Bypass LAN doesn't work. #2361

axxop · 2019-11-22T09:36:42Z

axxop · 2019-11-28T07:52:11Z

I tried the latest pixel 3 firmware (clear all data) and the latest shadowsocks beta (from play store), still not working.

axxop · 2019-11-28T07:52:57Z

If other information is needed, I can add it.

iKirby · 2019-11-28T09:17:45Z

Same on my Pixel 3a, but it works on Pixel 1 with the same configuration.

madeye · 2019-11-28T09:54:55Z

Reproduced on Android 10.

It looks a bug of Android 10, which breaks the assumption that not routing traffic should fall through the underlying network interfere.

madeye · 2019-11-28T10:47:30Z

Try this APK: https://drive.google.com/open?id=1jYyg8zhu2Ou9sYR76vVvjNQ7bm62aWj1

axxop · 2019-11-28T11:28:15Z

Try this APK: https://drive.google.com/open?id=1jYyg8zhu2Ou9sYR76vVvjNQ7bm62aWj1

It works fine. Thanks for your work.

iKirby · 2019-11-28T12:24:56Z

Try this APK: https://drive.google.com/open?id=1jYyg8zhu2Ou9sYR76vVvjNQ7bm62aWj1

I can also confirm that this works. Thanks!

Mygod · 2019-12-09T03:36:22Z

I don't understand. I cannot reproduce this on my device or emulator (after reverting e9e5c1c).

@madeye Could you share more details on this? What routing rule was changed in Android 10?

iKirby · 2019-12-09T04:02:07Z

It seems that e9e5c1c doesn't actually fix this. I found that I still can't access FX Web Access (manage files on phone from the web) from other devices in the same LAN. (I can access router admin page though.)

This issue is probably introduced by something in November Android update.

On Pixel 1, even with the final update, security patch level is still 2019-10-06. I have Shadowsocks 4.8.5 (which doesn't contain the fix) installed on the device, and bypass LAN & China works well. I can use FX Web Access without shutting down VPN service or adding FX to bypass list.

On Pixel 3a, I updated to 2019-11-05 security patch just the second day I got the device, I didn't use FX Web Access when it was on October patch. So I'm not sure it is caused by November update, just a guess.

axxop · 2019-12-09T07:37:49Z

Same as @iKirby , kdeconnect-android doesn't work too.
Can't scan other devices under the same WIFI network. Works fine on older android versions (android 9)

Mygod · 2019-12-09T11:42:45Z

Reopen this for now for future investigation.

@madeye Can you reproduce this now?

madeye · 2019-12-09T13:47:51Z

Interesting, I cannot reproduce this issue now.

axxop · 2019-12-09T15:41:51Z

Reproduced on Andoird 10 Emulator
Reproduced on OnePlus6T Android10 BuildVersion: OP6T_H2_BETA_32
Shadowsocks 4.8.5

Mygod · 2019-12-13T15:48:32Z

Just checked again and failed to reproduce this with both versions.

Emulator version: 29.3.0
Emulator build number: sdk_gphone_x86_64-userdebug 10 QSR1.191030.002 5978551 dev-keys QSR1.191030.002 5978551 dev-keys

@madeye I suggest we revert e9e5c1c. No matter where the packet is routed, it should always be bypassed correctly so whatever is wrong with this, it should not relate to this repo.

madeye · 2019-12-13T23:09:17Z

Sure, let's revert e9e5c1c first.

I think there's some special precondition preventing me reproducing this issue again.

I agree it looks not related to our implementation.

Mygod · 2019-12-18T15:28:27Z

@madeye

#2361

@Mygod It looks Google broke something in their recent security patches.

Do you have a device that has the latest security patches?

Mygod · 2019-12-18T15:45:27Z

Tested on Android 9 2019-12 security patches and were not able to reproduce.

madeye · 2019-12-22T00:07:17Z

I cannot reproduce either on EMUI 10 with 2019-12 security patch.

x0r2d2 · 2020-01-26T21:52:46Z

@madeye @Mygod
Gents,
I have a bit different problem. If the route is Bypass Lan - I can't access reddit.com (connection refused). If route is ALL - I can access reddit.com. Very strange.

Version: 5.0.3 (latest beta)
IPv4 server address
Client IPv4 and IPv6
IPv6 route
Remote DNS: 1.1.1.1
Plugin: v2ray (ws+tls)

LGA1150 · 2020-02-05T03:49:16Z

Same issue. Can't open router webpage in bypass LAN/GFWList mode.

App Version: 5.0.3
Device: OnePlus 7T
OS: Oxygen OS 10.0.7 (Android Q)
Security Patch: 2019-11-01

BROBIRD · 2020-02-15T07:38:01Z

Same issue in bypass LAN and Mainland China mode.
App Version: 5.0.4
Device: Huawei Honor V20
OS: EMUI 10.0.0.189 (Android Q)
Security Patch: 2019-12-01

Additional:
If IPv6 Route option is OFF, then it seems works fine.
So, I guess this issue is related to IPv6?

iKirby · 2020-02-15T13:53:08Z

Tried turning off IPv6 Route, and I can confirm that it works on Pixel 3a (QQ1A.200205.002).

madeye · 2020-02-15T14:04:28Z

Interesting, it looks related to new IPv6 routing rules.

@Mygod Any thoughts?

Mygod · 2020-02-16T02:12:54Z

Let me take a look later.

EDIT: Indeed. Interesting.

Related bug: https://issuetracker.google.com/issues/149636790

Workaround for #2361

Mygod · 2020-02-18T16:26:48Z

Fixed via #2440.

Mygod · 2020-12-11T02:05:02Z

@madeye Can you reproduce this bug now after reverting the patch? I cannot seem to do it...

P.S. There are also some updates over at the issue at Google: https://issuetracker.google.com/issues/149636790

madeye · 2020-12-11T02:11:22Z

I don't have any Android 10 device now. Maybe it's already fixed?

Mygod · 2020-12-11T05:51:12Z

I couldn't reproduce it on my Android 10 either. Would you be free to test it on the emulator perhaps? 😛

madeye · 2020-12-11T05:53:51Z

I suggest keep this workaround for now, given it works well...

Mygod · 2020-12-11T06:00:28Z

Sure but the fix suggested by the Google folk might be worth looking into.

madeye · 2020-12-11T07:58:21Z

I revert the change and tried on the Android 10 emulator:

With IPv6 routing enabled, any IPv4 LAN address cannot be reached.
Adding allowFamily() to the VPN builder doesn't help. The IPv4 LAN still cannot be reached.

This reverts commit cc840c9.

Mygod · 2020-12-11T15:39:06Z

Hmm all of a sudden I can reproduce this on my Android 10 device again. It does seem to be fixed in Android 11?

PRIHLOP · 2021-06-05T11:58:53Z

On Android 10 with ipv6 turned on in Wi-Fi network this issue is still happen.
Maybe it happens with ipv6 addressing in LAN?
In my case issue happens with v2ray plugin or without it(in tcp/udp mode).

Revert "Workaround for shadowsocks#2361"

madeye added the cannot reproduce label Nov 26, 2019

Mygod closed this as completed Nov 27, 2019

madeye added bug and removed cannot reproduce labels Nov 28, 2019

madeye reopened this Nov 28, 2019

madeye closed this as completed in e9e5c1c Nov 28, 2019

Mygod reopened this Dec 9, 2019

Mygod added the cannot reproduce label Dec 9, 2019

madeye mentioned this issue Dec 17, 2019

After connect to SS server , local network working abnormally #2387

Closed

17 tasks

bannedbook pushed a commit to bannedbook/SpeedUp.VPN that referenced this issue Dec 25, 2019

Fix shadowsocks#2361

e56c5f7

sanzo-mlgb mentioned this issue Jan 5, 2020

Bypass LAN still doesn't work. #2399

Closed

17 tasks

Mygod closed this as completed in 2571853 Jan 11, 2020

Mygod reopened this Jan 11, 2020

madeye removed the cannot reproduce label Feb 15, 2020

This comment has been minimized.

Sign in to view

Mygod added the third-party bug label Feb 16, 2020

Mygod added a commit that referenced this issue Feb 16, 2020

Workaround for #2361

cc840c9

Related bug: https://issuetracker.google.com/issues/149636790

madeye added a commit that referenced this issue Feb 17, 2020

Merge pull request #2440 from shadowsocks/workaround-2361

9f15ab5

Workaround for #2361

madeye removed the bug label Feb 17, 2020

Mygod closed this as completed Feb 18, 2020

huyz-git mentioned this issue Feb 29, 2020

安卓10连接v2rayNG之后导致手机开放的端口被filtered 2dust/v2rayNG#254

Closed

ghost mentioned this issue Apr 6, 2020

Unable to access Reddit when route mode is not ALL #2487

Closed

madeye added a commit that referenced this issue Dec 11, 2020

Revert "Workaround for #2361"

4d0090d

This reverts commit cc840c9.

LK26 added a commit to LK26/shadowsocks-android that referenced this issue Sep 24, 2021

Merge pull request #3 from shadowsocks/revert-2361

cc56df4

Revert "Workaround for shadowsocks#2361"

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bypass LAN doesn't work. #2361

Bypass LAN doesn't work. #2361

axxop commented Nov 22, 2019 •

edited

Loading

axxop commented Nov 28, 2019 •

edited

Loading

axxop commented Nov 28, 2019

iKirby commented Nov 28, 2019

madeye commented Nov 28, 2019

madeye commented Nov 28, 2019

axxop commented Nov 28, 2019

iKirby commented Nov 28, 2019

Mygod commented Dec 9, 2019

iKirby commented Dec 9, 2019

axxop commented Dec 9, 2019

Mygod commented Dec 9, 2019

madeye commented Dec 9, 2019

axxop commented Dec 9, 2019

Mygod commented Dec 13, 2019

madeye commented Dec 13, 2019

Mygod commented Dec 18, 2019

Mygod commented Dec 18, 2019

madeye commented Dec 22, 2019

x0r2d2 commented Jan 26, 2020 •

edited

Loading

LGA1150 commented Feb 5, 2020

BROBIRD commented Feb 15, 2020 •

edited

Loading

iKirby commented Feb 15, 2020

madeye commented Feb 15, 2020 •

edited

Loading

Mygod commented Feb 16, 2020 •

edited

Loading

This comment has been minimized.

Mygod commented Feb 18, 2020

Mygod commented Dec 11, 2020

madeye commented Dec 11, 2020

Mygod commented Dec 11, 2020

madeye commented Dec 11, 2020

Mygod commented Dec 11, 2020

madeye commented Dec 11, 2020

Mygod commented Dec 11, 2020

PRIHLOP commented Jun 5, 2021

Bypass LAN doesn't work. #2361

Bypass LAN doesn't work. #2361

Comments

axxop commented Nov 22, 2019 • edited Loading

axxop commented Nov 28, 2019 • edited Loading

axxop commented Nov 28, 2019

iKirby commented Nov 28, 2019

madeye commented Nov 28, 2019

madeye commented Nov 28, 2019

axxop commented Nov 28, 2019

iKirby commented Nov 28, 2019

Mygod commented Dec 9, 2019

iKirby commented Dec 9, 2019

axxop commented Dec 9, 2019

Mygod commented Dec 9, 2019

madeye commented Dec 9, 2019

axxop commented Dec 9, 2019

Mygod commented Dec 13, 2019

madeye commented Dec 13, 2019

Mygod commented Dec 18, 2019

Mygod commented Dec 18, 2019

madeye commented Dec 22, 2019

x0r2d2 commented Jan 26, 2020 • edited Loading

LGA1150 commented Feb 5, 2020

BROBIRD commented Feb 15, 2020 • edited Loading

iKirby commented Feb 15, 2020

madeye commented Feb 15, 2020 • edited Loading

Mygod commented Feb 16, 2020 • edited Loading

This comment has been minimized.

Mygod commented Feb 18, 2020

Mygod commented Dec 11, 2020

madeye commented Dec 11, 2020

Mygod commented Dec 11, 2020

madeye commented Dec 11, 2020

Mygod commented Dec 11, 2020

madeye commented Dec 11, 2020

Mygod commented Dec 11, 2020

PRIHLOP commented Jun 5, 2021

axxop commented Nov 22, 2019 •

edited

Loading

axxop commented Nov 28, 2019 •

edited

Loading

x0r2d2 commented Jan 26, 2020 •

edited

Loading

BROBIRD commented Feb 15, 2020 •

edited

Loading

madeye commented Feb 15, 2020 •

edited

Loading

Mygod commented Feb 16, 2020 •

edited

Loading