更新 DustinWin_RS_Full_NoAds.yaml

# Conflicts:
#	scripts/starts/start_legacy_wd.sh

.github/workflows/core_auto_update.yml

@@ -2,47 +2,35 @@ name: core_auto_update
 
 on: 
     schedule:
-        - cron: 0 18 * * *
+        - cron: 0 18 */3 * *
     workflow_dispatch:
 
 jobs:
-  check_version:
-    runs-on: ubuntu-latest
-    steps:
-      - name: checkout
-        uses: actions/checkout@v4
-        with:
-          repository: reF1nd/sing-box
-          ref: reF1nd-dev
-          fetch-depth: 0   
-      - name: Check version
-        run: |
-          git remote add sekai https://github.com/SagerNet/sing-box.git
-          git fetch --tags sekai
-          version_new=$(CGO_ENABLED=0 go run ./cmd/internal/read_tag)
-          version_old=$(curl -sSl https://github.com/juewuy/ShellCrash/releases/download/singbox_core_reF1nd/version)    
-          if [ "$version_old" != "$version_new" ];then
-            echo a=$version_old >> $GITHUB_ENV
-            echo b=$version_new >> $GITHUB_ENV
-          else
-            echo "未检查到版本更新，已退出！"
-            exit 1
-          fi
     
-  auto_update_singboxp_with_wg:
-    needs: check_version
-    if: ${{ success() }}
+  auto_update_singboxr_dev:
     permissions: write-all
     uses: juewuy/ShellCrash/.github/workflows/update_singbox_core.yaml@dev
     with:
       tag1: reF1nd/sing-box
       tag2: reF1nd-dev
-      tag3: singbox_core_reF1nd
-      tag5: with_quic,with_dhcp,with_wireguard,with_tailscale,with_shadowsocksr,with_utls,with_clash_api,with_gvisor
+      tag4: singboxr
+      tag5: with_gvisor,with_quic,with_dhcp,with_wireguard,with_utls,with_shadowsocksr,with_acme,with_clash_api,with_tailscale
+      tag6: gz
     secrets: inherit
-
+    
+  auto_update_meta_alpha:
+    permissions: write-all
+    needs: auto_update_singboxr_dev
+    uses: juewuy/ShellCrash/.github/workflows/update_meta_core.yaml@dev
+    with:
+      tag1: MetaCubeX/mihomo
+      tag2: Alpha
+      tag4: meta
+      tag5: with_gvisor
+      tag6: gz
+    secrets: inherit
+    
   cleanup:
-    needs: check_version
     runs-on: ubuntu-latest
     steps:
       - name: cleanup

.github/workflows/core_easy_update.yaml

@@ -0,0 +1,89 @@
+name: core_easy_update
+
+on: 
+  workflow_dispatch:
+    inputs:
+      tag1:
+        description: 'meta or singbox or singboxr'
+        required: true
+        type: string
+
+jobs:
+  get_version:
+    runs-on: ubuntu-latest
+    outputs:
+      version: ${{ steps.get_version.outputs.version }}
+    steps:
+      - id: get_version
+        run: |
+          [ "${{ inputs.tag1 }}" = meta ] && repo="MetaCubeX/mihomo"
+          [ "${{ inputs.tag1 }}" = singbox ] && repo="SagerNet/sing-box"
+          [ "${{ inputs.tag1 }}" = singboxr ] && repo="SagerNet/sing-box"
+          latest_tag=$(curl -s "https://api.github.com/repos/$repo/releases/latest" | jq -r .tag_name)
+          echo "version=$latest_tag" >> $GITHUB_OUTPUT
+          
+  update_meta_upx:
+    if: github.event.inputs.tag1 == 'meta'
+    needs: get_version
+    permissions: write-all
+    uses: juewuy/ShellCrash/.github/workflows/update_meta_core.yaml@dev
+    with:
+      tag1: MetaCubeX/mihomo
+      tag2: ${{ needs.get_version.outputs.version }}
+      tag4: meta
+      tag5: ""
+      tag6: upx
+    secrets: inherit
+
+  update_meta_tar:
+    if: github.event.inputs.tag1 == 'meta'
+    needs: [get_version, update_meta_upx]
+    permissions: write-all
+    uses: juewuy/ShellCrash/.github/workflows/update_meta_core.yaml@dev
+    with:
+      tag1: MetaCubeX/mihomo
+      tag2: ${{ needs.get_version.outputs.version }}
+      tag4: meta
+      tag5: ""
+      tag6: tar.gz
+    secrets: inherit
+    
+  update_singboxr_upx:
+    if: github.event.inputs.tag1 == 'singboxr'
+    needs: get_version
+    permissions: write-all
+    uses: juewuy/ShellCrash/.github/workflows/update_singbox_core.yaml@dev
+    with:
+      tag1: reF1nd/sing-box
+      tag2: ${{ needs.get_version.outputs.version }}
+      tag4: singboxr
+      tag5: with_quic,with_utls,with_clash_api
+      tag6: upx
+    secrets: inherit
+
+  update_singboxr_tar:
+    if: github.event.inputs.tag1 == 'singboxr'
+    needs: [get_version, update_singboxr_upx]
+    permissions: write-all
+    uses: juewuy/ShellCrash/.github/workflows/update_singbox_core.yaml@dev
+    with:
+      tag1: reF1nd/sing-box
+      tag2: ${{ needs.get_version.outputs.version }}
+      tag4: singboxr
+      tag5: with_gvisor,with_quic,with_wireguard,with_utls,with_clash_api,with_tailscale
+      tag6: tar.gz
+    secrets: inherit
+
+  update_singbox_upx:
+    if: github.event.inputs.tag1 == 'singbox'
+    needs: get_version
+    permissions: write-all
+    uses: juewuy/ShellCrash/.github/workflows/update_singbox_core.yaml@dev
+    with:
+      tag1: SagerNet/sing-box
+      tag2: ${{ needs.get_version.outputs.version }}
+      tag4: singbox
+      tag5: with_quic,with_utls,with_clash_api
+      tag6: upx
+    secrets: inherit
+    

.github/workflows/update_meta_core.yaml

@@ -23,6 +23,31 @@ on:
         description: 'build tags'
         required: false
         type: string
+      tag6:
+        description: 'ziptype(tar.gz|upx|gz)'
+        required: true
+        type: string
+        
+  workflow_call:
+    inputs:
+      tag1:
+        required: true
+        type: string
+      tag2:
+        required: true
+        type: string
+      tag3:
+        required: false
+        type: string
+      tag4:
+        required: false
+        type: string
+      tag5:
+        required: false
+        type: string
+      tag6:
+        required: true
+        type: string
         
 jobs:
   go:
@@ -39,8 +64,8 @@ jobs:
     runs-on: ubuntu-latest
     needs: go
     env:
-      REPO: ${{ github.event.inputs.tag1 }}
-      TAGS: ${{ github.event.inputs.tag5 }}
+      REPO: ${{ inputs.tag1 }}
+      TAGS: ${{ inputs.tag5 }}
     outputs:
       version: ${{steps.meta.outputs.version}}
       tags: ${{steps.meta.outputs.tags}}
@@ -49,7 +74,8 @@ jobs:
       - name: get meta version
         id: meta
         run: |
-          version=${{ github.event.inputs.tag2 }}
+          version=${{ inputs.tag2 }}
+          [ "$version" = Alpha ] && version="Alpha-$(date +"%Y%m%d")"
           echo version=$version >> $GITHUB_OUTPUT
           if [ -z "$TAGS" ];then
             echo tags='' >> $GITHUB_OUTPUT
@@ -111,30 +137,14 @@ jobs:
       - name: Checkout meta
         uses: actions/checkout@v5
         with:
-          repository: ${{ github.event.inputs.tag1 }}
-          ref: ${{ github.event.inputs.tag2 }}
+          repository: ${{ inputs.tag1 }}
+          ref: ${{ inputs.tag2 }}
           fetch-depth: 1
           
       - name: Setup Go
         uses: actions/setup-go@v6
         with:
           go-version: ${{needs.go.outputs.version}}
-          
-      - name: Set variables
-        run: |
-            VERSION="${GITHUB_REF_NAME,,}-$(git rev-parse --short HEAD)"
-            VERSION="${VERSION//\//-}"
-            PackageVersion="$(curl -s "https://api.github.com/repos/MetaCubeX/mihomo/releases/latest" | jq -r '.tag_name' | sed 's/v//g' | awk -F '.' '{$NF = $NF + 1; print}' OFS='.').${VERSION/-/.}"
-            if [ -n "${{ github.event.inputs.version }}" ]; then
-              VERSION=${{ github.event.inputs.version }}
-              PackageVersion="${VERSION#v}"
-            fi
-            echo "VERSION=${VERSION}" >> $GITHUB_ENV
-            echo "PackageVersion=${PackageVersion}" >> $GITHUB_ENV
-            echo "BUILDTIME=$(date)" >> $GITHUB_ENV
-            echo "CGO_ENABLED=0" >> $GITHUB_ENV
-            echo "BUILDTAG=-extldflags --static" >> $GITHUB_ENV
-            echo "GOTOOLCHAIN=local" >> $GITHUB_ENV    
         
       - name: Update CA
         run: |
@@ -145,13 +155,14 @@ jobs:
       - name: build core
         id: build
         run: |
-            go env
-            go build -v -tags "${TAGS}" -o meta -trimpath -ldflags "${BUILDTAG} -X 'github.com/metacubex/mihomo/constant.Version=${VERSION}' -X 'github.com/metacubex/mihomo/constant.BuildTime=${BUILDTIME}' -w -s -buildid="
+            go build -v -tags "${TAGS}" -o meta -trimpath -ldflags "-extldflags --static -X 'github.com/metacubex/mihomo/constant.Version=${VERSION}' -X 'github.com/metacubex/mihomo/constant.BuildTime=$(date)' -w -s -buildid="
+      
       - name: Upload file to workspace
         uses: actions/upload-artifact@v4
         with:
           name: ${{ matrix.name }}
           path: meta
+          overwrite: true
           
   push_to_git:
     needs: 
@@ -159,8 +170,9 @@ jobs:
       - meta
     runs-on: ubuntu-latest
     env: 
-      RELEASE: ${{ github.event.inputs.tag3 }}
-      PUSHDIR: ${{ github.event.inputs.tag4 }}
+      RELEASE: ${{ inputs.tag3 }}
+      PUSHDIR: ${{ inputs.tag4 }}
+      ZIPTYPE: ${{ inputs.tag6 }}    
       VERSION: ${{needs.meta.outputs.version}}
     steps:
       - name: Checkout ShellCrash
@@ -174,7 +186,33 @@ jobs:
         with:
           path: ./tmp
           
+      - name: Zip core by upx
+        if: env.ZIPTYPE == 'upx'
+        run: |   
+          for upxv in 3.94 3.96 5.1.0;do
+            wget https://github.com/upx/upx/releases/download/v$upxv/upx-$upxv-amd64_linux.tar.xz
+            tar xf upx-$upxv-amd64_linux.tar.xz
+          done
+          for arch in amd64 armv5 armv7 arm64 386 mips-softfloat mipsle-hardfloat mipsle-softfloat;do
+            [ ! -f ./tmp/linux-${arch}/meta ] && continue
+            mv -f ./tmp/linux-${arch}/meta ./tmp/clash-linux-${arch}.upx
+            chmod +x ./tmp/clash-linux-${arch}.upx
+            case "${arch}" in
+              armv5|mips* )
+                ./upx-3.94-amd64_linux/upx --no-lzma ./tmp/clash-linux-${arch}.upx
+              ;;
+              armv7|386)
+                ./upx-3.96-amd64_linux/upx --no-lzma ./tmp/clash-linux-${arch}.upx
+              ;;
+              *)
+                ./upx-5.1.0-amd64_linux/upx ./tmp/clash-linux-${arch}.upx
+              ;;
+            esac
+          done
+          rm -rf upx-*
+         
       - name: Zip core by tar
+        if: env.ZIPTYPE == 'tar.gz'
         run: |      
           for arch in amd64 armv5 armv7 arm64 386 mips-softfloat mipsle-hardfloat mipsle-softfloat;do
             [ ! -f ./tmp/linux-${arch}/meta ] && continue
@@ -183,15 +221,24 @@ jobs:
             tar --no-same-owner -zcvf ./tmp/clash-linux-${arch}.tar.gz -C ./tmp CrashCore
           done
           
+      - name: Zip core by gz
+        if: env.ZIPTYPE == 'gz'
+        run: |        
+          for arch in amd64 armv5 armv7 arm64 386 mips-softfloat mipsle-hardfloat mipsle-softfloat;do
+            [ ! -f ./tmp/linux-${arch}/meta ] && continue
+            mv -f ./tmp/linux-${arch}/meta ./tmp/clash-linux-${arch}
+            chmod +x ./tmp/clash-linux-${arch}
+            gzip ./tmp/clash-linux-${arch}
+          done
+                    
       - name: Commit and push
         if: ${{ env.PUSHDIR != '' }}
         run: |
-          crashcore='meta'
+          [ "${{ inputs.tag1 }}" = MetaCubeX/mihomo ] && crashcore='meta'
           mkdir -p ./bin/${crashcore}
-          rm -fr ./bin/${crashcore}/*
-          mv -f ./tmp/clash-linux-*.tar.gz ./bin/${crashcore}/
+          mv -f ./tmp/clash-linux-* ./bin/${crashcore}/
           rm -fr ./tmp
-          sed -i "s/${crashcore}_v=.*/${crashcore}_v=${VERSION}/" ./bin/version
+          [ "${{ inputs.tag6 }}" = tar.gz ] && sed -i "s/${crashcore}_v=.*/${crashcore}_v=${VERSION}/" ./bin/version
           git config --global user.email "github-actions[bot]@users.noreply.github.com" && git config --global user.name "github-actions[bot]"
           git add . && git commit -m "更新${crashcore}内核至${VERSION}" || exit 0
           git push
@@ -206,9 +253,9 @@ jobs:
         if: ${{ env.RELEASE != '' && env.PUSHDIR == '' }}
         uses: softprops/action-gh-release@v1
         with:
-          tag_name: ${{ github.event.inputs.tag3 }}
-          name: ${{ github.event.inputs.tag3 }}
-          body: "The ${{env.VERSION}} version of ${{ github.event.inputs.tag1 }} \n这是${{ github.event.inputs.tag1 }}的${{env.VERSION}}版本内核文件\nhttps://github.com/${{ github.event.inputs.tag1 }}/releases \nOnly support for ShellCrash\n仅适配ShellCrash项目"
+          tag_name: ${{ inputs.tag3 }}
+          name: ${{ inputs.tag3 }}
+          body: "The ${{env.VERSION}} version of ${{ inputs.tag1 }} \n这是${{ inputs.tag1 }}的${{env.VERSION}}版本内核文件\nhttps://github.com/${{ inputs.tag1 }}/releases \nOnly support for ShellCrash\n仅适配ShellCrash项目"
           draft: false
           prerelease: true
           files: |
@@ -219,3 +266,6 @@ jobs:
         with:
           retain_days: 1
           keep_minimum_runs: 2      
+
+
+

.github/workflows/update_singbox_core.yaml

@@ -23,6 +23,11 @@ on:
         description: 'build tags'
         required: false
         type: string
+      tag6:
+        description: 'ziptype(tar.gz|upx|gz)'
+        required: true
+        type: string
+        
   workflow_call:
     inputs:
       tag1:
@@ -40,6 +45,9 @@ on:
       tag5:
         required: false
         type: string
+      tag6:
+        required: true
+        type: string
 
 jobs:
   go:
@@ -80,6 +88,7 @@ jobs:
           git fetch --tags sekai
           version=$(CGO_ENABLED=0 go run ./cmd/internal/read_tag)
           [ -z "$version" ] &&  version=${{ inputs.tag2 }}
+          version=$(echo ${version%-*})
           echo version=$version >> $GITHUB_OUTPUT
           if [ -z "$TAGS" ];then
             if [ "$REPO" = 'SagerNet/sing-box' ];then
@@ -117,11 +126,11 @@ jobs:
             goos: linux
             goarch: mips
             gomips: softfloat
-          - name: linux-mipsel-softfloat
+          - name: linux-mipsle-softfloat
             goos: linux
             goarch: mipsle
             gomips: softfloat
-          - name: linux-mipsel-hardfloat
+          - name: linux-mipsle-hardfloat
             goos: linux
             goarch: mipsle
             gomips: hardfloat   
@@ -171,6 +180,7 @@ jobs:
         with:
           name: ${{ matrix.name }}
           path: sing-box
+          overwrite: true
           
   push_to_git:
     needs: 
@@ -180,6 +190,7 @@ jobs:
     env: 
       RELEASE: ${{ inputs.tag3 }}
       PUSHDIR: ${{ inputs.tag4 }}
+      ZIPTYPE: ${{ inputs.tag6 }}
       VERSION: ${{needs.sing-box.outputs.version}}
     steps:
       - name: Checkout ShellCrash
@@ -194,18 +205,51 @@ jobs:
         with:
           path: ./tmp
           
+      - name: Zip core by upx
+        if: env.ZIPTYPE == 'upx'
+        run: |    
+          for upxv in 3.94 3.96 5.1.0;do
+            wget https://github.com/upx/upx/releases/download/v$upxv/upx-$upxv-amd64_linux.tar.xz
+            tar xf upx-$upxv-amd64_linux.tar.xz
+          done
+          for arch in amd64 armv5 armv7 arm64 386 mips-softfloat mipsle-hardfloat mipsle-softfloat;do
+            [ ! -f ./tmp/linux-${arch}/sing-box ] && continue
+            mv -f ./tmp/linux-${arch}/sing-box ./tmp/singbox-linux-${arch}.upx
+            chmod +x ./tmp/singbox-linux-${arch}.upx
+            case "${arch}" in
+              armv5|mips* )
+                ./upx-3.94-amd64_linux/upx --no-lzma ./tmp/singbox-linux-${arch}.upx
+              ;;
+              armv7|386)
+                ./upx-3.96-amd64_linux/upx --no-lzma ./tmp/singbox-linux-${arch}.upx
+              ;;
+              *)
+                ./upx-5.1.0-amd64_linux/upx ./tmp/singbox-linux-${arch}.upx
+              ;;
+            esac
+          done
+          rm -rf upx-*
+         
       - name: Zip core by tar
-        run: |      
-          for arch in amd64 armv5 armv7 arm64 386 mips-softfloat mipsel-hardfloat mipsel-softfloat;do
+        if: env.ZIPTYPE == 'tar.gz'
+        run: |        
+          for arch in amd64 armv5 armv7 arm64 386 mips-softfloat mipsle-hardfloat mipsle-softfloat;do
             [ ! -f ./tmp/linux-${arch}/sing-box ] && continue
             mv -f ./tmp/linux-${arch}/sing-box ./tmp/CrashCore
             chmod +x ./tmp/CrashCore
             tar --no-same-owner -zcvf ./tmp/singbox-linux-${arch}.tar.gz -C ./tmp CrashCore
           done
-          mv -f ./tmp/singbox-linux-mipsel-hardfloat.tar.gz ./tmp/singbox-linux-mipsle-hardfloat.tar.gz
-          mv -f ./tmp/singbox-linux-mipsel-softfloat.tar.gz ./tmp/singbox-linux-mipsle-softfloat.tar.gz
-          echo ${VERSION} > ./tmp/version
-
+          
+      - name: Zip core by gz
+        if: env.ZIPTYPE == 'gz'
+        run: |        
+          for arch in amd64 armv5 armv7 arm64 386 mips-softfloat mipsle-hardfloat mipsle-softfloat;do
+            [ ! -f ./tmp/linux-${arch}/sing-box ] && continue
+            mv -f ./tmp/linux-${arch}/sing-box ./tmp/singbox-linux-${arch}
+            chmod +x ./tmp/singbox-linux-${arch}
+            gzip ./tmp/singbox-linux-${arch}
+          done
+          
       - name: Commit and push
         if: ${{ env.PUSHDIR != '' }}
         run: |
@@ -213,10 +257,9 @@ jobs:
           [ "${{ inputs.tag1 }}" = PuerNya/sing-box ] && crashcore='singboxp'
           [ "${{ inputs.tag1 }}" = reF1nd/sing-box ] && crashcore='singboxr'
           mkdir -p ./bin/${crashcore}
-          rm -fr ./bin/${crashcore}/*
-          mv -f ./tmp/singbox-linux-*.tar.gz ./bin/${crashcore}/
+          mv -f ./tmp/singbox-linux-* ./bin/${crashcore}/
           rm -fr ./tmp
-          sed -i "s/${crashcore}_v=.*/${crashcore}_v=${VERSION}/" ./bin/version
+          [ "${{ inputs.tag6 }}" = tar.gz ] && sed -i "s/${crashcore}_v=.*/${crashcore}_v=${VERSION}/" ./bin/version
           git config --global user.email "github-actions[bot]@users.noreply.github.com" && git config --global user.name "github-actions[bot]"
           git add . && git commit -m "更新${crashcore}内核至${VERSION}" || exit 0
           git push

Dockerfile

@@ -57,8 +57,7 @@ RUN apk add --no-cache \
     ca-certificates \
     tzdata \
     nftables \
-    iproute2 \
-    dcron
+    iproute2
 
 RUN ln -sf /usr/share/zoneinfo/${TZ} /etc/localtime && \
     echo "${TZ}" > /etc/timezone

README.md

@@ -1,24 +1,178 @@
-<h1 align="center">
-  <br>ShellCrash<br>
-</h1>
-
-
-  <p align="center">
+<h1 align="center">ShellCrash</h1>
 
+<p align="center">
+  <a target="_blank" href="https://github.com/MetaCubeX/mihomo/releases">
+    <img src="https://img.shields.io/github/release/MetaCubeX/mihomo.svg?style=flat-square&label=Core">
+  </a>
   <a target="_blank" href="https://github.com/juewuy/ShellCrash/releases">
     <img src="https://img.shields.io/github/release/juewuy/ShellCrash.svg?style=flat-square&label=ShellCrash&colorB=green">
   </a>
 </p>
 
-[中文](README_CN.md) | English
+<p align="center">
+  <strong>A powerful script tool for the convenient deployment and management of mihomo/sing-box kernels in Shell environments.</strong>
+</p>
 
-## Function introduction: 
+<p align="center">
+  <a href="README_CN.md">简体中文</a> | English
+</p>
 
-~Convenient use in Shell environment through management script [Crash](https://github.com/Dreamacro/Crash)<br>~Support management of [Crash functions](https://lancellc.gitbook.io/Crash)<br>~Support online import [Crash](https://github.com/Dreamacro/Crash) supports sharing, subscription and configuration links<br>~Support configuration timing tasks, support configuration file timing updates<br>~Support online installation and Use local web panel to manage built-in rules<br>~Support routing mode, native mode and other mode switching<br>~Support online update<br>
+---
 
-## Equipment support:
+## :rocket: Core Features
 
-~Support various router devices based on OpenWrt or secondary custom development using OpenWrt<br>~Support various devices running standard Linux systems (such as Debian/CenOS/Armbian, etc.)<br>~Compatible with Padavan firmware (conservative mode), Pandora firmware<br>~Compatible with various types of devices customized and developed using the Linux kernel<br>——————————<br>~For more device support, please submit an issue or go to the TG group for feedback (the device name and the device core information returned by running uname -a must be provided)<br>
+- **Multi-Kernel Support**: Easily manage and switch between **mihomo** and **sing-box** kernels directly within the Shell environment.
+- **Flexible Configuration Management**: Supports online import of subscription links and configuration files to simplify the setup process.
+- **Automated Tasks**: Configure scheduled tasks for automatic updates of configuration files and rules.
+- **Graphical Dashboard**: Support for online installation and use of local Web Dashboards to intuitively manage built-in rules and traffic.
+- **Multiple Operation Modes**: Supports switching between various traffic forwarding modes, including Router mode and Local mode.
+- **One-Click Maintenance**: Built-in online update functionality to keep the script and features up to date.
+
+## :computer: Device Support
+
+ShellCrash is designed to be compatible with the vast majority of network devices based on the Linux kernel:
+
+* **Router Devices**: Supports various firmwares based on OpenWrt or its derivatives (e.g., Xiaomi, Netgear etc.).
+* **Linux Servers**: Supports devices running standard Linux/GNU distributions (e.g., Debian, CentOS, Armbian, Ubuntu, etc.).
+* **Third-Party Firmware**: Compatible with Padavan (Conservative Mode), Pandora, and ASUS/Merlin firmware.
+* **Other Devices**: Compatible with other devices based on Linux/GNU or Linux/busybox.
+* **Docker**：Compatible with Docker environments (e.g., Synology, PVE, etc.).
+
+> For additional device support, please submit an [Issue](https://github.com/juewuy/ShellCrash/issues) or provide feedback in the [Telegram Group](https://t.me/ShellClash) (please include the device model and the output of the `uname -a` command).
+
+---
+
+## :hammer_and_wrench: Installation Guide
+
+> [!TIP]
+> If you encounter connection failures or SSL-related issues, please try switching to an alternative installation mirror.
+
+### Prerequisites
+1. Ensure the device has **SSH** enabled and **Root privileges** obtained (Linux systems with a GUI can use the terminal directly).
+2. Connect to the device using an SSH tool (such as PuTTY, JuiceSSH, or the system's built-in terminal).
+
+### :penguin: Standard Linux Device Installation
+
+> [!IMPORTANT]
+> Please perform the installation as the root user.
+
+> Install via wget (jsDelivr CDN source)
+```sh
+export url='https://testingcf.jsdelivr.net/gh/juewuy/ShellCrash@dev' \
+  && wget -q --no-check-certificate -O /tmp/install.sh $url/install_en.sh \
+  && bash /tmp/install.sh \
+  && . /etc/profile &> /dev/null
+```
+
+> Or install via curl (Author's private source)
+
+```sh
+export url='https://gh.jwsc.eu.org/dev' && bash -c "$(curl -kfsSl $url/install_en.sh)" && . /etc/profile &> /dev/null
+```
+
+### :satellite: Router Device Installation
+
+**Installation via `curl`:**
+> GitHub Source (Recommended for overseas environments or environments with proxy access)
+```sh
+export url='https://raw.githubusercontent.com/juewuy/ShellCrash/dev' \
+  && sh -c "$(curl -kfsSl $url/install_en.sh)" \
+  && . /etc/profile &> /dev/null
+```
+
+> Or jsDelivr CDN source
+
+```sh
+export url='https://testingcf.jsdelivr.net/gh/juewuy/ShellCrash@dev' \
+  && sh -c "$(curl -kfsSl $url/install_en.sh)" \
+  && . /etc/profile &> /dev/null
+```
+
+> Or Author's private source
+```sh
+export url='https://gh.jwsc.eu.org/dev' && sh -c "$(curl -kfsSl $url/install_en.sh)" && . /etc/profile &> /dev/null
+```
+
+**Installation via `wget`:**
+> GitHub Source (Recommended for overseas environments or environments with proxy access)
+```sh
+export url='https://raw.githubusercontent.com/juewuy/ShellCrash/dev' \
+  && wget -q --no-check-certificate -O /tmp/install.sh $url/install_en.sh \
+  && sh /tmp/install.sh \
+  && . /etc/profile &> /dev/null
+```
+
+> Or jsDelivr CDN source
+```sh
+export url='https://testingcf.jsdelivr.net/gh/juewuy/ShellCrash@dev' \
+  && wget -q --no-check-certificate -O /tmp/install.sh $url/install_en.sh \
+  && sh /tmp/install.sh \
+  && . /etc/profile &> /dev/null
+```
+
+### :pager: Installation for Legacy Devices with Older `wget` Versions
+
+> Author's private HTTP beta source
+```sh
+export url='http://t.jwsc.eu.org' \
+  && wget -q -O /tmp/install.sh $url/install_en.sh \
+  && sh /tmp/install.sh \
+  && . /etc/profile &> /dev/null
+```
 
 
+### :cloud: Virtual Machines
+- **Alpine Linux VM**: It is highly recommended to use an Alpine image for optimal compatibility.
+```sh
+# Install necessary dependencies
+apk add --no-cache wget openrc ca-certificates tzdata nftables iproute2 dcron
+# Execute installation command
+export url='https://testingcf.jsdelivr.net/gh/juewuy/ShellCrash@dev' \
+  && wget -q --no-check-certificate -O /tmp/install.sh $url/install_en.sh \
+  && sh /tmp/install.sh \
+  && . /etc/profile &> /dev/null
+```
 
+ ### :whale: Docker 
+
+ Please visit the official Docker image:
+
+- [ShellCrash on Docker Hub](https://hub.docker.com/r/juewuy/shellcrash)
+
+
+### :package: Local Installation
+
+If online installation is not possible, please follow the guide for local installation:
+
+- [Local ShellCrash Installation Tutorial | Juewuy's Blog](https://juewuy.github.io/bdaz)
+
+---
+
+## :book: Usage Instructions
+
+After installation, enter the following commands in the terminal to launch the management interface:
+
+```shell
+crash        # Launch the interactive script menu
+crash -h     # View the list of command help
+```
+
+### Running Dependencies
+| Component | Necessity | Description |
+| :--- | :--- | :--- |
+| curl / wget | Mandatory | Required for node saving, online installation, and update operations. |
+| iptables / nftables | Critical | Without these, the script can only run in Pure Mode. |
+| crontab | Low | Required for scheduled tasks; otherwise, they will not function. |
+| net-tools | Very Low | Used for automatic port occupancy detection. |
+| ubus / iproute-doc | Very Low | Used for automatically obtaining the local Host address. |
+
+---
+
+## :link: Related Links
+- FAQ: [Juewuy's Blog](https://juewuy.github.io/chang-jian-wen-ti/)
+- Changelog: [Release History](https://github.com/juewuy/ShellCrash/releases)
+- Discussion: [Telegram Group](https://t.me/ShellClash)
+
+## :scroll: License
+
+This project is licensed under the [GNU General Public License v3.0](LICENSE.txt).

README_CN.md

@@ -1,10 +1,7 @@
-<h1 align="center">
-  <br>ShellCrash<br>
-</h1>
+<h1 align="center">ShellCrash</h1>
 
-
-  <p align="center">
-	<a target="_blank" href="https://github.com/MetaCubeX/mihomo/releases">
+<p align="center">
+  <a target="_blank" href="https://github.com/MetaCubeX/mihomo/releases">
     <img src="https://img.shields.io/github/release/MetaCubeX/mihomo.svg?style=flat-square&label=Core">
   </a>
   <a target="_blank" href="https://github.com/juewuy/ShellCrash/releases">
@@ -12,147 +9,183 @@
   </a>
 </p>
 
-中文 | [English](README.md) 
+<p align="center">
+  <strong>一款在 Shell 环境下便捷部署与管理 mihomo/sing-box 内核的脚本工具</strong>
+</p>
 
-功能简介：
---
+<p align="center">
+  简体中文 | <a href="README.md">English</a>
+</p>
 
-~通过管理脚本在Shell环境下便捷使用Mihomo/Singbox内核<br>
-~支持在Shell环境下管理<br>
-~支持在线导入订阅及配置链接<br>
-~支持配置定时任务，支持配置文件定时更新<br>
-~支持在线安装及使用本地网页面板管理内置规则<br>
-~支持路由模式、本机模式等多种模式切换<br>
-~支持在线更新<br>
+---
 
-设备支持：
---
+## :rocket: 核心特性
 
-~支持各种基于OpenWrt或使用OpenWrt二次定制开发的路由器设备<br>
-~支持各种运行标准Linux系统（如Debian/CenOS/Armbian等）的设备<br>
-~兼容Padavan固件（保守模式）、潘多拉固件以及华硕/梅林固件<br>
-~兼容各类使用Linux内核定制开发的各类型设备<br>
+- **多内核支持**：在 Shell 环境下便捷管理及切换 **mihomo** 与 **sing-box** 内核。
+- **灵活配置管理**：支持在线导入订阅连结及配置文件，简化配置流程。
+- **自动化任务**：支持配置定时任务，实现配置文件与规则的自动定时更新。
+- **图形化面板**：支持在线安装并使用本地 Web 面板（Dashboard），直观管理内置规则与流量。
+- **多模式运行**：支持路由模式、本机模式等多种流量转发模式切换。
+- **一键维护**：内置脚本在线更新功能，保持版本与功能的及时更迭。
 
-——————————<br>
-~更多设备支持，请提issue或前往TG群反馈（需提供设备名称及运行uname -a返回的设备核心信息）<br>
+## :computer: 设备支持
 
-## 常见问题：
+ShellCrash 旨在兼容绝大多数基于 Linux 内核的网络设备：
 
-[ShellCrash常见问题 | Juewuy's Blog](https://juewuy.github.io/chang-jian-wen-ti/)
+* **路由器设备**：支持各种基于 OpenWrt 或其二次开发固件（如 小米路由、网件路由等设备）。
+* **Linux 服务器**：支持运行标准 Linux/GNU发行版（如 Debian、CentOS、Armbian、Ubuntu 等）的设备。
+* **第三方固件**：兼容 Padavan（保守模式）、潘多拉固件以及华硕/梅林固件。
+* **其他设备**：兼容各种基于Linux/GNU或者Linux/busybox开发的设备。
+* **Docker**：部分可能不兼容的设备（如群辉、PVE），支持docker环境运行。
 
-## 使用方式：
+> 更多设备支持，请提交 [Issue](https://github.com/juewuy/ShellCrash/issues) 或前往 [Telegram 群组](https://t.me/ShellClash) 反馈（请附上设备型号及 `uname -a` 命令的输出信息）。
 
-~确认设备已经开启SSH并获取root权限（带GUI桌面的Linux设备可使用自带终端安装）<br>
-~使用SSH连接工具（如putty，JuiceSSH，系统自带终端等）路由器或Linux设备的SSH管理界面或终端界面
+---
 
-~之后在SSH界面执行目标设备对应的安装命令，并按照后续提示完成安装<br>
+## :hammer_and_wrench: 安装指南
 
-### 在线安装：<br>
+> [!TIP]
+> 若遇到连接失败或SSL相关问题，请尝试切换至其他安装镜像站。
 
-（**如无法连接或出现SSL连接错误，请尝试更换各种不同的安装源！**）<br>
+### 前置条件
+1. 确保设备已开启 **SSH** 并获得 **Root 权限**（带图形介面的 Linux 系统可直接使用终端）。
+2. 使用 SSH 工具（如 Putty、JuiceSSH、或系统自带终端）连接至设备。
 
-~**标准Linux设备安装：**<br>
+### :penguin: 标准 Linux 设备安装
 
-```shell
-sudo -i #切换到root用户，如果需要密码，请输入密码
-export url='https://testingcf.jsdelivr.net/gh/juewuy/ShellCrash@master' && wget -q --no-check-certificate -O /tmp/install.sh $url/install.sh  && bash /tmp/install.sh && source /etc/profile &> /dev/null
-```
-或者
-```shell
-sudo -i #切换到root用户，如果需要密码，请输入密码
-export url='https://gh.jwsc.eu.org/master' && bash -c "$(curl -kfsSl $url/install.sh)" && source /etc/profile &> /dev/null
+> [!IMPORTANT]
+> 请以 root 用户进行安装。
+
+> 使用 wget 安装（jsDelivr CDN 源）
+```sh
+export url='https://testingcf.jsdelivr.net/gh/juewuy/ShellCrash@master' \
+  && wget -q --no-check-certificate -O /tmp/install.sh $url/install.sh \
+  && bash /tmp/install.sh \
+  && . /etc/profile &> /dev/null
 ```
 
-~**路由设备使用curl安装**：<br>
+> 或使用 curl 安装（作者私人源）
 
-```shell
-#GitHub源(可能需要代理)
-export url='https://raw.githubusercontent.com/juewuy/ShellCrash/master' && sh -c "$(curl -kfsSl $url/install.sh)" && source /etc/profile &> /dev/null
-```
-或者
-```shell
-#jsDelivrCDN源
-export url='https://testingcf.jsdelivr.net/gh/juewuy/ShellCrash@master' && sh -c "$(curl -kfsSl $url/install.sh)" && source /etc/profile &> /dev/null
-```
-或者
-```shell
-#作者私人源
-export url='https://gh.jwsc.eu.org/master' && sh -c "$(curl -kfsSl $url/install.sh)" && source /etc/profile &> /dev/null
+```sh
+export url='https://gh.jwsc.eu.org/master' \
+  && bash -c "$(curl -kfsSl $url/install.sh)" \
+  && . /etc/profile &> /dev/null
 ```
 
-~**路由设备使用wget安装**：<br>
+### :satellite: 路由器设备安装
 
-```Shell
-#GitHub源(可能需要代理)
-export url='https://raw.githubusercontent.com/juewuy/ShellCrash/master' && wget -q --no-check-certificate -O /tmp/install.sh $url/install.sh  && sh /tmp/install.sh && source /etc/profile &> /dev/null
-```
-或者
-```shell
-#jsDelivrCDN源
-export url='https://testingcf.jsdelivr.net/gh/juewuy/ShellCrash@master' && wget -q --no-check-certificate -O /tmp/install.sh $url/install.sh  && sh /tmp/install.sh && source /etc/profile &> /dev/null
+**使用 `curl` 安装：**
+> GitHub 源（推荐海外环境或具备代理环境使用）
+```sh
+export url='https://raw.githubusercontent.com/juewuy/ShellCrash/master' \
+  && sh -c "$(curl -kfsSl $url/install.sh)" \
+  && . /etc/profile &> /dev/null
 ```
 
-~**老旧设备使用低版本wge安装**：<br>
+> 或 jsDelivr CDN 源
 
-```Shell
-#作者私人http内测源
-export url='http://t.jwsc.eu.org' && wget -q -O /tmp/install.sh $url/install.sh  && sh /tmp/install.sh && source /etc/profile &> /dev/null
+```sh
+export url='https://testingcf.jsdelivr.net/gh/juewuy/ShellCrash@master' \
+  && sh -c "$(curl -kfsSl $url/install.sh)" \
+  && . /etc/profile &> /dev/null
 ```
 
-##### ~**虚拟机安装：**<br>
+> 或作者私人源
+```sh
+export url='https://gh.jwsc.eu.org/master' \
+  && sh -c "$(curl -kfsSl $url/install.sh)" \
+  && . /etc/profile &> /dev/null
+```
 
-虚拟机环境强烈建议使用Alpine镜像安装<br>
+**使用 `wget` 安装：**
+> GitHub 源（推荐海外环境或具备代理环境使用）
+```sh
+export url='https://raw.githubusercontent.com/juewuy/ShellCrash/master' \
+  && wget -q --no-check-certificate -O /tmp/install.sh $url/install.sh \
+  && sh /tmp/install.sh \
+  && . /etc/profile &> /dev/null
+```
 
-```shell
-#安装必要依赖
+> 或 jsDelivr CDN 源
+```sh
+export url='https://testingcf.jsdelivr.net/gh/juewuy/ShellCrash@master' \
+  && wget -q --no-check-certificate -O /tmp/install.sh $url/install.sh \
+  && sh /tmp/install.sh \
+  && . /etc/profile &> /dev/null
+```
+
+### :pager: 老旧设备使用低版本 `wget` 安装
+
+> 作者私人 http 内测源
+```sh
+export url='http://t.jwsc.eu.org' \
+  && wget -q -O /tmp/install.sh $url/install.sh \
+  && sh /tmp/install.sh \
+  && . /etc/profile &> /dev/null
+```
+
+
+### :cloud: 虚拟机
+- **Alpine Linux 虚拟机**：强烈建议使用 Alpine 镜像以获得最佳兼容性
+```sh
+# 安装必要依赖
 apk add --no-cache wget openrc ca-certificates tzdata nftables iproute2 dcron
-#执行安装命令
-export url='https://testingcf.jsdelivr.net/gh/juewuy/ShellCrash@master' && wget -q --no-check-certificate -O /tmp/install.sh $url/install.sh  && sh /tmp/install.sh && source /etc/profile &> /dev/null
+
+# 执行安装命令
+export url='https://testingcf.jsdelivr.net/gh/juewuy/ShellCrash@master' \
+  && wget -q --no-check-certificate -O /tmp/install.sh $url/install.sh \
+  && sh /tmp/install.sh \
+  && . /etc/profile &> /dev/null
 ```
 
-##### ~Docker安装：<br>
+ ### :whale: Docker 
 
-请前往[ShellCrash官方Docker镜像](https://hub.docker.com/r/juewuy/shellcrash) 
+ 请访问官方 Docker 镜像：
 
-### **本地安装：**<br>
+- [ShellCrash on Docker Hub](https://hub.docker.com/r/juewuy/shellcrash)
 
-如使用在线安装出现问题，请参考：[本地安装ShellCrash的教程 | Juewuy's Blog](https://juewuy.github.io/bdaz) 使用本地安装！<br>
 
-### 使用脚本：<br>
+### :package: 本地安装
 
-安装完成管理脚本后，执行如下命令使用~
+若无法进行在线安装，请参照以下指南执行本地安装：
 
-```Shell
-crash 		#进入对话
-crash -h 	#帮助列表
-```
+- [本地安装ShellCrash教程 | Juewuy's Blog](https://juewuy.github.io/bdaz)
 
-#### **运行时的额外依赖**：<br>
+---
 
-> 大部分的设备/系统都已经预装了以下的大部分依赖，使用时如无影响可以无视之
+## :book: 使用说明
+
+安装完成后，在终端输入以下指令即可启动管理界面：
 
 ```shell
-curl/wget		必须		全部缺少时无法在线安装及更新，无法使用节点保存功能
-iptables/nftables	重要		缺少时只能使用纯净模式
-crontab			较低		缺少时无法启用定时任务功能
-net-tools		极低		缺少时无法正常检测端口占用
-ubus/iproute-doc	极低		缺少时无法正常获取本机host地址
+crash        # 启动脚本交互选单
+crash -h     # 查看命令帮助列表
 ```
 
+### 运行依赖说明
+| 依赖组件 | 必要性 | 说明 |
+| :--- | :--- | :--- |
+| curl / wget | 必须 | 缺少时将无法进行节点保存、在线安装及更新操作 |
+| iptables / nftables | 重要 | 缺少时仅能运行于纯淨模式 |
+| crontab | 较低 | 缺少时定时任务功能将失效 |
+| net-tools | 极低 | 缺少时无法自动检测端口占用 |
+| ubus / iproute-doc | 极低 | 缺少时无法自动获取本机 Host 地址 |
 
+---
 
-更新日志：
---
+## :link: 相关链接
+- 常见问题：[Juewuy's Blog](https://juewuy.github.io/chang-jian-wen-ti/)
+- 更新日志：[Release History](https://github.com/juewuy/ShellCrash/releases)
+- 交流反馈：[Telegram 讨论组](https://t.me/ShellClash)
 
-### [点击查看](https://github.com/juewuy/ShellCrash/releases)
+---
 
-交流反馈：
---
-### [TG讨论组](https://t.me/ShellClash) 
+## :scroll: 许可协议
 
-机场推荐：
---
+本项目采用[GNU通用公共许可证第3.0版](LICENSE.txt)授权。
 
-#### [Dler-墙洞，多年稳定运行，功能齐全](https://dler.pro/auth/register?affid=89698)<br>
+---
 
-#### [大米-群友力荐，流媒体解锁，月付推荐](https://1s.bigmeok.me/user#/register?code=2PuWY9I7)<br>
+## :airplane: 机场推荐
+
+- [**大米**](https://1s.bigmeok.me/user#/register?code=2PuWY9I7)，群友力荐，流媒体解锁，月付推荐。

bin/version

@@ -1,4 +1,4 @@
 meta_v=v1.19.17
 singboxr_v=1.13.0-alpha.27
-versionsh=1.9.3release
+versionsh=1.9.5alpha11
 GeoIP_v=20251205

docker/README.md

@@ -15,7 +15,7 @@ docker run -d \
   --name shellcrash \
   -p 7890:7890 \
   -p 9999:9999 \
-  shellcrash:latest
+  juewuy/shellcrash:latest
 ```
 
 ------
@@ -57,9 +57,10 @@ docker run -d \
   --cap-add NET_ADMIN \
   --cap-add NET_RAW \
   --cap-add SYS_ADMIN \
+  --sysctl net.ipv4.ip_forward=1 \
   --device /dev/net/tun:/dev/net/tun \
   --restart unless-stopped \
-  shellcrash:latest
+  juewuy/shellcrash:latest
 ```
 
 ### 3. 配置需要路由的设备
@@ -87,14 +88,10 @@ mkdir -p /root/ShellCrash
 ```shell
 docker run -d \
   ………………
-  -v /root/ShellCrash:/etc/ShellCrash \
+  -v shellcrash_configs:/etc/ShellCrash/configs \
   ………………
 ```
 
-------
-
-
-
 ------
 
 ## Compose Deployment（Compose部署）
@@ -102,8 +99,8 @@ docker run -d \
 ### 1. 创建宿主机目录并进入目录
 
 ```shell
-mkdir -p /root/ShellCrash
-cd /root/ShellCrash
+mkdir -p /tmp/ShellCrash
+cd /tmp/ShellCrash
 ```
 
 ### 2. 下载Compose模版
@@ -126,8 +123,29 @@ docker compose up -d
 
 ------
 
-### Notes
+## Delete（移除容器镜像或删除卷）
 
+### Docker删除容器
+
+```shell
+docker rm -f shellcrash
+```
+
+### Docker删除卷
+
+```shell
+docker volume rm shellcrash_configs
+```
+
+### Compose删除容器&卷
+
+```shell
+docker-compose down -v
+```
+
+## Notes
+
+- 内置公网防火墙功能无法管理宿主机网络，请自行做好宿主机7890/9999端口的网络防护！
 - 旁路由模式需要宿主机支持 `TUN`
 - macvlan 网络下宿主机默认无法直接访问容器 IP
 - 透明代理场景可能需要额外的网络规划

docker/compose.yml

@@ -2,8 +2,8 @@ version: "3.9"
 
 services:
   shellclash:
-    image: shellclash:latest
-    container_name: shellclash
+    image: juewuy/shellcrash:latest
+    container_name: shellcrash
     networks:
       macvlan_lan:
         ipv4_address: 192.168.31.222
@@ -14,11 +14,15 @@ services:
     devices:
       - "/dev/net/tun:/dev/net/tun"
     sysctls:
-      net.ipv4.ip_forward: 1
+      - net.ipv4.ip_forward: 1
+      # - net.ipv6.conf.all.forwarding=1
     volumes:
-      - /etc/ShellCrash:/root/ShellCrash
+      - shellcrash_configs:/etc/ShellCrash/configs:rw
     restart: unless-stopped
     
+volumes:
+  shellcrash_configs:
+  
 networks:
   macvlan_lan:
     name: macvlan_lan

install.sh

@@ -1,20 +1,25 @@
-#! /bin/bash
+#!/bin/sh
 # Copyright (C) Juewuy
 
-[ -z "$url" ] && url="https://testingcf.jsdelivr.net/gh/juewuy/ShellCrash@dev"
-type bash &>/dev/null && shtype=bash || shtype=sh
-[ -n "$(echo -e | grep e)" ] && echo=echo || echo='echo -e'
 echo "***********************************************"
 echo "**                 欢迎使用                  **"
 echo "**                ShellCrash                 **"
 echo "**                             by  Juewuy    **"
 echo "***********************************************"
-#内置工具
-dir_avail() {
-    df $2 $1 | awk '{ for(i=1;i<=NF;i++){ if(NR==1){ arr[i]=$i; }else{ arr[i]=arr[i]" "$i; } } } END{ for(i=1;i<=NF;i++){ print arr[i]; } }' | grep -E 'Ava|可用' | awk '{print $2}'
+
+language=chs
+[ -z "$url" ] && url="https://testingcf.jsdelivr.net/gh/juewuy/ShellCrash@master"
+
+# 内置工具
+cecho() {
+    printf '%b\n' "$*"
 }
-ckcmd() { #检查命令
-    if command -v sh >/dev/null 2>&1;then
+dir_avail() {
+    df -h >/dev/null 2>&1 && h="$2"
+	df -P $h "${1:-.}" 2>/dev/null | awk 'NR==2 {print $4}'
+}
+ckcmd() {
+    if command -v sh >/dev/null 2>&1; then
         command -v "$1" >/dev/null 2>&1
     else
         type "$1" >/dev/null 2>&1
@@ -26,7 +31,7 @@ webget() {
     if curl --version >/dev/null 2>&1; then
         [ "$3" = "echooff" ] && progress='-s' || progress='-#'
         [ -z "$4" ] && redirect='-L' || redirect=''
-        result=$(curl -w %{http_code} --connect-timeout 5 $progress $redirect -ko $1 $2)
+        result=$(curl -w %{http_code} --connect-timeout 5 "$progress" "$redirect" -ko "$1" "$2")
         [ -n "$(echo $result | grep -e ^2)" ] && result="200"
     else
         if wget --version >/dev/null 2>&1; then
@@ -37,293 +42,331 @@ webget() {
         fi
         [ "$3" = "echoon" ] && progress=''
         [ "$3" = "echooff" ] && progress='-q'
-        wget $progress $redirect $certificate $timeout -O $1 $2
+        wget "$progress" "$redirect" "$certificate" "$timeout" -O "$1" "$2"
         [ $? -eq 0 ] && result="200"
     fi
 }
 error_down() {
-    $echo "请参考 \033[32mhttps://github.com/juewuy/ShellCrash/blob/master/README_CN.md"
-    $echo "\033[33m使用其他安装源重新安装！\033[0m"
+    cecho "请参考 \033[32mhttps://github.com/juewuy/ShellCrash/blob/master/README_CN.md"
+    cecho "\033[33m使用其他安装源重新安装！\033[0m"
 }
-#安装及初始化
+
+# 安装及初始化
 set_alias() {
-    echo "-----------------------------------------------"
-    $echo "\033[36m请选择一个别名，或使用自定义别名：\033[0m"
-    echo "-----------------------------------------------"
-    $echo " 1 【\033[32mcrash\033[0m】"
-    $echo " 2 【\033[32m sc \033[0m】"
-    $echo " 3 【\033[32m mm \033[0m】"
-    $echo " 0 退出安装"
-    echo "-----------------------------------------------"
-    read -p "请输入相应数字或自定义别名 > " res
-    case "$res" in
-    1) my_alias=crash ;;
-    2) my_alias=sc ;;
-    3) my_alias=mm ;;
-    *) my_alias=$res ;;
-    esac
-    cmd=$(ckcmd "$my_alias" | grep 'menu.sh')
-    ckcmd "$my_alias" && [ -z "$cmd" ] && {
-        $echo "\033[33m此别名和当前系统内置命令/别名冲突，请换一个！\033[0m"
-        sleep 1
-        set_alias
-    }
+    while true; do
+        echo "-----------------------------------------------"
+        cecho "\033[36m请选择一个别名，或使用自定义别名：\033[0m"
+        echo "-----------------------------------------------"
+        cecho " 1 【\033[32mcrash\033[0m】"
+        cecho " 2 【\033[32m sc \033[0m】"
+        cecho " 3 【\033[32m mm \033[0m】"
+        cecho " 0 退出安装"
+        echo "-----------------------------------------------"
+        read -p "请输入相应数字或自定义别名 > " res
+        case "$res" in
+        0)
+            echo "安装已取消"
+            exit 1
+            ;;
+        1)
+            my_alias=crash
+            ;;
+        2)
+            my_alias=sc
+            ;;
+        3)
+            my_alias=mm
+            ;;
+        *)
+            my_alias=$res
+            ;;
+        esac
+        cmd=$(ckcmd "$my_alias" | grep 'menu.sh')
+        ckcmd "$my_alias" && [ -z "$cmd" ] && {
+            cecho "\033[33m此别名和当前系统内置命令/别名冲突，请换一个！\033[0m"
+            sleep 1
+            continue
+        }
+        break
+    done
 }
 gettar() {
-    webget /tmp/ShellCrash.tar.gz "$url/ShellCrash.tar.gz"
+    webget /tmp/ShellCrash.tar.gz "$url/ShellCrash.tar.gz" >/dev/null 2>&1
     if [ "$result" != "200" ]; then
-        $echo "\033[33m文件下载失败！\033[0m"
+        cecho "\033[33m文件下载失败！\033[0m"
         error_down
         exit 1
     else
-        $CRASHDIR/start.sh stop 2>/dev/null
-        #解压
+        "$CRASHDIR"/start.sh stop 2>/dev/null
+        # 解压
         echo "-----------------------------------------------"
-        echo 开始解压文件！
-        mkdir -p $CRASHDIR >/dev/null
-        tar -zxf '/tmp/ShellCrash.tar.gz' -C $CRASHDIR/ || tar -zxf '/tmp/ShellCrash.tar.gz' --no-same-owner -C $CRASHDIR/
-        if [ -s $CRASHDIR/init.sh ]; then
+        echo "开始解压文件！"
+        mkdir -p "$CRASHDIR" >/dev/null
+        tar -zxf '/tmp/ShellCrash.tar.gz' -C "$CRASHDIR"/ || tar -zxf '/tmp/ShellCrash.tar.gz' --no-same-owner -C "$CRASHDIR"/
+        if [ -s "$CRASHDIR"/init.sh ]; then
             set_alias
-            . $CRASHDIR/init.sh >/dev/null
-            [ "$?" != 0 ] && $echo "\033[33m初始化失败，请尝试本地安装！\033[0m" && exit 1
+            . "$CRASHDIR"/init.sh >/dev/null
+            [ "$?" != 0 ] && cecho "\033[33m初始化失败，请尝试本地安装！\033[0m" && exit 1
         else
             rm -rf /tmp/ShellCrash.tar.gz
-            $echo "\033[33m文件解压失败！\033[0m"
+            cecho "\033[33m文件解压失败！\033[0m"
             error_down
             exit 1
         fi
     fi
 }
-setdir() {
-    set_usb_dir() {
-        $echo "请选择安装目录"
+set_usb_dir() {
+    while true; do
+        cecho "请选择安装目录"
         du -hL /mnt | awk '{print " "NR" "$2"  "$1}'
         read -p "请输入相应数字 > " num
         dir=$(du -hL /mnt | awk '{print $2}' | sed -n "$num"p)
         if [ -z "$dir" ]; then
-            $echo "\033[31m输入错误！请重新设置！\033[0m"
-            set_usb_dir
+            cecho "\033[31m输入错误！请重新设置！\033[0m"
+            continue
         fi
-    }
-    set_asus_dir() {
-        echo -e "请选择U盘目录"
-        du -hL /tmp/mnt | awk -F/ 'NF<=4' | awk '{print " "NR" "$2"  "$1}'
-        read -p "请输入相应数字 > " num
-        dir=$(du -hL /tmp/mnt | awk -F/ 'NF<=4' | awk '{print $2}' | sed -n "$num"p)
-        if [ ! -f "$dir/asusware.arm/etc/init.d/S50downloadmaster" ]; then
-            echo -e "\033[31m未找到下载大师自启文件：$dir/asusware.arm/etc/init.d/S50downloadmaster，请检查设置！\033[0m"
-            set_asus_dir
-        fi
-    }
-    set_cust_dir() {
+        break 1
+    done
+}
+set_xiaomi_dir() {
+	cecho "\033[33m检测到当前设备为小米官方系统，请选择安装位置\033[0m"
+	[ -d /data ] && cecho " 1 安装到 /data 目录,剩余空间：$(dir_avail /data -h)(支持软固化功能)"
+	[ -d /userdisk ] && cecho " 2 安装到 /userdisk 目录,剩余空间：$(dir_avail /userdisk -h)(支持软固化功能)"
+	[ -d /data/other_vol ] && cecho " 3 安装到 /data/other_vol 目录,剩余空间：$(dir_avail /data/other_vol -h)(支持软固化功能)"
+	cecho " 4 安装到自定义目录(不推荐，不明勿用！)"
+	cecho " 0 退出安装"
+	echo "-----------------------------------------------"
+	read -p "请输入相应数字 > " num
+	case "$num" in
+	1)
+		dir=/data
+		;;
+	2)
+		dir=/userdisk
+		;;
+	3)
+		dir=/data/other_vol
+		;;
+	4)
+		set_cust_dir
+		;;
+	*)
+		exit 1
+		;;
+	esac
+}
+set_asus_usb() {
+	while true; do
+		echo -e "请选择U盘目录"
+		du -hL /tmp/mnt | awk -F/ 'NF<=4' | awk '{print " "NR" "$2"  "$1}'
+		read -p "请输入相应数字 > " num
+		dir=$(du -hL /tmp/mnt | awk -F/ 'NF<=4' | awk '{print $2}' | sed -n "$num"p)
+		if [ ! -f "$dir/asusware.arm/etc/init.d/S50downloadmaster" ]; then
+			echo -e "\033[31m未找到下载大师自启文件：$dir/asusware.arm/etc/init.d/S50downloadmaster，请检查设置！\033[0m"
+			sleep 1
+		else
+			break
+		fi
+	done
+}
+set_asus_dir() {
+	cecho "\033[33m检测到当前设备为华硕固件，请选择安装方式\033[0m"
+	cecho " 1 基于U盘+下载大师安装(支持所有固件，限ARM设备，须插入U盘或移动硬盘)"
+	cecho " 2 基于自启脚本安装(仅支持部分梅林固件)"
+	cecho " 0 退出安装"
+	echo "-----------------------------------------------"
+	read -p "请输入相应数字 > " num
+	case "$num" in
+	1)
+		echo -e "请先在路由器网页后台安装下载大师并启用，之后选择外置存储所在目录！"
+		sleep 2
+		set_asus_usb
+	;;
+	2)
+		cecho "如开机无法正常自启，请重新使用U盘+下载大师安装！"
+		sleep 2
+		dir=/jffs
+	;;
+	*)
+		exit 1
+	;;
+	esac
+}
+set_cust_dir() {
+    while true; do
         echo "-----------------------------------------------"
-        echo '可用路径 剩余空间:'
+        echo '可用路径 剩余空间：'
         df -h | awk '{print $6,$4}' | sed 1d
         echo '路径是必须带 / 的格式，注意写入虚拟内存(/tmp,/opt,/sys...)的文件会在重启后消失！！！'
         read -p "请输入自定义路径 > " dir
-        if [ "$(dir_avail $dir)" = 0 ] || [ -n "$(echo $dir | grep -E 'tmp|opt|sys')" ]; then
-            $echo "\033[31m路径错误！请重新设置！\033[0m"
-            set_cust_dir
+        if [ "$(dir_avail "$dir")" = 0 ] || [ -n "$(echo "$dir" | grep -Eq '^/(tmp|opt|sys)(/|$)')" ]; then
+            cecho "\033[31m路径错误！请重新设置！\033[0m"
+            continue
         fi
-    }
-    echo "-----------------------------------------------"
-    $echo "\033[33m注意：安装ShellCrash至少需要预留约1MB的磁盘空间\033[0m"
-    if [ -n "$systype" ]; then
-        [ "$systype" = "Padavan" ] && dir=/etc/storage
-        [ "$systype" = "mi_snapshot" ] && {
-            $echo "\033[33m检测到当前设备为小米官方系统，请选择安装位置\033[0m"
-            [ -d /data ] && $echo " 1 安装到 /data 目录,剩余空间：$(dir_avail /data -h)(支持软固化功能)"
-            [ -d /userdisk ] && $echo " 2 安装到 /userdisk 目录,剩余空间：$(dir_avail /userdisk -h)(支持软固化功能)"
-            [ -d /data/other_vol ] && $echo " 3 安装到 /data/other_vol 目录,剩余空间：$(dir_avail /data/other_vol -h)(支持软固化功能)"
-            $echo " 4 安装到自定义目录(不推荐，不明勿用！)"
-            $echo " 0 退出安装"
-            echo "-----------------------------------------------"
-            read -p "请输入相应数字 > " num
-            case "$num" in
-            1)
-                dir=/data
-                ;;
-            2)
-                dir=/userdisk
-                ;;
-            3)
-                dir=/data/other_vol
-                ;;
-            4)
-                set_cust_dir
-                ;;
-            *)
-                exit 1
-                ;;
-            esac
-        }
-        [ "$systype" = "asusrouter" ] && {
-            $echo "\033[33m检测到当前设备为华硕固件，请选择安装方式\033[0m"
-            $echo " 1 基于USB设备安装(限23年9月之前固件，须插入\033[31m任意\033[0mUSB设备)"
-            $echo " 2 基于自启脚本安装(仅支持梅林及部分非koolshare官改固件)"
-            $echo " 3 基于U盘+下载大师安装(支持所有固件，限ARM设备，须插入U盘或移动硬盘)"
-            $echo " 0 退出安装"
-            echo "-----------------------------------------------"
-            read -p "请输入相应数字 > " num
-            case "$num" in
-            1)
-                read -p "将脚本安装到USB存储/系统闪存？(1/0) > " res
-                [ "$res" = "1" ] && set_usb_dir || dir=/jffs
-                usb_status=1
-                ;;
-            2)
-                $echo "如无法正常开机启动，请重新使用USB方式安装！"
-                sleep 2
-                dir=/jffs
-                ;;
-            3)
-                echo -e "请先在路由器网页后台安装下载大师并启用，之后选择外置存储所在目录！"
-                sleep 2
-                set_asus_dir
-                ;;
-            *)
-                exit 1
-                ;;
-            esac
-        }
-        [ "$systype" = "ng_snapshot" ] && dir=/tmp/mnt
-    else
-        $echo " 1 在\033[32m/etc目录\033[0m下安装(适合root用户)"
-        $echo " 2 在\033[32m/usr/share目录\033[0m下安装(适合Linux系统)"
-        $echo " 3 在\033[32m当前用户目录\033[0m下安装(适合非root用户)"
-        $echo " 4 在\033[32m外置存储\033[0m中安装"
-        $echo " 5 手动设置安装目录"
-        $echo " 0 退出安装"
-        echo "----------------------------------------------"
-        read -p "请输入相应数字 > " num
-        #设置目录
-        case "$num" in
-        1)
-            dir=/etc
-            ;;
-        2)
-            dir=/usr/share
-            ;;
-        3)
-            dir=~/.local/share
-            mkdir -p ~/.config/systemd/user
-            ;;
-        4)
-            set_usb_dir
-            ;;
-        5)
-            set_cust_dir
-            ;;
-        *)
-            echo "安装已取消"
-            exit 1
-            ;;
-        esac
-    fi
+        break 1
+    done
+}
 
-    if [ ! -w $dir ]; then
-        $echo "\033[31m没有$dir目录写入权限！请重新设置！\033[0m" && sleep 1 && setdir
-    else
-        $echo "目标目录\033[32m$dir\033[0m空间剩余：$(dir_avail $dir -h)"
-        read -p "确认安装？(1/0) > " res
-        [ "$res" = "1" ] && CRASHDIR=$dir/ShellCrash || setdir
-    fi
+setdir() {
+    while true; do
+        echo "-----------------------------------------------"
+        cecho "\033[33m注意：安装ShellCrash至少需要预留约1MB的磁盘空间\033[0m"
+        case "$systype" in
+			Padavan) dir=/etc/storage ;;
+			mi_snapshot) set_xiaomi_dir ;;
+			asusrouter) set_asus_dir ;;
+			ng_snapshot) dir=/tmp/mnt ;;
+			*)
+				cecho " 1 在\033[32m/etc目录\033[0m下安装(适合root用户)"
+				cecho " 2 在\033[32m/usr/share目录\033[0m下安装(适合Linux系统)"
+				cecho " 3 在\033[32m当前用户目录\033[0m下安装(适合非root用户)"
+				cecho " 4 在\033[32m外置存储\033[0m中安装"
+				cecho " 5 手动设置安装目录"
+				cecho " 0 退出安装"
+				echo "----------------------------------------------"
+				read -p "请输入相应数字 > " num
+				# 设置目录
+				case "$num" in
+				1)
+					dir=/etc
+					;;
+				2)
+					dir=/usr/share
+					;;
+				3)
+					dir=~/.local/share
+					mkdir -p ~/.config/systemd/user
+					;;
+				4)
+					set_usb_dir
+					;;
+				5)
+					set_cust_dir
+					;;
+				*)
+					echo "安装已取消"
+					exit 1
+					;;
+				esac
+			;;
+		esac
+
+        if [ ! -w "$dir" ]; then
+            cecho "\033[31m没有$dir目录写入权限！请重新设置！\033[0m"
+            sleep 1
+        else
+            cecho "目标目录\033[32m$dir\033[0m空间剩余：$(dir_avail "$dir" -h)"
+            read -p "确认安装？(1/0) > " res
+            if [ "$res" = "1" ]; then
+                CRASHDIR="$dir"/ShellCrash
+                break
+            fi
+        fi
+    done
 }
 install() {
     echo "-----------------------------------------------"
-    echo 开始从服务器获取安装文件！
+    echo "开始从服务器获取安装文件！"
     echo "-----------------------------------------------"
     gettar
     echo "-----------------------------------------------"
     echo "ShellCrash 已经安装成功!"
-    [ "$profile" = "~/.bashrc" ] && echo "请执行【. ~/.bashrc > /dev/null】命令以加载环境变量！"
-    [ -n "$(ls -l /bin/sh | grep -oE 'zsh')" ] && echo "请执行【. ~/.zshrc > /dev/null】命令以加载环境变量！"
+    [ "$profile" = "~/.bashrc" ] && echo "请执行【. ~/.bashrc > /dev/null】命令以更新环境变量！"
+    [ -n "$(ls -l /bin/sh | grep -oE 'zsh')" ] && echo "请执行【. ~/.zshrc > /dev/null】命令以更新环境变量！"
     echo "-----------------------------------------------"
-    $echo "\033[33m输入\033[30;47m $my_alias \033[0;33m命令即可管理！！！\033[0m"
+    cecho "\033[33m输入\033[30;47m $my_alias \033[0;33m命令即可管理！！！\033[0m"
     echo "-----------------------------------------------"
 }
 setversion() {
     echo "-----------------------------------------------"
-    $echo "\033[33m请选择想要安装的版本：\033[0m"
-    $echo " 1 \033[32m公测版(推荐)\033[0m"
-    $echo " 2 \033[36m稳定版\033[0m"
-    $echo " 3 \033[31m开发版\033[0m"
+    cecho "\033[33m请选择想要安装的版本：\033[0m"
+    cecho " 1 \033[32m公测版(推荐)\033[0m"
+    cecho " 2 \033[36m稳定版\033[0m"
+    cecho " 3 \033[31m开发版\033[0m"
     echo "-----------------------------------------------"
     read -p "请输入相应数字 > " num
     case "$num" in
-    2)
-        url=$(echo $url | sed 's/master/stable/')
-        ;;
-    3)
-        url=$(echo $url | sed 's/master/dev/')
-        ;;
+	1) release_type=master ;;
+    2) release_type=stable ;;
+    3) release_type=dev ;;
     *) ;;
     esac
+	url=$(echo "$url" | sed "s/master/$release_type/")
 }
-#特殊固件识别及标记
-[ -f "/etc/storage/started_script.sh" ] && {
-    systype=Padavan #老毛子固件
-    initdir='/etc/storage/started_script.sh'
+
+# 安装检查
+check_systype() {
+	[ -f "/etc/storage/started_script.sh" ] && {
+		systype=Padavan #老毛子固件
+		initdir='/etc/storage/started_script.sh'
+	}
+	[ -d "/jffs" ] && {
+		systype=asusrouter #华硕固件
+		[ -f "/jffs/.asusrouter" ] && initdir='/jffs/.asusrouter'
+		[ -d "/jffs/scripts" ] && initdir='/jffs/scripts/nat-start'
+	}
+	[ -f "/data/etc/crontabs/root" ] && systype=mi_snapshot #小米设备
+	[ -w "/var/mnt/cfg/firewall" ] && systype=ng_snapshot   #NETGEAR设备
 }
-[ -d "/jffs" ] && {
-    systype=asusrouter #华硕固件
-    [ -f "/jffs/.asusrouter" ] && initdir='/jffs/.asusrouter'
-    [ -d "/jffs/scripts" ] && initdir='/jffs/scripts/nat-start'
+check_user() {
+	if [ "$USER" != "root" ] && [ -z "$systype" ]; then
+		echo "当前用户:$USER"
+		cecho "\033[31m请尽量使用root用户（不要直接使用sudo命令！）执行安装!\033[0m"
+		echo "-----------------------------------------------"
+		read -p "仍要安装？可能会产生未知错误！(1/0) > " res
+		[ "$res" != "1" ] && exit 1
+	fi
 }
-[ -f "/data/etc/crontabs/root" ] && systype=mi_snapshot #小米设备
-[ -w "/var/mnt/cfg/firewall" ] && systype=ng_snapshot   #NETGEAR设备
+check_version() {
+	echo "$url" | grep -q 'master' && setversion
+	webget /tmp/version "$url/version" echooff
+	[ "$result" = "200" ] && versionsh=$(cat /tmp/version)
+	rm -rf /tmp/version
 
-#检查root权限
-if [ "$USER" != "root" -a -z "$systype" ]; then
-    echo 当前用户:$USER
-    $echo "\033[31m请尽量使用root用户（不要直接使用sudo命令！）执行安装!\033[0m"
-    echo "-----------------------------------------------"
-    read -p "仍要安装？可能会产生未知错误！(1/0) > " res
-    [ "$res" != "1" ] && exit 1
-fi
+	# 输出
+	cecho "最新版本：\033[32m$versionsh\033[0m"
+	echo "-----------------------------------------------"
+	cecho "\033[44m如遇问题请加TG群反馈：\033[42;30m t.me/ShellClash \033[0m"
+	cecho "\033[37m支持各种基于openwrt的路由器设备"
+	cecho "\033[33m支持Debian、Centos等标准Linux系统\033[0m"
+}
+check_dir() {
+	if [ -n "$CRASHDIR" ]; then
+		echo "-----------------------------------------------"
+		cecho "检测到旧的安装目录\033[36m$CRASHDIR\033[0m，是否覆盖安装？"
+		cecho "\033[32m覆盖安装时不会移除配置文件！\033[0m"
+		echo " 1 覆盖安装"
+		echo " 2 卸载旧版本并安装"
+		echo " 0 取消安装"
+		read -p "请输入相应数字 > " num
+		case "$num" in
+		1)
+			install
+			;;
+		2)
+			[ "$CRASHDIR" != "/" ] && rm -rf "$CRASHDIR"
+			echo "-----------------------------------------------"
+			cecho "\033[31m 旧版本文件已卸载！\033[0m"
+			setdir
+			install
+			;;
+		9)
+			echo "测试模式，变更安装位置 $CRASHDIR"
+			setdir
+			install
+			;;
+		*)
+			cecho "\033[31m已取消安装！\033[0m"
+			exit 1
+			;;
+		esac
+	else
+		setdir
+		install
+	fi
+}
 
-if [ -n "$(echo $url | grep master)" ]; then
-    setversion
-fi
-#获取版本信息
-webget /tmp/version "$url/version" echooff
-[ "$result" = "200" ] && versionsh=$(cat /tmp/version)
-rm -rf /tmp/version
-
-#输出
-$echo "最新版本：\033[32m$versionsh\033[0m"
-echo "-----------------------------------------------"
-$echo "\033[44m如遇问题请加TG群反馈：\033[42;30m t.me/ShellClash \033[0m"
-$echo "\033[37m支持各种基于openwrt的路由器设备"
-$echo "\033[33m支持Debian、Centos等标准Linux系统\033[0m"
-
-if [ -n "$CRASHDIR" ]; then
-    echo "-----------------------------------------------"
-    $echo "检测到旧的安装目录\033[36m$CRASHDIR\033[0m，是否覆盖安装？"
-    $echo "\033[32m覆盖安装时不会移除配置文件！\033[0m"
-    read -p "覆盖安装/卸载旧版本？(1/0) > " res
-    case "$res" in
-    1)
-        install
-        ;;
-    0)
-        rm -rf $CRASHDIR
-        echo "-----------------------------------------------"
-        $echo "\033[31m 旧版本文件已卸载！\033[0m"
-        setdir
-        install
-        ;;
-    9)
-        echo "测试模式，变更安装位置"
-        setdir
-        install
-        ;;
-    *)
-        $echo "\033[31m输入错误！已取消安装！\033[0m"
-        exit 1
-        ;;
-    esac
-else
-    setdir
-    install
-fi
+check_systype
+check_user
+check_version
+check_dir

install_en.sh

@@ -0,0 +1,372 @@
+#!/bin/sh
+# Copyright (C) Juewuy
+
+echo "***********************************************"
+echo "**               Welcome to                  **"
+echo "**                ShellCrash                 **"
+echo "**                             by  Juewuy    **"
+echo "***********************************************"
+
+language=en
+[ -z "$url" ] && url="https://testingcf.jsdelivr.net/gh/juewuy/ShellCrash@master"
+
+# Internal Tools
+cecho() {
+    printf '%b\n' "$*"
+}
+dir_avail() {
+    df -h >/dev/null 2>&1 && h="$2"
+	df -P $h "${1:-.}" 2>/dev/null | awk 'NR==2 {print $4}'
+}
+ckcmd() {
+    if command -v sh >/dev/null 2>&1; then
+        command -v "$1" >/dev/null 2>&1
+    else
+        type "$1" >/dev/null 2>&1
+    fi
+}
+webget() {
+    # Parameter [$1] Download Path, [$2] Online URL
+    # Parameter [$3] Display Output, [$4] Disable Redirects
+    if curl --version >/dev/null 2>&1; then
+        [ "$3" = "echooff" ] && progress='-s' || progress='-#'
+        [ -z "$4" ] && redirect='-L' || redirect=''
+        result=$(curl -w %{http_code} --connect-timeout 5 "$progress" "$redirect" -ko "$1" "$2")
+        [ -n "$(echo $result | grep -e ^2)" ] && result="200"
+    else
+        if wget --version >/dev/null 2>&1; then
+            [ "$3" = "echooff" ] && progress='-q' || progress='-q --show-progress'
+            [ "$4" = "rediroff" ] && redirect='--max-redirect=0' || redirect=''
+            certificate='--no-check-certificate'
+            timeout='--timeout=3'
+        fi
+        [ "$3" = "echoon" ] && progress=''
+        [ "$3" = "echooff" ] && progress='-q'
+        wget "$progress" "$redirect" "$certificate" "$timeout" -O "$1" "$2"
+        [ $? -eq 0 ] && result="200"
+    fi
+}
+error_down() {
+    cecho "Please refer to \033[32mhttps://github.com/juewuy/ShellCrash/blob/master/README.md"
+    cecho "\033[33mUse an alternative source to reinstall!\033[0m"
+}
+
+# Installation and Initialization
+set_alias() {
+    while true; do
+        echo "-----------------------------------------------"
+        cecho "\033[36mPlease select an alias or enter a custom one:\033[0m"
+        echo "-----------------------------------------------"
+        cecho " 1 【\033[32mcrash\033[0m】"
+        cecho " 2 【\033[32m sc \033[0m】"
+        cecho " 3 【\033[32m mm \033[0m】"
+        cecho " 0 Exit Installation"
+        echo "-----------------------------------------------"
+        read -p "Enter number or custom alias > " res
+        case "$res" in
+        0)
+            echo "Installation cancelled"
+            exit 1
+            ;;
+        1)
+            my_alias=crash
+            ;;
+        2)
+            my_alias=sc
+            ;;
+        3)
+            my_alias=mm
+            ;;
+        *)
+            my_alias=$res
+            ;;
+        esac
+        cmd=$(ckcmd "$my_alias" | grep 'menu.sh')
+        ckcmd "$my_alias" && [ -z "$cmd" ] && {
+            cecho "\033[33mThis alias conflicts with a system command; please choose another!\033[0m"
+            sleep 1
+            continue
+        }
+        break
+    done
+}
+gettar() {
+    webget /tmp/ShellCrash.tar.gz "$url/ShellCrash.tar.gz" >/dev/null 2>&1
+    if [ "$result" != "200" ]; then
+        cecho "\033[33mFile download failed!\033[0m"
+        error_down
+        exit 1
+    else
+        "$CRASHDIR"/start.sh stop 2>/dev/null
+        # Extract
+        echo "-----------------------------------------------"
+        echo "Starting file extraction!"
+        mkdir -p "$CRASHDIR" >/dev/null
+        tar -zxf '/tmp/ShellCrash.tar.gz' -C "$CRASHDIR"/ || tar -zxf '/tmp/ShellCrash.tar.gz' --no-same-owner -C "$CRASHDIR"/
+        if [ -s "$CRASHDIR"/init.sh ]; then
+            set_alias
+            . "$CRASHDIR"/init.sh >/dev/null
+            [ "$?" != 0 ] && cecho "\033[33mInitialization failed, try local installation!\033[0m" && exit 1
+        else
+            rm -rf /tmp/ShellCrash.tar.gz
+            cecho "\033[33mFile extraction failed!\033[0m"
+            error_down
+            exit 1
+        fi
+    fi
+}
+set_usb_dir() {
+    while true; do
+        cecho "Please select installation directory"
+        du -hL /mnt | awk '{print " "NR" "$2"  "$1}'
+        read -p "Enter number > " num
+        dir=$(du -hL /mnt | awk '{print $2}' | sed -n "$num"p)
+        if [ -z "$dir" ]; then
+            cecho "\033[31mInvalid input! Please try again!\033[0m"
+            continue
+        fi
+        break 1
+    done
+}
+set_xiaomi_dir() {
+	cecho "\033[33mXiaomi device detected, please select installation location\033[0m"
+	[ -d /data ] && cecho " 1 Install to /data, Free space: $(dir_avail /data -h) (Supports soft-hardening)"
+	[ -d /userdisk ] && cecho " 2 Install to /userdisk, Free space: $(dir_avail /userdisk -h) (Supports soft-hardening)"
+	[ -d /data/other_vol ] && cecho " 3 Install to /data/other_vol, Free space: $(dir_avail /data/other_vol -h) (Supports soft-hardening)"
+	cecho " 4 Custom directory (Not recommended for beginners!)"
+	cecho " 0 Exit"
+	echo "-----------------------------------------------"
+	read -p "Enter number > " num
+	case "$num" in
+	1)
+		dir=/data
+		;;
+	2)
+		dir=/userdisk
+		;;
+	3)
+		dir=/data/other_vol
+		;;
+	4)
+		set_cust_dir
+		;;
+	*)
+		exit 1
+		;;
+	esac
+}
+set_asus_usb() {
+	while true; do
+		echo -e "Please select USB directory"
+		du -hL /tmp/mnt | awk -F/ 'NF<=4' | awk '{print " "NR" "$2"  "$1}'
+		read -p "Enter number > " num
+		dir=$(du -hL /tmp/mnt | awk -F/ 'NF<=4' | awk '{print $2}' | sed -n "$num"p)
+		if [ ! -f "$dir/asusware.arm/etc/init.d/S50downloadmaster" ]; then
+			echo -e "\033[31mDownload Master startup file not found: $dir/asusware.arm/etc/init.d/S50downloadmaster. Check settings!\033[0m"
+			sleep 1
+		else
+			break
+		fi
+	done
+}
+set_asus_dir() {
+	cecho "\033[33mAsus firmware detected, please select installation method\033[0m"
+	cecho " 1 Via USB + Download Master (Supports all firmware, ARM only, USB required)"
+	cecho " 2 Via startup script (Merlin firmware only)"
+	cecho " 0 Exit"
+	echo "-----------------------------------------------"
+	read -p "Enter number > " num
+	case "$num" in
+	1)
+		echo -e "Please install and enable Download Master in the router web UI first, then select the storage directory!"
+		sleep 2
+		set_asus_usb
+	;;
+	2)
+		cecho "If auto-start fails after reboot, please use USB + Download Master method instead!"
+		sleep 2
+		dir=/jffs
+	;;
+	*)
+		exit 1
+	;;
+	esac
+}
+set_cust_dir() {
+    while true; do
+        echo "-----------------------------------------------"
+        echo 'Path | Free Space:'
+        df -h | awk '{print $6,$4}' | sed 1d
+        echo 'Path must start with "/". Files in virtual memory (/tmp, /opt, /sys...) will be lost on reboot!!!'
+        read -p "Enter custom path > " dir
+        if [ "$(dir_avail "$dir")" = 0 ] || [ -n "$(echo "$dir" | grep -Eq '^/(tmp|opt|sys)(/|$)')" ]; then
+            cecho "\033[31mInvalid path! Please try again!\033[0m"
+            continue
+        fi
+        break 1
+    done
+}
+
+setdir() {
+    while true; do
+        echo "-----------------------------------------------"
+        cecho "\033[33mNote: ShellCrash requires at least 1MB of disk space\033[0m"
+        case "$systype" in
+			Padavan) dir=/etc/storage ;;
+			mi_snapshot) set_xiaomi_dir ;;
+			asusrouter) set_asus_dir ;;
+			ng_snapshot) dir=/tmp/mnt ;;
+			*)
+				cecho " 1 Install in \033[32m/etc\033[0m (Best for root users)"
+				cecho " 2 Install in \033[32m/usr/share\033[0m (Standard Linux systems)"
+				cecho " 3 Install in \033[32mUser Directory\033[0m (Best for non-root users)"
+				cecho " 4 Install on \033[32mExternal Storage\033[0m"
+				cecho " 5 Manual path entry"
+				cecho " 0 Exit"
+				echo "----------------------------------------------"
+				read -p "Enter number > " num
+				# Set Dir
+				case "$num" in
+				1)
+					dir=/etc
+					;;
+				2)
+					dir=/usr/share
+					;;
+				3)
+					dir=~/.local/share
+					mkdir -p ~/.config/systemd/user
+					;;
+				4)
+					set_usb_dir
+					;;
+				5)
+					set_cust_dir
+					;;
+				*)
+					echo "Installation cancelled"
+					exit 1
+					;;
+				esac
+			;;
+		esac
+
+        if [ ! -w "$dir" ]; then
+            cecho "\033[31mNo write permission for $dir! Please reset!\033[0m"
+            sleep 1
+        else
+            cecho "Target directory: \033[32m$dir\033[0m | Free space: $(dir_avail "$dir" -h)"
+            read -p "Confirm installation? (1/0) > " res
+            if [ "$res" = "1" ]; then
+                CRASHDIR="$dir"/ShellCrash
+                break
+            fi
+        fi
+    done
+}
+install() {
+    echo "-----------------------------------------------"
+    echo "Retrieving installation files from server..."
+    echo "-----------------------------------------------"
+    gettar
+    echo "-----------------------------------------------"
+    echo "ShellCrash installed successfully!"
+    [ "$profile" = "~/.bashrc" ] && echo "Please run [. ~/.bashrc > /dev/null] to update environment variables!"
+    [ -n "$(ls -l /bin/sh | grep -oE 'zsh')" ] && echo "Please run [. ~/.zshrc > /dev/null] to update environment variables!"
+    echo "-----------------------------------------------"
+    cecho "\033[33mType \033[30;47m $my_alias \033[0;33m to start management dashboard!!!\033[0m"
+    echo "-----------------------------------------------"
+}
+setversion() {
+    echo "-----------------------------------------------"
+    cecho "\033[33mSelect version to install:\033[0m"
+    cecho " 1 \033[32mBeta (Recommended)\033[0m"
+    cecho " 2 \033[36mStable\033[0m"
+    cecho " 3 \033[31mDev (Unstable)\033[0m"
+    echo "-----------------------------------------------"
+    read -p "Enter number > " num
+    case "$num" in
+	1) release_type=master ;;
+    2) release_type=stable ;;
+    3) release_type=dev ;;
+    *) ;;
+    esac
+	url=$(echo "$url" | sed "s/master/$release_type/")
+}
+
+# Pre-Install Checks
+check_systype() {
+	[ -f "/etc/storage/started_script.sh" ] && {
+		systype=Padavan # Padavan Firmware
+		initdir='/etc/storage/started_script.sh'
+	}
+	[ -d "/jffs" ] && {
+		systype=asusrouter # Asus Firmware
+		[ -f "/jffs/.asusrouter" ] && initdir='/jffs/.asusrouter'
+		[ -d "/jffs/scripts" ] && initdir='/jffs/scripts/nat-start'
+	}
+	[ -f "/data/etc/crontabs/root" ] && systype=mi_snapshot # Xiaomi device
+	[ -w "/var/mnt/cfg/firewall" ] && systype=ng_snapshot   # NETGEAR device
+}
+check_user() {
+	if [ "$USER" != "root" ] && [ -z "$systype" ]; then
+		echo "Current User: $USER"
+		cecho "\033[31mPlease use the root user (do not use sudo directly!) to install!\033[0m"
+		echo "-----------------------------------------------"
+		read -p "Install anyway? Unknown errors may occur! (1/0) > " res
+		[ "$res" != "1" ] && exit 1
+	fi
+}
+check_version() {
+	echo "$url" | grep -q 'master' && setversion
+	webget /tmp/version "$url/version" echooff
+	[ "$result" = "200" ] && versionsh=$(cat /tmp/version)
+	rm -rf /tmp/version
+
+	# Output
+	cecho "Latest Version: \033[32m$versionsh\033[0m"
+	echo "-----------------------------------------------"
+	cecho "\033[44mFor issues, please join the TG group: \033[42;30m t.me/ShellClash \033[0m"
+	cecho "\033[37mSupports various OpenWrt-based router devices"
+	cecho "\033[33mSupports Debian, Centos and standard Linux systems\033[0m"
+}
+check_dir() {
+	if [ -n "$CRASHDIR" ]; then
+		echo "-----------------------------------------------"
+		cecho "Old installation detected at \033[36m$CRASHDIR\033[0m. Overwrite?"
+		cecho "\033[32mConfiguration files will NOT be removed during overwrite!\033[0m"
+		echo " 1 Overwrite Installation"
+		echo " 2 Uninstall old version and reinstall"
+		echo " 0 Cancel"
+		read -p "Enter number > " num
+		case "$num" in
+		1)
+			install
+			;;
+		2)
+			[ "$CRASHDIR" != "/" ] && rm -rf "$CRASHDIR"
+			echo "-----------------------------------------------"
+			cecho "\033[31mOld version uninstalled!\033[0m"
+			setdir
+			install
+			;;
+		9)
+			echo "Test Mode: Changing installation path $CRASHDIR"
+			setdir
+			install
+			;;
+		*)
+			cecho "\033[31mInstallation cancelled!\033[0m"
+			exit 1
+			;;
+		esac
+	else
+		setdir
+		install
+	fi
+}
+
+check_systype
+check_user
+check_version
+check_dir

public/fake_ip_filter.list

@@ -72,6 +72,7 @@ localhost.ptlogin2.qq.com
 localhost.sec.qq.com
 #微信登录
 localhost.*.weixin.qq.com
++.kk-rays.com
 #Game
 #Steam
 +.steamcontent.com
@@ -154,4 +155,6 @@ ps.res.netease.com
 +.orayimg.com
 #LOL语音
 +.gcloudcs.com
-+.gcloudsdk.com
++.gcloudsdk.com
+#ddns
++.dynv6.net

public/task.list

@@ -3,9 +3,9 @@
 101#$CRASHDIR/start.sh start#启动ShellCrash服务
 102#$CRASHDIR/start.sh stop#停止ShellCrash服务
 103#$CRASHDIR/start.sh restart#重启ShellCrash服务
-104#$CRASHDIR/start.sh update_config#更新在线订阅并重启服务
-105#$CRASHDIR/start.sh hotupdate#热更新在线订阅(不重启)
-106#$CRASHDIR/start.sh web_save#自动保存面板配置
+104#$CRASHDIR/task/task.sh update_config#更新在线订阅并重启服务
+105#$CRASHDIR/task/task.sh hotupdate#热更新在线订阅(不重启)
+106#$CRASHDIR/task/task.sh web_save_auto#自动保存面板配置
 107#$CRASHDIR/task/task.sh ntp#自动同步ntp时间
 
 111#$CRASHDIR/task/task.sh update_core#自动更新内核

rules/clash_providers/DustinWin_RS_Full.yaml

@@ -8,6 +8,8 @@ proxy-groups:
   - {name: 🪟 微软服务, type: select, proxies: [🎯 全球直连, 🚀 节点选择]}
   - {name: 🇬 谷歌服务, type: select, proxies: [🎯 全球直连, 🚀 节点选择]}
   - {name: 🍎 苹果服务, type: select, proxies: [🎯 全球直连, 🚀 节点选择]}
+  - {name: 🎥 奈飞视频, type: select, proxies: [🚀 节点选择, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇯🇵 日本节点, 🇸🇬 新加坡节点, 🇺🇸 美国节点, 👑 高级节点, 📉 省流节点, {providers_tags}]}
+  - {name: 📹 油管视频, type: select, proxies: [🚀 节点选择, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇯🇵 日本节点, 🇸🇬 新加坡节点, 🇺🇸 美国节点, 👑 高级节点, 📉 省流节点, {providers_tags}]}
   - {name: 🌍 国外媒体, type: select, proxies: [🚀 节点选择, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇯🇵 日本节点, 🇸🇬 新加坡节点, 🇺🇸 美国节点, 👑 高级节点, 📉 省流节点, {providers_tags}]}
   - {name: 🎮 游戏平台, type: select, proxies: [🚀 节点选择, 🎯 全球直连, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇯🇵 日本节点, 🇸🇬 新加坡节点, 🇺🇸 美国节点, 👑 高级节点, 📉 省流节点, {providers_tags}]}
   - {name: 🛡️ 直连域名, type: select, proxies: [🎯 全球直连, 🚀 节点选择]}
@@ -37,7 +39,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/private.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/private.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/private.mrs"
     interval: 86400
 
   ads:
@@ -45,7 +47,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/ads.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/ads.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/ads.mrs"
     interval: 86400
 
   trackerslist:
@@ -53,7 +55,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/trackerslist.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/trackerslist.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/trackerslist.mrs"
     interval: 86400
 
   microsoft-cn:
@@ -61,7 +63,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/microsoft-cn.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/microsoft-cn.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/microsoft-cn.mrs"
     interval: 86400
 
   apple-cn:
@@ -69,7 +71,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/apple-cn.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/apple-cn.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/apple-cn.mrs"
     interval: 86400
 
   google-cn:
@@ -77,7 +79,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/google-cn.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/google-cn.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/google-cn.mrs"
     interval: 86400
 
   games-cn:
@@ -85,7 +87,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/games-cn.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/games-cn.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/games-cn.mrs"
     interval: 86400
 
   media:
@@ -93,7 +95,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/media.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/media.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/media.mrs"
     interval: 86400
 
   games:
@@ -101,7 +103,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/games.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/games.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/games.mrs"
     interval: 86400
 
   ai:
@@ -109,7 +111,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/ai.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/ai.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/ai.mrs"
     interval: 86400
 
   networktest:
@@ -117,7 +119,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/networktest.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/networktest.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/networktest.mrs"
     interval: 86400
 
   proxy:
@@ -125,7 +127,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/proxy.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/proxy.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/proxy.mrs"
     interval: 86400
 
   cn:
@@ -133,7 +135,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/cn.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cn.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cn.mrs"
     interval: 86400
 
   privateip:
@@ -141,7 +143,7 @@ rule-providers:
     behavior: ipcidr
     format: mrs
     path: ./ruleset/privateip.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/privateip.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/privateip.mrs"
     interval: 86400
 
   cnip:
@@ -149,7 +151,7 @@ rule-providers:
     behavior: ipcidr
     format: mrs
     path: ./ruleset/cnip.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cnip.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cnip.mrs"
     interval: 86400
 
   mediaip:
@@ -157,7 +159,7 @@ rule-providers:
     behavior: ipcidr
     format: mrs
     path: ./ruleset/mediaip.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/mediaip.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/mediaip.mrs"
     interval: 86400
 
   gamesip:
@@ -165,7 +167,7 @@ rule-providers:
     behavior: ipcidr
     format: mrs
     path: ./ruleset/gamesip.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/gamesip.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/gamesip.mrs"
     interval: 86400
 
   telegramip:
@@ -173,7 +175,7 @@ rule-providers:
     behavior: ipcidr
     format: mrs
     path: ./ruleset/telegramip.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/telegramip.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/telegramip.mrs"
     interval: 86400
 
 rules:
@@ -195,4 +197,4 @@ rules:
   - RULE-SET,mediaip,🌍 国外媒体
   - RULE-SET,gamesip,🎮 游戏平台
   - RULE-SET,telegramip,📲 电报消息,no-resolve
-  - MATCH,🐟 漏网之鱼
+  - MATCH,🐟 漏网之鱼

rules/clash_providers/DustinWin_RS_Full_NoAds.yaml

@@ -7,6 +7,8 @@ proxy-groups:
   - {name: 🎮 游戏服务, type: select, proxies: [🎯 全球直连, 👑 高级节点, 🚀 节点选择]}
   - {name: 🪟 微软服务, type: select, proxies: [🎯 全球直连, 🚀 节点选择]}
   - {name: 🇬 谷歌服务, type: select, proxies: [🎯 全球直连, 🚀 节点选择]}
+  - {name: 🎥 奈飞视频, type: select, proxies: [🚀 节点选择, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇯🇵 日本节点, 🇸🇬 新加坡节点, 🇺🇸 美国节点, 👑 高级节点, 📉 省流节点, {providers_tags}]}
+  - {name: 📹 油管视频, type: select, proxies: [🚀 节点选择, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇯🇵 日本节点, 🇸🇬 新加坡节点, 🇺🇸 美国节点, 👑 高级节点, 📉 省流节点, {providers_tags}]}
   - {name: 🌍 国外媒体, type: select, proxies: [🚀 节点选择, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇯🇵 日本节点, 🇸🇬 新加坡节点, 🇺🇸 美国节点, 👑 高级节点, 📉 省流节点, {providers_tags}]}
   - {name: 🎮 游戏平台, type: select, proxies: [🚀 节点选择, 🎯 全球直连, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇯🇵 日本节点, 🇸🇬 新加坡节点, 🇺🇸 美国节点, 👑 高级节点, 📉 省流节点, {providers_tags}]}
   - {name: 🍎 苹果服务, type: select, proxies: [🎯 全球直连, 🚀 节点选择]}
@@ -34,7 +36,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/private.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/private.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/private.mrs"
     interval: 86400
 
   trackerslist:
@@ -42,7 +44,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/trackerslist.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/trackerslist.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/trackerslist.mrs"
     interval: 86400
 
   microsoft-cn:
@@ -50,7 +52,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/microsoft-cn.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/microsoft-cn.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/microsoft-cn.mrs"
     interval: 86400
 
   apple-cn:
@@ -58,7 +60,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/apple-cn.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/apple-cn.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/apple-cn.mrs"
     interval: 86400
 
   google-cn:
@@ -66,7 +68,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/google-cn.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/google-cn.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/google-cn.mrs"
     interval: 86400
 
   games-cn:
@@ -74,7 +76,23 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/games-cn.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/games-cn.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/games-cn.mrs"
+    interval: 86400
+
+  netflix:
+    type: http
+    behavior: domain
+    format: mrs
+    path: ./ruleset/netflix.mrs
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/netflix.mrs"
+    interval: 86400
+
+  youtube:
+    type: http
+    behavior: domain
+    format: mrs
+    path: ./ruleset/youtube.mrs
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/youtube.mrs"
     interval: 86400
 
   media:
@@ -82,7 +100,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/media.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/media.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/media.mrs"
     interval: 86400
 
   games:
@@ -90,7 +108,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/games.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/games.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/games.mrs"
     interval: 86400
 
   ai:
@@ -98,7 +116,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/ai.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/ai.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/ai.mrs"
     interval: 86400
 
   networktest:
@@ -106,7 +124,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/networktest.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/networktest.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/networktest.mrs"
     interval: 86400
 
   proxy:
@@ -114,7 +132,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/proxy.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/proxy.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/proxy.mrs"
     interval: 86400
 
   cn:
@@ -122,7 +140,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/cn.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cn.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cn.mrs"
     interval: 86400
 
   privateip:
@@ -130,7 +148,7 @@ rule-providers:
     behavior: ipcidr
     format: mrs
     path: ./ruleset/privateip.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/privateip.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/privateip.mrs"
     interval: 86400
 
   cnip:
@@ -138,7 +156,15 @@ rule-providers:
     behavior: ipcidr
     format: mrs
     path: ./ruleset/cnip.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cnip.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cnip.mrs"
+    interval: 86400
+
+  netflixip:
+    type: http
+    behavior: ipcidr
+    format: mrs
+    path: ./ruleset/netflixip.mrs
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/netflixip.mrs"
     interval: 86400
 
   mediaip:
@@ -146,7 +172,7 @@ rule-providers:
     behavior: ipcidr
     format: mrs
     path: ./ruleset/mediaip.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/mediaip.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/mediaip.mrs"
     interval: 86400
 
   gamesip:
@@ -154,7 +180,7 @@ rule-providers:
     behavior: ipcidr
     format: mrs
     path: ./ruleset/gamesip.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/gamesip.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/gamesip.mrs"
     interval: 86400
 
   telegramip:
@@ -162,7 +188,7 @@ rule-providers:
     behavior: ipcidr
     format: mrs
     path: ./ruleset/telegramip.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/telegramip.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/telegramip.mrs"
     interval: 86400
 
 rules:
@@ -172,6 +198,8 @@ rules:
   - RULE-SET,apple-cn,🍎 苹果服务
   - RULE-SET,google-cn,🇬 谷歌服务
   - RULE-SET,games-cn,🎮 游戏服务
+  - RULE-SET,netflix,🎥 奈飞视频
+  - RULE-SET,youtube,📹 油管视频
   - RULE-SET,media,🌍 国外媒体
   - RULE-SET,games,🎮 游戏平台
   - RULE-SET,ai,🤖 AI 平台
@@ -180,7 +208,8 @@ rules:
   - RULE-SET,cn,🛡️ 直连域名
   - RULE-SET,privateip,🔒 私有网络,no-resolve
   - RULE-SET,cnip,🀄️ 直连 IP
+  - RULE-SET,netflixip,🎥 奈飞视频
   - RULE-SET,mediaip,🌍 国外媒体
   - RULE-SET,gamesip,🎮 游戏平台
   - RULE-SET,telegramip,📲 电报消息,no-resolve
-  - MATCH,🐟 漏网之鱼
+  - MATCH,🐟 漏网之鱼

rules/clash_providers/DustinWin_RS_Light.yaml

@@ -22,7 +22,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/cn.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cn.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cn.mrs"
     interval: 86400
 
   private:
@@ -30,7 +30,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/private.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/private.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/private.mrs"
     interval: 86400
 
   tld-proxy:
@@ -38,7 +38,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/tld-proxy.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/tld-proxy.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/tld-proxy.mrs"
     interval: 86400
 
   proxy:
@@ -46,7 +46,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/proxy.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/proxy.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/proxy.mrs"
     interval: 86400
 
   privateip:
@@ -54,7 +54,7 @@ rule-providers:
     behavior: ipcidr
     format: mrs
     path: ./ruleset/privateip.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/privateip.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/privateip.mrs"
     interval: 86400
 
   cnip:
@@ -62,7 +62,7 @@ rule-providers:
     behavior: ipcidr
     format: mrs
     path: ./ruleset/cnip.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cnip.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cnip.mrs"
     interval: 86400
 
   telegramip:
@@ -70,7 +70,7 @@ rule-providers:
     behavior: ipcidr
     format: mrs
     path: ./ruleset/telegramip.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/telegramip.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/telegramip.mrs"
     interval: 86400
 
 rules:
@@ -81,4 +81,4 @@ rules:
   - RULE-SET,privateip,DIRECT,no-resolve
   - RULE-SET,cnip,🎯 全球直连
   - RULE-SET,telegramip,📲 电报消息,no-resolve
-  - MATCH,🐟 漏网之鱼
+  - MATCH,🐟 漏网之鱼

rules/clash_providers/DustinWin_RS_Lite.yaml

