升级新版本以后，国内地址全部解析到了国外ip

[whetherTsmile]

之前一直用的旧版本，更新了新版以后，在添加USE_MARK_DATA=yes的时候，发现国内域名都无法解析，但是容器内可以解析，去掉USE_MARK_DATA后，国内域名全部解析到国外ip, 没有使用任何代理工具,这是为啥子

root@dns:~/paopaodns-latest# nslookup www.bilibili.com 192.168.5.7
Server: 192.168.5.7
Address: 192.168.5.7#53

Non-authoritative answer:
www.bilibili.com canonical name = a.w.bilicdn1.com.
a.w.bilicdn1.com canonical name = i.w.bilicdn1.com.
Name: i.w.bilicdn1.com
Address: 148.153.34.154
Name: i.w.bilicdn1.com
Address: 148.153.35.66

root@dns:~/paopaodns-latest# curl cip.cc/148.153.34.154
IP : 148.153.34.154
地址 : 德国 黑森州 法兰克福
运营商 : yun-idc.com

数据二 : 美国

数据三 : 德国法兰克福法兰克福

URL : http://www.cip.cc/148.153.34.154

root@dns:~/paopaodns-latest# nslookup -type=TXT whoami.ds.akahelp.net 192.168.5.7
Server: 192.168.5.7
Address: 192.168.5.7#53

Non-authoritative answer:
whoami.ds.akahelp.net text = "ns" "133.130.118.103"

Authoritative answers can be found from:
20240420203813.838778012.addinfo.paopaodns text = "Since 1ms From:not_a_aaaa -> forward_unbound"

root@dns:~/paopaodns-latest# nslookup whoami.03k.org 192.168.5.7
Server: 192.168.5.7
Address: 192.168.5.7#53

** server can't find whoami.03k.org: SERVFAIL

root@dns:~/paopaodns-latest# docker exec paopaodns test.sh

---

images build time : 2024-04-18 15:59:52 UTC
check for the latest version ,
go to https://github.com/kkkgo/PaoPaoDNS/discussions
-> test start 1713616280

yyyyyCN-5301 failed:yyyNOCN-5301 failed:yyy
[INFO] TEST FAIL.❌

-> test end 1713616281

---

docker exec paopaodns test.sh

---

images build time : 2024-04-18 15:59:52 UTC
check for the latest version ,
go to https://github.com/kkkgo/PaoPaoDNS/discussions
-> test start 1713616280

yyyyyCN-5301 failed:yyyNOCN-5301 failed:yyy
[INFO] TEST FAIL.❌

-> test end 1713616281

---

root@dns:~/paopaodns-latest# docker exec paopaodns debug.sh

== debug.sh : docker exec -it paopaodns sh ==

-> debug start 1713616302

[INFO] images build time : 2024-04-18 15:59:52 UTC
[OK]DATA_writeable
[OK]DATA_readable
[INFO] NETWORK
*********************************************************************************

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1000
    inet 127.0.0.1/8 scope host lo
6: eth0@if7: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue state UP 
    inet 172.17.0.2/16 brd 172.17.255.255 scope global eth0
default via 172.17.0.1 dev eth0 
172.17.0.0/16 dev eth0 scope link  src 172.17.0.2 
PING 223.5.5.5 (223.5.5.5): 56 data bytes
64 bytes from 223.5.5.5: seq=0 ttl=117 time=6.511 ms

--- 223.5.5.5 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max = 6.511/6.511/6.511 ms
PING 119.29.29.29 (119.29.29.29): 56 data bytes
64 bytes from 119.29.29.29: seq=0 ttl=54 time=6.352 ms

--- 119.29.29.29 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max = 6.352/6.352/6.352 ms
Server:         223.5.5.5
Address:        223.5.5.5#53

Non-authoritative answer:
www.taobao.com  canonical name = www.taobao.com.danuoyi.tbcache.com.
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 222.186.18.188
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 222.186.18.183
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 240e:978:a07:2:3::3e0
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 240e:978:a07:2:3::3df

Server:         119.29.29.29
Address:        119.29.29.29#53

Non-authoritative answer:
www.qq.com      canonical name = news.qq.com.edgekey.net.
news.qq.com.edgekey.net canonical name = e6156.dscf.akamaiedge.net.
Name:   e6156.dscf.akamaiedge.net
Address: 92.122.247.58
Name:   e6156.dscf.akamaiedge.net
Address: 2600:1417:4400:881::180c
Name:   e6156.dscf.akamaiedge.net
Address: 2600:1417:4400:8bb::180c

*********************************************************************************

[INFO] ENV
*********************************************************************************

====ENV TEST====
[OK]DATA_writeable-
[OK]DATA_readable-
MEM:220m 450m 500000 750mb
prefPC:68
CORES:-2-
POWCORES:-2-
ulimit :-524288-
FDLIM :-4096-
TZ:-Asia/Shanghai-
UPDATE:-weekly-
DNS_SERVERNAME:-PaoPaoDNS,blog.03k.org-
SERVER_IP:-none-
ETHIP:-172.17.0.2-
DNSPORT:-53-
SOCKS5:-IP:PORT-
CNAUTO:-yes-
IPV6:-yes_only6-
CNFALL:-no-
CUSTOM_FORWARD:-IP:PORT-
AUTO_FORWARD:-no-
AUTO_FORWARD_CHECK:-yes-
USE_MARK_DATA:-no-
RULES_TTL:-0-
CUSTOM_FORWARD_TTL:-0-
SHUFFLE:-no-
CN_TRACKER:-yes-
USE_HOSTS:-no-
HTTP_FILE:-yes-
SAFEMODE:--
QUERY_TIME:-2000ms-
ADDINFO:-yes-
PLATFORM:-Linux 6cf205096005 5.15.102-1-pve #1 SMP PVE 5.15.102-1 (2023-03-14T13:48Z) x86_64 Linux-
====ENV TEST====
mosdns kkkgo/mosdns:240322.2
total 376K   
   4.0K drwxrwxrwx    3 0        0           4.0K Apr 20 20:20 .
   4.0K drwxr-xr-x    1 0        0           4.0K Apr 20 20:20 ..
 256.0K -rw-r--r--    1 0        0         255.9K Apr 20 20:20 Country-only-cn-private.mmdb
   4.0K -rwxrwxrwx    1 0        0            233 Apr 20 20:02 custom_env.ini
   4.0K -rwxrwxrwx    1 0        0            416 Apr 20 20:20 custom_mod.yaml
   4.0K drwxr-xr-x    2 0        0           4.0K Apr 20 20:20 dnscrypt-resolvers
   4.0K -rw-r--r--    1 0        0           3.0K Apr 20 20:20 dnscrypt.toml
   4.0K -rwxrwxrwx    1 0        0            445 Apr 20 20:02 force_dnscrypt_list.txt
   4.0K -rwxrwxrwx    1 0        0            387 Apr 20 20:02 force_recurse_list.txt
  12.0K -rw-r--r--    1 0        0           9.7K Apr 20 20:20 mosdns.yaml
   8.0K -rw-r--r--    1 0        0           5.7K Apr 20 20:20 redis.conf
  12.0K -rwxrwxrwx    1 0        0          11.9K Apr 20 20:02 trackerslist.txt
  52.0K -rw-r--r--    1 0        0          50.4K Apr 20 20:20 unbound.conf
   4.0K -rwxrwxrwx    1 0        0            289 Apr 20 20:02 unbound_custom.conf
*********************************************************************************

[INFO] PS
*********************************************************************************

PID   USER     TIME  COMMAND
    1 root      0:00 {init.sh} /bin/sh /usr/sbin/init.sh
   24 root      0:00 crond
   57 root      0:00 redis-server unixsocket:/tmp/redis.sock
  130 root      0:00 dnscrypt-proxy -config /data/dnscrypt-resolvers/dnscrypt.toml
  145 root      0:00 mosdns start -d /tmp -c /tmp/mosdns.yaml
  155 root      0:00 unbound -c /tmp/unbound_forward.conf -p
  161 root      0:00 {watch_list.sh} /bin/sh /usr/sbin/watch_list.sh
  162 root      0:00 {data_update.sh} /bin/sh /usr/sbin/data_update.sh
  165 root      0:00 tail -f /dev/null
  171 root      0:01 unbound -c /tmp/unbound_raw.conf -p
  199 root      0:00 inotifywait -e modify,delete /etc/unbound/named.cache /data/Country-only-cn-private.mmdb /data/force_recurse_list.txt /data/force_dnscrypt_list.txt /data/custom_env.ini /data/trackerslist.txt
  359 root      0:01 apk update
  512 root      0:00 {debug.sh} /bin/sh /usr/sbin/debug.sh
  537 root      0:00 ps -ef
  171 root      0:01 unbound -c /tmp/unbound_raw.conf -p
unbound OK.
*********************************************************************************

[INFO] TOP
*********************************************************************************

CPU:   2% usr   7% sys   0% nic  89% idle   0% io   0% irq   0% sirq
  PID  PPID USER     STAT   VSZ %VSZ CPU %CPU COMMAND
  171     1 root     S    1220m   7%   2   0% unbound -c /tmp/unbound_raw.conf -
  130     1 root     S    1210m   7%   1   0% dnscrypt-proxy -config /data/dnscr
  145     1 root     S    1210m   7%   2   0% mosdns start -d /tmp -c /tmp/mosdn
  359   162 root     S    39048   0%   1   0% apk update
   57     1 root     S    22804   0%   2   0% redis-server unixsocket:/tmp/redis
  155     1 root     S    20860   0%   1   0% unbound -c /tmp/unbound_forward.co
  161     1 root     S     1712   0%   2   0% {watch_list.sh} /bin/sh /usr/sbin/
  162     1 root     S     1644   0%   2   0% {data_update.sh} /bin/sh /usr/sbin
    1     0 root     S     1632   0%   1   0% {init.sh} /bin/sh /usr/sbin/init.s
  512     0 root     S     1628   0%   2   0% {debug.sh} /bin/sh /usr/sbin/debug
  541   512 root     R     1624   0%   2   0% top -n1
  165     1 root     S     1616   0%   1   0% tail -f /dev/null
  542   512 root     S     1612   0%   1   0% grep %
  199   161 root     S     1072   0%   2   0% inotifywait -e modify,delete /etc/
   24     1 root     S      860   0%   1   0% crond
*********************************************************************************

