Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Bug] 打开 插件设置 > IPV6设置 里的 代理IPV6流量，Tun接口启动报错：permission denied #3850

Open
5 of 7 tasks
patsnap-guyong opened this issue Apr 18, 2024 · 2 comments
Open
5 of 7 tasks

[Bug] 打开 插件设置 > IPV6设置 里的 代理IPV6流量，Tun接口启动报错：permission denied #3850

patsnap-guyong opened this issue Apr 18, 2024 · 2 comments
Labels
bug Something isn't working

Comments

@patsnap-guyong
Copy link

patsnap-guyong commented Apr 18, 2024 •
edited

Verify Steps

  • Tracker 我已经在 Issue Tracker 中找过我要提出的问题
  • Branch 我知道 OpenClash 的 Dev 分支切换开关位于插件设置-版本更新中，或者我会手动下载并安装 Dev 分支的 OpenClash
  • Latest 我已经使用最新 Dev 版本测试过，问题依旧存在
  • Relevant 我知道 OpenClash 与 内核(Core)、控制面板(Dashboard)、在线订阅转换(Subconverter)等项目之间无直接关系，仅相互调用
  • Definite 这确实是 OpenClash 出现的问题
  • Contributors 我有能力协助 OpenClash 开发并解决此问题
  • Meaningless 我提交的是无意义的催促更新或修复请求

OpenClash Version

v0.46.003-beta

Bug on Environment

Immortalwrt

OpenWrt Version

ImmortalWrt 23.05.2

Bug on Platform

Linux-amd64(x86-64)

Describe the Bug

[Bug] 打开 插件设置 > IPV6设置 里的 代理IPV6流量，Tun接口启动报错：permission denied

To Reproduce

打开 插件设置 > IPV6设置 里的 代理IPV6流量

OpenClash Log

Core Log:

2024-04-18 16:57:20 level=info msg="Start initial Compatible provider default"
2024-04-18 16:57:20 level=info msg="Start initial Compatible provider 🚀 节点选择"
2024-04-18 16:57:20 level=info msg="Start initial Compatible provider 🔯 故障转移"
2024-04-18 16:57:20 level=info msg="Start initial Compatible provider 🎯 自动选择"
2024-04-18 16:57:20 level=info msg="Start initial Compatible provider 🇭🇰 香港节点"
2024-04-18 16:57:20 level=info msg="Start initial Compatible provider 🇺🇸 美国节点"
2024-04-18 16:57:20 level=info msg="Start initial Compatible provider 🇸🇬 新加坡节点"
2024-04-18 16:57:20 level=info msg="Start initial Compatible provider 🎥 Netflix"
2024-04-18 16:57:20 level=info msg="Start initial Compatible provider 📹 Youtube"
2024-04-18 16:57:20 level=info msg="Start initial Compatible provider 🖥️ ChatGPT/NewBing"
2024-04-18 16:57:20 level=info msg="Start initial Compatible provider 🌎 其他国家"
2024-04-18 16:57:20 level=error msg="Start TUN listening error: configure tun interface: permission denied"
2024-04-18 16:57:20 level=info msg="Mixed(http+socks) proxy listening at: [::]:7893"
2024-04-18 16:57:20 level=info msg="TProxy server listening at: [::]:7895"
2024-04-18 16:57:20 level=info msg="Redirect proxy listening at: [::]:7892"
2024-04-18 16:57:20 level=info msg="SOCKS proxy listening at: [::]:7891"
2024-04-18 16:57:20 level=info msg="HTTP proxy listening at: [::]:7890"
2024-04-18 16:57:20 level=info msg="DNS server listening at: [::]:7874"
2024-04-18 16:57:20 level=info msg="Sniffer is loaded and working"
2024-04-18 16:57:20 level=info msg="Authentication of local server updated"
2024-04-18 16:57:20 level=info msg="RESTful API listening at: [::]:9090"
2024-04-18 16:57:20 level=info msg="Initial configuration complete, total time: 1236ms"
2024-04-18 16:57:20 level=warning msg="Deprecated: Use Sniff instead"
2024-04-18 16:57:20 level=info msg="Start initial GeoSite dns fallback filter `gfw`, records: 6096"
2024-04-18 16:57:20 level=warning msg="replace fallback-filter.geosite with nameserver-policy, it will be removed in the future"
2024-04-18 16:57:19 level=info msg="Geosite Matcher implementation: succinct"
2024-04-18 16:57:19 level=info msg="Geodata Loader mode: memconservative"
2024-04-18 16:57:19 level=info msg="Start initial configuration in progress"
2024-04-18 16:57:17 level=info msg="Initial configuration complete, total time: 808ms"
2024-04-18 16:57:17 level=warning msg="Deprecated: Use Sniff instead"
2024-04-18 16:57:17 level=info msg="Start initial GeoSite dns fallback filter `gfw`, records: 6096"
2024-04-18 16:57:17 level=warning msg="replace fallback-filter.geosite with nameserver-policy, it will be removed in the future"
2024-04-18 16:57:16 level=info msg="Geosite Matcher implementation: succinct"
2024-04-18 16:57:16 level=info msg="Geodata Loader mode: memconservative"
2024-04-18 16:57:16 level=info msg="Start initial configuration in progress"


