更新 loon/loon.conf

This commit is contained in:
root 2025-06-26 16:46:44 +08:00
parent a35ba7eded
commit a0ef67b725

View File

@ -6,8 +6,9 @@
[General]
ip-mode = dual
ipv6-vif = off
dns-server = 1.1.1.1,8.8.8.8
dns-server = system,119.29.29.29,223.5.5.5
doh-server = https://1.1.1.1/dns-query,https://8.8.8.8/dns-query
doq-server = quic://223.5.5.5:853
doh3-server = h3://1.1.1.1/dns-query,h3://8.8.8.8/dns-query
real-ip = *.iCloud.com,*.apple.com,*.crashlytics.com,msftconnecttest.com
sni-sniffing = true
@ -20,9 +21,9 @@ wifi-access-http-port = 7222
wifi-access-socks5-port = 7221
allow-wifi-access = true
interface-mode = auto
test-timeout = 3
disconnect-on-policy-change = false
switch-node-after-failure-times = 2
test-timeout = 2
disconnect-on-policy-change = true
switch-node-after-failure-times = 3
internet-test-url = http://connectivitycheck.platform.hicloud.com/generate_204
proxy-test-url = http://www.gstatic.com/generate_204
resource-parser = https://raw.githubusercontent.com/sub-store-org/Sub-Store/release/sub-store-parser.loon.min.js
@ -48,7 +49,7 @@ bypass-tun = 10.0.0.0/8,100.64.0.0/10,127.0.0.0/8,169.254.0.0/16,172.16.0.0/12,1
[Proxy Group]
🚀 节点选择 = select,⚡ 自动选择,🔄 故障转移,⚖️ 负载均衡,DIRECT,🇯🇵 WAP SS,🇯🇵 橙子云 SS,🇺🇸 CNFaster CN2GIA SS,🇺🇸 RackNerd Reality,🇭🇰 IEPL-Bits SS,🇭🇰 IEP(NII)L-Bits SS,🇸🇬 IEP(NII)L-SG SS,🇭🇰 IEP(NII)L-CNFHK SS,🇭🇰 IEP(NII)L-Jinx SS
🚀 节点选择 = select,DIRECT,🇯🇵 WAP SS,🇯🇵 橙子云 SS,🇺🇸 CNFaster CN2GIA SS,🇺🇸 RackNerd Reality,🇭🇰 IEPL-Bits SS,🇭🇰 IEP(NII)L-Bits SS,🇸🇬 IEP(NII)L-SG SS,🇭🇰 IEP(NII)L-CNFHK SS,🇭🇰 IEP(NII)L-Jinx SS
Ⓜ️ 微软服务 = select,🎯 全球直连,🚀 节点选择
@ -76,10 +77,8 @@ bypass-tun = 10.0.0.0/8,100.64.0.0/10,127.0.0.0/8,169.254.0.0/16,172.16.0.0/12,1
🎵 抖音 = select,🎯 全球直连,🚀 节点选择,🇺🇸 CNFaster CN2GIA SS
# 智能策略组
⚡ 自动选择 = url-test,🇯🇵 WAP SS,🇯🇵 橙子云 SS,🇺🇸 CNFaster CN2GIA SS,🇺🇸 RackNerd Reality,🇭🇰 IEPL-Bits SS,🇭🇰 IEP(NII)L-Bits SS,🇸🇬 IEP(NII)L-SG SS,url = http://www.gstatic.com/generate_204,interval = 300,tolerance = 50
🔄 故障转移 = fallback,🇯🇵 WAP SS,🇯🇵 橙子云 SS,🇺🇸 CNFaster CN2GIA SS,🇺🇸 RackNerd Reality,url = http://www.gstatic.com/generate_204,interval = 300,max-timeout = 3000
⚖️ 负载均衡 = load-balance,🇯🇵 WAP SS,🇯🇵 橙子云 SS,🇺🇸 CNFaster CN2GIA SS,url = http://www.gstatic.com/generate_204,interval = 300,max-timeout = 3000,algorithm = round-robin
# 添加兜底策略组
🔄 兜底策略 = fallback,🚀 节点选择,🇯🇵 WAP SS,url = http://www.gstatic.com/generate_204,interval = 300,max-timeout = 3000
[Proxy Chain]
[Rule]
@ -112,12 +111,7 @@ DOMAIN-KEYWORD,leaves.red,📽︎ PT 站点
# Direct直连
IP-CIDR,13.113.147.158/8,🎯 全球直连
# 屏蔽恶意域名
DOMAIN-SUFFIX,doubleclick.net,REJECT
DOMAIN-SUFFIX,googleadservices.com,REJECT
DOMAIN-SUFFIX,googlesyndication.com,REJECT
DOMAIN-SUFFIX,googletagmanager.com,REJECT
DOMAIN-SUFFIX,google-analytics.com,REJECT
# 基础规则
GEOIP,LAN,🎯 全球直连
@ -127,14 +121,10 @@ GEOIP,CN,🎯 全球直连
FINAL,🐟 漏网之鱼
[Remote Rule]
# 安全防护规则
# DNS防泄露规则 - 防止应用绕过系统DNS设置
https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Loon/DNS/DNS.list, policy=🚀 节点选择, tag=DNS防泄露, enabled=true
https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Loon/Hijacking/Hijacking.list, policy=REJECT, tag=运营商劫持, enabled=true
https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Loon/Privacy/Privacy.list, policy=REJECT, tag=隐私保护, enabled=true