@@ -35,7 +35,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/private.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/private.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/private.mrs"
     interval: 86400
 
   ads:
@@ -43,7 +43,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/ads.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/ads.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/ads.mrs"
     interval: 86400
 
   trackerslist:
@@ -51,7 +51,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/trackerslist.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/trackerslist.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/trackerslist.mrs"
     interval: 86400
 
   microsoft-cn:
@@ -59,7 +59,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/microsoft-cn.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/microsoft-cn.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/microsoft-cn.mrs"
     interval: 86400
 
   apple-cn:
@@ -67,7 +67,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/apple-cn.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/apple-cn.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/apple-cn.mrs"
     interval: 86400
 
   google-cn:
@@ -75,7 +75,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/google-cn.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/google-cn.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/google-cn.mrs"
     interval: 86400
 
   games-cn:
@@ -83,7 +83,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/games-cn.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/games-cn.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/games-cn.mrs"
     interval: 86400
 
   ai:
@@ -91,7 +91,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/ai.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/ai.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/ai.mrs"
     interval: 86400
 
   networktest:
@@ -99,7 +99,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/networktest.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/networktest.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/networktest.mrs"
     interval: 86400
 
   proxy:
@@ -107,7 +107,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/proxy.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/proxy.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/proxy.mrs"
     interval: 86400
 
   cn:
@@ -115,7 +115,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/cn.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cn.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cn.mrs"
     interval: 86400
 
   privateip:
@@ -123,7 +123,7 @@ rule-providers:
     behavior: ipcidr
     format: mrs
     path: ./ruleset/privateip.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/privateip.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/privateip.mrs"
     interval: 86400
 
   cnip:
@@ -131,7 +131,7 @@ rule-providers:
     behavior: ipcidr
     format: mrs
     path: ./ruleset/cnip.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cnip.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cnip.mrs"
     interval: 86400
 
   telegramip:
@@ -139,7 +139,7 @@ rule-providers:
     behavior: ipcidr
     format: mrs
     path: ./ruleset/telegramip.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/telegramip.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/telegramip.mrs"
     interval: 86400
 
 rules:
@@ -157,4 +157,4 @@ rules:
   - RULE-SET,privateip,🔒 私有网络,no-resolve
   - RULE-SET,cnip,🀄️ 直连 IP
   - RULE-SET,telegramip,📲 电报消息,no-resolve
-  - MATCH,🐟 漏网之鱼
+  - MATCH,🐟 漏网之鱼

rules/clash_providers/DustinWin_RS_Lite_NoAds.yaml

@@ -32,7 +32,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/private.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/private.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/private.mrs"
     interval: 86400
 
   trackerslist:
@@ -40,7 +40,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/trackerslist.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/trackerslist.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/trackerslist.mrs"
     interval: 86400
 
   microsoft-cn:
@@ -48,7 +48,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/microsoft-cn.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/microsoft-cn.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/microsoft-cn.mrs"
     interval: 86400
 
   apple-cn:
@@ -56,7 +56,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/apple-cn.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/apple-cn.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/apple-cn.mrs"
     interval: 86400
 
   google-cn:
@@ -64,7 +64,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/google-cn.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/google-cn.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/google-cn.mrs"
     interval: 86400
 
   games-cn:
@@ -72,7 +72,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/games-cn.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/games-cn.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/games-cn.mrs"
     interval: 86400
 
   ai:
@@ -80,7 +80,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/ai.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/ai.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/ai.mrs"
     interval: 86400
 
   networktest:
@@ -88,7 +88,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/networktest.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/networktest.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/networktest.mrs"
     interval: 86400
 
   proxy:
@@ -96,7 +96,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/proxy.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/proxy.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/proxy.mrs"
     interval: 86400
 
   cn:
@@ -104,7 +104,7 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/cn.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cn-lite.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cn.mrs"
     interval: 86400
 
   privateip:
@@ -112,7 +112,7 @@ rule-providers:
     behavior: ipcidr
     format: mrs
     path: ./ruleset/privateip.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/privateip.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/privateip.mrs"
     interval: 86400
 
   cnip:
@@ -120,7 +120,7 @@ rule-providers:
     behavior: ipcidr
     format: mrs
     path: ./ruleset/cnip.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cnip.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cnip.mrs"
     interval: 86400
 
   telegramip:
@@ -128,7 +128,7 @@ rule-providers:
     behavior: ipcidr
     format: mrs
     path: ./ruleset/telegramip.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/telegramip.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/telegramip.mrs"
     interval: 86400
 
 rules:
@@ -145,4 +145,4 @@ rules:
   - RULE-SET,privateip,🔒 私有网络,no-resolve
   - RULE-SET,cnip,🀄️ 直连 IP
   - RULE-SET,telegramip,📲 电报消息,no-resolve
-  - MATCH,🐟 漏网之鱼
+  - MATCH,🐟 漏网之鱼

rules/clash_providers/ShellCrash_RS_Full_BanAds.yaml

@@ -1,4 +1,4 @@
-#ShellCrash-ruleset全分组规则+去广告
+#ShellCrash-ruleset 全分组规则+去广告 For mihomo By Maozai 260111
 
 #此版本为Maozai根据ACL4SSR规则修改优化而来，尽量在保持原有的基础上进行优化。
 #数据源采用了DustinWin/ruleset_geodata和MetaCubeX/meta-rules-dat两个开源项目的规则，感谢原作者的辛勤付出。
@@ -8,49 +8,52 @@
 
 #代理组
 proxy-groups:
-  - { name: 🚀 节点选择, type: select, proxies: [♻️ 自动选择, ✨ 自动选择（去高倍率）, 🛠️ 手动切换, ⚖️ 负载均衡, 🚑 故障转移, 🎯 全球直连, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇸🇬 狮城节点, 🇯🇵 日本节点, 🇰🇷 韩国节点, 🇺🇸 美国节点, 🇪🇺 欧洲节点, 👑 高级节点, 📉 省流节点, {providers_tags}] }
-  - { name: 🛠️ 手动切换, type: select, include-all: true, exclude-type: direct }
-  - { name: ♻️ 自动选择, type: url-test, interval: 600, tolerance: 50, include-all: true, exclude-type: direct }
-  - { name: ✨ 自动选择（去高倍率）, type: url-test, interval: 600, tolerance: 50, include-all: true, exclude-type: direct, filter: "(?i)^(?!.*(专线|专用|高级|高速|高倍率|IEPL|IPLC|x([2-9]|\\d{2,}))).*" }
-  - { name: ⚖️ 负载均衡, type: load-balance, interval: 600, include-all: true, exclude-type: direct, hidden: true }
-  - { name: 🚑 故障转移, type: fallback, interval: 600, include-all: true, exclude-type: direct, hidden: true }
+  - {name: 🚀 节点选择, type: select, proxies: [♻️ 自动选择, ✨ 自动选择（去高倍率）, 🛠️ 手动切换, ⚖️ 负载均衡, 🚑 故障转移, 🎯 本地直连, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇺🇸 美国节点, 🇯🇵 日本节点, 🇪🇺 欧洲节点, 🇰🇷 韩国节点, 🇸🇬 狮城节点, 👑 高级节点, 📉 省流节点, {providers_tags}]}
+  - {name: 🛠️ 手动切换, type: select, include-all: true, proxies: [🎯 本地直连, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇺🇸 美国节点, 🇯🇵 日本节点, 🇪🇺 欧洲节点, 🇰🇷 韩国节点, 🇸🇬 狮城节点, 👑 高级节点, 📉 省流节点, {providers_tags}]}
+  - {name: ♻️ 自动选择, type: url-test, interval: 1800, tolerance: 50, include-all: true, exclude-filter: "(?i)(剩余|重置|到期|防失联|官网|导航|客服|http|www)"}
+  - {name: ✨ 自动选择（去高倍率）, type: url-test, interval: 1800, tolerance: 50, include-all: true, exclude-filter: "(?i)(剩余|重置|到期|防失联|官网|导航|客服|http|www)`(?i)(专线|专用|高级|直连|急速|高速|高倍率|游戏|铂金|钻石|企业|VIP|Ultra|Game|IEPL|IPLC|AIA|BGP|GIA|CN2|CMI|HGC|HKT|CTM|CC|AC|x([2-9]|\\d{2,}))"}
+  - {name: ⚖️ 负载均衡, type: load-balance, interval: 1800, include-all: true, hidden: true, exclude-filter: "(?i)(剩余|重置|到期|防失联|官网|导航|客服|http|www)"}
+  - {name: 🚑 故障转移, type: fallback, interval: 1800, include-all: true, hidden: true, exclude-filter: "(?i)(剩余|重置|到期|防失联|官网|导航|客服|http|www)"}
+  #
+  - {name: 🤖 AI 平台, type: select, proxies: [🚀 节点选择, 🤖 AI节点（过滤港澳）, 🎯 本地直连, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇺🇸 美国节点, 🇯🇵 日本节点, 🇪🇺 欧洲节点, 🇰🇷 韩国节点, 🇸🇬 狮城节点, 👑 高级节点, 📉 省流节点, {providers_tags}]}
+  - {name: 🤖 AI节点（过滤港澳）, type: url-test, interval: 3600, tolerance: 50, include-all: true, exclude-filter: "(?i)(剩余|重置|到期|防失联|官网|导航|客服|http|www)`(?i)(🇭🇰|港|🇲🇴|澳门|hk|hongkong|hong kong)", hidden: true}
+  - {name: 🎬 奈飞视频, type: select, proxies: [🚀 节点选择, 🎬 奈飞节点, 🎯 本地直连, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇺🇸 美国节点, 🇯🇵 日本节点, 🇪🇺 欧洲节点, 🇰🇷 韩国节点, 🇸🇬 狮城节点, 👑 高级节点, 📉 省流节点, {providers_tags}]}
+  - {name: 🎬 奈飞节点, type: url-test, interval: 1800, tolerance: 50, include-all: true, filter: "(?i)(NF|奈飞|解锁|Netflix|NETFLIX|Media)", hidden: true}
+  - {name: ▶️ 油管视频, type: select, proxies: [🚀 节点选择, 🎯 本地直连, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇺🇸 美国节点, 🇯🇵 日本节点, 🇪🇺 欧洲节点, 🇰🇷 韩国节点, 🇸🇬 狮城节点, 👑 高级节点, 📉 省流节点, {providers_tags}]}
+  - {name: 📢 谷歌推送, type: select, proxies: [🚀 节点选择, 🎯 本地直连, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇺🇸 美国节点, 🇯🇵 日本节点, 🇪🇺 欧洲节点, 🇰🇷 韩国节点, 🇸🇬 狮城节点, 👑 高级节点, 📉 省流节点, {providers_tags}]}
+  - {name: 📲 电报消息, type: select, proxies: [🚀 节点选择, 🎯 本地直连, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇺🇸 美国节点, 🇯🇵 日本节点, 🇪🇺 欧洲节点, 🇰🇷 韩国节点, 🇸🇬 狮城节点, 👑 高级节点, 📉 省流节点, {providers_tags}]}
+  - {name: 🌍 国际媒体, type: select, proxies: [🚀 节点选择, 🎯 本地直连, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇺🇸 美国节点, 🇯🇵 日本节点, 🇪🇺 欧洲节点, 🇰🇷 韩国节点, 🇸🇬 狮城节点, 👑 高级节点, 📉 省流节点, {providers_tags}]}
+  - {name: 🌐 国际流量, type: select, proxies: [🚀 节点选择, 🎯 本地直连, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇺🇸 美国节点, 🇯🇵 日本节点, 🇪🇺 欧洲节点, 🇰🇷 韩国节点, 🇸🇬 狮城节点, 👑 高级节点, 📉 省流节点, {providers_tags}]}
+  - {name: 🎮 外服游戏, type: select, proxies: [🚀 节点选择, 🎯 本地直连, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇺🇸 美国节点, 🇯🇵 日本节点, 🇪🇺 欧洲节点, 🇰🇷 韩国节点, 🇸🇬 狮城节点, 👑 高级节点, 📉 省流节点, {providers_tags}]}
 
-  - { name: 🤖 AI 平台, type: select, proxies: [🚀 节点选择, 🤖 AI节点（过滤港澳）, 🎯 全球直连, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇸🇬 狮城节点, 🇯🇵 日本节点, 🇰🇷 韩国节点, 🇺🇸 美国节点, 🇪🇺 欧洲节点, 👑 高级节点, 📉 省流节点, {providers_tags}] }
-  - { name: 🤖 AI节点（过滤港澳）, type: url-test, interval: 1800, tolerance: 50, include-all: true, filter: "(?i)^(?!.*(🇭🇰|港|🇲🇴|澳门|hk|hongkong|hong kong)).*", hidden: true }
-  - { name: 📢 谷歌FCM, type: select, proxies: [🚀 节点选择, 🎯 全球直连, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇸🇬 狮城节点, 🇯🇵 日本节点, 🇰🇷 韩国节点, 🇺🇸 美国节点, 🇪🇺 欧洲节点, 👑 高级节点, 📉 省流节点, {providers_tags}] }
-  - { name: 🎥 奈飞视频, type: select, proxies: [🚀 节点选择, 🎥 奈飞节点, 🎯 全球直连, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇸🇬 狮城节点, 🇯🇵 日本节点, 🇰🇷 韩国节点, 🇺🇸 美国节点, 🇪🇺 欧洲节点, 👑 高级节点, 📉 省流节点, {providers_tags}] }
-  - { name: 🎥 奈飞节点, type: url-test, interval: 1800, tolerance: 50, include-all: true, filter: "(?i)(NF|奈飞|解锁|Netflix|NETFLIX|Media)", hidden: true }
-  - { name: 📹 油管视频, type: select, proxies: [🚀 节点选择, 🎯 全球直连, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇸🇬 狮城节点, 🇯🇵 日本节点, 🇰🇷 韩国节点, 🇺🇸 美国节点, 🇪🇺 欧洲节点, 👑 高级节点, 📉 省流节点, {providers_tags}] }
-  - { name: 📲 电报消息, type: select, proxies: [🚀 节点选择, 🎯 全球直连, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇸🇬 狮城节点, 🇯🇵 日本节点, 🇰🇷 韩国节点, 🇺🇸 美国节点, 🇪🇺 欧洲节点, 👑 高级节点, 📉 省流节点, {providers_tags}] }
-  - { name: 🌍 国外媒体, type: select, proxies: [🚀 节点选择, 🎯 全球直连, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇸🇬 狮城节点, 🇯🇵 日本节点, 🇰🇷 韩国节点, 🇺🇸 美国节点, 🇪🇺 欧洲节点, 👑 高级节点, 📉 省流节点, {providers_tags}] }
-  - { name: 🧱 代理域名, type: select, proxies: [🚀 节点选择, 🎯 全球直连, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇸🇬 狮城节点, 🇯🇵 日本节点, 🇰🇷 韩国节点, 🇺🇸 美国节点, 🇪🇺 欧洲节点, 👑 高级节点, 📉 省流节点, {providers_tags}] }
-  - { name: 🎮 国外游戏, type: select, proxies: [🚀 节点选择, 🎯 全球直连, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇸🇬 狮城节点, 🇯🇵 日本节点, 🇰🇷 韩国节点, 🇺🇸 美国节点, 🇪🇺 欧洲节点, 👑 高级节点, 📉 省流节点, {providers_tags}] }
+  - {name: 🕹 国服游戏, type: select, proxies: [🎯 本地直连, 🚀 节点选择, ♻️ 自动选择, 🛠️ 手动切换, {providers_tags}]}
+  - {name: 🦾 Steam平台, type: select, proxies: [🎯 本地直连, 🚀 节点选择, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇺🇸 美国节点, 🇯🇵 日本节点, 🇪🇺 欧洲节点, 🇰🇷 韩国节点, 🇸🇬 狮城节点, 👑 高级节点, 📉 省流节点, {providers_tags}]}
+  - {name: 🪟 微软服务, type: select, proxies: [🎯 本地直连, 🚀 节点选择, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇺🇸 美国节点, 🇯🇵 日本节点, 🇪🇺 欧洲节点, 🇰🇷 韩国节点, 🇸🇬 狮城节点, 👑 高级节点, 📉 省流节点, {providers_tags}]}
+  - {name: 🍎 苹果服务, type: select, proxies: [🎯 本地直连, 🚀 节点选择, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇺🇸 美国节点, 🇯🇵 日本节点, 🇪🇺 欧洲节点, 🇰🇷 韩国节点, 🇸🇬 狮城节点, 👑 高级节点, 📉 省流节点, {providers_tags}]}
+  - {name: 🇬 谷歌服务, type: select, proxies: [🎯 本地直连, 🚀 节点选择, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇺🇸 美国节点, 🇯🇵 日本节点, 🇪🇺 欧洲节点, 🇰🇷 韩国节点, 🇸🇬 狮城节点, 👑 高级节点, 📉 省流节点, {providers_tags}]}
+  - {name: 🧲 BT下载, type: select, proxies: [🎯 本地直连, 🚀 节点选择, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇺🇸 美国节点, 🇯🇵 日本节点, 🇪🇺 欧洲节点, 🇰🇷 韩国节点, 🇸🇬 狮城节点, 👑 高级节点, 📉 省流节点, {providers_tags}]}
+  - {name: 📈 网络测速, type: select, proxies: [🎯 本地直连, 🚀 节点选择, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇺🇸 美国节点, 🇯🇵 日本节点, 🇪🇺 欧洲节点, 🇰🇷 韩国节点, 🇸🇬 狮城节点, 👑 高级节点, 📉 省流节点, {providers_tags}]}
+  - {name: ↔️ 直连软件, type: select, proxies: [🎯 本地直连, 🚀 节点选择, ♻️ 自动选择, 🛠️ 手动切换, {providers_tags}]}
+  - {name: 🀄️ 国内流量, type: select, proxies: [🎯 本地直连, 🚀 节点选择, ♻️ 自动选择, 🛠️ 手动切换, {providers_tags}]}
 
-  - { name: 🕹 国内游戏, type: select, proxies: [🎯 全球直连, 🚀 节点选择, ♻️ 自动选择, 🛠️ 手动切换, {providers_tags}] }
-  - { name: 🪟 微软服务, type: select, proxies: [🎯 全球直连, 🚀 节点选择, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇸🇬 狮城节点, 🇯🇵 日本节点, 🇰🇷 韩国节点, 🇺🇸 美国节点, 🇪🇺 欧洲节点, 👑 高级节点, 📉 省流节点, {providers_tags}] }
-  - { name: 🍎 苹果服务, type: select, proxies: [🎯 全球直连, 🚀 节点选择, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇸🇬 狮城节点, 🇯🇵 日本节点, 🇰🇷 韩国节点, 🇺🇸 美国节点, 🇪🇺 欧洲节点, 👑 高级节点, 📉 省流节点, {providers_tags}] }
-  - { name: 💾 trackerslist, type: select, proxies: [🎯 全球直连, 🚀 节点选择, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇸🇬 狮城节点, 🇯🇵 日本节点, 🇰🇷 韩国节点, 🇺🇸 美国节点, 🇪🇺 欧洲节点, 👑 高级节点, 📉 省流节点, {providers_tags}] }
-  - { name: 📈 网络测试, type: select, proxies: [🎯 全球直连, 🚀 节点选择, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇸🇬 狮城节点, 🇯🇵 日本节点, 🇰🇷 韩国节点, 🇺🇸 美国节点, 🇪🇺 欧洲节点, 👑 高级节点, 📉 省流节点, {providers_tags}] }
-  - { name: ↔️ 国外直连, type: select, proxies: [🎯 全球直连, 🚀 节点选择, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇸🇬 狮城节点, 🇯🇵 日本节点, 🇰🇷 韩国节点, 🇺🇸 美国节点, 🇪🇺 欧洲节点, 👑 高级节点, 📉 省流节点, {providers_tags}] }
-  - { name: 🀄️ 国内直连, type: select, proxies: [🎯 全球直连, 🚀 节点选择, ♻️ 自动选择, 🛠️ 手动切换, {providers_tags}] }
+  - {name: 🐟 漏网之鱼, type: select, proxies: [🚀 节点选择, 🎯 本地直连, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇺🇸 美国节点, 🇯🇵 日本节点, 🇪🇺 欧洲节点, 🇰🇷 韩国节点, 🇸🇬 狮城节点, 👑 高级节点, 📉 省流节点, {providers_tags}]}
 
-  - { name: 🐟 漏网之鱼, type: select, proxies: [🚀 节点选择, 🎯 全球直连, ♻️ 自动选择, 🛠️ 手动切换, 🇭🇰 香港节点, 🇹🇼 台湾节点, 🇸🇬 狮城节点, 🇯🇵 日本节点, 🇰🇷 韩国节点, 🇺🇸 美国节点, 🇪🇺 欧洲节点, 👑 高级节点, 📉 省流节点, {providers_tags}] }
+  - {name: 🛑 广告拦截, type: select, proxies: [🔴 拦截, 🟢 放行]}
+  - {name: 🔒 私有网络, type: select, proxies: [DIRECT], hidden: true}
+  - {name: 🔴 拦截, type: select, proxies: [REJECT], hidden: true}
+  - {name: 🟢 放行, type: select, proxies: [PASS], hidden: true}
+  - {name: 🎯 本地直连, type: select, proxies: [DIRECT], hidden: true}
 
-  - { name: 🛑 广告拦截, type: select, proxies: [🔴 全球拦截, 🎯 全球直连] }
-  - { name: 🔒 私有网络, type: select, proxies: [DIRECT], hidden: true }
-  - { name: 🔴 全球拦截, type: select, proxies: [REJECT], hidden: true }
-  - { name: 🎯 全球直连, type: select, proxies: [DIRECT], hidden: true }
+  - {name: 🇭🇰 香港节点, type: url-test, tolerance: 50, include-all: true, filter: "(?i)(🇭🇰|港|hk|hongkong|hong kong)"}
+  - {name: 🇹🇼 台湾节点, type: url-test, tolerance: 50, include-all: true, filter: "(?i)(🇹🇼|台|tw|taiwan|tai wan)", exclude-filter: "(?i)(仙台)"}
+  - {name: 🇺🇸 美国节点, type: url-test, tolerance: 50, include-all: true, filter: "(?i)(🇺🇸|美|洛杉矶|圣何塞|西雅图|纽约|波特兰|旧金山|休斯|达拉斯|硅谷|堪萨斯|迈阿密|凤凰城|芝加哥|奥勒姆|us|unitedstates|united states)", exclude-filter: "(?i)(南美|中美|拉美|亚美尼亚|美属)"}
+  - {name: 🇯🇵 日本节点, type: url-test, tolerance: 50, include-all: true, filter: "(?i)(🇯🇵|日|东京|大阪|埼玉|九州|仙台|jp|japan)", exclude-filter: "(?i)(尼日利亚|尼日尔|日内瓦)"}
+  - {name: 🇪🇺 欧洲节点, type: url-test, tolerance: 50, include-all: true, filter: "(?i)(🇪🇺|欧|德|英|法|荷|俄罗斯|西班牙|意大利|瑞士|瑞典|土耳其|挪威|芬兰|丹麦|比利时|爱尔兰|奥地利|波兰|葡萄牙|乌克兰|希腊|捷克|匈牙利|罗马尼亚|保加利亚|冰岛|克罗地亚|阿姆斯特丹)"}
+  - {name: 🇰🇷 韩国节点, type: url-test, tolerance: 50, include-all: true, filter: "(?i)(🇰🇷|韩|韓|首尔|kr|kor)"}
+  - {name: 🇸🇬 狮城节点, type: url-test, tolerance: 50, include-all: true, filter: "(?i)(🇸🇬|新加坡|狮城|sg|singapore)"}
 
-  - { name: 🇭🇰 香港节点, type: url-test, tolerance: 50, include-all: true, filter: "(?i)(🇭🇰|港|hk|hongkong|hong kong)" }
-  - { name: 🇹🇼 台湾节点, type: url-test, tolerance: 50, include-all: true, filter: "(?i)(🇹🇼|台|tw|taiwan|tai wan)" }
-  - { name: 🇸🇬 狮城节点, type: url-test, tolerance: 50, include-all: true, filter: "(?i)(🇸🇬|新|坡|狮城|sg|singapore)" }
-  - { name: 🇯🇵 日本节点, type: url-test, tolerance: 50, include-all: true, filter: "(?i)(🇯🇵|日|东京|大阪|泉日|埼玉|jp|japan)" }
-  - { name: 🇰🇷 韩国节点, type: url-test, tolerance: 50, include-all: true, filter: "(?i)(KR|首尔|韩|韓|kor)" }
-  - { name: 🇺🇸 美国节点, type: url-test, tolerance: 50, include-all: true, filter: "(?i)(🇺🇸|美|us|unitedstates|united states)" }
-  - { name: 🇪🇺 欧洲节点, type: url-test, tolerance: 50, include-all: true, filter: "(?i)(🇪🇺|欧|欧洲|eu|eur|德|英|瑞|法|荷|土耳|意大利|西班牙)" }
-
-  - { name: 👑 高级节点, type: url-test, interval: 1800, tolerance: 50, include-all: true, filter: "(?i)(专线|专用|高级|直连|急速|高速|高倍率|游戏|game|IEPL|IPLC|AIA|CTM|CC|AC)" }
-  - { name: 📉 省流节点, type: url-test, interval: 1800, tolerance: 50, include-all: true, filter: "(0\\.[1-6]|低倍率|省流|大流量)" }
+  - {name: 👑 高级节点, type: url-test, interval: 1800, tolerance: 50, include-all: true, filter: "(?i)(专线|专用|高级|直连|急速|高速|高倍率|游戏|铂金|钻石|企业|VIP|Ultra|Game|IEPL|IPLC|AIA|BGP|GIA|CN2|CMI|HGC|HKT|CTM|CC|AC|x([2-9]|\\d{2,}))"}
+  - {name: 📉 省流节点, type: url-test, interval: 1800, tolerance: 50, include-all: true, filter: "(?i)(0\\.[1-6]|低倍率|省流|大流量|公益|免费|闲时|Low)"}
 
 #规则提供者（更新mrs格式）
 rule-providers:
@@ -59,185 +62,193 @@ rule-providers:
     format: mrs
     interval: 86400
     behavior: domain
-    url: "https://fastly.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/ai.mrs"
+    proxy: DIRECT
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/ai.mrs"
   youtube:
     type: http
     format: mrs
     interval: 86400
     behavior: domain
-    url: "https://fastly.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/youtube.mrs"
+    proxy: DIRECT
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/youtube.mrs"
   netflix:
     type: http
     format: mrs
     interval: 86400
     behavior: domain
-    url: "https://fastly.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/netflix.mrs"
-  telegram:
-    type: http
-    format: mrs
-    interval: 86400
-    behavior: domain
-    url: "https://fastly.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@refs/heads/meta/geo/geosite/telegram.mrs"
+    proxy: DIRECT
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/netflix.mrs"
   telegramip:
     type: http
     format: mrs
     interval: 86400
     behavior: ipcidr
-    url: "https://fastly.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/telegramip.mrs"
+    proxy: DIRECT
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/telegramip.mrs"
   trackerslist:
     type: http
     format: mrs
     interval: 86400
     behavior: domain
-    url: "https://fastly.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/trackerslist.mrs"
+    proxy: DIRECT
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/trackerslist.mrs"
+  applications:
+    type: http
+    format: text
+    interval: 86400
+    behavior: classical
+    proxy: DIRECT
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/applications.list"
   private:
     type: http
     format: mrs
     interval: 86400
     behavior: domain
-    url: "https://fastly.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/private.mrs"
+    proxy: DIRECT
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/private.mrs"
   privateip:
     type: http
     format: mrs
     interval: 86400
     behavior: ipcidr
-    url: "https://fastly.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/privateip.mrs"
+    proxy: DIRECT
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/privateip.mrs"
   networktest:
     type: http
     format: mrs
     interval: 86400
     behavior: domain
-    url: "https://fastly.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/networktest.mrs"
+    proxy: DIRECT
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/networktest.mrs"
   apple-cn:
     type: http
     format: mrs
     interval: 86400
     behavior: domain
-    url: "https://fastly.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/apple-cn.mrs"
+    proxy: DIRECT
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/apple-cn.mrs"
   google-cn:
     type: http
     format: mrs
     interval: 86400
     behavior: domain
-    url: "https://fastly.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/google-cn.mrs"
+    proxy: DIRECT
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/google-cn.mrs"
   googlefcm:
     type: http
     format: mrs
     interval: 86400
     behavior: domain
-    url: "https://fastly.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@refs/heads/meta/geo/geosite/googlefcm.mrs"
+    proxy: DIRECT
+    url: "https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@refs/heads/meta/geo/geosite/googlefcm.mrs"
   steamcn:
     type: http
     format: mrs
     interval: 86400
     behavior: domain
-    url: "https://fastly.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@refs/heads/meta/geo/geosite/steam@cn.mrs"
+    proxy: DIRECT
+    url: "https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@refs/heads/meta/geo/geosite/steam@cn.mrs"
   microsoft-cn:
     type: http
     format: mrs
     interval: 86400
     behavior: domain
-    url: "https://fastly.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/microsoft-cn.mrs"
+    proxy: DIRECT
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/microsoft-cn.mrs"
   games-cn:
     type: http
     format: mrs
     interval: 86400
     behavior: domain
-    url: "https://fastly.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/games-cn.mrs"
+    proxy: DIRECT
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/games-cn.mrs"
   games:
     type: http
     format: mrs
     interval: 86400
     behavior: domain
-    url: "https://fastly.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/games.mrs"
+    proxy: DIRECT
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/games.mrs"
   gamesip:
     type: http
     format: mrs
     interval: 86400
     behavior: ipcidr
-    url: "https://fastly.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/gamesip.mrs"
-  tld-proxy:
-    type: http
-    format: mrs
-    interval: 86400
-    behavior: domain
-    url: "https://fastly.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/tld-proxy.mrs"
-  cn-lite:
-    type: http
-    format: mrs
-    interval: 86400
-    behavior: domain
-    url: "https://fastly.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cn-lite.mrs"
+    proxy: DIRECT
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/gamesip.mrs"
   mediaip:
     type: http
     format: mrs
     interval: 86400
     behavior: ipcidr
-    url: "https://fastly.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/mediaip.mrs"
+    proxy: DIRECT
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/mediaip.mrs"
   media:
     type: http
     format: mrs
     interval: 86400
     behavior: domain
-    url: "https://fastly.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/media.mrs"
-  gfw:
-    type: http
-    format: mrs
-    interval: 86400
-    behavior: domain
-    url: "https://fastly.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/gfw.mrs"
+    proxy: DIRECT
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/media.mrs"
   cnip:
     type: http
     format: mrs
     interval: 86400
     behavior: ipcidr
-    url: "https://fastly.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cnip.mrs"
+    proxy: DIRECT
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cnip.mrs"
   proxy:
     type: http
     format: mrs
     interval: 86400
     behavior: domain
-    url: "https://fastly.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/proxy.mrs"
+    proxy: DIRECT
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/proxy.mrs"
   cn:
     type: http
     format: mrs
     interval: 86400
     behavior: domain
-    url: "https://fastly.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cn.mrs"
+    proxy: DIRECT
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cn.mrs"
   ads:
     type: http
     format: mrs
     interval: 86400
     behavior: domain
-    url: "https://fastly.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/ads.mrs"
+    proxy: DIRECT
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/ads.mrs"
 
 #规则顺序
 rules:
+  - DOMAIN-SUFFIX,captive.apple.com,🍎 苹果服务
+  - DOMAIN-SUFFIX,kamo.teracloud.jp,🀄️ 国内流量
+
   - RULE-SET,privateip,🔒 私有网络,no-resolve
   - RULE-SET,private,🔒 私有网络
-  - RULE-SET,ads,🛑 广告拦截
-  - RULE-SET,networktest,📈 网络测试
-  - RULE-SET,trackerslist,💾 trackerslist
-  - RULE-SET,googlefcm,📢 谷歌FCM
-  - RULE-SET,google-cn,↔️ 国外直连
-  - RULE-SET,steamcn,↔️ 国外直连
-  - RULE-SET,microsoft-cn,🪟 微软服务
-  - RULE-SET,apple-cn,🍎 苹果服务
   - RULE-SET,telegramip,📲 电报消息,no-resolve
-  - RULE-SET,telegram,📲 电报消息
-  - RULE-SET,netflix,🎥 奈飞视频
-  - RULE-SET,youtube,📹 油管视频
-  - RULE-SET,ai,🤖 AI 平台
+  - RULE-SET,ads,🛑 广告拦截
+
+  - RULE-SET,networktest,📈 网络测速
+  - RULE-SET,applications,↔️ 直连软件
+  - RULE-SET,trackerslist,🧲 BT下载
+  - RULE-SET,apple-cn,🍎 苹果服务
+  - RULE-SET,microsoft-cn,🪟 微软服务
+  - RULE-SET,google-cn,🇬 谷歌服务
+  - RULE-SET,steamcn,🦾 Steam平台
+  - RULE-SET,games-cn,🕹 国服游戏
+
+  - RULE-SET,googlefcm,📢 谷歌推送
+  - RULE-SET,netflix,🎬 奈飞视频
+  - RULE-SET,youtube,▶️ 油管视频
+  - RULE-SET,ai,🤖 AI 平台
+  - RULE-SET,media,🌍 国际媒体
+  - RULE-SET,games,🎮 外服游戏
+
+  - RULE-SET,proxy,🌐 国际流量
+  - RULE-SET,cn,🀄️ 国内流量
+  - RULE-SET,gamesip,🎮 外服游戏
+  - RULE-SET,mediaip,🌍 国际媒体
+  - RULE-SET,cnip,🀄️ 国内流量
 
-  - RULE-SET,games-cn,🕹 国内游戏
-  - RULE-SET,gamesip,🎮 国外游戏
-  - RULE-SET,games,🎮 国外游戏
-  - RULE-SET,mediaip,🌍 国外媒体
-  - RULE-SET,media,🌍 国外媒体
-  - RULE-SET,tld-proxy,🧱 代理域名
-  - RULE-SET,cn-lite,🀄️ 国内直连
-  - RULE-SET,gfw,🧱 代理域名
-  - RULE-SET,cnip,🀄️ 国内直连
-  - RULE-SET,proxy,🧱 代理域名
-  - RULE-SET,cn,🀄️ 国内直连
   - MATCH,🐟 漏网之鱼

rules/clash_providers/ShellCrash_RS_Nano.yaml

@@ -8,21 +8,21 @@ rule-providers:
     behavior: domain
     format: mrs
     path: ./ruleset/cn.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cn.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cn.mrs"
     interval: 86400
   privateip:
     type: http
     behavior: ipcidr
     format: mrs
     path: ./ruleset/privateip.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/privateip.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/privateip.mrs"
     interval: 86400
   cnip:
     type: http
     behavior: ipcidr
     format: mrs
     path: ./ruleset/cnip.mrs
-    url: "https://testingcf.jsdelivr.net/gh//DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cnip.mrs"
+    url: "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/mihomo-ruleset/cnip.mrs"
     interval: 86400
 rules:
   - RULE-SET,privateip,🎯 全球直连,no-resolve

rules/clash_providers/clash_providers.list

@@ -1,4 +1,5 @@
 ShellCrash-ruleset极简规则 ShellCrash_RS_Nano.yaml
+ShellCrash-ruleset全分组规则+去广告 ShellCrash_RS_Full_BanAds.yaml
 DustinWin-ruleset轻量规则 DustinWin_RS_Light.yaml
 DustinWin-ruleset标准规则 DustinWin_RS_Lite_NoAds.yaml
 DustinWin-ruleset标准规则+去广告 DustinWin_RS_Lite.yaml

rules/singbox_providers/DustinWin_RS_Full.json

@@ -1,23 +1,27 @@
 //DustinWin-ruleset全分组规则+去广告
 {
   "outbounds": [
-    { "tag": "🚀 节点选择", "type": "selector", "outbounds": [ "♻️ 自动选择", "👉 手动选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", "🎯 全球直连", {providers_tags} ] },
-    { "tag": "📈 网络测试", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags} ] },
+    { "tag": "🚀 节点选择", "type": "selector", "outbounds": [ "♻️ 自动选择", "👉 手动选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", "🎯 本地直连", {providers_tags} ] },
+    { "tag": "📈 网络测试", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags} ] },
     { "tag": "🤖 AI 平台", "type": "selector", "outbounds": [ "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点" ] },
-    { "tag": "📋 Trackerslist", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择" ] },
-    { "tag": "🎮 游戏服务", "type": "selector", "outbounds": [ "🎯 全球直连", "👑 高级节点", "🚀 节点选择" ] },
-    { "tag": "🪟 微软服务", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择" ] },
-    { "tag": "🇬 谷歌服务", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择" ] },
-    { "tag": "🍎 苹果服务", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择" ] },
+    { "tag": "📋 Trackerslist", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择" ] },
+    { "tag": "🎮 游戏服务", "type": "selector", "outbounds": [ "🎯 本地直连", "👑 高级节点", "🚀 节点选择" ] },
+    { "tag": "🪟 微软服务", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择" ] },
+    { "tag": "🇬 谷歌服务", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择" ] },
+    { "tag": "🍎 苹果服务", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择" ] },
+    { "tag": "🎥 奈飞视频", "type": "selector", "outbounds": [ "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags} ] },
+    { "tag": "📹 油管视频", "type": "selector", "outbounds": [ "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags} ] },
     { "tag": "🌍 国外媒体", "type": "selector", "outbounds": [ "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags} ] },
-    { "tag": "🎮 游戏平台", "type": "selector", "outbounds": [ "🚀 节点选择", "🎯 全球直连", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags} ] },
-    { "tag": "🛡️ 直连域名", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择" ] },
-    { "tag": "🀄️ 直连 IP", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择" ] },
-    { "tag": "🧱 代理域名", "type": "selector", "outbounds": [ "🚀 节点选择", "🎯 全球直连" ] },
+    { "tag": "🎮 游戏平台", "type": "selector", "outbounds": [ "🚀 节点选择", "🎯 本地直连", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags} ] },
+    { "tag": "🛡️ 直连域名", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择" ] },
+    { "tag": "🀄️ 直连 IP", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择" ] },
+    { "tag": "🧱 代理域名", "type": "selector", "outbounds": [ "🚀 节点选择", "🎯 本地直连" ] },
     { "tag": "📲 电报消息", "type": "selector", "outbounds": [ "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags} ] },
-    { "tag": "🐟 漏网之鱼", "type": "selector", "outbounds": [ "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags}, "🎯 全球直连" ] },
-    { "tag": "🎯 全球直连", "type": "selector", "outbounds": [ "DIRECT" ] },
-    { "tag": "GLOBAL", "type": "selector", "outbounds": [ "🚀 节点选择", "DIRECT" ] },
+    { "tag": "🐟 漏网之鱼", "type": "selector", "outbounds": [ "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags}, "🎯 本地直连" ] },
+    { "tag": "🛑 广告域名", "type": "selector", "outbounds": [ "🔴 全球拦截", "🎯 本地直连" ] },
+    { "tag": "🔴 全球拦截", "type": "block" },
+    { "tag": "🎯 本地直连", "type": "direct" },
+    { "tag": "GLOBAL", "type": "selector", "outbounds": [ "🚀 节点选择", "🎯 本地直连" ] },
     { "tag": "👑 高级节点", "type": "urltest", "use_all_providers": true, "include": "(?i)(专线|专用|高级|直连|急速|高倍率|游戏|game|IEPL|IPLC|AIA|CTM|CC|AC)" },
     { "tag": "📉 省流节点", "type": "urltest", "tolerance": 100, "use_all_providers": true, "include": "0\\.[1-5]|低倍率|省流|大流量" },
     { "tag": "♻️ 自动选择", "type": "urltest", "tolerance": 100, "use_all_providers": true },
@@ -30,24 +34,27 @@
   ],
   "route": {
     "rules": [
-      { "rule_set": [ "private" ], "outbound": "🎯 全球直连" },
-      { "rule_set": [ "ads" ], "action": "reject" },
+      { "rule_set": [ "private" ], "outbound": "🎯 本地直连" },
+      { "rule_set": [ "ads" ], "outbound": "🛑 广告域名" },
       { "rule_set": [ "trackerslist" ], "outbound": "📋 Trackerslist" },
       { "rule_set": [ "microsoft-cn" ], "outbound": "🪟 微软服务" },
       { "rule_set": [ "apple-cn" ], "outbound": "🍎 苹果服务" },
       { "rule_set": [ "google-cn" ], "outbound": "🇬 谷歌服务" },
       { "rule_set": [ "games-cn" ], "outbound": "🎮 游戏服务" },
+      { "rule_set": [ "netflix" ], "outbound": "🎥 奈飞视频" },
+      { "rule_set": [ "youtube" ], "outbound": "📹 油管视频" },
       { "rule_set": [ "media" ], "outbound": "🌍 国外媒体" },
       { "rule_set": [ "games" ], "outbound": "🎮 游戏平台" },
       { "rule_set": [ "ai" ], "outbound": "🤖 AI 平台" },
       { "rule_set": [ "networktest" ], "outbound": "📈 网络测试" },
       { "rule_set": [ "proxy" ], "outbound": "🧱 代理域名" },
       { "rule_set": [ "cn" ], "outbound": "🛡️ 直连域名" },
-      { "rule_set": [ "privateip" ], "outbound": "🎯 全球直连" },
+      { "rule_set": [ "privateip" ], "outbound": "🎯 本地直连" },
       { "rule_set": [ "telegramip" ], "outbound": "📲 电报消息" },
 
-      { "action": "resolve", "server": "dns_proxy", "strategy": "prefer_ipv4"},
+      { "action": "resolve", "server": "dns_proxy", "strategy": "prefer_ipv4", "match_only": true},
       { "rule_set": [ "cnip" ], "outbound": "🀄️ 直连 IP" },
+      { "rule_set": [ "netflixip" ], "outbound": "🎥 奈飞视频" },
       { "rule_set": [ "mediaip" ], "outbound": "🌍 国外媒体" },
       { "rule_set": [ "gamesip" ], "outbound": "🎮 游戏平台" }
     ],
@@ -57,126 +64,168 @@
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/private.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/private.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/private.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "ads",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/ads.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/ads.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/ads.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "trackerslist",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/trackerslist.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/trackerslist.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/trackerslist.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "microsoft-cn",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/microsoft-cn.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/microsoft-cn.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/microsoft-cn.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "apple-cn",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/apple-cn.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/apple-cn.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/apple-cn.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "google-cn",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/google-cn.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/google-cn.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/google-cn.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "games-cn",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/games-cn.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/games-cn.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/games-cn.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "netflix",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/netflix.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/netflix.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "youtube",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/youtube.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/youtube.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "media",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/media.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/media.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/media.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "games",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/games.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/games.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/games.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "ai",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/ai.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/ai.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/ai.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "networktest",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/networktest.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/networktest.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/networktest.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "proxy",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/proxy.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/proxy.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/proxy.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "cn",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/cn.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cn.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cn.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "privateip",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/privateip.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/privateip.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/privateip.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "cnip",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/cnip.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cnip.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cnip.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "netflixip",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/netflixip.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/netflixip.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "mediaip",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/mediaip.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/mediaip.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/mediaip.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "gamesip",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/gamesip.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/gamesip.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/gamesip.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "telegramip",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/telegramip.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/telegramip.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/telegramip.srs",
+        "download_detour": "DIRECT"
       }
     ],
     "final": "🐟 漏网之鱼"

rules/singbox_providers/DustinWin_RS_Full_NoAds.json

@@ -1,23 +1,25 @@
 //DustinWin-ruleset全分组规则
 {
   "outbounds": [
-    { "tag": "🚀 节点选择", "type": "selector", "outbounds": [ "♻️ 自动选择", "👉 手动选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", "🎯 全球直连", {providers_tags} ] },
-    { "tag": "📈 网络测试", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags} ] },
+    { "tag": "🚀 节点选择", "type": "selector", "outbounds": [ "♻️ 自动选择", "👉 手动选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", "🎯 本地直连", {providers_tags} ] },
+    { "tag": "📈 网络测试", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags} ] },
     { "tag": "🤖 AI 平台", "type": "selector", "outbounds": [ "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点" ] },
-    { "tag": "📋 Trackerslist", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择" ] },
-    { "tag": "🎮 游戏服务", "type": "selector", "outbounds": [ "🎯 全球直连", "👑 高级节点", "🚀 节点选择" ] },
-    { "tag": "🪟 微软服务", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择" ] },
-    { "tag": "🇬 谷歌服务", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择" ] },
-    { "tag": "🍎 苹果服务", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择" ] },
+    { "tag": "📋 Trackerslist", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择" ] },
+    { "tag": "🎮 游戏服务", "type": "selector", "outbounds": [ "🎯 本地直连", "👑 高级节点", "🚀 节点选择" ] },
+    { "tag": "🪟 微软服务", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择" ] },
+    { "tag": "🇬 谷歌服务", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择" ] },
+    { "tag": "🍎 苹果服务", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择" ] },
+    { "tag": "🎥 奈飞视频", "type": "selector", "outbounds": [ "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags} ] },
+    { "tag": "📹 油管视频", "type": "selector", "outbounds": [ "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags} ] },
     { "tag": "🌍 国外媒体", "type": "selector", "outbounds": [ "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags} ] },
-    { "tag": "🎮 游戏平台", "type": "selector", "outbounds": [ "🚀 节点选择", "🎯 全球直连", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags} ] },
-    { "tag": "🛡️ 直连域名", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择" ] },
-    { "tag": "🀄️ 直连 IP", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择" ] },
-    { "tag": "🧱 代理域名", "type": "selector", "outbounds": [ "🚀 节点选择", "🎯 全球直连" ] },
+    { "tag": "🎮 游戏平台", "type": "selector", "outbounds": [ "🚀 节点选择", "🎯 本地直连", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags} ] },
+    { "tag": "🛡️ 直连域名", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择" ] },
+    { "tag": "🀄️ 直连 IP", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择" ] },
+    { "tag": "🧱 代理域名", "type": "selector", "outbounds": [ "🚀 节点选择", "🎯 本地直连" ] },
     { "tag": "📲 电报消息", "type": "selector", "outbounds": [ "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags} ] },
-    { "tag": "🐟 漏网之鱼", "type": "selector", "outbounds": [ "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags}, "🎯 全球直连" ] },
-    { "tag": "🎯 全球直连", "type": "selector", "outbounds": [ "DIRECT" ] },
-    { "tag": "GLOBAL", "type": "selector", "outbounds": [ "🚀 节点选择", "DIRECT" ] },
+    { "tag": "🐟 漏网之鱼", "type": "selector", "outbounds": [ "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags}, "🎯 本地直连" ] },
+    { "tag": "🎯 本地直连", "type": "direct" },
+    { "tag": "GLOBAL", "type": "selector", "outbounds": [ "🚀 节点选择", "🎯 本地直连" ] },
     { "tag": "👑 高级节点", "type": "urltest", "use_all_providers": true, "include": "(?i)(专线|专用|高级|直连|急速|高倍率|游戏|game|IEPL|IPLC|AIA|CTM|CC|AC)" },
     { "tag": "📉 省流节点", "type": "urltest", "tolerance": 100, "use_all_providers": true, "include": "0\\.[1-5]|低倍率|省流|大流量" },
     { "tag": "♻️ 自动选择", "type": "urltest", "tolerance": 100, "use_all_providers": true },
@@ -30,23 +32,26 @@
   ],
   "route": {
     "rules": [
-      { "rule_set": [ "private" ], "outbound": "🎯 全球直连" },
+      { "rule_set": [ "private" ], "outbound": "🎯 本地直连" },
       { "rule_set": [ "trackerslist" ], "outbound": "📋 Trackerslist" },
       { "rule_set": [ "microsoft-cn" ], "outbound": "🪟 微软服务" },
       { "rule_set": [ "apple-cn" ], "outbound": "🍎 苹果服务" },
       { "rule_set": [ "google-cn" ], "outbound": "🇬 谷歌服务" },
       { "rule_set": [ "games-cn" ], "outbound": "🎮 游戏服务" },
+      { "rule_set": [ "netflix" ], "outbound": "🎥 奈飞视频" },
+      { "rule_set": [ "youtube" ], "outbound": "📹 油管视频" },
       { "rule_set": [ "media" ], "outbound": "🌍 国外媒体" },
       { "rule_set": [ "games" ], "outbound": "🎮 游戏平台" },
       { "rule_set": [ "ai" ], "outbound": "🤖 AI 平台" },
       { "rule_set": [ "networktest" ], "outbound": "📈 网络测试" },
       { "rule_set": [ "proxy" ], "outbound": "🧱 代理域名" },
       { "rule_set": [ "cn" ], "outbound": "🛡️ 直连域名" },
-      { "rule_set": [ "privateip" ], "outbound": "🎯 全球直连" },
+      { "rule_set": [ "privateip" ], "outbound": "🎯 本地直连" },
       { "rule_set": [ "telegramip" ], "outbound": "📲 电报消息" },
 
-	    { "action": "resolve", "server": "dns_proxy", "strategy": "prefer_ipv4"},
+      { "action": "resolve", "server": "dns_proxy", "strategy": "prefer_ipv4", "match_only": true},
       { "rule_set": [ "cnip" ], "outbound": "🀄️ 直连 IP" },
+      { "rule_set": [ "netflixip" ], "outbound": "🎥 奈飞视频" },
       { "rule_set": [ "mediaip" ], "outbound": "🌍 国外媒体" },
       { "rule_set": [ "gamesip" ], "outbound": "🎮 游戏平台" }
     ],
@@ -56,119 +61,160 @@
