Skip to content

refine winroute#6478

Open
LjhAUMEM wants to merge 12 commits into
XTLS:mainfrom
LjhAUMEM:refine-winroute
Open

refine winroute#6478
LjhAUMEM wants to merge 12 commits into
XTLS:mainfrom
LjhAUMEM:refine-winroute

Conversation

@LjhAUMEM

Copy link
Copy Markdown
Collaborator

closes #6454

  • 处理 ERROR_NOT_FOUND 与重试,CreateAdapter 返回的 luid 可能因为 ip interface 还没准备好导致不可用,添加重试逻辑
  • findOutboundInterface 改为寻找除 tun iface 外的全局默认路由,同时添加 Route Change 回调
  • 添加 wfp 规则,默认启用以下五条
    • 允许自身进程
    • 允许 loopback
    • 允许 tun iface
    • 黑洞 53 udp
    • 黑洞 53 tcp

@LjhAUMEM

Copy link
Copy Markdown
Collaborator Author

wfp 应该在路由查找之前,这个 pr 需要测试

@LjhAUMEM

Copy link
Copy Markdown
Collaborator Author

似乎没有原生的 gui 能查看完整的 wfp 规则,只能 netsh wfp show filters 自己翻 xml

@LjhAUMEM

Copy link
Copy Markdown
Collaborator Author

翻了下 fwpmu.h 准备补 layer ippacket,但是发现能用的 condition 有点少,那还是算了,ale layer 阻止多宿主解析应该够用了

@LjhAUMEM

LjhAUMEM commented Jul 13, 2026

Copy link
Copy Markdown
Collaborator Author

应该只能这样了

其他进程发起系统查询要正常 xray 需要配置 dns

FwpV4AddrAndMask 需要 host order,FwpV6AddrAndMask 则不需要,晚点我再检查下,应该没什么要改的了

@serkanarisoy

Copy link
Copy Markdown

@Fangliding

Copy link
Copy Markdown
Member

这东西重启后保留吗 别给人整不带xray重启下系统网就断了 之前tun动防火墙也是怕这些

@LjhAUMEM

Copy link
Copy Markdown
Collaborator Author

FWPM_SESSION_FLAG_DYNAMIC,创建的是 dynamic session,会在进程退出后清理 filter,即使没主动清理

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

tun模式存在dns泄漏

3 participants