Sync all projects

2026-07-16 11:20:44 +00:00
parent 5122d35456
commit a1dd13bb43
27 changed files with 6436 additions and 6319 deletions
@@ -11,7 +11,7 @@ tags: [Clash, mihomo, 进阶, DNS, DNS 分流]
 1. 使用 [ShellCrash](https://github.com/juewuy/ShellCrash) 搭配 [AdGuard Home](https://github.com/AdguardTeam/AdGuardHome) 并将 AdGuard Home 作为上游时不要使用该方法
 2. 本教程以 ShellCrash 为例，其它客户端亦可参考
 3. 本教程搭载 [mihomo 内核 Meta 版](https://github.com/MetaCubeX/mihomo/tree/Meta)（导入内核方法可参考《[ShellCrash 和 AdGuard Home 快速安装教程/导入 mihomo 内核 或 sing-box 内核](https://proxy-tutorials.dustinwin.cc.cd/posts/pin-toolsinstall/#%E4%BA%8C-%E5%AF%BC%E5%85%A5-mihomo-%E5%86%85%E6%A0%B8-%E6%88%96-sing-box-%E5%86%85%E6%A0%B8)》）
-4. DNS 分流简单来说就是**指定国内域名走国内 DNS 解析，国外域名走 `fake-ip`**。未知域名走 `fake-ip`（在匹配 `GEOIP:cn` 规则时会由国内 DNS 解析，解析出 IP 在国内则走 `国内 IP` 规则，否则走 `漏网之鱼` 规则）
+4. DNS 分流简单来说就是**指定国内域名走国内 DNS 解析，国外域名走 `fake-ip`**。未知域名走 `real-ip`（在匹配 `GEOIP:cn` 规则时会由国内 DNS 解析，解析出 IP 在国内则走 `国内 IP` 规则，否则走 `漏网之鱼` 规则）
 5. 部分用户觉得未知域名处理方式会导致 DNS 泄露，可参考《[搭载 mihomo 内核配置 DNS 不泄露教程-geodata 方案](https://proxy-tutorials.dustinwin.cc.cd/posts/dnsnoleaks-mihomo-geodata)》

 ## 一、 导入路由规则文件
@@ -23,27 +23,6 @@ geosite.dat 文件须包含 `fakeip-filter`、`cn` 和 `proxy`，推荐导入我

 2. 连接 SSH 后执行命令 `vi $CRASHDIR/yamls/user.yaml`，按一下 Ins 键（Insert 键），粘贴如下内容：

-```yaml
-hosts:
-  dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
-  doh.pub: [1.12.12.12, 120.53.53.53]
-
-dns:
-  enable: true
-  prefer-h3: true
-  ipv6: true
-  listen: 0.0.0.0:1053
-  enhanced-mode: fake-ip
-  fake-ip-range: 198.18.0.0/15
-  fake-ip-range6: fc00::/16
-  fake-ip-filter: [geosite:fakeip-filter,cn]
-  nameserver:
-    - quic://dns.alidns.com:853
-    - https://dns.pub/dns-query
-```
-
-或者
-
 ```yaml
 hosts:
  dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
@@ -62,7 +41,7 @@ dns:
    - GEOSITE,fakeip-filter,real-ip
    - GEOSITE,proxy,fake-ip
    - GEOSITE,cn,real-ip
-    - MATCH,fake-ip
+    - MATCH,real-ip
  nameserver:
    - quic://dns.alidns.com:853
    - https://dns.pub/dns-query
@@ -11,7 +11,7 @@ tags: [Clash, mihomo, 进阶, DNS, DNS 分流]
 1. 使用 [ShellCrash](https://github.com/juewuy/ShellCrash) 搭配 [AdGuard Home](https://github.com/AdguardTeam/AdGuardHome) 并将 AdGuard Home 作为上游时不要使用该方法
 2. 本教程以 ShellCrash 为例，其它客户端亦可参考
 3. 本教程搭载 [mihomo 内核 Meta 版](https://github.com/MetaCubeX/mihomo/tree/Meta)（导入内核方法可参考《[ShellCrash 和 AdGuard Home 快速安装教程/导入 mihomo 内核 或 sing-box 内核](https://proxy-tutorials.dustinwin.cc.cd/posts/pin-toolsinstall/#%E4%BA%8C-%E5%AF%BC%E5%85%A5-mihomo-%E5%86%85%E6%A0%B8-%E6%88%96-sing-box-%E5%86%85%E6%A0%B8)》）
-4. DNS 分流简单来说就是**指定国内域名走国内 DNS 解析，国外域名走 `fake-ip`**。未知域名走 `fake-ip`（在匹配 `RULE-SET:cnip` 规则时会由国内 DNS 解析，解析出 IP 在国内则走 `国内 IP` 规则，否则走 `漏网之鱼` 规则）
+4. DNS 分流简单来说就是**指定国内域名走国内 DNS 解析，国外域名走 `fake-ip`**。未知域名走 `real-ip`（在匹配 `RULE-SET:cnip` 规则时会由国内 DNS 解析，解析出 IP 在国内则走 `国内 IP` 规则，否则走 `漏网之鱼` 规则）
 5. 部分用户觉得未知域名处理方式会导致 DNS 泄露，可参考《[搭载 mihomo 内核配置 DNS 不泄露教程-ruleset 方案](https://proxy-tutorials.dustinwin.cc.cd/posts/dnsnoleaks-mihomo-ruleset)》

 ## 一、 导入规则集合文件
@@ -50,27 +50,6 @@ rule-providers:

 2. 连接 SSH 后执行命令 `vi $CRASHDIR/yamls/user.yaml`，按一下 Ins 键（Insert 键），粘贴如下内容：

-```yaml
-hosts:
-  dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
-  doh.pub: [1.12.12.12, 120.53.53.53]
-
-dns:
-  enable: true
-  prefer-h3: true
-  ipv6: true
-  listen: 0.0.0.0:1053
-  enhanced-mode: fake-ip
-  fake-ip-range: 198.18.0.0/15
-  fake-ip-range6: fc00::/16
-  fake-ip-filter: [rule-set:fakeip-filter,cn]
-  nameserver:
-    - quic://dns.alidns.com:853
-    - https://dns.pub/dns-query
-```
-
-或者
-
 ```yaml
 hosts:
  dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
@@ -89,7 +68,7 @@ dns:
    - RULE-SET,fakeip-filter,real-ip
    - RULE-SET,proxy,fake-ip
    - RULE-SET,cn,real-ip
-    - MATCH,fake-ip
+    - MATCH,real-ip
  nameserver:
    - quic://dns.alidns.com:853
    - https://dns.pub/dns-query
@@ -45,7 +45,7 @@ dns:
    - GEOSITE,fakeip-filter,real-ip
    - GEOSITE,proxy,fake-ip
    - GEOSITE,cn,real-ip
-    - MATCH,fake-ip
+    - MATCH,real-ip
  respect-rules: true
  nameserver:
    # 推荐将 `ecs` 设置为当前宽带运营商分配的默认 DNS 的 IP 段
@@ -72,7 +72,7 @@ dns:
    - RULE-SET,fakeip-filter,real-ip
    - RULE-SET,proxy,fake-ip
    - RULE-SET,cn,real-ip
-    - MATCH,fake-ip
+    - MATCH,real-ip
  respect-rules: true
  nameserver:
    # 推荐将 `ecs` 设置为当前宽带运营商分配的默认 DNS 的 IP 段
@@ -77,7 +77,6 @@ dns:
  fake-ip-filter-mode: rule
  fake-ip-filter:
    - RULE-SET,private,real-ip
-    - RULE-SET,trackerslist,real-ip
    - RULE-SET,microsoft-cn,real-ip
    - RULE-SET,apple-cn,real-ip
    - RULE-SET,google-cn,real-ip
@@ -86,7 +85,7 @@ dns:
    - RULE-SET,ai,fake-ip
    - RULE-SET,proxy,fake-ip
    - RULE-SET,cn,real-ip
-    - MATCH,fake-ip
+    - MATCH,real-ip
  nameserver:
    - quic://dns.alidns.com:853
    - https://doh.pub/dns-query
@@ -138,14 +137,6 @@ proxy-groups:
  - {name: 免费节点, type: url-test, tolerance: 100, use: [🆓 免费订阅], icon: "https://github.com/DustinWin/ruleset_geodata/releases/download/icons/free.png"}

 rule-providers:
-  trackerslist:
-    type: http
-    behavior: domain
-    format: mrs
-    path: ./ruleset/trackerslist.mrs
-    url: "https://github.com/DustinWin/ruleset_geodata/releases/download/mihomo-ruleset/trackerslist.mrs"
-    interval: 86400
-
  ads:
    type: http
    behavior: domain
@@ -311,7 +302,6 @@ dns:
  fake-ip-filter-mode: rule
  fake-ip-filter:
    - RULE-SET,private,real-ip
-    - RULE-SET,trackerslist,real-ip
    - RULE-SET,microsoft-cn,real-ip
    - RULE-SET,apple-cn,real-ip
    - RULE-SET,google-cn,real-ip
@@ -320,7 +310,7 @@ dns:
    - RULE-SET,ai,fake-ip
    - RULE-SET,proxy,fake-ip
    - RULE-SET,cn,real-ip
-    - MATCH,fake-ip
+    - MATCH,real-ip
  respect-rules: true
  nameserver:
    # 推荐将 `ecs` 设置为当前宽带运营商分配的默认 DNS 的 IP 段
@@ -336,7 +326,7 @@ dns:
  nameserver-policy:
    'rule-set:private': [system]
    'rule-set:ads': [rcode://success]
-    'rule-set:trackerslist,microsoft-cn,apple-cn,google-cn,games-cn,cn': [quic://dns.alidns.com:853, https://doh.pub/dns-query]
+    'rule-set:microsoft-cn,apple-cn,google-cn,games-cn,cn': [quic://dns.alidns.com:853, https://doh.pub/dns-query]
 ```

 ---
@@ -73,10 +73,11 @@ tags: [sing-box, sing-boxr, Android, ruleset, rule_set, 分享]
      { "clash_mode": [ "Global" ], "server": "dns_proxy" },
      { "rule_set": [ "private" ], "server": "dns_local" },
      { "rule_set": [ "ads" ], "action": "predefined" },
-      { "rule_set": [ "trackerslist", "microsoft-cn", "apple-cn", "google-cn", "games-cn" ], "server": "dns_direct" },
+      { "rule_set": [ "microsoft-cn", "apple-cn", "google-cn", "games-cn" ], "server": "dns_direct" },
      { "rule_set": [ "games", "ai", "proxy" ], "query_type": [ "A", "AAAA" ], "server": "dns_fakeip" },
      { "rule_set": [ "cn" ], "server": "dns_direct" },
-      { "query_type": [ "A", "AAAA" ], "server": "dns_fakeip" }
+      { "action": "evaluate", "server": "dns_direct" },
+      { "match_response": true, "rule_set": [ "cnip" ], "action": "respond" }
    ],
    "final": "dns_direct",
    "strategy": "prefer_ipv4",
@@ -146,18 +147,10 @@ tags: [sing-box, sing-boxr, Android, ruleset, rule_set, 分享]
      { "rule_set": [ "proxy" ], "outbound": "国外域名" },
      { "rule_set": [ "cn" ], "outbound": "国内域名" },
      { "ip_is_private": true, "outbound": "私有网络" },
-      { "rule_set": [ "telegramip" ], "outbound": "电报消息" },
-      { "action": "resolve", "match_only": true },
-      { "rule_set": [ "cnip" ], "outbound": "国内 IP" }
+      { "rule_set": [ "cnip" ], "outbound": "国内 IP" },
+      { "rule_set": [ "telegramip" ], "outbound": "电报消息" }
    ],
    "rule_set": [
-      {
-        "tag": "trackerslist",
-        "type": "remote",
-        "format": "binary",
-        "path": "./ruleset/trackerslist.srs",
-        "url": "https://github.com/DustinWin/ruleset_geodata/releases/download/sing-box-ruleset/trackerslist.srs"
-      },
      {
        "tag": "ads",
        "type": "remote",
@@ -242,19 +235,19 @@ tags: [sing-box, sing-boxr, Android, ruleset, rule_set, 分享]
        "path": "./ruleset/cn.srs",
        "url": "https://github.com/DustinWin/ruleset_geodata/releases/download/sing-box-ruleset/cn.srs"
      },
-      {
-        "tag": "telegramip",
-        "type": "remote",
-        "format": "binary",
-        "path": "./ruleset/telegramip.srs",
-        "url": "https://github.com/DustinWin/ruleset_geodata/releases/download/sing-box-ruleset/telegramip.srs"
-      },
      {
        "tag": "cnip",
        "type": "remote",
        "format": "binary",
        "path": "./ruleset/cnip.srs",
        "url": "https://github.com/DustinWin/ruleset_geodata/releases/download/sing-box-ruleset/cnip.srs"
+      },
+      {
+        "tag": "telegramip",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/telegramip.srs",
+        "url": "https://github.com/DustinWin/ruleset_geodata/releases/download/sing-box-ruleset/telegramip.srs"
      }
    ],
    "final": "漏网之鱼",
@@ -323,17 +316,18 @@ tags: [sing-box, sing-boxr, Android, ruleset, rule_set, 分享]
      { "clash_mode": [ "Global" ], "server": "dns_proxy" },
      { "rule_set": [ "private" ], "server": "dns_local" },
