search

vernesong / OpenClash

A Clash Client For OpenWrt
MIT License
17.6k stars 3.19k forks source link

国内部分ip直连失败 #767

Closed gakkiss closed 4 years ago

gakkiss commented 4 years ago

openclash版本：0.40.4 OpenWrt版本：OpenWrt R20.5.20 / LuCI Master (git-20.117.60969-420c61a) 设备：斐讯n1 客户端设置为 网关 DNS均为n1 IP地址 问题描述：部分国内IP连接超时，表现为微信显示无法连接服务器、支付宝进入蚂蚁森林超时和不能播放QQ音乐等。 在把国内节点策略选为代理时，则正常。 部分日志如下： time="2020-09-19T07:39:43+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 113.96.202.101:80: i/o timeout" time="2020-09-19T07:39:43+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 14.215.158.119:80: i/o timeout" time="2020-09-19T07:39:43+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 183.3.224.144:80: i/o timeout"

vernesong commented 4 years ago

顾名思义就是连接超时了，可能是cdn分配的问题，你可以换一下nameserver的几个dns #766

gakkiss commented 4 years ago

不行喔 去掉了 rixcloud的doh了 DNS配置如图 Screenshot_20200919_235403_com android chrome Screenshot_20200919_235508_com android chrome time="2020-09-19T23:56:24+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 175.6.44.31:8080: i/o timeout" time="2020-09-19T23:56:24+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 175.6.44.177:80: i/o timeout" time="2020-09-19T23:56:24+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 175.6.44.177:443: i/o timeout" time="2020-09-19T23:56:24+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 183.3.224.141:80: i/o timeout" time="2020-09-19T23:56:24+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 175.6.44.177:8080: i/o timeout" time="2020-09-19T23:56:26+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 14.215.158.119:8080: i/o timeout" time="2020-09-19T23:56:29+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 59.36.89.180:80: i/o timeout"

gakkiss commented 4 years ago

@vernesong 大佬能帮忙看看么 这个问题困扰好久了😂😂😂😂

vernesong commented 4 years ago

换dns没用？clash只取查询请求发出后返回最快的结果而不是连接最快的结果

gakkiss commented 4 years ago

换dns没用？clash只取查询请求发出后返回最快的结果而不是连接最快的结果

没用😂 换了电信拨号自动设置的DNS，也不行😂

gakkiss commented 4 years ago

@vernesong 调试日志如下 OpenClash 调试日志

生成时间: 2020-09-21 10:15:46 插件版本: v0.40.4-beta

===================== 系统信息 =====================

主机型号: Phicomm N1 固件版本: OpenWrt SNAPSHOT r2583-cad7fb2a LuCI版本: git-20.141.34051-f750b5f-1 内核版本: 5.4.46-flippy-37+o 处理器架构: aarch64_generic

此项在使用Tun模式时应为ACCEPT

防火墙转发: ACCEPT

此项有值时建议到网络-接口-lan的设置中禁用IPV6的DHCP

IPV6-DHCP:

此项结果应仅有配置文件的DNS监听地址

Dnsmasq转发设置: 127.0.0.1#5450

===================== 依赖检查 =====================

dnsmasq-full: 已安装 coreutils: 已安装 coreutils-nohup: 已安装 bash: 已安装 curl: 已安装 jsonfilter: 已安装 ca-certificates: 已安装 ipset: 已安装 ip-full: 已安装 iptables-mod-tproxy: 已安装 kmod-tun(TUN模式): 已安装 luci-compat(Luci-19.07): 未安装

===================== 内核检查 =====================

运行状态: 运行中 已选择的架构: linux-armv8

下方无法显示内核版本号时请确认您的内核版本是否正确或者有无权限

Tun内核版本: 2020.09.13.g3dc8802 Tun内核文件: 存在 Tun内核运行权限: 正常

Game内核版本: v0.17.0-194-gbe86985 Game内核文件: 存在 Game内核运行权限: 正常

Dev内核版本: v1.1.0-13-g314ce1c Dev内核文件: 存在 Dev内核运行权限: 正常

===================== 插件设置 =====================

当前配置文件: /etc/openclash/config/dler cloud.yaml 运行模式: fake-ip-mix 默认代理模式: script UDP流量转发: 停用 DNS劫持: 启用 自定义DNS: 启用 IPV6-DNS解析: 停用 禁用Dnsmasq缓存: 启用 自定义规则: 停用 仅允许内网: 停用 仅代理命中规则流量: 停用 绕过中国大陆IP: 停用

