OpenClash
OpenClash copied to clipboard
Published
20 hours ago •
vernesong
vernesong
[Bug] 部分网站(PT,NewBing)流量间歇性不经过内核，已重置连接
Verify Steps
- [x] Tracker 我已经在 Issue Tracker 中找过我要提出的问题
- [X] Latest 我已经使用最新 Dev 版本测试过，问题依旧存在
- [X] Core 这是 OpenClash 存在的问题，并非我所使用的 Clash 或 Meta 等内核的特定问题
- [X] Meaningful 我提交的不是无意义的 催促更新或修复 请求
OpenClash Version
v0.45.121-beta
Bug on Environment
Lean
Bug on Platform
Linux-arm64
To Reproduce
仅特定网站，每天随机时段发生 bing完全不通过代理
Describe the Bug
发生问题的网站
- 大部分使用NexusPHP架构的PT站，如馒头 但同架构的U2从未出错
- 微软bing
情况描述
- 红米AX6，lean源码，作为主路由拨号上网使用
- 由于一直未查到可以解决的Issue，且等一段时间能恢复，就一直没管
- 当前使用的5个站点中，除U2外的4个站点都会同时无法访问
- 问题从最初使用开始就一直存在，每天都会随机发生几次
- 显示错误
已重置链接，持续时间2-10分钟不等，恢复也是同时 -
已重置链接时，clash yacd的连接页面中，没有这些站点的域名 - 在可访问状态下，
clash yacd的连接页面中，会存在这些站点的连接状态 - 在不可访问状态下，使用电脑或路由器ping站点，能返回正确的IP地址
-
bing.com无法通过clash，会直连并被定向至中国版地址cn.bing.com- 使用lhei1规则，内含规则
bingbing.comwww.bing.com等 - Microsoft组选择为代理，bing相关域名中，仅有
services.bingapis.com通过了clash - clash内核日志中未见其余bing相关域名
- 使用lhei1规则，内含规则
类似的Issue，但不一样
#31 #425 #3078
尝试的操作
- 关闭openclash，依旧无法访问
- 重启路由器，正常访问
- 重启后不开openclash，持续两天未出现相同问题
- 关闭IPv6
- 更新Premium内核版本至2023.05.29
- 使用
clash for windows连接PT或bing正常使用 - 使用手机
clash for android正常使用- 配置文件均一致
- 手动设置问题站点的DNS解析地址
- 修改
openclash的Defualt-NameServer、Nameserver与Fallback服务器 - 添加
Fallback-Filter与Nameserver-Policy、fake-ip-filter - 开关
禁止 Dnsmasq 缓存 DNS - 开关
禁用QUIC - 切换
兼容与混合模式 - 代理改为
Global或DIRECT - 切换
openwrt内核版本5.15/5.10
OpenClash Log
内核日志
访问`www.bing.com`时的日志
手动过滤了所有来自NAS的连接，此为过滤后的剩余内容
2023-06-16 22:12:11 INF [TCP] connected lAddr=192.168.60.104:8986 rAddr=login.live.com:443 mode=rule rule=DomainSuffix(live.com) proxy=⌨️ 微软[SG中继] ruleGroup=Microsoft
2023-06-16 22:12:11 INF [TCP] connected lAddr=192.168.60.104:3176 rAddr=aadcdn.msauth.net:443 mode=rule rule=DomainSuffix(msauth.net) proxy=⌨️ 微软[SG中继] ruleGroup=Microsoft
2023-06-16 22:12:09 INF [TCP] connected lAddr=192.168.60.104:3172 rAddr=login.microsoftonline.com:443 mode=rule rule=DomainSuffix(microsoftonline.com) proxy=⌨️ 微软[SG中继] ruleGroup=Microsoft
2023-06-16 22:12:09 INF [TCP] connected lAddr=192.168.60.104:3170 rAddr=login.microsoftonline.com:443 mode=rule rule=DomainSuffix(microsoftonline.com) proxy=⌨️ 微软[SG中继] ruleGroup=Microsoft
2023-06-16 22:12:07 INF [TCP] connected lAddr=192.168.60.104:3162 rAddr=www.google.com:443 mode=rule rule=DomainKeyword(google) proxy=✈️ 代理[🇯🇵 日本 IEPL [04] [Lite]] ruleGroup=PROXY
2023-06-16 22:12:07 INF [TCP] connected lAddr=192.168.60.104:3163 rAddr=www.google.com:443 mode=rule rule=DomainKeyword(google) proxy=✈️ 代理[🇯🇵 日本 IEPL [04] [Lite]] ruleGroup=PROXY
2023-06-16 22:12:05 WRN [TCP] dial failed error=dial tcp4 192.168.31.211:7680: i/o timeout proxy=DIRECT lAddr=192.168.60.104:3159 rAddr=192.168.31.211:7680 rule=IPCIDR rulePayload=192.168.0.0/16
2023-06-16 22:12:03 WRN [TCP] dial failed error=dial tcp4 192.168.8.165:7680: i/o timeout proxy=DIRECT lAddr=192.168.60.104:3154 rAddr=192.168.8.165:7680 rule=IPCIDR rulePayload=192.168.0.0/16
2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.104:3150 rAddr=services.bingapis.com:443 mode=rule rule=DomainSuffix(bingapis.com) proxy=⌨️ 微软[SG中继] ruleGroup=Microsoft
2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.204:59502 rAddr=149.154.175.54:443 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]]
2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.204:59500 rAddr=149.154.175.54:443 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]]
2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.204:60532 rAddr=91.108.56.194:5222 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]]
2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.204:60530 rAddr=91.108.56.194:5222 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]]
2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.204:34448 rAddr=91.108.56.138:443 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]]
2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.204:34444 rAddr=91.108.56.138:443 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]]
2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.204:34446 rAddr=91.108.56.138:443 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]]
2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.204:36930 rAddr=149.154.165.111:443 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]]
2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.204:36928 rAddr=149.154.165.111:443 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]]
2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.204:34438 rAddr=91.108.56.138:443 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]]
2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.104:3132 rAddr=149.154.175.54:443 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]]
2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.104:3133 rAddr=149.154.175.52:80 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]]
2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.104:3131 rAddr=149.154.175.52:443 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]]
2023-06-16 22:11:52 INF [TCP] connected lAddr=192.168.60.104:3134 rAddr=149.154.175.54:80 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [04] [Lite]]
2023-06-16 22:11:52 WRN [TCP] dial failed error=dial tcp4 192.168.31.211:7680: i/o timeout proxy=DIRECT lAddr=192.168.60.104:3120 rAddr=192.168.31.211:7680 rule=IPCIDR rulePayload=192.168.0.0/16
2023-06-16 22:11:52 WRN [TCP] dial failed error=dial tcp4 192.168.8.165:7680: i/o timeout proxy=DIRECT lAddr=192.168.60.104:3114 rAddr=192.168.8.165:7680 rule=IPCIDR rulePayload=192.168.0.0/16
2023-06-16 22:11:52 WRN [TCP] dial failed error=dial tcp4 8.222.194.7:27119: i/o timeout proxy=🇨🇳 回国 lAddr=192.168.60.10:50539 rAddr=8.222.194.7:27119 rule=RuleSet rulePayload=Domestic IPs
2023-06-16 22:11:52 WRN [TCP] dial failed error=dial tcp4 192.168.31.211:7680: i/o timeout proxy=DIRECT lAddr=192.168.60.104:3095 rAddr=192.168.31.211:7680 rule=IPCIDR rulePayload=192.168.0.0/16
2023-06-16 22:11:52 WRN [TCP] dial failed error=dial tcp4 192.168.8.165:7680: i/o timeout proxy=DIRECT lAddr=192.168.60.104:3092 rAddr=192.168.8.165:7680 rule=IPCIDR rulePayload=192.168.0.0/16
...
调试日志
OpenClash 调试日志
生成时间: 2023-06-16 22:19:16 插件版本: v0.45.121-beta 隐私提示: 上传此日志前请注意检查、屏蔽公网IP、节点、密码等相关敏感信息
#===================== 系统信息 =====================#
主机型号: Redmi AX6
固件版本: OpenWrt SNAPSHOT r5894-61b7a5aa7
LuCI版本: git-23.104.57901-bf5e9ad-1
内核版本: 5.10.176
处理器架构:
#此项有值时,如不使用IPv6,建议到网络-接口-lan的设置中禁用IPV6的DHCP
IPV6-DHCP:
DNS劫持: Dnsmasq 转发
#DNS劫持为Dnsmasq时，此项结果应仅有配置文件的DNS监听地址
Dnsmasq转发设置: 127.0.0.1#7874
#===================== 依赖检查 =====================#
dnsmasq-full: 已安装
coreutils: 已安装
coreutils-nohup: 已安装
bash: 已安装
curl: 已安装
ca-certificates: 已安装
ipset: 已安装
ip-full: 已安装
libcap: 已安装
libcap-bin: 已安装
ruby: 已安装
ruby-yaml: 已安装
ruby-psych: 已安装
ruby-pstore: 已安装
kmod-tun(TUN模式): 已安装
luci-compat(Luci >= 19.07): 已安装
kmod-inet-diag(PROCESS-NAME): 已安装
unzip: 已安装
iptables-mod-tproxy: 已安装
kmod-ipt-tproxy: 已安装
iptables-mod-extra: 已安装
kmod-ipt-extra: 已安装
kmod-ipt-nat: 已安装
#===================== 内核检查 =====================#
运行状态: 运行中
运行内核：TUN
进程pid: 31701
运行权限: 31701: cap_dac_override,cap_net_bind_service,cap_net_admin,cap_net_raw,cap_sys_ptrace,cap_sys_resource=eip
运行用户: nobody
已选择的架构: linux-arm64
#下方无法显示内核版本号时请确认您的内核版本是否正确或者有无权限
Tun内核版本: 2023.05.29
Tun内核文件: 存在
Tun内核运行权限: 正常
Dev内核版本:
Dev内核文件: 不存在
Dev内核运行权限: 否
Meta内核版本:
Meta内核文件: 不存在
Meta内核运行权限: 否
#===================== 插件设置 =====================#
当前配置文件: /etc/openclash/config/config.yaml
启动配置文件: /etc/openclash/config.yaml
运行模式: redir-host-mix
默认代理模式: rule
UDP流量转发(tproxy): 启用
自定义DNS: 停用
IPV6代理: 停用
IPV6-DNS解析: 停用
禁用Dnsmasq缓存: 启用
自定义规则: 停用
仅允许内网: 启用
仅代理命中规则流量: 停用
仅允许常用端口流量: 停用
绕过中国大陆IP: 启用
路由本机代理: 启用
#启动异常时建议关闭此项后重试
混合节点: 停用
保留配置: 停用
#启动异常时建议关闭此项后重试
第三方规则: 停用
#===================== 配置文件 =====================#
port: 7890
socks-port: 7891
mixed-port: 7893
allow-lan: true
mode: rule
log-level: info
external-controller: 0.0.0.0:9090
experimental:
sniff-tls-sni: true
my_setting:
- 3600
- 86400
- 604800
- http://www.apple.com/generate_204
- http://wifi.vivo.com.cn/generate_204
dns:
enable: true
listen: 0.0.0.0:7874
enhanced-mode: fake-ip
fake-ip-range: 198.18.0.1/16
default-nameserver:
- 119.29.29.29
- 223.5.5.5
nameserver:
- 210.5.56.145
- https://doh.pub/dns-query
- https://dns.alidns.com/dns-query
fallback:
- https://dns.cloudflare.com/dns-query
- https://public.dns.iij.jp/dns-query
- tls://dot.pub
- tls://dns.alidns.com
nameserver-policy:
"+.163.com": 119.29.29.29
"+.126.com": 119.29.29.29
"+.126.net": 119.29.29.29
"+.127.net": 119.29.29.29
"+.netease.com": 119.29.29.29
"+.taobao.com": 223.5.5.5
"+.tmall.com": 223.5.5.5
"+.alipay.com": 223.5.5.5
"+.alicdn.com": 223.5.5.5
"+.jd.com": 119.29.29.29
"+.qq.com": 119.29.29.29
"+.tencent.com": 119.29.29.29
"+.weixin.com": 119.29.29.29
"+.bilibili.com": 119.29.29.29
"+.hdslb.com": 119.29.29.29
fallback-filter:
geoip: false
geoip-code: CN
ipcidr:
- 0.0.0.0/8
- 10.0.0.0/8
- 100.64.0.0/10
- 127.0.0.0/8
- 169.254.0.0/16
- 172.16.0.0/12
- 192.0.0.0/24
- 192.0.2.0/24
- 192.88.99.0/24
- 192.168.0.0/16
- 198.18.0.0/15
- 198.51.100.0/24
- 203.0.113.0/24
- 224.0.0.0/4
- 240.0.0.0/4
- 255.255.255.255/32
fake-ip-filter:
- "*.lan"
- "*.localdomain"
- "*.example"
- "*.invalid"
- "*.localhost"
- "*.test"
- "*.local"
- "*.home.arpa"
- time.*.com
- time.*.gov
- time.*.edu.cn
- time.*.apple.com
- time1.*.com
- time2.*.com
- time3.*.com
- time4.*.com
- time5.*.com
- time6.*.com
- time7.*.com
- ntp.*.com
- ntp1.*.com
- ntp2.*.com
- ntp3.*.com
- ntp4.*.com
- ntp5.*.com
- ntp6.*.com
- ntp7.*.com
- "*.time.edu.cn"
- "*.ntp.org.cn"
- "+.pool.ntp.org"
- time1.cloud.tencent.com
- music.163.com
- "*.music.163.com"
- "*.126.net"
- musicapi.taihe.com
- music.taihe.com
- songsearch.kugou.com
- trackercdn.kugou.com
- "*.kuwo.cn"
- api-jooxtt.sanook.com
- api.joox.com
- joox.com
- y.qq.com
- "*.y.qq.com"
- streamoc.music.tc.qq.com
- mobileoc.music.tc.qq.com
- isure.stream.qqmusic.qq.com
- dl.stream.qqmusic.qq.com
- aqqmusic.tc.qq.com
- amobile.music.tc.qq.com
- "*.xiami.com"
- "*.music.migu.cn"
- music.migu.cn
- "*.msftconnecttest.com"
- "*.msftncsi.com"
- msftconnecttest.com
- msftncsi.com
- localhost.ptlogin2.qq.com
- localhost.sec.qq.com
- "+.srv.nintendo.net"
- "+.stun.playstation.net"
- xbox.*.microsoft.com
- xnotify.xboxlive.com
- "+.battlenet.com.cn"
- "+.wotgame.cn"
- "+.wggames.cn"
- "+.wowsgame.cn"
- "+.wargaming.net"
- proxy.golang.org
- stun.*.*
- stun.*.*.*
- "+.stun.*.*"
- "+.stun.*.*.*"
- "+.stun.*.*.*.*"
- heartbeat.belkin.com
- "*.linksys.com"
- "*.linksyssmartwifi.com"
- "*.router.asus.com"
- mesu.apple.com
- swscan.apple.com
- swquery.apple.com
- swdownload.apple.com
- swcdn.apple.com
- swdist.apple.com
- lens.l.google.com
- stun.l.google.com
- "+.nflxvideo.net"
- "*.square-enix.com"
- "*.finalfantasyxiv.com"
- "*.ffxiv.com"
- "+.*"
ipv6: false
proxy-groups:
- name: "✈️ 代理"
type: select
proxies:
- "\U0001F4F6 Auto - UrlTest"
- DIRECT
- "\U0001F1EF\U0001F1F5 小盖"
- "\U0001F1ED\U0001F1F0 香港Auto"
- "\U0001F1F9\U0001F1FC 台湾Auto"
- "\U0001F1EF\U0001F1F5 日本Auto"
- "\U0001F1F8\U0001F1EC 新加坡Auto"
- "\U0001F1FA\U0001F1F8 美国Auto"
- "\U0001F6F0️ GIAAuto"
use:
- HK
- TW
- JP
- SG
- US
- Other-nodes
- name: "\U0001F6F0️ GIAAuto"
type: select
proxies:
- DIRECT
use:
- GIA
- name: "\U0001F1E8\U0001F1F3 回国"
type: select
proxies:
- DIRECT
- "✈️ 代理"
- "⭐️ 个人内网"
use:
- HK
- name: "⭐️ 个人内网"
type: select
proxies:
- DIRECT
- "\U0001F1E8\U0001F1F3 回国直连1"
- "\U0001F1E8\U0001F1F3 回国直连2"
- "\U0001F1E8\U0001F1F3 回国中继香港Ali"
- "\U0001F1E8\U0001F1F3 回国中继香港Dmit"
- name: "\U0001F4BE SMB"
type: select
proxies:
- DIRECT
- "⭐️ 个人内网"
- "\U0001F1EF\U0001F1F5 小盖"
- name: "\U0001F5A5️ Nas"
type: select
proxies:
- DIRECT
- "✈️ 代理"
- name: "\U0001F1EF\U0001F1F5 小盖"
type: select
proxies:
- DIRECT
- SG中继
- SG233
- name: "\U0001F3F4☠️ 其他国家"
type: select
use:
- Other-nodes
- name: "\U0001F6A9 Others"
type: select
proxies:
- "✈️ 代理"
- DIRECT
- name: "\U0001F3AE Steam"
type: select
proxies:
- "✈️ 代理"
- DIRECT
- "\U0001F1ED\U0001F1F0 香港Auto"
- "\U0001F1F9\U0001F1FC 台湾Auto"
- "\U0001F1EF\U0001F1F5 日本Auto"
- "\U0001F1F8\U0001F1EC 新加坡Auto"
- "\U0001F1FA\U0001F1F8 美国Auto"
- "\U0001F3F4☠️ 其他国家"
- name: "⌨️ 微软"
type: select
proxies:
- DIRECT
- "✈️ 代理"
- "\U0001F1EF\U0001F1F5 小盖"
- "\U0001F1ED\U0001F1F0 香港Auto"
- "\U0001F1F9\U0001F1FC 台湾Auto"
- "\U0001F1EF\U0001F1F5 日本Auto"
- "\U0001F1F8\U0001F1EC 新加坡Auto"
- "\U0001F1FA\U0001F1F8 美国Auto"
- "\U0001F3F4☠️ 其他国家"
- name: "\U0001F4AC ChatGPT"
type: select
proxies:
- "✈️ 代理"
- DIRECT
- "\U0001F1EF\U0001F1F5 小盖"
- "\U0001F1ED\U0001F1F0 香港Auto"
- "\U0001F1F9\U0001F1FC 台湾Auto"
- "\U0001F1EF\U0001F1F5 日本Auto"
- "\U0001F1F8\U0001F1EC 新加坡Auto"
- "\U0001F1FA\U0001F1F8 美国Auto"
- "\U0001F3F4☠️ 其他国家"
- name: "\U0001F6AB AdBlock"
type: select
proxies:
- REJECT
- DIRECT
- "✈️ 代理"
- name: "\U0001F39E️ 国内流媒体"
type: select
proxies:
- DIRECT
- "✈️ 代理"
- "⭐️ 个人内网"
- "\U0001F1ED\U0001F1F0 香港Auto"
- "\U0001F1F9\U0001F1FC 台湾Auto"
- "\U0001F1EF\U0001F1F5 日本Auto"
- name: "\U0001F3AC 国外流媒体"
type: select
proxies:
- "✈️ 代理"
- DIRECT
- "\U0001F1ED\U0001F1F0 香港Auto"
- "\U0001F1EF\U0001F1F5 日本Auto"
- "\U0001F1F8\U0001F1EC 新加坡Auto"
- "\U0001F1FA\U0001F1F8 美国Auto"
- "\U0001F3F4☠️ 其他国家"
- name: "\U0001F4FA YouTube"
type: select
proxies:
- "✈️ 代理"
- DIRECT
- "\U0001F1ED\U0001F1F0 香港Auto"
- "\U0001F1EF\U0001F1F5 日本Auto"
- "\U0001F1F8\U0001F1EC 新加坡Auto"
- "\U0001F1FA\U0001F1F8 美国Auto"
- "\U0001F3F4☠️ 其他国家"
- name: "\U0001F1ED\U0001F1F0 香港Auto"
type: url-test
use:
- HK
url: http://www.apple.com/generate_204
interval: 3600
- name: "\U0001F1F9\U0001F1FC 台湾Auto"
type: url-test
use:
- TW
url: http://www.apple.com/generate_204
interval: 3600
- name: "\U0001F1EF\U0001F1F5 日本Auto"
type: url-test
use:
- JP
url: http://www.apple.com/generate_204
interval: 3600
- name: "\U0001F1F8\U0001F1EC 新加坡Auto"
type: url-test
use:
- SG
url: http://www.apple.com/generate_204
interval: 3600
- name: "\U0001F1FA\U0001F1F8 美国Auto"
type: url-test
use:
- US
url: http://www.apple.com/generate_204
interval: 3600
- name: "\U0001F4F6 Auto - UrlTest"
type: url-test
use:
- HK
- JP
- SG
- US
url: http://www.apple.com/generate_204
interval: 3600
rules:
- DST-PORT,7895,REJECT
- DST-PORT,7892,REJECT
- IP-CIDR,198.18.0.1/16,REJECT,no-resolve
- "RULE-SET,Reject,\U0001F6AB AdBlock"
- RULE-SET,Special,DIRECT
- "DST-PORT,445,\U0001F4BE SMB"
- DST-PORT,26000,DIRECT
- DOMAIN-SUFFIX,evepc.163.com,DIRECT
- DOMAIN-SUFFIX,gdl.netease.com,DIRECT
- DOMAIN-SUFFIX,reg.163.com,DIRECT
- DOMAIN-SUFFIX,kookapp.cn,DIRECT
- DOMAIN-SUFFIX,kaiheila.cn,DIRECT
- DOMAIN-SUFFIX,vrchat.cloud,✈️ 代理
- DOMAIN-SUFFIX,amplitude.com,✈️ 代理
- IP-CIDR,91.199.81.0/24,✈️ 代理
- IP-CIDR,216.120.180.0/24,✈️ 代理
- PROCESS-NAME,zerotier-one,DIRECT
- DOMAIN-SUFFIX,daemon-tools.cc,⭐️ 个人内网
- DOMAIN-SUFFIX,secure.disc-soft.com,⭐️ 个人内网
- DOMAIN-SUFFIX,maven.creeperhost.net,✈️ 代理
- DOMAIN-SUFFIX,fanart.tv,✈️ 代理
- DOMAIN-SUFFIX,cdn.kernel.org,✈️ 代理
- DOMAIN-SUFFIX,sourceware.org,✈️ 代理
- DOMAIN-SUFFIX,mirror.cyberbits.eu,✈️ 代理
- DOMAIN-SUFFIX,ruby-lang.org,✈️ 代理
- "RULE-SET,YouTube,\U0001F4FA YouTube"
- "RULE-SET,Steam,\U0001F3AE Steam"
- RULE-SET,Microsoft,⌨️ 微软
- "RULE-SET,ChatGPT,\U0001F4AC ChatGPT"
- RULE-SET,PROXY,✈️ 代理
- "RULE-SET,Domestic,\U0001F1E8\U0001F1F3 回国"
- "RULE-SET,Domestic IPs,\U0001F1E8\U0001F1F3 回国"
- "SRC-IP-CIDR,192.168.60.10/32,\U0001F5A5️ Nas"
- RULE-SET,LAN,DIRECT
- "GEOIP,CN,\U0001F1E8\U0001F1F3 回国"
- "MATCH,\U0001F6A9 Others"
redir-port: 7892
tproxy-port: 7895
bind-address: "*"
external-ui: "/usr/share/openclash/ui"
ipv6: false
tun:
enable: true
stack: system
auto-route: false
auto-detect-interface: false
dns-hijack:
- tcp://any:53
profile:
store-selected: true
authentication:
- Clash:RvMpADiG
#===================== 自定义覆写设置 =====================#
#!/bin/sh
. /usr/share/openclash/ruby.sh
. /usr/share/openclash/log.sh
. /lib/functions.sh
# This script is called by /etc/init.d/openclash
# Add your custom overwrite scripts here, they will be take effict after the OpenClash own srcipts
LOG_OUT "Tip: Start Running Custom Overwrite Scripts..."
LOGTIME=$(echo $(date "+%Y-%m-%d %H:%M:%S"))
LOG_FILE="/tmp/openclash.log"
CONFIG_FILE="$1" #config path
#Simple Demo:
#General Demo
#1--config path
#2--key name
#3--value
#ruby_edit "$CONFIG_FILE" "['redir-port']" "7892"
#ruby_edit "$CONFIG_FILE" "['secret']" "123456"
#ruby_edit "$CONFIG_FILE" "['dns']['enable']" "true"
#Hash Demo
#1--config path
#2--key name
#3--hash type value
#ruby_edit "$CONFIG_FILE" "['experimental']" "{'sniff-tls-sni'=>true}"
#ruby_edit "$CONFIG_FILE" "['sniffer']" "{'sniffing'=>['tls','http']}"
#Array Demo:
#1--config path
#2--key name
#3--position(start from 0, end with -1)
#4--value
#ruby_arr_insert "$CONFIG_FILE" "['dns']['nameserver']" "0" "114.114.114.114"
#Array Add From Yaml File Demo:
#1--config path
#2--key name
#3--position(start from 0, end with -1)
#4--value file path
#5--value key name in #4 file
#ruby_arr_add_file "$CONFIG_FILE" "['dns']['fallback-filter']['ipcidr']" "0" "/etc/openclash/custom/openclash_custom_fallback_filter.yaml" "['fallback-filter']['ipcidr']"
#Ruby Script Demo:
#ruby -ryaml -rYAML -I "/usr/share/openclash" -E UTF-8 -e "
# begin
# Value = YAML.load_file('$CONFIG_FILE');
# rescue Exception => e
# puts '${LOGTIME} Error: Load File Failed,【' + e.message + '】';
# end;
#General
# begin
# Thread.new{
# Value['redir-port']=7892;
# Value['tproxy-port']=7895;
# Value['port']=7890;
# Value['socks-port']=7891;
# Value['mixed-port']=7893;
# }.join;
# rescue Exception => e
# puts '${LOGTIME} Error: Set General Failed,【' + e.message + '】';
# ensure
# File.open('$CONFIG_FILE','w') {|f| YAML.dump(Value, f)};
# end" 2>/dev/null >> $LOG_FILE
exit 0
#===================== 自定义防火墙设置 =====================#
#!/bin/sh
. /usr/share/openclash/log.sh
. /lib/functions.sh
# This script is called by /etc/init.d/openclash
# Add your custom firewall rules here, they will be added after the end of the OpenClash iptables rules
LOG_OUT "Tip: Start Add Custom Firewall Rules..."
exit 0
#===================== IPTABLES 防火墙设置 =====================#
#IPv4 NAT chain
# Generated by iptables-save v1.8.7 on Fri Jun 16 22:19:17 2023
*nat
:PREROUTING ACCEPT [27116:1766637]
:INPUT ACCEPT [33816:2032025]
:OUTPUT ACCEPT [37803:2291413]
:POSTROUTING ACCEPT [28291:1597963]
:MINIUPNPD - [0:0]
:MINIUPNPD-POSTROUTING - [0:0]
:openclash - [0:0]
:openclash_output - [0:0]
:postrouting_iptv_rule - [0:0]
:postrouting_lan_rule - [0:0]
:postrouting_rule - [0:0]
:postrouting_wan_rule - [0:0]
:prerouting_iptv_rule - [0:0]
:prerouting_lan_rule - [0:0]
:prerouting_rule - [0:0]
:prerouting_wan_rule - [0:0]
:zone_iptv_postrouting - [0:0]
:zone_iptv_prerouting - [0:0]
:zone_lan_postrouting - [0:0]
:zone_lan_prerouting - [0:0]
:zone_wan_postrouting - [0:0]
:zone_wan_prerouting - [0:0]
-A PREROUTING -p tcp -m comment --comment "OpenClash TCP DNS Hijack" -m tcp --dport 53 -j ACCEPT
-A PREROUTING -p tcp -m tcp --dport 53 -m comment --comment "OpenClash DNS Hijack" -j REDIRECT --to-ports 53
-A PREROUTING -p udp -m udp --dport 53 -m comment --comment "OpenClash DNS Hijack" -j REDIRECT --to-ports 53
-A PREROUTING -p udp -m udp --dport 53 -j REDIRECT --to-ports 53
-A PREROUTING -p tcp -m tcp --dport 53 -j REDIRECT --to-ports 53
-A PREROUTING -m comment --comment "!fw3: Custom prerouting rule chain" -j prerouting_rule
-A PREROUTING -i br-lan -m comment --comment "!fw3" -j zone_lan_prerouting
-A PREROUTING -i pppoe-wan -m comment --comment "!fw3" -j zone_wan_prerouting
-A PREROUTING -p tcp -j openclash
-A OUTPUT -j openclash_output
-A POSTROUTING -m comment --comment "!fw3: Custom postrouting rule chain" -j postrouting_rule
-A POSTROUTING -o br-lan -m comment --comment "!fw3" -j zone_lan_postrouting
-A POSTROUTING -o pppoe-wan -m comment --comment "!fw3" -j zone_wan_postrouting
-A openclash -p tcp -m tcp --sport 1688 -j RETURN
-A openclash -m set --match-set localnetwork dst -j RETURN
-A openclash -m set --match-set china_ip_route dst -m set ! --match-set china_ip_route_pass dst -j RETURN
-A openclash -p tcp -j REDIRECT --to-ports 7892
-A openclash_output -p tcp -m tcp --sport 1688 -j RETURN
-A openclash_output -m set --match-set localnetwork dst -j RETURN
-A openclash_output -m owner ! --uid-owner 65534 -m set --match-set china_ip_route dst -m set ! --match-set china_ip_route_pass dst -j RETURN
-A openclash_output -p tcp -m owner ! --uid-owner 65534 -j REDIRECT --to-ports 7892
-A zone_iptv_postrouting -m comment --comment "!fw3: Custom iptv postrouting rule chain" -j postrouting_iptv_rule
-A zone_iptv_prerouting -m comment --comment "!fw3: Custom iptv prerouting rule chain" -j prerouting_iptv_rule
-A zone_lan_postrouting -m comment --comment "!fw3: Custom lan postrouting rule chain" -j postrouting_lan_rule
-A zone_lan_prerouting -m comment --comment "!fw3: Custom lan prerouting rule chain" -j prerouting_lan_rule
-A zone_wan_postrouting -j MINIUPNPD-POSTROUTING
-A zone_wan_postrouting -m comment --comment "!fw3: Custom wan postrouting rule chain" -j postrouting_wan_rule
-A zone_wan_postrouting -m comment --comment "!fw3" -j MASQUERADE --mode fullcone
-A zone_wan_prerouting -j MINIUPNPD
-A zone_wan_prerouting -m comment --comment "!fw3: Custom wan prerouting rule chain" -j prerouting_wan_rule
COMMIT
# Completed on Fri Jun 16 22:19:18 2023
#IPv4 Mangle chain
# Generated by iptables-save v1.8.7 on Fri Jun 16 22:19:18 2023
*mangle
:PREROUTING ACCEPT [30652362:14108104877]
:INPUT ACCEPT [989063:734380910]
:FORWARD ACCEPT [29667683:13374421561]
:OUTPUT ACCEPT [684738:675606992]
:POSTROUTING ACCEPT [30350940:14049869619]
:openclash - [0:0]
:openclash_dns_hijack - [0:0]
:openclash_upnp - [0:0]
-A PREROUTING -p udp -j openclash
-A PREROUTING -p tcp -m tcp --dport 53 -j openclash_dns_hijack
-A FORWARD -o pppoe-wan -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
-A FORWARD -i pppoe-wan -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
-A openclash -p udp -m udp --sport 500 -j RETURN
-A openclash -p udp -m udp --sport 68 -j RETURN
-A openclash -i utun -j RETURN
-A openclash -m set --match-set localnetwork dst -j RETURN
-A openclash -m set --match-set china_ip_route dst -m set ! --match-set china_ip_route_pass dst -j RETURN
-A openclash -p udp -j openclash_upnp
-A openclash -j MARK --set-xmark 0x162/0xffffffff
-A openclash_dns_hijack -p tcp -m comment --comment "OpenClash TCP DNS Hijack" -m tcp --dport 53 -j MARK --set-xmark 0x162/0xffffffff
COMMIT
# Completed on Fri Jun 16 22:19:18 2023
#IPv4 Filter chain
# Generated by iptables-save v1.8.7 on Fri Jun 16 22:19:18 2023
*filter
:INPUT ACCEPT [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [0:0]
:MINIUPNPD - [0:0]
:V2RAY-SERVER - [0:0]
:forwarding_iptv_rule - [0:0]
:forwarding_lan_rule - [0:0]
:forwarding_rule - [0:0]
:forwarding_wan_rule - [0:0]