      { "rule_set": [ "ads" ], "action": "predefined" },
-      { "rule_set": [ "trackerslist", "microsoft-cn", "apple-cn", "google-cn", "games-cn" ], "server": "dns_direct" },
+      { "rule_set": [ "microsoft-cn", "apple-cn", "google-cn", "games-cn" ], "server": "dns_direct" },
      { "rule_set": [ "games", "ai", "proxy" ], "query_type": [ "A", "AAAA" ], "server": "dns_fakeip" },
      { "rule_set": [ "cn" ], "server": "dns_direct" },
-      { "query_type": [ "A", "AAAA" ], "server": "dns_fakeip" }
+      // 推荐将 `client_subnet` 设置为当前宽带运营商分配的默认 DNS 的 IP 段
+      { "action": "evaluate", "server": "dns_proxy", "client_subnet": "211.137.58.0/24" },
+      { "match_response": true, "rule_set": [ "cnip" ], "action": "respond" }
    ],
    "final": "dns_proxy",
    "strategy": "prefer_ipv4",
    "optimistic": true,
    "reverse_mapping": true,
-    // 推荐将 `client_subnet` 设置为当前宽带运营商分配的默认 DNS 的 IP 段
-    "client_subnet": "211.137.58.0/24"
+    "cache_client_subnet": true
  }
 }
 ```
@@ -181,7 +181,6 @@ dns:
  fake-ip-filter-mode: rule
  fake-ip-filter:
    - GEOSITE,private,real-ip
-    - GEOSITE,trackerslist,real-ip
    - GEOSITE,microsoft-cn,real-ip
    - GEOSITE,apple-cn,real-ip
    - GEOSITE,google-cn,real-ip
@@ -190,7 +189,7 @@ dns:
    - GEOSITE,ai,fake-ip
    - GEOSITE,proxy,fake-ip
    - GEOSITE,cn,real-ip
-    - MATCH,fake-ip
+    - MATCH,real-ip
  nameserver:
    - quic://dns.alidns.com:853
    - https://dns.pub/dns-query
@@ -227,7 +226,6 @@ dns:
  fake-ip-filter-mode: rule
  fake-ip-filter:
    - GEOSITE,private,real-ip
-    - GEOSITE,trackerslist,real-ip
    - GEOSITE,microsoft-cn,real-ip
    - GEOSITE,apple-cn,real-ip
    - GEOSITE,google-cn,real-ip
@@ -236,7 +234,7 @@ dns:
    - GEOSITE,ai,fake-ip
    - GEOSITE,proxy,fake-ip
    - GEOSITE,cn,real-ip
-    - MATCH,fake-ip
+    - MATCH,real-ip
  respect-rules: true
  nameserver:
    # 推荐将 `ecs` 设置为当前宽带运营商分配的默认 DNS 的 IP 段
@@ -252,7 +250,7 @@ dns:
  nameserver-policy:
    'geosite:private': [system]
    'geosite:ads': [rcode://success]
-    'geosite:trackerslist,microsoft-cn,apple-cn,google-cn,games-cn,cn': [quic://dns.alidns.com:853, https://doh.pub/dns-query]
+    'geosite:microsoft-cn,apple-cn,google-cn,games-cn,cn': [quic://dns.alidns.com:853, https://doh.pub/dns-query]
 ```

 ## 五、 添加定时任务
@@ -82,14 +82,6 @@ proxy-groups:
  - {name: 免费节点, type: url-test, tolerance: 100, use: [🆓 免费订阅], icon: "https://github.com/DustinWin/ruleset_geodata/releases/download/icons/free.png"}

 rule-providers:
-  trackerslist:
-    type: http
-    behavior: domain
-    format: mrs
-    path: ./ruleset/trackerslist.mrs
-    url: "https://github.com/DustinWin/ruleset_geodata/releases/download/mihomo-ruleset/trackerslist.mrs"
-    interval: 86400
-
  ads:
    type: http
    behavior: domain
@@ -288,7 +280,6 @@ dns:
  fake-ip-filter-mode: rule
  fake-ip-filter:
    - RULE-SET,private,real-ip
-    - RULE-SET,trackerslist,real-ip
    - RULE-SET,microsoft-cn,real-ip
    - RULE-SET,apple-cn,real-ip
    - RULE-SET,google-cn,real-ip
@@ -297,7 +288,7 @@ dns:
    - RULE-SET,ai,fake-ip
    - RULE-SET,proxy,fake-ip
    - RULE-SET,cn,real-ip
-    - MATCH,fake-ip
+    - MATCH,real-ip
  nameserver:
    - quic://dns.alidns.com:853
    - https://dns.pub/dns-query
@@ -334,7 +325,6 @@ dns:
  fake-ip-filter-mode: rule
  fake-ip-filter:
    - RULE-SET,private,real-ip
-    - RULE-SET,trackerslist,real-ip
    - RULE-SET,microsoft-cn,real-ip
    - RULE-SET,apple-cn,real-ip
    - RULE-SET,google-cn,real-ip
@@ -343,7 +333,7 @@ dns:
    - RULE-SET,ai,fake-ip
    - RULE-SET,proxy,fake-ip
    - RULE-SET,cn,real-ip
-    - MATCH,fake-ip
+    - MATCH,real-ip
  respect-rules: true
  nameserver:
    # 推荐将 `ecs` 设置为当前宽带运营商分配的默认 DNS 的 IP 段
@@ -359,7 +349,7 @@ dns:
  nameserver-policy:
    'rule-set:private': [system]
    'rule-set:ads': [rcode://success]
-    'rule-set:trackerslist,microsoft-cn,apple-cn,google-cn,games-cn,cn': [quic://dns.alidns.com:853, https://doh.pub/dns-query]
+    'rule-set:microsoft-cn,apple-cn,google-cn,games-cn,cn': [quic://dns.alidns.com:853, https://doh.pub/dns-query]
 ```

 ## 四、 添加定时任务
@@ -93,14 +93,6 @@ rule-providers:
    url: "https://github.com/DustinWin/ruleset_geodata/releases/download/mihomo-ruleset/fakeip-filter-lite.mrs"
    interval: 86400

-  trackerslist:
-    type: http
-    behavior: domain
-    format: mrs
-    path: ./ruleset/trackerslist.mrs
-    url: "https://github.com/DustinWin/ruleset_geodata/releases/download/mihomo-ruleset/trackerslist.mrs"
-    interval: 86400
-
  private:
    type: http
    behavior: domain
@@ -295,7 +287,6 @@ dns:
  fake-ip-filter:
    - RULE-SET,fakeip-filter,real-ip
    - RULE-SET,private,real-ip
-    - RULE-SET,trackerslist,real-ip
    - RULE-SET,microsoft-cn,real-ip
    - RULE-SET,apple-cn,real-ip
    - RULE-SET,google-cn,real-ip
@@ -304,7 +295,7 @@ dns:
    - RULE-SET,ai,fake-ip
    - RULE-SET,proxy,fake-ip
    - RULE-SET,cn,real-ip
-    - MATCH,fake-ip
+    - MATCH,real-ip
  nameserver:
    - quic://dns.alidns.com:853
    - https://dns.pub/dns-query
@@ -341,7 +332,6 @@ dns:
  fake-ip-filter:
    - RULE-SET,fakeip-filter,real-ip
    - RULE-SET,private,real-ip
-    - RULE-SET,trackerslist,real-ip
    - RULE-SET,microsoft-cn,real-ip
    - RULE-SET,apple-cn,real-ip
    - RULE-SET,google-cn,real-ip
@@ -350,7 +340,7 @@ dns:
    - RULE-SET,ai,fake-ip
    - RULE-SET,proxy,fake-ip
    - RULE-SET,cn,real-ip
-    - MATCH,fake-ip
+    - MATCH,real-ip
  respect-rules: true
  nameserver:
    # 推荐将 `ecs` 设置为当前宽带运营商分配的默认 DNS 的 IP 段
@@ -365,7 +355,7 @@ dns:
  direct-nameserver-follow-policy: true
  nameserver-policy:
    'rule-set:private': [system]
-    'rule-set:fakeip-filter,trackerslist,microsoft-cn,apple-cn,google-cn,games-cn,cn': [quic://dns.alidns.com:853, https://doh.pub/dns-query]
+    'rule-set:fakeip-filter,microsoft-cn,apple-cn,google-cn,games-cn,cn': [quic://dns.alidns.com:853, https://doh.pub/dns-query]
 ```

 ## 四、 添加定时任务
@@ -384,7 +374,7 @@ dns:
 3. 进入 2) DNS 设置 → 9) 修改 DNS 服务器，设置如下：  
 <img src="/assets/img/dns/dns-null.png" alt="ShellCrash 设置 2" width="60%" />

-3. 进入 2) 功能设置 → 6) 自定义端口及密钥 → 5) 修改面板访问端口，修改为 `9090`
+4. 进入 2) 功能设置 → 6) 自定义端口及密钥 → 5) 修改面板访问端口，修改为 `9090`

 ## 六、 安装 AdGuard Home
 连接 SSH 后执行如下命令：
@@ -393,16 +383,43 @@ dns:
 mkdir -p /data/AdGuardHome
 curl -sS -o /data/AdGuardHome/AdGuardHome -L https://ghfast.top/https://github.com/DustinWin/proxy-tools/releases/download/AdGuardHome/AdGuardHome_beta_linux_arm64
 chmod +x /data/AdGuardHome/AdGuardHome
-/data/AdGuardHome/AdGuardHome -s install
-/data/AdGuardHome/AdGuardHome -s start
+cat <<'EOF' > /data/AdGuardHome/AdGuardHome.sh
+#!/bin/sh /etc/rc.common
+
+START=95
+STOP=01
+USE_PROCD=1
+
+WORK_DIR="/data/AdGuardHome"
+CONFIG_FILE="$WORK_DIR/AdGuardHome.yaml"
+
+start_service() {
+    echo "AdGuard Home 正在启动..."
+    procd_open_instance
+    procd_set_param command "$WORK_DIR/AdGuardHome" -s run
+    procd_append_param command -c "$CONFIG_FILE"
+    procd_append_param command -w "$WORK_DIR"
+    procd_set_param pidfile /var/run/AdGuardHome.pid
+    procd_close_instance
+    echo "AdGuard Home 启动成功！"
+}
+
+stop_service() {
+    echo "AdGuard Home 正在停止..."
+    sleep 3
+    echo "AdGuard Home 停止成功！"
+}
+EOF
+cp -f /data/AdGuardHome/AdGuardHome.sh /etc/init.d/AdGuardHome
+chmod +x /etc/init.d/AdGuardHome && /etc/init.d/AdGuardHome start
 iptables -t nat -A PREROUTING -p tcp --dport 53 -j REDIRECT --to-ports 5353
 iptables -t nat -A PREROUTING -p udp --dport 53 -j REDIRECT --to-ports 5353
 ip6tables -t nat -A PREROUTING -p tcp --dport 53 -j REDIRECT --to-ports 5353
 ip6tables -t nat -A PREROUTING -p udp --dport 53 -j REDIRECT --to-ports 5353
 cat <<EOF >> /data/auto_ssh/auto_ssh.sh
 sleep 10s
-/data/AdGuardHome/AdGuardHome -s install
-/data/AdGuardHome/AdGuardHome -s start
+cp -f /data/AdGuardHome/AdGuardHome.sh /etc/init.d/AdGuardHome
+chmod +x /etc/init.d/AdGuardHome && /etc/init.d/AdGuardHome start
 iptables -t nat -A PREROUTING -p tcp --dport 53 -j REDIRECT --to-ports 5353
 iptables -t nat -A PREROUTING -p udp --dport 53 -j REDIRECT --to-ports 5353
 ip6tables -t nat -A PREROUTING -p tcp --dport 53 -j REDIRECT --to-ports 5353
@@ -73,5 +73,5 @@ curl -sS -o $CRASHDIR/Country.mmdb -L https://cdn.jsdelivr.net/gh/DustinWin/rule
 1. 若使用基于 [Chromium 项目](https://www.chromium.org/Home/)开发的浏览器无法访问在线 Dashboard 面板时，以 [Chrome 浏览器](https://www.google.com/chrome/)为例，需要设置该网址域名“允许显示不安全内容”，进入设置 → 隐私和安全 → 网站设置 → 更多内容设置 → 不安全内容（或者直接在地址栏打开 `chrome://settings/content/insecureContent` 进行设置），在“允许显示不安全内容”内添加网址域名 `board.zash.run.place`  
 <img src="/assets/img/tools/chrome-setting-dashboard.png" alt="在线 Dashboard 面板 1" width="60%" />

-1. 打开 [zashboard](https://github.com/Zephyruso/zashboard) 在线面板地址 <http://board.zash.run.place> 后，直接在“Clash API”标签里将“主机”和“端口”分别修改为 `192.168.31.1` 和 `9999`，点击“提交”即可访问 Dashboard 面板  
+2. 打开 [zashboard](https://github.com/Zephyruso/zashboard) 在线面板地址 <http://board.zash.run.place> 后，直接在“Clash API”标签里将“主机”和“端口”分别修改为 `192.168.31.1` 和 `9999`，点击“提交”即可访问 Dashboard 面板  
 <img src="/assets/img/tools/192-9999-dashboard.png" alt="在线 Dashboard 面板 2" width="60%" />