启动异常时建议关闭此项后重试

保留配置: 停用 第三方规则: 停用

===================== 配置文件 =====================

port: 7890 socks-port: 7891 redir-port: 7892 allow-lan: true bind-address: "*" ipv6: false mode: script log-level: debug external-controller: 0.0.0.0:9090 experimental: ignore-resolve-fail: true secret: "123456" external-ui: "/usr/share/openclash/dashboard" tun: enable: true stack: system dns-hijack:

===================== 防火墙设置 =====================

NAT chain

Chain PREROUTING (policy ACCEPT) num target prot opt source destination
1 ACCEPT tcp -- 0.0.0.0/0 8.8.4.4
2 ACCEPT tcp -- 0.0.0.0/0 8.8.8.8
3 REDIRECT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53 redir ports 53 4 REDIRECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 redir ports 53 5 prerouting_rule all -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Custom prerouting rule chain / 6 zone_lan_prerouting all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 / 7 zone_vpn_prerouting all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 / 8 openclash tcp -- 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT) num target prot opt source destination
1 openclash_output tcp -- 0.0.0.0/0 0.0.0.0/0

Mangle chain

Chain PREROUTING (policy ACCEPT) num target prot opt source destination
1 openclash udp -- 0.0.0.0/0 0.0.0.0/0
2 openclash_dns_hijack tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 Chain OUTPUT (policy ACCEPT) num target prot opt source destination

===================== 路由表状态 =====================

route -n

Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 192.168.3.1 0.0.0.0 UG 0 0 0 br-lan 172.31.0.0 0.0.0.0 255.255.255.0 U 0 0 0 docker0 192.168.3.0 0.0.0.0 255.255.255.0 U 0 0 0 br-lan 198.18.0.0 0.0.0.0 255.255.0.0 U 0 0 0 utun

ip route list

default via 192.168.3.1 dev br-lan proto static 172.31.0.0/24 dev docker0 proto kernel scope link src 172.31.0.1 linkdown 192.168.3.0/24 dev br-lan proto kernel scope link src 192.168.3.88 198.18.0.0/16 dev utun proto kernel scope link src 198.18.0.1

ip rule show

0: from all lookup local 32765: from all fwmark 0x162 lookup 354 32766: from all lookup main 32767: from all lookup default

===================== Tun设备状态 =====================

utun: tun pi filter

===================== 端口占用状态 =====================

tcp 0 0 198.18.0.1:7777 0.0.0.0: LISTEN 8349/clash tcp 0 0 :::7890 ::: LISTEN 8349/clash tcp 0 0 :::7891 ::: LISTEN 8349/clash tcp 0 0 :::7892 ::: LISTEN 8349/clash tcp 0 0 :::9090 ::: LISTEN 8349/clash udp 0 0 127.0.0.1:5450 0.0.0.0: 8349/clash udp 0 0 198.18.0.1:7777 0.0.0.0: 8349/clash udp 0 0 :::39243 ::: 8349/clash udp 0 0 :::7891 ::: 8349/clash udp 0 0 :::7892 ::: 8349/clash udp 0 0 :::57097 ::: 8349/clash udp 0 0 :::42135 ::: 8349/clash

===================== 测试本机DNS查询 =====================

Server: 127.0.0.1 Address: 127.0.0.1#53

Name: www.baidu.com Address 1: 198.18.0.7 *** Can't find www.baidu.com: No answer

===================== resolv.conf.auto =====================

Interface lan

nameserver 223.5.5.5

===================== 测试本机网络连接 =====================

HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: private, no-cache, no-store, proxy-revalidate, no-transform Connection: keep-alive Content-Length: 277 Content-Type: text/html Date: Mon, 21 Sep 2020 02:15:48 GMT Etag: "575e1f72-115" Last-Modified: Mon, 13 Jun 2016 02:50:26 GMT Pragma: no-cache Server: bfe/1.0.8.18

===================== 测试本机网络下载 =====================

HTTP/1.1 200 Connection established

HTTP/1.1 200 OK Connection: keep-alive Content-Length: 78 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "f33f76b7c2036f06901d0623c3f96a4fab0edf76f9d8de884dadbec1f5d4750f" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block Via: 1.1 varnish (Varnish/6.0) X-GitHub-Request-Id: 4294:3EFD:108C6EF:12FB20C:5F680571 Accept-Ranges: bytes Date: Mon, 21 Sep 2020 02:15:48 GMT Via: 1.1 varnish X-Served-By: cache-hkg17930-HKG X-Cache: HIT, HIT X-Cache-Hits: 1, 4 X-Timer: S1600654548.403027,VS0,VE0 Vary: Authorization,Accept-Encoding Access-Control-Allow-Origin: * X-Fastly-Request-ID: 9cf83b28c3f32275a12558893d5581a1a2eafd00 Expires: Mon, 21 Sep 2020 02:20:48 GMT Source-Age: 221

===================== 最近运行日志 =====================

2020-09-21 10:15:38 Watchdog: Size Limit, Clean Up All Log Records. time="2020-09-21T10:15:40+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 113.96.202.106:443: i/o timeout" time="2020-09-21T10:15:40+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 163.177.81.141:8080: i/o timeout" time="2020-09-21T10:15:41+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 114.115.188.133:10000: i/o timeout" time="2020-09-21T10:15:44+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 120.241.21.110:8080: i/o timeout" time="2020-09-21T10:15:46+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 114.115.188.133:10000: i/o timeout" time="2020-09-21T10:15:48+08:00" level=info msg="[TCP] 198.18.0.1:49488 --> www.baidu.com using 🇨🇳Domestic by Script" time="2020-09-21T10:15:48+08:00" level=info msg="[TCP] 192.168.3.88:34898 --> raw.githubusercontent.com using 🚀Proxy by Script"

gakkiss commented 4 years ago

@vernesong 调试日志如下 OpenClash 调试日志

生成时间: 2020-09-21 10:15:46 插件版本: v0.40.4-beta

===================== 系统信息 =====================

主机型号: Phicomm N1 固件版本: OpenWrt SNAPSHOT r2583-cad7fb2a LuCI版本: git-20.141.34051-f750b5f-1 内核版本: 5.4.46-flippy-37+o 处理器架构: aarch64_generic

此项在使用Tun模式时应为ACCEPT

防火墙转发: ACCEPT

此项有值时建议到网络-接口-lan的设置中禁用IPV6的DHCP

IPV6-DHCP:

此项结果应仅有配置文件的DNS监听地址

Dnsmasq转发设置: 127.0.0.1#5450

===================== 依赖检查 =====================

dnsmasq-full: 已安装 coreutils: 已安装 coreutils-nohup: 已安装 bash: 已安装 curl: 已安装 jsonfilter: 已安装 ca-certificates: 已安装 ipset: 已安装 ip-full: 已安装 iptables-mod-tproxy: 已安装 kmod-tun(TUN模式): 已安装 luci-compat(Luci-19.07): 未安装

===================== 内核检查 =====================

运行状态: 运行中 已选择的架构: linux-armv8

下方无法显示内核版本号时请确认您的内核版本是否正确或者有无权限

Tun内核版本: 2020.09.13.g3dc8802 Tun内核文件: 存在 Tun内核运行权限: 正常

Game内核版本: v0.17.0-194-gbe86985 Game内核文件: 存在 Game内核运行权限: 正常

Dev内核版本: v1.1.0-13-g314ce1c Dev内核文件: 存在 Dev内核运行权限: 正常

===================== 插件设置 =====================

当前配置文件: /etc/openclash/config/dler cloud.yaml 运行模式: fake-ip-mix 默认代理模式: script UDP流量转发: 停用 DNS劫持: 启用 自定义DNS: 启用 IPV6-DNS解析: 停用 禁用Dnsmasq缓存: 启用 自定义规则: 停用 仅允许内网: 停用 仅代理命中规则流量: 停用 绕过中国大陆IP: 停用

启动异常时建议关闭此项后重试

保留配置: 停用 第三方规则: 停用

===================== 配置文件 =====================

port: 7890 socks-port: 7891 redir-port: 7892 allow-lan: true bind-address: "*" ipv6: false mode: script log-level: debug external-controller: 0.0.0.0:9090 experimental: ignore-resolve-fail: true secret: "123456" external-ui: "/usr/share/openclash/dashboard" tun: enable: true stack: system dns-hijack:

  • tcp://8.8.8.8:53
  • tcp://8.8.4.4:53 dns: use-hosts: true enable: true ipv6: false listen: 127.0.0.1:5450 enhanced-mode: fake-ip fake-ip-range: 198.18.0.1/16 fake-ip-filter:

    Custom fake-ip-filter

  • '*.lan'
  • 'time.windows.com'
  • 'time.nist.gov'
  • 'time.apple.com'
  • 'time.asia.apple.com'
  • '*.ntp.org.cn'
  • '*.openwrt.pool.ntp.org'
  • 'time1.cloud.tencent.com'
  • 'time.ustc.edu.cn'
  • 'pool.ntp.org'
  • 'ntp.ubuntu.com'
  • 'ntp.aliyun.com'
  • 'ntp1.aliyun.com'
  • 'ntp2.aliyun.com'
  • 'ntp3.aliyun.com'
  • 'ntp4.aliyun.com'
  • 'ntp5.aliyun.com'
  • 'ntp6.aliyun.com'
  • 'ntp7.aliyun.com'
  • 'time1.aliyun.com'
  • 'time2.aliyun.com'
  • 'time3.aliyun.com'
  • 'time4.aliyun.com'
  • 'time5.aliyun.com'
  • 'time6.aliyun.com'
  • 'time7.aliyun.com'
  • '*.time.edu.cn'
  • 'time1.apple.com'
  • 'time2.apple.com'
  • 'time3.apple.com'
  • 'time4.apple.com'
  • 'time5.apple.com'
  • 'time6.apple.com'
  • 'time7.apple.com'
  • 'time1.google.com'
  • 'time2.google.com'
  • 'time3.google.com'
  • 'time4.google.com'
  • 'music.163.com'
  • '*.music.163.com'
  • '*.126.net'
  • 'musicapi.taihe.com'
  • 'music.taihe.com'
  • 'songsearch.kugou.com'
  • 'trackercdn.kugou.com'
  • '*.kuwo.cn'
  • 'api-jooxtt.sanook.com'
  • 'api.joox.com'
  • 'joox.com'
  • 'y.qq.com'
  • '*.y.qq.com'
  • 'streamoc.music.tc.qq.com'
  • 'mobileoc.music.tc.qq.com'
  • 'isure.stream.qqmusic.qq.com'
  • 'dl.stream.qqmusic.qq.com'
  • 'aqqmusic.tc.qq.com'
  • 'amobile.music.tc.qq.com'
  • '*.xiami.com'
  • '*.music.migu.cn'
  • 'music.migu.cn'
  • '*.msftconnecttest.com'
  • '*.msftncsi.com'
  • 'localhost.ptlogin2.qq.com'
  • '..*.srv.nintendo.net'
  • '..stun.playstation.net'
  • 'xbox...microsoft.com'
  • '..xboxlive.com'

    Custom fake-ip-filter END

    Custom DNS

    nameserver:

  • 119.29.29.29
  • 119.28.28.28
  • 223.5.5.5
  • 1.1.1.1
  • 1.2.4.8
  • https://1.1.1.1/dns-query
  • tls://dns.rubyfish.cn:853
  • 202.96.128.166 fallback:
  • tls://dns.google:853
  • tls://dns.adguard.com:853

  • tls://1.1.1.1:853 fallback-filter: geoip: true ipcidr:

    • 0.0.0.0/8
    • 10.0.0.0/8
    • 100.64.0.0/10
    • 127.0.0.0/8
    • 169.254.0.0/16
    • 172.16.0.0/12
    • 192.0.0.0/24
    • 192.0.2.0/24
    • 192.88.99.0/24
    • 192.168.0.0/16
    • 198.18.0.0/15
    • 198.51.100.0/24
    • 203.0.113.0/24
    • 224.0.0.0/4
    • 240.0.0.0/4
    • 255.255.255.255/32