>>>>> OpenClash Log: <<<<<<<

2024-04-18 08:57:57 configuration file【/etc/openclash/ENET.yaml】test is successful
2024-04-18 08:57:55 Test The Config File First...
2024-04-18 08:57:55 Tip: Detected The Exclusive Function of The Meta Core, Use Meta Core to Start...
2024-04-18 08:57:51 Warning: TUN Interface Start Failed, Try to Restart Again...
2024-04-18 08:57:37 configuration file【/etc/openclash/ENET.yaml】test is successful
2024-04-18 08:57:35 Test The Config File First...
2024-04-18 08:57:35 Tip: Detected The Exclusive Function of The Meta Core, Use Meta Core to Start...
2024-04-18 08:57:31 Warning: TUN Interface Start Failed, Try to Restart Again...
2024-04-18 08:57:17 configuration file【/etc/openclash/ENET.yaml】test is successful
2024-04-18 08:57:15 Test The Config File First...
2024-04-18 08:57:15 Tip: Detected The Exclusive Function of The Meta Core, Use Meta Core to Start...
2024-04-18 08:57:11 Warning: TUN Interface Start Failed, Try to Restart Again...
2024-04-18 08:56:08 Tip: Waiting for TUN Interface Start...
2024-04-18 08:56:08 Warning: Can't Settting Only Intranet Allowed Function, Get IPv4 WAN Interfaces error, Please Verify The Firewall's WAN Zone Name is wan, Ignore This IF The Device Does not Have a WAN Interfaces...
2024-04-18 08:56:08 Tip: Firewall4 was Detected, Use NFTABLE Rules...
2024-04-18 08:56:08 Tip: IPv6 Proxy Mode is TUN...
2024-04-18 08:56:08 Tip: DNS Hijacking Mode is Dnsmasq Redirect...
2024-04-18 08:56:08 Step 7: Set Firewall Rules...
2024-04-18 08:56:08 Step 6: Wait For The File Downloading...
2024-04-18 08:56:05 Step 5: Check The Core Status...
2024-04-18 08:56:04 configuration file【/etc/openclash/ENET.yaml】test is successful
2024-04-18 08:56:02 Test The Config File First...
2024-04-18 08:56:02 Tip: Detected The Exclusive Function of The Meta Core, Use Meta Core to Start...
2024-04-18 08:56:02 Step 4: Start Running The Clash Core...
2024-04-18 08:56:02 Tip: Start Running Custom Overwrite Scripts...
2024-04-18 08:56:01 Tip: You have seted the authentication of SOCKS5/HTTP(S) proxy with【Clash:123456】
2024-04-18 08:56:00 Step 3: Modify The Config File...
2024-04-18 08:56:00 Tip: Because of the file【 /etc/config/openclash 】modificated, Pause quick start...
2024-04-18 08:56:00 Step 2: Check The Components...
2024-04-18 08:56:00 Step 1: Get The Configuration...
2024-04-18 08:56:00 OpenClash Start Running...

OpenClash Config

config openclash 'config'
        option proxy_port '7892'
        option tproxy_port '7895'
        option mixed_port '7893'
        option socks_port '7891'
        option http_port '7890'
        option dns_port '7874'
        option enable '1'
        option update '0'
        option en_mode 'redir-host-tun'
        option auto_update '0'
        option cn_port '9090'
        option dashboard_password '123456'
        option dashboard_forward_ssl '0'
        option rule_source '0'
        option enable_custom_dns '1'
        option ipv6_enable '0'
        option ipv6_dns '0'
        option enable_custom_clash_rules '0'
        option other_rule_auto_update '0'
        option core_version 'linux-amd64'
        option enable_redirect_dns '1'
        option servers_if_update '0'
        option servers_update '0'
        option log_level '0'
        option proxy_mode 'rule'
        option intranet_allowed '1'
        option disable_udp_quic '0'
        option lan_ac_mode '0'
        option operation_mode 'redir-host'
        option enable_rule_proxy '0'
        option redirect_dns '0'
        option cachesize_dns '0'
        option filter_aaaa_dns '0'
        option small_flash_memory '0'
        option interface_name '0'
        option common_ports '0'
        option log_size '1024'
        option tolerance '0'
        option store_fakeip '0'
        option custom_fallback_filter '1'
        option custom_fakeip_filter '0'
        option custom_host '0'
        option custom_name_policy '0'
        option append_wan_dns '0'
        option stream_domains_prefetch '0'
        option stream_auto_select '0'
        option bypass_gateway_compatible '1'
        option github_address_mod '0'
        option urltest_address_mod '0'
        option urltest_interval_mod '0'
        option delay_start '0'
        option router_self_proxy '1'
        option release_branch 'master'
        option enable_meta_core '1'
        option dashboard_type 'Official'
        option yacd_type 'Official'
        option append_default_dns '0'
        option geo_custom_url 'https://testingcf.jsdelivr.net/gh/alecthw/mmdb_china_ip_list@release/lite/Country.mmdb'
        option chnr_custom_url 'https://ispip.clang.cn/all_cn.txt'
        option chnr6_custom_url 'https://ispip.clang.cn/all_cn_ipv6.txt'
        option cndomain_custom_url 'https://testingcf.jsdelivr.net/gh/felixonmars/dnsmasq-china-list@master/accelerated-domains.china.conf'
        option default_resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
        option config_reload '1'
        option config_path '/etc/openclash/config/ENET.yaml'
        option restricted_mode '0'
        option stack_type 'system'
        option skip_proxy_address '0'
        option china_ip_route '0'
        option geo_auto_update '0'
        option geo_update_week_time '1'
        option geo_update_day_time '0'
        option geoip_auto_update '0'
        option geosite_auto_update '0'
        option chnr_auto_update '0'
        option chnr_update_week_time '1'
        option chnr_update_day_time '0'
        option auto_restart '0'
        option auto_restart_week_time '1'
        option auto_restart_day_time '0'
        option core_type 'Meta'
        option proxy_dns_group 'Disable'
        option keep_alive_interval '0'
        option find_process_mode '0'
        option global_client_fingerprint '0'
        option geodata_loader '0'
        option enable_geoip_dat '0'
        option enable_meta_sniffer '1'
        option enable_meta_sniffer_pure_ip '1'
        option enable_meta_sniffer_custom '0'
        option disable_masq_cache '1'
        option enable_custom_domain_dns_server '0'
        option dnsmasq_resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
        option dnsmasq_noresolv '0'

config dns_servers
        option type 'udp'
        option ip '192.168.0.1'
        option enabled '1'
        option group 'default'

config dns_servers
        option group 'fallback'
        option type 'udp'
        option ip '192.168.0.254'
        option enabled '1'

config dns_servers
        option enabled '1'
        option group 'nameserver'
        option ip '192.168.0.253'
        option type 'udp'

config authentication
        option enabled '1'
        option username 'Clash'
        option password '123'

config config_subscribe
        option enabled '1'
        option name 'ENET'
        option address 'https://159.75.130.241/easynet/api/v1/client/subscribe?token=c3ccfdfb2e178c56c43ab4c9e23f1111'
        option sub_ua 'Clash'
        option sub_convert '0'

Expected Behavior

可以启动成功，并解析IPV6流量

Additional Context

No response
@patsnap-guyong patsnap-guyong added the bug Something isn't working label Apr 18, 2024
@vernesong
Copy link
Owner

不开v6的tun模式呢

@patsnap-guyong
Copy link
Author

不开v6的tun模式呢

我的运行模式是tun，这种情况下 v6 选择哪一种都会重现这个错误
ImmortalWrt很早的版本也试过，一样的表现

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Something isn't working
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@vernesong @patsnap-guyong