Giatunli commented 3 years ago

通用的问题，各种方式试了好几次 实在没办法了，弃用了。

jswing0818 commented 3 years ago

我的路由器也是同样问题。一开梅林clash就用不了，路由器是官改华硕固件。

tonnyxiang commented 3 years ago

大神，请教无语问题：路由器梅林固件用科学订阅地址永远失败（国外打叉），而同样的订阅地址用在V2RAYN客户端是正常的。请问是什么原因？路由器AX86梅林固件386.2.6最新版，科学插件shadowsocks_1.9.5

vernesong commented 3 years ago

大神，请教无语问题：路由器梅林固件用科学订阅地址永远失败（国外打叉），而同样的订阅地址用在V2RAYN客户端是正常的。请问是什么原因？路由器AX86梅林固件386.2.6最新版，科学插件shadowsocks_1.9.5

加密方式可能不兼容

zq5004800 commented 2 years ago

我用国内vpn实现切换个国内ip，安卓机无法上网，这个安装取消配置还是无法连接

v2cn commented 1 year ago

我今天也突然出现这个情况，之前使用一直正常。现在只要开clash，运行状态显youtube，github连接正常的，但所有连接的设备都不能上网，路由器诊断ping openwrt.org也是不通的。关掉clash就可以上网了。 应该是前两天我捣鼓ADH的问题，但现在ADH直接停用了，故障依旧。

后续：问题解决了 发现竟然是机场订阅地址出了问题，建议大家试试更换机场，或者单独转换一条线路地址试试。 我用订阅链接转换地址不行，单独一条线路转换地址就可以了。

hotkinkin commented 1 year ago

我今天也突然出现这个情况，之前使用一直正常。现在只要开clash，运行状态显youtube，github连接正常的，但所有连接的设备都不能上网，路由器诊断ping openwrt.org也是不通的。关掉clash就可以上网了。 应该是前两天我捣鼓ADH的问题，但现在ADH直接停用了，故障依旧。

后续：问题解决了 发现竟然是机场订阅地址出了问题，建议大家试试更换机场，或者单独转换一条线路地址试试。 我用订阅链接转换地址不行，单独一条线路转换地址就可以了。

真是这个原因，太意想不到了，搞了两天一直以为是dns的问题，谁会想到是机场问题。感谢感谢~

zmx9712 commented 1 year ago

我今天也突然出现这个情况，之前使用一直正常。现在只要开clash，运行状态显youtube，github连接正常的，但所有连接的设备都不能上网，路由器诊断ping openwrt.org也是不通的。关掉clash就可以上网了。 应该是前两天我捣鼓ADH的问题，但现在ADH直接停用了，故障依旧。 后续：问题解决了 发现竟然是机场订阅地址出了问题，建议大家试试更换机场，或者单独转换一条线路地址试试。 我用订阅链接转换地址不行，单独一条线路转换地址就可以了。

真是这个原因，太意想不到了，搞了两天一直以为是dns的问题，谁会想到是机场问题。感谢感谢~

我换了机场也还是上不了