OpenClash
OpenClash copied to clipboard
Published
20 hours ago •
vernesong
vernesong
全局模式下支付寶無法使用除非卸載open clash重新再裝載一遍[Bug]
Verify Steps
- [X] Tracker 我已经在 Issue Tracker 中找过我要提出的问题
- [X] Latest 我已经使用最新 Dev 版本测试过，问题依旧存在
- [x] Core 这是 OpenClash 存在的问题，并非我所使用的 Clash 或 Meta 等内核的特定问题
- [X] Meaningful 我提交的不是无意义的 催促更新或修复 请求
OpenClash Version
v0.45.51-beta
Bug on Environment
Official OpenWrt
Bug on Platform
Linux-armv8
To Reproduce
恢復出廠設置後，支付寶正常使用更新TUN內核後,出現支付寶無法聯網，打不開小程序,恢復出廠設置後問題解決，但是使用一段時間後又會出現無法聯網，支付寶無法使用的問題.
Describe the Bug
恢復出廠設置後，支付寶正常使用更新TUN內核後,出現支付寶無法聯網，打不開小程序,恢復出廠設置後問題解決，但是使用一段時間後又會出現無法聯網，支付寶無法使用的問題.
OpenClash Log
OpenClash 调试日志
生成时间: 2022-08-21 06:30:30 插件版本: v0.45.51-beta 隐私提示: 上传此日志前请注意检查、屏蔽公网IP、节点、密码等相关敏感信息
#===================== 系统信息 =====================#
主机型号: FriendlyElec NanoPi R2S
固件版本: OpenWrt SNAPSHOT r4046+1-86b2e8ab4
LuCI版本: git-21.335.48743-5f363d9-1
内核版本: 5.4.162
处理器架构: aarch64_generic
#此项有值时,如不使用IPv6,建议到网络-接口-lan的设置中禁用IPV6的DHCP
IPV6-DHCP: server
#此项结果应仅有配置文件的DNS监听地址
Dnsmasq转发设置: 127.0.0.1#7874
#===================== 依赖检查 =====================#
dnsmasq-full: 已安装
coreutils: 已安装
coreutils-nohup: 已安装
bash: 已安装
curl: 已安装
ca-certificates: 已安装
ipset: 已安装
ip-full: 已安装
iptables-mod-tproxy: 已安装
kmod-ipt-tproxy: 已安装
iptables-mod-extra: 已安装
kmod-ipt-extra: 已安装
libcap: 已安装
libcap-bin: 已安装
ruby: 已安装
ruby-yaml: 已安装
ruby-psych: 已安装
ruby-pstore: 已安装
kmod-tun(TUN模式): 已安装
luci-compat(Luci-19.07): 已安装
kmod-inet-diag(PROCESS-NAME): 未安装
unzip: 已安装
#===================== 内核检查 =====================#
运行状态: 运行中
进程pid: 32422
运行权限: 32422: cap_dac_override,cap_net_bind_service,cap_net_admin,cap_net_raw,cap_sys_ptrace,cap_sys_resource=eip
运行用户: nobody
已选择的架构: linux-armv8
#下方无法显示内核版本号时请确认您的内核版本是否正确或者有无权限
Tun内核版本: 2022.07.07-14-g6950e48
Tun内核文件: 存在
Tun内核运行权限: 正常
Dev内核版本: v1.11.4-13-g6e058f8
Dev内核文件: 存在
Dev内核运行权限: 正常
Meta内核版本: alpha-g4b39362
Meta内核文件: 存在
Meta内核运行权限: 正常
#===================== 插件设置 =====================#
当前配置文件: /etc/openclash/config/台灣.yaml
启动配置文件: /etc/openclash/台灣.yaml
运行模式: redir-host-mix
默认代理模式: global
UDP流量转发(tproxy): 停用
DNS劫持: 启用
自定义DNS: 停用
IPV6代理: 启用
IPV6-DNS解析: 启用
禁用Dnsmasq缓存: 启用
自定义规则: 停用
仅允许内网: 停用
仅代理命中规则流量: 停用
仅允许常用端口流量: 停用
绕过中国大陆IP: 停用
DNS远程解析: 启用
路由本机代理: 停用
#启动异常时建议关闭此项后重试
混合节点: 停用
保留配置: 停用
#启动异常时建议关闭此项后重试
第三方规则: 停用
#===================== 配置文件 =====================#
proxy-groups:
- name: PROXY
type: select
proxies:
- zhx040822.shait.xyz:11244
rules:
- DST-PORT,7895,REJECT
- DST-PORT,7892,REJECT
- IP-CIDR,198.18.0.1/16,REJECT,no-resolve
- RULE-SET,applications,DIRECT
- DOMAIN,clash.razord.top,DIRECT
- DOMAIN,yacd.haishan.me,DIRECT
- RULE-SET,private,DIRECT
- RULE-SET,reject,REJECT
- RULE-SET,icloud,DIRECT
- RULE-SET,apple,DIRECT
- RULE-SET,google,DIRECT
- RULE-SET,proxy,PROXY
- RULE-SET,direct,DIRECT
- RULE-SET,lancidr,DIRECT
- RULE-SET,cncidr,DIRECT
- RULE-SET,telegramcidr,PROXY
- GEOIP,,DIRECT
- GEOIP,CN,DIRECT
- MATCH,PROXY
rule-providers:
reject:
type: http
behavior: domain
url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt
path: "./rule_provider/reject.yaml"
interval: 86400
icloud:
type: http
behavior: domain
url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/icloud.txt
path: "./rule_provider/icloud.yaml"
interval: 86400
apple:
type: http
behavior: domain
url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/apple.txt
path: "./rule_provider/apple.yaml"
interval: 86400
google:
type: http
behavior: domain
url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/google.txt
path: "./rule_provider/google.yaml"
interval: 86400
proxy:
type: http
behavior: domain
url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt
path: "./rule_provider/proxy.yaml"
interval: 86400
direct:
type: http
behavior: domain
url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt
path: "./rule_provider/direct.yaml"
interval: 86400
private:
type: http
behavior: domain
url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt
path: "./rule_provider/private.yaml"
interval: 86400
gfw:
type: http
behavior: domain
url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/gfw.txt
path: "./rule_provider/gfw.yaml"
interval: 86400
greatfire:
type: http
behavior: domain
url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/greatfire.txt
path: "./rule_provider/greatfire.yaml"
interval: 86400
tld-not-cn:
type: http
behavior: domain
url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/tld-not-cn.txt
path: "./rule_provider/tld-not-cn.yaml"
interval: 86400
telegramcidr:
type: http
behavior: ipcidr
url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/telegramcidr.txt
path: "./rule_provider/telegramcidr.yaml"
interval: 86400
cncidr:
type: http
behavior: ipcidr
url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/cncidr.txt
path: "./rule_provider/cncidr.yaml"
interval: 86400
lancidr:
type: http
behavior: ipcidr
url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/lancidr.txt
path: "./rule_provider/lancidr.yaml"
interval: 86400
applications:
type: http
behavior: classical
url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/applications.txt
path: "./rule_provider/applications.yaml"
interval: 86400
redir-port: 7892
tproxy-port: 7895
port: 7890
socks-port: 7891
mixed-port: 7893
mode: global
log-level: silent
allow-lan: true
external-controller: 0.0.0.0:9090
bind-address: "*"
external-ui: "/usr/share/openclash/ui"
ipv6: true
dns:
enable: true
ipv6: true
enhanced-mode: fake-ip
fake-ip-range: 198.18.0.1/16
listen: 0.0.0.0:7874
nameserver:
- dhcp://"eth0"
- 192.168.1.1
- "[fe80::1]:53"
- 114.114.114.114
- 119.29.29.29
- https://doh.pub/dns-query
- https://dns.alidns.com/dns-query
fake-ip-filter:
- "+.*"
experimental:
sniff-tls-sni: true
tun:
enable: true
stack: system
auto-route: false
auto-detect-interface: false
dns-hijack:
- tcp://any:53
profile:
store-selected: true
store-fake-ip: true
authentication:
- Clash:YNMuNKSG
#===================== 防火墙设置 =====================#
#IPv4 NAT chain
# Generated by iptables-save v1.8.7 on Sun Aug 21 06:30:34 2022
*nat
:PREROUTING ACCEPT [4390:563017]
:INPUT ACCEPT [4173:345667]
:OUTPUT ACCEPT [7601:483328]
:POSTROUTING ACCEPT [3145:298612]
:MINIUPNPD - [0:0]
:MINIUPNPD-POSTROUTING - [0:0]
:openclash - [0:0]
:openclash_output - [0:0]
:postrouting_ipsecserver_rule - [0:0]
:postrouting_lan_rule - [0:0]
:postrouting_rule - [0:0]
:postrouting_vpn_rule - [0:0]
:postrouting_wan_rule - [0:0]
:prerouting_ipsecserver_rule - [0:0]
:prerouting_lan_rule - [0:0]
:prerouting_rule - [0:0]
:prerouting_vpn_rule - [0:0]
:prerouting_wan_rule - [0:0]
:zone_ipsecserver_postrouting - [0:0]
:zone_ipsecserver_prerouting - [0:0]
:zone_lan_postrouting - [0:0]
:zone_lan_prerouting - [0:0]
:zone_vpn_postrouting - [0:0]
:zone_vpn_prerouting - [0:0]
:zone_wan_postrouting - [0:0]
:zone_wan_prerouting - [0:0]
-A PREROUTING -p tcp -m comment --comment "OpenClash TCP DNS Hijack" -m tcp --dport 53 -j ACCEPT
-A PREROUTING -p tcp -m tcp --dport 53 -m comment --comment "OpenClash DNS Hijack" -j REDIRECT --to-ports 53
-A PREROUTING -p udp -m udp --dport 53 -m comment --comment "OpenClash DNS Hijack" -j REDIRECT --to-ports 53
-A PREROUTING -p udp -m udp --dport 53 -j REDIRECT --to-ports 53
-A PREROUTING -p tcp -m tcp --dport 53 -j REDIRECT --to-ports 53
-A PREROUTING -m comment --comment "!fw3: Custom prerouting rule chain" -j prerouting_rule
-A PREROUTING -i br-lan -m comment --comment "!fw3" -j zone_lan_prerouting
-A PREROUTING -i eth0 -m comment --comment "!fw3" -j zone_wan_prerouting
-A PREROUTING -i tun0 -m comment --comment "!fw3" -j zone_vpn_prerouting
-A PREROUTING -i ipsec0 -m comment --comment "!fw3" -j zone_ipsecserver_prerouting
-A PREROUTING -p tcp -j openclash
-A OUTPUT -j openclash_output
-A POSTROUTING -m comment --comment "!fw3: Custom postrouting rule chain" -j postrouting_rule
-A POSTROUTING -o br-lan -m comment --comment "!fw3" -j zone_lan_postrouting
-A POSTROUTING -o eth0 -m comment --comment "!fw3" -j zone_wan_postrouting
-A POSTROUTING -o tun0 -m comment --comment "!fw3" -j zone_vpn_postrouting
-A POSTROUTING -o ipsec0 -m comment --comment "!fw3" -j zone_ipsecserver_postrouting
-A openclash -p tcp -m tcp --sport 1688 -j RETURN
-A openclash -p tcp -m tcp --sport 1194 -j RETURN
-A openclash -p tcp -m tcp --sport 8897 -j RETURN
-A openclash -m set --match-set localnetwork dst -j RETURN
-A openclash -p tcp -j REDIRECT --to-ports 7892
-A openclash_output -p tcp -m tcp --sport 1688 -j RETURN
-A openclash_output -p tcp -m tcp --sport 1194 -j RETURN
-A openclash_output -p tcp -m tcp --sport 8897 -j RETURN
-A openclash_output -m set --match-set localnetwork dst -j RETURN
-A openclash_output -p tcp -m owner ! --uid-owner 65534 -j REDIRECT --to-ports 7892
-A zone_ipsecserver_postrouting -m comment --comment "!fw3: Custom ipsecserver postrouting rule chain" -j postrouting_ipsecserver_rule
-A zone_ipsecserver_prerouting -m comment --comment "!fw3: Custom ipsecserver prerouting rule chain" -j prerouting_ipsecserver_rule
-A zone_lan_postrouting -m comment --comment "!fw3: Custom lan postrouting rule chain" -j postrouting_lan_rule
-A zone_lan_prerouting -m comment --comment "!fw3: Custom lan prerouting rule chain" -j prerouting_lan_rule
-A zone_vpn_postrouting -m comment --comment "!fw3: Custom vpn postrouting rule chain" -j postrouting_vpn_rule
-A zone_vpn_postrouting -m comment --comment "!fw3" -j FULLCONENAT
-A zone_vpn_prerouting -m comment --comment "!fw3: Custom vpn prerouting rule chain" -j prerouting_vpn_rule
-A zone_vpn_prerouting -m comment --comment "!fw3" -j FULLCONENAT
-A zone_wan_postrouting -j MINIUPNPD-POSTROUTING
-A zone_wan_postrouting -j MINIUPNPD-POSTROUTING
-A zone_wan_postrouting -m comment --comment "!fw3: Custom wan postrouting rule chain" -j postrouting_wan_rule
-A zone_wan_postrouting -m comment --comment "!fw3" -j FULLCONENAT
-A zone_wan_prerouting -j MINIUPNPD
-A zone_wan_prerouting -j MINIUPNPD
-A zone_wan_prerouting -m comment --comment "!fw3: Custom wan prerouting rule chain" -j prerouting_wan_rule
-A zone_wan_prerouting -m comment --comment "!fw3" -j FULLCONENAT
COMMIT
# Completed on Sun Aug 21 06:30:34 2022
#IPv4 Mangle chain
# Generated by iptables-save v1.8.7 on Sun Aug 21 06:30:34 2022
*mangle
:PREROUTING ACCEPT [148459:46540669]
:INPUT ACCEPT [143853:45962578]
:FORWARD ACCEPT [4606:578091]
:OUTPUT ACCEPT [131964:65760366]
:POSTROUTING ACCEPT [137029:66361759]
:RRDIPT_FORWARD - [0:0]
:RRDIPT_INPUT - [0:0]
:RRDIPT_OUTPUT - [0:0]
:openclash - [0:0]
:openclash_dns_hijack - [0:0]
-A PREROUTING -p udp -j openclash
-A PREROUTING -p tcp -m tcp --dport 53 -j openclash_dns_hijack
-A INPUT -j RRDIPT_INPUT
-A FORWARD -j RRDIPT_FORWARD
-A FORWARD -o eth0 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
-A FORWARD -i eth0 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
-A OUTPUT -j RRDIPT_OUTPUT
-A RRDIPT_FORWARD -s 192.168.1.1/32 -j RETURN
-A RRDIPT_FORWARD -d 192.168.1.1/32 -j RETURN
-A RRDIPT_FORWARD -s 192.168.2.101/32 -j RETURN
-A RRDIPT_FORWARD -d 192.168.2.101/32 -j RETURN
-A RRDIPT_INPUT -i eth0 -j RETURN
-A RRDIPT_OUTPUT -o eth0 -j RETURN
-A openclash -p udp -m udp --sport 1194 -j RETURN
-A openclash -p udp -m udp --sport 500 -j RETURN
-A openclash -p udp -m udp --sport 68 -j RETURN
