GeneralClashConf.yml

#---------------------------------------------------#
# The configuration file needs to be placed in $HOME/.config/clash/config.yml
# Or run config.yml in the directory
#---------------------------------------------------#
# Mixed port HTTP and SOCKS5 use one port
mixed-port: 7890

# HTTP proxy port
# port: 7890

# SOCKS5 proxy port
socks-port: 7891

# redir proxy port for Linux and macOS (uncomment if you want to use this feature)
# run-port: 7892

# Allow LAN connections (can be used to share proxies)
allow-lan: true

# Only applies if allow-lan is set to true
# #"*": bind all IP addresses
# #192.168.122.11: Bind a single IPv4 address
# #"[aaaa::a8aa:ff:fe09:57d8]": Bind a single IPv6 address
bind-address: "*"
ipv6: true

# Rule mode: rule (rule) / global (global proxy) / direct (global direct connection) / script (script)
mode: rule

# Set the log output level (default level: silent, which means no output to avoid program memory overflow due to excessive log content).
# 5 levels: silent / error / warning / info / debug. The higher the level, the larger the log output, and the more inclined to debugging. Please enable it if necessary.
log-level: info


# Clash 的 RESTful API
external-controller: '127.0.0.1:9090'

# You can place static web resources (such as clash-dashboard) in a directory, and clash will serve `RESTful API/ui`
# The parameter should be filled in with the relative path or absolute path of the configuration directory.
# http://127.0.0.1:9090/ui/#/
# external-ui: folder
# yacd panel: https://github.com/haishanh/yacd
# Razord panel: http://clash.razord.top/#/proxies
# external-ui: dashboard

# RESTful API password (optional)
# secret: ""

# Experimental Features
experimental:
  ignore-resolve-fail: true # Ignore DNS resolution failure, the default value is true
  # interface-name: en0 # outbound interface name

# Local SOCKS5 / HTTP(S) service authentication
# authentication:
#  - "user1:pass1"
#  - "user2:pass2"

# Experimental feature hosts, supports wildcards (such as *.clash.dev or even *.foo.*.example.com)
# Static domain names have higher priority than wildcard domain names (foo.example.com takes precedence over *.example.com)
# Note: hosts does not work in fake-ip mode
#hosts:
#   '*.clash.dev': 127.0.0.1
#   'alpha.clash.dev': '::1'
global-client-fingerprint: chrome #3m
# !!! note Optional: chrome, firefox, safari, iOS, android, edge, 360, qq, random, If selected random, a modern browser fingerprint is probabilistically generated based on Cloudflare Radar data.

enable-process: true # 3M

dns:
  enabled: true
  ipv6: true
  listen: 0.0.0.0:53
  # enhanced-mode: redir-host #fake-ip # Mode: redir-host or fake-ip # disabled again by 3M
  fake-ip-range: 198.18.0.1/16 #
  fake-ip-filter: # fake ip whitelist, if you don't know the function of this parameter, please do not modify it
     - '*.and'
     - localhost.ptlogin2.qq.com
  nameserver:
    - 9.9.9.9 # added by 3M
    - 208.67.222.222 # added by 3M
    - 172.67.37.81 # added by 3M
    - tls://8.26.56.26 # added by 3M
    - udp://8.26.56.26 # added by 3M
    - 119.29.29.29
    - 223.5.5.5
    - https://dns.google/dns-query # added by 3M
    - https://dns.cloudflare.com/dns-query # added by 3M

  fallback:
    - 8.8.8.8
    - 8.8.4.4
    - 1.1.1.1
    - tls://1.0.0.1:853
    - tls://dns.google:853

#dns:
  #enable: true # Whether to enable dns false
  #ipv6: false
  #listen: 0.0.0.0:53
  #enhanced-mode: redir-host # Mode: redir-host or fake-ip
  #fake-ip-range: 198.18.0.1/16 #
  #fake-ip-filter: # fake ip whitelist, if you don't know the function of this parameter, please do not modify it
     #- '*.and'
     #- localhost.ptlogin2.qq.com
  #nameserver:
     #- 223.5.5.5 # Alibaba DNS
     #- 180.76.76.76 # Baidu DNS
     #- 119.29.29.29 # Tencent DNS
     #- 117.50.11.11 # ONE DNS interception version malicious website interception, advertising filtering
     #- 117.50.10.10 # ONE DNS pure version directly returns its real response result
     #- 114.114.114.114 # 114DNS
     #- https://dns.alidns.com/dns-query # Ali DoH DNS
     #- https://doh.360.cn/dns-query # 360 DoH DNS
  #fallback:
     #- 8.8.8.8 # Google DNS
     #- 1.1.1.1 # Cloudflare DNS
     #- tls://dns.rubyfish.cn:853
     #- tls://1.0.0.1:853
     #- tls://dns.google:853
     #- https://dns.rubyfish.cn/dns-query
     #- https://cloudflare-dns.com/dns-query
     #- https://dns.google/dns-query
  #fallback-filter:
     #geoip: true # default
     #ipcidr: #IP addresses in this network segment will be considered polluted IPs
       #- 240.0.0.0/4

