调整dns设置,确保没有dns泄漏

This commit is contained in:
darkli
2025-12-14 17:35:40 +08:00
parent 85aa83742d
commit a352f2e08b
14 changed files with 397 additions and 291 deletions

70
template/dns-config.yaml Normal file
View File

@@ -0,0 +1,70 @@
dns: # 如订阅配置无包括此项的所有DNS设置OpenClash将自动添加
enable: true # set true to enable dns (default is false) # 此项将被接管为true
ipv6: true # default is false # 此项将被接管
listen: 0.0.0.0:53 # 端口为53时将被接管为7874
enhanced-mode: fake-ip # or redir-host # 此项将被接管
fake-ip-range: 198.18.0.1/16 # if you don't know what it is, don't change it # 此项将被接管
default-nameserver:
# Unicom DNS
- 123.123.123.123
- 123.123.123.124
# - 2408:8000:1010:1::8
# - 2408:8000:1010:2::8
# - 2408:8888::8
# - 2408:8899::8
# Telecom (ShenZhen)
- 202.96.134.133
- 202.96.128.86
- 202.96.128.166
# Ali DNS
- 223.5.5.5
- 223.6.6.6
# Tencent DNS
- 119.29.29.29
# Google DNS
# - 8.8.8.8
# - 8.8.4.4
# - 2001:4860:4860::8888
# - 2001:4860:4860::8844
# Cloudflare
# - 1.1.1.1
# - 1.0.0.1
# - 2606:4700:4700::1111
# - 2606:4700:4700::1001
# OpenDNS
# - 208.67.222.222
# - 208.67.220.220
# - 2620:119:35::35
# - 2620:119:53::53
# Quad9
# - 9.9.9.9
# - 149.112.112.112
# - 2620:fe::fe
# - 2620:fe::9
# 仅用于解析“代理节点域名/订阅里节点的域名”,避免鸡生蛋问题
proxy-server-nameserver:
# Ali DNS
- https://223.5.5.5/dns-query
nameserver:
# Google DNS
# - tls://8.8.8.8:853#📺 Proxy
# - tls://8.8.4.4:853#📺 Proxy
# - tls://dns.google:853#📺 Proxy
- https://dns.google/dns-query#📺 Proxy
# 2. OpenDNS (美国 Cisco作为 Google 连不上时的纯净美国备胎)
# 它的 IP 通常显示为美国,不会显示新加坡
# - tls://208.67.222.222:853
# - https://doh.opendns.com/dns-query
# Cloudflare
# - tls://1.1.1.1:853
# - tls://cloudflare-dns.com:853
- https://cloudflare-dns.com/dns-query
# Quad9
# - https://dns.quad9.net/dns-query
# - tls://dns.quad9.net:853
nameserver-policy:
"geosite:cn, private":
# Ali
- https://223.5.5.5/dns-query
- https://223.6.6.6/dns-query
- https://dns.alidns.com/dns-query