===================== 防火墙设置 =====================

NAT chain

Chain PREROUTING (policy ACCEPT) num target prot opt source destination 1 ACCEPT tcp -- 0.0.0.0/0 8.8.4.4 2 ACCEPT tcp -- 0.0.0.0/0 8.8.8.8 3 REDIRECT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53 redir ports 53 4 REDIRECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 redir ports 53 5 preroutingrule all -- 0.0.0.0/0 0.0.0.0/0 /* !fw3: Custom prerouting rule chain / 6 zone_lanprerouting all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 _/ 7 zone_vpnprerouting all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 */ 8 openclash tcp -- 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy ACCEPT) num target prot opt source destination 1 openclash_output tcp -- 0.0.0.0/0 0.0.0.0/0

Mangle chain

Chain PREROUTING (policy ACCEPT) num target prot opt source destination 1 openclash udp -- 0.0.0.0/0 0.0.0.0/0 2 openclash_dns_hijack tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 Chain OUTPUT (policy ACCEPT) num target prot opt source destination

===================== 路由表状态 =====================

route -n

Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 192.168.3.1 0.0.0.0 UG 0 0 0 br-lan 172.31.0.0 0.0.0.0 255.255.255.0 U 0 0 0 docker0 192.168.3.0 0.0.0.0 255.255.255.0 U 0 0 0 br-lan 198.18.0.0 0.0.0.0 255.255.0.0 U 0 0 0 utun

ip route list

default via 192.168.3.1 dev br-lan proto static 172.31.0.0/24 dev docker0 proto kernel scope link src 172.31.0.1 linkdown 192.168.3.0/24 dev br-lan proto kernel scope link src 192.168.3.88 198.18.0.0/16 dev utun proto kernel scope link src 198.18.0.1

ip rule show

0: from all lookup local 32765: from all fwmark 0x162 lookup 354 32766: from all lookup main 32767: from all lookup default

===================== Tun设备状态 =====================

utun: tun pi filter

===================== 端口占用状态 =====================

tcp 0 0 198.18.0.1:7777 0.0.0.0: LISTEN 8349/clash tcp 0 0 :::7890 ::: LISTEN 8349/clash tcp 0 0 :::7891 ::: LISTEN 8349/clash tcp 0 0 :::7892 ::: LISTEN 8349/clash tcp 0 0 :::9090 ::: LISTEN 8349/clash udp 0 0 127.0.0.1:5450 0.0.0.0: 8349/clash udp 0 0 198.18.0.1:7777 0.0.0.0: 8349/clash udp 0 0 :::39243 ::: 8349/clash udp 0 0 :::7891 ::: 8349/clash udp 0 0 :::7892 ::: 8349/clash udp 0 0 :::57097 ::: 8349/clash udp 0 0 :::42135 ::: 8349/clash

===================== 测试本机DNS查询 =====================

Server: 127.0.0.1 Address: 127.0.0.1#53

Name: www.baidu.com Address 1: 198.18.0.7 *** Can't find www.baidu.com: No answer

===================== resolv.conf.auto =====================

Interface lan

nameserver 223.5.5.5

===================== 测试本机网络连接 =====================

HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: private, no-cache, no-store, proxy-revalidate, no-transform Connection: keep-alive Content-Length: 277 Content-Type: text/html Date: Mon, 21 Sep 2020 02:15:48 GMT Etag: "575e1f72-115" Last-Modified: Mon, 13 Jun 2016 02:50:26 GMT Pragma: no-cache Server: bfe/1.0.8.18

===================== 测试本机网络下载 =====================

HTTP/1.1 200 Connection established

HTTP/1.1 200 OK Connection: keep-alive Content-Length: 78 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "f33f76b7c2036f06901d0623c3f96a4fab0edf76f9d8de884dadbec1f5d4750f" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block Via: 1.1 varnish (Varnish/6.0) X-GitHub-Request-Id: 4294:3EFD:108C6EF:12FB20C:5F680571 Accept-Ranges: bytes Date: Mon, 21 Sep 2020 02:15:48 GMT Via: 1.1 varnish X-Served-By: cache-hkg17930-HKG X-Cache: HIT, HIT X-Cache-Hits: 1, 4 X-Timer: S1600654548.403027,VS0,VE0 Vary: Authorization,Accept-Encoding Access-Control-Allow-Origin: * X-Fastly-Request-ID: 9cf83b28c3f32275a12558893d5581a1a2eafd00 Expires: Mon, 21 Sep 2020 02:20:48 GMT Source-Age: 221

