Skip to content

Commit 6344df2

Browse files
DustinWinDustinWin
committed
修改 DNS 策略
1 parent 9ccc5d8 commit 6344df2

15 files changed

Lines changed: 281 additions & 642 deletions

‎_posts/2024-08-21-dnsbypass-mihomo-geodata.md‎

Lines changed: 25 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ tags: [Clash, mihomo, 进阶, DNS, DNS 分流]
1111
1. 使用 [ShellCrash](https://github.com/juewuy/ShellCrash) 搭配 [AdGuard Home](https://github.com/AdguardTeam/AdGuardHome) 并将 AdGuard Home 作为上游时不要使用该方法
1212
2. 本教程以 ShellCrash 为例，其它客户端亦可参考
1313
3. 本教程搭载 [mihomo 内核 Meta 版](https://github.com/MetaCubeX/mihomo/tree/Meta)（导入内核方法可参考《[ShellCrash 和 AdGuard Home 快速安装教程/导入 mihomo 内核 或 sing-box 内核](https://proxy-tutorials.dustinwin.us.kg/posts/pin-toolsinstall/#%E4%BA%8C-%E5%AF%BC%E5%85%A5-mihomo-%E5%86%85%E6%A0%B8-%E6%88%96-sing-box-%E5%86%85%E6%A0%B8)》）
14-
4. DNS 分流简单来说就是**指定国内域名走国内 DNS 解析，国外域名走 `fake-ip`**。未知域名走 `real-ip`（在匹配 `rules.GEOIP:cn` 规则时会由国内 DNS 解析，解析出 IP 在国内则走 `🀄️ 国内 IP` 规则，否则走 `🐟 漏网之鱼` 规则）
14+
4. DNS 分流简单来说就是**指定国内域名走国内 DNS 解析，国外域名走 `fake-ip`**。未知域名走 `fake-ip`（在匹配 `rules.GEOIP:cn` 规则时会由国内 DNS 解析，解析出 IP 在国内则走 `🀄️ 国内 IP` 规则，否则走 `🐟 漏网之鱼` 规则）
1515
5. 部分用户觉得未知域名处理方式会导致 DNS 泄露，可参考《[搭载 mihomo 内核配置 DNS 不泄露教程-geodata 方案](https://proxy-tutorials.dustinwin.us.kg/posts/dnsnoleaks-mihomo-geodata)》
1616

1717
## 一、 导入路由规则文件
@@ -25,8 +25,29 @@ geosite.dat 文件须包含 `fakeip-filter`、`cn` 和 `proxy`，推荐导入我
2525

2626
```yaml
2727
hosts:
28+
dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
2829
doh.pub: [1.12.12.12, 120.53.53.53, 2402:4e00::]
30+
31+
dns:
32+
enable: true
33+
prefer-h3: true
34+
ipv6: true
35+
listen: 0.0.0.0:1053
36+
enhanced-mode: fake-ip
37+
fake-ip-range: 28.0.0.0/8
38+
fake-ip-range6: fc00::/16
39+
fake-ip-filter: [geosite:fakeip-filter,cn]
40+
nameserver:
41+
- quic://dns.alidns.com:853
42+
- https://dns.pub/dns-query
43+
```
44+
45+
或者
46+
47+
```yaml
48+
hosts:
2949
dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
50+
doh.pub: [1.12.12.12, 120.53.53.53, 2402:4e00::]
3051

3152
dns:
3253
enable: true
@@ -40,11 +61,11 @@ dns:
4061
fake-ip-filter:
4162
- GEOSITE,fakeip-filter,real-ip
4263
- GEOSITE,proxy,fake-ip
43-
- GEOSITE,cn,real-ip # 此条仅演示，可删除
44-
- MATCH,real-ip
64+
- GEOSITE,cn,real-ip
65+
- MATCH,fake-ip
4566
nameserver:
46-
- https://dns.pub/dns-query
4767
- quic://dns.alidns.com:853
68+
- https://dns.pub/dns-query
4869
```
4970
5071
按一下 Esc 键（退出键），输入英文冒号 `:`，继续输入 `wq` 并回车

‎_posts/2024-08-21-dnsbypass-mihomo-ruleset.md‎

Lines changed: 25 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ tags: [Clash, mihomo, 进阶, DNS, DNS 分流]
1111
1. 使用 [ShellCrash](https://github.com/juewuy/ShellCrash) 搭配 [AdGuard Home](https://github.com/AdguardTeam/AdGuardHome) 并将 AdGuard Home 作为上游时不要使用该方法
1212
2. 本教程以 ShellCrash 为例，其它客户端亦可参考
1313
3. 本教程搭载 [mihomo 内核 Meta 版](https://github.com/MetaCubeX/mihomo/tree/Meta)（导入内核方法可参考《[ShellCrash 和 AdGuard Home 快速安装教程/导入 mihomo 内核 或 sing-box 内核](https://proxy-tutorials.dustinwin.us.kg/posts/pin-toolsinstall/#%E4%BA%8C-%E5%AF%BC%E5%85%A5-mihomo-%E5%86%85%E6%A0%B8-%E6%88%96-sing-box-%E5%86%85%E6%A0%B8)》）
14-
4. DNS 分流简单来说就是**指定国内域名走国内 DNS 解析，国外域名走 `fake-ip`**。未知域名走 `real-ip`（在匹配 `rules.RULE-SET:cnip` 规则时会由国内 DNS 解析，解析出 IP 在国内则走 `🀄️ 国内 IP` 规则，否则走 `🐟 漏网之鱼` 规则）
14+
4. DNS 分流简单来说就是**指定国内域名走国内 DNS 解析，国外域名走 `fake-ip`**。未知域名走 `fake-ip`（在匹配 `rules.RULE-SET:cnip` 规则时会由国内 DNS 解析，解析出 IP 在国内则走 `🀄️ 国内 IP` 规则，否则走 `🐟 漏网之鱼` 规则）
1515
5. 部分用户觉得未知域名处理方式会导致 DNS 泄露，可参考《[搭载 mihomo 内核配置 DNS 不泄露教程-ruleset 方案](https://proxy-tutorials.dustinwin.us.kg/posts/dnsnoleaks-mihomo-ruleset)》
1616

1717
## 一、 导入规则集合文件
@@ -52,8 +52,29 @@ rule-providers:
5252

5353
```yaml
5454
hosts:
55+
dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
5556
doh.pub: [1.12.12.12, 120.53.53.53, 2402:4e00::]
57+
58+
dns:
59+
enable: true
60+
prefer-h3: true
61+
ipv6: true
62+
listen: 0.0.0.0:1053
63+
enhanced-mode: fake-ip
64+
fake-ip-range: 28.0.0.0/8
65+
fake-ip-range6: fc00::/16
66+
fake-ip-filter: [rule-set:fakeip-filter,cn]
67+
nameserver:
68+
- quic://dns.alidns.com:853
69+
- https://dns.pub/dns-query
70+
```
71+
72+
或者
73+
74+
```yaml
75+
hosts:
5676
dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
77+
doh.pub: [1.12.12.12, 120.53.53.53, 2402:4e00::]
5778
5879
dns:
5980
enable: true
@@ -67,11 +88,11 @@ dns:
6788
fake-ip-filter:
6889
- RULE-SET,fakeip-filter,real-ip
6990
- RULE-SET,proxy,fake-ip
70-
- RULE-SET,cn,real-ip # 此条仅演示，可删除
71-
- MATCH,real-ip
91+
- RULE-SET,cn,real-ip
92+
- MATCH,fake-ip
7293
nameserver:
73-
- https://dns.pub/dns-query
7494
- quic://dns.alidns.com:853
95+
- https://dns.pub/dns-query
7596
```
7697

7798
按一下 Esc 键（退出键），输入英文冒号 `:`，继续输入 `wq` 并回车

‎_posts/2024-08-21-dnsnoleaks-mihomo-geodata.md‎

Lines changed: 14 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -28,8 +28,8 @@ geosite.dat 文件须包含 `fakeip-filter`、`cn` 和 `proxy`，推荐导入我
2828