https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Loon/Tracking/Tracking.list, policy=REJECT, tag=恶意跟踪, enabled=true
# 广告拦截规则
# 从 clash 的 rule-providers 转换
https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt, policy=REJECT, tag=广告拦截, enabled=true
https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Loon/AdvertisingLite/AdvertisingLite.list, policy=REJECT, tag=轻量广告拦截, enabled=true
https://gitea.ozoo.top/public/rule/src/commit/13a014bdc2d40eca741dee407b99e32b800215ad/Microsoft.yaml, policy=Ⓜ️ 微软服务, tag=Microsoft, enabled=true
https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt, policy=🚀 节点选择, tag=代理规则, enabled=true
https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt, policy=🎯 全球直连, tag=直连规则, enabled=true
@ -154,39 +144,15 @@ https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Loon/WeChat
localhost = 127.0.0.1
# 代理服务器域名使用国内DNS模拟proxy-server-nameserver
*.812371.xyz = server:https://223.5.5.5/dns-query
cnfus.812371.xyz = server:https://223.5.5.5/dns-query
racknerdus.812371.xyz = server:https://223.5.5.5/dns-query
niiiepl.812371.xyz = server:https://223.5.5.5/dns-query
*.812371.xyz = server:223.5.5.5
cnfus.812371.xyz = server:223.5.5.5
racknerdus.812371.xyz = server:223.5.5.5
niiiepl.812371.xyz = server:223.5.5.5
# Apple服务保持系统DNS
*.apple.com = server:system
*.icloud.com = server:system
# 确保国内DNS服务器域名走直连
dns.alidns.com = server:223.5.5.5
rubyfish.cn = server:223.5.5.5
*.233py.com = server:223.5.5.5
# 确保国外DNS服务器域名走代理和加密DNS
dns.google = server:https://1.1.1.1/dns-query
dns.google.com = server:https://1.1.1.1/dns-query
cloudflare-dns.com = server:https://1.1.1.1/dns-query
one.one.one.one = server:https://1.1.1.1/dns-query
dns.quad9.net = server:https://1.1.1.1/dns-query
# 屏蔽恶意域名 (移动到Rule部分更合适)
# doubleclick.net = REJECT
# googleadservices.com = REJECT
# googlesyndication.com = REJECT
# googletagmanager.com = REJECT
# google-analytics.com = REJECT
# 银行和金融安全
*.bank = server:223.5.5.5
*.cn = server:223.5.5.5
*.gov.cn = server:223.5.5.5
[Rewrite]
[Script]
@ -235,14 +201,14 @@ https://raw.githubusercontent.com/ClydeTime/BiliBili/master/modules/BiliBiliDail
https://kelee.one/Tool/Loon/Plugin/AppleWeatherEnhancer.plugin, enabled=true
https://kelee.one/Tool/Loon/Plugin/Cainiao_remove_ads.plugin, enabled=true
https://raw.githubusercontent.com/app2smile/rules/master/plugin/tieba.plugin, enabled=true
https://kelee.one/Tool/Loon/Plugin/LoonGallery.plugin, policy=⚡ 自动选择, enabled=true
https://kelee.one/Tool/Loon/Plugin/LoonGallery.plugin, policy=🔄 兜底策略, enabled=true
https://kelee.one/Tool/Loon/Plugin/QuickSearch.plugin, enabled=true
https://kelee.one/Tool/Loon/Plugin/Prevent_DNS_Leaks.plugin, policy=🚀 节点选择, enabled=true
https://kelee.one/Tool/Loon/Plugin/Node_detection_tool.plugin, enabled=true
https://kelee.one/Tool/Loon/Plugin/TestFlightRegionUnlock.plugin, policy=DIRECT, enabled=true
https://kelee.one/Tool/Loon/Plugin/BoxJs.plugin, policy=⚡ 自动选择, enabled=true
https://kelee.one/Tool/Loon/Plugin/Sub-Store.plugin, policy=⚡ 自动选择, enabled=true
https://kelee.one/Tool/Loon/Plugin/Script-Hub.plugin, policy=⚡ 自动选择, enabled=true
https://kelee.one/Tool/Loon/Plugin/BoxJs.plugin, policy=🔄 兜底策略, enabled=true
https://kelee.one/Tool/Loon/Plugin/Sub-Store.plugin, policy=🔄 兜底策略, enabled=true
https://kelee.one/Tool/Loon/Plugin/Script-Hub.plugin, policy=🔄 兜底策略, enabled=true
[Mitm]