diff --git a/loon/loon.conf b/loon/loon.conf
index 93afa86..b5e0134 100644
--- a/loon/loon.conf
+++ b/loon/loon.conf
@@ -6,9 +6,12 @@
 [General]
 ip-mode = dual
 ipv6-vif = off
-dns-server = 223.5.5.5,119.29.29.29
-doh3-server = https://1.1.1.1/dns-query,https://8.8.8.8/dns-query
-disable-stun = true
+# 国内外混合DNS配置：国内DNS优先，海外DoH备用
+dns-server = system,119.29.29.29,223.5.5.5,1.1.1.1,8.8.8.8
+# 加密DNS配置：国内DoH + 海外DoH
+doh-server = https://223.5.5.5/dns-query,https://doh.pub/dns-query,https://1.1.1.1/dns-query,https://8.8.8.8/dns-query
+# DoQ配置：使用Cloudflare DoQ
+doq-server = quic://cloudflare-dns.com:784
 real-ip = *.iCloud.com,*.apple.com,*.crashlytics.com,msftconnecttest.com
 sni-sniffing = true
 disable-stun = true
@@ -41,7 +44,6 @@ bypass-tun = 10.0.0.0/8,100.64.0.0/10,127.0.0.0/8,169.254.0.0/16,172.16.0.0/12,1
 🇭🇰 IEP(NII)L-CNFHK SS = shadowsocks,niiiepl.812371.xyz,36192,2022-blake3-aes-128-gcm,"8eLTxLWml4weLT9KW2x9ig==:x8uB5bQzZ7VHEOeKc6zJ0A==",fast-open=false,udp=true,block-quic=false
 🇭🇰 IEP(NII)L-Jinx SS = shadowsocks,niiiepl.812371.xyz,36193,2022-blake3-aes-128-gcm,"8eLTxLWml4weLT9KW2x9ig==:x8uB5bQzZ7VHEOeKc6zJ0A==",fast-open=false,udp=true,block-quic=false
 [Remote Proxy]
-isif = http://152.53.33.92:50004/hatGZgTX6VUe2T2EwZJjf4PY3sr7/download/isif18r?target=Loon&includeUnsupportedProxy=true,udp=true,block-quic=false,fast-open=default,vmess-aead=true,skip-cert-verify=true,enabled=true,flexible-sni=false
 
 
 [Remote Filter]
@@ -135,14 +137,44 @@ https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Loon/OKX/OK
 https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Loon/Gemini/Gemini.list, policy=🤖 Gemini, tag=Gemini, enabled=true
 https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Loon/WeChat/WeChat.list, policy=🎯 全球直连, tag=WeChat, enabled=true
 [Host]
+# 防止DNS泄露
 localhost = 127.0.0.1
-# 代理服务器域名用国内DoH
+
+# 代理服务器域名使用国内DNS（模拟proxy-server-nameserver）
 *.812371.xyz = server:https://223.5.5.5/dns-query
-# Apple服务系统DNS
+cnfus.812371.xyz = server:https://223.5.5.5/dns-query
+racknerdus.812371.xyz = server:https://223.5.5.5/dns-query
+niiiepl.812371.xyz = server:https://223.5.5.5/dns-query
+
+# Apple服务保持系统DNS
 *.apple.com = server:system
 *.icloud.com = server:system
-# 国内域名用国内DoH
-*.cn = server:https://1.12.12.12/dns-query
+
+# 国内服务使用国内DNS
+*.qq.com = server:https://doh.pub/dns-query
+*.tencent.com = server:https://doh.pub/dns-query
+*.taobao.com = server:https://223.5.5.5/dns-query
+*.tmall.com = server:https://223.5.5.5/dns-query
+*.alipay.com = server:https://223.5.5.5/dns-query
+*.weibo.com = server:https://doh.pub/dns-query
+*.sina.com.cn = server:https://doh.pub/dns-query
+*.baidu.com = server:https://180.76.76.76
+*.douyin.com = server:https://doh.pub/dns-query
+*.bytedance.com = server:https://doh.pub/dns-query
+
+# 海外服务使用海外DNS（确保解析到最优CDN）
+*.google.com = server:https://8.8.8.8/dns-query
+*.youtube.com = server:https://8.8.8.8/dns-query
+*.facebook.com = server:https://1.1.1.1/dns-query
+*.instagram.com = server:https://1.1.1.1/dns-query
+*.twitter.com = server:https://1.1.1.1/dns-query
+*.netflix.com = server:https://1.1.1.1/dns-query
+*.openai.com = server:https://1.1.1.1/dns-query
+*.anthropic.com = server:https://1.1.1.1/dns-query
+
+# 特定SSID环境下的DNS设置示例（根据需要取消注释并修改）
+# ssid:家庭WiFi = server:192.168.1.1
+# ssid:公司WiFi = server:system
 
 [Rewrite]