Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Bug] 过clash内核后的直连连接报错error: reject loopback #4081

Open
5 of 7 tasks
JIZHENQIANG opened this issue Oct 2, 2024 · 18 comments
Open
5 of 7 tasks

[Bug] 过clash内核后的直连连接报错error: reject loopback #4081

JIZHENQIANG opened this issue Oct 2, 2024 · 18 comments
Labels
bug Something isn't working

Comments

@JIZHENQIANG
Copy link

Verify Steps

  • Tracker 我已经在 Issue Tracker 中找过我要提出的问题
  • Branch 我知道 OpenClash 的 Dev 分支切换开关位于插件设置-版本更新中，或者我会手动下载并安装 Dev 分支的 OpenClash
  • Latest 我已经使用最新 Dev 版本测试过，问题依旧存在
  • Relevant 我知道 OpenClash 与 内核(Core)、控制面板(Dashboard)、在线订阅转换(Subconverter)等项目之间无直接关系，仅相互调用
  • Definite 这确实是 OpenClash 出现的问题
  • Contributors 我有能力协助 OpenClash 开发并解决此问题
  • Meaningless 我提交的是无意义的催促更新或修复请求

OpenClash Version

v0.46.035-beat

Bug on Environment

Immortalwrt

OpenWrt Version

ImmortalWrt 23.05-SNAPSHOT r28069-e1d143ce7e

Bug on Platform

Linux-arm64

Describe the Bug

捕获

To Reproduce

升级到最新版dev后经过clash内核判定为直连的连接无法访问

OpenClash Log

2024-10-02 20:04:05 OpenClash 启动成功，请等待服务器上线！
2024-10-02 20:04:05 第七步: 添加计划任务,启动进程守护程序...
2024-10-02 20:04:01 第六步: 重启 Dnsmasq 程序...
2024-10-02 20:03:58 提示：开始添加自定义防火墙规则...
2024-10-02 20:03:58 提示：正在根据防火墙端口转发和防火墙通信规则添加端口绕过规则...
2024-10-02 20:03:54 提示：检测到 Firewall4，使用 NFTABLE 规则...
2024-10-02 20:03:54 提示：DNS 劫持模式为 Dnsmasq 转发...
2024-10-02 20:03:54 第五步: 设置防火墙规则...
2024-10-02 20:03:54 配置文件【】测试成功...
2024-10-02 20:02:57 启动前调用内核测试配置文件...
2024-10-02 20:02:57 第四步: 启动主程序...
2024-10-02 20:02:57 提示：开始运行自定义覆写脚本...
2024-10-02 20:02:55 提示：为保证绕过 IP 正常工作，已在 Fake-IP-Filter 中添加规则【 geosite:cn 】
2024-10-02 20:02:55 提示：您为 SOCKS5/HTTP(S) 代理设置的账户密码为【】
2024-10-02 20:02:54 第三步: 修改配置文件...
2024-10-02 20:02:54 第二步: 组件运行前检查...
2024-10-02 20:02:54 第一步: 获取配置...
2024-10-02 20:02:54 OpenClash 开始启动...

OpenClash Config

No response

Expected Behavior

查明原因修复bug

Additional Context

No response
@JIZHENQIANG JIZHENQIANG added the bug Something isn't working label Oct 2, 2024
@JIZHENQIANG
Copy link
Author

找到原因了，clash_meta内核文件拥有者和组不是root，把内核文件拥有者和组改成root就能正常代理了。
但是clash内核和以前一样是openclash网页引导下载的，v0.46.035-beta之前版本没有这个问题，是有修改什么吗？还是alpha-ga330fa1
这个最新版本内核的本身权限问题。

@akaet
Copy link

akaet commented Oct 2, 2024

找到原因了，clash_meta内核文件拥有者和组不是root，把内核文件拥有者和组改成root就能正常代理了。 但是clash内核和以前一样是openclash网页引导下载的，v0.46.035-beta之前版本没有这个问题，是有修改什么吗？还是alpha-ga330fa1 这个最新版本内核的本身权限问题。

感谢，改完后重启一下OpenClash就正常了。

@vicdorke
Copy link

vicdorke commented Oct 3, 2024 •
edited
Loading

我也遇到这个问题，怎么修改内核文件拥有者和组呢？
chown root:root /etc/openclash/core/clash_meta
成功解决

@vernesong
Copy link
Owner

无法复现，看下运行配置文件

@gemnioo
Copy link

gemnioo commented Oct 3, 2024

无法复现，看下运行配置文件

可以复现

Bug_1: 更新 luci-app-openclash_0.46.035-beta_all.ipk 因旧配置残留会导致启动失败

Bug_2: 更新 Meta 内核 luci-app-openclash_0.46.035-beta_all.ipk 会出现 error: reject loopback (国内直连和国际代理均失效

手动 opkg 重装后 op 还原默认配置在导入可以解决 Bug_1.

'chown root:root /etc/openclash/core/clash_meta' 提权 root 后可以解决 Bug_2

以上. 刚刚折腾三小时. 升级 0.46.036-beta 因 Bug_2 重装 0.46.035-beta 再看到此帖 升级内核后提权 root

@vernesong
Copy link
Owner

我设置成nobody也没问题，这跟用户组没关系，因为最后始终都是nobody用户启动

@vernesong
Copy link
Owner

新版本重写了ruby启用了多线程处理，所以我要看看是不是配置文件没改对导致的

@Fddh2012
Copy link

Fddh2012 commented Oct 3, 2024

我说怎么回事，升级到35后，出现loop，然后手动阶级了内核，发现还是，又删除插件重新安装34就好了，想着提交一下bug，又升级到35，结果又神奇的正常了。。。

@JIZHENQIANG
Copy link
Author

最初出现问题时用户组不是root和nobody而是一串数字，具体多少没有记录。我修改成root问题就解决了。
后来我想确定一下是不是残留的问题，重装了Immortalwrt和openclash最新的v0.46.036-beta安装后没什么问题，但是配置结束后我重启了Immortalwrt，查看日志问题又出现了相同的问题。
我的问题是经过clash内核的判定直连的会有 error: reject loopback这个bug，没有经过内核的或者判定走代理节点的没有问题，可以正常访问。
也许是你说的和用户组没关系而是多线程的问题。

