force_dnscrypt_list不生效 #212

oneone1995 · 2024-10-06T08:51:34Z

oneone1995
Oct 6, 2024

作者你好，已经将域名写到force_dnscrypt_list中，但获取到的仍然是fakeip。尝试删除list文件，重启容器后仍旧如此。测试了自动生成的几个域名，其中几个也是一样的情况。

dig gh-proxy.com

; <<>> DiG 9.16.28 <<>> gh-proxy.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15671
;; flags: qr aa rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 2

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; MBZ: 0x0001, udp: 4096
; COOKIE: ecbc72225f8809df (echoed)
;; QUESTION SECTION:
;gh-proxy.com. IN A

;; ANSWER SECTION:
gh-proxy.com. 1 IN A 11.0.15.44

;; ADDITIONAL SECTION:
20241006161706.249661604.addinfo.paopaodns. 2 IN TXT "Since 0ms From:forward -> 192.168.88.185@53"

;; Query time: 1 msec
;; SERVER: 192.168.88.206#53(192.168.88.206)
;; WHEN: Sun Oct 06 16:17:06 CST 2024
;; MSG SIZE rcvd: 179

dig gh-proxy.com +trace

; <<>> DiG 9.16.28 <<>> gh-proxy.com +trace
;; global options: +cmd
. 580 IN NS g.root-servers.net.
. 580 IN NS b.root-servers.net.
. 580 IN NS i.root-servers.net.
. 580 IN NS a.root-servers.net.
. 580 IN NS j.root-servers.net.
. 580 IN NS h.root-servers.net.
. 580 IN NS d.root-servers.net.
. 580 IN NS k.root-servers.net.
. 580 IN NS l.root-servers.net.
. 580 IN NS c.root-servers.net.
. 580 IN NS m.root-servers.net.
. 580 IN NS f.root-servers.net.
. 580 IN NS e.root-servers.net.
. 580 IN RRSIG NS 8 0 518400 20241019050000 20241006040000 61050 . RF/OYmvyYjZO8zFY1EKgXZjt8QK+pw/MLukcD8Im63DXxUW5+3/9ncpM +rO5cywXP6CpzOac9tg8tHOVrPOgqBg5t+7RkG9KxSUfYybXoB3L782c yL3+bi3ol0NOr8uEdufOEkwYkaJxbim7q8p0Q3WS9p8OPXxgX5J5eHxP eAUEpEtR5qJ+10gJ6Rf1juMY8x3Ni4GTF7wAY1oQq4J1QaxKQkOuemgE Rz4GZTgI9cRPBXr/ajR0Q6aatNlAMPnS90DYyIFk/sgS7ZxKYPRofpGm jyydvL+T55hDr74XBc/D93lJ9zgJuUTrRJXTdltszfHGBtHh/v5833NX O/A6cQ==
;; Received 1854 bytes from 192.168.88.206#53(192.168.88.206) in 0 ms

