From 7e800bcc7ab55f3f2694ac4004745de6db2e8140 Mon Sep 17 00:00:00 2001 From: salem <77879189@qq.com> Date: Wed, 26 Aug 2026 23:51:00 +0800 Subject: [PATCH] =?UTF-8?q?=E6=9B=B4=E6=96=B0=20config/flcalsh/flclash.yam?= =?UTF-8?q?l?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- config/flcalsh/flclash.yaml | 132 ++++++++++++++++++------------------ 1 file changed, 65 insertions(+), 67 deletions(-) diff --git a/config/flcalsh/flclash.yaml b/config/flcalsh/flclash.yaml index 7b1deb0..7e15d7f 100644 --- a/config/flcalsh/flclash.yaml +++ b/config/flcalsh/flclash.yaml @@ -3,81 +3,79 @@ # GitHub: https://github.com/Coldvvater # Update Date: 2023.11.25 -mixed-port: 7890 # 混合端口，HTTP和SOCKS5用一个端口 -allow-lan: true # 允许局域网的连接（共享代理） -bind-address: "*" # 监听IP白名单，可绑定单个IPv4和v6地址，"*" 为绑定所有IP地址，仅在将allow-lan设置为true时适用 - +# 全局配置 +port: 7890 +socks-port: 7891 +redir-port: 7892 +mixed-port: 7893 +tproxy-port: 7894 +allow-lan: true +bind-address: "*" +ipv6: false +unified-delay: true +tcp-concurrent: true +# interface-name: enp6s18 +log-level: warning +find-process-mode: 'off' +global-client-fingerprint: chrome +keep-alive-idle: 600 +keep-alive-interval: 15 +profile: + store-selected: true + store-fake-ip: true -ipv6: false # 开启 IPv6 总开关，关闭阻断所有 IPv6 链接和屏蔽 DNS 请求 AAAA 记录 -mode: rule # 规则模式：rule（规则） / global（全局代理）/ direct（全局直连）/ script (脚本) -log-level: info # 设置日志输出级别 (5 个级别：silent / error / warning / info / debug) +# 嗅探 +sniffer: + enable: true + sniff: + HTTP: + ports: [80, 8080-8880] + override-destination: true + TLS: + ports: [443, 8443] + QUIC: + ports: [443, 8443] + force-domain: + - "+.v2ex.com" + skip-domain: + - "+.baidu.com" -external-controller: 127.0.0.1:9090 # 外部控制器监听地址，可以使用 RESTful API 来控制你的 clash 内核 +# 入站 +tun: + enable: true + # system/gvisor/mixed + stack: mixed + dns-hijack: ["any:53", "tcp://any:53"] + #使用nikki，混入全部不修改的情况，开启接口指定为nikki + #使用仅内核自行修改下面三项为true + #device: nikki + auto-route: false + auto-redirect: false + auto-detect-interface: false +# DNS模块 dns: enable: true - # listen: 0.0.0.0:53 + listen: 0.0.0.0:1053 ipv6: false - - default-nameserver: [223.5.5.5, 119.29.29.29] + respect-rules: true enhanced-mode: fake-ip - fake-ip-range: 198.18.0.1/16 - fake-ip-filter: - - '*.lan' - - "rule-set:salem@cn,GitHub,fake-ip-filter" - - 'geosite:cn' - #STUN - - '+.stun.*.*' - - '+.stun.*.*.*' - - '+.stun.*.*.*.*' - - '+.stun.*.*.*.*.*' - - 'stun.*' - - 'ntp.*.com' - - 'time.*.com' - - 'ntp?.*.com' - - 'time?.*.com' - - 'time.*.gov' - - 'time.*.edu.cn' - #微信登录 - - 'localhost.*.weixin.qq.com' - - 'localhost.*.qq.com' - #放行NTP服务 - - 'time.*.apple.com' - - 'time-ios.apple.com' - - 'time1.*.com' - - 'time2.*.com' - - 'time3.*.com' - - 'time4.*.com' - - 'time5.*.com' - - 'time6.*.com' - - 'time7.*.com' - - 'ntp1.*.com' - - 'ntp2.*.com' - - 'ntp3.*.com' - - 'ntp4.*.com' - - 'ntp5.*.com' - - 'ntp6.*.com' - - 'ntp7.*.com' - #Microsoft Xbox - - 'xbox.*.*.microsoft.com' - - '*.*.xboxlive.com' - - 'xbox.*.microsoft.com' - - '*.xboxlive.com' - use-hosts: true + fake-ip-range: 28.0.0.1/8 + fake-ip-filter-mode: blacklist + fake-ip-filter: + - "rule-set:salem@cn,geosite-cn,GitHub" + - "+.msftconnecttest.com" + - "+.msftncsi.com" + - "time.*.com" + - "+.market.xiaomi.com" + - "+.pub.3gppnetwork.org" + - "+.3gppnetwork.org" + default-nameserver: [223.5.5.5, 119.29.29.29] + proxy-server-nameserver: + - 116.228.111.118 + - 119.29.29.29 + # namesever尽量用运营商提供的DNS nameserver: [https://223.5.5.5/dns-query, https://doh.pub/dns-query] - fallback: [https://1.1.1.1/dns-query, https://8.8.8.8/dns-query] - #fallback-filter: - #geoip: true - #geoip-code: CN # 关键核心：告诉 Stash 只要国内 DNS 解析出的 IP 不在中国境内，就代表被污染/泄露了，必须丢弃！ - #ipcidr: - #- 240.0.0.0/4 - #- 0.0.0.0/32 - #geosite: # 加上这个更保险 - #- gfw - #- geolocation-!cn - nameserver-policy: - 'geosite:cn': [https://223.5.5.5/dns-query, https://119.29.29.29/dns-query] - 'rule-set: google': [https://1.1.1.1/dns-query, https://8.8.8.8/dns-query]