luci-app-passwall apple push-notification don't work

[karafen]

描述bug(必填)

Apple.com push notifications do not work or work for the first 20-30 minutes after rebooting the device where luci-app-passwall(vmess ws, tls) is installed

复现步骤(必填)

Tried different combinations of settings

used different dns modes

changed proxy modes (transparent and redirect)

changed the rules

tried changing all the settings

你想要实现的目的(必填)

For apple push notifications to work

日志信息(必填！)

2022-04-20 23:35:13: 执行启动延时 1 秒后再启动! 2022-04-20 23:35:14: TCP节点：[wulabing_ws.akkl.me]ws.akkl.me:443，监听端口：1041 2022-04-20 23:35:14: - 域名解析 DNS Over TCP... 2022-04-20 23:35:14: UDP节点：[wulabing_ws.akkl.me]ws.akkl.me:443，监听端口：1051 2022-04-20 23:35:14: 过滤服务配置：准备接管域名解析... 2022-04-20 23:35:14: - 节点列表中的域名(vpsiplist)：217.174.227.102 2022-04-20 23:35:14: - 域名白名单(whitelist)：217.174.227.102 2022-04-20 23:35:14: - 节点订阅域名(blacklist)：127.0.0.1#7913 2022-04-20 23:35:14: - 代理域名表(blacklist)：127.0.0.1#7913 2022-04-20 23:35:15: - 防火墙域名表(gfwlist)：127.0.0.1#7913 2022-04-20 23:35:15: - 以上所列以外及默认：127.0.0.1#7913 2022-04-20 23:35:15: - PassWall必须依赖于Dnsmasq，如果你自行配置了错误的DNS流程，将会导致域名(直连/代理域名)分流失效！！！ 2022-04-20 23:35:15: 开始加载防火墙规则... 2022-04-20 23:35:15: 加入负载均衡的节点到ipset[vpsiplist]直连完成 2022-04-20 23:35:15: 加入所有节点到ipset[vpsiplist]直连完成 2022-04-20 23:35:15: 加载路由器自身 TCP 代理... 2022-04-20 23:35:15: - 启用 TPROXY 模式 2022-04-20 23:35:15: - [0]，屏蔽代理UDP 端口：80,443 2022-04-20 23:35:15: 加载路由器自身 UDP 代理... 2022-04-20 23:35:15: - [0]不代理 UDP 端口：53 2022-04-20 23:35:15: 访问控制： 2022-04-20 23:35:16: - 备注【ASUSROG】，MAC【74:C6:3B:FB:87:09】，不代理TCP 2022-04-20 23:35:16: - 备注【ASUSROG】，MAC【74:C6:3B:FB:87:09】，不代理UDP 2022-04-20 23:35:16: - 备注【VMware】，MAC【00:0C:29:66:32:EB】，不代理TCP 2022-04-20 23:35:16: - 备注【VMware】，MAC【00:0C:29:66:32:EB】，不代理UDP 2022-04-20 23:35:16: TCP默认代理：使用TCP节点[wulabing_ws.akkl.me] 全局代理代理所有端口 2022-04-20 23:35:16: UDP默认代理：使用UDP节点[wulabing_ws.akkl.me] 全局代理代理除53外的所有端口 2022-04-20 23:35:16: 防火墙规则加载完成！ 2022-04-20 23:35:16: 重启 dnsmasq 服务 2022-04-20 23:35:16: 配置定时任务：自动更新规则。 2022-04-20 23:35:16: 运行完成！

截图

系统相关信息(必填)

OpenWrt 21.02.2 x86/64, 5.4.179, Intel(R) Celeron(R) CPU N2830 @ 2.16GHz

其他相关信息

The provider blocks 80% of Internet services at the level of ip subnets, dns and various ports, in connection with which he rented vps and created a vmess websocket tls server Using Wulabing Script , the server works perfectly on ios applications (shadowrocket) and android (V2rayN), but when launched servers on openwrt using luci -app-passwall do not receive push notifications for ios devices. DNS push services apple.com initially blocked by the provider in connection with which I removed the rule list from the direct list, which by default was apple.com in luci-app-passwall (ver.4.53)

[github-actions[bot]]

@karafen: hello! :wave:

This issue is being automatically closed because it does not follow the issue template.

[karafen]

What's wrong?

[xiaorouji]

Yes, You can try to use Xray instead of V2Ray, and then check if courier.push.apple.com is in no_sniffing_hosts. Or, you can try to set 5223 in tcp_no_redir_ports

[karafen]

Yes, You can try to use Xray instead of V2Ray, and then check if courier.push.apple.com is in no_sniffing_hosts. Or, you can try to set 5223 in tcp_no_redir_ports

Thanks a lot - it worked!!!! And also a request from a bonus to give you advice: which mode is better to use for a faster connection "TPROXY or REDIRECT" since in XRAY mode I paid attention to a more insignificant slow connection. Thanks again and thanks in advance!!!

[xiaorouji]

Basically, there is no difference, the difference is that the Redirect is only available for IPv4 TCP, while TPROXY applies to IPv4/IPv6 TCP and UDP.

[karafen]

Thank you very much again!!