Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

在1.11-beta19和beta20版自动配置防火墙中本地地址集缺少"172.19.0.0/30" #2440

Open
5 tasks done
lvxj11 opened this issue Jan 5, 2025 · 0 comments
Open
5 tasks done
Labels
bug Something isn't working

Comments

@lvxj11
Copy link

lvxj11 commented Jan 5, 2025

操作系统

Linux

系统版本

alpine3.20

安装类型

sing-box 原始命令行程序

如果您使用图形客户端程序,请提供该程序版本。

No response

版本

sing-box version 1.11.0-beta.20

Environment: go1.23.4 linux/amd64
Tags: with_gvisor,with_quic,with_dhcp,with_wireguard,with_ech,with_utls,with_reality_server,with_acme,with_clash_api
Revision: e483c909b4a18b174dcc4ffcc47f6d44c6f11aa6

描述

在1.11-beta19和beta20版自动配置防火墙中本地地址集缺少"172.19.0.0/30",导致172.19.0.0网段被识别为私有地址而不能访问。
同样配置文件在beta17版本正常运行。
详细信息如下:

{
  "chains": [
    "直连"
  ],
  "download": 0,
  "id": "2977765d-5aaf-4743-ba9d-63729662da15",
  "metadata": {
    "destinationIP": "172.19.0.1",
    "destinationPort": "42665",
    "dnsMode": "normal",
    "host": "apsgo.com",
    "network": "tcp",
    "processPath": "",
    "sourceIP": "172.19.0.2",
    "sourcePort": "10012",
    "type": "tun/0"
  },
  "rule": "ip_is_private=true => route(直连)",
  "rulePayload": "",
  "start": "2025-01-06T00:11:14.819518553+08:00",
  "upload": 1751,
  "downloadSpeed": 0,
  "uploadSpeed": 0
}

beta20版本防火墙中本地地址集如下:

        set inet4_local_address_set {
		type ipv4_addr
		flags interval
		elements = { 127.0.0.0/8, 192.168.56.0/24 }
	}

beta17版本防火墙中本地地址集如下:

	set inet4_local_address_set {
		type ipv4_addr
		flags interval
		elements = { 127.0.0.0/8, 172.19.0.0/30,
			     192.168.56.0/24 }
	}

重现方式

inbounds配置如下:

"inbounds": [
    {
      "type": "tun",
      "address": [
        "172.19.0.1/30",
        "fdfe:dcba:9876::1/126"
      ],
      "auto_route": true,
      "auto_redirect": true,
      "strict_route": true,
      "route_exclude_address_set": "geoip-cn",
      "udp_timeout": "5m0s"
    },
    {
      "type": "mixed",
      "listen": "127.0.0.1",
      "listen_port": 8080
    }
  ],

日志

+0800 2025-01-06 00:27:21 INFO [2472810956 15m5s] dns: exchanged i-cdn.apsgo.com CNAME i-cdn.apsgo.com. 32 IN CNAME i-cdn.apsgo.com.w.cdngslb.com.
+0800 2025-01-06 00:27:21 INFO [2472810956 15m5s] dns: exchanged i-cdn.apsgo.com A i-cdn.apsgo.com.w.cdngslb.com. 32 IN A 119.188.172.147
+0800 2025-01-06 00:27:21 INFO [3418321453 15m5s] dns: exchanged apsgo.com CNAME apsgo.com. 32 IN CNAME apsgo.com.w.kunlunea.com.
+0800 2025-01-06 00:27:21 INFO [3418321453 15m5s] dns: exchanged apsgo.com A apsgo.com.w.kunlunea.com. 32 IN A 119.188.172.248

支持我们

完整性要求

  • 我保证阅读了文档,了解所有我编写的配置文件项的含义,而不是大量堆砌看似有用的选项或默认值。
  • 我保证提供了可以在本地重现该问题的服务器、客户端配置文件与流程,而不是一个脱敏的复杂客户端配置文件。
  • 我保证提供了可用于重现我报告的错误的最简配置,而不是依赖远程服务器、TUN、图形界面客户端或者其他闭源软件。
  • 我保证提供了完整的配置文件与日志,而不是出于对自身智力的自信而仅提供了部分认为有用的部分。
@nekohasekai nekohasekai added the bug Something isn't working label Jan 7, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants