[Help] test.sh 结果提示 [DNS hijack]

[ixuner]

在提交之前，请确认

• 我已经尝试执行test.sh并搜索过Issue和discussions和文档，但没有找到相关问题。
• 我正在使用最新的docker镜像版本（可以尝试docker pull sliamb/paopaodns:latest后重新创建容器）。

脚本自检日志

/data # test.sh
*********************************************************************************

images build time : 2024-03-28 16:07:06 UTC
check for the latest version ,
go to https://github.com/kkkgo/PaoPaoDNS/discussions 
-> test start `1712071947`

yy[DNS hijack]127.0.0.1yyyyyyyyyy
[INFO] TEST FAIL.❌

-> test end `1712071949`

*********************************************************************************

/data # debug.sh 
### == debug.sh : docker exec -it paopaodns sh ==
-> debug start `1712048144`
```rust
[INFO] images build time : 2024-03-28 16:07:06 UTC
[OK]DATA_writeable
[OK]DATA_readable
[INFO] NETWORK
*********************************************************************************

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1000
    inet 127.0.0.1/8 scope host lo
4: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP qlen 1000
    inet 192.168.1.99/24 brd 192.168.1.255 scope global eth0
6: docker0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP 
    inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
8: vethf99b13b@if7: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue master docker0 state UP 
10: veth1c71a70@if9: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue master docker0 state UP 
default via 192.168.1.2 dev eth0 onlink 
169.254.0.0/16 dev eth0 scope link  metric 1000 
172.17.0.0/16 dev docker0 scope link  src 172.17.0.1 
192.168.1.0/24 dev eth0 scope link  src 192.168.1.99 
PING 223.5.5.5 (223.5.5.5): 56 data bytes
64 bytes from 223.5.5.5: seq=0 ttl=116 time=38.719 ms

--- 223.5.5.5 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max = 38.719/38.719/38.719 ms
PING 119.29.29.29 (119.29.29.29): 56 data bytes
64 bytes from 119.29.29.29: seq=0 ttl=54 time=33.900 ms

--- 119.29.29.29 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max = 33.900/33.900/33.900 ms
Server:         223.5.5.5
Address:        223.5.5.5#53

Non-authoritative answer:
www.taobao.com  canonical name = www.taobao.com.danuoyi.tbcache.com.
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 122.13.173.234
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 122.13.173.235
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 2408:8760:117:1:3::3dc
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 2408:8760:117:1:3::3db

Server:         119.29.29.29
Address:        119.29.29.29#53

Non-authoritative answer:
www.qq.com      canonical name = news.qq.com.edgekey.net.
news.qq.com.edgekey.net canonical name = e6156.dscf.akamaiedge.net.
Name:   e6156.dscf.akamaiedge.net
Address: 23.1.16.172
Name:   e6156.dscf.akamaiedge.net
Address: 2600:1417:4400:8bb::180c
Name:   e6156.dscf.akamaiedge.net
Address: 2600:1417:4400:881::180c

*********************************************************************************

[INFO] ENV
*********************************************************************************

====ENV TEST====
[OK]DATA_writeable-
[OK]DATA_readable-
MEM:50m 100m 200 100mb
prefPC:9
CORES:-1-
POWCORES:-1-
ulimit :-1048576-
FDLIM :-1-
TZ:-Asia/Shanghai-
UPDATE:-weekly-
DNS_SERVERNAME:-PaoPaoDNS,blog.03k.org-
SERVER_IP:-none-
ETHIP:-192.168.1.99-
DNSPORT:-53-
SOCKS5:-IP:PORT-
CNAUTO:-yes-
IPV6:-no-
CNFALL:-yes-
CUSTOM_FORWARD:-IP:PORT-
AUTO_FORWARD:-no-
AUTO_FORWARD_CHECK:-yes-
USE_MARK_DATA:-yes-
RULES_TTL:-0-
CUSTOM_FORWARD_TTL:-0-
SHUFFLE:-trnc-
CN_TRACKER:-yes-
USE_HOSTS:-no-
HTTP_FILE:-no-
SAFEMODE:--
QUERY_TIME:-2000ms-
ADDINFO:-no-
PLATFORM:-Linux armbian 6.1.64-ophub #1 SMP Wed Nov 29 03:31:49 EST 2023 aarch64 Linux-
====ENV TEST====
