-
|
目前是按照 kkkgo/PaoPaoGateWay#7 流程来搭建DNS和GateWay的，运行test.sh时返回 FAIL，请问是哪里出了问题？ localhost:~# docker exec paopaodns test.sh -> test start yy[DNS hijack]127.0.0.1[DNS hijack]"ns" "157.255.225.27"yCN-5301 failed:yyyNOCN- 5301 failed:yy
[INFO] TEST FAIL.-> test end localhost:~# docker exec paopaodns debug.sh == debug.sh : docker exec -it paopaodns sh ==-> debug start [INFO] images build time : 2024-02-15 15:59:32 UTC
[OK]DATA_writeable
[OK]DATA_readable
[INFO] NETWORK
******************************************************************************** *
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1000
inet 127.0.0.1/8 scope host lo
4: eth0@if5: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue sta te UP
inet 172.17.0.2/16 brd 172.17.255.255 scope global eth0
default via 172.17.0.1 dev eth0
172.17.0.0/16 dev eth0 scope link src 172.17.0.2
PING 223.5.5.5 (223.5.5.5): 56 data bytes
64 bytes from 223.5.5.5: seq=0 ttl=115 time=39.511 ms
--- 223.5.5.5 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max = 39.511/39.511/39.511 ms
PING 119.29.29.29 (119.29.29.29): 56 data bytes
64 bytes from 119.29.29.29: seq=0 ttl=52 time=32.627 ms
--- 119.29.29.29 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max = 32.627/32.627/32.627 ms
Server: 223.5.5.5
Address: 223.5.5.5#53
Non-authoritative answer:
www.taobao.com canonical name = www.taobao.com.danuoyi.tbcache.com.
Name: www.taobao.com.danuoyi.tbcache.com
Address: 163.179.228.107
Name: www.taobao.com.danuoyi.tbcache.com
Address: 163.179.228.108
Name: www.taobao.com.danuoyi.tbcache.com
Address: 2408:8756:4cff:f01c:3::3e2
Name: www.taobao.com.danuoyi.tbcache.com
Address: 2408:8756:4cff:f01c:3::3e3
Server: 119.29.29.29
Address: 119.29.29.29#53
Non-authoritative answer:
www.qq.com canonical name = ins-r23tsuuf.ias.tencent-cloud.net.
Name: ins-r23tsuuf.ias.tencent-cloud.net
Address: 61.241.54.211
Name: ins-r23tsuuf.ias.tencent-cloud.net
Address: 61.241.54.232
Name: ins-r23tsuuf.ias.tencent-cloud.net
Address: 2408:8756:f50:2::65
Name: ins-r23tsuuf.ias.tencent-cloud.net
Address: 2408:8756:f50:1002::32
Name: ins-r23tsuuf.ias.tencent-cloud.net
Address: 2408:8756:f50:1::7a
******************************************************************************** *
[INFO] ENV
******************************************************************************** *
====ENV TEST====
[OK]DATA_writeable-
[OK]DATA_readable-
MEM:100k 200k 200 16mb
prefPC:1
CORES:-1-
POWCORES:-1-
ulimit :-1048576-
FDLIM :-1-
TZ:-Asia/Shanghai-
UPDATE:-weekly-
DNS_SERVERNAME:-PaoPaoDNS,blog.03k.org-
SERVER_IP:-192.168.50.6-
ETHIP:-172.17.0.2-
DNSPORT:-53-
SOCKS5:-IP:PORT-
CNAUTO:-yes-
IPV6:-no-
CNFALL:-yes-
CUSTOM_FORWARD:-192.168.50.3:53-
AUTO_FORWARD:-yes-
AUTO_FORWARD_CHECK:-yes-
USE_MARK_DATA:-yes-
RULES_TTL:-604800-
CUSTOM_FORWARD_TTL:-0-
SHUFFLE:-yes-
CN_TRACKER:-yes-
USE_HOSTS:-no-
HTTP_FILE:-no-
SAFEMODE:--
QUERY_TIME:-2000ms-
ADDINFO:-yes-
PLATFORM:-Linux 610fe093e70d 5.15.108-0-virt #1-Alpine SMP Fri, 21 Apr 2023 05:5 5:14 +0000 x86_64 Linux-
====ENV TEST====
mosdns kkkgo/mosdns:231210.1
******************************************************************************** *
[INFO] PS
******************************************************************************** *
PID USER TIME COMMAND
1 root 0:00 {init.sh} /bin/sh /usr/sbin/init.sh
14 root 0:00 crond
46 root 2:47 redis-server unixsocket:/tmp/redis.sock
241 root 0:49 dnscrypt-proxy -config /data/dnscrypt-resolvers/dnscrypt.to ml
253 root 1:37 mosdns start -d /tmp -c /tmp/mosdns.yaml
263 root 0:13 unbound -c /tmp/unbound_forward.conf -p
265 root 0:00 {watch_list.sh} /bin/sh /usr/sbin/watch_list.sh
275 root 0:04 tail -f /dev/null
282 root 0:24 unbound -c /tmp/unbound_raw.conf -p
315 root 0:00 inotifywait -e modify,delete /etc/unbound/named.cache /data /Country-only-cn-private.mmdb /data/force_cn_list.txt /data/force_nocn_list.txt /data/custom_env.ini /data/global_mark.dat /data/trackerslist.txt /data/force_fo rward_list.txt /data/force_ttl_rules.txt
938 root 0:00 {debug.sh} /bin/sh /usr/sbin/debug.sh
963 root 0:00 ps -ef
******************************************************************************** *
[INFO] TOP
******************************************************************************** *
CPU: 0% usr 0% sys 0% nic 100% idle 0% io 0% irq 0% sirq
PID PPID USER STAT VSZ %VSZ CPU %CPU COMMAND
253 1 root S 1212m 252% 3 0% mosdns start -d /tmp -c /tmp/mosdn
241 1 root S 1211m 252% 0 0% dnscrypt-proxy -config /data/dnscr
46 1 root S 22572 5% 0 0% redis-server unixsocket:/tmp/redis
263 1 root S 12348 3% 2 0% unbound -c /tmp/unbound_forward.co
282 1 root S 11120 2% 3 0% unbound -c /tmp/unbound_raw.conf -
265 1 root S 1708 0% 0 0% {watch_list.sh} /bin/sh /usr/sbin/
1 0 root S 1632 0% 3 0% {init.sh} /bin/sh /usr/sbin/init.s
938 0 root S 1628 0% 3 0% {debug.sh} /bin/sh /usr/sbin/debug
964 938 root R 1624 0% 1 0% top -n1
275 1 root S 1616 0% 0 0% tail -f /dev/null
965 938 root S 1612 0% 1 0% grep %
315 265 root S 1072 0% 1 0% inotifywait -e modify,delete /etc/
14 1 root S 860 0% 0 0% crond
******************************************************************************** *
[INFO] REDIS
******************************************************************************** *
used_memory_human:1.19M
used_memory_rss_human:4.35M
used_memory_peak_human:1.19M
total_system_memory_human:479.94M
used_memory_lua_human:31.00K
used_memory_vm_total_human:63.00K
used_memory_scripts_human:181B
maxmemory_human:16.00M
0
******************************************************************************** *
[TEST] IP ROUTE
******************************************************************************** *
CN IP URL:
120.*.*.*
-
120.*.*.*
--
120.*.*.*
CN RAW-IP URL:
120.*.*.*
------------------
Non-CN IP URL:
138.199.62.161
-
120.*.*.*
--
138.199.62.161
Non-CN RAW-IP URL:
120.*.*.*
-
120.*.*.*
--
120.*.*.*
---
120.*.*.*
------------------
IP INFO:
120.*.*.*
CN,Foshan,Guangdong
ASN17816/China Unicom
HTTP/1.1
Mozilla/5.0 Gecko/20100101 Firefox/120.0 https://github.com/kkkgo/PaoPaoDNS
Asia/Shanghai Time: 2/19/2024, 9:09:12 AM
[INFO] force_cn_list
domain:whoami.ds.akahelp.net
domain:whoami.03k.org
MOSDNS WHOAMI :
akahelp: "ns" "133.130.98.250"
03k: UNBOUND WHOAMI:
akahelp: 03k: ****************************************************************** ***************
[TEST] HIJACK
******************************************************************************** *
ins-r23tsuuf.ias.tencent-cloud.net.
61.241.54.211
61.241.54.232
"ns" "157.255.225.27"
HIJACK 127.0.0.1 = 127.0.0.1
******************************************************************************** *
[TEST] DIG-CN [taobao]
******************************************************************************** *
MOSDNS CN:
www.taobao.com.danuoyi.tbcache.com.
163.179.228.107
163.179.228.108
UNBOUND CN:
[TEST] DIG-NOCN [youtube]
MOSDNS NOCN:
7.0.0.253
DNSCRYPT-UNBOUND NOCN:
youtube-ui.l.google.com.
172.217.19.206
172.217.21.46
DNSCRYPT NOCN:
youtube-ui.l.google.com.
74.125.200.93
74.125.130.91
DNSCRYPT-SOCKS5 NOCN:
;; communications error to 127.0.0.1#5303: connection refused
;; no servers could be reached
******************************************************************************** *
CUSTOM_FORWARD TEST [youtube]:
7.0.0.253
CUSTOM_FORWARD TEST [taobao]:
7.0.1.95
******************************************************************************** *
[TEST] DUAL CN [IPv6=YES will have aaaa,taobao]
******************************************************************************** *
[TEST] DUAL NOCN [IPv6=YES will block aaaa,youtube]
[TEST] ONLY6 [IPv6=only6 will block aaaa if a ok]
checkipv6.synology.com : ip6.03k.org : 6.ipw.cn :
******************************************************************************** *
[info] ALL TEST FINISH.-> debug end |
Beta Was this translation helpful? Give feedback.
Answered by
kkkgo
Feb 19, 2024
Replies: 1 comment 4 replies
-
|
DNS hijack是DNS劫持。 |
Beta Was this translation helpful? Give feedback.
4 replies
-
|
我把ROS里面的防火墙NAT 端口53劫持给关了了，重新跑debug.sh 还是显示有劫持，不知道哪里出问题了 [TEST] HIJACK ;; communications error to 9.8.7.5#53: timed out ;; communications error to 9.8.7.6#53: timed out HIJACK 127.0.0.1 = 127.0.0.1 参考 #2 那边是用了adg的，我这边只用了ROS拨号，现在没有头绪了 |
Beta Was this translation helpful? Give feedback.
-
|
你这个对比之前是没有普通的劫持了，不过 |
Beta Was this translation helpful? Give feedback.
-
|
另外一提是你测试里面还有 |
Beta Was this translation helpful? Give feedback.
-
|
tracert 了114DNS，Hop数总共只有5个，大概是被运营商劫持了，感谢大佬的分析帮助 |
Beta Was this translation helpful? Give feedback.
Answer selected by
fannagi
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
DNS hijack是DNS劫持。
你的网络存在劫持，在[TEST] HIJACK测试中不通过。
参考#83 (comment)