透明代理时无法ping，PPPoE下无法上网

[TATTXT]

你正在使用哪个版本的 V2Ray？

4.34.0

你的使用场景是什么？

虚拟机中运行透明代理，以便代理局域网内设备
操作系统为Debian 10

你看到的异常现象是什么？

在按照文档中的透明代理TProxy部分设置了透明代理后，作为二级路由WAN口以NAT方式连接到互联网，透明代理可以工作，但无法ping通任何网站。
当虚拟机作为一级路由，以PPPoE连接互联网时，在设置了iptables后该虚拟机与互联网断开

你期待看到的正常表现是怎样的？

能ping通
PPPoE上网时能使用

请附上你的配置

服务端配置：

// 在这里附上服务器端配置文件
TLS+WS+Web

客户端配置：

// 在这里附上客户端配置
{
  "dns": {
      "servers": [
          {
              "address": "223.5.5.5",
              "domains": [
                  "geosite:cn",
                  "ntp.org",
                  "我的域名"
              ],
              "port": 53
          },
          {
              "address": "114.114.114.114",
              "domains": [
                  "geosite:cn",
                  "ntp.org",
                  "我的域名"
              ],
              "port": 53
          },
          {
              "address": "8.8.8.8",
              "domains": [
                  "geosite:geolocation-!cn"
              ],
              "port": 53
          },
          {
              "address": "1.1.1.1",
              "domains": [
                  "geosite:geolocation-!cn"
              ],
              "port": 53
          }
      ]
  },
  "inbounds": [
      {
          "port": 12345,
          "protocol": "dokodemo-door",
          "settings": {
              "followRedirect": true,
              "network": "tcp,udp"
          },
          "sniffing": {
              "destOverride": [
                  "http",
                  "tls"
              ],
              "enabled": true
          },
          "streamSettings": {
              "sockopt": {
                  "mark": 255,
                  "tproxy": "tproxy"
              }
          },
          "tag": "transparent"
      },
      {
          "port": 1080,
          "protocol": "socks",
          "settings": {
              "auth": "noauth"
          },
          "sniffing": {
              "destOverride": [
                  "http",
                  "tls"
              ],
              "enabled": true
          }
      }
  ],
  "outbounds": [
      {
          "protocol": "vmess",
          "settings": {
              "vnext": [
                  {
                      "address": "我的域名",
                      "port": 443,
                      "users": [
                          {
                              "alterId": 0,
                              "id": "我的uuid",
                              "level": 0,
                              "security": "none"
                          }
                      ]
                  }
              ]
          },
          "streamSettings": {
              "network": "ws",
              "security": "tls",
              "sockopt": {
                  "mark": 255
              },
              "wsSettings": {
                  "path": "我的oath“
              }
          },
          "tag": "proxy"
      },
      {
          "protocol": "freedom",
          "settings": {
              "domainStrategy": "UseIP"
          },
          "streamSettings": {
              "sockopt": {
                  "mark": 255
              }
          },
          "tag": "direct"
      },
      {
          "protocol": "blackhole",
          "settings": {
              "response": {
                  "type": "http"
              }
          },
          "tag": "block"
      },
      {
          "protocol": "dns",
          "streamSettings": {
              "sockopt": {
                  "mark": 255
              }
          },
          "tag": "dns-out"
      }
  ],
  "routing": {
      "domainStrategy": "IPOnDemand",
      "rules": [
          {
              "inboundTag": [
                  "transparent"
              ],
              "network": "udp",
              "outboundTag": "dns-out",
              "port": 53,
              "type": "field"
          },
          {
              "inboundTag": [
                  "transparent"
              ],
              "network": "udp",
              "outboundTag": "direct",
              "port": 123,
              "type": "field"
          },
          {
              "ip": [
                  "223.5.5.5",
                  "114.114.114.114"
              ],
              "outboundTag": "direct",
              "type": "field"
          },
          {
              "ip": [
                  "8.8.8.8",
                  "1.1.1.1"
              ],
              "outboundTag": "proxy",
              "type": "field"
          },
          {
              "domain": [
                  "geosite:category-ads-all"
              ],
              "outboundTag": "block",
              "type": "field"
          },
          {
              "outboundTag": "direct",
              "protocol": [
                  "bittorrent"
              ],
              "type": "field"
          },
          {
              "ip": [
                  "geoip:private",
                  "geoip:cn"
              ],
              "outboundTag": "direct",
              "type": "field"
          },
          {
              "domain": [
                  "geosite:cn"
              ],
              "outboundTag": "direct",
              "type": "field"
          }
      ]
  }
}

请附上出错时软件输出的错误日志

2021/02/03 19:08:00 [Info] v2ray.com/core/proxy/vmess/outbound: tunneling request to udp:8.8.8.8:53 via tcp:我的域名:端口
2021/02/03 19:08:01 [Info] v2ray.com/core/app/dns: UDP:8.8.8.8:53 got answer: v10.events.data.microsoft.com. TypeAAAA -> [] 853.977266ms
2021/02/03 19:08:01 [Debug] v2ray.com/core/app/dns: UDP:8.8.8.8:53 updating IP records for domain:v10.events.data.microsoft.com.
2021/02/03 19:08:01 [Info] v2ray.com/core/app/dns: UDP:8.8.8.8:53 got answer: v10.events.data.microsoft.com. TypeA -> [52.114.20.14] 853.988735ms
2021/02/03 19:08:01 [Debug] v2ray.com/core/app/dns: UDP:8.8.8.8:53 updating IP records for domain:v10.events.data.microsoft.com.
2021/02/03 19:08:01 [Info] [2386418921] v2ray.com/core/app/dispatcher: default route for tcp:v10.events.data.microsoft.com:443
2021/02/03 19:08:01 [Info] [2386418921] v2ray.com/core/transport/internet/websocket: creating connection to tcp:我的域名:端口
2021/02/03 19:08:01 [Info] [2386418921] v2ray.com/core/proxy/vmess/outbound: tunneling request to tcp:v10.events.data.microsoft.com:443 via tcp:我的域名:端口
2021/02/03 19:08:03 [Info] [2386418921] v2ray.com/core/app/proxyman/outbound: failed to process outbound traffic > v2ray.com/core/proxy/vmess/outbound: connection ends > context canceled
2021/02/03 19:08:03 [Info] [2386418921] v2ray.com/core/app/proxyman/inbound: connection ends > v2ray.com/core/proxy/dokodemo: connection ends > v2ray.com/core/proxy/dokodemo: failed to transport response > io: read/write on closed pipe
2021/02/03 19:08:08 [Info] v2ray.com/core/app/proxyman/outbound: failed to process outbound traffic > v2ray.com/core/proxy/vmess/outbound: connection ends > context canceled
2021/02/03 19:08:08 [Info] v2ray.com/core/transport/internet/udp: failed to handle UDP input > io: read/write on closed pipe

可以看到dns查询时的信息，在debug级别下日志中没有出现其它相关的的内容

[TATTXT]

补充iptables日志
我在iptables mangle表的V2RAY链中加了 -A V2RAY -p icmp -j LOG --log-prefix "iptables: "
192.168.1.100为主机设备的ip地址，网关设备为192.168.1.139

Feb  3 19:41:18 debian kernel: [ 7134.324228] iptables: IN=enp0s8 OUT= MAC=08:00:27:21:c2:51:30:9c:23:61:e3:60:08:00 SRC=192.168.1.100 DST=39.156.69.79 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=9102 PROTO=ICMP TYPE=8 CODE=0 ID=1 SEQ=4337 
Feb  3 19:41:23 debian kernel: [ 7139.041599] iptables: IN=enp0s8 OUT= MAC=08:00:27:21:c2:51:30:9c:23:61:e3:60:08:00 SRC=192.168.1.100 DST=39.156.69.79 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=9103 PROTO=ICMP TYPE=8 CODE=0 ID=1 SEQ=4338 
Feb  3 19:41:28 debian kernel: [ 7144.041705] iptables: IN=enp0s8 OUT= MAC=08:00:27:21:c2:51:30:9c:23:61:e3:60:08:00 SRC=192.168.1.100 DST=39.156.69.79 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=9104 PROTO=ICMP TYPE=8 CODE=0 ID=1 SEQ=4339 
Feb  3 19:41:33 debian kernel: [ 7149.041711] iptables: IN=enp0s8 OUT= MAC=08:00:27:21:c2:51:30:9c:23:61:e3:60:08:00 SRC=192.168.1.100 DST=39.156.69.79 LEN=60 TOS=0x00 PREC=0x00 TTL=128 ID=9105 PROTO=ICMP TYPE=8 CODE=0 ID=1 SEQ=4340

我认为原因可能是iptables把icmp给了v2ray，进而导致无法ping通，但是在V2RAY链中添加了 RETURN 或 ACCEPT 依旧无法ping通

[database64128]

Please don't use issues for configuration troubleshooting and questions. I'm converting it to discussion.

[RainCrowSP]

我也遇到同样的问题，我的ubuntu服务器在旁路由模式做透明代理时运行一切正常，但改成用pppoeconf自己拨号后dns就出问题了，一直解析不了，日志里面可以看到所有dns请求都失败了，而且机器好像陷入死循环，dns日志疯狂刷新，机器发热明显。

[RainCrowSP]

不知道是不是iptables的问题，如果把iptables清空电脑就正常了，只是v2ray肯定是被旁路了。

[RainCrowSP]

几天继续继续的实验下终于搞明白了问题，主要是没有把pppoe拨号获得的地址加入排除，把ppp0的ip加入排除的清单就一切正常了。
sudo iptables -t mangle -I V2RAY -d “ppp获得的地址” -j RETURN
但现在还有一个问题，因为ppp0的地址经常变，我想用把ppp0进来的包排除的方法来代替上面的命令，如下
sudo iptables -t mangle -I V2RAY -i ppp0 -j RETURN
但是不成功，感觉包又在循环，求大佬解惑。

[0xffffharry]

在 PREROUTING 链上添加下面的规则

iptables -t mangle -I V2rayPRE -i pppoe-wan -j RETURN

从pppoe-wan口进来的流量全部绕过，这样就可以了