Comments (5)
@yourxx 这不是很合理吗
from mihomo.
@yourxx 你枪杀进程,进程哪还能帮你清除防火墙规则
from mihomo.
@MarksonHon 你把我杀死了,我还要负责把自己埋了
from mihomo.
清除得不是很彻底,有时又彻底,残留的规则也经常不一样。
root@ubuntu-desktop:~# systemctl stop clash
root@ubuntu-desktop:~# systemctl start clash
root@ubuntu-desktop:~# systemctl stop clash
root@ubuntu-desktop:~# iptables-save
# Generated by iptables-save v1.8.4 on Tue Apr 19 13:30:14 2022
*nat
:PREROUTING ACCEPT [2:368]
:INPUT ACCEPT [2:368]
:OUTPUT ACCEPT [2:135]
:POSTROUTING ACCEPT [2:135]
:clash_dns_output - [0:0]
-A PREROUTING ! -s 172.17.0.0/16 ! -d 127.0.0.0/8 -p udp -m udp --dport 53 -j REDIRECT --to-ports 1053
-A PREROUTING ! -s 172.17.0.0/16 ! -d 127.0.0.0/8 -p tcp -m tcp --dport 53 -j REDIRECT --to-ports 1053
-A OUTPUT -p udp -m udp --dport 53 -j clash_dns_output
-A OUTPUT -p tcp -m tcp --dport 53 -j clash_dns_output
-A POSTROUTING -o ens160 -m addrtype ! --src-type LOCAL -j MASQUERADE
COMMIT
# Completed on Tue Apr 19 13:30:14 2022
# Generated by iptables-save v1.8.4 on Tue Apr 19 13:30:14 2022
*mangle
:PREROUTING ACCEPT [35:2775]
:INPUT ACCEPT [35:2775]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [28:3516]
:POSTROUTING ACCEPT [28:3516]
:clash_output - [0:0]
:clash_prerouting - [0:0]
-A PREROUTING -j clash_prerouting
-A OUTPUT -o ens160 -j clash_output
COMMIT
# Completed on Tue Apr 19 13:30:14 2022
# Generated by iptables-save v1.8.4 on Tue Apr 19 13:30:14 2022
*filter
:INPUT ACCEPT [35:2775]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [29:3988]
-A FORWARD -o ens160 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -o ens160 -j ACCEPT
-A FORWARD -i ens160 ! -o ens160 -j ACCEPT
-A FORWARD -i ens160 -o ens160 -j ACCEPT
COMMIT
# Completed on Tue Apr 19 13:30:14 2022
from mihomo.
...
interface-name: ens160 这行可以不写,程序会自动识别。
iptables:
enable: true
inbound-interface: ens160 这行必须要写。
...
在不写 inbound-interface 的时候也可以自动识别就方便多了。
from mihomo.
Related Issues (20)
- [Bug] GeoSite规则未使用代理服务器的DNS HOT 6
- [Feature] 有考虑把vless子协议增加xtls-rprx-vision-udp443选项嘛 HOT 2
- [Feature] route-address 支持本地文件 HOT 5
- [Bug] Mihomo内核无法使用虚拟局域网内的主机上的代理服务器 HOT 5
- CMFA请求支持“从最近任务中隐藏”来防止误删后台。类似于surfboard和Flclash那样。
- [Bug] hosts写法不完善
- [Feature] proxy-providers 增加是否使用代理更新的选项 HOT 2
- [Bug] provider 中设定的 HTTP header 不生效 HOT 3
- [Bug] 负载均衡s5崩溃的问题
- [Bug] mihomo对代理节点的解析没有遵循“proxy-server-nameserver”的设置
- [Feature] ssh private-key 为路径时解析~为$HOME
- [Bug] 在alpine Linux下无法运行 HOT 3
- [Bug] 关闭IPV6的情况下,有部分网站依然被分配IPV6地址并可绕过clash直接访问网络 HOT 3
- [Bug] 死循环请求单个节点 (当开启 mobile hotspot热点) HOT 2
- [Feature] HTTPUpgrade 支持 0-rtt 配置 HOT 3
- [Feature] clash dns返回不了ipv6解析吗
- [Feature] 实现节点动态实时选择功能 HOT 4
- Manually Specifying DoH Server IP Address for 'default-nameserver' in 'mihomo' Configuration
- [技术咨询] Mihomo 监听 shadowsocks 端口同时在另一台主机使用 Mihomo 作为客户端访问时不通 HOT 1
- [Bug] Memory usage
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from mihomo.