IOS手机能被接管但是WINDOWS不行，很怪

[zzz6839]

麻烦大佬帮忙看下，windows客户端2.10.6，已安装ca.cert

Launching luci-app-unblockneteasmusic Debugging Tool...


OpenWrt info:
{
	"kernel": "5.15.77",
	"hostname": "ImmortalWrt",
	"system": "Intel(R) Celeron(R) CPU  J1900  @ 1.99GHz",
	"model": "AMI Corporation Aptio CRB",
	"board_name": "ami-corporation-aptio-crb",
	"rootfs_type": "squashfs",
	"release": {
		"distribution": "ImmortalWrt",
		"version": "SNAPSHOT",
		"revision": "r24300-d3d2092321",
		"target": "x86/64",
		"description": "ImmortalWrt SNAPSHOT r24300-d3d2092321"
	}
}


uclient-fetch info:
Package: uclient-fetch
Version: 2021-05-14-6a6011df-1
Depends: libc, libuclient20201210
Provides: wget
Status: install user installed
Architecture: x86_64
Installed-Time: 1668144997

Package: libustream-openssl20201210
Version: 2022-01-16-868fd881-2
Depends: libc, libubox20220927, libopenssl1.1
Provides: libustream-openssl
Status: install user installed
Architecture: x86_64
Installed-Time: 1668144997

Downloading 'https://api.github.com/repos/UnblockNeteaseMusic/server/commits?sha=enhanced&path=precompiled'
Connecting to 198.18.0.27:443
Writing to stdout

-                      120k --:--:-- ETA
Download completed (123586 bytes)
182a387700839e03c5486e51d93531e8dbde607a


Node.js info:
Package: node
Version: v16.18.0-1
Depends: libc, libstdcpp6, libopenssl1.1, zlib, libnghttp2-14, libuv1, libcares, libatomic1
Status: install ok installed
Architecture: x86_64
Installed-Time: 1668313679

Node.js is placed at /usr/bin/node
Node.js version: v16.18.0


luci-app-unblockneteasmusic info:
Package: luci-app-unblockneteasemusic
Version: dev-1668246543-e780167
Depends: libc, busybox, dnsmasq-full, ipset, jsonfilter, node, uclient-fetch
Status: install user installed
Architecture: all
Conffiles:
 /etc/config/unblockneteasemusic ce81d716cb16ef5b4716939d69666644d6a8fcdd7f48d454b099bef546c51486
Installed-Time: 1668313679

-rw-r--r--    1 root     root         759 Nov 13 13:02 /etc/config/unblockneteasemusic
-rwxr-xr-x    1 root     root       10.9K Nov 12 17:49 /etc/init.d/unblockneteasemusic

/usr/share/unblockneteasemusic:
drwx------    2 root     root        3.4K Nov 13 12:30 core
-rw-------    1 root     root          41 Nov 13 12:30 core_local_ver
-rwxr-xr-x    1 root     root        5.6K Nov 12 17:49 debugging.sh
-rwxr-xr-x    1 root     root         348 Nov 12 17:49 log_check.sh
drwxr-xr-x    2 root     root        3.4K Nov 13 12:27 rules
-rwxr-xr-x    1 root     root        3.2K Nov 12 17:49 update.sh

config unblockneteasemusic 'config'
	option auto_update '1'
	option update_time '3'
	option enable '1'
	option music_source 'pyncmd kuwo'
	option follow_source_order '1'
	option local_vip '1'
	option enable_flac '1'
	option disable_upgrade_check '0'
	option replace_music_source 'lower_than_320kbps'
	option advanced_mode '1'
	option log_level 'info'
	option http_port '5200'
	option https_port '5202'
	option endpoint_url 'https://music.163.com'
	option hijack_ways 'use_ipset'
	option keep_core_when_upgrade '0'
	option pub_access '0'
	option strict_mode '0'
	option self_issue_cert_crt '/usr/share/unblockneteasemusic/core/server.crt'
	option self_issue_cert_key '/usr/share/unblockneteasemusic/core/server.key'
	option netease_server_ip '115.236.121.4'



UnblockNeteaseMusic Node.js info:
Git HEAD version: 182a387700839e03c5486e51d93531e8dbde607a
Core version: 0.27.0
-rw-------    1 root     root      322.9K Nov 13 12:30 app.js
-rw-------    1 root     root          85 Nov 13 12:30 app.js.LICENSE.txt
-rw-------    1 root     root      271.1K Nov 13 12:30 bridge.js
-rw-------    1 root     root          85 Nov 13 12:30 bridge.js.LICENSE.txt
-rw-------    1 root     root         790 Nov 13 12:30 ca.crt
-rw-------    1 root     root         843 Nov 13 12:30 server.crt
-rw-------    1 root     root         359 Nov 13 12:30 server.key


