@tifang 他劫持的就是 ip 类似 8.8.8.8 在江苏 ping 只有二十几 ms 然后结果都是污染的

@Yanlongli 还真是，cf 的似乎没被劫持（ ping 1.1.1.1 还是 100 多 ms ），但是 cf 的 doh 还是不能用，dot 可以，是不是 cf 关闭了 doh 服务器。。。

@bli22ard 出问题的环节是本地解析节点地址。。。另外本地其实还是需要一组可信境外 dns 的，用来判断列表外的域名是否需要代理

@383394544 我主贴表达有误 其实就是 nameserver 组和 fallback 组 就是只影响节点本身和列表外的域名

再贴一个美化版的 yaml 配置（其实只是填了 icon 字段），话说为啥流行的模板都用的 emoji 而不是 icon 呢
```yaml
port: 7890
socks-port: 7891
allow-lan: true
mode: Rule
log-level: info
external-controller: :9090
dns:
enable: true
prefer-h3: true
default-nameserver:
- 114.114.114.114
- 119.29.29.29
nameserver:
- 114.114.114.114
- 119.29.29.29
fallback:
- https://dns.google/dns-query
- https://dns.cloudflare.com/dns-query
fake-ip-filter:
[
"*.n.n.srv.nintendo.net",
+.stun.playstation.net,
xbox.*.*.microsoft.com,
"*.msftncsi.com",
"*.msftconnecttest.com",
WORKGROUP,
"*.lan",
stun.*.*,
stun.*.*.*,
+.stun.*.*,
+.stun.*.*.*,
+.stun.*.*.*.*,
+.stun.*.*.*.*.*,
time.windows.com,
time.nist.gov,
time.apple.com,
time.asia.apple.com,
"*.ntp.org.cn",
"*.openwrt.pool.ntp.org",
time1.cloud.tencent.com,
time.ustc.edu.cn,
pool.ntp.org,
ntp.ubuntu.com,
"*.*.xboxlive.com",
speedtest.cros.wr.pvp.net,
]
proxies: ~

proxy-groups:
- name: 节点选择
type: select
proxies:
- 自动选择
- DIRECT
icon: https://raw.githubusercontent.com/Koolson/Qure/refs/heads/master/IconSet/Color/Dinosaur.png

- name: 自动选择
type: url-test
url: http://www.gstatic.com/generate_204
interval: 300
icon: https://raw.githubusercontent.com/Koolson/Qure/refs/heads/master/IconSet/Color/Speedtest.png

- name: 全球直连
type: select
proxies:
- DIRECT
- 节点选择
- 自动选择
icon: https://raw.githubusercontent.com/Koolson/Qure/refs/heads/master/IconSet/Color/Bypass.png

- name: 一堵高墙
type: select
proxies:
- 节点选择
- 自动选择
- 全球直连
icon: https://raw.githubusercontent.com/Koolson/Qure/refs/heads/master/IconSet/Color/Unlock.png

- name: Google
type: select
proxies:
- 节点选择
- 自动选择
- 全球直连
icon: https://raw.githubusercontent.com/Koolson/Qure/refs/heads/master/IconSet/Color/Google_Search.png

- name: Telegram
type: select
proxies:
- 节点选择
- 自动选择
- 全球直连
icon: https://raw.githubusercontent.com/Koolson/Qure/refs/heads/master/IconSet/Color/Telegram.png

- name: iCloud
type: select
proxies:
- 节点选择
- 自动选择
- 全球直连
icon: https://raw.githubusercontent.com/Koolson/Qure/refs/heads/master/IconSet/Color/iCloud.png

- name: Apple
type: select
proxies:
- 节点选择
- 自动选择
- 全球直连
icon: https://raw.githubusercontent.com/Koolson/Qure/refs/heads/master/IconSet/Color/Apple_1.png

- name: 境外
type: select
proxies:
- 节点选择
- 自动选择
- 全球直连
icon: https://raw.githubusercontent.com/Koolson/Qure/refs/heads/master/IconSet/Color/United_States.png

- name: 私有
type: select
proxies:
- 全球直连
- 节点选择
- 自动选择
icon: https://raw.githubusercontent.com/Koolson/Qure/refs/heads/master/IconSet/Color/Clubhouse_2.png

- name: 境内
type: select
proxies:
- 全球直连
- 节点选择
- 自动选择
icon: https://raw.githubusercontent.com/Koolson/Qure/refs/heads/master/IconSet/Color/China.png

- name: 常用软件
type: select
proxies:
- 全球直连
- 节点选择
- 自动选择
icon: https://raw.githubusercontent.com/Koolson/Qure/refs/heads/master/IconSet/Color/App_Store.png

- name: 漏网之鱼
type: select
proxies:
- 节点选择
- 自动选择
- 全球直连
icon: https://raw.githubusercontent.com/Koolson/Qure/refs/heads/master/IconSet/Color/Global.png

rule-providers:
icloud:
type: http
behavior: domain
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/icloud.txt"
path: ./ruleset/icloud.yaml
interval: 86400

apple:
type: http
behavior: domain
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/apple.txt"
path: ./ruleset/apple.yaml
interval: 86400

google:
type: http
behavior: domain
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/google.txt"
path: ./ruleset/google.yaml
interval: 86400

proxy:
type: http
behavior: domain
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt"
path: ./ruleset/proxy.yaml
interval: 86400

direct:
type: http
behavior: domain
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt"
path: ./ruleset/direct.yaml
interval: 86400

private:
type: http
behavior: domain
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt"
path: ./ruleset/private.yaml
interval: 86400

gfw:
type: http
behavior: domain
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/gfw.txt"
path: ./ruleset/gfw.yaml
interval: 86400

tld-not-cn:
type: http
behavior: domain
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/tld-not-cn.txt"
path: ./ruleset/tld-not-cn.yaml
interval: 86400

telegramcidr:
type: http
behavior: ipcidr
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/telegramcidr.txt"
path: ./ruleset/telegramcidr.yaml
interval: 86400

cncidr:
type: http
behavior: ipcidr
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/cncidr.txt"
path: ./ruleset/cncidr.yaml
interval: 86400

lancidr:
type: http
behavior: ipcidr
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/lancidr.txt"
path: ./ruleset/lancidr.yaml
interval: 86400

applications:
type: http
behavior: classical
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/applications.txt"
path: ./ruleset/applications.yaml
interval: 86400

rules:
# 普通规则
- RULE-SET,private,私有
- RULE-SET,applications,常用软件
- RULE-SET,direct,境内
- RULE-SET,gfw,一堵高墙
- RULE-SET,icloud,iCloud
- RULE-SET,apple,Apple
- RULE-SET,google,Google
- RULE-SET,proxy,境外
# IP 地址规则
- RULE-SET,telegramcidr,Telegram
- RULE-SET,lancidr,私有
- RULE-SET,cncidr,境内
- GEOIP,LAN,私有
- GEOIP,CN,境内
# 兜底规则
- MATCH,漏网之鱼
```

@lihaohenqiang 主要是存在普遍的误解误传，dns 的运行流程和“DNS 泄露”都是

建议老哥考虑下甲状腺功能或血糖轻微偏高

nb 5.6 13:40 领到了

谢谢你 陌生人，本来没看 top 榜，现在血压上来了

@JesseYe 这方案其实不如现买一个国行的，等资料同步完再挂闲鱼

parsec 好用

vaultwarden 在 apple 生态特别好用，docker 部署计划任务备份 docker 目录异地同步就行，万一 g 了还能在设备上离线备份

我是常年开着 onedrive 那几个文件夹同步的，但是有个特别蛋疼的是一定要把微信 qq 那些 im 软件的存储路径改了，不然聊天记录存 onedrive“文档”里同步很酸爽

apple 生态用 bitwarden 巨爽

@Chentao1006 感谢分享 这个有点意思

因为同样的事情和我家长辈直接在饭局上吵过，现在不是关系近的亲戚 饭局不敢轻易叫我，怕掀桌