电脑上公网网页可以上，但是ping不通公网IP #2704

miao-lastwish · 2022-09-17T09:17:03Z

miao-lastwish
Sep 17, 2022

已经更新到最新了，不知道是哪里的配置出问题，还是bug。
观察到几个现象：

1，PC上直接百度IPping 180.101.49.12是不通的，但是如果在路由器上ping是通的。
2，PC上ping的时候，在路由器上抓包，tcpdump -nn icmp and host 180.101.49.12没有看到任何数据。
3，路由器上有使用OpenVPN连通了公司内网（172.16.0.0/20），同样在PC上直接ping是不通的，但是在路由器上能ping通
4，与2不同，PC上ping的时候，在路由器上抓包，tcpdump -nn icmp and host 172.16.0.1可以看到有数据

17:14:13.562376 IP 192.168.1.241 > 172.16.0.1: ICMP echo request, id 1, seq 44, length 40
17:14:18.562628 IP 192.168.1.241 > 172.16.0.1: ICMP echo request, id 1, seq 45, length 40

以下是调试日志，请大佬帮忙分析分析，谢谢。

OpenClash 调试日志

生成时间: 2022-09-17 17:02:10
插件版本: v0.45.59-beta
隐私提示: 上传此日志前请注意检查、屏蔽公网IP、节点、密码等相关敏感信息

#===================== 系统信息 =====================#

主机型号: QEMU Standard PC (i440FX + PIIX, 1996)
固件版本: OpenWrt 22.03.0 r19685-512e76967f
LuCI版本: git-20.074.84698-ead5e81
内核版本: 5.10.138
处理器架构: x86_64

#此项有值时,如不使用IPv6,建议到网络-接口-lan的设置中禁用IPV6的DHCP
IPV6-DHCP: 

#此项结果应仅有配置文件的DNS监听地址
Dnsmasq转发设置: 127.0.0.1#7874

#===================== 依赖检查 =====================#

dnsmasq-full: 已安装
coreutils: 已安装
coreutils-nohup: 已安装
bash: 已安装
curl: 已安装
ca-certificates: 已安装
ipset: 已安装
ip-full: 已安装
libcap: 已安装
libcap-bin: 已安装
ruby: 已安装
ruby-yaml: 已安装
ruby-psych: 已安装
ruby-pstore: 已安装
kmod-tun(TUN模式): 已安装
luci-compat(Luci >= 19.07): 已安装
kmod-inet-diag(PROCESS-NAME): 已安装
unzip: 已安装
kmod-nft-tproxy: 已安装

#===================== 内核检查 =====================#

运行状态: 运行中
进程pid: 9415
运行权限: 9415: cap_dac_override,cap_net_bind_service,cap_net_admin,cap_net_raw,cap_sys_ptrace,cap_sys_resource=eip
运行用户: nobody
已选择的架构: linux-amd64

#下方无法显示内核版本号时请确认您的内核版本是否正确或者有无权限
Tun内核版本: 2022.08.26-3-ge16bdd2
Tun内核文件: 存在
Tun内核运行权限: 正常

Dev内核版本: v1.11.8-3-g4f291fa
Dev内核文件: 存在
Dev内核运行权限: 正常

Meta内核版本: alpha-g4597ed4
Meta内核文件: 存在
Meta内核运行权限: 正常

#===================== 插件设置 =====================#

当前配置文件: /etc/openclash/config/Flash.yaml
启动配置文件: /etc/openclash/Flash.yaml
运行模式: redir-host-mix
默认代理模式: rule
UDP流量转发(tproxy): 停用
DNS劫持: 启用
自定义DNS: 停用
IPV6代理: 启用
IPV6-DNS解析: 启用
禁用Dnsmasq缓存: 启用
自定义规则: 停用
仅允许内网: 停用
仅代理命中规则流量: 停用
仅允许常用端口流量: 停用
绕过中国大陆IP: 停用
DNS远程解析: 启用
路由本机代理: 启用

#启动异常时建议关闭此项后重试
混合节点: 停用
保留配置: 停用

#启动异常时建议关闭此项后重试
第三方规则: 启用

#===================== 配置文件 =====================#

mixed-port: 7893
allow-lan: true
bind-address: "*"
mode: rule
log-level: debug
external-controller: 0.0.0.0:9090
dns:
  enable: true
  ipv6: true
  default-nameserver:
  - 223.5.5.5
  - 119.29.29.29
  - 192.168.1.1
  - 114.114.114.114
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  use-hosts: true
  nameserver:
  - https://doh.pub/dns-query
  - https://dns.alidns.com/dns-query
  - 192.168.1.1
  - 114.114.114.114
  - 119.29.29.29
  fallback:
  - https://doh.dns.sb/dns-query
  - https://dns.cloudflare.com/dns-query
  - https://dns.twnic.tw/dns-query
  - tls://8.8.4.4:853
  fallback-filter:
    geoip: true
    ipcidr:
    - 240.0.0.0/4
    - 0.0.0.0/32
  listen: 0.0.0.0:7874
  nameserver-policy:
    "+.eng.flcnc.com": 172.16.17.0
  fake-ip-filter:
  - "+.*"
proxy-groups:
- name: 闪电⚡
  type: select
  proxies:
  - 自动选择
  - 故障转移
  - Lv2 香港 01 [1.5]
  - Lv2 香港 02 [1.5]
  - Lv2 香港 03 [1.5]
  - Lv2 香港 04 [1.5]
  - Lv2 香港 05 [1.5]
  - Lv2 香港 06 [1.5]
  - Lv2 香港 07 [1.5]
  - Lv2 香港 08 [1.5]
  - Lv2 新加坡 01 [1.5]
  - Lv2 新加坡 02 [1.5]
  - Lv2 新加坡 03 [1.5]
  - Lv2 新加坡 04 [1.5]
  - Lv2 新加坡 05 [1.5]
  - Lv2 新加坡 06 [1.5]
  - Lv2 日本 01 [1.5]
  - Lv2 日本 02 [1.5]
  - Lv2 日本 03 [1.5]
  - Lv2 日本 04 [1.5]
  - Lv2 日本 05 [1.5]
  - Lv2 日本 06 [1.5]
  - Lv2 台湾 01 [1.5]
  - Lv2 台湾 02 [1.5]
  - Lv2 台湾 03 [1.5]
  - Lv2 台湾 04 [1.5]
  - Lv2 台湾 05 [1.5]
  - Lv2 台湾 06 [1.5]
  - Lv2 美国 01 [1.5]
  - Lv2 美国 02 [1.5]
  - Lv2 美国 03 [1.5]
  - Lv2 美国 04 [1.5]
  - Lv2 美国 05 [1.5]
  - Lv2 美国 06 [1.5]
- name: 自动选择
  type: url-test
  proxies:
  - Lv2 香港 01 [1.5]
  - Lv2 香港 02 [1.5]
  - Lv2 香港 03 [1.5]
  - Lv2 香港 04 [1.5]
  - Lv2 香港 05 [1.5]
  - Lv2 香港 06 [1.5]
  - Lv2 香港 07 [1.5]
  - Lv2 香港 08 [1.5]
  - Lv2 新加坡 01 [1.5]
  - Lv2 新加坡 02 [1.5]
  - Lv2 新加坡 03 [1.5]
  - Lv2 新加坡 04 [1.5]
  - Lv2 新加坡 05 [1.5]
  - Lv2 新加坡 06 [1.5]
  - Lv2 日本 01 [1.5]
  - Lv2 日本 02 [1.5]
  - Lv2 日本 03 [1.5]
  - Lv2 日本 04 [1.5]
  - Lv2 日本 05 [1.5]
  - Lv2 日本 06 [1.5]
  - Lv2 台湾 01 [1.5]
  - Lv2 台湾 02 [1.5]
  - Lv2 台湾 03 [1.5]
  - Lv2 台湾 04 [1.5]
  - Lv2 台湾 05 [1.5]
  - Lv2 台湾 06 [1.5]
  - Lv2 美国 01 [1.5]
  - Lv2 美国 02 [1.5]
  - Lv2 美国 03 [1.5]
  - Lv2 美国 04 [1.5]
  - Lv2 美国 05 [1.5]
  - Lv2 美国 06 [1.5]
  url: http://www.gstatic.com/generate_204
  interval: '86400'
- name: 故障转移
  type: fallback
  proxies:
  - Lv2 香港 01 [1.5]
  - Lv2 香港 02 [1.5]
  - Lv2 香港 03 [1.5]
  - Lv2 香港 04 [1.5]
  - Lv2 香港 05 [1.5]
  - Lv2 香港 06 [1.5]
  - Lv2 香港 07 [1.5]
  - Lv2 香港 08 [1.5]
  - Lv2 新加坡 01 [1.5]
  - Lv2 新加坡 02 [1.5]
  - Lv2 新加坡 03 [1.5]
  - Lv2 新加坡 04 [1.5]
  - Lv2 新加坡 05 [1.5]
  - Lv2 新加坡 06 [1.5]
  - Lv2 日本 01 [1.5]
  - Lv2 日本 02 [1.5]
  - Lv2 日本 03 [1.5]
  - Lv2 日本 04 [1.5]
  - Lv2 日本 05 [1.5]
  - Lv2 日本 06 [1.5]
  - Lv2 台湾 01 [1.5]
  - Lv2 台湾 02 [1.5]
  - Lv2 台湾 03 [1.5]
  - Lv2 台湾 04 [1.5]
  - Lv2 台湾 05 [1.5]
  - Lv2 台湾 06 [1.5]
  - Lv2 美国 01 [1.5]
  - Lv2 美国 02 [1.5]
  - Lv2 美国 03 [1.5]
  - Lv2 美国 04 [1.5]
  - Lv2 美国 05 [1.5]
  - Lv2 美国 06 [1.5]
  url: http://www.gstatic.com/generate_204
  interval: '7200'
rules:
- DST-PORT,7895,REJECT
- DST-PORT,7892,REJECT
- IP-CIDR,198.18.0.1/16,REJECT,no-resolve
- RULE-SET,公司,DIRECT
- DOMAIN,apt-y-install.sd-yun.xyz,DIRECT
- DOMAIN-SUFFIX,services.googleapis.cn,闪电⚡
- DOMAIN-SUFFIX,xn--ngstr-lra8j.com,闪电⚡
- DOMAIN,safebrowsing.urlsec.qq.com,DIRECT
- DOMAIN,safebrowsing.googleapis.com,DIRECT
- DOMAIN,developer.apple.com,闪电⚡
- DOMAIN-SUFFIX,digicert.com,闪电⚡
- DOMAIN,ocsp.apple.com,闪电⚡
- DOMAIN,ocsp.comodoca.com,闪电⚡
- DOMAIN,ocsp.usertrust.com,闪电⚡
- DOMAIN,ocsp.sectigo.com,闪电⚡
- DOMAIN,ocsp.verisign.net,闪电⚡
- DOMAIN-SUFFIX,apple-dns.net,闪电⚡
- DOMAIN,testflight.apple.com,闪电⚡
- DOMAIN,sandbox.itunes.apple.com,闪电⚡
- DOMAIN,itunes.apple.com,闪电⚡
- DOMAIN-SUFFIX,apps.apple.com,闪电⚡
- DOMAIN-SUFFIX,blobstore.apple.com,闪电⚡
- DOMAIN,cvws.icloud-content.com,闪电⚡
- DOMAIN-SUFFIX,mzstatic.com,DIRECT
- DOMAIN-SUFFIX,itunes.apple.com,DIRECT
- DOMAIN-SUFFIX,icloud.com,DIRECT
- DOMAIN-SUFFIX,icloud-content.com,DIRECT
- DOMAIN-SUFFIX,me.com,DIRECT
- DOMAIN-SUFFIX,aaplimg.com,DIRECT
- DOMAIN-SUFFIX,cdn20.com,DIRECT
- DOMAIN-SUFFIX,cdn-apple.com,DIRECT
- DOMAIN-SUFFIX,akadns.net,DIRECT
- DOMAIN-SUFFIX,akamaiedge.net,DIRECT
- DOMAIN-SUFFIX,edgekey.net,DIRECT
- DOMAIN-SUFFIX,mwcloudcdn.com,DIRECT
- DOMAIN-SUFFIX,mwcname.com,DIRECT
- DOMAIN-SUFFIX,apple.com,DIRECT
- DOMAIN-SUFFIX,apple-cloudkit.com,DIRECT
- DOMAIN-SUFFIX,apple-mapkit.com,DIRECT
- DOMAIN-SUFFIX,126.com,DIRECT
- DOMAIN-SUFFIX,126.net,DIRECT
- DOMAIN-SUFFIX,127.net,DIRECT
- DOMAIN-SUFFIX,163.com,DIRECT
- DOMAIN-SUFFIX,360buyimg.com,DIRECT
- DOMAIN-SUFFIX,36kr.com,DIRECT
- DOMAIN-SUFFIX,acfun.tv,DIRECT
- DOMAIN-SUFFIX,air-matters.com,DIRECT
- DOMAIN-SUFFIX,aixifan.com,DIRECT
- DOMAIN-KEYWORD,alicdn,DIRECT
- DOMAIN-KEYWORD,alipay,DIRECT
- DOMAIN-KEYWORD,taobao,DIRECT
- DOMAIN-SUFFIX,amap.com,DIRECT
- DOMAIN-SUFFIX,autonavi.com,DIRECT
- DOMAIN-KEYWORD,baidu,DIRECT
- DOMAIN-SUFFIX,bdimg.com,DIRECT
- DOMAIN-SUFFIX,bdstatic.com,DIRECT
- DOMAIN-SUFFIX,bilibili.com,DIRECT
- DOMAIN-SUFFIX,bilivideo.com,DIRECT
- DOMAIN-SUFFIX,caiyunapp.com,DIRECT
- DOMAIN-SUFFIX,clouddn.com,DIRECT
- DOMAIN-SUFFIX,cnbeta.com,DIRECT
- DOMAIN-SUFFIX,cnbetacdn.com,DIRECT
- DOMAIN-SUFFIX,cootekservice.com,DIRECT
- DOMAIN-SUFFIX,csdn.net,DIRECT
- DOMAIN-SUFFIX,ctrip.com,DIRECT
- DOMAIN-SUFFIX,dgtle.com,DIRECT
- DOMAIN-SUFFIX,dianping.com,DIRECT
- DOMAIN-SUFFIX,douban.com,DIRECT
- DOMAIN-SUFFIX,doubanio.com,DIRECT
- DOMAIN-SUFFIX,duokan.com,DIRECT
- DOMAIN-SUFFIX,easou.com,DIRECT
- DOMAIN-SUFFIX,ele.me,DIRECT
- DOMAIN-SUFFIX,feng.com,DIRECT
- DOMAIN-SUFFIX,fir.im,DIRECT
- DOMAIN-SUFFIX,frdic.com,DIRECT
- DOMAIN-SUFFIX,g-cores.com,DIRECT
- DOMAIN-SUFFIX,godic.net,DIRECT
- DOMAIN-SUFFIX,gtimg.com,DIRECT
- DOMAIN,cdn.hockeyapp.net,DIRECT
- DOMAIN-SUFFIX,hongxiu.com,DIRECT
- DOMAIN-SUFFIX,hxcdn.net,DIRECT
- DOMAIN-SUFFIX,iciba.com,DIRECT
- DOMAIN-SUFFIX,ifeng.com,DIRECT
- DOMAIN-SUFFIX,ifengimg.com,DIRECT
- DOMAIN-SUFFIX,ipip.net,DIRECT
- DOMAIN-SUFFIX,iqiyi.com,DIRECT
- DOMAIN-SUFFIX,jd.com,DIRECT
- DOMAIN-SUFFIX,jianshu.com,DIRECT
- DOMAIN-SUFFIX,knewone.com,DIRECT
- DOMAIN-SUFFIX,le.com,DIRECT
- DOMAIN-SUFFIX,lecloud.com,DIRECT
- DOMAIN-SUFFIX,lemicp.com,DIRECT
- DOMAIN-SUFFIX,licdn.com,DIRECT
- DOMAIN-SUFFIX,luoo.net,DIRECT
- DOMAIN-SUFFIX,meituan.com,DIRECT
- DOMAIN-SUFFIX,meituan.net,DIRECT
- DOMAIN-SUFFIX,mi.com,DIRECT
- DOMAIN-SUFFIX,miaopai.com,DIRECT
- DOMAIN-SUFFIX,microsoft.com,DIRECT
- DOMAIN-SUFFIX,microsoftonline.com,DIRECT
- DOMAIN-SUFFIX,miui.com,DIRECT
- DOMAIN-SUFFIX,miwifi.com,DIRECT
- DOMAIN-SUFFIX,mob.com,DIRECT
- DOMAIN-SUFFIX,netease.com,DIRECT
- DOMAIN-SUFFIX,office.com,DIRECT
- DOMAIN-SUFFIX,office365.com,DIRECT
- DOMAIN-KEYWORD,officecdn,DIRECT
- DOMAIN-SUFFIX,oschina.net,DIRECT
- DOMAIN-SUFFIX,ppsimg.com,DIRECT
- DOMAIN-SUFFIX,pstatp.com,DIRECT
- DOMAIN-SUFFIX,qcloud.com,DIRECT
- DOMAIN-SUFFIX,qdaily.com,DIRECT
- DOMAIN-SUFFIX,qdmm.com,DIRECT
- DOMAIN-SUFFIX,qhimg.com,DIRECT
- DOMAIN-SUFFIX,qhres.com,DIRECT
- DOMAIN-SUFFIX,qidian.com,DIRECT
- DOMAIN-SUFFIX,qihucdn.com,DIRECT
- DOMAIN-SUFFIX,qiniu.com,DIRECT
- DOMAIN-SUFFIX,qiniucdn.com,DIRECT
- DOMAIN-SUFFIX,qiyipic.com,DIRECT
- DOMAIN-SUFFIX,qq.com,DIRECT
- DOMAIN-SUFFIX,qqurl.com,DIRECT
- DOMAIN-SUFFIX,rarbg.to,DIRECT
- DOMAIN-SUFFIX,ruguoapp.com,DIRECT
- DOMAIN-SUFFIX,segmentfault.com,DIRECT
- DOMAIN-SUFFIX,sinaapp.com,DIRECT
- DOMAIN-SUFFIX,smzdm.com,DIRECT
- DOMAIN-SUFFIX,snapdrop.net,DIRECT
- DOMAIN-SUFFIX,sogou.com,DIRECT
- DOMAIN-SUFFIX,sogoucdn.com,DIRECT
- DOMAIN-SUFFIX,sohu.com,DIRECT
- DOMAIN-SUFFIX,soku.com,DIRECT
- DOMAIN-SUFFIX,speedtest.net,DIRECT
- DOMAIN-SUFFIX,sspai.com,DIRECT
- DOMAIN-SUFFIX,suning.com,DIRECT
- DOMAIN-SUFFIX,taobao.com,DIRECT
- DOMAIN-SUFFIX,tencent.com,DIRECT
- DOMAIN-SUFFIX,tenpay.com,DIRECT
- DOMAIN-SUFFIX,tianyancha.com,DIRECT
- DOMAIN-SUFFIX,tmall.com,DIRECT
- DOMAIN-SUFFIX,tudou.com,DIRECT
- DOMAIN-SUFFIX,umetrip.com,DIRECT
- DOMAIN-SUFFIX,upaiyun.com,DIRECT
- DOMAIN-SUFFIX,upyun.com,DIRECT
- DOMAIN-SUFFIX,veryzhun.com,DIRECT
- DOMAIN-SUFFIX,weather.com,DIRECT
- DOMAIN-SUFFIX,weibo.com,DIRECT
- DOMAIN-SUFFIX,xiami.com,DIRECT
- DOMAIN-SUFFIX,xiami.net,DIRECT
- DOMAIN-SUFFIX,xiaomicp.com,DIRECT
- DOMAIN-SUFFIX,ximalaya.com,DIRECT
- DOMAIN-SUFFIX,xmcdn.com,DIRECT
- DOMAIN-SUFFIX,xunlei.com,DIRECT
- DOMAIN-SUFFIX,yhd.com,DIRECT
- DOMAIN-SUFFIX,yihaodianimg.com,DIRECT
- DOMAIN-SUFFIX,yinxiang.com,DIRECT
- DOMAIN-SUFFIX,ykimg.com,DIRECT
- DOMAIN-SUFFIX,youdao.com,DIRECT
- DOMAIN-SUFFIX,youku.com,DIRECT
- DOMAIN-SUFFIX,zealer.com,DIRECT
- DOMAIN-SUFFIX,zhihu.com,DIRECT
- DOMAIN-SUFFIX,zhimg.com,DIRECT
- DOMAIN-SUFFIX,zimuzu.tv,DIRECT
- DOMAIN-SUFFIX,zoho.com,DIRECT
- DOMAIN-KEYWORD,amazon,闪电⚡
- DOMAIN-KEYWORD,google,闪电⚡
- DOMAIN-KEYWORD,gmail,闪电⚡
- DOMAIN-KEYWORD,youtube,闪电⚡
- DOMAIN-KEYWORD,facebook,闪电⚡
- DOMAIN-SUFFIX,fb.me,闪电⚡
- DOMAIN-SUFFIX,fbcdn.net,闪电⚡
- DOMAIN-KEYWORD,twitter,闪电⚡
- DOMAIN-KEYWORD,instagram,闪电⚡
- DOMAIN-KEYWORD,dropbox,闪电⚡
- DOMAIN-SUFFIX,twimg.com,闪电⚡
- DOMAIN-KEYWORD,blogspot,闪电⚡
- DOMAIN-SUFFIX,youtu.be,闪电⚡
- DOMAIN-KEYWORD,whatsapp,闪电⚡
- DOMAIN-KEYWORD,admarvel,REJECT
- DOMAIN-KEYWORD,admaster,REJECT
- DOMAIN-KEYWORD,adsage,REJECT
- DOMAIN-KEYWORD,adsmogo,REJECT
- DOMAIN-KEYWORD,adsrvmedia,REJECT
- DOMAIN-KEYWORD,adwords,REJECT
- DOMAIN-KEYWORD,adservice,REJECT
- DOMAIN-SUFFIX,appsflyer.com,REJECT
- DOMAIN-KEYWORD,domob,REJECT
- DOMAIN-SUFFIX,doubleclick.net,REJECT
- DOMAIN-KEYWORD,duomeng,REJECT
- DOMAIN-KEYWORD,dwtrack,REJECT
- DOMAIN-KEYWORD,guanggao,REJECT
- DOMAIN-KEYWORD,lianmeng,REJECT
- DOMAIN-SUFFIX,mmstat.com,REJECT
- DOMAIN-KEYWORD,mopub,REJECT
- DOMAIN-KEYWORD,omgmta,REJECT
- DOMAIN-KEYWORD,openx,REJECT
- DOMAIN-KEYWORD,partnerad,REJECT
- DOMAIN-KEYWORD,pingfore,REJECT
- DOMAIN-KEYWORD,supersonicads,REJECT
- DOMAIN-KEYWORD,uedas,REJECT
- DOMAIN-KEYWORD,umeng,REJECT
- DOMAIN-KEYWORD,usage,REJECT
- DOMAIN-SUFFIX,vungle.com,REJECT
- DOMAIN-KEYWORD,wlmonitor,REJECT
- DOMAIN-KEYWORD,zjtoolbar,REJECT
- DOMAIN-SUFFIX,9to5mac.com,闪电⚡
- DOMAIN-SUFFIX,abpchina.org,闪电⚡
- DOMAIN-SUFFIX,adblockplus.org,闪电⚡
- DOMAIN-SUFFIX,adobe.com,闪电⚡
- DOMAIN-SUFFIX,akamaized.net,闪电⚡
- DOMAIN-SUFFIX,alfredapp.com,闪电⚡
- DOMAIN-SUFFIX,amplitude.com,闪电⚡
- DOMAIN-SUFFIX,ampproject.org,闪电⚡
- DOMAIN-SUFFIX,android.com,闪电⚡
- DOMAIN-SUFFIX,angularjs.org,闪电⚡