新版本重写了ruby启用了多线程处理，所以我要看看是不是配置文件没改对导致的

@JIZHENQIANG
Copy link
Author 

---
port: 7890
socks-port: 7891
allow-lan: true
mode: rule
log-level: silent
external-controller: 0.0.0.0:9090
proxies:
- 
proxy-groups:
- name: "\U0001F680 节点选择"
  type: select
  proxies:
  - "\U0001F1ED\U0001F1F0 香港节点"
  - "\U0001F1F9\U0001F1FC 台湾节点"
  - "\U0001F1EF\U0001F1F5 日本节点"
  - "\U0001F1F8\U0001F1EC 新加坡节点"
  - "\U0001F1FA\U0001F1F8 美国节点"
  - "\U0001F1F2\U0001F1FE 马来西亚节点"
  - "\U0001F1EC\U0001F1E7 英国节点"
  - "\U0001F1F9\U0001F1F7 土耳其节点"
  - "\U0001F1E6\U0001F1F7 阿根廷节点"
  - "♻️ 自动选择"
  - "\U0001F680 手动切换"
- name: "\U0001F680 手动切换"
  type: select
  proxies:
  - 
- name: "♻️ 自动选择"
  type: url-test
  url: http://cp.cloudflare.com/generate_204
  interval: 300
  tolerance: 50
  proxies:
  - 
- name: "\U0001F680 GitHub"
  type: select
  proxies:
  - "\U0001F1ED\U0001F1F0 香港节点"
  - "\U0001F1F9\U0001F1FC 台湾节点"
  - "\U0001F1EF\U0001F1F5 日本节点"
  - "\U0001F1F8\U0001F1EC 新加坡节点"
  - "\U0001F1FA\U0001F1F8 美国节点"
  - "\U0001F1F2\U0001F1FE 马来西亚节点"
  - "\U0001F1EC\U0001F1E7 英国节点"
  - "\U0001F1F9\U0001F1F7 土耳其节点"
  - "\U0001F1E6\U0001F1F7 阿根廷节点"
  - "\U0001F680 节点选择"
  - "♻️ 自动选择"
  - "\U0001F680 手动切换"
  - "\U0001F3AF 全球直连"
- name: "\U0001F4F2 Telegram"
  type: select
  proxies:
  - "\U0001F1ED\U0001F1F0 香港节点"
  - "\U0001F1F9\U0001F1FC 台湾节点"
  - "\U0001F1EF\U0001F1F5 日本节点"
  - "\U0001F1F8\U0001F1EC 新加坡节点"
  - "\U0001F1FA\U0001F1F8 美国节点"
  - "\U0001F1F2\U0001F1FE 马来西亚节点"
  - "\U0001F1EC\U0001F1E7 英国节点"
  - "\U0001F1F9\U0001F1F7 土耳其节点"
  - "\U0001F1E6\U0001F1F7 阿根廷节点"
  - "\U0001F680 节点选择"
  - "♻️ 自动选择"
  - "\U0001F680 手动切换"
  - "\U0001F3AF 全球直连"
- name: "\U0001F4AC ChatGPT"
  type: select
  proxies:
  - "\U0001F1ED\U0001F1F0 香港节点"
  - "\U0001F1F9\U0001F1FC 台湾节点"
  - "\U0001F1EF\U0001F1F5 日本节点"
  - "\U0001F1F8\U0001F1EC 新加坡节点"
  - "\U0001F1FA\U0001F1F8 美国节点"
  - "\U0001F1F2\U0001F1FE 马来西亚节点"
  - "\U0001F1EC\U0001F1E7 英国节点"
  - "\U0001F1F9\U0001F1F7 土耳其节点"
  - "\U0001F1E6\U0001F1F7 阿根廷节点"
  - "\U0001F680 节点选择"
  - "♻️ 自动选择"
  - "\U0001F680 手动切换"
  - "\U0001F3AF 全球直连"
- name: Ⓜ️ Copilot
  type: select
  proxies:
  - "\U0001F1ED\U0001F1F0 香港节点"
  - "\U0001F1F9\U0001F1FC 台湾节点"
  - "\U0001F1EF\U0001F1F5 日本节点"
  - "\U0001F1F8\U0001F1EC 新加坡节点"
  - "\U0001F1FA\U0001F1F8 美国节点"
  - "\U0001F1F2\U0001F1FE 马来西亚节点"
  - "\U0001F1EC\U0001F1E7 英国节点"
  - "\U0001F1F9\U0001F1F7 土耳其节点"
  - "\U0001F1E6\U0001F1F7 阿根廷节点"
  - "\U0001F680 节点选择"
  - "♻️ 自动选择"
  - "\U0001F680 手动切换"
  - "\U0001F3AF 全球直连"
- name: "\U0001F3B6 TikTok"
  type: select
  proxies:
  - "\U0001F1ED\U0001F1F0 香港节点"
  - "\U0001F1F9\U0001F1FC 台湾节点"
  - "\U0001F1EF\U0001F1F5 日本节点"
  - "\U0001F1F8\U0001F1EC 新加坡节点"
  - "\U0001F1FA\U0001F1F8 美国节点"
  - "\U0001F1F2\U0001F1FE 马来西亚节点"
  - "\U0001F1EC\U0001F1E7 英国节点"
  - "\U0001F1F9\U0001F1F7 土耳其节点"
  - "\U0001F1E6\U0001F1F7 阿根廷节点"
  - "\U0001F680 节点选择"
  - "♻️ 自动选择"
  - "\U0001F680 手动切换"
  - "\U0001F3AF 全球直连"
- name: "\U0001F4F9 YouTube"
  type: select
  proxies:
  - "\U0001F1F8\U0001F1EC 新加坡节点"
  - "\U0001F1ED\U0001F1F0 香港节点"
  - "\U0001F1F9\U0001F1FC 台湾节点"
  - "\U0001F1EF\U0001F1F5 日本节点"
  - "\U0001F1FA\U0001F1F8 美国节点"
  - "\U0001F1F2\U0001F1FE 马来西亚节点"
  - "\U0001F1EC\U0001F1E7 英国节点"
  - "\U0001F1F9\U0001F1F7 土耳其节点"
  - "\U0001F1E6\U0001F1F7 阿根廷节点"
  - "\U0001F680 节点选择"
  - "♻️ 自动选择"
  - "\U0001F680 手动切换"
  - "\U0001F3AF 全球直连"
- name: "\U0001F3A5 Netflix"
  type: select
  proxies:
  - "\U0001F1F8\U0001F1EC 新加坡节点"
  - "\U0001F1ED\U0001F1F0 香港节点"
  - "\U0001F1F9\U0001F1FC 台湾节点"
  - "\U0001F1EF\U0001F1F5 日本节点"
  - "\U0001F1FA\U0001F1F8 美国节点"
  - "\U0001F1F2\U0001F1FE 马来西亚节点"
  - "\U0001F1EC\U0001F1E7 英国节点"
  - "\U0001F1F9\U0001F1F7 土耳其节点"
  - "\U0001F1E6\U0001F1F7 阿根廷节点"
  - "\U0001F680 节点选择"
  - "♻️ 自动选择"
  - "\U0001F680 手动切换"
  - "\U0001F3AF 全球直连"
- name: "\U0001F3A5 Disney+"
  type: select
  proxies:
  - "\U0001F1F8\U0001F1EC 新加坡节点"
  - "\U0001F1ED\U0001F1F0 香港节点"
  - "\U0001F1F9\U0001F1FC 台湾节点"
  - "\U0001F1EF\U0001F1F5 日本节点"
  - "\U0001F1FA\U0001F1F8 美国节点"
  - "\U0001F1F2\U0001F1FE 马来西亚节点"
  - "\U0001F1EC\U0001F1E7 英国节点"
  - "\U0001F1F9\U0001F1F7 土耳其节点"
  - "\U0001F1E6\U0001F1F7 阿根廷节点"
  - "\U0001F680 节点选择"
  - "♻️ 自动选择"
  - "\U0001F680 手动切换"
  - "\U0001F3AF 全球直连"
- name: "\U0001F3BB Spotify"
  type: select
  proxies:
  - "\U0001F1ED\U0001F1F0 香港节点"
  - "\U0001F1F9\U0001F1FC 台湾节点"
  - "\U0001F1EF\U0001F1F5 日本节点"
