nikki透明代理问题请教

bisu1991

想你爱我openwrt+nikki实现透明代理,网络架构如下：

WAN-----(PPPOE)route(192.168.124.1)--------（static:192.168.124.140）openwrt（static:192.168.1.1）--------PC(IP:192.168.1.100,GW:192.168.1.1,dns:192.168.1.1)
现在的问题是PC基于浏览器进行代理配置，指向到openwrt nikki http的代理端口这个时候代理正常。
但我理解的透明代理应该是PC不做任务配置，流量自动基于nikki进行处理，但我关闭浏览器代理后只能正常访问原来能正常访问的网站，google这些都打不开。我想请问这个问题怎么排查？
nikki的配置是：


config status 'status'

config config 'config'
        option enabled '1'
        option profile 'subscription:subscription'
        option start_delay '5'
        option scheduled_restart '0'
        option cron_expression '0 3 * * *'
        option test_profile '1'
        option fast_reload '1'

config proxy 'proxy'
        option transparent_proxy '1'
        option tcp_transparent_proxy_mode 'redirect'
        option udp_transparent_proxy_mode 'tun'
        option ipv4_dns_hijack '1'
        option ipv6_dns_hijack '1'
        option ipv4_proxy '1'
        option ipv6_proxy '1'
        option fake_ip_ping_hijack '1'
        option router_proxy '1'
        option lan_proxy '1'
        option access_control_mode 'all'
        list bypass_user 'aria2'
        list bypass_user 'dnsmasq'
        list bypass_user 'ftp'
        list bypass_user 'logd'
        list bypass_user 'nobody'
        list bypass_user 'ntp'
        list bypass_user 'ubus'
        list bypass_group 'aria2'
        list bypass_group 'dnsmasq'
        list bypass_group 'ftp'
        list bypass_group 'logd'
        list bypass_group 'nogroup'
        list bypass_group 'ntp'
        list bypass_group 'ubus'
        option bypass_china_mainland_ip '1'
        option proxy_tcp_dport '0-65535'
        option proxy_udp_dport '0-65535'
        option enabled '1'
        option tcp_mode 'redirect'
        option udp_mode 'tproxy'
        list bypass_dscp '4'
        list lan_inbound_interface 'br-lan'

config subscription 'subscription'
        option name 'JSM'
        option url 'https://XXXXXXXXXX'
        option user_agent '克拉斯'
        option prefer 'remote'
        option success '0'

config mixin 'mixin'
        option log_level 'warning'
        option mode 'global'
        option match_process 'off'
        option ipv6 '0'
        option unify_delay '1'
        option tcp_concurrent '1'
        option tcp_keep_alive_idle '600'
        option tcp_keep_alive_interval '15'
        option ui_path 'ui'
        option ui_url 'https://github.com/Zephyruso/zashboard/releases/latest/download/dist-cdn-fonts.zip'
        option selection_cache '1'
        option allow_lan '1'
        option http_port '8080'
        option socks_port '1080'
        option mixed_port '7890'
        option redir_port '7891'
        option tproxy_port '7892'
        option authentication '0'
        option tun_device 'nikki'
        option tun_stack 'mixed'
        option tun_mtu '9000'
        option tun_gso '1'
        option tun_gso_max_size '65536'
        option tun_dns_hijack '1'
        list tun_dns_hijacks 'tcp://any:53'
        list tun_dns_hijacks 'udp://any:53'
        option tun_endpoint_independent_nat '0'
        option dns_mode 'fake-ip'
        option fake_ip_range '198.18.0.1/16'
        option fake_ip_filter '1'
        option fake_ip_cache '1'
        option dns_respect_rules '1'
        option dns_doh_prefer_http3 '0'
        option dns_ipv6 '1'
        option dns_system_hosts '0'
        option dns_hosts '1'
        option hosts '0'
        option dns_nameserver '1'
        option dns_nameserver_policy '1'
        option sniffer '1'
        option sniffer_sniff_dns_mapping '1'
        option sniffer_sniff_pure_ip '1'
        option sniffer_overwrite_destination '0'
        option sniffer_force_domain_name '0'
        option sniffer_ignore_domain_name '0'
        option sniffer_sniff '1'
        option rule '0'
        option rule_provider '0'
        option geoip_format 'mmdb'
        option geodata_loader 'memconservative'
        option geosite_url 'https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/geosite.dat'
        option geoip_mmdb_url 'https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/geoip-lite.metadb'
        option geoip_dat_url 'https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/geoip-lite.dat'
        option geoip_asn_url 'https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/GeoLite2-ASN.mmdb'
        option geox_auto_update '1'
        option geox_update_interval '24'
        option mixin_file_content '0'
        option ui_name 'Zashboard'
        option api_listen '[::]:9095'
        option dns_listen '[::]:1053'
        list fake_ip_filters '+.lan'
        list fake_ip_filters '+.local'
        list fake_ip_filters 'geosite:cn'
        option fake_ip_filter_mode 'blacklist'

config env 'env'
        option disable_safe_path_check '0'
        option disable_loopback_detector '0'
        option disable_quic_go_gso '0'
        option disable_quic_go_ecn '0'

config authentication
        option enabled '1'
        option username 'nikki'
        option password '369731'

config hosts
        option enabled '0'
        option domain_name 'localhost'
        list ip '127.0.0.1'
        list ip '::1'

config nameserver
        option enabled '1'
        option type 'default-nameserver'
        list nameserver '223.5.5.5'
        list nameserver '119.29.29.29'

config nameserver
        option enabled '1'
        option type 'proxy-server-nameserver'
        list nameserver '223.5.5.5'
        list nameserver '119.29.29.29'

config nameserver
        option enabled '0'
        option type 'direct-nameserver'
        list nameserver 'https://dns.alidns.com/dns-query'
        list nameserver 'https://doh.pub/dns-query'

config nameserver
        option enabled '1'
        option type 'nameserver'
        list nameserver '223.5.5.5'
        list nameserver '119.29.29.29'

config nameserver
        option enabled '0'
        option type 'fallback'
        list nameserver 'https://dns.cloudflare.com/dns-query'
        list nameserver 'https://dns.google/dns-query'

config nameserver_policy
        option enabled '1'
        option matcher 'geosite:cn,private'
        list nameserver '223.5.5.5'
        list nameserver '119.29.29.29'

config nameserver_policy
        option enabled '1'
        option matcher 'geosite:geolocation-!cn'
        list nameserver 'https://dns.cloudflare.com/dns-query'
        list nameserver 'https://dns.google/dns-query'

config sniff
        option enabled '1'
        option protocol 'HTTP'
        list port '80'
        list port '8080'
        option overwrite_destination '1'

config sniff
        option enabled '1'
        option protocol 'TLS'
        list port '443'
        list port '8443'
        option overwrite_destination '1'

config sniff
        option enabled '1'
        option protocol 'QUIC'
        list port '443'
        list port '8443'
        option overwrite_destination '1'

config editor 'editor'

config log 'log'