修改dns实现方式,大幅度优化使用流程

This commit is contained in:
juewuy
2020-07-23 12:32:13 +08:00
parent bd27372fc8
commit 2a904d3d10
5 changed files with 42 additions and 41 deletions

View File

@@ -14,7 +14,15 @@ start_service() {
procd_set_param command /etc/clash/clash -d /etc/clash
procd_close_instance
#修改iptables规则使流量进入clash
iptables -t nat -N clash
iptables -t nat -N clash
iptables -t nat -A clash -p tcp -j REDIRECT --to-ports 7892
iptables -t nat -A PREROUTING -p tcp -j clash
iptables -t nat -A PREROUTING -p udp --dport 53 -j REDIRECT --to 1053
}
stop_service() {
#重置iptables规则
iptables -t nat -D PREROUTING -p tcp -j clash
iptables -t nat -F clash
iptables -t nat -X clash
iptables -t nat -D PREROUTING -p udp --dport 53 -j REDIRECT --to 1053
}

View File

@@ -18,13 +18,13 @@ external-controller: 0.0.0.0:9999
dns:
enable: true
listen: 0.0.0.0:53 #监听端口0.0.0.0则拦截所有
listen: 0.0.0.0:1053 #监听端口0.0.0.0则拦截所有
fake-ip-range: 198.18.0.1/16 #fake-ip模式下子网段尽量不要改动
enhanced-mode: fake-ip #或者redir-host可能有bug尽量不要改动
nameserver: #国内DNS可配置多条
- tls://dns.rubyfish.cn:853
#- 114.114.114.114
- 127.0.0.1:5335 #内置的dnsmasq
- 127.0.0.1:53 #内置的dnsmasq
fallback: #国外DNS可配置多条
- tcp://1.1.1.1
- tls://dns.google:853
@@ -87,7 +87,7 @@ proxy-groups:
- "v2ray"
- "Trojan"
url: 'http://www.gstatic.com/generate_204'
interval: 999
interval: 100
# 代理节点选择
- name: "PROXY"