Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Can't connect to Internet #14

Closed
la0wei opened this issue Oct 7, 2014 · 6 comments
Closed

Can't connect to Internet #14

la0wei opened this issue Oct 7, 2014 · 6 comments

Comments

@la0wei
Copy link

la0wei commented Oct 7, 2014

网络环境为江苏移动，拨号获得地址为100.98..
据http://sourceforge.net/p/openwrt-dist/wiki/Plan6/部署，其原文如下
方案六:
下载 ChinaDNS-C + ShadowVPN 并安装
编辑 /etc/init.d/chinadns
注释或者删除其中的两条 iptables 命令
编辑 /etc/dnsmasq.conf
添加 no-resolv 和 server=127.0.0.1#5353 并删除其他 server=
使用 /etc/init.d/shadowvpn start 命令启动 ShadowVPN
使用 /etc/init.d/chinadns start 命令启动 ChinaDNS-C
使用 /etc/init.d/dnsmasq restart 命令重启 dnsmasq

我根据操作删除了两条iptables命令
在/etc/dnsmasq.conf中添加了
server=127.0.0.1#5353
no-resolv
因为无server=项，未操作

shadowvpn 另行配置了，暂不提

然后启动了Chinadns
启动后，依然有dns污染现象，火狐页面会reset。或者如图所示的标签情况，内页为空
21
再启动shadowvpn，此时几乎不能上网。PC ping不通外网。

按照wiki https://github.com/clowwindy/ShadowVPN/wiki/FAQ所示排查如下
1.从路由能ping通vps
2.从路由能ping通10.7.0.1
3.使用openwrtluci界面网络诊断
traceroute to 8.8.8.8 (8.8.8.8), 30 hops max, 38 byte packets
1 10.7.0.1 199.357 ms
2 198.35.46.8 199.884 ms
3 65.19.129.153 201.588 ms
4 184.105.222.86 216.755 ms
5 72.14.211.86 210.680 ms
6 64.233.174.41 217.247 ms
7 72.14.238.0 240.765 ms
8 72.14.239.159 239.900 ms
9 216.239.48.167 240.263 ms
10 *
11 8.8.8.8 240.285 ms

4.从路由ping 8.8.8.8，vps收到
root@vps:~# tcpdump -i tun0
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on tun0, link-type RAW (Raw IP), capture size 65535 bytes
05:51:43.949310 IP 10.7.0.2 > google-public-dns-a.google.com: ICMP echo request, id 41249, seq 0, length 64
05:51:43.989251 IP google-public-dns-a.google.com > 10.7.0.2: ICMP echo reply, id 41249, seq 0, length 64

6.VPS netstat -nr 和ifconfig 分别如下
root@vps:~# netstat -nr
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
10.7.0.0 0.0.0.0 255.255.255.0 U 0 0 0 tun0
0.0.0.0 0.0.0.0 0.0.0.0 U 0 0 0 venet0

此处因为之前发现网卡为venet0，非eth0，我已经在server_*.sh中修改过来了

root@vps:~# ifconfig
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:10.7.0.1 P-t-P:10.7.0.1 Mask:255.255.255.0
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1440 Metric:1
RX packets:817 errors:0 dropped:0 overruns:0 frame:0
TX packets:784 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:500
RX bytes:64866 (64.8 KB) TX bytes:65676 (65.6 KB)

venet0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:127.0.0.2 P-t-P:127.0.0.2 Bcast:0.0.0.0 Mask:255.255.255.255
UP BROADCAST POINTOPOINT RUNNING NOARP MTU:1500 Metric:1
RX packets:42935 errors:0 dropped:0 overruns:0 frame:0
TX packets:10583 errors:0 dropped:184 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:58296024 (58.2 MB) TX bytes:1041926 (1.0 MB)

venet0:0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:服务器IP P-t-P:服务器IP Bcast:服务器IP Mask:255.255.255.255
UP BROADCAST POINTOPOINT RUNNING NOARP MTU:1500 Metric:1

7.此处的lan是指？192.168.1.1对应的端口？另外client_*.sh没有看到eth0相关的内容？
路由器netstat -nr 和ifconfig分别如下
root@OpenWrt:~# netstat -nr
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
0.0.0.0 10.7.0.1 0.0.0.0 UG 0 0 0 tun0
1.0.1.0 0.0.0.0 255.255.255.0 U 0 0 0 pppoe-wan

下面均为chnroute路由表，不粘贴了

root@OpenWrt:~# ifconfig -a
br-lan Link encap:Ethernet HWaddr 00:86:33:50:11:86
inet addr:192.168.1.1 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::286:33ff:fe50:1186/64 Scope:Link
inet6 addr: fd27:c7cd:3d5::1/60 Scope:Global
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:123243 errors:0 dropped:0 overruns:0 frame:0
TX packets:133248 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:13392571 (12.7 MiB) TX bytes:59433448 (56.6 MiB)

eth0 Link encap:Ethernet HWaddr 00:86:33:50:11:86
inet6 addr: fe80::286:33ff:fe50:1186/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:94455 errors:0 dropped:3 overruns:0 frame:0
TX packets:92179 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:35027898 (33.4 MiB) TX bytes:15937576 (15.1 MiB)
Interrupt:5

