Mihomo (原Clash) 自用配置

DNS防泄漏查询#

查询地址:
其实吧,我感觉DNS泄露这东西,咋个说呢,感觉并没啥大用!仁者见仁吧
DNS解析流程#

节点配置#

1
### 全局配置
2
mixed-port: 7890 # HTTP(S) + SOCKS 混合代理端口，Clash 主代理入口
3
allow-lan: true # 允许局域网设备连接本机代理
4
mode: rule # 代理模式，使用规则分流
5
bind-address: "*" # 绑定所有网卡地址，使局域网内其他设备可访问
6
ipv6: false # 禁用 IPv6，防止 DNS 泄露及访问异常
7
log-level: debug # 日志等级，调试时推荐设置为 debug
8
profile:
9
  store-selected: true # 记住上次选择的节点或策略
10
  store-fake-ip: true # 记住 fake-ip 映射关系，提升命中率
11
unified-delay: true # 启用统一延迟计算
12
tcp-concurrent: true # TCP 并发连接，提升连接速度
13
global-client-fingerprint: chrome # 全局默认浏览器指纹，用于模拟真实浏览器行为
14

15
### DNS 配置
16
dns:
17
  enable: true # 启用内置 DNS 服务器
18
  prefer-h3: true # 优先使用 HTTP/3（QUIC）协议解析 DNS 请求
19
  ipv6: false # 不解析 AAAA 记录，避免走 IPv6
20
  enhanced-mode: fake-ip # 使用 fake-ip 模式，防止 DNS 泄露
21
  fake-ip-range: 198.18.0.1/16 # 用于 fake-ip 映射的 IP 段（保留地址段）
22
  fake-ip-filter: # fake-ip 排除列表，这些域名将使用真实 IP 解析，防止功能异常
23
    # 本地主机/设备
24
    - +.lan
25
    - +.local
26
    # Windows网络出现小地球图标
27
    - +.msftconnecttest.com
28
    - +.msftncsi.com
29
    # QQ快速登录检测失败
30
    - localhost.ptlogin2.qq.com
31
    - localhost.sec.qq.com
32
    # 追加以下条目
33
    - +.in-addr.arpa
34
    - +.ip6.arpa
35
    - time.*.com
36
    - time.*.gov
37
    - pool.ntp.org
38
    # 微信快速登录检测失败
39
    - localhost.work.weixin.qq.com
40
  respect-rules: true # DNS 查询也按 Clash 规则处理
41
  nameserver: # 直连使用的 DNS 服务器（DoH）
42
    - https://223.5.5.5/dns-query # 阿里公共 DNS
43
    - https://doh.pub/dns-query # 腾讯公共 DNS
44
  proxy-server-nameserver: # 被规则判断为走代理的域名使用此处 DNS
45
    - https://cloudflare-dns.com/dns-query # CloudflareDNS
46
    - https://77.88.8.8/dns-query # YandexDNS
47
    - https://8.8.4.4/dns-query#ecs=1.1.1.1/24&ecs-override=true  #GoogleDNS
48
    - https://208.67.222.222/dns-query#ecs=1.1.1.1/24&ecs-override=true  #OpenDNS
49
    - https://9.9.9.9/dns-query  #Quad9DNS
50

51
## 这里替换你的自建节点
52
proxies:
53
  - { name: "🇯🇵日本claw"}
54
  - { name: "🇺🇸美国dmit"}
55

56

57
### 出站策略锚点（用于复用）
58
pr: &pr { type: select, proxies: [ 节点选择, 自动选择, 🇯🇵日本claw, 🇺🇸美国dmit, 全局直连 ] }
59

60
### 代理组定义
61
proxy-groups:
62
  - { name: 节点选择, type: select, proxies: [ 自动选择, 🇯🇵日本claw, 🇺🇸美国dmit ] ,icon: https://fastly.jsdelivr.net/gh/clash-verge-rev/clash-verge-rev.github.io@main/docs/assets/icons/adjust.svg }
63
  - { name: 自动选择, type: url-test, include-all: true, tolerance: 20, interval: 300, filter: "^((?!(全局直连)).)*$" ,icon: https://fastly.jsdelivr.net/gh/clash-verge-rev/clash-verge-rev.github.io@main/docs/assets/icons/speed.svg }
64
  - { name: Google, <<: *pr ,icon: https://fastly.jsdelivr.net/gh/clash-verge-rev/clash-verge-rev.github.io@main/docs/assets/icons/google.svg }
65
  - { name: Stream, <<: *pr , icon: https://cdn.jsdelivr.net/gh/O96u/O96u@refs/heads/master/image/stream.svg }
66
  - { name: ChatGPT, <<: *pr , icon: https://fastly.jsdelivr.net/gh/clash-verge-rev/clash-verge-rev.github.io@main/docs/assets/icons/chatgpt.svg }
67
  - { name: Microsoft, <<: *pr , icon: https://fastly.jsdelivr.net/gh/clash-verge-rev/clash-verge-rev.github.io@main/docs/assets/icons/microsoft.svg }
68
  - { name: Telegram, <<: *pr ,icon: https://fastly.jsdelivr.net/gh/clash-verge-rev/clash-verge-rev.github.io@main/docs/assets/icons/telegram.svg }
69
  - { name: Apple, <<: *pr , icon: https://fastly.jsdelivr.net/gh/clash-verge-rev/clash-verge-rev.github.io@main/docs/assets/icons/apple.svg }
70
  - { name: 漏网之鱼, <<: *pr , icon: https://fastly.jsdelivr.net/gh/clash-verge-rev/clash-verge-rev.github.io@main/docs/assets/icons/fish.svg }
71
  - { name: 全局直连, type: select, proxies: [ DIRECT ], icon: https://fastly.jsdelivr.net/gh/clash-verge-rev/clash-verge-rev.github.io@main/docs/assets/icons/link.svg }
72

73
# 规则配置
74
RuleSet_classical: &RuleSet_classical { type: http, behavior: classical, interval: 86400, format: text}
75
RuleSet_domain: &RuleSet_domain { type: http, behavior: domain, interval: 86400, format: text}
76
RuleSet_ipcidr: &RuleSet_ipcidr { type: http, behavior: ipcidr, interval: 86400, format: text}
77

78
# 订阅规则
79
rule-providers:
80
  reject_non_ip_no_drop:
81
    <<: *RuleSet_classical
82
    url: 'https://ruleset.skk.moe/Clash/non_ip/reject-no-drop.txt'
83
    path: './rule_set/sukkaw_ruleset/reject_non_ip_no_drop.txt'
84

85
  reject_non_ip_drop:
86
    <<: *RuleSet_classical
87
    url: https://ruleset.skk.moe/Clash/non_ip/reject-drop.txt
88
    path: ./rule_set/sukkaw_ruleset/reject_non_ip_drop.txt
89

90
  reject_non_ip:
91
    <<: *RuleSet_classical
92
    url: https://ruleset.skk.moe/Clash/non_ip/reject.txt
93
    path: ./rule_set/sukkaw_ruleset/reject_non_ip.txt
94

95
  reject_domainset:
96
    <<: *RuleSet_domain
97
    url: https://ruleset.skk.moe/Clash/domainset/reject.txt
98
    path: ./rule_set/sukkaw_ruleset/reject_domainset.txt
99

100
  reject_ip:
101
    <<: *RuleSet_classical
102
    url: https://ruleset.skk.moe/Clash/ip/reject.txt
103
    path: ./rule_set/sukkaw_ruleset/reject_ip.txt
104

105
  cdn_domainset:
106
    <<: *RuleSet_domain
107
    url: https://ruleset.skk.moe/Clash/domainset/cdn.txt
108
    path: ./rule_set/sukkaw_ruleset/cdn_domainset.txt
109

110
  cdn_non_ip:
111
    <<: *RuleSet_domain
112
    url: https://ruleset.skk.moe/Clash/non_ip/cdn.txt
113
    path: ./rule_set/sukkaw_ruleset/cdn_non_ip.txt
114

115
  # 所有流媒体（包括上述所有流媒体）
116
  stream_non_ip:
117
    <<: *RuleSet_classical
118
    url: https://ruleset.skk.moe/Clash/non_ip/stream.txt
119
    path: ./rule_set/sukkaw_ruleset/stream_non_ip.txt
120

121
  stream_ip:
122
    <<: *RuleSet_classical
123
    url: https://ruleset.skk.moe/Clash/ip/stream.txt
124
    path: ./rule_set/sukkaw_ruleset/stream_ip.txt
125

126
  ai_non_ip:
127
    <<: *RuleSet_classical
128
    url: https://ruleset.skk.moe/Clash/non_ip/ai.txt
129
    path: ./rule_set/sukkaw_ruleset/ai_non_ip.txt
130

131
  telegram_non_ip:
132
    <<: *RuleSet_classical
133
    url: https://ruleset.skk.moe/Clash/non_ip/telegram.txt
134
    path: ./rule_set/sukkaw_ruleset/telegram_non_ip.txt
135

136
  telegram_ip:
137
    <<: *RuleSet_classical
138
    url: https://ruleset.skk.moe/Clash/ip/telegram.txt
139
    path: ./rule_set/sukkaw_ruleset/telegram_ip.txt
140

141
  apple_cdn:
142
    <<: *RuleSet_domain
143
    url: https://ruleset.skk.moe/Clash/domainset/apple_cdn.txt
144
    path: ./rule_set/sukkaw_ruleset/apple_cdn.txt
145

146
  apple_services:
147
    <<: *RuleSet_classical
148
    url: https://ruleset.skk.moe/Clash/non_ip/apple_services.txt
149
    path: ./rule_set/sukkaw_ruleset/apple_services.txt
150

151
  apple_cn_non_ip:
152
    <<: *RuleSet_classical
153
    url: https://ruleset.skk.moe/Clash/non_ip/apple_cn.txt
154
    path: ./rule_set/sukkaw_ruleset/apple_cn_non_ip.txt
155

156
  microsoft_cdn_non_ip:
157
    <<: *RuleSet_classical
158
    url: https://ruleset.skk.moe/Clash/non_ip/microsoft_cdn.txt
159
    path: ./rule_set/sukkaw_ruleset/microsoft_cdn_non_ip.txt
160

161
  microsoft_non_ip:
162
    <<: *RuleSet_classical
163
    url: https://ruleset.skk.moe/Clash/non_ip/microsoft.txt
164
    path: ./rule_set/sukkaw_ruleset/microsoft_non_ip.txt
165

166
  # 软件更新、操作系统等大文件下载
167
  download_domainset:
168
    <<: *RuleSet_domain
169
    url: https://ruleset.skk.moe/Clash/domainset/download.txt
170
    path: ./rule_set/sukkaw_ruleset/download_domainset.txt
171

172
  download_non_ip:
173
    <<: *RuleSet_domain
174
    url: https://ruleset.skk.moe/Clash/non_ip/download.txt
175
    path: ./rule_set/sukkaw_ruleset/download_non_ip.txt
176

177
  # 内网域名和局域网 IP
178
  lan_non_ip:
179
    <<: *RuleSet_classical
180
    url: https://ruleset.skk.moe/Clash/non_ip/lan.txt
181
    path: ./rule_set/sukkaw_ruleset/lan_non_ip.txt
182

183
  lan_ip:
184
    <<: *RuleSet_classical
185
    url: https://ruleset.skk.moe/Clash/ip/lan.txt
186
    path: ./rule_set/sukkaw_ruleset/lan_ip.txt
187

188
  domestic_non_ip:
189
    <<: *RuleSet_classical
190
    url: https://ruleset.skk.moe/Clash/non_ip/domestic.txt
191
    path: ./rule_set/sukkaw_ruleset/domestic_non_ip.txt
192

193
  direct_non_ip:
194
    <<: *RuleSet_classical
195
    url: https://ruleset.skk.moe/Clash/non_ip/direct.txt
196
    path: ./rule_set/sukkaw_ruleset/direct_non_ip.txt
197

198
  global_non_ip:
199
    <<: *RuleSet_classical
200
    url: https://ruleset.skk.moe/Clash/non_ip/global.txt
201
    path: ./rule_set/sukkaw_ruleset/global_non_ip.txt
202

203
  domestic_ip:
204
    <<: *RuleSet_classical
205
    url: https://ruleset.skk.moe/Clash/ip/domestic.txt
206
    path: ./rule_set/sukkaw_ruleset/domestic_ip.txt
207

208
  china_ip:
209
    <<: *RuleSet_ipcidr
210
    url: https://ruleset.skk.moe/Clash/ip/china_ip.txt
211
    path: ./rule_set/sukkaw_ruleset/china_ip.txt
212

213
# 分流规则
214
rules:
215
  ### 自定义类规则
216
  - DOMAIN-SUFFIX,infini.money,🇯🇵日本claw
217
  - DOMAIN-SUFFIX,piggo.me,DIRECT
218
  ### 非 IP 类规则
219
  - RULE-SET,reject_non_ip,REJECT
220
  - RULE-SET,reject_domainset,REJECT
221
  - RULE-SET,reject_non_ip_drop,REJECT-DROP
222
  - RULE-SET,reject_non_ip_no_drop,REJECT
223
  - RULE-SET,cdn_domainset,节点选择
224
  - RULE-SET,cdn_non_ip,节点选择
225
  - RULE-SET,stream_non_ip,Stream
226
  - RULE-SET,telegram_non_ip,Telegram
227
  - RULE-SET,download_domainset,节点选择
228
  - RULE-SET,download_non_ip,节点选择
229
  - RULE-SET,apple_cdn,Apple
230
  - RULE-SET,apple_cn_non_ip,Apple
231
  - RULE-SET,apple_services,Apple
232
  - RULE-SET,microsoft_cdn_non_ip,Microsoft
233
  - RULE-SET,microsoft_non_ip,Microsoft
234
  - RULE-SET,ai_non_ip,ChatGPT
235
  - RULE-SET,global_non_ip,节点选择
236
  - RULE-SET,domestic_non_ip,全局直连
237
  - RULE-SET,direct_non_ip,全局直连
238
  - RULE-SET,lan_non_ip,全局直连
239

240
  ### IP 类规则
241
  - RULE-SET,reject_ip,REJECT
242
  - RULE-SET,telegram_ip,Telegram
243
  - RULE-SET,stream_ip,Stream
244
  - RULE-SET,lan_ip,全局直连
245
  - RULE-SET,domestic_ip,全局直连
246
  - RULE-SET,china_ip,全局直连
247
  - GEOIP,CN,全局直连
248
  - MATCH,漏网之鱼