-A openclash -m set --match-set localnetwork dst -j RETURN
-A openclash -j MARK --set-xmark 0x162/0xffffffff
-A openclash_dns_hijack -p tcp -m comment --comment "OpenClash TCP DNS Hijack" -m tcp --dport 53 -j MARK --set-xmark 0x162/0xffffffff
COMMIT
# Completed on Sun Aug 21 06:30:34 2022
#IPv4 Filter chain
# Generated by iptables-save v1.8.7 on Sun Aug 21 06:30:34 2022
*filter
:INPUT ACCEPT [2165:333510]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [141:120222]
:MINIUPNPD - [0:0]
:forwarding_ipsecserver_rule - [0:0]
:forwarding_lan_rule - [0:0]
:forwarding_rule - [0:0]
:forwarding_vpn_rule - [0:0]
:forwarding_wan_rule - [0:0]
:input_ipsecserver_rule - [0:0]
:input_lan_rule - [0:0]
:input_rule - [0:0]
:input_vpn_rule - [0:0]
:input_wan_rule - [0:0]
:output_ipsecserver_rule - [0:0]
:output_lan_rule - [0:0]
:output_rule - [0:0]
:output_vpn_rule - [0:0]
:output_wan_rule - [0:0]
:reject - [0:0]
:syn_flood - [0:0]
:zone_ipsecserver_dest_ACCEPT - [0:0]
:zone_ipsecserver_forward - [0:0]
:zone_ipsecserver_input - [0:0]
:zone_ipsecserver_output - [0:0]
:zone_ipsecserver_src_ACCEPT - [0:0]
:zone_lan_dest_ACCEPT - [0:0]
:zone_lan_forward - [0:0]
:zone_lan_input - [0:0]
:zone_lan_output - [0:0]
:zone_lan_src_ACCEPT - [0:0]
:zone_vpn_dest_ACCEPT - [0:0]
:zone_vpn_forward - [0:0]
:zone_vpn_input - [0:0]
:zone_vpn_output - [0:0]
:zone_vpn_src_ACCEPT - [0:0]
:zone_wan_dest_ACCEPT - [0:0]
:zone_wan_dest_REJECT - [0:0]
:zone_wan_forward - [0:0]
:zone_wan_input - [0:0]
:zone_wan_output - [0:0]
:zone_wan_src_REJECT - [0:0]
-A INPUT -i lo -m comment --comment "!fw3" -j ACCEPT
-A INPUT -m comment --comment "!fw3: Custom input rule chain" -j input_rule
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment "!fw3" -j ACCEPT
-A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m comment --comment "!fw3" -j syn_flood
-A INPUT -i br-lan -m comment --comment "!fw3" -j zone_lan_input
-A INPUT -i eth0 -m comment --comment "!fw3" -j zone_wan_input
-A INPUT -i tun0 -m comment --comment "!fw3" -j zone_vpn_input
-A INPUT -i ipsec0 -m comment --comment "!fw3" -j zone_ipsecserver_input
-A FORWARD -o utun -m comment --comment "OpenClash TUN Forward" -j ACCEPT
-A FORWARD -m comment --comment "!fw3: Custom forwarding rule chain" -j forwarding_rule
-A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment "!fw3" -j ACCEPT
-A FORWARD -i br-lan -m comment --comment "!fw3" -j zone_lan_forward
-A FORWARD -i eth0 -m comment --comment "!fw3" -j zone_wan_forward
-A FORWARD -i tun0 -m comment --comment "!fw3" -j zone_vpn_forward
-A FORWARD -i ipsec0 -m comment --comment "!fw3" -j zone_ipsecserver_forward
-A FORWARD -m comment --comment "!fw3" -j reject
-A OUTPUT -o lo -m comment --comment "!fw3" -j ACCEPT
-A OUTPUT -m comment --comment "!fw3: Custom output rule chain" -j output_rule
-A OUTPUT -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment "!fw3" -j ACCEPT
-A OUTPUT -o br-lan -m comment --comment "!fw3" -j zone_lan_output
-A OUTPUT -o eth0 -m comment --comment "!fw3" -j zone_wan_output
-A OUTPUT -o tun0 -m comment --comment "!fw3" -j zone_vpn_output
-A OUTPUT -o ipsec0 -m comment --comment "!fw3" -j zone_ipsecserver_output
-A reject -p tcp -m comment --comment "!fw3" -j REJECT --reject-with tcp-reset
-A reject -m comment --comment "!fw3" -j REJECT --reject-with icmp-port-unreachable
-A syn_flood -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m limit --limit 25/sec --limit-burst 50 -m comment --comment "!fw3" -j RETURN
-A syn_flood -m comment --comment "!fw3" -j DROP
-A zone_ipsecserver_dest_ACCEPT -o ipsec0 -m comment --comment "!fw3" -j ACCEPT
-A zone_ipsecserver_forward -m comment --comment "!fw3: Custom ipsecserver forwarding rule chain" -j forwarding_ipsecserver_rule
-A zone_ipsecserver_forward -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port forwards" -j ACCEPT
-A zone_ipsecserver_forward -m comment --comment "!fw3" -j zone_ipsecserver_dest_ACCEPT
-A zone_ipsecserver_input -m comment --comment "!fw3: Custom ipsecserver input rule chain" -j input_ipsecserver_rule
-A zone_ipsecserver_input -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port redirections" -j ACCEPT
-A zone_ipsecserver_input -m comment --comment "!fw3" -j zone_ipsecserver_src_ACCEPT
-A zone_ipsecserver_output -m comment --comment "!fw3: Custom ipsecserver output rule chain" -j output_ipsecserver_rule
-A zone_ipsecserver_output -m comment --comment "!fw3" -j zone_ipsecserver_dest_ACCEPT
-A zone_ipsecserver_src_ACCEPT -i ipsec0 -m conntrack --ctstate NEW,UNTRACKED -m comment --comment "!fw3" -j ACCEPT
-A zone_lan_dest_ACCEPT -o br-lan -m comment --comment "!fw3" -j ACCEPT
-A zone_lan_forward -m comment --comment "!fw3: Custom lan forwarding rule chain" -j forwarding_lan_rule
-A zone_lan_forward -m comment --comment "!fw3: Zone lan to wan forwarding policy" -j zone_wan_dest_ACCEPT
-A zone_lan_forward -m comment --comment "!fw3: Zone lan to vpn forwarding policy" -j zone_vpn_dest_ACCEPT
-A zone_lan_forward -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port forwards" -j ACCEPT
-A zone_lan_forward -m comment --comment "!fw3" -j zone_lan_dest_ACCEPT
-A zone_lan_input -m comment --comment "!fw3: Custom lan input rule chain" -j input_lan_rule
-A zone_lan_input -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port redirections" -j ACCEPT
-A zone_lan_input -m comment --comment "!fw3" -j zone_lan_src_ACCEPT
-A zone_lan_output -m comment --comment "!fw3: Custom lan output rule chain" -j output_lan_rule
-A zone_lan_output -m comment --comment "!fw3" -j zone_lan_dest_ACCEPT
