关于 Passwall2 插件的异常流量

[zchyit]

在 iStore 安装的 passwall2 ，关闭了本机和局域网透明代理，访问控制也是未启用。 我理解这时应该没有客户端使用 passwall2 ，但是我在日志中看到 127.0.0.1 发起了一些访问，这是什么原因？ 截取的日志

Xray 1.8.23 (Xray, Penetrates Everything.) OpenWrt (go1.22.5 linux/amd64)
2024/08/20 16:33:11 [Info] infra/conf/serial: Reading config: /tmp/etc/passwall2/acl/default/global.json
2024/08/20 16:33:11 [Debug] app/log: Logger started
2024/08/20 16:33:11 [Info] app/dns: DNS: created UDP client initialized for 127.0.0.1:15354
2024/08/20 16:33:11 [Info] app/dns: DNS: created Remote DOH client for https://1.1.1.1/dns-query
2024/08/20 16:33:11 [Info] app/dns: DNS: created UDP client initialized for 127.0.0.1:15354
2024/08/20 16:33:11 [Info] app/dns: DNS: created UDP client initialized for 127.0.0.1:15354
2024/08/20 16:33:11 [Info] app/dns: DNS: created Remote DOH client for https://1.1.1.1/dns-query
2024/08/20 16:33:11 [Debug] app/router: MphDomainMatcher is enabled for 73786 domain rule(s)
2024/08/20 16:33:11 [Debug] app/router: MphDomainMatcher is enabled for 169 domain rule(s)
2024/08/20 16:33:12 [Debug] app/router: MphDomainMatcher is enabled for 90322 domain rule(s)
2024/08/20 16:33:12 [Debug] app/router: MphDomainMatcher is enabled for 7286 domain rule(s)
2024/08/20 16:33:12 [Debug] app/proxyman/inbound: creating stream worker on 127.0.0.1:1070
2024/08/20 16:33:12 [Debug] app/proxyman/inbound: creating stream worker on 0.0.0.0:1041
2024/08/20 16:33:12 [Debug] app/proxyman/inbound: creating stream worker on 127.0.0.1:15353
2024/08/20 16:33:12 [Info] transport/internet/udp: listening UDP on 0.0.0.0:1041
2024/08/20 16:33:12 [Info] transport/internet/tcp: listening TCP on 127.0.0.1:15353
2024/08/20 16:33:12 [Info] transport/internet/udp: listening UDP on 127.0.0.1:15353
2024/08/20 16:33:12 [Info] transport/internet/tcp: listening TCP on 127.0.0.1:1070
2024/08/20 16:33:12 [Info] transport/internet/udp: listening UDP on 127.0.0.1:1070
2024/08/20 16:33:12 [Info] transport/internet/tcp: listening TCP on 0.0.0.0:1041
2024/08/20 16:33:12 [Warning] core: Xray 1.8.23 started
2024/08/20 16:33:14 [Debug] [1671828220] proxy/dokodemo: processing connection from: 127.0.0.1:38098
2024/08/20 16:33:14 [Info] [1671828220] proxy/dokodemo: received request for 127.0.0.1:38098
2024/08/20 16:33:14 [Info] [1671828220] app/dispatcher: taking detour [dns-out] for [udp:0.0.0.0:0]
2024/08/20 16:33:14 [Info] [1671828220] proxy/dns: handling DNS traffic to udp:127.0.0.1:15354
2024/08/20 16:33:14 127.0.0.1:38098 accepted udp:0.0.0.0:0 [dns-in -> dns-out]
2024/08/20 16:33:14 [Debug] app/dns: domain www.baidu.com matches following rules: [geosite:cn(DNS idx:3)]
2024/08/20 16:33:14 [Debug] app/dns: domain www.baidu.com will use DNS in order: [UDP:127.0.0.1:15354]
2024/08/20 16:33:14 [Debug] app/dns: UDP:127.0.0.1:15354 querying DNS for: www.baidu.com.
2024/08/20 16:33:14 [Debug] transport/internet/udp: dispatch request to: udp:127.0.0.1:15354
2024/08/20 16:33:14 [Info] transport/internet/udp: establishing new connection for udp:127.0.0.1:15354
2024/08/20 16:33:14 [Info] app/dispatcher: taking detour [direct] for [udp:127.0.0.1:15354]
2024/08/20 16:33:14 [Debug] transport/internet: dialing to udp:127.0.0.1:15354
2024/08/20 16:33:14 DNS accepted udp:127.0.0.1:15354 [dns-in1 -> direct]
2024/08/20 16:33:14 [Info] proxy/freedom: connection opened to udp:127.0.0.1:15354, local endpoint [::]:43750, remote endpoint 127.0.0.1:15354
2024/08/20 16:33:14 [Info] app/dns: UDP:127.0.0.1:15354 got answer: www.baidu.com. TypeA -> [180.101.50.188 180.101.50.242] 3.181456ms
2024/08/20 16:33:14 [Debug] app/dns: UDP:127.0.0.1:15354 updating IP records for domain:www.baidu.com.
2024/08/20 16:33:27 [Debug] [2770970757] proxy/dokodemo: processing connection from: 127.0.0.1:45321
2024/08/20 16:33:27 [Info] [2770970757] proxy/dokodemo: received request for 127.0.0.1:45321
2024/08/20 16:33:27 [Info] [2770970757] app/dispatcher: taking detour [dns-out] for [udp:0.0.0.0:0]
2024/08/20 16:33:27 [Info] [2770970757] proxy/dns: handling DNS traffic to udp:127.0.0.1:15354
2024/08/20 16:33:27 127.0.0.1:45321 accepted udp:0.0.0.0:0 [dns-in -> dns-out]
2024/08/20 16:33:27 [Debug] app/dns: domain api2.mina.mi.com matches following rules: [geosite:cn(DNS idx:3)]
2024/08/20 16:33:27 [Debug] app/dns: domain api2.mina.mi.com will use DNS in order: [UDP:127.0.0.1:15354]
2024/08/20 16:33:27 [Debug] app/dns: UDP:127.0.0.1:15354 querying DNS for: api2.mina.mi.com.
2024/08/20 16:33:27 [Debug] transport/internet/udp: dispatch request to: udp:127.0.0.1:15354
2024/08/20 16:33:27 [Info] app/dns: UDP:127.0.0.1:15354 got answer: api2.mina.mi.com. TypeA -> [118.26.252.49] 3.139252ms
2024/08/20 16:33:27 [Debug] app/dns: UDP:127.0.0.1:15354 updating IP records for domain:api2.mina.mi.com.
2024/08/20 16:33:27 [Debug] [3886656209] proxy/dokodemo: processing connection from: 127.0.0.1:39117
2024/08/20 16:33:27 [Info] [3886656209] proxy/dokodemo: received request for 127.0.0.1:39117
2024/08/20 16:33:27 [Info] [3886656209] app/dispatcher: taking detour [dns-out] for [udp:0.0.0.0:0]
2024/08/20 16:33:27 [Info] [3886656209] proxy/dns: handling DNS traffic to udp:127.0.0.1:15354
2024/08/20 16:33:27 127.0.0.1:39117 accepted udp:0.0.0.0:0 [dns-in -> dns-out]
2024/08/20 16:33:27 [Debug] app/dns: domain api2.mina.mi.com matches following rules: [geosite:cn(DNS idx:3)]
2024/08/20 16:33:27 [Debug] app/dns: domain api2.mina.mi.com will use DNS in order: [UDP:127.0.0.1:15354]
2024/08/20 16:33:27 [Debug] app/dns: UDP:127.0.0.1:15354 cache HIT api2.mina.mi.com -> [240e:83:201:74f0::a 240e:929:1:3f::12]
2024/08/20 16:33:27 [Debug] [3726318870] proxy/dokodemo: processing connection from: 127.0.0.1:43946
2024/08/20 16:33:27 [Info] [3726318870] proxy/dokodemo: received request for 127.0.0.1:43946
2024/08/20 16:33:27 [Info] [3726318870] app/dispatcher: taking detour [dns-out] for [udp:0.0.0.0:0]
2024/08/20 16:33:27 127.0.0.1:43946 accepted udp:0.0.0.0:0 [dns-in -> dns-out]
2024/08/20 16:33:27 [Info] [3726318870] proxy/dns: handling DNS traffic to udp:127.0.0.1:15354
2024/08/20 16:33:27 [Debug] app/dns: domain www.baidu.com matches following rules: [geosite:cn(DNS idx:3)]
2024/08/20 16:33:27 [Debug] app/dns: domain www.baidu.com will use DNS in order: [UDP:127.0.0.1:15354]
2024/08/20 16:33:27 [Debug] app/dns: UDP:127.0.0.1:15354 cache HIT www.baidu.com -> [240e:e9:6002:15a:0:ff:b05c:1278 240e:e9:6002:15c:0:ff:b015:146f]
2024/08/20 16:33:27 [Debug] [2193923686] proxy/dokodemo: processing connection from: 127.0.0.1:48395
2024/08/20 16:33:27 [Info] [2193923686] proxy/dokodemo: received request for 127.0.0.1:48395
2024/08/20 16:33:27 [Info] [2193923686] app/dispatcher: taking detour [dns-out] for [udp:0.0.0.0:0]
2024/08/20 16:33:27 [Debug] [3078266072] proxy/dokodemo: processing connection from: 127.0.0.1:57542
2024/08/20 16:33:27 [Info] [2193923686] proxy/dns: handling DNS traffic to udp:127.0.0.1:15354
2024/08/20 16:33:27 [Info] [3078266072] proxy/dokodemo: received request for 127.0.0.1:57542
2024/08/20 16:33:27 127.0.0.1:48395 accepted udp:0.0.0.0:0 [dns-in -> dns-out]
2024/08/20 16:33:27 [Info] [3078266072] app/dispatcher: taking detour [dns-out] for [udp:0.0.0.0:0]
2024/08/20 16:33:27 [Info] [3078266072] proxy/dns: handling DNS traffic to udp:127.0.0.1:15354
2024/08/20 16:33:27 127.0.0.1:57542 accepted udp:0.0.0.0:0 [dns-in -> dns-out]
2024/08/20 16:33:27 [Debug] app/dns: domain www.meituan.com matches following rules: [geosite:cn(DNS idx:3)]
2024/08/20 16:33:27 [Debug] app/dns: domain www.meituan.com will use DNS in order: [UDP:127.0.0.1:15354]
2024/08/20 16:33:27 [Debug] app/dns: UDP:127.0.0.1:15354 querying DNS for: www.meituan.com.
2024/08/20 16:33:27 [Debug] app/dns: domain www.meituan.com matches following rules: [geosite:cn(DNS idx:3)]
2024/08/20 16:33:27 [Debug] app/dns: domain www.meituan.com matches following rules: [geosite:cn(DNS idx:3)]
2024/08/20 16:33:27 [Debug] app/dns: domain www.meituan.com will use DNS in order: [UDP:127.0.0.1:15354]
2024/08/20 16:33:27 [Debug] app/dns: domain www.meituan.com will use DNS in order: [UDP:127.0.0.1:15354]
2024/08/20 16:33:27 [Debug] transport/internet/udp: dispatch request to: udp:127.0.0.1:15354
2024/08/20 16:33:27 [Debug] app/dns: UDP:127.0.0.1:15354 querying DNS for: www.meituan.com.
2024/08/20 16:33:27 [Debug] app/dns: UDP:127.0.0.1:15354 querying DNS for: www.meituan.com.
2024/08/20 16:33:27 [Debug] transport/internet/udp: dispatch request to: udp:127.0.0.1:15354
2024/08/20 16:33:27 [Debug] transport/internet/udp: dispatch request to: udp:127.0.0.1:15354
2024/08/20 16:33:27 [Debug] app/dns: domain www.meituan.com matches following rules: [geosite:cn(DNS idx:3)]
2024/08/20 16:33:27 [Debug] app/dns: domain www.meituan.com will use DNS in order: [UDP:127.0.0.1:15354]
2024/08/20 16:33:27 [Debug] app/dns: UDP:127.0.0.1:15354 querying DNS for: www.meituan.com.
2024/08/20 16:33:27 [Debug] transport/internet/udp: dispatch request to: udp:127.0.0.1:15354
2024/08/20 16:33:27 [Info] app/dns: UDP:127.0.0.1:15354 got answer: www.meituan.com. TypeA -> [103.37.152.41 101.236.69.56] 3.734175ms
2024/08/20 16:33:27 [Debug] app/dns: UDP:127.0.0.1:15354 updating IP records for domain:www.meituan.com.
2024/08/20 16:33:27 [Info] app/dns: UDP:127.0.0.1:15354 got answer: www.meituan.com. TypeA -> [103.37.152.41 101.236.69.56] 3.592962ms
2024/08/20 16:33:27 [Debug] app/dns: UDP:127.0.0.1:15354 updating IP records for domain:www.meituan.com.
2024/08/20 16:33:27 [Info] app/dns: UDP:127.0.0.1:15354 got answer: www.meituan.com. TypeAAAA -> [[2405:1480:2000:3::a]] 3.779467ms
2024/08/20 16:33:27 [Debug] app/dns: UDP:127.0.0.1:15354 updating IP records for domain:www.meituan.com.
2024/08/20 16:33:27 [Info] app/dns: UDP:127.0.0.1:15354 got answer: www.meituan.com. TypeAAAA -> [[2405:1480:2000:3::a]] 3.791365ms
2024/08/20 16:33:27 [Debug] app/dns: UDP:127.0.0.1:15354 updating IP records for domain:www.meituan.com.

[chanwang]

保存并应用了吗？显示已停止了吗？

[zchyit]

@chanwang #1 xray 已经重启成功了，日志中可以看到。