- DOMAIN-SUFFIX,aolcdn.com,闪电⚡
- DOMAIN-SUFFIX,apkpure.com,闪电⚡
- DOMAIN-SUFFIX,appledaily.com,闪电⚡
- DOMAIN-SUFFIX,appshopper.com,闪电⚡
- DOMAIN-SUFFIX,appspot.com,闪电⚡
- DOMAIN-SUFFIX,arcgis.com,闪电⚡
- DOMAIN-SUFFIX,archive.org,闪电⚡
- DOMAIN-SUFFIX,armorgames.com,闪电⚡
- DOMAIN-SUFFIX,aspnetcdn.com,闪电⚡
- DOMAIN-SUFFIX,att.com,闪电⚡
- DOMAIN-SUFFIX,awsstatic.com,闪电⚡
- DOMAIN-SUFFIX,azureedge.net,闪电⚡
- DOMAIN-SUFFIX,azurewebsites.net,闪电⚡
- DOMAIN-SUFFIX,bing.com,闪电⚡
- DOMAIN-SUFFIX,bintray.com,闪电⚡
- DOMAIN-SUFFIX,bit.com,闪电⚡
- DOMAIN-SUFFIX,bit.ly,闪电⚡
- DOMAIN-SUFFIX,bitbucket.org,闪电⚡
- DOMAIN-SUFFIX,bjango.com,闪电⚡
- DOMAIN-SUFFIX,bkrtx.com,闪电⚡
- DOMAIN-SUFFIX,blog.com,闪电⚡
- DOMAIN-SUFFIX,blogcdn.com,闪电⚡
- DOMAIN-SUFFIX,blogger.com,闪电⚡
- DOMAIN-SUFFIX,blogsmithmedia.com,闪电⚡
- DOMAIN-SUFFIX,blogspot.com,闪电⚡
- DOMAIN-SUFFIX,blogspot.hk,闪电⚡
- DOMAIN-SUFFIX,bloomberg.com,闪电⚡
- DOMAIN-SUFFIX,box.com,闪电⚡
- DOMAIN-SUFFIX,box.net,闪电⚡
- DOMAIN-SUFFIX,cachefly.net,闪电⚡
- DOMAIN-SUFFIX,chromium.org,闪电⚡
- DOMAIN-SUFFIX,cl.ly,闪电⚡
- DOMAIN-SUFFIX,cloudflare.com,闪电⚡
- DOMAIN-SUFFIX,cloudfront.net,闪电⚡
- DOMAIN-SUFFIX,cloudmagic.com,闪电⚡
- DOMAIN-SUFFIX,cmail19.com,闪电⚡
- DOMAIN-SUFFIX,cnet.com,闪电⚡
- DOMAIN-SUFFIX,cocoapods.org,闪电⚡
- DOMAIN-SUFFIX,comodoca.com,闪电⚡
- DOMAIN-SUFFIX,crashlytics.com,闪电⚡
- DOMAIN-SUFFIX,culturedcode.com,闪电⚡
- DOMAIN-SUFFIX,d.pr,闪电⚡
- DOMAIN-SUFFIX,danilo.to,闪电⚡
- DOMAIN-SUFFIX,dayone.me,闪电⚡
- DOMAIN-SUFFIX,db.tt,闪电⚡
- DOMAIN-SUFFIX,deskconnect.com,闪电⚡
- DOMAIN-SUFFIX,disq.us,闪电⚡
- DOMAIN-SUFFIX,disqus.com,闪电⚡
- DOMAIN-SUFFIX,disquscdn.com,闪电⚡
- DOMAIN-SUFFIX,dnsimple.com,闪电⚡
- DOMAIN-SUFFIX,docker.com,闪电⚡
- DOMAIN-SUFFIX,dribbble.com,闪电⚡
- DOMAIN-SUFFIX,droplr.com,闪电⚡
- DOMAIN-SUFFIX,duckduckgo.com,闪电⚡
- DOMAIN-SUFFIX,dueapp.com,闪电⚡
- DOMAIN-SUFFIX,dytt8.net,闪电⚡
- DOMAIN-SUFFIX,edgecastcdn.net,闪电⚡
- DOMAIN-SUFFIX,edgekey.net,闪电⚡
- DOMAIN-SUFFIX,edgesuite.net,闪电⚡
- DOMAIN-SUFFIX,engadget.com,闪电⚡
- DOMAIN-SUFFIX,entrust.net,闪电⚡
- DOMAIN-SUFFIX,eurekavpt.com,闪电⚡
- DOMAIN-SUFFIX,evernote.com,闪电⚡
- DOMAIN-SUFFIX,fabric.io,闪电⚡
- DOMAIN-SUFFIX,fast.com,闪电⚡
- DOMAIN-SUFFIX,fastly.net,闪电⚡
- DOMAIN-SUFFIX,fc2.com,闪电⚡
- DOMAIN-SUFFIX,feedburner.com,闪电⚡
- DOMAIN-SUFFIX,feedly.com,闪电⚡
- DOMAIN-SUFFIX,feedsportal.com,闪电⚡
- DOMAIN-SUFFIX,fiftythree.com,闪电⚡
- DOMAIN-SUFFIX,firebaseio.com,闪电⚡
- DOMAIN-SUFFIX,flexibits.com,闪电⚡
- DOMAIN-SUFFIX,flickr.com,闪电⚡
- DOMAIN-SUFFIX,flipboard.com,闪电⚡
- DOMAIN-SUFFIX,g.co,闪电⚡
- DOMAIN-SUFFIX,gabia.net,闪电⚡
- DOMAIN-SUFFIX,geni.us,闪电⚡
- DOMAIN-SUFFIX,gfx.ms,闪电⚡
- DOMAIN-SUFFIX,ggpht.com,闪电⚡
- DOMAIN-SUFFIX,ghostnoteapp.com,闪电⚡
- DOMAIN-SUFFIX,git.io,闪电⚡
- DOMAIN-KEYWORD,github,闪电⚡
- DOMAIN-SUFFIX,globalsign.com,闪电⚡
- DOMAIN-SUFFIX,gmodules.com,闪电⚡
- DOMAIN-SUFFIX,godaddy.com,闪电⚡
- DOMAIN-SUFFIX,golang.org,闪电⚡
- DOMAIN-SUFFIX,gongm.in,闪电⚡
- DOMAIN-SUFFIX,goo.gl,闪电⚡
- DOMAIN-SUFFIX,goodreaders.com,闪电⚡
- DOMAIN-SUFFIX,goodreads.com,闪电⚡
- DOMAIN-SUFFIX,gravatar.com,闪电⚡
- DOMAIN-SUFFIX,gstatic.com,闪电⚡
- DOMAIN-SUFFIX,gvt0.com,闪电⚡
- DOMAIN-SUFFIX,hockeyapp.net,闪电⚡
- DOMAIN-SUFFIX,hotmail.com,闪电⚡
- DOMAIN-SUFFIX,icons8.com,闪电⚡
- DOMAIN-SUFFIX,ifixit.com,闪电⚡
- DOMAIN-SUFFIX,ift.tt,闪电⚡
- DOMAIN-SUFFIX,ifttt.com,闪电⚡
- DOMAIN-SUFFIX,iherb.com,闪电⚡
- DOMAIN-SUFFIX,imageshack.us,闪电⚡
- DOMAIN-SUFFIX,img.ly,闪电⚡
- DOMAIN-SUFFIX,imgur.com,闪电⚡
- DOMAIN-SUFFIX,imore.com,闪电⚡
- DOMAIN-SUFFIX,instapaper.com,闪电⚡
- DOMAIN-SUFFIX,ipn.li,闪电⚡
- DOMAIN-SUFFIX,is.gd,闪电⚡
- DOMAIN-SUFFIX,issuu.com,闪电⚡
- DOMAIN-SUFFIX,itgonglun.com,闪电⚡
- DOMAIN-SUFFIX,itun.es,闪电⚡
- DOMAIN-SUFFIX,ixquick.com,闪电⚡
- DOMAIN-SUFFIX,j.mp,闪电⚡
- DOMAIN-SUFFIX,js.revsci.net,闪电⚡
- DOMAIN-SUFFIX,jshint.com,闪电⚡
- DOMAIN-SUFFIX,jtvnw.net,闪电⚡
- DOMAIN-SUFFIX,justgetflux.com,闪电⚡
- DOMAIN-SUFFIX,kat.cr,闪电⚡
- DOMAIN-SUFFIX,klip.me,闪电⚡
- DOMAIN-SUFFIX,libsyn.com,闪电⚡
- DOMAIN-SUFFIX,linkedin.com,闪电⚡
- DOMAIN-SUFFIX,line-apps.com,闪电⚡
- DOMAIN-SUFFIX,linode.com,闪电⚡
- DOMAIN-SUFFIX,lithium.com,闪电⚡
- DOMAIN-SUFFIX,littlehj.com,闪电⚡
- DOMAIN-SUFFIX,live.com,闪电⚡
- DOMAIN-SUFFIX,live.net,闪电⚡
- DOMAIN-SUFFIX,livefilestore.com,闪电⚡
- DOMAIN-SUFFIX,llnwd.net,闪电⚡
- DOMAIN-SUFFIX,macid.co,闪电⚡
- DOMAIN-SUFFIX,macromedia.com,闪电⚡
- DOMAIN-SUFFIX,macrumors.com,闪电⚡
- DOMAIN-SUFFIX,mashable.com,闪电⚡
- DOMAIN-SUFFIX,mathjax.org,闪电⚡
- DOMAIN-SUFFIX,medium.com,闪电⚡
- DOMAIN-SUFFIX,mega.co.nz,闪电⚡
- DOMAIN-SUFFIX,mega.nz,闪电⚡
- DOMAIN-SUFFIX,megaupload.com,闪电⚡
- DOMAIN-SUFFIX,microsofttranslator.com,闪电⚡
- DOMAIN-SUFFIX,mindnode.com,闪电⚡
- DOMAIN-SUFFIX,mobile01.com,闪电⚡
- DOMAIN-SUFFIX,modmyi.com,闪电⚡
- DOMAIN-SUFFIX,msedge.net,闪电⚡
- DOMAIN-SUFFIX,myfontastic.com,闪电⚡
- DOMAIN-SUFFIX,name.com,闪电⚡
- DOMAIN-SUFFIX,nextmedia.com,闪电⚡
- DOMAIN-SUFFIX,nsstatic.net,闪电⚡
- DOMAIN-SUFFIX,nssurge.com,闪电⚡
- DOMAIN-SUFFIX,nyt.com,闪电⚡
- DOMAIN-SUFFIX,nytimes.com,闪电⚡
- DOMAIN-SUFFIX,omnigroup.com,闪电⚡
- DOMAIN-SUFFIX,onedrive.com,闪电⚡
- DOMAIN-SUFFIX,onenote.com,闪电⚡
- DOMAIN-SUFFIX,ooyala.com,闪电⚡
- DOMAIN-SUFFIX,openvpn.net,闪电⚡
- DOMAIN-SUFFIX,openwrt.org,闪电⚡
- DOMAIN-SUFFIX,orkut.com,闪电⚡
- DOMAIN-SUFFIX,osxdaily.com,闪电⚡
- DOMAIN-SUFFIX,outlook.com,闪电⚡
- DOMAIN-SUFFIX,ow.ly,闪电⚡
- DOMAIN-SUFFIX,paddleapi.com,闪电⚡
- DOMAIN-SUFFIX,parallels.com,闪电⚡
- DOMAIN-SUFFIX,parse.com,闪电⚡
- DOMAIN-SUFFIX,pdfexpert.com,闪电⚡
- DOMAIN-SUFFIX,periscope.tv,闪电⚡
- DOMAIN-SUFFIX,pinboard.in,闪电⚡
- DOMAIN-SUFFIX,pinterest.com,闪电⚡
- DOMAIN-SUFFIX,pixelmator.com,闪电⚡
- DOMAIN-SUFFIX,pixiv.net,闪电⚡
- DOMAIN-SUFFIX,playpcesor.com,闪电⚡
- DOMAIN-SUFFIX,playstation.com,闪电⚡
- DOMAIN-SUFFIX,playstation.com.hk,闪电⚡
- DOMAIN-SUFFIX,playstation.net,闪电⚡
- DOMAIN-SUFFIX,playstationnetwork.com,闪电⚡
- DOMAIN-SUFFIX,pushwoosh.com,闪电⚡
- DOMAIN-SUFFIX,rime.im,闪电⚡
- DOMAIN-SUFFIX,servebom.com,闪电⚡
- DOMAIN-SUFFIX,sfx.ms,闪电⚡
- DOMAIN-SUFFIX,shadowsocks.org,闪电⚡
- DOMAIN-SUFFIX,sharethis.com,闪电⚡
- DOMAIN-SUFFIX,shazam.com,闪电⚡
- DOMAIN-SUFFIX,skype.com,闪电⚡
- DOMAIN-SUFFIX,smartdns闪电⚡.com,闪电⚡
- DOMAIN-SUFFIX,smartmailcloud.com,闪电⚡
- DOMAIN-SUFFIX,sndcdn.com,闪电⚡
- DOMAIN-SUFFIX,sony.com,闪电⚡
- DOMAIN-SUFFIX,soundcloud.com,闪电⚡
- DOMAIN-SUFFIX,sourceforge.net,闪电⚡
- DOMAIN-SUFFIX,spotify.com,闪电⚡
- DOMAIN-SUFFIX,squarespace.com,闪电⚡
- DOMAIN-SUFFIX,sstatic.net,闪电⚡
- DOMAIN-SUFFIX,st.luluku.pw,闪电⚡
- DOMAIN-SUFFIX,stackoverflow.com,闪电⚡
- DOMAIN-SUFFIX,startpage.com,闪电⚡
- DOMAIN-SUFFIX,staticflickr.com,闪电⚡
- DOMAIN-SUFFIX,steamcommunity.com,闪电⚡
- DOMAIN-SUFFIX,symauth.com,闪电⚡
- DOMAIN-SUFFIX,symcb.com,闪电⚡
- DOMAIN-SUFFIX,symcd.com,闪电⚡
- DOMAIN-SUFFIX,tapbots.com,闪电⚡
- DOMAIN-SUFFIX,tapbots.net,闪电⚡
- DOMAIN-SUFFIX,tdesktop.com,闪电⚡
- DOMAIN-SUFFIX,techcrunch.com,闪电⚡
- DOMAIN-SUFFIX,techsmith.com,闪电⚡
- DOMAIN-SUFFIX,thepiratebay.org,闪电⚡
- DOMAIN-SUFFIX,theverge.com,闪电⚡
- DOMAIN-SUFFIX,time.com,闪电⚡
- DOMAIN-SUFFIX,timeinc.net,闪电⚡
- DOMAIN-SUFFIX,tiny.cc,闪电⚡
- DOMAIN-SUFFIX,tinypic.com,闪电⚡
- DOMAIN-SUFFIX,tmblr.co,闪电⚡
- DOMAIN-SUFFIX,todoist.com,闪电⚡
- DOMAIN-SUFFIX,trello.com,闪电⚡
- DOMAIN-SUFFIX,trustasiassl.com,闪电⚡
- DOMAIN-SUFFIX,tumblr.co,闪电⚡
- DOMAIN-SUFFIX,tumblr.com,闪电⚡
- DOMAIN-SUFFIX,tweetdeck.com,闪电⚡
- DOMAIN-SUFFIX,tweetmarker.net,闪电⚡
- DOMAIN-SUFFIX,twitch.tv,闪电⚡
- DOMAIN-SUFFIX,txmblr.com,闪电⚡
- DOMAIN-SUFFIX,typekit.net,闪电⚡
- DOMAIN-SUFFIX,ubertags.com,闪电⚡
- DOMAIN-SUFFIX,ublock.org,闪电⚡
- DOMAIN-SUFFIX,ubnt.com,闪电⚡
- DOMAIN-SUFFIX,ulyssesapp.com,闪电⚡
- DOMAIN-SUFFIX,urchin.com,闪电⚡
- DOMAIN-SUFFIX,usertrust.com,闪电⚡
- DOMAIN-SUFFIX,v.gd,闪电⚡
- DOMAIN-SUFFIX,v2ex.com,闪电⚡
- DOMAIN-SUFFIX,vimeo.com,闪电⚡
- DOMAIN-SUFFIX,vimeocdn.com,闪电⚡
- DOMAIN-SUFFIX,vine.co,闪电⚡
- DOMAIN-SUFFIX,vivaldi.com,闪电⚡
- DOMAIN-SUFFIX,vox-cdn.com,闪电⚡
- DOMAIN-SUFFIX,vsco.co,闪电⚡
- DOMAIN-SUFFIX,vultr.com,闪电⚡
- DOMAIN-SUFFIX,w.org,闪电⚡
- DOMAIN-SUFFIX,w3schools.com,闪电⚡
- DOMAIN-SUFFIX,webtype.com,闪电⚡
- DOMAIN-SUFFIX,wikiwand.com,闪电⚡
- DOMAIN-SUFFIX,wikileaks.org,闪电⚡
- DOMAIN-SUFFIX,wikimedia.org,闪电⚡
- DOMAIN-SUFFIX,wikipedia.com,闪电⚡
- DOMAIN-SUFFIX,wikipedia.org,闪电⚡
- DOMAIN-SUFFIX,windows.com,闪电⚡
- DOMAIN-SUFFIX,windows.net,闪电⚡
- DOMAIN-SUFFIX,wire.com,闪电⚡
- DOMAIN-SUFFIX,wordpress.com,闪电⚡
- DOMAIN-SUFFIX,workflowy.com,闪电⚡
- DOMAIN-SUFFIX,wp.com,闪电⚡
- DOMAIN-SUFFIX,wsj.com,闪电⚡
- DOMAIN-SUFFIX,wsj.net,闪电⚡
- DOMAIN-SUFFIX,xda-developers.com,闪电⚡
- DOMAIN-SUFFIX,xeeno.com,闪电⚡
- DOMAIN-SUFFIX,xiti.com,闪电⚡
- DOMAIN-SUFFIX,yahoo.com,闪电⚡
- DOMAIN-SUFFIX,yimg.com,闪电⚡
- DOMAIN-SUFFIX,ying.com,闪电⚡
- DOMAIN-SUFFIX,yoyo.org,闪电⚡
- DOMAIN-SUFFIX,ytimg.com,闪电⚡
- DOMAIN-SUFFIX,telegra.ph,闪电⚡
- DOMAIN-SUFFIX,telegram.org,闪电⚡
- IP-CIDR,91.108.4.0/22,闪电⚡,no-resolve
- IP-CIDR,91.108.8.0/21,闪电⚡,no-resolve
- IP-CIDR,91.108.16.0/22,闪电⚡,no-resolve
- IP-CIDR,91.108.56.0/22,闪电⚡,no-resolve
- IP-CIDR,149.154.160.0/20,闪电⚡,no-resolve
- IP-CIDR6,2001:67c:4e8::/48,闪电⚡,no-resolve
- IP-CIDR6,2001:b28:f23d::/48,闪电⚡,no-resolve
- IP-CIDR6,2001:b28:f23f::/48,闪电⚡,no-resolve
- IP-CIDR,120.232.181.162/32,闪电⚡,no-resolve
- IP-CIDR,120.241.147.226/32,闪电⚡,no-resolve
- IP-CIDR,120.253.253.226/32,闪电⚡,no-resolve
- IP-CIDR,120.253.255.162/32,闪电⚡,no-resolve
- IP-CIDR,120.253.255.34/32,闪电⚡,no-resolve
- IP-CIDR,120.253.255.98/32,闪电⚡,no-resolve
- IP-CIDR,180.163.150.162/32,闪电⚡,no-resolve
- IP-CIDR,180.163.150.34/32,闪电⚡,no-resolve
- IP-CIDR,180.163.151.162/32,闪电⚡,no-resolve
- IP-CIDR,180.163.151.34/32,闪电⚡,no-resolve
- IP-CIDR,203.208.39.0/24,闪电⚡,no-resolve
- IP-CIDR,203.208.40.0/24,闪电⚡,no-resolve
- IP-CIDR,203.208.41.0/24,闪电⚡,no-resolve
- IP-CIDR,203.208.43.0/24,闪电⚡,no-resolve
- IP-CIDR,203.208.50.0/24,闪电⚡,no-resolve
- IP-CIDR,220.181.174.162/32,闪电⚡,no-resolve
- IP-CIDR,220.181.174.226/32,闪电⚡,no-resolve
- IP-CIDR,220.181.174.34/32,闪电⚡,no-resolve
- DOMAIN,injections.adguard.org,DIRECT
- DOMAIN,local.adguard.org,DIRECT
- DOMAIN-SUFFIX,local,DIRECT
- IP-CIDR,127.0.0.0/8,DIRECT
- IP-CIDR,172.16.0.0/12,DIRECT
- IP-CIDR,192.168.0.0/16,DIRECT
- IP-CIDR,10.0.0.0/8,DIRECT
- IP-CIDR,17.0.0.0/8,DIRECT
- IP-CIDR,100.64.0.0/10,DIRECT
- IP-CIDR,224.0.0.0/4,DIRECT
- IP-CIDR6,fe80::/10,DIRECT
- DOMAIN-SUFFIX,cn,DIRECT
- DOMAIN-KEYWORD,-cn,DIRECT
- GEOIP,CN,DIRECT
- MATCH,闪电⚡
redir-port: 7892
tproxy-port: 7895
port: 7890
socks-port: 7891
external-ui: "/usr/share/openclash/ui"
ipv6: true
interface-name: eth0
experimental:
  sniff-tls-sni: true
tun:
  enable: true
  stack: system
  auto-route: false
  auto-detect-interface: false
  dns-hijack:
  - tcp://any:53
profile:
  store-selected: true
  store-fake-ip: true
rule-providers:
  公司:
    type: file
    behavior: classical
    path: "./rule_provider/FanglingOffice"

