xiaorouji / openwrt-passwall

6.99k stars 2.61k forks source link

[Bug]: 一些加入Passwall代理规则的域名在一段时间后会不走代理 #2689

Closed MiKing233 closed 1 year ago

MiKing233 commented 1 year ago

描述您遇到的bug

舉例測試的域名為steamcommunity.com, 為Steam社群域名, Passwall代理使用GFW規則, 此域名存在於GFW規則内, image

且我已再次將其添加進代理規則列表 image

但在使用一段時間之後(幾分鐘到一兩天不等), 域名會變爲直連而不代理, 具體表現爲瀏覽器無法訪問steamcommunity.com(被墻), 且ping steamcommunity.com得到的回應從 PING steamcommunity.com (104.100.64.90): 56 data bytes 64 bytes from 104.100.64.90: seq=0 ttl=64 time=0.258 ms 64 bytes from 104.100.64.90: seq=1 ttl=64 time=0.334 ms (開啓ICMP劫持, 實際是到Gateway延遲)

變爲 PING steamcommunity.com (104.100.64.90): 56 data bytes 64 bytes from 104.100.64.90: seq=0 ttl=51 time=266.664 ms 64 bytes from 104.100.64.90: seq=1 ttl=51 time=248.470 ms (Passwall不再劫持到此域名的ICMP包, 此域名不再走代理)

复现此Bug的步骤

Passwall會在不確定的時間出現此錯誤, 無法准確的復現 不過當出現此問題時, 可以通過重啓Passwall服務讓其恢復正常, 但在使用一段時間之後(幾分鐘到一兩天不等), 域名會變爲直連而不代理 演示:https://cloud.mknetwork.net/s/RlT6?password=j5yspd

您想要实现的目的

Passwall能夠正確的對流量進行分流

日志信息

Log中沒有報錯信息

2023-08-05 08:32:30: 删除相关防火墙规则完成。 2023-08-05 08:32:31: 清空并关闭相关程序和缓存完成。 2023-08-05 08:32:31: TCP节点:[『USA-LA』BWH US Direct | XRay | Rate 1x],监听端口:1041 2023-08-05 08:32:31: - 域名解析 DNS Over HTTPS... 2023-08-05 08:32:32: UDP节点:[『USA-LA』BWH US Direct | XRay | Rate 1x],监听端口:1051 2023-08-05 08:32:32: 过滤服务配置:准备接管域名解析... 2023-08-05 08:32:32: | - (chinadns-ng) 最高支持4级域名过滤... 2023-08-05 08:32:32: + 过滤服务:ChinaDNS-NG(:15354):国内DNS:119.29.29.29,223.5.5.5,可信DNS:127.0.0.1#15353 2023-08-05 08:32:32: - 以上所列以外及默认:127.0.0.1#15354 2023-08-05 08:32:32: - PassWall必须依赖于Dnsmasq,如果你自行配置了错误的DNS流程,将会导致域名(直连/代理域名)分流失效!!! 2023-08-05 08:32:32: 开始加载防火墙规则... 2023-08-05 08:32:34: 加入负载均衡的节点到ipset[passwall_vpslist]直连完成 2023-08-05 08:32:34: 加入所有节点到ipset[passwall_vpslist]直连完成 2023-08-05 08:32:34: 加载路由器自身 TCP 代理... 2023-08-05 08:32:34: - [0],屏蔽代理UDP 端口:80,443 2023-08-05 08:32:34: 加载路由器自身 UDP 代理... 2023-08-05 08:32:34: - [0]不代理 UDP 端口:53,54 2023-08-05 08:32:34: 访问控制: 2023-08-05 08:32:34: - 备注【OneThingCloud-WS1608】,MAC【00:22:6D:50:D1:41】,不代理TCP 2023-08-05 08:32:34: - 备注【OneThingCloud-WS1608】,MAC【00:22:6D:50:D1:41】,不代理UDP 2023-08-05 08:32:35: - 备注【OneThingCloud-Virtual-IF1】,MAC【C0:E7:3E:10:6A:18】,不代理TCP 2023-08-05 08:32:35: - 备注【OneThingCloud-Virtual-IF1】,MAC【C0:E7:3E:10:6A:18】,不代理UDP 2023-08-05 08:32:35: - 备注【OneThingCloud-Virtual-IF2】,MAC【C0:E7:3E:21:0B:1B】,不代理TCP 2023-08-05 08:32:35: - 备注【OneThingCloud-Virtual-IF2】,MAC【C0:E7:3E:21:0B:1B】,不代理UDP 2023-08-05 08:32:35: - 备注【OneThingCloud-Virtual-IF3】,MAC【C0:E7:3E:2E:87:C5】,不代理TCP 2023-08-05 08:32:35: - 备注【OneThingCloud-Virtual-IF3】,MAC【C0:E7:3E:2E:87:C5】,不代理UDP 2023-08-05 08:32:35: TCP默认代理:使用TCP节点[『USA-LA』BWH US Direct | XRay | Rate 1x] 防火墙列表代理所有端口 2023-08-05 08:32:35: UDP默认代理:使用UDP节点[『USA-LA』BWH US Direct | XRay | Rate 1x] 防火墙列表代理除53,54外的所有端口 2023-08-05 08:32:35: 防火墙规则加载完成! 2023-08-05 08:32:36: 重启 dnsmasq 服务 2023-08-05 08:32:36: 运行完成!

