分享自用的 V5 的配置，带有 IP 优选 #697

Journalist-HK · 2023-07-15T13:21:41Z

Journalist-HK
Jul 15, 2023

仓库地址：https://github.com/Journalist-HK/mosdns-config

基本都有注释，等有空再完善一下。这个 V5 版本有一个不太友好的地方，match 后面的 exec 只有一条，如果要运行两条命令，得新建一个 sequence。

  - match:
      - qname google.com
    exec: prefer_ipv4
  - exec: $forward

这样写会出问题，希望 exec 能支持嵌套。

jsdfhasuh · 2023-07-15T16:26:45Z

jsdfhasuh
Jul 15, 2023

仓库地址：https://github.com/Journalist-HK/mosdns-config

基本都有注释，等有空再完善一下。这个 V5 版本有一个不太友好的地方，match 后面的 exec 只有一条，如果要运行两条命令，得新建一个 sequence。
  - match:
      - qname google.com
     exec: prefer_ipv4
  - exec: $forward
这样写会出问题，希望 exec 能支持嵌套。

请问项目当中cf自选IP，请问如何更换

4 replies

Journalist-HK Jul 15, 2023
Author

直接修改配置文件中的 IP（搜索“best_cloudflare_ip”），你可以手动改，也可以写一个脚本定时改。

XIU2/CloudflareSpeedTest#64

jsdfhasuh Jul 16, 2023

这几个ip能不能以文件加载进去，然后通过改文件的ip来实现

Journalist-HK Jul 16, 2023
Author

根据 wiki 中的说明 black_hole 插件后面只能写 IP，等下我写个替换脚本。

gqbre Aug 25, 2023

@Journalist-HK black_hole 的优选替换有进展嘛？我提的 issues 就是为了这个

najloa · 2023-07-21T03:16:18Z

najloa
Jul 21, 2023

是不是没有办法解决屏蔽内网域名导致的Windows网络状态显示无法访问Internet，iOS无线局域网界面显示无互联网连接
- matches:
- qname $privatelist "ip6-localhost" "ip6-loopback" #内网域名
exec: reject 5 # 屏蔽内网域名
# exec: $forward_lan # 查询内网 DNS
# - exec: jump has_resp_sequence

不应处理本地 DNS 请求，防止死循环。正确顺序应该是 dnsmasq --> OpenClash --> mosdns。

- tag: "forward_lan"

type: forward

args:

concurrent: 1

upstream:

- addr: "192.168.1.1"

domain:msftconnecttest.com

1 reply

Journalist-HK Jul 21, 2023
Author

去掉这个域名就行了
https://github.com/Journalist-HK/Rules/blob/main/private.txt

panyichen48737 · 2023-07-28T15:35:27Z

panyichen48737
Jul 28, 2023

AKAMAI的ip段在哪找？谢谢

1 reply

Journalist-HK Jul 28, 2023
Author

我自己用的 IP 是在这个软件里面找的，主要用于加速一些游戏客户端下载。但是它只有 Windows，你要用 CloudflareSpeedTest 得自己写一下，测速 URL 用这个：https://eaassets-a.akamaihd.net/Origin-Client-Download/origin/live/OriginSetup.exe