#===================== IPTABLES 防火墙设置 =====================#

#IPv4 NAT chain

# Generated by iptables-save v1.8.7 on Sat Sep 17 17:02:11 2022
*nat
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
COMMIT
# Completed on Sat Sep 17 17:02:11 2022

#IPv4 Mangle chain

# Generated by iptables-save v1.8.7 on Sat Sep 17 17:02:11 2022
*mangle
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
COMMIT
# Completed on Sat Sep 17 17:02:11 2022

#IPv4 Filter chain

# Generated by iptables-save v1.8.7 on Sat Sep 17 17:02:11 2022
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
COMMIT
# Completed on Sat Sep 17 17:02:11 2022

#IPv6 NAT chain


#IPv6 Mangle chain


#IPv6 Filter chain


#===================== NFTABLES 防火墙设置 =====================#

table inet fw4 {
	chain dstnat {
		type nat hook prerouting priority dstnat; policy accept;
		ip6 daddr { 2001:4860:4860::8844, 2001:4860:4860::8888 } tcp dport 53 counter packets 0 bytes 0 accept comment "OpenClash Google DNS Hijack"
		meta nfproto ipv4 tcp dport 53 counter packets 0 bytes 0 accept comment "OpenClash TCP DNS Hijack"
		udp dport 53 redirect to :53 comment "OpenClash DNS Hijack"
		tcp dport 53 redirect to :53 comment "OpenClash DNS Hijack"
		ip protocol tcp counter packets 16 bytes 810 jump openclash
	}
}
table inet fw4 {
	chain dstnat {
		type nat hook prerouting priority dstnat; policy accept;
		ip6 daddr { 2001:4860:4860::8844, 2001:4860:4860::8888 } tcp dport 53 counter packets 0 bytes 0 accept comment "OpenClash Google DNS Hijack"
		meta nfproto ipv4 tcp dport 53 counter packets 0 bytes 0 accept comment "OpenClash TCP DNS Hijack"
		udp dport 53 redirect to :53 comment "OpenClash DNS Hijack"
		tcp dport 53 redirect to :53 comment "OpenClash DNS Hijack"
		ip protocol tcp counter packets 16 bytes 810 jump openclash
	}
}
table inet fw4 {
	chain dstnat {
		type nat hook prerouting priority dstnat; policy accept;
		ip6 daddr { 2001:4860:4860::8844, 2001:4860:4860::8888 } tcp dport 53 counter packets 0 bytes 0 accept comment "OpenClash Google DNS Hijack"
		meta nfproto ipv4 tcp dport 53 counter packets 0 bytes 0 accept comment "OpenClash TCP DNS Hijack"
		udp dport 53 redirect to :53 comment "OpenClash DNS Hijack"
		tcp dport 53 redirect to :53 comment "OpenClash DNS Hijack"
		ip protocol tcp counter packets 16 bytes 810 jump openclash
	}
}
table inet fw4 {
	chain dstnat {
		type nat hook prerouting priority dstnat; policy accept;
		ip6 daddr { 2001:4860:4860::8844, 2001:4860:4860::8888 } tcp dport 53 counter packets 0 bytes 0 accept comment "OpenClash Google DNS Hijack"
		meta nfproto ipv4 tcp dport 53 counter packets 0 bytes 0 accept comment "OpenClash TCP DNS Hijack"
		udp dport 53 redirect to :53 comment "OpenClash DNS Hijack"
		tcp dport 53 redirect to :53 comment "OpenClash DNS Hijack"
		ip protocol tcp counter packets 16 bytes 810 jump openclash
	}
}
table inet fw4 {
	chain dstnat {
		type nat hook prerouting priority dstnat; policy accept;
		ip6 daddr { 2001:4860:4860::8844, 2001:4860:4860::8888 } tcp dport 53 counter packets 0 bytes 0 accept comment "OpenClash Google DNS Hijack"
		meta nfproto ipv4 tcp dport 53 counter packets 0 bytes 0 accept comment "OpenClash TCP DNS Hijack"
		udp dport 53 redirect to :53 comment "OpenClash DNS Hijack"
		tcp dport 53 redirect to :53 comment "OpenClash DNS Hijack"
		ip protocol tcp counter packets 16 bytes 810 jump openclash
	}
}
table inet fw4 {
	chain dstnat {
		type nat hook prerouting priority dstnat; policy accept;
		ip6 daddr { 2001:4860:4860::8844, 2001:4860:4860::8888 } tcp dport 53 counter packets 0 bytes 0 accept comment "OpenClash Google DNS Hijack"
		meta nfproto ipv4 tcp dport 53 counter packets 0 bytes 0 accept comment "OpenClash TCP DNS Hijack"
		udp dport 53 redirect to :53 comment "OpenClash DNS Hijack"
		tcp dport 53 redirect to :53 comment "OpenClash DNS Hijack"
		ip protocol tcp counter packets 16 bytes 810 jump openclash
	}
}
table inet fw4 {
	chain dstnat {
		type nat hook prerouting priority dstnat; policy accept;
		ip6 daddr { 2001:4860:4860::8844, 2001:4860:4860::8888 } tcp dport 53 counter packets 0 bytes 0 accept comment "OpenClash Google DNS Hijack"
		meta nfproto ipv4 tcp dport 53 counter packets 0 bytes 0 accept comment "OpenClash TCP DNS Hijack"
		udp dport 53 redirect to :53 comment "OpenClash DNS Hijack"
		tcp dport 53 redirect to :53 comment "OpenClash DNS Hijack"
		ip protocol tcp counter packets 16 bytes 810 jump openclash
	}
}

#===================== IPSET状态 =====================#


#===================== 路由表状态 =====================#

#route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.168.1.1     0.0.0.0         UG    0      0        0 eth0
10.16.0.0       172.16.33.1     255.255.240.0   UG    0      0        0 tun0
172.16.0.0      172.16.33.1     255.255.240.0   UG    0      0        0 tun0
172.16.16.0     172.16.33.1     255.255.240.0   UG    0      0        0 tun0
172.16.32.0     172.16.33.1     255.255.255.0   UG    0      0        0 tun0
172.16.33.0     0.0.0.0         255.255.255.0   U     0      0        0 tun0
192.168.1.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
192.168.196.0   0.0.0.0         255.255.255.0   U     0      0        0 ztyxasgjyx
198.18.0.0      0.0.0.0         255.255.0.0     U     0      0        0 utun
#ip route list
default via 192.168.1.1 dev eth0 proto static 
10.16.0.0/20 via 172.16.33.1 dev tun0 
172.16.0.0/20 via 172.16.33.1 dev tun0 
172.16.16.0/20 via 172.16.33.1 dev tun0 
172.16.32.0/24 via 172.16.33.1 dev tun0 
172.16.33.0/24 dev tun0 proto kernel scope link src 172.16.33.10 
192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.15 
192.168.196.0/24 dev ztyxasgjyx proto kernel scope link src 192.168.196.15 
198.18.0.0/16 dev utun proto kernel scope link src 198.18.0.1 
#ip rule show
0:	from all lookup local
32765:	from all fwmark 0x162 lookup 354
32766:	from all lookup main
32767:	from all lookup default

#===================== Tun设备状态 =====================#

ztyxasgjyx: tap
tun0: tun one_queue
utun: tun

#===================== 端口占用状态 =====================#

tcp        0      0 198.18.0.1:7777         0.0.0.0:*               LISTEN      9415/clash
tcp        0      0 :::7890                 :::*                    LISTEN      9415/clash
tcp        0      0 :::7891                 :::*                    LISTEN      9415/clash
tcp        0      0 :::7892                 :::*                    LISTEN      9415/clash
tcp        0      0 :::7893                 :::*                    LISTEN      9415/clash
tcp        0      0 :::7895                 :::*                    LISTEN      9415/clash
tcp        0      0 :::9090                 :::*                    LISTEN      9415/clash
udp        0      0 198.18.0.1:7777         0.0.0.0:*                           9415/clash
udp        0      0 :::54549                :::*                                9415/clash
udp        0      0 :::38768                :::*                                9415/clash
udp        0      0 :::36826                :::*                                9415/clash
udp        0      0 :::42590                :::*                                9415/clash
udp        0      0 :::53898                :::*                                9415/clash
udp        0      0 :::7874                 :::*                                9415/clash
udp        0      0 :::7891                 :::*                                9415/clash
udp        0      0 :::7892                 :::*                                9415/clash
udp        0      0 :::7893                 :::*                                9415/clash
udp        0      0 :::7895                 :::*                                9415/clash

#===================== 测试本机DNS查询 =====================#

Server:		127.0.0.1
Address:	127.0.0.1:53

www.baidu.com	canonical name = www.a.shifen.com
Name:	www.a.shifen.com
Address: 180.101.49.12
Name:	www.a.shifen.com
Address: 180.101.49.11

www.baidu.com	canonical name = www.a.shifen.com


#===================== resolv.conf.d =====================#

# Interface lan
nameserver 192.168.1.1
search startcom.top

#===================== 测试本机网络连接 =====================#

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: private, no-cache, no-store, proxy-revalidate, no-transform
Connection: keep-alive
Content-Length: 277
Content-Type: text/html
Date: Sat, 17 Sep 2022 09:02:11 GMT
Etag: "575e1f60-115"
Last-Modified: Mon, 13 Jun 2016 02:50:08 GMT
Pragma: no-cache
Server: bfe/1.0.8.18


#===================== 测试本机网络下载 =====================#

HTTP/2 200 
cache-control: max-age=300
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox
content-type: text/plain; charset=utf-8
etag: "2029903a78e28a153a9b66d7703becf3af8289a6d59c52df3ce372b71c91b840"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: deny
x-xss-protection: 1; mode=block
x-github-request-id: 084A:22AE:E1584:133D98:6323C56B
accept-ranges: bytes
date: Sat, 17 Sep 2022 09:02:11 GMT
via: 1.1 varnish
x-served-by: cache-nrt-rjtf7700046-NRT
x-cache: HIT
x-cache-hits: 1
x-timer: S1663405332.928993,VS0,VE1
vary: Authorization,Accept-Encoding,Origin
access-control-allow-origin: *
x-fastly-request-id: f77f6b06ca40da651a58643d36630e452a42764e
expires: Sat, 17 Sep 2022 09:07:11 GMT
source-age: 73
content-length: 80


