Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug]: 一些加入Passwall代理规则的域名在一段时间后会不走代理 #2689

Closed
MiKing233 opened this issue Aug 5, 2023 · 4 comments
Labels
bug Something isn't working

Comments

@MiKing233
Copy link

MiKing233 commented Aug 5, 2023

描述您遇到的bug

舉例測試的域名為steamcommunity.com, 為Steam社群域名, Passwall代理使用GFW規則, 此域名存在於GFW規則内,
image

且我已再次將其添加進代理規則列表
image

但在使用一段時間之後(幾分鐘到一兩天不等), 域名會變爲直連而不代理, 具體表現爲瀏覽器無法訪問steamcommunity.com(被墻), 且ping steamcommunity.com得到的回應從
PING steamcommunity.com (104.100.64.90): 56 data bytes
64 bytes from 104.100.64.90: seq=0 ttl=64 time=0.258 ms
64 bytes from 104.100.64.90: seq=1 ttl=64 time=0.334 ms
(開啓ICMP劫持, 實際是到Gateway延遲)

變爲
PING steamcommunity.com (104.100.64.90): 56 data bytes
64 bytes from 104.100.64.90: seq=0 ttl=51 time=266.664 ms
64 bytes from 104.100.64.90: seq=1 ttl=51 time=248.470 ms
(Passwall不再劫持到此域名的ICMP包, 此域名不再走代理)

复现此Bug的步骤

Passwall會在不確定的時間出現此錯誤, 無法准確的復現
不過當出現此問題時, 可以通過重啓Passwall服務讓其恢復正常, 但在使用一段時間之後(幾分鐘到一兩天不等), 域名會變爲直連而不代理
演示:https://cloud.mknetwork.net/s/RlT6?password=j5yspd

您想要实现的目的

Passwall能夠正確的對流量進行分流

日志信息

Log中沒有報錯信息

2023-08-05 08:32:30: 删除相关防火墙规则完成。
2023-08-05 08:32:31: 清空并关闭相关程序和缓存完成。
2023-08-05 08:32:31: TCP节点:[『USA-LA』BWH US Direct | XRay | Rate 1x],监听端口:1041
2023-08-05 08:32:31: - 域名解析 DNS Over HTTPS...
2023-08-05 08:32:32: UDP节点:[『USA-LA』BWH US Direct | XRay | Rate 1x],监听端口:1051
2023-08-05 08:32:32: 过滤服务配置:准备接管域名解析...
2023-08-05 08:32:32: | - (chinadns-ng) 最高支持4级域名过滤...
2023-08-05 08:32:32: + 过滤服务:ChinaDNS-NG(:15354):国内DNS:119.29.29.29,223.5.5.5,可信DNS:127.0.0.1#15353
2023-08-05 08:32:32: - 以上所列以外及默认:127.0.0.1#15354
2023-08-05 08:32:32: - PassWall必须依赖于Dnsmasq,如果你自行配置了错误的DNS流程,将会导致域名(直连/代理域名)分流失效!!!
2023-08-05 08:32:32: 开始加载防火墙规则...
2023-08-05 08:32:34: 加入负载均衡的节点到ipset[passwall_vpslist]直连完成
2023-08-05 08:32:34: 加入所有节点到ipset[passwall_vpslist]直连完成
2023-08-05 08:32:34: 加载路由器自身 TCP 代理...
2023-08-05 08:32:34: - [0],屏蔽代理UDP 端口:80,443
2023-08-05 08:32:34: 加载路由器自身 UDP 代理...
2023-08-05 08:32:34: - [0]不代理 UDP 端口:53,54
2023-08-05 08:32:34: 访问控制:
2023-08-05 08:32:34: - 备注【OneThingCloud-WS1608】,MAC【00:22:6D:50:D1:41】,不代理TCP
2023-08-05 08:32:34: - 备注【OneThingCloud-WS1608】,MAC【00:22:6D:50:D1:41】,不代理UDP
2023-08-05 08:32:35: - 备注【OneThingCloud-Virtual-IF1】,MAC【C0:E7:3E:10:6A:18】,不代理TCP
2023-08-05 08:32:35: - 备注【OneThingCloud-Virtual-IF1】,MAC【C0:E7:3E:10:6A:18】,不代理UDP
2023-08-05 08:32:35: - 备注【OneThingCloud-Virtual-IF2】,MAC【C0:E7:3E:21:0B:1B】,不代理TCP
2023-08-05 08:32:35: - 备注【OneThingCloud-Virtual-IF2】,MAC【C0:E7:3E:21:0B:1B】,不代理UDP
2023-08-05 08:32:35: - 备注【OneThingCloud-Virtual-IF3】,MAC【C0:E7:3E:2E:87:C5】,不代理TCP
2023-08-05 08:32:35: - 备注【OneThingCloud-Virtual-IF3】,MAC【C0:E7:3E:2E:87:C5】,不代理UDP
2023-08-05 08:32:35: TCP默认代理:使用TCP节点[『USA-LA』BWH US Direct | XRay | Rate 1x] 防火墙列表代理所有端口
2023-08-05 08:32:35: UDP默认代理:使用UDP节点[『USA-LA』BWH US Direct | XRay | Rate 1x] 防火墙列表代理除53,54外的所有端口
2023-08-05 08:32:35: 防火墙规则加载完成!
2023-08-05 08:32:36: 重启 dnsmasq 服务
2023-08-05 08:32:36: 运行完成!

