Update local rulesets and configs

2025-10-28 12:22:37 +00:00 · 2020-03-12 15:55:02 +08:00
parent 5594070657
commit 55ad853a2c
22 changed files with 154 additions and 86 deletions
--- a/base/base/GeneralClashConfig.yml
+++ b/base/base/GeneralClashConfig.yml
@@ -15,11 +15,17 @@ socks-port: 7891
 # 允许局域网的连接（可用来共享代理）
 allow-lan: true

+# 仅在将allow-lan设置为true时适用
+# #"*": 绑定所有IP地址
+# #192.168.122.11: 绑定单个IPv4地址
+# #"[aaaa::a8aa:ff:fe09:57d8]": 绑定单个IPv6地址
+# bind-address: "*"
+
 # 规则模式：Rule（规则） / Global（全局代理）/ Direct（全局直连）
 mode: Rule

 # 设置日志输出级别 (默认级别：silent，即不输出任何内容，以避免因日志内容过大而导致程序内存溢出）。
-# 5 个级别：silent / info / warning / error / debug。级别越高日志输出量越大，越倾向于调试，若需要请自行开启。
+# 5 个级别：silent / error / warning / info / debug。级别越高日志输出量越大，越倾向于调试，若需要请自行开启。
 log-level: info

 # Clash 的 RESTful API
@@ -36,63 +42,51 @@ external-controller: '127.0.0.1:9090'
 # RESTful API 的口令 (可选)
 # secret: ""

+# 实验性功能
+experimental:
+  ignore-resolve-fail: true # 忽略 DNS 解析失败，默认值为 true
+  # interface-name: en0 # outbound interface name
+
 # 本地 SOCKS5 / HTTP(S) 服务认证
 # authentication:
 #  - "user1:pass1"
 #  - "user2:pass2"

-# 实验性功能
-experimental:
-  ignore-resolve-fail: true # 忽略 DNS 解析失败，默认值为 true
-
-# 代理组
-# 下面这3个不要引到订阅里去 要不会出错
-# Will be ignored after profile selection
-Proxy:
-  - name: Shadowsocks
-    type: socks5
-    server: 127.0.0.1
-    port: 1080
-Proxy Group:
-  - name: Proxy
-    type: select
-    proxies:
-      - Shadowsocks
-Rule:
-  - 'MATCH,DIRECT'
+# 实验性功能 hosts, 支持通配符 (例如 *.clash.dev 甚至 *.foo.*.example.com)
+# 静态的域名 比 通配域名 具有更高的优先级 (foo.example.com 优先于 *.example.com)
+# 注意: hosts 在 fake-ip 模式下不生效
+#hosts:
+#   '*.clash.dev': 127.0.0.1
+#   'alpha.clash.dev': '::1'

 #dns:
-#  enable: true
-#  ipv6: false
-#  listen: 0.0.0.0:53
-#  enhanced-mode: redir-host # 模式：redir-host或fake-ip
-#     # fake-ip-range: 198.18.0.1/16 # 如果你不知道这个参数的作用，请勿修改
-#     # 实验性功能 hosts, 支持通配符 (例如 *.clash.dev 甚至 *.foo.*.example.com)
-#     # 静态的域名 比 通配域名 具有更高的优先级 (foo.example.com 优先于 *.example.com)
-#     # 注意: hosts 在 fake-ip 模式下不生效
-#  hosts:
-#     '*.clash.dev': 127.0.0.1
-#     'alpha.clash.dev': '::1'
-#  nameserver:
-#     - 223.5.5.5 # 阿里DNS
-#     - 180.76.76.76 # 百度DNS
-#     - 119.29.29.29 # 腾讯DNS
-#     - 117.50.10.10 # ONE DNS纯净版
-#     - 114.114.114.114 # 114DNS
-#  fallback:
-#     - 8.8.8.8 # 谷歌DNS
-#     - 1.1.1.1 # Cloudflare DNS
-#     - tls://dns.rubyfish.cn:853
-#     - tls://1.0.0.1:853
-#     - tls://dns.google:853
-#     #- https://dns.rubyfish.cn/dns-query
-#     #- https://cloudflare-dns.com/dns-query
-#     #- https://dns.google/dns-query
-
-# fallback-filter:
-#   geoip: true # 默认
-#   ipcidr: # 在这个网段内的 IP 地址会被考虑为被污染的 IP
-#     - 240.0.0.0/4
+  #enable: true # 是否启用dns false
+  #ipv6: false
+  #listen: 0.0.0.0:53
+  #enhanced-mode: redir-host # 模式：redir-host或fake-ip
+  #fake-ip-range: 198.18.0.1/16 #
+  #fake-ip-filter: # fake ip 白名单列表，如果你不知道这个参数的作用，请勿修改
+     #- '*.lan'
+     #- localhost.ptlogin2.qq.com
+  #nameserver:
+     #- 223.5.5.5 # 阿里DNS
+     #- 180.76.76.76 # 百度DNS
+     #- 119.29.29.29 # 腾讯DNS
+     #- 117.50.10.10 # ONE DNS纯净版
+     #- 114.114.114.114 # 114DNS
+  #fallback:
+     #- 8.8.8.8 # 谷歌DNS
+     #- 1.1.1.1 # Cloudflare DNS
+     #- tls://dns.rubyfish.cn:853
+     #- tls://1.0.0.1:853
+     #- tls://dns.google:853
+     #- https://dns.rubyfish.cn/dns-query
+     #- https://cloudflare-dns.com/dns-query
+     #- https://dns.google/dns-query
+  #fallback-filter:
+     #geoip: true # 默认
+     #ipcidr: # 在这个网段内的 IP 地址会被考虑为被污染的 IP
+       #- 240.0.0.0/4

 # 1. clash DNS 请求逻辑：
 #   (1) 当访问一个域名时， nameserver 与 fallback 列表内的所有服务器并发请求，得到域名对应的 IP 地址。
@@ -112,6 +106,21 @@ Rule:
 #   DoT: 以 tls:// 开头的 DNS 服务器。拥有更高的安全性和查询效率，但端口有可能被管制或封锁。
 #   若要了解更多关于 DoH/DoT 相关技术，请自行查阅规范文档。

+# 代理组
+# 下面这3个不要引到订阅里去 要不会出错
+# Will be ignored after profile selection
+Proxy:
+  - name: Shadowsocks
+    type: socks5
+    server: 127.0.0.1
+    port: 1080
+Proxy Group:
+  - name: Proxy
+    type: select
+    proxies:
+      - Shadowsocks
+Rule:
+  - 'MATCH,DIRECT'

 # Clash for Windows
 # Proxies module latency test settings
@@ -137,17 +146,27 @@ cfw-conn-break-strategy:
 # Run child process after CFW started
 # Refer: https://docs.cfw.lbyczf.com/contents/childprocess.html
 #cfw-child-process:
-#  # 启动订阅转换程序，端口号7893
-#  - command: "subconverter.exe" # run.cmd 程序名称subconverter.exe -cfw >>logs/run.log 2>&1
-#    args:
-#     - "-cfw" # 运行参数1
-#     - "-f" # 运行参数2
-#     - "pref-acl4ssr.yml" # 运行参数3
-#    options:
-#      cwd: .\subconverter\ # 子进程工作目录
-#      #detached: true # 子进程独立于其父进程运行
-#      #shell: true # 则在 shell 中运行 command
-#      windowsHide: true # 隐藏子进程的控制台窗口
+  # 启动订阅转换程序，端口号7893
+  #- command: "subconverter.exe" # run.cmd 程序名称 subconverter.exe -cfw >>logs/run.log 2>&1
+    #args:
+      #- "-cfw" # 运行参数1
+      #- "-f" # 运行参数2
+      #- "pref-acl4ssr.yml" # 运行参数3
+    #options:
+      #cwd: subconverter # 子进程工作目录
+      #detached: true # 子进程独立于其父进程运行
+      #shell: true # 则在 shell 中运行 command
+      #windowsHide: true # 隐藏子进程的控制台窗口
+  # 启动网易云，端口号3333
+  #- command: "unblockneteasemusic.exe" # 启动网易云，端口号3333
+    #args:
+      #- "-p" # 运行参数1
+      #- "3333" # 运行参数2
+    #options:
+      #cwd: unblockNeteaseMusic # 子进程工作目录
+      #detached: true # 子进程独立于其父进程运行
+      #shell: true # 则在 shell 中运行 command
+      #windowsHide: true # 隐藏子进程的控制台窗口

 # 系统代理跳过列表 cfw-bypass
 # System proxy will ignore these domains(or ipnet)
--- a/base/rules/ACL4SSR/Clash/BanProgramAD.list
+++ b/base/rules/ACL4SSR/Clash/BanProgramAD.list
--- a/base/rules/ACL4SSR/Clash/Netflix.list
+++ b/base/rules/ACL4SSR/Clash/Netflix.list
@@ -0,0 +1,23 @@
+# Netflix
+DOMAIN-SUFFIX,netflix.com
+DOMAIN-SUFFIX,netflix.net
+DOMAIN-SUFFIX,nflxext.com
+DOMAIN-SUFFIX,nflximg.com
+DOMAIN-SUFFIX,nflximg.net
+DOMAIN-SUFFIX,nflxso.net
+DOMAIN-SUFFIX,nflxvideo.net
+IP-CIDR,8.41.4.0/24,no-resolve
+IP-CIDR,23.246.0.0/18,no-resolve
+IP-CIDR,37.77.184.0/21,no-resolve
+IP-CIDR,45.57.0.0/17,no-resolve
+IP-CIDR,64.120.128.0/17,no-resolve
+IP-CIDR,66.197.128.0/17,no-resolve
+IP-CIDR,69.53.224.0/19,no-resolve
+IP-CIDR,108.175.32.0/20,no-resolve
+IP-CIDR,185.2.220.0/22,no-resolve
+IP-CIDR,185.9.188.0/22,no-resolve
+IP-CIDR,192.173.64.0/18,no-resolve
+IP-CIDR,198.38.96.0/19,no-resolve
+IP-CIDR,198.45.48.0/20,no-resolve
+IP-CIDR,207.45.72.0/22,no-resolve
+IP-CIDR,208.75.76.0/22,no-resolve
--- a/base/rules/ACL4SSR/Clash/OneDrive.list
+++ b/base/rules/ACL4SSR/Clash/OneDrive.list
@@ -4,5 +4,6 @@ PROCESS-NAME,OneDriveUpdater
 USER-AGENT,OneDrive*
 USER-AGENT,OneDriveiOSApp*
 DOMAIN-SUFFIX,onedrive.com
+DOMAIN-SUFFIX,onedrive.live.com
 DOMAIN-SUFFIX,oneclient.sfx.ms
 DOMAIN-KEYWORD,1drv
--- a/base/rules/ACL4SSR/Clash/ProxyGFWlist.list
+++ b/base/rules/ACL4SSR/Clash/ProxyGFWlist.list
@@ -2555,7 +2555,6 @@ DOMAIN-SUFFIX,ipredator.se
 DOMAIN-SUFFIX,iptv.com.tw
 DOMAIN-SUFFIX,iptvbin.com
 DOMAIN-SUFFIX,ipvanish.com
-DOMAIN-SUFFIX,iqiyi.com
 DOMAIN-SUFFIX,iredmail.org
 DOMAIN-SUFFIX,irib.ir
 DOMAIN-SUFFIX,ironpython.net
@@ -5711,4 +5710,4 @@ DOMAIN-SUFFIX,icntv.xyz
 DOMAIN-SUFFIX,flzbcdn.xyz

 #华文电视
-DOMAIN-SUFFIX,ocnttv.com
+DOMAIN-SUFFIX,ocnttv.com
--- a/base/rules/ConnersHua/Surge/Ruleset/Global.list
+++ b/base/rules/ConnersHua/Surge/Ruleset/Global.list
@@ -349,6 +349,7 @@ DOMAIN-SUFFIX,washingtonpost.com
 DOMAIN-SUFFIX,wattpad.com
 DOMAIN-SUFFIX,whoer.net
 DOMAIN-SUFFIX,wikimapia.org
+DOMAIN-SUFFIX,wikimedia.org
 DOMAIN-SUFFIX,wikipedia.org
 DOMAIN-SUFFIX,wikiquote.org
 DOMAIN-SUFFIX,wikiwand.com
--- a/base/rules/ConnersHua/Surge/Ruleset/GlobalMedia.list
+++ b/base/rules/ConnersHua/Surge/Ruleset/GlobalMedia.list
@@ -158,6 +158,7 @@ DOMAIN-SUFFIX,mytvsuper.com
 DOMAIN-SUFFIX,tvb.com
 # > Netflix
 USER-AGENT,Argo*
+DOMAIN-SUFFIX,fast.com
 DOMAIN-SUFFIX,netflix.com
 DOMAIN-SUFFIX,netflix.net
 DOMAIN-SUFFIX,nflxext.com
--- a/base/rules/ConnersHua/Surge/Ruleset/Media/Netflix.list
+++ b/base/rules/ConnersHua/Surge/Ruleset/Media/Netflix.list
@@ -1,5 +1,6 @@
 # > Netflix
 USER-AGENT,Argo*
+DOMAIN-SUFFIX,fast.com
 DOMAIN-SUFFIX,netflix.com
 DOMAIN-SUFFIX,netflix.net
 DOMAIN-SUFFIX,nflxext.com
--- a/base/rules/NobyDa/Surge/AdRuleRegex.list
+++ b/base/rules/NobyDa/Surge/AdRuleRegex.list
@@ -765,7 +765,6 @@ AND,((DOMAIN,photovms.tv.sohu.com), (NOT,((URL-REGEX,http))))
 AND,((USER-AGENT,osee2*), (NOT,((DOMAIN,static.zhihu.com))), (NOT,((DOMAIN,api.zhihu.com))), (NOT,((DOMAIN,link.zhihu.com))), (NOT,((DOMAIN,lens.zhihu.com))), (NOT,((DOMAIN,www.zhihu.com))), (NOT,((DOMAIN-SUFFIX,zhimg.com))))
 AND,((USER-AGENT,ZhihuHybrid*), (NOT,((DOMAIN-SUFFIX,zhihu.com))), (NOT,((DOMAIN-SUFFIX,zhimg.com))))
 URL-REGEX,https?://interface3?.music.163.com/eapi/(ad|abtest|sp|hot|store|mlog|search/(specialkeyword|defaultkeyword|hot))
-AND,((USER-AGENT, %E7%BD%91%E6%98%93%E4%BA%91%E9%9F%B3%E4%B9%90*),(OR,((NOT,((DOMAIN-SUFFIX,music.126.net))), (DOMAIN-KEYWORD,admusic))))
 AND,((USER-AGENT,pixiv*), (NOT,((DOMAIN-KEYWORD,pixiv))))
 URL-REGEX,^https?:\/\/capis-slb\.didapinche\.com\/ad\/
 URL-REGEX,^https://weibointl.api.weibo.cn/portal.php\?a=get_coopen_ads
--- a/base/rules/lhie1/Surge/Surge
+++ b/base/rules/lhie1/Surge/Surge
@@ -44,6 +44,12 @@ DOMAIN-SUFFIX,bbci.co.uk
 USER-AGENT,TwDramas*
 DOMAIN-SUFFIX,chocotv.com.tw

+# > DAZN
+DOMAIN-SUFFIX,d151l6v8er5bdm.cloudfront.net
+DOMAIN-SUFFIX,dazn.com
+DOMAIN-SUFFIX,dazn-api.com
+DOMAIN-SUFFIX,indazn.com
+
 # > Disney Plus
 USER-AGENT,Disney*
 DOMAIN,cdn.registerdisney.go.com
@@ -122,6 +128,8 @@ DOMAIN-SUFFIX,skygo.co.nz

 # > SoundCloud
 USER-AGENT,SoundCloud*
+DOMAIN-SUFFIX,sndcdn.com
+DOMAIN-SUFFIX,soundcloud.com

 # > viuTV
 USER-AGENT,ViuTV*
--- a/base/rules/lhie1/Surge/Surge
+++ b/base/rules/lhie1/Surge/Surge
@@ -0,0 +1,7 @@
+# > DAZN
+DOMAIN-SUFFIX,d151l6v8er5bdm.cloudfront.net
+DOMAIN-SUFFIX,dazn.com
+DOMAIN-SUFFIX,dazn-api.com
+DOMAIN-SUFFIX,dazndn.com
+DOMAIN-SUFFIX,indazn.com
+DOMAIN-SUFFIX,intercom.io
--- a/3/Provider/Media/DisneyPlus.list
+++ b/3/Provider/Media/DisneyPlus.list
--- a/3/Provider/Media/FoxPlus.list
+++ b/3/Provider/Media/FoxPlus.list
--- a/base/rules/lhie1/Surge/Surge
+++ b/base/rules/lhie1/Surge/Surge
@@ -0,0 +1,2 @@
+# > letv
+DOMAIN-SUFFIX,api.mob.app.letv.com
--- a/base/rules/lhie1/Surge/Surge
+++ b/base/rules/lhie1/Surge/Surge
@@ -0,0 +1,3 @@
+# > MOO
+USER-AGENT,MOO*
+USER-AGENT,TencentMidasConnect*
--- a/3/Provider/Media/Netflix.list
+++ b/3/Provider/Media/Netflix.list
@@ -6,4 +6,19 @@ DOMAIN-SUFFIX,nflxext.com
 DOMAIN-SUFFIX,nflximg.com
 DOMAIN-SUFFIX,nflximg.net
 DOMAIN-SUFFIX,nflxso.net
-DOMAIN-SUFFIX,nflxvideo.net
+DOMAIN-SUFFIX,nflxvideo.net
+IP-CIDR,8.41.4.0/24
+IP-CIDR,23.246.0.0/18
+IP-CIDR,37.77.184.0/21
+IP-CIDR,45.57.0.0/17
+IP-CIDR,64.120.128.0/17
+IP-CIDR,66.197.128.0/17
+IP-CIDR,69.53.224.0/19
+IP-CIDR,108.175.32.0/20
+IP-CIDR,185.2.220.0/22
+IP-CIDR,185.9.188.0/22
+IP-CIDR,192.173.64.0/18
+IP-CIDR,198.38.96.0/19
+IP-CIDR,198.45.48.0/20
+IP-CIDR,207.45.72.0/22
+IP-CIDR,208.75.76.0/22
--- a/3/Provider/Media/Soundcloud.list
+++ b/3/Provider/Media/Soundcloud.list
@@ -0,0 +1,4 @@
+# > SoundCloud
+USER-AGENT,SoundCloud*
+DOMAIN-SUFFIX,sndcdn.com
+DOMAIN-SUFFIX,soundcloud.com
--- a/base/rules/lhie1/Surge/Surge
+++ b/base/rules/lhie1/Surge/Surge
@@ -0,0 +1,2 @@
+# > Tencent Video
+DOMAIN-SUFFIX,vv.video.qq.com
--- a/base/rules/lhie1/Surge/Surge
+++ b/base/rules/lhie1/Surge/Surge
@@ -0,0 +1,2 @@
+# > Youku
+IP-CIDR,106.11.0.0/16,no-resolve
--- a/base/rules/lhie1/Surge/Surge
+++ b/base/rules/lhie1/Surge/Surge
@@ -1,15 +0,0 @@
-# > Microsoft
-USER-AGENT,OneDrive*
-DOMAIN-KEYWORD,microsoft
-DOMAIN-SUFFIX,azure.com
-DOMAIN-SUFFIX,hotmail.com
-DOMAIN-SUFFIX,live.com
-DOMAIN-SUFFIX,live.net
-DOMAIN-SUFFIX,msn.com
-DOMAIN-SUFFIX,office.com
-DOMAIN-SUFFIX,office.net
-DOMAIN-SUFFIX,outlook.com
-DOMAIN-SUFFIX,skype.com
-DOMAIN-SUFFIX,windows.com
-DOMAIN-SUFFIX,windows.net
-DOMAIN-SUFFIX,windowsupdate.com
--- a/base/rules/lhie1/Surge/Surge
+++ b/base/rules/lhie1/Surge/Surge
@@ -1529,7 +1529,6 @@ DOMAIN-SUFFIX,api.iimedia.cn
 DOMAIN-SUFFIX,api.ijunhai.com
 DOMAIN-SUFFIX,api.itaoxiaoshuo.com
 DOMAIN-SUFFIX,api.joybj.com
-DOMAIN-SUFFIX,api.jr.mi.com
 DOMAIN-SUFFIX,api.ketedata.com
 DOMAIN-SUFFIX,api.koudaikj.com
 DOMAIN-SUFFIX,api.leadbolt.net
--- a/base/rules/lhie1/Surge/Surge
+++ b/base/rules/lhie1/Surge/Surge
@@ -1,6 +1,3 @@
-# > Dler Cloud
-DOMAIN,dler.cloud
-
 # > Google
 DOMAIN-KEYWORD,mtalk.google.com
 DOMAIN,safebrowsing.googleapis.com