-A zone_lan_src_ACCEPT -i br-lan -m conntrack --ctstate NEW,UNTRACKED -m comment --comment "!fw3" -j ACCEPT
-A zone_vpn_dest_ACCEPT -o tun0 -m conntrack --ctstate INVALID -m comment --comment "!fw3: Prevent NAT leakage" -j DROP
-A zone_vpn_dest_ACCEPT -o tun0 -m comment --comment "!fw3" -j ACCEPT
-A zone_vpn_forward -m comment --comment "!fw3: Custom vpn forwarding rule chain" -j forwarding_vpn_rule
-A zone_vpn_forward -m comment --comment "!fw3: Zone vpn to wan forwarding policy" -j zone_wan_dest_ACCEPT
-A zone_vpn_forward -m comment --comment "!fw3: Zone vpn to lan forwarding policy" -j zone_lan_dest_ACCEPT
-A zone_vpn_forward -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port forwards" -j ACCEPT
-A zone_vpn_forward -m comment --comment "!fw3" -j zone_vpn_dest_ACCEPT
-A zone_vpn_input -m comment --comment "!fw3: Custom vpn input rule chain" -j input_vpn_rule
-A zone_vpn_input -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port redirections" -j ACCEPT
-A zone_vpn_input -m comment --comment "!fw3" -j zone_vpn_src_ACCEPT
-A zone_vpn_output -m comment --comment "!fw3: Custom vpn output rule chain" -j output_vpn_rule
-A zone_vpn_output -m comment --comment "!fw3" -j zone_vpn_dest_ACCEPT
-A zone_vpn_src_ACCEPT -i tun0 -m conntrack --ctstate NEW,UNTRACKED -m comment --comment "!fw3" -j ACCEPT
-A zone_wan_dest_ACCEPT -o eth0 -m conntrack --ctstate INVALID -m comment --comment "!fw3: Prevent NAT leakage" -j DROP
-A zone_wan_dest_ACCEPT -o eth0 -m comment --comment "!fw3" -j ACCEPT
-A zone_wan_dest_REJECT -o eth0 -m comment --comment "!fw3" -j reject
-A zone_wan_forward -j MINIUPNPD
-A zone_wan_forward -j MINIUPNPD
-A zone_wan_forward -m comment --comment "!fw3: Custom wan forwarding rule chain" -j forwarding_wan_rule
-A zone_wan_forward -p esp -m comment --comment "!fw3: Allow-IPSec-ESP" -j zone_lan_dest_ACCEPT
-A zone_wan_forward -p udp -m udp --dport 500 -m comment --comment "!fw3: Allow-ISAKMP" -j zone_lan_dest_ACCEPT
-A zone_wan_forward -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port forwards" -j ACCEPT
-A zone_wan_forward -m comment --comment "!fw3" -j zone_wan_dest_REJECT
-A zone_wan_input -m comment --comment "!fw3: Custom wan input rule chain" -j input_wan_rule
-A zone_wan_input -p udp -m udp --dport 68 -m comment --comment "!fw3: Allow-DHCP-Renew" -j ACCEPT
-A zone_wan_input -p icmp -m icmp --icmp-type 8 -m comment --comment "!fw3: Allow-Ping" -j ACCEPT
-A zone_wan_input -p igmp -m comment --comment "!fw3: Allow-IGMP" -j ACCEPT
-A zone_wan_input -p tcp -m tcp --dport 8897 -m comment --comment "!fw3: linkease" -j ACCEPT
-A zone_wan_input -p tcp -m tcp --dport 1194 -m comment --comment "!fw3: openvpn" -j ACCEPT
-A zone_wan_input -p udp -m udp --dport 1194 -m comment --comment "!fw3: openvpn" -j ACCEPT
-A zone_wan_input -p tcp -m tcp --dport 1688 -m comment --comment "!fw3: kms" -j ACCEPT
-A zone_wan_input -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port redirections" -j ACCEPT
-A zone_wan_input -m comment --comment "!fw3" -j zone_wan_src_REJECT
-A zone_wan_output -m comment --comment "!fw3: Custom wan output rule chain" -j output_wan_rule
-A zone_wan_output -m comment --comment "!fw3" -j zone_wan_dest_ACCEPT
-A zone_wan_src_REJECT -i eth0 -m comment --comment "!fw3" -j reject
COMMIT
# Completed on Sun Aug 21 06:30:34 2022
#IPv6 NAT chain
# Generated by ip6tables-save v1.8.7 on Sun Aug 21 06:30:34 2022
*nat
:PREROUTING ACCEPT [142:16006]
:INPUT ACCEPT [949:79283]
:OUTPUT ACCEPT [37:3678]
:POSTROUTING ACCEPT [112:13422]
-A PREROUTING -d 2001:4860:4860::8844/128 -p tcp -m comment --comment "OpenClash Google DNS Hijack" -m tcp --dport 53 -j ACCEPT
-A PREROUTING -d 2001:4860:4860::8888/128 -p tcp -m comment --comment "OpenClash Google DNS Hijack" -m tcp --dport 53 -j ACCEPT
-A PREROUTING -p tcp -m tcp --dport 53 -m comment --comment "OpenClash DNS Hijack" -j REDIRECT --to-ports 53
-A PREROUTING -p udp -m udp --dport 53 -m comment --comment "OpenClash DNS Hijack" -j REDIRECT --to-ports 53
-A PREROUTING -p udp -m udp --dport 53 -j REDIRECT --to-ports 53
-A PREROUTING -p tcp -m tcp --dport 53 -j REDIRECT --to-ports 53
COMMIT
# Completed on Sun Aug 21 06:30:34 2022
#IPv6 Mangle chain
# Generated by ip6tables-save v1.8.7 on Sun Aug 21 06:30:34 2022
*mangle
:PREROUTING ACCEPT [2605:5292110]
:INPUT ACCEPT [5067:5736228]
:FORWARD ACCEPT [173:22930]
:OUTPUT ACCEPT [4622:5979718]
:POSTROUTING ACCEPT [4713:5995134]
:openclash - [0:0]
:openclash_output - [0:0]
-A PREROUTING -j openclash
-A FORWARD -o eth0 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
-A FORWARD -i eth0 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
-A OUTPUT -j openclash_output
-A openclash -p tcp -m tcp --sport 1688 -j RETURN
-A openclash -p udp -m udp --sport 1194 -j RETURN
-A openclash -p tcp -m tcp --sport 1194 -j RETURN
-A openclash -p tcp -m tcp --sport 8897 -j RETURN
-A openclash -p udp -m udp --sport 500 -j RETURN
-A openclash -s fc00::/6 -p udp -m udp --sport 546 -j RETURN
-A openclash -m set --match-set localnetwork6 dst -j RETURN
-A openclash -p tcp -m comment --comment "OpenClash TCP Tproxy" -j TPROXY --on-port 7895 --on-ip :: --tproxy-mark 0x162/0xffffffff
-A openclash -p udp -m comment --comment "OpenClash TCP Tproxy" -j TPROXY --on-port 7895 --on-ip :: --tproxy-mark 0x162/0xffffffff
-A openclash_output -p tcp -m tcp --sport 1688 -j RETURN
-A openclash_output -p udp -m udp --sport 1194 -j RETURN
-A openclash_output -p tcp -m tcp --sport 1194 -j RETURN
-A openclash_output -p tcp -m tcp --sport 8897 -j RETURN
-A openclash_output -p udp -m udp --sport 500 -j RETURN
