[Bug] 报错

[Karmylr]

[Bug] 报错

[juewuy]

……
好吧，我有空本地起一个虚拟机试一下

[juewuy]

@Karmylr lsmod |grep tproxy 查看是否有nft_tproxy内核模块

[Karmylr]

@juewuy

[juewuy]

能完整截图一下错误吗？应该有波浪线提示

[Karmylr]

[Karmylr]

换了天灵的 ImmortalWrt 也是同样的报错

[juewuy]

8f109ec

[Karmylr]

还是报错

[juewuy]

这个重启一下设备应该就行了

[Karmylr]

重启完还是这样

[juewuy]

代理正常吗？这个按理说可以无视

[Karmylr]

断网

[Karmylr]

启动后一段时间会出现udp连接，没有tcp

[juewuy]

beta1应该已经修复了之前的报错

[Karmylr]

还是会出现这条报错信息。而且只有udp流量经过clash，tcp流量被阻断了

[juewuy]

8-1-4发一下

[Karmylr]

[juewuy]

没什么问题，tcp如果没进内核可能是被其他应用劫持了

[Karmylr]

有没有什么办法查看什么在劫持tcp？
这个固件只装了shellcrash。换其他作者（eSir，kiddin9）的固件试了下，都无法进入2-1切换防火墙运行模式

[juewuy]

@Karmylr ip route 和ip rule 看一下路由规则

[Karmylr]

[juewuy]

确实看不出问题，你可以尝试一下其他模式试试

[Karmylr]

用混合模式: Redir转发TCP，Tun转发UDP发现udp流量不会经过内核，但也不会被阻断
这是 8-1-4 的输出:

table inet shellcrash {
        chain input {
                type filter hook input priority -100; policy accept;
                ip daddr 127.0.0.1 accept
                tcp dport 9999 ip saddr 192.168.2.0/24 accept
                tcp dport 9999 reject
                tcp dport 7890 ip saddr 192.168.2.0/24 accept
                tcp dport 7890 reject
        }

        chain prerouting_dns {
                type nat hook prerouting priority dstnat; policy accept;
                meta mark 0x00001ed6 return
                meta skgid { 453, 7890 } return
                udp dport 53 redirect to :1053
                tcp dport 53 redirect to :1053
        }

        chain prerouting {
                type nat hook prerouting priority mangle; policy accept;
                meta mark 0x00001ed6 return
                meta skgid 7890 return
                ip saddr 198.18.0.0/16 return
                ip daddr { 0.0.0.0/8, 10.0.0.0/8, 100.64.0.0/10, 127.0.0.0/8, 169.254.0.0/16, 172.16.0.0/12, 192.168.0.0/16, 224.0.0.0/3 } return
                ip saddr != 192.168.2.0/24 return
                ip6 daddr { ::/127, ::ffff:0.0.0.0/96, 64:ff9b::/96, 100::/64, 2001::/32, 2001:20::/28, 2001:db8::/32, 2002::/16, 240e:378:806:dcf7::/64, 240e:37a:90e:d100::/60, fc00::/7, fe80::/10, ff00::/8 } return
                ip6 saddr != { 240e:378:806:dcf7::/64, 240e:37a:90e:d100::/60, fdfe:dcba:9876::/126 } return
                meta l4proto udp meta mark set 0x00001ed4
                meta l4proto tcp meta mark set 0x00001ed5
        }

        chain prerouting_mixtcp {
                type nat hook prerouting priority dstnat; policy accept;
                meta mark 0x00001ed5 meta l4proto tcp redirect to :7892
        }

        chain forward {
                type filter hook forward priority mangle; policy accept;
                oifname "utun" accept
        }
}

这是lsmod | grep tun的输出:

root@OpenWrt:~# lsmod | grep tun
tun                    49152  2 
root@OpenWrt:~#

[juewuy]

@Karmylr 确实看不出问题，你可以尝试降级1.9.0稳定版

[Karmylr]

1.9.0release没问题