{"action":"created","issue":{"url":"https://api.github.com/repos/hackgfw/openwrt-gfw/issues/33","labels_url":"https://api.github.com/repos/hackgfw/openwrt-gfw/issues/33/labels{/name}","comments_url":"https://api.github.com/repos/hackgfw/openwrt-gfw/issues/33/comments","events_url":"https://api.github.com/repos/hackgfw/openwrt-gfw/issues/33/events","html_url":"https://github.com/hackgfw/openwrt-gfw/issues/33","id":53621586,"number":33,"title":"新的AntiDNSPoisoning依赖新PPTPVPN的配置/etc/config/gfw-vpn中的DNS部分","user":{"login":"zhiyin-im","id":7808063,"avatar_url":"https://avatars.githubusercontent.com/u/7808063?v=3","gravatar_id":"","url":"https://api.github.com/users/zhiyin-im","html_url":"https://github.com/zhiyin-im","followers_url":"https://api.github.com/users/zhiyin-im/followers","following_url":"https://api.github.com/users/zhiyin-im/following{/other_user}","gists_url":"https://api.github.com/users/zhiyin-im/gists{/gist_id}","starred_url":"https://api.github.com/users/zhiyin-im/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zhiyin-im/subscriptions","organizations_url":"https://api.github.com/users/zhiyin-im/orgs","repos_url":"https://api.github.com/users/zhiyin-im/repos","events_url":"https://api.github.com/users/zhiyin-im/events{/privacy}","received_events_url":"https://api.github.com/users/zhiyin-im/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-01-07T11:10:01Z","updated_at":"2015-01-07T15:53:51Z","closed_at":null,"body":"如果用老的PPTPVPN就没法启动/etc/config/gfw-vpn中的DNS配置，然后DNS不通没法上网。。。即便在/etc/ppp/ip-up.d/ip-up-wall添加了iptables -t mangle -A PREROUTING -p udp --dport 53 -m set ! --match-set whiteip src -m set ! --match-set whiteip dst -m set ! --match-set china dst -j MARK --set-mark 0xffff也不行，只能注掉所有新的AntiDNSPoisoning配置才能上网。\r\n\r\nBTW：之前老的AntiDNSPoisoning没法让google以外的网站不被污染，一直凑合着用，实在太需要google之外的国际网站就注掉路由器VPN重启网路再用PC连VPN。"},"comment":{"url":"https://api.github.com/repos/hackgfw/openwrt-gfw/issues/comments/69041529","html_url":"https://github.com/hackgfw/openwrt-gfw/issues/33#issuecomment-69041529","issue_url":"https://api.github.com/repos/hackgfw/openwrt-gfw/issues/33","id":69041529,"user":{"login":"hackgfw","id":2784893,"avatar_url":"https://avatars.githubusercontent.com/u/2784893?v=3","gravatar_id":"","url":"https://api.github.com/users/hackgfw","html_url":"https://github.com/hackgfw","followers_url":"https://api.github.com/users/hackgfw/followers","following_url":"https://api.github.com/users/hackgfw/following{/other_user}","gists_url":"https://api.github.com/users/hackgfw/gists{/gist_id}","starred_url":"https://api.github.com/users/hackgfw/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hackgfw/subscriptions","organizations_url":"https://api.github.com/users/hackgfw/orgs","repos_url":"https://api.github.com/users/hackgfw/repos","events_url":"https://api.github.com/users/hackgfw/events{/privacy}","received_events_url":"https://api.github.com/users/hackgfw/received_events","type":"User","site_admin":false},"created_at":"2015-01-07T15:53:51Z","updated_at":"2015-01-07T15:53:51Z","body":"以前那套配置现在已经没有维护了，没有那么多精力。\r\n如果你一定要用旧版的配置，那么添加路由把8.8.8.8指向从VPN走，然后把所有电脑的DNS改成8.8.8.8吧，这样至少不会被DNS污染，只是少了本地CDN。"}}