diff --git a/macos_clash_v2.yml b/macos_clash_v2.yml
new file mode 100644
index 0000000..04e3abe
--- /dev/null
+++ b/macos_clash_v2.yml
@@ -0,0 +1,851 @@
+# Generated Mac profile; shared policy comes from home/opennikki/open_clash_v2.yml.
+# Private DNS uses fixed utun candidates, not automatic EasyTier discovery or ordered failover.
+# Update the candidate list manually if EasyTier moves outside it; no public DNS fallback.
+mixed-port: 7890
+allow-lan: false
+mode: rule
+log-level: warning
+external-controller: 127.0.0.1:9090
+proxy-providers:
+  AirportCatCatAmerica:
+    type: http
+    path: ./providers/proxy/AirportCatCatAmerica.yaml
+    url: https://hproxy.likezgq.top/api/convert?url=https://c7a91e3b-84d2-4c6f-9b71-2e8d4a6f3c11.com/sabusuku?token=12952142e6b2d374facc31e8ad081b60
+    interval: 1800
+    filter: 美国
+    health-check:
+      enable: true
+      url: http://www.gstatic.com/generate_204
+      interval: 300
+    exclude-filter: 5倍消耗
+    proxy: DIRECT
+  AirportCatCatSingapore:
+    type: http
+    path: ./providers/proxy/AirportCatCatSingapore.yaml
+    url: https://hproxy.likezgq.top/api/convert?url=https://c7a91e3b-84d2-4c6f-9b71-2e8d4a6f3c11.com/sabusuku?token=12952142e6b2d374facc31e8ad081b60
+    interval: 1800
+    filter: 新加坡
+    health-check:
+      enable: true
+      url: http://www.gstatic.com/generate_204
+      interval: 300
+    exclude-filter: 5倍消耗
+    proxy: DIRECT
+  AirportCatCatTaiwan:
+    type: http
+    path: ./providers/proxy/AirportCatCatTaiwan.yaml
+    url: https://hproxy.likezgq.top/api/convert?url=https://c7a91e3b-84d2-4c6f-9b71-2e8d4a6f3c11.com/sabusuku?token=12952142e6b2d374facc31e8ad081b60
+    interval: 1800
+    filter: 台湾
+    health-check:
+      enable: true
+      url: http://www.gstatic.com/generate_204
+      interval: 300
+    exclude-filter: 5倍消耗
+    proxy: DIRECT
+  AirportCatCatJapan:
+    type: http
+    path: ./providers/proxy/AirportCatCatJapan.yaml
+    url: https://hproxy.likezgq.top/api/convert?url=https://c7a91e3b-84d2-4c6f-9b71-2e8d4a6f3c11.com/sabusuku?token=12952142e6b2d374facc31e8ad081b60
+    interval: 1800
+    filter: 日本
+    health-check:
+      enable: true
+      url: http://www.gstatic.com/generate_204
+      interval: 300
+    exclude-filter: 5倍消耗
+    proxy: DIRECT
+  AirportCatCatHongkong:
+    type: http
+    path: ./providers/proxy/AirportCatCatHongkong.yaml
+    url: https://hproxy.likezgq.top/api/convert?url=https://c7a91e3b-84d2-4c6f-9b71-2e8d4a6f3c11.com/sabusuku?token=12952142e6b2d374facc31e8ad081b60
+    interval: 1800
+    filter: 香港
+    health-check:
+      enable: true
+      url: http://www.gstatic.com/generate_204
+      interval: 300
+    exclude-filter: 5倍消耗
+    proxy: DIRECT
+  AirportHaitaAll:
+    type: http
+    path: ./providers/proxy/AirportHaitaAll.yaml
+    url: https://hproxy.likezgq.top/api/convert?url=https://su.anywayfosec.xyz/api/v1/client/subscribe?token=0d0df10e797c69b59ff577cb3e90d549
+    interval: 1800
+    health-check:
+      enable: true
+      url: http://www.gstatic.com/generate_204
+      interval: 300
+  AirportHaitaAmerica:
+    type: http
+    path: ./providers/proxy/AirportHaitaAmerica.yaml
+    url: https://hproxy.likezgq.top/api/convert?url=https://su.anywayfosec.xyz/api/v1/client/subscribe?token=0d0df10e797c69b59ff577cb3e90d549
+    interval: 1800
+    filter: 美国
+    health-check:
+      enable: true
+      url: http://www.gstatic.com/generate_204
+      interval: 300
+  AirportHaitaJapan:
+    type: http
+    path: ./providers/proxy/AirportHaitaJapan.yaml
+    url: https://hproxy.likezgq.top/api/convert?url=https://su.anywayfosec.xyz/api/v1/client/subscribe?token=0d0df10e797c69b59ff577cb3e90d549
+    interval: 1800
+    filter: 日本
+    health-check:
+      enable: true
+      url: http://www.gstatic.com/generate_204
+      interval: 300
+  AirportHaitaTaiwan:
+    type: http
+    path: ./providers/proxy/AirportHaitaTaiwan.yaml
+    url: https://hproxy.likezgq.top/api/convert?url=https://su.anywayfosec.xyz/api/v1/client/subscribe?token=0d0df10e797c69b59ff577cb3e90d549
+    interval: 1800
+    filter: 台湾
+    health-check:
+      enable: true
+      url: http://www.gstatic.com/generate_204
+      interval: 300
+  AirportHaitaSingapore:
+    type: http
+    path: ./providers/proxy/AirportHaitaSingapore.yaml
+    url: https://hproxy.likezgq.top/api/convert?url=https://su.anywayfosec.xyz/api/v1/client/subscribe?token=0d0df10e797c69b59ff577cb3e90d549
+    interval: 1800
+    filter: 新加坡
+    health-check:
+      enable: true
+      url: http://www.gstatic.com/generate_204
+      interval: 300
+  AirportHaitaHongkong:
+    type: http
+    path: ./providers/proxy/AirportHaitaHongkong.yaml
+    url: https://hproxy.likezgq.top/api/convert?url=https://su.anywayfosec.xyz/api/v1/client/subscribe?token=0d0df10e797c69b59ff577cb3e90d549
+    interval: 1800
+    filter: 香港
+    health-check:
+      enable: true
+      url: http://www.gstatic.com/generate_204
+      interval: 300
+  AirportHaitaKorea:
+    type: http
+    path: ./providers/proxy/AirportHaitaKorea.yaml
+    url: https://hproxy.likezgq.top/api/convert?url=https://su.anywayfosec.xyz/api/v1/client/subscribe?token=0d0df10e797c69b59ff577cb3e90d549
+    interval: 1800
+    filter: 韩国
+    health-check:
+      enable: true
+      url: http://www.gstatic.com/generate_204
+      interval: 300
+  AirportHaitaEurope:
+    type: http
+    path: ./providers/proxy/AirportHaitaEurope.yaml
+    url: https://hproxy.likezgq.top/api/convert?url=https://su.anywayfosec.xyz/api/v1/client/subscribe?token=0d0df10e797c69b59ff577cb3e90d549
+    interval: 1800
+    filter: 英国|荷兰|德国
+    health-check:
+      enable: true
+      url: http://www.gstatic.com/generate_204
+      interval: 300
+proxies:
+- name: router_local_reality
+  type: socks5
+  server: 192.168.11.13
+  port: 7891
+- name: router_local_reality2
+  type: socks5
+  server: 192.168.11.113
+  port: 7891
+- name: vless_dmitcf_likezgq
+  type: vless
+  udp: true
+  server: dmitcf.likezgq.top
+  port: 2053
+  uuid: 3e7dab20-a75f-4da0-a338-6bc5d5b6d0c1
+  network: ws
+  skip-cert-verify: true
+  tls: true
+  tls-hostname: dmitcf.likezgq.top
+  ws-opts:
+    headers:
+      Host: dmitcf.likezgq.top
+    path: /ws
+- name: vless_dmit02_reality_likezgq
+  type: vless
+  udp: true
+  server: dmit02.likezgq.top
+  port: 33666
+  uuid: 56cc48b8-0603-43b0-b5f4-0b4f9f62bd7d
+  network: tcp
+  tls: true
+  servername: www.amazon.com
+  client-fingerprint: chrome
+  reality-opts:
+    public-key: M771aZAjU3l8XeOq9U3mY0JrbcOZPE00fLMYQH2L3xI
+    short-id: c8e608f37b8f2a21
+    spider-x: /
+- name: vless_cc03_reality_vision
+  type: vless
+  server: cc03.likezgq.top
+  port: 40686
+  uuid: 5c796c0b-fbc9-4f68-8998-857280b31549
+  network: tcp
+  tls: true
+  flow: xtls-rprx-vision
+  servername: www.amazon.com
+  client-fingerprint: chrome
+  reality-opts:
+    public-key: hvSiIywHKfF7SwbIgtp4lF1k2SLb2y5Q5C-bDQiS1AQ
+    short-id: eb87dd0654a11c21
+proxy-groups:
+- name: POLICY_OPENAI
+  type: select
+  proxies:
+  - DEFAULT_EXIT
+  - EXIT_SELF_HOSTED
+  - EXIT_AMERICA
+  - EXIT_SINGAPORE
+  - EXIT_TAIWAN
+  - EXIT_JAPAN
+  - EXIT_HONGKONG
+- name: POLICY_XAI
+  type: select
+  proxies:
+  - DEFAULT_EXIT
+  - EXIT_SELF_HOSTED
+  - EXIT_AMERICA
+  - EXIT_SINGAPORE
+  - EXIT_TAIWAN
+  - EXIT_JAPAN
+  - EXIT_HONGKONG
+- name: POLICY_TWITTER
+  type: select
+  proxies:
+  - EXIT_SELF_HOSTED
+  - DEFAULT_EXIT
+  - EXIT_AMERICA
+  - EXIT_SINGAPORE
+  - EXIT_TAIWAN
+  - EXIT_JAPAN
+  - EXIT_HONGKONG
+- name: POLICY_ANTHROPIC
+  type: select
+  proxies:
+  - EXIT_SELF_HOSTED_STABLE
+  - EXIT_SELF_HOSTED
+  - DEFAULT_EXIT
+  - EXIT_AMERICA
+  - EXIT_SINGAPORE
+  - EXIT_TAIWAN
+  - EXIT_JAPAN
+  - EXIT_HONGKONG
+- name: POLICY_GOOGLE
+  type: select
+  proxies:
+  - EXIT_SELF_HOSTED
+  - DEFAULT_EXIT
+  - EXIT_AMERICA
+  - EXIT_SINGAPORE
+  - EXIT_TAIWAN
+  - EXIT_JAPAN
+  - EXIT_HONGKONG
+- name: POLICY_BINANCE
+  type: select
+  proxies:
+  - EXIT_TAIWAN
+  - EXIT_HONGKONG
+  - EXIT_SINGAPORE
+- name: POLICY_WISE
+  type: select
+  proxies:
+  - DIRECT
+  - DEFAULT_EXIT
+  - EXIT_SELF_HOSTED
+  - EXIT_AMERICA
+  - EXIT_SINGAPORE
+  - EXIT_TAIWAN
+  - EXIT_JAPAN
+  - EXIT_HONGKONG
+- name: POLICY_SCHWAB
+  type: select
+  proxies:
+  - DIRECT
+  - EXIT_HONGKONG
+  - EXIT_SINGAPORE
+  - EXIT_TAIWAN
+- name: POLICY_BYBIT
+  type: select
+  proxies:
+  - EXIT_TAIWAN
+  - EXIT_JAPAN
+  - EXIT_HONGKONG
+  - EXIT_SINGAPORE
+- name: POLICY_MEXC
+  type: select
+  proxies:
+  - EXIT_TAIWAN
+  - EXIT_JAPAN
+  - EXIT_HONGKONG
+  - EXIT_SINGAPORE
+- name: POLICY_PAYMAYA
+  type: select
+  proxies:
+  - DIRECT
+  - EXIT_SINGAPORE
+- name: POLICY_POLYMARKET
+  type: select
+  proxies:
+  - EXIT_HONGKONG
+  - DIRECT
+- name: POLICY_STRIPE
+  type: select
+  proxies:
+  - EXIT_SELF_HOSTED
+  - DIRECT
+  - EXIT_AMERICA
+  - EXIT_HONGKONG
+- name: POLICY_EASY_IPBLOCK
+  type: select
+  proxies:
+  - DEFAULT_EXIT
+  - EXIT_SELF_HOSTED
+  - EXIT_AMERICA
+  - EXIT_SINGAPORE
+  - EXIT_TAIWAN
+  - EXIT_JAPAN
+  - EXIT_HONGKONG
+- name: POLICY_YOUTUBE
+  type: select
+  proxies:
+  - DEFAULT_EXIT
+  - EXIT_SELF_HOSTED
+  - EXIT_AMERICA
+  - EXIT_SINGAPORE
+  - EXIT_TAIWAN
+  - EXIT_JAPAN
+  - EXIT_HONGKONG
+- name: POLICY_IP_CHECK
+  type: select
+  proxies:
+  - DEFAULT_EXIT
+  - EXIT_SELF_HOSTED
+  - EXIT_AMERICA
+  - EXIT_SINGAPORE
+  - EXIT_TAIWAN
+  - EXIT_JAPAN
+  - EXIT_HONGKONG
+  - DIRECT
+- name: POLICY_COLOR
+  type: select
+  proxies:
+  - DEFAULT_EXIT
+  - EXIT_SELF_HOSTED
+  - EXIT_AMERICA
+  - EXIT_SINGAPORE
+  - EXIT_TAIWAN
+  - EXIT_JAPAN
+  - EXIT_HONGKONG
+- name: POLICY_DEFAULT
+  type: select
+  proxies:
+  - DEFAULT_EXIT
+  - EXIT_SELF_HOSTED
+  - EXIT_AMERICA
+  - EXIT_SINGAPORE
+  - EXIT_TAIWAN
+  - EXIT_JAPAN
+  - EXIT_HONGKONG
+- name: DEFAULT_EXIT
+  type: select
+  proxies:
+  - EXIT_SELF_HOSTED
+  - EXIT_AMERICA
+  - EXIT_SINGAPORE
+  - EXIT_TAIWAN
+  - EXIT_JAPAN
+  - EXIT_HONGKONG
+- name: EXIT_SELF_HOSTED_STABLE
+  type: select
+  proxies:
+  - AUTO_SELF_HOSTED_STABLE
+  - vless_dmitcf_likezgq
+  - vless_dmit02_reality_likezgq
+- name: EXIT_SELF_HOSTED
+  type: select
+  proxies:
+  - AUTO_SELF_HOSTED
+  - vless_dmitcf_likezgq
+  - vless_dmit02_reality_likezgq
+  - vless_cc03_reality_vision
+  - router_local_reality
+  - router_local_reality2
+- name: EXIT_AMERICA
+  type: select
+  proxies:
+  - AUTO_AMERICA
+  use:
+  - AirportCatCatAmerica
+  - AirportHaitaAmerica
+- name: EXIT_SINGAPORE
+  type: select
+  proxies:
+  - AUTO_SINGAPORE
+  use:
+  - AirportCatCatSingapore
+  - AirportHaitaSingapore
+- name: EXIT_TAIWAN
+  type: select
+  proxies:
+  - AUTO_TAIWAN
+  use:
+  - AirportCatCatTaiwan
+  - AirportHaitaTaiwan
+- name: EXIT_JAPAN
+  type: select
+  proxies:
+  - AUTO_JAPAN
+  use:
+  - AirportCatCatJapan
+  - AirportHaitaJapan
+- name: EXIT_HONGKONG
+  type: select
+  proxies:
+  - AUTO_HONGKONG
+  use:
+  - AirportCatCatHongkong
+  - AirportHaitaHongkong
+- name: AUTO_SELF_HOSTED_STABLE
+  type: url-test
+  url: http://www.gstatic.com/generate_204
+  interval: 150
+  tolerance: 30
+  proxies:
+  - vless_dmitcf_likezgq
+  - vless_dmit02_reality_likezgq
+- name: AUTO_SELF_HOSTED
+  type: url-test
+  url: http://www.gstatic.com/generate_204
+  interval: 150
+  tolerance: 30
+  proxies:
+  - vless_dmitcf_likezgq
+  - vless_dmit02_reality_likezgq
+  - vless_cc03_reality_vision
+  - router_local_reality
+  - router_local_reality2
+- name: AUTO_AMERICA
+  type: url-test
+  url: http://www.gstatic.com/generate_204
+  interval: 300
+  tolerance: 50
+  use:
+  - AirportCatCatAmerica
+  - AirportHaitaAmerica
+- name: AUTO_SINGAPORE
+  type: url-test
+  url: http://www.gstatic.com/generate_204
+  interval: 150
+  tolerance: 50
+  use:
+  - AirportCatCatSingapore
+  - AirportHaitaSingapore
+- name: AUTO_TAIWAN
+  type: url-test
+  url: http://www.gstatic.com/generate_204
+  interval: 150
+  tolerance: 50
+  use:
+  - AirportCatCatTaiwan
+  - AirportHaitaTaiwan
+- name: AUTO_JAPAN
+  type: url-test
+  url: http://www.gstatic.com/generate_204
+  interval: 150
+  tolerance: 50
+  use:
+  - AirportCatCatJapan
+  - AirportHaitaJapan
+- name: AUTO_HONGKONG
+  type: url-test
+  url: http://www.gstatic.com/generate_204
+  interval: 250
+  tolerance: 30
+  use:
+  - AirportCatCatHongkong
+  - AirportHaitaHongkong
+rule-providers:
+  service_twitter:
+    type: http
+    behavior: domain
+    format: yaml
+    url: https://fastly.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geosite/twitter.yaml
+    path: ./ruleset/service_twitter.yaml
+    interval: 86400
+    proxy: DIRECT
+  service_anthropic:
+    type: http
+    behavior: domain
+    format: yaml
+    url: https://fastly.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geosite/anthropic.yaml
+    path: ./ruleset/service_anthropic.yaml
+    interval: 86400
+    proxy: DIRECT
+  service_openai:
+    type: http
+    behavior: domain
+    format: yaml
+    url: https://fastly.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geosite/openai.yaml
+    path: ./ruleset/service_openai.yaml
+    interval: 86400
+    proxy: DIRECT
+  service_binance:
+    type: http
+    behavior: domain
+    format: yaml
+    url: https://fastly.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geosite/binance.yaml
+    path: ./ruleset/service_binance.yaml
+    interval: 86400
+    proxy: DIRECT
+  service_youtube:
+    type: http
+    behavior: domain
+    format: yaml
+    url: https://fastly.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geosite/youtube.yaml
+    path: ./ruleset/service_youtube.yaml
+    interval: 86400
+    proxy: DIRECT
+  service_google:
+    type: http
+    behavior: domain
+    format: yaml
+    url: https://fastly.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geosite/google.yaml
+    path: ./ruleset/service_google.yaml
+    interval: 86400
+    proxy: DIRECT
+  reject:
+    type: http
+    behavior: domain
+    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt
+    path: ./ruleset/reject.yaml
+    interval: 86400
+  icloud:
+    type: http
+    behavior: domain
+    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/icloud.txt
+    path: ./ruleset/icloud.yaml
+    interval: 86400
+  apple:
+    type: http
+    behavior: domain
+    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/apple.txt
+    path: ./ruleset/apple.yaml
+    interval: 86400
+  google:
+    type: http
+    behavior: domain
+    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/google.txt
+    path: ./ruleset/google.yaml
+    interval: 86400
+  proxy:
+    type: http
+    behavior: domain
+    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt
+    path: ./ruleset/proxy.yaml
+    interval: 86400
+  direct:
+    type: http
+    behavior: domain
+    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt
+    path: ./ruleset/direct.yaml
+    interval: 86400
+  private:
+    type: http
+    behavior: domain
+    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt
+    path: ./ruleset/private.yaml
+    interval: 86400
+  tld-not-cn:
+    type: http
+    behavior: domain
+    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/tld-not-cn.txt
+    path: ./ruleset/tld-not-cn.yaml
+    interval: 86400
+  telegramcidr:
+    type: http
+    behavior: ipcidr
+    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/telegramcidr.txt
+    path: ./ruleset/telegramcidr.yaml
+    interval: 86400
+  cncidr:
+    type: http
+    behavior: ipcidr
+    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/cncidr.txt
+    path: ./ruleset/cncidr.yaml
+    interval: 86400
+  lancidr:
+    type: http
+    behavior: ipcidr
+    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/lancidr.txt
+    path: ./ruleset/lancidr.yaml
+    interval: 86400
+  applications:
+    type: http
+    behavior: classical
+    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/applications.txt