2929
```yaml
3030
hosts:
31-
doh.pub: [1.12.12.12, 120.53.53.53, 2402:4e00::]
3231
dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
32+
doh.pub: [1.12.12.12, 120.53.53.53, 2402:4e00::]
3333
dns.google: [8.8.8.8, 8.8.4.4, 2001:4860:4860::8888, 2001:4860:4860::8844]
3434
dns11.quad9.net: [9.9.9.11, 149.112.112.11, 2620:fe::11, 2620:fe::fe:11]
3535

@@ -44,23 +44,23 @@ dns:
4444
fake-ip-filter:
4545
- GEOSITE,fakeip-filter,real-ip
4646
- GEOSITE,proxy,fake-ip
47-
- GEOSITE,cn,real-ip # 此条仅演示，可删除
48-
- MATCH,real-ip
47+
- GEOSITE,cn,real-ip
48+
- MATCH,fake-ip
4949
respect-rules: true
5050
nameserver:
5151
# 推荐将 `ecs` 设置为当前宽带运营商分配的默认 DNS 的 IP 段
5252
- 'https://dns.google/dns-query#ecs=211.137.58.0/24'
5353
- 'https://dns11.quad9.net/dns-query#ecs=211.137.58.0/24'
5454
proxy-server-nameserver:
55-
- https://dns.pub/dns-query
5655
- quic://dns.alidns.com:853
57-
direct-nameserver:
5856
- https://dns.pub/dns-query
57+
direct-nameserver:
5958
- quic://dns.alidns.com:853
59+
- https://dns.pub/dns-query
6060
nameserver-policy:
6161
'geosite:fakeip-filter,cn':
62-
- https://dns.pub/dns-query
6362
- quic://dns.alidns.com:853
63+
- https://dns.pub/dns-query
6464
```
6565
6666
按一下 Esc 键（退出键），输入英文冒号 `:`，继续输入 `wq` 并回车
@@ -77,8 +77,8 @@ dns:
7777

7878
```yaml
7979
hosts:
80-
doh.pub: [1.12.12.12, 120.53.53.53, 2402:4e00::]
8180
dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
81+
doh.pub: [1.12.12.12, 120.53.53.53, 2402:4e00::]
8282
8383
dns:
8484
enable: true
@@ -88,13 +88,10 @@ dns:
8888
enhanced-mode: fake-ip
8989
fake-ip-range: 28.0.0.0/8
9090
fake-ip-range6: fc00::/16
91-
fake-ip-filter-mode: rule
92-
fake-ip-filter:
93-
- GEOSITE,fakeip-filter,real-ip
94-
- MATCH,fake-ip
91+
fake-ip-filter: [geosite:fakeip-filter]
9592
nameserver:
96-
- https://dns.pub/dns-query
9793
- quic://dns.alidns.com:853
94+
- https://dns.pub/dns-query
9895
```
9996

10097
按一下 Esc 键（退出键），输入英文冒号 `:`，继续输入 `wq` 并回车
@@ -106,8 +103,8 @@ dns:
106103

107104
```yaml
108105
hosts:
109-
doh.pub: [1.12.12.12, 120.53.53.53, 2402:4e00::]
110106
dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
107+
doh.pub: [1.12.12.12, 120.53.53.53, 2402:4e00::]
111108
dns.google: [8.8.8.8, 8.8.4.4, 2001:4860:4860::8888, 2001:4860:4860::8844]
112109
dns11.quad9.net: [9.9.9.11, 149.112.112.11, 2620:fe::11, 2620:fe::fe:11]
113110
@@ -125,15 +122,15 @@ dns:
125122
- 'https://dns.google/dns-query#ecs=211.137.58.0/24'
126123
- 'https://dns11.quad9.net/dns-query#ecs=211.137.58.0/24'
127124
proxy-server-nameserver:
128-
- https://dns.pub/dns-query
129125
- quic://dns.alidns.com:853
130-
direct-nameserver:
131126
- https://dns.pub/dns-query
127+
direct-nameserver:
132128
- quic://dns.alidns.com:853
129+
- https://dns.pub/dns-query
133130
nameserver-policy:
134-
'geosite:fakeip-filter,cn':
135-
- https://dns.pub/dns-query
131+
'geosite:cn':
136132
- quic://dns.alidns.com:853
133+
- https://dns.pub/dns-query
137134
```
138135
139136
按一下 Esc 键（退出键），输入英文冒号 `:`，继续输入 `wq` 并回车

‎_posts/2024-08-21-dnsnoleaks-mihomo-ruleset.md‎

Lines changed: 14 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -55,8 +55,8 @@ rule-providers:
5555

