Internet doesn't work with proxy client installed

Ask Fedora
1

I use a multi-protocol proxy client called Nekoray and after it’s been installed internet just does not work with the client off. I usually need to turn it on and back off to make things work, although sometimes one time is not enough.

How could this issue be solved? It has been discussed on GitHub, and it messes up internet connection not exclusively on Linux: BUG: After some time, the Internet stops working completely. · Issue #1563 · MatsuriDayo/nekoray · GitHub

Also, maybe you could recommend an alternative client for VLESS protocol.

I use Fedora 43 and Nekoray ver 3.26

2

NekoBox > System Proxy > Uncheck

These work for me:

2 Likes
3

I’ve chosen Throne since it has a Fedora repository. Is there a way to avoid it asking for sudo privileges every time I turn on a TUN mode connection?

5

If you are in Russia or Belarus, what is your way of setting up routing in Throne? My understanding is that it’s better/compromises the server less if .ru websites open through no proxy.

6

From their Github Readme:

To create and manage a system TUN interface, root access is required, without it, you will have to grant the Core some Cap_xxx_admin and still, need to enter your password 3 to 4 times per TUN activation. You can also opt to disable the automatic privilege escalation in Basic Settings>Security , but note that features that require root access will stop working unless you manually grant the needed permissions.

So it doesn’t look like you can disable root requests and retain usability or functionality.

7

Could the method described in this response on Stack Exchange work?

8

BTW another issue I can see is – wifi and internet work, but in the top panel, there’s a permanent question mark on top of the wifi icon.

image

9

Enabling Tun mode asks for this:

pkexec /usr/bin/chown root:root /usr/lib64/Throne/Core
pkexec /usr/bin/chmod u+s /usr/lib64/Throne/Core

It should keep the privileges unless you reinstall the package.

If the issue persists, try using a workaround:

sudo tee /etc/polkit-1/rules.d/00-pkexec.rules << EOF > /dev/null
polkit.addRule(function(action, subject) {
if (action.id == "org.freedesktop.policykit.exec"
&& subject.isInGroup("wheel")) {
return polkit.Result.YES;
}});
EOF
sudo systemctl restart polkit.service

I use split routing with IP sets by GeoIP for Tor running on the router, which applies to all LAN clients, so I don’t really need desktop proxy apps.

1 Like
10

You are right, so far it has only required entering password once. Because it is a Nekoray fork, I was expecting it to behave otherwise (had to enter password three times each time I ran a Nekoray profile which was crazily annoying).

1 Like