From 1533a8ec1f89f3ec89b3194e48e5699fb5014f64 Mon Sep 17 00:00:00 2001
From: salem <77879189@qq.com>
Date: Thu, 27 Aug 2026 02:13:10 +0800
Subject: [PATCH] =?UTF-8?q?=E6=9B=B4=E6=96=B0=20config/flcalsh/flclash.yam?=
 =?UTF-8?q?l?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 config/flcalsh/flclash.yaml | 17 +++++++++++++----
 1 file changed, 13 insertions(+), 4 deletions(-)

diff --git a/config/flcalsh/flclash.yaml b/config/flcalsh/flclash.yaml
index bff014a..27f45b3 100644
--- a/config/flcalsh/flclash.yaml
+++ b/config/flcalsh/flclash.yaml
@@ -9,6 +9,15 @@ mode: rule
 log-level: info
 external-controller: 127.0.0.1:9090
 
+tun:
+  enable: true                # 1. 必须改为 true 才能真正启用
+  stack: mixed                # 2. 改为 mixed 性能最好，或者用 system
+  auto-route: true            
+  strict-route: true          # 3. 建议改为 true，开启严格路由模式，能够更彻底地封死特定软件绕过代理的行为
+  auto-detect-interface: true 
+  dns-hijack:
+    - any:53                  # 4. 修正了这里的空格缩进，强行劫持全部本地 DNS 请求
+
 dns:
   enable: true
   listen: 0.0.0.0:7874
@@ -17,11 +26,11 @@ dns:
   use-hosts: true
   use-system-hosts: true
   default-nameserver:
-  - 223.5.5.5
-  - 119.29.29.29
+    - 223.5.5.5
+    - 119.29.29.29
   nameserver:
-  - https://223.5.5.5/dns-query
-  - https://doh.pub/dns-query
+    - https://223.5.5.5/dns-query
+    - https://doh.pub/dns-query
   nameserver-policy:
    'geosite:cn,apple,private':
      - 223.5.5.5