Mihomo (原Clash) 自用配置
1076 字
5 分钟
Mihomo (原Clash) 自用配置

DNS防泄漏查询


查询地址:
其实吧,我感觉DNS泄露这东西,咋个说呢,感觉并没啥大用!仁者见仁吧
DNS解析流程

节点配置
### 全局配置mixed-port: 7890 # HTTP(S) + SOCKS 混合代理端口,Clash 主代理入口allow-lan: true # 允许局域网设备连接本机代理mode: rule # 代理模式,使用规则分流bind-address: "*" # 绑定所有网卡地址,使局域网内其他设备可访问ipv6: false # 禁用 IPv6,防止 DNS 泄露及访问异常log-level: debug # 日志等级,调试时推荐设置为 debugprofile: store-selected: true # 记住上次选择的节点或策略 store-fake-ip: true # 记住 fake-ip 映射关系,提升命中率unified-delay: true # 启用统一延迟计算tcp-concurrent: true # TCP 并发连接,提升连接速度global-client-fingerprint: chrome # 全局默认浏览器指纹,用于模拟真实浏览器行为
### DNS 配置dns: enable: true # 启用内置 DNS 服务器 prefer-h3: true # 优先使用 HTTP/3(QUIC)协议解析 DNS 请求 ipv6: false # 不解析 AAAA 记录,避免走 IPv6 enhanced-mode: fake-ip # 使用 fake-ip 模式,防止 DNS 泄露 fake-ip-range: 198.18.0.1/16 # 用于 fake-ip 映射的 IP 段(保留地址段) fake-ip-filter: # fake-ip 排除列表,这些域名将使用真实 IP 解析,防止功能异常 # 本地主机/设备 - +.lan - +.local # Windows网络出现小地球图标 - +.msftconnecttest.com - +.msftncsi.com # QQ快速登录检测失败 - localhost.ptlogin2.qq.com - localhost.sec.qq.com # 追加以下条目 - +.in-addr.arpa - +.ip6.arpa - time.*.com - time.*.gov - pool.ntp.org # 微信快速登录检测失败 - localhost.work.weixin.qq.com respect-rules: true # DNS 查询也按 Clash 规则处理 nameserver: # 直连使用的 DNS 服务器(DoH) - https://223.5.5.5/dns-query # 阿里公共 DNS - https://doh.pub/dns-query # 腾讯公共 DNS proxy-server-nameserver: # 被规则判断为走代理的域名使用此处 DNS - https://cloudflare-dns.com/dns-query # CloudflareDNS - https://77.88.8.8/dns-query # YandexDNS - https://8.8.4.4/dns-query#ecs=1.1.1.1/24&ecs-override=true #GoogleDNS - https://208.67.222.222/dns-query#ecs=1.1.1.1/24&ecs-override=true #OpenDNS - https://9.9.9.9/dns-query #Quad9DNS
## 这里替换你的自建节点proxies: - { name: "🇯🇵日本claw"} - { name: "🇺🇸美国dmit"}
### 出站策略锚点(用于复用)pr: &pr { type: select, proxies: [ 节点选择, 自动选择, 🇯🇵日本claw, 🇺🇸美国dmit, 全局直连 ] }
### 代理组定义proxy-groups: - { name: 节点选择, type: select, proxies: [ 自动选择, 🇯🇵日本claw, 🇺🇸美国dmit ] ,icon: https://fastly.jsdelivr.net/gh/clash-verge-rev/clash-verge-rev.github.io@main/docs/assets/icons/adjust.svg } - { name: 自动选择, type: url-test, include-all: true, tolerance: 20, interval: 300, filter: "^((?!(全局直连)).)*$" ,icon: https://fastly.jsdelivr.net/gh/clash-verge-rev/clash-verge-rev.github.io@main/docs/assets/icons/speed.svg } - { name: Google, <<: *pr ,icon: https://fastly.jsdelivr.net/gh/clash-verge-rev/clash-verge-rev.github.io@main/docs/assets/icons/google.svg } - { name: Stream, <<: *pr , icon: https://cdn.jsdelivr.net/gh/uurani/uurani@refs/heads/master/image/stream.svg } - { name: ChatGPT, <<: *pr , icon: https://fastly.jsdelivr.net/gh/clash-verge-rev/clash-verge-rev.github.io@main/docs/assets/icons/chatgpt.svg } - { name: Microsoft, <<: *pr , icon: https://fastly.jsdelivr.net/gh/clash-verge-rev/clash-verge-rev.github.io@main/docs/assets/icons/microsoft.svg } - { name: Telegram, <<: *pr ,icon: https://fastly.jsdelivr.net/gh/clash-verge-rev/clash-verge-rev.github.io@main/docs/assets/icons/telegram.svg } - { name: Apple, <<: *pr , icon: https://fastly.jsdelivr.net/gh/clash-verge-rev/clash-verge-rev.github.io@main/docs/assets/icons/apple.svg } - { name: 漏网之鱼, <<: *pr , icon: https://fastly.jsdelivr.net/gh/clash-verge-rev/clash-verge-rev.github.io@main/docs/assets/icons/fish.svg } - { name: 全局直连, type: select, proxies: [ DIRECT ], icon: https://fastly.jsdelivr.net/gh/clash-verge-rev/clash-verge-rev.github.io@main/docs/assets/icons/link.svg }
# 规则配置RuleSet_classical: &RuleSet_classical { type: http, behavior: classical, interval: 86400, format: text}RuleSet_domain: &RuleSet_domain { type: http, behavior: domain, interval: 86400, format: text}RuleSet_ipcidr: &RuleSet_ipcidr { type: http, behavior: ipcidr, interval: 86400, format: text}
# 订阅规则rule-providers: reject_non_ip_no_drop: <<: *RuleSet_classical url: 'https://ruleset.skk.moe/Clash/non_ip/reject-no-drop.txt' path: './rule_set/sukkaw_ruleset/reject_non_ip_no_drop.txt'
reject_non_ip_drop: <<: *RuleSet_classical url: https://ruleset.skk.moe/Clash/non_ip/reject-drop.txt path: ./rule_set/sukkaw_ruleset/reject_non_ip_drop.txt
reject_non_ip: <<: *RuleSet_classical url: https://ruleset.skk.moe/Clash/non_ip/reject.txt path: ./rule_set/sukkaw_ruleset/reject_non_ip.txt
reject_domainset: <<: *RuleSet_domain url: https://ruleset.skk.moe/Clash/domainset/reject.txt path: ./rule_set/sukkaw_ruleset/reject_domainset.txt
reject_ip: <<: *RuleSet_classical url: https://ruleset.skk.moe/Clash/ip/reject.txt path: ./rule_set/sukkaw_ruleset/reject_ip.txt
cdn_domainset: <<: *RuleSet_domain url: https://ruleset.skk.moe/Clash/domainset/cdn.txt path: ./rule_set/sukkaw_ruleset/cdn_domainset.txt
cdn_non_ip: <<: *RuleSet_domain url: https://ruleset.skk.moe/Clash/non_ip/cdn.txt path: ./rule_set/sukkaw_ruleset/cdn_non_ip.txt
# 所有流媒体(包括上述所有流媒体) stream_non_ip: <<: *RuleSet_classical url: https://ruleset.skk.moe/Clash/non_ip/stream.txt path: ./rule_set/sukkaw_ruleset/stream_non_ip.txt
stream_ip: <<: *RuleSet_classical url: https://ruleset.skk.moe/Clash/ip/stream.txt path: ./rule_set/sukkaw_ruleset/stream_ip.txt
ai_non_ip: <<: *RuleSet_classical url: https://ruleset.skk.moe/Clash/non_ip/ai.txt path: ./rule_set/sukkaw_ruleset/ai_non_ip.txt
telegram_non_ip: <<: *RuleSet_classical url: https://ruleset.skk.moe/Clash/non_ip/telegram.txt path: ./rule_set/sukkaw_ruleset/telegram_non_ip.txt
telegram_ip: <<: *RuleSet_classical url: https://ruleset.skk.moe/Clash/ip/telegram.txt path: ./rule_set/sukkaw_ruleset/telegram_ip.txt
apple_cdn: <<: *RuleSet_domain url: https://ruleset.skk.moe/Clash/domainset/apple_cdn.txt path: ./rule_set/sukkaw_ruleset/apple_cdn.txt
apple_services: <<: *RuleSet_classical url: https://ruleset.skk.moe/Clash/non_ip/apple_services.txt path: ./rule_set/sukkaw_ruleset/apple_services.txt
apple_cn_non_ip: <<: *RuleSet_classical url: https://ruleset.skk.moe/Clash/non_ip/apple_cn.txt path: ./rule_set/sukkaw_ruleset/apple_cn_non_ip.txt
microsoft_cdn_non_ip: <<: *RuleSet_classical url: https://ruleset.skk.moe/Clash/non_ip/microsoft_cdn.txt path: ./rule_set/sukkaw_ruleset/microsoft_cdn_non_ip.txt
microsoft_non_ip: <<: *RuleSet_classical url: https://ruleset.skk.moe/Clash/non_ip/microsoft.txt path: ./rule_set/sukkaw_ruleset/microsoft_non_ip.txt
# 软件更新、操作系统等大文件下载 download_domainset: <<: *RuleSet_domain url: https://ruleset.skk.moe/Clash/domainset/download.txt path: ./rule_set/sukkaw_ruleset/download_domainset.txt
download_non_ip: <<: *RuleSet_domain url: https://ruleset.skk.moe/Clash/non_ip/download.txt path: ./rule_set/sukkaw_ruleset/download_non_ip.txt
# 内网域名和局域网 IP lan_non_ip: <<: *RuleSet_classical url: https://ruleset.skk.moe/Clash/non_ip/lan.txt path: ./rule_set/sukkaw_ruleset/lan_non_ip.txt
lan_ip: <<: *RuleSet_classical url: https://ruleset.skk.moe/Clash/ip/lan.txt path: ./rule_set/sukkaw_ruleset/lan_ip.txt
domestic_non_ip: <<: *RuleSet_classical url: https://ruleset.skk.moe/Clash/non_ip/domestic.txt path: ./rule_set/sukkaw_ruleset/domestic_non_ip.txt
direct_non_ip: <<: *RuleSet_classical url: https://ruleset.skk.moe/Clash/non_ip/direct.txt path: ./rule_set/sukkaw_ruleset/direct_non_ip.txt
global_non_ip: <<: *RuleSet_classical url: https://ruleset.skk.moe/Clash/non_ip/global.txt path: ./rule_set/sukkaw_ruleset/global_non_ip.txt
domestic_ip: <<: *RuleSet_classical url: https://ruleset.skk.moe/Clash/ip/domestic.txt path: ./rule_set/sukkaw_ruleset/domestic_ip.txt
china_ip: <<: *RuleSet_ipcidr url: https://ruleset.skk.moe/Clash/ip/china_ip.txt path: ./rule_set/sukkaw_ruleset/china_ip.txt
# 分流规则rules: ### 自定义类规则 - DOMAIN-SUFFIX,infini.money,🇯🇵日本claw - DOMAIN-SUFFIX,piggo.me,DIRECT ### 非 IP 类规则 - RULE-SET,reject_non_ip,REJECT - RULE-SET,reject_domainset,REJECT - RULE-SET,reject_non_ip_drop,REJECT-DROP - RULE-SET,reject_non_ip_no_drop,REJECT - RULE-SET,cdn_domainset,节点选择 - RULE-SET,cdn_non_ip,节点选择 - RULE-SET,stream_non_ip,Stream - RULE-SET,telegram_non_ip,Telegram - RULE-SET,download_domainset,节点选择 - RULE-SET,download_non_ip,节点选择 - RULE-SET,apple_cdn,Apple - RULE-SET,apple_cn_non_ip,Apple - RULE-SET,apple_services,Apple - RULE-SET,microsoft_cdn_non_ip,Microsoft - RULE-SET,microsoft_non_ip,Microsoft - RULE-SET,ai_non_ip,ChatGPT - RULE-SET,global_non_ip,节点选择 - RULE-SET,domestic_non_ip,全局直连 - RULE-SET,direct_non_ip,全局直连 - RULE-SET,lan_non_ip,全局直连
### IP 类规则 - RULE-SET,reject_ip,REJECT - RULE-SET,telegram_ip,Telegram - RULE-SET,stream_ip,Stream - RULE-SET,lan_ip,全局直连 - RULE-SET,domestic_ip,全局直连 - RULE-SET,china_ip,全局直连 - GEOIP,CN,全局直连 - MATCH,漏网之鱼
软件下载(Win/Mac/Linux通用)
文章分享
如果这篇文章对你有帮助,欢迎分享给更多人!
相关文章智能推荐
1
从 WordPress 到 Astro迁移实战全记录
文章记录将 Muxui 从 WordPress(B2 Pro)完整迁移到 Astro 静态博客主题 Firefly 的全过程:导出 WXR、HTML 转 Markdown、图床改写、友链与导航定制,以及迁移中踩过的坑。
2
YOLO训练麻将(Mahjong)识别,导出ONNX
文章本文基于 Roboflow Universe 数据集(例如 $1 )与仓库内脚本,在 Windows 上完成训练,并导出 ONNX 供后端推理。下文配图均为本机实测截图,便于对照。快速体验 小程序 1\. 环境要求 \ Windows 10
3
Adobe Photoshop 2023
Mac介绍 Adobe Photoshop(PS)是Adobe公司推出的一款顶尖图像编辑与设计软件,它集成了最先进的内容识别填充技术和Adobe Sensei AI技术,使用户能够精确选择填充像素,轻松进行图像的旋转、缩放和镜像处理。作为Adob
4
自建 Headscale + DERP 全流程实战记录
文章记录一次完整、可上线、可长期运行的 Headscale + 自建 DERP 搭建过程。 本文不是“能跑就行”的教程,而是 生产可用、已多客户端验证 的配置方案。 简介 Tailscale(Headscale)就是组建一个大的局域网,可以将你
5
基于 Cloudflare Workers + Telegram Bot + D1 的双向匿名聊天系统完整实现
文章在本篇文章中,我将分享一个基于 Cloudflare Workers + Telegram Bot + D1 数据库 的完全无服务器(Serverless)聊天系统。该机器人支持用户匿名与管理员双向通信,具备首访验证、自动诈骗检测、屏蔽管理
随机文章随机推荐














