chore: publish OpenNikki profile from b33b3dc10982
This commit is contained in:
+73
-3
@@ -163,6 +163,7 @@ proxies:
|
||||
# vless://[email protected]:2053?type=ws&encryption=none&path=%2Fws&host=dmcf.likezgq.top&security=tls&fp=chrome&alpn=h2%2Chttp%2F1.1&sni=dmcf.likezgq.top#vless%2Bwebsocket-ifnkvalb
|
||||
- name: "vless_dmitcf_likezgq"
|
||||
type: vless
|
||||
udp: true
|
||||
server: dmitcf.likezgq.top
|
||||
port: 2053
|
||||
uuid: 3e7dab20-a75f-4da0-a338-6bc5d5b6d0c1
|
||||
@@ -178,6 +179,7 @@ proxies:
|
||||
# vless://[email protected]:33666?type=tcp&encryption=none&security=reality&pbk=M771aZAjU3l8XeOq9U3mY0JrbcOZPE00fLMYQH2L3xI&fp=chrome&sni=www.amazon.com&sid=c8e608f37b8f2a21&spx=%2F#tcp%2Breality-ntu1wls4
|
||||
- name: "vless_dmit02_reality_likezgq"
|
||||
type: vless
|
||||
udp: true
|
||||
server: dmit02.likezgq.top
|
||||
port: 33666
|
||||
uuid: 56cc48b8-0603-43b0-b5f4-0b4f9f62bd7d
|
||||
@@ -621,56 +623,103 @@ rule-providers:
|
||||
path: ./ruleset/tiktok.yaml
|
||||
interval: 86400
|
||||
rules:
|
||||
# A matching proxy without UDP support must reject, not resume at DIRECT.
|
||||
- AND,((NETWORK,UDP),(DST-PORT,443)),REJECT
|
||||
- DST-PORT,22,EXIT_SELF_HOSTED
|
||||
- AND,((NETWORK,udp),(DST-PORT,22)),REJECT
|
||||
- DOMAIN-SUFFIX,ipinfo.io,POLICY_IP_CHECK
|
||||
- AND,((NETWORK,udp),(DOMAIN-SUFFIX,ipinfo.io)),REJECT
|
||||
- DOMAIN-SUFFIX,scamalytics.com,POLICY_IP_CHECK
|
||||
- AND,((NETWORK,udp),(DOMAIN-SUFFIX,scamalytics.com)),REJECT
|
||||
- DOMAIN-SUFFIX,ping0.cc,POLICY_IP_CHECK
|
||||
- AND,((NETWORK,udp),(DOMAIN-SUFFIX,ping0.cc)),REJECT
|
||||
- DOMAIN,huggingface.co,EXIT_SELF_HOSTED
|
||||
- AND,((NETWORK,udp),(DOMAIN,huggingface.co)),REJECT
|
||||
- RULE-SET,service_twitter,POLICY_TWITTER
|
||||
- AND,((NETWORK,udp),(RULE-SET,service_twitter)),REJECT
|
||||
- RULE-SET,service_anthropic,POLICY_ANTHROPIC
|
||||
- AND,((NETWORK,udp),(RULE-SET,service_anthropic)),REJECT
|
||||
- RULE-SET,service_openai,POLICY_OPENAI
|
||||
- AND,((NETWORK,udp),(RULE-SET,service_openai)),REJECT
|
||||
- RULE-SET,service_binance,POLICY_BINANCE
|
||||
- AND,((NETWORK,udp),(RULE-SET,service_binance)),REJECT
|
||||
# YouTube overlaps Google; keep its independent business policy first.
|
||||
- RULE-SET,service_youtube,POLICY_YOUTUBE
|
||||
- AND,((NETWORK,udp),(RULE-SET,service_youtube)),REJECT
|
||||
- RULE-SET,service_google,POLICY_GOOGLE
|
||||
- AND,((NETWORK,udp),(RULE-SET,service_google)),REJECT
|
||||
- DOMAIN-SUFFIX,cursor.sh,POLICY_XAI
|
||||
- AND,((NETWORK,udp),(DOMAIN-SUFFIX,cursor.sh)),REJECT
|
||||
- DOMAIN-KEYWORD,grok,POLICY_XAI
|
||||
- AND,((NETWORK,udp),(DOMAIN-KEYWORD,grok)),REJECT
|
||||
- DOMAIN-SUFFIX,intercomcdn.com,POLICY_DEFAULT
|
||||
- AND,((NETWORK,udp),(DOMAIN-SUFFIX,intercomcdn.com)),REJECT
|
||||
- DOMAIN-SUFFIX,cdn.usefathom.com,POLICY_DEFAULT
|
||||
- AND,((NETWORK,udp),(DOMAIN-SUFFIX,cdn.usefathom.com)),REJECT
|
||||
- DOMAIN-SUFFIX,stripe.com,POLICY_STRIPE
|
||||
