V2EX = way to explore
V2EX 是一个关于分享和探索的地方
现在注册
已注册用户请  登录
V2EX 提问指南
zchyit
V2EX  ›  问与答

关于 Passwall2 插件的异常流量

  •  
  •   zchyit · 104 天前 · 637 次点击
    这是一个创建于 104 天前的主题,其中的信息可能已经有所发展或是发生改变。

    在 iStore 安装的 passwall2 ,关闭了本机和局域网透明代理,访问控制也是未启用。 我理解这时应该没有客户端使用 passwall2 ,但是我在日志中看到 127.0.0.1 发起了一些访问,这是什么原因? 截取的日志

    Xray 1.8.23 (Xray, Penetrates Everything.) OpenWrt (go1.22.5 linux/amd64)
    2024/08/20 16:33:11 [Info] infra/conf/serial: Reading config: /tmp/etc/passwall2/acl/default/global.json
    2024/08/20 16:33:11 [Debug] app/log: Logger started
    2024/08/20 16:33:11 [Info] app/dns: DNS: created UDP client initialized for 127.0.0.1:15354
    2024/08/20 16:33:11 [Info] app/dns: DNS: created Remote DOH client for https://1.1.1.1/dns-query
    2024/08/20 16:33:11 [Info] app/dns: DNS: created UDP client initialized for 127.0.0.1:15354
    2024/08/20 16:33:11 [Info] app/dns: DNS: created UDP client initialized for 127.0.0.1:15354
    2024/08/20 16:33:11 [Info] app/dns: DNS: created Remote DOH client for https://1.1.1.1/dns-query
    2024/08/20 16:33:11 [Debug] app/router: MphDomainMatcher is enabled for 73786 domain rule(s)
    2024/08/20 16:33:11 [Debug] app/router: MphDomainMatcher is enabled for 169 domain rule(s)
    2024/08/20 16:33:12 [Debug] app/router: MphDomainMatcher is enabled for 90322 domain rule(s)
    2024/08/20 16:33:12 [Debug] app/router: MphDomainMatcher is enabled for 7286 domain rule(s)
    2024/08/20 16:33:12 [Debug] app/proxyman/inbound: creating stream worker on 127.0.0.1:1070
    2024/08/20 16:33:12 [Debug] app/proxyman/inbound: creating stream worker on 0.0.0.0:1041
    2024/08/20 16:33:12 [Debug] app/proxyman/inbound: creating stream worker on 127.0.0.1:15353
    2024/08/20 16:33:12 [Info] transport/internet/udp: listening UDP on 0.0.0.0:1041
    2024/08/20 16:33:12 [Info] transport/internet/tcp: listening TCP on 127.0.0.1:15353
    2024/08/20 16:33:12 [Info] transport/internet/udp: listening UDP on 127.0.0.1:15353
    2024/08/20 16:33:12 [Info] transport/internet/tcp: listening TCP on 127.0.0.1:1070
    2024/08/20 16:33:12 [Info] transport/internet/udp: listening UDP on 127.0.0.1:1070
    2024/08/20 16:33:12 [Info] transport/internet/tcp: listening TCP on 0.0.0.0:1041
    2024/08/20 16:33:12 [Warning] core: Xray 1.8.23 started
    2024/08/20 16:33:14 [Debug] [1671828220] proxy/dokodemo: processing connection from: 127.0.0.1:38098
    2024/08/20 16:33:14 [Info] [1671828220] proxy/dokodemo: received request for 127.0.0.1:38098
    2024/08/20 16:33:14 [Info] [1671828220] app/dispatcher: taking detour [dns-out] for [udp:0.0.0.0:0]
    2024/08/20 16:33:14 [Info] [1671828220] proxy/dns: handling DNS traffic to udp:127.0.0.1:15354
    2024/08/20 16:33:14 127.0.0.1:38098 accepted udp:0.0.0.0:0 [dns-in -> dns-out]
    2024/08/20 16:33:14 [Debug] app/dns: domain www.baidu.com matches following rules: [geosite:cn(DNS idx:3)]
    2024/08/20 16:33:14 [Debug] app/dns: domain www.baidu.com will use DNS in order: [UDP:127.0.0.1:15354]
    2024/08/20 16:33:14 [Debug] app/dns: UDP:127.0.0.1:15354 querying DNS for: www.baidu.com.
    2024/08/20 16:33:14 [Debug] transport/internet/udp: dispatch request to: udp:127.0.0.1:15354
    2024/08/20 16:33:14 [Info] transport/internet/udp: establishing new connection for udp:127.0.0.1:15354
    2024/08/20 16:33:14 [Info] app/dispatcher: taking detour [direct] for [udp:127.0.0.1:15354]
    2024/08/20 16:33:14 [Debug] transport/internet: dialing to udp:127.0.0.1:15354
    2024/08/20 16:33:14 DNS accepted udp:127.0.0.1:15354 [dns-in1 -> direct]
    2024/08/20 16:33:14 [Info] proxy/freedom: connection opened to udp:127.0.0.1:15354, local endpoint [::]:43750, remote endpoint 127.0.0.1:15354
    2024/08/20 16:33:14 [Info] app/dns: UDP:127.0.0.1:15354 got answer: www.baidu.com. TypeA -> [180.101.50.188 180.101.50.242] 3.181456ms
    2024/08/20 16:33:14 [Debug] app/dns: UDP:127.0.0.1:15354 updating IP records for domain:www.baidu.com.
    2024/08/20 16:33:27 [Debug] [2770970757] proxy/dokodemo: processing connection from: 127.0.0.1:45321
    2024/08/20 16:33:27 [Info] [2770970757] proxy/dokodemo: received request for 127.0.0.1:45321
    2024/08/20 16:33:27 [Info] [2770970757] app/dispatcher: taking detour [dns-out] for [udp:0.0.0.0:0]
    2024/08/20 16:33:27 [Info] [2770970757] proxy/dns: handling DNS traffic to udp:127.0.0.1:15354
    2024/08/20 16:33:27 127.0.0.1:45321 accepted udp:0.0.0.0:0 [dns-in -> dns-out]
    2024/08/20 16:33:27 [Debug] app/dns: domain api2.mina.mi.com matches following rules: [geosite:cn(DNS idx:3)]
    2024/08/20 16:33:27 [Debug] app/dns: domain api2.mina.mi.com will use DNS in order: [UDP:127.0.0.1:15354]
    2024/08/20 16:33:27 [Debug] app/dns: UDP:127.0.0.1:15354 querying DNS for: api2.mina.mi.com.
    2024/08/20 16:33:27 [Debug] transport/internet/udp: dispatch request to: udp:127.0.0.1:15354
    2024/08/20 16:33:27 [Info] app/dns: UDP:127.0.0.1:15354 got answer: api2.mina.mi.com. TypeA -> [118.26.252.49] 3.139252ms
    2024/08/20 16:33:27 [Debug] app/dns: UDP:127.0.0.1:15354 updating IP records for domain:api2.mina.mi.com.
    2024/08/20 16:33:27 [Debug] [3886656209] proxy/dokodemo: processing connection from: 127.0.0.1:39117
    2024/08/20 16:33:27 [Info] [3886656209] proxy/dokodemo: received request for 127.0.0.1:39117
    2024/08/20 16:33:27 [Info] [3886656209] app/dispatcher: taking detour [dns-out] for [udp:0.0.0.0:0]
    2024/08/20 16:33:27 [Info] [3886656209] proxy/dns: handling DNS traffic to udp:127.0.0.1:15354
    2024/08/20 16:33:27 127.0.0.1:39117 accepted udp:0.0.0.0:0 [dns-in -> dns-out]
    2024/08/20 16:33:27 [Debug] app/dns: domain api2.mina.mi.com matches following rules: [geosite:cn(DNS idx:3)]
    2024/08/20 16:33:27 [Debug] app/dns: domain api2.mina.mi.com will use DNS in order: [UDP:127.0.0.1:15354]
    2024/08/20 16:33:27 [Debug] app/dns: UDP:127.0.0.1:15354 cache HIT api2.mina.mi.com -> [240e:83:201:74f0::a 240e:929:1:3f::12]
    2024/08/20 16:33:27 [Debug] [3726318870] proxy/dokodemo: processing connection from: 127.0.0.1:43946
    2024/08/20 16:33:27 [Info] [3726318870] proxy/dokodemo: received request for 127.0.0.1:43946
    2024/08/20 16:33:27 [Info] [3726318870] app/dispatcher: taking detour [dns-out] for [udp:0.0.0.0:0]
    2024/08/20 16:33:27 127.0.0.1:43946 accepted udp:0.0.0.0:0 [dns-in -> dns-out]
    2024/08/20 16:33:27 [Info] [3726318870] proxy/dns: handling DNS traffic to udp:127.0.0.1:15354
    2024/08/20 16:33:27 [Debug] app/dns: domain www.baidu.com matches following rules: [geosite:cn(DNS idx:3)]
    2024/08/20 16:33:27 [Debug] app/dns: domain www.baidu.com will use DNS in order: [UDP:127.0.0.1:15354]
    2024/08/20 16:33:27 [Debug] app/dns: UDP:127.0.0.1:15354 cache HIT www.baidu.com -> [240e:e9:6002:15a:0:ff:b05c:1278 240e:e9:6002:15c:0:ff:b015:146f]
    2024/08/20 16:33:27 [Debug] [2193923686] proxy/dokodemo: processing connection from: 127.0.0.1:48395
    2024/08/20 16:33:27 [Info] [2193923686] proxy/dokodemo: received request for 127.0.0.1:48395
    2024/08/20 16:33:27 [Info] [2193923686] app/dispatcher: taking detour [dns-out] for [udp:0.0.0.0:0]
    2024/08/20 16:33:27 [Debug] [3078266072] proxy/dokodemo: processing connection from: 127.0.0.1:57542
    2024/08/20 16:33:27 [Info] [2193923686] proxy/dns: handling DNS traffic to udp:127.0.0.1:15354