截图

No response

系统相关信息

此問題存在於所有的Passwall版本中, 從4.55-1到4.67-1都測試存在 Chrome 版本 115.0.5790.111(正式版本) (64 位)

其他信息

No response

Axe-l commented 1 year ago

一样,我都快要放弃他了。比如流媒体分流。 geosite:bing geosite:paypal geosite:amazon geosite:primevideo geosite:hbo geosite:cbs geosite:nbcuniversal geosite:ted geosite:telegram。 我这个列表分流b,它走主节点a了,只有恢复pw默认设置重新再设置才可以分流。不过一两天后又不分了。流媒体直接走主节点a流量。因为看流媒体会提示不支持地区,我看分流b的VPS流量也不走。

zdm9981 commented 1 year ago

我这也是这种情况 如果走gfwlist 模式 会导致经常上不了网 规则没有走代理 目前的解决方案是用xray分流 但是passwall用的geosite是v2ray原版的没有gfw模式

xiaorouji commented 1 year ago

用geosite和geoip请使用全局模式,或者直接使用passwall2

maike2019 commented 5 months ago

是的,我也遇到同样的问题,【 4.76-1 】 。在规则列表--代理列表--添加 bing.com 。 在规则管理 --Sing-Box/Xray 分流规则中 添加Bing规则, 内容填写 domain:bing.com here.com here.net heremaps.cn ovi.com.cn azure azure-apim.net azure-dns.com azure-dns.info azure-dns.net azure-dns.org azure-mobile.net azure-sphere.com azure-test.net azure.cn azure.com azure.net azurecomcdn.net azurecontainer.io azurecosmos.net azurecosmosdb.com azurecosmosdb.info azurecosmosdb.net azuredatabricks.net azuredevopslaunch.com azuredigitaltwin.com azuredigitaltwins.com azuredigitaltwins.net azuredns-prd.info azuredns-prd.org azureedge-test.net azureedge.net azurefd.net azurefd.us azureiotcentral.com azureiotsolutions.com azureiotsuite.com azureplanetscale.info azureplanetscale.net azureserviceprofiler.com azuresmartspaces.net azurestackvalidation.com azurewebsites.net chinacloudapi.cn chinacloudapp.cn chinacloudsites.cn cosmosdb.info cosmosdb.net devopsms.com gotcosmos.com microsofteca.com microsoftiotcentral.com serverlesslibrary.net signalr.net tryfunctions.com windowsazure.cn windowsazure.com azure.microsoft.com azuremarketplace.microsoft.com bbing.com bibg.com biing.com binb.com binf.com bing bing.com bing.com.cn bing.net bing123.com bing135.com bing4.com bingads.com bingagencyawards.com bingapis.com bingapistatistics.com binginternal.com bingit.net bingiton.com bingj.com bingpix.com bingpk.com bings.com bingsandbox.com bingtoolbar.com bingtranslator.com bingvisualsearch.com bingworld.com biying.cn biying.com biying.com.cn bluehatnights.com dictate.ms discoverbing.com explorebing.com flipwithsurface.com mapblast.com mappoint.com masalladeloslimites.com microsoft-give.com microsoftcloudsummit.com microsoftdiplomados.com microsoftlatamholiday.com microsoftmxfilantropia.com microsoftpartnersolutions.com msnmaps.com msunlimitedcloudsummit.com myhomemsn.com office365love.com office365tw.com osdinfra.net renovacionoffice.com sprinklesapp.com working-bing-int.com bj1.api.bing.com emoi-cncdn.bing.com cn.bing.com cn.bing.net ditu.live.com a-msedge.net c-msedge.net e-msedge.net edgesuite.net evoke-windowsservices-tas.msedge microsoftedge.com microsoftedgeinsider.com msedge.net s-msedge.net femalefounderscomp.com m12.vc adaptivecards.io api-extractor.com apisof.net appcenter.ms blazor.net botframework.com codethemicrobit.com devopsassessment.net dot.net exp-tas.com gamesstack.com graphengine.io insiderdevtour.com jwt.ms microbit.org microsoftadc.com microsoftgamestack.com microsoftiotinsiderlabs.com microsoftreactor.cn microsoftreactor.com.cn microsoftreactor.info microsoftreactor.net microsoftreactor.org microsoftsilverlight.com microsoftsilverlight.net microsoftsilverlight.org microsoftsqlserver.com mmdnn.com mono-project.com msdn.com msinnovationchallenge.com mspairlift.com msropendata.com nuget.org nugettest.org opentranslatorstothings.org poshtestgallery.com pwabuilder.com