  - "\U0001F1F8\U0001F1EC 新加坡节点"
  - "\U0001F1FA\U0001F1F8 美国节点"
  - "\U0001F1F2\U0001F1FE 马来西亚节点"
  - "\U0001F1EC\U0001F1E7 英国节点"
  - "\U0001F1F9\U0001F1F7 土耳其节点"
  - "\U0001F1E6\U0001F1F7 阿根廷节点"
  - "\U0001F680 节点选择"
  - "♻️ 自动选择"
  - "\U0001F680 手动切换"
  - "\U0001F3AF 全球直连"
- name: "\U0001F4FA Bahamut"
  type: select
  proxies:
  - "\U0001F1F9\U0001F1FC 台湾节点"
  - "\U0001F680 节点选择"
  - "\U0001F680 手动切换"
  - "\U0001F3AF 全球直连"
- name: "\U0001F3B6 网易音乐"
  type: select
  proxies:
  - "\U0001F3AF 全球直连"
  - "\U0001F680 节点选择"
  - "♻️ 自动选择"
- name: "\U0001F30D 国内媒体"
  type: select
  proxies:
  - "\U0001F3AF 全球直连"
  - "\U0001F1F9\U0001F1FC 台湾节点"
  - "\U0001F1ED\U0001F1F0 香港节点"
- name: "\U0001F30D 国外媒体"
  type: select
  proxies:
  - "\U0001F1F8\U0001F1EC 新加坡节点"
  - "\U0001F1ED\U0001F1F0 香港节点"
  - "\U0001F1F9\U0001F1FC 台湾节点"
  - "\U0001F1EF\U0001F1F5 日本节点"
  - "\U0001F1FA\U0001F1F8 美国节点"
  - "\U0001F1F2\U0001F1FE 马来西亚节点"
  - "\U0001F1EC\U0001F1E7 英国节点"
  - "\U0001F1F9\U0001F1F7 土耳其节点"
  - "\U0001F1E6\U0001F1F7 阿根廷节点"
  - "\U0001F680 节点选择"
  - "♻️ 自动选择"
  - "\U0001F680 手动切换"
  - "\U0001F3AF 全球直连"
- name: "\U0001F4E2 谷歌FCM"
  type: select
  proxies:
  - "\U0001F1ED\U0001F1F0 香港节点"
  - "\U0001F1F9\U0001F1FC 台湾节点"
  - "\U0001F1EF\U0001F1F5 日本节点"
  - "\U0001F1F8\U0001F1EC 新加坡节点"
  - "\U0001F1FA\U0001F1F8 美国节点"
  - "\U0001F1F2\U0001F1FE 马来西亚节点"
  - "\U0001F1EC\U0001F1E7 英国节点"
  - "\U0001F1F9\U0001F1F7 土耳其节点"
  - "\U0001F1E6\U0001F1F7 阿根廷节点"
  - "\U0001F680 节点选择"
  - "♻️ 自动选择"
  - "\U0001F680 手动切换"
  - "\U0001F3AF 全球直连"
- name: "\U0001F1EC 谷歌服务"
  type: select
  proxies:
  - "\U0001F1ED\U0001F1F0 香港节点"
  - "\U0001F1F9\U0001F1FC 台湾节点"
  - "\U0001F1EF\U0001F1F5 日本节点"
  - "\U0001F1F8\U0001F1EC 新加坡节点"
  - "\U0001F1FA\U0001F1F8 美国节点"
  - "\U0001F1F2\U0001F1FE 马来西亚节点"
  - "\U0001F1EC\U0001F1E7 英国节点"
  - "\U0001F1F9\U0001F1F7 土耳其节点"
  - "\U0001F1E6\U0001F1F7 阿根廷节点"
  - "\U0001F680 节点选择"
  - "♻️ 自动选择"
  - "\U0001F680 手动切换"
  - "\U0001F3AF 全球直连"
- name: "\U0001F34E 苹果服务"
  type: select
  proxies:
  - "\U0001F3AF 全球直连"
  - "\U0001F1ED\U0001F1F0 香港节点"
  - "\U0001F1F9\U0001F1FC 台湾节点"
  - "\U0001F1EF\U0001F1F5 日本节点"
  - "\U0001F1F8\U0001F1EC 新加坡节点"
  - "\U0001F1FA\U0001F1F8 美国节点"
  - "\U0001F1F2\U0001F1FE 马来西亚节点"
  - "\U0001F1EC\U0001F1E7 英国节点"
  - "\U0001F1F9\U0001F1F7 土耳其节点"
  - "\U0001F1E6\U0001F1F7 阿根廷节点"
  - "\U0001F680 节点选择"
  - "♻️ 自动选择"
  - "\U0001F680 手动切换"
- name: Ⓜ️ 微软服务
  type: select
  proxies:
  - "\U0001F3AF 全球直连"
  - "\U0001F1ED\U0001F1F0 香港节点"
  - "\U0001F1F9\U0001F1FC 台湾节点"
  - "\U0001F1EF\U0001F1F5 日本节点"
  - "\U0001F1F8\U0001F1EC 新加坡节点"
  - "\U0001F1FA\U0001F1F8 美国节点"
  - "\U0001F1F2\U0001F1FE 马来西亚节点"
  - "\U0001F1EC\U0001F1E7 英国节点"
  - "\U0001F1F9\U0001F1F7 土耳其节点"
  - "\U0001F1E6\U0001F1F7 阿根廷节点"
  - "\U0001F680 节点选择"
  - "♻️ 自动选择"
  - "\U0001F680 手动切换"
- name: "\U0001F358️ 小米服务"
  type: select
  proxies:
  - "\U0001F3AF 全球直连"
  - "\U0001F1ED\U0001F1F0 香港节点"
  - "\U0001F1F9\U0001F1FC 台湾节点"
  - "\U0001F1EF\U0001F1F5 日本节点"
  - "\U0001F1F8\U0001F1EC 新加坡节点"
  - "\U0001F1FA\U0001F1F8 美国节点"
  - "\U0001F1F2\U0001F1FE 马来西亚节点"
  - "\U0001F1EC\U0001F1E7 英国节点"
  - "\U0001F1F9\U0001F1F7 土耳其节点"
  - "\U0001F1E6\U0001F1F7 阿根廷节点"
  - "\U0001F680 节点选择"
  - "♻️ 自动选择"
  - "\U0001F680 手动切换"
- name: "\U0001F3AE 游戏平台"
  type: select
  proxies:
  - "\U0001F3AF 全球直连"
  - "\U0001F1ED\U0001F1F0 香港节点"
  - "\U0001F1F9\U0001F1FC 台湾节点"
  - "\U0001F1EF\U0001F1F5 日本节点"
  - "\U0001F1F8\U0001F1EC 新加坡节点"
  - "\U0001F1FA\U0001F1F8 美国节点"
  - "\U0001F1F2\U0001F1FE 马来西亚节点"
  - "\U0001F1EC\U0001F1E7 英国节点"
  - "\U0001F1F9\U0001F1F7 土耳其节点"
  - "\U0001F1E6\U0001F1F7 阿根廷节点"
  - "\U0001F680 节点选择"
  - "♻️ 自动选择"
  - "\U0001F680 手动切换"
- name: "\U0001F3AE Steam"
  type: select
  proxies:
  - "\U0001F3AF 全球直连"
  - "\U0001F1ED\U0001F1F0 香港节点"
  - "\U0001F1F9\U0001F1FC 台湾节点"
  - "\U0001F1EF\U0001F1F5 日本节点"
  - "\U0001F1F8\U0001F1EC 新加坡节点"
  - "\U0001F1FA\U0001F1F8 美国节点"
  - "\U0001F1F2\U0001F1FE 马来西亚节点"
  - "\U0001F1EC\U0001F1E7 英国节点"
  - "\U0001F1F9\U0001F1F7 土耳其节点"
  - "\U0001F1E6\U0001F1F7 阿根廷节点"
  - "\U0001F680 节点选择"
  - "♻️ 自动选择"
  - "\U0001F680 手动切换"
- name: "\U0001F41F 漏网之鱼"
  type: select
  proxies:
  - "\U0001F1ED\U0001F1F0 香港节点"
  - "\U0001F1F9\U0001F1FC 台湾节点"
  - "\U0001F1EF\U0001F1F5 日本节点"
  - "\U0001F1F8\U0001F1EC 新加坡节点"
  - "\U0001F1FA\U0001F1F8 美国节点"
  - "\U0001F1F2\U0001F1FE 马来西亚节点"
  - "\U0001F1EC\U0001F1E7 英国节点"