5656
```yaml
5757
hosts:
58-
doh.pub: [1.12.12.12, 120.53.53.53, 2402:4e00::]
5958
dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
59+
doh.pub: [1.12.12.12, 120.53.53.53, 2402:4e00::]
6060
dns.google: [8.8.8.8, 8.8.4.4, 2001:4860:4860::8888, 2001:4860:4860::8844]
6161
dns11.quad9.net: [9.9.9.11, 149.112.112.11, 2620:fe::11, 2620:fe::fe:11]
6262
@@ -71,23 +71,23 @@ dns:
7171
fake-ip-filter:
7272
- RULE-SET,fakeip-filter,real-ip
7373
- RULE-SET,proxy,fake-ip
74-
- RULE-SET,cn,real-ip # 此条仅演示，可删除
75-
- MATCH,real-ip
74+
- RULE-SET,cn,real-ip
75+
- MATCH,fake-ip
7676
respect-rules: true
7777
nameserver:
7878
# 推荐将 `ecs` 设置为当前宽带运营商分配的默认 DNS 的 IP 段
7979
- 'https://dns.google/dns-query#ecs=211.137.58.0/24'
8080
- 'https://dns11.quad9.net/dns-query#ecs=211.137.58.0/24'
8181
proxy-server-nameserver:
82-
- https://dns.pub/dns-query
8382
- quic://dns.alidns.com:853
84-
direct-nameserver:
8583
- https://dns.pub/dns-query
84+
direct-nameserver:
8685
- quic://dns.alidns.com:853
86+
- https://dns.pub/dns-query
8787
nameserver-policy:
8888
'rule-set:fakeip-filter,cn':
89-
- https://dns.pub/dns-query
9089
- quic://dns.alidns.com:853
90+
- https://dns.pub/dns-query
9191
```
9292
9393
按一下 Esc 键（退出键），输入英文冒号 `:`，继续输入 `wq` 并回车
@@ -106,8 +106,8 @@ dns:
106106

107107
```yaml
108108
hosts:
109-
doh.pub: [1.12.12.12, 120.53.53.53, 2402:4e00::]
110109
dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
110+
doh.pub: [1.12.12.12, 120.53.53.53, 2402:4e00::]
111111
112112
dns:
113113
enable: true
@@ -117,13 +117,10 @@ dns:
117117
enhanced-mode: fake-ip
118118
fake-ip-range: 28.0.0.0/8
119119
fake-ip-range6: fc00::/16
120-
fake-ip-filter-mode: rule
121-
fake-ip-filter:
122-
- RULE-SET,fakeip-filter,real-ip
123-
- MATCH,fake-ip
120+
fake-ip-filter: [rule-set:fakeip-filter]
124121
nameserver:
125-
- https://dns.pub/dns-query
126122
- quic://dns.alidns.com:853
123+
- https://dns.pub/dns-query
127124
```
128125

129126
按一下 Esc 键（退出键），输入英文冒号 `:`，继续输入 `wq` 并回车
@@ -135,8 +132,8 @@ dns:
135132

136133
```yaml
137134
hosts:
138-
doh.pub: [1.12.12.12, 120.53.53.53, 2402:4e00::]
139135
dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
136+
doh.pub: [1.12.12.12, 120.53.53.53, 2402:4e00::]
140137
dns.google: [8.8.8.8, 8.8.4.4, 2001:4860:4860::8888, 2001:4860:4860::8844]
141138
dns11.quad9.net: [9.9.9.11, 149.112.112.11, 2620:fe::11, 2620:fe::fe:11]
142139
@@ -154,15 +151,15 @@ dns:
154151
- 'https://dns.google/dns-query#ecs=211.137.58.0/24'
155152
- 'https://dns11.quad9.net/dns-query#ecs=211.137.58.0/24'
156153
proxy-server-nameserver:
157-
- https://dns.pub/dns-query
158154
- quic://dns.alidns.com:853
159-
direct-nameserver:
160155
- https://dns.pub/dns-query
156+
direct-nameserver:
161157
- quic://dns.alidns.com:853
158+
- https://dns.pub/dns-query
162159
nameserver-policy:
163-
'rule-set:fakeip-filter,cn':
164-
- https://dns.pub/dns-query
160+
'rule-set:cn':
165161
- quic://dns.alidns.com:853
162+
- https://dns.pub/dns-query
166163
```
167164
168165
按一下 Esc 键（退出键），输入英文冒号 `:`，继续输入 `wq` 并回车

0 commit comments

Comments
 (0)