+    path: ./ruleset/applications.yaml
+    interval: 86400
+  github:
+    type: http
+    behavior: domain
+    url: https://raw.gitmirror.com/ACL4SSR/ACL4SSR/master/Clash/Providers/Ruleset/Github.yaml
+    path: ./ruleset/github.yaml
+    interval: 86400
+  tiktok:
+    type: http
+    behavior: domain
+    url: https://raw.gitmirror.com/ACL4SSR/ACL4SSR/master/Clash/Providers/Ruleset/TikTok.yaml
+    path: ./ruleset/tiktok.yaml
+    interval: 86400
+rules:
+- AND,((NETWORK,UDP),(DST-PORT,443)),REJECT
+- DST-PORT,22,EXIT_SELF_HOSTED
+- AND,((NETWORK,udp),(DST-PORT,22)),REJECT
+- DOMAIN-SUFFIX,ipinfo.io,POLICY_IP_CHECK
+- AND,((NETWORK,udp),(DOMAIN-SUFFIX,ipinfo.io)),REJECT
+- DOMAIN-SUFFIX,scamalytics.com,POLICY_IP_CHECK
+- AND,((NETWORK,udp),(DOMAIN-SUFFIX,scamalytics.com)),REJECT
+- DOMAIN-SUFFIX,ping0.cc,POLICY_IP_CHECK
+- AND,((NETWORK,udp),(DOMAIN-SUFFIX,ping0.cc)),REJECT
+- DOMAIN,huggingface.co,EXIT_SELF_HOSTED
+- AND,((NETWORK,udp),(DOMAIN,huggingface.co)),REJECT
+- RULE-SET,service_twitter,POLICY_TWITTER
+- AND,((NETWORK,udp),(RULE-SET,service_twitter)),REJECT
+- RULE-SET,service_anthropic,POLICY_ANTHROPIC
+- AND,((NETWORK,udp),(RULE-SET,service_anthropic)),REJECT
+- RULE-SET,service_openai,POLICY_OPENAI
+- AND,((NETWORK,udp),(RULE-SET,service_openai)),REJECT
+- RULE-SET,service_binance,POLICY_BINANCE
+- AND,((NETWORK,udp),(RULE-SET,service_binance)),REJECT
+- RULE-SET,service_youtube,POLICY_YOUTUBE
+- AND,((NETWORK,udp),(RULE-SET,service_youtube)),REJECT
+- RULE-SET,service_google,POLICY_GOOGLE
+- AND,((NETWORK,udp),(RULE-SET,service_google)),REJECT
+- DOMAIN-SUFFIX,cursor.sh,POLICY_XAI
+- AND,((NETWORK,udp),(DOMAIN-SUFFIX,cursor.sh)),REJECT
+- DOMAIN-KEYWORD,grok,POLICY_XAI
+- AND,((NETWORK,udp),(DOMAIN-KEYWORD,grok)),REJECT
+- DOMAIN-SUFFIX,intercomcdn.com,POLICY_DEFAULT
+- AND,((NETWORK,udp),(DOMAIN-SUFFIX,intercomcdn.com)),REJECT
+- DOMAIN-SUFFIX,cdn.usefathom.com,POLICY_DEFAULT
+- AND,((NETWORK,udp),(DOMAIN-SUFFIX,cdn.usefathom.com)),REJECT
+- DOMAIN-SUFFIX,stripe.com,POLICY_STRIPE
+- AND,((NETWORK,udp),(DOMAIN-SUFFIX,stripe.com)),REJECT
+- DOMAIN-KEYWORD,discord,EXIT_AMERICA
+- AND,((NETWORK,udp),(DOMAIN-KEYWORD,discord)),REJECT
+- DOMAIN-KEYWORD,us-api,EXIT_AMERICA
+- AND,((NETWORK,udp),(DOMAIN-KEYWORD,us-api)),REJECT
+- DOMAIN-KEYWORD,paypal,EXIT_AMERICA
+- AND,((NETWORK,udp),(DOMAIN-KEYWORD,paypal)),REJECT
+- DOMAIN-KEYWORD,paypa1,EXIT_AMERICA
+- AND,((NETWORK,udp),(DOMAIN-KEYWORD,paypa1)),REJECT
+- DOMAIN-KEYWORD,schwab,POLICY_SCHWAB
+- AND,((NETWORK,udp),(DOMAIN-KEYWORD,schwab)),REJECT
+- DOMAIN-KEYWORD,thinkorswim,POLICY_SCHWAB
+- AND,((NETWORK,udp),(DOMAIN-KEYWORD,thinkorswim)),REJECT
+- DOMAIN-SUFFIX,wise.com,POLICY_WISE
+- AND,((NETWORK,udp),(DOMAIN-SUFFIX,wise.com)),REJECT
+- DOMAIN-SUFFIX,bybit.com,POLICY_BYBIT
+- AND,((NETWORK,udp),(DOMAIN-SUFFIX,bybit.com)),REJECT
+- DOMAIN-SUFFIX,bybit.biz,POLICY_BYBIT
+- AND,((NETWORK,udp),(DOMAIN-SUFFIX,bybit.biz)),REJECT
+- DOMAIN-SUFFIX,bybitglobal.com,POLICY_BYBIT
+- AND,((NETWORK,udp),(DOMAIN-SUFFIX,bybitglobal.com)),REJECT
+- DOMAIN-SUFFIX,mexc.com,POLICY_MEXC
+- AND,((NETWORK,udp),(DOMAIN-SUFFIX,mexc.com)),REJECT