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/private.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/private.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/private.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "trackerslist",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/trackerslist.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/trackerslist.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/trackerslist.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "microsoft-cn",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/microsoft-cn.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/microsoft-cn.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/microsoft-cn.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "apple-cn",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/apple-cn.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/apple-cn.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/apple-cn.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "google-cn",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/google-cn.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/google-cn.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/google-cn.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "games-cn",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/games-cn.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/games-cn.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/games-cn.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "netflix",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/netflix.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/netflix.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "youtube",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/youtube.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/youtube.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "media",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/media.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/media.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/media.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "games",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/games.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/games.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/games.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "ai",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/ai.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/ai.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/ai.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "networktest",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/networktest.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/networktest.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/networktest.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "proxy",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/proxy.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/proxy.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/proxy.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "cn",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/cn.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cn.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cn.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "privateip",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/privateip.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/privateip.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/privateip.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "cnip",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/cnip.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cnip.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cnip.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "netflixip",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/netflixip.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/netflixip.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "mediaip",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/mediaip.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/mediaip.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/mediaip.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "gamesip",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/gamesip.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/gamesip.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/gamesip.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "telegramip",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/telegramip.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/telegramip.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/telegramip.srs",
+        "download_detour": "DIRECT"
       }
     ],
     "final": "🐟 漏网之鱼"

rules/singbox_providers/DustinWin_RS_Light.json

@@ -1,12 +1,12 @@
 //DustinWin-ruleset轻量规则
 {
   "outbounds": [
-    { "tag": "🚀 节点选择", "type": "selector", "outbounds": [ "♻️ 自动选择", "👉 手动选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", "🎯 全球直连", {providers_tags} ] },
-    { "tag": "🧱 代理域名", "type": "selector", "outbounds": [ "🚀 节点选择", "🎯 全球直连" ] },
+    { "tag": "🚀 节点选择", "type": "selector", "outbounds": [ "♻️ 自动选择", "👉 手动选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", "🎯 本地直连", {providers_tags} ] },
+    { "tag": "🧱 代理域名", "type": "selector", "outbounds": [ "🚀 节点选择", "🎯 本地直连" ] },
     { "tag": "📲 电报消息", "type": "selector", "outbounds": [ "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags} ] },
-    { "tag": "🐟 漏网之鱼", "type": "selector", "outbounds": [ "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags}, "🎯 全球直连" ] },
-    { "tag": "🎯 全球直连", "type": "selector", "outbounds": [ "DIRECT" ] },
-    { "tag": "GLOBAL", "type": "selector", "outbounds": [ "🚀 节点选择", "DIRECT" ] },
+    { "tag": "🐟 漏网之鱼", "type": "selector", "outbounds": [ "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags}, "🎯 本地直连" ] },
+    { "tag": "🎯 本地直连", "type": "direct" },
+    { "tag": "GLOBAL", "type": "selector", "outbounds": [ "🚀 节点选择", "🎯 本地直连" ] },
     { "tag": "👑 高级节点", "type": "urltest", "use_all_providers": true, "include": "(?i)(专线|专用|高级|直连|急速|高倍率|游戏|game|IEPL|IPLC|AIA|CTM|CC|AC)" },
     { "tag": "📉 省流节点", "type": "urltest", "tolerance": 100, "use_all_providers": true, "include": "0\\.[1-5]|低倍率|省流|大流量" },
     { "tag": "♻️ 自动选择", "type": "urltest", "tolerance": 100, "use_all_providers": true },
@@ -19,15 +19,15 @@
   ],
   "route": {
     "rules": [
-      { "rule_set": [ "private" ], "outbound": "🎯 全球直连" },
+      { "rule_set": [ "private" ], "outbound": "🎯 本地直连" },
       { "rule_set": [ "tld-proxy" ], "outbound": "🧱 代理域名" },
       { "rule_set": [ "proxy" ], "outbound": "🧱 代理域名" },
-      { "rule_set": [ "cn" ], "outbound": "🎯 全球直连" },
-      { "rule_set": [ "privateip" ], "outbound": "🎯 全球直连" },
+      { "rule_set": [ "cn" ], "outbound": "🎯 本地直连" },
+      { "rule_set": [ "privateip" ], "outbound": "🎯 本地直连" },
       { "rule_set": [ "telegramip" ], "outbound": "📲 电报消息" },
 
-      { "action": "resolve", "server": "dns_proxy", "strategy": "prefer_ipv4"},
-      { "rule_set": [ "cnip" ], "outbound": "🎯 全球直连" }
+      { "action": "resolve", "server": "dns_proxy", "strategy": "prefer_ipv4", "match_only": true},
+      { "rule_set": [ "cnip" ], "outbound": "🎯 本地直连" }
     ],
     "rule_set": [
       {
@@ -35,49 +35,56 @@
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/cn.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cn.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cn.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "private",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/private.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/private.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/private.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "tld-proxy",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/tld-proxy.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/tld-proxy.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/tld-proxy.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "proxy",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/proxy.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/proxy.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/proxy.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "privateip",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/privateip.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/privateip.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/privateip.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "cnip",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/cnip.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cnip.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cnip.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "telegramip",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/telegramip.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/telegramip.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/telegramip.srs",
+        "download_detour": "DIRECT"
       }
     ],
     "final": "🐟 漏网之鱼"

rules/singbox_providers/DustinWin_RS_Lite.json

@@ -1,21 +1,23 @@
 //DustinWin-ruleset标准规则+去广告
 {
   "outbounds": [
-    { "tag": "🚀 节点选择", "type": "selector", "outbounds": [ "♻️ 自动选择", "👉 手动选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", "🎯 全球直连", {providers_tags} ] },
-    { "tag": "📈 网络测试", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags} ] },
+    { "tag": "🚀 节点选择", "type": "selector", "outbounds": [ "♻️ 自动选择", "👉 手动选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", "🎯 本地直连", {providers_tags} ] },
+    { "tag": "📈 网络测试", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags} ] },
     { "tag": "🤖 AI 平台", "type": "selector", "outbounds": [ "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点" ] },
-    { "tag": "📋 Trackerslist", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择" ] },
-    { "tag": "🎮 游戏服务", "type": "selector", "outbounds": [ "🎯 全球直连", "👑 高级节点", "🚀 节点选择" ] },
-    { "tag": "🪟 微软服务", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择" ] },
-    { "tag": "🇬 谷歌服务", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择" ] },
-    { "tag": "🍎 苹果服务", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择" ] },
-    { "tag": "🛡️ 直连域名", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择" ] },
-    { "tag": "🀄️ 直连 IP", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择" ] },
-    { "tag": "🧱 代理域名", "type": "selector", "outbounds": [ "🚀 节点选择", "🎯 全球直连" ] },
+    { "tag": "📋 Trackerslist", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择" ] },
+    { "tag": "🎮 游戏服务", "type": "selector", "outbounds": [ "🎯 本地直连", "👑 高级节点", "🚀 节点选择" ] },
+    { "tag": "🪟 微软服务", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择" ] },
+    { "tag": "🇬 谷歌服务", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择" ] },
+    { "tag": "🍎 苹果服务", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择" ] },
+    { "tag": "🛡️ 直连域名", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择" ] },
+    { "tag": "🀄️ 直连 IP", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择" ] },
+    { "tag": "🧱 代理域名", "type": "selector", "outbounds": [ "🚀 节点选择", "🎯 本地直连" ] },
     { "tag": "📲 电报消息", "type": "selector", "outbounds": [ "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags} ] },
-    { "tag": "🐟 漏网之鱼", "type": "selector", "outbounds": [ "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags}, "🎯 全球直连" ] },
-    { "tag": "🎯 全球直连", "type": "selector", "outbounds": [ "DIRECT" ] },
-    { "tag": "GLOBAL", "type": "selector", "outbounds": [ "🚀 节点选择", "DIRECT" ] },
+    { "tag": "🐟 漏网之鱼", "type": "selector", "outbounds": [ "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags}, "🎯 本地直连" ] },
+    { "tag": "🛑 广告域名", "type": "selector", "outbounds": [ "🔴 全球拦截", "🎯 本地直连" ] },
+    { "tag": "🔴 全球拦截", "type": "block" },
+    { "tag": "🎯 本地直连", "type": "direct" },
+    { "tag": "GLOBAL", "type": "selector", "outbounds": [ "🚀 节点选择", "🎯 本地直连" ] },
     { "tag": "👑 高级节点", "type": "urltest", "use_all_providers": true, "include": "(?i)(专线|专用|高级|直连|急速|高倍率|游戏|game|IEPL|IPLC|AIA|CTM|CC|AC)" },
     { "tag": "📉 省流节点", "type": "urltest", "tolerance": 100, "use_all_providers": true, "include": "0\\.[1-5]|低倍率|省流|大流量" },
     { "tag": "♻️ 自动选择", "type": "urltest", "tolerance": 100, "use_all_providers": true },
@@ -28,8 +30,8 @@
   ],
   "route": {
     "rules": [
-      { "rule_set": [ "private" ], "outbound": "🎯 全球直连" },
-      { "rule_set": [ "ads" ], "action": "reject" },
+      { "rule_set": [ "private" ], "outbound": "🎯 本地直连" },
+      { "rule_set": [ "ads" ], "outbound": "🛑 广告域名" },
       { "rule_set": [ "trackerslist" ], "outbound": "📋 Trackerslist" },
       { "rule_set": [ "microsoft-cn" ], "outbound": "🪟 微软服务" },
       { "rule_set": [ "apple-cn" ], "outbound": "🍎 苹果服务" },
@@ -39,10 +41,10 @@
       { "rule_set": [ "networktest" ], "outbound": "📈 网络测试" },
       { "rule_set": [ "proxy" ], "outbound": "🧱 代理域名" },
       { "rule_set": [ "cn" ], "outbound": "🛡️ 直连域名" },
-      { "rule_set": [ "privateip" ], "outbound": "🎯 全球直连" },
+      { "rule_set": [ "privateip" ], "outbound": "🎯 本地直连" },
       { "rule_set": [ "telegramip" ], "outbound": "📲 电报消息" },
 
-      { "action": "resolve", "server": "dns_proxy", "strategy": "prefer_ipv4"},
+      { "action": "resolve", "server": "dns_proxy", "strategy": "prefer_ipv4", "match_only": true},
       { "rule_set": [ "cnip" ], "outbound": "🀄️ 直连 IP" }
     ],
     "rule_set": [
@@ -51,98 +53,112 @@
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/private.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/private.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/private.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "ads",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/ads.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/ads.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/ads.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "trackerslist",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/trackerslist.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/trackerslist.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/trackerslist.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "microsoft-cn",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/microsoft-cn.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/microsoft-cn.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/microsoft-cn.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "apple-cn",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/apple-cn.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/apple-cn.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/apple-cn.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "google-cn",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/google-cn.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/google-cn.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/google-cn.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "games-cn",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/games-cn.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/games-cn.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/games-cn.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "ai",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/ai.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/ai.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/ai.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "networktest",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/networktest.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/networktest.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/networktest.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "proxy",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/proxy.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/proxy.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/proxy.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "cn",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/cn.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cn.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cn.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "privateip",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/privateip.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/privateip.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/privateip.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "cnip",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/cnip.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cnip.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cnip.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "telegramip",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/telegramip.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/telegramip.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/telegramip.srs",
+        "download_detour": "DIRECT"
       }
     ],
     "final": "🐟 漏网之鱼"

rules/singbox_providers/DustinWin_RS_Lite_NoAds.json

@@ -1,21 +1,21 @@
 //DustinWin-ruleset标准规则
 {
   "outbounds": [
-    { "tag": "🚀 节点选择", "type": "selector", "outbounds": [ "♻️ 自动选择", "👉 手动选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", "🎯 全球直连", {providers_tags} ] },
-    { "tag": "📈 网络测试", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags} ] },
+    { "tag": "🚀 节点选择", "type": "selector", "outbounds": [ "♻️ 自动选择", "👉 手动选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", "🎯 本地直连", {providers_tags} ] },
+    { "tag": "📈 网络测试", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags} ] },
     { "tag": "🤖 AI 平台", "type": "selector", "outbounds": [ "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点" ] },
-    { "tag": "📋 Trackerslist", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择" ] },
-    { "tag": "🎮 游戏服务", "type": "selector", "outbounds": [ "🎯 全球直连", "👑 高级节点", "🚀 节点选择" ] },
-    { "tag": "🪟 微软服务", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择" ] },
-    { "tag": "🇬 谷歌服务", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择" ] },
-    { "tag": "🍎 苹果服务", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择" ] },
-    { "tag": "🛡️ 直连域名", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择" ] },
-    { "tag": "🀄️ 直连 IP", "type": "selector", "outbounds": [ "🎯 全球直连", "🚀 节点选择" ] },
-    { "tag": "🧱 代理域名", "type": "selector", "outbounds": [ "🚀 节点选择", "🎯 全球直连" ] },
+    { "tag": "📋 Trackerslist", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择" ] },
+    { "tag": "🎮 游戏服务", "type": "selector", "outbounds": [ "🎯 本地直连", "👑 高级节点", "🚀 节点选择" ] },
+    { "tag": "🪟 微软服务", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择" ] },
+    { "tag": "🇬 谷歌服务", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择" ] },
+    { "tag": "🍎 苹果服务", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择" ] },
+    { "tag": "🛡️ 直连域名", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择" ] },
+    { "tag": "🀄️ 直连 IP", "type": "selector", "outbounds": [ "🎯 本地直连", "🚀 节点选择" ] },
+    { "tag": "🧱 代理域名", "type": "selector", "outbounds": [ "🚀 节点选择", "🎯 本地直连" ] },
     { "tag": "📲 电报消息", "type": "selector", "outbounds": [ "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags} ] },
-    { "tag": "🐟 漏网之鱼", "type": "selector", "outbounds": [ "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags}, "🎯 全球直连" ] },
-    { "tag": "🎯 全球直连", "type": "selector", "outbounds": [ "DIRECT" ] },
-    { "tag": "GLOBAL", "type": "selector", "outbounds": [ "🚀 节点选择", "DIRECT" ] },
+    { "tag": "🐟 漏网之鱼", "type": "selector", "outbounds": [ "🚀 节点选择", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇯🇵 日本节点", "🇸🇬 新加坡节点", "🇺🇸 美国节点", "👑 高级节点", "📉 省流节点", {providers_tags}, "🎯 本地直连" ] },
+    { "tag": "🎯 本地直连", "type": "direct" },
+    { "tag": "GLOBAL", "type": "selector", "outbounds": [ "🚀 节点选择", "🎯 本地直连" ] },
     { "tag": "👑 高级节点", "type": "urltest", "use_all_providers": true, "include": "(?i)(专线|专用|高级|直连|急速|高倍率|游戏|game|IEPL|IPLC|AIA|CTM|CC|AC)" },
     { "tag": "📉 省流节点", "type": "urltest", "tolerance": 100, "use_all_providers": true, "include": "0\\.[1-5]|低倍率|省流|大流量" },
     { "tag": "♻️ 自动选择", "type": "urltest", "tolerance": 100, "use_all_providers": true },
@@ -28,7 +28,7 @@
   ],
   "route": {
     "rules": [
-      { "rule_set": [ "private" ], "outbound": "🎯 全球直连" },
+      { "rule_set": [ "private" ], "outbound": "🎯 本地直连" },
       { "rule_set": [ "trackerslist" ], "outbound": "📋 Trackerslist" },
       { "rule_set": [ "microsoft-cn" ], "outbound": "🪟 微软服务" },
       { "rule_set": [ "apple-cn" ], "outbound": "🍎 苹果服务" },
@@ -38,10 +38,10 @@
       { "rule_set": [ "networktest" ], "outbound": "📈 网络测试" },
       { "rule_set": [ "proxy" ], "outbound": "🧱 代理域名" },
       { "rule_set": [ "cn" ], "outbound": "🛡️ 直连域名" },
-      { "rule_set": [ "privateip" ], "outbound": "🎯 全球直连" },
+      { "rule_set": [ "privateip" ], "outbound": "🎯 本地直连" },
       { "rule_set": [ "telegramip" ], "outbound": "📲 电报消息" },
 
-      { "action": "resolve", "server": "dns_proxy", "strategy": "prefer_ipv4"},
+      { "action": "resolve", "server": "dns_proxy", "strategy": "prefer_ipv4", "match_only": true},
       { "rule_set": [ "cnip" ], "outbound": "🀄️ 直连 IP" }
 
     ],
@@ -51,91 +51,104 @@
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/private.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/private.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/private.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "trackerslist",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/trackerslist.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/trackerslist.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/trackerslist.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "microsoft-cn",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/microsoft-cn.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/microsoft-cn.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/microsoft-cn.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "apple-cn",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/apple-cn.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/apple-cn.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/apple-cn.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "google-cn",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/google-cn.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/google-cn.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/google-cn.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "games-cn",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/games-cn.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/games-cn.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/games-cn.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "ai",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/ai.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/ai.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/ai.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "networktest",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/networktest.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/networktest.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/networktest.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "proxy",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/proxy.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/proxy.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/proxy.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "cn",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/cn.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cn.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cn.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "privateip",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/privateip.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/privateip.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/privateip.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "cnip",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/cnip.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cnip.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cnip.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "telegramip",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/telegramip.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/telegramip.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/telegramip.srs",
+        "download_detour": "DIRECT"
       }
     ],
     "final": "🐟 漏网之鱼"

rules/singbox_providers/ShellCrash_RS_Full_BanAds.json

@@ -0,0 +1,272 @@
+//ShellCrash-ruleset 全分组规则+去广告 For Sing-box By Maozai 260111
+{
+  "outbounds": [
+    { "tag": "🚀 节点选择", "type": "selector", "outbounds": ["♻️ 自动选择", "✨ 自动选择（去高倍率）", "🛠️ 手动切换", "🎯 本地直连", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇺🇸 美国节点", "🇯🇵 日本节点", "🇪🇺 欧洲节点", "🇰🇷 韩国节点", "🇸🇬 狮城节点", "👑 高级节点", "📉 省流节点", {providers_tags}] },
+    { "tag": "🛠️ 手动切换", "type": "selector", "use_all_providers": true, "outbounds": ["🎯 本地直连", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇺🇸 美国节点", "🇯🇵 日本节点", "🇪🇺 欧洲节点", "🇰🇷 韩国节点", "🇸🇬 狮城节点", "👑 高级节点", "📉 省流节点", {providers_tags}] },
+    { "tag": "♻️ 自动选择", "type": "urltest", "use_all_providers": true, "exclude": "(?i)(剩余|重置|到期|防失联|官网|导航|客服|http|www)" },
+    { "tag": "✨ 自动选择（去高倍率）", "type": "urltest", "use_all_providers": true, "exclude": "(?i)(剩余|重置|到期|防失联|官网|导航|客服|http|www|专线|专用|高级|直连|急速|高速|高倍率|游戏|铂金|钻石|企业|VIP|Ultra|Game|IEPL|IPLC|AIA|BGP|GIA|CN2|CMI|HGC|HKT|CTM|CC|AC|x([2-9]|[0-9][0-9]+))" },
+
+    { "tag": "🤖 AI 平台", "type": "selector", "outbounds": ["🚀 节点选择", "🤖 AI节点（过滤港澳）", "🎯 本地直连", "♻️ 自动选择", "🛠️ 手动切换", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇺🇸 美国节点", "🇯🇵 日本节点", "🇪🇺 欧洲节点", "🇰🇷 韩国节点", "🇸🇬 狮城节点", "👑 高级节点", "📉 省流节点", {providers_tags}] },
+    { "tag": "🤖 AI节点（过滤港澳）", "type": "urltest", "use_all_providers": true, "exclude": "(?i)(剩余|重置|到期|防失联|官网|导航|客服|http|www|🇭🇰|港|🇲🇴|澳门|hk|hongkong|hong kong)" },
+    { "tag": "🎬 奈飞视频", "type": "selector", "outbounds": ["🚀 节点选择", "🎬 奈飞节点", "🎯 本地直连", "♻️ 自动选择", "🛠️ 手动切换", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇺🇸 美国节点", "🇯🇵 日本节点", "🇪🇺 欧洲节点", "🇰🇷 韩国节点", "🇸🇬 狮城节点", "👑 高级节点", "📉 省流节点", {providers_tags}] },
+    { "tag": "🎬 奈飞节点", "type": "urltest", "use_all_providers": true, "include": "(?i)(NF|奈飞|解锁|Netflix|NETFLIX|Media)" },
+    { "tag": "▶️ 油管视频", "type": "selector", "outbounds": ["🚀 节点选择", "🎯 本地直连", "♻️ 自动选择", "🛠️ 手动切换", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇺🇸 美国节点", "🇯🇵 日本节点", "🇪🇺 欧洲节点", "🇰🇷 韩国节点", "🇸🇬 狮城节点", "👑 高级节点", "📉 省流节点", {providers_tags}] },
+    { "tag": "📢 谷歌推送", "type": "selector", "outbounds": ["🚀 节点选择", "🎯 本地直连", "♻️ 自动选择", "🛠️ 手动切换", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇺🇸 美国节点", "🇯🇵 日本节点", "🇪🇺 欧洲节点", "🇰🇷 韩国节点", "🇸🇬 狮城节点", "👑 高级节点", "📉 省流节点", {providers_tags}] },    
+    { "tag": "📲 电报消息", "type": "selector", "outbounds": ["🚀 节点选择", "🎯 本地直连", "♻️ 自动选择", "🛠️ 手动切换", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇺🇸 美国节点", "🇯🇵 日本节点", "🇪🇺 欧洲节点", "🇰🇷 韩国节点", "🇸🇬 狮城节点", "👑 高级节点", "📉 省流节点", {providers_tags}] },
+    { "tag": "🌍 国际媒体", "type": "selector", "outbounds": ["🚀 节点选择", "🎯 本地直连", "♻️ 自动选择", "🛠️ 手动切换", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇺🇸 美国节点", "🇯🇵 日本节点", "🇪🇺 欧洲节点", "🇰🇷 韩国节点", "🇸🇬 狮城节点", "👑 高级节点", "📉 省流节点", {providers_tags}] },
+    { "tag": "🌐 国际流量", "type": "selector", "outbounds": ["🚀 节点选择", "🎯 本地直连", "♻️ 自动选择", "🛠️ 手动切换", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇺🇸 美国节点", "🇯🇵 日本节点", "🇪🇺 欧洲节点", "🇰🇷 韩国节点", "🇸🇬 狮城节点", "👑 高级节点", "📉 省流节点", {providers_tags}] },
+    { "tag": "🎮 外服游戏", "type": "selector", "outbounds": ["🚀 节点选择", "🎯 本地直连", "♻️ 自动选择", "🛠️ 手动切换", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇺🇸 美国节点", "🇯🇵 日本节点", "🇪🇺 欧洲节点", "🇰🇷 韩国节点", "🇸🇬 狮城节点", "👑 高级节点", "📉 省流节点", {providers_tags}] },
+
+    { "tag": "🕹 国服游戏", "type": "selector", "outbounds": ["🎯 本地直连", "🚀 节点选择", "♻️ 自动选择", "🛠️ 手动切换", {providers_tags}] },
+    { "tag": "🦾 Steam平台", "type": "selector", "outbounds": ["🎯 本地直连", "🚀 节点选择", "♻️ 自动选择", "🛠️ 手动切换", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇺🇸 美国节点", "🇯🇵 日本节点", "🇪🇺 欧洲节点", "🇰🇷 韩国节点", "🇸🇬 狮城节点", "👑 高级节点", "📉 省流节点", {providers_tags}] },
+    { "tag": "🪟 微软服务", "type": "selector", "outbounds": ["🎯 本地直连", "🚀 节点选择", "♻️ 自动选择", "🛠️ 手动切换", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇺🇸 美国节点", "🇯🇵 日本节点", "🇪🇺 欧洲节点", "🇰🇷 韩国节点", "🇸🇬 狮城节点", "👑 高级节点", "📉 省流节点", {providers_tags}] },
+    { "tag": "🍎 苹果服务", "type": "selector", "outbounds": ["🎯 本地直连", "🚀 节点选择", "♻️ 自动选择", "🛠️ 手动切换", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇺🇸 美国节点", "🇯🇵 日本节点", "🇪🇺 欧洲节点", "🇰🇷 韩国节点", "🇸🇬 狮城节点", "👑 高级节点", "📉 省流节点", {providers_tags}] },
+    { "tag": "🇬 谷歌服务", "type": "selector", "outbounds": ["🎯 本地直连", "🚀 节点选择", "♻️ 自动选择", "🛠️ 手动切换", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇺🇸 美国节点", "🇯🇵 日本节点", "🇪🇺 欧洲节点", "🇰🇷 韩国节点", "🇸🇬 狮城节点", "👑 高级节点", "📉 省流节点", {providers_tags}] },
+    { "tag": "🧲 BT下载", "type": "selector", "outbounds": ["🎯 本地直连", "🚀 节点选择", "♻️ 自动选择", "🛠️ 手动切换", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇺🇸 美国节点", "🇯🇵 日本节点", "🇪🇺 欧洲节点", "🇰🇷 韩国节点", "🇸🇬 狮城节点", "👑 高级节点", "📉 省流节点", {providers_tags}] },
+    { "tag": "📈 网络测速", "type": "selector", "outbounds": ["🎯 本地直连", "🚀 节点选择", "♻️ 自动选择", "🛠️ 手动切换", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇺🇸 美国节点", "🇯🇵 日本节点", "🇪🇺 欧洲节点", "🇰🇷 韩国节点", "🇸🇬 狮城节点", "👑 高级节点", "📉 省流节点", {providers_tags}] },
+    { "tag": "↔️ 直连软件", "type": "selector", "outbounds": ["🎯 本地直连", "🚀 节点选择", "♻️ 自动选择", "🛠️ 手动切换", {providers_tags}] },
+    { "tag": "🀄️ 国内流量", "type": "selector", "outbounds": ["🎯 本地直连", "🚀 节点选择", "♻️ 自动选择", "🛠️ 手动切换", {providers_tags}] },
+
+    { "tag": "🐟 漏网之鱼", "type": "selector", "outbounds": ["🚀 节点选择", "🎯 本地直连", "♻️ 自动选择", "🛠️ 手动切换", "🇭🇰 香港节点", "🇹🇼 台湾节点", "🇺🇸 美国节点", "🇯🇵 日本节点", "🇪🇺 欧洲节点", "🇰🇷 韩国节点", "🇸🇬 狮城节点", "👑 高级节点", "📉 省流节点", {providers_tags}] },
+
+    { "tag": "🛑 广告拦截", "type": "selector", "outbounds": ["⛔ 禁止连接", "🔀 规则放行", "🎯 本地直连"] },
+    { "tag": "⛔ 禁止连接", "type": "block" },
+    { "tag": "🔀 规则放行", "type": "pass" },
+    { "tag": "🎯 本地直连", "type": "direct" },
+    { "tag": "GLOBAL", "type": "selector", "outbounds": ["🚀 节点选择", "🎯 本地直连"] },
+
+    { "tag": "🇭🇰 香港节点", "type": "urltest", "use_all_providers": true, "include": "(?i)(🇭🇰|港|hk|hongkong|hong kong)" },
+    { "tag": "🇹🇼 台湾节点", "type": "urltest", "use_all_providers": true, "include": "(?i)(🇹🇼|台|tw|taiwan|tai wan)", "exclude": "(?i)(仙台)" },
+    { "tag": "🇺🇸 美国节点", "type": "urltest", "use_all_providers": true, "include": "(?i)(🇺🇸|美|洛杉矶|圣何塞|西雅图|纽约|波特兰|旧金山|休斯|达拉斯|硅谷|堪萨斯|迈阿密|凤凰城|芝加哥|奥勒姆|us|unitedstates|united states)", "exclude": "(?i)(南美|中美|拉美|亚美尼亚|美属)" },
+    { "tag": "🇯🇵 日本节点", "type": "urltest", "use_all_providers": true, "include": "(?i)(🇯🇵|日|东京|大阪|埼玉|九州|jp|japan)", "exclude": "(?i)(尼日利亚|尼日尔|日内瓦)" },
+    { "tag": "🇪🇺 欧洲节点", "type": "urltest", "use_all_providers": true, "include": "(?i)(🇪🇺|欧|德|英|法|荷|俄罗斯|西班牙|意大利|瑞士|瑞典|土耳其|挪威|芬兰|丹麦|比利时|爱尔兰|奥地利|波兰|葡萄牙|乌克兰|希腊|捷克|匈牙利|罗马尼亚|保加利亚|冰岛|克罗地亚|阿姆斯特丹)" },
+    { "tag": "🇰🇷 韩国节点", "type": "urltest", "use_all_providers": true, "include": "(?i)(🇰🇷|韩|韓|首尔|kr|kor)" },
+    { "tag": "🇸🇬 狮城节点", "type": "urltest", "use_all_providers": true, "include": "(?i)(🇸🇬|新加坡|狮城|sg|singapore)" },
+
+    { "tag": "👑 高级节点", "type": "urltest", "use_all_providers": true, "include": "(?i)(专线|专用|高级|直连|急速|高速|高倍率|游戏|铂金|钻石|企业|VIP|Ultra|Game|IEPL|IPLC|AIA|BGP|GIA|CN2|CMI|HGC|HKT|CTM|CC|AC|x([2-9]|[0-9][0-9]+))" },
+    { "tag": "📉 省流节点", "type": "urltest", "use_all_providers": true, "include": "(?i)(0[.][1-5]|低倍率|省流|大流量|公益|免费|闲时|Low)" }
+  ],
+  "route": {
+    "rules": [
+      { "domain_suffix": ["captive.apple.com"], "outbound": "🍎 苹果服务" },
+      { "domain_suffix": ["kamo.teracloud.jp"], "outbound": "🀄️ 国内流量" },
+
+      { "rule_set": ["private"], "outbound": "🎯 本地直连" },
+      { "rule_set": ["ads"], "outbound": "🛑 广告拦截" },
+
+      { "rule_set": ["networktest"], "outbound": "📈 网络测速" },
+      { "rule_set": ["applications"], "outbound": "↔️ 直连软件" },
+      { "rule_set": ["trackerslist"], "outbound": "🧲 BT下载" },
+      { "rule_set": ["apple-cn"], "outbound": "🍎 苹果服务" },
+      { "rule_set": ["microsoft-cn"], "outbound": "🪟 微软服务" },
+      { "rule_set": ["google-cn"], "outbound": "🇬 谷歌服务" },
+      { "rule_set": ["steamcn"], "outbound": "🦾 Steam平台" },
+      { "rule_set": ["games-cn"], "outbound": "🕹 国服游戏" },
+
+      { "rule_set": ["googlefcm"], "outbound": "📢 谷歌推送" },
+      { "rule_set": ["netflix"], "outbound": "🎬 奈飞视频" },
+      { "rule_set": ["youtube"], "outbound": "▶️ 油管视频" },
+      { "rule_set": ["ai"], "outbound": "🤖 AI 平台" },
+      { "rule_set": ["media"], "outbound": "🌍 国际媒体" },
+      { "rule_set": ["games"], "outbound": "🎮 外服游戏" },
+
+      { "rule_set": ["proxy"], "outbound": "🌐 国际流量" },
+      { "rule_set": ["cn"], "outbound": "🀄️ 国内流量" },
+
+      { "rule_set": ["privateip"], "outbound": "🎯 本地直连" },
+      { "rule_set": ["telegramip"], "outbound": "📲 电报消息" },
+
+      { "action": "resolve", "server": "dns_proxy", "strategy": "prefer_ipv4" },
+      { "rule_set": ["gamesip"], "outbound": "🎮 外服游戏" },
+      { "rule_set": ["mediaip"], "outbound": "🌍 国际媒体" },
+      { "rule_set": ["cnip"], "outbound": "🀄️ 国内流量" }
+    ],
+    "rule_set": [
+      {
+        "tag": "private",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/private.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/sing-box-ruleset/private.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "ads",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/ads.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/sing-box-ruleset/ads.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "networktest",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/networktest.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/sing-box-ruleset/networktest.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "applications",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/applications.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/sing-box-ruleset/applications.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "trackerslist",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/trackerslist.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/sing-box-ruleset/trackerslist.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "apple-cn",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/apple-cn.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/sing-box-ruleset/apple-cn.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "microsoft-cn",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/microsoft-cn.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/sing-box-ruleset/microsoft-cn.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "google-cn",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/google-cn.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/sing-box-ruleset/google-cn.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "steamcn",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/steamcn.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@refs/heads/sing/geo/geosite/steam%40cn.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "games-cn",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/games-cn.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/sing-box-ruleset/games-cn.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "googlefcm",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/googlefcm.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@refs/heads/sing/geo/geosite/googlefcm.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "netflix",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/netflix.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/sing-box-ruleset/netflix.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "youtube",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/youtube.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/sing-box-ruleset/youtube.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "ai",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/ai.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/sing-box-ruleset/ai.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "media",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/media.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/sing-box-ruleset/media.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "games",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/games.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/sing-box-ruleset/games.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "proxy",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/proxy.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/sing-box-ruleset/proxy.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "cn",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/cn.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/sing-box-ruleset/cn.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "privateip",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/privateip.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/sing-box-ruleset/privateip.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "telegramip",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/telegramip.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/sing-box-ruleset/telegramip.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "gamesip",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/gamesip.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/sing-box-ruleset/gamesip.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "mediaip",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/mediaip.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/sing-box-ruleset/mediaip.srs",
+        "download_detour": "DIRECT"
+      },
+      {
+        "tag": "cnip",
+        "type": "remote",
+        "format": "binary",
+        "path": "./ruleset/cnip.srs",
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@refs/heads/sing-box-ruleset/cnip.srs",
+        "download_detour": "DIRECT"
+      }
+    ],
+    "final": "🐟 漏网之鱼"
+  }
+}

rules/singbox_providers/ShellCrash_RS_Nano.json

@@ -1,16 +1,16 @@
 //ShellCrash-ruleset极简规则
 {
   "outbounds": [
-    { "tag": "🚀 节点选择", "type": "selector", "outbounds": [ {providers_tags}, "DIRECT" ], "use_all_providers": true },
-    { "tag": "🎯 全球直连", "type": "selector", "outbounds": [ "DIRECT", "🚀 节点选择" ] }
+    { "tag": "🚀 节点选择", "type": "selector", "outbounds": [ {providers_tags}, "🎯 本地直连" ], "use_all_providers": true },
+    { "tag": "🎯 本地直连", "type": "direct" }
   ],
   "route": {
     "rules": [
-      { "rule_set": [ "privateip" ], "outbound": "🎯 全球直连" },
-      { "rule_set": [ "cn" ], "outbound": "🎯 全球直连" },
+      { "rule_set": [ "privateip" ], "outbound": "🎯 本地直连" },
+      { "rule_set": [ "cn" ], "outbound": "🎯 本地直连" },
 
-      { "action": "resolve", "server": "dns_proxy", "strategy": "prefer_ipv4"},
-      { "rule_set": [ "cnip" ], "outbound": "🎯 全球直连" }
+      { "action": "resolve", "server": "dns_proxy", "strategy": "prefer_ipv4", "match_only": true},
+      { "rule_set": [ "cnip" ], "outbound": "🎯 本地直连" }
     ],
     "rule_set": [
       {
@@ -18,21 +18,24 @@
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/cn.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cn.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cn.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "privateip",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/privateip.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/privateip.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/privateip.srs",
+        "download_detour": "DIRECT"
       },
       {
         "tag": "cnip",
         "type": "remote",
         "format": "binary",
         "path": "./ruleset/cnip.srs",
-        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cnip.srs"
+        "url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cnip.srs",
+        "download_detour": "DIRECT"
       }
     ],
     "final": "🚀 节点选择"

rules/singbox_providers/singbox_providers.list

@@ -1,4 +1,5 @@
 ShellCrash-ruleset极简规则 ShellCrash_RS_Nano.json
+ShellCrash-ruleset全分组规则+去广告 ShellCrash_RS_Full_BanAds.json
 DustinWin-ruleset轻量规则 DustinWin_RS_Light.json
 DustinWin-ruleset标准规则 DustinWin_RS_Lite_NoAds.json
 DustinWin-ruleset标准规则+去广告 DustinWin_RS_Lite.json

scripts/init.sh

@@ -1,161 +1,6 @@
 #!/bin/sh
 # Copyright (C) Juewuy
 
-setdir() {
-    dir_avail() {
-        df $2 $1 | awk '{ for(i=1;i<=NF;i++){ if(NR==1){ arr[i]=$i; }else{ arr[i]=arr[i]" "$i; } } } END{ for(i=1;i<=NF;i++){ print arr[i]; } }' | grep -E 'Ava|可用' | awk '{print $2}'
-    }
-    set_usb_dir() {
-        echo -e "请选择安装目录"
-        du -hL /mnt | awk '{print " "NR" "$2"  "$1}'
-        read -p "请输入相应数字 > " num
-        dir=$(du -hL /mnt | awk '{print $2}' | sed -n "$num"p)
-        if [ -z "$dir" ]; then
-            echo -e "\033[31m输入错误！请重新设置！\033[0m"
-            set_usb_dir
-        fi
-    }
-    set_asus_dir() {
-        echo -e "请选择U盘目录"
-        du -hL /tmp/mnt | awk -F/ 'NF<=4' | awk '{print " "NR" "$2"  "$1}'
-        read -p "请输入相应数字 > " num
-        dir=$(du -hL /tmp/mnt | awk -F/ 'NF<=4' | awk '{print $2}' | sed -n "$num"p)
-        if [ ! -f "$dir/asusware.arm/etc/init.d/S50downloadmaster" ]; then
-            echo -e "\033[31m未找到下载大师自启文件：$dir/asusware.arm/etc/init.d/S50downloadmaster，请检查设置！\033[0m"
-            set_asus_dir
-        fi
-    }
-    set_cust_dir() {
-        echo "-----------------------------------------------"
-        echo "可用路径 剩余空间:"
-        df -h | awk '{print $6,$4}' | sed 1d
-        echo "路径是必须带 / 的格式，注意写入虚拟内存(/tmp,/opt,/sys...)的文件会在重启后消失！！！"
-        read -p "请输入自定义路径 > " dir
-        if [ "$(dir_avail $dir)" = 0 ] || [ -n "$(echo $dir | grep -E 'tmp|opt|sys')" ]; then
-            echo "\033[31m路径错误！请重新设置！\033[0m"
-            set_cust_dir
-        fi
-    }
-    echo "-----------------------------------------------"
-    if [ -n "$systype" ]; then
-        [ "$systype" = "Padavan" ] && dir=/etc/storage
-        [ "$systype" = "mi_snapshot" ] && {
-            echo -e "\033[33m检测到当前设备为小米官方系统，请选择安装位置\033[0m"
-            [ -d /data ] && $echo " 1 安装到 /data 目录,剩余空间：$(dir_avail /data -h)(支持软固化功能)"
-            [ -d /userdisk ] && $echo " 2 安装到 /userdisk 目录,剩余空间：$(dir_avail /userdisk -h)(支持软固化功能)"
-            [ -d /data/other_vol ] && $echo " 3 安装到 /data/other_vol 目录,剩余空间：$(dir_avail /data/other_vol -h)(支持软固化功能)"
-            $echo " 4 安装到自定义目录(不推荐，不明勿用！)"
-            echo " 0 退出安装"
-            echo "-----------------------------------------------"
-            read -p "请输入相应数字 > " num
-            case "$num" in
-            1)
-                dir=/data
-                ;;
-            2)
-                dir=/userdisk
-                ;;
-            3)
-                dir=/data/other_vol
-                ;;
-            4)
-                set_cust_dir
-                ;;
-            *)
-                exit 1
-                ;;
-            esac
-        }
-        [ "$systype" = "asusrouter" ] && {
-            echo -e "\033[33m检测到当前设备为华硕固件，请选择安装方式\033[0m"
-            echo -e " 1 基于USB设备安装(限23年9月之前固件，须插入\033[31m任意\033[0mUSB设备)"
-            echo -e " 2 基于自启脚本安装(仅支持梅林及部分非koolshare官改固件)"
-            echo -e " 3 基于U盘+下载大师安装(支持所有固件，限ARM设备，须插入U盘或移动硬盘)"
-            echo -e " 0 退出安装"
-            echo "-----------------------------------------------"
-            read -p "请输入相应数字 > " num
-            case "$num" in
-            1)
-                read -p "将脚本安装到USB存储/系统闪存？(1/0) > " res
-                [ "$res" = "1" ] && set_usb_dir || dir=/jffs
-                usb_status=1
-                ;;
-            2)
-                echo -e "如无法正常开机启动，请重新使用USB方式安装！"
-                sleep 2
-                dir=/jffs
-                ;;
-            3)
-                echo -e "请先在路由器网页后台安装下载大师并启用，之后选择外置存储所在目录！"
-                sleep 2
-                set_asus_dir
-                ;;
-            *)
-                exit 1
-                ;;
-            esac
-        }
-        [ "$systype" = "ng_snapshot" ] && dir=/tmp/mnt
-    else
-        echo -e "\033[33m安装ShellCrash至少需要预留约1MB的磁盘空间\033[0m"
-        echo -e " 1 在\033[32m/etc目录\033[0m下安装(适合root用户)"
-        echo -e " 2 在\033[32m/usr/share目录\033[0m下安装(适合Linux系统)"
-        echo -e " 3 在\033[32m当前用户目录\033[0m下安装(适合非root用户)"
-        echo -e " 4 在\033[32m外置存储\033[0m中安装"
-        echo -e " 5 手动设置安装目录"
-        echo -e " 0 退出安装"
-        echo "-----------------------------------------------"
-        read -p "请输入相应数字 > " num
-        #设置目录
-        case "$num" in
-        1)
-            dir=/etc
-            ;;
-        2)
-            dir=/usr/share
-            ;;
-        3)
-            dir=~/.local/share
-            mkdir -p ~/.config/systemd/user
-            ;;
-        4)
-            set_usb_dir
-            ;;
-        5)
-            echo "-----------------------------------------------"
-            echo "可用路径 剩余空间:"
-            df -h | awk '{print $6,$4}' | sed 1d
-            echo "路径是必须带 / 的格式，注意写入虚拟内存(/tmp,/opt,/sys...)的文件会在重启后消失！！！"
-            read -p "请输入自定义路径 > " dir
-            if [ -z "$dir" ]; then
-                echo -e "\033[31m路径错误！请重新设置！\033[0m"
-                setdir
-            fi
-            ;;
-        *)
-            echo "安装已取消"
-            exit 1
-            ;;
-        esac
-    fi
-
-    if [ ! -w $dir ]; then
-        echo -e "\033[31m没有$dir目录写入权限！请重新设置！\033[0m" && sleep 1 && setdir
-    else
-        echo -e "目标目录\033[32m$dir\033[0m空间剩余：$(dir_avail $dir -h)"
-        read -p "确认安装？(1/0) > " res
-        [ "$res" = "1" ] && CRASHDIR=$dir/ShellCrash || setdir
-    fi
-}
-setconfig() { #脚本配置工具
-    #参数1代表变量名，参数2代表变量值,参数3即文件路径
-    [ -z "$3" ] && configpath="$CRASHDIR"/configs/ShellCrash.cfg || configpath="${3}"
-    if grep -q "^${1}=" "$configpath"; then
-        sed -i "s#^${1}=.*#${1}=${2}#g" "$configpath"
-    else
-        printf '%s=%s\n' "$1" "$2" >>"$configpath"
-    fi
-}
 #特殊固件识别及标记
 [ -f "/etc/storage/started_script.sh" ] && { #老毛子固件
     systype=Padavan 
@@ -176,22 +21,26 @@ grep -qE '/(docker|lxc|kubepods|crio|containerd)/' /proc/1/cgroup || [ -f /run/.
 #检查环境变量
 [ "$systype" = 'container' ] && CRASHDIR='/etc/ShellCrash'
 [ -z "$CRASHDIR" ] && [ -n "$clashdir" ] && CRASHDIR="$clashdir"
-[ -z "$CRASHDIR" ] && [ -d /tmp/SC_tmp ] && setdir
+[ -z "$CRASHDIR" ] && [ -d /tmp/SC_tmp ] && . /tmp/SC_tmp/menus/set_crashdir.sh && set_crashdir
 #移动文件
-mkdir -p ${CRASHDIR}
-mv -f /tmp/SC_tmp/* ${CRASHDIR} 2>/dev/null
-
+mkdir -p "$CRASHDIR"
+rm -rf /tmp/SC_tmp/menus/set_crashdir.sh
+mv -f /tmp/SC_tmp/* "$CRASHDIR" 2>/dev/null
+##############################
+#注意目录变更
+CFG_PATH="$CRASHDIR"/configs/ShellCrash.cfg
+. "$CRASHDIR"/libs/set_config.sh
+. "$CRASHDIR"/libs/set_profile.sh
 #初始化
-mkdir -p ${CRASHDIR}/configs
-[ -f "${CRASHDIR}/configs/ShellCrash.cfg" ] || echo '#ShellCrash配置文件，不明勿动！' >${CRASHDIR}/configs/ShellCrash.cfg
+mkdir -p "$CRASHDIR"/configs
+[ -f "$CFG_PATH" ] || echo '#ShellCrash配置文件，不明勿动！' >"$CFG_PATH"
 #判断系统类型写入不同的启动文件
 [ -w /usr/lib/systemd/system ] && sysdir=/usr/lib/systemd/system
 [ -w /etc/systemd/system ] && sysdir=/etc/systemd/system
 if [ -f /etc/rc.common -a "$(cat /proc/1/comm)" = "procd" ]; then
     #设为init.d方式启动
-    cp -f ${CRASHDIR}/shellcrash.procd /etc/init.d/shellcrash
+    cp -f "$CRASHDIR"/starts/shellcrash.procd /etc/init.d/shellcrash
     chmod 755 /etc/init.d/shellcrash
-    rm -rf ${CRASHDIR}/shellcrash.openrc
 elif [ -n "$sysdir" -a "$USER" = "root" -a "$(cat /proc/1/comm)" = "systemd" ]; then
     #创建shellcrash用户
     userdel shellcrash 2>/dev/null
@@ -204,41 +53,43 @@ elif [ -n "$sysdir" -a "$USER" = "root" -a "$(cat /proc/1/comm)" = "systemd" ];
         echo "shellcrash:x:0:7890::/home/shellcrash:/bin/sh" >>/etc/passwd
     fi
     #配置systemd
-    mv -f ${CRASHDIR}/shellcrash.service $sysdir/shellcrash.service 2>/dev/null
-    sed -i "s%/etc/ShellCrash%$CRASHDIR%g" $sysdir/shellcrash.service
+    mv -f "$CRASHDIR"/starts/shellcrash.service "$sysdir"/shellcrash.service 2>/dev/null
+    sed -i "s%/etc/ShellCrash%$CRASHDIR%g" "$sysdir"/shellcrash.service
     systemctl daemon-reload
+	rm -rf "$CRASHDIR"/starts/shellcrash.procd
 elif rc-status -r >/dev/null 2>&1; then
     #设为openrc方式启动
-    cp -f ${CRASHDIR}/shellcrash.openrc /etc/init.d/shellcrash
+    mv -f "$CRASHDIR"/starts/shellcrash.openrc /etc/init.d/shellcrash
     chmod 755 /etc/init.d/shellcrash
-    rm -rf ${CRASHDIR}/shellcrash.procd
+    rm -rf "$CRASHDIR"/starts/shellcrash.procd
 else
     #设为保守模式启动
     setconfig start_old 已开启
+	rm -rf "$CRASHDIR"/starts/shellcrash.procd
 fi
+rm -rf "$CRASHDIR"/starts/shellcrash.service
+rm -rf "$CRASHDIR"/starts/shellcrash.openrc
 
 #修饰文件及版本号
 command -v bash >/dev/null 2>&1 && shtype=bash
 [ -x /bin/ash ] && shtype=ash
-for file in start.sh task.sh menu.sh; do
-    sed -i "s|/bin/sh|/bin/$shtype|" ${CRASHDIR}/${file} 2>/dev/null
-    chmod 755 ${CRASHDIR}/${file} 2>/dev/null
+#批量授权
+for file in start.sh starts/bfstart.sh starts/afstart.sh starts/fw_stop.sh menu.sh menus/task_cmd.sh menus/bot_tg.sh; do
+    sed -i "s|/bin/sh|/bin/$shtype|" "$CRASHDIR/$file" 2>/dev/null
+    chmod +x "$CRASHDIR/$file" 2>/dev/null
 done
 setconfig versionsh_l $version
 #生成用于执行启动服务的变量文件
-[ ! -f ${CRASHDIR}/configs/command.env ] && {
-    TMPDIR='/tmp/ShellCrash'
-    BINDIR=${CRASHDIR}
-    touch ${CRASHDIR}/configs/command.env
-    setconfig TMPDIR ${TMPDIR} ${CRASHDIR}/configs/command.env
-    setconfig BINDIR ${BINDIR} ${CRASHDIR}/configs/command.env
+[ ! -f "$CRASHDIR"/configs/command.env ] && {
+    echo 'TMPDIR=/tmp/ShellCrash' > "$CRASHDIR"/configs/command.env