@@ -64,5 +64,5 @@ curl -sS -o /tmp/CrashCore.upx -L https://ghfast.top/https://github.com/DustinWi
 1. 若使用基于 [Chromium 项目](https://www.chromium.org/Home/)开发的浏览器无法访问在线 Dashboard 面板时，以 [Chrome 浏览器](https://www.google.com/chrome/)为例，需要设置该网址域名“允许显示不安全内容”，进入设置 → 隐私和安全 → 网站设置 → 更多内容设置 → 不安全内容（或者直接在地址栏打开 `chrome://settings/content/insecureContent` 进行设置），在“允许显示不安全内容”内添加网址域名 `board.zash.run.place`  
 <img src="/assets/img/tools/chrome-setting-dashboard.png" alt="在线 Dashboard 面板 1" width="60%" />

-1. 打开 [zashboard](https://github.com/Zephyruso/zashboard) 在线面板地址 <http://board.zash.run.place> 后，直接在“Clash API”标签里将“主机”和“端口”分别修改为 `192.168.31.1` 和 `9999`，点击“提交”即可访问 Dashboard 面板  
+2. 打开 [zashboard](https://github.com/Zephyruso/zashboard) 在线面板地址 <http://board.zash.run.place> 后，直接在“Clash API”标签里将“主机”和“端口”分别修改为 `192.168.31.1` 和 `9999`，点击“提交”即可访问 Dashboard 面板  
 <img src="/assets/img/tools/192-9999-dashboard.png" alt="在线 Dashboard 面板 2" width="60%" />
@@ -11,7 +11,7 @@ tags: [sing-box, sing-boxr, ShellCrash, ruleset, rule_set, 进阶, DNS, DNS 分
 1. [ShellCrash](https://github.com/juewuy/ShellCrash) 搭配 [AdGuard Home](https://github.com/AdguardTeam/AdGuardHome) 并将 AdGuard Home 作为上游时不要使用该方法
 2. 本教程以 ShellCrash 为例，其它客户端亦可参考
 3. 本教程搭载 [sing-box 内核 reF1nd-Testing 版](https://github.com/reF1nd/sing-box/tree/reF1nd-testing)（导入内核方法可参考《[ShellCrash 和 AdGuard Home 快速安装教程/导入 mihomo 内核 或 sing-box 内核](https://proxy-tutorials.dustinwin.cc.cd/posts/pin-toolsinstall/#%E4%BA%8C-%E5%AF%BC%E5%85%A5-mihomo-%E5%86%85%E6%A0%B8-%E6%88%96-sing-box-%E5%86%85%E6%A0%B8)》）
-4. DNS 分流简单来说就是**指定国内域名走国内 DNS 解析，国外域名走 `fakeip`**。未知域名在匹配 `rule_set:cnip` 规则时会先由国内 DNS 解析，解析出 IP 在国内则直接返回解析结果且走 `国内 IP` 规则，否则走 `fakeip` 且走 `漏网之鱼` 规则
+4. DNS 分流简单来说就是**指定国内域名走国内 DNS 解析，国外域名走 `fakeip`**。未知域名走 `real-ip`（在匹配 `rule_set:cnip` 规则时会先由国内 DNS 解析，解析出 IP 在国内则直接返回解析结果且走 `国内 IP` 规则，否则走 `漏网之鱼` 规则）
 5. 部分用户觉得未知域名处理方式会导致 DNS 泄露，可参考《[搭载 sing-boxr 内核配置 DNS 不泄露教程-ruleset 方案](https://proxy-tutorials.dustinwin.cc.cd/posts/dnsnoleaks-singboxr-ruleset)》

 ## 一、 导入规则集合文件
@@ -58,11 +58,7 @@ tags: [sing-box, sing-boxr, ShellCrash, ruleset, rule_set, 进阶, DNS, DNS 分
 1. 进入 ShellCrash 配置脚本 → 2) 功能设置 → 2) DNS 设置 → 9) 修改 DNS 服务器，将“DIRECT-DNS”、“PROXY-DNS”和“DEFAULT-DNS”都设置为 `null`  
 <img src="/assets/img/dns/dns-null.png" alt="ShellCrash 设置" width="60%" />

-2. 连接 SSH 后执行如下命令：
-```shell
-sed -i 's/"ip_accept_any": true,/"preferred_by": [ "hosts" ],/' "$CRASHDIR/starts/singbox_modify.sh"
-```
-3. 连接 SSH 后执行命令 `vi $CRASHDIR/jsons/dns.json`，按一下 Ins 键（Insert 键），粘贴如下内容：
+2. 连接 SSH 后执行命令 `vi $CRASHDIR/jsons/dns.json`，按一下 Ins 键（Insert 键），粘贴如下内容：
 - 注：推荐将 `client_subnet` 设置为当前宽带运营商分配的默认 DNS（可进入光猫或路由器拨号页面查看，或者前往[公共 DNS 大全](https://toolb.cn/publicdns)查询）的 IP 段，如默认 DNS 为 `211.137.58.20`，可设置为 `211.137.58.0/24`

 ```json
@@ -95,17 +91,13 @@ sed -i 's/"ip_accept_any": true,/"preferred_by": [ "hosts" ],/' "$CRASHDIR/start
      { "rule_set": [ "proxy" ], "query_type": [ "A", "AAAA" ], "server": "dns_fakeip" },
      { "rule_set": [ "cn" ], "server": "dns_direct" },
      { "action": "evaluate", "server": "dns_direct" },
-      { "match_response": true, "rule_set": [ "cnip" ], "action": "respond" },
-      { "match_response": true, "ip_accept_any": true, "invert": true, "action": "respond" },
-      { "query_type": [ "A", "AAAA" ], "server": "dns_fakeip" }
+      { "match_response": true, "rule_set": [ "cnip" ], "action": "respond" }
    ],
    "final": "dns_proxy",
    "strategy": "prefer_ipv4",
    "optimistic": true,
    "reverse_mapping": true,
-    "cache_client_subnet": true,
-    // 推荐将 `client_subnet` 设置为当前宽带运营商分配的默认 DNS 的 IP 段
-    "client_subnet": "211.137.58.0/24"
+    "cache_client_subnet": true
  }
 }
 ```
@@ -8,7 +8,7 @@ tags: [sing-box, sing-boxr, ShellCrash, ruleset, rule_set, 进阶, DNS, DNS 泄

 > 说明
 {: .prompt-tip }
-1. 此方案彻底防止了 DNS 泄露（未知域名在匹配 `rule_set:cnip` 规则时会先由国外 DNS 解析且配置 `client_subnet`，解析出 IP 在国内则直接返回解析结果且走 `国内 IP` 规则，否则走 `fakeip` 且走 `漏网之鱼` 规则），兼容性高，可放心使用
+1. 此方案彻底防止了 DNS 泄露（未知域名在匹配 `rule_set:cnip` 规则时会先由国外 DNS 解析且配置 `client_subnet`，解析出 IP 在国内则直接返回解析结果且走 `国内 IP` 规则，否则走 `漏网之鱼` 规则），兼容性高，可放心使用
 2. 本教程以 [ShellCrash](https://github.com/juewuy/ShellCrash) 为例，其它客户端亦可参考
 3. 本教程搭载 [sing-box 内核 reF1nd-Testing 版](https://github.com/reF1nd/sing-box/tree/reF1nd-testing)（导入内核方法可参考《[ShellCrash 和 AdGuard Home 快速安装教程/导入 mihomo 内核 或 sing-box 内核](https://proxy-tutorials.dustinwin.cc.cd/posts/pin-toolsinstall/#%E4%BA%8C-%E5%AF%BC%E5%85%A5-mihomo-%E5%86%85%E6%A0%B8-%E6%88%96-sing-box-%E5%86%85%E6%A0%B8)》）
 4. 可进入 <https://ipleak.net> 测试 DNS 是否泄露，“DNS Addresses” 栏目下没有中国国旗（因 `ipleak.net` 属未知域名，默认走 `漏网之鱼` 规则），即代表 DNS 没有发生泄露
