major update clash config

clash/config.yaml

@@ -1,6 +1,6 @@
 mode: rule
+log-level: warning
 unified-delay: true
-endpoint-independent-nat: true
 tcp-concurrent: true
 
 geodata-mode: true
@@ -13,44 +13,55 @@ geox-url:
 
 tun:
   enable: true
-  stack: system
+  stack: mixed
   auto-route: true
   auto-detect-interface: true
-  strict-route: false
+  strict-route: true
+  dns-hijack:
+    - any:53
+    - tcp://any:53
+  # endpoint-independent-nat: true
+  exclude-package:
+    - com.android.captiveportallogin
 
 dns:
   enable: true
-  listen: :53
-  stack: mixed
-  ipv6: false
-  prefer-h3: true
   cache-algorithm: arc
+  prefer-h3: false # true
+  use-hosts: true
+  use-system-hosts: true
+  listen: :53
+  ipv6: false
   enhanced-mode: fake-ip
   fake-ip-range: 198.18.0.1/16
-  default-nameserver: ['1.1.1.1', '1.0.0.1', '8.8.8.8', '8.8.4.4']
+  default-nameserver:
+    - 1.1.1.1
+    - 1.0.0.1
+    - 8.8.8.8
+    - 8.8.4.4
   nameserver:
     - https://dns10.quad9.net/dns-query
     - https://dns.aa.net.uk/dns-query
-  # proxy-server-nameserver:
+  proxy-server-nameserver:
-  #   - 1.1.1.1
+    - 1.1.1.1
-  #   - 8.8.8.8
+    - 8.8.8.8
-  # fallback:
+  # direct-nameserver:
-  #   - 1.1.1.1
-  #   - 8.8.8.8
-  # fallback-filter:
-  #   geoip: true
-  #   geoip-code: RU
-  dns-hijack:
-  - any:53
   fake-ip-filter-mode: blacklist
   fake-ip-filter:
-    - '*.lan'
+    - '+.lan'
-    - '*.local'
+    - '+.local'
-    - +.pool.ntp.org
+    - '+.pool.ntp.org'
-    - +.msftconnecttest.com
+    - 'time.windows.com'
-    - +.3gppnetwork.org
+    - 'time.apple.com'
+    - '+.msftconnecttest.com'
+    - '+.msftncsi.com'
+    - '+.push.apple.com'
+    - '+.apple.com'
     - '+.i8m3x.icu'
 
+find-process-mode: always
+global-client-fingerprint: chrome
+
 keep-alive-idle: 120
 keep-alive-interval: 30
 
@@ -70,11 +81,16 @@ sniffer:
     QUIC:
       ports: [443, 8443]
   skip-domain:
-    # - 'Mijia Cloud'
     - '+.lan'
     - '+.local'
-    # - '+.push.apple.com'
+    - '+.pool.ntp.org'
-    # - '+.apple.com'
+    - 'time.windows.com'
+    - 'time.apple.com'
+    - '+.msftconnecttest.com'
+    - '+.msftncsi.com'
+    - '+.push.apple.com'
+    - '+.apple.com'
+    - '+.i8m3x.icu'
 
 proxy-providers:
   remnawave:
@@ -143,23 +159,12 @@ proxy-groups:
     proxies:
       - PROXY
       - DIRECT
-  - name: RU-Inside-Domain
+  - name: Реклама
-    icon: https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Russia.png
-    type: select
-    proxies:
-      - DIRECT
-      - PROXY
-  - name: AD
     icon: https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Advertising.png
     type: select
     proxies:
       - REJECT
       - DIRECT
-  - name: ANDROID
-    type: select
-    proxies:
-      - DIRECT
-      - PROXY
 
