Blacklist (list of domains and IP ranges) for bypassing in tun mode is not applied.

[abbasnaqdi]

Attention | توجه

• I searched and no similar issues were found | جستجو کردم و هیچ گزارش مشابهی پیدا نشد

What Happened? | چه اتفاقی افتاده؟

Hello, in system proxy mode, the blocklist settings are applied well and everything is fine, but in tun mode, these settings are ignored and not applied.
This is a very important issue. Please add support for adding domains and IPs with regex in addition to geoip and geosite.
Thanks.

Minimal Reproducible Example | چه پروسه‌ای برای مشاهده این مشکل طی کرده‌اید؟

No response

Relevant log output | لاگ برنامه

[2025-02-10 04:46:03.958] [info]  Deleted past logs for new connection.
[2025-02-10 04:46:04.005] [info]  Setting up configs...
[2025-02-10 04:46:04.005] [info]  ------------------------MetaData------------------------
[2025-02-10 04:46:04.006] [info]  running on: Ubuntu (24.10) x64 
[2025-02-10 04:46:04.006] [info]  at od: v2.61.0
[2025-02-10 04:46:04.006] [info]  at wp: v1.2.5
[2025-02-10 04:46:04.006] [info]  at hp: v1.2.2
[2025-02-10 04:46:04.006] [info]  ls assets/bin: LICENSE,README.md,oblivion-helper,warp-plus,zag-netStats
[2025-02-10 04:46:04.006] [info]  method: gool
[2025-02-10 04:46:04.006] [info]  proxyMode: tun
[2025-02-10 04:46:04.006] [info]  routingRules: Customized
[2025-02-10 04:46:04.006] [info]  endpoint: default
[2025-02-10 04:46:04.006] [info]  ipType: v4/v6
[2025-02-10 04:46:04.006] [info]  tunAddrType: v64
[2025-02-10 04:46:04.006] [info]  dataUsage: false
[2025-02-10 04:46:04.006] [info]  asn: UNK
[2025-02-10 04:46:04.006] [info]  reserved: true
[2025-02-10 04:46:04.006] [info]  geo Ip: ir, Site: ir, Block: true, NSFW: false
[2025-02-10 04:46:04.006] [info]  testUrl https://connectivity.cloudflareclient.com/cdn-cgi/trace
[2025-02-10 04:46:04.006] [info]  exe: /opt/oblivion-desktop/oblivion-desktop
[2025-02-10 04:46:04.006] [info]  userData: /home/<USERNAME>/.config/oblivion-desktop
[2025-02-10 04:46:04.006] [info]  logs: /home/<USERNAME>/.config/oblivion-desktop/logs
[2025-02-10 04:46:04.006] [info]  ------------------------MetaData------------------------
[2025-02-10 04:46:04.007] [info]  ExportList config created at /home/<USERNAME>/.config/oblivion-desktop/sbExportList.json
[2025-02-10 04:46:04.007] [info]  Sing-Box config file has been created at /home/<USERNAME>/.config/oblivion-desktop/sbConfig.json
[2025-02-10 04:46:04.036] [info]  Starting Sing-Box...
[2025-02-10 04:46:04.115] [info]  Helper: Sing-Box started successfully.
[2025-02-10 04:46:04.117] [info]  Helper Status: started
[2025-02-10 04:46:04.120] [info]  Starting WarpPlus process...
[2025-02-10 04:46:04.121] [info]  /home/<USERNAME>/.config/oblivion-desktop/warp-plus --bind 127.0.0.1:2080 --gool --scan --dns 1.1.1.2
[2025-02-10 04:46:15.059] [info]  Waiting for connection...
[2025-02-10 04:46:15.061] [info]  Testing connection via https://connectivity.cloudflareclient.com/cdn-cgi/trace
[2025-02-10 04:46:17.688] [info]  Connection established after 1 attempts
time=2025-02-10T04:46:04.137+03:30 level=INFO msg="scanner mode enabled" max-rtt=1s
time=2025-02-10T04:46:04.138+03:30 level=INFO msg="successfully loaded warp identity" subsystem=warp/account
time=2025-02-10T04:46:07.653+03:30 level=ERROR msg="ping error" subsystem=scanner addr=162.159.193.181 error="error sending random packet: write udp 192.168.8.2:59521->162.159.193.181:5279: write: connection refused"
time=2025-02-10T04:46:08.140+03:30 level=INFO msg="using warp endpoints" endpoints="[188.114.97.209:945 162.159.192.231:2506]"
time=2025-02-10T04:46:08.140+03:30 level=INFO msg="running in warp-in-warp (gool) mode"
time=2025-02-10T04:46:08.140+03:30 level=INFO msg="successfully loaded warp identity" subsystem=warp/account
time=2025-02-10T04:46:13.644+03:30 level=INFO msg="connection test successful"
time=2025-02-10T04:46:13.645+03:30 level=INFO msg="successfully loaded warp identity" subsystem=warp/account
time=2025-02-10T04:46:15.058+03:30 level=INFO msg="connection test successful"
time=2025-02-10T04:46:15.058+03:30 level=INFO msg="serving proxy" address=127.0.0.1:2080
time=2025-02-10T04:46:19.793+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:46:19.793+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:46:19.793+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:46:19.793+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:46:19.793+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:46:19.843+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:46:19.843+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:46:19.843+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:46:19.843+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:46:19.843+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:46:35.151+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:46:35.152+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:47:07.272+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:47:07.390+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:48:11.304+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:48:11.444+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:48:23.377+03:30 level=ERROR msg="dial: lookup speedtest.pingless.com. on 1.1.1.2: read udp 172.16.0.2:62488: i/o timeout"
time=2025-02-10T04:50:21.407+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:50:21.525+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:53:48.564+03:30 level=ERROR msg="connect to rr4---sn-5hne6nsr.googlevideo.com:443 failed: listen udp 172.217.132.73:443: bind: cannot assign requested address"
time=2025-02-10T04:53:49.165+03:30 level=ERROR msg="connect to 172.217.132.73:443 failed: listen udp 172.217.132.73:443: bind: cannot assign requested address"
time=2025-02-10T04:53:49.766+03:30 level=ERROR msg="connect to 172.217.132.73:443 failed: listen udp 172.217.132.73:443: bind: cannot assign requested address"
time=2025-02-10T04:53:50.967+03:30 level=ERROR msg="connect to 172.217.132.73:443 failed: listen udp 172.217.132.73:443: bind: cannot assign requested address"
time=2025-02-10T04:53:52.864+03:30 level=ERROR msg="connect to 172.217.132.73:443 failed: listen udp 172.217.132.73:443: bind: cannot assign requested address"
time=2025-02-10T04:54:35.305+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:54:35.509+03:30 level=ERROR msg="dial: lookup connectivity-check.ubuntu.com.. on 1.1.1.2: cannot marshal DNS message"
time=2025-02-10T04:56:06.240+03:30 level=ERROR msg="connect to i.ytimg.com:443 failed: listen udp 216.58.206.54:443: bind: cannot assign requested address"
...

