DNS泄露问题 #1786
Answered
by
screousi0103
seekajobs1337
asked this question in
Q&A
DNS泄露问题
#1786
-
|
配置如下 |
Beta Was this translation helpful? Give feedback.
Answered by
screousi0103
Jan 16, 2025
Replies: 3 comments 6 replies
-
|
MATCH,地区选择 |
Beta Was this translation helpful? Give feedback.
1 reply
-
|
一样 |
Beta Was this translation helpful? Give feedback.
-
|
https://wiki.metacubex.one/config/dns/#ecs-override 你的ns已经有可以连通的纯ip形式的了，default可以删了 |
Beta Was this translation helpful? Give feedback.
4 replies
-
|
请问应该怎么加呢 ，该加在哪个地方 方便给个实例看看嘛 |
Beta Was this translation helpful? Give feedback.
-
|
这不就是实例吗 |
Beta Was this translation helpful? Give feedback.
-
mode: rule
unified-delay: true
tcp-concurrent: true
ipv6: true
geodata-mode: true
geox-url:
geoip: "https://cdn.jsdelivr.net/gh/Loyalsoldier/v2ray-rules-dat@release/geoip.dat"
geosite: "https://cdn.jsdelivr.net/gh/Loyalsoldier/v2ray-rules-dat@release/geosite.dat"
profile:
store-selected: true
store-fake-ip: true
tun:
enable: true
stack: gvisor
auto-route: true
auto-detect-interface: true
dns-hijack:
- any:53
mtu: 1492
dns:
enable: true
prefer-h3: true
use-hosts: false
listen: 127.0.0.1:5335
ipv6: true
enhanced-mode: fake-ip
fake-ip-range: 198.18.0.0/15
fake-ip-filter-mode: blacklist
nameserver-policy:
"geosite:cn,private": ["https://doh.pub/dns-query#ecs=223.6.6.6/24&ecs-override=true","https://223.5.5.5/dns-query#ecs=119.29.29.29/24&ecs-override=true"]
nameserver: ["https://1.0.0.1/dns-query#ecs=8.8.8.8/24&ecs-override=true","https://dns.google/dns-query#ecs=1.1.1.1/24&ecs-override=true"]
fake-ip-filter:
[
"*.lan",
"stun.*.*.*",
"stun.*.*",
time.windows.com,
time.nist.gov,
time.apple.com,
time.asia.apple.com,
"*.ntp.org.cn",
"*.openwrt.pool.ntp.org",
time1.cloud.tencent.com,
time.ustc.edu.cn,
pool.ntp.org,
ntp.ubuntu.com,
ntp.aliyun.com,
ntp1.aliyun.com,
ntp2.aliyun.com,
ntp3.aliyun.com,
ntp4.aliyun.com,
ntp5.aliyun.com,
ntp6.aliyun.com,
ntp7.aliyun.com,
time1.aliyun.com,
time2.aliyun.com,
time3.aliyun.com,
time4.aliyun.com,
time5.aliyun.com,
time6.aliyun.com,
time7.aliyun.com,
"*.time.edu.cn",
time1.apple.com,
time2.apple.com,
time3.apple.com,
time4.apple.com,
time5.apple.com,
time6.apple.com,
time7.apple.com,
time1.google.com,
time2.google.com,
time3.google.com,
time4.google.com,
music.163.com,
"*.music.163.com",
"*.126.net",
musicapi.taihe.com,
music.taihe.com,
songsearch.kugou.com,
trackercdn.kugou.com,
"*.kuwo.cn",
api-jooxtt.sanook.com,
api.joox.com,
joox.com,
y.qq.com,
"*.y.qq.com",
streamoc.music.tc.qq.com,
mobileoc.music.tc.qq.com,
isure.stream.qqmusic.qq.com,
dl.stream.qqmusic.qq.com,
aqqmusic.tc.qq.com,
amobile.music.tc.qq.com,
"*.xiami.com",
"*.music.migu.cn",
music.migu.cn,
"*.msftconnecttest.com",
"*.msftncsi.com",
localhost.ptlogin2.qq.com,
"*.*.*.srv.nintendo.net",
"*.*.stun.playstation.net",
"xbox.*.*.microsoft.com",
"*.ipv6.microsoft.com",
"*.*.xboxlive.com",
speedtest.cros.wr.pvp.net,
]
rule-providers:
reject:
type: http
behavior: domain
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt"
path: ./ruleset/reject.yaml
interval: 86400
proxy:
type: http
behavior: domain
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt"
path: ./ruleset/proxy.yaml
interval: 86400
direct:
type: http
behavior: domain
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt"
path: ./ruleset/direct.yaml
interval: 86400
private:
type: http
behavior: domain
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt"
path: ./ruleset/private.yaml
interval: 86400
cncidr:
type: http
behavior: ipcidr
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/cncidr.txt"
path: ./ruleset/cncidr.yaml
interval: 86400
rules:
- DOMAIN,clash.razord.top,DIRECT
- DOMAIN,yacd.haishan.me,DIRECT
- RULE-SET,private,DIRECT
- RULE-SET,reject,广告
- RULE-SET,proxy,地区选择
- RULE-SET,direct,DIRECT
- RULE-SET,cncidr,DIRECT
- GEOIP,PRIVATE,DIRECT
- GEOIP,CN,DIRECT
- MATCH,地区选择 |
Beta Was this translation helpful? Give feedback.
-
谢谢，我去试试看 |
Beta Was this translation helpful? Give feedback.
Answer selected by
seekajobs1337
-
|
完美解决 配置如下： |
Beta Was this translation helpful? Give feedback.
1 reply
-
|
更新：删除default并更改google纯ip DNS |
Beta Was this translation helpful? Give feedback.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
https://wiki.metacubex.one/config/dns/#ecs-override
你的ns已经有可以连通的纯ip形式的了，default可以删了