Confusing Blacklist Feature

[NotSoMrAnderson]

Attention | توجه

• I searched and no similar issues were found | جستجو کردم و هیچ گزارش مشابهی پیدا نشد

What Happened? | چه اتفاقی افتاده؟

Hi this is more like question rather than a bug report, at this point I don't know either, before I saw this issue I would've thought the Blacklist feature intended functionality is to block the connection to/from the specific domain, app, ... but in the mentioned issue looks like after putting domains on blacklist user still has the connection to the domains (this reply), after seeing this I did a test and put domain:github.com in my blacklist and then tried to ping it through cmd this was the result :

As you can see looks like the packets are sent but with a weird timing despite I'm having difficulties reaching GitHub through Chrome browser and after disconnecting oblivion the connection goes normal. So what is the problem ?

P.S. I added a log from oblivion but looks like the app log is bugged and ignores the log level I changed in the setting (I changed it to debug) and there's no IP related to GitHub website I have tried to reach, and yes I exited oblivion and reopened it after I changed the log level.

P.P.S. block UDP option is disabled.

Minimal Reproducible Example | چه پروسه‌ای برای مشاهده این مشکل طی کرده‌اید؟

No response

Relevant log output | لاگ برنامه

[2025-05-17 21:46:24.001] [info]  Deleted past logs for new connection.
[2025-05-17 21:46:24.796] [info]  Setting up configs...
[2025-05-17 21:46:24.799] [info]  ------------------------MetaData------------------------
[2025-05-17 21:46:24.800] [info]  running on: Microsoft Windows 11 Enterprise (10.0.26100) x64 26100
[2025-05-17 21:46:24.800] [info]  at od: v2.90.6
[2025-05-17 21:46:24.800] [info]  at wp: v1.2.5
[2025-05-17 21:46:24.800] [info]  at hp: v1.2.2
[2025-05-17 21:46:24.801] [info]  ls assets/bin: LICENSE,oblivion-helper,proxy-reset.exe,README.md,vbs,warp-plus.exe,zag-netStats.exe
[2025-05-17 21:46:24.801] [info]  method: gool
[2025-05-17 21:46:24.801] [info]  proxyMode: tun
[2025-05-17 21:46:24.801] [info]  routingRules: Customized
[2025-05-17 21:46:24.802] [info]  endpoint: custom
[2025-05-17 21:46:24.803] [info]  ipType: v4
[2025-05-17 21:46:24.803] [info]  tunAddrType: v64
[2025-05-17 21:46:24.803] [info]  dataUsage: true
[2025-05-17 21:46:24.803] [info]  asn: MCI
[2025-05-17 21:46:24.803] [info]  reserved: true
[2025-05-17 21:46:24.803] [info]  geo Ip: ir, Site: ir, Block: false, NSFW: false
[2025-05-17 21:46:24.804] [info]  testUrl: https://connectivity.cloudflareclient.com/cdn-cgi/trace
[2025-05-17 21:46:24.804] [info]  dns: 1.1.1.1
[2025-05-17 21:46:24.804] [info]  exe: C:\Users\<USERNAME>\AppData\Local\Programs\oblivion-desktop\oblivion-desktop.exe
[2025-05-17 21:46:24.804] [info]  userData: C:\Users\<USERNAME>\AppData\Roaming\oblivion-desktop
[2025-05-17 21:46:24.804] [info]  logs: C:\Users\<USERNAME>\AppData\Roaming\oblivion-desktop\logs
[2025-05-17 21:46:24.805] [info]  ------------------------MetaData------------------------
[2025-05-17 21:46:24.805] [info]  ExportList config created at C:\Users\<USERNAME>\AppData\Roaming\oblivion-desktop\sbExportList.json
[2025-05-17 21:46:24.807] [info]  Sing-Box config file has been created at C:\Users\<USERNAME>\AppData\Roaming\oblivion-desktop\sbConfig.json
[2025-05-17 21:46:25.126] [info]  Starting Sing-Box...
[2025-05-17 21:46:25.596] [info]  Helper Status: started
[2025-05-17 21:46:25.597] [info]  Helper: Sing-Box started successfully.
[2025-05-17 21:46:25.600] [info]  Starting WarpPlus process...
[2025-05-17 21:46:25.601] [info]  C:\Users\<USERNAME>\AppData\Roaming\oblivion-desktop\warp-plus.exe --bind 127.0.0.1:8086 --gool --endpoint 162.159.195.26:4198
[2025-05-17 21:46:33.804] [info]  Waiting for connection...
[2025-05-17 21:46:33.805] [info]  Testing connection via https://connectivity.cloudflareclient.com/cdn-cgi/trace
[2025-05-17 21:46:36.044] [info]  Connection established after 1 attempts
[2025-05-17 21:46:36.047] [info]  Starting netStats...
time=2025-05-17T21:46:25.660+03:30 level=INFO msg="using warp endpoints" endpoints="[162.159.195.26:4198 162.159.195.26:4198]"
time=2025-05-17T21:46:25.661+03:30 level=INFO msg="running in warp-in-warp (gool) mode"
time=2025-05-17T21:46:25.662+03:30 level=INFO msg="successfully loaded warp identity" subsystem=warp/account
time=2025-05-17T21:46:32.493+03:30 level=INFO msg="connection test successful"
time=2025-05-17T21:46:32.493+03:30 level=INFO msg="successfully loaded warp identity" subsystem=warp/account
time=2025-05-17T21:46:33.804+03:30 level=INFO msg="connection test successful"
time=2025-05-17T21:46:33.804+03:30 level=INFO msg="serving proxy" address=127.0.0.1:8086
time=2025-05-17T21:47:21.129+03:30 level=ERROR msg="connect to 18.245.86.25:443 failed: listen udp 18.245.86.25:443: bind: The requested address is not valid in its context."
time=2025-05-17T21:47:22.039+03:30 level=ERROR msg="connect to 18.245.86.25:443 failed: listen udp 18.245.86.25:443: bind: The requested address is not valid in its context."
time=2025-05-17T21:47:22.595+03:30 level=ERROR msg="connect to 34.117.41.85:443 failed: listen udp 34.117.41.85:443: bind: The requested address is not valid in its context."
time=2025-05-17T21:47:22.906+03:30 level=ERROR msg="connect to 34.117.41.85:443 failed: listen udp 34.117.41.85:443: bind: The requested address is not valid in its context."
time=2025-05-17T21:47:23.025+03:30 level=ERROR msg="connect to 34.117.41.85:443 failed: listen udp 34.117.41.85:443: bind: The requested address is not valid in its context."
time=2025-05-17T21:47:23.246+03:30 level=ERROR msg="connect to 18.245.86.25:443 failed: listen udp 18.245.86.25:443: bind: The requested address is not valid in its context."
time=2025-05-17T21:47:23.514+03:30 level=ERROR msg="connect to 34.117.41.85:443 failed: listen udp 34.117.41.85:443: bind: The requested address is not valid in its context."
time=2025-05-17T21:47:23.930+03:30 level=ERROR msg="connect to 34.117.41.85:443 failed: listen udp 34.117.41.85:443: bind: The requested address is not valid in its context."
time=2025-05-17T21:47:24.720+03:30 level=ERROR msg="connect to 34.117.41.85:443 failed: listen udp 34.117.41.85:443: bind: The requested address is not valid in its context."
time=2025-05-17T21:47:25.137+03:30 level=ERROR msg="connect to 34.117.41.85:443 failed: listen udp 34.117.41.85:443: bind: The requested address is not valid in its context."
time=2025-05-17T21:47:25.137+03:30 level=ERROR msg="connect to 18.245.86.25:443 failed: listen udp 18.245.86.25:443: bind: The requested address is not valid in its context."
time=2025-05-17T21:47:26.592+03:30 level=ERROR msg="connect to 34.117.41.85:443 failed: listen udp 34.117.41.85:443: bind: The requested address is not valid in its context."
time=2025-05-17T21:47:27.026+03:30 level=ERROR msg="connect to 34.117.41.85:443 failed: listen udp 34.117.41.85:443: bind: The requested address is not valid in its context."