===================== 最近运行日志 =====================

2020-09-21 10:15:38 Watchdog: Size Limit, Clean Up All Log Records. time="2020-09-21T10:15:40+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 113.96.202.106:443: i/o timeout" time="2020-09-21T10:15:40+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 163.177.81.141:8080: i/o timeout" time="2020-09-21T10:15:41+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 114.115.188.133:10000: i/o timeout" time="2020-09-21T10:15:44+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 120.241.21.110:8080: i/o timeout" time="2020-09-21T10:15:46+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 114.115.188.133:10000: i/o timeout" time="2020-09-21T10:15:48+08:00" level=info msg="[TCP] 198.18.0.1:49488 --> www.baidu.com using 🇨🇳Domestic by Script" time="2020-09-21T10:15:48+08:00" level=info msg="[TCP] 192.168.3.88:34898 --> raw.githubusercontent.com using 🚀Proxy by Script"

安装 luci-compat后 调试日志： OpenClash 调试日志

生成时间: 2020-09-21 11:13:48 插件版本: v0.40.4-beta

===================== 系统信息 =====================

主机型号: Phicomm N1 固件版本: OpenWrt SNAPSHOT r2583-cad7fb2a LuCI版本: git-20.141.34051-f750b5f-1 内核版本: 5.4.46-flippy-37+o 处理器架构: aarch64_generic

此项在使用Tun模式时应为ACCEPT

防火墙转发: ACCEPT

此项有值时建议到网络-接口-lan的设置中禁用IPV6的DHCP

IPV6-DHCP:

此项结果应仅有配置文件的DNS监听地址

Dnsmasq转发设置: 127.0.0.1#5450

===================== 依赖检查 =====================

dnsmasq-full: 已安装 coreutils: 已安装 coreutils-nohup: 已安装 bash: 已安装 curl: 已安装 jsonfilter: 已安装 ca-certificates: 已安装 ipset: 已安装 ip-full: 已安装 iptables-mod-tproxy: 已安装 kmod-tun(TUN模式): 已安装 luci-compat(Luci-19.07): 已安装

===================== 内核检查 =====================

运行状态: 运行中 已选择的架构: linux-armv8

下方无法显示内核版本号时请确认您的内核版本是否正确或者有无权限

Tun内核版本: 2020.09.13.g3dc8802 Tun内核文件: 存在 Tun内核运行权限: 正常

Game内核版本: v0.17.0-194-gbe86985 Game内核文件: 存在 Game内核运行权限: 正常

Dev内核版本: v1.1.0-13-g314ce1c Dev内核文件: 存在 Dev内核运行权限: 正常

===================== 插件设置 =====================

当前配置文件: /etc/openclash/config/dler cloud.yaml 运行模式: fake-ip-mix 默认代理模式: script UDP流量转发: 停用 DNS劫持: 启用 自定义DNS: 启用 IPV6-DNS解析: 停用 禁用Dnsmasq缓存: 启用 自定义规则: 停用 仅允许内网: 停用 仅代理命中规则流量: 停用 绕过中国大陆IP: 停用

启动异常时建议关闭此项后重试

保留配置: 停用 第三方规则: 停用

===================== 配置文件 =====================

port: 7890 socks-port: 7891 redir-port: 7892 allow-lan: true bind-address: "*" ipv6: false mode: script log-level: debug external-controller: 0.0.0.0:9090 experimental: ignore-resolve-fail: true secret: "123456" external-ui: "/usr/share/openclash/dashboard" tun: enable: true stack: system dns-hijack:

===================== 防火墙设置 =====================

NAT chain

Chain PREROUTING (policy ACCEPT) num target prot opt source destination
1 ACCEPT tcp -- 0.0.0.0/0 8.8.4.4
2 ACCEPT tcp -- 0.0.0.0/0 8.8.8.8
3 REDIRECT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53 redir ports 53 4 REDIRECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 redir ports 53 5 prerouting_rule all -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Custom prerouting rule chain / 6 zone_lan_prerouting all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 / 7 zone_vpn_prerouting all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 / 8 openclash tcp -- 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT) num target prot opt source destination
1 openclash_output tcp -- 0.0.0.0/0 0.0.0.0/0

Mangle chain

Chain PREROUTING (policy ACCEPT) num target prot opt source destination
1 openclash udp -- 0.0.0.0/0 0.0.0.0/0
2 openclash_dns_hijack tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 Chain OUTPUT (policy ACCEPT) num target prot opt source destination

===================== 路由表状态 =====================

route -n

Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 192.168.3.1 0.0.0.0 UG 0 0 0 br-lan 172.31.0.0 0.0.0.0 255.255.255.0 U 0 0 0 docker0 192.168.3.0 0.0.0.0 255.255.255.0 U 0 0 0 br-lan 198.18.0.0 0.0.0.0 255.255.0.0 U 0 0 0 utun

ip route list

default via 192.168.3.1 dev br-lan proto static 172.31.0.0/24 dev docker0 proto kernel scope link src 172.31.0.1 linkdown 192.168.3.0/24 dev br-lan proto kernel scope link src 192.168.3.88 198.18.0.0/16 dev utun proto kernel scope link src 198.18.0.1

ip rule show

0: from all lookup local 32765: from all fwmark 0x162 lookup 354 32766: from all lookup main 32767: from all lookup default

===================== Tun设备状态 =====================

utun: tun pi filter

===================== 端口占用状态 =====================

tcp 0 0 198.18.0.1:7777 0.0.0.0: LISTEN 26228/clash tcp 0 0 :::7890 ::: LISTEN 26228/clash tcp 0 0 :::7891 ::: LISTEN 26228/clash tcp 0 0 :::7892 ::: LISTEN 26228/clash tcp 0 0 :::9090 ::: LISTEN 26228/clash udp 0 0 127.0.0.1:5450 0.0.0.0: 26228/clash udp 0 0 198.18.0.1:7777 0.0.0.0: 26228/clash udp 0 0 :::7891 ::: 26228/clash udp 0 0 :::7892 :::* 26228/clash

===================== 测试本机DNS查询 =====================

Server: 127.0.0.1 Address: 127.0.0.1#53

Name: www.baidu.com Address 1: 198.18.0.34 *** Can't find www.baidu.com: No answer

===================== resolv.conf.auto =====================

Interface lan

nameserver 223.5.5.5

===================== 测试本机网络连接 =====================

HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: private, no-cache, no-store, proxy-revalidate, no-transform Connection: keep-alive Content-Length: 277 Content-Type: text/html Date: Mon, 21 Sep 2020 03:13:50 GMT Etag: "575e1f72-115" Last-Modified: Mon, 13 Jun 2016 02:50:26 GMT Pragma: no-cache Server: bfe/1.0.8.18

===================== 测试本机网络下载 =====================

HTTP/1.1 200 Connection established

HTTP/1.1 200 OK Connection: keep-alive Content-Length: 78 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "f33f76b7c2036f06901d0623c3f96a4fab0edf76f9d8de884dadbec1f5d4750f" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block Via: 1.1 varnish (Varnish/6.0) X-GitHub-Request-Id: 4294:3EFD:108C6EF:12FB20C:5F680571 Accept-Ranges: bytes Date: Mon, 21 Sep 2020 03:13:50 GMT Via: 1.1 varnish X-Served-By: cache-hkg17928-HKG X-Cache: HIT, HIT X-Cache-Hits: 1, 2 X-Timer: S1600658030.248662,VS0,VE0 Vary: Authorization,Accept-Encoding Access-Control-Allow-Origin: * X-Fastly-Request-ID: 32426dd7d111c1efeccf7dc2b710710768187d7a Expires: Mon, 21 Sep 2020 03:18:50 GMT Source-Age: 263

