Possible Data Leak: "Route" feature is misbehaving

[fluxoak]

I upgraded Exclave on F-Droid recently, and found that Route is not working as intended:

Route's:

• A: Outbound proxy is not hornored
• B: Traffic not getting blocked

Settings > Route mode is set to rule.

---

A: Outbound proxy is not hornored

1. In Configuration, create only 1 VLESS profile (name it "test"). There is just only this profile.
2. In Route, create following rules in order:

Rule1:

Name: IPTV
Applications: 1 (IPTV software)
network: TCP
outbound: "Select profile" > "test"

Rule2:

Name: block-tcp
Port: 1-52,54-442,444-65535
network: TCP
outbound: Block

Rule3:

Name: block-udp
Port: 1-52,54-65535
network: UDP
outbound: Block

3. Apply the config by restarting VPN and Start IPTV.

Result: IPTV cannot connect because it goes to below rule(2/3). Why it doens't route to test(because of Rule1)?

---

B: Traffic not getting blocked

1. In Route, create following rules in order:

Rule2:

Name: block-tcp
Port: 1-52,54-442,444-65535
network: TCP
outbound: Block

Rule3:

Name: block-udp
Port: 1-52,54-65535
network: UDP
outbound: Block

2. Observe the log.

Why Exclave didn't block 8.8.8.8:7 connection? It simply got accepted, Port 7 is 1-52 range so why not blocked?

[dyhkwong]

Can't reproduce. The generated config and the log file in debug log level are not provided.