reply from unexpected source: 114.211.201.213#58174, expected 223.5.5.5#53

[oule]

各位好，我在网关服务器上搭建了v2ray+wireguard(原来的warp)，做透明代理，现在代理局域网没发现什么问题。
但是网关本机不能解析域名，报上面标题的错误，可能我的用法有些不同。
我查了一下资料，看到issue #68，和我的不太一样，我也按照提示把监听53端口的dnsmasq给关闭了，网关本机域名还是解析不了，
nslookup baidu.com，就会报标题的错误，一头雾水，求助：）

v2ray日志报错：

2024/02/13 18:09:32 [Info] [3945232330] transport/internet: failed to bind source address to [114 211 201 213] > address already in use

v2ray版本：

V2Ray 5.12.1 (V2Fly, a community-driven edition of V2Ray.) Custom (go1.21.4 linux/amd64) A unified platform for anti-censorship.
wireguard版本：1.0.20210223-1

配置：

wireguard：

[Interface]
Address = 172.16.0.2/32
Address = wwwwwwww
MTU = 1280
Table = off
SaveConfig = false
ListenPort = 56501
FwMark = 0xca6c
PrivateKey = n/1SUtzH0JuVo51h2
#DNS = 1.1.1.1
PostUp = /etc/wireguard/scripts/wg.postup.sh
PreDown = /etc/wireguard/scripts/wg.predown.sh

[Peer]
PublicKey = bmXOC+F1FxH5/1SUtzH0JuVo51h2wPfgyo=
AllowedIPs = 0.0.0.0/0, ::/0
Endpoint = 162.159.193.8:2408
#persistent-keepalive = 25

v2ray配置：

{
  "inbounds": [
    {
      "tag": "all-in",
      "listen": "0.0.0.0",
      "port": 1081,
      "protocol": "dokodemo-door",
      "settings": {
        "network": "tcp,udp",
        "followRedirect": true
      },
      "streamSettings": {
        "sockopt": {
          "tproxy": "tproxy"
        }
      },
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls"
        ]
      }
    }
  ],
  "outbounds": [
    {
      "tag": "direct",
      "protocol": "freedom",
      "settings": {
        "domainStrategy": "UseIPv4"
      },
      "streamSettings": {
        "sockopt": {
          "mark": 3
        }
      }
    },
    {
      "tag": "directByWarp",
      "protocol": "freedom",
      "settings": {
        "domainStrategy": "UseIPv4"
      },
      "streamSettings": {
        "sockopt": {
          "mark": 2
        }
      }
    },
    {
      "tag": "blocked",
      "protocol": "blackhole",
      "settings": {
        "response": {
          "type": "http"
        }
      }
    },
    {
      "tag": "dns-out",
      "protocol": "dns",
      "streamSettings": {
        "sockopt": {
          "mark": 2
        }
      }
    }
  ],
  "dns": {
    "hosts": {
      "geosite:category-ads-all": "127.0.0.1",
      "dns.google": "8.8.8.8",
      "dns.pub": "119.29.29.29",
      "dns.alidns.com": "223.5.5.5"
    },
    "servers": [
      {
        "address": "https://1.1.1.1/dns-query",
        "domains": [
          "geosite:geolocation-!cn"
        ],
        "expectIPs": [
          "geoip:!cn"
        ]
      },
      "1.1.1.1",
      "8.8.8.8",
      {
        "address": "119.29.29.29",
        "domains": [
          "geosite:cn"
        ],
        "expectIPs": [
          "geoip:cn"
        ]
      },
      "223.5.5.5",
      "localhost"
    ],
    "queryStrategy": "UseIPv4"
  },
  "routing": {
    "domainStrategy": "IPIfNonMatch",
    "domainMatcher": "mph",
    "rules": [
      {
        "type": "field",
        "inboundTag": [
          "all-in",
          "sock-in"
        ],
        "port": 53,
        "network": "udp",
        "outboundTag": "dns-out"
      },
      {
        "type": "field",
        "ip": [
          "geoip:private",
          "geoip:cn"
        ],
        "outboundTag": "direct"
      },
      {
        "type": "field",
        "domain": [
          "geosite:private",
          "geosite:cn",
          "geosite:tld-cn",
          "geosite:icloud"
        ],
        "outboundTag": "direct"
      },
      {
        "type": "field",
        "ip": [
          "1.1.1.1",
          "8.8.8.8"
        ],
        "outboundTag": "directByWarp"
      },
      {
        "type": "field",
        "domain": [
          "geosite:geolocation-!cn",
          "geosite:google",
          "domain:googleapis.cn",
          "dns.google",
          "domain:gstatic.com"
        ],
        "outboundTag": "directByWarp"
      },
      {
        "type": "field",
        "network": "tcp,udp",
        "outboundTag": "directByWarp"
      }
    ]
  }
}

防火墙配置wg.postup.sh

*mangle
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
:PROXY_LAN - [0:0]
:PROXY_LOCAL - [0:0]
-A PREROUTING -j PROXY_LAN
-A OUTPUT -j PROXY_LOCAL
-A PROXY_LAN -i ppp0 -j RETURN
-A PROXY_LAN -d 172.16.0.2/32 -j RETURN
-A PROXY_LAN -d 224.0.0.0/4 -j RETURN
-A PROXY_LAN -d 255.255.255.255/32 -j RETURN
-A PROXY_LAN -d 192.168.0.0/16 -p tcp -j RETURN
-A PROXY_LAN -d 192.168.0.0/16 -p udp -m udp ! --dport 53 -j RETURN
-A PROXY_LAN -m mark --mark 0x2 -j RETURN
-A PROXY_LAN -m mark --mark 0x3 -j RETURN
-A PROXY_LAN -p udp -j TPROXY --on-port 1081 --on-ip 127.0.0.1 --tproxy-mark 0x1/0xffffffff
-A PROXY_LAN -p tcp -j TPROXY --on-port 1081 --on-ip 127.0.0.1 --tproxy-mark 0x1/0xffffffff
-A PROXY_LOCAL -d 162.159.193.8/32 -j RETURN
-A PROXY_LOCAL -d 127.0.0.1/32 -j RETURN
-A PROXY_LOCAL -d 172.16.0.2/32 -j RETURN
-A PROXY_LOCAL -d 224.0.0.0/4 -j RETURN
-A PROXY_LOCAL -d 255.255.255.255/32 -j RETURN
-A PROXY_LOCAL -d 192.168.0.0/16 -p tcp -j RETURN
-A PROXY_LOCAL -d 192.168.0.0/16 -p udp -m udp ! --dport 53 -j RETURN
-A PROXY_LOCAL -m mark --mark 0x2 -j RETURN
-A PROXY_LOCAL -m mark --mark 0x3 -j RETURN
-A PROXY_LOCAL -p udp -j MARK --set-xmark 0x1/0xffffffff
-A PROXY_LOCAL -p tcp -j MARK --set-xmark 0x1/0xffffffff
COMMIT

策略路由:

ip rule add fwmark 1 table 100
ip route add local default dev lo table 100

ip rule add fwmark 2 table 200
ip route add default dev warp table 200