能否在脚本中加入防DNS泄露功能的相关的配置

[shengdr92]

能否在脚本中加入防DNS泄露功能的相关的配置

[ZipZhu]

防DNS泄露可以通过在“工具-进阶设置-DNS”里面进行充分设置后开启“覆写DNS”来实现，因此我并未将这部分内容写进脚本。
我最近发现“追加规则”和“脚本”似乎无法同时生效，暂未明确是软件设计导致还是脚本写的有问题，计划有时间了解决一下这个问题。
对于一些个性化使用场景的规则配置，最初我是在“附加规则”中添加的，后来发现附加规则与脚本似乎无法同时生效，所以目前我的方案是将这些脚本规则写进了脚本。
但我并不希望因为这些个性化的使用场景让脚本变得冗长，因此在发布的脚本中仅保留了由 ACL4SSR 维护的少量常用规则，个性化的分流规则可以自行配置。
或许我应该在脚本中加入防DNS泄露的相关配置？但这样会让脚本看起来很冗长……

[shengdr92]

@ZipZhu
拜读了这篇帖子有了启发：https://www.aloxaf.com/2025/04/how_to_use_geosite/

可以参考下我自己琢磨的配置：
资源的geosite需要改成：https://github.com/v2fly/domain-list-community/releases/latest/download/dlc.dat

function main(config) { 

config["dns"] = {
  enable: true,
  ipv6: false,
  "enhanced-mode": "fake-ip",
  "fake-ip-range": "198.18.0.1/16",
  "fake-ip-filter": [
    "geosite:private",
    "geosite:connectivity-check"
  ],
  "default-nameserver": ["223.5.5.5", "119.29.29.29"],
  "use-hosts": false,
  "use-system-hosts": false,
  nameserver: [
    "https://8.8.8.8/dns-query#节点选择&ecs=120.76.0.0/14&ecs-override=true"
  ],
  "proxy-server-nameserver": [
    "https://223.5.5.5/dns-query",
    "https://223.6.6.6/dns-query"
  ],
  "direct-nameserver": [
    "system"
  ],
  "nameserver-policy":{
    "geosite:geolocation-!cn@cn,private,tld-cn": "system",
    "geosite:geolocation-!cn,geolocation-cn@!cn": 
    [
    "https://8.8.8.8/dns-query#节点选择&ecs=120.76.0.0/14&ecs-override=true",
    ],
    "geosite:geolocation-cn": "system"
  },
  "respect-rules": true
};


  const ICON_BASE = "https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/";
  const RULE_BASE = "https://cdn.jsdelivr.net/gh/ACL4SSR/ACL4SSR@master/Clash/";

  const ratioRegex = /(?:\[(\d+(?:\.\d+)?)\s*(?:x|X|×)\]|(\d+(?:\.\d+)?)\s*(?:x|X|×|倍)|(?:x|X|×|倍)\s*(\d+(?:\.\d+)?))/i;
  const blackListRegex = /(?<!集)群|邀请|返利|官方|网址|订阅|购买|续费|剩余|到期|过期|流量|备用|邮箱|客服|联系|工单|倒卖|防止|梯子|tg|发布|重置/i;

  const originalProxies = config.proxies || [];

  const filteredProxies = originalProxies.filter(p => {
    if (!p?.name || blackListRegex.test(p.name)) return false;
    const match = p.name.match(ratioRegex);
    return !(match && parseFloat(match[1] || match[2] || match[3]) > 5.0);
  });

  if (!filteredProxies.length && !originalProxies.length) return config;

  const proxiesWithNorm = filteredProxies.map(p => ({
    ...p,
    __normName: p.name.trim().replace(/\s+/g, '').replace(/[【】[\]（）()]/g, '').replace(/🇺🇸/g, 'US').replace(/🇯🇵/g, 'JP').replace(/🇸🇬/g, 'SG').replace(/🇭🇰/g, 'HK').replace(/🇹🇼/g, 'TW')
  }));