    2024/08/20 16:33:27 [Info] [3078266072] proxy/dokodemo: received request for 127.0.0.1:57542
    2024/08/20 16:33:27 127.0.0.1:48395 accepted udp:0.0.0.0:0 [dns-in -> dns-out]
    2024/08/20 16:33:27 [Info] [3078266072] app/dispatcher: taking detour [dns-out] for [udp:0.0.0.0:0]
    2024/08/20 16:33:27 [Info] [3078266072] proxy/dns: handling DNS traffic to udp:127.0.0.1:15354
    2024/08/20 16:33:27 127.0.0.1:57542 accepted udp:0.0.0.0:0 [dns-in -> dns-out]
    2024/08/20 16:33:27 [Debug] app/dns: domain www.meituan.com matches following rules: [geosite:cn(DNS idx:3)]
    2024/08/20 16:33:27 [Debug] app/dns: domain www.meituan.com will use DNS in order: [UDP:127.0.0.1:15354]
    2024/08/20 16:33:27 [Debug] app/dns: UDP:127.0.0.1:15354 querying DNS for: www.meituan.com.
    2024/08/20 16:33:27 [Debug] app/dns: domain www.meituan.com matches following rules: [geosite:cn(DNS idx:3)]
    2024/08/20 16:33:27 [Debug] app/dns: domain www.meituan.com matches following rules: [geosite:cn(DNS idx:3)]
    2024/08/20 16:33:27 [Debug] app/dns: domain www.meituan.com will use DNS in order: [UDP:127.0.0.1:15354]
    2024/08/20 16:33:27 [Debug] app/dns: domain www.meituan.com will use DNS in order: [UDP:127.0.0.1:15354]
    2024/08/20 16:33:27 [Debug] transport/internet/udp: dispatch request to: udp:127.0.0.1:15354
    2024/08/20 16:33:27 [Debug] app/dns: UDP:127.0.0.1:15354 querying DNS for: www.meituan.com.
    2024/08/20 16:33:27 [Debug] app/dns: UDP:127.0.0.1:15354 querying DNS for: www.meituan.com.
    2024/08/20 16:33:27 [Debug] transport/internet/udp: dispatch request to: udp:127.0.0.1:15354
    2024/08/20 16:33:27 [Debug] transport/internet/udp: dispatch request to: udp:127.0.0.1:15354
    2024/08/20 16:33:27 [Debug] app/dns: domain www.meituan.com matches following rules: [geosite:cn(DNS idx:3)]
    2024/08/20 16:33:27 [Debug] app/dns: domain www.meituan.com will use DNS in order: [UDP:127.0.0.1:15354]
    2024/08/20 16:33:27 [Debug] app/dns: UDP:127.0.0.1:15354 querying DNS for: www.meituan.com.
    2024/08/20 16:33:27 [Debug] transport/internet/udp: dispatch request to: udp:127.0.0.1:15354
    2024/08/20 16:33:27 [Info] app/dns: UDP:127.0.0.1:15354 got answer: www.meituan.com. TypeA -> [103.37.152.41 101.236.69.56] 3.734175ms
    2024/08/20 16:33:27 [Debug] app/dns: UDP:127.0.0.1:15354 updating IP records for domain:www.meituan.com.
    2024/08/20 16:33:27 [Info] app/dns: UDP:127.0.0.1:15354 got answer: www.meituan.com. TypeA -> [103.37.152.41 101.236.69.56] 3.592962ms
    2024/08/20 16:33:27 [Debug] app/dns: UDP:127.0.0.1:15354 updating IP records for domain:www.meituan.com.
    2024/08/20 16:33:27 [Info] app/dns: UDP:127.0.0.1:15354 got answer: www.meituan.com. TypeAAAA -> [[2405:1480:2000:3::a]] 3.779467ms
    2024/08/20 16:33:27 [Debug] app/dns: UDP:127.0.0.1:15354 updating IP records for domain:www.meituan.com.
    2024/08/20 16:33:27 [Info] app/dns: UDP:127.0.0.1:15354 got answer: www.meituan.com. TypeAAAA -> [[2405:1480:2000:3::a]] 3.791365ms
    2024/08/20 16:33:27 [Debug] app/dns: UDP:127.0.0.1:15354 updating IP records for domain:www.meituan.com.
    
    2 条回复    2024-08-22 09:18:41 +08:00
    chanwang
        1
    chanwang  
       104 天前
    保存并应用了吗?显示已停止了吗?
    zchyit
        2
    zchyit  
    OP
       103 天前
    @chanwang #1 xray 已经重启成功了,日志中可以看到。
    关于   ·   帮助文档   ·   博客   ·   API   ·   FAQ   ·   实用小工具   ·   1204 人在线   最高记录 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 40ms · UTC 18:21 · PVG 02:21 · LAX 10:21 · JFK 13:21
    Developed with CodeLauncher
    ♥ Do have faith in what you're doing.