imgk/shadow

UDP proxy has no effect on ENV:Windivert

lanslot-choby opened this issue · 8 comments

lanslot-choby commented

The udp proxy has no effect, you can use this tool to test it. When the shadow-windivert mode has taken effect, the udp request of the program will not be intercepted.

imgk commented

Can you show me your config file?

I'm not sure about your intention exactly. Though I understand the test program sends non-standard DNS requests to servers, like AdGuard DNS and some others, do you need these packets to be intercepted or not?

After adding these IPs of the servers to the config file, logs appeared.
result

lanslot-choby commented 
{
	"Server": [
		"socks://127.0.0.1:8388"   // here is ss-local runed with udprelay...
	],
	
	"NameServer": "udp://8.8.8.8",
	
	"FilterString": "outbound and (ip ? ip.DstAddr != 8.8.8.8 and ip.DstAddr != 127.0.0.1 : true)",

    "AppRules": {
        "Proxy":[
            "xx.exe",
            "dig.exe",
            "curl.exe",
            "chrome.exe",
            "nslookup.exe"
        ]
    }
}

I am runing in the ss-local-Mode, tcp is ok,but udp not work.
When udp requested, the verbose log show nothing, udp packet used the old network environment.

lanslot-choby commented

You can test with my ss-local,I used go-tun2socks with it,and works well.

imgk commented

Commit 3c7a0fa may have fixed this issue.

lanslot-choby commented

Great!
Thank you very much,I have test your new commit,and it Fixed.
But could you check like my ss-local mode,configurate file like before I posted.My dns seems doesn't works very well..

lanslot-choby commented

Dear imgk,
I means, "NameServer": "udp://8.8.8.8", in my ss-local with udprelay mode, doesn't work.
DNS results are incorrect, DNS results ware modified by GFW

imgk commented

The dns queries captured by shadow will not be sent through proxy by default as these queries do not contain EDNS section which indicates the IP address of the client. The clean dns result may slow down the speed when browsing some websites. If you want to get clean dns result, please add 8.8.8.8/32 to IPCIDRRules->Proxy section, and change the FilterString to outbound and not loopback and (ip ? ip.DstAddr != REMOTE-SERVER-IP : true). A more selective and precise filter string may improve performance.

lanslot-choby commented

Ok,not a very good solution,I think you can do the part of dns resolv better.
Thank you very much!