  - "\U0001F1F9\U0001F1F7 土耳其节点"
  - "\U0001F1E6\U0001F1F7 阿根廷节点"
  - "\U0001F680 节点选择"
  - "♻️ 自动选择"
  - "\U0001F680 手动切换"
  - "\U0001F3AF 全球直连"
- name: "\U0001F3AF 全球直连"
  type: select
  proxies:
  - DIRECT
- name: "\U0001F1ED\U0001F1F0 香港节点"
  type: url-test
  url: http://cp.cloudflare.com/generate_204
  interval: 300
  tolerance: 50
  proxies:
  - 
- name: "\U0001F1F9\U0001F1FC 台湾节点"
  type: url-test
  url: http://cp.cloudflare.com/generate_204
  interval: 300
  tolerance: 50
  proxies:
  - 
- name: "\U0001F1EF\U0001F1F5 日本节点"
  type: url-test
  url: http://cp.cloudflare.com/generate_204
  interval: 300
  tolerance: 50
  proxies:
  - 
- name: "\U0001F1F8\U0001F1EC 新加坡节点"
  type: url-test
  url: http://cp.cloudflare.com/generate_204
  interval: 300
  tolerance: 50
  proxies:
  - 
- name: "\U0001F1FA\U0001F1F8 美国节点"
  type: url-test
  url: http://cp.cloudflare.com/generate_204
  interval: 300
  tolerance: 50
  proxies:
  - 
- name: "\U0001F1F2\U0001F1FE 马来西亚节点"
  type: url-test
  url: http://cp.cloudflare.com/generate_204
  interval: 300
  tolerance: 50
  proxies:
  - 
- name: "\U0001F1EC\U0001F1E7 英国节点"
  type: url-test
  url: http://cp.cloudflare.com/generate_204
  interval: 300
  tolerance: 50
  proxies:
  - 
- name: "\U0001F1F9\U0001F1F7 土耳其节点"
  type: url-test
  url: http://cp.cloudflare.com/generate_204
  interval: 300
  tolerance: 50
  proxies:
  - 
- name: "\U0001F1E6\U0001F1F7 阿根廷节点"
  type: url-test
  url: http://cp.cloudflare.com/generate_204
  interval: 300
  tolerance: 50
  proxies:
  - 
rules:
- DST-PORT,7895,REJECT
- DST-PORT,7892,REJECT
- IP-CIDR,198.18.0.1/16,REJECT,no-resolve
- "RULE-SET,Lan,\U0001F3AF 全球直连"
- "RULE-SET,Direct,\U0001F3AF 全球直连"
- "RULE-SET,GoogleFCM,\U0001F4E2 谷歌FCM"
- "RULE-SET,GoogleCN,\U0001F3AF 全球直连"
- "RULE-SET,GoogleCNProxyIP,\U0001F680 节点选择"
- "RULE-SET,SteamCN,\U0001F3AF 全球直连"
- "RULE-SET,Steam_CDN,\U0001F3AF 全球直连"
- "RULE-SET,PrivateTracker,\U0001F3AF 全球直连"
- "RULE-SET,Telegram,\U0001F4F2 Telegram"
- "RULE-SET,OpenAI,\U0001F4AC ChatGPT"
- RULE-SET,Copilot,Ⓜ️ Copilot
- "RULE-SET,GitHub,\U0001F680 GitHub"
- "RULE-SET,Apple,\U0001F34E 苹果服务"
- RULE-SET,Microsoft,Ⓜ️ 微软服务
- "RULE-SET,YouTube,\U0001F4F9 YouTube"
- "RULE-SET,Google,\U0001F1EC 谷歌服务"
- "RULE-SET,XiaoMi,\U0001F358️ 小米服务"
- "RULE-SET,TikTok,\U0001F3B6 TikTok"
- "RULE-SET,Netflix,\U0001F3A5 Netflix"
- "RULE-SET,Disney,\U0001F3A5 Disney+"
- "RULE-SET,Spotify,\U0001F3BB Spotify"
- "RULE-SET,Bahamut,\U0001F4FA Bahamut"
- "RULE-SET,NetEaseMusic,\U0001F3B6 网易音乐"
- "RULE-SET,ChinaMedia,\U0001F30D 国内媒体"
- "RULE-SET,GlobalMedia,\U0001F30D 国外媒体"
- "RULE-SET,Epic,\U0001F3AE 游戏平台"
- "RULE-SET,EA,\U0001F3AE 游戏平台"
- "RULE-SET,Blizzard,\U0001F3AE 游戏平台"
- "RULE-SET,UBI,\U0001F3AE 游戏平台"
- "RULE-SET,Sony,\U0001F3AE 游戏平台"
- "RULE-SET,Nintendo,\U0001F3AE 游戏平台"
- "RULE-SET,Steam,\U0001F3AE Steam"
- "RULE-SET,ProxyGFWlist,\U0001F680 节点选择"
- "RULE-SET,China,\U0001F3AF 全球直连"
- "RULE-SET,ChinaDomain,\U0001F3AF 全球直连"
- "RULE-SET,ChinaCompanyIp,\U0001F3AF 全球直连"
- "RULE-SET,ChinaIp,\U0001F3AF 全球直连"
- "RULE-SET,Download,\U0001F3AF 全球直连"
- "GEOIP,PRIVATE,\U0001F3AF 全球直连,no-resolve"
- "GEOIP,CN,\U0001F3AF 全球直连,no-resolve"
- "MATCH,\U0001F41F 漏网之鱼"
rule-providers:
  Lan:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvTGFuL0xhbi5saXN0
    path: "./rule_provider/rule-provider_Lan.yaml"
    interval: 86400
  Direct:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvRGlyZWN0L0RpcmVjdC5saXN0
    path: "./rule_provider/rule-provider_Direct.yaml"
    interval: 86400
  GoogleFCM:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvR29vZ2xlRkNNL0dvb2dsZUZDTS5saXN0
    path: "./rule_provider/rule-provider_GoogleFCM.yaml"
    interval: 86400
  GoogleCN:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL0FDTDRTU1IvQUNMNFNTUi9tYXN0ZXIvQ2xhc2gvR29vZ2xlQ04ubGlzdA
    path: "./rule_provider/rule-provider_GoogleCN.yaml"
    interval: 86400
  GoogleCNProxyIP:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL0FDTDRTU1IvQUNMNFNTUi9tYXN0ZXIvQ2xhc2gvUnVsZXNldC9Hb29nbGVDTlByb3h5SVAubGlzdA
    path: "./rule_provider/rule-provider_GoogleCNProxyIP.yaml"
    interval: 86400
  SteamCN:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvU3RlYW1DTi9TdGVhbUNOLmxpc3Q
    path: "./rule_provider/rule-provider_SteamCN.yaml"
    interval: 86400