  const REGIONS = [
    { name: "台湾节点", pattern: "台湾|台|TW|TWN|Taiwan|台北|Taipei|TPE|新北|NewTaipei", icon: "Taiwan.png" },
    { name: "香港节点", pattern: "香港|港|HK|HKG|HongKong|Hong Kong", icon: "Hong_Kong.png" },
    { name: "狮城节点", pattern: "新加坡|狮城|SG|SGP|Singapore|SIN", icon: "Singapore.png" },
    { name: "日本节点", pattern: "日本|日|JP|JPN|Japan|东京|Tokyo|TYO|NRT|HND|大阪|Osaka|KIX", icon: "Japan.png" },
    { name: "美国节点", pattern: "美国|美|US|USA|UnitedStates|United States|纽约|NewYork|NYC|JFK|洛杉矶|LosAngeles|LAX|旧金山|SanFrancisco|SFO|圣何塞|SanJose|SJC|西雅图|Seattle|SEA|芝加哥|Chicago|ORD|达拉斯|Dallas|DFW|硅谷|SiliconValley", icon: "United_States.png" }
  ];

  const activeRegions = REGIONS.map(region => {
    const regex = new RegExp(region.pattern.split('|').map(k => k.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')).join('|'), 'i');
    return { ...region, proxies: proxiesWithNorm.filter(p => regex.test(p.__normName)).map(p => p.name) };
  }).filter(r => r.proxies.length > 0);

  const regionNames = activeRegions.map(r => r.name);

  const proxyGroups = [
    { name: "节点选择", icon: `${ICON_BASE}Proxy.png`, type: "select", proxies: ["手动切换", ...regionNames] },
    { name: "手动切换", icon: `${ICON_BASE}Available.png`, "include-all": true, type: "select" },
    ...activeRegions.map(r => ({ name: r.name, icon: `${ICON_BASE}${r.icon}`, type: "url-test", proxies: r.proxies, interval: 3600, tolerance: 50 })),
    { name: "GLOBAL", icon: `${ICON_BASE}Global.png`, type: "select", proxies: ["节点选择", "手动切换", ...regionNames, "DIRECT"] }
  ];
  config["proxy-groups"] = proxyGroups;

  config["rule-providers"] = {
    LocalAreaNetwork: { url: `${RULE_BASE}LocalAreaNetwork.list`, path: "./ruleset/LocalAreaNetwork.list", behavior: "classical", interval: 86400, format: "text", type: "http" },
    UnBan: { url: `${RULE_BASE}UnBan.list`, path: "./ruleset/UnBan.list", behavior: "classical", interval: 86400, format: "text", type: "http" },
    BanAD: { url: `${RULE_BASE}BanAD.list`, path: "./ruleset/BanAD.list", behavior: "classical", interval: 86400, format: "text", type: "http" },
    BanProgramAD: { url: `${RULE_BASE}BanProgramAD.list`, path: "./ruleset/BanProgramAD.list", behavior: "classical", interval: 86400, format: "text", type: "http" },
    ProxyGFWlist: { url: `${RULE_BASE}ProxyGFWlist.list`, path: "./ruleset/ProxyGFWlist.list", behavior: "classical", interval: 86400, format: "text", type: "http" },
    ChinaDomain: { url: `${RULE_BASE}ChinaDomain.list`, path: "./ruleset/ChinaDomain.list", behavior: "classical", interval: 86400, format: "text", type: "http" }
  };

  const validTargets = new Set(["DIRECT", "REJECT", "REJECT-DROP", "PASS", ...proxyGroups.map(g => g.name), ...originalProxies.map(p => p.name)]);
  
  const customRules = (config.rules || [])
    .filter(rule => !rule.startsWith("MATCH,"))
    .map(rule => {
      let parts = rule.split(',');
      if (parts.length >= 3 && !validTargets.has(parts[2].trim())) parts[2] = "节点选择"; 
      return parts.join(',');
    });

  config["rules"] = [
    "RULE-SET,LocalAreaNetwork,DIRECT",
    "RULE-SET,UnBan,DIRECT",
    "RULE-SET,BanAD,REJECT",
    "RULE-SET,BanProgramAD,REJECT",
    "RULE-SET,ChinaDomain,DIRECT",
    "RULE-SET,ProxyGFWlist,节点选择",
    "GEOSITE,geolocation-!cn@cn,DIRECT",
    "GEOSITE,geolocation-!cn,节点选择",
    "GEOSITE,geolocation-cn@!cn,节点选择",
    "GEOSITE,geolocation-cn,DIRECT",
    "GEOSITE,tld-cn,DIRECT",   
    "GEOIP,CN,DIRECT", 
    "MATCH,节点选择"
  ];

  config.proxies = originalProxies;
  return config;
}

[ZipZhu]

@ZipZhu 拜读了这篇帖子有了启发：https://www.aloxaf.com/2025/04/how_to_use_geosite/

可以参考下我自己琢磨的配置： 资源的geosite需要改成：https://github.com/v2fly/domain-list-community/releases/latest/download/dlc.dat

function main(config) { 

config["dns"] = {
  enable: true,
  ipv6: false,
  "enhanced-mode": "fake-ip",
  "fake-ip-range": "198.18.0.1/16",
  "fake-ip-filter": [
    "geosite:private",
    "geosite:connectivity-check"
  ],
  "default-nameserver": ["223.5.5.5", "119.29.29.29"],
  "use-hosts": false,
  "use-system-hosts": false,
  nameserver: [
    "https://8.8.8.8/dns-query#节点选择&ecs=120.76.0.0/14&ecs-override=true"
  ],
  "proxy-server-nameserver": [
    "https://223.5.5.5/dns-query",
    "https://223.6.6.6/dns-query"
  ],
  "direct-nameserver": [
    "system"
  ],
  "nameserver-policy":{
    "geosite:geolocation-!cn@cn,private,tld-cn": "system",
    "geosite:geolocation-!cn,geolocation-cn@!cn": 
    [
    "https://8.8.8.8/dns-query#节点选择&ecs=120.76.0.0/14&ecs-override=true",
    ],
    "geosite:geolocation-cn": "system"
  },
  "respect-rules": true
};


  const ICON_BASE = "https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/";
  const RULE_BASE = "https://cdn.jsdelivr.net/gh/ACL4SSR/ACL4SSR@master/Clash/";

  const ratioRegex = /(?:\[(\d+(?:\.\d+)?)\s*(?:x|X|×)\]|(\d+(?:\.\d+)?)\s*(?:x|X|×|倍)|(?:x|X|×|倍)\s*(\d+(?:\.\d+)?))/i;
  const blackListRegex = /(?<!集)群|邀请|返利|官方|网址|订阅|购买|续费|剩余|到期|过期|流量|备用|邮箱|客服|联系|工单|倒卖|防止|梯子|tg|发布|重置/i;

  const originalProxies = config.proxies || [];

  const filteredProxies = originalProxies.filter(p => {
    if (!p?.name || blackListRegex.test(p.name)) return false;
    const match = p.name.match(ratioRegex);
    return !(match && parseFloat(match[1] || match[2] || match[3]) > 5.0);
  });

  if (!filteredProxies.length && !originalProxies.length) return config;

  const proxiesWithNorm = filteredProxies.map(p => ({
    ...p,
    __normName: p.name.trim().replace(/\s+/g, '').replace(/[【】[\]（）()]/g, '').replace(/🇺🇸/g, 'US').replace(/🇯🇵/g, 'JP').replace(/🇸🇬/g, 'SG').replace(/🇭🇰/g, 'HK').replace(/🇹🇼/g, 'TW')
  }));

  const REGIONS = [
    { name: "台湾节点", pattern: "台湾|台|TW|TWN|Taiwan|台北|Taipei|TPE|新北|NewTaipei", icon: "Taiwan.png" },
    { name: "香港节点", pattern: "香港|港|HK|HKG|HongKong|Hong Kong", icon: "Hong_Kong.png" },
    { name: "狮城节点", pattern: "新加坡|狮城|SG|SGP|Singapore|SIN", icon: "Singapore.png" },
    { name: "日本节点", pattern: "日本|日|JP|JPN|Japan|东京|Tokyo|TYO|NRT|HND|大阪|Osaka|KIX", icon: "Japan.png" },
    { name: "美国节点", pattern: "美国|美|US|USA|UnitedStates|United States|纽约|NewYork|NYC|JFK|洛杉矶|LosAngeles|LAX|旧金山|SanFrancisco|SFO|圣何塞|SanJose|SJC|西雅图|Seattle|SEA|芝加哥|Chicago|ORD|达拉斯|Dallas|DFW|硅谷|SiliconValley", icon: "United_States.png" }
  ];

