只开一个 nikki ,发现 adg去广告无法订阅，尝试解析相关网址，返回都是 0.0.0.0

[625045508]

nikki 配置完成后， 外网都正常了，发现 adg 广告规则无法更新，尝试解析 raw.githubusercontent.com 地址，发现返回地址是 0.0.0.0

贴上我得 nikki 配置 ，大佬们看下，是不是哪设置的不对。
`root@OpenWrt:~# cat /etc/config/nikki

config status 'status'

config config 'config'
option enabled '1'
option start_delay '1'
option scheduled_restart '0'
option cron_expression '0 3 * * *'
option test_profile '0'
option fast_reload '1'
option profile 'subscription:cfg140caa'

config proxy 'proxy'
option transparent_proxy '1'
option tcp_transparent_proxy_mode 'redirect'
option udp_transparent_proxy_mode 'tproxy'
option ipv4_dns_hijack '1'
option ipv6_dns_hijack '0'
option ipv4_proxy '1'
option ipv6_proxy '0'
option fake_ip_ping_hijack '0'
option router_proxy '1'
option lan_proxy '1'
option access_control_mode 'all'
option bypass_china_mainland_ip '1'
option proxy_tcp_dport '21 22 80 110 143 194 443 465 853 993 995 8080 8443'
option proxy_udp_dport '123 443 8443'
list bypass_user 'ftp'
list bypass_user 'nobody'
list bypass_user 'aria2'
list bypass_user 'ntp'
list bypass_user 'dnsmasq'
list bypass_user 'logd'
list bypass_user 'ubus'
list bypass_group 'ftp'
list bypass_group 'nogroup'
list bypass_group 'aria2'
list bypass_group 'ntp'
list bypass_group 'dnsmasq'
list bypass_group 'logd'
list bypass_group 'ubus'

config mixin 'mixin'
option log_level 'warning'
option mode 'rule'
option match_process 'off'
option ipv6 '0'
option unify_delay '1'
option tcp_concurrent '1'
option tcp_keep_alive_idle '600'
option tcp_keep_alive_interval '15'
option ui_path 'ui'
option ui_url 'https://github.com/Zephyruso/zashboard/releases/latest/download/dist-cdn-fonts.zip'
option selection_cache '1'
option allow_lan '1'
option http_port '8080'
option socks_port '1080'
option mixed_port '7890'
option redir_port '7891'
option tproxy_port '7892'
option authentication '1'
option tun_device 'nikki'
option tun_stack 'gvisor'
option tun_mtu '9000'
option tun_gso '1'
option tun_gso_max_size '65536'
option tun_dns_hijack '0'
list tun_dns_hijacks 'tcp://any:53'
list tun_dns_hijacks 'udp://any:53'
option tun_endpoint_independent_nat '0'
option dns_mode 'redir-host'
option fake_ip_range '198.18.0.1/16'
option fake_ip_filter '0'
option dns_doh_prefer_http3 '0'
option dns_ipv6 '0'
option dns_system_hosts '1'
option hosts '1'
option dns_nameserver '1'
option dns_nameserver_policy '0'
option sniffer '1'
option sniffer_sniff_dns_mapping '1'
option sniffer_sniff_pure_ip '1'
option sniffer_overwrite_destination '0'
option sniffer_force_domain_name '0'
option sniffer_ignore_domain_name '0'
option sniffer_sniff '1'
option rule '0'
option rule_provider '0'
option geoip_format 'dat'
option geodata_loader 'standard'
option geosite_url 'https://testingcf.jsdelivr.net/gh/Loyalsoldier/v2ray-rules-dat@release/geosite.dat'
option geoip_dat_url 'https://testingcf.jsdelivr.net/gh/Loyalsoldier/v2ray-rules-dat@release/geoip.dat'
option geox_auto_update '1'
option geox_update_interval '24'
option mixin_file_content '0'
option ui_name 'yacd'
option api_listen '[::]:9090'
option dns_listen '[::]:1053'
option api_secret '123456'
option dns_hosts '1'
list fake_ip_filters '+.lan'
list fake_ip_filters '+.local'
list fake_ip_filters 'geosite:cn'

config env 'env'
option disable_safe_path_check '0'
option disable_loopback_detector '0'
option disable_quic_go_gso '0'
option disable_quic_go_ecn '0'

config nameserver
option enabled '0'
option type 'default-nameserver'
list nameserver '223.5.5.5'
list nameserver '119.29.29.29'

config nameserver
option enabled '0'
option type 'proxy-server-nameserver'
list nameserver '223.5.5.5'
list nameserver '119.29.29.29'

config nameserver
option enabled '0'
option type 'direct-nameserver'
list nameserver 'https://dns.alidns.com/dns-query'
list nameserver 'https://doh.pub/dns-query'

config nameserver
option enabled '1'
option type 'nameserver'
list nameserver '202.96.209.133'
list nameserver '202.96.209.5'
list nameserver '117.50.10.10'

config nameserver
option enabled '0'
option type 'fallback'
list nameserver 'https://dns.cloudflare.com/dns-query'
list nameserver 'https://dns.google/dns-query'

config nameserver_policy
option enabled '0'
option matcher 'geosite:cn,private'
list nameserver '223.5.5.5'
list nameserver '119.29.29.29'

config nameserver_policy
option enabled '0'
option matcher 'geosite:geolocation-!cn'
list nameserver 'https://dns.cloudflare.com/dns-query'
list nameserver 'https://dns.google/dns-query'

config sniff
option enabled '1'
option protocol 'HTTP'
list port '80'
list port '8080'
option overwrite_destination '1'

config sniff
option enabled '1'
option protocol 'TLS'
list port '443'
list port '8443'
option overwrite_destination '1'

config sniff
option enabled '1'
option protocol 'QUIC'
list port '443'
list port '8443'
option overwrite_destination '1'

config editor 'editor'

config log 'log'

config nameserver_policy
option enabled '0'
option matcher '.wxda.net,.idsduf.com'
list nameserver '223.5.5.5'
list nameserver '119.29.29.29'
`

[625045508]

把外网解析的 raw.githubusercontent.com 地址，写入 OpenWrt 的 hosts，就可以恢复 adg订阅， 还有一个问题， nikki 端口 1053 ，我把 dnsmasq 端口设置为0， adg端口设置为53. 转发到 nikki的1053 ，发现实际 adg并没有接管 dns请求， 内网主机请求解析都不在 adg页面展示， 是不是因为 nikki的 dns 劫持是 防火墙层面的？，有没有像 OpenClash -- 插件设置 -- DNS设置 -- 本地DNS劫持 禁用选项 或者方法呢？

[625045508]

还是说 nikki 的dns请求都是基于 dnsmasq 的， 需要把 adg 设置为 dnsmasq 上游， adg 固定53 端口， dnsmasq 设置533，dnsmasq 再转发到 nikki的1053 ，这样是不是可以当 adg接管展示内网dns解析状态， 我试试看

[625045508]

不行，怎么设置 adg 都无法作为最前端的 dns 工具，并不能展示内网终端，和请求状态

[morytyann]

有没有像 OpenClash -- 插件设置 -- DNS设置 -- 本地DNS劫持 禁用选项 或者方法呢

不勾选DNS劫持就行了

[morytyann]

解析成0.0.0.0是被污染了，换Fake-IP，或者用不污染的DNS

[625045508]

完了，切换 fake-ip 导致整个都拉不起来了，再切回去也不行了，晕倒
[2025-04-04 00:22:11] [App] Enabled.
[2025-04-04 00:22:11] [App] Start.
[2025-04-04 00:22:11] [Profile] Use subscription: Dler.
[2025-04-04 00:22:11] [Profile] Update subscription: Dler.
[2025-04-04 00:22:13] [Profile] Subscription update successful.
[2025-04-04 00:22:13] [Mixin] Mixin config.
[2025-04-04 00:22:13] [Core] Start.
[2025-04-04 00:22:13] [Transparent Proxy] Enabled.
[2025-04-04 00:22:13] [Transparent Proxy] Waiting for tun device online...
[2025-04-04 00:22:29] [Transparent Proxy] Waiting timeout, tun device is not online.
[2025-04-04 00:22:29] [App] Exit.