+    echo "BINDIR=$CRASHDIR" >> "$CRASHDIR"/configs/command.env
 }
-if [ -n "$(grep 'crashcore=singbox' ${CRASHDIR}/configs/ShellCrash.cfg)" ]; then
+if [ -n "$(grep 'crashcore=singbox' "$CFG_PATH")" ]; then
     COMMAND='"$TMPDIR/CrashCore run -D $BINDIR -C $TMPDIR/jsons"'
 else
     COMMAND='"$TMPDIR/CrashCore -d $BINDIR -f $TMPDIR/config.yaml"'
 fi
-setconfig COMMAND "$COMMAND" ${CRASHDIR}/configs/command.env
+setconfig COMMAND "$COMMAND" "$CRASHDIR"/configs/command.env
 #设置防火墙执行模式
 grep -q 'firewall_mod' "$CRASHDIR/configs/ShellClash.cfg" 2>/dev/null || {
     firewall_mod=iptables
@@ -246,22 +97,18 @@ grep -q 'firewall_mod' "$CRASHDIR/configs/ShellClash.cfg" 2>/dev/null || {
     setconfig firewall_mod $firewall_mod
 }
 #设置更新地址
-[ -n "$url" ] && setconfig update_url $url
+[ -n "$url" ] && setconfig update_url "$url"
+[ -n "$release_type" ] && setconfig release_type "$release_type"
+#设置语言
+[ -n "$language" ] && echo "$language" > "$CRASHDIR/configs/i18n.cfg"
 #设置环境变量
-[ -w /opt/etc/profile ] && profile=/opt/etc/profile
+[ -w /opt/etc/profile ] && [ "$systype" = "Padavan" ] && profile=/opt/etc/profile
 [ -w /jffs/configs/profile.add ] && profile=/jffs/configs/profile.add
 [ -z "$profile" ] && profile=/etc/profile
-set_profile() {
-    [ -z "$my_alias" ] && my_alias=crash
-    sed -i "/ShellCrash\/menu.sh/"d "$1"
-    echo "alias ${my_alias}=\"$shtype $CRASHDIR/menu.sh\"" >>"$1" #设置快捷命令环境变量
-    sed -i '/export CRASHDIR=*/'d "$1"
-    echo "export CRASHDIR=\"$CRASHDIR\"" >>"$1" #设置路径环境变量
-}
 if [ -n "$profile" ]; then
     set_profile "$profile"
     #适配zsh环境变量
-    zsh --version >/dev/null 2>&1 && [ -z "$(cat $HOME/.zshrc 2>/dev/null | grep CRASHDIR)" ] && set_profile '$HOME/.zshrc'
+    zsh --version >/dev/null 2>&1 && [ -z "$(cat $HOME/.zshrc 2>/dev/null | grep CRASHDIR)" ] && set_profile "$HOME/.zshrc"
     setconfig my_alias "$my_alias"
 else
     echo -e "\033[33m无法写入环境变量！请检查安装权限！\033[0m"
@@ -269,30 +116,39 @@ else
 fi
 #梅林/Padavan额外设置
 [ -n "$initdir" ] && {
-    sed -i '/ShellCrash初始化/'d $initdir
-    touch $initdir
-    echo "$CRASHDIR/start.sh init & #ShellCrash初始化脚本" >>$initdir
-    chmod a+rx $initdir 2>/dev/null
-    setconfig initdir $initdir
+	touch "$initdir"
+    sed -i '/ShellCrash初始化/'d "$initdir"
+    echo "$CRASHDIR/starts/general_init.sh & #ShellCrash初始化脚本" >>"$initdir"
+	chmod 755 "$CRASHDIR"/starts/general_init.sh
+    chmod a+rx "$initdir" 2>/dev/null
+    setconfig initdir "$initdir"
 }
 #Padavan额外设置
 [ -f "/etc/storage/started_script.sh" ] && mount -t tmpfs -o remount,rw,size=45M tmpfs /tmp #增加/tmp空间以适配新的内核压缩方式
 #镜像化OpenWrt(snapshot)额外设置
 if [ "$systype" = "mi_snapshot" -o "$systype" = "ng_snapshot" ]; then
-    chmod 755 ${CRASHDIR}/misnap_init.sh
-    uci delete firewall.ShellClash 2>/dev/null
+    chmod 755 "$CRASHDIR"/starts/snapshot_init.sh
+	if [ "$systype" = "mi_snapshot" ];then
+		path="/data/shellcrash_init.sh"
+		sed -i "s#^CRASHDIR=.*#CRASHDIR=$CRASHDIR#" "$CRASHDIR"/starts/snapshot_init.sh
+		mv -f "$CRASHDIR"/starts/snapshot_init.sh "$path"
+		[ ! -f /data/auto_start.sh ] && echo '#用于自定义需要开机启动的功能或者命令，会在开机后自动运行' > /data/auto_start.sh
+	else
+		path="$CRASHDIR"/starts/snapshot_init.sh
+	fi
+    uci delete firewall.auto_ssh 2>/dev/null
     uci delete firewall.ShellCrash 2>/dev/null
     uci set firewall.ShellCrash=include
     uci set firewall.ShellCrash.type='script'
-    uci set firewall.ShellCrash.path="$CRASHDIR/misnap_init.sh"
+    uci set firewall.ShellCrash.path="$path"
     uci set firewall.ShellCrash.enabled='1'
     uci commit firewall
 else
-    rm -rf ${CRASHDIR}/misnap_init.sh
+    rm -rf "$CRASHDIR"/starts/snapshot_init.sh
 fi
 #华硕USB启动额外设置
 [ "$usb_status" = "1" ] && {
-    echo "$CRASHDIR/start.sh init & #ShellCrash初始化脚本" >${CRASHDIR}/asus_usb_mount.sh
+    echo "$CRASHDIR/start.sh init & #ShellCrash初始化脚本" >"$CRASHDIR"/asus_usb_mount.sh
     nvram set script_usbmount="$CRASHDIR/asus_usb_mount.sh"
     nvram commit
 }
@@ -307,7 +163,7 @@ fi
 	setconfig firewall_area '1'
 	setconfig firewall_mod 'nftables'
 	setconfig release_type 'master'
-	setconfig start_old '未开启'
+	setconfig start_old 'OFF'
 	echo "$CRASHDIR/menu.sh" >> /etc/profile
 	cat > /usr/bin/crash <<'EOF'
 #!/bin/sh
@@ -322,57 +178,57 @@ setconfig systype $systype
 rm -rf /tmp/*rash*gz
 rm -rf /tmp/SC_tmp
 #转换&清理旧版本文件
-mkdir -p ${CRASHDIR}/yamls
-mkdir -p ${CRASHDIR}/jsons
-mkdir -p ${CRASHDIR}/tools
-mkdir -p ${CRASHDIR}/task
-mkdir -p ${CRASHDIR}/ruleset
+mkdir -p "$CRASHDIR"/yamls
+mkdir -p "$CRASHDIR"/jsons
+mkdir -p "$CRASHDIR"/tools
+mkdir -p "$CRASHDIR"/task
+mkdir -p "$CRASHDIR"/ruleset
 for file in config.yaml.bak user.yaml proxies.yaml proxy-groups.yaml rules.yaml others.yaml; do
-    mv -f ${CRASHDIR}/$file ${CRASHDIR}/yamls/$file 2>/dev/null
+    mv -f "$CRASHDIR"/"$file" "$CRASHDIR"/yamls/"$file" 2>/dev/null
 done
-[ ! -L ${CRASHDIR}/config.yaml ] && mv -f ${CRASHDIR}/config.yaml ${CRASHDIR}/yamls/config.yaml 2>/dev/null
+[ ! -L "$CRASHDIR"/config.yaml ] && mv -f "$CRASHDIR"/config.yaml "$CRASHDIR"/yamls/config.yaml 2>/dev/null
 for file in fake_ip_filter mac web_save servers.list fake_ip_filter.list fallback_filter.list singbox_providers.list clash_providers.list; do
-    mv -f ${CRASHDIR}/$file ${CRASHDIR}/configs/$file 2>/dev/null
+    mv -f "$CRASHDIR"/"$file" "$CRASHDIR"/configs/"$file" 2>/dev/null
 done
 #配置文件改名
-mv -f ${CRASHDIR}/mark ${CRASHDIR}/configs/ShellCrash.cfg 2>/dev/null
-mv -f ${CRASHDIR}/configs/ShellClash.cfg ${CRASHDIR}/configs/ShellCrash.cfg 2>/dev/null
+mv -f "$CRASHDIR"/configs/ShellClash.cfg "$CFG_PATH" 2>/dev/null
 #数据库改名
-mv -f ${CRASHDIR}/geosite.dat ${CRASHDIR}/GeoSite.dat 2>/dev/null
-mv -f ${CRASHDIR}/ruleset/geosite-cn.srs ${CRASHDIR}/ruleset/cn.srs 2>/dev/null
-mv -f ${CRASHDIR}/ruleset/geosite-cn.mrs ${CRASHDIR}/ruleset/cn.mrs 2>/dev/null
+mv -f "$CRASHDIR"/geosite.dat "$CRASHDIR"/GeoSite.dat 2>/dev/null
+mv -f "$CRASHDIR"/ruleset/geosite-cn.srs "$CRASHDIR"/ruleset/cn.srs 2>/dev/null
+mv -f "$CRASHDIR"/ruleset/geosite-cn.mrs "$CRASHDIR"/ruleset/cn.mrs 2>/dev/null
 #数据库移动
-mv -f ${CRASHDIR}/*.srs ${CRASHDIR}/ruleset/ 2>/dev/null
-mv -f ${CRASHDIR}/*.mrs ${CRASHDIR}/ruleset/ 2>/dev/null
-#内核改名
-mv -f ${CRASHDIR}/clash ${CRASHDIR}/CrashCore 2>/dev/null
-#内核压缩
-[ -f ${CRASHDIR}/CrashCore ] && tar -zcf ${CRASHDIR}/CrashCore.tar.gz -C ${CRASHDIR} CrashCore
+mv -f "$CRASHDIR"/*.srs "$CRASHDIR"/ruleset/ 2>/dev/null
+mv -f "$CRASHDIR"/*.mrs "$CRASHDIR"/ruleset/ 2>/dev/null
 for file in dropbear_rsa_host_key authorized_keys tun.ko ShellDDNS.sh; do
-    mv -f ${CRASHDIR}/$file ${CRASHDIR}/tools/$file 2>/dev/null
+    mv -f "$CRASHDIR"/"$file" "$CRASHDIR"/tools/"$file" 2>/dev/null
 done
-for file in cron task.sh task.list; do
-    mv -f ${CRASHDIR}/$file ${CRASHDIR}/task/$file 2>/dev/null
+for file in cron task.list; do
+    mv -f "$CRASHDIR"/"$file" "$CRASHDIR"/task/"$file" 2>/dev/null
 done
+mv -f "$CRASHDIR"/menus/task_cmd.sh "$CRASHDIR"/task/task.sh 2>/dev/null
 #旧版文件清理
 userdel shellclash >/dev/null 2>&1
 sed -i '/shellclash/d' /etc/passwd
 sed -i '/shellclash/d' /etc/group
 rm -rf /etc/init.d/clash
-rm -rf ${CRASHDIR}/rules
+rm -rf "$CRASHDIR"/rules
 [ "$systype" = "mi_snapshot" -a "$CRASHDIR" != '/data/clash' ] && rm -rf /data/clash
-for file in CrashCore clash.sh getdate.sh core.new clashservice log shellcrash.service mark? mark.bak; do
-    rm -rf ${CRASHDIR}/$file
+for file in webget.sh misnap_init.sh core.new configs/ShellCrash.cfg.bak; do
+    rm -f "$CRASHDIR/$file"
 done
 #旧版变量改名
-sed -i "s/clashcore/crashcore/g" $configpath
-sed -i "s/clash_v/core_v/g" $configpath
-sed -i "s/clash.meta/meta/g" $configpath
-sed -i "s/ShellClash/ShellCrash/g" $configpath
-sed -i "s/cpucore=armv8/cpucore=arm64/g" $configpath
-sed -i "s/redir_mod=Nft基础/redir_mod=Redir模式/g" $configpath
-sed -i "s/redir_mod=Nft混合/redir_mod=Tproxy模式/g" $configpath
-sed -i "s/redir_mod=Tproxy混合/redir_mod=Tproxy模式/g" $configpath
-sed -i "s/redir_mod=纯净模式/firewall_area=4/g" $configpath
+sed -i "s/clashcore/crashcore/g" "$CFG_PATH"
+sed -i "s/clash_v/core_v/g" "$CFG_PATH"
+sed -i "s/clash.meta/meta/g" "$CFG_PATH"
+sed -i "s/ShellClash/ShellCrash/g" "$CFG_PATH"
+sed -i "s/cpucore=armv8/cpucore=arm64/g" "$CFG_PATH"
+sed -i "s/redir_mod=Redir模式/redir_mod=Redir/g" "$CFG_PATH"
+sed -i "s/redir_mod=Tproxy模式/redir_mod=Tproxy/g" "$CFG_PATH"
+sed -i "s/redir_mod=Tun模式/redir_mod=Tun/g" "$CFG_PATH"
+sed -i "s/redir_mod=混合模式/redir_mod=Mix/g" "$CFG_PATH"
+sed -i "s/redir_mod=纯净模式/firewall_area=4/g" "$CFG_PATH"
+#变量统一使用ON/OFF
+sed -i 's/=\(已启用\|已开启\)$/=ON/'  "$CFG_PATH"
+sed -i 's/=\(未启用\|未开启\)$/=OFF/' "$CFG_PATH"
 
-echo -e "\033[32m脚本初始化完成,请输入\033[30;47m $my_alias \033[0;33m命令开始使用！\033[0m"
+printf '\033[32m脚本初始化完成,请输入\033[30;47m %s \033[0;33m命令开始使用！\033[0m\n' "$my_alias"

scripts/lang/chs/1_start.lang

@@ -0,0 +1,10 @@
+# ===== 启动完成 =====
+START_SERVICE_OK="服务已启动！"
+START_WEB_HINT="管理面板："
+START_PAC_HINT="其他设备可使用 PAC 配置："
+START_PROXY_HINT="或使用 HTTP / SOCKS5 方式连接："
+
+# ===== 启动流程 =====
+START_NO_CORE_CFG_TRY_GEN="没有找到核心配置文件，尝试生成 providers 配置文件！"
+START_NO_CORE_CFG_IMPORT_FIRST="没有找到核心配置文件，请先导入配置文件！"
+START_FIREWALL_DONE="已完成防火墙设置！"

scripts/lang/chs/2_settings.lang

@@ -0,0 +1,133 @@
+# =================================================
+# Settings main menu
+# =================================================
+SET_MENU_TITLE="功能设置菜单"
+SET_MENU_REDIR="路由模式设置："
+SET_MENU_DNS="DNS设置：    "
+SET_MENU_FW_FILTER="透明路由流量过滤"
+SET_MENU_SKIP_CERT="跳过证书验证："
+SET_MENU_SNIFFER="启用域名嗅探："
+SET_MENU_ADV_PORT="自定义端口及密钥"
+SET_MENU_IPV6="IPv6设置：   "
+SET_MENU_RESET="重置/备份/还原脚本设置"
+SET_MENU_LANG="多语言切换"
+SET_MENU_UI="UI切换"
+
+# =================================================
+# Main menu messages
+# =================================================
+SET_WARN_NONROOT="非root用户可能无法正确配置其他模式，是否继续？"
+SET_SKIP_CERT_ON="已启用跳过本地证书验证！"
+SET_SKIP_CERT_OFF="已禁用跳过本地证书验证！"
+
+SET_SNIFFER_CORE_SWITCH="已自动切换至Meta内核（域名嗅探需要）"
+SET_SNIFFER_LOCKED="当前内核与DNS模式组合下，域名嗅探无法关闭！"
+
+SET_CORE_RUNNING="检测到服务正在运行，需要先停止服务！"
+SET_CORE_STOP_CONFIRM="是否确认停止服务？"
+
+# =================================================
+# Backup / Restore / Reset
+# =================================================
+SET_BACKUP="备份脚本设置"
+SET_RESTORE="还原脚本设置"
+SET_RESET="重置脚本设置"
+
+SET_BACKUP_OK="备份脚本设置成功！"
+SET_BACKUP_FAIL="备份脚本设置失败！"
+SET_RESTORE_OK="脚本设置已还原！（被覆盖配置已备份）"
+SET_RESET_OK="重置脚本设置成功！（旧配置已备份）"
+SET_RESET_FAIL="重置脚本设置失败！"
+SET_BACKUP_MISS="未找到备份文件，请先备份！"
+SET_NEED_RESTART="请重新启动脚本以生效！"
+
+# =================================================
+# Redir mode
+# =================================================
+SET_REDIR_DEFAULT="Redir模式"
+SET_REDIR_CURRENT="当前路由模式为："
+SET_CORE_CURRENT="ShellCrash 核心为："
+SET_REDIR_RESTART_HINT="注意：切换模式后需要手动重启服务以生效！"
+
+SET_REDIR_APPLIED="已设为"
+
+SET_REDIR_REDIR="Redir模式"
+SET_REDIR_MIX="Mix模式"
+SET_REDIR_TPROXY="Tproxy模式"
+SET_REDIR_TUN="Tun模式"
+
+SET_REDIR_REDIRDES="Redir转发TCP，不转发UDP"
+SET_REDIR_MIXDES="Redir转发TCP，Tun转发UDP"
+SET_REDIR_TPROXYDES="Tproxy转发TCP&UDP"
+SET_REDIR_TUNDES="Tun转发TCP&UDP（占用高不推荐）"
+
+SET_NO_MOD="设备未检测到内核模块："
+SET_NO_MOD2="请尝试其他模式或者安装相关依赖！"
+XIAOMI_QOS="小米设备的 QoS 服务与当前模式冲突，是否禁用相关功能？"
+
+# =================================================
+# Firewall / VM
+# =================================================
+SET_FW_AREA="设置路由劫持范围"
+SET_VM_REDIR="容器/虚拟机劫持"
+SET_FW_SWITCH="切换防火墙应用"
+
+SET_FW_AREA_DESC="仅局域网|仅本机|局域网+本机|纯净模式|旁路转发"
+
+FW_AREA_NOTE_1="如你使用了第三方DNS如smartdns等，"
+FW_AREA_NOTE_2="请勿启用本机劫持或使用shellcrash用户执行！"
+FW_AREA_LAN="仅劫持局域网流量"
+FW_AREA_LOCAL="仅劫持本机流量"
+FW_AREA_BOTH="劫持局域网 + 本机流量"
+FW_AREA_NONE="不配置流量劫持（纯净模式）"
+FW_NO_NFTABLES="当前设备未安装 nftables，或 nftables 版本过低（< 1.0.2），无法切换！"
+FW_NO_IPTABLES="当前设备未安装 iptables，无法切换！"
+FW_NO_FIREWALL_BACKEND="检测不到可用的防火墙应用（iptables / nftables），无法切换！"
+
+VM_DETECT_DESC="默认的容器/虚拟机网段为："
+VM_ENABLE_AUTO="启用劫持并使用自动检测的网段"
+VM_ENABLE_MANUAL="启用劫持并手动指定网段"
+VM_DISABLE="禁用劫持"
+VM_INPUT_INFO="多个网段请用空格连接，可使用【ip route】命令查看，例如："
+VM_INPUT_NET="请输入自定义网段"
+VM_NO_NET_DETECTED="未检测到容器或虚拟机网段，请先运行容器后再运行脚本，或选择手动设置网段！"
+VM_INPUT_DESC_1="多个网段请使用空格分隔，可通过【ip route】命令查看"
+VM_INPUT_DESC_2="例如："
+
+#inputport
+INPUT_PORT="请输入端口号"
+# =================================================
+# Advanced config
+# =================================================
+ADV_HTTP_PORT="修改HTTP/SOCKS5端口"
+ADV_HTTP_AUTH="设置HTTP/SOCKS5认证"
+ADV_REDIR_PORT="修改Redir/Tproxy端口"
+ADV_DNS_PORT="修改DNS监听端口"
+ADV_PANEL_PORT="修改面板访问端口"
+ADV_PANEL_PASS="设置面板访问密码"
+ADV_PANEL_PASS_INPUT="请输入面板访问密码（输入0删除）"
+ADV_HOST="自定义本机 Host 地址"
+ADV_TABLE="自定义路由表"
+# Advanced auth
+ADV_AUTH_FORMAT_DESC="格式必须为 \033[32m用户名:密码\033[0m，请使用英文冒号分隔！"
+ADV_AUTH_WARN="请尽量不要使用特殊符号，以避免产生未知错误！"
+ADV_AUTH_REMOVE_HINT="输入 0 可删除认证信息"
+ADV_AUTH_INPUT="请输入 HTTP / SOCKS5 用户名及密码"
+ADV_AUTH_REMOVED="认证信息已移除！"
+ADV_AUTH_ENV_CONFLICT="请先禁用本机劫持功能或使用增强模式！"
+ADV_AUTH_INVALID="输入格式错误，请重新输入！"
+# Host
+ADV_HOST_WARN_LAN="如果你的局域网网段不是 192.168.x / 172.16.x / 10.x，请务必修改！"
+ADV_HOST_WARN_CHANGE="设置后如本机 Host 地址发生变化，请务必重新修改！"
+ADV_HOST_INPUT="请输入自定义 Host 地址（输入 0 移除）"
+ADV_HOST_REMOVED="自定义 Host 地址已移除，请重新运行脚本以自动获取！"
+ADV_HOST_INVALID="输入错误，请仔细核对！"
+# Routing table
+ADV_TABLE_WARN="仅当 Tproxy/Tun/混合模式 下路由表发生冲突时才需要设置！"
+ADV_TABLE_INPUT="请输入路由表编号（不清楚请勿修改，建议 102-125）"
+
+# =================================================
+# IPv6
+# =================================================
+IPV6_REDIR="IPv6透明路由（劫持IPv6流量）"
+IPV6_DNS="IPv6-DNS解析（是否返回IPv6地址）"

scripts/lang/chs/5_task.lang

@@ -0,0 +1,6 @@
+# 推荐任务配置
+TASK_RECOM_TITLE="是否启用以下推荐的自动任务配置："
+
+TASK_RECOM_ITEM_1="运行时每10分钟自动保存面板配置"
+TASK_RECOM_ITEM_2="服务启动后自动同步 NTP 时间"
+TASK_RECOM_ITEM_3="在每日的3点0分重启服务"

scripts/lang/chs/common.lang

@@ -0,0 +1,13 @@
+
+COMMON_INPUT="请输入对应数字"
+COMMON_INPUT_L="请输入对应字母或数字"
+COMMON_INPUT_R="是否启用？(1/0) > "
+COMMON_BACK="返回上级菜单"
+COMMON_SUCCESS="操作成功！"
+COMMON_FAILED="操作失败！"
+COMMON_UNSET="未设置"
+COMMON_MOD="模式"
+COMMON_ERR_NUM="请输入正确的数字！"
+COMMON_ERR_LETTER="请输入正确的字母或数字！"
+COMMON_ERR_INPUT="输入错误，请重新输入！"
+COMMON_ERR_CANCEL="操作已取消！"

scripts/lang/chs/dns.lang

@@ -0,0 +1,52 @@
+#=====DNS主菜单=====
+DNS_CURRENT_MODE="当前DNS运行模式为："
+DNS_RESTART_NOTICE="切换模式后需要手动重启服务以生效！"
+
+DNS_MODE_MIX_DESC="CN域名DIRECT-DNS，其它fake-ip"
+DNS_MODE_ROUTE_DESC="CN域名DIRECT-DNS，其它PROXY-DNS"
+DNS_MODE_REDIR_DESC="建议搭配加密/第三方DNS服务使用"
+
+DNS_MENU_PROTECT="DNS防泄漏"
+DNS_MENU_HOSTS="Hosts优化"
+DNS_MENU_ECS="ECS优化"
+DNS_MENU_REDIR="DNS劫持端口"
+
+DNS_PROTECT_DESC="——启用时少量网站可能出现连接卡顿"
+DNS_HOSTS_DESC="——调用本机hosts并劫持NTP服务"
+DNS_ECS_DESC="——解决CDN下载浪费流量等问题"
+DNS_REDIR_PORT_DESC="——用于兼容第三方DNS服务"
+
+DNS_FAKEIP_MENU="管理Fake-IP过滤列表"
+DNS_ADV_MENU="修改DNS服务器"
+
+DNS_SET_OK="DNS模式已设置为"
+DNS_CORE_UNSUPPORTED="当前内核不支持该功能！"
+
+#=====DNS重定向=====
+DNS_REDIR_WARN="仅限搭配第三方DNS服务（AdGuard、SmartDNS等）使用！"
+DNS_REDIR_HINT="建议第三方DNS上游指向"
+DNS_REDIR_NO_SERVICE="该端口未检测到正在运行的DNS服务！"
+
+#=====Fake-IP=====
+DNS_FAKEIP_DESC="用于解决Fake-IP模式下部分地址或应用无法连接的问题"
+DNS_FAKEIP_TIP="脚本已内置大量地址，只需添加出现问题的地址"
+DNS_FAKEIP_EXAMPLE="示例格式如下：\na.b.com\n*.b.com\n*.*.b.com"
+DNS_FAKEIP_EXIST="已添加的Fake-IP过滤地址："
+DNS_FAKEIP_EMPTY="当前尚未添加任何自定义Fake-IP过滤地址"
+DNS_FAKEIP_EDIT="输入序号移除，输入地址添加"
+
+#=====DNS高级=====
+DNS_ADV_SPLIT="多个DNS地址请使用“|”或“,”分隔输入"
+DNS_ADV_CERT="使用DoH/DoT需具备本地根证书文件"
+DNS_ADV_SINGBOX_LIMIT="注意：SingBox内核仅加载第一个DNS"
+
+DNS_ADV_EDIT_DIRECT="修改DIRECT-DNS"
+DNS_ADV_EDIT_PROXY="修改PROXY-DNS（该DNS查询会经过节点）"
+DNS_ADV_EDIT_DEFAULT="修改DEFAULT-DNS（必须是IP，用于解析其他DNS）"
+DNS_ADV_AUTO_ENCRYPT="一键配置加密DNS"
+DNS_ADV_RESET="重置默认DNS配置"
+
+DNS_IPV6_NOT_SUPPORT="该选项暂不支持IPv6加密DNS！"
+
+DNS_ENCRYPT_OK="已设置加密DNS，如遇DNS解析问题，请重置DNS配置！"
+DNS_CORE_REQUIRE="请使用Mihomo或SingBox内核"

scripts/lang/chs/menu.lang

@@ -0,0 +1,83 @@
+# ===== 通用提示 =====
+
+MENU_RESTART_NOTICE="检测到配置变更，是否立即重启服务以应用新配置？"
+
+MENU_PORT_CONFLICT_TITLE="检测到端口被以下进程占用！内核可能无法正常启动！"
+MENU_PORT_CONFLICT_HINT="请修改默认端口配置！"
+
+MENU_CORE_LOADED_OK="内核加载完成！"
+MENU_CORE_LOADED_BAD="检测到不可用的内核文件！可能是文件受损或CPU架构不匹配！"
+MENU_CORE_REMOVED="内核文件已移除，请认真检查后重新上传！"
+
+MENU_CFG_LOADED_OK="配置文件加载完成！"
+
+MENU_OVERRIDE_WARN="你已经禁用了配置文件覆写功能，这会导致大量脚本功能无法使用！"
+MENU_OVERRIDE_ASK="是否取消禁用？"
+
+# ===== 欢迎与状态 =====
+MENU_WELCOME="欢迎使用ShellCrash！"
+
+MENU_RUN_ON="正在运行"
+MENU_RUN_SET="已设置"
+MENU_RUN_OFF="没有运行"
+
+MENU_PURE_MOD="纯净"
+MENU_MOD="模式"
+MENU_IP_DF="设备IP地址"
+
+MENU_AUTOSTART_ON="已设置开机启动！"
+MENU_AUTOSTART_OFF="未设置开机启动！"
+MENU_AUTOSTART_DEBUG="并处于debug状态！"
+
+MENU_MEM_USED="当前内存占用："
+MENU_RUNNING_TIME="已运行："
+
+MENU_TG_CHANNEL="TG频道："
+
+# ===== /tmp 文件检测 =====
+MENU_TMP_CORE_FOUND="发现可用的内核文件："
+MENU_TMP_CORE_ASK="是否立即加载该内核（会停止当前服务）？"
+
+MENU_TMP_CFG_FOUND="发现内核配置文件："
+MENU_TMP_CFG_ASK="是否立即加载为配置文件？"
+
+MENU_MAIN_1="启动/重启服务"
+MENU_MAIN_2="功能设置"
+MENU_MAIN_3="停止服务"
+MENU_MAIN_4="启动设置"
+MENU_MAIN_5="自动任务"
+MENU_MAIN_6="配置文件管理"
+MENU_MAIN_7="访问与控制"
+MENU_MAIN_8="工具与优化"
+MENU_MAIN_9="更新与支持"
+MENU_MAIN_0="退出脚本"
+
+MENU_MAIN_PROMPT="请输入对应数字> "
+
+# ===== 服务操作 =====
+MENU_SERVICE_STOPPED="服务已停止！"
+
+# ===== 测试 / 调试 =====
+MENU_TEST_RUNNING_1="正在测试运行！"
+MENU_TEST_RUNNING_2="如发现错误请截图后前往咨询："
+MENU_TEST_DONE_OK="测试完成！没有发现问题，请重新启动服务～"
+MENU_TEST_DONE_FAIL="测试完成！"
+MENU_TEST_LOG_HINT="完整执行记录请查看："
+
+MENU_ERROR_FOUND="发现错误："
+
+# ===== 命令行帮助 =====
+
+MENU_CLI_TEST="测试模式"
+MENU_CLI_HELP="帮助列表"
+MENU_CLI_UNINSTALL="卸载脚本"
+MENU_CLI_INIT="初始化脚本"
+MENU_CLI_DEBUG="测试运行"
+
+MENU_CLI_START="启动服务"
+MENU_CLI_STOP="停止服务"
+MENU_CLI_BOOT_INIT="开机初始化"
+
+MENU_HELP_ONLINE="在线求助："
+MENU_HELP_BLOG="官方博客："
+MENU_HELP_GITHUB="发布页面："

scripts/lang/chs/userguide.lang

@@ -0,0 +1,14 @@
+# 新手引导
+UG_WELCOME="欢迎使用新手引导！"
+UG_CHOOSE_ENV="请先选择你的使用环境："
+UG_TIP_CONFIG="(你之后依然可以在设置中更改各种配置)"
+UG_OPTION_1="路由设备配置局域网透明代理"
+UG_OPTION_2="Linux设备仅配置本机代理"
+UG_OPTION_3="还原之前备份的设置"
+UG_RESTORE_OK="脚本设置已还原！请重新启动脚本！"
+UG_IP_FORWARD_WARN="检测到你的设备尚未开启ip转发，局域网设备将无法正常连接网络，是否立即开启？"
+UG_ENABLE_LOW_MEM="检测到你的安装目录空间不足10M，是否开启小闪存模式？"
+UG_IMPORT_CONFIG="这是运行前的最后一步"
+UG_CONFIG_TIP="你必须拥有一份配置文件才能运行服务！"
+UG_CONFIG_RES="是否立即导入配置文件？"
+UG_FINAL_TIP="很好！现在只需要执行启动就可以愉快的使用了！"

scripts/lang/en/1_start.lang

@@ -0,0 +1,10 @@
+# ===== Startup =====
+START_SERVICE_OK="Service started successfully!"
+START_WEB_HINT="Dashboard:"
+START_PAC_HINT="Other devices can connect using PAC configuration:"
+START_PROXY_HINT="Or connect using HTTP / SOCKS5:"
+
+# ===== Startup Flow =====
+START_NO_CORE_CFG_TRY_GEN="Core configuration not found. Attempting to generate providers configuration!"
+START_NO_CORE_CFG_IMPORT_FIRST="Core configuration not found. Please import a configuration first!"
+START_FIREWALL_DONE="Firewall configuration completed!"

scripts/lang/en/2_settings.lang

@@ -0,0 +1,128 @@
+# =================================================
+# Settings main menu
+# =================================================
+SET_MENU_TITLE="Welcome to the Function Settings Menu:"
+SET_MENU_REDIR="Routing Mode:"
+SET_MENU_DNS="DNS Settings:"
+SET_MENU_FW_FILTER="Transparent Routing Traffic Filter"
+SET_MENU_SKIP_CERT="Skip Cert Verify:"
+SET_MENU_SNIFFER="Enable Sniff:"
+SET_MENU_ADV_PORT="Custom Ports and Secrets"
+SET_MENU_IPV6="IPv6 Settings:"
+SET_MENU_RESET="Reset / Backup / Restore Script Settings"
+SET_MENU_LANG="Language"
+SET_MENU_UI="UI Switch"
+
+# =================================================
+# Main menu messages
+# =================================================
+SET_WARN_NONROOT="Non-root users may not be able to configure some modes correctly. Continue anyway?"
+SET_SKIP_CERT_ON="Skipping local certificate verification is now ENABLED!"
+SET_SKIP_CERT_OFF="Skipping local certificate verification is now DISABLED!"
+
+SET_SNIFFER_CORE_SWITCH="Automatically switched to Meta core (required for domain sniffing)"
+SET_SNIFFER_LOCKED="Domain sniffing cannot be disabled with the current core and DNS mode combination!"
+
+SET_CORE_RUNNING="Service is currently running and must be stopped first!"
+SET_CORE_STOP_CONFIRM="Do you want to stop the service?"
+
+# =================================================
+# Backup / Restore / Reset
+# =================================================
+SET_BACKUP="Backup Script Settings"
+SET_RESTORE="Restore Script Settings"
+SET_RESET="Reset Script Settings"
+
+SET_BACKUP_OK="Script settings have been backed up!"
+SET_RESTORE_OK="Script settings have been restored! (Overwritten config has been backed up)"
+SET_RESET_OK="Script settings have been reset! (Old config has been backed up)"
+SET_BACKUP_MISS="Backup file not found. Please back up first!"
+SET_NEED_RESTART="Please restart the script for changes to take effect!"
+
+# =================================================
+# Redir mode
+# =================================================
+SET_REDIR_DEFAULT="Redir Mode"
+SET_REDIR_CURRENT="Current routing mode:"
+SET_CORE_CURRENT="ShellCrash core:"
+SET_REDIR_RESTART_HINT="You must manually restart the service for the change to take effect!"
+
+SET_REDIR_APPLIED="Routing mode set to"
+
+SET_REDIR_REDIR="Redir Mode"
+SET_REDIR_MIX="Mix Mode"
+SET_REDIR_TPROXY="Tproxy Mode"
+SET_REDIR_TUN="Tun Mode"
+
+SET_REDIR_REDIRDES="Redirect TCP traffic only (no UDP)"
+SET_REDIR_MIXDES="Redirect TCP via Redir, UDP via Tun"
+SET_REDIR_TPROXYDES="Tproxy forwards both TCP UDP"
+SET_REDIR_TUNDES="Tun forwards both TCP UDP (high resource usage)"
+
+SET_NO_MOD="The kernel module not detected："
+SET_NO_MOD2="Please install required dependencies or select another mode!"
+XIAOMI_QOS="Xiaomi QoS service conflicts with the current mode. Disable related features?"
+
+# =================================================
+# Firewall / VM
+# =================================================
+SET_FW_AREA="Set Routing Hijack Scope"
+SET_VM_REDIR="Container / VM Hijacking"
+SET_FW_SWITCH="Switch Firewall Backend"
+
+SET_FW_AREA_DESC="LAN only|Local only|LAN&Local|Pure mode|Bypass:"
+
+FW_AREA_NOTE="If you are using a third-party DNS like SmartDNS, \ndo not enable local hijacking or run the service as a ShellCrash user"
+FW_AREA_LAN="Hijack LAN traffic only"
+FW_AREA_LOCAL="Hijack local device traffic only"
+FW_AREA_BOTH="Hijack both LAN and local device traffic"
+FW_AREA_NONE="Do not hijack traffic (Pure mode)"
+FW_NO_NFTABLES="nftables is not installed, or the version is too old (< 1.0.2). Unable to switch!"
+FW_NO_IPTABLES="iptables is not installed. Unable to switch!"
+FW_NO_FIREWALL_BACKEND="No available firewall backend detected (iptables / nftables). Unable to switch!"
+
+VM_DETECT_DESC="Default Container/VM Subnet:"
+VM_ENABLE_AUTO="Enable hijacking using automatically detected subnets"
+VM_ENABLE_MANUAL="Enable hijacking and manually specify subnets"
+VM_DISABLE="Disable hijacking"
+VM_INPUT_INFO="Separate multiple segments with spaces. Check your configuration using ip route. Example:"
+VM_INPUT_NET="Please enter cust subnets"
+VM_NO_NET_DETECTED="No container or VM subnet detected. Please start the container first, or configure the subnet manually!"
+VM_INPUT_DESC="Multiple subnets should be separated by spaces. You can check them using the 'ip route' command, for example:"
+
+#inputport
+INPUT_PORT="Input port"
+# =================================================
+# Advanced config
+# =================================================
+ADV_HTTP_PORT="Change HTTP / SOCKS5 Port"
+ADV_HTTP_AUTH="Set HTTP / SOCKS5 Authentication"
+ADV_REDIR_PORT="Change Redir / Tproxy Ports"
+ADV_DNS_PORT="Change DNS Listening Port"
+ADV_PANEL_PORT="Change Web Panel Port"
+ADV_PANEL_PASS="Set Web Panel Password"
+ADV_PANEL_PASS_INPUT="Enter web panel password (enter 0 to remove)"
+ADV_HOST="Custom Local Host Address"
+ADV_TABLE="Custom Routing Table"
+# Advanced auth
+ADV_AUTH_FORMAT_DESC="Format must be \033[32musername:password\033[0m, separated by a colon!"
+ADV_AUTH_WARN="Avoid using special characters to prevent unexpected issues!"
+ADV_AUTH_REMOVE_HINT="Enter 0 to remove authentication"
+ADV_AUTH_INPUT="Please enter HTTP / SOCKS5 username and password"
+ADV_AUTH_REMOVED="Authentication information has been removed!"
+ADV_AUTH_ENV_CONFLICT="Please disable local hijacking or switch to enhanced mode first!"
+ADV_AUTH_INVALID="Invalid input format. Please try again!"
+# Host
+ADV_HOST_WARN_LAN="If your LAN subnet is not 192.168.x / 172.16.x / 10.x, you must modify it!"
+ADV_HOST_WARN_CHANGE="If the local host address changes after setting, please update it again!"
+ADV_HOST_INPUT="Please enter a custom host address (enter 0 to remove)"
+ADV_HOST_REMOVED="Custom host address removed. Please rerun the script to auto-detect!"
+ADV_HOST_INVALID="Invalid input. Please check carefully!"
+# Routing table
+ADV_TABLE_WARN="Only required when routing table conflicts occur in Tproxy, Tun, or Mixed mode!"
+ADV_TABLE_INPUT="Please enter the routing table ID (do not modify unless necessary, recommended 102-125)"
+# =================================================
+# IPv6
+# =================================================
+IPV6_REDIR="IPv6 Transparent Routing (Hijack IPv6 Traffic)"
+IPV6_DNS="IPv6 DNS Resolution (Return IPv6 addresses)"

scripts/lang/en/5_task.lang

@@ -0,0 +1,6 @@
+# Recommended task configuration
+TASK_RECOM_TITLE="Enable the following recommended automatic tasks?"
+
+TASK_RECOM_ITEM_1="Save Dashboard select every 10 minutes"
+TASK_RECOM_ITEM_2="Synchronize NTP after service startup"
+TASK_RECOM_ITEM_3="Daily service restart at 03:00"

scripts/lang/en/common.lang

@@ -0,0 +1,13 @@
+
+COMMON_INPUT="Please enter a number"
+COMMON_INPUT_L="Enter a letter or a number"
+COMMON_INPUT_R="Enable? (1/0) > "
+COMMON_BACK="Back"
+COMMON_SUCCESS="Setup Success!"
+COMMON_FAILED="Setup failed!"
+COMMON_UNSET="Not set"
+COMMON_MOD="Mod"
+COMMON_ERR_NUM="Please enter a valid number!"
+COMMON_ERR_LETTER="Please enter a valid letter or number!"
+COMMON_ERR_INPUT="Invalid input, please try again!"
+COMMON_ERR_CANCEL="Operation cancelled!"

scripts/lang/en/dns.lang

@@ -0,0 +1,54 @@
+#===== DNS Main Menu =====
+DNS_CURRENT_MODE="Current DNS running mode:"
+DNS_RESTART_NOTICE="Changes require a manual service restart to take effect."
+
+DNS_MODE_MIX_DESC="CN domains use DIRECT-DNS, others use fake-ip"
+DNS_MODE_ROUTE_DESC="CN domains use DIRECT-DNS, others use PROXY-DNS"
+DNS_MODE_REDIR_DESC="All domains use DIRECT-DNS"
+
+DNS_MENU_PROTECT="DNS Leak Protect"
+DNS_MENU_HOSTS="Hosts Optimization"
+DNS_MENU_ECS="ECS Optimization"
+DNS_MENU_REDIR="DNS Redirect Port"
+
+DNS_PROTECT_DESC="May cause slow connections on some websites when enabled"
+DNS_HOSTS_DESC="Use local hosts file and hijack NTP service"
+DNS_ECS_DESC="Reduce wasted traffic caused by CDN misrouting"
+DNS_REDIR_PORT_DESC="Used for compatibility with third-party DNS services"
+
+DNS_FAKEIP_MENU="Manage Fake-IP Filter List"
+DNS_ADV_MENU="Configure DNS Servers"
+
+DNS_SET_OK="DNS mode has been set to"
+DNS_CORE_UNSUPPORTED="The current core does not support this feature."
+
+#===== DNS Redirect =====
+DNS_REDIR_WARN="For use with third-party DNS services only (AdGuard, SmartDNS, etc.)"
+DNS_REDIR_HINT="It is recommended to set the upstream DNS of the third-party service to"
+DNS_REDIR_INPUT="Enter the listening port of the third-party DNS service (0 to reset)>"
+DNS_REDIR_NO_SERVICE="No running DNS service detected on this port!"
+
+#===== Fake-IP =====
+DNS_FAKEIP_DESC="Used to resolve connectivity issues for certain addresses or applications in Fake-IP mode"
+DNS_FAKEIP_TIP="The script already includes many built-in entries. Only add problematic addresses."
+DNS_FAKEIP_EXAMPLE="Examples:\na.b.com\n*.b.com\n*.*.b.com"
+DNS_FAKEIP_EXIST="Existing Fake-IP filter entries:"
+DNS_FAKEIP_EMPTY="No Fake-IP filter entries have been added"
+DNS_FAKEIP_EDIT="Enter a number to remove an entry, or enter an address to add one"
+
+#===== Advanced DNS =====
+DNS_ADV_SPLIT="Use '|' or ',' to separate multiple DNS addresses"
+DNS_ADV_CERT="DoH/DoT requires a local root certificate file"
+DNS_ADV_SINGBOX_LIMIT="Note: SingBox core only loads the first DNS entry"
+
+DNS_ADV_EDIT_DIRECT="Edit DIRECT-DNS"
+DNS_ADV_EDIT_PROXY="Edit PROXY-DNS (queries go through the proxy)"
+DNS_ADV_EDIT_DEFAULT="Edit DEFAULT-DNS (must be an IP, used to resolve other DNS servers)"
+DNS_ADV_AUTO_ENCRYPT="Auto-configure Encrypted DNS"
+DNS_ADV_RESET="Reset to default DNS configuration"
+
+DNS_INPUT_NEW="Enter new DNS address>"
+DNS_IPV6_NOT_SUPPORT="This option does not support IPv6 encrypted DNS!"
+
+DNS_ENCRYPT_OK="Encrypted DNS has been configured. If DNS issues occur, please reset DNS settings."
+DNS_CORE_REQUIRE="Please use the Mihomo or SingBox core"

scripts/lang/en/menu.lang

@@ -0,0 +1,83 @@
+# ===== Common Prompts =====
+
+MENU_RESTART_NOTICE="Changes have been detected. Please restart the service!"
+
+MENU_PORT_CONFLICT_TITLE="The port is occupied by the following process. The core may fail to start!"
+MENU_PORT_CONFLICT_HINT="Please modify the default port configuration!"
+
+MENU_CORE_LOADED_OK="Core loaded successfully!"
+MENU_CORE_LOADED_BAD="The core file is invalid. It may be corrupted or incompatible with the CPU architecture!"
+MENU_CORE_REMOVED="The core file has been removed. Please verify and upload it again!"
+
+MENU_CFG_LOADED_OK="Configuration file loaded successfully!"
+
+MENU_OVERRIDE_WARN="You have disabled configuration overwrite. This will cause many features to be unavailable!"
+MENU_OVERRIDE_ASK="Cancel the disable setting?"
+
+# ===== Welcome & Status =====
+MENU_WELCOME="Welcome to ShellCrash!"
+
+MENU_RUN_ON=" Running"
+MENU_RUN_SET="Configured"
+MENU_RUN_OFF="Stopped"
+
+MENU_PURE_MOD="Pure"
+MENU_MOD=" Mod"
+MENU_IP_DF="Device IP Address"
+
+MENU_AUTOSTART_ON="Autostart enable!"
+MENU_AUTOSTART_OFF="Autostart disable!"
+MENU_AUTOSTART_DEBUG="Debug mode!"
+
+MENU_MEM_USED="Memory usage: "
+MENU_RUNNING_TIME="Running time: "
+
+MENU_TG_CHANNEL="Telegram Channel: "
+
+# ===== /tmp File Detection =====
+MENU_TMP_CORE_FOUND="Available core file found:"
+MENU_TMP_CORE_ASK="Load this core file? (The current service will be stopped)"
+
+MENU_TMP_CFG_FOUND="Kernel configuration file found:"
+MENU_TMP_CFG_ASK="Load as the configuration file? (1/0) > "
+
+# ===== Main Menu =====
+MENU_MAIN_1="Start / Restart Service"
+MENU_MAIN_2="Feature Settings"
+MENU_MAIN_3="Stop Service"
+MENU_MAIN_4="Startup Settings"
+MENU_MAIN_5="Scheduled Tasks"
+MENU_MAIN_6="Configuration Management"
+MENU_MAIN_7="Access & Control"
+MENU_MAIN_8="Tools & Optimization"
+MENU_MAIN_9="Updates & Support"
+MENU_MAIN_0="Exit Script"
+
+MENU_MAIN_PROMPT="Please enter a number > "
+
+# ===== Service Operations =====
+MENU_SERVICE_STOPPED="Service has been stopped!"
+
+# ===== Test / Debug =====
+MENU_TEST_RUNNING="Running test mode. If errors occur, please take a screenshot and seek assistance."
+MENU_TEST_DONE_OK="Test completed! No issues found. Please restart the service."
+MENU_TEST_DONE_FAIL="Test completed!"
+MENU_TEST_LOG_HINT="Full execution log can be found at:"
+
+MENU_ERROR_FOUND="Error found:"
+
+# ===== Command Line Help =====
+
+MENU_CLI_TEST="Test Mode"
+MENU_CLI_HELP="Help List"
+MENU_CLI_UNINSTALL="Uninstall Script"
+MENU_CLI_INIT="Initialize Script"
+MENU_CLI_DEBUG="Debug Mode"
+
+MENU_CLI_START="Start Service"
+MENU_CLI_STOP="Stop Service"
+MENU_CLI_BOOT_INIT="Boot Initialization"
+
+MENU_HELP_ONLINE="Online Support:"
+MENU_HELP_BLOG="Official Blog:"
+MENU_HELP_GITHUB="Release Page:"

scripts/lang/en/userguide.lang

@@ -0,0 +1,14 @@
+
+UG_WELCOME="Welcome to User Guide!"
+UG_CHOOSE_ENV="Please select your usage environment:"
+UG_TIP_CONFIG="(You can still change various settings later)"
+UG_OPTION_1="Router: LAN transparent proxy"
+UG_OPTION_2="Linux device: local proxy only"
+UG_OPTION_3="Restore previous backup settings"
+UG_RESTORE_OK="Script settings have been restored! Please restart the script!"
+UG_IP_FORWARD_WARN="Your device has not enabled IP forwarding, LAN devices will not connect properly. Enable now?"
+UG_ENABLE_LOW_MEM="Your installation directory is less than 10MB, enable low-flash mode?"
+UG_IMPORT_CONFIG="Import configuration file? (Last step before running)"
+UG_CONFIG_TIP="You must have a configuration file to run the service!"
+UG_CONFIG_RES="Importing now? "
+UG_FINAL_TIP="Great! Now just start the service to enjoy!"

scripts/libs/README.md

@@ -0,0 +1,11 @@
+用于存放脚本内置工具的脚本
+
+引用方式必须为：
+
+```shell
+. "$CRASHDIR"/libs/xxx.sh
+```
+
+返回码必须是return x而不能是exit x
+
+此处脚本内容不应包含文字输出和log输出

scripts/libs/check_autostart.sh

@@ -0,0 +1,17 @@
+check_autostart(){
+	if [ "$start_old" = ON ];then
+		[ ! -f "$CRASHDIR"/.dis_startup ] && return 0
+	elif [ -f /etc/rc.common -a "$(cat /proc/1/comm)" = "procd" ]; then
+		[ -n "$(find /etc/rc.d -name '*shellcrash')" ] && return 0
+		[ ! -f "$CRASHDIR"/.dis_startup ] && return 0
+	elif ckcmd systemctl; then
+		[ "$(systemctl is-enabled shellcrash.service 2>&1)" = enabled ] && return 0
+	elif grep -q 's6' /proc/1/comm; then
+		[ -f /etc/s6-overlay/s6-rc.d/user/contents.d/afstart ] && return 0
+	elif rc-status -r >/dev/null 2>&1; then
+		rc-update show default | grep -q "shellcrash" && return 0
+	else
+		return 1
+	fi
+	return 1
+}

scripts/libs/check_cmd.sh

@@ -0,0 +1,7 @@
+ckcmd() {
+    if command -v sh >/dev/null 2>&1;then
+        command -v "$1" >/dev/null 2>&1
+    else
+        type "$1" >/dev/null 2>&1
+    fi
+}

scripts/libs/check_cpucore.sh

@@ -0,0 +1,14 @@
+
+check_cpucore(){ #自动获取内核架构
+	cputype=$(uname -ms | tr ' ' '_' | tr '[A-Z]' '[a-z]')
+	[ -n "$(echo $cputype | grep -E "linux.*armv.*")" ] && cpucore="armv5"
+	[ -n "$(echo $cputype | grep -E "linux.*armv7.*")" ] && [ -n "$(cat /proc/cpuinfo | grep vfp)" ] && [ ! -d /jffs ] && cpucore="armv7"
+	[ -n "$(echo $cputype | grep -E "linux.*aarch64.*|linux.*armv8.*")" ] && cpucore="arm64"
+	[ -n "$(echo $cputype | grep -E "linux.*86.*")" ] && cpucore="386"
+	[ -n "$(echo $cputype | grep -E "linux.*86_64.*")" ] && cpucore="amd64"
+	if [ -n "$(echo $cputype | grep -E "linux.*mips.*")" ];then
+		mipstype=$(echo -n I | hexdump -o 2>/dev/null | awk '{ print substr($2,6,1); exit}') #通过判断大小端判断mips或mipsle
+		[ "$mipstype" = "0" ] && cpucore="mips-softfloat" || cpucore="mipsle-softfloat"
+	fi
+	[ -n "$cpucore" ] && setconfig cpucore $cpucore
+}

scripts/libs/check_dir_avail.sh

@@ -0,0 +1,5 @@
+#检查目录剩余空间——$1:目标路径 $2:-h参数
+dir_avail() {
+	df -h >/dev/null 2>&1 && h="$2"
+    df -P $h "${1:-.}" 2>/dev/null | awk 'NR==2 {print $4}'
+}

scripts/libs/check_target.sh

@@ -0,0 +1,8 @@
+if echo "$crashcore" | grep -q 'singbox'; then
+	target=singbox
+	format=json
+else
+	target=clash
+	format=yaml
+fi
+core_config="$CRASHDIR/${format}s/config.$format"

scripts/libs/compare.sh

@@ -0,0 +1,10 @@
+compare() { #对比文件
+    if [ ! -f "$1" ] || [ ! -f "$2" ]; then
+        return 1
+    elif ckcmd cmp; then
+        cmp -s "$1" "$2"
+		return $?
+    else
+        [ "$(cat "$1")" = "$(cat "$2")" ] && return 0 || return 1
+    fi
+}

scripts/libs/core_tools.sh

@@ -0,0 +1,89 @@
+
+
+[ -n "$(find --help 2>&1 | grep -o size)" ] && find_para=' -size +2000'             #find命令兼容
+
+core_unzip() { #$1:需要解压的文件 $2:目标文件名
+	if echo "$1" |grep -q 'tar.gz$' ;then
+		[ "$BINDIR" = "$TMPDIR" ] && rm -rf "$TMPDIR"/CrashCore #小闪存模式防止空间不足
+		[ -n "$(tar --help 2>&1 | grep -o 'no-same-owner')" ] && tar_para='--no-same-owner' #tar命令兼容
+		mkdir -p "$TMPDIR"/core_tmp
+		tar -zxf "$1" ${tar_para} -C "$TMPDIR"/core_tmp/
+		for file in $(find "$TMPDIR"/core_tmp $find_para 2>/dev/null); do
+			[ -f "$file" ] && [ -n "$(echo $file | sed 's#.*/##' | grep -iE '(CrashCore|sing|meta|mihomo|clash|pre)')" ] && mv -f "$file" "$TMPDIR"/"$2"
+		done
+		rm -rf "$TMPDIR"/core_tmp
+	elif echo "$1" |grep -q '.gz$' ;then
+		gunzip -c "$1" > "$TMPDIR"/"$2"
+	elif echo "$1" |grep -q '.upx$' ;then
+		ln -sf "$1" "$TMPDIR"/"$2"
+	else
+		mv -f "$1" "$TMPDIR"/"$2"
+	fi
+	chmod +x "$TMPDIR"/"$2"
+}
+core_find(){
+	if [ ! -f "$TMPDIR"/CrashCore ];then
+		[ -n "$(find "$CRASHDIR"/CrashCore.* $find_para 2>/dev/null)" ] && [ "$CRASHDIR" != "$BINDIR" ] &&
+			mv -f "$CRASHDIR"/CrashCore.* "$BINDIR"/
+		core_dir=$(find "$BINDIR"/CrashCore.* $find_para 2>/dev/null | head -n 1)
+		[ -n "$core_dir" ] && core_unzip "$core_dir" CrashCore
+	fi
+}
+core_check(){
+	[ -n "$(pidof CrashCore)" ] && "$CRASHDIR"/start.sh stop #停止内核服务防止内存不足
+	core_unzip "$1" core_new
+	sbcheck=$(echo "$crashcore" | grep 'singbox')
+	v=''
+	if [ -n "$sbcheck" ] && "$TMPDIR"/core_new -h 2>&1 | grep -q 'sing-box'; then
+		v=$("$TMPDIR"/core_new version 2>/dev/null | grep version | awk '{print $3}')
+		COMMAND='"$TMPDIR/CrashCore run -D $BINDIR -C $TMPDIR/jsons"'
+	elif [ -z "$sbcheck" ] && "$TMPDIR"/core_new -h 2>&1 | grep -q '\-t';then
+		v=$("$TMPDIR"/core_new -v 2>/dev/null | head -n 1 | sed 's/ linux.*//;s/.* //')
+		COMMAND='"$TMPDIR/CrashCore -d $BINDIR -f $TMPDIR/config.yaml"'
+	fi
+	if [ -z "$v" ]; then
+		rm -rf "$1" "$TMPDIR"/core_new
+		return 2
+	else
+		rm -f "$BINDIR"/CrashCore.tar.gz "$BINDIR"/CrashCore.gz "$BINDIR"/CrashCore.upx
+		if [ -z "$zip_type" ];then
+			gzip -c "$TMPDIR/core_new" > "$BINDIR/CrashCore.gz"
+		else
+			mv -f "$1" "$BINDIR/CrashCore.$zip_type"
+		fi
+		if [ "$zip_type" = 'upx' ];then
+			rm -f "$1" "$TMPDIR"/core_new
+			ln -sf "$TMPDIR/CrashCore.upx" "$TMPDIR/CrashCore"
+		else
+			mv -f "$TMPDIR/core_new" "$TMPDIR/CrashCore"
+		fi
+		core_v="$v"
+		setconfig COMMAND "$COMMAND" "$CRASHDIR"/configs/command.env && . "$CRASHDIR"/configs/command.env
+		setconfig crashcore "$crashcore"
+		setconfig core_v "$core_v"
+		setconfig custcorelink "$custcorelink"
+		return 0
+	fi
+}
+core_webget(){
+	. "$CRASHDIR"/libs/web_get_bin.sh
+	. "$CRASHDIR"/libs/check_target.sh
+	if [ -z "$custcorelink" ];then
+		[ -z "$zip_type" ] && zip_type='tar.gz'
+		get_bin "$TMPDIR/Coretmp.$zip_type" "bin/$crashcore/${target}-linux-${cpucore}.$zip_type"
+	else
+		case "$custcorelink" in
+			*.tar.gz) zip_type="tar.gz" ;;
+			*.gz)     zip_type="gz" ;;
+			*.upx)    zip_type="upx" ;;
+		esac
+		[ -n "$zip_type" ] && webget "$TMPDIR/Coretmp.$zip_type" "$custcorelink"
+	fi
+	#校验内核
+	if [ "$?" = 0 ];then
+		core_check "$TMPDIR/Coretmp.$zip_type"
+	else
+		rm -f "$TMPDIR/Coretmp.$zip_type"
+		return 1
+	fi
+}

scripts/libs/gen_base64.sh

@@ -0,0 +1,26 @@
+#生成指定位数的加密秘钥，符合ss2022协议
+gen_random() {
+    if ckcmd openssl;then
+		openssl rand --base64 "$1"
+	elif ckcmd base64;then
+		head -c "$1" /dev/urandom | base64 | tr -d '\n'
+	elif busybox base64 --help >/dev/null 2>&1;then
+		head -c "$1" /dev/urandom | base64 | tr -d '\n'
+	elif ckcmd uuencode;then
+		head -c "$1" /dev/urandom | uuencode -m - | sed -n '2p'
+	else
+		return 1
+	fi
+}
+#对指定字符串进行base64转码
+gen_base64() {
+	if ckcmd base64;then
+		echo -n "$1" | base64 | tr -d '\n'
+	elif busybox base64 --help >/dev/null 2>&1;then
+		echo -n "$1" | busybox base64 | tr -d '\n'
+	elif ckcmd openssl;then
+		echo -n "$1" | openssl base64 -A
+	else
+		return 1
+	fi
+}

scripts/libs/get_config.sh

@@ -0,0 +1,22 @@
+
+# 检查配置文件
+[ -f "$CRASHDIR"/configs/ShellCrash.cfg ] || . "$CRASHDIR"/init.sh >/dev/null 2>&1
+. "$CRASHDIR"/configs/command.env >/dev/null 2>&1
+. "$CRASHDIR"/configs/ShellCrash.cfg
+
+[ -z "$mix_port" ] && mix_port=7890
+[ -z "$redir_port" ] && redir_port=7892
+[ -z "$tproxy_port" ] && tproxy_port=7893
+[ -z "$db_port" ] && db_port=9999
+[ -z "$dns_port" ] && dns_port=1053
+[ -z "$dns_redir_port" ] && dns_redir_port="$dns_port"
+[ -z "$fwmark" ] && fwmark="$redir_port"
+routing_mark=$((fwmark + 2))
+[ -z "$table" ] && table=100
+
+[ -z "$dns_nameserver" ] && {
+	dns_nameserver='223.5.5.5, 1.2.4.8'
+	netstat -ntlup 2>/dev/null | grep -q '127.0.0.1:53' && dns_nameserver='127.0.0.1'
+}
+[ -z "$dns_fallback" ] && dns_fallback="1.1.1.1, 8.8.8.8"
+[ -z "$dns_resolver" ] && dns_resolver="223.5.5.5, 2400:3200::1"

scripts/libs/get_ecsip.sh

@@ -0,0 +1,15 @@
+
+get_ecs_address() {
+    for f in /tmp/resolv.conf.auto /tmp/resolv.conf /tmp/resolv.conf.d/resolv.conf.auto; do
+        [ -f "$f" ] || continue
+        ip=$(grep -A1 "^# Interface wan$" "$f" | grep nameserver | awk '{printf "%s ", $2}')
+        [ -n "$ip" ] && return
+    done
+	. "$CRASHDIR"/libs/web_get_lite.sh
+	for web in http://members.3322.org/dyndns/getip http://4.ipw.cn http://ipinfo.io/ip; do
+		ip=$(web_get_lite "$web" 0)
+		[ -n "$ip" ] && return
+	done
+}
+get_ecs_address
+[ -n "$ip" ] && ecs_address="${ip%.*}.0/24"

scripts/libs/i18n.sh

@@ -0,0 +1,8 @@
+
+load_lang() {
+    i18n=$(cat "$CRASHDIR"/configs/i18n.cfg 2>/dev/null)
+	[ -z "$i18n" ] && i18n=chs
+	
+    file="$CRASHDIR/lang/$i18n/$1.lang"
+    [ -s "$file" ] && . "$file"
+}

scripts/libs/logger.sh

@@ -0,0 +1,55 @@
+
+[ -n "$__IS_LIB_LOGGER" ] && return
+__IS_LIB_LOGGER=1
+
+#日志工具
+. "$CRASHDIR"/libs/web_json.sh
+#$1日志内容$2显示颜色$3是否推送$4是否覆盖上一条
+logger() { 
+	TMPDIR=/tmp/ShellCrash
+    [ -n "$2" -a "$2" != 0 ] && printf "\033[%sm%s\033[0m\n" "$2" "$1"
+    log_text="$(date "+%G-%m-%d_%H:%M:%S")~$1"
+	[ "$4" = on ] && sed -i "/$1/d" "$TMPDIR"/ShellCrash.log
+    echo "$log_text" >>"$TMPDIR"/ShellCrash.log
+    [ "$(wc -l "$TMPDIR"/ShellCrash.log | awk '{print $1}')" -gt 199 ] && sed -i '1,20d' "$TMPDIR"/ShellCrash.log
+	#推送远程日志
+    [ "$3" != off ] && {
+        [ -n "$device_name" ] && log_text="$log_text($device_name)"
+        [ -n "$push_TG" ] && {
+            url="https://api.telegram.org/bot${push_TG}/sendMessage"
+            [ "$push_TG" = 'publictoken' ] && url='https://tgbot.jwsc.eu.org/publictoken/sendMessage'
+            content="{\"chat_id\":\"${chat_ID}\",\"text\":\"$log_text\"}"
+            web_json_post "$url" "$content" &
+        }
+        [ -n "$push_bark" ] && {
+            url="${push_bark}"
+            content="{\"body\":\"${log_text}\",\"title\":\"ShellCrash_log\",\"level\":\"passive\",\"badge\":\"1\"}"
+            web_json_post "$url" "$content" &
+        }
+        [ -n "$push_Deer" ] && {
+            url="https://api2.pushdeer.com/message/push"
+            content="{\"pushkey\":\"${push_Deer}\",\"text\":\"$log_text\"}"
+            web_json_post "$url" "$content" &
+        }
+        [ -n "$push_Po" ] && {
+            url="https://api.pushover.net/1/messages.json"
+            content="{\"token\":\"${push_Po}\",\"user\":\"${push_Po_key}\",\"title\":\"ShellCrash_log\",\"message\":\"$log_text\"}"
+            web_json_post "$url" "$content" &
+        }
+        [ -n "$push_PP" ] && {
+            url="http://www.pushplus.plus/send"
+            content="{\"token\":\"${push_PP}\",\"title\":\"ShellCrash_log\",\"content\":\"$log_text\"}"
+            web_json_post "$url" "$content" &
+        }
+        [ -n "$push_Gotify" ] && {
+            url="${push_Gotify}"
+            content="{\"title\":\"ShellCrash_log\",\"message\":\"$log_text\",\"priority\":5}"
+            web_json_post "$url" "$content" &
+        }
+        [ -n "$push_SynoChat" ] && {
+            url="${push_ChatURL}/webapi/entry.cgi?api=SYNO.Chat.External&method=chatbot&version=2&token=${push_ChatTOKEN}"
+            content="payload={\"text\":\"${log_text}\", \"user_ids\":[${push_ChatUSERID}]}"
+            web_json_post "$url" "$content" &
+		}
+    } &
+}

scripts/libs/meta_listeners.sh

@@ -0,0 +1,28 @@
+#!/bin/sh
+# Copyright (C) Juewuy
+
+#meta内核vmess入站生成
+[ "$vms_service" = ON ] && {
+	cat >>"$TMPDIR"/listeners.yaml <<EOF
+  - name: "vmess-in"
+    type: vmess
+    port: $vms_port
+    listen:
+    users:
+      - uuid: $vms_uuid
+        alterId: 0
+    ws-path: $vms_ws_path
+EOF
+}
+#meta内核ss入站生成
+[ "$sss_service" = ON ] && {
+	cat >>"$TMPDIR"/listeners.yaml <<EOF
+  - name: "ss-in"
+    type: shadowsocks
+    port: $sss_port
+    listen:
+    cipher: $sss_cipher
+    password: $sss_pwd
+    udp: true
+EOF
+}

scripts/libs/sb_endpoints.sh

@@ -0,0 +1,54 @@
+#!/bin/sh
+# Copyright (C) Juewuy
+
+[ "$ts_service" = ON ] && ! grep -q '"tailscale"' "$CRASHDIR"/jsons/endpoints.json 2>/dev/null && {
+	[ "$ts_subnet" = true ] && {
+		. "$CRASHDIR"/starts/fw_getlanip.sh && getlanip
+		advertise_routes=$(echo "$host_ipv4"|sed 's/[[:space:]]\+/", "/g; s/^/"/; s/$/"/')
+	}
+	[ -z "$ts_exit_node" ] && ts_exit_node=false
+	[ -z "$ts_hostname" ] && ts_hostname='ShellCrash'
+	cat >"$TMPDIR"/jsons/tailscale.json <<EOF
+{
+  "endpoints": [
+    {
+	  "type": "tailscale",
+	  "tag": "ts-ep",
+	  "state_directory": "$CRASHDIR/tailscale",
+	  "auth_key": "$ts_auth_key",
+	  "hostname": "$ts_hostname",
+	  "advertise_routes": [$advertise_routes],
+	  "advertise_exit_node": $ts_exit_node,
+	  "udp_timeout": "5m"
+    }
+  ]
+}
+EOF
+}
+
+[ "$wg_service" = ON ] && ! grep -q '"wireguard"' "$CRASHDIR"/jsons/endpoints.json 2>/dev/null && {
+	[ -n "$wg_ipv6" ] && wg_ipv6_add=", \"$wg_ipv6\""
+	cat >"$TMPDIR"/jsons/wireguard.json <<EOF
+{
+  "endpoints": [
+	{
+	  "type": "wireguard",
+	  "tag": "wg-ep",
+	  "system": true,
+	  "mtu": 1420,
+	  "address": [ "$wg_ipv4"$wg_ipv6_add ],
+	  "private_key": "$wg_private_key",
+	  "peers": [
+		{
+		  "address": "$wg_server",
+		  "port": $wg_port,
+		  "public_key": "$wg_public_key",
+		  "pre_shared_key": "$wg_pre_shared_key",
+		  "allowed_ips": ["0.0.0.0/0", "::/0"]
+		}
+	  ]
+	}
+  ]
+}
+EOF
+}

scripts/libs/sb_inbounds.sh

@@ -0,0 +1,40 @@
+#!/bin/sh
+# Copyright (C) Juewuy
+
+[ "$vms_service" = ON ] && {
+	[ -n "$vms_ws_path" ] && transport=', "transport": { "type": "ws", "path": "'"$vms_ws_path"'" }'
+	cat >"$TMPDIR"/jsons/vmess-in.json <<EOF
+{
+  "inbounds": [
+    {
+      "type": "vmess",
+      "tag": "vmess-in",
+      "listen": "::",
+      "listen_port": $vms_port,
+	  "users": [
+        {
+          "uuid": "$vms_uuid"
+        }
+      ]$transport
+    }
+  ]
+}
+EOF
+}
+
+[ "$sss_service" = ON ] && {
+	cat >"$TMPDIR"/jsons/ss-in.json <<EOF
+{
+  "inbounds": [
+	{
+	  "type": "shadowsocks",
+	  "tag": "ss-in",
+      "listen": "::",
+      "listen_port": $sss_port,
+	  "method": "$sss_cipher",
+	  "password": "$sss_pwd",
+	}
+  ]
+}
+EOF
+}

scripts/libs/set_config.sh

@@ -0,0 +1,6 @@
+#参数1代表变量名，参数2代表变量值,参数3即文件路径
+setconfig() {
+    [ -z "$3" ] && configpath="$CRASHDIR"/configs/ShellCrash.cfg || configpath="${3}"
+	sed -i "/^${1}=.*/d" "$configpath"
+	printf '%s=%s\n' "$1" "$2" >>"$configpath"
+}

scripts/libs/set_cron.sh

@@ -0,0 +1,39 @@
+
+crondir="$(crond -h 2>&1 | grep -oE 'Default:.*' | awk -F ":" '{print $2}'| tr -d ' ')"
+[ ! -w "$crondir" ] && crondir="/etc/storage/cron/crontabs"
+[ ! -w "$crondir" ] && crondir="/var/spool/cron/crontabs"
+[ ! -w "$crondir" ] && crondir="/var/spool/cron"
+[ -z "$USER" ] && USER=$(whoami 2>/dev/null)
+tmpcron=/tmp/cron_tmp
+touch "$tmpcron"
+
+cronadd() { #定时任务工具
+	if crontab -h 2>&1 | grep -q '\-l'; then
+        crontab "$1"
+	elif [ -f "$crondir/$USER" ];then
+		cat "$1" >"$crondir"/"$USER" && cru a REFRESH "0 0 1 1 * /bin/true" 2>/dev/null
+	else
+		echo "找不到可用的crond或者crontab应用！No available crond or crontab application can be found!"
+	fi
+}
+cronload() { #定时任务工具
+	if crontab -h 2>&1 | grep -q '\-l'; then
+        crontab -l
+	elif [ -f "$crondir/$USER" ];then
+		cat "$crondir"/"$USER" 2>/dev/null
+	else
+		return 1
+	fi
+}
+cronset() { #定时任务设置
+    # 参数1代表要移除的关键字,参数2代表要添加的任务语句
+    cronload | grep -v '^$' | grep -vF "$1" >"$tmpcron"
+    [ -n "$2" ] && echo "$2" >>"$tmpcron"
+	cronadd "$tmpcron"
+	#华硕/Padavan固件存档在本地,其他则删除
+	if [ -d /jffs ] || [ -d /etc/storage/ShellCrash ];then
+		mv -f "$tmpcron" "$CRASHDIR"/task/cron
+	else
+		rm -f "$tmpcron"
+	fi
+}

scripts/libs/set_profile.sh

@@ -0,0 +1,9 @@
+
+set_profile() {
+    [ -z "$my_alias" ] && my_alias=crash
+    sed -i "/ShellCrash\/menu.sh/"d "$1"
+    echo "alias ${my_alias}=\"$shtype $CRASHDIR/menu.sh\"" >>"$1" #设置快捷命令环境变量
+    sed -i '/export CRASHDIR=*/'d "$1"
+    echo "export CRASHDIR=\"$CRASHDIR\"" >>"$1" #设置路径环境变量
+	. "$1" >/dev/null 2>&1 || true
+}

scripts/libs/set_proxy.sh

@@ -0,0 +1,9 @@
+
+setproxy(){
+	[ -n "$(pidof CrashCore)" ] && {
+		[ -n "$authentication" ] && auth="$authentication@" || auth=""
+		[ -z "$mix_port" ] && mix_port=7890
+		export https_proxy="http://${auth}127.0.0.1:$mix_port"
+		export http_proxy="http://${auth}127.0.0.1:$mix_port"
+	}
+}

scripts/libs/start_wait.sh

@@ -0,0 +1,10 @@
+i=1
+while [ -z "$test" -a "$i" -lt 30 ]; do
+	sleep 1
+	if curl --version >/dev/null 2>&1; then
+		test=$(curl -s -H "Authorization: Bearer $secret" http://127.0.0.1:${db_port}/proxies | grep -o proxies)
+	else
+		test=$(wget -q --header="Authorization: Bearer $secret" -O - http://127.0.0.1:${db_port}/proxies | grep -o proxies)
+	fi
+	i=$((i + 1))
+done

scripts/libs/urlencode.sh

@@ -0,0 +1,15 @@
+urlencode() {
+    LC_ALL=C
+    printf '%s' "$1" \
+    | hexdump -v -e '/1 "%02X\n"' \
+    | while read -r hex; do
+        case "$hex" in
+            2D|2E|5F|7E|3[0-9]|4[1-9A-F]|5[0-9A]|6[1-9A-F]|7[0-9A-E])
+                printf "\\$(printf '%03o' "0x$hex")"
+                ;;
+            *)
+                printf "%%%s" "$hex"
+                ;;
+        esac
+    done
+}

scripts/libs/web_get.sh

@@ -0,0 +1,77 @@
+. "$CRASHDIR"/libs/set_proxy.sh
+
+webget(){	
+	if pidof CrashCore >/dev/null; then
+		setproxy #设置临时代理，【$1】代表下载目录，【$2】代表在线地址
+		url=$(printf '%s\n' "$2" |
+		sed -e 's#https://.*jsdelivr.net/gh/juewuy/ShellCrash[@|/]#https://raw.githubusercontent.com/juewuy/ShellCrash/#' \
+			-e 's#https://gh.jwsc.eu.org/#https://raw.githubusercontent.com/juewuy/ShellCrash/#')
+	else
+		url=$(printf '%s\n' "$2" |
+		sed 's#https://raw.githubusercontent.com/juewuy/ShellCrash/#https://testingcf.jsdelivr.net/gh/juewuy/ShellCrash@#')
+	fi
+	# ===============================================
+
+	#参数【$1】代表下载目录，【$2】代表在线地址
+	#参数【$3】代表输出显示，【$4】不启用重定向
+	#参数【$5】代表验证证书，【$6】使用自定义UA
+	[ -n "$6" ] && agent="--user-agent $6"
+	if wget --help 2>&1 | grep -q 'show-progress' >/dev/null 2>&1; then
+		[ "$3" = "echooff" ] && progress='-q' || progress='-q --show-progress'
+		[ "$4" = "rediroff" ] && redirect='--max-redirect=0' || redirect=''
+		if [ "$5" = "skipceroff" ] || [ "$skip_cert" = OFF ];then
+			certificate=''
+		else
+			certificate='--no-check-certificate'
+		fi
+		wget -Y on $agent $progress $redirect $certificate --timeout=3 -O "$1" "$url" && return 0 #成功则退出否则重试
+		wget -Y off $agent $progress $redirect $certificate --timeout=5 -O "$1" "$2"
+		return $?
+	elif curl --version >/dev/null 2>&1; then
+		if [ "$3" = "echooff" ];then
+			progress='-s'
+		elif echo "$url" | grep -q 'jsdelivr.net';then
+			progress='-#'
+			. "$CRASHDIR"/libs/web_get_curlbar.sh && curl_fsize
+		else
+			progress='-#'
+		fi
+		[ "$4" = "rediroff" ] && redirect='' || redirect='-L'
+		if [ "$5" = "skipceroff" ] || [ "$skip_cert" = OFF ];then
+			certificate=''
+		else
+			certificate='-k'
+		fi
+		# curl 特殊版本兼容
+		auth_arg=""
+		if curl --version | grep -q '^curl 8.' && ckcmd base64; then
+			auth_b64=$(printf '%s' "$authentication" | base64)
+			[ -n "$auth_b64" ] && auth_arg="--proxy-header Proxy-Authorization:Basic $auth_b64"
+		fi
+		if [ -n "$fsize_raw" ] && [ "$fsize_raw" -gt 204800 ]; then
+			result=$(execute_curl "$1" "$url" "$fsize_raw" "$agent $auth_arg $redirect $certificate")
+		else
+			result=$(curl $agent $auth_arg -w '%{http_code}' --connect-timeout 3 $progress $redirect $certificate -o "$1" "$url")
+		fi
+
+		[ "$result" = "200" ] && return 0 #成功则退出否则重试
+		export https_proxy=""
+		export http_proxy=""
+		
+		if [ -n "$fsize_raw" ] && [ "$fsize_raw" -gt 204800 ]; then
+			result=$(execute_curl "$1" "$2" "$fsize_raw" "$agent $redirect $certificate")
+		else
+			result=$(curl $agent -w '%{http_code}' --connect-timeout 5 $progress $redirect $certificate -o "$1" "$2")
+		fi
+		[ "$result" = "200" ]
+		return $?
+	elif ckcmd wget;then
+		[ "$3" = "echooff" ] && progress='-q'
+		wget -Y on $progress -O "$1" "$url" && return 0 #成功则退出否则重试
+		wget -Y off $progress -O "$1" "$2"
+		return $?
+	else
+		echo "No Curl or Wget！！！"
+		return 1
+	fi
+}

scripts/libs/web_get_bin.sh

@@ -0,0 +1,18 @@
+. "$CRASHDIR"/libs/web_get.sh
+
+get_bin() { #专用于项目内部文件的下载
+    [ -z "$update_url" ] && update_url=https://testingcf.jsdelivr.net/gh/juewuy/ShellCrash@master
+    if [ -n "$url_id" ]; then
+		[ -n "$release_type" ] && rt="$release_type" || rt=master
+        echo "$2" | grep -q '^bin/' && rt=update #/bin文件改为在update分支下载
+        echo "$2" | grep -qE '^public/|^rules/' && rt=dev #/public和/rules文件改为在dev分支下载    
+        if [ "$url_id" = 101 -o "$url_id" = 104 ]; then
+            bin_url="$(grep "$url_id" "$CRASHDIR"/configs/servers.list | awk '{print $3}')@$rt/$2" #jsdelivr特殊处理
+        else
+            bin_url="$(grep "$url_id" "$CRASHDIR"/configs/servers.list | awk '{print $3}')/$rt/$2"
+        fi
+    else
+        bin_url="$update_url/$2"
+    fi
+    webget "$1" "$bin_url" "$3" "$4" "$5" "$6"
+}

scripts/libs/web_get_curlbar.sh

@@ -0,0 +1,47 @@
+
+bar_max=42 #进度条长度
+
+curl_fsize(){ # 获取文件大小
+	fsize_raw=0
+	header=$(curl -sIL --connect-timeout 2 "$url")
+	# 代理容错
+	[ -z "$header" ] && { export https_proxy=""; export http_proxy=""; header=$(curl -sIL --connect-timeout 2 "$url"); }
+	# 提取大小 (优先 Content-Length，其次 ETag)
+	fsize_raw=$(echo "$header" | grep -i 'Content-Length' | tail -n 1 | awk '{print $2}' | tr -d '\r' | awk '{print int($1)}')
+	if [ -z "$fsize_raw" ] || [ "$fsize_raw" -eq 0 ]; then
+		etag=$(echo "$header" | grep -i 'etag' | tail -n 1 | cut -d '"' -f2 | cut -d '-' -f1)
+		[ -n "$etag" ] && fsize_raw=$(printf "%d" 0x$etag 2>/dev/null)
+	fi
+}
+
+execute_curl(){ # 手搓curl进度条
+	local path="$1" target_url="$2" total_size="$3" extra_args="$4"
+	rm -f /tmp/webget_res
+	# 后台静默下载，状态码写入临时文件
+	curl $extra_args -s -L -w '%{http_code}' "$target_url" -o "$path" > /tmp/webget_res &
+	local pid=$!
+	
+	# 循环监控
+	while kill -0 $pid 2>/dev/null; do
+		if [ -f "$path" ]; then
+			local curr=$(wc -c < "$path")
+			local pct=$(awk -v c=$curr -v t=$total_size 'BEGIN {p=(c*100/t); if(p>100)p=100; printf "%.1f", p}')
+			local num=$(awk -v p=$pct -v w=$bar_max 'BEGIN {printf "%d", p*w/100}')
+			local bar=$(printf "%${num}s" | tr ' ' '#'); local spc_n=$((bar_max - num))
+			local spc=""; [ "$spc_n" -gt 0 ] && spc=$(printf "%${spc_n}s")
+			local size=$(( fsize_raw * 100 / 1048576 ))
+			local fs="$((size / 100)).$((size % 100)) MB"
+			printf "\r\033[2K%s%s %6s%%(%s)" "$bar" "$spc" "$pct" "$fs" >&2
+		fi
+		usleep 200000 2>/dev/null || sleep 1
+	done
+	
+	local code=$(cat /tmp/webget_res 2>/dev/null)
+	if [ "$code" = "200" ] || [ "$code" = "206" ]; then
+		local full=$(printf "%${bar_max}s" | tr ' ' '#')
+		printf "\r\033[2K%s 100.0%%(%s)\n" "$full" "$fs" >&2
+	else
+		printf "\r\033[2K" >&2; [ -f "$path" ] && rm -f "$path"
+	fi
+	echo "$code"
+}

scripts/libs/web_get_lite.sh

@@ -0,0 +1,10 @@
+. "$CRASHDIR"/libs/set_proxy.sh
+#$1:目标地址 $2:禁用proxy
+web_get_lite() {
+	[ -z "$2" ] && setproxy
+	if curl --version >/dev/null 2>&1; then
+		curl -ksSl --connect-timeout 3 "$1" 2>/dev/null
+	else
+		wget -Y on -q --timeout=3 -O - "$1"
+	fi
+}

scripts/libs/web_json.sh

@@ -0,0 +1,10 @@
+. "$CRASHDIR"/libs/set_proxy.sh
+#$1:目标地址 $2:json字符串
+web_json_post() {
+	setproxy
+	if curl --version >/dev/null 2>&1; then
+		curl -kfsSl -X POST --connect-timeout 3 -H "Content-Type: application/json" "$1" -d "$2" >/dev/null 2>&1
+	else
+		wget -Y on -q --timeout=3 --method=POST --header="Content-Type: application/json" --body-data="$2" "$1"
+	fi
+}

scripts/libs/web_restore.sh

@@ -0,0 +1,20 @@
+
+#
+put_save() { #推送面板选择
+    [ -z "$3" ] && request_type=PUT || request_type=$3
+    if curl --version >/dev/null 2>&1; then
+        curl -sS -X "$request_type" -H "Authorization: Bearer $secret" -H "Content-Type:application/json" "$1" -d "$2" >/dev/null
+    elif wget --version >/dev/null 2>&1; then
+        wget -q --method="$request_type" --header="Authorization: Bearer $secret" --header="Content-Type:application/json" --body-data="$2" "$1" >/dev/null
+    fi
+}
+web_restore() { #还原面板选择
+	num=$(cat "$CRASHDIR"/configs/web_save | wc -l)
+	i=1
+	while [ "$i" -le "$num" ]; do
+		group_name=$(awk -F ',' 'NR=="'${i}'" {print $1}' "$CRASHDIR"/configs/web_save | sed 's/ /%20/g')
+		now_name=$(awk -F ',' 'NR=="'${i}'" {print $2}' "$CRASHDIR"/configs/web_save)
+		put_save "http://127.0.0.1:${db_port}/proxies/${group_name}" "{\"name\":\"${now_name}\"}"
+		i=$((i + 1))
+	done
+}

scripts/libs/web_save.sh

@@ -0,0 +1,32 @@
+
+#
+get_save() { #获取面板信息
+    if curl --version >/dev/null 2>&1; then
+        curl -s -H "Authorization: Bearer ${secret}" -H "Content-Type:application/json" "$1"
+    elif [ -n "$(wget --help 2>&1 | grep '\-\-method')" ]; then
+        wget -q --header="Authorization: Bearer ${secret}" --header="Content-Type:application/json" -O - "$1"
+    fi
+}
+web_save() { #最小化保存面板节点选择
+    #使用get_save获取面板节点设置
+	get_save "http://127.0.0.1:${db_port}/proxies" | sed 's/{}//g' | sed 's/:{/\
+/g'| grep -aE '"Selector"' >"$TMPDIR"/web_proxies
+    [ -s "$TMPDIR"/web_proxies ] && while read line; do
+        def=$(echo $line | grep -oE '"all".*",' | awk -F "[\"]" '{print $4}')
+        now=$(echo $line | grep -oE '"now".*",' | awk -F "[\"]" '{print $4}')
+        [ "$def" != "$now" ] && {
+            name=$(echo $line | grep -oE '"name".*",' | awk -F "[\"]" '{print $4}')
+            echo "${name},${now}" >>"$TMPDIR"/web_save
+        }
+    done <"$TMPDIR"/web_proxies
+    rm -rf "$TMPDIR"/web_proxies
+    #对比文件，如果有变动则写入磁盘，否则清除缓存
+    for file in web_save; do
+        if [ -s "$TMPDIR/$file" ]; then
+            . "$CRASHDIR"/libs/compare.sh && compare "$TMPDIR/$file" "$CRASHDIR/configs/$file"
+            [ "$?" = 0 ] && rm -f "$TMPDIR/$file" || mv -f "$TMPDIR/$file" "$CRASHDIR/configs/$file"
+		else
+			> "$CRASHDIR/configs/$file" #空文件时移除旧文件
+        fi
+    done
+}

scripts/menus/1_start.sh

@@ -0,0 +1,68 @@
+#!/bin/sh
+# Copyright (C) Juewuy
+
+[ -n "$__IS_MODULE_1_START_LOADED" ] && return
+__IS_MODULE_1_START_LOADED=1
+load_lang 1_start
+
+# ===== 启动完成提示 =====
+startover() {
+    top_box "\033[32m$START_SERVICE_OK\033[0m" \
+        "$START_WEB_HINT \033[4;36mhttp://$host$hostdir\033[0m"
+    if [ "$firewall_area" = 4 ]; then
+        content_line ""
+        content_line "$START_PAC_HINT \033[4;32mhttp://$host:$db_port/ui/pac\033[0m"
+        content_line "$START_PROXY_HINT IP{\033[36m$host\033[0m} Port{\033[36m$mix_port\033[0m}"
+    fi
+    separator_line "="
+    line_break
+    sleep 1
+    return 0
+}
+
+# ===== 启动核心 =====
+start_core() {
+    if echo "$crashcore" | grep -q 'singbox'; then
+        core_config="$CRASHDIR/jsons/config.json"
+    else
+        core_config="$CRASHDIR/yamls/config.yaml"
+    fi
+
+    if [ ! -s "$core_config" ] && [ -s "$CRASHDIR/configs/providers.cfg" ]; then
+        if [ "$crashcore" = singboxr ]; then
+            CORE_TYPE=singbox
+        else
+            CORE_TYPE=clash
+        fi
+        . "$CRASHDIR/menus/providers_$CORE_TYPE.sh" && gen_providers
+
+        comp_box "\033[33m$START_NO_CORE_CFG_TRY_GEN\033[0m"
+    elif [ -s "$core_config" ] || [ -n "$Url" ] || [ -n "$Https" ]; then
+        "$CRASHDIR/start.sh" start
+
+        # 循环检测服务启动状态
+        . "$CRASHDIR/libs/start_wait.sh"
+
+        [ -n "$test" ] || pidof CrashCore >/dev/null && {
+            # 启动 TG 机器人
+            if [ "$bot_tg_service" = ON ]; then
+                . "$CRASHDIR/menus/bot_tg_service.sh" && bot_tg_start
+            fi
+            startover
+        }
+    else
+        comp_box "\033[31m$START_NO_CORE_CFG_IMPORT_FIRST\033[0m"
+        . "$CRASHDIR/menus/6_core_config.sh" && set_core_config
+    fi
+}
+
+# ===== 启动服务入口 =====
+start_service() {
+    if [ "$firewall_area" = 5 ]; then
+        "$CRASHDIR/start.sh" start
+        comp_box "\033[32m$START_FIREWALL_DONE\033[0m"
+        line_break
+    else
+        start_core
+    fi
+}

scripts/menus/2_settings.sh

@@ -0,0 +1,680 @@
+#!/bin/sh
+# Copyright (C) Juewuy
+
+[ -n "$__IS_MODULE_2_SETTINGS_LOADED" ] && return
+__IS_MODULE_2_SETTINGS_LOADED=1
+
+load_lang 2_settings
+
+# 功能设置
+settings() {
+    while true; do
+        # 获取设置默认显示
+        [ -z "$skip_cert" ] && skip_cert=ON
+        [ -z "$sniffer" ] && {
+            sniffer=OFF
+            echo "$crashcore" | grep -q 'singbox' && sniffer=ON
+        }
+        [ -z "$dns_mod" ] && dns_mod='redir_host'
+
+        comp_box "\033[30;47m$SET_MENU_TITLE\033[0m"
+        content_line "1) $SET_MENU_REDIR\t\033[36m$redir_mod$MENU_MOD\033[0m"
+        content_line "2) $SET_MENU_DNS\t\033[36m$dns_mod\033[0m"
+        content_line "3) $SET_MENU_FW_FILTER"
+        [ "$disoverride" != "1" ] && {
+            content_line "4) $SET_MENU_SKIP_CERT\t\033[36m$skip_cert\033[0m"
+            content_line "5) $SET_MENU_SNIFFER\t\033[36m$sniffer\033[0m"
+            content_line "6) $SET_MENU_ADV_PORT"
+        }
+        content_line "7) $SET_MENU_IPV6\t\033[36m$ipv6_redir\033[0m"
+        btm_box "" \
+            "a) \033[31m$SET_MENU_RESET\033[0m" \
+            "b) \033[36m$SET_MENU_LANG\033[0m" \
+            "c) \033[33m$SET_MENU_UI\033[0m" \
+            "" \
+            "0) $COMMON_BACK"
+        read -r -p "$COMMON_INPUT> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        1)
+            if [ "$USER" != root ] && [ "$USER" != admin ]; then
+                comp_box "$SET_WARN_NONROOT"
+                btm_box "1) 是" \
+                    "0) 否，返回上级菜单"
+                read -r -p "$COMMON_INPUT> " res
+                if [ "$res" = 1 ]; then
+                    set_redir_mod
+                else
+                    continue
+                fi
+            else
+                set_redir_mod
+            fi
+            ;;
+        2)
+            . "$CRASHDIR"/menus/dns.sh && set_dns_mod
+            ;;
+        3)
+            . "$CRASHDIR"/menus/fw_filter.sh && set_fw_filter
+            ;;
+        4)
+            line_break
+            separator_line "="
+            if [ "$skip_cert" = "OFF" ]; then
+                content_line "当前\033[33m已禁用\033[0m跳过本地证书验证，是否确认启用？"
+            else
+                content_line "当前\033[33m已启用\033[0m跳过本地证书验证，是否确认禁用？"
+            fi
+            separator_line "="
+            btm_box "1) 是" \
+                "0) 否，返回上级菜单"
+            read -r -p "$COMMON_INPUT> " num
+            if [ "$num" = 1 ]; then
+                if [ "$skip_cert" = OFF ]; then
+                    skip_cert=ON
+                    msg_alert "\033[33m$SET_SKIP_CERT_ON\033[0m"
+                else
+                    skip_cert=OFF
+                    msg_alert "\033[33m$SET_SKIP_CERT_OFF\033[0m"
+                fi
+                setconfig skip_cert $skip_cert
+            else
+                continue
+            fi
+            ;;
+        5)
+            if [ "$sniffer" = "OFF" ]; then
+                comp_box "当前\033[33m已禁用\033[0m域名嗅探，是否确认启用？"
+                btm_box "1) 是" \
+                    "0) 否，返回上级菜单"
+                read -r -p "$COMMON_INPUT> " num
+                if [ "$num" = 1 ]; then
+                    line_break
+                    separator_line "="
+                    if [ "$crashcore" = "clash" ]; then
+                        rm -rf "$TMPDIR/CrashCore" "$CRASHDIR/CrashCore" "$CRASHDIR/CrashCore.tar.gz"
+                        crashcore=meta
+                        setconfig crashcore $crashcore
+                        top_box "$SET_SNIFFER_CORE_SWITCH" \
+                            ""
+                    fi
+                    sniffer=ON
+                else
+                    continue
+                fi
+            elif [ "$crashcore" = clashpre ] && [ "$dns_mod" = redir_host ]; then
+                msg_alert "\033[31m$SET_SNIFFER_LOCKED\033[0m"
+                continue
+            else
+                comp_box "当前\033[33m已启用\033[0m域名嗅探，是否确认禁用？"
+                btm_box "1) 是" \
+                    "0) 否，返回上级菜单"
+                read -r -p "$COMMON_INPUT> " num
+                if [ "$num" = 1 ]; then
+                    sniffer=OFF
+                    line_break
+                    separator_line "="
+                else
+                    continue
+                fi
+            fi
+            setconfig sniffer "$sniffer"
+            btm_box "\033[32m操作成功\033[0m"
+            sleep 1
+            ;;
+        6)
+            if pidof CrashCore >/dev/null; then
+                comp_box "\033[33m$SET_CORE_RUNNING\033[0m" \
+                    "$SET_CORE_STOP_CONFIRM"
+                btm_box "1) 是" \
+                    "0) 否，返回上级菜单"
+                read -r -p "$COMMON_INPUT> " res
+                if [ "$res" = 1 ]; then
+                    "$CRASHDIR/start.sh" stop && set_adv_config
+                else
+                    continue
+                fi
+            else
+                set_adv_config
+            fi
+            ;;
+        7)
+            set_ipv6
+            ;;
+        a)
+            BACK_TAR="$CRASHDIR/configs.tar.gz"
+            comp_box "1) $SET_BACKUP" \
+                "2) $SET_RESTORE" \
+                "3) $SET_RESET" \
+                "" \
+                "0) $COMMON_BACK"
+            read -r -p "$COMMON_INPUT> " num
+            case "$num" in
+            "" | 0)
+                continue
+                ;;
+            1)
+                line_break
+                separator_line "="
+                if tar -zcf "$BACK_TAR" -C "$CRASHDIR/configs/" .; then
+                    content_line "\033[32m$SET_BACKUP_OK $BACK_TAR\033[0m"
+                else
+                    content_line "\033[31m$SET_BACKUP_FAIL\033[0m"
+                fi
+                separator_line "="
+                sleep 1
+                continue
+                ;;
+            2)
+                line_break
+                separator_line "="
+                if [ -f "$BACK_TAR" ]; then
+                    tar -zcf "$TMPDIR/configs.tar.gz" -C "$CRASHDIR/configs/" .
+                    rm -rf "$CRASHDIR/configs/*"
+                    tar -zxf "$BACK_TAR" -C "$CRASHDIR"/configs
+                    mv -f "$TMPDIR/configs.tar.gz" "$BACK_TAR"
+                    content_line "\033[32m$SET_RESTORE_OK $BACK_TAR\033[0m"
+                else
+                    content_line "\033[31m$SET_BACKUP_MISS\033[0m"
+                fi
+                ;;
+            3)
+                line_break
+                separator_line "="
+                if tar -zcf "$BACK_TAR" -C "$CRASHDIR/configs/" .; then
+                    rm -rf "$CRASHDIR/configs"
+                    . "$CRASHDIR/init.sh" >/dev/null
+                    content_lin e"\033[32m$SET_RESET_OK\033[0m"
+                else
+                    content_lin e"\033[32m$SET_RESET_FAIL\033[0m"
+                fi
+                ;;
+            *)
+                errornum
+                continue
+                ;;
+            esac
+            content_line "\033[33m$SET_NEED_RESTART\033[0m"
+            separator_line "="
+            line_break
+            sleep 1
+            exit 0
+            ;;
+        b)
+            comp_box "1) 简体中文" \
+                "2) English" \
+                "" \
+                "0) $COMMON_BACK"
+            read -r -p "$COMMON_INPUT> " num
+            case "$num" in
+            "" | 0)
+                continue
+                ;;
+            1)
+                echo chs >"$CRASHDIR"/configs/i18n.cfg
+                msg_alert "\033[32m切换成功！请重新运行脚本！\033[0m"
+                ;;
+            2)
+                echo en >"$CRASHDIR"/configs/i18n.cfg
+                msg_alert "\033[32mLanguage switched successfully! Please re-run the script!\033[0m"
+                ;;
+            esac
+            line_break
+            exit 0
+            ;;
+        c)
+            comp_box "1) New Design by Sofia-Riese" \
+                "2) TUI-lite" \
+                "" \
+                "0) $COMMON_BACK"
+            read -r -p "$COMMON_INPUT> " num
+            case "$num" in
+            "" | 0)
+                continue
+                ;;
+            1)
+                setconfig tui_type 'tui_layout'
+                . "$CRASHDIR"/menus/tui_layout.sh
+                ;;
+            2)
+                setconfig tui_type 'tui_lite'
+                . "$CRASHDIR"/menus/tui_lite.sh
+                ;;
+            esac
+            msg_alert "\033[32m切换成功！\033[0m"
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}
+
+set_redir_config() {
+    setconfig redir_mod "$redir_mod"
+    setconfig dns_mod "$dns_mod"
+    msg_alert "\033[36m$SET_REDIR_APPLIED $redir_mod 模式\033[0m"
+}
+
+# 路由模式设置
+set_redir_mod() {
+    while true; do
+        [ -n "$(ls /dev/net/tun 2>/dev/null)" ] || ip tuntap >/dev/null 2>&1 || modprobe tun 2>/dev/null && sup_tun=1
+        [ -z "$firewall_area" ] && firewall_area=1
+        [ "$firewall_area" = 4 ] && redir_mod="$MENU_PURE_MOD"
+        [ -z "$redir_mod" ] && redir_mod='Redir'
+        firewall_area_dsc=$(echo "$SET_FW_AREA_DESC($bypass_host)" | cut -d'|' -f$firewall_area)
+        comp_box "\033[33m$SET_REDIR_RESTART_HINT\033[0m" \
+            "$SET_REDIR_CURRENT\033[47;30m$redir_mod$MENU_MOD\033[0m；  $SET_CORE_CURRENT\033[47;30m$crashcore\033[0m"
+        [ "$firewall_area" -le 3 ] && {
+            content_line "1) 设为\033[32m$SET_REDIR_REDIR\033[0m：\t$SET_REDIR_REDIRDES"
+            content_line "2) 设为\033[36m$SET_REDIR_MIX\033[0m：\t$SET_REDIR_MIXDES"
+            content_line "3) 设为\033[32m$SET_REDIR_TPROXY\033[0m：\t$SET_REDIR_TPROXYDES"
+            content_line "4) 设为\033[33m$SET_REDIR_TUN\033[0m：\t$SET_REDIR_TUNDES"
+            content_line ""
+        }
+        [ "$firewall_area" = 5 ] && {
+            content_line "5) \033[32mTCP旁路转发\033[0m：    仅转发TCP流量至旁路由"
+            content_line "6) \033[36mT&U旁路转发\033[0m：    转发TCP&UDP流量至旁路由"
+            content_line ""
+        }
+        btm_box "7) $SET_FW_AREA：\t\033[47;30m$firewall_area_dsc\033[0m" \
+            "8) $SET_VM_REDIR：\t\033[47;30m$vm_redir\033[0m" \
+            "9) $SET_FW_SWITCH：\t\033[47;30m$firewall_mod\033[0m" \
+            "" \
+            "0) $COMMON_BACK"
+        read -r -p "$COMMON_INPUT> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        1)
+            redir_mod=Redir
+            set_redir_config
+            ;;
+        2)
+            if [ -n "$sup_tun" ]; then
+                redir_mod=Mix
+                set_redir_config
+            else
+                msg_alert "\033[31m${SET_NO_MOD}TUN\033[0m" \
+                    "\033[31m$SET_NO_MOD2\033[0m"
+            fi
+            ;;
+        3)
+            if [ "$firewall_mod" = "iptables" ]; then
+                if [ -f /etc/init.d/qca-nss-ecm ] && [ "$systype" = "mi_snapshot" ]; then
+                    read -r -p "$XIAOMI_QOS(1/0)> " res
+                    [ "$res" = '1' ] && {
+                        /data/shellcrash_init.sh tproxyfix
+                        redir_mod=Tproxy
+                        set_redir_config
+                    }
+                elif grep -qE '^TPROXY$' /proc/net/ip_tables_targets || modprobe xt_TPROXY >/dev/null 2>&1; then
+                    redir_mod=Tproxy
+                    set_redir_config
+                else
+                    msg_alert "\033[31m${SET_NO_MOD}iptables-mod-tproxy\033[0m" \
+                        "\033[31m$SET_NO_MOD2\033[0m"
+                fi
+            elif [ "$firewall_mod" = "nftables" ]; then
+                if modprobe nft_tproxy >/dev/null 2>&1 || lsmod 2>/dev/null | grep -q nft_tproxy; then
+                    redir_mod=Tproxy
+                    set_redir_config
+                else
+                    msg_alert "\033[31m${SET_NO_MOD}nft_tproxy\033[0m" \
+                        "\033[31m$SET_NO_MOD2\033[0m"
+                fi
+            fi
+            ;;
+        4)
+            if [ -n "$sup_tun" ]; then
+                redir_mod=Tun
+                set_redir_config
+            else
+                msg_alert "\033[31m$SET_NO_TUN\033[0m"
+            fi
+            ;;
+        5)
+            redir_mod='TCP旁路转发'
+            set_redir_config
+            ;;
+        6)
+            redir_mod='T&U旁路转发'
+            set_redir_config
+            ;;
+        7)
+            set_firewall_area
+            ;;
+        8)
+            set_firewall_vm
+            ;;
+        9)
+            if [ "$firewall_mod" = 'iptables' ]; then
+                if nft add table inet shellcrash 2>/dev/null; then
+                    firewall_mod=nftables
+                    redir_mod=Redir
+                    setconfig redir_mod $redir_mod
+                else
+                    msg_alert "\033[31m$FW_NO_NFTABLES\033[0m"
+                fi
+            elif [ "$firewall_mod" = 'nftables' ]; then
+                if ckcmd iptables; then
+                    firewall_mod=iptables
+                    redir_mod=Redir
+                    setconfig redir_mod $redir_mod
+                else
+                    msg_alert "\033[31m$FW_NO_IPTABLES\033[0m"
+                fi
+            else
+                iptables -j REDIRECT -h >/dev/null 2>&1 && firewall_mod=iptables
+                nft add table inet shellcrash 2>/dev/null && firewall_mod=nftables
+                if [ -n "$firewall_mod" ]; then
+                    redir_mod=Redir
+                    setconfig redir_mod $redir_mod
+                    setconfig firewall_mod "$firewall_mod"
+                else
+                    msg_alert "\033[31m$FW_NO_FIREWALL_BACKEND\033[0m"
+                fi
+            fi
+            setconfig firewall_mod "$firewall_mod"
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}
+
+inputport() {
+    line_break
+    read -r -p "$INPUT_PORT（1～65535）> " portx
+    . "$CRASHDIR"/menus/check_port.sh # 加载测试函数
+    if check_port "$portx"; then
+        setconfig "$xport" "$portx"
+        msg_alert "\033[32m$COMMON_SUCCESS\033[0m"
+        return 0
+    else
+        msg_alert "\033[31m$COMMON_FAILED\033[0m"
+        return 1
+    fi
+}
+
+# 端口设置
+set_adv_config() {
+    while true; do
+        . "$CFG_PATH" >/dev/null
+        [ -z "$secret" ] && secret="$COMMON_UNSET"
+        [ -z "$table" ] && table=100
+        [ -z "$authentication" ] && auth="$COMMON_UNSET" || auth="******"
+        comp_box "1) $ADV_HTTP_PORT：\t\033[36m$mix_port\033[0m" \
+            "2) $ADV_HTTP_AUTH：\t\033[36m$auth\033[0m" \
+            "3) $ADV_REDIR_PORT：\t\033[36m$redir_port,$((redir_port + 1))\033[0m" \
+            "4) $ADV_DNS_PORT：\t\t\033[36m$dns_port\033[0m" \
+            "5) $ADV_PANEL_PORT：\t\t\033[36m$db_port\033[0m" \
+            "6) $ADV_PANEL_PASS：\t\t\033[36m$secret\033[0m" \
+            "8) $ADV_HOST：\t\033[36m$host\033[0m" \
+            "9) $ADV_TABLE：\t\t\033[36m$table,$((table + 1))\033[0m" \
+            "" \
+            "0) $COMMON_BACK"
+        read -r -p "$COMMON_INPUT> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        1)
+            xport=mix_port
+            inputport
+            if [ $? -eq 1 ]; then
+                break
+            else
+                continue
+            fi
+            ;;
+        2)
+            comp_box "$ADV_AUTH_FORMAT_DESC" \
+                "$ADV_AUTH_WARN" \
+                "$ADV_AUTH_REMOVE_HINT"
+            read -r -p "$ADV_AUTH_INPUT> " input
+            if [ "$input" = "0" ]; then
+                authentication=""
+                setconfig authentication
+                msg_alert "\033[32m$ADV_AUTH_REMOVED\033[0m"
+            else
+                if [ "$local_proxy" = "ON" ] && [ "$local_type" = "$LOCAL_TYPE_ENV" ]; then
+                    msg_alert "\033[33m$ADV_AUTH_ENV_CONFLICT\033[0m"
+                else
+                    authentication=$(echo "$input" | grep :)
+                    if [ -n "$authentication" ]; then
+                        setconfig authentication "'$authentication'"
+                        msg_alert "\033[32m$COMMON_SUCCESS\033[0m"
+                    else
+                        msg_alert "\033[31m$ADV_AUTH_INVALID\033[0m"
+                    fi
+                fi
+            fi
+            ;;
+        3)
+            xport=redir_port
+            inputport
+            if [ $? -eq 1 ]; then
+                break
+            else
+                continue
+            fi
+            ;;
+        4)
+            xport=dns_port
+            inputport
+            if [ $? -eq 1 ]; then
+                break
+            else
+                continue
+            fi
+            ;;
+        5)
+            xport=db_port
+            inputport
+            if [ $? -eq 1 ]; then
+                break
+            else
+                continue
+            fi
+            ;;
+        6)
+            line_break
+            read -r -p "$ADV_PANEL_PASS_INPUT> " secret
+            if [ -n "$secret" ]; then
+                [ "$secret" = "0" ] && secret=""
+                if setconfig secret "$secret"; then
+                    common_success
+                else
+                    common_failed
+                fi
+            fi
+            ;;
+        8)
+            comp_box "\033[33m$ADV_HOST_WARN_LAN\033[0m" \
+                "\033[31m$ADV_HOST_WARN_CHANGE\033[0m"
+            read -r -p "$ADV_HOST_INPUT> " host
+            if [ "$host" = "0" ]; then
+                host=""
+                setconfig host "$host"
+                msg_alert "\033[32m$ADV_HOST_REMOVED\033[0m"
+                line_break
+                exit 0
+            elif echo "$host" | grep -Eq '\<([1-9]|[1-9][0-9]|1[0-9]{2}|2[01][0-9]|22[0-3])\>(\.\<([0-9]|[0-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\>){2}\.\<([1-9]|[0-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-4])\>'; then
+                if setconfig host "$host"; then
+                    common_success
+                else
+                    common_failed
+                fi
+            else
+                host=""
+                msg_alert "\033[31m$ADV_HOST_INVALID\033[0m"
+            fi
+            ;;
+        9)
+            comp_box "\033[33m$ADV_TABLE_WARN\033[0m"
+            read -r -p "$ADV_TABLE_INPUT> " table
+            if [ -n "$table" ]; then
+                [ "$table" = "0" ] && table="100"
+                if setconfig table "$table"; then
+                    common_success
+                else
+                    common_failed
+                fi
+            fi
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}
+
+set_firewall_area() {
+    while true; do
+        [ -z "$vm_redir" ] && vm_redir='OFF'
+        comp_box "\033[33m$FW_AREA_NOTE_1\033[0m" \
+            "\033[33m$FW_AREA_NOTE_2\033[0m" \
+            "" \
+            "当前路由劫持范围：$firewall_area_dsc"
+        btm_box "1) \033[32m$FW_AREA_LAN\033[0m" \
+            "2) \033[36m$FW_AREA_LOCAL\033[0m" \
+            "3) \033[32m$FW_AREA_BOTH\033[0m" \
+            "4) $FW_AREA_NONE" \
+            "" \
+            "0) $COMMON_BACK"
+        read -r -p "$COMMON_INPUT> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        [1-4])
+            if [ "$firewall_area" -ge 4 ]; then
+                redir_mod=''
+            else
+                redir_mod=Redir
+            fi
+            firewall_area="$num"
+            setconfig firewall_area "$firewall_area"
+            setconfig redir_mod "$redir_mod"
+
+            case "$firewall_area" in
+            1) firewall_area_dsc="$FW_AREA_LAN" ;;
+            2) firewall_area_dsc="$FW_AREA_LOCAL" ;;
+            3) firewall_area_dsc="$FW_AREA_BOTH" ;;
+            4) firewall_area_dsc="$FW_AREA_NONE" ;;
+            esac
+
+            common_success
+            ;;
+        5)
+            comp_box "\033[31m注意：\033[0m" \
+                "此功能存在多种风险如无网络基础请勿尝试！" \
+                "如需代理UDP，请确保旁路由运行了支持UDP代理的模式！" \
+                "如使用systemd方式启动，内核依然会空载运行，建议使用保守模式！" \
+                "\033[33m说明：\033[0m" \
+                "此功能不启动内核仅配置防火墙转发，且子设备无需额外设置网关DNS" \
+                "支持防火墙分流及设备过滤，支持部分定时任务，但不支持ipv6"
+            read -r -p "请直接输入旁路由IPV4地址> " bypass_host
+            [ -n "$bypass_host" ] && {
+                firewall_area=$num
+                setconfig firewall_area "$firewall_area"
+                setconfig bypass_host "$bypass_host"
+                redir_mod=TCP旁路转发
+                setconfig redir_mod $redir_mod
+            }
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}
+
+set_firewall_vm() {
+    [ -z "$vm_ipv4" ] && vm_ipv4=$(ip a 2>&1 | grep -w 'inet' | grep 'global' | grep 'brd' | grep -E 'docker|podman|virbr|vnet|ovs|vmbr|veth|vmnic|vboxnet|lxcbr|xenbr|vEthernet' | sed 's/.*inet.//g' | sed 's/ br.*$//g' | sed 's/metric.*$//g' | tr '\n' ' ')
+    comp_box "$VM_DETECT_DESC\033[32m$vm_ipv4\033[0m"
+    btm_box "1) \033[32m$VM_ENABLE_AUTO\033[0m" \
+        "2) \033[36m$VM_ENABLE_MANUAL\033[0m" \
+        "3) \033[31m$VM_DISABLE\033[0m" \
+        "" \
+        "0) $COMMON_BACK"
+    read -r -p "$COMMON_INPUT> " num
+    case "$num" in
+    1)
+        if [ -n "$vm_ipv4" ]; then
+            vm_redir=ON
+            common_success
+        else
+            msg_alert "\033[33m$VM_NO_NET_DETECTED\033[0m"
+        fi
+
+        ;;
+    2)
+        comp_box "$VM_INPUT_DESC_1" \
+            "$VM_INPUT_DESC_2 \033[32m10.88.0.0/16 172.17.0.0/16\033[0m" \
+            "" \
+            "Tips：直接回车确认可返回上级菜单"
+        read -r -p "$VM_INPUT_NET> " text
+        [ -n "$text" ] && vm_ipv4="$text" && vm_redir=ON
+        ;;
+    3)
+        vm_redir=OFF
+        vm_ipv4=''
+        common_success
+        ;;
+    *) ;;
+    esac
+    case "$num" in
+    1-3)
+        setconfig vm_redir "$vm_redir"
+        setconfig vm_ipv4 "'$vm_ipv4'"
+        ;;
+    esac
+}
+
+# ipv6设置
+set_ipv6() {
+    while true; do
+        [ -z "$ipv6_redir" ] && ipv6_redir=OFF
+        [ -z "$ipv6_dns" ] && ipv6_dns=ON
+
+        top_box "1) $IPV6_REDIR：\t\033[36m$ipv6_redir\033[0m"
+        [ "$disoverride" != "1" ] && content_line "2) $IPV6_DNS：\t\033[36m$ipv6_dns\033[0m"
+        btm_box "" \
+            "0) $COMMON_BACK"
+        read -r -p "$COMMON_INPUT> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        1)
+            if [ "$ipv6_redir" = "OFF" ]; then
+                ipv6_support=ON
+                ipv6_redir=ON
+            else
+                ipv6_redir=OFF
+            fi
+            setconfig ipv6_redir $ipv6_redir
+            setconfig ipv6_support "$ipv6_support"
+            common_success
+            ;;
+        2)
+            [ "$ipv6_dns" = OFF ] && ipv6_dns=ON || ipv6_dns=OFF
+            if setconfig ipv6_dns "$ipv6_dns"; then
+                common_success
+            else
+                common_failed
+            fi
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}

scripts/menus/4_setboot.sh

@@ -0,0 +1,252 @@
+#!/bin/sh
+# Copyright (C) Juewuy
+
+[ -n "$__IS_MODULE_4_SETBOOT_LOADED" ] && return
+__IS_MODULE_4_SETBOOT_LOADED=1
+
+allow_autostart() {
+    if [ -f /etc/rc.common ] && [ "$(cat /proc/1/comm)" = "procd" ]; then
+        /etc/init.d/shellcrash enable
+    fi
+
+    ckcmd systemctl && systemctl enable shellcrash.service >/dev/null 2>&1
+    grep -q 's6' /proc/1/comm && touch /etc/s6-overlay/s6-rc.d/user/contents.d/afstart
+    rc-status -r >/dev/null 2>&1 && rc-update add shellcrash default >/dev/null 2>&1
+    rm -rf "$CRASHDIR"/.dis_startup
+}
+
+disable_autostart() {
+    [ -d /etc/rc.d ] && cd /etc/rc.d && rm -rf *shellcrash >/dev/null 2>&1 && cd - >/dev/null
+    ckcmd systemctl && systemctl disable shellcrash.service >/dev/null 2>&1
+    grep -q 's6' /proc/1/comm && rm -rf /etc/s6-overlay/s6-rc.d/user/contents.d/afstart
+    rc-status -r >/dev/null 2>&1 && rc-update del shellcrash default >/dev/null 2>&1
+    touch "$CRASHDIR"/.dis_startup
+}
+
+# 启动设置菜单
+setboot() {
+    while true; do
+        [ -z "$start_old" ] && start_old=OFF
+
+        if [ -z "$start_delay" ] || [ "$start_delay" = 0 ]; then
+            delay=未设置
+        else
+            delay="${start_delay}秒"
+        fi
+
+        check_autostart && auto_set="ON" || auto_set="OFF"
+        [ "${BINDIR}" = "$CRASHDIR" ] && mini_clash=OFF || mini_clash=ON
+        [ -z "$network_check" ] && network_check=ON
+        comp_box "\033[30;47m启动设置菜单\033[0m"
+        content_line "1) 开机自启动：     \033[36m$(printf '%-4s' "$auto_set")\033[0m"
+        content_line "2) 使用保守模式：   \033[36m$(printf '%-4s' "$start_old")\033[0m   ———基于定时任务(每分钟检测)"
+        content_line "3) 设置自启延时：   \033[36m$(printf '%-7s' "$delay")\033[0m ———用于解决自启后服务受限"
+        content_line "4) 启用小闪存模式： \033[36m$(printf '%-4s' "$mini_clash")\033[0m   ———用于闪存空间不足的设备"
+        [ "${BINDIR}" != "$CRASHDIR" ] && content_line "5) 设置小闪存目录： \033[36m${BINDIR}\033[0m"
+        btm_box "6) 自启网络检查：   \033[36m$(printf '%-4s' "$network_check")\033[0m   ———禁用则跳过自启时网络检查" \
+            "7) 查看启动日志" \
+            "" \
+            "0) 返回上级菜单"
+        read -r -p "请输入对应标号> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        1)
+
+            if check_autostart; then
+                # 禁止自启动：删除各系统的启动项
+                disable_autostart
+                msg_alert "\033[33m已禁止ShellCrash开机自启动！\033[0m"
+            else
+                # 允许自启动：配置各系统的启动项
+                allow_autostart
+                msg_alert "\033[32m已设置ShellCrash开机自启动！\033[0m"
+            fi
+            ;;
+        2)
+            if [ "$start_old" = "OFF" ] >/dev/null 2>&1; then
+                disable_autostart
+                start_old=ON
+                setconfig start_old "$start_old"
+                "$CRASHDIR"/start.sh stop
+                msg_alert "\033[33m改为使用保守模式启动服务！\033[0m"
+            else
+                if grep -qE 'procd|systemd|s6' /proc/1/comm || rc-status -r >/dev/null 2>&1; then
+                    "$CRASHDIR"/start.sh cronset "ShellCrash初始化"
+                    start_old=OFF
+                    setconfig start_old "$start_old"
+                    "$CRASHDIR"/start.sh stop
+                    msg_alert "\033[32m改为使用系统守护进程启动服务！\033[0m"
+                else
+                    msg_alert "\033[31m当前设备不支持以其他模式启动！\033[0m"
+                fi
+            fi
+            ;;
+        3)
+            comp_box "\033[33m如果你的设备启动后可以正常使用，则无需设置！\033[0m" \
+                "\033[36m推荐设置为30～120秒之间，请根据设备问题自行试验\033[0m"
+            read -r -p "请输入启动延迟时间（0～300秒）> " sec
+            case "$sec" in
+            [0-9] | [0-9][0-9] | [0-2][0-9][0-9] | 300)
+                start_delay=$sec
+                setconfig start_delay "$sec"
+                msg_alert "\033[32m设置成功！\033[0m"
+                ;;
+            *)
+                msg_alert "\033[31m输入有误，或超过300秒，请重新输入！\033[0m"
+                ;;
+            esac
+            ;;
+        4)
+            dir_size=$(df "$CRASHDIR" | awk '{ for(i=1;i<=NF;i++){ if(NR==1){ arr[i]=$i; }else{ arr[i]=arr[i]" "$i; } } } END{ for(i=1;i<=NF;i++){ print arr[i]; } }' | grep Ava | awk '{print $2}')
+            if [ "$mini_clash" = "OFF" ]; then
+                if [ "$dir_size" -gt 20480 ]; then
+                    msg_alert "\033[33m您的设备空间充足（>20M），无需开启！\033[0m"
+                elif [ "$start_old" != 'ON' ] && [ "$(cat /proc/1/comm)" = "systemd" ]; then
+                    msg_alert "\033[33m不支持systemd启动模式，请先启用保守模式！\033[0m"
+                else
+                    [ "$BINDIR" = "$CRASHDIR" ] && BINDIR="$TMPDIR"
+                    msg_alert "\033[32m已经启用小闪存功能！\033[0m" \
+                        "如需更换目录，请使用【设置小闪存目录】功能\033[0m"
+                fi
+            else
+                if [ "$dir_size" -lt 8192 ]; then
+                    comp_box "\033[31m您的设备剩余空间不足8M，停用后可能无法正常运行！\033[0m" \
+                        "是否确认停用此功能？"
+                    btm_box "1) 是" \
+                        "0) 否，返回上级菜单"
+                    read -r -p "请输入对应标号> " res
+                    if [ "$res" = 1 ]; then
+                        BINDIR="$CRASHDIR"
+                        msg_alert "\033[33m已经停用小闪存功能！\033[0m"
+                    else
+                        continue
+                    fi
+                else
+                    rm -rf /tmp/ShellCrash
+                    BINDIR="$CRASHDIR"
+                    msg_alert "\033[33m已经停用小闪存功能！\033[0m"
+                fi
+            fi
+            sed -i "s#BINDIR=.*#BINDIR=$BINDIR#" "$CRASHDIR"/configs/command.env
+            sleep 1
+            ;;
+        5)
+            while true; do
+                comp_box "\033[33m如设置到内存，则每次开机后都自动重新下载相关文件\033[0m" \
+                    "\033[33m请确保安装源可用裸连，否则会导致启动失败\033[0m"
+                btm_box "1) 使用内存（/tmp）" \
+                    "2) 选择U盘目录" \
+                    "3) 自定义目录" \
+                    "" \
+                    "0) 返回上级菜单"
+                read -r -p "请输入对应标号> " num
+                case "$num" in
+                "" | 0)
+                    break
+                    ;;
+                1)
+                    BINDIR="$TMPDIR"
+                    ;;
+                2)
+                    set_usb_dir() {
+                        while true; do
+                            comp_box "请选择安装目录："
+                            du -hL /mnt |
+                                awk '{print NR") "$2"  （已占用的储存空间："$1"）"}' |
+                                while IFS= read -r line; do
+                                    content_line "$line"
+                                done
+                            content_line ""
+                            content_line "0) 返回上级菜单"
+                            separator_line "="
+                            read -r -p "请输入对应标号> " num
+                            BINDIR=$(du -hL /mnt | awk '{print $2}' | sed -n "$num"p)
+                            if [ "$num" = 0 ]; then
+                                return 1
+                            elif [ -z "$BINDIR" ]; then
+                                msg_alert "\033[31m输入错误！请重新设置！\033[0m"
+                            else
+                                return 0
+                            fi
+                        done
+                    }
+                    set_usb_dir
+                    if [ $? -eq 1 ]; then
+                        continue
+                    fi
+                    ;;
+                3)
+                    input_dir() {
+                        while true; do
+                            comp_box "\033[36m请直接输入命令语句\033[0m" \
+                                "或输入 0 返回上级菜单"
+                            read -r -p "请输入> " BINDIR
+                            if [ "$BINDIR" = 0 ]; then
+                                return 1
+                            elif [ ! -d "$BINDIR" ]; then
+                                msg_alert "\033[31m输入错误！请重新设置！\033[0m"
+                            fi
+                            return 0
+                        done
+                    }
+                    input_dir
+                    if [ $? -eq 1 ]; then
+                        continue
+                    fi
+                    ;;
+                *)
+                    errornum
+                    continue
+                    ;;
+                esac
+                sed -i "s#BINDIR=.*#BINDIR=$BINDIR#" "$CRASHDIR"/configs/command.env
+                break
+            done
+            ;;
+        6)
+            comp_box "\033[33m如果你的设备启动后可以正常使用，则无需变更设置！\033[0m" \
+                "\033[36m禁用时，如果使用了小闪存模式或者rule-set等在线规则，则可能会因无法联网而导致启动失败！\033[0m" \
+                "\033[32m启用时，会导致部分性能较差或者拨号较慢的设备可能会因查询超时导致启动失败！\033[0m"
+
+            if [ "$network_check" = "OFF" ]; then
+                content_line "当前\033[33m已禁用\033[0m自启网络检查，是否确认启用？"
+            else
+                content_line "当前\033[33m已启用\033[0m自启网络检查，是否确认禁用？"
+            fi
+            separator_line "-"
+            btm_box "1) 是" \
+                "0) 否，返回上级菜单"
+            read -r -p "请输入对应标号> " res
+            if [ "$res" = '1' ]; then
+                if [ "$network_check" = "OFF" ]; then
+                    network_check=ON
+                else
+                    network_check=OFF
+                fi
+                if setconfig network_check "$network_check"; then
+                    common_success
+                else
+                    common_failed
+                fi
+            fi
+            ;;
+        7)
+            if [ -s "$TMPDIR"/ShellCrash.log ]; then
+                line_break
+                echo "==========================================================="
+                grep -v '任务' "$TMPDIR"/ShellCrash.log
+                echo "==========================================================="
+                line_break
+                exit
+            else
+                msg_alert "\033[31m未找到相关日志！\033[0m"
+            fi
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}

scripts/menus/5_task.sh

@@ -0,0 +1,421 @@
+#!/bin/sh
+# Copyright (C) Juewuy
+
+[ -n "$__IS_MODULE_5_TASK_LOADED" ] && return
+__IS_MODULE_5_TASK_LOADED=1
+
+# 通用工具
+. "$CRASHDIR"/libs/set_config.sh
+. "$CRASHDIR"/libs/set_cron.sh
+
+load_lang 5_task
+
+# 任务工具
+set_cron() {
+    [ -z "$week" ] && week=*
+    [ -z "$hour" ] && hour=*
+    [ -z "$min" ] && min=0
+    comp_box "\033[33m$cron_time\033[0m执行任务：\033[36m$task_name\033[0m" \
+        "" \
+        "是否确认添加定时任务？"
+    btm_box "1) 是" \
+        "0) 否"
+    read -r -p "请输入对应标号> " res
+    if [ "$res" = '1' ]; then
+        task_txt="$min $hour * * $week $CRASHDIR/task/task.sh $task_id $cron_time$task_name"
+        cronset "$cron_time$task_name" "$task_txt"
+        msg_alert -t 0 "任务【$cron_time$task_name】\033[32m已添加！\033[0m"
+    fi
+    unset week hour min
+    sleep 1
+}
+
+set_service() {
+    # 参数1代表要任务类型,参数2代表任务ID,参数3代表任务描述,参数4代表running任务cron时间
+    task_file="$CRASHDIR"/task/$1
+    [ -s "$task_file" ] && sed -i "/$3/d" "$task_file"
+    # 运行时每分钟执行的任务特殊处理
+    if [ "$1" = "running" ]; then
+        task_txt="$4 $CRASHDIR/task/task.sh $2 $3"
+        echo "$task_txt" >>"$task_file"
+        [ -n "$(pidof CrashCore)" ] && cronset "$3" "$task_txt"
+    else
+        echo "$CRASHDIR/task/task.sh $2 $3" >>"$task_file"
+    fi
+    content_line "【$3】\033[32m$COMMON_SUCCESS\033[0m"
+    sleep 1
+}
+
+# 任务界面
+#
+# 自定义命令添加
+task_user_add() {
+    while true; do
+        comp_box "\033[33m命令可包含空格，请确保命令可执行！\033[0m" \
+            "\033[36m请勿附带执行条件，执行条件请在命令添加完成后再返回设置！\033[0m" \
+            "亦可手动编辑\033[32m${CRASHDIR}/task/task.user\033[0m以添加命令"
+        btm_box "\033[36m请直接输入命令语句\033[0m" \
+            "或输入 0 返回上级菜单"
+        read -r -p "请输入> " script
+        if [ "$script" = 0 ]; then
+            break
+        elif [ -n "$script" ]; then
+            task_command=$script
+            comp_box "请检查输入：\033[32m$task_command\033[0m"
+            # 获取本任务ID
+            task_max_id=$(awk -F '#' '{print $1}' "$CRASHDIR"/task/task.user 2>/dev/null | sort -n | tail -n 1)
+            [ -z "$task_max_id" ] && task_max_id=200
+            task_id=$((task_max_id + 1))
+            read -r -p "请输入任务备注> " txt
+            [ -n "$txt" ] && task_name=$txt || task_name=自定义任务$task_id
+            echo "$task_id#$task_command#$task_name" >>"$CRASHDIR"/task/task.user
+            msg_alert "\033[32m自定义任务已添加！\033[0m"
+            break
+        else
+            msg_alert "\033[31m输入错误，请重新输入！\033[0m"
+        fi
+    done
+}
+
+# 自定义命令删除
+task_user_del() {
+    while true; do
+        if grep -Evq '^#' "$CRASHDIR/task/task.user" 2>/dev/null; then
+            comp_box "请输入对应ID移除对应自定义任务（不会影响内置任务）" \
+                "也可以手动编辑\033[32m${CRASHDIR}/task/task.user\033[0m"
+            grep -Ev '^#' "$CRASHDIR/task/task.user" 2>/dev/null |
+                awk -F '#' '{print $1") "$3}' |
+                while IFS= read -r line; do
+                    content_line "$line"
+                done
+            btm_box "" \
+                "0) 返回上级菜单"
+            read -r -p "请输入对应标号> " num
+            if [ "$num" = 0 ]; then
+                break
+            elif [ -n "$num" ]; then
+                sed -i "/^$num#/d" "$CRASHDIR"/task/task.user 2>/dev/null
+                common_success
+            else
+                msg_alert "\033[31m输入错误，请重新输入！\033[0m"
+            fi
+        else
+            msg_alert "\033[33m你暂未添加任何自定义任务\033[0m"
+            break
+        fi
+    done
+}
+
+# 任务添加
+task_add() {
+    while true; do
+        comp_box "\033[36m请选择需要添加的任务：\033[0m"
+        # 输出任务列表
+        list=$(cat "$CRASHDIR"/task/task.list "$CRASHDIR"/task/task.user 2>/dev/null | grep -Ev '^(#|$)' | awk -F '#' '{print $3}')
+        list_box "$list"
+        btm_box "" \
+            "0) 返回上级菜单"
+        read -r -p "请输入对应标号> " num
+        case "$num" in
+        0)
+            break
+            ;;
+        [1-9] | [1-9][0-9])
+            if [ "$num" -le "$(echo "$list" | wc -l)" ]; then
+                task_id=$(cat "$CRASHDIR"/task/task.list "$CRASHDIR"/task/task.user 2>/dev/null | grep -Ev '^(#|$)' | sed -n "$num p" | awk -F '#' '{print $1}')
+                task_name=$(cat "$CRASHDIR"/task/task.list "$CRASHDIR"/task/task.user 2>/dev/null | grep -Ev '^(#|$)' | sed -n "$num p" | awk -F '#' '{print $3}')
+                task_type
+                break
+            else
+                errornum
+            fi
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}
+
+# 任务删除
+task_del() {
+    # 删除定时任务
+    cronset "$1"
+    # 删除条件任务
+    sed -i "/$1/d" "$CRASHDIR"/task/cron 2>/dev/null
+    sed -i "/$1/d" "$CRASHDIR"/task/bfstart 2>/dev/null
+    sed -i "/$1/d" "$CRASHDIR"/task/afstart 2>/dev/null
+    sed -i "/$1/d" "$CRASHDIR"/task/running 2>/dev/null
+    sed -i "/$1/d" "$CRASHDIR"/task/affirewall 2>/dev/null
+}
+
+# 任务条件选择菜单
+task_type() {
+    comp_box "请选择任务\033[36m【$task_name】\033[0m执行条件："
+    btm_box "1) 定时任务\033[32m每周执行\033[0m" \
+        "2) 定时任务\033[32m每日执行\033[0m" \
+        "3) 定时任务\033[32m每小时执行\033[0m" \
+        "4) 定时任务\033[32m每分钟执行\033[0m" \
+        "   - - - - - - - - -\033[31m注意\033[0m- - - - - - - - -" \
+        "   逻辑水平不及格的请勿使用下方触发条件！" \
+        "   - - - - - - - - - - - - - - - - - - - -" \
+        "5) 服务\033[33m启动前执行\033[0m" \
+        "6) 服务\033[33m启动后执行\033[0m" \
+        "7) 服务\033[33m运行时每分钟执行\033[0m" \
+        "8) 防火墙服务\033[33m重启后执行\033[0m" \
+        "" \
+        "0) 返回上级菜单"
+    read -r -p "请输入对应标号> " num
+    case "$num" in
+    0)
+        return 1
+        ;;
+    1)
+
+        comp_box "输入 1～7 对应\033[33m每周的指定某天\033[0m运行（7=周日）" \
+            "输入 1，4，0 代表\033[36m每周一、周四、周日\033[0m运行" \
+            "输入 1～5 代表\033[36m周一至周五\033[0m运行"
+        read -r -p "在每周哪天执行？> " week
+        # week=`echo ${week/7/0}` # 把7换成0
+        read -r -p "想在该日的具体哪个小时执行？（0～23）> " hour
+        cron_time="在每周$week的$hour点整"
+        # cron_time=`echo ${cron_time/周0/周日}` # 把0换成日
+        [ -n "$week" ] && [ -n "$hour" ] && set_cron
+        ;;
+    2)
+        comp_box "输入 1，7，15 代表\033[36m每到1，7，15点\033[0m运行" \
+            "输入 6～18 代表\033[36m早6点至晚18点间每小时\033[0m运行"
+        read -r -p "想在每日的具体哪个小时执行？（0~23）> " hour
+        read -r -p "想在具体哪分钟执行？（0～59的整数）> " min
+        cron_time="在每日的$hour点$min分"
+        [ -n "$min" ] && [ -n "$hour" ] && set_cron
+        ;;
+    3)
+        line_break
+        read -r -p "想每隔多少小时执行一次？（1～23的整数）> " num
+        hour="*/$num"
+        cron_time="每隔$num小时"
+        [ -n "$hour" ] && set_cron
+        ;;
+    4)
+        line_break
+        read -r -p "想每隔多少分钟执行一次？（1～59的整数）> " num
+        min="*/$num"
+        cron_time="每隔$num分钟"
+        [ -n "$min" ] && set_cron
+        ;;
+    5)
+        set_service bfstart "$task_id" "服务启动前$task_name"
+        ;;
+    6)
+        set_service afstart "$task_id" "服务启动后$task_name"
+        ;;
+    7)
+        comp_box "输入10即每隔10分钟运行一次，1440即每隔24小时运行一次" \
+            "大于60分钟的数值将按小时取整，且按当前时区记时"
+        read -r -p "想每隔多少分钟执行一次？（1～1440的整数）> " num
+        if [ "$num" -lt 60 ]; then
+            min="$num"
+            cron_time="*/$min * * * *"
+            time_des="$min分钟"
+        else
+            hour="$((num / 60))"
+            cron_time="0 */$hour * * *"
+            time_des="$hour小时"
+        fi
+        [ -n "$cron_time" ] && set_service running "$task_id" "运行时每$time_des$task_name" "$cron_time"
+        ;;
+    8)
+        comp_box "该功能会将相关启动代码注入到/etc/init.d/firewall中"
+        "是否确认继续？"
+        btm_box "1) 是" \
+            "0) 否"
+        read -r -p "请输入对应标号> " res
+        [ "$res" = 1 ] && set_service affirewall "$task_id" "防火墙重启后$task_name"
+        ;;
+    *)
+        errornum
+        ;;
+    esac
+}
+
+# 任务管理列表
+task_manager() {
+    while true; do
+        # 抽取并生成临时列表
+        cronload >"$TMPDIR"/task_cronlist
+        cat "$TMPDIR"/task_cronlist "$CRASHDIR"/task/running 2>/dev/null | sort -u | grep -oE "task/task.sh .*" | cut -d ' ' -f 2- >"$TMPDIR"/task_list
+        cat "$CRASHDIR"/task/bfstart "$CRASHDIR"/task/afstart "$CRASHDIR"/task/affirewall 2>/dev/null | cut -d ' ' -f 2- >>"$TMPDIR"/task_list
+        cat "$TMPDIR"/task_cronlist 2>/dev/null | sort -u | grep -oE " #.*" | grep -v "守护" | awk -F '#' '{print "0 旧版任务-"$2}' >>"$TMPDIR"/task_list
+        sed -i '/^ *$/d' "$TMPDIR"/task_list
+        rm -rf "$TMPDIR"/task_cronlist
+        # 判断为空则返回
+        if [ ! -s "$TMPDIR"/task_list ]; then
+            msg_alert "\033[31m当前没有可供管理的任务！\033[36m"
+            break
+        else
+            comp_box "\033[33m已添加的任务：\033[0m"
+            list_box "$(cat "$TMPDIR"/task_list)"
+            separator_line "-"
+            btm_box "a) 清空旧版任务" \
+                "d) 清空任务列表" \
+                "" \
+                "0) 返回上级菜单"
+            read -r -p "请输入对应标号> " num
+            case "$num" in
+            "" | 0)
+                break
+                ;;
+            a)
+                task_del "#"
+                msg_alert "\033[31m旧版任务已清空！\033[36m"
+                ;;
+            d)
+                task_del "task.sh"
+                msg_alert "\033[31m全部任务已清空！\033[36m"
+                ;;
+            [1-9] | [1-9][0-9])
+                task_txt=$(sed -n "$num p" "$TMPDIR"/task_list)
+                task_id=$(echo "$task_txt" | awk '{print $1}')
+
+                if [ "$task_id" = 0 ]; then
+                    comp_box "旧版任务不支持管理，是否移除？"
+                    btm_box "1) 是" \
+                        "0) 否，返回上级菜单"
+                    read -r -p "请输入对应标号> " res
+                    if [ "$res" = 1 ]; then
+                        cronname=$(echo "$task_txt" | awk -F '-' '{print $2}')
+                        cronset "$cronname"
+                        sed -i "/$cronname/d" "$CRASHDIR"/task/cron 2>/dev/null
+
+                        break
+                    fi
+                else
+                    task_des=$(echo "$task_txt" | awk '{print $2}')
+                    task_name=$(cat "$CRASHDIR"/task/task.list "$CRASHDIR"/task/task.user 2>/dev/null | grep "$task_id" | awk -F '#' '{print $3}')
+                    comp_box "当前任务为：\033[36m$task_des\033[0m"
+                    btm_box "1) \033[33m修改\033[0m当前任务" \
+                        "2) \033[31m删除\033[0m当前任务" \
+                        "3) \033[32m立即执行\033[0m一次" \
+                        "4) 查看\033[33m执行记录\033[0m" \
+                        "" \
+                        "0) 返回上级菜单"
+                    read -r -p "请输入对应标号> " num
+                    case "$num" in
+                    "" | 0)
+                        continue
+                        ;;
+                    1)
+                        task_type && task_del "$task_des"
+                        ;;
+                    2)
+                        task_del "$task_des"
+                        common_success
+                        ;;
+                    3)
+                        task_command=$(cat "$CRASHDIR"/task/task.list "$CRASHDIR"/task/task.user 2>/dev/null | grep "$task_id" | awk -F '#' '{print $2}')
+                        eval "$task_command" && task_res='执行成功！' || task_res='执行失败！'
+                        msg_alert "\033[33m任务【$task_des】$task_res\033[0m"
+                        ;;
+                    4)
+                        if cat "$TMPDIR"/ShellCrash.log | grep -q "$task_name"; then
+                            line_break
+                            echo "==========================================================="
+                            cat "$TMPDIR"/ShellCrash.log | grep "$task_name"
+                            echo "==========================================================="
+                        else
+                            msg_alert "\033[31m未找到相关执行记录！\033[0m"
+                        fi
+                        ;;
+                    *)
+                        errornum
+                        ;;
+                    esac
+                fi
+                ;;
+            *)
+                errornum
+                ;;
+            esac
+        fi
+    done
+}
+
+# 任务推荐
+task_recom() {
+    comp_box "\033[36m$TASK_RECOM_TITLE\033[0m" \
+        "" \
+        "$TASK_RECOM_ITEM_1" \
+        "$TASK_RECOM_ITEM_2" \
+        "$TASK_RECOM_ITEM_3"
+    btm_box "1) 是" \
+        "0) 否"
+    read -r -p "$COMMON_INPUT>" res
+
+    [ "$res" = 1 ] && {
+        line_break
+        separator_line "="
+        set_service running "106" "$TASK_RECOM_ITEM_1" "*/10 * * * *"
+        set_service afstart "107" "$TASK_RECOM_ITEM_2"
+        cronset "$TASK_RECOM_ITEM_3" "0 3 * * * ${CRASHDIR}/task/task.sh 103 $TASK_RECOM_ITEM_3" &&
+            content_line "【$TASK_RECOM_ITEM_3】\033[32m$COMMON_SUCCESS\033[0m"
+        separator_line "="
+    }
+}
+
+# 任务菜单
+task_menu() {
+    while true; do
+        # 检测并创建自定义任务文件
+        [ -f "$CRASHDIR"/task/task.user ] || echo '#任务ID(必须>200并顺序排列)#任务命令#任务说明(#号隔开，任务命令和说明中都不允许包含#号)' >"$CRASHDIR"/task/task.user
+        comp_box "\033[30;47m自动任务菜单\033[0m"
+        btm_box "1) 添加\033[32m自动任务\033[0m" \
+            "2) 管理\033[33m任务列表\033[0m" \
+            "3) 查看\033[36m任务日志\033[0m" \
+            "4) 配置\033[36m日志推送\033[0m" \
+            "5) 添加\033[33m自定义任务\033[0m" \
+            "6) 删除\033[33m自定义任务\033[0m" \
+            "7) 使用\033[32m推荐设置\033[0m" \
+            "" \
+            "0) 返回上级菜单"
+        read -r -p "请输入对应标号> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        1)
+            task_add
+            ;;
+        2)
+            task_manager
+            rm -rf "$TMPDIR"/task_list
+            ;;
+        3)
+            if cat "$TMPDIR"/ShellCrash.log | grep -q '任务【'; then
+                line_break
+                echo "==========================================================="
+                cat "$TMPDIR"/ShellCrash.log | grep '任务【'
+                echo "==========================================================="
+            else
+                msg_alert "\033[31m未找到任务相关执行日志！\033[0m"
+            fi
+            ;;
+        4)
+            msg_alert "\033[36m请在日志工具中配置相关推送通道及推送开关\033[0m"
+            . "$CRASHDIR"/menus/8_tools.sh && log_pusher
+            ;;
+        5)
+            task_user_add
+            ;;
+        6)
+            task_user_del
+            ;;
+        7)
+            task_recom
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}

scripts/menus/6_core_config.sh

@@ -0,0 +1,490 @@
+#!/bin/sh
+# Copyright (C) Juewuy
+
+[ -n "$__IS_MODULE_6_CORECONFIG_LOADED" ] && return
+__IS_MODULE_6_CORECONFIG_LOADED=1
+
+if echo "$crashcore" | grep -q 'singbox'; then
+    CONFIG_PATH="$CRASHDIR"/jsons/config.json
+    CORE_TYPE=singbox
+else
+    CONFIG_PATH="$CRASHDIR"/yamls/config.yaml
+    CORE_TYPE=clash
+fi
+URI_EXP='ss|vmess|vless|trojan|tuic|anytls|shadowtls|hysteria(2)?'
+
+# 配置文件主界面
+set_core_config() {
+    while true; do
+        list=$(cat "$CRASHDIR"/configs/providers.cfg "$CRASHDIR"/configs/providers_uri.cfg 2>/dev/null |
+            LC_ALL=C awk '{
+    f1 = $1
+    f2 = $2
+	gsub(/\360[\200-\277][\200-\277][\200-\277]/,"",f1)
+    if (length(f1) > 12)
+        f1 = substr(f1, 1, 8) ".."
+    if (length(f2) > 30)
+        f2 = substr(f2, 1, 30) "..."
+    printf "%-7s \t%-28s\n", f1, f2
+}')
+        comp_box "\033[30;47m配置文件管理\033[0m"
+        [ -n "$list" ] && {
+            content_line "\033[36m输入数字可管理对应提供者\033[0m"
+            content_line ""
+            list_box "$list"
+            separator_line "-"
+        }
+        btm_box "a) \033[32m添加提供者\033[0m（支持订阅/分享链接及本地文件）" \
+            "b) \033[36m本地生成配置文件\033[0m" \
+            "c) \033[33m在线生成配置文件\033[0m" \
+            "d) \033[31m清空提供者列表\033[0m" \
+            "e) \033[36m自定义配置文件\033[0m" \
+            "" \
+            "0) $COMMON_BACK"
+        read -r -p "$COMMON_INPUT_L> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        [1-9] | [1-9][0-9])
+            line=$(cat "$CRASHDIR"/configs/providers.cfg "$CRASHDIR"/configs/providers_uri.cfg 2>/dev/null | sed -n "$num p")
+            setproviders "$line"
+            ;;
+        a)
+            setproviders
+            ;;
+        b)
+            if [ -s "$CRASHDIR"/configs/providers.cfg ] || [ -s "$CRASHDIR"/configs/providers_uri.cfg ]; then
+                if [ "$crashcore" = meta ] || [ "$crashcore" = singboxr ]; then
+                    . "$CRASHDIR"/menus/providers.sh
+                    providers
+                else
+                    msg_alert "\033[33m仅限Mihomo／singboxr内核使用，请更换内核！\033[0m"
+                fi
+            else
+                msg_alert "请先添加提供者！"
+            fi
+            ;;
+        c)
+            if [ -s "$CRASHDIR"/configs/providers.cfg ] || [ -s "$CRASHDIR"/configs/providers_uri.cfg ]; then
+                . "$CRASHDIR"/menus/subconverter.sh
+                subconverter
+            else
+                msg_alert "请先添加提供者！"
+            fi
+            ;;
+        d)
+            comp_box "\033[33m警告：这将删除所有提供者且无法还原！\033[0m" \
+                "" \
+                "是否确认清空提供者列表："
+            btm_box "1) 是" \
+                "0) 否，返回上级菜单"
+            read -r -p "$COMMON_INPUT> " res
+            [ "$res" = 1 ] && {
+                rm -f "$CRASHDIR"/configs/providers.cfg
+                rm -f "$CRASHDIR"/configs/providers_uri.cfg
+                common_success
+            }
+            ;;
+        e)
+            checkcfg=$(cat "$CFG_PATH")
+            . "$CRASHDIR"/menus/override.sh && override
+            if [ -n "$PID" ]; then
+                checkcfg_new=$(cat "$CFG_PATH")
+                [ "$checkcfg" != "$checkcfg_new" ] && checkrestart
+            fi
+            ;;
+        *)
+            error_letter
+            ;;
+        esac
+    done
+}
+
+# 添加/管理提供者
+setproviders() {
+    case "$(echo "$@" | cut -d ' ' -f 2)" in
+    http* | ./providers*)
+        set -- $@
+        name=$1
+        link=$2
+        interval=$3
+        interval2=$4
+        ua=$5
+        exclude_w=${6#\#}
+        include_w=${7#\#}
+        ;;
+    *://*)
+        set -- $@
+        name=$1
+        link_uri=$2
+        ;;
+    *)
+        unset name link link_uri interval interval2 ua exclude_w include_w
+        ;;
+    esac
+    last_name="$name"
+    [ -z "$interval" ] && interval=3
+    [ -z "$interval2" ] && interval2=12
+    [ -z "$ua" ] && ua='clash.meta'
+
+    while true; do
+        link_info=$(echo "$link$link_uri" | cut -c 1-30)
+        comp_box "\033[36m支持添加订阅链接/分享链接/本地文件作为提供者\033[0m"
+
+        content_line "1) 设置\033[36m名称或代号\033[0m	\033[32m$name\033[0m"
+        content_line "2) 设置\033[32m链接或路径\033[0m：	\033[36m$link_info\033[0m"
+        [ -n "$link" ] &&
+            content_line "3) 设置\033[33m本地生成覆写\033[0m"
+        content_line ""
+        content_line "a) \033[36m保存此提供者\033[0m"
+        content_line "d) \033[31m删除此提供者\033[0m"
+        content_line ""
+        content_line "\033[36m以下方式的详细配置请前往对应功能页面进行设置！\033[0m"
+        [ -n "$link" ] &&
+            content_line "b) \033[32m本地生成\033[0m仅包含此提供者的配置文件"
+        echo "$link$link_uri" | grep -q '://' &&
+            content_line "c) \033[33m在线生成\033[0m仅包含此提供者的配置文件"
+        echo "$link" | grep -q '^http' &&
+            content_line "e) 在线获取此配置文件（不使用订阅转换）"
+        echo "$link" | grep -q '^./providers' &&
+            content_line "e) 直接使用此文件作为配置文件（不使用本地生成）"
+        btm_box "" \
+            "0) $COMMON_BACK"
+        read -r -p "请输入对应字母或数字> " input
+        case "$input" in
+        "" | 0)
+            break
+            ;;
+        1)
+            while true; do
+                comp_box "\033[33m注意：\n名称或代号不可重复，不支持纯数字，且不要超过4个汉字！\033[0m"
+                btm_box "\033[36m请直接输入具体名称或代号\033[0m" \
+                    "或输入 0 返回上级菜单"
+                read -r -p "请输入> " text
+                text=$(printf "%.12s" "$text" | sed 's/ //g') # 截断12字符+去空格
+                if [ "$text" = 0 ]; then
+                    break
+                elif [ -n "$text" ] && [ -z "$(echo "$text" | grep -E '^[0-9]+$')" ] && ! grep -q "^$text " "$CRASHDIR"/configs/providers.cfg 2>/dev/null; then
+                    name="$text"
+                    common_success
+                    break
+                else
+                    error_input
+                fi
+            done
+            ;;
+        2)
+            while true; do
+                comp_box "\033[33m订阅链接\033[0m：\nhttps/http开头的clash配置文件订阅链接" \
+                    "" \
+                    "\033[36m分享链接\033[0m：\n$URI_EXP" \
+                    "" \
+                    "\033[33m本地文件\033[0m：\n必须放在\033[32m$CRASHDIR/providers\033[0m目录下" \
+                    "" \
+                    "\033[36mBase64 \033[0m：\n请直接写入本地文件"
+                list=$(
+                    for f in "$CRASHDIR"/providers/*; do
+                        [ "$f" = "$CRASHDIR"/providers/uri_group ] && continue
+                        [ -f "$f" ] || continue
+                        printf '%s\n' "${f##*/}"
+                    done | sort
+                )
+                if [ -n "$list" ]; then
+                    list_box "$list"
+                    btm_box "" \
+                        "输入 0 返回上级菜单"
+                    read -r -p "请选择对应文件或输入具体链接> " text
+                else
+                    btm_box "\033[36m请直接输入具体链接\033[0m" \
+                        "或输入 0 返回上级菜单"
+                    read -r -p "请输入> " text
+                fi
+                text=$(echo "$text" | sed 's/ //g') # 去空格
+                case "$text" in
+                0)
+                    break
+                    ;;
+                http*)
+                    # 处理订阅链接
+                    text=$(echo "$text" | sed 's/ *(.*)//g; s/#.*//g') # 处理注释及超链接
+                    link="$text"
+                    link_uri=''
+                    common_success
+                    break
+                    ;;
+                [1-9] | [1-9][0-9])
+                    # 处理本地文件
+                    file=$(printf '%s\n' "$list" | sed -n "${text}p")
+                    if [ -s "$CRASHDIR/providers/$file" ]; then
+                        link="./providers/$file"
+                        [ -z "$name" ] && name="_$(printf "%.12s" "$file" | sed 's/ //g')"
+                        link_uri=''
+                        common_success
+                        break
+                    else
+                        errornum
+                    fi
+                    ;;
+                *)
+                    # 处理分享链接
+                    if [ -n "$(echo "$text" | grep -E "^$URI_EXP")" ]; then
+                        link_uri=$(echo "$text" | sed 's/#.*//g') # 删除注释
+                        link=''
+                        [ -z "$name" ] && name=$(printf '%b' "$(printf '%s' "$text" | sed 's/+/ /g; s/%/\\x/g')" | sed 's/.*#//')
+                        common_success
+                        break
+                    else
+                        error_input
+                    fi
+                    ;;
+                esac
+            done
+            ;;
+        3)
+            custproviders
+            ;;
+        a)
+            saveproviders && common_success
+            break
+            ;;
+        b)
+            if [ -n "$name" ] && [ -n "$link" ]; then
+                saveproviders
+                . "$CRASHDIR/menus/providers_$CORE_TYPE.sh"
+                gen_providers "$name" "$link" "$interval" "$interval2" "$ua" "#$exclude_w" "#$include_w"
+            else
+                msg_alert "\033[31m$请先完成必填选项！\033[0m"
+            fi
+            ;;
+        c)
+            if [ -n "$name" ] && [ -n "$link$link_uri" ]; then
+                saveproviders
+                [ -n "$link" ] && Url="$link"
+                [ -n "$link_uri" ] && Url=$(echo "$name $link_uri" | awk '{ print ($1=="vmess" ? $2 : $2 "#" $1) }')
+                Https=''
+                setconfig Url "'$Url'"
+                setconfig Https
+                # 获取在线文件
+                jump_core_config
+            else
+                msg_alert "\033[31m请先完成必填选项！\033[0m"
+            fi
+            ;;
+        d)
+            if [ -n "$name" ] && [ -n "$link" ]; then
+                sed -i "/^$name /d" "$CRASHDIR"/configs/providers.cfg 2>/dev/null
+                msg_alert "\033[32m$COMMON_SUCCESS\033[0m"
+            elif [ -n "$name" ] && [ -n "$link_uri" ]; then
+                sed -i "/^$name /d" "$CRASHDIR"/configs/providers_uri.cfg 2>/dev/null
+                msg_alert "\033[32m$COMMON_SUCCESS\033[0m"
+            fi
+            break
+            ;;
+        e)
+            if [ -n "$link" ]; then
+                comp_box "\033[31m注意：\n此功能不兼容“跳过证书验证”功能\033[0m" \
+                    "\033[31m请确认你完全理解自己在做什么\033[0m"
+                btm_box "1) 我确认遇到问题可以自行解决" \
+                    "0) 返回上级菜单"
+                read -r -p "$COMMON_INPUT> " res
+                [ "$res" = "1" ] && {
+                    file=$(echo "$CRASHDIR/$link" | sed 's|\./||')
+                    if [ -f "$file" ]; then
+                        [ -n "$name" ] && saveproviders
+                        ln -sf "$file" "$CONFIG_PATH"
+                        common_success
+                        break
+                    elif echo "$link" | grep -q '^http'; then
+                        [ -n "$name" ] && saveproviders
+                        Https="$link"
+                        Url=''
+                        setconfig Https "'$Https'"
+                        setconfig Url
+                        # 获取在线文件
+                        jump_core_config
+                        break
+                    else
+                        msg_alert "\033[31m请先完成必填选项！\033[0m"
+                    fi
+                }
+            else
+                msg_alert "\033[31m请先完成必填选项！\033[0m"
+            fi
+            ;;
+        *)
+            error_letter
+            ;;
+        esac
+    done
+}
+
+# 保存
+saveproviders() {
+    [ -n "$name" ] && {
+        [ -s "$CRASHDIR"/configs/providers.cfg ] && sed -i "/^$last_name /d" "$CRASHDIR"/configs/providers.cfg
+        [ -s "$CRASHDIR"/configs/providers_uri.cfg ] && sed -i "/^$last_name /d" "$CRASHDIR"/configs/providers_uri.cfg
+    }
+    if [ -n "$name" ] && [ -n "$link" ]; then
+        echo "$name $link $interval $interval2 $ua #$exclude_w #$include_w" >>"$CRASHDIR"/configs/providers.cfg
+        return 0
+    elif [ -n "$name" ] && [ -n "$link_uri" ]; then
+        echo "$name $link_uri" >>"$CRASHDIR"/configs/providers_uri.cfg
+        return 0
+    else
+        msg_alert "\033[31m请先完成必填选项！\033[0m"
+        return 1
+    fi
+}
+
+# 本地生成覆写
+custproviders() {
+    while true; do
+        top_box "1) 设置\033[33m健康检查间隔\033[0m：\t\033[47;30m$interval\033[0m 分钟" \
+            "2) 设置\033[36m自动更新间隔\033[0m：\t\033[47;30m$interval2\033[0m 小时"
+        echo "$link" | grep -q '^http' &&
+            content_line "3) 设置\033[33m虚拟浏览器UA\033[0m：\t\033[47;30m$ua\033[0m"
+        btm_box "4) 设置\033[31m排除节点正则\033[0m：\t\033[47;30m$exclude_w\033[0m" \
+            "5) 设置\033[32m包含节点正则\033[0m：\t\033[47;30m$include_w\033[0m" \
+            "" \
+            "0) $COMMON_BACK"
+        read -r -p "请输入对应数字> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        1)
+            while true; do
+                comp_box "当前健康检查间隔：$interval 分钟"
+                btm_box "\033[36m请直接健康检查间隔（单位：分钟）\033[0m" \
+                    "或输入 r 重置健康检查间隔为默认值（3 分钟）" \
+                    "或输入 0 返回上级菜单"
+                read -r -p "请输入> " num
+                if [ "$num" = "r" ]; then
+                    interval=3
+                elif [ -n "$num" ] && [ "$num" -eq "$num" ] 2>/dev/null; then
+                    interval="$num"
+                else
+                    errornum
+                    continue
+                fi
+                common_success
+                break
+            done
+            ;;
+        2)
+            while true; do
+                comp_box "当前健康检查间隔：$interval 分钟"
+                btm_box "\033[36m请直接输入自动更新间隔（单位：小时）\033[0m" \
+                    "或输入 r 重置自动更新间隔为默认值（12 小时）" \
+                    "或输入 0 返回上级菜单"
+                read -r -p "请输入> " num
+                if [ "$num" = "r" ]; then
+                    interval2=12
+                elif [ -n "$num" ] && [ "$num" -eq "$num" ] 2>/dev/null; then
+                    interval2="$num"
+                else
+                    errornum
+                    continue
+                fi
+                common_success
+                break
+            done
+            ;;
+        3)
+            if [ -z "$ua" ]; then
+                comp_box "当前浏览器UA：无"
+            else
+                comp_box "当前浏览器UA：$ua"
+            fi
+            btm_box "\033[36m请直接输入浏览器UA\033[0m" \
+                "或输入 r 重置浏览器UA为默认值（clash.meta）" \
+                "或输入 0 返回上级菜单"
+            read -r -p "请输入> " text
+            case "$text" in
+            0)
+                continue
+                ;;
+            r)
+                ua='clash.meta'
+                ;;
+            *)
+                ua="$text"
+                ;;
+            esac
+            common_success
+            ;;
+        4)
+            if [ -z "$exclude_w" ]; then
+                comp_box "当前排除规则：无"
+            else
+                comp_box "当前排除规则：$exclude_w"
+            fi
+
+            btm_box "\033[36m请直接输入需要排除的节点关键字（支持正则，不支持空格）\033[0m" \
+                "或输入 c 清空排除规则" \
+                "或输入 0 返回上级菜单"
+            read -r -p "请输入> " text
+            text=$(echo "$text" | sed 's/ //g') # 去空格
+            case "$text" in
+            0)
+                continue
+                ;;
+            c)
+                exclude_w=''
+                ;;
+            *)
+                exclude_w="$text"
+                ;;
+            esac
+            common_success
+            ;;
+        5)
+            if [ -z "$include_w" ]; then
+                comp_box "当前包含规则：无"
+            else
+                comp_box "当前包含规则：$include_w"
+            fi
+            btm_box "\033[36m请直接输入需要包含的节点关键字（支持正则，不支持空格）\033[0m" \
+                "或输入 c 清空包含规则" \
+                "或输入 0 返回上级菜单"
+            read -r -p "请输入> " text
+            text=$(echo "$text" | sed 's/ //g') # 去空格
+            case "$text" in
+            0)
+                continue
+                ;;
+            c)
+                include_w=''
+                ;;
+            *)
+                include_w="$text"
+                ;;
+            esac
+            common_success
+            ;;
+        *)
+            error_letter
+            ;;
+        esac
+    done
+}
+
+# 调用工具在线获取配置文件
+jump_core_config() {
+    . "$CRASHDIR"/starts/core_config.sh && get_core_config
+    if [ "$?" = 0 ]; then
+        if [ "$inuserguide" != 1 ]; then
+            comp_box "是否启动服务以使配置文件生效："
+            btm_box "1) 是" \
+                "0) 否"
+            read -r -p "$COMMON_INPUT> " res
+            if [ "$res" = 1 ]; then
+                start_core
+            else
+                main_menu
+            fi
+            exit
+        fi
+    fi
+}

scripts/menus/7_gateway.sh

@@ -0,0 +1,678 @@
+#!/bin/sh
+# Copyright (C) Juewuy
+
+[ -n "$__IS_MODULE_7_GATEWAY_LOADED" ] && return
+__IS_MODULE_7_GATEWAY_LOADED=1
+
+. "$GT_CFG_PATH"
+. "$CRASHDIR"/menus/check_port.sh
+. "$CRASHDIR"/libs/gen_base64.sh
+
+# 访问与控制主菜单
+gateway() {
+    while true; do
+        comp_box "\033[30;47m访问与控制菜单\033[0m"
+        content_line "1) 配置\033[33m公网访问防火墙			\033[32m$fw_wan\033[0m"
+        content_line "2) 配置\033[36mTelegram专属控制机器人		\033[32m$bot_tg_service\033[0m"
+        content_line "3) 配置\033[36mDDNS自动域名\033[0m"
+        [ "$disoverride" != "1" ] && {
+            content_line "4) 自定义\033[33m公网Vmess入站\033[0m节点		\033[32m$vms_service\033[0m"
+            content_line "5) 自定义\033[33m公网ShadowSocks入站\033[0m节点	\033[32m$sss_service\033[0m"
+            content_line "6) 配置\033[36mTailscale内网穿透\033[0m（限Singbox）	\033[32m$ts_service\033[0m"
+            content_line "7) 配置\033[36mWireguard客户端\033[0m（限Singbox）	\033[32m$wg_service\033[0m"
+        }
+        btm_box "" \
+            "0) 返回上级菜单"
+        read -r -p "请输入对应标号> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        1)
+            if [ -n "$(pidof CrashCore)" ] && [ "$firewall_mod" = 'iptables' ]; then
+                comp_box "\033[33m公网访问防火墙需要先停止服务\033[0m" \
+                    "是否确认继续？"
+                btm_box "1) 是" \
+                    "0) 否，返回上级菜单"
+                read -r -p "请输入对应标号> " res
+                if [ "$res" = 1 ]; then
+                    "$CRASHDIR"/start.sh stop && set_fw_wan
+                else
+                    continue
+                fi
+            else
+                set_fw_wan
+            fi
+            ;;
+        2)
+            set_bot_tg
+            ;;
+        3)
+            . "$CRASHDIR"/menus/ddns.sh && ddns_menu
+            ;;
+        4)
+            set_vmess
+            ;;
+        5)
+            set_shadowsocks
+            ;;
+        6)
+            if echo "$crashcore" | grep -q 'sing'; then
+                set_tailscale
+            else
+                msg_alert "\033[33m$crashcore内核暂不支持此功能，请先更换内核！\033[0m"
+            fi
+            ;;
+        7)
+            if echo "$crashcore" | grep -q 'sing'; then
+                set_wireguard
+            else
+                msg_alert "\033[33m$crashcore内核暂不支持此功能，请先更换内核！\033[0m"
+            fi
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}
+
+# 公网防火墙
+set_fw_wan() {
+    while true; do
+        [ -z "$fw_wan" ] && fw_wan=ON
+        line_break
+        separator_line "="
+        content_line "\033[31m注意：\033[0m如在vps运行，还需在vps安全策略对相关端口同时放行"
+        [ -n "$fw_wan_ports" ] &&
+            content_line "当前手动放行端口：\033[36m$fw_wan_ports\033[0m"
+        [ -n "$vms_port$sss_port" ] &&
+            content_line "当前自动放行端口：\033[36m$vms_port $sss_port\033[0m"
+        content_line "默认拦截端口：\033[33m$mix_port,$db_port\033[0m"
+        separator_line "="
+        btm_box "1) 启用/关闭公网防火墙：\033[36m$fw_wan\033[0m" \
+            "2) 添加放行端口（可包含默认拦截端口）" \
+            "3) 移除指定手动放行端口" \
+            "4) 清空全部手动放行端口" \
+            "" \
+            "0) 返回上级菜单"
+        read -r -p "请输入对应标号> " num
+        case $num in
+        "" | 0)
+            break
+            ;;
+        1)
+            if [ "$fw_wan" = ON ]; then
+                comp_box "是否确认关闭防火墙？" \
+                    "这会带来极大的安全隐患！"
+                btm_box "1) 是" \
+                    "0) 否，返回上级菜单"
+                read -r -p "请输入对应标号> " res
+                if [ "$res" = 1 ]; then
+                    fw_wan=OFF
+                else
+                    fw_wan=ON
+                fi
+            else
+                fw_wan=ON
+            fi
+            setconfig fw_wan "$fw_wan"
+            ;;
+        2)
+            port_count=$(echo "$fw_wan_ports" | awk -F',' '{print NF}')
+            if [ "$port_count" -ge 10 ]; then
+                msg_alert "\033[31m最多支持设置放行10个端口，请先减少一些！\033[0m"
+            else
+                line_break
+                read -r -p "请输入要放行的端口号> " port
+                if echo ",$fw_wan_ports," | grep -q ",$port,"; then
+                    msg_alert "\033[31m输入错误！请勿重复添加！\033[0m"
+                elif [ "$port" -lt 1 ] || [ "$port" -gt 65535 ]; then
+                    msg_alert "\033[31m输入错误！请输入正确的数值(1-65535)！\033[0m"
+                else
+                    fw_wan_ports=$(echo "$fw_wan_ports,$port" | sed "s/^,//")
+                    if setconfig fw_wan_ports "$fw_wan_ports"; then
+                        common_success
+                    else
+                        common_faileds
+                    fi
+                fi
+            fi
+            ;;
+        3)
+            while true; do
+                comp_box "\033[36m请直接输入要移除的端口号\033[0m" \
+                    "或输入 0 返回上级菜单"
+                read -r -p "请输入> " port
+                if [ "$port" = 0 ]; then
+                    break
+                elif echo ",$fw_wan_ports," | grep -q ",$port,"; then
+                    if [ "$port" -lt 1 ] || [ "$port" -gt 65535 ]; then
+                        msg_alert "\033[31m输入错误！\033[0m" \
+                            "\033[31m请输入正确的数值(1-65535)！\033[0m"
+                    else
+                        fw_wan_ports=$(echo ",$fw_wan_ports," | sed "s/,$port//; s/^,//; s/,$//")
+                        setconfig fw_wan_ports "$fw_wan_ports"
+                        break
+                    fi
+                else
+                    msg_alert "\033[31m输入错误！\033[0m" \
+                        "\033[31m请输入已添加过的端口！\033[0m"
+                fi
+            done
+            ;;
+        4)
+            fw_wan_ports=''
+            setconfig fw_wan_ports
+            msg_alert "\033[32m操作成功\033[0m"
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}
+
+# tg_BOT相关
+set_bot_tg_config() {
+    setconfig TG_TOKEN "$TOKEN" "$GT_CFG_PATH"
+    setconfig TG_CHATID "$chat_ID" "$GT_CFG_PATH"
+    # 设置机器人快捷命令
+    JSON=$(
+        cat <<EOF
+{
+  "commands": [
+    {"command": "$my_alias", "description": "呼出ShellCrash菜单"},
+    {"command": "help",  "description": "查看帮助"}
+  ]
+}
+EOF
+    )
+    TEXT="已完成Telegram机器人设置！请使用 /$my_alias 呼出功能菜单！"
+    . "$CRASHDIR"/libs/web_json.sh
+    bot_api="https://api.telegram.org/bot$TOKEN"
+    web_json_post "$bot_api/setMyCommands" "$JSON"
+    web_json_post "$bot_api/sendMessage" '{"chat_id":"'"$chat_ID"'","text":"'"$TEXT"'","parse_mode":"Markdown"}'
+
+    comp_box "\033[32m$TEXT\033[0m"
+}
+
+set_bot_tg_init() {
+    . "$CRASHDIR"/menus/bot_tg_bind.sh && private_bot && set_bot
+    if [ "$?" = 0 ]; then
+        set_bot_tg_config
+        return 0
+    else
+        return 1
+    fi
+}
+
+set_bot_tg_service() {
+    if [ "$bot_tg_service" = ON ]; then
+        bot_tg_service=OFF
+        . "$CRASHDIR"/menus/bot_tg_service.sh && bot_tg_stop
+    else
+        bot_tg_service=ON
+        [ -n "$(pidof CrashCore)" ] && . "$CRASHDIR"/menus/bot_tg_service.sh && 
+            bot_tg_start && bot_tg_cron
+    fi
+    setconfig bot_tg_service "$bot_tg_service"
+}
+
+set_bot_tg() {
+    while true; do
+        [ -n "$ts_auth_key" ] && ts_auth_key_info='已设置'
+        [ -n "$TG_CHATID" ] && TG_CHATID_info='已绑定'
+        comp_box "\033[31m注意：\033[0m由于网络环境原因，此机器人仅限服务启动时运行！"
+        btm_box "1) 启用／关闭TG-BOT服务	\033[32m$bot_tg_service\033[0m" \
+            "2) TG-BOT绑定设置	\033[32m$TG_CHATID_info\033[0m" \
+			"3) 启动时推送菜单	\033[32m$TG_menupush\033[0m" \
+            "" \
+            "0) 返回上级菜单"
+        read -r -p "请输入对应标号> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        1)
+            . "$GT_CFG_PATH"
+            if [ -n "$TG_CHATID" ]; then
+                set_bot_tg_service
+            else
+                msg_alert "\033[31m请先绑定TG-BOT！\033[0m"
+            fi
+            ;;
+        2)
+            if [ -n "$chat_ID" ] && [ -n "$push_TG" ] && [ "$push_TG" != 'publictoken' ]; then
+                comp_box "检测到已经绑定了TG推送BOT" \
+                    "是否直接使用？"
+                btm_box "1) 是" \
+                    "0) 否"
+                read -r -p "请输入对应标号> " res
+                if [ "$res" = 1 ]; then
+                    TOKEN="$push_TG"
+                    set_bot_tg_config
+                    continue
+                fi
+            fi
+            set_bot_tg_init
+            ;;
+        3)
+            if [ "$TG_menupush" = ON ];then
+                TG_menupush=OFF
+            else
+                TG_menupush=ON
+            fi
+            setconfig TG_menupush "$TG_menupush" "$GT_CFG_PATH"
+            set_bot_tg
+	;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}
+
+# 自定义入站
+set_vmess() {
+    while true; do
+        comp_box "\033[31m注意：\033[0m" \
+            "设置的端口会添加到公网访问防火墙并自动放行！" \
+            "脚本只提供基础功能，更多需求请用自定义配置文件功能！" \
+            "\033[31m切勿用于搭建违法翻墙节点，违者后果自负！\033[0m"
+        content_line "1) \033[32m启用/关闭\033[0mVmess入站	\033[32m$vms_service\033[0m"
+        content_line "2) 设置\033[36m监听端口\033[0m：	\033[36m$vms_port\033[0m"
+        content_line "3) 设置\033[33mWS-path（可选）\033[0m：	\033[33m$vms_ws_path\033[0m"
+        content_line "4) 设置\033[36m秘钥-uuid\033[0m：	\033[36m$vms_uuid\033[0m"
+        content_line "5) 一键生成\033[32m随机秘钥\033[0m"
+        gen_base64 1 >/dev/null 2>&1 &&
+            content_line "6) 设置\033[36m混淆host（可选）\033[0m：	\033[33m$vms_host\033[0m"
+        btm_box "7) 一键生成\033[32m分享链接\033[0m" \
+            "" \
+            "0) 返回上级菜单"
+        read -r -p "请输入对应标号> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        1)
+            if [ "$vms_service" = ON ]; then
+                vms_service=OFF
+                setconfig vms_service "$vms_service"
+            else
+                if [ -n "$vms_port" ] && [ -n "$vms_uuid" ]; then
+                    vms_service=ON
+                    setconfig vms_service "$vms_service"
+                else
+                    msg_alert "\033[31m请先完成必选设置！\033[0m"
+                fi
+            fi
+            ;;
+        2)
+            line_break
+            read -r -p "请输入端口号（输入0删除）> " text
+            if [ "$text" = 0 ]; then
+                vms_port=''
+                setconfig vms_port "" "$GT_CFG_PATH"
+            elif check_port "$text"; then
+                vms_port="$text"
+                setconfig vms_port "$text" "$GT_CFG_PATH"
+            else
+                sleep 1
+            fi
+            ;;
+        3)
+            line_break
+            read -r -p "请输入ws-path路径（输入0删除）> " text
+            if [ "$text" = 0 ]; then
+                vms_ws_path=''
+                setconfig vms_ws_path "" "$GT_CFG_PATH"
+            elif echo "$text" | grep -qE '^/'; then
+                vms_ws_path="$text"
+                setconfig vms_ws_path "$text" "$GT_CFG_PATH"
+            else
+                msg_alert "\033[31m不是合法的path路径，必须以【/】开头！\033[0m"
+            fi
+            ;;
+        4)
+            line_break
+            read -r -p "请输入UUID（输入0删除）> " text
+            if [ "$text" = 0 ]; then
+                vms_uuid=''
+                setconfig vms_uuid "" "$GT_CFG_PATH"
+            elif echo "$text" | grep -qiE '^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$'; then
+                vms_uuid="$text"
+                setconfig vms_uuid "$text" "$GT_CFG_PATH"
+            else
+                msg_alert "\033[31m不是合法的UUID格式，请重新输入或使用随机生成功能！\033[0m"
+            fi
+            ;;
+        5)
+            vms_uuid=$(cat /proc/sys/kernel/random/uuid)
+            setconfig vms_uuid "$vms_uuid" "$GT_CFG_PATH"
+            sleep 1
+            ;;
+        6)
+            line_break
+            read -r -p "请输入免流混淆host（输入0删除）> " text
+            if [ "$text" = 0 ]; then
+                vms_host=''
+                setconfig vms_host "" "$GT_CFG_PATH"
+            else
+                vms_host="$text"
+                setconfig vms_host "$text" "$GT_CFG_PATH"
+            fi
+            ;;
+        7)
+            line_break
+            read -r -p "请输入本机公网IP(4/6)或域名> " host_wan
+            if [ -n "$host_wan" ] && [ -n "$vms_port" ] && [ -n "$vms_uuid" ]; then
+                [ -n "$vms_ws_path" ] && vms_net=ws
+                vms_json=$(
+                    cat <<EOF
+{
+  "v": "2",
+  "ps": "ShellCrash_vms_in",
+  "add": "$host_wan",
+  "port": "$vms_port",
+  "id": "$vms_uuid",
+  "aid": "0",
+  "type": "auto",
+  "net": "$vms_net",
+  "path": "$vms_ws_path",
+  "host": "$vms_host"
+}
+EOF
+                )
+                vms_link="vmess://$(gen_base64 "$vms_json")"
+                line_break
+                echo -e "你的分享链接是（请勿随意分享给他人）：\n\033[32m$vms_link\033[0m"
+                sleep 1
+            else
+                msg_alert "\033[31m请先完成必选设置！\033[0m"
+            fi
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}
+
+set_shadowsocks() {
+    while true; do
+        comp_box "\033[31m注意：\033[0m" \
+            "设置的端口会添加到公网访问防火墙并自动放行！" \
+            "脚本只提供基础功能，更多需求请用自定义配置文件功能！" \
+            "\033[31m切勿用于搭建违法翻墙节点，违者后果自负！\033[0m"
+        content_line "1) \033[32m启用/关闭\033[0mShadowSocks入站	\033[32m$sss_service\033[0m"
+        content_line "2) 设置\033[36m监听端口\033[0m：	\033[36m$sss_port\033[0m"
+        content_line "3) 选择\033[33m加密协议\033[0m：	\033[33m$sss_cipher\033[0m"
+        content_line "4) 设置\033[36mpassword\033[0m：	\033[36m$sss_pwd\033[0m"
+        gen_base64 1 >/dev/null 2>&1 &&
+            content_line "5) 一键生成分享链接"
+        btm_box "" \
+            "0) 返回上级菜单"
+        read -r -p "请输入对应标号> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        1)
+            if [ "$sss_service" = ON ]; then
+                sss_service=OFF
+                setconfig sss_service "$sss_service"
+            else
+                if [ -n "$sss_port" ] && [ -n "$sss_cipher" ] && [ -n "$sss_pwd" ]; then
+                    sss_service=ON
+                    setconfig sss_service "$sss_service"
+                else
+                    msg_alert "\033[31m请先完成必选设置！\033[0m"
+                fi
+            fi
+            ;;
+        2)
+            line_break
+            read -r -p "请输入端口号（输入0删除）> " text
+            if [ "$text" = 0 ]; then
+                sss_port=''
+                setconfig sss_port "" "$GT_CFG_PATH"
+            elif check_port "$text"; then
+                sss_port="$text"
+                setconfig sss_port "$text" "$GT_CFG_PATH"
+            else
+                sleep 1
+            fi
+            ;;
+        3)
+            comp_box "请选择要使用的加密协议："
+            content_line "1) \033[32mxchacha20-ietf-poly1305\033[0m"
+            content_line "2) \033[32mchacha20-ietf-poly1305\033[0m"
+            content_line "3) \033[32maes-128-gcm\033[0m"
+            content_line "4) \033[32maes-256-gcm\033[0m"
+            gen_random 1 >/dev/null && {
+                content_line ""
+                content_line "   - - - - - - -\033[31m注意\033[0m- - - - - - -"
+                content_line "   2022系列加密必须使用随机生成的password！"
+                content_line "5) \033[32m2022-blake3-chacha20-poly1305\033[0m"
+                content_line "6) \033[32m2022-blake3-aes-128-gcm\033[0m"
+                content_line "7) \033[32m2022-blake3-aes-256-gcm\033[0m"
+            }
+            btm_box "" \
+                "0) 返回上级菜单"
+            read -r -p "请输入对应标号> " num
+            case "$num" in
+            0) ;;
+            1)
+                sss_cipher=xchacha20-ietf-poly1305
+                sss_pwd=$(gen_random 16)
+                ;;
+            2)
+                sss_cipher=chacha20-ietf-poly1305
+                sss_pwd=$(gen_random 16)
+                ;;
+            3)
+                sss_cipher=aes-128-gcm
+                sss_pwd=$(gen_random 16)
+                ;;
+            4)
+                sss_cipher=aes-256-gcm
+                sss_pwd=$(gen_random 16)
+                ;;
+            5)
+                sss_cipher=2022-blake3-chacha20-poly1305
+                sss_pwd=$(gen_random 32)
+                ;;
+            6)
+                sss_cipher=2022-blake3-aes-128-gcm
+                sss_pwd=$(gen_random 16)
+                ;;
+            7)
+                sss_cipher=2022-blake3-aes-256-gcm
+                sss_pwd=$(gen_random 32)
+                ;;
+            *)
+                errornum
+                ;;
+            esac
+            setconfig sss_cipher "$sss_cipher" "$GT_CFG_PATH"
+            setconfig sss_pwd "$sss_pwd" "$GT_CFG_PATH"
+            ;;
+        4)
+            if echo "$sss_cipher" | grep -q '2022-blake3'; then
+                msg_alert "\033[31m注意：\033[0m2022系列加密必须使用脚本随机生成的password！"
+            else
+                line_break
+                read -r -p "请输入秘钥（输入0删除）> " text
+                [ "$text" = 0 ] && sss_pwd='' || sss_pwd="$text"
+                setconfig sss_pwd "$text" "$GT_CFG_PATH"
+            fi
+            ;;
+        5)
+            line_break
+            read -r -p "请输入本机公网IP(4/6)或域名> " text
+            if [ -n "$text" ] && [ -n "$sss_port" ] && [ -n "$sss_cipher" ] && [ -n "$sss_pwd" ]; then
+                ss_link="ss://$(gen_base64 "$sss_cipher":"$sss_pwd")@${text}:${sss_port}#ShellCrash_ss_in"
+                line_break
+                echo -e "你的分享链接是（请勿随意分享给他人）：\n\033[32m$ss_link\033[0m"
+                sleep 1
+            else
+                msg_alert "\033[31m请先完成必选设置！\033[0m"
+            fi
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}
+
+# 自定义端点
+set_tailscale() {
+    while true; do
+        [ -n "$ts_auth_key" ] && ts_auth_key_info='*********'
+        comp_box "\033[31m注意：\033[0m脚本默认内核为了节约内存没有编译Tailscale模块\n如需使用请先前往自定义内核更新完整版内核文件！" \
+            "创建秘钥:\033[32;4mhttps://login.tailscale.com/admin/settings/keys\033[0m" \
+            "访问非本机目标需允许通告:\033[32;4mhttps://login.tailscale.com\033[0m" \
+            "访问非本机目标需在终端设置使用Subnet或EXIT-NODE模式"
+        btm_box "1) \033[32m启用/关闭\033[0mTailscale服务	\033[32m$ts_service\033[0m" \
+            "2) 设置\033[36m秘钥\033[0m（Auth Key）		$ts_auth_key_info" \
+            "3) 通告路由\033[33m内网地址\033[0m（Subnet）	\033[36m$ts_subnet\033[0m" \
+            "4) 通告路由\033[31m全部流量\033[0m（EXIT-NODE）	\033[36m$ts_exit_node\033[0m" \
+            "5) 设置\033[36m设备名称\033[0m（可选）		$ts_hostname" \
+            "" \
+            "0) 返回上级菜单"
+        read -r -p "请输入对应标号> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        1)
+            if [ -n "$ts_auth_key" ]; then
+                [ "$ts_service" = ON ] && ts_service=OFF || ts_service=ON
+                setconfig ts_service "$ts_service"
+            else
+                msg_alert "\033[31m请先设置秘钥！\033[0m"
+            fi
+            ;;
+        2)
+            line_break
+            read -r -p "请输入秘钥（输入0删除）> " text
+            [ "$text" = 0 ] && unset ts_auth_key ts_auth_key_info || ts_auth_key="$text"
+            setconfig ts_auth_key "$ts_auth_key" "$GT_CFG_PATH"
+            ;;
+        3)
+            [ "$ts_subnet" = true ] && ts_subnet=false || ts_subnet=true
+            setconfig ts_subnet "$ts_subnet" "$GT_CFG_PATH"
+            ;;
+        4)
+            if [ "$ts_exit_node" = true ]; then
+                ts_exit_node=false
+            else
+                ts_exit_node=true
+                msg_alert -t 3 "\033[31m注意：\033[0m目前exitnode的官方DNS有bug，要么启用域名嗅探并禁用TailscaleDNS，\n要么必须在网页设置Globalname servers为分配的本设备子网IP且启用override"
+            fi
+            setconfig ts_exit_node "$ts_exit_node" "$GT_CFG_PATH"
+            ;;
+        5)
