LeadaxeLxBox / sing-box-lx 开发者

作者发言

GitHub·2026.10.30 02:46:27（UTC+8）

Leadaxe：LxBox Unknown traffic 预设决定 tun0 流量直连或拒绝

在 LxBox issue #177 的回复中，Leadaxe 说明 Termux 将应用列入 Deny-list 后，`curl --interface tun0` 仍使用 ISP 地址，是因为绑定 tun0 的流量没有所属应用，会被 Routing → Presets → Unknown traffic 预设按默认配置直连到 VPN 外；将该预设的 Outbound 切换为 Reject 可丢弃此类流量，升级安装可能默认关闭该预设，并建议补充应用版本、预设状态和规则导出以继续排查。

作者原文@Leadaxe

Not reproduced here: with Termux in the Deny-list, curl --interface tun0 gets the ISP address, not the server's.

This case is covered by the Unknown traffic preset (Routing → Presets). Traffic that a process pushes into the tunnel by binding to tun0 has no owning app, and the preset sends it direct, outside the VPN, so the server address does not show. Its Outbound can be switched to Reject to drop such traffic instead. On new installs it is on by default; on an upgraded install it may be off.

Need from you:

1. App version.
2. Is Unknown traffic enabled, and with which outbound?
3. A rules export (Routing → Rules → ⋮), if the preset is on and the leak persists. A rule placed above it can catch this traffic first.