eth0.1 Link encap:Ethernet HWaddr 00:86:33:50:11:86
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:38461 errors:0 dropped:0 overruns:0 frame:0
TX packets:35533 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:3042165 (2.9 MiB) TX bytes:8613571 (8.2 MiB)

eth0.2 Link encap:Ethernet HWaddr 00:86:33:50:11:86
inet6 addr: fe80::286:33ff:fe50:1186/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:55869 errors:0 dropped:1 overruns:0 frame:0
TX packets:56641 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:30274140 (28.8 MiB) TX bytes:7322514 (6.9 MiB)

gre0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-30-40-00-00-00-00-00-00-00-00
NOARP MTU:1476 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

gretap0 Link encap:Ethernet HWaddr 00:00:00:00:00:00
BROADCAST MULTICAST MTU:1476 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

ifb0 Link encap:Ethernet HWaddr 1E:C1:CE:65:94:0F
BROADCAST NOARP MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:32
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

ifb1 Link encap:Ethernet HWaddr 92:B7:BA:67:FB:90
BROADCAST NOARP MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:32
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

ip6gre0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
NOARP MTU:1448 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

ip6tnl0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
NOARP MTU:1452 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:24000 errors:0 dropped:0 overruns:0 frame:0
TX packets:24000 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:1863986 (1.7 MiB) TX bytes:1863986 (1.7 MiB)

pppoe-wan Link encap:Point-to-Point Protocol
inet addr:100.98.175.208 P-t-P:112.0.229.1 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1492 Metric:1
RX packets:45685 errors:0 dropped:0 overruns:0 frame:0
TX packets:47564 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:3
RX bytes:29279711 (27.9 MiB) TX bytes:6003453 (5.7 MiB)

sit0 Link encap:IPv6-in-IPv4
NOARP MTU:1480 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:10.7.0.2 P-t-P:10.7.0.2 Mask:255.255.255.0
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1440 Metric:1
RX packets:65 errors:0 dropped:0 overruns:0 frame:0
TX packets:99 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:500
RX bytes:5298 (5.1 KiB) TX bytes:4554 (4.4 KiB)

wlan0 Link encap:Ethernet HWaddr 00:86:33:50:11:86
inet6 addr: fe80::286:33ff:fe50:1186/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:85381 errors:0 dropped:0 overruns:0 frame:0
TX packets:105918 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:11582948 (11.0 MiB) TX bytes:54415036 (51.8 MiB)

请教个问题，如何将p2p流量禁止从代理走？否则vps没两天就封了。

另外请教个问题，现在有个比较奇葩的情况。
使用有线无法上网，无线开始的时候不可以，等一段时间才行，
后来我发现，有线原本接入的网络是路由器默认的“网络4”，但是后来变成了和无线一样的网络，比如123。这有可能是什么原因导致的？

不会使用mark编辑，比较难看。
谢谢。

还有什么需要的信息可以告诉我贴出来。
@clowwindy
Copy link
Owner

应该是 局域网到 tun 的 NAT 被防火墙阻止了。
因为你的路由器配置和我的差别比较大，网卡都不一样，默认的脚本可能不能正常工作，建议直接用路由器自己的配置工具来配置，这样防火墙会自动配置好，也不会有奇怪的问题：
https://github.com/clowwindy/ShadowVPN/wiki/Configure-via-LuCI-on-OpenWRT
概括来说就是把默认路由改为走 tun，到 VPS 的路由直接走 wan，再添加 lan=>tun, tun=>wan 的防火墙转发和放行规则。

@la0wei
Copy link
Author

la0wei commented Oct 7, 2014

@clowwindy
1.能否贴出你的路由配置，我参照看看。看起来我的服务器已经正常工作了是吗？那为何只有ping 8.8.8.8能通，而ping别的地址，比如amazon.com服务器端就接收不到信息？
2.chinadns之前没有配置代理使用的相当不错，后来墙升级了吗？不能比较高效的屏蔽虚假dns数据包，又或者是运营商的问题？
3.pt的流量能不走代理吗？
4.我在issue中贴出的图片是什么样的网络情况？看起来不像是reset。

@clowwindy
Copy link
Owner

我说的路由配置是 OpenWRT 装好后默认设置的一堆东西，和版本、固件、网络环境都有关系，自带的示例脚本在没有测试过的环境下可能无法工作
IP 能 ping 通 域名 ping 不通有可能是 DNS 的问题
如果你找不到问题的所在，建议按照我发的链接用 LuCI 来配置，这样不管网卡叫什么都可以正确设置路由和防火墙

@la0wei
Copy link
Author

la0wei commented Oct 7, 2014

谢谢，我按https://github.com/clowwindy/ShadowVPN/wiki/Configure-via-LuCI-on-OpenWRT
试试看，回头贴出结果。

@la0wei
Copy link
Author

la0wei commented Oct 7, 2014

太帅了，按照操作果然成功了！谢谢！如何编辑wiki，不会写代码，写手册还是会的，想把中文的内容写入wiki

@clowwindy
Copy link
Owner

可以点右上角的 New Page 创建新的 wiki 页面
https://github.com/clowwindy/ShadowVPN/wiki

@clowwindy clowwindy mentioned this issue Oct 12, 2014
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@clowwindy @la0wei