+- DOMAIN-SUFFIX,greentreeone.com,POLICY_MEXC
+- AND,((NETWORK,udp),(DOMAIN-SUFFIX,greentreeone.com)),REJECT
+- DOMAIN-SUFFIX,flytogarden.com,POLICY_MEXC
+- AND,((NETWORK,udp),(DOMAIN-SUFFIX,flytogarden.com)),REJECT
+- DOMAIN-SUFFIX,hotbookzone.com,POLICY_MEXC
+- AND,((NETWORK,udp),(DOMAIN-SUFFIX,hotbookzone.com)),REJECT
+- DOMAIN-SUFFIX,coldbookfly.ru,POLICY_MEXC
+- AND,((NETWORK,udp),(DOMAIN-SUFFIX,coldbookfly.ru)),REJECT
+- DOMAIN-SUFFIX,maya.ph,POLICY_PAYMAYA
+- AND,((NETWORK,udp),(DOMAIN-SUFFIX,maya.ph)),REJECT
+- DOMAIN-SUFFIX,paymaya.com,POLICY_PAYMAYA
+- AND,((NETWORK,udp),(DOMAIN-SUFFIX,paymaya.com)),REJECT
+- DOMAIN-SUFFIX,mayabank.ph,POLICY_PAYMAYA
+- AND,((NETWORK,udp),(DOMAIN-SUFFIX,mayabank.ph)),REJECT
+- DOMAIN-SUFFIX,polymarket.com,POLICY_POLYMARKET
+- AND,((NETWORK,udp),(DOMAIN-SUFFIX,polymarket.com)),REJECT
+- DOMAIN-KEYWORD,reddit.com,POLICY_EASY_IPBLOCK
+- AND,((NETWORK,udp),(DOMAIN-KEYWORD,reddit.com)),REJECT
+- DOMAIN-KEYWORD,avgle,POLICY_COLOR
+- AND,((NETWORK,udp),(DOMAIN-KEYWORD,avgle)),REJECT
+- DOMAIN-KEYWORD,porn,POLICY_COLOR
+- AND,((NETWORK,udp),(DOMAIN-KEYWORD,porn)),REJECT
+- DOMAIN-KEYWORD,xvideo,POLICY_COLOR
+- AND,((NETWORK,udp),(DOMAIN-KEYWORD,xvideo)),REJECT
+- DOMAIN-KEYWORD,xhamster,POLICY_COLOR
+- AND,((NETWORK,udp),(DOMAIN-KEYWORD,xhamster)),REJECT
+- DOMAIN-SUFFIX,ycombinator.com,POLICY_DEFAULT
+- AND,((NETWORK,udp),(DOMAIN-SUFFIX,ycombinator.com)),REJECT
+- DOMAIN-SUFFIX,distrowatch.com,POLICY_DEFAULT
+- AND,((NETWORK,udp),(DOMAIN-SUFFIX,distrowatch.com)),REJECT
+- DOMAIN-SUFFIX,pypi.org,POLICY_DEFAULT
+- AND,((NETWORK,udp),(DOMAIN-SUFFIX,pypi.org)),REJECT
+- DOMAIN-SUFFIX,pythonhosted.org,POLICY_DEFAULT
+- AND,((NETWORK,udp),(DOMAIN-SUFFIX,pythonhosted.org)),REJECT
+- DOMAIN-SUFFIX,nvidia.com,POLICY_DEFAULT
+- AND,((NETWORK,udp),(DOMAIN-SUFFIX,nvidia.com)),REJECT
+- DOMAIN-SUFFIX,tailscale.com,POLICY_DEFAULT
+- AND,((NETWORK,udp),(DOMAIN-SUFFIX,tailscale.com)),REJECT
+- DOMAIN-KEYWORD,time.windows.com,DIRECT
+- DOMAIN-SUFFIX,likezgq.top,DIRECT
+- DOMAIN-KEYWORD,ra2web.com,DIRECT
+- DOMAIN-KEYWORD,bun.sh.cn,DIRECT
+- DOMAIN-SUFFIX,kgithub.com,DIRECT
+- DOMAIN-KEYWORD,chronodivide.com,DIRECT
+- DOMAIN,clash.razord.top,DIRECT
+- DOMAIN,yacd.haishan.me,DIRECT
+- DOMAIN-SUFFIX,likezgq.pub,DIRECT
+- DOMAIN-SUFFIX,home.pub,DIRECT
+- DOMAIN-SUFFIX,lan,DIRECT
+- PROCESS-NAME,Tailscale.exe,DIRECT
+- PROCESS-NAME,Tailscale Service.exe,DIRECT
+- PROCESS-NAME,tailscaled.exe,DIRECT
+- PROCESS-NAME,tailscale-ipn.exe,DIRECT
+- PROCESS-NAME,tailscaled,DIRECT
+- PROCESS-NAME,Tailscale,DIRECT
+- RULE-SET,github,EXIT_SELF_HOSTED
+- AND,((NETWORK,udp),(RULE-SET,github)),REJECT
+- RULE-SET,tiktok,EXIT_AMERICA
+- AND,((NETWORK,udp),(RULE-SET,tiktok)),REJECT
+- RULE-SET,applications,DIRECT
+- RULE-SET,private,DIRECT
+- RULE-SET,reject,REJECT
+- RULE-SET,icloud,DIRECT
+- RULE-SET,apple,DIRECT
+- RULE-SET,direct,DIRECT
+- RULE-SET,proxy,POLICY_DEFAULT
+- AND,((NETWORK,udp),(RULE-SET,proxy)),REJECT
+- RULE-SET,telegramcidr,POLICY_DEFAULT,no-resolve
+- AND,((NETWORK,udp),(RULE-SET,telegramcidr,no-resolve)),REJECT
+- IP-CIDR,104.27.80.65/32,DIRECT,no-resolve
+- IP-CIDR,104.16.29.191/32,DIRECT,no-resolve
