Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

强制使用重定向地址的DNS #5

Closed
Developer9911 opened this issue Apr 16, 2018 · 4 comments
Closed

强制使用重定向地址的DNS #5

Developer9911 opened this issue Apr 16, 2018 · 4 comments

Comments

@Developer9911
Copy link

Developer9911 commented Apr 16, 2018

客户机如果使用了非路由器的DNS,会无法解析到正确地址。可添加以下规则强制使用重定向地址的DNS
iptables -t mangle -A SS-UDP -p udp --dport 53 -j RETURN
iptables -t nat -A PREROUTING -p udp --dport 53 -j DNAT --to 192.168.1.1

@zfl9
Copy link
Owner

zfl9 commented Apr 16, 2018

感谢提醒,稍后我将添加到脚本中,这样就不用担心什么 DNS 设置不正确的问题了。

@zfl9
Copy link
Owner

zfl9 commented Apr 17, 2018

已更新,顺便我还把 ss-tproxy stop 后的 DNS 指向也强制重定向了,尽可能防止客户机的 DNS 不正确问题。

@zfl9 zfl9 closed this as completed Apr 17, 2018
@Developer9911
Copy link
Author

感谢更新,白名单IP列表建议用:
https://github.com/17mon/china_ip_list/blob/master/china_ip_list.txt

可能是国内目前最好的白名单IP

@zfl9
Copy link
Owner

zfl9 commented May 1, 2018

嗯,感谢,我也感觉 ip.cn 的白名单列表有遗漏。这就更新。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants