验证返回的IP和实际出口IP不一致

[WYithal]

实际用起来好像又没什么异常

下面是debug.sh的日志

=====PaoPaoDNS docker debug=====
[info] images build time : 2023-10-05 16:09:23 UTC
[info] ========== env info ==========
====ENV TEST====
MEM:800m 1600m 1000000 1800mb
prefPC:100
CORES:-4-
POWCORES:-4-
ulimit :-1048576-
FDLIM :-4096-
TZ:-Asia/Shanghai-
UPDATE:-monthly-
DNS_SERVERNAME:- -
SERVER_IP:-192.168.50.XX-
ETHIP:-192.168.50.XX-
DNSPORT:-53-
SOCKS5:-IP:PORT-
CNAUTO:-yes-
IPV6:-no-
CNFALL:-yes-
CUSTOM_FORWARD:-IP:PORT-
AUTO_FORWARD:-no-
AUTO_FORWARD_CHECK:-yes-
USE_MARK_DATA:-yes-
RULES_TTL:-0-
CN_TRACKER:-yes-
USE_HOSTS:-no-
HTTP_FILE:-no-
SAFEMODE:--
QUERY_TIME:-2000ms-
ADDINFO:-yes-
PLATFORM:-Linux UGREEN 5.10.120 #0 SMP Wed Sep 27 13:45:48 2023 x86_64 Linux-
====ENV TEST====
[info] ========== process info ==========
PID   USER     TIME  COMMAND
    1 root      0:00 {init.sh} /bin/sh /usr/sbin/init.sh
   21 root      0:00 crond
  129 root      0:00 dnscrypt-proxy -config /data/dnscrypt-resolvers/dnscrypt.toml
  151 root      0:00 {watch_list.sh} /bin/sh /usr/sbin/watch_list.sh
  169 root      0:00 unbound -c /tmp/unbound_forward.conf -p
  178 root      0:01 unbound -c /tmp/unbound_raw.conf -p
  179 root      0:00 redis-server unixsocket:/tmp/redis.sock
  505 root      0:00 mosdns start -d /tmp -c mosdns.yaml
  543 root      0:00 inotifywait -e modify,delete /etc/unbound/named.cache /data/Country-only-c
  545 root      0:00 /bin/sh
  551 root      0:00 {debug.sh} /bin/sh /usr/sbin/debug.sh
  556 root      0:00 ps -ef
[info] ========== cn list info ==========
domain:whoami.ds.akahelp.net
domain:whoami.03k.org
[info] ========== reids info ==========
used_memory_human:1.20M
used_memory_rss_human:7.15M
used_memory_peak_human:1.21M
total_system_memory_human:15.51G
used_memory_lua_human:31.00K
used_memory_vm_total_human:63.00K
used_memory_scripts_human:181B
maxmemory_human:1.76G
(integer) 924
[test] IP test, you will see that all the following IPs are your public network exit IP !
[test] ========== IP TEST START ==========
CN IP URL:
36.27.XX.XX
36.27.XX.XX
------------------
Non-CN IP URL:
199.180.XX.XX
199.180.XX.XX
199.180.XX.XX
199.180.XX.XX
------------------
IP INFO:
199.180.XX.XX
US,Los Angeles,California
ASN21887/IT7 Networks Inc
HTTP/1.1 
curl/8.4.0
America/Los_Angeles Time: 10/19/2023, 1:45:05 AM
------------------
----mosdns whoami aka dig:
"ns" "122.228.2.XX"
------------------
----local-unbound whoami aka dig:
"ns" "122.228.2.XX"
------------------
----mosdns whoami 03k dig:
121.196.194.XX
------------------
----local-unbound whoami 03k dig:
121.196.194.XX
[test] ========== IP TEST END ==========

[test] The DNS hijacking test, you will see timed out message !
[test] ========== DNS HIJACK START ==========
Server:         9.8.7.6
Address:        9.8.7.6#53

www.qq.com      canonical name = ins-r23tsuuf.ias.tencent-cloud.net.
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 101.91.42.232
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 101.91.22.57

[test] ========== DNS HIJACK END ==========
[test] CN domain test, you will see that the DNS resolution result is CN IP !
[test] ========== CN DOMAIN TEST START ==========
----mosdns CN dig:
www.taobao.com.danuoyi.tbcache.com.
61.174.43.210
61.174.43.211
------------------
----local-unbound CN dig:
www.taobao.com.danuoyi.tbcache.com.
61.174.43.211
61.174.43.210
[test] ========== CN DOMAIN TEST END ==========
[test] Non-CN domain test, you will see that the DNS resolution result is correct IP !
[test] ========== Non-CN DOMAIN TEST START ==========
----mosdns Non-CN dig:
youtube-ui.l.google.com.
172.217.23.206
216.58.208.110
------------------
----dnscrypt-unbound NOCN dig:
youtube-ui.l.google.com.
142.250.189.14
142.250.217.142
------------------
----dnscrypt Non-CN dig:
youtube-ui.l.google.com.
142.250.68.14
142.250.72.142
------------------
----dnscrypt-socks5 Non-CN dig:
;; communications error to 127.0.0.1#5303: connection refused
;; communications error to 127.0.0.1#5303: connection refused
;; communications error to 127.0.0.1#5303: connection refused
[test] ========== Non-CN DOMAIN TEST END ==========
[test] IPv6 Dual CN test: you will see that IPv6 is OK !
[test] ========== IPV6 CN DOMAIN TEST START ==========
[test] ========== IPV6 CN DOMAIN TEST END ==========
[test] IPv6 Dual Non-CN test: you will see that IPv6 is empty !
[test] ========== IPV6 Non-CN DOMAIN TEST START ==========
[test] ========== IPV6 Non-CN DOMAIN TEST END ==========
[test] IPv6 only Non-CN test: you will see that IPv6 is ok !
[test] ========== IPV6 ONLY Non-CN DOMAIN TEST START ==========
[test] ========== IPV6 ONLY Non-CN DOMAIN TEST END ==========

[info] ALL TEST FINISH.

[kkkgo]

[test] The DNS hijacking test, you will see timed out message !
[test] ========== DNS HIJACK START ==========
Server:         9.8.7.6
Address:        9.8.7.6#53

www.qq.com      canonical name = ins-r23tsuuf.ias.tencent-cloud.net.
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 101.91.42.232
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 101.91.22.57

[test] ========== DNS HIJACK END ==========

9.8.7.6是一个不存在的DNS，这段测试表明你的DNS被劫持了。
参考#2 (comment)

[WYithal]

谢谢。确实，看了下Merlinclash全部转发到Adguard Home去了