- AND,((NETWORK,udp),(DOMAIN-SUFFIX,stripe.com)),REJECT
|
||||
|
||||
- DOMAIN-KEYWORD,discord,EXIT_AMERICA
|
||||
- AND,((NETWORK,udp),(DOMAIN-KEYWORD,discord)),REJECT
|
||||
- DOMAIN-KEYWORD,us-api,EXIT_AMERICA
|
||||
- AND,((NETWORK,udp),(DOMAIN-KEYWORD,us-api)),REJECT
|
||||
- DOMAIN-KEYWORD,paypal,EXIT_AMERICA
|
||||
- AND,((NETWORK,udp),(DOMAIN-KEYWORD,paypal)),REJECT
|
||||
- DOMAIN-KEYWORD,paypa1,EXIT_AMERICA
|
||||
- AND,((NETWORK,udp),(DOMAIN-KEYWORD,paypa1)),REJECT
|
||||
- DOMAIN-KEYWORD,schwab,POLICY_SCHWAB
|
||||
- AND,((NETWORK,udp),(DOMAIN-KEYWORD,schwab)),REJECT
|
||||
- DOMAIN-KEYWORD,thinkorswim,POLICY_SCHWAB
|
||||
- AND,((NETWORK,udp),(DOMAIN-KEYWORD,thinkorswim)),REJECT
|
||||
- DOMAIN-SUFFIX,wise.com,POLICY_WISE
|
||||
- AND,((NETWORK,udp),(DOMAIN-SUFFIX,wise.com)),REJECT
|
||||
|
||||
- DOMAIN-SUFFIX,bybit.com,POLICY_BYBIT
|
||||
- AND,((NETWORK,udp),(DOMAIN-SUFFIX,bybit.com)),REJECT
|
||||
- DOMAIN-SUFFIX,bybit.biz,POLICY_BYBIT
|
||||
- AND,((NETWORK,udp),(DOMAIN-SUFFIX,bybit.biz)),REJECT
|
||||
- DOMAIN-SUFFIX,bybitglobal.com,POLICY_BYBIT
|
||||
- AND,((NETWORK,udp),(DOMAIN-SUFFIX,bybitglobal.com)),REJECT
|
||||
- DOMAIN-SUFFIX,mexc.com,POLICY_MEXC
|
||||
- AND,((NETWORK,udp),(DOMAIN-SUFFIX,mexc.com)),REJECT
|
||||
- DOMAIN-SUFFIX,greentreeone.com,POLICY_MEXC
|
||||
- AND,((NETWORK,udp),(DOMAIN-SUFFIX,greentreeone.com)),REJECT
|
||||
- DOMAIN-SUFFIX,flytogarden.com,POLICY_MEXC
|
||||
- AND,((NETWORK,udp),(DOMAIN-SUFFIX,flytogarden.com)),REJECT
|
||||
- DOMAIN-SUFFIX,hotbookzone.com,POLICY_MEXC
|
||||
- AND,((NETWORK,udp),(DOMAIN-SUFFIX,hotbookzone.com)),REJECT
|
||||
- DOMAIN-SUFFIX,coldbookfly.ru,POLICY_MEXC
|
||||
- AND,((NETWORK,udp),(DOMAIN-SUFFIX,coldbookfly.ru)),REJECT
|
||||
- DOMAIN-SUFFIX,maya.ph,POLICY_PAYMAYA
|
||||
- AND,((NETWORK,udp),(DOMAIN-SUFFIX,maya.ph)),REJECT
|
||||
- DOMAIN-SUFFIX,paymaya.com,POLICY_PAYMAYA
|
||||
- AND,((NETWORK,udp),(DOMAIN-SUFFIX,paymaya.com)),REJECT
|
||||
- DOMAIN-SUFFIX,mayabank.ph,POLICY_PAYMAYA
|
||||
- AND,((NETWORK,udp),(DOMAIN-SUFFIX,mayabank.ph)),REJECT
|
||||
- DOMAIN-SUFFIX,polymarket.com,POLICY_POLYMARKET
|
||||
- AND,((NETWORK,udp),(DOMAIN-SUFFIX,polymarket.com)),REJECT
|
||||
- DOMAIN-KEYWORD,reddit.com,POLICY_EASY_IPBLOCK
|
||||
- AND,((NETWORK,udp),(DOMAIN-KEYWORD,reddit.com)),REJECT
|
||||
- DOMAIN-KEYWORD,avgle,POLICY_COLOR
|
||||
- AND,((NETWORK,udp),(DOMAIN-KEYWORD,avgle)),REJECT
|
||||
- DOMAIN-KEYWORD,porn,POLICY_COLOR
|
||||
- AND,((NETWORK,udp),(DOMAIN-KEYWORD,porn)),REJECT
|
||||
- DOMAIN-KEYWORD,xvideo,POLICY_COLOR
|
||||
- AND,((NETWORK,udp),(DOMAIN-KEYWORD,xvideo)),REJECT
|
||||
- DOMAIN-KEYWORD,xhamster,POLICY_COLOR
|
||||
- AND,((NETWORK,udp),(DOMAIN-KEYWORD,xhamster)),REJECT
|
||||
- DOMAIN-SUFFIX,ycombinator.com,POLICY_DEFAULT
|
||||
- AND,((NETWORK,udp),(DOMAIN-SUFFIX,ycombinator.com)),REJECT
|
||||
- DOMAIN-SUFFIX,distrowatch.com,POLICY_DEFAULT
|
||||
- AND,((NETWORK,udp),(DOMAIN-SUFFIX,distrowatch.com)),REJECT
|
||||
- DOMAIN-SUFFIX,pypi.org,POLICY_DEFAULT