[ircfspace]

Hi,
By default, the app tries to route everything through the proxy—especially when you're using the Tun mode, which tunnels the entire system traffic through the proxy.

So, what does the blacklist do? It defines a list of items that should not go through the proxy. Instead, their traffic is routed directly (bypassing the proxy).

Here's a brief explanation of how the blacklist currently works:
https://github.com/bepass-org/oblivion-desktop/wiki/How-to-use-Routing-Rules

We're planning to improve this feature in the future by splitting it into a blacklist and a whitelist. This enhancement is already on our roadmap.

P.S: if you notice any bugs, feel free to report them in this issue.

[NotSoMrAnderson]

@ircfspace So if I understand this correctly, blacklist option is like v2rayN direct mode but only for the specified apps, domains, IPS, ... and if so then I should have the ability to make connection to the domain I specified in the list (in my case github.com).

[ircfspace]

Yes, you understood the purpose of the blacklist correctly.

Here are a few points to keep in mind:

1. The rules you add to the blacklist for GitHub should be as follows:

domain:github.io,  
domain:*.github.com,  
domain:github.io,  
domain:objects.githubusercontent.com,

2. I tested this behavior on a filtered domain in three scenarios: without WARP, with WARP, and with the blacklist applied in WARP. In all three cases, the behavior was correct.

3. Regarding GitHub, I encountered a similar issue and asked ChatGPT about it. The explanation was:
   GitHub uses CDNs (Content Delivery Networks) and Anycast IPs. This means a single IP address (e.g., 140.82.121.4) might route to the closest physical server in any given region, regardless of whether you're connecting through WARP or directly.
   Anycast allows users from different parts of the world to access the same IP address, but that IP can point to different physical locations based on the most optimal network path.

[NotSoMrAnderson]

Thanks about explanations, despite all this I used the rules you suggest and still after adding it and connecting in Gool mode I can't reach GitHub.com address unless I remove the rules and reconnect

[ircfspace]

So you mean the GitHub website doesn't open at all?
Have you set any specific DNS on your system?

[NotSoMrAnderson]

No I can't open GitHub.com after setting those rules and looks like the browser not even trying to, because when I try to reach the site not even the browser refresh indicator shows any signs of try, it just stops instantly after hitting refresh button and no I didn't set any DNS myself, I checked this by manually checking the interfaces (both tun0 and my Ethernet), my Ethernet DNS fields (both ipv4 and ipv6) are empty and tun interface DNS is set to these values (not by me), also application DNS setting is default (Cloudflare)

[ircfspace]

Reset the settings to the empty (default) state.
Which browser are you using? Do you have any proxy or tunnel extensions installed on it?

[NotSoMrAnderson]

I'm currently on the latest version of Chrome browser, no I don't have any proxy, VPN, tunnel extension installed and enabled the closest thing to these was this and I disabled it and then proceed to test the things I'm going to mention.

Keep that in mind that I'm using the rule set that oblivion app offers

domain:!test.ir,
ip:127.0.0.1,
domain:*.ir,
domain:dolat.ir,
domain:apps.apple.com,
app:Figma,
domain:figma.com,
domain:github.com,
domain:objects.githubusercontent.com,
domain:meet.google.com,
domain:bargheman.com,
domain:digikala.com,
domain:web.whatsapp.com,
domain:aparat.com

It's look the defaulting and clearing the DNS settings on tun0 interface did the trick for GitHub.com (or Figma and meet.Google) but for the sites like digikala.com, snappfood.ir, bargheman.com which have Iran based servers have trouble making connection (in this case browser show that it's attempting to reach mentioned IR base sites)

[NotSoMrAnderson]

And btw no I'm not using (not currently active or run in parallel) apps like v2rayN or Nekobox or such on my device either

[ircfspace]

Completely uninstall the mentioned extension and test again.
I feel like something is causing interference for you; otherwise, I don’t see any issues in my own tests.

[NotSoMrAnderson]

Uninstalled it, still tun0 will set the DNS after connecting, so I cleared it then tested on mentioned websites in my last response still IR URLs have problem