[INFO] REDIS
*********************************************************************************

used_memory_human:1.03M
used_memory_rss_human:4.21M
used_memory_peak_human:1.04M
total_system_memory_human:15.39G
used_memory_lua_human:31.00K
used_memory_vm_total_human:63.00K
used_memory_scripts_human:181B
maxmemory_human:750.00M
92
*********************************************************************************

[TEST] IP ROUTE
*********************************************************************************

CN IP URL:
114.83.xx.xxx
-
114.83.xx.xxx
--
114.83.xx.xxx
CN RAW-IP URL:
------------------
Non-CN IP URL:
114.83.xx.xxx
-
114.83.xx.xxx
--
114.83.xx.xxx
Non-CN RAW-IP URL:
114.83.xx.xxx
-
114.83.xx.xxx
--
114.83.xx.xxx
---
114.83.xx.xxx
------------------
IP INFO:
114.83.xx.xxx
CN,Shanghai,Shanghai
ASN4812/China Telecom
HTTP/1.1 
Mozilla/5.0 Gecko/20100101 Firefox/120.0 https://github.com/kkkgo/PaoPaoDNS
Asia/Shanghai Time: 4/20/2024, 8:31:57 PM
[INFO] force_recurse_list
domain:whoami.ds.akahelp.net
domain:whoami.03k.org
MOSDNS WHOAMI :
MOSDNS akahelp: "ns" "133.130.118.103"
MOSDNS 03k: UNBOUND WHOAMI:
UNBOUND akahelp: UNBOUND 03k: *********************************************************************************

[TEST] HIJACK
*********************************************************************************

;; communications error to 9.8.7.5#53: timed out
;; no servers could be reached

;; communications error to 9.8.7.6#53: timed out
;; no servers could be reached

HIJACK 127.0.0.1 = 58.217.249.177
*********************************************************************************

[TEST] DIG-CN [taobao]
*********************************************************************************

MOSDNS CN:
www.taobao.com.danuoyi.tbcache.com.
128.1.157.103
128.1.157.104
UNBOUND CN:
[TEST] DIG-NOCN [youtube]
MOSDNS NOCN:
youtube-ui.l.google.com.
142.250.201.174
216.58.214.78
DNSCRYPT-UNBOUND NOCN:
youtube-ui.l.google.com.
192.178.48.238
192.178.49.174
DNSCRYPT NOCN:
youtube-ui.l.google.com.
142.250.201.174
216.58.214.78
DNSCRYPT-SOCKS5 NOCN:
;; communications error to 127.0.0.1#5303: connection refused
;; no servers could be reached

*********************************************************************************

[TEST] DUAL CN [IPv6=YES will have aaaa,taobao]
*********************************************************************************

[TEST] DUAL NOCN [IPv6=YES will block aaaa,youtube]
[TEST] ONLY6 [IPv6=only6 will block aaaa if a ok]
checkipv6.synology.com : ddns-checkipv6.quickconnect.to.
checkipv6.digitalocean.synology.com.
2604:a880:2:d0::17e8:4001
2604:a880:2:d0::2245:7001
2604:a880:2:d0::2252:d001
2604:a880:2:d0::1700:7001
2604:a880:2:d0::4c0:2001
2604:a880:2:d0::230f:1
2604:a880:2:d0::220d:b001
2604:a880:2:d0::2076:5001
2604:a880:2:d0::2206:5001
2604:a880:2:d0::2049:2001
2604:a880:2:d0::209a:c001
ip6.03k.org : 2606:4700:3034::6815:15ef
2606:4700:3037::ac43:c96c
6.ipw.cn : 2402:4e00:1013:e500:0:9671:f018:4947

*********************************************************************************

[info] ALL TEST FINISH.

-> debug end 1713616321
root@dns:~/paopaodns-latest#

[kkkgo]

你递归失败，CNFALL又设置为no，那只能给你提供境外解析结果了。

[whetherTsmile]

为啥会失败呢
我之前的版本也是设置为no的，也没碰到过这个问题=-=

[kkkgo]

只能是你网络条件原因。
尝试减少nat层数，docker用host网络模式。

[whetherTsmile]

我把旧版本的redis_dns这个文件删了以后试了一下，同样的环境和配置，这个就不会失败
新版本CNFALL设置为yes以后好了

[kkkgo]

递归跟版本没什么关系。可能你的旧版本的docker所在的宿主机上系统网络条件有差异。

[whetherTsmile]

=-=不清楚，是同一个宿主机，网络环境完全没变过，改成host模式递归就没啥问题了。搞好了