Alex-Devera/3x-ui
1
0
Fork 0
mirror of https://github.com/MHSanaei/3x-ui.git synced 2026-06-05 12:44:22 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 7

fix(xray): default freedom finalRules to allow-all so reverse egress works

Browse source 
xray-core >=26.5 makes the freedom finalRules context-aware: reverse-proxy traffic defaults to "block all targets". The template seeded finalRules with only allow geoip:private, so a bridge could not exit to WAN and reverse proxy silently broke

Switch the default direct freedom to a no-condition allow rule, the documented way to restore pre-policy behavior. Unlike an ip-based rule (0.0.0.0/0 or !geoip:private), it does not force per-connection OS DNS resolution under domainStrategy AsIs, so happyEyeballs/AsIs pass-through stay intact. LAN is still blocked by the geoip:private->blocked routing rule, and removing that rule still regains LAN access
Note: only affects new configs; existing installs keep their stored finalRules until reset or a follow-up migration.
This commit is contained in:
MHSanaei 2026-06-02 15:58:48 +02:00
parent 1e3c186b2c
commit 8f5a7b9434
No known key found for this signature in database
GPG key ID: 7E4060F2FBE5AB7A
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
web/service/config.json
View file

@ -32,7 +32,7 @@
"settings": { "settings": {
"domainStrategy": "AsIs", "domainStrategy": "AsIs",
"finalRules": [ "finalRules": [
{ "action": "allow", "ip": ["geoip:private"] } { "action": "allow" }
] ]
}, },
"tag": "direct" "tag": "direct"