reactorms.com.cn sankie.net sqlserveronlinux.com timelinestoryteller.com uwpcommunitytoolkit.com vfsforgit.com vfsforgit.org xamarin.com developer.microsoft.com dtlgalleryint.cloudapp.net poshtestgallery.cloudapp.net psg-int-centralus.cloudapp.net psg-int-eastus.cloudapp.net microsoft-online.cn microsoft-online.com.cn microsoftnews.cc microsoftnews.cn microsoftnews.com microsoftnews.net microsoftnews.org microsoftnewsforkids.com microsoftnewsforkids.net microsoftnewsforkids.org microsoftnewskids.com microsoftnewskids.net microsoftnewskids.org microsoftol.com microsoftol.com.cn microsoftusercontent.com msn.cn msn.com msn.com.cn msn.com.nsatc.net msn.com.tw msnewskids.com msnewskids.net msnewskids.org msnkids.com winmp.cn o365cn.com o365files.cn o365weve-dev.com o365weve-ppe.com o365weve.com office office.com office.net office365.com officedev.cn 1drv.com 1drv.ms livefilestore.com onedrive.co onedrive.co.uk onedrive.com onedrive.eu onedrive.live.com onedrive.net onedrive.org storage.live.com groupme.com skype.com skype.net skypeassets.com skypeassets.net skypeforbusiness.com sway-cdn.com sway-extensions.com sway.com visualstudio-staging.com visualstudio.co visualstudio.co.uk visualstudio.com visualstudio.eu visualstudio.net vsassets.io vscode-unpkg.net vscode-webview.net vscode.dev live.cn live.com.akadns.net sclive.net windowslive.cn wlxrs.com aicscience.com mmais.com.cn msminico.cn msminico.com.cn msxiaobing.com msxiaoice.com msxiaona.cn officeplus.cn renlifang.com cortana.ai cortanaanalytics.com cortanaskills.com forzamotorsport.net forzaracingchampionship.com forzarc.com gamepass.com msgamestudios.com orithegame.com renovacionxboxlive.com tellmewhygame.com xbox.co xbox.com xbox.eu xbox.org xbox360.co xbox360.com xbox360.eu xbox360.org xboxab.com xboxgamepass.com xboxgamestudios.com xboxlive.cn xboxlive.com xboxone.co xboxone.com xboxone.eu xboxplayanywhere.com xboxservices.com xboxstudios.com xbx.lv callersbane.com minecraft.net minecraftshop.com mojang.com beth.games bethesda.net bethesdagamestudios.com bethsoft.com Applicationinsights.io Applicationinsights.net aadrm.com acompli.net aka.ms ankarazirvesi2018.com applicationinsights.io applicationinsights.net aria.ms asp.net aspnetcdn.com assets-yammer.com azurerms.com binads.com bluehatil.com boswp.com brazilpartneruniversity.com breakdown.me centralvalidation.com ch9.ms charticulator.com cloudapp.net cloudappsecurity.com crmdynint-gcc.com crmdynint.com crossborderexpansion.com docs.com dwh5.com dynamics.com efproject.net engkoo.com fasttrackreadysupport.com fluidpreview.com footprintdns.com gameuxmasterguide.com gears5.com gearspop.com gearstactics.com getmicrosoftkey.com gfx.ms gigjam.com helpshift.com hockeyapp.net hololens.com hotmail hotmail.co hotmail.com hotmail.eu hotmail.net hotmail.org hummingbird.ms ie10.com ie11.com ie8.co ie9.com imaginecup.pl img-prod-cms-rt-microsoft-com ingads.com internetexplorer.co internetexplorer.com intunewiki.com iotinactionevents.com joinms.com joinms.com.cn joinmva.com kidgrid.tv kumo.com latampartneruniversity.com live.com live.com.au live.eu live.net livingyourambition.com localytics.com lync.com makecode.org managedmeetingrooms.com meetfasttrack.com meetyourdevices.com mepn.com microsoft microsoft-int.com microsoft-ppe.com microsoft-sap-events.com microsoft-sbs-domains.com microsoft-smb.cn microsoft.az microsoft.be microsoft.by microsoft.ca microsoft.cat microsoft.ch microsoft.cl microsoft.com microsoft.com.akadns.net