DNS Leak and udptun/tcptun about go-shadowsocks2

[riobard]

No idea how it works on Windows. You might want to Google for it.

[riobard]

Did you enable UDP relay mode on the server? The UDP and TCP tunnels allow you to send DNS queries to Google DNS. You can try dig @127.0.01 -p 8053 twitter.com to see if it works.

[SquirrelCoder]

@riobard I don't think so. Could you please guide me, how can I enable UDP/TCP relay?
when I run the command:

dig @127.0.01 -p 8053 twitter.com
on the CentOS server, I get the following output:

[root@test]# dig @127.0.01 -p 8053 twitter.com

; <<>> DiG 9.9.4-RedHat-9.9.4-38.el7_3.2 <<>> @127.0.01 -p 8053 twitter.com
; (1 server found)
;; global options: +cmd
;; connection timed out; no servers could be reached

[riobard]

Should be @127.0.0.1. Sorry for the typo.

[SquirrelCoder]

@riobard still the same:

; <<>> DiG 9.9.4-RedHat-9.9.4-38.el7_3.2 <<>> @127.0.0.1 -p 8053 twitter.com
; (1 server found)
;; global options: +cmd
;; connection timed out; no servers could be reached

[riobard]

Try dig @127.0.0.1 -p 8053 +tcp twitter.com

[SquirrelCoder]

almost immediately got the following output:

;; Connection to 127.0.0.1#8053(127.0.0.1) for twitter.com failed: connection refused.

[SquirrelCoder]

Shadowsocks-libev service in /usr/lib/systemd/system/shadowsocks-libev.service
looks like this in my VPS:

[Unit]
Description=Shadowsocks-libev Default Server Service
Documentation=man:shadowsocks-libev(8)
After=network.target

[Service]
Type=simple
EnvironmentFile=/etc/default/shadowsocks-libev
User=root
LimitNOFILE=32768
#ExecStart=/usr/bin/ss-server -a $USER -c $CONFFILE $DAEMON_ARGS
ExecStart=/usr/bin/ss-manager --manager  127.0.0.1:LOCALPORT --executable /usr/bin/ss-server -v -c /etc/shadowsocks-libev/config.json
[Install]
WantedBy=multi-user.target

[SquirrelCoder]

my config.json file is multi-user, don't know if this information helps, thanks a lot :).
EDIT: if you need the config.json, let me know. Thanks

[riobard]

Maybe you could try to run go-shadowsocks2 on the server and see what's wrong.

[SquirrelCoder]

thanks for the reply. Tried with go-shadowsocks2, everything works perfectly, but still, some sites, like YouTube won't open.
This is the error on the terminal on VPS:

2017/03/14 11:30:18 failed to connect to target: dial tcp [THAT_CENSORED_IP]:80: getsockopt: connection timed 

[riobard]

Looks like your DNS is poisoned. Point your DNS server to 127.0.0.1:8053

[SquirrelCoder]

yup they are, but how can I point my DNS server to 127.0.0.1:8053?

[riobard]

That depends on your OS.

[SquirrelCoder]

Server: CentOS 7 OpenVZ
Client: Windows 10 x64

[SquirrelCoder]

@nadoo Thanks a lot man. Greatly appriciate it. Will definitely try it out :).