dns似乎只监听了udp

[zhihans]

dns配置后发现只监听了1053端口的udp，但是iptables连带tcp也一并转发了。

dns:
  enable: true
  ipv6: true
  use-hosts: false
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  listen: 0.0.0.0:1053
  nameserver: [tcp://192.168.123.153:20153]
  proxy-server-nameserver: [tcp://192.168.123.153:20153]
  nameserver-policy:
    "geosite:private": [192.168.123.1]
    "geosite:cn": [tcp://192.168.123.153:20053]

mihomo ~# lsof -i:1053
COMMAND   PID USER   FD   TYPE    DEVICE SIZE/OFF NODE NAME
mihomo  31065 root    9u  IPv6 224967464      0t0  UDP *:1053

REDIRECT   udp  --  anywhere             anywhere             redir ports 1053
REDIRECT   tcp  --  anywhere             anywhere             redir ports 1053

[Victor2333]

dns默认就是udp的 clash本质不是做一个强大的dns服务器
你可以尝试配置dns hijack去拦截tcp的dns请求
但据我了解，这个要用tproxy或者tun
或者用mosdns/smartdns再做一层dns的分流