Replies: 2 comments
-
应该是路由和规则没设置 |
Beta Was this translation helpful? Give feedback.
0 replies
-
今天又来逛了下,发现你的出站设置"mark": 255,但防火墙怎么没有相应的return?不会死循环? |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
尝试在开启透明代理之后就无法上网,观察日志和抓包发现所有的TCP请求都卡在了SYN这一步:
![image](https://user-images.githubusercontent.com/19235246/127381928-cb11942c-2f0e-4cd2-9242-1cfb3d8ae74a.png)
![image](https://user-images.githubusercontent.com/19235246/127382040-7b0b12c1-93d8-4514-8591-434cf98353a0.png)
但是奇怪的是UDP数据包却正常得到了转发:
我的V2ray配置如下:
使用的Iptables命令:
iptables -t mangle -N V2RAY iptables -t mangle -A V2RAY -d 127.0.0.1/32 -j RETURN iptables -t mangle -A V2RAY -d 224.0.0.0/4 -j RETURN iptables -t mangle -A V2RAY -d 255.255.255.255/32 -j RETURN iptables -t mangle -A V2RAY -d 192.168.0.0/16 -p tcp -j RETURN iptables -t mangle -A V2RAY -d 192.168.0.0/16 -p udp ! --dport 53 -j RETURN iptables -t mangle -A V2RAY -p udp -j TPROXY --on-port 12345 --tproxy-mark 1 iptables -t mangle -A V2RAY -p tcp -j TPROXY --on-port 12345 --tproxy-mark 1 iptables -t mangle -A PREROUTING -j V2RAY
直接使用1080的socks是可以上网的,但是tproxy的tcp流量就不行
各位大佬有什么思路吗?不胜感谢,谢谢!
Beta Was this translation helpful? Give feedback.
All reactions