  Steam_CDN:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL0FldGhlcnNhaWxvci9DdXN0b21fT3BlbkNsYXNoX1J1bGVzL21haW4vcnVsZS9TdGVhbV9DRE4ubGlzdA
    path: "./rule_provider/rule-provider_Steam_CDN.yaml"
    interval: 86400
  PrivateTracker:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvUHJpdmF0ZVRyYWNrZXIvUHJpdmF0ZVRyYWNrZXIubGlzdA
    path: "./rule_provider/rule-provider_PrivateTracker.yaml"
    interval: 86400
  Telegram:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvVGVsZWdyYW0vVGVsZWdyYW0ubGlzdA
    path: "./rule_provider/rule-provider_Telegram.yaml"
    interval: 86400
  OpenAI:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvT3BlbkFJL09wZW5BSS5saXN0
    path: "./rule_provider/rule-provider_OpenAI.yaml"
    interval: 86400
  Copilot:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvQ29waWxvdC9Db3BpbG90Lmxpc3Q
    path: "./rule_provider/rule-provider_Copilot.yaml"
    interval: 86400
  GitHub:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvR2l0SHViL0dpdEh1Yi5saXN0
    path: "./rule_provider/rule-provider_GitHub.yaml"
    interval: 86400
  Apple:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvQXBwbGUvQXBwbGUubGlzdA
    path: "./rule_provider/rule-provider_Apple.yaml"
    interval: 86400
  Microsoft:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvTWljcm9zb2Z0L01pY3Jvc29mdC5saXN0
    path: "./rule_provider/rule-provider_Microsoft.yaml"
    interval: 86400
  YouTube:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvWW91VHViZS9Zb3VUdWJlLmxpc3Q
    path: "./rule_provider/rule-provider_YouTube.yaml"
    interval: 86400
  Google:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvR29vZ2xlL0dvb2dsZS5saXN0
    path: "./rule_provider/rule-provider_Google.yaml"
    interval: 86400
  XiaoMi:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvWGlhb01pL1hpYW9NaS5saXN0
    path: "./rule_provider/rule-provider_XiaoMi.yaml"
    interval: 86400
  TikTok:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvVGlrVG9rL1Rpa1Rvay5saXN0
    path: "./rule_provider/rule-provider_TikTok.yaml"
    interval: 86400
  Netflix:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvTmV0ZmxpeC9OZXRmbGl4Lmxpc3Q
    path: "./rule_provider/rule-provider_Netflix.yaml"
    interval: 86400
  Disney:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvRGlzbmV5L0Rpc25leS5saXN0
    path: "./rule_provider/rule-provider_Disney.yaml"
    interval: 86400
  Spotify:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvU3BvdGlmeS9TcG90aWZ5Lmxpc3Q
    path: "./rule_provider/rule-provider_Spotify.yaml"
    interval: 86400
  Bahamut:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvQmFoYW11dC9CYWhhbXV0Lmxpc3Q
    path: "./rule_provider/rule-provider_Bahamut.yaml"
    interval: 86400
  NetEaseMusic:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvTmV0RWFzZU11c2ljL05ldEVhc2VNdXNpYy5saXN0
    path: "./rule_provider/rule-provider_NetEaseMusic.yaml"
    interval: 86400
  ChinaMedia:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvQ2hpbmFNZWRpYS9DaGluYU1lZGlhLmxpc3Q
    path: "./rule_provider/rule-provider_ChinaMedia.yaml"
    interval: 86400
  GlobalMedia:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvR2xvYmFsTWVkaWEvR2xvYmFsTWVkaWEubGlzdA
    path: "./rule_provider/rule-provider_GlobalMedia.yaml"
    interval: 86400
  Epic:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvRXBpYy9FcGljLmxpc3Q
    path: "./rule_provider/rule-provider_Epic.yaml"
    interval: 86400
  EA:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvRUEvRUEubGlzdA
    path: "./rule_provider/rule-provider_EA.yaml"
    interval: 86400
  Blizzard:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvQmxpenphcmQvQmxpenphcmQubGlzdA
    path: "./rule_provider/rule-provider_Blizzard.yaml"
    interval: 86400
  UBI:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvVUJJL1VCSS5saXN0
    path: "./rule_provider/rule-provider_UBI.yaml"
    interval: 86400
  Sony:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvU29ueS9Tb255Lmxpc3Q
    path: "./rule_provider/rule-provider_Sony.yaml"
    interval: 86400
  Nintendo:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvTmludGVuZG8vTmludGVuZG8ubGlzdA
    path: "./rule_provider/rule-provider_Nintendo.yaml"
    interval: 86400
  Steam:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvU3RlYW0vU3RlYW0ubGlzdA
    path: "./rule_provider/rule-provider_Steam.yaml"
    interval: 86400
  ProxyGFWlist:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL0FDTDRTU1IvQUNMNFNTUi9tYXN0ZXIvQ2xhc2gvUHJveHlHRldsaXN0Lmxpc3Q
    path: "./rule_provider/rule-provider_ProxyGFWlist.yaml"
    interval: 86400
  China:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvQ2hpbmEvQ2hpbmEubGlzdA
    path: "./rule_provider/rule-provider_China.yaml"
    interval: 86400
  ChinaDomain:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL0FDTDRTU1IvQUNMNFNTUi9tYXN0ZXIvQ2xhc2gvQ2hpbmFEb21haW4ubGlzdA
    path: "./rule_provider/rule-provider_ChinaDomain.yaml"
    interval: 86400
  ChinaCompanyIp:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL0FDTDRTU1IvQUNMNFNTUi9tYXN0ZXIvQ2xhc2gvQ2hpbmFDb21wYW55SXAubGlzdA
    path: "./rule_provider/rule-provider_ChinaCompanyIp.yaml"
    interval: 86400
  ChinaIp:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL0FDTDRTU1IvQUNMNFNTUi9tYXN0ZXIvQ2xhc2gvQ2hpbmFJcC5saXN0
    path: "./rule_provider/rule-provider_ChinaIp.yaml"
    interval: 86400
  Download:
    type: http
    behavior: classical
    url: https://api.dler.io/getruleset?type=6&url=aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2JsYWNrbWF0cml4Ny9pb3NfcnVsZV9zY3JpcHQvbWFzdGVyL3J1bGUvQ2xhc2gvRG93bmxvYWQvRG93bmxvYWQubGlzdA
    path: "./rule_provider/rule-provider_Download.yaml"
    interval: 86400
redir-port: 7892
tproxy-port: 7895
mixed-port: 7893
secret: sv4(y@B73H
bind-address: "*"
external-ui: "/usr/share/openclash/ui"
ipv6: true
geodata-mode: true
geodata-loader: standard
tcp-concurrent: true
unified-delay: true
dns:
  enable: true
  ipv6: true
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  listen: 0.0.0.0:7874
  nameserver:
  - dhcp://"wan"
  - 192.168.1.1
  - "[fe80::1]:53"
  fake-ip-filter-mode: blacklist
  fake-ip-filter:
  - "*.lan"
  - "*.localdomain"
  - "*.example"
  - "*.invalid"
  - "*.localhost"
  - "*.test"
  - "*.local"
  - "*.home.arpa"
  - time.*.com
  - time.*.gov
  - time.*.edu.cn
  - time.*.apple.com
  - time-ios.apple.com
  - time1.*.com
  - time2.*.com
  - time3.*.com
  - time4.*.com
  - time5.*.com
  - time6.*.com
  - time7.*.com
  - ntp.*.com
  - ntp1.*.com
  - ntp2.*.com
  - ntp3.*.com
  - ntp4.*.com
  - ntp5.*.com
  - ntp6.*.com
  - ntp7.*.com
  - "*.time.edu.cn"
  - "*.ntp.org.cn"
  - "+.pool.ntp.org"
  - time1.cloud.tencent.com
  - music.163.com
  - "*.music.163.com"
  - "*.126.net"
  - musicapi.taihe.com
  - music.taihe.com
  - songsearch.kugou.com
  - trackercdn.kugou.com
  - "*.kuwo.cn"
  - api-jooxtt.sanook.com
  - api.joox.com
  - joox.com
  - y.qq.com
  - "*.y.qq.com"
  - streamoc.music.tc.qq.com
  - mobileoc.music.tc.qq.com
  - isure.stream.qqmusic.qq.com
  - dl.stream.qqmusic.qq.com
  - aqqmusic.tc.qq.com
  - amobile.music.tc.qq.com
  - "*.xiami.com"
  - "*.music.migu.cn"
  - music.migu.cn
  - "+.msftconnecttest.com"
  - "+.msftncsi.com"
  - localhost.ptlogin2.qq.com
  - localhost.sec.qq.com
  - "+.qq.com"
  - "+.tencent.com"
  - "+.srv.nintendo.net"
  - "*.n.n.srv.nintendo.net"
  - "+.cdn.nintendo.net"
  - "+.stun.playstation.net"
  - xbox.*.*.microsoft.com
  - "*.*.xboxlive.com"
  - xbox.*.microsoft.com
  - xnotify.xboxlive.com
  - "+.battlenet.com.cn"
  - "+.wotgame.cn"
  - "+.wggames.cn"
  - "+.wowsgame.cn"
  - "+.wargaming.net"
  - proxy.golang.org
  - stun.*.*
  - stun.*.*.*
  - "+.stun.*.*"
  - "+.stun.*.*.*"
  - "+.stun.*.*.*.*"
  - "+.stun.*.*.*.*.*"
  - heartbeat.belkin.com
  - "*.linksys.com"
  - "*.linksyssmartwifi.com"
  - "*.router.asus.com"
  - mesu.apple.com
  - swscan.apple.com
  - swquery.apple.com
  - swdownload.apple.com
  - swcdn.apple.com
  - swdist.apple.com
  - lens.l.google.com
  - stun.l.google.com
  - na.b.g-tun.com
  - "+.nflxvideo.net"
  - "*.square-enix.com"
  - "*.finalfantasyxiv.com"
  - "*.ffxiv.com"
  - "*.ff14.sdo.com"
  - ff.dorado.sdo.com
  - "*.mcdn.bilivideo.cn"
  - "+.media.dssott.com"
  - shark007.net
  - Mijia Cloud
  - "+.cmbchina.com"
  - "+.cmbimg.com"
  - local.adguard.org
  - "+.sandai.net"
  - "+.n0808.com"
  - "+.uu.163.com"
  - ps.res.netease.com
  - "+.pub.3gppnetwork.org"
  - geosite:category-games
  - "+.services.googleapis.cn"
  - "+.googleapis.cn"
  - "+.xn--ngstr-lra8j.com"
  - geosite:cn
sniffer:
  enable: true
  parse-pure-ip: true
profile:
  store-selected: true
  store-fake-ip: true
authentication:
- Clash:tHByuVRc
experimental:
  sniff-tls-sni: false