截图

No response

系统相关信息

此問題存在於所有的Passwall版本中, 從4.55-1到4.67-1都測試存在
Chrome 版本 115.0.5790.111(正式版本) (64 位)

其他信息

No response

@MiKing233 MiKing233 added the bug Something isn't working label Aug 5, 2023
@Axe-l
Copy link

Axe-l commented Aug 5, 2023

一样,我都快要放弃他了。比如流媒体分流。 geosite:bing
geosite:paypal
geosite:amazon
geosite:primevideo
geosite:hbo
geosite:cbs
geosite:nbcuniversal
geosite:ted
geosite:telegram。 我这个列表分流b,它走主节点a了,只有恢复pw默认设置重新再设置才可以分流。不过一两天后又不分了。流媒体直接走主节点a流量。因为看流媒体会提示不支持地区,我看分流b的VPS流量也不走。

@zdm9981
Copy link

zdm9981 commented Aug 9, 2023

我这也是这种情况 如果走gfwlist 模式 会导致经常上不了网 规则没有走代理 目前的解决方案是用xray分流 但是passwall用的geosite是v2ray原版的没有gfw模式

@xiaorouji
Copy link
Owner

用geosite和geoip请使用全局模式,或者直接使用passwall2

@maike2019
Copy link

是的,我也遇到同样的问题,【 4.76-1 】 。在规则列表--代理列表--添加 bing.com 。
在规则管理 --Sing-Box/Xray 分流规则中 添加Bing规则, 内容填写
domain:bing.com
here.com
here.net
heremaps.cn
ovi.com.cn
azure
azure-apim.net
azure-dns.com
azure-dns.info
azure-dns.net
azure-dns.org
azure-mobile.net
azure-sphere.com
azure-test.net
azure.cn
azure.com
azure.net
azurecomcdn.net
azurecontainer.io
azurecosmos.net
azurecosmosdb.com
azurecosmosdb.info
azurecosmosdb.net
azuredatabricks.net
azuredevopslaunch.com
azuredigitaltwin.com
azuredigitaltwins.com
azuredigitaltwins.net
azuredns-prd.info
azuredns-prd.org
azureedge-test.net
azureedge.net
azurefd.net
azurefd.us
azureiotcentral.com
azureiotsolutions.com
azureiotsuite.com
azureplanetscale.info
azureplanetscale.net
azureserviceprofiler.com
azuresmartspaces.net
azurestackvalidation.com
azurewebsites.net
chinacloudapi.cn
chinacloudapp.cn
chinacloudsites.cn
cosmosdb.info
cosmosdb.net
devopsms.com
gotcosmos.com
microsofteca.com
microsoftiotcentral.com
serverlesslibrary.net
signalr.net
tryfunctions.com
windowsazure.cn
windowsazure.com
azure.microsoft.com
azuremarketplace.microsoft.com
bbing.com
bibg.com
biing.com
binb.com
binf.com
bing
bing.com
bing.com.cn
bing.net
bing123.com
bing135.com
bing4.com
bingads.com
bingagencyawards.com
bingapis.com
bingapistatistics.com
binginternal.com
bingit.net
bingiton.com
bingj.com
bingpix.com
bingpk.com
bings.com
bingsandbox.com
bingtoolbar.com
bingtranslator.com
bingvisualsearch.com
bingworld.com
biying.cn
biying.com
biying.com.cn
bluehatnights.com
dictate.ms
discoverbing.com
explorebing.com
flipwithsurface.com
mapblast.com
mappoint.com
masalladeloslimites.com
microsoft-give.com
microsoftcloudsummit.com
microsoftdiplomados.com
microsoftlatamholiday.com
microsoftmxfilantropia.com
microsoftpartnersolutions.com
msnmaps.com
msunlimitedcloudsummit.com
myhomemsn.com
office365love.com
office365tw.com
osdinfra.net
renovacionoffice.com
sprinklesapp.com
working-bing-int.com
bj1.api.bing.com
emoi-cncdn.bing.com
cn.bing.com
cn.bing.net
ditu.live.com
a-msedge.net
c-msedge.net
e-msedge.net
edgesuite.net
evoke-windowsservices-tas.msedge
microsoftedge.com
microsoftedgeinsider.com
msedge.net
s-msedge.net
femalefounderscomp.com
m12.vc
adaptivecards.io
api-extractor.com
apisof.net
appcenter.ms
blazor.net
botframework.com
codethemicrobit.com
devopsassessment.net
dot.net
exp-tas.com
gamesstack.com
graphengine.io
insiderdevtour.com
jwt.ms
microbit.org
microsoftadc.com
microsoftgamestack.com
microsoftiotinsiderlabs.com
microsoftreactor.cn
microsoftreactor.com.cn
microsoftreactor.info
microsoftreactor.net
microsoftreactor.org
microsoftsilverlight.com
microsoftsilverlight.net
microsoftsilverlight.org
microsoftsqlserver.com
mmdnn.com
mono-project.com
msdn.com
msinnovationchallenge.com
mspairlift.com
msropendata.com
nuget.org
nugettest.org
opentranslatorstothings.org
poshtestgallery.com
pwabuilder.com
reactorms.com.cn
sankie.net
sqlserveronlinux.com
timelinestoryteller.com
uwpcommunitytoolkit.com
vfsforgit.com
vfsforgit.org
xamarin.com
developer.microsoft.com
dtlgalleryint.cloudapp.net
poshtestgallery.cloudapp.net
psg-int-centralus.cloudapp.net
psg-int-eastus.cloudapp.net
microsoft-online.cn
microsoft-online.com.cn
microsoftnews.cc
microsoftnews.cn
microsoftnews.com
microsoftnews.net
microsoftnews.org
microsoftnewsforkids.com
microsoftnewsforkids.net
microsoftnewsforkids.org
microsoftnewskids.com
microsoftnewskids.net
microsoftnewskids.org
microsoftol.com
microsoftol.com.cn
microsoftusercontent.com
msn.cn
msn.com
msn.com.cn
msn.com.nsatc.net
msn.com.tw
msnewskids.com
msnewskids.net
msnewskids.org
msnkids.com
winmp.cn
o365cn.com
o365files.cn
o365weve-dev.com
o365weve-ppe.com
o365weve.com
office
office.com
office.net
office365.com
officedev.cn
1drv.com
1drv.ms
livefilestore.com
onedrive.co
onedrive.co.uk
onedrive.com
onedrive.eu
onedrive.live.com
onedrive.net
onedrive.org
storage.live.com
groupme.com
skype.com
skype.net
skypeassets.com
skypeassets.net
skypeforbusiness.com
sway-cdn.com
sway-extensions.com
sway.com
visualstudio-staging.com
visualstudio.co
visualstudio.co.uk
visualstudio.com
visualstudio.eu
visualstudio.net
vsassets.io
vscode-unpkg.net
vscode-webview.net
vscode.dev
live.cn
live.com.akadns.net
sclive.net
windowslive.cn
wlxrs.com
aicscience.com
mmais.com.cn
msminico.cn
msminico.com.cn
msxiaobing.com
msxiaoice.com
msxiaona.cn
officeplus.cn
renlifang.com
cortana.ai
cortanaanalytics.com
cortanaskills.com
forzamotorsport.net
forzaracingchampionship.com
forzarc.com
gamepass.com
msgamestudios.com
orithegame.com
renovacionxboxlive.com
tellmewhygame.com
xbox.co
xbox.com
xbox.eu
xbox.org
xbox360.co
xbox360.com
xbox360.eu
xbox360.org
xboxab.com
xboxgamepass.com
xboxgamestudios.com
xboxlive.cn
xboxlive.com
xboxone.co
xboxone.com
xboxone.eu
xboxplayanywhere.com
xboxservices.com
xboxstudios.com
xbx.lv
callersbane.com
minecraft.net
minecraftshop.com
mojang.com
beth.games
bethesda.net
bethesdagamestudios.com
bethsoft.com
Applicationinsights.io
Applicationinsights.net
aadrm.com
acompli.net
aka.ms
ankarazirvesi2018.com
applicationinsights.io
applicationinsights.net
aria.ms
asp.net
aspnetcdn.com
assets-yammer.com
azurerms.com
binads.com
bluehatil.com
boswp.com
brazilpartneruniversity.com
breakdown.me
centralvalidation.com
ch9.ms
charticulator.com
cloudapp.net
cloudappsecurity.com
crmdynint-gcc.com
crmdynint.com
crossborderexpansion.com
docs.com
dwh5.com
dynamics.com
efproject.net
engkoo.com
fasttrackreadysupport.com
fluidpreview.com
footprintdns.com
gameuxmasterguide.com
gears5.com
gearspop.com
gearstactics.com
getmicrosoftkey.com
gfx.ms
gigjam.com
helpshift.com
hockeyapp.net
hololens.com
hotmail
hotmail.co
hotmail.com
hotmail.eu
hotmail.net
hotmail.org
hummingbird.ms
ie10.com
ie11.com
ie8.co
ie9.com
imaginecup.pl
img-prod-cms-rt-microsoft-com
ingads.com
internetexplorer.co
internetexplorer.com
intunewiki.com
iotinactionevents.com
joinms.com
joinms.com.cn
joinmva.com
kidgrid.tv
kumo.com
latampartneruniversity.com
live.com
live.com.au
live.eu
live.net
livingyourambition.com
localytics.com
lync.com
makecode.org
managedmeetingrooms.com
meetfasttrack.com
meetyourdevices.com
mepn.com
microsoft
microsoft-int.com
microsoft-ppe.com
microsoft-sap-events.com
microsoft-sbs-domains.com
microsoft-smb.cn
microsoft.az
microsoft.be
microsoft.by
microsoft.ca
microsoft.cat
microsoft.ch
microsoft.cl
microsoft.com
microsoft.com.akadns.net
microsoft.com.nsatc.net
microsoft.cz
microsoft.de
microsoft.dk
microsoft.ee
microsoft.es
microsoft.eu
microsoft.fi
microsoft.ge
microsoft.hu
microsoft.io
microsoft.is
microsoft.it
microsoft.jp
microsoft.lt
microsoft.lu
microsoft.lv
microsoft.md
microsoft.net
microsoft.pl
microsoft.pt
microsoft.red
microsoft.ro
microsoft.rs
microsoft.ru
microsoft.se
microsoft.si
microsoft.tv
microsoft.ua
microsoft.uz
microsoft.vn
microsoft365.com
microsoftaccountguard.com
microsoftads.com
microsoftadvertising.com
microsoftadvertisingregionalawards.com
microsoftaffiliates.com
microsoftapps.azurewebsites.net
microsoftazuread-sso.com
microsoftcloud.com
microsoftcloudworkshop.com
microsoftcommunitytraining.com
microsoftemail.com
microsoftestore.com.hk
microsofthouse.com
microsofthouse.net
microsoftinternetsafety.net
microsoftlatamaitour.com
microsoftlinc.com
microsoftonline-p.com
microsoftonline-p.net
microsoftonline.com
microsoftpartnercommunity.com
microsoftready.com
microsoftsiteselection.com
microsoftstore.com
microsoftstore.com.cn
microsoftstore.com.hk
microsoftstream.com
microsoftteams.com
microsofttradein.com
microsofttranslator.com
microsoftuwp.com
momentumms.com
morphcharts.com
mpnevolution.com
ms-studiosmedia.com
ms365surfaceoffer.com
msa.akadns6.net
msads.net
msappproxy.net
msauth.cn
msauth.net
msauthimages.net
mschallenge2018.com
msecnd.net
msft.info
msft.net
msftauth.cn
msftauth.net
msftauthimages.net
msftcenterone.cn
msftconnecttest.com
msfteducation.ca
msftidentity.com
msftnet.org
msgamesresearch.com
msidentity.com
msignitechina.com
msocdn.com
msocsp.com
msopentech.cn
mspil.cn
msra.cn
mstea.ms
msturing.org
msudalosti.com
msvevent.com
mymicrosoft.com
nextechafrica.net
nxta.org
oaspapps.com
oaspapps.com.akadns.net
onecollector.cloudapp.aria
onecollector.cloudapp.aria.akadns.net
onenote.com
onenote.net
onestore.ms
onmicrosoft.com
opticsforthecloud.net
optimizely.com
outingsapp.com
outlook.cn
outlook.com
outlookgroups.ms
outlookmobile.com
passport.net
phonefactor.net
pixapp.net
playfabapi.cn
playfabcn.com
powerappscdn.net
powerautomate.com
powerbi.com
powershellgallery.com
projectmurphy.net
projectsangam.com
pxt.io
s-microsoft.com
s-msft.com
s-msn.com
sfbassets.com
sfbassets.net
sfx.ms
sharepoint.cn
sharepoint.com
sharepointonline.com
skype
staffhub.ms
successwithteams.com
surface.com
svc.ms
syncshop.cn
sysinternals.com
tailwindtraders.com
techhub.ms
tenor.com
tfsallin.net
trafficmanager.net
translatetheweb.com
unlocklimitlesslearning.com
userpxt.io
uservoice.com
videobreakdown.com
videoindexer.ai
virtualearth.net
vsallin.net
wbd.ms
what-fan.net
windows.com
windows.net
windows-int.net
windows-ppe.net
windows.com
windows.net
windows.nl
windows8.hk
windowscommunity.net
windowsmarketplace.com
windowsphone-int.com
windowsphone.com
windowssearch.com
windowsupdate.com
winhec.com
winhec.net
yammer.com
yammerusercontent.com
g.akamaiedge.net
a1158.g.akamai.net
a122.dscg3.akamai.net
a767.dscg3.akamai.net
cs11.wpc.v0cdn.net
cs9.wac.phicdn.net
b.akamaiedge.net
spoprod-a.akamaihd.net
windows.com.akadns.net
prod-video-cms-rt-microsoft-com.akamaized.net
statics-marketingsites-eas-ms-com.akamaized.net
statics-marketingsites-neu-ms-com.akamaized.net
vip5.afdorigin-prod-am02.afdogw.com
img-prod-cms-rt-microsoft-com.akamaized.net
img-s-msn-com.akamaized.net
mwf-service.akamaized.net
officecdn-microsoft-com.akamaized.net
statics-marketingsites-eus-ms-com.akamaized.net
statics-marketingsites-wcus-ms-com.akamaized.net
同样没有效果,并且我已经把给规则放在第三个位置了,第一个是AD去广告,第二个是BT 黑洞。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

5 participants