@@ -54,14 +54,9 @@ tags: [sing-box, sing-boxr, ShellCrash, ruleset, rule_set, 进阶, DNS, DNS 泄
 ```

 ## 二、 ShellCrash 防泄漏配置
-1. 进入 ShellCrash 配置脚本 → 2) 功能设置 → 2) DNS 设置 → 9) 修改 DNS 服务器，将“DIRECT-DNS”、“PROXY-DNS”和“DEFAULT-DNS”都设置为 `null`  
+进入 ShellCrash 配置脚本 → 2) 功能设置 → 2) DNS 设置 → 9) 修改 DNS 服务器，将“DIRECT-DNS”、“PROXY-DNS”和“DEFAULT-DNS”都设置为 `null`  
 <img src="/assets/img/dns/dns-null.png" alt="ShellCrash 设置" width="60%" />

-2. 连接 SSH 后执行如下命令：
-```shell
-sed -i 's/"ip_accept_any": true,/"preferred_by": [ "hosts" ],/' "$CRASHDIR/starts/singbox_modify.sh"
-```
-
 ## 三、 DNS 防泄漏配置
 ### 1. DNS 模式为 `mix`（推荐）
 - ① 连接 SSH 后执行命令 `vi $CRASHDIR/jsons/dns.json`，按一下 Ins 键（Insert 键），修改为如下内容：
@@ -100,9 +95,7 @@ sed -i 's/"ip_accept_any": true,/"preferred_by": [ "hosts" ],/' "$CRASHDIR/start
        { "rule_set": [ "cn" ], "server": "dns_direct" },
        // 推荐将 `client_subnet` 设置为当前宽带运营商分配的默认 DNS 的 IP 段
        { "action": "evaluate", "server": "dns_proxy", "client_subnet": "211.137.58.0/24" },
-        { "match_response": true, "rule_set": [ "cnip" ], "action": "respond" },
-        { "match_response": true, "ip_accept_any": true, "invert": true, "action": "respond" },
-        { "query_type": [ "A", "AAAA" ], "server": "dns_fakeip" }
+        { "match_response": true, "rule_set": [ "cnip" ], "action": "respond" }
      ],
      "final": "dns_proxy",
      "strategy": "prefer_ipv4",
@@ -189,8 +182,7 @@ sed -i 's/"ip_accept_any": true,/"preferred_by": [ "hosts" ],/' "$CRASHDIR/start
        { "tag": "dns_google", "type": "https", "server": "dns.google", "domain_resolver": "hosts", "detour": "GLOBAL" },
        { "tag": "dns_quad9", "type": "quic", "server": "dns11.quad9.net", "domain_resolver": "hosts", "detour": "GLOBAL" },
        { "tag": "dns_direct", "type": "group", "servers": [ "dns_alidns", "dns_dnspod" ] },
-        { "tag": "dns_proxy", "type": "group", "servers": [ "dns_google", "dns_quad9" ] },
-        { "tag": "dns_fakeip", "type": "fakeip", "inet4_range": "198.18.0.0/15", "inet6_range": "fc00::/16" }
+        { "tag": "dns_proxy", "type": "group", "servers": [ "dns_google", "dns_quad9" ] }
      ],
      "rules": [
        { "clash_mode": [ "Direct" ], "server": "dns_direct" },
@@ -99,13 +99,6 @@ tags: [sing-box, sing-boxr, ShellCrash, ruleset, rule_set, 分享, Router]
      { "rule_set": [ "telegramip" ], "outbound": "电报消息" }
    ],
    "rule_set": [
-      {
-        "tag": "trackerslist",
-        "type": "remote",
-        "format": "binary",
-        "path": "./ruleset/trackerslist.srs",
-        "url": "https://github.com/DustinWin/ruleset_geodata/releases/download/sing-box-ruleset/trackerslist.srs"
-      },
      {
        "tag": "ads",
        "type": "remote",
@@ -281,13 +274,11 @@ sc
      { "clash_mode": [ "Global" ], "server": "dns_proxy" },
      { "rule_set": [ "private" ], "server": "dns_resolver" },
      { "rule_set": [ "ads" ], "action": "predefined" },
-      { "rule_set": [ "trackerslist", "microsoft-cn", "apple-cn", "google-cn", "games-cn" ], "server": "dns_direct" },
+      { "rule_set": [ "microsoft-cn", "apple-cn", "google-cn", "games-cn" ], "server": "dns_direct" },
      { "rule_set": [ "games", "ai", "proxy" ], "query_type": [ "A", "AAAA" ], "server": "dns_fakeip" },
      { "rule_set": [ "cn" ], "server": "dns_direct" },
      { "action": "evaluate", "server": "dns_direct" },
-      { "match_response": true, "rule_set": [ "cnip" ], "action": "respond" },
-      { "match_response": true, "ip_accept_any": true, "invert": true, "action": "respond" },
-      { "query_type": [ "A", "AAAA" ], "server": "dns_fakeip" }
+      { "match_response": true, "rule_set": [ "cnip" ], "action": "respond" }
    ],
    "final": "dns_direct",
    "strategy": "prefer_ipv4",
@@ -337,22 +328,18 @@ sc
      { "clash_mode": [ "Global" ], "server": "dns_proxy" },
      { "rule_set": [ "private" ], "server": "dns_resolver" },
      { "rule_set": [ "ads" ], "action": "predefined" },
-      { "rule_set": [ "trackerslist", "microsoft-cn", "apple-cn", "google-cn", "games-cn" ], "server": "dns_direct" },
+      { "rule_set": [ "microsoft-cn", "apple-cn", "google-cn", "games-cn" ], "server": "dns_direct" },
      { "rule_set": [ "games", "ai", "proxy" ], "query_type": [ "A", "AAAA" ], "server": "dns_fakeip" },
      { "rule_set": [ "cn" ], "server": "dns_direct" },
      // 推荐将 `client_subnet` 设置为当前宽带运营商分配的默认 DNS 的 IP 段
      { "action": "evaluate", "server": "dns_proxy", "client_subnet": "211.137.58.0/24" },
-      { "match_response": true, "rule_set": [ "cnip" ], "action": "respond" },
-      { "match_response": true, "ip_accept_any": true, "invert": true, "action": "respond" },
-      { "query_type": [ "A", "AAAA" ], "server": "dns_fakeip" }
+      { "match_response": true, "rule_set": [ "cnip" ], "action": "respond" }
    ],
    "final": "dns_proxy",
    "strategy": "prefer_ipv4",
    "optimistic": true,
    "reverse_mapping": true,
-    "cache_client_subnet": true,
-    // 推荐将 `client_subnet` 设置为当前宽带运营商分配的默认 DNS 的 IP 段
-    "client_subnet": "211.137.58.0/24"
+    "cache_client_subnet": true
  }
 }
 ```
@@ -108,13 +108,6 @@ tags: [sing-box, sing-boxr, ShellCrash, AdGuard Home, ruleset, rule_set, 分享,
        "path": "./ruleset/fakeip-filter.srs",
        "url": "https://github.com/DustinWin/ruleset_geodata/releases/download/sing-box-ruleset/fakeip-filter-lite.srs"
      },
-      {
-        "tag": "trackerslist",
-        "type": "remote",
-        "format": "binary",
-        "path": "./ruleset/trackerslist.srs",
-        "url": "https://github.com/DustinWin/ruleset_geodata/releases/download/sing-box-ruleset/trackerslist.srs"
-      },
      {
        "tag": "private",
        "type": "remote",
@@ -287,13 +280,11 @@ sc
      { "clash_mode": [ "Direct" ], "server": "dns_direct" },
      { "clash_mode": [ "Global" ], "server": "dns_proxy" },
      { "rule_set": [ "private" ], "server": "dns_resolver" },
-      { "rule_set": [ "fakeip-filter", "trackerslist", "microsoft-cn", "apple-cn", "google-cn", "games-cn" ], "server": "dns_direct" },
+      { "rule_set": [ "fakeip-filter", "microsoft-cn", "apple-cn", "google-cn", "games-cn" ], "server": "dns_direct" },
      { "rule_set": [ "games", "ai", "proxy" ], "query_type": [ "A", "AAAA" ], "server": "dns_fakeip" },
      { "rule_set": [ "cn" ], "server": "dns_direct" },
      { "action": "evaluate", "server": "dns_direct" },
-      { "match_response": true, "rule_set": [ "cnip" ], "action": "respond" },
-      { "match_response": true, "ip_accept_any": true, "invert": true, "action": "respond" },
-      { "query_type": [ "A", "AAAA" ], "server": "dns_fakeip" }
+      { "match_response": true, "rule_set": [ "cnip" ], "action": "respond" }
    ],
    "final": "dns_direct",
    "strategy": "prefer_ipv4",
@@ -340,22 +331,18 @@ sc
      { "clash_mode": [ "Direct" ], "server": "dns_direct" },
      { "clash_mode": [ "Global" ], "server": "dns_proxy" },
      { "rule_set": [ "private" ], "server": "dns_resolver" },
-      { "rule_set": [ "fakeip-filter", "trackerslist", "microsoft-cn", "apple-cn", "google-cn", "games-cn" ], "server": "dns_direct" },
+      { "rule_set": [ "fakeip-filter", "microsoft-cn", "apple-cn", "google-cn", "games-cn" ], "server": "dns_direct" },
      { "rule_set": [ "games", "ai", "proxy" ], "query_type": [ "A", "AAAA" ], "server": "dns_fakeip" },
      { "rule_set": [ "cn" ], "server": "dns_direct" },
      // 推荐将 `client_subnet` 设置为当前宽带运营商分配的默认 DNS 的 IP 段
      { "action": "evaluate", "server": "dns_proxy", "client_subnet": "211.137.58.0/24" },
-      { "match_response": true, "rule_set": [ "cnip" ], "action": "respond" },
-      { "match_response": true, "ip_accept_any": true, "invert": true, "action": "respond" },
-      { "query_type": [ "A", "AAAA" ], "server": "dns_fakeip" }
+      { "match_response": true, "rule_set": [ "cnip" ], "action": "respond" }
    ],
    "final": "dns_proxy",
    "strategy": "prefer_ipv4",
    "optimistic": true,
    "reverse_mapping": true,
-    "cache_client_subnet": true,
-    // 推荐将 `client_subnet` 设置为当前宽带运营商分配的默认 DNS 的 IP 段
-    "client_subnet": "211.137.58.0/24"
+    "cache_client_subnet": true
  }
 }
 ```
@@ -424,16 +411,43 @@ sc
 mkdir -p /data/AdGuardHome
 curl -sS -o /data/AdGuardHome/AdGuardHome -L https://ghfast.top/https://github.com/DustinWin/proxy-tools/releases/download/AdGuardHome/AdGuardHome_beta_linux_arm64
 chmod +x /data/AdGuardHome/AdGuardHome
-/data/AdGuardHome/AdGuardHome -s install
-/data/AdGuardHome/AdGuardHome -s start
+cat <<'EOF' > /data/AdGuardHome/AdGuardHome.sh
+#!/bin/sh /etc/rc.common
+
+START=95
+STOP=01
+USE_PROCD=1
+
+WORK_DIR="/data/AdGuardHome"
+CONFIG_FILE="$WORK_DIR/AdGuardHome.yaml"
+
+start_service() {
+    echo "AdGuard Home 正在启动..."
+    procd_open_instance
+    procd_set_param command "$WORK_DIR/AdGuardHome" -s run
+    procd_append_param command -c "$CONFIG_FILE"
+    procd_append_param command -w "$WORK_DIR"
+    procd_set_param pidfile /var/run/AdGuardHome.pid
+    procd_close_instance
+    echo "AdGuard Home 启动成功！"
+}
+
+stop_service() {
+    echo "AdGuard Home 正在停止..."
+    sleep 3
+    echo "AdGuard Home 停止成功！"
+}
+EOF
+cp -f /data/AdGuardHome/AdGuardHome.sh /etc/init.d/AdGuardHome
+chmod +x /etc/init.d/AdGuardHome && /etc/init.d/AdGuardHome start
 iptables -t nat -A PREROUTING -p tcp --dport 53 -j REDIRECT --to-ports 5353
 iptables -t nat -A PREROUTING -p udp --dport 53 -j REDIRECT --to-ports 5353
 ip6tables -t nat -A PREROUTING -p tcp --dport 53 -j REDIRECT --to-ports 5353
 ip6tables -t nat -A PREROUTING -p udp --dport 53 -j REDIRECT --to-ports 5353
 cat <<EOF >> /data/auto_ssh/auto_ssh.sh
 sleep 10s
-/data/AdGuardHome/AdGuardHome -s install
-/data/AdGuardHome/AdGuardHome -s start
+cp -f /data/AdGuardHome/AdGuardHome.sh /etc/init.d/AdGuardHome
+chmod +x /etc/init.d/AdGuardHome && /etc/init.d/AdGuardHome start
 iptables -t nat -A PREROUTING -p tcp --dport 53 -j REDIRECT --to-ports 5353
 iptables -t nat -A PREROUTING -p udp --dport 53 -j REDIRECT --to-ports 5353
 ip6tables -t nat -A PREROUTING -p tcp --dport 53 -j REDIRECT --to-ports 5353
@@ -74,10 +74,11 @@ tags: [sing-box, sing-boxr, Windows, ruleset, rule_set, 分享]
      { "clash_mode": [ "Global" ], "server": "dns_proxy" },
      { "rule_set": [ "private" ], "server": "dns_local" },
      { "rule_set": [ "ads" ], "action": "predefined" },
-      { "rule_set": [ "trackerslist", "microsoft-cn", "apple-cn", "google-cn", "games-cn" ], "server": "dns_direct" },
+      { "rule_set": [ "microsoft-cn", "apple-cn", "google-cn", "games-cn" ], "server": "dns_direct" },
      { "rule_set": [ "games", "ai", "proxy" ], "query_type": [ "A", "AAAA" ], "server": "dns_fakeip" },
      { "rule_set": [ "cn" ], "server": "dns_direct" },
-      { "query_type": [ "A", "AAAA" ], "server": "dns_fakeip" }
+      { "action": "evaluate", "server": "dns_direct" },
+      { "match_response": true, "rule_set": [ "cnip" ], "action": "respond" }
    ],
    "final": "dns_direct",
    "strategy": "prefer_ipv4",
@@ -146,18 +147,10 @@ tags: [sing-box, sing-boxr, Windows, ruleset, rule_set, 分享]
      { "rule_set": [ "proxy" ], "outbound": "国外域名" },
      { "rule_set": [ "cn" ], "outbound": "国内域名" },
      { "ip_is_private": true, "outbound": "私有网络" },
-      { "rule_set": [ "telegramip" ], "outbound": "电报消息" },
-      { "action": "resolve", "match_only": true },
-      { "rule_set": [ "cnip" ], "outbound": "国内 IP" }
+      { "rule_set": [ "cnip" ], "outbound": "国内 IP" },
+      { "rule_set": [ "telegramip" ], "outbound": "电报消息" }
    ],
    "rule_set": [
-      {
-        "tag": "trackerslist",
-        "type": "remote",
-        "format": "binary",
-        "path": "./ruleset/trackerslist.srs",
-        "url": "https://github.com/DustinWin/ruleset_geodata/releases/download/sing-box-ruleset/trackerslist.srs"
-      },
      {
        "tag": "ads",
        "type": "remote",
@@ -242,19 +235,19 @@ tags: [sing-box, sing-boxr, Windows, ruleset, rule_set, 分享]
        "path": "./ruleset/cn.srs",
        "url": "https://github.com/DustinWin/ruleset_geodata/releases/download/sing-box-ruleset/cn.srs"
      },
-      {
-        "tag": "telegramip",
-        "type": "remote",
-        "format": "binary",
-        "path": "./ruleset/telegramip.srs",
-        "url": "https://github.com/DustinWin/ruleset_geodata/releases/download/sing-box-ruleset/telegramip.srs"
-      },
      {
        "tag": "cnip",
        "type": "remote",
        "format": "binary",
        "path": "./ruleset/cnip.srs",
        "url": "https://github.com/DustinWin/ruleset_geodata/releases/download/sing-box-ruleset/cnip.srs"
+      },
+      {
+        "tag": "telegramip",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/telegramip.srs",
+        "url": "https://github.com/DustinWin/ruleset_geodata/releases/download/sing-box-ruleset/telegramip.srs"
      }
    ],
    "final": "漏网之鱼",
@@ -321,18 +314,18 @@ tags: [sing-box, sing-boxr, Windows, ruleset, rule_set, 分享]
      { "clash_mode": [ "Global" ], "server": "dns_proxy" },
      { "rule_set": [ "private" ], "server": "dns_local" },
      { "rule_set": [ "ads" ], "action": "predefined" },
-      { "rule_set": [ "trackerslist", "microsoft-cn", "apple-cn", "google-cn", "games-cn" ], "server": "dns_direct" },
+      { "rule_set": [ "microsoft-cn", "apple-cn", "google-cn", "games-cn" ], "server": "dns_direct" },
      { "rule_set": [ "games", "ai", "proxy" ], "query_type": [ "A", "AAAA" ], "server": "dns_fakeip" },
      { "rule_set": [ "cn" ], "server": "dns_direct" },
-      { "query_type": [ "A", "AAAA" ], "server": "dns_fakeip" }
+      // 推荐将 `client_subnet` 设置为当前宽带运营商分配的默认 DNS 的 IP 段
+      { "action": "evaluate", "server": "dns_proxy", "client_subnet": "211.137.58.0/24" },
+      { "match_response": true, "rule_set": [ "cnip" ], "action": "respond" }
    ],
    "final": "dns_proxy",
    "strategy": "prefer_ipv4",
    "optimistic": true,
    "reverse_mapping": true,
-    "cache_client_subnet": true,
-    // 推荐将 `client_subnet` 设置为当前宽带运营商分配的默认 DNS 的 IP 段
-    "client_subnet": "211.137.58.0/24"
+    "cache_client_subnet": true
  }
 }
 ```
@@ -77,7 +77,6 @@ dns:
  fake-ip-filter-mode: rule
  fake-ip-filter:
    - RULE-SET,private,real-ip
-    - RULE-SET,trackerslist,real-ip
    - RULE-SET,microsoft-cn,real-ip
    - RULE-SET,apple-cn,real-ip
    - RULE-SET,google-cn,real-ip
@@ -86,7 +85,7 @@ dns:
    - RULE-SET,ai,fake-ip
    - RULE-SET,proxy,fake-ip
    - RULE-SET,cn,real-ip
-    - MATCH,fake-ip
+    - MATCH,real-ip
  nameserver:
    - quic://dns.alidns.com:853
    - https://doh.pub/dns-query
@@ -138,14 +137,6 @@ proxy-groups:
  - {name: 免费节点, type: url-test, tolerance: 100, use: [🆓 免费订阅], icon: "https://github.com/DustinWin/ruleset_geodata/releases/download/icons/free.png"}

 rule-providers:
-  trackerslist:
-    type: http
-    behavior: domain
-    format: mrs
-    path: ./ruleset/trackerslist.mrs
-    url: "https://github.com/DustinWin/ruleset_geodata/releases/download/mihomo-ruleset/trackerslist.mrs"
-    interval: 86400
-
  ads:
    type: http
    behavior: domain
@@ -310,7 +301,6 @@ dns:
  fake-ip-filter-mode: rule
  fake-ip-filter:
    - RULE-SET,private,real-ip
-    - RULE-SET,trackerslist,real-ip
    - RULE-SET,microsoft-cn,real-ip
    - RULE-SET,apple-cn,real-ip
    - RULE-SET,google-cn,real-ip
@@ -319,7 +309,7 @@ dns:
    - RULE-SET,ai,fake-ip
    - RULE-SET,proxy,fake-ip
    - RULE-SET,cn,real-ip
-    - MATCH,fake-ip
+    - MATCH,real-ip
  respect-rules: true
  nameserver:
    # 推荐将 `ecs` 设置为当前宽带运营商分配的默认 DNS 的 IP 段
@@ -335,7 +325,7 @@ dns:
  nameserver-policy:
    'rule-set:private': [system]
    'rule-set:ads': [rcode://success]
-    'rule-set:trackerslist,microsoft-cn,apple-cn,google-cn,games-cn,cn': [quic://dns.alidns.com:853, https://doh.pub/dns-query]
+    'rule-set:microsoft-cn,apple-cn,google-cn,games-cn,cn': [quic://dns.alidns.com:853, https://doh.pub/dns-query]
 ```

 ---