页次: 1
以前是好好的,把电脑放到学校来就连不上国内ip了,.cn结尾的可以连上
代理用的是daed,一直用的是默认规则
pname(NetworkManager, systemd-resolved, dnsmasq) -> must_direct
dip(geoip:private) -> direct
dip(geoip:cn) -> direct
domain(geosite:cn) -> direct
fallback: proxy
我尝试指定域名直连但是依然连接不上
domain("baidu.com") -> direct
离线
curl -v http://www.baidu.com 看看
离线
curl -v http://www.baidu.com 看看
* Could not resolve host: www.baidu.com
* shutting down connection #0
curl: (6) Could not resolve host: www.baidu.com
离线
cat /etc/resolv.conf
resolvectl
离线
cat /etc/resolv.conf
resolvectl
# Generated by NetworkManager
nameserver 192.168.3.1
Failed to get global data: Could not activate remote peer 'org.freedesktop.resolve1': activation request failed: unknown unit
启动systemd-resolved后
# Generated by NetworkManager
nameserver 192.168.3.1
Global
Protocols: +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
resolv.conf mode: foreign
Current DNS Server: 192.168.3.1
DNS Servers: 192.168.3.1
Fallback DNS Servers: 1.1.1.1#cloudflare-dns.com 9.9.9.9#dns.quad9.net
8.8.8.8#dns.google 2606:4700:4700::1111#cloudflare-dns
.com
2620:fe::9#dns.quad9.net 2001:4860:4860::8888#dns.goog
le
Link 2 (eno1)
Current Scopes: none
Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsuppo
rted
Default Route: no
Link 3 (wlp4s0)
Current Scopes: DNS LLMNR/IPv4 LLMNR/IPv6 mDNS/IPv4 mDNS/IPv6
Protocols: +DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsuppo
rted
Current DNS Server: 192.168.3.1
DNS Servers: 192.168.3.1
Default Route: yes
Link 4 (docker0)
Current Scopes: none
Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsuppo
rted
Default Route: no
Link 6 (dae0)
Current Scopes: LLMNR/IPv6 mDNS/IPv6
Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsuppo
rted
Default Route: no
打开服务后依然无法解析域名
离线
不要做额外的事情。
ping 192.168.3.1
ip r get 192.168.3.1
离线
不要做额外的事情。
ping 192.168.3.1
ip r get 192.168.3.1
可以ping通
64 字节,来自 192.168.3.1: icmp_seq=1 ttl=64 时间=0.837 毫秒
64 字节,来自 192.168.3.1: icmp_seq=2 ttl=64 时间=0.888 毫秒
64 字节,来自 192.168.3.1: icmp_seq=3 ttl=64 时间=1.17 毫秒
64 字节,来自 192.168.3.1: icmp_seq=4 ttl=64 时间=2.20 毫秒
^C
--- 192.168.3.1 ping 统计 ---
已发送 4 个包, 已接收 4 个包, 0% packet loss, time 3053ms
rtt min/avg/max/mdev = 0.837/1.274/2.204/0.551 ms
ip r get 192.168.3.1
192.168.3.1 dev wlp4s0 src 192.168.3.124 uid 1000
cache
离线
dig @192.168.3.1 www.baidu.com
离线
dig @192.168.3.1 www.baidu.com
超时了
;; communications error to 192.168.3.1#53: timed out
;; communications error to 192.168.3.1#53: timed out
;; communications error to 192.168.3.1#53: timed out
; <<>> DiG 9.20.9 <<>> @192.168.3.1 www.baidu.com
; (1 server found)
;; global options: +cmd
;; no servers could be reached
离线
iptables-save
nft list ruleset
ip ru
离线
iptables-save
nft list ruleset
ip ru
# Generated by iptables-save v1.8.11 on Thu May 29 21:20:06 2025
*nat
:PREROUTING ACCEPT [1551:219178]
:INPUT ACCEPT [81:13360]
:OUTPUT ACCEPT [110697:6690696]
:POSTROUTING ACCEPT [110697:6690696]
:DOCKER - [0:0]
-A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER
-A OUTPUT ! -d 127.0.0.0/8 -m addrtype --dst-type LOCAL -j DOCKER
-A POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE
-A DOCKER -i docker0 -j RETURN
COMMIT
# Completed on Thu May 29 21:20:06 2025
# Generated by iptables-save v1.8.11 on Thu May 29 21:20:06 2025
*filter
:INPUT ACCEPT [889871:211867614]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [1005544:92172311]
:DOCKER - [0:0]
:DOCKER-BRIDGE - [0:0]
:DOCKER-CT - [0:0]
:DOCKER-FORWARD - [0:0]
:DOCKER-ISOLATION-STAGE-1 - [0:0]
:DOCKER-ISOLATION-STAGE-2 - [0:0]
:DOCKER-USER - [0:0]
-A FORWARD -j DOCKER-USER
-A FORWARD -j DOCKER-FORWARD
-A DOCKER ! -i docker0 -o docker0 -j DROP
-A DOCKER-BRIDGE -o docker0 -j DOCKER
-A DOCKER-CT -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A DOCKER-FORWARD -j DOCKER-CT
-A DOCKER-FORWARD -j DOCKER-ISOLATION-STAGE-1
-A DOCKER-FORWARD -j DOCKER-BRIDGE
-A DOCKER-FORWARD -i docker0 -j ACCEPT
-A DOCKER-ISOLATION-STAGE-1 -i docker0 ! -o docker0 -j DOCKER-ISOLATION-STAGE-2
-A DOCKER-ISOLATION-STAGE-2 -o docker0 -j DROP
-A DOCKER-USER -j RETURN
COMMIT
# Completed on Thu May 29 21:20:06 2025
sudo nft list ruleset无输出
0: from all lookup local
32766: from all lookup main
32767: from all lookup default
离线
这儿也没问题。剩下的,daed 我不会调试……
离线
页次: 1