:input_iptv_rule - [0:0]
:input_lan_rule - [0:0]
:input_rule - [0:0]
:input_wan_rule - [0:0]
:openclash_wan_input - [0:0]
:output_iptv_rule - [0:0]
:output_lan_rule - [0:0]
:output_rule - [0:0]
:output_wan_rule - [0:0]
:reject - [0:0]
:syn_flood - [0:0]
:zone_iptv_dest_ACCEPT - [0:0]
:zone_iptv_dest_REJECT - [0:0]
:zone_iptv_forward - [0:0]
:zone_iptv_input - [0:0]
:zone_iptv_output - [0:0]
:zone_iptv_src_ACCEPT - [0:0]
:zone_lan_dest_ACCEPT - [0:0]
:zone_lan_forward - [0:0]
:zone_lan_input - [0:0]
:zone_lan_output - [0:0]
:zone_lan_src_ACCEPT - [0:0]
:zone_wan_dest_ACCEPT - [0:0]
:zone_wan_dest_REJECT - [0:0]
:zone_wan_forward - [0:0]
:zone_wan_input - [0:0]
:zone_wan_output - [0:0]
:zone_wan_src_REJECT - [0:0]
-A INPUT -i pppoe-wan -m set ! --match-set localnetwork src -j openclash_wan_input
-A INPUT -j V2RAY-SERVER
-A INPUT -i lo -m comment --comment "!fw3" -j ACCEPT
-A INPUT -m comment --comment "!fw3: Custom input rule chain" -j input_rule
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment "!fw3" -j ACCEPT
-A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m comment --comment "!fw3" -j syn_flood
-A INPUT -i br-lan -m comment --comment "!fw3" -j zone_lan_input
-A INPUT -i pppoe-wan -m comment --comment "!fw3" -j zone_wan_input
-A FORWARD -o utun -p udp -m udp --dport 443 -m comment --comment "OpenClash QUIC REJECT" -m set ! --match-set china_ip_route dst -j REJECT --reject-with icmp-port-unreachable
-A FORWARD -o utun -m comment --comment "OpenClash TUN Forward" -j ACCEPT
-A FORWARD -m physdev --physdev-is-bridged -j ACCEPT
-A FORWARD -m physdev --physdev-is-bridged -j ACCEPT
-A FORWARD -m physdev --physdev-is-bridged -j ACCEPT
-A FORWARD -m physdev --physdev-is-bridged -j ACCEPT
-A FORWARD -m comment --comment "!fw3: Custom forwarding rule chain" -j forwarding_rule
-A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment "!fw3" -j ACCEPT
-A FORWARD -i br-lan -m comment --comment "!fw3" -j zone_lan_forward
-A FORWARD -i pppoe-wan -m comment --comment "!fw3" -j zone_wan_forward
-A FORWARD -m comment --comment "!fw3" -j reject
-A FORWARD -m physdev --physdev-is-bridged -j ACCEPT
-A OUTPUT -o lo -m comment --comment "!fw3" -j ACCEPT
-A OUTPUT -m comment --comment "!fw3: Custom output rule chain" -j output_rule
-A OUTPUT -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment "!fw3" -j ACCEPT
-A OUTPUT -o br-lan -m comment --comment "!fw3" -j zone_lan_output
-A OUTPUT -o pppoe-wan -m comment --comment "!fw3" -j zone_wan_output
-A V2RAY-SERVER -p tcp -m tcp --dport 10251 -m comment --comment ss -j ACCEPT
-A V2RAY-SERVER -p udp -m udp --dport 10251 -m comment --comment ss -j ACCEPT
-A openclash_wan_input -p udp -m multiport --dports 7892,7895,9090,7890,7891,7893,7874 -j REJECT --reject-with icmp-port-unreachable
-A openclash_wan_input -p tcp -m multiport --dports 7892,7895,9090,7890,7891,7893,7874 -j REJECT --reject-with icmp-port-unreachable
-A reject -p tcp -m comment --comment "!fw3" -j REJECT --reject-with tcp-reset
-A reject -m comment --comment "!fw3" -j REJECT --reject-with icmp-port-unreachable
-A syn_flood -m limit --limit 25/sec --limit-burst 50 -m comment --comment "!fw3" -j RETURN
-A syn_flood -m comment --comment "!fw3" -j DROP
-A zone_iptv_forward -m comment --comment "!fw3: Custom iptv forwarding rule chain" -j forwarding_iptv_rule
-A zone_iptv_forward -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port forwards" -j ACCEPT
-A zone_iptv_forward -m comment --comment "!fw3" -j zone_iptv_dest_REJECT
-A zone_iptv_input -m comment --comment "!fw3: Custom iptv input rule chain" -j input_iptv_rule
-A zone_iptv_input -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port redirections" -j ACCEPT
-A zone_iptv_input -m comment --comment "!fw3" -j zone_iptv_src_ACCEPT
-A zone_iptv_output -m comment --comment "!fw3: Custom iptv output rule chain" -j output_iptv_rule
-A zone_iptv_output -m comment --comment "!fw3" -j zone_iptv_dest_ACCEPT
-A zone_lan_dest_ACCEPT -o br-lan -m comment --comment "!fw3" -j ACCEPT
-A zone_lan_forward -m comment --comment "!fw3: Custom lan forwarding rule chain" -j forwarding_lan_rule
-A zone_lan_forward -m comment --comment "!fw3: Zone lan to wan forwarding policy" -j zone_wan_dest_ACCEPT
-A zone_lan_forward -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port forwards" -j ACCEPT
-A zone_lan_forward -m comment --comment "!fw3" -j zone_lan_dest_ACCEPT
-A zone_lan_input -m comment --comment "!fw3: Custom lan input rule chain" -j input_lan_rule
-A zone_lan_input -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port redirections" -j ACCEPT
-A zone_lan_input -m comment --comment "!fw3" -j zone_lan_src_ACCEPT
-A zone_lan_output -m comment --comment "!fw3: Custom lan output rule chain" -j output_lan_rule
-A zone_lan_output -m comment --comment "!fw3" -j zone_lan_dest_ACCEPT
-A zone_lan_src_ACCEPT -i br-lan -m conntrack --ctstate NEW,UNTRACKED -m comment --comment "!fw3" -j ACCEPT
-A zone_wan_dest_ACCEPT -o pppoe-wan -m conntrack --ctstate INVALID -m comment --comment "!fw3: Prevent NAT leakage" -j DROP
-A zone_wan_dest_ACCEPT -o pppoe-wan -m comment --comment "!fw3" -j ACCEPT
-A zone_wan_dest_REJECT -o pppoe-wan -m comment --comment "!fw3" -j reject
-A zone_wan_forward -j MINIUPNPD
-A zone_wan_forward -m comment --comment "!fw3: Custom wan forwarding rule chain" -j forwarding_wan_rule
-A zone_wan_forward -p esp -m comment --comment "!fw3: Allow-IPSec-ESP" -j zone_lan_dest_ACCEPT
-A zone_wan_forward -p udp -m udp --dport 500 -m comment --comment "!fw3: Allow-ISAKMP" -j zone_lan_dest_ACCEPT
-A zone_wan_forward -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port forwards" -j ACCEPT
-A zone_wan_forward -m comment --comment "!fw3" -j zone_wan_dest_REJECT
-A zone_wan_input -m comment --comment "!fw3: Custom wan input rule chain" -j input_wan_rule
-A zone_wan_input -p udp -m udp --dport 68 -m comment --comment "!fw3: Allow-DHCP-Renew" -j ACCEPT
-A zone_wan_input -p icmp -m icmp --icmp-type 8 -m comment --comment "!fw3: Allow-Ping" -j ACCEPT
-A zone_wan_input -p igmp -m comment --comment "!fw3: Allow-IGMP" -j ACCEPT
-A zone_wan_input -p tcp -m tcp --dport 1688 -m comment --comment "!fw3: kms" -j ACCEPT
-A zone_wan_input -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port redirections" -j ACCEPT
-A zone_wan_input -m comment --comment "!fw3" -j zone_wan_src_REJECT
-A zone_wan_output -m comment --comment "!fw3: Custom wan output rule chain" -j output_wan_rule
-A zone_wan_output -m comment --comment "!fw3" -j zone_wan_dest_ACCEPT
-A zone_wan_src_REJECT -i pppoe-wan -m comment --comment "!fw3" -j reject
COMMIT
# Completed on Fri Jun 16 22:19:18 2023
#IPv6 NAT chain
#IPv6 Mangle chain
#IPv6 Filter chain
#===================== IPSET状态 =====================#
Name: localnetwork
Type: hash:net
Revision: 6
Header: family inet hashsize 1024 maxelem 65536
Size in memory: 1096
References: 4
Number of entries: 10
Name: china_ip_route
Type: hash:net
Revision: 6
Header: family inet hashsize 4096 maxelem 1000000
Size in memory: 248400
References: 4
Number of entries: 8616
Name: china_ip_route_pass
Type: hash:net
Revision: 6
Header: family inet hashsize 1024 maxelem 1000000
Size in memory: 456
References: 3
Number of entries: 0
#===================== 路由表状态 =====================#
#IPv4
#route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 *WAN IP*.1 0.0.0.0 UG 10 0 0 pppoe-wan
*WAN IP*.1 0.0.0.0 255.255.255.255 UH 0 0 0 pppoe-wan
192.168.60.0 0.0.0.0 255.255.255.0 U 20 0 0 br-lan
198.18.0.0 0.0.0.0 255.255.0.0 U 0 0 0 utun
#ip route list
default via *WAN IP*.1 dev pppoe-wan proto static metric 10
*WAN IP*.1 dev pppoe-wan proto kernel scope link src *WAN IP*.193
192.168.60.0/24 dev br-lan proto static scope link metric 20
198.18.0.0/16 dev utun proto kernel scope link src 198.18.0.1
#ip rule show
0: from all lookup local
32763: from all fwmark 0x162 lookup 354
32764: from all fwmark 0x162 lookup 354
32765: from all fwmark 0x162 lookup 354
32766: from all lookup main
32767: from all lookup default
#IPv6
#route -A inet6
Kernel IPv6 routing table
Destination Next Hop Flags Metric Ref Use Iface
::/0 :: !n -1 1 0 lo
fe80::/64 :: U 256 1 0 br-lan
fe80::/64 :: U 256 1 0 wlan0
fe80::/64 :: U 256 1 0 utun
::/0 :: !n -1 1 0 lo
::1/128 :: Un 0 6 0 lo
fe80::/128 :: Un 0 4 0 br-lan
fe80::/128 :: Un 0 3 0 wlan0
fe80::/128 :: Un 0 3 0 utun
fe80::9e9d:7eff:fe55:e24/128 :: Un 0 4 0 br-lan
fe80::9e9d:7eff:fe55:e25/128 :: Un 0 2 0 wlan0
fe80::e5c4:ab38:817e:8932/128 :: Un 0 2 0 utun
ff00::/8 :: U 256 6 0 br-lan
ff00::/8 :: U 256 1 0 wlan0
ff00::/8 :: U 256 1 0 utun
::/0 :: !n -1 1 0 lo
#ip -6 route list
fe80::/64 dev br-lan proto kernel metric 256 pref medium
fe80::/64 dev wlan0 proto kernel metric 256 pref medium
fe80::/64 dev utun proto kernel metric 256 pref medium
#ip -6 rule show
0: from all lookup local
32765: from all fwmark 0x162 lookup 354
32766: from all lookup main
4200000001: from all iif lo failed_policy
4200000009: from all iif br-lan failed_policy
4200000029: from all iif pppoe-wan failed_policy
#===================== Tun设备状态 =====================#
utun: tun pi multi_queue filter
#===================== 端口占用状态 =====================#
tcp 0 0 198.18.0.1:7777 0.0.0.0:* LISTEN 31701/clash
tcp 0 0 :::7890 :::* LISTEN 31701/clash
tcp 0 0 :::7891 :::* LISTEN 31701/clash
tcp 0 0 :::7892 :::* LISTEN 31701/clash
tcp 0 0 :::7893 :::* LISTEN 31701/clash
tcp 0 0 :::7895 :::* LISTEN 31701/clash
tcp 0 0 :::9090 :::* LISTEN 31701/clash
udp 0 0 :::7874 :::* 31701/clash
udp 0 0 :::7891 :::* 31701/clash
udp 0 0 :::7892 :::* 31701/clash
udp 0 0 :::7893 :::* 31701/clash
udp 0 0 :::7895 :::* 31701/clash
#===================== 测试本机DNS查询(www.baidu.com) =====================#
Server: 127.0.0.1
Address: 127.0.0.1:53
www.baidu.com canonical name = www.a.shifen.com
www.a.shifen.com canonical name = www.wshifen.com
Name: www.wshifen.com
#===================== 测试内核DNS查询(www.instagram.com) =====================#
Status: 0
TC: false
RD: true
RA: true
AD: false
CD: false
Question:
Name: www.instagram.com.
Qtype: 1
Qclass: 1
Answer:
TTL: 146
data: ********
name: www.instagram.com.
type: 1
Additional:
TTL: 0
data: ON:; EDNS: version 0; flags:; udp: 4096
name: .
type: 41
Dnsmasq 当前默认 resolv 文件：/tmp/resolv.conf.d/resolv.conf.auto
#===================== /tmp/resolv.conf.d/resolv.conf.auto =====================#
# Interface lan
nameserver 119.29.29.29
nameserver 8.8.8.8
#===================== 测试本机网络连接(www.baidu.com) =====================#
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: private, no-cache, no-store, proxy-revalidate, no-transform
Connection: keep-alive
Content-Length: 277
Content-Type: text/html
Date: Fri, 16 Jun 2023 14:19:18 GMT
Etag: "575e1f65-115"
Last-Modified: Mon, 13 Jun 2016 02:50:13 GMT
Pragma: no-cache
Server: bfe/1.0.8.18
#===================== 测试本机网络下载(raw.githubusercontent.com) =====================#
HTTP/2 200
cache-control: max-age=300
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox
content-type: text/plain; charset=utf-8
etag: "20367810d6b16552859ed1f051bfbd4e18233617a5eb4443364fd2b5d49bb469"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: deny
x-xss-protection: 1; mode=block
x-github-request-id: 562A:717A:5D7E76:6C6A37:646D0382
accept-ranges: bytes
date: Fri, 16 Jun 2023 14:19:19 GMT
via: 1.1 varnish
x-served-by: cache-nrt-rjtf7700047-NRT
x-cache: HIT
x-cache-hits: 1
x-timer: S1686925160.639208,VS0,VE1
vary: Authorization,Accept-Encoding,Origin
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-fastly-request-id: 090b3daf096b49d27c9bd3ef229969bd0ff710a8
expires: Fri, 16 Jun 2023 14:24:19 GMT
source-age: 53
content-length: 83
#===================== 最近运行日志(自动切换为Debug模式) =====================#
14:19:26 INF [TCP] connected lAddr=192.168.60.10:49061 rAddr=116.202.198.46:43560 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT]
14:19:26 INF [TCP] connected lAddr=192.168.60.10:47059 rAddr=176.9.114.184:7053 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT]
14:19:27 WRN [TCP] dial failed error=dial tcp4 192.168.31.211:7680: i/o timeout proxy=DIRECT lAddr=192.168.60.104:2967 rAddr=192.168.31.211:7680 rule=IPCIDR rulePayload=192.168.0.0/16
14:19:27 DBG [TCP] accept connection lAddr=192.168.60.10:51191 rAddr=107.189.11.95:55555 inbound=Redir
14:19:27 DBG [TCP] accept connection lAddr=192.168.60.10:57497 rAddr=195.154.187.122:55582 inbound=Redir
14:19:27 DBG [TCP] accept connection lAddr=192.168.60.10:59661 rAddr=185.198.26.40:46881 inbound=Redir
14:19:27 DBG [TCP] accept connection lAddr=192.168.60.10:48185 rAddr=183.178.197.34:37967 inbound=Redir
14:19:27 DBG [Matcher] find process failed error=process not found addr=195.154.187.122
14:19:27 DBG [TCP] accept connection lAddr=192.168.60.10:32797 rAddr=162.55.244.56:2468 inbound=Redir
14:19:27 DBG [Matcher] find process failed error=process not found addr=185.198.26.40
14:19:27 DBG [Matcher] find process failed error=process not found addr=107.189.11.95
14:19:27 DBG [TCP] accept connection lAddr=192.168.60.10:34761 rAddr=213.133.102.181:60131 inbound=Redir
14:19:27 DBG [TCP] accept connection lAddr=192.168.60.10:35261 rAddr=23.121.156.209:7777 inbound=Redir
14:19:27 DBG [Matcher] find process failed error=process not found addr=162.55.244.56
14:19:27 DBG [Matcher] find process failed error=process not found addr=183.178.197.34
14:19:27 DBG [TCP] accept connection lAddr=192.168.60.10:44351 rAddr=220.141.202.167:50567 inbound=Redir
