feat: add telegram rules
This commit is contained in:
@@ -30,9 +30,11 @@ http-api-web-dashboard = true
|
||||
# --- COMPATIBILITY / 兼容性 ---
|
||||
compatibility-mode = 1
|
||||
# --- NETWORK / 网络 ---
|
||||
skip-proxy = localhost, *.local, captive.apple.com, guzzoni.apple.com, 0.0.0.0/8, 10.0.0.0/8, 17.0.0.0/8, 100.64.0.0/10, 127.0.0.0/8, 169.254.0.0/16, 172.16.0.0/12, 192.0.0.0/24, 192.0.2.0/24, 192.168.0.0/16, 192.88.99.0/24, 198.18.0.0/15, 198.51.100.0/24, 203.0.113.0/24, 224.0.0.0/4, 240.0.0.0/4, 255.255.255.255/32
|
||||
skip-proxy = localhost, *.local, captive.apple.com, guzzoni.apple.com, 0.0.0.0/8, 10.0.0.0/8, 17.0.0.0/8, 100.64.0.0/10, 127.0.0.0/8, 169.254.0.0/16, 172.16.0.0/12, 192.0.0.0/24, 192.0.2.0/24, 192.168.0.0/16, 192.88.99.0/24, 198.18.0.0/15, 198.51.100.0/24, 203.0.113.0/24, 224.0.0.0/4, 240.0.0.0/4, 255.255.255.255/32, fd7a:115c:a1e0::/48
|
||||
exclude-simple-hostnames = true
|
||||
read-etc-hosts = true
|
||||
# Tailscale: keep its own routes; a /10 exclusion can override them on macOS.
|
||||
# Configure tailnet-specific MagicDNS mappings as documented in docs/SURGE-TAILSCALE.md.
|
||||
# --- DNS / 域名系统 ---
|
||||
use-local-host-item-for-proxy = true
|
||||
encrypted-dns-follow-outbound-mode = false
|
||||
@@ -111,6 +113,13 @@ Speedtest = select, Mainland, Automatic, AllServer, no-alert=0, hidden=0, includ
|
||||
|
||||
|
||||
[Rule]
|
||||
# Tailscale transport must precede STUN blocking (Surge Mac only).
|
||||
PROCESS-NAME,/Applications/Tailscale.app/,DIRECT
|
||||
PROCESS-NAME,io.tailscale.ipn.macsys.network-extension,DIRECT
|
||||
PROCESS-NAME,IPNExtension,DIRECT
|
||||
PROCESS-NAME,tailscaled,DIRECT
|
||||
IP-CIDR,100.64.0.0/10,DIRECT,no-resolve
|
||||
IP-CIDR6,fd7a:115c:a1e0::/48,DIRECT,no-resolve
|
||||
# 阻断 STUN,避免未匹配请求落到直连兜底
|
||||
PROTOCOL,STUN,REJECT
|
||||
|
||||
|
||||
Reference in New Issue
Block a user