Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can TUN mode supports DNS hijacking #590

Closed
Maasea opened this issue Sep 14, 2024 · 2 comments · Fixed by #609 or #651
Closed

Can TUN mode supports DNS hijacking #590

Maasea opened this issue Sep 14, 2024 · 2 comments · Fixed by #609 or #651

Comments

@Maasea
Copy link

Maasea commented Sep 14, 2024

I'm using TUN mode on window, but all requests are sent as IPs, which invalidates the domain rule.

In TUN mode it is not possible to access the url through the proxy. I don't know if it's because TUN mode can't resolve the IP of the proxy server.

dns:
  enable: true
  ipv6: true
  listen: 0.0.0.0:1053
  nameserver:
    - 223.5.5.5
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.2/16

tun:
  enable: true
  device-id: "dev://Clash"
  route-all: true

Also, is it possible to manually disable the warning simple-obfs is deprecated, which is shown in the log every time a proxy request is used.

@ibigbug
Copy link
Member

ibigbug commented Sep 17, 2024

Good point.

Only after DNS resolved the IPs can get into the TUN device by system route.

Maybe the domain rule can be applied with fake ip enabled.

I'll need to look into that.

@ibigbug
Copy link
Member

ibigbug commented Sep 26, 2024

#609 should enable the domain rules for tun when the clash DNS is enabled

I'll not do dns hijack for #406 (comment) unless we see other reasons

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants