Skip to content

Blacklist (list of domains and IP ranges) for bypassing in tun mode is not applied. #794

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
1 task done
abbasnaqdi opened this issue Feb 10, 2025 · 5 comments
Open
1 task done

Comments

@abbasnaqdi
Copy link

Attention | توجه

  • I searched and no similar issues were found | جستجو کردم و هیچ گزارش مشابهی پیدا نشد

What Happened? | چه اتفاقی افتاده؟

Hello, in system proxy mode, the blocklist settings are applied well and everything is fine, but in tun mode, these settings are ignored and not applied.
This is a very important issue. Please add support for adding domains and IPs with regex in addition to geoip and geosite.
Thanks.

Minimal Reproducible Example | چه پروسه‌ای برای مشاهده این مشکل طی کرده‌اید؟

No response

Relevant log output | لاگ برنامه

[2025-02-10 04:46:03.958] [info]  Deleted past logs for new connection.
[2025-02-10 04:46:04.005] [info]  Setting up configs...
[2025-02-10 04:46:04.005] [info]  ------------------------MetaData------------------------
[2025-02-10 04:46:04.006] [info]  running on: Ubuntu (24.10) x64 
[2025-02-10 04:46:04.006] [info]  at od: v2.61.0
[2025-02-10 04:46:04.006] [info]  at wp: v1.2.5
[2025-02-10 04:46:04.006] [info]  at hp: v1.2.2
[2025-02-10 04:46:04.006] [info]  ls assets/bin: LICENSE,README.md,oblivion-helper,warp-plus,zag-netStats
[2025-02-10 04:46:04.006] [info]  method: gool
[2025-02-10 04:46:04.006] [info]  proxyMode: tun
[2025-02-10 04:46:04.006] [info]  routingRules: Customized
[2025-02-10 04:46:04.006] [info]  endpoint: default
[2025-02-10 04:46:04.006] [info]  ipType: v4/v6
[2025-02-10 04:46:04.006] [info]  tunAddrType: v64
[2025-02-10 04:46:04.006] [info]  dataUsage: false
[2025-02-10 04:46:04.006] [info]  asn: UNK
[2025-02-10 04:46:04.006] [info]  reserved: true
[2025-02-10 04:46:04.006] [info]  geo Ip: ir, Site: ir, Block: true, NSFW: false
[2025-02-10 04:46:04.006] [info]  testUrl https://connectivity.cloudflareclient.com/cdn-cgi/trace
[2025-02-10 04:46:04.006] [info]  exe: /opt/oblivion-desktop/oblivion-desktop
[2025-02-10 04:46:04.006] [info]  userData: /home/<USERNAME>/.config/oblivion-desktop
[2025-02-10 04:46:04.006] [info]  logs: /home/<USERNAME>/.config/oblivion-desktop/logs
[2025-02-10 04:46:04.006] [info]  ------------------------MetaData------------------------
[2025-02-10 04:46:04.007] [info]  ExportList config created at /home/<USERNAME>/.config/oblivion-desktop/sbExportList.json
[2025-02-10 04:46:04.007] [info]  Sing-Box config file has been created at /home/<USERNAME>/.config/oblivion-desktop/sbConfig.json
[2025-02-10 04:46:04.036] [info]  Starting Sing-Box...
[2025-02-10 04:46:04.115] [info]  Helper: Sing-Box started successfully.
[2025-02-10 04:46:04.117] [info]  Helper Status: started
[2025-02-10 04:46:04.120] [info]  Starting WarpPlus process...
[2025-02-10 04:46:04.121] [info]  /home/<USERNAME>/.config/oblivion-desktop/warp-plus --bind 127.0.0.1:2080 --gool --scan --dns 1.1.1.2
[2025-02-10 04:46:15.059] [info]  Waiting for connection...
[2025-02-10 04:46:15.061] [info]  Testing connection via https://connectivity.cloudflareclient.com/cdn-cgi/trace
[2025-02-10 04:46:17.688] [info]  Connection established after 1 attempts
time=2025-02-10T04:46:04.137+03:30 level=INFO msg="scanner mode enabled" max-rtt=1s
time=2025-02-10T04:46:04.138+03:30 level=INFO msg="successfully loaded warp identity" subsystem=warp/account
time=2025-02-10T04:46:07.653+03:30 level=ERROR msg="ping error" subsystem=scanner addr=162.159.193.181 error="error sending random packet: write udp 192.168.8.2:59521->162.159.193.181:5279: write: connection refused"
time=2025-02-10T04:46:08.140+03:30 level=INFO msg="using warp endpoints" endpoints="[188.114.97.209:945 162.159.192.231:2506]"
time=2025-02-10T04:46:08.140+03:30 level=INFO msg="running in warp-in-warp (gool) mode"
time=2025-02-10T04:46:08.140+03:30 level=INFO msg="successfully loaded warp identity" subsystem=warp/account
time=2025-02-10T04:46:13.644+03:30 level=INFO msg="connection test successful"
time=2025-02-10T04:46:13.645+03:30 level=INFO msg="successfully loaded warp identity" subsystem=warp/account
time=2025-02-10T04:46:15.058+03:30 level=INFO msg="connection test successful"
time=2025-02-10T04:46:15.058+03:30 level=INFO msg="serving proxy" address=127.0.0.1:2080
time=2025-02-10T04:46:19.793+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:46:19.793+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:46:19.793+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:46:19.793+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:46:19.793+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:46:19.843+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:46:19.843+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:46:19.843+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:46:19.843+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:46:19.843+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:46:35.151+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:46:35.152+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:47:07.272+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:47:07.390+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:48:11.304+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:48:11.444+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:48:23.377+03:30 level=ERROR msg="dial: lookup speedtest.pingless.com. on 1.1.1.2: read udp 172.16.0.2:62488: i/o timeout"
time=2025-02-10T04:50:21.407+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:50:21.525+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:53:48.564+03:30 level=ERROR msg="connect to rr4---sn-5hne6nsr.googlevideo.com:443 failed: listen udp 172.217.132.73:443: bind: cannot assign requested address"
time=2025-02-10T04:53:49.165+03:30 level=ERROR msg="connect to 172.217.132.73:443 failed: listen udp 172.217.132.73:443: bind: cannot assign requested address"
time=2025-02-10T04:53:49.766+03:30 level=ERROR msg="connect to 172.217.132.73:443 failed: listen udp 172.217.132.73:443: bind: cannot assign requested address"
time=2025-02-10T04:53:50.967+03:30 level=ERROR msg="connect to 172.217.132.73:443 failed: listen udp 172.217.132.73:443: bind: cannot assign requested address"
time=2025-02-10T04:53:52.864+03:30 level=ERROR msg="connect to 172.217.132.73:443 failed: listen udp 172.217.132.73:443: bind: cannot assign requested address"
time=2025-02-10T04:54:35.305+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:54:35.509+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:56:06.240+03:30 level=ERROR msg="connect to i.ytimg.com:443 failed: listen udp 216.58.206.54:443: bind: cannot assign requested address"
...
@ShadowZagrosDev
Copy link
Contributor

Hello,

Thank you for reporting this issue. I have tested the blacklist functionality in tunnel mode, and based on my results, it appears to be working correctly.

As shown in the first row of the attached screenshot, I added cloudflare.com and showmyip.com to the blacklist. When connecting through the app, the displayed country matches the expected one (United States).

In the second row, I opened these domains in a browser, and as expected, they resolved without using the tunnel, showing a different country (Iran).

In the third row, you can see two other domains that are not in the blacklist. Their results match the tunnel’s expected output (United States).

Based on these tests, the blacklist is being applied correctly in tunnel mode. I recommend clearing your browser cache or trying a fresh browser installation to ensure accurate results.

Let me know if you still face any issues!

Image

@abbasnaqdi
Copy link
Author

Hello @ShadowZagrosDev @, and thank you.

I've re-examined the issue, and it seems to be related to DNS. I work at a company that hosts several internal websites, and by default, our internal DNS resolves certain URLs.

For example, jira.company.co is resolved internally, allowing access to the website through a browser. However, when using TUN mode, this functionality is lost, and I can no longer access internal websites.

Although I have added both the IP range and the domain name to the blocking list, it does not take effect in TUN mode.

Image

@hasanxdev
Copy link

I have the exact same problem, and it's not working for me either. @abbasnaqdi @ShadowZagrosDev

@Shazehiy

This comment has been minimized.

@afshiniran

This comment has been minimized.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

10 participants
@abbasnaqdi @afshiniran @hasanxdev @ShadowZagrosDev @Shazehiy and others