From 825ecf50cc02a85117be2fe1f87baf02b1793edd Mon Sep 17 00:00:00 2001
From: salem <77879189@qq.com>
Date: Thu, 27 Aug 2026 01:17:43 +0800
Subject: [PATCH] =?UTF-8?q?=E6=9B=B4=E6=96=B0=20config/flcalsh/flclash.yam?=
 =?UTF-8?q?l?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 config/flcalsh/flclash.yaml | 32 ++++++++++++++------------------
 1 file changed, 14 insertions(+), 18 deletions(-)

diff --git a/config/flcalsh/flclash.yaml b/config/flcalsh/flclash.yaml
index cb34b12..5e1a099 100644
--- a/config/flcalsh/flclash.yaml
+++ b/config/flcalsh/flclash.yaml
@@ -11,28 +11,24 @@ external-controller: 127.0.0.1:9090
 
 dns:
   enable: true
-  # listen: 0.0.0.0:53
-  ipv6: false
+  listen: 0.0.0.0:7874
+  default-nameserver:
+  - 223.5.5.5
+  - 119.29.29.29
   enhanced-mode: fake-ip
   fake-ip-range: 198.18.0.1/16
   use-hosts: true
-
-  
-  default-nameserver: [223.5.5.5, 119.29.29.29]
-  nameserver: [https://223.5.5.5/dns-query, https://doh.pub/dns-query]
-  fallback: [https://1.1.1.1/dns-query, https://8.8.8.8/dns-query]
-  fallback-filter:
-    geoip: true
-    geoip-code: CN                 # 关键核心：告诉 Stash 只要国内 DNS 解析出的 IP 不在中国境内，就代表被污染/泄露了，必须丢弃！
-    ipcidr:
-      - 240.0.0.0/4
-      - 0.0.0.0/32
-    geosite:                       # 加上这个更保险
-      - gfw
-      - geolocation-!cn
+  use-system-hosts: true
+  nameserver:
+  - https://223.5.5.5/dns-query
+  - https://doh.pub/dns-query
   nameserver-policy:
-    'geosite:cn': [https://223.5.5.5/dns-query, https://119.29.29.29/dns-query]
-    'rule-set:google,AI,geolocation-!cn': [https://1.1.1.1/dns-query, https://8.8.8.8/dns-query]
+    geosite:cn,apple,private
+    - 223.5.5.5
+    - 119.29.29.29
+    - system
+  proxy-server-nameserver:
+  - udp://127.0.0.1:7874
   fake-ip-filter: 
     - '*.lan'
     - "rule-set:salem@cn,GitHub,fake-ip-filter"