凌风认证计费[LFRadius]文档-5.17.放行在线支付域名

5.17.放行在线支付域名
portal未上线成功的无线用户和已经过期的用户因为网络到期无法再打开网页，我们可以通过路由的设置来放行在线支付
除了放行计费的IP和域名外，我们还需要放行微信二维码支付，和支付宝支付。

支持域名前缀自动匹配的路由放行，微信支付4个，支付宝3个，计费域名，聚合支付域名，下面图片内可能没显示全部域名请自行添加。
weixin.qq.com
wx.tenpay.com
res.servicewechat.com
launchwxacode.wxqcloud.qq.com.cn
alipay.com
alipayobjects.com
alicdn.com
计费域名
如果使用的是聚合支付，还需要放行域名 pay.netyiyang.com

支付宝除了放行上面一个域名外，还需要放行一些蚂蚁金服的公网IP，要不支付宝这个APP无法完成支付。
45.113.40.0/22
103.52.196.0/22
110.75.128.0/17
110.76.0.0/18
119.42.224.0/19
203.209.224.0/19
可同时放行微信服务器的IP
101.89.47.18
101.91.34.103
101.91.37.13
106.53.157.243
109.244.129.223
109.244.145.152
109.244.184.250
112.53.42.235
112.60.20.154
112.65.193.153
112.90.80.215
116.128.170.42
116.128.184.169
117.144.228.18
117.144.228.62
119.147.6.203
119.147.6.237
120.232.65.161
120.233.18.202
121.14.23.85
129.226.107.92
157.148.36.94
157.148.58.82
157.255.218.109
162.62.115.186
162.62.115.246
175.27.5.221
183.2.143.222
221.181.99.40
43.129.2.204
43.130.8.250
43.130.8.50
43.153.236.216
43.153.236.26
43.159.233.227
81.69.216.43
81.71.56.234
106.55.206.146
106.55.206.211
106.55.207.148
106.55.207.31
118.126.124.186
118.126.124.246
119.29.180.49
119.29.9.101
124.223.151.119
129.226.105.242
162.62.80.57
162.62.80.8
162.62.81.123
175.24.211.142
175.24.211.157
175.24.211.198
175.24.211.31
175.24.211.4
175.24.212.10
175.24.212.185
175.24.212.195
175.24.213.149
175.24.214.150
175.24.214.222
175.27.64.215
175.27.65.216
42.192.0.152
42.192.0.224
42.192.6.57
43.132.112.30
43.132.141.238
43.143.52.12
43.143.59.119
81.69.101.193
81.69.101.225
81.69.101.233
81.69.101.237
81.69.103.129
81.69.103.147
81.69.103.163
81.69.103.205
81.69.103.236
81.69.103.238
81.69.103.37
81.69.103.74
81.71.140.59
81.71.19.101
111.229.150.102
42.192.5.24
111.231.120.120
124.221.215.213
111.229.102.234
101.43.57.247
49.235.97.153
1.15.77.182
124.220.103.169
101.43.60.108
124.220.226.99
121.4.104.160
123.207.188.148
101.35.214.209
115.159.126.224
101.34.79.105
124.223.188.110
111.229.150.102
43.142.115.243
115.159.145.49
122.51.51.45
1.15.66.222
118.25.155.162
110.40.153.219
111.231.165.30
124.222.232.18
1.116.119.192
124.221.32.50
110.40.132.164
124.220.0.148
49.235.43.218
43.143.64.219
122.51.55.51
124.220.202.126
124.222.246.206
123.206.124.168
150.158.2.138
101.35.219.30
124.223.33.44
110.40.154.132
43.143.57.46
49.235.176.207
124.220.14.134

如果要防止苹果wifi熄灯，还要放行http方式captive.apple.com域名，但是放行了这个域名苹果手机就不会弹登录框了需要手动打开浏览器。
不支持域名前缀自动匹配的路由，要放行全部域名。
#微信的
weixin.qq.com
long.weixin.qq.com
szlong.weixin.qq.com
extshort.weixin.qq.com
szshort.weixin.qq.com
mp.weixin.qq.com
szextshort.weixin.qq.com
short.weixin.qq.com
short.pay.weixin.qq.com
minorshort.weixin.qq.com
dns.weixin.qq.com
wifi.weixin.qq.com
wx.tenpay.com
support.weixin.qq.com
res.servicewechat.com
launchwxacode.wxqcloud.qq.com.cn
#支付宝的
openapi.alipay.com
mclient.alipay.com
unitradeprod.alipay.com
excashier.alipay.com
cashier.alipay.com
auth.alipay.com
qr.alipay.com
render.alipay.com
alipayobjects.com
alicdn.com

放行后，已经过期的账号就可以直接用在线支付给自己续费了。
请注意放行weixin.qq.com后会导致用户已经过期仍然可以使用微信聊天相册等部分功能，但微信视频外链不能打开。
下图为爱快的白名单，把域名白名单和https域名白名单设置成一样。