Netease networking info:
< Location: http://m10.music.126.net/20221113133654/cfb32fa67dd9ab2fbdd23eef4d23ad95/ymusic/obj/w5zDlMODwrDDiGjCn8Ky/3057940231/3d32/93a3/4db1/0757f3a378b41e09ca2767c1abd47afa.mp3
{"code":200,"data":{"music.163.com":{"ip":["115.236.121.4","115.236.118.34","59.111.160.195","59.111.19.33","47.100.127.239","182.92.170.253","193.112.159.225","39.105.175.128","118.24.63.156","39.105.63.80"],"ipv4ScoreDelay":0,"prefer":"ipv4","score":false,"ttl":600}}}

Port status:
tcp        0      0 0.0.0.0:5200            0.0.0.0:*               LISTEN      24100/node
tcp        0      0 0.0.0.0:5202            0.0.0.0:*               LISTEN      24100/node


PROCD running info:
{
	"unblockneteasemusic": {
		"instances": {
			"unblockneteasemusic": {
				"running": true,
				"pid": 24100,
				"command": [
					"node",
					"/usr/share/unblockneteasemusic/core/app.js",
					"-a",
					"0.0.0.0",
					"-p",
					"5200:5202",
					"-o",
					"pyncmd",
					"kuwo",
					"-e",
					"https://music.163.com",
					"-f",
					"115.236.121.4"
				],
				"term_timeout": 5,
				"env": {
					"ENABLE_FLAC": "true",
					"ENABLE_LOCAL_VIP": "true",
					"FOLLOW_SOURCE_ORDER": "true",
					"LOG_FILE": "/tmp/unblockneteasemusic.log",
					"LOG_LEVEL": "info",
					"MIN_BR": "320000",
					"SIGN_CERT": "/usr/share/unblockneteasemusic/core/server.crt",
					"SIGN_KEY": "/usr/share/unblockneteasemusic/core/server.key"
				},
				"respawn": {
					"threshold": 3600,
					"timeout": 5,
					"retry": 5
				}
			}
		},
		"triggers": [
			[
				"config.change",
				[
					"if",
					[
						"eq",
						"package",
						"unblockneteasemusic"
					],
					[
						"run_script",
						"/etc/init.d/unblockneteasemusic",
						"reload"
					]
				],
				1000
			]
		]
	}
}


Firewall info:

table inet fw4 {
	set acl_neteasemusic_http {
		type ipv4_addr
		flags interval
	}
}

table inet fw4 {
	set acl_neteasemusic_https {
		type ipv4_addr
		flags interval
	}
}

table inet fw4 {
	set local_addr {
		type ipv4_addr
		flags interval
		elements = { 0.0.0.0/8, 10.0.0.0/8,
			     100.64.0.0/10, 127.0.0.0/8,
			     169.254.0.0/16, 172.16.0.0/12,
			     192.0.0.0/24, 192.0.2.0/24,
			     192.31.196.0/24, 192.52.193.0/24,
			     192.88.99.0/24, 192.168.0.0/16,
			     192.175.48.0/24, 198.18.0.0/15,
			     198.51.100.0/24, 203.0.113.0/24,
			     224.0.0.0/4, 240.0.0.0-255.255.255.255 }
	}
}

table inet fw4 {
	set neteasemusic {
		type ipv4_addr
		flags interval
		elements = { 36.25.241.122, 36.25.241.124,
			     39.105.63.80, 39.105.175.128,
			     47.100.127.239, 59.111.19.33,
			     59.111.160.195, 59.111.160.197,
			     59.111.181.35, 59.111.181.38,
			     59.111.181.60, 115.236.118.33,
			     115.236.118.34, 115.236.121.1,
			     115.236.121.4, 118.24.63.156,
			     182.92.170.253, 183.134.54.30,
			     193.112.159.225, 223.252.199.66,
			     223.252.199.67 }
	}
}

Http Port pub access rule not found.

Https Port pub access rule not found.

table inet fw4 {
	chain netease_cloud_music {
		type nat hook prerouting priority filter - 1; policy accept;
		meta l4proto tcp ip daddr @neteasemusic jump netease_cloud_music_redir
	}
}

table inet fw4 {
	chain netease_cloud_music_redir {
		ip daddr @local_addr return
		ip saddr @acl_neteasemusic_http accept
		ip saddr @acl_neteasemusic_https accept
		tcp dport 80 counter packets 0 bytes 0 redirect to :5200
		tcp dport 443 counter packets 0 bytes 0 redirect to :5202
	}
}

dhcp-option=252,http://192.168.1.1:5200/proxy.pac
ipset=/.music.163.com/neteasemusic
ipset=/interface.music.163.com/neteasemusic
ipset=/interface3.music.163.com/neteasemusic
ipset=/apm.music.163.com/neteasemusic
ipset=/apm3.music.163.com/neteasemusic
ipset=/clientlog.music.163.com/neteasemusic
ipset=/clientlog3.music.163.com/neteasemusic


Testing source replacing...
{"data":[{"id":33190502,"url":null,"br":0,"size":0,"md5":null,"code":-110,"expi":1200,"type":null,"gain":0.0,"fee":1,"uf":null,"payed":0,"flag":4,"canExtend":false,"freeTrialInfo":null,"level":null,"encodeType":null,"freeTrialPrivilege":{"resConsumable":false,"userConsumable":false,"listenType":null},"freeTimeTrialPrivilege":{"resConsumable":false,"userConsumable":false,"type":0,"remainTime":0},"urlSource":0,"rightSource":0,"podcastCtrp":null,"effectTypes":null,"time":0}],"code":200}
{"data":[{"id":33190502,"url":"https://music.163.com/package/aHR0cDovL204Lm11c2ljLjEyNi5uZXQvMjAyMjExMTMxMzM2NTkvZjAwN2JlOGJkMDM3NDQxYjk3YmVkY2VmZDk3NmY4ZTAveW11c2ljL2EwM2YvOTJiNy80MTlmLzZkMDQ2YmM5M2NhMDRlMDEwZjJjMmExYTVlOTBmY2Q3LmZsYWM=/33190502.flac","br":999000,"size":30544150,"md5":"6d046bc93ca04e010f2c2a1a5e90fcd7","code":200,"expi":1200,"type":"flac","gain":0,"fee":0,"uf":null,"payed":0,"flag":0,"canExtend":false,"freeTrialInfo":null,"level":null,"encodeType":null,"freeTrialPrivilege":{"resConsumable":false,"userConsumable":false,"listenType":null},"freeTimeTrialPrivilege":{"resConsumable":false,"userConsumable":false,"type":0,"remainTime":0},"urlSource":0,"rightSource":0,"podcastCtrp":null,"effectTypes":null,"time":0}],"code":200}
INFO: (app) HTTP Server running @ http://0.0.0.0:5200
INFO: (app) HTTPS Server running @ http://0.0.0.0:5202
INFO: (provider/match) Replaced: [139848] 我的麦克风
    audioId: 139848
    songName: "我的麦克风"
    url: "http://m8.music.126.net/20221113132839/9454dd3d1133ccba19a9b6ff814127be/ymusic/efcb/3232/71ae/3d4b601ea46cdf55a8047458e40e2fce.flac"
INFO: (provider/match) Replaced: [1962165898] 最伟大的作品
    audioId: 1962165898
    songName: "最伟大的作品"
    url: "http://le.sycdn.kuwo.cn/342ecd9404f93a66db09674ff0bc59b9/63707aae/resource/s3/20/84/3965181123.flac"
INFO: (provider/match) Replaced: [139558] 亲爱的
    audioId: 139558
    songName: "亲爱的"
    url: "http://m8.music.126.net/20221113132854/c91a232ce092b905653d6e2ed299429b/ymusic/obj/w5zDlMODwrDDiGjCn8Ky/3037468910/04c5/c161/38d5/1af6121ba42359dcda908dcc7b1f1e57.flac"
INFO: (provider/match) Replaced: [18374823] Everybody
    audioId: 18374823
    songName: "Everybody"
    url: "http://m8.music.126.net/20221113133111/0180202e6bbab02a8ba4aea672c58d2d/ymusic/obj/w5zDlMODwrDDiGjCn8Ky/2976652175/18b2/46f0/09df/fc08d0654434005c155ac167710d4cc7.flac"
INFO: (provider/match) Replaced: [185701] 兰亭序
    audioId: 185701
    songName: "兰亭序"
    url: "http://other.player.rc03.sycdn.kuwo.cn/d2fa47880703b6fc29969df0b099f1fa/63707b45/resource/s1/1/15/995917246.flac"
INFO: (provider/match) Replaced: [33190502] 君のままで
    audioId: 33190502
    songName: "君のままで"
    url: "http://m8.music.126.net/20221113133659/f007be8bd037441b97bedcefd976f8e0/ymusic/a03f/92b7/419f/6d046bc93ca04e010f2c2a1a5e90fcd7.flac"


Log is available at:
https://litter.catbox.moe/e6e9r5.txt
https://transfer.sh/rJRBi8/unm-debugging-output.txt

[1715173329]

信任证书，需要安装为系统证书，手机必须 ROOT。

[zzz6839]

信任证书，需要安装为系统证书，手机必须 ROOT。

证书完全按照你们提供的教程弄的，在刷新的固件之前使用没有问题，是不是nftable的锅？

[1715173329]

counter 为 0，请注意你的系统上有没有使用 iptables-nft，如果有，所有流量会进 ipt 表，nft 无法再劫持。