[ShadowZagrosDev]

Hello,

Thank you for reporting this issue. I have tested the blacklist functionality in tunnel mode, and based on my results, it appears to be working correctly.

As shown in the first row of the attached screenshot, I added cloudflare.com and showmyip.com to the blacklist. When connecting through the app, the displayed country matches the expected one (United States).

In the second row, I opened these domains in a browser, and as expected, they resolved without using the tunnel, showing a different country (Iran).

In the third row, you can see two other domains that are not in the blacklist. Their results match the tunnel’s expected output (United States).

Based on these tests, the blacklist is being applied correctly in tunnel mode. I recommend clearing your browser cache or trying a fresh browser installation to ensure accurate results.

Let me know if you still face any issues!

[abbasnaqdi]

Hello @ShadowZagrosDev @, and thank you.

I've re-examined the issue, and it seems to be related to DNS. I work at a company that hosts several internal websites, and by default, our internal DNS resolves certain URLs.

For example, jira.company.co is resolved internally, allowing access to the website through a browser. However, when using TUN mode, this functionality is lost, and I can no longer access internal websites.

Although I have added both the IP range and the domain name to the blocking list, it does not take effect in TUN mode.

[hasanxdev]

I have the exact same problem, and it's not working for me either. @abbasnaqdi @ShadowZagrosDev

[Shazehiy]

[2025-04-28 13:47:57.996] [info] Deleted past logs for new connection.
[2025-04-28 13:47:59.414] [info] Setting up configs...
[2025-04-28 13:47:59.417] [info] ------------------------MetaData------------------------
[2025-04-28 13:47:59.417] [info] running on: Microsoft Windows 11 Enterprise (10.0.26100) x64 26100
[2025-04-28 13:47:59.417] [info] at od: v2.74.2
[2025-04-28 13:47:59.418] [info] at wp: v1.2.5
[2025-04-28 13:47:59.418] [info] at hp: v1.2.2
[2025-04-28 13:47:59.418] [info] ls assets/bin: LICENSE,oblivion-helper,proxy-reset.exe,README.md,vbs,warp-plus.exe,zag-netStats.exe
[2025-04-28 13:47:59.418] [info] method: gool
[2025-04-28 13:47:59.419] [info] proxyMode: tun
[2025-04-28 13:47:59.419] [info] routingRules: Default
[2025-04-28 13:47:59.419] [info] endpoint: default
[2025-04-28 13:47:59.420] [info] ipType: v4/v6
[2025-04-28 13:47:59.420] [info] tunAddrType: v64
[2025-04-28 13:47:59.420] [info] dataUsage: false
[2025-04-28 13:47:59.420] [info] asn: UNK
[2025-04-28 13:47:59.421] [info] reserved: true
[2025-04-28 13:47:59.421] [info] geo Ip: none, Site: none, Block: false, NSFW: false
[2025-04-28 13:47:59.421] [info] testUrl: https://connectivity.cloudflareclient.com/cdn-cgi/trace
[2025-04-28 13:47:59.421] [info] dns: 1.1.1.1
[2025-04-28 13:47:59.422] [info] exe: C:\Program Files\oblivion-desktop\oblivion-desktop.exe
[2025-04-28 13:47:59.422] [info] userData: C:\Users<USERNAME>.3EPAD\AppData\Roaming\oblivion-desktop
[2025-04-28 13:47:59.422] [info] logs: C:\Users<USERNAME>.3EPAD\AppData\Roaming\oblivion-desktop\logs
[2025-04-28 13:47:59.422] [info] ------------------------MetaData------------------------
[2025-04-28 13:47:59.423] [info] ExportList config created at C:\Users<USERNAME>.3EPAD\AppData\Roaming\oblivion-desktop\sbExportList.json
[2025-04-28 13:47:59.425] [info] Sing-Box config file has been created at C:\Users<USERNAME>.3EPAD\AppData\Roaming\oblivion-desktop\sbConfig.json
[2025-04-28 13:47:59.745] [info] Starting Sing-Box...
[2025-04-28 13:48:00.381] [info] Helper Status: started
[2025-04-28 13:48:00.382] [info] Helper: Sing-Box started successfully.
[2025-04-28 13:48:00.384] [info] Starting WarpPlus process...
[2025-04-28 13:48:00.384] [info] C:\Users<USERNAME>.3EPAD\AppData\Roaming\oblivion-desktop\warp-plus.exe --bind 127.0.0.1:8086 --gool --scan
[2025-04-28 13:48:00.518] [info] Stopping Sing-Box...
[2025-04-28 13:48:00.581] [info] Helper: Sing-Box stopped successfully.
[2025-04-28 13:48:00.588] [info] WarpPlus process exited.
[2025-04-28 13:48:00.589] [info] Helper Status: stopped
[2025-04-28 13:58:49.454] [info] Instance already running.
[2025-04-28 13:59:18.761] [info] Instance already running.
time=2025-04-28T13:48:00.472+03:30 level=INFO msg="scanner mode enabled" max-rtt=1s
time=2025-04-28T13:48:00.473+03:30 level=INFO msg="failed to load identity" subsystem=warp/account path=C:\Users<USERNAME>.3EPAD\AppData\Local\cache/warp-plus/primary error="CreateFile C:\Users<USERNAME>.3EPAD\AppData\Local\cache\warp-plus\primary\wgcf-identity.json: The system cannot find the file specified."
time=2025-04-28T13:48:00.474+03:30 level=INFO msg="creating new identity" subsystem=warp/account
time=2025-04-28T13:48:00.484+03:30 level=ERROR msg="couldn't load primary warp identity"
time=2025-04-28T13:48:00.484+03:30 level=ERROR msg="Post "https://api.cloudflareclient.com/v0a4005/reg\": uTlsConn.Handshake() error: read tcp 172.19.0.1:54227->141.101.113.90:443: wsarecv: An existing connection was forcibly closed by the remote host."

[afshin-ir]

سلام.

می‌بخشید که در حاشیه این سؤال را می‌پرسم.

شما این اسکرین‌شات‌ها را با چه برنامه‌ای می‌گیرید که قسمتی از اسکرین‌شات محو است و قسمتی واضح؟

[sahandmohammadrehzaii]

I configured the program according to singbox Core and I hope this problem is solved because the errors on my side have been fixed. If there are still any, be sure to report them.

[abbasnaqdi]

Hi @sahandmohammadrehzaii For now, TUN mode in Oblivion 2.97.8 doesn't work on my system. I'll revisit this issue once the connection problem is resolved.

[lordtgm]

As I understand the problem, blacklisted apps don't use the DNS of the primary network adapter. For example I can use Discord and its voice chat correctly with Electro DNS (and not without it), but with Oblivion connected blacklisting Discord doesn't make it use the configured DNS.

[sam9010]

دوستان من برنامه نویس ریکت نیتیو هستم
با مودم ایرانسل پرسرعت کار میکنم
اصلا این برا من جواب نمیده
💡 ircfspace.github.io/endpoint
▫️ 188.114.98.224:3476
▫️ 188.114.98.224:500
▫️ 188.114.98.224:2371
▫️ 188.114.98.224:1070
▫️ 188.114.98.224:854
▫️ 188.114.98.224:864
▫️ 188.114.98.224:939
▫️ 188.114.98.224:2408
▫️ 188.114.98.224:908
▫️ 188.114.96.145:1074
اینارو هم تست کردم هیچ وصل نمیشه

[emhashef]

Any news?

[Dr-Bad]

@abbasnaqdi Hi, I know it might be too late, but did you resolve your problem?

[abbasnaqdi]

@Dr-Bad For many months, I haven’t been able to connect to Oblivion using any protocol.
Neither system proxy nor TUN mode works on my Debian or Ubuntu systems.
Oblivion doesn’t work for me with either the default or custom endpoints.
So I haven’t tested again to see whether this issue is fixed or not.

[Dr-Bad]

@abbasnaqdi I just wanted to let you know I'm going to fix this issue.
and as for the connection problem, have you tried this solution?