这是我的配置文件，只删除了节点信息。应该和配置没什么关系，之前版本也是这样配置的@vernesong

@Fddh2012
Copy link

Fddh2012 commented Oct 3, 2024 •
edited
Loading

鬼鬼，什么都没动，多尝试几下又正常了。但是我把clash_meta权限改成0777了，任性！！之前0755也不行。
另外一台设备：
image
image

@Fddh2012
Copy link

Fddh2012 commented Oct 3, 2024 •
edited
Loading

我判断可能是在更新内核或者是插件和内核一起更新的时候出问题导致内核权限设置出错了。

更新：ipv4的fake-ip(tun)也会炸。

@digiw
Copy link

digiw commented Oct 3, 2024

无法复现，看下运行配置文件

可以复现

Bug_1: 更新 luci-app-openclash_0.46.035-beta_all.ipk 因旧配置残留会导致启动失败

Bug_2: 更新 Meta 内核 luci-app-openclash_0.46.035-beta_all.ipk 会出现 error: reject loopback (国内直连和国际代理均失效

手动 opkg 重装后 op 还原默认配置在导入可以解决 Bug_1.

'chown root:root /etc/openclash/core/clash_meta' 提权 root 后可以解决 Bug_2

以上. 刚刚折腾三小时. 升级 0.46.036-beta 因 Bug_2 重装 0.46.035-beta 再看到此帖 升级内核后提权 root

0.36beta我也遇到问题了，日志提示"守护程序：正在检查 TUN 接口状态“然后就崩了，冲刷固件回到0.33一切正常。不知道你的0.36是否一样情况？

@digiw
Copy link

digiw commented Oct 3, 2024

无法复现，看下运行配置文件

可以复现
Bug_1: 更新 luci-app-openclash_0.46.035-beta_all.ipk 因旧配置残留会导致启动失败
Bug_2: 更新 Meta 内核 luci-app-openclash_0.46.035-beta_all.ipk 会出现 error: reject loopback (国内直连和国际代理均失效
手动 opkg 重装后 op 还原默认配置在导入可以解决 Bug_1.
'chown root:root /etc/openclash/core/clash_meta' 提权 root 后可以解决 Bug_2
以上. 刚刚折腾三小时. 升级 0.46.036-beta 因 Bug_2 重装 0.46.035-beta 再看到此帖 升级内核后提权 root

