update configs

2026-08-03 13:48:17 +03:00
parent 55b6eb58f0
commit d95e442015
7 changed files with 694 additions and 440 deletions
@@ -1,3 +1,27 @@
+anchors:
+  reserved_ips: &reserved_ips
+    - 0.0.0.0/8
+    - 10.0.0.0/8
+    - 100.64.0.0/10
+    - 127.0.0.0/8
+    - 169.254.0.0/16
+    - 172.16.0.0/12
+    - 192.0.0.0/24
+    - 192.0.2.0/24
+    - 192.88.99.0/24
+    - 192.168.0.0/16
+    - 198.51.100.0/24
+    - 203.0.113.0/24
+    - 224.0.0.0/3
+
+  dns_ru: &dns_ru
+    - https://77.88.8.8/dns-query#DIRECT
+    - https://8.8.8.8/dns-query#DIRECT
+
+  dns_proxy: &dns_proxy
+    - https://1.1.1.1/dns-query#VPN
+    - https://dns.google/dns-query#VPN
+
 mode: rule
 ipv6: false
 log-level: warning
@@ -5,17 +29,19 @@ allow-lan: false
 tproxy-port: 7894
 unified-delay: true
 tcp-concurrent: true
+enable-process: false
+find-process-mode: off
+keep-alive-idle: 120
+keep-alive-interval: 30
+routing-mark: 2
 external-controller: 0.0.0.0:9090
 external-ui: ./ui
 external-ui-url: "https://github.com/MetaCubeX/metacubexd/archive/refs/heads/gh-pages.zip"

-# geodata-mode: true
-# geo-auto-update: true
-# geo-update-interval: 24
-# geox-url:
-#   geoip: "https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/geoip.dat"
-#   geosite: "https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/geosite.dat"
-#   mmdb: "https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/country.mmdb"
+profile:
+  store-selected: true
+  store-fake-ip: true
+  tracing: false

 dns:
  enable: true
@@ -27,20 +53,9 @@ dns:
  ipv6: false
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
-  default-nameserver:
-    - 1.1.1.1
-    - 1.0.0.1
-    - 8.8.8.8
-    - 8.8.4.4
-  nameserver:
-    - https://dns10.quad9.net/dns-query
-    - https://dns.aa.net.uk/dns-query
-  proxy-server-nameserver:
-    - 1.1.1.1
-    - 8.8.8.8
-  # direct-nameserver:
  fake-ip-filter-mode: blacklist
  fake-ip-filter:
+    - rule-set:geosite-private
    - '+.lan'
    - '+.local'
    - '+.pool.ntp.org'
@@ -51,25 +66,28 @@ dns:
    - '+.push.apple.com'
    - '+.apple.com'
    - '+.4829152.xyz'
-
-find-process-mode: off
-
-keep-alive-idle: 120
-keep-alive-interval: 30
-
-profile:
-  store-selected: true
-  store-fake-ip: true
-  tracing: false
-
-routing-mark: 2
+  direct-nameserver-follow-policy: true
+  default-nameserver:
+    - 1.1.1.1
+    - 8.8.8.8
+  nameserver: *dns_ru
+  proxy-server-nameserver: *dns_ru
+  direct-nameserver: *dns_ru
+  nameserver-policy:
+    rule-set:geosite-private:
+      - system
+    # rule-set:oisd-big:
+    #   - rcode://refused
+    "rule-set:telegram,ru-bundle": *dns_proxy

 sniffer:
  enable: true
+  force-dns-mapping: true
+  parse-pure-ip: true
+  override-destination: false
  sniff:
    HTTP:
      ports: [80, 8080-8880]
-      override-destination: true
    TLS:
      ports: [443, 8443]
    QUIC:
@@ -85,6 +103,7 @@ sniffer:
    - '+.push.apple.com'
    - '+.apple.com'
    - '+.4829152.xyz'
+  skip-dst-address: *reserved_ips

 proxy-providers:
  remnawave:
@@ -105,7 +124,7 @@ proxy-providers:
      udp-over-tcp: true

 proxy-groups:
-  - name: Fastest
+  - name: ⚡ Самый быстрый
    icon: https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Auto.png
    type: url-test
    url: http://www.gstatic.com/generate_204
@@ -116,22 +135,24 @@ proxy-groups:
    use:
      - remnawave

-  - name: PROXY
-    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Proxy.png
+  - name: VPN
+    icon: https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Hijacking.png
    type: select
    url: http://www.gstatic.com/generate_204
    proxies:
-      - Fastest
+      - ⚡ Самый быстрый
      - DIRECT
    use:
      - remnawave

-  - name: RU-Banned
+  - name: Блокировки РФ
    icon: https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Russia.png
    type: select
    proxies:
-      - PROXY
+      - VPN
      - DIRECT
+    use:
+      - remnawave

  # - name: Реклама
  #   icon: https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Advertising.png
@@ -140,62 +161,94 @@ proxy-groups:
  #     - REJECT
  #     - DIRECT

+  - name: Остальные сайты
+    icon: https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Global.png
+    type: select
+    proxies:
+      - DIRECT
+      - VPN
+    use:
+      - remnawave
+
 rule-providers:
  # oisd-big:
  #   type: http
  #   behavior: domain
  #   format: mrs
  #   url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/oisd/big.mrs
-  #   interval: 86400
  #   path: ./rules/oisd/big.mrs
-
-  # bld-agregator:
-  #   type: http
-  #   behavior: domain
-  #   format: mrs
-  #   url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/other/bld-agregator.mrs
  #   interval: 86400
-  #   path: ./rules/oisd/bld-agregator.mrs
+  #   proxy: VPN
+
+  geosite-private:
+    type: http
+    behavior: domain
+    format: mrs
+    url: https://github.com/MetaCubeX/meta-rules-dat/raw/meta/geo/geosite/private.mrs
+    path: ./rules/geo/geosite/private.mrs
+    interval: 86400
+    proxy: VPN
+
+  geoip-private:
+    type: http
+    behavior: ipcidr
+    format: mrs
+    url: https://github.com/MetaCubeX/meta-rules-dat/raw/meta/geo/geoip/private.mrs
+    path: ./rules/geo/geoip/private.mrs

  # refilter_domains:
  #   type: http
  #   behavior: domain
  #   format: mrs
  #   url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/re-filter/domain-rule.mrs
+  #   path: ./rules/re-filter/domain-rule.mrs
  #   interval: 86400
-  #   path: ./re-filter/domain-rule.mrs
+  #   proxy: VPN

  # refilter_ipsum:
  #   type: http
  #   behavior: ipcidr
  #   format: mrs
  #   url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/re-filter/ip-rule.mrs
+  #   path: ./rules/re-filter/ip-rule.mrs
  #   interval: 86400
-  #   path: ./re-filter/ip-rule.mrs
+  #   proxy: VPN

  cloudflare:
    type: http
    behavior: ipcidr
    format: mrs
-    url: https://github.com/MetaCubeX/meta-rules-dat/raw/meta/geo/geoip/cloudflare.mrs
-    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/cloudflare.mrs
    path: ./rules/geoip/cloudflare.mrs
+    interval: 86400
+    proxy: VPN

-  telegram-ip:
+  telegram:
+    type: http
+    behavior: domain
+    format: mrs
+    url: https://github.com/MetaCubeX/meta-rules-dat/raw/meta/geo/geosite/telegram.mrs
+    path: ./rules/geosite/telegram.mrs
+    interval: 86400
+    proxy: VPN
+
+  telegram-ips:
    type: http
    behavior: ipcidr
-    format: text
-    url: https://core.telegram.org/resources/cidr.txt
+    format: mrs
+    url: https://github.com/MetaCubeX/meta-rules-dat/raw/meta/geo/geoip/telegram.mrs
+    path: ./rules/geoip/telegram.mrs
    interval: 86400
-    path: ./rules/services/telegram-ip.txt
+    proxy: VPN

  rknasnblock:
    type: http
    behavior: ipcidr
    format: mrs
    url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/ru-bundle/rknasnblock.mrs
+    path: ./rules/ru/rknasnblock.mrs
    interval: 86400
-    path: ./rules/ru-bundle/rknasnblock.mrs
+    proxy: VPN

  # include: itdoginfo-inside-russia + no-russia-hosts + antifilter-community
  ru-bundle:
@@ -203,23 +256,22 @@ rule-providers:
    behavior: domain
    format: mrs
    url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/ru-bundle/rule.mrs
+    path: ./rules/ru/ru-bundle.mrs
    interval: 86400
-    path: ./rules/ru-bundle/rule.mrs
+    proxy: VPN

 rules:
+  # === DIRECT (priority) ===
+  - RULE-SET,geoip-private,DIRECT,no-resolve
+  - RULE-SET,geosite-private,DIRECT
  # === REJECT ===
  # - RULE-SET,oisd-big,Реклама
-  # - RULE-SET,bld-agregator,Реклама
-
  # === PROXY ===
-  - RULE-SET,telegram-ip,PROXY,no-resolve
-
-  - RULE-SET,cloudflare,PROXY
-  # - RULE-SET,refilter_ipsum,PROXY,no-resolve
-  # - RULE-SET,refilter_domains,PROXY
-
-  - RULE-SET,rknasnblock,RU-Banned,no-resolve
-  - RULE-SET,ru-bundle,RU-Banned
-
+  - OR,((RULE-SET,telegram),(RULE-SET,telegram-ips)),VPN
+  - RULE-SET,cloudflare,VPN
+  # - RULE-SET,refilter_ipsum,VPN,no-resolve
+  # - RULE-SET,refilter_domains,VPN
+  - RULE-SET,rknasnblock,Блокировки РФ,no-resolve
+  - RULE-SET,ru-bundle,Блокировки РФ
  # === DIRECT ===
-  - MATCH,DIRECT
+  - MATCH,Остальные сайты