Xray-core

hesoyam/Xray-core

Fork 0

mirror of https://github.com/XTLS/Xray-core.git synced 2026-10-01 05:25:43 +00:00

Files

T

History

patternihaandClaude Opus 5.5 de02da553a TUN inbound: Block IPv4 too when it is not routed to the TUN on Windows

autoSystemWfpBlockLeak blocked IPv6 when the TUN had no IPv6 address or
no IPv6 route, and IPv4 never: with only IPv6 routed to the TUN, IPv4
went around it. Now each IP version is blocked when no route of it leads
to the TUN, except for loopback, DHCP, IPv6 neighbor and multicast
listener discovery, and Xray itself.

Addresses no longer count: without one of a version in gateway, Windows
gives the TUN a link-local one itself (fe80:: at once, 169.254.x.x after
some seconds), and what is routed to the TUN goes through it with that,
so a TUN with IPv6 routes but no IPv6 address had its IPv6 blocked for
nothing.

Tested on Windows 11, elevated: with only IPv6 routed, other programs'
IPv4 is denied, while loopback, a DHCP renew of Wi-Fi and Xray still
work; without gateway, IPv4 and IPv6 routed to the TUN enter it from
169.254.x.x and fe80::.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-09-30 03:07:14 +03:30

blackhole

Blackhole outbound: Add customizable response data support (#6713 )

2026-09-07 21:09:58 +00:00

dns

DNS outbound: Replace "reject" with "return" (rCode is 0 by default) (#6214 )

2026-06-01 01:25:47 +00:00

dokodemo

Tunnel inbound: SO_REUSEPORT fix and IPv6 support for the OpenBSD transparent proxy (#6624 )

2026-08-26 21:05:05 +00:00

freedom

Direct/Freedom outbound: Skip domain resolution and finalRules when using sockopt.dialerProxy (#6742 )