|
||||
- AND,((NETWORK,udp),(DOMAIN-SUFFIX,pypi.org)),REJECT
|
||||
- DOMAIN-SUFFIX,pythonhosted.org,POLICY_DEFAULT
|
||||
- AND,((NETWORK,udp),(DOMAIN-SUFFIX,pythonhosted.org)),REJECT
|
||||
- DOMAIN-SUFFIX,nvidia.com,POLICY_DEFAULT
|
||||
- AND,((NETWORK,udp),(DOMAIN-SUFFIX,nvidia.com)),REJECT
|
||||
- DOMAIN-SUFFIX,tailscale.com,POLICY_DEFAULT
|
||||
- AND,((NETWORK,udp),(DOMAIN-SUFFIX,tailscale.com)),REJECT
|
||||
- DOMAIN-KEYWORD,time.windows.com,DIRECT
|
||||
- DOMAIN-SUFFIX,likezgq.top,DIRECT
|
||||
- DOMAIN-KEYWORD,ra2web.com,DIRECT
|
||||
@@ -689,7 +738,9 @@ rules:
|
||||
- PROCESS-NAME,tailscaled,DIRECT
|
||||
- PROCESS-NAME,Tailscale,DIRECT
|
||||
- RULE-SET,github,EXIT_SELF_HOSTED
|
||||
- AND,((NETWORK,udp),(RULE-SET,github)),REJECT
|
||||
- RULE-SET,tiktok,EXIT_AMERICA
|
||||
- AND,((NETWORK,udp),(RULE-SET,tiktok)),REJECT
|
||||
- RULE-SET,applications,DIRECT
|
||||
- RULE-SET,private,DIRECT
|
||||
- RULE-SET,reject,REJECT
|
||||
@@ -698,7 +749,9 @@ rules:
|
||||
# - RULE-SET,google,DIRECT
|
||||
- RULE-SET,direct,DIRECT
|
||||
- RULE-SET,proxy,POLICY_DEFAULT
|
||||
- AND,((NETWORK,udp),(RULE-SET,proxy)),REJECT
|
||||
- RULE-SET,telegramcidr,POLICY_DEFAULT,no-resolve
|
||||
- AND,((NETWORK,udp),(RULE-SET,telegramcidr,no-resolve)),REJECT
|
||||
- IP-CIDR,104.27.80.65/32,DIRECT,no-resolve
|
||||
- IP-CIDR,104.16.29.191/32,DIRECT,no-resolve
|
||||
- IP-CIDR,141.101.115.236/32,DIRECT,no-resolve
|
||||
@@ -709,6 +762,9 @@ rules:
|
||||
- RULE-SET,cncidr,DIRECT,no-resolve
|
||||
- GEOIP,LAN,DIRECT,no-resolve
|
||||
- GEOIP,CN,DIRECT
|
||||
# Default UDP never falls through to the core's implicit DIRECT exit.
|
||||
- NETWORK,udp,EXIT_SELF_HOSTED_STABLE
|
||||
- NETWORK,udp,REJECT
|
||||
- MATCH,POLICY_DEFAULT
|
||||
find-process-mode: off
|
||||
ipv6: true
|
||||
@@ -745,11 +801,25 @@ dns:
|
||||
default-nameserver:
|
||||
- 223.5.5.5
|
||||
- 223.6.6.6
|
||||
# Independent node bootstrap; never use these as fallback for ordinary queries.
|
||||
proxy-server-nameserver:
|
||||
- https://223.5.5.5/dns-query
|
||||
- https://223.6.6.6/dns-query
|
||||
- https://223.5.5.5/dns-query#DIRECT
|
||||
- https://223.6.6.6/dns-query#DIRECT
|
||||
# Local split DNS and known domestic domains stay on the LAN resolver.
|
||||
nameserver-policy:
|
||||
'geosite:cn': 192.168.11.100
|
||||
'+.lan': 192.168.11.100
|
||||
'+.local': 192.168.11.100
|
||||
'+.home.arpa': 192.168.11.100
|
||||
'+.in-addr.arpa': 192.168.11.100
|
||||
'+.ip6.arpa': 192.168.11.100
|
||||
'+.likezgq.top': 192.168.11.100
|
||||
'+.likezgq.pub': 192.168.11.100
|
||||
'+.home.pub': 192.168.11.100
|
||||
# Unknown domains also use the proxy. Do not add domestic parallel/fallback DNS.
|
||||
nameserver:
|
||||
- 192.168.11.100
|
||||
- https://1.1.1.1/dns-query#EXIT_SELF_HOSTED_STABLE
|
||||
- https://8.8.8.8/dns-query#EXIT_SELF_HOSTED_STABLE
|
||||
profile:
|
||||
store-selected: true
|
||||
store-fake-ip: true
|
||||
|
||||
Reference in New Issue
Block a user