各项服务都正常启动，还是无法访问外网，如何判断。谢谢 about luci-app-shadowsocks

[aa65535]

「外网」是指什么？
UDP服务器试试停用掉。
iptables-save -t nat 命令的打印结果。

[zcracker]

本地服务器设置了127.0.0.1#5300就好了，谢谢
原来问题在这里

Generated by iptables-save v1.4.21 on Sat Sep 3 12:35:25 2016

*nat
:PREROUTING ACCEPT [353:21699]
:INPUT ACCEPT [186:6622]
:OUTPUT ACCEPT [28:2103]
:POSTROUTING ACCEPT [0:0]
:MINIUPNPD - [0:0]
:SS_SPEC_LAN_AC - [0:0]
:SS_SPEC_LAN_DG - [0:0]
:SS_SPEC_WAN_AC - [0:0]
:SS_SPEC_WAN_DG - [0:0]
:SS_SPEC_WAN_FW - [0:0]
:delegate_postrouting - [0:0]
:delegate_prerouting - [0:0]
:postrouting_lan_rule - [0:0]
:postrouting_rule - [0:0]
:postrouting_wan_rule - [0:0]
:prerouting_lan_rule - [0:0]
:prerouting_rule - [0:0]
:prerouting_wan_rule - [0:0]
:zone_lan_postrouting - [0:0]
:zone_lan_prerouting - [0:0]
:zone_wan_postrouting - [0:0]
:zone_wan_prerouting - [0:0]
-A PREROUTING -j SS_SPEC_LAN_DG
-A PREROUTING -j delegate_prerouting
-A OUTPUT -p tcp -j SS_SPEC_WAN_DG
-A POSTROUTING -j delegate_postrouting
-A MINIUPNPD -p tcp -m tcp --dport 14784 -j DNAT --to-destination 192.168.100.208:14784
-A MINIUPNPD -p udp -m udp --dport 14784 -j DNAT --to-destination 192.168.100.208:8849
-A MINIUPNPD -p tcp -m tcp --dport 5648 -j DNAT --to-destination 192.168.100.208:5648
-A MINIUPNPD -p udp -m udp --dport 5649 -j DNAT --to-destination 192.168.100.208:5648
-A SS_SPEC_LAN_AC -m set --match-set ss_spec_src_bp src -j RETURN
-A SS_SPEC_LAN_AC -m set --match-set ss_spec_src_fw src -j SS_SPEC_WAN_FW
-A SS_SPEC_LAN_AC -m set --match-set ss_spec_src_ac src -j SS_SPEC_WAN_AC
-A SS_SPEC_LAN_AC -j SS_SPEC_WAN_AC
-A SS_SPEC_LAN_DG -m set --match-set ss_spec_dst_sp dst -j RETURN
-A SS_SPEC_LAN_DG -p tcp -j SS_SPEC_LAN_AC
-A SS_SPEC_WAN_AC -m set --match-set ss_spec_dst_fw dst -j SS_SPEC_WAN_FW
-A SS_SPEC_WAN_AC -m set --match-set ss_spec_dst_bp dst -j RETURN
-A SS_SPEC_WAN_AC -j SS_SPEC_WAN_FW
-A SS_SPEC_WAN_DG -m set --match-set ss_spec_dst_sp dst -j RETURN
-A SS_SPEC_WAN_DG -p tcp -j SS_SPEC_WAN_AC
-A SS_SPEC_WAN_FW -p tcp -j REDIRECT --to-ports 1234
-A delegate_postrouting -m comment --comment "user chain for postrouting" -j postrouting_rule
-A delegate_postrouting -o br-lan -j zone_lan_postrouting
-A delegate_postrouting -o eth1 -j zone_wan_postrouting
-A delegate_prerouting -m comment --comment "user chain for prerouting" -j prerouting_rule
-A delegate_prerouting -i br-lan -j zone_lan_prerouting
-A delegate_prerouting -i eth1 -j zone_wan_prerouting
-A zone_lan_postrouting -m comment --comment "user chain for postrouting" -j postrouting_lan_rule
-A zone_lan_prerouting -m comment --comment "user chain for prerouting" -j prerouting_lan_rule
-A zone_wan_postrouting -m comment --comment "user chain for postrouting" -j postrouting_wan_rule
-A zone_wan_postrouting -j MASQUERADE
-A zone_wan_prerouting -j MINIUPNPD
-A zone_wan_prerouting -m comment --comment "user chain for prerouting" -j prerouting_wan_rule
COMMIT

Completed on Sat Sep 3 12:35:25 2016

[zcracker]

再次非常感谢

[zcracker]

DNS污染问题 是否要搭配chinadns app？

[aa65535]

建议搭配 ChinaDNS 使用。
如果觉得 UDP 不稳定可以再搭配 DNS Forwarder。

[wongsyrone]

另外无责任推荐https://github.com/chengr28/Pcap_DNSProxy

[zcracker]

谢谢楼上