# 1. Clash DNS request logic:
# (1) When accessing a domain name, nameserver concurrently requests all servers in the fallback list to obtain the IP address corresponding to the domain name.
# (2) clash will select the fastest resolution result in the nameserver list.
# (3) If the IP address in the resolution result belongs to a foreign country, then clash will select the fastest resolution result in the fallback list.
#
# Therefore, I placed pollution-free, fast-resolution domestic DNS servers in both nameserver and fallback to achieve the fastest resolution speed.
# However, the servers in the fallback list will be used to resolve overseas websites. In order to ensure that the results are absolutely uncontaminated, I only retained two servers that support DoT/DoH.
#
# 2. Notes on clash DNS configuration:
# (1) If you want to ensure that the DNS resolution results are not polluted, please only keep the DNS servers starting with tls:// or https:// in the list, but this is usually not necessary for domestic domain names.
# (2) If you do not care about the possibility of parsing polluted results and prefer speed, please insert the servers in the nameserver list into the fallback list and remove duplicates.
#
# 3. About the choice of DNS over HTTPS (DoH) and DNS over TLS (DoT):
# Both sides have their own opinions on the two technologies, and there will be endless debates, each has its own advantages and disadvantages. Please choose according to your specific needs, but DoT is enabled by default in the configuration file because there is no blockade or regulation in China at present.
# DoH: DNS servers starting with https://. It has better disguise and is almost impossible to be blocked by operators or network management, but the query efficiency and security may be slightly lower.
# DoT: DNS server starting with tls://. It has higher security and query efficiency, but the port may be controlled or blocked.
# To learn more about DoH/DoT related technologies, please refer to the specification document.

# Proxy Group
# Do not include the following 3 in the subscription, otherwise there will be errors
# Will be ignored after profile selection
#proxies:
#  - name: Shadowsocks
#    type: socks5
#    server: 127.0.0.1
#    port: 1080
#proxy-groups:
#  - name: Proxy
#    type: select
#    proxies:
# - Shadowsocks
#rules:
#  - 'MATCH,DIRECT'

# Clash for Windows
# Proxies module latency test settings
cfw-latency-timeout: 3000
cfw-latency-url: http://www.gstatic.com/generate_204

# Mixin
#Supports injecting common property settings into all configuration files
#cfw-profile-mixin:
  #dns:
    #enable: true
    #listen: :53
    #enhanced-mode: fake-ip
    #nameserver:
     #- 223.5.5.5 # Alibaba DNS
     #- 180.76.76.76 # Baidu DNS
     #- 119.29.29.29 # Tencent DNS
     #- 117.50.11.11 # ONE DNS interception version malicious website interception, advertising filtering
     #- 117.50.10.10 # ONE DNS pure version directly returns its real response result
     #- 114.114.114.114 # 114DNS
  #experimental:
    #interface-name: WLAN

#Custom configuration directory
#cfw-profiles-path: 'C:\Users\Administrator\.config\clash\profiles'

# Disconnect
# Identify strategy of breaking connections after switching to a new proxy/profile/mode
# Options for proxy: none, chain(proxy group in connection chains), all
# Options for profile: true, false
# Options for mode: true, false
cfw-conn-break-strategy:
  proxy: none # none/chain/all
  profile: true # true/false
  mode: false # true/false

# Customize status bar icon
#cfw-tray-icon:
#default: .\resources\static\imgs\logo_64.png # Default icon
#system-proxy-on: .\resources\static\imgs\custom.ico # Icon after turning on system proxy

# Custom Fonts
#cfw-font-family: "Noto Sans TC" # Fonts available in the system

# Custom request headers
#cfw-http-headers:
  #token: "123456"
  #cfw-version: "0.9.11"

# Custom node sorting
# Optional parameters:
# default: Define the node order according to the configuration file
# latency: Sort by node latency in ascending order
# alphabet: Arrange by node name alphabetically
# Sort proxies in Proxies module by default/latency/alphabet
cfw-proxies-order: default

# Subprocess starts other applications
# Run child process after CFW started
# Refer: https://docs.cfw.lbyczf.com/contents/childprocess.html
#cfw-child-process:
  # Start the subscription conversion program, port number 7893
  #- command: "subconverter.exe" # run.cmd program name subconverter.exe -cfw >>logs/run.log 2>&1
    #args:
      #- "-cfw" # Run parameter 1
      #- "-f" # Run parameter 2
      #- "pref-acl4ssr.yml" # Run parameter 3
    #options:
      #cwd: subconverter # subprocess working directory
      #detached: true # The child process runs independently of its parent process
      #shell: true # Run command in shell
      #windowsHide: true # Hide the console window of the child process
  # Start NetEase Cloud, port number 3333
  #- command: "unblockneteasemusic.exe" # Start NetEase Cloud Music
    #args:
      #- "-p" # Run parameter 1
      #- "3333" # Run parameter 2
    #options:
      #cwd: unblockNeteaseMusic # subprocess working directory
      #detached: true # The child process runs independently of its parent process
      #shell: true # Run command in shell
      #windowsHide: true # Hide the console window of the child process

# System proxy bypass list cfw-bypass
# System proxy will ignore these domains(or ipnet)
# System proxy skip list - backup, does not work,
# You can interchange the contents of cfw-bypass-bak and cfw-bypass when using

rule-providers:
  reject:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt"
    path: ./ruleset/reject.yaml
    interval: 86400
  iran_other_sites:
    type: http
    format: text
    behavior: domain
    url: "https://github.com/bootmortis/iran-hosted-domains/releases/latest/download/clash_rules_other.txt"
    path: ./ruleset/iran_other.txt
    interval: 432000
  iran_ads:
    type: http
    format: text
    behavior: domain
    url: "https://github.com/bootmortis/iran-hosted-domains/releases/latest/download/clash_rules_ads.txt"
    path: ./ruleset/iran_ads.txt
    interval: 432000

#  ads:
#    type: http
#    format: text
#    behavior: domain
#    url: "https://raw.githubusercontent.com/bigdargon/hostsVN/master/option/domain.txt"
#    path: ./ruleset/ads.txt
#    interval: 86400