#===================== 最近运行日志 =====================#

09:01:52 DBG [UDP] accept session lAddr=192.168.1.241:54174 rAddr=104.194.8.134:9993 inbound=TUN
09:01:52 DBG [UDP] accept session lAddr=192.168.1.241:29994 rAddr=84.17.53.155:9993 inbound=TUN
09:01:52 INF [UDP] connected lAddr=192.168.1.241:54174 rAddr=104.194.8.134:9993 mode=rule rule=Match() proxy=闪电⚡[Lv2 日本 04 [1.5]]
09:01:52 INF [UDP] connected lAddr=192.168.1.241:29994 rAddr=84.17.53.155:9993 mode=rule rule=Match() proxy=闪电⚡[Lv2 日本 04 [1.5]]
09:01:59 DBG [DNS] dns response source=192.168.1.1:53 qType=A name=www.gstatic.com. answer=["203.208.40.34"]
09:01:59 DBG [TCP] accept connection lAddr=192.168.1.241:52137 rAddr=www.gstatic.com:443 inbound=Redir
09:01:59 INF [TCP] connected lAddr=192.168.1.241:52137 rAddr=www.gstatic.com:443 mode=rule rule=DomainSuffix(gstatic.com) proxy=闪电⚡[Lv2 日本 04 [1.5]]
09:01:59 DBG [DNS] dns response source=tcp-tls://8.8.4.4:853 qType=A name=www.google.com.hk. answer=["74.125.203.199"]
09:01:59 DBG [TCP] accept connection lAddr=192.168.1.241:52138 rAddr=www.google.com.hk:443 inbound=Redir
09:01:59 DBG [TCP] accept connection lAddr=192.168.1.241:52139 rAddr=www.google.com.hk:443 inbound=Redir
09:01:59 DBG [TCP] accept connection lAddr=192.168.1.241:52140 rAddr=www.google.com.hk:443 inbound=Redir
09:01:59 INF [TCP] connected lAddr=192.168.1.241:52140 rAddr=www.google.com.hk:443 mode=rule rule=DomainKeyword(google) proxy=闪电⚡[Lv2 日本 04 [1.5]]
09:01:59 INF [TCP] connected lAddr=192.168.1.241:52139 rAddr=www.google.com.hk:443 mode=rule rule=DomainKeyword(google) proxy=闪电⚡[Lv2 日本 04 [1.5]]
09:01:59 DBG [DNS] dns response source=tcp-tls://8.8.4.4:853 qType=AAAA name=unicomv2.mipglxi.cn. answer=[]
09:02:00 INF [TCP] connected lAddr=192.168.1.241:52138 rAddr=www.google.com.hk:443 mode=rule rule=DomainKeyword(google) proxy=闪电⚡[Lv2 日本 04 [1.5]]
09:02:00 DBG [DNS] dns response source=https://dns.cloudflare.com/dns-query qType=A name=play.google.com. answer=["142.250.189.206"]
09:02:00 DBG [TCP] accept connection lAddr=192.168.1.241:52143 rAddr=play.google.com:443 inbound=Redir
09:02:00 INF [TCP] connected lAddr=192.168.1.241:52143 rAddr=play.google.com:443 mode=rule rule=DomainKeyword(google) proxy=闪电⚡[Lv2 日本 04 [1.5]]
09:02:01 DBG [DNS] dns response source=https://dns.cloudflare.com/dns-query qType=A name=adservice.google.com.hk. answer=["142.250.189.162"]
09:02:01 DBG [TCP] accept connection lAddr=192.168.1.241:52144 rAddr=adservice.google.com.hk:443 inbound=Redir
09:02:01 INF [TCP] connected lAddr=192.168.1.241:52144 rAddr=adservice.google.com.hk:443 mode=rule rule=DomainKeyword(google) proxy=闪电⚡[Lv2 日本 04 [1.5]]
09:02:03 DBG [UDP] accept session lAddr=198.18.0.1:52709 rAddr=84.17.53.155:9993 inbound=TUN
09:02:03 DBG [UDP] accept session lAddr=198.18.0.1:9993 rAddr=84.17.53.155:9993 inbound=TUN
09:02:03 INF [UDP] connected lAddr=198.18.0.1:52709 rAddr=84.17.53.155:9993 mode=rule rule=Match() proxy=闪电⚡[Lv2 日本 04 [1.5]]
09:02:03 INF [UDP] connected lAddr=198.18.0.1:9993 rAddr=84.17.53.155:9993 mode=rule rule=Match() proxy=闪电⚡[Lv2 日本 04 [1.5]]
09:02:03 DBG [UDP] accept session lAddr=198.18.0.1:29994 rAddr=84.17.53.155:9993 inbound=TUN
09:02:03 INF [UDP] connected lAddr=198.18.0.1:29994 rAddr=84.17.53.155:9993 mode=rule rule=Match() proxy=闪电⚡[Lv2 日本 04 [1.5]]
09:02:03 DBG [DNS] dns response source=https://dns.cloudflare.com/dns-query qType=A name=clients4.google.com. answer=["142.250.191.78"]
09:02:03 DBG [TCP] accept connection lAddr=192.168.1.241:52148 rAddr=clients4.google.com:443 inbound=Redir
09:02:03 DBG [DNS] dns response source=192.168.1.1:53 qType=A name=unicomv2.mipglxi.cn. answer=["112.64.100.64"]
09:02:03 INF [TCP] connected lAddr=192.168.1.241:52148 rAddr=clients4.google.com:443 mode=rule rule=DomainKeyword(google) proxy=闪电⚡[Lv2 日本 04 [1.5]]
09:02:06 DBG [TCP] accept connection lAddr=192.168.1.241:52151 rAddr=www.youtube.com:443 inbound=Redir
09:02:06 INF [TCP] connected lAddr=192.168.1.241:52151 rAddr=www.youtube.com:443 mode=rule rule=DomainKeyword(youtube) proxy=闪电⚡[Lv2 日本 04 [1.5]]
09:02:08 DBG [DNS] dns response source=https://dns.cloudflare.com/dns-query qType=AAAA name=raw.githubusercontent.com. answer=["2606:50c0:8003::154","2606:50c0:8000::154","2606:50c0:8002::154","2606:50c0:8001::154"]
09:02:08 DBG [DNS] dns response source=https://dns.cloudflare.com/dns-query qType=A name=raw.githubusercontent.com. answer=["185.199.110.133","185.199.109.133","185.199.108.133","185.199.111.133"]
09:02:08 DBG [TCP] accept connection lAddr=192.168.1.15:47968 rAddr=raw.githubusercontent.com:443 inbound=Redir
09:02:08 INF [TCP] connected lAddr=192.168.1.15:47968 rAddr=raw.githubusercontent.com:443 mode=rule rule=DomainKeyword(github) proxy=闪电⚡[Lv2 日本 04 [1.5]]
09:02:08 DBG [TCP] accept connection lAddr=192.168.1.15:47980 rAddr=raw.githubusercontent.com:443 inbound=Redir
09:02:08 DBG [DNS] dns response source=192.168.1.1:53 qType=A name=www.fscut.com. answer=["47.103.37.176"]
09:02:08 DBG [TCP] accept connection lAddr=192.168.1.241:52156 rAddr=www.fscut.com:80 inbound=Redir
09:02:08 DBG [Matcher] resolve success host=www.fscut.com ip=47.103.37.176
09:02:08 DBG [DNS] dns response source=192.168.1.1:53 qType=A name=share.fscut.com. answer=["10.1.1.81"]
09:02:08 INF [TCP] connected lAddr=192.168.1.241:52156 rAddr=www.fscut.com:80 mode=rule rule=GeoIP(CN) proxy=DIRECT
09:02:09 INF [TCP] connected lAddr=192.168.1.15:47980 rAddr=raw.githubusercontent.com:443 mode=rule rule=DomainKeyword(github) proxy=闪电⚡[Lv2 日本 04 [1.5]]
09:02:11 DBG [DNS] dns response source=192.168.1.1:53 qType=A name=www.baidu.com. answer=["180.101.49.12","180.101.49.11"]
09:02:11 DBG [DNS] dns response source=tcp-tls://8.8.4.4:853 qType=AAAA name=www.baidu.com. answer=[]
09:02:11 DBG [TCP] accept connection lAddr=192.168.1.15:35658 rAddr=www.baidu.com:80 inbound=Redir
09:02:11 INF [TCP] connected lAddr=192.168.1.15:35658 rAddr=www.baidu.com:80 mode=rule rule=DomainKeyword(baidu) proxy=DIRECT
09:02:11 DBG [TCP] accept connection lAddr=192.168.1.15:39098 rAddr=raw.githubusercontent.com:443 inbound=Redir
09:02:11 INF [TCP] connected lAddr=192.168.1.15:39098 rAddr=raw.githubusercontent.com:443 mode=rule rule=DomainKeyword(github) proxy=闪电⚡[Lv2 日本 04 [1.5]]

#===================== 活动连接信息 =====================#

1. SourceIP:【192.168.1.241】 - Host:【www.youtube.com】 - DestinationIP:【172.217.25.14】 - Network:【tcp】 - RulePayload:【youtube】 - Lastchain:【Lv2 日本 04 [1.5]】
2. SourceIP:【198.18.0.1】 - Host:【Empty】 - DestinationIP:【84.17.53.155】 - Network:【udp】 - RulePayload:【】 - Lastchain:【Lv2 日本 04 [1.5]】
3. SourceIP:【198.18.0.1】 - Host:【Empty】 - DestinationIP:【84.17.53.155】 - Network:【udp】 - RulePayload:【】 - Lastchain:【Lv2 日本 04 [1.5]】
4. SourceIP:【198.18.0.1】 - Host:【Empty】 - DestinationIP:【84.17.53.155】 - Network:【udp】 - RulePayload:【】 - Lastchain:【Lv2 日本 04 [1.5]】
5. SourceIP:【192.168.1.241】 - Host:【Empty】 - DestinationIP:【84.17.53.155】 - Network:【udp】 - RulePayload:【】 - Lastchain:【Lv2 日本 04 [1.5]】
6. SourceIP:【192.168.1.241】 - Host:【www.youtube.com】 - DestinationIP:【172.217.24.78】 - Network:【tcp】 - RulePayload:【youtube】 - Lastchain:【Lv2 日本 04 [1.5]】
7. SourceIP:【192.168.1.241】 - Host:【www.google.com.hk】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【google】 - Lastchain:【Lv2 日本 04 [1.5]】
8. SourceIP:【192.168.1.241】 - Host:【clients4.google.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【google】 - Lastchain:【Lv2 日本 04 [1.5]】
9. SourceIP:【192.168.1.241】 - Host:【Empty】 - DestinationIP:【104.194.8.134】 - Network:【udp】 - RulePayload:【】 - Lastchain:【Lv2 日本 04 [1.5]】
10. SourceIP:【192.168.1.241】 - Host:【www.gstatic.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【gstatic.com】 - Lastchain:【Lv2 日本 04 [1.5]】
11. SourceIP:【192.168.1.241】 - Host:【play.google.com】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【google】 - Lastchain:【Lv2 日本 04 [1.5]】
12. SourceIP:【192.168.1.241】 - Host:【adservice.google.com.hk】 - DestinationIP:【】 - Network:【tcp】 - RulePayload:【google】 - Lastchain:【Lv2 日本 04 [1.5]】

vernesong · 2022-09-21T12:35:06Z

vernesong
Sep 21, 2022
Maintainer

绑定接口取消呢

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

电脑上公网网页可以上，但是ping不通公网IP #2704

{{title}}

Replies: 1 comment

{{title}}

Select a reply

电脑上公网网页可以上，但是ping不通公网IP #2704

miao-lastwish Sep 17, 2022

Replies: 1 comment

vernesong Sep 21, 2022 Maintainer

miao-lastwish
Sep 17, 2022

vernesong
Sep 21, 2022
Maintainer