Skip to content

Instantly share code, notes, and snippets.

@NanamiNakano
Created March 25, 2025 14:41
Show Gist options
  • Save NanamiNakano/5f756129242dc22ae6db710fbe8c3edc to your computer and use it in GitHub Desktop.
Save NanamiNakano/5f756129242dc22ae6db710fbe8c3edc to your computer and use it in GitHub Desktop.
[General]
loglevel = notify
dns-server = system,119.29.29.29,223.5.5.5,223.6.6.6
skip-proxy = localhost,*.local,captive.apple.com,e.crashlytics.com,sequoia.apple.com,seed-sequoia.siri.apple.com,www.baidu.com,passenger.t3go.cn,yunbusiness.ccb.com,wxh.wo.cn,gate.lagou.com,www.abchina.com.cn,login-service.mobile-bank.psbc.com,mobile-bank.psbc.com,10.0.0.0/8,100.64.0.0/10,127.0.0.1/32,169.254.0.0/16,172.16.0.0/12,192.168.0.0/16,192.168.122.1/32,193.168.0.1/32,224.0.0.0/4,240.0.0.0/4,255.255.255.255/32,::1/128,fc00::/7,fd00::/8,fe80::/10,ff00::/8,2001::/32,2001:db8::/32,2002::/16,::ffff:0:0:0:0/1,::ffff:128:0:0:0/1
# tun-excluded-routes = 192.168.0.0/16,10.0.0.0/8,172.16.0.0/12
# tun-included-routes = 192.168.1.12/32
exclude-simple-hostnames = true
always-real-ip = *.lan,*.direct,cable.auth.com,*.msftconnecttest.com,*.msftncsi.com,network-test.debian.org,detectportal.firefox.com,resolver1.opendns.com,*.srv.nintendo.net,*.stun.playstation.net,xbox.*.microsoft.com,*.xboxlive.com,stun.*,global.turn.twilio.com,global.stun.twilio.com,app.yinxiang.com,injections.adguard.org,local.adguard.org,cable.auth.com,localhost.*.qq.com,localhost.*.weixin.qq.com,*.logon.battlenet.com.cn,*.logon.battle.net,*.blzstatic.cn,music.163.com,*.music.163.com,*.126.net,musicapi.taihe.com,music.taihe.com,songsearch.kugou.com,trackercdn.kugou.com,*.kuwo.cn,api-jooxtt.sanook.com,api.joox.com,joox.com,y.qq.com,*.y.qq.com,streamoc.music.tc.qq.com,mobileoc.music.tc.qq.com,isure.stream.qqmusic.qq.com,dl.stream.qqmusic.qq.com,aqqmusic.tc.qq.com,amobile.music.tc.qq.com,*.xiami.com,*.music.migu.cn,music.migu.cn,proxy.golang.org,*.mcdn.bilivideo.cn,*.cmpassport.com,id6.me,open.e.189.cn,opencloud.wostore.cn,id.mail.wo.cn,mdn.open.wo.cn,hmrz.wo.cn,nishub1.10010.com,enrichgw.10010.com,*.wosms.cn,*.jegotrip.com.cn,*.icitymobile.mobi,*.pingan.com.cn,*.cmbchina.com,*.10099.com.cn,*.microdone.cn,pool.ntp.org,*.pool.ntp.org,ntp.*.com,time.*.com,ntp?.*.com,time?.*.com,time.*.gov,time.*.edu.cn,*.ntp.org.cn,PDC._msDCS.*.*,DC._msDCS.*.*,GC._msDCS.*.*
hijack-dns = 8.8.8.8:53,8.8.4.4:53,1.1.1.1:53,1.0.0.1:53
http-listen = 0.0.0.0:8888
socks5-listen = 0.0.0.0:8889
wifi-access-http-port = 8888
wifi-access-socks5-port = 8889
external-controller-access = [email protected]:6170
internet-test-url = http://wifi.vivo.com.cn/generate_204
proxy-test-url = http://cp.cloudflare.com/generate_204
test-timeout = 3
allow-wifi-access = true
show-error-page-for-reject = true
use-default-policy-if-wifi-not-primary = false
ipv6 = true
[Proxy]
#!include Dler Cloud.conf, Seven.conf, Mullvad.conf
[Proxy Group]
Gamer = select, policy-path="", update-interval=86400
UNDERLYING = select, include-all-proxies=true
๐Ÿ‡ญ๐Ÿ‡ฐ HK Test = smart, include-all-proxies=true, policy-regex-filter=(ๆพณ้—จ|๐Ÿ‡ฒ๐Ÿ‡ด|ๆธฏ|๐Ÿ‡ญ๐Ÿ‡ฐ|HK|(?i)Hong)((?!.*Gamer).)
๐Ÿ‡บ๐Ÿ‡ธ US Test = smart, include-all-proxies=true, policy-regex-filter=(็พŽ|๐Ÿ‡บ๐Ÿ‡ฒ|(?!C)US(?!T)|(?i)States|America)((?!.*Gamer).)
๐Ÿ‡ฏ๐Ÿ‡ต JP Test = smart, include-all-proxies=true, policy-regex-filter=((?!ๅฐผ)ๆ—ฅ(?!ๅˆฉไบš)|๐Ÿ‡ฏ๐Ÿ‡ต|ไธœไบฌ|JP|(?i)Japan)((?!.*Gamer).)
๐Ÿ‡ธ๐Ÿ‡ฌ SG Test = smart, include-all-proxies=true, policy-regex-filter=ๆ–ฐๅŠ ๅก|ๅก|็‹ฎๅŸŽ|๐Ÿ‡ธ๐Ÿ‡ฌ|SG|(?i)Singapore
๐Ÿณ๏ธ Fallback = fallback, "๐Ÿ‡ญ๐Ÿ‡ฐ HK Test", "๐Ÿ‡บ๐Ÿ‡ธ US Test", "๐Ÿ‡ฏ๐Ÿ‡ต JP Test", "๐Ÿ‡ธ๐Ÿ‡ฌ SG Test"
๐Ÿ”ฐ SELECT = select, "๐Ÿณ๏ธ Fallback", "Gamer", include-other-group="๐Ÿณ๏ธ Fallback", include-all-proxies=true
๐Ÿ‡บ๐Ÿ‡ธ US DIRECT = select, "๐Ÿ‡บ๐Ÿ‡ธ US Test", include-other-group="๐Ÿ‡บ๐Ÿ‡ธ US Test"
๐Ÿ“ฒ Telegram = select, "๐Ÿ”ฐ SELECT", DIRECT, include-other-group="๐Ÿ”ฐ SELECT"
๐Ÿ“ฒ WeChat = select, "๐Ÿ”ฐ SELECT", DIRECT, include-other-group="๐Ÿ”ฐ SELECT"
๐ŸŽฎ Steam = select, "๐Ÿ”ฐ SELECT", DIRECT, include-other-group="๐Ÿ”ฐ SELECT"
๐Ÿ“น YouTube = select, "๐Ÿ”ฐ SELECT", DIRECT, include-other-group="๐Ÿ”ฐ SELECT"
๐ŸŽฅ Netflix = select, "๐Ÿ”ฐ SELECT", DIRECT, include-other-group="๐Ÿ”ฐ SELECT"
๐ŸŽฅ Bili = select, "๐Ÿ”ฐ SELECT", DIRECT, include-other-group="๐Ÿ”ฐ SELECT"
๐Ÿ“บ Bahamut = select, "๐Ÿ”ฐ SELECT", DIRECT, include-other-group="๐Ÿ”ฐ SELECT"
๐Ÿ“บ AbemaTV = select, "๐Ÿ”ฐ SELECT", DIRECT, include-other-group="๐Ÿ”ฐ SELECT"
๐ŸŒ Streaming!CN = select, "๐Ÿ”ฐ SELECT", DIRECT, include-other-group="๐Ÿ”ฐ SELECT"
๐Ÿ”ž๏ธ ExHentai = select, "๐Ÿ”ฐ SELECT", DIRECT, include-other-group="๐Ÿ”ฐ SELECT"
๐ŸŽ Apple = select, "๐Ÿ”ฐ SELECT", DIRECT, include-other-group="๐Ÿ”ฐ SELECT"
๐Ÿ”Ž Google = select, "๐Ÿ”ฐ SELECT", DIRECT, include-other-group="๐Ÿ”ฐ SELECT"
GitHub = select, "๐Ÿ”ฐ SELECT", DIRECT, include-other-group="๐Ÿ”ฐ SELECT"
โ“‚๏ธ Microsoft = select, "๐Ÿ”ฐ SELECT", DIRECT, include-other-group="๐Ÿ”ฐ SELECT"
๐Ÿ›‘ BLOCK = select, REJECT, DIRECT, include-all-proxies=true
๐ŸŸ MATCH = select, "๐Ÿ”ฐ SELECT", REJECT, DIRECT, include-other-group="๐Ÿ”ฐ SELECT"
[Rule]
RULE-SET,https://github.com/NanamiNakano/rules/releases/latest/download/Reject.list,"๐Ÿ›‘ BLOCK"
PROCESS-NAME,"Adobe Photoshop*",REJECT #!MACOS-ONLY
PROCESS-NAME,"Screen Studio*",REJECT #!MACOS-ONLY
PROCESS-NAME,/Applications/QQ.app/Contents/MacOS/QQ,DIRECT #!MACOS-ONLY
# DOMAIN,appstorrent.ru,DIRECT
RULE-SET,https://raw.githubusercontent.com/NanamiNakano/rules/master/SteamCN.list,DIRECT
RULE-SET,https://raw.githubusercontent.com/NanamiNakano/rules/master/US.list,"๐Ÿ‡บ๐Ÿ‡ธ US DIRECT"
RULE-SET,https://domain-list-community-converter.pages.dev/surge/google.list,"๐Ÿ”Ž Google"
RULE-SET,https://domain-list-community-converter.pages.dev/surge/github.list,GitHub
RULE-SET,https://github.com/ConnersHua/RuleGo/raw/refs/heads/master/Surge/Ruleset/Extra/Apple/Apple.list,"๐ŸŽ Apple"
RULE-SET,https://github.com/ConnersHua/RuleGo/raw/refs/heads/master/Surge/Ruleset/Extra/Streaming/Video/Netflix.list,"๐ŸŽฅ Netflix"
RULE-SET,https://github.com/ConnersHua/RuleGo/raw/refs/heads/master/Surge/Ruleset/Extra/Streaming/Video/bilibili.list,"๐ŸŽฅ Bili"
RULE-SET,https://github.com/ConnersHua/RuleGo/raw/refs/heads/master/Surge/Ruleset/Extra/Streaming/Video/Bahamut.list,"๐Ÿ“บ Bahamut"
RULE-SET,https://github.com/ConnersHua/RuleGo/raw/refs/heads/master/Surge/Ruleset/Extra/Streaming/Video/YouTube.list,"๐Ÿ“น YouTube"
RULE-SET,https://github.com/ConnersHua/RuleGo/raw/refs/heads/master/Surge/Ruleset/Extra/Streaming/Video/AbemaTV.list,"๐Ÿ“บ AbemaTV"
RULE-SET,https://github.com/ConnersHua/RuleGo/raw/refs/heads/master/Surge/Ruleset/Extra/Telegram.list,"๐Ÿ“ฒ Telegram"
RULE-SET,https://github.com/NanamiNakano/rules/releases/latest/download/WeChat.list,"๐Ÿ“ฒ WeChat"
RULE-SET,https://raw.githubusercontent.com/NanamiNakano/rules/master/Steam.list,"๐ŸŽฎ Steam"
RULE-SET,https://github.com/ConnersHua/RuleGo/raw/refs/heads/master/Surge/Ruleset/Extra/Streaming/!CN.list,"๐ŸŒ Streaming!CN"
RULE-SET,https://raw.githubusercontent.com/NanamiNakano/rules/master/ExHentai.list,"๐Ÿ”ž๏ธ ExHentai"
RULE-SET,https://raw.githubusercontent.com/NanamiNakano/rules/master/MSServices.list,"โ“‚๏ธ Microsoft"
PROCESS-NAME,oss-browser,"๐Ÿ”ฐ SELECT"
PROCESS-NAME,/Applications/TeamViewer.app/Contents/MacOS/TeamViewer,"๐Ÿ”ฐ SELECT" #!MACOS-ONLY
# PROCESS-NAME,prl_naptd,"๐Ÿ”ฐ ่Š‚็‚น้€‰ๆ‹ฉ" #!MACOS-ONLY
RULE-SET,https://raw.githubusercontent.com/NanamiNakano/rules/master/PROXY.list,"๐Ÿ”ฐ SELECT"
RULE-SET,https://github.com/ConnersHua/RuleGo/raw/refs/heads/master/Surge/Ruleset/Proxy.list,"๐Ÿ”ฐ SELECT"
RULE-SET,SYSTEM,DIRECT
RULE-SET,LAN,DIRECT
GEOIP,CN,DIRECT
# Final
FINAL,๐ŸŸ MATCH,dns-failed
[Host]
*.bilivideo.com = server:223.5.5.5
*.hdslb.com = server:223.5.5.5
*.jd.com = server:https://doh.pub/dns-query
*.360buyimg.com = server:https://doh.pub/dns-query
# WireGuard
[WireGuard Mullvad]
#!include Mullvad.conf
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment