windy/vps
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

docs(dns): record mosdns sequence misconfig found+fixed (W1N-56)

Browse Source
This commit is contained in:
windyboy
2026-08-12 22:19:20 +08:00
parent 096e1ce8b6
commit 82203038f0
2 changed files with 21 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
hosts/gfw.windy.lan.md
+6
View File
@@ -30,6 +30,12 @@ OpenClash runs `/etc/openclash/clash` (clash_meta core) with configuration
(`/etc/mosdns/config.yaml`): domestic domains → AGH `.36:53`, foreign →
`223.5.5.5`/`119.29.29.29` (Chinese public DNS). mosdns is **not** in the
client query path — LAN/VLAN10 clients receive fake-ip from clash :7874.
> 2026-08-12: fixed missing `has_resp → accept` guard after the domestic
> branch in `/etc/mosdns/config.yaml` (domestic queries were double-forwarded,
> final answer came from CN public DNS, bypassing AGH blocking/rewrites;
> verified via `dup.baidustatic.com` before/after). Backup:
> `/etc/mosdns/config.yaml.bak-20260812`. See
> [docs/lan-dns-architecture.md](../docs/lan-dns-architecture.md) §1.
- nft: OpenClash injects TPROXY/redirect + DNS-hijack rules into
`table inet fw4`; a residual `table inet passwall` exists with 0 packets (unused)