===================== 最近运行日志 =====================

time="2020-09-21T11:12:42+08:00" level=debug msg="[Metadata PreHandle] error: fake DNS record 198.18.1.58 missing" time="2020-09-21T11:12:42+08:00" level=debug msg="[Metadata PreHandle] error: fake DNS record 198.18.1.58 missing" time="2020-09-21T11:12:42+08:00" level=debug msg="[Metadata PreHandle] error: fake DNS record 198.18.1.59 missing" time="2020-09-21T11:12:44+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 114.115.188.133:10000: i/o timeout" time="2020-09-21T11:12:49+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 114.115.188.133:10000: i/o timeout" time="2020-09-21T11:12:55+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 114.115.188.133:10000: i/o timeout" time="2020-09-21T11:13:00+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 114.115.188.133:10000: i/o timeout" time="2020-09-21T11:13:05+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 114.115.188.133:10000: i/o timeout" time="2020-09-21T11:13:10+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 114.115.188.133:10000: i/o timeout" time="2020-09-21T11:13:11+08:00" level=info msg="[TCP] 192.168.3.18:34046 --> 149.154.175.56 using 📡Telegram by Script" time="2020-09-21T11:13:11+08:00" level=debug msg="[Process] Resolve process of tcp:192.168.3.18:57154 failure: no such process" time="2020-09-21T11:13:15+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 114.115.188.133:10000: i/o timeout" time="2020-09-21T11:13:15+08:00" level=info msg="[TCP] 192.168.3.18:38808 --> 91.108.56.145 using 📡Telegram by Script" time="2020-09-21T11:13:15+08:00" level=info msg="[TCP] 192.168.3.18:52378 --> 149.154.171.5 using 📡Telegram by Script" time="2020-09-21T11:13:16+08:00" level=warning msg="dial DIRECT error: dial tcp4 203.205.235.249:443: i/o timeout" time="2020-09-21T11:13:18+08:00" level=debug msg="[Process] Resolve process of tcp:192.168.3.18:39234 failure: no such process" time="2020-09-21T11:13:18+08:00" level=info msg="[TCP] 192.168.3.18:39234 --> alive.github.com using 🚀Proxy by Script" time="2020-09-21T11:13:20+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 114.115.188.133:10000: i/o timeout" time="2020-09-21T11:13:25+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 114.115.188.133:10000: i/o timeout" time="2020-09-21T11:13:30+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 114.115.188.133:10000: i/o timeout" time="2020-09-21T11:13:35+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 114.115.188.133:10000: i/o timeout" time="2020-09-21T11:13:41+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 114.115.188.133:10000: i/o timeout" time="2020-09-21T11:13:46+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 14.215.158.119:8080: i/o timeout" time="2020-09-21T11:13:46+08:00" level=warning msg="dial 🇨🇳Domestic error: dial tcp4 114.115.188.133:10000: i/o timeout" time="2020-09-21T11:13:50+08:00" level=info msg="[TCP] 198.18.0.1:40806 --> www.baidu.com using 🇨🇳Domestic by Script" time="2020-09-21T11:13:50+08:00" level=info msg="[TCP] 192.168.3.88:40652 --> raw.githubusercontent.com using 🚀Proxy by Script"

gakkiss commented 4 years ago

@vernesong 感觉不是dns解析的问题 使用openclash 网关和默认路由器网关 解析szminorshort.weixin.qq.com 这个域名 都是113.96.233.186这个ip(暂时换了redir-host模式) 但直连就ping的通 用openclash网关就ping不通 image

vernesong commented 4 years ago

在路由上ping呢

gakkiss commented 4 years ago

在路由上ping呢

在路由器上 能ping通 szminorshort.weixin.qq.com ；在设备上ping 也能通 但就是会丢包，但是mac端微信的登录二维码还是刷不出来 image image image

vernesong commented 4 years ago

那你得看看路由是不是开了其他vpn还有多播这些类型的插件，dns这块没问题，流量没正常转发

gakkiss commented 4 years ago

那你得看看路由是不是开了其他vpn还有多播这些类型的插件，dns这块没问题，流量没正常转发

应该是这个原因了，有问题的是家里的路由，现在不在家 验证不了。不过我新弄了个openwrt 是正常的 。麻烦大佬了。笔芯

gakkiss commented 4 years ago

@vernesong 大佬能帮忙看看 系统里哪个进程会影响openclash么。检查过服务和vpn里的插件，都显示未运行的状态。 谢谢了🙏

image