调整dns设置，确保没有dns泄漏

com/clash-config-sub_dx.yaml

@@ -53,29 +53,42 @@ dns: # 如订阅配置无包括此项的所有DNS设置，OpenClash将自动添
   enhanced-mode: fake-ip # or redir-host # 此项将被接管
   fake-ip-range: 198.18.0.1/16 # if you don't know what it is, don't change it # 此项将被接管
   default-nameserver:
-    # - 127.0.0.1
-    - 8.8.8.8
-    # - 1.1.1.1
-    # - 114.114.114.114
+    # Unicom DNS
+    - 123.123.123.123
+    - 123.123.123.124
+    - 2408:8000:1010:1::8
+    - 2408:8000:1010:2::8
+    - 2408:8888::8
+    - 2408:8899::8
+    # Telecom (ShenZhen)
+    - 202.96.134.133
+    - 202.96.128.86
+    - 202.96.128.166
+    # Ali DNS
+    - 223.5.5.5
+    - 223.6.6.6
+    # Tencent DNS
+    - 119.29.29.29
+    # Google DNS
+    # - 8.8.8.8
+    # - 8.8.4.4
+    # - 2001:4860:4860::8888
+    # - 2001:4860:4860::8844
+  # 仅用于解析“代理节点域名/订阅里节点的域名”，避免鸡生蛋问题
+  proxy-server-nameserver:
+    # Ali DNS
+    - https://223.5.5.5/dns-query
   nameserver:
-    # - 127.0.0.1
-    - 8.8.8.8
-    # - 1.1.1.1
-    # - 114.114.114.114
-  fallback:
-    - https://dns.cloudflare.com/dns-query
-    - tls://dns.google:853
-    - https://1.1.1.1/dns-query
-    - tls://1.1.1.1:853
-    - tls://8.8.8.8:853
-    - "[2001:4860:4860::8888]:53"
-    - "[2001:4860:4860::8844]:53"
-    # - "[2001:da8::666]:53"
-  fallback-filter:
-    geoip: true
-    ipcidr:
-      - 240.0.0.0/4
-      - 0.0.0.0/32
+    # Google DNS
+    - https://dns.google/dns-query#📺 Proxy
+    # Cloudflare
+    - https://cloudflare-dns.com/dns-query
+  nameserver-policy:
+    "geosite:cn, private":
+      # Ali
+      - https://223.5.5.5/dns-query
+      - https://223.6.6.6/dns-query
+      - https://dns.alidns.com/dns-query
 
 proxies:
   # 下面放入你的节点信息（可以多个，认证仔细点！）