#  lancidr:
#    type: http
#    behavior: ipcidr
#    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/lancidr.txt"
#    path: ./ruleset/lancidr.yaml
#    interval: 86400
  BanAD:
    type: http
    format: text
    behavior: classical
    url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/BanAD.list
    path: ./ruleset/BanAD.list
    interval: 432000
  BanProgramAD:
    type: http
    format: text
    behavior: classical
    url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/BanProgramAD.list
    path: ./ruleset/BanProgramAD.list
    interval: 432000
  Adobe:
    type: http
    format: text
    behavior: classical
    url: https://raw.githubusercontent.com/cmliu/ACL4SSR/main/Clash/adobe.list
    path: ./ruleset/adobe.list
    interval: 432000
  GoogleFCM:
    type: http
    format: text
    behavior: classical
    url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/GoogleFCM.list
    path: ./ruleset/GoogleFCM.list
    interval: 432000
  Microsoft-Services:
    type: http
    format: text
    behavior: classical
    url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Microsoft.list
    path: ./ruleset/MS-Services.list
    interval: 432000
  Microsoft-Bing:
    type: http
    format: text
    behavior: classical
    url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Bing.list
    path: ./ruleset/MS-Bing.list
    interval: 432000    
  Microsoft-OneDrive:
    type: http
    format: text
    behavior: classical
    url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/OneDrive.list
    path: ./ruleset/MS-OneDrive.list
  Apple:
    type: http
    format: text
    behavior: classical
    url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Apple.list
    path: ./ruleset/Apple.list
    interval: 432000
  TG:
    type: http
    format: text
    behavior: classical
    url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Telegram.list
    path: ./ruleset/Telegram.list
    interval: 432000    
  OpenAI:
    type: http
    format: text
    behavior: classical
    url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/OpenAi.list
    path: ./ruleset/OpenAi.list
    interval: 432000
  AI:
    type: http
    format: text
    behavior: classical
    url: https://raw.githubusercontent.com/juewuy/ShellClash/master/rules/ai.list
    path: ./ruleset/ai.list
    interval: 432000    
  YT:
    type: http
    format: text
    behavior: classical
    url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/YouTube.list
    path: ./ruleset/YouTube.list
    interval: 432000
  NetFlix:
    type: http
    format: text
    behavior: classical
    url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/Netflix.list
    path: ./ruleset/Netflix.list
    interval: 432000  
  Foreign-Media:
    type: http
    format: text
    behavior: classical
    url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/ProxyMedia.list
    path: ./ruleset/Foreign-Media.list
    interval: 432000
  Proxy Lite:
    type: http
    format: text
    behavior: classical
    url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/ProxyLite.list
    path: ./ruleset/Proxy-Lite.list
    interval: 432000
  CF-CIDR:
    type: http
    format: text
    behavior: classical
    url: https://raw.githubusercontent.com/cmliu/ACL4SSR/main/Clash/CloudflareCIDR.list
    path: ./ruleset/CloudflareCIDR.list
    interval: 432000    
  NetEaseMusic:
    type: http
    format: text
    behavior: classical
    url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/NetEaseMusic.list
    path: ./ruleset/NetEaseMusic.list
    interval: 432000
  Game-Epic:
    type: http
    format: text
    behavior: classical
    url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/Epic.list
    path: ./ruleset/Game-Epic.list
    interval: 432000
  Game-Nintendo:
    type: http
    format: text
    behavior: classical
    url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/Nintendo.list
    path: ./ruleset/Game-Nintendo.list
    interval: 432000
  Game-Origin:
    type: http
    format: text
    behavior: classical
    url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/Origin.list
    path: ./ruleset/Game-Origin.list
    interval: 432000  
  Game-Sony:
    type: http
    format: text
    behavior: classical
    url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/Sony.list
    path: ./ruleset/Game-Sony.list
    interval: 432000



  
  oisd_big:
    type: http
    behavior: classical
    path: "./rule_provider/oisd_big.yaml"
    url: https://raw.githubusercontent.com/hillz2/openclash_adblock/main/oisd_big.yaml
    interval: 28800 # Update rules every 8 hours
    

rules:
  - PROCESS-PATH, /data/data/com.waze, 🐟 Free Fish
  - PROCESS-NAME, com.waze, 🐟 Free Fish
  - RULE-SET,oisd_big,🛑 Global Block
  - RULE-SET, reject, 🛑 Global Block
    #- RULE-SET,oisd_big,REJECT
  
  - RULE-SET,iran_ads, 🛑 Global Block
  
  - RULE-SET,BanAD, 🛑 Global Block
  - RULE-SET,BanProgramAD,🍃 Application Ban
  - RULE-SET,Adobe,🍃 Application Ban
  - RULE-SET,GoogleFCM,📢 Google FCM
  - RULE-SET, Microsoft-Services,Ⓜ️ MS Services
  - RULE-SET, Microsoft-Bing,Ⓜ️ MS Bing
  - RULE-SET, Microsoft-OneDrive,Ⓜ️ MS OneDrive
  - RULE-SET,Apple, 🍎 Apple Services
  - RULE-SET,TG,📲 Telegram
  - RUlE-SET,OpenAI, 🤖 OpenAI
  - RUlE-SET,AI, 🤖 OpenAI
  - RULE-SET,YT,📹 YouTube
  - RULE-SET,NetFlix,🎥 Netflix
  - RULE-SET,Foreign-Media,🌍 Foreign Media
  #- RULE_SET,Proxy Lite,🚀 Node Selection
  - RULE-SET, CF-CIDR,☁️ CloudFlareCDN
  - RULE-SET, NetEaseMusic,🎶 NetEase Music
  - RULE-SET, Game-Epic, 🎮 Game Platforms
  - RULE-SET, Game-Nintendo, 🎮 Game Platforms
  - RULE-SET, Game-Origin, 🎮 Game Platforms
  - RULE-SET, Game-Sony, 🎮 Game Platforms
  

  
  - GEOIP,IR, 🎯 Global Direct
  - DOMAIN-SUFFIX,ir, 🎯 Global Direct
  - RULE-SET,iran_other_sites, 🎯 Global Direct
  - MATCH,🐟 Free Fish