diff --git a/config/flcalsh/flclash.yaml b/config/flcalsh/flclash.yaml
index cb34b12..5e1a099 100644
--- a/config/flcalsh/flclash.yaml
+++ b/config/flcalsh/flclash.yaml
@@ -11,28 +11,24 @@ external-controller: 127.0.0.1:9090
 
 dns:
   enable: true
-  # listen: 0.0.0.0:53
-  ipv6: false
+  listen: 0.0.0.0:7874
+  default-nameserver:
+  - 223.5.5.5
+  - 119.29.29.29
   enhanced-mode: fake-ip
   fake-ip-range: 198.18.0.1/16
   use-hosts: true
-
-  
-  default-nameserver: [223.5.5.5, 119.29.29.29]
-  nameserver: [https://223.5.5.5/dns-query, https://doh.pub/dns-query]
-  fallback: [https://1.1.1.1/dns-query, https://8.8.8.8/dns-query]
-  fallback-filter:
-    geoip: true
-    geoip-code: CN                 # 关键核心：告诉 Stash 只要国内 DNS 解析出的 IP 不在中国境内，就代表被污染/泄露了，必须丢弃！
-    ipcidr:
-      - 240.0.0.0/4
-      - 0.0.0.0/32
-    geosite:                       # 加上这个更保险
-      - gfw
-      - geolocation-!cn
+  use-system-hosts: true
+  nameserver:
+  - https://223.5.5.5/dns-query
+  - https://doh.pub/dns-query
   nameserver-policy:
-    'geosite:cn': [https://223.5.5.5/dns-query, https://119.29.29.29/dns-query]
-    'rule-set:google,AI,geolocation-!cn': [https://1.1.1.1/dns-query, https://8.8.8.8/dns-query]
+    geosite:cn,apple,private
+    - 223.5.5.5
+    - 119.29.29.29
+    - system
+  proxy-server-nameserver:
+  - udp://127.0.0.1:7874
   fake-ip-filter: 
     - '*.lan'
     - "rule-set:salem@cn,GitHub,fake-ip-filter"