  const activeRegions = REGIONS.map(region => {
    const regex = new RegExp(region.pattern.split('|').map(k => k.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')).join('|'), 'i');
    return { ...region, proxies: proxiesWithNorm.filter(p => regex.test(p.__normName)).map(p => p.name) };
  }).filter(r => r.proxies.length > 0);

  const regionNames = activeRegions.map(r => r.name);

  const proxyGroups = [
    { name: "节点选择", icon: `${ICON_BASE}Proxy.png`, type: "select", proxies: ["手动切换", ...regionNames] },
    { name: "手动切换", icon: `${ICON_BASE}Available.png`, "include-all": true, type: "select" },
    ...activeRegions.map(r => ({ name: r.name, icon: `${ICON_BASE}${r.icon}`, type: "url-test", proxies: r.proxies, interval: 3600, tolerance: 50 })),
    { name: "GLOBAL", icon: `${ICON_BASE}Global.png`, type: "select", proxies: ["节点选择", "手动切换", ...regionNames, "DIRECT"] }
  ];
  config["proxy-groups"] = proxyGroups;

  config["rule-providers"] = {
    LocalAreaNetwork: { url: `${RULE_BASE}LocalAreaNetwork.list`, path: "./ruleset/LocalAreaNetwork.list", behavior: "classical", interval: 86400, format: "text", type: "http" },
    UnBan: { url: `${RULE_BASE}UnBan.list`, path: "./ruleset/UnBan.list", behavior: "classical", interval: 86400, format: "text", type: "http" },
    BanAD: { url: `${RULE_BASE}BanAD.list`, path: "./ruleset/BanAD.list", behavior: "classical", interval: 86400, format: "text", type: "http" },
    BanProgramAD: { url: `${RULE_BASE}BanProgramAD.list`, path: "./ruleset/BanProgramAD.list", behavior: "classical", interval: 86400, format: "text", type: "http" },
    ProxyGFWlist: { url: `${RULE_BASE}ProxyGFWlist.list`, path: "./ruleset/ProxyGFWlist.list", behavior: "classical", interval: 86400, format: "text", type: "http" },
    ChinaDomain: { url: `${RULE_BASE}ChinaDomain.list`, path: "./ruleset/ChinaDomain.list", behavior: "classical", interval: 86400, format: "text", type: "http" }
  };

  const validTargets = new Set(["DIRECT", "REJECT", "REJECT-DROP", "PASS", ...proxyGroups.map(g => g.name), ...originalProxies.map(p => p.name)]);
  
  const customRules = (config.rules || [])
    .filter(rule => !rule.startsWith("MATCH,"))
    .map(rule => {
      let parts = rule.split(',');
      if (parts.length >= 3 && !validTargets.has(parts[2].trim())) parts[2] = "节点选择"; 
      return parts.join(',');
    });

  config["rules"] = [
    "RULE-SET,LocalAreaNetwork,DIRECT",
    "RULE-SET,UnBan,DIRECT",
    "RULE-SET,BanAD,REJECT",
    "RULE-SET,BanProgramAD,REJECT",
    "RULE-SET,ChinaDomain,DIRECT",
    "RULE-SET,ProxyGFWlist,节点选择",
    "GEOSITE,geolocation-!cn@cn,DIRECT",
    "GEOSITE,geolocation-!cn,节点选择",
    "GEOSITE,geolocation-cn@!cn,节点选择",
    "GEOSITE,geolocation-cn,DIRECT",
    "GEOSITE,tld-cn,DIRECT",   
    "GEOIP,CN,DIRECT", 
    "MATCH,节点选择"
  ];

  config.proxies = originalProxies;
  return config;
}

等我出差回来仔细看一下

[shengdr92]

@ZipZhu https://linux.do/t/topic/1755340 有人做了不过有点复杂，可以参考做个精简版本的

[Jordery]

@ZipZhu https://linux.do/t/topic/1755340 有人做了不过有点复杂，可以参考做个精简版本的

https://linux.do/t/topic/1792972
原作者发布精简版了