diff --git a/loon/loon.conf b/loon/loon.conf
index fc35f26..aaf527a 100644
--- a/loon/loon.conf
+++ b/loon/loon.conf
@@ -6,7 +6,9 @@
 [General]
 ip-mode = dual
 ipv6-vif = off
-dns-server = system
+dns-server = 1.1.1.1,8.8.8.8
+doh-server = https://1.1.1.1/dns-query,https://8.8.8.8/dns-query
+real-ip = *.iCloud.com,*.apple.com,*.crashlytics.com,msftconnecttest.com
 sni-sniffing = true
 disable-stun = true
 dns-reject-mode = LoopbackIP
@@ -35,8 +37,8 @@ bypass-tun = 10.0.0.0/8,100.64.0.0/10,127.0.0.0/8,169.254.0.0/16,172.16.0.0/12,1
 🇭🇰 IEPL-Bits SS = shadowsocks,103.216.253.110,62018,aes-128-gcm,"8eLTxLWml4weLT9KW2x9ig==",fast-open=false,udp=true,block-quic=false
 🇭🇰 IEP(NII)L-Bits SS = shadowsocks,niiiepl.812371.xyz,36190,2022-blake3-aes-128-gcm,"8eLTxLWml4weLT9KW2x9ig==:x8uB5bQzZ7VHEOeKc6zJ0A==",fast-open=false,udp=true,block-quic=false
 🇸🇬 IEP(NII)L-SG SS = shadowsocks,niiiepl.812371.xyz,36191,2022-blake3-aes-128-gcm,"8eLTxLWml4weLT9KW2x9ig==:x8uB5bQzZ7VHEOeKc6zJ0A==",fast-open=false,udp=true,block-quic=false
-🇭🇰 IEP(NII)L-CNFHK SS=shadowsocks,niiiepl.812371.xyz,36192,2022-blake3-aes-128-gcm,"8eLTxLWml4weLT9KW2x9ig==:x8uB5bQzZ7VHEOeKc6zJ0A==",udp=true
-🇭🇰 IEP(NII)L-Jinx SS=shadowsocks,niiiepl.812371.xyz,36193,2022-blake3-aes-128-gcm,"8eLTxLWml4weLT9KW2x9ig==:x8uB5bQzZ7VHEOeKc6zJ0A==",udp=true
+🇭🇰 IEP(NII)L-CNFHK SS = shadowsocks,niiiepl.812371.xyz,36192,2022-blake3-aes-128-gcm,"8eLTxLWml4weLT9KW2x9ig==:x8uB5bQzZ7VHEOeKc6zJ0A==",fast-open=false,udp=true,block-quic=false
+🇭🇰 IEP(NII)L-Jinx SS = shadowsocks,niiiepl.812371.xyz,36193,2022-blake3-aes-128-gcm,"8eLTxLWml4weLT9KW2x9ig==:x8uB5bQzZ7VHEOeKc6zJ0A==",fast-open=false,udp=true,block-quic=false
 [Remote Proxy]
 isif = http://152.53.33.92:50004/hatGZgTX6VUe2T2EwZJjf4PY3sr7/download/isif18r?target=Loon&includeUnsupportedProxy=true,udp=true,block-quic=false,fast-open=default,vmess-aead=true,skip-cert-verify=true,enabled=true,flexible-sni=false
 
@@ -67,7 +69,7 @@ isif = http://152.53.33.92:50004/hatGZgTX6VUe2T2EwZJjf4PY3sr7/download/isif18r?t
 
 🐧 论坛 = select,🇺🇸 CNFaster CN2GIA SS,🚀 节点选择,🇺🇸 RackNerd Reality,🇯🇵 橙子云 SS,🇭🇰 IEPL-Bits SS,🇸🇬 IEP(NII)L-SG SS
 
-🪙 交易所 = select,🇹🇼 IEPL-Lain SS,🚀 节点选择,🎯 全球直连
+🪙 交易所 = select,🚀 节点选择,🎯 全球直连
 
 📱 小红书 = select,🎯 全球直连,🚀 节点选择,🇺🇸 CNFaster CN2GIA SS
 
@@ -132,6 +134,18 @@ https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Loon/OKX/OK
 https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Loon/Gemini/Gemini.list, policy=🤖 Gemini, tag=Gemini, enabled=true
 https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Loon/WeChat/WeChat.list, policy=🎯 全球直连, tag=WeChat, enabled=true
 [Host]
+# 防止DNS泄露
+localhost = 127.0.0.1
+
+# 代理服务器域名使用国内DNS（模拟proxy-server-nameserver）
+*.812371.xyz = server:https://223.5.5.5/dns-query
+cnfus.812371.xyz = server:https://223.5.5.5/dns-query
+racknerdus.812371.xyz = server:https://223.5.5.5/dns-query
+niiiepl.812371.xyz = server:https://223.5.5.5/dns-query
+
+# Apple服务保持系统DNS
+*.apple.com = server:system
+*.icloud.com = server:system
 
 [Rewrite]
 
@@ -183,7 +197,7 @@ https://kelee.one/Tool/Loon/Plugin/Cainiao_remove_ads.plugin, enabled=true
 https://raw.githubusercontent.com/app2smile/rules/master/plugin/tieba.plugin, enabled=true
 https://kelee.one/Tool/Loon/Plugin/LoonGallery.plugin, policy=兜底后备策略, enabled=true
 https://kelee.one/Tool/Loon/Plugin/QuickSearch.plugin, enabled=true
-https://kelee.one/Tool/Loon/Plugin/Prevent_DNS_Leaks.plugin, policy=兜底后备策略, enabled=true
+https://kelee.one/Tool/Loon/Plugin/Prevent_DNS_Leaks.plugin, policy=🚀 节点选择, enabled=true
 https://kelee.one/Tool/Loon/Plugin/Node_detection_tool.plugin, enabled=true
 https://kelee.one/Tool/Loon/Plugin/TestFlightRegionUnlock.plugin, policy=DIRECT, enabled=true
 https://kelee.one/Tool/Loon/Plugin/BoxJs.plugin, policy=兜底后备策略, enabled=true