EGOISTK21

@dingli900201 我的也挂了，去售后换了新款

便宜的五速看看 tp ，ST1008

量子空间

RB5009U 7.1.3 MA5671A IPv6 正常 bond IPv6-ND-MTU 1480 正常访问 https://www.zhihu.com/

@EVJohn @chaim 多谢多谢，真解决了，是 17.0.0.0/8 的问题，我在第 4 个连接中的 nchnroutes/Makefile 中增加了对这段 IP 的排除，就不会被 OSPF 转发到 Ubuntu ，是 RouterOS 直连了。

@chaim 谢谢，有点东西，看来写教程的都没 HomePod ，我下班回去就试试。另外有什么讲 Apple/Google 推送机制的入门文章吗，我之前也怀疑过是 apns 的问题，但找不到确切的解决方法。

@EVJohn 好的，谢谢提供思路

```sh
ip rule add fwmark 1 table 100
ip route add local 0.0.0.0/0 dev lo table 100
iptables -t mangle -N XRAY
iptables -t mangle -A XRAY -d 127.0.0.0/8 -j RETURN
iptables -t mangle -A XRAY -d 192.168.21.0/24 -j RETURN
iptables -t mangle -A XRAY -d 224.0.0.0/3 -j RETURN
iptables -t mangle -A XRAY -p tcp -j TPROXY --on-port 12345 --tproxy-mark 1
iptables -t mangle -A XRAY -p udp -j TPROXY --on-port 12345 --tproxy-mark 1
iptables -t mangle -A PREROUTING -j XRAY
iptables -t mangle -N XRAY_MASK
iptables -t mangle -A XRAY_MASK -m owner --gid-owner 23333 -j RETURN
iptables -t mangle -A XRAY_MASK -d 127.0.0.0/8 -j RETURN
iptables -t mangle -A XRAY_MASK -d 192.168.21.0/24 -j RETURN
iptables -t mangle -A XRAY_MASK -d 224.0.0.0/3 -j RETURN
iptables -t mangle -A XRAY_MASK -j MARK --set-mark 1
iptables -t mangle -A OUTPUT -p tcp -j XRAY_MASK
iptables -t mangle -A OUTPUT -p udp -j XRAY_MASK
```


```json
{
"log": {
"loglevel": "warning",
"error": "/var/log/xray/error.log",
"access": "/var/log/xray/access.log"
},
"dns": {
"hosts": {
... ,
"geosite:category-ads-all": "127.0.0.1"
},
"servers": [
{
"address": "8.8.8.8",
"domains": [
"geosite:geolocation-!cn"
],
"expectIPs": [
"geoip:!cn"
]
},
{
"address": "1.1.1.1",
"domains": [
"geosite:geolocation-!cn"
],
"expectIPs": [
"geoip:!cn"
]
},
{
"address": "223.5.5.5",
"domains": [
"geosite:cn",
"geosite:[email protected]"
],
"expectIPs": [
"geoip:cn"
]
},
{
"address": "114.114.114.114",
"domains": [
"geosite:cn",
"geosite:[email protected]"
]
},
"202.101.172.35"
]
},
"routing": {
"domainStrategy": "IPOnDemand",
"rules": [
{
"type": "field",
"inboundTag": "all-in",
"port": 53,
"outboundTag": "dns-out"
},
{
"type": "field",
"protocol": [
"bittorrent"
],
"outboundTag": "direct"
},
{
"type": "field",
"domain": [
"geosite:category-ads-all"
],
"outboundTag": "block"
},
{
"type": "field",
"ip": [
"8.8.8.8",
"8.8.4.4",
"1.1.1.1"
],
"outboundTag": "proxy"
},
{
"type": "field",
"ip": [
"223.5.5.5",
"114.114.114.114",
"202.101.172.35"
],
"outboundTag": "direct"
},
{
"type": "field",
"domain": [
"geosite:private",
"geosite:apple-cn",
"geosite:google-cn",
"geosite:tld-cn",
"geosite:[email protected]"
],
"outboundTag": "direct"
},
{
"type": "field",
"domain": [
"geosite:geolocation-!cn"
],
"outboundTag": "proxy"
},
{
"type": "field",
"ip": [
"geoip:!cn",
"geoip:telegram"
],
"outboundTag": "proxy"
},
{
"type": "field",
"domain": [
"geosite:cn"
],
"outboundTag": "direct"
},
{
"type": "field",
"network": "tcp,udp",
"outboundTag": "proxy"
}
]
},
"inbounds": [
{
"tag": "all-in",
"port": 12345,
"protocol": "dokodemo-door",
"settings": {
"network": "tcp,udp",
"followRedirect": true
},
"sniffing": {
"enabled": true,
"excludedDomain": "Mijia Cloud",
"destOverride": [
"http",
"tls"
]
},
"streamSettings": {
"sockopt": {
"tproxy": "tproxy"
}
}
}
],
"outbounds": [
{
"tag": "proxy",
...
},
"streamSettings": {
"network": "tcp",
"security": "xtls"
}
},
{
"tag": "direct",
"protocol": "freedom",
"settings": {
"domainStrategy": "UseIPv4"
}
},
{
"tag": "block",
"protocol": "blackhole"
},
{
"tag": "dns-out",
"protocol": "dns",
"settings": {
"address": "8.8.8.8"
}
}
]
}
```

@1CeMan 多谢，经我多方求证，ros 就没有支持 2.5G 的光口，我买了个 st5008f v2