14:19:27 DBG [TCP] accept connection lAddr=192.168.60.10:44451 rAddr=73.155.149.103:29570 inbound=Redir
14:19:27 DBG [Matcher] find process failed error=process not found addr=23.121.156.209
14:19:27 DBG [TCP] accept connection lAddr=192.168.60.10:40717 rAddr=81.171.17.155:38167 inbound=Redir
14:19:27 DBG [TCP] accept connection lAddr=192.168.60.10:45861 rAddr=141.144.245.66:40268 inbound=Redir
14:19:27 DBG [TCP] accept connection lAddr=192.168.60.10:34575 rAddr=89.58.28.39:58660 inbound=Redir
14:19:27 WRN [TCP] dial failed error=dial tcp4 23.121.156.209:7777: i/o timeout proxy=🖥️ Nas lAddr=192.168.60.10:33771 rAddr=23.121.156.209:7777 rule=SrcIPCIDR rulePayload=192.168.60.10/32
14:19:27 DBG [Matcher] find process failed error=process not found addr=213.133.102.181
14:19:27 DBG [Matcher] find process failed error=process not found addr=81.171.17.155
14:19:27 DBG [Matcher] find process failed error=process not found addr=220.141.202.167
14:19:27 DBG [TCP] accept connection lAddr=192.168.60.10:35097 rAddr=107.189.11.95:55555 inbound=Redir
14:19:27 DBG [Matcher] find process failed error=process not found addr=141.144.245.66
14:19:27 DBG [Matcher] find process failed error=process not found addr=73.155.149.103
14:19:27 DBG [Matcher] find process failed error=process not found addr=89.58.28.39
14:19:27 DBG [Matcher] find process failed error=process not found addr=107.189.11.95
14:19:27 WRN [TCP] dial failed error=dial tcp4 88.198.230.185:22810: i/o timeout proxy=🖥️ Nas lAddr=192.168.60.10:48191 rAddr=88.198.230.185:22810 rule=SrcIPCIDR rulePayload=192.168.60.10/32
14:19:27 INF [TCP] connected lAddr=192.168.60.10:48185 rAddr=183.178.197.34:37967 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT]
14:19:27 INF [TCP] connected lAddr=192.168.60.10:44351 rAddr=220.141.202.167:50567 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT]
14:19:27 INF [TCP] connected lAddr=192.168.60.10:59661 rAddr=185.198.26.40:46881 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT]
14:19:27 INF [TCP] connected lAddr=192.168.60.10:44117 rAddr=220.135.63.177:55065 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT]
14:19:27 INF [TCP] connected lAddr=192.168.60.10:57497 rAddr=195.154.187.122:55582 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT]
14:19:27 INF [TCP] connected lAddr=192.168.60.10:34575 rAddr=89.58.28.39:58660 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT]
14:19:27 INF [TCP] connected lAddr=192.168.60.10:40717 rAddr=81.171.17.155:38167 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT]
14:19:27 INF [TCP] connected lAddr=192.168.60.10:51191 rAddr=107.189.11.95:55555 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT]
14:19:27 INF [TCP] connected lAddr=192.168.60.10:40283 rAddr=107.189.11.95:55555 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT]
14:19:27 INF [TCP] connected lAddr=192.168.60.10:34761 rAddr=213.133.102.181:60131 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT]
14:19:27 INF [TCP] connected lAddr=192.168.60.10:32797 rAddr=162.55.244.56:2468 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT]
14:19:27 INF [TCP] connected lAddr=192.168.60.10:35097 rAddr=107.189.11.95:55555 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT]
14:19:28 DBG [TCP] accept connection lAddr=192.168.60.204:34628 rAddr=91.108.56.138:443 inbound=Redir
14:19:28 DBG [Matcher] find process failed error=process not found addr=91.108.56.138
14:19:28 INF [TCP] connected lAddr=192.168.60.204:34628 rAddr=91.108.56.138:443 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [02] [Lite]]
14:19:28 WRN [TCP] dial failed error=dial tcp4 23.121.156.209:7777: i/o timeout proxy=🖥️ Nas lAddr=192.168.60.10:58439 rAddr=23.121.156.209:7777 rule=SrcIPCIDR rulePayload=192.168.60.10/32
14:19:28 DBG [TCP] accept connection lAddr=192.168.60.10:34297 rAddr=83.69.106.79:48990 inbound=Redir
14:19:28 DBG [TCP] accept connection lAddr=192.168.60.10:48915 rAddr=23.121.156.209:7777 inbound=Redir
14:19:28 DBG [TCP] accept connection lAddr=192.168.60.10:34205 rAddr=162.55.244.56:2468 inbound=Redir
14:19:28 DBG [TCP] accept connection lAddr=192.168.60.10:44163 rAddr=111.252.181.121:44554 inbound=Redir
14:19:28 DBG [Matcher] find process failed error=process not found addr=23.121.156.209
14:19:28 DBG [TCP] accept connection lAddr=192.168.60.10:60327 rAddr=176.9.114.184:7053 inbound=Redir
14:19:28 DBG [TCP] accept connection lAddr=192.168.60.10:53485 rAddr=107.189.11.95:55555 inbound=Redir
14:19:28 DBG [TCP] accept connection lAddr=192.168.60.10:50941 rAddr=176.9.114.184:7053 inbound=Redir
14:19:28 DBG [TCP] accept connection lAddr=192.168.60.10:36859 rAddr=209.141.62.252:45000 inbound=Redir
14:19:28 DBG [TCP] accept connection lAddr=192.168.60.10:59891 rAddr=107.189.11.95:55555 inbound=Redir
14:19:28 DBG [TCP] accept connection lAddr=192.168.60.10:51905 rAddr=23.121.156.209:7777 inbound=Redir
14:19:28 DBG [Matcher] find process failed error=process not found addr=107.189.11.95
14:19:28 DBG [Matcher] find process failed error=process not found addr=162.55.244.56
14:19:28 DBG [Matcher] find process failed error=process not found addr=83.69.106.79
14:19:28 DBG [Matcher] find process failed error=process not found addr=209.141.62.252
14:19:28 DBG [Matcher] find process failed error=process not found addr=111.252.181.121
14:19:28 DBG [Matcher] find process failed error=process not found addr=176.9.114.184
14:19:28 DBG [Matcher] find process failed error=process not found addr=176.9.114.184
14:19:28 DBG [Matcher] find process failed error=process not found addr=23.121.156.209
14:19:28 DBG [Matcher] find process failed error=process not found addr=107.189.11.95
14:19:28 INF [TCP] connected lAddr=192.168.60.10:36859 rAddr=209.141.62.252:45000 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT]
14:19:28 INF [TCP] connected lAddr=192.168.60.10:44451 rAddr=73.155.149.103:29570 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT]
14:19:28 INF [TCP] connected lAddr=192.168.60.10:45861 rAddr=141.144.245.66:40268 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT]
14:19:28 INF [TCP] connected lAddr=192.168.60.10:53485 rAddr=107.189.11.95:55555 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT]
14:19:28 INF [TCP] connected lAddr=192.168.60.10:59891 rAddr=107.189.11.95:55555 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT]
14:19:28 INF [TCP] connected lAddr=192.168.60.10:34205 rAddr=162.55.244.56:2468 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT]
14:19:29 INF [TCP] connected lAddr=192.168.60.10:60327 rAddr=176.9.114.184:7053 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT]
14:19:29 INF [TCP] connected lAddr=192.168.60.10:50941 rAddr=176.9.114.184:7053 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT]
14:19:29 INF [TCP] connected lAddr=192.168.60.10:34297 rAddr=83.69.106.79:48990 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT]
14:19:29 DBG [TCP] accept connection lAddr=192.168.60.204:34630 rAddr=91.108.56.138:443 inbound=Redir
14:19:29 DBG [TCP] accept connection lAddr=192.168.60.204:34632 rAddr=91.108.56.138:443 inbound=Redir
14:19:29 DBG [Matcher] find process failed error=process not found addr=91.108.56.138
14:19:29 DBG [Matcher] find process failed error=process not found addr=91.108.56.138
14:19:29 INF [TCP] connected lAddr=192.168.60.204:34630 rAddr=91.108.56.138:443 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [02] [Lite]]
14:19:29 INF [TCP] connected lAddr=192.168.60.204:34632 rAddr=91.108.56.138:443 mode=rule rule=Match() proxy=🚩 Others[🇯🇵 日本 IEPL [02] [Lite]]
14:19:29 DBG [TCP] accept connection lAddr=192.168.60.10:46115 rAddr=120.154.21.201:55209 inbound=Redir
14:19:29 DBG [TCP] accept connection lAddr=192.168.60.10:53923 rAddr=162.55.244.56:2468 inbound=Redir
14:19:29 DBG [TCP] accept connection lAddr=192.168.60.10:36927 rAddr=81.171.17.155:38167 inbound=Redir
14:19:29 DBG [TCP] accept connection lAddr=192.168.60.10:54701 rAddr=73.155.149.103:29570 inbound=Redir
14:19:29 DBG [TCP] accept connection lAddr=192.168.60.10:45503 rAddr=81.171.17.155:38167 inbound=Redir
14:19:29 DBG [Matcher] find process failed error=process not found addr=162.55.244.56
14:19:29 DBG [Matcher] find process failed error=process not found addr=120.154.21.201
14:19:29 DBG [Matcher] find process failed error=process not found addr=73.155.149.103
14:19:29 DBG [TCP] accept connection lAddr=192.168.60.10:45007 rAddr=42.188.6.98:1733 inbound=Redir
14:19:29 DBG [Matcher] find process failed error=process not found addr=81.171.17.155
14:19:29 DBG [Matcher] find process failed error=process not found addr=81.171.17.155
14:19:29 DBG [Matcher] find process failed error=process not found addr=42.188.6.98
14:19:29 WRN [TCP] dial failed error=dial tcp4 35.150.151.9:36922: i/o timeout proxy=🖥️ Nas lAddr=192.168.60.10:58817 rAddr=35.150.151.9:36922 rule=SrcIPCIDR rulePayload=192.168.60.10/32
14:19:29 WRN [TCP] dial failed error=dial tcp4 139.162.154.69:58660: i/o timeout proxy=🖥️ Nas lAddr=192.168.60.10:39451 rAddr=139.162.154.69:58660 rule=SrcIPCIDR rulePayload=192.168.60.10/32
14:19:29 INF [TCP] connected lAddr=192.168.60.10:54701 rAddr=73.155.149.103:29570 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT]
14:19:29 INF [TCP] connected lAddr=192.168.60.10:36927 rAddr=81.171.17.155:38167 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT]
14:19:29 INF [TCP] connected lAddr=192.168.60.10:45503 rAddr=81.171.17.155:38167 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT]
14:19:29 INF [TCP] connected lAddr=192.168.60.10:46115 rAddr=120.154.21.201:55209 mode=rule rule=SrcIPCIDR(192.168.60.10/32) proxy=🖥️ Nas[DIRECT]
#===================== 最近运行日志获取完成(自动切换为silent模式) =====================#
#===================== 活动连接信息 =====================#
1. SourceIP:【192.168.60.104】 - Host:【edge-mqtt.facebook.com】 - DestinationIP:【128.242.245.189】 - Network:【tcp】 - RulePayload:【facebook】 - Lastchain:【🇯🇵 日本 IEPL [02] [Lite]】
2. SourceIP:【192.168.60.10】 - Host:【azusa.wiki】 - DestinationIP:【172.64.99.15】 - Network:【tcp】 - RulePayload:【azusa.wiki】 - Lastchain:【DIRECT】
3. SourceIP:【192.168.60.204】 - Host:【Empty】 - DestinationIP:【91.108.56.194】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【🇯🇵 日本 IEPL [02] [Lite]】
4. SourceIP:【192.168.60.104】 - Host:【graph.oculus.com】 - DestinationIP:【157.240.211.54】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【🇯🇵 日本 IEPL [02] [Lite]】
5. SourceIP:【192.168.60.204】 - Host:【mtalk.google.com】 - DestinationIP:【74.125.203.188】 - Network:【tcp】 - RulePayload:【google】 - Lastchain:【🇯🇵 日本 IEPL [02] [Lite]】
6. SourceIP:【192.168.60.104】 - Host:【graph.oculus.com】 - DestinationIP:【157.240.211.54】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【🇯🇵 日本 IEPL [02] [Lite]】
7. SourceIP:【192.168.60.104】 - Host:【services.bingapis.com】 - DestinationIP:【13.107.5.80】 - Network:【tcp】 - RulePayload:【bingapis.com】 - Lastchain:【SG中继】
8. SourceIP:【192.168.60.104】 - Host:【edge-mqtt.facebook.com】 - DestinationIP:【128.242.245.189】 - Network:【tcp】 - RulePayload:【facebook】 - Lastchain:【🇯🇵 日本 IEPL [02] [Lite]】
9. SourceIP:【192.168.60.204】 - Host:【Empty】 - DestinationIP:【91.108.56.138】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【🇯🇵 日本 IEPL [02] [Lite]】
10. SourceIP:【192.168.60.204】 - Host:【Empty】 - DestinationIP:【91.108.56.138】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【🇯🇵 日本 IEPL [02] [Lite]】
11. SourceIP:【192.168.60.204】 - Host:【clients3.google.com】 - DestinationIP:【172.217.163.46】 - Network:【tcp】 - RulePayload:【google】 - Lastchain:【🇯🇵 日本 IEPL [02] [Lite]】
12. SourceIP:【192.168.60.10】 - Host:【Empty】 - DestinationIP:【107.189.11.95】 - Network:【tcp】 - RulePayload:【192.168.60.10/32】 - Lastchain:【DIRECT】
13. SourceIP:【192.168.60.104】 - Host:【graph.oculus.com】 - DestinationIP:【157.240.211.54】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【🇯🇵 日本 IEPL [02] [Lite]】
14. SourceIP:【192.168.60.10】 - Host:【Empty】 - DestinationIP:【178.170.48.9】 - Network:【tcp】 - RulePayload:【192.168.60.10/32】 - Lastchain:【DIRECT】
15. SourceIP:【192.168.60.10】 - Host:【pt.2xfree.org】 - DestinationIP:【104.21.27.109】 - Network:【tcp】 - RulePayload:【2xfree.org】 - Lastchain:【DIRECT】
16. SourceIP:【192.168.60.204】 - Host:【Empty】 - DestinationIP:【91.108.56.138】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【🇯🇵 日本 IEPL [02] [Lite]】
17. SourceIP:【192.168.60.10】 - Host:【Empty】 - DestinationIP:【209.141.62.252】 - Network:【tcp】 - RulePayload:【192.168.60.10/32】 - Lastchain:【DIRECT】
18. SourceIP:【192.168.60.10】 - Host:【Empty】 - DestinationIP:【183.178.197.34】 - Network:【tcp】 - RulePayload:【192.168.60.10/32】 - Lastchain:【DIRECT】
19. SourceIP:【192.168.60.204】 - Host:【Empty】 - DestinationIP:【91.108.56.138】 - Network:【tcp】 - RulePayload:【】 - Lastchain:【🇯🇵 日本 IEPL [02] [Lite]】
20. SourceIP:【192.168.60.10】 - Host:【Empty】 - DestinationIP:【81.171.17.155】 - Network:【tcp】 - RulePayload:【192.168.60.10/32】 - Lastchain:【DIRECT】
21. SourceIP:【192.168.60.10】 - Host:【Empty】 - DestinationIP:【183.178.197.34】 - Network:【tcp】 - RulePayload:【192.168.60.10/32】 - Lastchain:【DIRECT】
22. SourceIP:【192.168.60.10】 - Host:【Empty】 - DestinationIP:【183.178.197.34】 - Network:【tcp】 - RulePayload:【192.168.60.10/32】 - Lastchain:【DIRECT】
OpenClash Config
lean lede 5.10.176
Redmi_AX6 arm64
openclash 0.45.121
core clash_tun premium 2023.05.29
redir-host混合模式，网络栈类型System
路由本机代理，禁用QUIC，绕过大陆IP，仅允许内网，仅允许常用端口流量(停用)
使用Dnsmasq转发，禁止Dnsmasq缓存DNS
防火墙默认未改
未安装其他DNS插件
Expected Behavior
bing以及pt站点域名能正常通过clash，避免偶发断连
Screenshots
No response