下图为Panabit的白名单
先自定义一个协议，英文名：lingfeng，中文名：凌风计费，TCP和UDP不填，之后域名关联加入以下域名。

放行刚刚添加的协议组，免认证IP里面要添加放行支付宝的公网IP段。

下图为Mikrotik RouterOS的白名单，放行IP埴Dst.Address，放行域名填Dst.Host。

Mikrotik RouterOS脚本方式添加

/ip hotspot walled-garden ip
add action=accept disabled=no dst-host=weixin.qq.com comment=Weixin
add action=accept disabled=no dst-host=long.weixin.qq.com comment=Weixin
add action=accept disabled=no dst-host=szlong.weixin.qq.com comment=Weixin
add action=accept disabled=no dst-host=extshort.weixin.qq.com comment=Weixin
add action=accept disabled=no dst-host=szshort.weixin.qq.com comment=Weixin
add action=accept disabled=no dst-host=mp.weixin.qq.com comment=Weixin
add action=accept disabled=no dst-host=szextshort.weixin.qq.com comment=Weixin
add action=accept disabled=no dst-host=short.weixin.qq.com comment=Weixin
add action=accept disabled=no dst-host=short.pay.weixin.qq.com comment=Weixin
add action=accept disabled=no dst-host=minorshort.weixin.qq.com comment=Weixin
add action=accept disabled=no dst-host=dns.weixin.qq.com comment=Weixin
add action=accept disabled=no dst-host=wifi.weixin.qq.com comment=Weixin
add action=accept disabled=no dst-host=wx.tenpay.com comment=Weixin
add action=accept disabled=no dst-host=support.weixin.qq.com comment=Weixin
add action=accept disabled=no dst-host=res.servicewechat.com comment=Weixin
add action=accept disabled=no dst-host=launchwxacode.wxqcloud.qq.com.cn comment=Weixin
#支付宝
add action=accept disabled=no dst-host=openapi.alipay.com comment=Alipay
add action=accept disabled=no dst-host=mclient.alipay.com comment=Alipay
add action=accept disabled=no dst-host=unitradeprod.alipay.com comment=Alipay
add action=accept disabled=no dst-host=excashier.alipay.com comment=Alipay
add action=accept disabled=no dst-host=cashier.alipay.com comment=Alipay
add action=accept disabled=no dst-host=auth.alipay.com comment=Alipay
add action=accept disabled=no dst-host=qr.alipay.com comment=Alipay
add action=accept disabled=no dst-host=render.alipay.com comment=Alipay
add action=accept disabled=no dst-host=alipayobjects.com comment=Alipay
add action=accept disabled=no dst-host=alicdn.com comment=Alipay
add action=accept disabled=no dst-address=45.113.40.0/22 comment=Alipay
add action=accept disabled=no dst-address=103.52.196.0/22 comment=Alipay
add action=accept disabled=no dst-address=110.75.128.0/17 comment=Alipay
add action=accept disabled=no dst-address=110.76.0.0/18 comment=Alipay
add action=accept disabled=no dst-address=119.42.224.0/19 comment=Alipay
add action=accept disabled=no dst-address=203.209.224.0/19 comment=Alipay

下图为高恪的白名单

高恪公网批量放行

1 45.113.40.0/22 white 支付宝
1 103.52.196.0/22 white 支付宝
1 110.75.128.0/17 white 支付宝
1 110.76.0.0/18 white 支付宝
1 119.42.224.0/19 white 支付宝
1 203.209.224.0/19 white 支付宝

下图为维盟的白名单

维盟可以制作成一个cfg文件导入进去。

# 以下是基于外网IP例外 t:类型(fip),v:内容(如果要增加备注用'|'分隔)
{t:fip,v:45.113.40.1-45.113.43.254|Alipay}
{t:fip,v:103.52.196.1-103.52.199.254|Alipay}
{t:fip,v:110.75.128.1-110.75.255.254|Alipay}
{t:fip,v:110.76.0.1-110.76.63.254|Alipay}
{t:fip,v:119.42.224.1-119.42.255.254|Alipay}
{t:fip,v:203.209.224.1-203.209.255.254|Alipay}

# 以下是基于外网DNS例外 t:类型(dns),v:内容(如果要增加备注用'|'分隔)
{t:dns,v:weixin.qq.com|Weixin}
{t:dns,v:long.weixin.qq.com|Weixin}
{t:dns,v:szlong.weixin.qq.com|Weixin}
{t:dns,v:extshort.weixin.qq.com|Weixin}
{t:dns,v:szshort.weixin.qq.com|Weixin}
{t:dns,v:mp.weixin.qq.com|Weixin}
{t:dns,v:szextshort.weixin.qq.com|Weixin}
{t:dns,v:short.weixin.qq.com|Weixin}
{t:dns,v:short.pay.weixin.qq.com|Weixin}
{t:dns,v:minorshort.weixin.qq.com|Weixin}
{t:dns,v:dns.weixin.qq.com|Weixin}
{t:dns,v:wifi.weixin.qq.com|Weixin}
{t:dns,v:wx.tenpay.com|Weixin}
{t:dns,v:support.weixin.qq.com|Weixin}
{t:dns,v:res.servicewechat.com|Weixin}
{t:dns,v:launchwxacode.wxqcloud.qq.com.cn|Weixin}
{t:dns,v:openapi.alipay.com|Alipay}
{t:dns,v:mclient.alipay.com|Alipay}
{t:dns,v:unitradeprod.alipay.com|Alipay}
{t:dns,v:excashier.alipay.com|Alipay}
{t:dns,v:cashier.alipay.com|Alipay}
{t:dns,v:auth.alipay.com|Alipay}
{t:dns,v:qr.alipay.com|Alipay}
{t:dns,v:render.alipay.com|Alipay}
{t:dns,v:alipayobjects.com|Alipay}
{t:dns,v:alicdn.com|Alipay}

文档更新时间: 2025-08-05 01:10 作者：admin