CNAUTO、AUTO_FORWARD、USE_MARK_DATA都为yes。

debug.sh结果

ash-4.4# docker exec paopaodns debug.sh
### == debug.sh : docker exec -it paopaodns sh ==
-> debug start `1728204600`
```rust
[INFO] images build time : 2024-08-28 16:12:23 UTC
[OK]DATA_writeable
[OK]DATA_readable
[INFO] NETWORK
*********************************************************************************

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1000
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP800> mtu 1500 qdisc mq master ovs-system state UP qlen 1000
3: eth1: <NO-CARRIER,BROADCAST,MULTICAST,UP800> mtu 1500 qdisc mq master ovs-system state DOWN qlen 1000
6: ovs_eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
    inet 192.168.88.206/24 brd 192.168.88.255 scope global ovs_eth0
    inet6 240e:390:aa2:ea0:aab8:e0ff:fe02:8775/64 scope global dynamic flags 100
    inet6 fe80::aab8:e0ff:fe02:8775/64 scope link
7: ovs_eth1: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN qlen 1000
    inet 169.254.248.135/16 brd 169.254.255.255 scope global ovs_eth1
8: docker-b71c1bd0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN qlen 1000
    inet 172.20.0.1/16 brd 172.20.255.255 scope global docker-b71c1bd0
9: docker0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
    inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
    inet6 fe80::42:f6ff:fe45:1f8c/64 scope link
13: docker365b3e4@if12: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue master docker0 state UP
    inet6 fe80::49e:3eff:fe8e:b3c6/64 scope link
18: tap021132245ae2: <BROADCAST,MULTICAST,UP,LOWER_UP800> mtu 1500 qdisc pfifo_fast master ovs-system state UP qlen 1000
6178: docker-08ce6351: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
    inet 172.28.0.1/16 brd 172.28.255.255 scope global docker-08ce6351
    inet6 fe80::42:7ff:fed1:20c0/64 scope link
6184: docker0115e1e@if6183: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue master docker-c853c625 state UP
    inet6 fe80::88b5:aff:fe9c:4c69/64 scope link
6186: dockerc0dfd6a@if6185: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue master docker-c853c625 state UP
    inet6 fe80::d441:71ff:fed3:2891/64 scope link
6188: docker3e37adb@if6187: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue master docker-c853c625 state UP
    inet6 fe80::34f5:2bff:fef1:2cc7/64 scope link
6190: dockera55a5cd@if6189: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue master docker-c853c625 state UP
    inet6 fe80::1892:81ff:fe8f:13a/64 scope link
6194: dockerf255ca7@if6193: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue master docker-08ce6351 state UP
    inet6 fe80::282e:8cff:fe7f:7155/64 scope link
6196: docker86d8c03@if6195: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue master docker0 state UP
    inet6 fe80::5cec:78ff:fec2:1f7b/64 scope link
89: docker-80cd9feb: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
    inet 172.25.0.1/16 brd 172.25.255.255 scope global docker-80cd9feb
    inet6 fe80::42:62ff:feb3:1b03/64 scope link
103: docker41f0d3c@if102: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue master docker-80cd9feb state UP
    inet6 fe80::58d8:a7ff:fe51:fcb4/64 scope link
105: docker0e26e38@if104: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue master docker-80cd9feb state UP
    inet6 fe80::2c91:e0ff:fe0a:a498/64 scope link
6137: docker-c853c625: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
    inet 172.27.0.1/16 brd 172.27.255.255 scope global docker-c853c625
    inet6 fe80::42:8bff:fec0:bc87/64 scope link
default via 192.168.88.1 dev ovs_eth0  src 192.168.88.206
169.254.0.0/16 dev ovs_eth1 scope link  src 169.254.248.135 dead
172.17.0.0/16 dev docker0 scope link  src 172.17.0.1
172.20.0.0/16 dev docker-b71c1bd0 scope link  src 172.20.0.1
172.25.0.0/16 dev docker-80cd9feb scope link  src 172.25.0.1
172.27.0.0/16 dev docker-c853c625 scope link  src 172.27.0.1
172.28.0.0/16 dev docker-08ce6351 scope link  src 172.28.0.1
192.168.88.0/24 dev ovs_eth0 scope link  src 192.168.88.206
traceroute to 120.53.53.53 (120.53.53.53), 4 hops max, 46 byte packets
 1  192.168.88.1 (192.168.88.1)  0.364 ms  0.155 ms  0.184 ms
 2  *  *  *
 3  115.227.150.245 (115.227.150.245)  2.641 ms  125.118.13.97 (125.118.13.97)  2.097 ms  *
 4  125.118.13.96 (125.118.13.96)  2.400 ms  *  *
PING 223.5.5.5 (223.5.5.5): 56 data bytes
64 bytes from 223.5.5.5: seq=0 ttl=117 time=2.949 ms

--- 223.5.5.5 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max = 2.949/2.949/2.949 ms
PING 119.29.29.29 (119.29.29.29): 56 data bytes
64 bytes from 119.29.29.29: seq=0 ttl=48 time=38.296 ms

--- 119.29.29.29 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max = 38.296/38.296/38.296 ms
Server:         223.5.5.5
Address:        223.5.5.5#53

Non-authoritative answer:
www.taobao.com  canonical name = www.taobao.com.danuoyi.tbcache.com.
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 183.146.26.176
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 183.146.26.175
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 240e:f7:e000:1200:3::21
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 240e:f7:e000:1200:3::20

Server:         119.29.29.29
Address:        119.29.29.29#53

Non-authoritative answer:
www.qq.com      canonical name = ins-r23tsuuf.ias.tencent-cloud.net.
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 101.91.42.232
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 101.91.22.57
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 240e:e1:a800:120::76
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 240e:e1:a800:120::36

*********************************************************************************

[INFO] ENV
*********************************************************************************

====ENV TEST====
[OK]DATA_writeable-
[OK]DATA_readable-
MEM:800m 1600m 1000000 1800mb
prefPC:100
CORES:-4-
POWCORES:-4-
ulimit :-1048576-
FDLIM :-4096-
TZ:-Asia/Shanghai-
UPDATE:-weekly-
DNS_SERVERNAME:-PaoPaoDNS,blog.03k.org-
SERVER_IP:-192.168.88.206-
ETHIP:-192.168.88.206-
DNSPORT:-53-
SOCKS5:-192.168.88.185:1080-
CNAUTO:-yes-
IPV6:-yes-
CNFALL:-yes-
CUSTOM_FORWARD:-192.168.88.185:53-
AUTO_FORWARD:-yes-
AUTO_FORWARD_CHECK:-yes-
USE_MARK_DATA:-yes-
RULES_TTL:-0-
CUSTOM_FORWARD_TTL:-0-
SHUFFLE:-no-
EXPIRED_FLUSH:-yes-
CN_TRACKER:-yes-
USE_HOSTS:-no-
HTTP_FILE:-yes-
SAFEMODE:--
QUERY_TIME:-2000ms-
ADDINFO:-yes-
PLATFORM:-Linux nas 5.10.55+ #69057 SMP Mon Nov 13 14:20:59 CST 2023 x86_64 Linux-
====ENV TEST====
mosdns kkkgo/mosdns:240822.1
total 13M
      0 drwxrwxrwx    1 1026     100          604 Oct  6 16:36 .
      0 drwxr-xr-x    1 0        0            158 Oct  6 16:36 ..
 248.0K -rw-r--r--    1 0        0         247.0K Oct  6 16:41 Country-only-cn-private.mmdb
  12.0K -rwxrwxrwx    1 1026     100        11.9K May 10 01:39 clash.yaml
   4.0K -rwxrwxrwx    1 1026     100          781 Oct  6 16:36 compose.yaml
      0 -rwxrwxrwx    1 0        0              0 Oct  6 14:13 custom_cn_mark.txt
   4.0K -rwxrwxrwx    1 0        0            233 Oct  6 16:41 custom_env.ini
   4.0K -rwxrwxrwx    1 0        0            416 Oct  6 16:36 custom_mod.yaml
      0 drwxr-xr-x    1 0        0            208 Oct  6 16:36 dnscrypt-resolvers
   4.0K -rw-r--r--    1 0        0           3.0K Oct  6 16:36 dnscrypt.toml
   4.0K -rwxrwxrwx    1 0        0            691 Oct  6 16:37 force_dnscrypt_list.txt
   4.0K -rwxrwxrwx    1 0        0            325 Oct  6 15:49 force_forward_list.txt
   4.0K -rwxrwxrwx    1 0        0            387 Oct  6 15:49 force_recurse_list.txt
   1.2M -rw-r--r--    1 0        0           1.2M Oct  6 16:41 global_mark.dat
  12.0K -rw-r--r--    1 0        0          10.0K Oct  6 16:36 mosdns.yaml
   4.0K -rwxrwxrwx    1 1026     100         1.4K May 11 01:01 ppgw.ini
   8.0K -rw-r--r--    1 0        0           5.7K Oct  6 16:36 redis.conf
  11.7M -rwxrwxrwx    1 0        0          11.7M Oct  6 13:37 redis_dns_v2.rdb
  16.0K -rwxrwxrwx    1 0        0          15.5K Oct  6 16:41 trackerslist.txt
  52.0K -rw-r--r--    1 0        0          50.9K Oct  6 16:36 unbound.conf
   4.0K -rwxrwxrwx    1 0        0            289 Apr 20 20:18 unbound_custom.conf
*********************************************************************************

[INFO] PS
*********************************************************************************

PID   USER     TIME  COMMAND
    1 root      0:00 {init.sh} /bin/sh /usr/sbin/init.sh
   23 root      0:00 crond
   56 root      0:00 redis-server unixsocket:/tmp/redis.sock
  247 root      0:00 dnscrypt-proxy -config /data/dnscrypt-resolvers/dnscrypt.toml
  248 root      0:00 dnscrypt-proxy -config /data/dnscrypt-resolvers/dnscrypt_socks.toml
  267 root      0:00 unbound -c /tmp/unbound_forward.conf -p
  292 root      0:00 {watch_list.sh} /bin/sh /usr/sbin/watch_list.sh
  298 root      0:00 tail -f /dev/null
  671 root      0:01 /usr/sbin/unbound -c /tmp/unbound_raw.conf
 1135 root      0:01 /usr/sbin/mosdns start -d /data -c /tmp/mosdns.yaml
 1183 root      0:00 inotifywait -e modify,delete /etc/unbound/named.cache /data/Country-only-cn-private.mmdb /data/force_recurse_list.txt /data/force_dnscrypt_list.txt /data/custom_env.ini /data/global_mark.dat /data/custom_cn_mark.txt /data/trackerslist.txt /data/force_forward_list.txt
 1187 root      0:00 {debug.sh} /bin/sh /usr/sbin/debug.sh
 1209 root      0:00 ps -ef
  671 root      0:01 /usr/sbin/unbound -c /tmp/unbound_raw.conf
unbound OK.
  267 root      0:00 unbound -c /tmp/unbound_forward.conf -p
unbound_forward OK.
*********************************************************************************

[INFO] TOP
*********************************************************************************

CPU:   2% usr   0% sys   0% nic  97% idle   0% io   0% irq   0% sirq
  PID  PPID USER     STAT   VSZ %VSZ CPU %CPU COMMAND
  671     1 root     S    2431m  15%   1   0% /usr/sbin/unbound -c /tmp/unbound_
 1135   292 root     S    1212m   8%   1   0% /usr/sbin/mosdns start -d /data -c
  248     1 root     S    1211m   8%   1   0% dnscrypt-proxy -config /data/dnscr
  247     1 root     S    1211m   8%   0   0% dnscrypt-proxy -config /data/dnscr
  267     1 root     S     613m   4%   1   0% unbound -c /tmp/unbound_forward.co
   56     1 root     S    40572   0%   1   0% redis-server unixsocket:/tmp/redis
  292     1 root     S     1700   0%   2   0% {watch_list.sh} /bin/sh /usr/sbin/
    1     0 root     S     1640   0%   3   0% {init.sh} /bin/sh /usr/sbin/init.s
 1187     0 root     S     1636   0%   3   0% {debug.sh} /bin/sh /usr/sbin/debug
 1216  1187 root     R     1632   0%   0   0% top -n1
  298     1 root     S     1624   0%   3   0% tail -f /dev/null
 1217  1187 root     S     1620   0%   1   0% grep %
 1183   292 root     S     1080   0%   0   0% inotifywait -e modify,delete /etc/
   23     1 root     S      868   0%   0   0% crond
*********************************************************************************

[INFO] REDIS
*********************************************************************************

used_memory_human:14.96M
used_memory_rss_human:20.61M
used_memory_peak_human:14.96M
total_system_memory_human:15.24G
used_memory_lua_human:31.00K
used_memory_vm_total_human:63.00K
used_memory_scripts_human:181B
maxmemory_human:1.76G
34038
*********************************************************************************

[TEST] IP ROUTE
*********************************************************************************

CN IP URL:
-
--
CN RAW-IP URL:
115.193.143.132
------------------
Non-CN IP URL:
185.248.184.221
-
185.248.184.221
--
185.248.184.221
Non-CN RAW-IP URL:
115.193.143.132
-
115.193.143.132
--
115.193.143.132
---
115.193.143.132
------------------
IP INFO:
115.193.143.132
CN,Hangzhou,Zhejiang
ASN4134/China Telecom
HTTP/1.1
Mozilla/5.0 Gecko/20100101 Firefox/120.0 https://github.com/kkkgo/PaoPaoDNS
Asia/Shanghai Time: 10/6/2024, 4:50:13 PM
[INFO] force_recurse_list
domain:whoami.ds.akahelp.net
domain:whoami.03k.org
MOSDNS WHOAMI :
MOSDNS akahelp: "ns" "240e:390:878:6ae0:aab8:e0ff:fe02:8775"
MOSDNS 03k: 115.193.143.132
UNBOUND WHOAMI:
UNBOUND akahelp: "ns" "240e:390:878:6ae0:aab8:e0ff:fe02:8775"
UNBOUND 03k: 115.193.143.132
*********************************************************************************

[TEST] HIJACK
*********************************************************************************

;; communications error to 9.8.7.5#53: timed out
;; no servers could be reached

;; communications error to 9.8.7.6#53: timed out
;; no servers could be reached

HIJACK 127.0.0.1 = 58.217.249.177
*********************************************************************************

[TEST] DIG-CN [taobao]
*********************************************************************************

MOSDNS CN:
www.taobao.com.danuoyi.tbcache.com.
115.231.187.80
115.231.187.79
UNBOUND CN:
www.taobao.com.danuoyi.tbcache.com.
115.231.187.80
115.231.187.79
[TEST] DIG-NOCN [youtube]
MOSDNS NOCN:
11.0.0.100
DNSCRYPT-UNBOUND NOCN:
youtube-ui.l.google.com.
172.217.163.46
142.250.196.206
DNSCRYPT NOCN:
youtube-ui.l.google.com.
142.250.189.206
142.251.46.238
DNSCRYPT-SOCKS5 NOCN:
youtube-ui.l.google.com.
142.250.77.14
142.250.196.206
*********************************************************************************

CUSTOM_FORWARD TEST [youtube]:
11.0.0.100
CUSTOM_FORWARD TEST [taobao]:
11.0.15.105
*********************************************************************************

[TEST] DUAL CN [IPv6=YES will have aaaa,taobao]
*********************************************************************************

www.taobao.com.danuoyi.tbcache.com.
240e:f7:e700:1fb:3::3d0
240e:f7:e700:1fb:3::3d1
[TEST] DUAL NOCN [IPv6=YES will block aaaa,youtube]
[TEST] ONLY6 [IPv6=only6 will block aaaa if a ok]
checkipv6.synology.com : ip6.03k.org : 2606:4700:3037::ac43:c96c
2606:4700:3034::6815:15ef
6.ipw.cn : 2400:8905::f03c:94ff:fe1c:a95e

*********************************************************************************

[info] ALL TEST FINISH.

-> debug end 1728204616

kkkgo · 2024-10-06T09:00:09Z

kkkgo
Oct 6, 2024
Maintainer

可能你编辑的有问题，你用vi打开force_dnscrypt_list看看。

3 replies

oneone1995 Oct 6, 2024
Author

# Read https://github.com/kkkgo/PaoPaoDNS/discussions/122

domain:ip.03k.org
domain:msftncsi.com
domain:msftconnecttest.com
domain:time.windows.com
domain:ntp.msn.com
domain:time-ios.apple.com
domain:time.apple.com
domain:pool.ntp.org

# Skip proxy...
# https://github.com/kkkgo/PaoPaoDNS/discussions/47
#domain:steamcontent.com
#domain:steamserver.net
#domain:download.epicgames.com
#domain:xboxlive.com
#domain:akamaihd.net
#domain:akamaized.net
#domain:gh-proxy.com

# xbox net test
domain:xbox.ipv6.microsoft.com
domain:xncsi.xboxlive.com
domain:x1ds.xboxlive.com

# netflix hard-coded DNS
# https://github.com/kkkgo/PaoPaoGateWay/discussions/98
#domain:dns.google
#domain:dns.google.com
~
~
~

没看出问题。。另外我没编辑的时候，测试自动生成的download.epicgames.com拿到的也是fakeip

kkkgo Oct 6, 2024
Maintainer

gh-proxy.com并没有在里面。
这不是自动生成，这只是一些默认的场景示例，他是被注释的，本来就不生效。

oneone1995 Oct 6, 2024
Author

gh-proxy.com并没有在里面。这不是自动生成，这只是一些默认的场景示例，他是被注释的，本来就不生效。

哈哈哈，笑死了。。我以为#是特殊的语法。。感谢感谢

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

force_dnscrypt_list不生效 #212

{{title}}

Replies: 1 comment 3 replies

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

Select a reply

force_dnscrypt_list不生效 #212

oneone1995 Oct 6, 2024

dig gh-proxy.com

dig gh-proxy.com +trace

Replies: 1 comment · 3 replies

kkkgo Oct 6, 2024 Maintainer

oneone1995 Oct 6, 2024 Author

kkkgo Oct 6, 2024 Maintainer

oneone1995 Oct 6, 2024 Author

oneone1995
Oct 6, 2024

Replies: 1 comment 3 replies

kkkgo
Oct 6, 2024
Maintainer

oneone1995 Oct 6, 2024
Author

kkkgo Oct 6, 2024
Maintainer

oneone1995 Oct 6, 2024
Author