更新 config/flcalsh/flclash.yaml

config/flcalsh/flclash.yaml

@@ -3,81 +3,79 @@
 # GitHub: https://github.com/Coldvvater
 # Update Date: 2023.11.25
 
-mixed-port: 7890                     # 混合端口，HTTP和SOCKS5用一个端口
-allow-lan: true                      # 允许局域网的连接（共享代理）
-bind-address: "*"                    # 监听IP白名单，可绑定单个IPv4和v6地址，"*" 为绑定所有IP地址，仅在将allow-lan设置为true时适用
-                      
+# 全局配置 
+port: 7890
+socks-port: 7891
+redir-port: 7892
+mixed-port: 7893
+tproxy-port: 7894
+allow-lan: true
+bind-address: "*"
+ipv6: false
+unified-delay: true
+tcp-concurrent: true
+# interface-name: enp6s18
+log-level: warning
+find-process-mode: 'off'
+global-client-fingerprint: chrome
+keep-alive-idle: 600
+keep-alive-interval: 15
+profile:
+  store-selected: true
+  store-fake-ip: true
 
-ipv6: false                           # 开启 IPv6 总开关，关闭阻断所有 IPv6 链接和屏蔽 DNS 请求 AAAA 记录
-mode: rule                           # 规则模式：rule（规则） / global（全局代理）/ direct（全局直连）/ script (脚本)
-log-level: info                      # 设置日志输出级别 (5 个级别：silent / error / warning / info / debug)
+# 嗅探
+sniffer:
+  enable: true
+  sniff:
+    HTTP:
+      ports: [80, 8080-8880]
+      override-destination: true
+    TLS:
+      ports: [443, 8443]
+    QUIC:
+      ports: [443, 8443]
+  force-domain:
+    - "+.v2ex.com"
+  skip-domain:
+    - "+.baidu.com"
 
-external-controller: 127.0.0.1:9090  # 外部控制器监听地址，可以使用 RESTful API 来控制你的 clash 内核
+# 入站  
+tun:
+  enable: true
+  # system/gvisor/mixed
+  stack: mixed
+  dns-hijack: ["any:53", "tcp://any:53"]
+  #使用nikki，混入全部不修改的情况，开启接口指定为nikki
+  #使用仅内核自行修改下面三项为true
+  #device: nikki
+  auto-route: false
+  auto-redirect: false
+  auto-detect-interface: false
 
+# DNS模块
 dns:
   enable: true
-  # listen: 0.0.0.0:53
+  listen: 0.0.0.0:1053
   ipv6: false
-
-  default-nameserver: [223.5.5.5, 119.29.29.29]
+  respect-rules: true
   enhanced-mode: fake-ip
-  fake-ip-range: 198.18.0.1/16
-  fake-ip-filter: 
-    - '*.lan'
-    - "rule-set:salem@cn,GitHub,fake-ip-filter"
-    - 'geosite:cn'
-    #STUN
-    - '+.stun.*.*'
-    - '+.stun.*.*.*'
-    - '+.stun.*.*.*.*'
-    - '+.stun.*.*.*.*.*'
-    - 'stun.*'
-    - 'ntp.*.com'
-    - 'time.*.com'
-    - 'ntp?.*.com'
-    - 'time?.*.com'
-    - 'time.*.gov'
-    - 'time.*.edu.cn'
-    #微信登录
-    - 'localhost.*.weixin.qq.com'
-    - 'localhost.*.qq.com'
-    #放行NTP服务
-    - 'time.*.apple.com'
-    - 'time-ios.apple.com'
-    - 'time1.*.com'
-    - 'time2.*.com'
-    - 'time3.*.com'
-    - 'time4.*.com'
-    - 'time5.*.com'
-    - 'time6.*.com'
-    - 'time7.*.com'
-    - 'ntp1.*.com'
-    - 'ntp2.*.com'
-    - 'ntp3.*.com'
-    - 'ntp4.*.com'
-    - 'ntp5.*.com'
-    - 'ntp6.*.com'
-    - 'ntp7.*.com'
-    #Microsoft Xbox
-    - 'xbox.*.*.microsoft.com'
-    - '*.*.xboxlive.com'
-    - 'xbox.*.microsoft.com'
-    - '*.xboxlive.com'
-  use-hosts: true
+  fake-ip-range: 28.0.0.1/8
+  fake-ip-filter-mode: blacklist
+  fake-ip-filter:
+    - "rule-set:salem@cn,geosite-cn,GitHub"
+    - "+.msftconnecttest.com"
+    - "+.msftncsi.com"
+    - "time.*.com"
+    - "+.market.xiaomi.com"
+    - "+.pub.3gppnetwork.org"
+    - "+.3gppnetwork.org"
+  default-nameserver: [223.5.5.5, 119.29.29.29]
+  proxy-server-nameserver:
+    - 116.228.111.118
+    - 119.29.29.29
+  # namesever尽量用运营商提供的DNS
   nameserver: [https://223.5.5.5/dns-query, https://doh.pub/dns-query]
-  fallback: [https://1.1.1.1/dns-query, https://8.8.8.8/dns-query]
-  #fallback-filter:
-    #geoip: true
-    #geoip-code: CN                 # 关键核心：告诉 Stash 只要国内 DNS 解析出的 IP 不在中国境内，就代表被污染/泄露了，必须丢弃！
-    #ipcidr:
-      #- 240.0.0.0/4
-      #- 0.0.0.0/32
-    #geosite:                       # 加上这个更保险
-      #- gfw
-      #- geolocation-!cn
-  nameserver-policy:
-    'geosite:cn': [https://223.5.5.5/dns-query, https://119.29.29.29/dns-query]
-    'rule-set: google': [https://1.1.1.1/dns-query, https://8.8.8.8/dns-query]