 rule-providers:
   oisd-big:
@@ -168,110 +173,131 @@ rule-providers:
     format: mrs
     url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/oisd/big.mrs
     interval: 86400
-    path: ./ipset/oisd/big.mrs
+    path: ./rules/oisd/big.mrs
-  # oisd-small:
+  # bld-agregator:
-  #   behavior: domain
   #   type: http
+  #   behavior: domain
   #   format: mrs
-  #   url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/oisd/small.mrs
+  #   url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/other/bld-agregator.mrs
   #   interval: 86400
-  #   path: ./ipset/oisd/small.mrs
+  #   path: ./rules/oisd/bld-agregator.mrs
-  itdoginfo-domains:
-    behavior: domain
-    type: http
-    format: mrs
-    url: https://github.com/itdoginfo/allow-domains/releases/latest/download/russia_inside_domain.mrs
-    interval: 86400
-    path: ./ipset/itdoginfo/russia_inside_domain.mrs
   antifilter-ip:
     behavior: classical
     type: http
     url: https://antifilter.i8m3x.icu/antifilter-ip.yaml
     interval: 86400
-    path: ./ipset/custom/antifilter-ip.yaml
+    path: ./rules/custom/antifilter-ip.yaml
   antifilter-community-domain:
     behavior: classical
     type: http
     url: https://antifilter.i8m3x.icu/antifilter-community-domain.yaml
     interval: 86400
-    path: ./ipset/custom/antifilter-community-domain.yaml
+    path: ./rules/custom/antifilter-community-domain.yaml
   antifilter-community-ip:
     behavior: classical
     type: http
     url: https://antifilter.i8m3x.icu/antifilter-community-ip.yaml
     interval: 86400
-    path: ./ipset/custom/antifilter-community-ip.yaml
+    path: ./rules/custom/antifilter-community-ip.yaml
   proxy-domain:
     behavior: classical
     type: http
     url: https://antifilter.i8m3x.icu/proxy-domain.yaml
     interval: 86400
-    path: ./ipset/custom/proxy-domain.yaml
+    path: ./rules/custom/proxy-domain.yaml
+  # proxy-android:
   youtube:
     behavior: classical
     type: http
     url: https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Clash/YouTube/YouTube.yaml
     interval: 86400
-    path: ./ipset/services/youtube.yaml
+    path: ./rules/services/youtube.yaml
   discord-domain:
     behavior: classical
     type: http
     url: https://raw.githubusercontent.com/fildunsky/clash_discord/main/discord-domain.yaml
     interval: 86400
-    path: ./ipset/services/discord.yaml
+    path: ./rules/services/discord.yaml
   discord-ip:
     behavior: classical
     type: http
     url: https://raw.githubusercontent.com/fildunsky/clash_discord/refs/heads/main/discord-ip.yaml
     interval: 86400
-    path: ./ipset/services/discord-ip.yaml
+    path: ./rules/services/discord-ip.yaml
   openai:
     behavior: classical
     type: http
     url: https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Clash/OpenAI/OpenAI.yaml
     interval: 86400
-    path: ./ipset/services/openai.yaml
+    path: ./rules/services/openai.yaml
   telegram:
     behavior: classical
     type: http
     url: https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Clash/Telegram/Telegram.yaml
     interval: 86400
-    path: ./ipset/services/telegram.yaml
+    path: ./rules/services/telegram.yaml
   telegram-ip:
     behavior: ipcidr
     type: http
     format: text
     url: https://core.telegram.org/resources/cidr.txt
     interval: 86400
-    path: ./ipset/services/telegram-ip.txt
+    path: ./rules/services/telegram-ip.txt
-  ru-banned:
+  itdoginfo-domains:
     behavior: domain
     type: http
-    format: text
+    format: mrs
-    url: https://cdn.jsdelivr.net/gh/shvchk/unblock-net/lists/clash/ru-blocked
+    url: https://github.com/itdoginfo/allow-domains/releases/latest/download/russia_inside_domain.mrs
     interval: 86400
-    path: ./ipset/ru-banned.yaml
+    path: ./rules/ru/russia_inside_domain.mrs
+  games-direct:
+    type: http
+    behavior: classical
+    format: yaml
+    url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/other/games-direct.yaml
+    path: ./rules/services/games-direct.yaml
+    interval: 86400
+  ru-app-list:
+    type: http
+    behavior: classical
+    format: yaml
+    url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/other/ru-app-list.yaml
+    path: ./rules/services/ru-app-list.yaml
+    interval: 86400
+  # itdoginfo-inside-russia + no-russia-hosts + antifilter-community + rknasnblock
+  # ru-bundle:
+  #   behavior: domain
+  #   type: http
+  #   format: mrs
+  #   url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/ru-bundle/rule.mrs
+  #   interval: 86400
+  #   path: ./rules/ru-bundle/rule.mrs
+  # rknasnblock:
+  #   behavior: ipcidr
+  #   type: http
+  #   format: mrs
+  #   url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/ru-bundle/rknasnblock.mrs
+  #   interval: 86400
+  #   path: ./rules/ru-bundle/rknasnblock.mrs
 
 rules:
   # === REJECT ===
-  - RULE-SET,oisd-big,AD
+  - RULE-SET,oisd-big,Реклама
-  # - RULE-SET,oisd-small,AD
+  # - RULE-SET,bld-agregator,REJECT
-  # === ANDROID ===
-  - PROCESS-NAME,ir.ilmili.telegraph,ANDROID
-  - PROCESS-NAME,io.uax.myip,ANDROID
   # === PROXY ===
   - RULE-SET,antifilter-ip,PROXY
-  - RULE-SET,openai,PROXY
+  - RULE-SET,antifilter-community-domain,PROXY
-  - RULE-SET,telegram-ip,PROXY,no-resolve
+  - RULE-SET,antifilter-community-ip,PROXY
-  - RULE-SET,telegram,PROXY
+  - RULE-SET,proxy-domain,PROXY
   - PROCESS-NAME,discord.exe,Discord
   - RULE-SET,discord-domain,Discord
   - RULE-SET,discord-ip,Discord
   - RULE-SET,youtube,Youtube
-  - RULE-SET,antifilter-community-domain,PROXY
+  - RULE-SET,openai,PROXY
-  - RULE-SET,antifilter-community-ip,PROXY
+  - RULE-SET,telegram-ip,PROXY,no-resolve
-  - RULE-SET,proxy-domain,PROXY
+  - RULE-SET,telegram,PROXY
-  - RULE-SET,ru-banned,RU-Banned
+  - RULE-SET,itdoginfo-domains,RU-Banned
-  - RULE-SET,itdoginfo-domains,RU-Inside-Domain
+  # === DIRECT ===
-  # === ===
+  - RULE-SET,games-direct,DIRECT
+  - RULE-SET,ru-app-list,DIRECT
   - MATCH,DIRECT