+- IP-CIDR,141.101.115.236/32,DIRECT,no-resolve
+- IP-CIDR,172.64.93.84/32,DIRECT,no-resolve
+- IP-CIDR,142.171.94.73/32,DIRECT,no-resolve
+- IP-CIDR,100.64.0.0/10,DIRECT,no-resolve
+- RULE-SET,lancidr,DIRECT,no-resolve
+- RULE-SET,cncidr,DIRECT,no-resolve
+- GEOIP,LAN,DIRECT,no-resolve
+- GEOIP,CN,DIRECT
+- NETWORK,udp,EXIT_SELF_HOSTED_STABLE
+- NETWORK,udp,REJECT
+- MATCH,POLICY_DEFAULT
+find-process-mode: strict
+ipv6: true
+external-ui: ui
+external-ui-url: https://github.com/Zephyruso/zashboard/releases/latest/download/dist-cdn-fonts.zip
+tun:
+  enable: true
+  stack: mixed
+  auto-route: true
+  auto-detect-interface: true
+  dns-hijack:
+  - any:53
+  - tcp://any:53
+hosts: {}
+dns:
+  enable: true
+  listen: 127.0.0.1:1053
+  ipv6: true
+  enhanced-mode: fake-ip
+  fake-ip-range: 28.254.0.0/15
+  fake-ip-filter-mode: blacklist
+  fake-ip-filter:
+  - '*.lan'
+  - '*.local'
+  - +.arpa
+  - geosite:cn
+  - time.*.com
+  - ntp.*.com
+  - +.market.xiaomi.com
+  - localhost.ptlogin2.qq.com
+  - '*.msftncsi.com'
+  - www.msftconnecttest.com
+  respect-rules: true
+  prefer-h3: false
+  use-hosts: false
+  use-system-hosts: false
+  default-nameserver:
+  - https://223.5.5.5/dns-query
+  - https://223.6.6.6/dns-query
+  proxy-server-nameserver:
+  - https://223.5.5.5/dns-query#DIRECT
+  - https://223.6.6.6/dns-query#DIRECT
+  nameserver-policy:
+    +.lan:
+    - 192.168.11.100#utun6
+    - 192.168.11.100#utun5
+    - 192.168.11.100#utun4
+    - 192.168.11.100#utun2
+    - 192.168.11.100#utun3
+    +.local:
+    - 192.168.11.100#utun6
+    - 192.168.11.100#utun5
+    - 192.168.11.100#utun4
+    - 192.168.11.100#utun2
+    - 192.168.11.100#utun3
+    +.home.arpa:
+    - 192.168.11.100#utun6
+    - 192.168.11.100#utun5
+    - 192.168.11.100#utun4
+    - 192.168.11.100#utun2
+    - 192.168.11.100#utun3
+    +.in-addr.arpa:
+    - 192.168.11.100#utun6
+    - 192.168.11.100#utun5
+    - 192.168.11.100#utun4
+    - 192.168.11.100#utun2
+    - 192.168.11.100#utun3
+    +.ip6.arpa:
+    - 192.168.11.100#utun6
+    - 192.168.11.100#utun5
+    - 192.168.11.100#utun4
+    - 192.168.11.100#utun2
+    - 192.168.11.100#utun3
+    +.likezgq.top:
+    - 192.168.11.100#utun6
+    - 192.168.11.100#utun5
+    - 192.168.11.100#utun4
+    - 192.168.11.100#utun2
+    - 192.168.11.100#utun3
+    +.likezgq.pub:
+    - 192.168.11.100#utun6
+    - 192.168.11.100#utun5
+    - 192.168.11.100#utun4
+    - 192.168.11.100#utun2
+    - 192.168.11.100#utun3
+    +.home.pub:
+    - 192.168.11.100#utun6
+    - 192.168.11.100#utun5
+    - 192.168.11.100#utun4
+    - 192.168.11.100#utun2
+    - 192.168.11.100#utun3
+    geosite:cn:
+    - https://223.5.5.5/dns-query#DIRECT
+    - https://223.6.6.6/dns-query#DIRECT
+  nameserver:
+  - https://1.1.1.1/dns-query#EXIT_SELF_HOSTED_STABLE
+  - https://8.8.8.8/dns-query#EXIT_SELF_HOSTED_STABLE
+profile:
+  store-selected: true
+  store-fake-ip: true
+geodata-mode: true
+geodata-loader: standard
+geox-url:
+  geosite: https://cdn.jsdelivr.net/gh/Loyalsoldier/v2ray-rules-dat@release/geosite.dat
+  geoip: https://cdn.jsdelivr.net/gh/Loyalsoldier/v2ray-rules-dat@release/geoip.dat
+geo-auto-update: true
+geo-update-interval: 24