passwall2 运行大概一天左右 国外连接失败 重新应用一次 又恢复正常 报错查看于iptable有关

[ilafz]

安装了nft后报错

Warning: iptables-legacy tables present, use iptables-legacy to see them

iptables v1.8.8 (nf_tables): Could not fetch rule set generation id: Invalid argument

卸载nft 报错
Error relocating /usr/sbin/ipset: ipset_xlate_argv: symbol not found
Error relocating /usr/sbin/ipset: ipset_xlate_argv: symbol not found
Error relocating /usr/sbin/ipset: ipset_xlate_argv: symbol not found
Error relocating /usr/sbin/ipset: ipset_xlate_argv: symbol not found
Error relocating /usr/sbin/ipset: ipset_xlate_argv: symbol not found
Error relocating /usr/sbin/ipset: ipset_xlate_argv: symbol not found
iptables v1.8.8 (legacy): Set laniplist doesn't exist.

Try `iptables -h' or 'iptables --help' for more information.
iptables v1.8.8 (legacy): Set vpsiplist doesn't exist.

Try `iptables -h' or 'iptables --help' for more information.
iptables v1.8.8 (legacy): Set laniplist doesn't exist.

Try `iptables -h' or 'iptables --help' for more information.
iptables v1.8.8 (legacy): Set vpsiplist doesn't exist.

Try `iptables -h' or 'iptables --help' for more information.
iptables v1.8.8 (legacy): Set laniplist doesn't exist.

Try `iptables -h' or 'iptables --help' for more information.
iptables v1.8.8 (legacy): Set vpsiplist doesn't exist.

Try `iptables -h' or 'iptables --help' for more information.
iptables v1.8.8 (legacy): Set laniplist doesn't exist.

Try `iptables -h' or 'iptables --help' for more information.
iptables v1.8.8 (legacy): Set vpsiplist doesn't exist.

Try iptables -h' or 'iptables --help' for more information. iptables v1.8.8 (legacy): invalid port/service disable' specified
Try iptables -h' or 'iptables --help' for more information. iptables v1.8.8 (legacy): invalid port/service disable' specified
Try `iptables -h' or 'iptables --help' for more information.

[ilafz]

是内核的问题吗

[ilafz]

固件版本	OpenWrt R21.6.22
内核版本	5.10.46

[ilafz]

iptable -L如下
Chain PREROUTING (policy ACCEPT 4672 packets, 848K bytes)
pkts bytes target prot opt in out source destination
5715 915K PSW2_REDIRECT all -- * * 0.0.0.0/0 0.0.0.0/0
20733 3261K prerouting_rule all -- * * 0.0.0.0/0 0.0.0.0/0 /* !fw3: Custom prerouting rule chain /
176 12002 PSW2 icmp -- * * 0.0.0.0/0 0.0.0.0/0
20494 3251K zone_lan_prerouting all -- br-lan * 0.0.0.0/0 0.0.0.0/0 / !fw3 /
0 0 zone_docker_prerouting all -- docker0 * 0.0.0.0/0 0.0.0.0/0 / !fw3 /
959 62727 REDIRECT udp -- * * 0.0.0.0/0 0.0.0.0/0 / DNSMASQ */ udp dpt:53 redir ports 53

Chain INPUT (policy ACCEPT 4312 packets, 786K bytes)
pkts bytes target prot opt in out source destination

Chain OUTPUT (policy ACCEPT 6564 packets, 432K bytes)
pkts bytes target prot opt in out source destination
1432 120K PSW2_OUTPUT icmp -- * * 0.0.0.0/0 0.0.0.0/0

Chain POSTROUTING (policy ACCEPT 9212 packets, 672K bytes)
pkts bytes target prot opt in out source destination
33771 2544K postrouting_rule all -- * * 0.0.0.0/0 0.0.0.0/0 /* !fw3: Custom postrouting rule chain /
9768 826K zone_lan_postrouting all -- * br-lan 0.0.0.0/0 0.0.0.0/0 / !fw3 /
2 120 zone_docker_postrouting all -- * docker0 0.0.0.0/0 0.0.0.0/0 / !fw3 */

Chain PSW2 (1 references)
pkts bytes target prot opt in out source destination
94 7896 RETURN all -- * * 0.0.0.0/0 192.168.99.9 /* 'WAN_IP_RETURN' /
0 0 REDIRECT icmp -- * * 0.0.0.0/0 198.18.0.0/16 / '默认' /
82 4106 REDIRECT icmp -- * * 0.0.0.0/0 0.0.0.0/0 / '默认' /
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 / '默认' */

Chain PSW2_OUTPUT (1 references)
pkts bytes target prot opt in out source destination
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0xff
0 0 REDIRECT icmp -- * * 0.0.0.0/0 198.18.0.0/16
1432 120K REDIRECT icmp -- * * 0.0.0.0/0 0.0.0.0/0

Chain PSW2_REDIRECT (1 references)
pkts bytes target prot opt in out source destination

Chain postrouting_docker_rule (1 references)
pkts bytes target prot opt in out source destination

Chain postrouting_lan_rule (1 references)
pkts bytes target prot opt in out source destination

Chain postrouting_rule (1 references)
pkts bytes target prot opt in out source destination

Chain postrouting_wan_rule (1 references)
pkts bytes target prot opt in out source destination

Chain prerouting_docker_rule (1 references)
pkts bytes target prot opt in out source destination

Chain prerouting_lan_rule (1 references)
pkts bytes target prot opt in out source destination

Chain prerouting_rule (1 references)
pkts bytes target prot opt in out source destination

Chain prerouting_wan_rule (1 references)
pkts bytes target prot opt in out source destination

Chain zone_docker_postrouting (1 references)
pkts bytes target prot opt in out source destination
2 120 postrouting_docker_rule all -- * * 0.0.0.0/0 0.0.0.0/0 /* !fw3: Custom docker postrouting rule chain */

Chain zone_docker_prerouting (1 references)
pkts bytes target prot opt in out source destination
0 0 prerouting_docker_rule all -- * * 0.0.0.0/0 0.0.0.0/0 /* !fw3: Custom docker prerouting rule chain */

Chain zone_lan_postrouting (1 references)
pkts bytes target prot opt in out source destination
9768 826K postrouting_lan_rule all -- * * 0.0.0.0/0 0.0.0.0/0 /* !fw3: Custom lan postrouting rule chain */

Chain zone_lan_prerouting (1 references)
pkts bytes target prot opt in out source destination
20494 3251K prerouting_lan_rule all -- * * 0.0.0.0/0 0.0.0.0/0 /* !fw3: Custom lan prerouting rule chain */

Chain zone_wan_postrouting (0 references)
pkts bytes target prot opt in out source destination
0 0 postrouting_wan_rule all -- * * 0.0.0.0/0 0.0.0.0/0 /* !fw3: Custom wan postrouting rule chain */

Chain zone_wan_prerouting (0 references)
pkts bytes target prot opt in out source destination
0 0 prerouting_wan_rule all -- * * 0.0.0.0/0 0.0.0.0/0 /* !fw3: Custom wan prerouting rule chain */

[ilafz]

升级了 libipset13和ipset 版本到7.17问题解决了 不报错了