- HGrover2026-09-12
想问一下各位佬,这个yaml配置头里面的dns fakeip之类的应该怎么设置能做到直连代理互不影响,并且dns不泄漏的,我总是改来改去但是都感觉弄不到想要的结果,目前这个配置头不能使用ssh搜索局域网内的电脑名称,类似于:"C:\Users\HGrover>ssh [[email protected]](https://feedbbs.com/cdn-cgi/l/email-protection)
Connection closed by 198.18.9.6 port 22"这样子.请教一个分流完善的fakeip和dns配置头示例.
port: 7890
socks-port: 7891
mixed-port: 7892
allow-lan: true
find-process-mode: always
mode: rule
log-level: debug
ipv6: false
unified-delay: true
tcp-concurrent: true
profile:
store-selected: true
store-fake-ip: true
geodata-mode: true
geox-url:
geoip: “https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/geoip.dat”
geosite: “https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/geosite.dat”
mmdb: “https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/country.mmdb”
sniffer:
enable: true
parse-pure-ip: true
override-destination: true
sniff:
HTTP:
ports:
- 80
- 8080-8880
TLS:
ports:
- 443
- 8443
QUIC:
ports:
- 443
- 8443
skip-domain:
- ‘Mijia Cloud’
- ‘dlg.io.mi.com’
- ‘+.apple.com’
tun:
enable: true
stack: mixed
dns-hijack:
- any:53
- tcp://any:53
auto-route: true
auto-detect-interface: true
device: mihomo
strict-route: false
endpoint-independent-nat: true
dns:
enable: true
listen: 0.0.0.0:1053
ipv6: false
enhanced-mode: fake-ip
fake-ip-range: 198.18.0.0/15
default-nameserver:
- 223.5.5.5
- 119.29.29.29
nameserver:
- ‘https://1.1.1.1/dns-query#RULES’
- ‘https://8.8.8.8/dns-query#RULES’
nameserver-policy:
‘geosite:private’:
- 223.5.5.5
- 119.29.29.29
direct-nameserver:
- 223.5.5.5
- 119.29.29.29
direct-nameserver-follow-policy: true
proxy-server-nameserver:
- 223.5.5.5
- 119.29.29.29
主楼 - bakersean2026-09-13
dns: enable: true ipv6: false enhanced-mode: fake-ip fake-ip-range: 198.18.0.0/15 fake-ip-filter-mode: blacklist fake-ip-filter: - "+.lan" - "+.local" - "+.home.arpa" - "localhost" ```可以尝试一下类似的配置吧。 主要就是配置一下 fake-ip 的黑名单。 把本地的添加到黑名单里面。 具体的可以问一下 ai 吧。