jsdfhasuh · 2023-07-31T07:22:04Z

jsdfhasuh
Jul 31, 2023

大佬这个报错是什么情况，是我的几个上游服务器访问不了吗
2023-07-31T14:53:40.816+0800 WARN fallback primary error {"query": {"uqid": 129189, "client": "::ffff:127.0.0.1", "qname": "ns500259.ns500269.ns500248.ns500262.ns500261.ns500202.ns500248.ns500262.ns500261.ns500202.ns500248.ns500219.hereyourhotlady.com.", "qtype": 5, "qclass": 1, "rcode": 2, "elapsed": "5.001102807s"}, "error": "exchange: context deadline exceeded"}
2023-07-31T14:53:40.826+0800 WARN forward_easy upstream error {"uqid": 129189, "qname": "ns500259.ns500269.ns500248.ns500262.ns500261.ns500202.ns500248.ns500262.ns500261.ns500202.ns500248.ns500219.hereyourhotlady.com.", "qtype": 5, "qclass": 1, "upstream": "https://doh.apad.pro/dns-query", "error": "context deadline exceeded"}
2023-07-31T14:53:40.893+0800 WARN forward_easy upstream error {"uqid": 129188, "qname": "ns500292.ns500268.ns500259.ns500268.ns500259.ns500213.ns500248.ns500202.ns500245.ns500213.ns500248.ns500225.ns500208.sweetchicksclub.com.", "qtype": 15, "qclass": 1, "upstream": "https://doh.apad.pro/dns-query", "error": "context deadline exceeded"}
2023-07-31T14:53:40.961+0800 WARN fallback primary error {"query": {"uqid": 129190, "client": "::ffff:127.0.0.1", "qname": "ns500242.ns500269.ns500248.ns500269.ns500250.ns500202.ns500248.ns500213.ns500259.ns500213.ns500250.ns500225.ns500248.ns500202.ns500197.ns500208.hereyourhotlady.com.", "qtype": 15, "qclass": 1, "rcode": 2, "elapsed": "5.000282012s"}, "error": "exchange: context deadline exceeded"}
2023-07-31T14:53:40.974+0800 WARN forward_easy upstream error {"uqid": 129190, "qname": "ns500242.ns500269.ns500248.ns500269.ns500250.ns500202.ns500248.ns500213.ns500259.ns500213.ns500250.ns500225.ns500248.ns500202.ns500197.ns500208.hereyourhotlady.com.", "qtype": 15, "qclass": 1, "upstream": "https://doh.apad.pro/dns-query", "error": "context deadline exceeded"}
2023-07-31T14:53:41.663+0800 WARN fallback primary error {"query": {"uqid": 129191, "client": "::ffff:127.0.0.1", "qname": "ns500242.ns500269.ns500248.ns500269.ns500250.ns500202.ns500248.ns500213.ns500259.ns500213.ns500250.ns500225.ns500248.ns500202.ns500197.ns500208.hereyourhotlady.com.", "qtype": 15, "qclass": 1, "rcode": 2, "elapsed": "5.001692704s"}, "error": "exchange: context deadline exceeded"}
2023-07-31T14:53:41.673+0800 WARN forward_easy upstream error {"uqid": 129191, "qname": "ns500242.ns500269.ns500248.ns500269.ns500250.ns500202.ns500248.ns500213.ns500259.ns500213.ns500250.ns500225.ns500248.ns500202.ns500197.ns500208.hereyourhotlady.com.", "qtype": 15, "qclass": 1, "upstream": "https://doh.apad.pro/dns-query", "error": "context deadline exceeded"}
2023-07-31T14:53:41.803+0800 INFO main.r15 "DNS poisoning detected" {"query": ";; opcode: QUERY, status: NOERROR, id: 18906\n;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0\n\n;; QUESTION SECTION:\n;tracker.dicmusic.club.\tIN\t A\n"}
2023-07-31T14:53:41.803+0800 INFO main.r15 "DNS poisoning detected" {"response": ";; opcode: QUERY, status: NOERROR, id: 18906\n;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version 0; flags:; udp: 4096\n\n;; QUESTION SECTION:\n;tracker.dicmusic.club.\tIN\t A\n\n;; ANSWER SECTION:\ntracker.dicmusic.club.\t216\tIN\tA\t157.240.18.18\n"}
2023-07-31T14:53:43.593+0800 WARN fallback primary error {"query": {"uqid": 129196, "client": "::ffff:127.0.0.1", "qname": "ns500259.ns500268.ns500259.ns500262.ns500261.ns500249.ns500250.ns500242.ns500259.ns500242.ns500250.ns500225.ns500208.hereyourhotlady.com.", "qtype": 15, "qclass": 1, "rcode": 2, "elapsed": "5.000834092s"}, "error": "exchange: context deadline exceeded"}
2023-07-31T14:53:44.633+0800 WARN forward_easy upstream error {"uqid": 129196, "qname": "ns500259.ns500268.ns500259.ns500262.ns500261.ns500249.ns500250.ns500242.ns500259.ns500242.ns500250.ns500225.ns500208.hereyourhotlady.com.", "qtype": 15, "qclass": 1, "upstream": "https://doh.apad.pro/dns-query", "error": "context deadline exceeded"}
2023-07-31T14:53:44.816+0800 WARN fallback primary error {"query": {"uqid": 129198, "client": "::ffff:127.0.0.1", "qname": "ns500259.ns500268.ns500259.ns500262.ns500261.ns500249.ns500250.ns500242.ns500259.ns500242.ns500250.ns500225.ns500208.hereyourhotlady.com.", "qtype": 15, "qclass": 1, "rcode": 2, "elapsed": "5.00119308s"}, "error": "exchange: context deadline exceeded"}
2023-07-31T14:53:44.826+0800 WARN forward_easy upstream error {"uqid": 129198, "qname": "ns500259.ns500268.ns500259.ns500262.ns500261.ns500249.ns500250.ns500242.ns500259.ns500242.ns500250.ns500225.ns500208.hereyourhotlady.com.", "qtype": 15, "qclass": 1, "upstream": "https://doh.apad.pro/dns-query", "error": "context deadline exceeded"}

4 replies

Journalist-HK Jul 31, 2023
Author

“DNS poisoning detected” 是指这个域名 tracker.dicmusic.club 存在 DNS 污染，你可以手动确认一下（nslookup/dig 或者 www.whatsmydns.net ），然后加入 grey_list，下次就不会请求国内上游了。“context deadline exceeded”是请求超时，很正常，上游不是100%可靠，只要没完全挂就行。

jsdfhasuh Jul 31, 2023

。“context deadline exceeded”是请求超时的这几个上游服务器，我是不是需要加入openclash使用代理连接？，因为我发现很多都是超时。学校的网络环境有点奇怪

Journalist-HK Jul 31, 2023
Author

可以通过 socks5: "127.0.0.1:1080" 让 DNS 上游走代理，参考wiki。当然你的代理要有相应规则。另外 doh.apad.pro 有国内 cdn，不建议走代理。你可以请求 1.1.1.1 或者 1.0.0.1，然后一个走代理一个直连。

jsdfhasuh Jul 31, 2023

可以了，的确通过将上游服务器代理，报错少了

panyichen48737 · 2023-08-27T10:20:46Z

panyichen48737
Aug 27, 2023

如何解决dns泄露呢？看到了您的注释，把前面的cdnlist注释取消了，但是还会有泄漏。没有找到您注释所说的fallback。

1 reply

Journalist-HK Feb 2, 2024
Author

已更新

chuanncc · 2024-02-24T02:57:43Z

chuanncc
Feb 24, 2024

如果不需要优选IP，是不是把带有“best_cloudflare_ip”的那几行删除就行

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

分享自用的 V5 的配置，带有 IP 优选 #697

{{title}}

{{editor}}'s edit

{{editor}}'s edit

Replies: 6 comments 11 replies

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

Select a reply

分享自用的 V5 的配置，带有 IP 优选 #697

Replies: 6 comments · 11 replies

Journalist-HK Jul 15, 2023 Author

Journalist-HK Jul 16, 2023 Author

不应处理本地 DNS 请求，防止死循环。正确顺序应该是 dnsmasq --> OpenClash --> mosdns。

- tag: "forward_lan"

type: forward

args:

concurrent: 1

upstream:

- addr: "192.168.1.1"

Journalist-HK Jul 21, 2023 Author

Journalist-HK Jul 28, 2023 Author

Journalist-HK Jul 31, 2023 Author

Journalist-HK Jul 31, 2023 Author

Journalist-HK Feb 2, 2024 Author

Replies: 6 comments 11 replies

Journalist-HK Jul 15, 2023
Author

Journalist-HK Jul 16, 2023
Author

Journalist-HK Jul 21, 2023
Author

Journalist-HK Jul 28, 2023
Author

Journalist-HK Jul 31, 2023
Author

Journalist-HK Jul 31, 2023
Author

Journalist-HK Feb 2, 2024
Author