mosdns kkkgo/mosdns:240322.2
total 2M     
   4.0K drwxrwxrwx    3 0        0           4.0K Apr  2 15:26 .
   4.0K drwxr-xr-x    1 0        0           4.0K Apr  2 03:43 ..
 256.0K -rwxrwxrwx    1 0        0         254.8K Apr  2 03:50 Country-only-cn-private.mmdb
   4.0K -rwxrwxrwx    1 0        0            233 Apr  2 03:50 custom_env.ini
   4.0K -rwxrwxrwx    1 0        0            416 Apr  2 03:44 custom_mod.yaml
   4.0K drwxrwxrwx    2 0        0           4.0K Apr  2 03:44 dnscrypt-resolvers
   4.0K -rwxrwxrwx    1 0        0           3.0K Apr  2 03:43 dnscrypt.toml
   4.0K -rwxrwxrwx    1 0        0            328 Apr  2 03:43 force_cn_list.txt
   4.0K -rwxrwxrwx    1 0        0            386 Apr  2 03:43 force_nocn_list.txt
   1.2M -rwxrwxrwx    1 0        0           1.2M Apr  2 03:50 global_mark.dat
  12.0K -rwxrwxrwx    1 0        0           9.7K Apr  2 03:43 mosdns.yaml
   8.0K -rwxrwxrwx    1 0        0           5.7K Apr  2 03:43 redis.conf
  32.0K -rw-r--r--    1 0        0          29.1K Apr  2 15:26 redis_dns_v2.rdb
  12.0K -rwxrwxrwx    1 0        0          11.6K Apr  2 03:50 trackerslist.txt
  52.0K -rwxrwxrwx    1 0        0          50.4K Apr  2 03:43 unbound.conf
   4.0K -rwxrwxrwx    1 0        0            289 Apr  2 03:43 unbound_custom.conf
*********************************************************************************

[INFO] PS
*********************************************************************************

PID   USER     TIME  COMMAND
    1 root      0:00 {init.sh} /bin/sh /usr/sbin/init.sh
   13 root      0:00 crond
   47 root      2:32 redis-server unixsocket:/tmp/redis.sock
  135 root      0:23 dnscrypt-proxy -config /data/dnscrypt-resolvers/dnscrypt.toml
  163 root      0:00 unbound -c /tmp/unbound_forward.conf -p
  173 root      0:00 {watch_list.sh} /bin/sh /usr/sbin/watch_list.sh
  184 root      0:18 unbound -c /tmp/unbound_raw.conf -p
  185 root      0:03 tail -f /dev/null
  213 root      0:00 sh
  850 root      1:35 mosdns start -d /data -c /tmp/mosdns.yaml
  888 root      0:00 inotifywait -e modify,delete /etc/unbound/named.cache /data/Country-only-cn-private.mmdb /data/force_cn_list.txt /data/force_nocn_list.txt /data/custom_
 1021 root      0:00 sh
 1551 root      0:00 sh
 1826 root      0:00 {debug.sh} /bin/sh /usr/sbin/debug.sh
 1846 root      0:00 ps -ef
  184 root      0:18 unbound -c /tmp/unbound_raw.conf -p
unbound OK.
*********************************************************************************

[INFO] TOP
*********************************************************************************

CPU:   0% usr   4% sys   0% nic  95% idle   0% io   0% irq   0% sirq
  PID  PPID USER     STAT   VSZ %VSZ CPU %CPU COMMAND
  850   173 root     S    1211m  63%   0   0% mosdns start -d /data -c /tmp/mosd
  135     1 root     S    1210m  63%   1   0% dnscrypt-proxy -config /data/dnscr
   47     1 root     S    23108   1%   3   0% redis-server unixsocket:/tmp/redis
  184     1 root     S    12516   1%   3   0% unbound -c /tmp/unbound_raw.conf -
  163     1 root     S    12068   1%   2   0% unbound -c /tmp/unbound_forward.co
  213     0 root     S     1816   0%   1   0% sh
 1021     0 root     S     1816   0%   2   0% sh
  173     1 root     S     1804   0%   0   0% {watch_list.sh} /bin/sh /usr/sbin/
 1551     0 root     S     1788   0%   2   0% sh
    1     0 root     S     1724   0%   3   0% {init.sh} /bin/sh /usr/sbin/init.s
 1826  1551 root     S     1724   0%   2   0% {debug.sh} /bin/sh /usr/sbin/debug
 1850  1826 root     R     1716   0%   1   0% top -n1
  185     1 root     S     1708   0%   2   0% tail -f /dev/null
 1851  1826 root     S     1704   0%   1   0% grep %
  888   173 root     S     1156   0%   3   0% inotifywait -e modify,delete /etc/
   13     1 root     S      856   0%   2   0% crond
*********************************************************************************

[INFO] REDIS
*********************************************************************************

used_memory_human:1.06M
used_memory_rss_human:4.35M
used_memory_peak_human:1.06M
total_system_memory_human:1.88G
used_memory_lua_human:31.00K
used_memory_vm_total_human:63.00K
used_memory_scripts_human:181B
maxmemory_human:100.00M
(integer) 128
*********************************************************************************

[TEST] IP ROUTE
*********************************************************************************

CN IP URL:
27.36.106.x
-
27.36.106.x
--
27.36.106.x
CN RAW-IP URL:
------------------
Non-CN IP URL:
27.36.106.x
-
27.36.106.x
--
27.36.106.x
Non-CN RAW-IP URL:
27.36.106.x
-
27.36.106.x
--
27.36.106.x
---
27.36.106.x
------------------
IP INFO:
27.36.106.x
CN,Foshan,Guangdong
ASN17816/China Unicom
HTTP/1.1 
Mozilla/5.0 Gecko/20100101 Firefox/120.0 https://github.com/kkkgo/PaoPaoDNS
Asia/Shanghai Time: 4/2/2024, 4:55:54 PM
[INFO] force_cn_list
domain:whoami.ds.akahelp.net
domain:whoami.03k.org
MOSDNS WHOAMI :
MOSDNS akahelp: "ns" "27.36.106.x"
MOSDNS 03k: 27.36.106.x
UNBOUND WHOAMI:
UNBOUND akahelp: "ns" "27.36.106.x"
UNBOUND 03k: 27.36.106.x
*********************************************************************************

[TEST] HIJACK
*********************************************************************************

;; communications error to 9.8.7.5#53: timed out
;; no servers could be reached

;; communications error to 9.8.7.6#53: timed out
;; no servers could be reached

HIJACK 127.0.0.1 = 127.0.0.1
*********************************************************************************

[TEST] DIG-CN [taobao]
*********************************************************************************

MOSDNS CN:
122.13.173.234
122.13.173.235
UNBOUND CN:
www.taobao.com.danuoyi.tbcache.com.
122.13.173.235
122.13.173.234
[TEST] DIG-NOCN [youtube]
MOSDNS NOCN:
172.253.115.93
172.253.62.93
142.251.167.136
DNSCRYPT-UNBOUND NOCN:
youtube-ui.l.google.com.
142.251.167.190
142.251.167.91
DNSCRYPT NOCN:
youtube-ui.l.google.com.
172.217.168.238
142.250.179.174
DNSCRYPT-SOCKS5 NOCN:
;; communications error to 127.0.0.1#5303: connection refused
;; no servers could be reached

*********************************************************************************

[TEST] DUAL CN [IPv6=YES will have aaaa,taobao]
*********************************************************************************

[TEST] DUAL NOCN [IPv6=YES will block aaaa,youtube]
[TEST] ONLY6 [IPv6=only6 will block aaaa if a ok]
checkipv6.synology.com : ip6.03k.org : 6.ipw.cn : 
*********************************************************************************

[info] ALL TEST FINISH.

-> debug end `1712048158

问题描述和复现步骤

最近把移动宽带换成联通，也换了路由器。现在是 test.sh 提示被劫持，搜索过 Issue 和 discussions，还是没能找到原因。docker 一直是跑在 N1的 armbian 系统上面。也试过 pull 最新镜像重新部署没解决。大佬帮忙看看。

[kkkgo]

你这个是114 dns被劫持，看debug其他问题不大，递归也正常工作，这个测试结果说明你的运营商/路由器可能会劫持特定的公共DNS服务。

[kkkgo]

该测试执行了dig whether.114dns.com @114.114.114.114

114在自己的域名（114dns.com）的管理中，添加了A记录，主机名为whether，IP为127.0.0.1，
而114在自家的DNS服务器库中手动改了这条A记录的IP,并不自动与根服务器之类的服务器更新。
所以当你用其它DNS的时候，只能看到127.0.0.1
而用114的DNS时，可以解析到其它IP。

因此，该测试只要解析结果不是127.0.0.1，则表明与114DNS的通讯过程中没有被劫持，表明可以正常进行DNS通讯。

[ixuner]

你这个是114 dns被劫持，看debug其他问题不大，递归也正常工作，这个测试结果说明你的运营商/路由器可能会劫持特定的公共DNS服务。

这有点难受了😂

[ixuner]

该测试执行了dig whether.114dns.com @114.114.114.114

114在自己的域名（114dns.com）的管理中，添加了A记录，主机名为whether，IP为127.0.0.1，
而114在自家的DNS服务器库中手动改了这条A记录的IP,并不自动与根服务器之类的服务器更新。
所以当你用其它DNS的时候，只能看到127.0.0.1
而用114的DNS时，可以解析到其它IP。

因此，该测试只要解析结果不是127.0.0.1，则表明与114DNS的通讯过程中没有被劫持，表明可以正常进行DNS通讯。

谢谢大佬，大概懂了。