-A openclash_output -p udp -m udp --sport 546 -j RETURN
-A openclash_output -m set --match-set localnetwork6 dst -j RETURN
-A openclash_output -p tcp -m owner ! --uid-owner 65534 -j MARK --set-xmark 0x162/0xffffffff
-A openclash_output -p udp -m owner ! --uid-owner 65534 -j MARK --set-xmark 0x162/0xffffffff
COMMIT
# Completed on Sun Aug 21 06:30:34 2022
#IPv6 Filter chain
# Generated by ip6tables-save v1.8.7 on Sun Aug 21 06:30:34 2022
*filter
:INPUT ACCEPT [36:7956]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [72:11532]
:MINIUPNPD - [0:0]
:forwarding_ipsecserver_rule - [0:0]
:forwarding_lan_rule - [0:0]
:forwarding_rule - [0:0]
:forwarding_vpn_rule - [0:0]
:forwarding_wan_rule - [0:0]
:input_ipsecserver_rule - [0:0]
:input_lan_rule - [0:0]
:input_rule - [0:0]
:input_vpn_rule - [0:0]
:input_wan_rule - [0:0]
:output_ipsecserver_rule - [0:0]
:output_lan_rule - [0:0]
:output_rule - [0:0]
:output_vpn_rule - [0:0]
:output_wan_rule - [0:0]
:reject - [0:0]
:syn_flood - [0:0]
:zone_ipsecserver_dest_ACCEPT - [0:0]
:zone_ipsecserver_forward - [0:0]
:zone_ipsecserver_input - [0:0]
:zone_ipsecserver_output - [0:0]
:zone_ipsecserver_src_ACCEPT - [0:0]
:zone_lan_dest_ACCEPT - [0:0]
:zone_lan_forward - [0:0]
:zone_lan_input - [0:0]
:zone_lan_output - [0:0]
:zone_lan_src_ACCEPT - [0:0]
:zone_vpn_dest_ACCEPT - [0:0]
:zone_vpn_forward - [0:0]
:zone_vpn_input - [0:0]
:zone_vpn_output - [0:0]
:zone_vpn_src_ACCEPT - [0:0]
:zone_wan_dest_ACCEPT - [0:0]
:zone_wan_dest_REJECT - [0:0]
:zone_wan_forward - [0:0]
:zone_wan_input - [0:0]
:zone_wan_output - [0:0]
:zone_wan_src_REJECT - [0:0]
-A INPUT -i lo -m comment --comment "!fw3" -j ACCEPT
-A INPUT -m comment --comment "!fw3: Custom input rule chain" -j input_rule
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment "!fw3" -j ACCEPT
-A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m comment --comment "!fw3" -j syn_flood
-A INPUT -i br-lan -m comment --comment "!fw3" -j zone_lan_input
-A INPUT -i eth0 -m comment --comment "!fw3" -j zone_wan_input
-A INPUT -i tun0 -m comment --comment "!fw3" -j zone_vpn_input
-A INPUT -i ipsec0 -m comment --comment "!fw3" -j zone_ipsecserver_input
-A FORWARD -m comment --comment "!fw3: Custom forwarding rule chain" -j forwarding_rule
-A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment "!fw3" -j ACCEPT
-A FORWARD -i br-lan -m comment --comment "!fw3" -j zone_lan_forward
-A FORWARD -i eth0 -m comment --comment "!fw3" -j zone_wan_forward
-A FORWARD -i tun0 -m comment --comment "!fw3" -j zone_vpn_forward
-A FORWARD -i ipsec0 -m comment --comment "!fw3" -j zone_ipsecserver_forward
-A FORWARD -m comment --comment "!fw3" -j reject
-A OUTPUT -o lo -m comment --comment "!fw3" -j ACCEPT
-A OUTPUT -m comment --comment "!fw3: Custom output rule chain" -j output_rule
-A OUTPUT -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment "!fw3" -j ACCEPT
-A OUTPUT -o br-lan -m comment --comment "!fw3" -j zone_lan_output
-A OUTPUT -o eth0 -m comment --comment "!fw3" -j zone_wan_output
-A OUTPUT -o tun0 -m comment --comment "!fw3" -j zone_vpn_output
-A OUTPUT -o ipsec0 -m comment --comment "!fw3" -j zone_ipsecserver_output
-A reject -p tcp -m comment --comment "!fw3" -j REJECT --reject-with tcp-reset
-A reject -m comment --comment "!fw3" -j REJECT --reject-with icmp6-port-unreachable
-A syn_flood -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m limit --limit 25/sec --limit-burst 50 -m comment --comment "!fw3" -j RETURN
-A syn_flood -m comment --comment "!fw3" -j DROP
-A zone_ipsecserver_dest_ACCEPT -o ipsec0 -m comment --comment "!fw3" -j ACCEPT
-A zone_ipsecserver_forward -m comment --comment "!fw3: Custom ipsecserver forwarding rule chain" -j forwarding_ipsecserver_rule
-A zone_ipsecserver_forward -m comment --comment "!fw3" -j zone_ipsecserver_dest_ACCEPT
-A zone_ipsecserver_input -m comment --comment "!fw3: Custom ipsecserver input rule chain" -j input_ipsecserver_rule
-A zone_ipsecserver_input -m comment --comment "!fw3" -j zone_ipsecserver_src_ACCEPT
-A zone_ipsecserver_output -m comment --comment "!fw3: Custom ipsecserver output rule chain" -j output_ipsecserver_rule
-A zone_ipsecserver_output -m comment --comment "!fw3" -j zone_ipsecserver_dest_ACCEPT
-A zone_ipsecserver_src_ACCEPT -i ipsec0 -m conntrack --ctstate NEW,UNTRACKED -m comment --comment "!fw3" -j ACCEPT
-A zone_lan_dest_ACCEPT -o br-lan -m comment --comment "!fw3" -j ACCEPT
-A zone_lan_forward -m comment --comment "!fw3: Custom lan forwarding rule chain" -j forwarding_lan_rule
-A zone_lan_forward -m comment --comment "!fw3: Zone lan to wan forwarding policy" -j zone_wan_dest_ACCEPT
-A zone_lan_forward -m comment --comment "!fw3: Zone lan to vpn forwarding policy" -j zone_vpn_dest_ACCEPT
-A zone_lan_forward -m comment --comment "!fw3" -j zone_lan_dest_ACCEPT
-A zone_lan_input -m comment --comment "!fw3: Custom lan input rule chain" -j input_lan_rule
-A zone_lan_input -m comment --comment "!fw3" -j zone_lan_src_ACCEPT
-A zone_lan_output -m comment --comment "!fw3: Custom lan output rule chain" -j output_lan_rule
-A zone_lan_output -m comment --comment "!fw3" -j zone_lan_dest_ACCEPT
-A zone_lan_src_ACCEPT -i br-lan -m conntrack --ctstate NEW,UNTRACKED -m comment --comment "!fw3" -j ACCEPT
-A zone_vpn_dest_ACCEPT -o tun0 -m conntrack --ctstate INVALID -m comment --comment "!fw3: Prevent NAT leakage" -j DROP
-A zone_vpn_dest_ACCEPT -o tun0 -m comment --comment "!fw3" -j ACCEPT
-A zone_vpn_forward -m comment --comment "!fw3: Custom vpn forwarding rule chain" -j forwarding_vpn_rule
-A zone_vpn_forward -m comment --comment "!fw3: Zone vpn to wan forwarding policy" -j zone_wan_dest_ACCEPT
-A zone_vpn_forward -m comment --comment "!fw3: Zone vpn to lan forwarding policy" -j zone_lan_dest_ACCEPT
-A zone_vpn_forward -m comment --comment "!fw3" -j zone_vpn_dest_ACCEPT
-A zone_vpn_input -m comment --comment "!fw3: Custom vpn input rule chain" -j input_vpn_rule
-A zone_vpn_input -m comment --comment "!fw3" -j zone_vpn_src_ACCEPT
-A zone_vpn_output -m comment --comment "!fw3: Custom vpn output rule chain" -j output_vpn_rule
-A zone_vpn_output -m comment --comment "!fw3" -j zone_vpn_dest_ACCEPT
-A zone_vpn_src_ACCEPT -i tun0 -m conntrack --ctstate NEW,UNTRACKED -m comment --comment "!fw3" -j ACCEPT
-A zone_wan_dest_ACCEPT -o eth0 -m conntrack --ctstate INVALID -m comment --comment "!fw3: Prevent NAT leakage" -j DROP
-A zone_wan_dest_ACCEPT -o eth0 -m comment --comment "!fw3" -j ACCEPT
-A zone_wan_dest_REJECT -o eth0 -m comment --comment "!fw3" -j reject
-A zone_wan_forward -j MINIUPNPD
-A zone_wan_forward -j MINIUPNPD
-A zone_wan_forward -m comment --comment "!fw3: Custom wan forwarding rule chain" -j forwarding_wan_rule
-A zone_wan_forward -p ipv6-icmp -m icmp6 --icmpv6-type 128 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Forward" -j ACCEPT
-A zone_wan_forward -p ipv6-icmp -m icmp6 --icmpv6-type 129 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Forward" -j ACCEPT
-A zone_wan_forward -p ipv6-icmp -m icmp6 --icmpv6-type 1 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Forward" -j ACCEPT
-A zone_wan_forward -p ipv6-icmp -m icmp6 --icmpv6-type 2 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Forward" -j ACCEPT
-A zone_wan_forward -p ipv6-icmp -m icmp6 --icmpv6-type 3 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Forward" -j ACCEPT
-A zone_wan_forward -p ipv6-icmp -m icmp6 --icmpv6-type 4/0 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Forward" -j ACCEPT
-A zone_wan_forward -p ipv6-icmp -m icmp6 --icmpv6-type 4/1 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Forward" -j ACCEPT
-A zone_wan_forward -p esp -m comment --comment "!fw3: Allow-IPSec-ESP" -j zone_lan_dest_ACCEPT
-A zone_wan_forward -p udp -m udp --dport 500 -m comment --comment "!fw3: Allow-ISAKMP" -j zone_lan_dest_ACCEPT
-A zone_wan_forward -m comment --comment "!fw3" -j zone_wan_dest_REJECT
-A zone_wan_input -m comment --comment "!fw3: Custom wan input rule chain" -j input_wan_rule
-A zone_wan_input -s fc00::/6 -d fc00::/6 -p udp -m udp --dport 546 -m comment --comment "!fw3: Allow-DHCPv6" -j ACCEPT
-A zone_wan_input -s fe80::/10 -p ipv6-icmp -m icmp6 --icmpv6-type 130/0 -m comment --comment "!fw3: Allow-MLD" -j ACCEPT
-A zone_wan_input -s fe80::/10 -p ipv6-icmp -m icmp6 --icmpv6-type 131/0 -m comment --comment "!fw3: Allow-MLD" -j ACCEPT
-A zone_wan_input -s fe80::/10 -p ipv6-icmp -m icmp6 --icmpv6-type 132/0 -m comment --comment "!fw3: Allow-MLD" -j ACCEPT
-A zone_wan_input -s fe80::/10 -p ipv6-icmp -m icmp6 --icmpv6-type 143/0 -m comment --comment "!fw3: Allow-MLD" -j ACCEPT
-A zone_wan_input -p ipv6-icmp -m icmp6 --icmpv6-type 128 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Input" -j ACCEPT
-A zone_wan_input -p ipv6-icmp -m icmp6 --icmpv6-type 129 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Input" -j ACCEPT
-A zone_wan_input -p ipv6-icmp -m icmp6 --icmpv6-type 1 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Input" -j ACCEPT
-A zone_wan_input -p ipv6-icmp -m icmp6 --icmpv6-type 2 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Input" -j ACCEPT
-A zone_wan_input -p ipv6-icmp -m icmp6 --icmpv6-type 3 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Input" -j ACCEPT
-A zone_wan_input -p ipv6-icmp -m icmp6 --icmpv6-type 4/0 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Input" -j ACCEPT
-A zone_wan_input -p ipv6-icmp -m icmp6 --icmpv6-type 4/1 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Input" -j ACCEPT
-A zone_wan_input -p ipv6-icmp -m icmp6 --icmpv6-type 133 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Input" -j ACCEPT
-A zone_wan_input -p ipv6-icmp -m icmp6 --icmpv6-type 135 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Input" -j ACCEPT
-A zone_wan_input -p ipv6-icmp -m icmp6 --icmpv6-type 134 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Input" -j ACCEPT
-A zone_wan_input -p ipv6-icmp -m icmp6 --icmpv6-type 136 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Input" -j ACCEPT
-A zone_wan_input -p tcp -m tcp --dport 8897 -m comment --comment "!fw3: linkease" -j ACCEPT
-A zone_wan_input -p tcp -m tcp --dport 1194 -m comment --comment "!fw3: openvpn" -j ACCEPT
-A zone_wan_input -p udp -m udp --dport 1194 -m comment --comment "!fw3: openvpn" -j ACCEPT
-A zone_wan_input -p tcp -m tcp --dport 1688 -m comment --comment "!fw3: kms" -j ACCEPT
-A zone_wan_input -m comment --comment "!fw3" -j zone_wan_src_REJECT
-A zone_wan_output -m comment --comment "!fw3: Custom wan output rule chain" -j output_wan_rule
-A zone_wan_output -m comment --comment "!fw3" -j zone_wan_dest_ACCEPT
-A zone_wan_src_REJECT -i eth0 -m comment --comment "!fw3" -j reject
COMMIT
# Completed on Sun Aug 21 06:30:34 2022
#===================== IPSET状态 =====================#
Name: mwan3_connected_v4
Name: mwan3_connected_v6
Name: mwan3_source_v6
Name: mwan3_dynamic_v4
Name: mwan3_dynamic_v6
Name: mwan3_custom_v4
Name: mwan3_custom_v6
Name: cn
Name: ct
Name: cnc
Name: cmcc
Name: crtc
Name: cernet
Name: gwbn
Name: othernet
Name: localnetwork
Name: localnetwork6
Name: china
Name: mwan3_connected
#===================== 路由表状态 =====================#
#route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 192.168.1.1 0.0.0.0 UG 0 0 0 eth0
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
192.168.2.0 0.0.0.0 255.255.255.0 U 0 0 0 br-lan
198.18.0.0 0.0.0.0 255.255.0.0 U 0 0 0 utun
#ip route list
default via 192.168.1.1 dev eth0 proto static src 192.168.1.2
192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.2
192.168.2.0/24 dev br-lan proto kernel scope link src 192.168.2.1
198.18.0.0/16 dev utun proto kernel scope link src 198.18.0.1
#ip rule show
0: from all lookup local
32765: from all fwmark 0x162 lookup 354
32766: from all lookup main
32767: from all lookup default
#===================== Tun设备状态 =====================#
utun: tun
#===================== 端口占用状态 =====================#
tcp 0 0 198.18.0.1:7777 0.0.0.0:* LISTEN 32422/clash
tcp 0 0 :::9090 :::* LISTEN 32422/clash
tcp 0 0 :::7890 :::* LISTEN 32422/clash
tcp 0 0 :::7891 :::* LISTEN 32422/clash
tcp 0 0 :::7892 :::* LISTEN 32422/clash
tcp 0 0 :::7893 :::* LISTEN 32422/clash
tcp 0 0 :::7895 :::* LISTEN 32422/clash
udp 0 0 198.18.0.1:7777 0.0.0.0:* 32422/clash
udp 0 0 :::7874 :::* 32422/clash
udp 0 0 :::7891 :::* 32422/clash
udp 0 0 :::7892 :::* 32422/clash
udp 0 0 :::7893 :::* 32422/clash
udp 0 0 :::7895 :::* 32422/clash
#===================== 测试本机DNS查询 =====================#
Server: 127.0.0.1
Address: 127.0.0.1:53
www.baidu.com canonical name = www.a.shifen.com
Name: www.a.shifen.com
Address: 180.101.49.11
Name: www.a.shifen.com
Address: 180.101.49.12
www.baidu.com canonical name = www.a.shifen.com
#===================== resolv.conf.d =====================#
# Interface wan
nameserver 192.168.1.1
# Interface wan6
nameserver fe80::1%eth0
#===================== 测试本机网络连接 =====================#
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: private, no-cache, no-store, proxy-revalidate, no-transform
Connection: keep-alive
Content-Length: 277
Content-Type: text/html
Date: Sat, 20 Aug 2022 22:30:35 GMT
Etag: "575e1f72-115"
Last-Modified: Mon, 13 Jun 2016 02:50:26 GMT
Pragma: no-cache
Server: bfe/1.0.8.18
#===================== 测试本机网络下载 =====================#
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 80
Cache-Control: max-age=300
Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox
Content-Type: text/plain; charset=utf-8
ETag: "7b18c764d6c4574c6040f0dc7b80bc6a8df5289c8cdd0b3dd1df70ea589c5314"
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-XSS-Protection: 1; mode=block
X-GitHub-Request-Id: C2AE:218F:44BE7F:5E7E69:6300FAA7
Accept-Ranges: bytes
Date: Sat, 20 Aug 2022 22:30:36 GMT
Via: 1.1 varnish
X-Served-By: cache-qpg1229-QPG
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1661034636.452967,VS0,VE1
Vary: Authorization,Accept-Encoding,Origin
Access-Control-Allow-Origin: *
X-Fastly-Request-ID: de863a9673e59d2b5465d93b7aee45514ca4d1dd
Expires: Sat, 20 Aug 2022 22:35:36 GMT
Source-Age: 5
#===================== 最近运行日志 =====================#
2022-08-21 06:05:40 Step 3: Close The OpenClash Daemons...
2022-08-21 06:05:40 Step 4: Close The Clash Core Process...
2022-08-21 06:05:40 Step 5: Restart Dnsmasq...
2022-08-21 06:05:43 Step 6: Delete OpenClash Residue File...
2022-08-21 06:05:43 OpenClash Start Running...
2022-08-21 06:05:43 Step 1: Get The Configuration...
2022-08-21 06:05:43 Step 2: Check The Components...
2022-08-21 06:05:44 Tip: Because of the file【 /etc/config/openclash 】modificated, Pause quick start...
2022-08-21 06:05:44 Step 3: Modify The Config File...
2022-08-21 06:05:46 Step 4: Start Running The Clash Core...
2022-08-21 06:05:46 Tip: Detected The Exclusive Function of The TUN Core, Use TUN Core to Start...
2022-08-21 06:05:47 Step 5: Check The Core Status...
time="2022-08-21T06:05:48+08:00" level=info msg="Start initial compatible provider PROXY"
time="2022-08-21T06:05:48+08:00" level=info msg="Start initial rule provider gfw"
time="2022-08-21T06:05:48+08:00" level=info msg="Start initial rule provider private"
time="2022-08-21T06:05:48+08:00" level=info msg="Start initial rule provider reject"
time="2022-08-21T06:05:49+08:00" level=info msg="Start initial rule provider apple"
time="2022-08-21T06:05:49+08:00" level=info msg="Start initial rule provider applications"
time="2022-08-21T06:05:49+08:00" level=info msg="Start initial rule provider cncidr"
time="2022-08-21T06:05:49+08:00" level=info msg="Start initial rule provider tld-not-cn"
time="2022-08-21T06:05:49+08:00" level=info msg="Start initial rule provider lancidr"
time="2022-08-21T06:05:49+08:00" level=info msg="Start initial rule provider google"
time="2022-08-21T06:05:49+08:00" level=info msg="Start initial rule provider direct"
2022-08-21 06:05:50 Step 6: Wait For The File Downloading...
time="2022-08-21T06:05:51+08:00" level=info msg="Start initial rule provider icloud"
time="2022-08-21T06:05:51+08:00" level=info msg="Start initial rule provider greatfire"
time="2022-08-21T06:05:51+08:00" level=info msg="Start initial rule provider telegramcidr"
time="2022-08-21T06:05:51+08:00" level=info msg="Start initial rule provider proxy"
time="2022-08-21T06:05:52+08:00" level=info msg="Authentication of local server updated"
time="2022-08-21T06:05:52+08:00" level=info msg="DNS server listening at: [::]:7874"
2022-08-21 06:05:56 Step 7: Set Firewall Rules...
2022-08-21 06:05:57 Step 8: Restart Dnsmasq...
2022-08-21 06:06:00 Step 9: Add Cron Rules, Start Daemons...
2022-08-21 06:06:00 OpenClash Start Successful!
2022-08-21 06:15:38 【Meta】Core Downloading, Please Try to Download and Upload Manually If Fails
2022-08-21 06:15:41 【Meta】Core Download Successful, Start Update...
