proxy-rules/config.conf at main · ousenko/proxy-rules · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
# Shadowrocket: 2025-03-29 12:23:45
[General]
bypass-system = true
skip-proxy = 192.168.0.0/16, 10.0.0.0/8, 172.16.0.0/12, localhost, *.local, captive.apple.com
tun-excluded-routes = 10.0.0.0/8, 100.64.0.0/10, 127.0.0.0/8, 169.254.0.0/16, 172.16.0.0/12, 192.0.0.0/24, 192.0.2.0/24, 192.88.99.0/24, 192.168.0.0/16, 198.51.100.0/24, 203.0.113.0/24, 224.0.0.0/4, 255.255.255.255/32, 239.255.255.250/32
dns-server = 8.8.8.8,1.1.1.1
fallback-dns-server = system
ipv6 = true
prefer-ipv6 = false
dns-direct-system = false
icmp-auto-reply = true
always-reject-url-rewrite = false
private-ip-answer = true
# direct domain fail to resolve use proxy rule
dns-direct-fallback-proxy = true
# The fallback behavior when UDP traffic matches a policy that doesn't support the UDP relay. Possible values: DIRECT, REJECT.
udp-policy-not-supported-behaviour = REJECT

update-url = https://raw.githubusercontent.com/ousenko/proxy-rules/refs/heads/main/config.conf

[Rule]
# LAN
IP-CIDR,192.168.0.0/16,DIRECT
IP-CIDR,10.0.0.0/8,DIRECT
IP-CIDR,172.16.0.0/12,DIRECT
IP-CIDR,127.0.0.0/8,DIRECT

# ru
DOMAIN-WILDCARD,*.ru,DIRECT
DOMAIN-WILDCARD,*.su,DIRECT
DOMAIN-WILDCARD,*.рф,DIRECT
DOMAIN-WILDCARD,*.perplexity.ai,DIRECT
DOMAIN,perplexity.ai,DIRECT

#telegram
DOMAIN-SUFFIX,t.me,DIRECT
DOMAIN-KEYWORD,tdesktop,DIRECT
DOMAIN-SUFFIX,telegra.ph,DIRECT
DOMAIN-SUFFIX,telesco.pe,DIRECT
DOMAIN-KEYWORD,telegram,DIRECT
IP-CIDR,91.108.56.0/22,DIRECT
IP-CIDR,91.108.4.0/22,DIRECT
IP-CIDR,91.108.8.0/22,DIRECT
IP-CIDR,149.154.160.0/20,DIRECT
IP-CIDR,91.108.12.0/22,DIRECT
IP-CIDR,91.108.16.0/22,DIRECT
IP-CIDR,91.108.56.0/22,DIRECT
IP-CIDR,109.239.140.0/24,DIRECT
IP-CIDR,149.154.160.0/20,DIRECT
IP-CIDR,2001:B28:F23D::/48,DIRECT
IP-CIDR,2001:B28:F23F::/48,DIRECT
IP-CIDR,2A0A:F280::/32,DIRECT
IP-CIDR,2001:67C:4E8::/48,DIRECT

PORT,22,DIRECT
# mail rules

PORT,25,DIRECT
PORT,465,DIRECT
PORT,587,DIRECT


DOMAIN-KEYWORD,smtp
DOMAIN-KEYWORD,imap

FINAL,PROXY

[Host]
localhost = 127.0.0.1

[URL Rewrite]
# ^https?://(www.)?g.cn https://www.google.com 302
# ^https?://(www.)?google.cn https://www.google.com 302