0.36beta我也遇到问题了，日志提示"守护程序：正在检查 TUN 接口状态“然后就崩了，冲刷固件回到0.33一切正常。不知道你的0.36是否一样情况？

但奇怪的是，如果我在固件内置0.33版本冲刷恢复正常后，此时meta版本是 g5812a7b，如果这个时候直接升级0.36beta，是成功且正常使用的。
但如果继续去升级一下meta内核，就又发生日志提示"守护程序：正在检查 TUN 接口状态“然后就崩了

@JIZHENQIANG
Copy link
Author

刚刚重新测试了，使用重装的全新Immortalwrt，pppoe拨号模式
总结一下问题:
1.初始安装结果：meta内核文件拥有者1001组127，插件日志没问题，内核日志报警告，内核应该是没启动

[CacheFile] can't open cache file: open /etc/openclash/cache.db: permission denied
2024-10-03 23:37:51 level=warning msg="Failed to start Redir UDP Listener: operation not permitted"
2024-10-03 23:37:51 level=error msg="Start TProxy server error: operation not permitted"
2024-10-03 23:37:51 level=error msg="Start Redir server error: operation not permitted"
2024-10-03 23:37:52 level=error msg="initial rule provider ChinaDomain error: open /etc/openclash/rule_provider/rule-provider_ChinaDomain.yaml: permission denied"

2.修改meta内核文件拥有者和分组改为root结果：插件日志没问题，内核日志没问题，正常代理
3.重启Immortalwrt结果：插件日志报错，重启无法获取上游dns，内核日志报错，出现直连域名无法访问，代理域名没问题

2024-10-03 23:56:51 错误：配置文件DNS选项下的 Nameserver 必须设置服务器，已停止设置自定义DNS服务器！
2024-10-03 23:56:51 提示：检测到DNS选项下的 Nameserver 未设置服务器，开始补全...
#openclash自动补全的dns
  nameserver:
  - 114.114.114.114
  - 119.29.29.29
  - 8.8.8.8
  - 1.1.1.1
  fallback:
  - https://dns.cloudflare.com/dns-query
  - https://dns.google/dns-query
#内核日志没有 error: reject loopback问题变成couldn't find ip无法解析了，不过感觉原因可能是一样的，因为结果都是直连域名无法访问，代理域名没问题
110 [warning]	[TCP] dial 🐟 漏网之鱼 (match Match/) 192.168.31.172:59833 --> api.ipify.org:443 error: dns resolve failed: couldn't find ip
109	[warning]	[TCP] dial 🐟 漏网之鱼 (match Match/) 192.168.31.172:59818 --> api.ipify.org:443 error: dns resolve failed: couldn't find ip
108	[warning]	[TCP] dial 🐟 漏网之鱼 (match Match/) 100.64.165.97:49318 --> api.dler.io:443 error: dns resolve failed: couldn't find ip

4.取消勾选追加上游dns指定nameserver重启openclash结果：可以解决问题3，插件日志没问题，内核日志有警告，似乎没影响可以正常代理

2024-10-04 00:05:55 level=warning msg="[CacheFile] can't open cache file: timeout"

@vernesong

@JIZHENQIANG
Copy link
Author

还有一个问题为什么每次启动内核会初始化两次呢？

2024-10-04 01:11:45 level=info msg="Initial configuration complete, total time: 33202ms"
2024-10-04 01:11:45 level=info msg="Finished initial GeoSite rule cn => dns.fake-ip-filter, records: 90165"
2024-10-04 01:11:45 level=info msg="Finished initial GeoSite rule category-games => dns.fake-ip-filter, records: 696"
2024-10-04 01:11:41 level=info msg="Load GeoSite rule: category-games"
2024-10-04 01:11:38 level=info msg="Load GeoSite rule: cn"
2024-10-04 01:11:38 level=info msg="Finished initial GeoIP rule cn => 🎯 全球直连, records: 18417"
2024-10-04 01:11:38 level=info msg="Finished initial GeoIP rule private => 🎯 全球直连, records: 18"
2024-10-04 01:11:22 level=info msg="Load GeoIP rule: private"
2024-10-04 01:11:12 level=info msg="Load GeoIP rule: cn"
2024-10-04 01:11:12 level=info msg="Geosite Matcher implementation: succinct"
2024-10-04 01:11:12 level=info msg="Geodata Loader mode: standard"
2024-10-04 01:11:12 level=info msg="Start initial configuration in progress"
2024-10-04 01:11:11 level=info msg="Initial configuration complete, total time: 86640ms"
2024-10-04 01:11:11 level=info msg="Finished initial GeoSite rule cn => dns.fake-ip-filter, records: 90165"
2024-10-04 01:11:11 level=info msg="Finished initial GeoSite rule category-games => dns.fake-ip-filter, records: 696"
2024-10-04 01:11:07 level=info msg="Load GeoSite rule: category-games"
2024-10-04 01:10:14 level=info msg="Load GeoSite rule: cn"
2024-10-04 01:10:14 level=info msg="Finished initial GeoIP rule cn => 🎯 全球直连, records: 18417"
2024-10-04 01:10:14 level=info msg="Finished initial GeoIP rule private => 🎯 全球直连, records: 18"
2024-10-04 01:09:58 level=info msg="Load GeoIP rule: private"
2024-10-04 01:09:44 level=info msg="Load GeoIP rule: cn"
2024-10-04 01:09:44 level=info msg="Geosite Matcher implementation: succinct"
2024-10-04 01:09:44 level=info msg="Geodata Loader mode: standard"
2024-10-04 01:09:44 level=info msg="Start initial configuration in progress"

@gemnioo
Copy link

gemnioo commented Oct 3, 2024 •
edited
Loading

v0.46.038-beta <可更新> 连夜更新 大家来试试

update 0.38 几台机器直接面板点击更新就能够 正常使用 感谢@vernesong

@digiw
Copy link

digiw commented Oct 4, 2024

v0.46.038-beta <可更新> 连夜更新 大家来试试

update 0.38 几台机器直接面板点击更新就能够 正常使用 感谢@vernesong

我也恢复正常使用了，感谢作者！@vernesong 但日志内有反复重置openwrt防火墙的记录
image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Something isn't working
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
7 participants
@digiw @vicdorke @gemnioo @vernesong @JIZHENQIANG @Fddh2012 @akaet