2022-08-21 06:15:41 【Meta】Core Update Successful!
time="2022-08-21T06:27:13+08:00" level=info msg="[UDP] 192.168.2.101:46779 --> time.google.com:123 using GLOBAL"
time="2022-08-21T06:27:13+08:00" level=info msg="[TCP] 192.168.2.101:37798 --> api-gt.baidu.com:443 using GLOBAL"
time="2022-08-21T06:27:14+08:00" level=info msg="[UDP] 192.168.2.101:37110 --> time.google.com:123 using GLOBAL"
time="2022-08-21T06:27:14+08:00" level=info msg="[UDP] 192.168.2.101:37967 --> time.google.com:123 using GLOBAL"
time="2022-08-21T06:27:15+08:00" level=info msg="[UDP] 192.168.2.101:40867 --> time.google.com:123 using GLOBAL"
time="2022-08-21T06:27:16+08:00" level=info msg="[UDP] 192.168.2.101:42356 --> time.google.com:123 using GLOBAL"
time="2022-08-21T06:27:16+08:00" level=info msg="[UDP] 192.168.2.101:37850 --> time.google.com:123 using GLOBAL"
time="2022-08-21T06:27:17+08:00" level=info msg="[TCP] 192.168.2.101:35838 --> api-gt.baidu.com:443 using GLOBAL"
time="2022-08-21T06:27:17+08:00" level=info msg="[UDP] 192.168.2.101:49058 --> time.google.com:123 using GLOBAL"
time="2022-08-21T06:27:18+08:00" level=info msg="[UDP] 192.168.2.101:44784 --> time.google.com:123 using GLOBAL"
time="2022-08-21T06:27:18+08:00" level=info msg="[TCP] 192.168.2.101:37804 --> api-gt.baidu.com:443 using GLOBAL"
time="2022-08-21T06:27:18+08:00" level=info msg="[UDP] 192.168.2.101:37028 --> time.google.com:123 using GLOBAL"
time="2022-08-21T06:27:19+08:00" level=info msg="[UDP] 192.168.2.101:37535 --> time.google.com:123 using GLOBAL"
#===================== 活动连接信息 =====================#
1. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
2. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
3. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
4. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
5. SourceIP:【192.168.2.101】 - Host:【api-gt.baidu.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
6. SourceIP:【192.168.2.101】 - Host:【Empty】 - DestinationIP:【120.76.118.170】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
7. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
8. SourceIP:【192.168.2.101】 - Host:【api-gt.baidu.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
9. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
10. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
11. SourceIP:【192.168.2.101】 - Host:【api-gt.baidu.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
12. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
13. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
14. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
15. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
16. SourceIP:【192.168.2.101】 - Host:【api-gt.baidu.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
17. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
18. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
19. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
20. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
21. SourceIP:【192.168.2.101】 - Host:【api-gt.baidu.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
22. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
23. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
24. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
25. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
26. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
27. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
28. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
29. SourceIP:【192.168.2.101】 - Host:【clients4.google.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
30. SourceIP:【192.168.2.101】 - Host:【api-gt.baidu.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
31. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
32. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
33. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
34. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
35. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
36. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
37. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
38. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
39. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
40. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
41. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
42. SourceIP:【192.168.2.101】 - Host:【Empty】 - DestinationIP:【203.205.235.249】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
43. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
44. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
45. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
46. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
47. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
48. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
49. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
50. SourceIP:【192.168.2.101】 - Host:【Empty】 - DestinationIP:【47.94.136.8】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
51. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
52. SourceIP:【192.168.2.101】 - Host:【api-gt.baidu.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
53. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
54. SourceIP:【192.168.2.101】 - Host:【api-gt.baidu.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
55. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
56. SourceIP:【192.168.2.101】 - Host:【Empty】 - DestinationIP:【43.135.106.179】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
57. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
58. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
59. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
60. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
61. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
62. SourceIP:【240e:3a1:a07d:e7b1:2ad1:27ff:fef8:fbc4】 - Host:【edge-mqtt.facebook.com】 - DestinationIP:【2a03:2880:f05a:19:face:b00c:0:8e】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
63. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
64. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
65. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
66. SourceIP:【192.168.2.101】 - Host:【portal.fb.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
67. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
68. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
69. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
70. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
71. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
72. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
73. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
74. SourceIP:【192.168.2.101】 - Host:【api-gt.baidu.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
75. SourceIP:【192.168.2.101】 - Host:【alive.github.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
76. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
77. SourceIP:【192.168.2.101】 - Host:【graph.facebook.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
78. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
79. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
80. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
81. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
82. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
83. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
84. SourceIP:【192.168.2.101】 - Host:【mime.baidu.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
85. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
86. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
87. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
88. SourceIP:【192.168.2.101】 - Host:【www.google.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
89. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
90. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
91. SourceIP:【192.168.2.101】 - Host:【api-gt.baidu.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
92. SourceIP:【192.168.2.101】 - Host:【portal.fb.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
93. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
94. SourceIP:【192.168.2.101】 - Host:【api-gt.baidu.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
95. SourceIP:【192.168.2.101】 - Host:【graph.facebook.com】 - DestinationIP:【104.23.124.189】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
96. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
97. SourceIP:【192.168.2.101】 - Host:【eden.vivo.com.cn】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
98. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
99. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
100. SourceIP:【192.168.2.101】 - Host:【api-gt.baidu.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
101. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
102. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
103. SourceIP:【192.168.2.101】 - Host:【beacons.gcp.gvt2.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
104. SourceIP:【240e:3a1:a07d:e7b1:2ad1:27ff:fef8:fbc4】 - Host:【ds.alipay.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
105. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
106. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
107. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
108. SourceIP:【192.168.2.101】 - Host:【mtalk.google.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
109. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
110. SourceIP:【192.168.2.101】 - Host:【play.googleapis.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
111. SourceIP:【192.168.2.101】 - Host:【api-gt.baidu.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
112. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
113. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
114. SourceIP:【240e:3a1:a07d:e7b1:2ad1:27ff:fef8:fbc4】 - Host:【edge-mqtt.facebook.com】 - DestinationIP:【2a03:2880:f05a:19:face:b00c:0:8e】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
115. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
116. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
117. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
118. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
119. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
120. SourceIP:【192.168.2.101】 - Host:【Empty】 - DestinationIP:【114.114.114.114】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
121. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
122. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
123. SourceIP:【240e:3a1:a07d:e7b1:2ad1:27ff:fef8:fbc4】 - Host:【avatars.githubusercontent.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
124. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
125. SourceIP:【192.168.2.101】 - Host:【api-gt.baidu.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
126. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
127. SourceIP:【192.168.2.101】 - Host:【api-gt.baidu.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
128. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
129. SourceIP:【192.168.2.101】 - Host:【time.google.com】 - DestinationIP:【216.239.35.8】 - Network:【udp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
130. SourceIP:【192.168.2.101】 - Host:【Empty】 - DestinationIP:【114.114.114.114】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
131. SourceIP:【192.168.2.101】 - Host:【Empty】 - DestinationIP:【59.36.121.98】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【zhx040822.shait.xyz:11244】
OpenClash Config
No response
Expected Behavior
我希望可以通過全局的情況下去使用支付寶，因為這對我很有用，很有必要，現在我只能每天重新裝載open clash才能解決這個支付寶無法使用的問題，其他一切正常。
Screenshots
No response
This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 5 days
![github-actions[bot] avatar](https://avatars.githubusercontent.com/in/15368?v=4 "Published by a pub.dev verified publisher"){kind=small}