From e686c9582b448e2485541e76bf568e9556c89f7f Mon Sep 17 00:00:00 2001 From: salem <77879189@qq.com> Date: Thu, 27 Aug 2026 03:22:28 +0800 Subject: [PATCH] =?UTF-8?q?=E6=9B=B4=E6=96=B0=20config/stash/stash=5Fyaml.?= =?UTF-8?q?yaml?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- config/stash/stash_yaml.yaml | 53 +++++++++++++++++++----------------- 1 file changed, 28 insertions(+), 25 deletions(-) diff --git a/config/stash/stash_yaml.yaml b/config/stash/stash_yaml.yaml index 3e8266d..13fe7c6 100644 --- a/config/stash/stash_yaml.yaml +++ b/config/stash/stash_yaml.yaml @@ -6,23 +6,22 @@ mixed-port: 7890 # 混合端口，HTTP和SOCKS5用一个端口 allow-lan: true # 允许局域网的连接（共享代理） bind-address: "*" # 监听IP白名单，可绑定单个IPv4和v6地址，"*" 为绑定所有IP地址，仅在将allow-lan设置为true时适用 - - -ipv6: false # 开启 IPv6 总开关，关闭阻断所有 IPv6 链接和屏蔽 DNS 请求 AAAA 记录 mode: rule # 规则模式：rule（规则） / global（全局代理）/ direct（全局直连）/ script (脚本) log-level: info # 设置日志输出级别 (5 个级别：silent / error / warning / info / debug) - external-controller: 127.0.0.1:9090 # 外部控制器监听地址，可以使用 RESTful API 来控制你的 clash 内核 +ipv6: false # 开启 IPv6 总开关，关闭阻断所有 IPv6 链接和屏蔽 DNS 请求 AAAA 记录 dns: - enable: true - # listen: 0.0.0.0:53 - ipv6: false - - default-nameserver: [223.5.5.5, 119.29.29.29] - enhanced-mode: fake-ip - fake-ip-range: 198.18.0.1/16 - fake-ip-filter: + enable: true # 关闭将使用系统 DNS + #listen: 0.0.0.0:7874 # DNS 监听地址 + ipv6: false # IPV6解析开关；如果为false，将返回ipv6结果为空 + + enhanced-mode: fake-ip # 模式：redir-host或fake-ip + fake-ip-range: 198.18.0.1/16 # Fake-IP 解析地址池 + fake-ip-filter: # Fake-ip 过滤，列表中的域名返回真实IP + - '*.lan' + - "rule-set:salem@cn,GitHub,fake-ip-filter" + - 'geosite:cn' - '*.lan' - "rule-set:salem@cn,GitHub,fake-ip-filter" - 'geosite:cn' @@ -64,20 +63,24 @@ dns: - 'xbox.*.microsoft.com' - '*.xboxlive.com' use-hosts: true - nameserver: [https://223.5.5.5/dns-query, https://119.29.29.29/dns-query] - fallback: [https://1.1.1.1/dns-query, https://8.8.8.8/dns-query] - #fallback-filter: - #geoip: true - #geoip-code: CN # 关键核心：告诉 Stash 只要国内 DNS 解析出的 IP 不在中国境内，就代表被污染/泄露了，必须丢弃！ - #ipcidr: - #- 240.0.0.0/4 - #- 0.0.0.0/32 - #geosite: # 加上这个更保险 - #- gfw - #- geolocation-!cn + use-system-hosts: true + + default-nameserver: # 解析非IP的dns用的dns服务器，只支持纯IP，（Meta可为其加密） + - 223.5.5.5 + - 119.29.29.29 + nameserver: # 默认DNS服务器，支持udp/tcp/dot/doh/doq + - https://1.1.1.1/dns-query + - https://8.8.8.8/dns-query nameserver-policy: - 'geosite:cn': [https://223.5.5.5/dns-query, https://doh.pub/dns-query] - 'rule-set: google, AI, geolocation-!cn': [https://1.1.1.1/dns-query, https://8.8.8.8/dns-query] + 'geosite:cn,apple,private': + - https://223.5.5.5/dns-query + - https://doh.pub/dns-query + 'geosite:geolocation-!cn,google,category-ai-!cn': + - https://1.1.1.1/dns-query#Google + - https://8.8.8.8/dns-query#Google + proxy-server-nameserver: + - 223.5.5.5 + - 119.29.29.29