microsoft.com.nsatc.net microsoft.cz microsoft.de microsoft.dk microsoft.ee microsoft.es microsoft.eu microsoft.fi microsoft.ge microsoft.hu microsoft.io microsoft.is microsoft.it microsoft.jp microsoft.lt microsoft.lu microsoft.lv microsoft.md microsoft.net microsoft.pl microsoft.pt microsoft.red microsoft.ro microsoft.rs microsoft.ru microsoft.se microsoft.si microsoft.tv microsoft.ua microsoft.uz microsoft.vn microsoft365.com microsoftaccountguard.com microsoftads.com microsoftadvertising.com microsoftadvertisingregionalawards.com microsoftaffiliates.com microsoftapps.azurewebsites.net microsoftazuread-sso.com microsoftcloud.com microsoftcloudworkshop.com microsoftcommunitytraining.com microsoftemail.com microsoftestore.com.hk microsofthouse.com microsofthouse.net microsoftinternetsafety.net microsoftlatamaitour.com microsoftlinc.com microsoftonline-p.com microsoftonline-p.net microsoftonline.com microsoftpartnercommunity.com microsoftready.com microsoftsiteselection.com microsoftstore.com microsoftstore.com.cn microsoftstore.com.hk microsoftstream.com microsoftteams.com microsofttradein.com microsofttranslator.com microsoftuwp.com momentumms.com morphcharts.com mpnevolution.com ms-studiosmedia.com ms365surfaceoffer.com msa.akadns6.net msads.net msappproxy.net msauth.cn msauth.net msauthimages.net mschallenge2018.com msecnd.net msft.info msft.net msftauth.cn msftauth.net msftauthimages.net msftcenterone.cn msftconnecttest.com msfteducation.ca msftidentity.com msftnet.org msgamesresearch.com msidentity.com msignitechina.com msocdn.com msocsp.com msopentech.cn mspil.cn msra.cn mstea.ms msturing.org msudalosti.com msvevent.com mymicrosoft.com nextechafrica.net nxta.org oaspapps.com oaspapps.com.akadns.net onecollector.cloudapp.aria onecollector.cloudapp.aria.akadns.net onenote.com onenote.net onestore.ms onmicrosoft.com opticsforthecloud.net optimizely.com outingsapp.com outlook.cn outlook.com outlookgroups.ms outlookmobile.com passport.net phonefactor.net pixapp.net playfabapi.cn playfabcn.com powerappscdn.net powerautomate.com powerbi.com powershellgallery.com projectmurphy.net projectsangam.com pxt.io s-microsoft.com s-msft.com s-msn.com sfbassets.com sfbassets.net sfx.ms sharepoint.cn sharepoint.com sharepointonline.com skype staffhub.ms successwithteams.com surface.com svc.ms syncshop.cn sysinternals.com tailwindtraders.com techhub.ms tenor.com tfsallin.net trafficmanager.net translatetheweb.com unlocklimitlesslearning.com userpxt.io uservoice.com videobreakdown.com videoindexer.ai virtualearth.net vsallin.net wbd.ms what-fan.net windows.com windows.net windows-int.net windows-ppe.net windows.com windows.net windows.nl windows8.hk windowscommunity.net windowsmarketplace.com windowsphone-int.com windowsphone.com windowssearch.com windowsupdate.com winhec.com winhec.net yammer.com yammerusercontent.com g.akamaiedge.net a1158.g.akamai.net a122.dscg3.akamai.net a767.dscg3.akamai.net cs11.wpc.v0cdn.net cs9.wac.phicdn.net b.akamaiedge.net spoprod-a.akamaihd.net windows.com.akadns.net prod-video-cms-rt-microsoft-com.akamaized.net statics-marketingsites-eas-ms-com.akamaized.net statics-marketingsites-neu-ms-com.akamaized.net vip5.afdorigin-prod-am02.afdogw.com img-prod-cms-rt-microsoft-com.akamaized.net img-s-msn-com.akamaized.net mwf-service.akamaized.net officecdn-microsoft-com.akamaized.net statics-marketingsites-eus-ms-com.akamaized.net statics-marketingsites-wcus-ms-com.akamaized.net 同样没有效果,并且我已经把给规则放在第三个位置了,第一个是AD去广告,第二个是BT 黑洞。