+            comp_box "\033[36m请直接输入希望在Tailscale显示的设备名称\033[0m" \
+                "或输入 0 返回上级菜单"
+            read -r -p "请输入> " ts_hostname
+            if [ "$ts_hostname" != 0 ]; then
+                setconfig ts_hostname "$ts_hostname" "$GT_CFG_PATH"
+            fi
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}
+
+set_wireguard() {
+    while true; do
+
+        if [ -n "$wg_public_key" ]; then
+            wgp_key_info='*********'
+        else
+            unset wgp_key_info
+        fi
+
+        if [ -n "$wg_private_key" ]; then
+            wgv_key_info='*********'
+        else
+            unset wgv_key_info
+        fi
+
+        if [ -n "$wg_pre_shared_key" ]; then
+            wgpsk_key_info='*********'
+        else
+            unset wgpsk_key_info
+        fi
+        comp_box "\033[31m注意：\033[0m脚本默认内核为了节约内存没有编译WireGuard模块\n如需使用请先前往自定义内核更新完整版内核文件！"
+        btm_box "1) \033[32m启用/关闭\033[0mWireguard服务	\033[32m$wg_service\033[0m" \
+            "" \
+            "2) 设置\033[36mEndpoint地址\033[0m：		\033[36m$wg_server\033[0m" \
+            "3) 设置\033[36mEndpoint端口\033[0m：		\033[36m$wg_port\033[0m" \
+            "4) 设置\033[36m公钥-PublicKey\033[0m：		\033[36m$wgp_key_info\033[0m" \
+            "5) 设置\033[36m密钥-PresharedKey\033[0m：	\033[36m$wgpsk_key_info\033[0m" \
+            "" \
+            "6) 设置\033[33m私钥-PrivateKey\033[0m：	\033[33m$wgv_key_info\033[0m" \
+            "7) 设置\033[33m组网IPV4地址\033[0m：		\033[33m$wg_ipv4\033[0m" \
+            "8) 可选\033[33m组网IPV6地址\033[0m：	\033[33m$wg_ipv6\033[0m" \
+            "" \
+            "0) 返回上级菜单"
+        read -r -p "请输入对应标号> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        1)
+            if [ -n "$wg_server" ] && [ -n "$wg_port" ] && [ -n "$wg_public_key" ] && [ -n "$wg_pre_shared_key" ] && [ -n "$wg_private_key" ] && [ -n "$wg_ipv4" ]; then
+                [ "$wg_service" = ON ] && wg_service=OFF || wg_service=ON
+                setconfig wg_service "$wg_service"
+            else
+                msg_alert "\033[31m请先完成必选设置！\033[0m"
+            fi
+            ;;
+        [1-8])
+            line_break
+            read -r -p "请输入相应内容（回车或0删除）> " text
+            [ "$text" = 0 ] && text=''
+            case "$num" in
+            2)
+                wg_server="$text"
+                setconfig wg_server "$text" "$GT_CFG_PATH"
+                ;;
+            3)
+                wg_port="$text"
+                setconfig wg_port "$text" "$GT_CFG_PATH"
+                ;;
+            4)
+                wg_public_key="$text"
+                setconfig wg_public_key "$text" "$GT_CFG_PATH"
+                ;;
+            5)
+                wg_pre_shared_key="$text"
+                setconfig wg_pre_shared_key "$text" "$GT_CFG_PATH"
+                ;;
+            6)
+                wg_private_key="$text"
+                setconfig wg_private_key "$text" "$GT_CFG_PATH"
+                ;;
+            7)
+                wg_ipv4="$text"
+                setconfig wg_ipv4 "$text" "$GT_CFG_PATH"
+                ;;
+            8)
+                wg_ipv6="$text"
+                setconfig wg_ipv6 "$text" "$GT_CFG_PATH"
+                ;;
+            esac
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}

scripts/menus/8_tools.sh

@@ -0,0 +1,730 @@
+#!/bin/sh
+# Copyright (C) Juewuy
+
+[ -n "$__IS_MODULE_8_TOOLS_LOADED" ] && return
+__IS_MODULE_8_TOOLS_LOADED=1
+
+. "$CRASHDIR"/libs/logger.sh
+. "$CRASHDIR"/libs/web_get_bin.sh
+
+stop_iptables() {
+    iptables -w -t nat -D PREROUTING -p tcp -m multiport --dports "$ssh_port" -j REDIRECT --to-ports 22 >/dev/null 2>&1
+    ip6tables -w -t nat -A PREROUTING -p tcp -m multiport --dports "$ssh_port" -j REDIRECT --to-ports 22 >/dev/null 2>&1
+}
+
+ssh_tools() {
+    while true; do
+        [ -n "$(cat /etc/firewall.user 2>&1 | grep '启用外网访问SSH服务')" ] && ssh_ol=禁止 || ssh_ol=开启
+        [ -z "$ssh_port" ] && ssh_port=10022
+        comp_box "\033[33m此功能仅针对使用Openwrt系统的设备生效，且不依赖服务\033[0m" \
+            "\033[31m本功能不支持红米AX6S等镜像化系统设备，请勿尝试！\033[0m"
+        btm_box "1) \033[32m修改\033[0m外网访问端口：\033[36m$ssh_port\033[0m" \
+            "2) \033[32m修改\033[0mSSH访问密码(请连续输入2次后回车)" \
+            "3) \033[33m$ssh_ol\033[0m外网访问SSH" \
+            "" \
+            "0) 返回上级菜单 \033[0m"
+        read -r -p "请输入对应标号> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        1)
+            line_break
+            read -r -p "请输入端口号(1000-65535)> " num
+            if [ -z "$num" ]; then
+                errornum
+            elif [ "$num" -gt 65535 ] || [ "$num" -le 999 ]; then
+                msg_alert "\033[31m输入错误！请输入正确的数值(1000-65535)！\033[0m"
+            elif [ -n "$(netstat -ntul | grep :$num)" ]; then
+                msg_alert "\033[31m当前端口已被其他进程占用，请重新输入！\033[0m"
+            else
+                ssh_port=$num
+                setconfig ssh_port "$ssh_port"
+                sed -i "/启用外网访问SSH服务/d" /etc/firewall.user
+                stop_iptables
+
+                msg_alert "\033[32m设置成功，请重新开启外网访问SSH功能！"
+            fi
+            ;;
+        2)
+            passwd
+            sleep 1
+            ;;
+        3)
+            if [ "$ssh_ol" = "开启" ]; then
+                iptables -w -t nat -A PREROUTING -p tcp -m multiport --dports "$ssh_port" -j REDIRECT --to-ports 22
+                [ -n "$(ckcmd ip6tables)" ] && ip6tables -w -t nat -A PREROUTING -p tcp -m multiport --dports "$ssh_port" -j REDIRECT --to-ports 22
+                echo "iptables -w -t nat -A PREROUTING -p tcp -m multiport --dports $ssh_port -j REDIRECT --to-ports 22 #启用外网访问SSH服务" >>/etc/firewall.user
+                [ -n "$(ckcmd ip6tables)" ] && echo "ip6tables -w -t nat -A PREROUTING -p tcp -m multiport --dports $ssh_port -j REDIRECT --to-ports 22 #启用外网访问SSH服务" >>/etc/firewall.user
+                comp_box "已开启外网访问SSH功能！"
+            else
+                sed -i "/启用外网访问SSH服务/d" /etc/firewall.user
+                stop_iptables
+                comp_box "已禁止外网访问SSH！"
+            fi
+            break
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}
+
+# 工具与优化
+tools() {
+    while true; do
+        # 获取设置默认显示
+        grep -qE "^\s*[^#].*otapredownload" /etc/crontabs/root >/dev/null 2>&1 && mi_update=禁用 || mi_update=启用
+        [ "$mi_mi_autoSSH" = "已配置" ] && mi_mi_autoSSH_type=32m已配置 || mi_mi_autoSSH_type=31m未配置
+        [ -f "$CRASHDIR"/tools/tun.ko ] && mi_tunfix=32mON || mi_tunfix=31mOFF
+        comp_box "\033[30;47m工具与优化\033[0m" \
+            "" \
+            "\033[33m本页工具可能无法兼容全部Linux设备，请酌情使用！\033[0m" \
+            "磁盘占用/所在目录：" \
+            "$(du -sh "$CRASHDIR")"
+        content_line "1) ShellCrash\033[33m测试菜单\033[0m"
+        content_line "2) ShellCrash\033[32m新手引导\033[0m"
+        content_line "3) \033[36m日志及推送工具\033[0m"
+        [ -f /etc/firewall.user ] && content_line "4) \033[32m配置\033[0m外网访问SSH"
+        [ -x /usr/sbin/otapredownload ] && content_line "5) \033[33m$mi_update\033[0m小米系统自动更新"
+        [ "$systype" = "mi_snapshot" ] && content_line "6) 小米设备软固化SSH ———— \033[$mi_mi_autoSSH_type \033[0m"
+        [ "$systype" = "mi_snapshot" ] && content_line "8) 小米设备Tun模块修复 ———— \033[$mi_tunfix \033[0m"
+        btm_box "" \
+            "0) 返回上级菜单"
+        read -r -p "请输入对应标号> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        1)
+            testcommand
+            ;;
+        2)
+            . "$CRASHDIR"/menus/userguide.sh && userguide
+            break
+            ;;
+        3)
+            log_pusher
+            ;;
+        4)
+            ssh_tools
+            sleep 1
+            ;;
+        5)
+            if [ -x /usr/sbin/otapredownload ]; then
+                if [ "$mi_update" = "禁用" ]; then
+                    grep -q "otapredownload" /etc/crontabs/root &&
+                        sed -i "/^[^\#]*otapredownload/ s/^/#/" /etc/crontabs/root ||
+                        echo "#15 3,4,5 * * * /usr/sbin/otapredownload >/dev/null 2>&1" >>/etc/crontabs/root
+                else
+                    grep -q "otapredownload" /etc/crontabs/root &&
+                        sed -i "/^\s*#.*otapredownload/ s/^\s*#//" /etc/crontabs/root ||
+                        echo "15 3,4,5 * * * /usr/sbin/otapredownload >/dev/null 2>&1" >>/etc/crontabs/root
+                fi
+                msg_alert "已\033[33m$mi_update\033[0m小米路由器的自动更新，如未生效，请在官方APP中同步设置！"
+            fi
+            ;;
+        6)
+            if [ "$systype" = "mi_snapshot" ]; then
+                mi_autoSSH
+            else
+                msg_alert "不支持的设备！"
+            fi
+            ;;
+        7)
+            line_break
+            separator_line "="
+            if [ ! -f "$CRASHDIR"/tools/ShellDDNS.sh ]; then
+                content_line "正在获取在线脚本......"
+                get_bin "$TMPDIR"/ShellDDNS.sh tools/ShellDDNS.sh
+                if [ "$?" = "0" ]; then
+                    mv -f "$TMPDIR"/ShellDDNS.sh "$CRASHDIR"/tools/ShellDDNS.sh
+                    . "$CRASHDIR"/tools/ShellDDNS.sh
+                else
+                    content_line "\033[31m文件下载失败！\033[0m"
+                    separator_line "="
+                fi
+            else
+                . "$CRASHDIR"/tools/ShellDDNS.sh
+            fi
+            sleep 1
+            ;;
+        8)
+            if [ -f "$CRASHDIR"/tools/tun.ko ]; then
+                comp_box "是否禁用此功能并移除相关补丁？"
+                btm_box "1) 是" \
+                    "0) 否，返回上级菜单"
+                read -r -p "请输入对应标号> " res
+                [ "$res" = 1 ] && {
+                    rm -rf "$CRASHDIR"/tools/tun.ko
+                    msg_alert "\033[33m补丁文件已移除，请立即重启设备以防止出错！\033[0m"
+                }
+            elif ckcmd modinfo && [ -z "$(modinfo tun)" ]; then
+                comp_box "\033[33m本功能需要修改系统文件，不保证没有任何风险！\033[0m" \
+                    "\033[33m本功能采集的Tun模块并不一定适用于你的设备！\033[0m"
+                btm_box "1) 我已知晓，出现问题会自行承担！" \
+                    "0) 返回上级菜单"
+                read -r -p "请输入对应标号> " res
+                if [ "$res" = 1 ]; then
+                    line_break
+                    separator_line "="
+                    content_line "正在连接服务器获取Tun模块补丁文件......"
+                    get_bin "$TMPDIR"/tun.ko bin/fix/tun.ko
+                    if [ "$?" = "0" ]; then
+                        mv -f "$TMPDIR"/tun.ko "$CRASHDIR"/tools/tun.ko &&
+                            /data/shellcrash_init.sh tunfix &&
+                            content_line "\033[32m设置成功！请重启服务！\033[0m"
+                    else
+                        content_line "\033[31m文件下载失败，请重试！\033[0m"
+                    fi
+                    separator_line "="
+                else
+                    continue
+                fi
+            else
+                msg_alert "\033[31m当前设备无需设置，请勿尝试！\033[0m"
+            fi
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}
+
+mi_autoSSH() {
+    comp_box "\033[33m本功能使用软件命令进行固化不保证100%成功！\033[0m" \
+        "\033[33m如有问题请加群反馈：\033[36;4mhttps://t.me/ShellClash\033[0m"
+    btm_box "请输入需要还原的SSH密码（不影响当前密码）" \
+        "（回车可跳过）"
+    read -r -p "请输入> " mi_mi_autoSSH_pwd
+    mi_mi_autoSSH=已配置
+    cp -f /etc/dropbear/dropbear_rsa_host_key "$CRASHDIR"/configs/dropbear_rsa_host_key 2>/dev/null
+    cp -f /etc/dropbear/authorized_keys "$CRASHDIR"/configs/authorized_keys 2>/dev/null
+    ckcmd nvram && {
+        nvram set ssh_en=1
+        nvram set telnet_en=1
+        nvram set uart_en=1
+        nvram set boot_wait=on
+        nvram commit
+    }
+    setconfig mi_mi_autoSSH $mi_mi_autoSSH
+    setconfig mi_mi_autoSSH_pwd "$mi_mi_autoSSH_pwd"
+    msg_alert "\033[32m设置成功！\033[0m"
+}
+
+# 日志菜单
+log_pusher() {
+    while true; do
+        [ -n "$push_TG" ] && stat_TG=32mON || stat_TG=33mOFF
+        [ -n "$push_Deer" ] && stat_Deer=32mON || stat_Deer=33mOFF
+        [ -n "$push_bark" ] && stat_bark=32mON || stat_bark=33mOFF
+        [ -n "$push_Po" ] && stat_Po=32mON || stat_Po=33mOFF
+        [ -n "$push_PP" ] && stat_PP=32mON || stat_PP=33mOFF
+        [ -n "$push_SynoChat" ] && stat_SynoChat=32mON || stat_SynoChat=33mOFF
+        [ -n "$push_Gotify" ] && stat_Gotify=32mON || stat_Gotify=33mOFF
+        [ "$task_push" = 1 ] && stat_task=32mON || stat_task=33mOFF
+        [ -n "$device_name" ] && device_s=32m$device_name || device_s=33m未设置
+        comp_box "1) Telegram推送	——\033[$stat_TG\033[0m" \
+            "2) PushDeer推送	——\033[$stat_Deer\033[0m" \
+            "3) Bark推送-IOS	——\033[$stat_bark\033[0m" \
+            "4) Passover推送	——\033[$stat_Po\033[0m" \
+            "5) PushPlus推送	——\033[$stat_PP\033[0m" \
+            "6) SynoChat推送	——\033[$stat_SynoChat\033[0m" \
+            "7) Gotify推送	        ——\033[$stat_Gotify\033[0m" \
+            "" \
+            "a) 查看\033[36m运行日志\033[0m" \
+            "b) 推送任务日志	——\033[$stat_task\033[0m" \
+            "c) 设置设备名称	——\033[$device_s\033[0m" \
+            "d) 清空日志文件" \
+            "" \
+            "0) 返回上级菜单"
+        read -r -p "请输入对应标号> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        1)
+            if [ -n "$push_TG" ]; then
+                comp_box "是否确认关闭TG日志推送？"
+                btm_box "1) 是" \
+                    "0) 否，返回上级菜单"
+                read -r -p "请输入对应标号> " res
+                if [ "$res" = 1 ]; then
+                    push_TG=
+                    chat_ID=
+                    setconfig push_TG
+                    setconfig chat_ID
+                else
+                    continue
+                fi
+            else
+                # echo -e "\033[33m详细设置指南请参考 https://juewuy.github.io/ \033[0m"
+                . "$CRASHDIR"/menus/bot_tg_bind.sh
+                chose_bot() {
+                    comp_box "1) 使用公共机器人	——不依赖内核服务" \
+                        "2) 使用私人机器人	——需要额外申请" \
+                        "" \
+                        "0) 返回上级菜单"
+                    read -r -p "请输入对应标号> " num
+                    case "$num" in
+                    0)
+                        return 0
+                        ;;
+                    1)
+                        public_bot
+                        set_bot && tg_push_token || chose_bot
+                        ;;
+                    2)
+                        private_bot
+                        set_bot && tg_push_token || chose_bot
+                        ;;
+                    *)
+                        errornum
+                        ;;
+                    esac
+                }
+                chose_bot
+            fi
+            ;;
+        2)
+            if [ -n "$push_Deer" ]; then
+                comp_box "是否确认关闭PushDeer日志推送？"
+                btm_box "1) 是" \
+                    "0) 否，返回上级菜单"
+                read -r -p "请输入对应标号> " res
+                if [ "$res" = 1 ]; then
+                    push_Deer=
+                    setconfig push_Deer
+                else
+                    continue
+                fi
+            else
+                # echo -e "\033[33m详细设置指南请参考 https://juewuy.github.io/ \033[0m"
+                comp_box "1. 请先前往 \033[32;4mhttp://www.pushdeer.com/official.html\033[0m 扫码安装快应用或下载APP" \
+                    "2. 打开快应用/APP，并完成登陆" \
+                    "3. \033[33m切换到「设备」标签页，点击右上角的加号，注册当前设备\033[0m" \
+                    "4. \033[36m切换到「秘钥」标签页，点击右上角的加号，创建一个秘钥，并复制\033[0m"
+                btm_box "\033[36m请直接输入你复制的秘钥\033[0m" \
+                    "或输入 0 返回上级菜单"
+                read -r -p "请输入> " url
+                if [ "$url" = 0 ]; then
+                    continue
+                elif [ -n "$url" ]; then
+                    push_Deer=$url
+                    setconfig push_Deer "$url"
+                    logger "已完成PushDeer日志推送设置！" 32
+                else
+                    msg_alert "\033[31m输入错误，请重新输入！\033[0m"
+                fi
+            fi
+            ;;
+        3)
+            if [ -n "$push_bark" ]; then
+                comp_box "是否确认关闭Bark日志推送？"
+                btm_box "1) 是" \
+                    "0) 否，返回上级菜单"
+                read -r -p "请输入对应标号> " res
+                if [ "$res" = 1 ]; then
+                    push_bark=
+                    bark_param=
+                    setconfig push_bark
+                    setconfig bark_param
+                else
+                    continue
+                fi
+            else
+                # echo -e "\033[33m详细设置指南请参考 https://juewuy.github.io/ \033[0m"
+                comp_box "\033[33mBark推送仅支持IOS系统，其他平台请使用其他推送方式！\033[0m" \
+                    "\033[32m请安装Bark-IOS客户端，并在客户端中找到专属推送链接\033[0m"
+                btm_box "\033[36m请直接输入你的Bark推送链接\033[0m" \
+                    "或输入 0 返回上级菜单"
+                read -r -p "请输入> " url
+                if [ "$url" = 0 ]; then
+                    continue
+                elif [ -n "$url" ]; then
+                    push_bark=$url
+                    setconfig push_bark "$url"
+                    logger "已完成Bark日志推送设置！" 32
+                else
+                    msg_alert "\033[31m输入错误，请重新输入！\033[0m"
+                fi
+            fi
+            ;;
+        4)
+            if [ -n "$push_Po" ]; then
+                comp_box "是否确认关闭Pushover日志推送？"
+                btm_box "1) 是" \
+                    "0) 否，返回上级菜单"
+                read -r -p "请输入对应标号> " res
+                if [ "$res" = 1 ]; then
+                    push_Po=
+                    push_Po_key=
+                    setconfig push_Po
+                    setconfig push_Po_key
+                else
+                    continue
+                fi
+            else
+                # echo -e "\033[33m详细设置指南请参考 https://juewuy.github.io/ \033[0m"
+                comp_box "请先通过 \033[32;4mhttps://pushover.net/\033[0m 注册账号并获取\033[36mUser Key\033[0m" \
+                    "" \
+                    "\033[36m请直接请输入你的User Key\033[0m" \
+                    "或输入 0 返回上级菜单"
+                read -r -p "请输入> " key
+                if [ "$key" = 0 ]; then
+                    continue
+                elif [ -n "$key" ]; then
+                    comp_box "\033[33m请检查注册邮箱，完成账户验证\033[0m"
+                    btm_box "1) 我已经验证完成" \
+                        "0) 返回上级菜单"
+                    read -r -p "我已经验证完成(1/0)> " res
+                    if [ "$res" = 1 ]; then
+                        comp_box "请通过 \033[32;4mhttps://pushover.net/apps/build\033[0m 生成\033[36mAPI Token\033[0m"
+                        read -r -p "请输入你的API Token> " Token
+                        if [ -n "$Token" ]; then
+                            push_Po=$Token
+                            push_Po_key=$key
+                            setconfig push_Po "$Token"
+                            setconfig push_Po_key "$key"
+                            logger "已完成Passover日志推送设置！" 32
+                        else
+                            msg_alert "\033[31m输入错误，请重新输入！\033[0m"
+                        fi
+                    else
+                        continue
+                    fi
+                else
+                    msg_alert "\033[31m输入错误，请重新输入！\033[0m"
+                fi
+            fi
+            ;;
+        5)
+            if [ -n "$push_PP" ]; then
+                comp_box "是否确认关闭PushPlus日志推送？"
+                btm_box "1) 是" \
+                    "0) 否，返回上级菜单"
+                read -r -p "请输入对应标号> " res
+                if [ "$res" = 1 ]; then
+                    push_PP=
+                    setconfig push_PP
+                else
+                    continue
+                fi
+            else
+                # echo -e "\033[33m详细设置指南请参考 https://juewuy.github.io/ \033[0m"
+                comp_box "请先通过 \033[32;4mhttps://www.pushplus.plus/push1.html\033[0m 注册账号并获取\033[36mtoken\033[0m"
+                btm_box "\033[36m请直接输入你的token\033[0m" \
+                    "或输入 0 返回上级菜单"
+                read -r -p "请输入> " Token
+                if [ "$Token" = 0 ]; then
+                    continue
+                elif [ -n "$Token" ]; then
+                    push_PP=$Token
+                    setconfig push_PP "$Token"
+                    logger "已完成PushPlus日志推送设置！" 32
+                else
+                    msg_alert "\033[31m输入错误，请重新输入！\033[0m"
+                fi
+            fi
+            ;;
+        6)
+            if [ -n "$push_SynoChat" ]; then
+                comp_box "是否确认关闭SynoChat日志推送？"
+                btm_box "1) 是" \
+                    "0) 否，返回上级菜单"
+                read -r -p "请输入对应标号> " res
+                if [ "$res" = 1 ]; then
+                    push_SynoChat=
+                    setconfig push_SynoChat
+                else
+                    continue
+                fi
+            else
+                line_break
+                read -r -p "请输入你的Synology DSM主页地址> " URL
+                read -r -p "请输入你的Synology Chat Token> " TOKEN
+                comp_box '请通过"你的群晖地址/webapi/entry.cgi?api=SYNO.Chat.External&method=user_list&version=2&token=你的TOKEN"获取user_id'
+                read -r -p "请输入你的user_id> " USERID
+                if [ -n "$URL" ]; then
+                    push_SynoChat=$USERID
+                    setconfig push_SynoChat "$USERID"
+                    setconfig push_ChatURL "$URL"
+                    setconfig push_ChatTOKEN "$TOKEN"
+                    setconfig push_ChatUSERID "$USERID"
+                    logger "已完成SynoChat日志推送设置！" 32
+                else
+                    setconfig push_ChatURL
+                    setconfig push_ChatTOKEN
+                    setconfig push_ChatUSERID
+                    push_SynoChat=
+                    setconfig push_SynoChat
+
+                    msg_alert "\033[31m输入错误，请重新输入！\033[0m"
+                fi
+            fi
+            ;;
+        # 在menu.sh的case $num in代码块中添加
+        7)
+            if [ -n "$push_Gotify" ]; then
+                comp_box "是否确认关闭Gotify日志推送？"
+                btm_box "1) 是" \
+                    "0) 否，返回上级菜单"
+                read -r -p "请输入对应标号> " res
+                if [ "$res" = 1 ]; then
+                    push_Gotify=
+                    setconfig push_Gotify
+                else
+                    continue
+                fi
+            else
+                comp_box "请先通过Gotify服务器获取推送URL" \
+                    "格式示例: https://gotify.example.com/message?token=你的应用令牌"
+                btm_box "\033[36m请直接你的Gotify推送URL\033[0m" \
+                    "或输入 0 返回上级菜单"
+                read -r -p "请输入> " url
+                if [ "$url" = 0 ]; then
+                    continue
+                elif [ -n "$url" ]; then
+                    push_Gotify=$url
+                    setconfig push_Gotify "$url"
+                    logger "已完成Gotify日志推送设置！" 32
+                else
+                    msg_alert "\033[31m输入错误，请重新输入！\033[0m"
+                fi
+            fi
+            ;;
+        a)
+            if [ -s "$TMPDIR"/ShellCrash.log ]; then
+                line_break
+                echo "==========================================================="
+                cat "$TMPDIR"/ShellCrash.log
+                echo "==========================================================="
+                exit
+            else
+                msg_alert "\033[31m未找到相关日志！\033[0m"
+            fi
+            ;;
+        b)
+            [ "$task_push" = 1 ] && task_push='' || task_push=1
+            setconfig task_push "$task_push"
+            sleep 1
+            ;;
+        c)
+            comp_box "请直接输入本设备自定义推送名称" \
+                "或直接回车确认返回上级菜单"
+            read -r -p "请输入> " device_name
+            if [ -n "$device_name" ]; then
+                setconfig device_name "$device_name"
+            fi
+            ;;
+        d)
+            rm -rf "$TMPDIR"/ShellCrash.log
+            msg_alert "\033[33m运行日志及任务日志均已清空！\033[0m"
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}
+
+# 测试菜单
+testcommand() {
+    while true; do
+        comp_box "\033[30;47m这里是测试命令菜单\033[0m" \
+            "\033[33m如遇问题尽量运行相应命令后截图提交issue或TG讨论组\033[0m"
+        btm_box "1) Debug模式运行内核" \
+            "2) 查看系统DNS端口(:53)占用 " \
+            "3) 测试ssl加密(aes-128-gcm)跑分" \
+            "4) 查看ShellCrash相关路由规则" \
+            "5) 查看内核配置文件前40行" \
+            "6) 测试代理服务器连通性(google.tw)" \
+            "" \
+            "0) 返回上级目录"
+        read -r -p "请输入对应数字> " num
+        case "$num" in
+        0)
+            break
+            ;;
+        1)
+            debug
+            ;;
+        2)
+            line_break
+            echo "==========================================================="
+            netstat -ntulp | grep 53
+            echo
+            echo -e "可以使用\033[44m netstat -ntulp |grep xxx \033[0m来查询任意(xxx)端口"
+            echo "==========================================================="
+            ;;
+        3)
+            line_break
+            openssl speed -multi 4 -evp aes-128-gcm
+            ;;
+        4)
+            line_break
+            if [ "$firewall_mod" = "nftables" ]; then
+                nft list table inet shellcrash | sed '/set cn_ip {/,/}/d;/set cn_ip6 {/,/}/d;/^[[:space:]]*}/d'
+            else
+                [ "$firewall_area" = 1 -o "$firewall_area" = 3 -o "$firewall_area" = 5 -o "$vm_redir" = "ON" ] && {
+                    echo "----------------Redir+DNS---------------------"
+                    iptables -t nat -L PREROUTING --line-numbers
+                    iptables -t nat -L shellcrash_dns --line-numbers
+                    [ -n "$(echo $redir_mod | grep -E 'Redir|Mix')" ] && iptables -t nat -L shellcrash --line-numbers
+                    [ -n "$(echo "$redir_mod" | grep -E 'Tproxy|Mix|Tun')" ] && {
+                        echo "----------------Tun/Tproxy-------------------"
+                        iptables -t mangle -L PREROUTING --line-numbers
+                        iptables -t mangle -L shellcrash_mark --line-numbers
+                    }
+                }
+                [ "$firewall_area" = 2 -o "$firewall_area" = 3 ] && {
+                    echo "-------------OUTPUT-Redir+DNS----------------"
+                    iptables -t nat -L OUTPUT --line-numbers
+                    iptables -t nat -L shellcrash_dns_out --line-numbers
+                    [ -n "$(echo "$redir_mod" | grep -E 'Redir|Mix')" ] && iptables -t nat -L shellcrash_out --line-numbers
+                    [ -n "$(echo "$redir_mod" | grep -E 'Tproxy|Mix|Tun')" ] && {
+                        echo "------------OUTPUT-Tun/Tproxy---------------"
+                        iptables -t mangle -L OUTPUT --line-numbers
+                        iptables -t mangle -L shellcrash_mark_out --line-numbers
+                    }
+                }
+                [ "$ipv6_redir" = "ON" ] && {
+                    [ "$firewall_area" = 1 -o "$firewall_area" = 3 ] && {
+                        ip6tables -t nat -L >/dev/null 2>&1 && {
+                            echo "-------------IPV6-Redir+DNS-------------------"
+                            ip6tables -t nat -L PREROUTING --line-numbers
+                            ip6tables -t nat -L shellcrashv6_dns --line-numbers
+                            [ -n "$(echo "$redir_mod" | grep -E 'Redir|Mix')" ] && ip6tables -t nat -L shellcrashv6 --line-numbers
+                        }
+                        [ -n "$(echo "$redir_mod" | grep -E 'Tproxy|Mix|Tun')" ] && {
+                            echo "-------------IPV6-Tun/Tproxy------------------"
+                            ip6tables -t mangle -L PREROUTING --line-numbers
+                            ip6tables -t mangle -L shellcrashv6_mark --line-numbers
+                        }
+                    }
+                }
+                [ "$vm_redir" = "ON" ] && {
+                    echo "-------------vm-Redir-------------------"
+                    iptables -t nat -L shellcrash_vm --line-numbers
+                    iptables -t nat -L shellcrash_vm_dns --line-numbers
+                }
+                echo "----------------本机防火墙---------------------"
+                iptables -L INPUT --line-numbers
+            fi
+            ;;
+        5)
+            echo "$crashcore" | grep -q 'singbox' && config_path="$CRASHDIR"/jsons/config.json || config_path="$CRASHDIR"/yamls/config.yaml
+            line_break
+            sed -n '1,40p' "$config_path"
+            ;;
+        6)
+            comp_box "\033[33m注意：依赖curl（不支持wget），且测试结果不保证一定准确！\033[0m"
+            delay=$(
+                curl -kx ${authentication}@127.0.0.1:$mix_port -o /dev/null -s -w '%{time_starttransfer}' 'https://google.tw' &
+                {
+                    sleep 3
+                    kill $! >/dev/null 2>&1 &
+                }
+            ) >/dev/null 2>&1
+            delay=$(echo | awk "{print $delay*1000}") >/dev/null 2>&1
+            line_break
+            separator_line "="
+            if [ $(echo ${#delay}) -gt 1 ]; then
+                content_line "\033[32m连接成功！响应时间为："$delay" ms\033[0m"
+            else
+                content_line "\033[31m连接超时！请重试或检查节点配置！\033[0m"
+            fi
+            separator_line "="
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}
+
+debug() {
+    echo "$crashcore" | grep -q 'singbox' && config_tmp="$TMPDIR"/jsons || config_tmp="$TMPDIR"/config.yaml
+    comp_box "\033[36m注意：Debug运行均会停止原本的内核服务\033[0m" \
+        "后台运行日志地址：\033[32m$TMPDIR/debug.log\033[0m" \
+        "如长时间运行后台监测，日志等级推荐error！防止文件过大！" \
+        "你亦可通过：\033[33mcrash -s debug 'warning'\033[0m命令使用其他日志等级"
+    content_line "1) 仅测试\033[32m$config_tmp\033[0m配置文件可用性"
+    content_line "2) 前台运行\033[32m$config_tmp\033[0m配置文件，不配置防火墙劫持(\033[33m使用Ctrl+C手动停止\033[0m)"
+    content_line "3) 后台运行完整启动流程并配置防火墙劫持，日志等级：\033[31merror\033[0m"
+    content_line "4) 后台运行完整启动流程并配置防火墙劫持，日志等级：\033[32minfo\033[0m"
+    content_line "5) 后台运行完整启动流程并配置防火墙劫持，日志等级：\033[33mdebug\033[0m"
+    content_line "6) 后台运行完整启动流程并配置防火墙劫持，且将错误日志打印到闪存：\033[32m$CRASHDIR/debug.log\033[0m"
+    content_line ""
+    content_line "8) 后台运行完整启动流程,输出执行错误并查找上下文，之后关闭进程"
+    [ -s "$TMPDIR"/jsons/inbounds.json ] && content_line "9) 将\033[32m$config_tmp\033[0m下json文件合并为$TMPDIR/debug.json"
+    btm_box "" \
+        "0) 返回上级目录"
+    read -r -p "请输入对应标号> " num
+    case "$num" in
+    0) ;;
+    1)
+        "$CRASHDIR"/start.sh stop
+        "$CRASHDIR"/start.sh bfstart
+        if echo "$crashcore" | grep -q 'singbox'; then
+            "$TMPDIR"/CrashCore run -D "$BINDIR" -C "$TMPDIR"/jsons &
+            {
+                sleep 4
+                kill $! >/dev/null 2>&1 &
+            }
+            wait
+        else
+            "$TMPDIR"/CrashCore -t -d "$BINDIR" -f "$TMPDIR"/config.yaml
+        fi
+        rm -rf "$TMPDIR"/CrashCore
+        line_break
+        exit
+        ;;
+    2)
+        "$CRASHDIR"/start.sh stop
+        "$CRASHDIR"/start.sh bfstart
+        $COMMAND
+        rm -rf "$TMPDIR"/CrashCore
+        line_break
+        exit
+        ;;
+    3)
+        "$CRASHDIR"/start.sh debug error
+        main_menu
+        ;;
+    4)
+        "$CRASHDIR"/start.sh debug info
+        main_menu
+        ;;
+    5)
+        "$CRASHDIR"/start.sh debug debug
+        main_menu
+        ;;
+    6)
+        comp_box "频繁写入闪存会导致闪存寿命降低，如非遇到会导致设备死机或重启的bug，请勿使用此功能！" \
+            "是否确认启用此功能？"
+        btm_box "1) 是" \
+            "0) 否"
+        read -r -p "请输入对应标号> " res
+        if [ "$res" = 1 ]; then
+            "$CRASHDIR"/start.sh debug debug flash
+        fi
+        main_menu
+        ;;
+    8)
+        $0 -d
+        main_menu
+        ;;
+    9)
+        . "$CRASHDIR"/libs/core_webget.sh && core_find && "$TMPDIR"/CrashCore merge "$TMPDIR"/debug.json -C "$TMPDIR"/jsons && line_break
+        comp_box "\033[32m合并成功！\033[0m"
+        [ "$TMPDIR" = "$BINDIR" ] && rm -rf "$TMPDIR"/CrashCore
+        main_menu
+        ;;
+    *)
+        errornum
+        ;;
+    esac
+}

scripts/menus/README.md

@@ -0,0 +1,3 @@
+用于存放脚本各级菜单界面的脚本
+
+此处脚本内容包含各类文字说明

scripts/menus/bot_tg.sh

@@ -0,0 +1,326 @@
+#!/bin/sh
+
+[ -z "$CRASHDIR" ] && CRASHDIR=$( cd $(dirname $0);cd ..;pwd)
+. "$CRASHDIR"/libs/web_json.sh
+. "$CRASHDIR"/libs/set_config.sh
+. "$CRASHDIR"/libs/web_get_lite.sh
+. "$CRASHDIR"/menus/running_status.sh
+. "$CRASHDIR"/configs/gateway.cfg
+. "$CRASHDIR"/configs/ShellCrash.cfg
+
+TMPDIR='/tmp/ShellCrash'
+API="https://api.telegram.org/bot$TG_TOKEN"
+STATE_FILE="$TMPDIR/tgbot_state"
+LOGFILE="$TMPDIR/tgbot.log"
+OFFSET=0
+
+### --- 基础函数 --- ###
+web_download(){
+	setproxy
+	if curl --version >/dev/null 2>&1; then
+		curl -kfsSl "$1" -o "$2"
+	else
+		wget -Y on -q --timeout=3 -O "$2" "$1"
+	fi
+}
+web_upload(){
+	curl -ksSfl -X POST --connect-timeout 20 "$API/sendDocument" -F "chat_id=$TG_CHATID" -F "document=@$1" >/dev/null
+}
+send_msg(){
+    TEXT="$1"
+	web_json_post "$API/sendMessage" "{\"chat_id\":\"$TG_CHATID\",\"text\":\"$TEXT\",\"parse_mode\":\"Markdown\"}"
+}
+send_help(){
+    TEXT=$(cat <<EOF
+进群讨论：
+https://t.me/+6AElkMDzwPxmMmM1
+项目地址：
+https://github.com/juewuy/ShellClash
+相关教程：
+https://juewuy.github.io
+请喝咖啡：
+https://juewuy.github.io/yOF4Yf06Q/
+友情机场： 
+https://dler.pro/auth/register?affid=89698
+https://pub.bigmeok.me?code=2PuWY9I7
+EOF
+)
+	send_msg "$TEXT"
+}
+send_menu(){
+	#获取运行状态
+	PID=$(pidof CrashCore | awk '{print $NF}')
+	if [ -n "$PID" ]; then
+		run='🟢正在运行'
+		running_status
+	else
+		run='🟡未运行'
+	fi
+	corename=$(echo $crashcore | sed 's/singboxr/SingBoxR/' | sed 's/singbox/SingBox/' | sed 's/clash/Clash/' | sed 's/meta/Mihomo/')
+    TEXT=$(cat <<EOF
+*欢迎使用ShellCrash！*_${versionsh_l}_
+$corename服务$run
+【*$redir_mod*】内存占用：$VmRSS
+已运行：$day$time
+请选择操作：
+EOF
+)
+    MENU=$(cat <<EOF
+{
+  "inline_keyboard":[
+    [
+      {"text":"✈️ 启用劫持","callback_data":"start_redir"},
+      {"text":"💧 纯净模式","callback_data":"stop_redir"},
+      {"text":"🕹 重启服务","callback_data":"restart"}
+    ],
+    [
+      {"text":"📄 查看日志","callback_data":"readlog"},
+	  {"text":"🔃 文件传输","callback_data":"transport"}
+    ]
+  ]
+}
+EOF
+)
+web_json_post "$API/sendMessage" "{\"chat_id\":\"$TG_CHATID\",\"text\":\"$TEXT\",\"parse_mode\":\"Markdown\",\"reply_markup\":$MENU}"
+}
+### --- 文件传输 --- ###
+send_transport_menu(){ 
+    TEXT='请选择需要上传或下载的具体文件：'
+	if echo "$crashcore" | grep -q 'singbox';then
+		config_type=json
+	else
+		config_type=yaml
+	fi
+
+	if curl -h >/dev/null 2>&1;then
+		CURL_KB=$(cat <<EOF
+	[
+      {"text":"📥 下载日志","callback_data":"ts_get_log"},
+      {"text":"💾 备份设置","callback_data":"ts_get_bak"},
+      {"text":"⬇️ 下载配置","callback_data":"ts_get_ccf"}
+    ],
+EOF
+)
+	else
+		CURL_KB='[{"text":"⚠️ 因当前设备缺少curl应用，仅支持上传功能！","callback_data":"noop"}],'
+	fi
+    MENU=$(cat <<EOF
+{
+  "inline_keyboard":[
+	$CURL_KB
+    [
+      {"text":"🪐 上传内核","callback_data":"ts_up_core"},
+	  {"text":"🔄 还原设置","callback_data":"ts_up_bak"},
+      {"text":"⬆️ 上传配置","callback_data":"ts_up_ccf"}
+    ]
+  ]
+}
+EOF
+)
+
+web_json_post "$API/sendMessage" "{\"chat_id\":\"$TG_CHATID\",\"text\":\"$TEXT\",\"parse_mode\":\"Markdown\",\"reply_markup\":$MENU}"
+
+}
+process_file(){
+	case "$FILE_TYPE" in
+		1)
+			. "$CRASHDIR"/libs/core_tools.sh
+			core_check "$TMPDIR/$FILE_NAME" && res='成功!即将重启服务！' || res='失败,请仔细检查文件或重试！'
+			send_msg "内核更新$res"
+			sleep 2
+			"$CRASHDIR"/start.sh start
+		;;
+		2)
+			tar -zxf "$TMPDIR/$FILE_NAME" -C "$CRASHDIR"/configs && res='配置文件已还原，请手动重启服务！' || res='解压还原失败,请仔细检查文件或重试！'
+			send_msg "$res"
+		;;
+		3)
+			mv -f "$TMPDIR/$FILE_NAME" "$CRASHDIR/${config_type}s/" && res='配置文件已上传，请手动重启服务！' || res='上传失败,请仔细检查文件或重试！'
+			send_msg "$res"
+		;;
+	esac
+	rm -f "$TMPDIR/$FILE_NAME"
+	send_menu
+}
+download_file(){
+	FILE_NAME=$(echo "$UPDATES" | sed 's/"callback_query".*//g' | grep -o '"file_name":"[^"]*"' | head -n1 | sed 's/.*:"//;s/"$//' | grep -E '\.(gz|upx|json|yaml)$')
+	if [ -n "$FILE_NAME" ];then
+		FILE_PATH=$(web_get_lite "$API/getFile?file_id=$FILE_ID" | grep -o '"file_path":"[^"]*"' | sed 's/.*:"//;s/"$//')
+		API_FILE="https://api.telegram.org/file/bot$TG_TOKEN"
+		web_download "$API_FILE/$FILE_PATH" "$TMPDIR/$FILE_NAME"
+		if [ "$?" = 0 ];then
+			process_file
+		else
+			send_msg "网络错误，上传失败！请重试！"
+		fi
+	else
+		send_msg "文件格式不匹配，上传失败！"
+	fi
+}
+### --- 具体操作函数 --- ###
+do_start_fw(){
+	[ -z "$redir_mod_bf" ] && redir_mod_bf='Redir'
+	redir_mod=$redir_mod_bf
+	setconfig redir_mod $redir_mod
+	"$CRASHDIR"/start.sh start_firewall
+    echo "ShellCrash 透明路由*$redir_mod_bf*已启用！" > "$LOGFILE"
+}
+do_stop_fw(){
+	redir_mod_bf=$redir_mod
+	firewall_area=4
+	setconfig firewall_area 4
+	"$CRASHDIR"/start.sh stop_firewall
+    echo "ShellCrash 已切换到纯净模式！" > "$LOGFILE"
+}
+do_restart(){
+    "$CRASHDIR"/start.sh restart
+    echo "ShellCrash 服务已重启！" > "$LOGFILE"
+}
+do_set_sub(){
+    #echo "$1" "$2" >> "$CRASHDIR"/configs/providers.cfg
+    echo "错误，还未完成的功能！" > "$LOGFILE"
+
+}
+transport(){ #文件传输
+	case "$CALLBACK" in
+		"ts_get_log")
+			web_upload "$TMPDIR"/ShellCrash.log
+			send_menu 
+		;;
+		"ts_get_bak")
+			now=$(date +%Y%m%d_%H%M%S)
+			FILE="$TMPDIR/configs_$now.tar.gz"
+			tar -zcf "$FILE" -C "$CRASHDIR/configs/" .
+			web_upload "$FILE"
+			rm -rf "$FILE"
+			send_menu 
+		;;
+		"ts_get_ccf")
+			FILE="$TMPDIR/$config_type.tar.gz"
+			tar -zcf "$FILE" -C "$CRASHDIR/${config_type}s/" .
+			web_upload "$FILE"
+			rm -rf "$FILE"
+			send_menu 
+		;;
+		"ts_up_core")
+			FILE_TYPE=1
+			send_msg  "请发送需要上传的内核，必须是以tar.gz,.gz或.upx结尾的【${corename}】内核！"
+		;;
+		"ts_up_bak")
+			FILE_TYPE=2
+			send_msg  "请发送需要还原的备份文件，必须是【.tar.gz】格式！"
+		;;
+		"ts_up_ccf")
+			FILE_TYPE=3
+			send_msg  "请发送需要上传的配置文件，必须是【.${config_type}】格式，支持自定义配置文件"
+		;;
+	esac
+}
+
+### --- 轮询主进程 --- ###
+polling(){
+	while true; do
+		UPDATES=$(web_get_lite "$API/getUpdates?timeout=25&offset=$OFFSET")
+
+		echo "$UPDATES" | grep -q '"update_id"' || {
+			sleep 10 #防止网络不佳时疯狂请求
+			continue
+		}
+		
+		OFFSET=$(echo "$UPDATES" | grep -o '"update_id":[0-9]*' | tail -n1 | cut -d: -f2)
+		OFFSET=$((OFFSET + 1))
+		
+		### --- 校验ChatID --- ###
+		CHATID=$(echo "$UPDATES" | grep -o '"id":[0-9]*' | tail -n1 | cut -d: -f2)
+		[ "$CHATID" != "$TG_CHATID" ] && continue
+		
+		### --- 处理按钮事件 --- ###
+		CALLBACK=$(echo "$UPDATES" | grep -o '"data":"[^"]*"' | head -n1 | sed 's/.*:"//;s/"$//')
+		FILE_ID=$(echo "$UPDATES" | sed 's/"callback_query".*//g' | grep -o '"file_id":"[^"]*"' | head -n1 | sed 's/.*:"//;s/"$//')
+		
+		[ -n "$FILE_ID" ] && {
+			download_file
+			continue
+		}
+		[ -n "$CALLBACK" ] && case "$CALLBACK" in
+			"start_redir")
+				if [ "$firewall_area" = 4 ];then
+					do_start_fw
+					send_msg  "已切换到$redir_mod_bf！"
+				else
+					send_msg  "当前已经是$redir_mod！"
+				fi
+				send_menu 
+				continue
+			;;
+			"stop_redir")
+				if [ "$firewall_area" != 4 ];then
+					do_stop_fw
+					send_msg  "已切换到纯净模式"
+				else
+					send_msg  "当前已经是纯净模式！"
+				fi
+				send_menu 
+				continue
+			;;
+			"restart")
+				do_restart
+				send_msg  "🔄 服务已重启"
+				sleep 10
+				send_menu 
+				continue
+			;;
+			"readlog")
+				send_msg  "📄 日志内容如下(已过滤任务日志)：\n\`\`\`$(grep -v '任务' $TMPDIR/ShellCrash.log |tail -n 20)\`\`\`"
+				sleep 3
+				send_menu 
+				continue
+			;;
+			"transport")
+				send_transport_menu
+				continue
+			;;
+			"set_sub")
+				echo "await_sub" > "$STATE_FILE"
+				send_msg  "✏ 请输入新的订阅链接："
+				continue
+			;;
+			ts_*)
+				transport
+				continue
+			;;
+		esac
+
+
+		### --- 处理订阅输入 --- ###
+		TEXT=$(echo "$UPDATES" | grep -o '"text":"[^"]*"' | tail -n1 | sed 's/.*"text":"//;s/"$//')
+
+		if [ "$(cat "$STATE_FILE" 2>/dev/null)" = "await_sub" ]; then
+			echo "" > "$STATE_FILE"
+			do_set_sub "$TEXT"
+			send_msg  "订阅更新完成：\n$(cat "$LOGFILE")"
+			send_menu 
+			continue
+		fi
+
+
+		### 处理命令 ###
+		case "$TEXT" in
+		/crash)
+			send_menu
+		;;
+		/"$my_alias")
+			send_menu
+		;;
+		/help)
+			send_help
+		;;
+		esac
+
+	done
+}
+
+[ "$TG_menupush" = ON ] && send_menu
+
+polling
+

scripts/menus/bot_tg_bind.sh

@@ -0,0 +1,58 @@
+#!/bin/sh
+
+. "$CRASHDIR"/libs/web_get_lite.sh
+
+private_bot() {
+    comp_box "请先通过 \033[32;4mhttps://t.me/BotFather\033[0m 申请TG机器人并获取其\033[36mAPI TOKEN\033[0m"
+    read -r -p "请输入你获取到的API TOKEN> " TOKEN
+    url_tg=https://api.telegram.org/bot${TOKEN}/getUpdates
+
+    top_box "请向\033[32m你申请的机器人\033[33m而不是BotFather！\033[0m"
+}
+
+public_bot() {
+    comp_box "请向机器人：\033[32;4mhttps://t.me/ShellCrashtg_bot\033[0m"
+    TOKEN=publictoken
+    url_tg=https://tgbot.jwsc.eu.org/publictoken/getUpdates
+}
+
+tg_push_token() {
+    push_TG="$TOKEN"
+    setconfig push_TG "$TOKEN"
+    setconfig chat_ID "$chat_ID"
+	. "$CRASHDIR"/libs/logger.sh && logger "已完成Telegram日志推送设置！" 32
+}
+
+get_chatid() {
+    i=1
+    chat_ID=''
+    while [ $i -le 3 ] && [ -z "$chat_ID" ]; do
+        sleep 1
+        comp_box "\033[33m第 $i 次尝试获取对话ID失败，正在重试...\033[0m"
+        chat=$(web_get_lite "$url_tg" 2>/dev/null)
+        if [ -n "$chat" ]; then
+            chat_ID=$(echo "$chat" | sed 's/"update_id":/{\n"update_id":/g' | grep "$public_key" | head -n1 | grep -oE '"id":.*,"is_bot' | sed s'/"id"://' | sed s'/,"is_bot//')
+        fi
+        i=$((i + 1))
+    done
+}
+
+set_bot() {
+    public_key=$(cat /proc/sys/kernel/random/boot_id | sed 's/.*-//')
+    btm_box "发送此秘钥：        \033[30;46m$public_key\033[0m"
+    read -r -p "我已经发送完成(1/0)> " res
+    if [ "$res" = 1 ]; then
+        get_chatid
+        [ -z "$chat_ID" ] && [ "$TOKEN" != 'publictoken' ] && {
+            comp_box "\033[31m无法获取对话ID，请返回重新设置或手动输入ChatID！\033[0m" \
+                "通常访问 \033[32;4m$url_tg\033[0m \n\033[36m即可看到ChatID\033[0m"
+            read -r -p "请手动输入ChatID> " chat_ID
+        }
+        if echo "$chat_ID" | grep -qE '^[0-9]{8,}$'; then
+            return 0
+        else
+            msg_alert "\033[31m无法获取对话ID，请重新配置！\033[0m"
+            return 1
+        fi
+    fi
+}

scripts/menus/bot_tg_service.sh

@@ -0,0 +1,16 @@
+	
+. "$CRASHDIR"/libs/set_cron.sh
+
+bot_tg_start(){
+	. "$CRASHDIR"/starts/start_legacy.sh
+	start_legacy "$CRASHDIR/menus/bot_tg.sh" 'bot_tg'
+}
+bot_tg_stop(){
+	cronload | grep -q 'TG_BOT' && cronset 'TG_BOT'
+	[ -f "$TMPDIR/bot_tg.pid" ] && kill -TERM "$(cat "$TMPDIR/bot_tg.pid")" 2>/dev/null
+	killall bot_tg.sh 2>/dev/null
+	rm -f "$TMPDIR/bot_tg.pid"
+}
+bot_tg_cron(){
+	cronset 'TG_BOT守护进程' "* * * * * /bin/sh $CRASHDIR/starts/start_legacy_wd.sh bot_tg #ShellCrash-TG_BOT守护进程"
+}

scripts/menus/check_port.sh

@@ -0,0 +1,17 @@
+#!/bin/sh
+# Copyright (C) Juewuy
+
+check_port() {
+    if [ "$1" -gt 65535 ] || [ "$1" -le 1 ]; then
+        msg_alert "\033[31m输入错误！请输入正确的数值(1-65535)！\033[0m"
+        return 1
+    elif echo "|$mix_port|$redir_port|$dns_port|$db_port|" | grep -q "|$1|"; then
+        msg_alert "\033[31m输入错误！请不要输入重复的端口！\033[0m"
+        return 1
+    elif netstat -ntul | grep -q ":$1[[:space:]]"; then
+        msg_alert "\033[31m当前端口已被其他进程占用，请重新输入！\033[0m"
+        return 1
+    else
+        return 0
+    fi
+}

scripts/menus/common.sh

@@ -0,0 +1,87 @@
+msg_alert() {
+    # Default sleep time
+    _sleep_time=1
+
+    if [ "$1" = "-t" ] && [ -n "$2" ]; then
+        _sleep_time="$2"
+        shift 2
+    fi
+
+    line_break
+    separator_line "="
+    for line in "$@"; do
+        content_line "$line"
+    done
+    separator_line "="
+    sleep "$_sleep_time"
+}
+
+# complete box
+comp_box() {
+    line_break
+    separator_line "="
+    for line in "$@"; do
+        content_line "$line"
+    done
+    separator_line "="
+}
+
+top_box() {
+    line_break
+    separator_line "="
+    for line in "$@"; do
+        content_line "$line"
+    done
+}
+
+# bottom box
+btm_box() {
+    for line in "$@"; do
+        content_line "$line"
+    done
+    separator_line "="
+}
+
+list_box() {
+    i=1
+    printf '%s\n' "$1" | while IFS= read -r f; do
+        content_line "$i) $f$2"
+        i=$((i + 1))
+    done
+}
+
+common_success() {
+    msg_alert "\033[32m$COMMON_SUCCESS\033[0m"
+}
+
+common_failed() {
+    msg_alert "\033[32m$COMMON_FAILED\033[0m"
+}
+
+# =================================================
+common_back() {
+    content_line "0) $COMMON_BACK"
+    separator_line "="
+}
+
+errornum() {
+    msg_alert "\033[31m$COMMON_ERR_NUM\033[0m"
+}
+
+error_letter() {
+    msg_alert "\033[31m$COMMON_ERR_LETTER\033[0m"
+}
+
+error_input() {
+    msg_alert "\033[31m$COMMON_ERR_INPUT\033[0m"
+}
+
+error_cancel() {
+    error_report "\033[31m$COMMON_ERR_CANCEL\033[0m"
+}
+
+cancel_back() {
+    separator_line "-"
+    content_line "$COMMON_CANCEL"
+    sleep 1
+}

scripts/menus/ddns.sh

@@ -0,0 +1,224 @@
+#! /bin/bash
+# Copyright (C) Juewuy
+
+ddns_menu() {
+    top_box "\033[30;46m欢迎使用DDNS！\033[0m"
+    load_ddns
+}
+
+add_ddns() {
+    cat >>"$ddns_dir" <<EOF
+
+config service '$service'
+	option enabled '1'
+	option force_unit 'hours'
+	option lookup_host '$domain'
+	option service_name '$service_name'
+	option domain '$domain'
+	option username '$username'
+	option use_https '0'
+	option use_ipv6 '$use_ipv6'
+	option password '$password'
+	option ip_source 'web'
+	option check_unit 'minutes'
+	option check_interval '$check_interval'
+	option force_interval '$force_interval'
+	option interface 'wan'
+	option bind_network 'wan'
+EOF
+    /usr/lib/ddns/dynamic_dns_updater.sh -S "$service" start >/dev/null 2>&1 &
+    sleep 3
+    msg_alert "服务已经添加！"
+}
+
+set_ddns() {
+    while true; do
+        line_break
+        read -r -p "请输入你的域名> " str
+        [ -z "$str" ] && domain="$domain" || domain="$str"
+        echo ""
+        read -r -p "请输入用户名或邮箱> " str
+        [ -z "$str" ] && username="$username" || username="$str"
+        echo ""
+        read -r -p "请输入密码或令牌秘钥> " str
+        [ -z "$str" ] && password="$password" || password="$str"
+        echo ""
+        read -r -p "请输入检测更新间隔(单位:分钟；默认为10)> " check_interval
+        [ -z "$check_interval" ] || [ "$check_interval" -lt 1 -o "$check_interval" -gt 1440 ] && check_interval=10
+        echo ""
+        read -r -p "请输入强制更新间隔(单位:小时；默认为24)> " force_interval
+        [ -z "$force_interval" ] || [ "$force_interval" -lt 1 -o "$force_interval" -gt 240 ] && force_interval=24
+
+        comp_box "请核对如下信息：" \
+            "" \
+            "服务商：		\033[32m$service\033[0m" \
+            "域名：			\033[32m$domain\033[0m" \
+            "用户名：		\033[32m$username\033[0m" \
+            "检测间隔：		\033[32m$check_interval\033[0m"
+        btm_box "是否确认添加："
+        btm_box "1) 是" \
+            "0) 否，重新輸入"
+        read -r -p "$COMMON_INPUT> " res
+        if [ "$res" = 1 ]; then
+            add_ddns
+            break
+        fi
+    done
+}
+
+set_ddns_service() {
+    while true; do
+        services_dir=/etc/ddns/"$serv"
+		[ -s "$services_dir" ] || services_dir=/etc/ddns/services
+        [ -s "$services_dir" ] || services_dir=/usr/share/ddns/list
+		[ -s "$services_dir" ] || {
+		    msg_alert "\033[33m未找到DDNS列表文件，尝试在线获取……\033[0m"
+		    ddns service update >/dev/null || msg_alert "\033[31m下载失败，请重试！\033[0m"
+		}
+        comp_box "\033[32m请选择服务提供商：\033[0m"
+
+        list=$(awk '/^#/ || !NF {next} {print $1}' "$services_dir")
+        list_box "$list"
+
+        nr=$(echo "$list" | wc -l)
+        common_back
+        read -r -p "请输入对应数字> " num
+        if [ -z "$num" ] || [ "$num" = 0 ]; then
+            i=
+            break
+        elif [ "$num" -gt 0 ] && [ "$num" -lt "$nr" ]; then
+            service_name=$(echo "$list" | sed -n "$num"p | sed 's/"//g')
+            service=$(echo "$service_name" | sed 's/\./_/g')
+            set_ddns
+            break
+        else
+            msg_alert "\033[33m输入错误，请重新输入！\033[0m"
+        fi
+    done
+}
+
+set_ddns_type() {
+    while true; do
+        comp_box "\033[32m请选择网络模式：\033[0m"
+        btm_box "1) \033[36mIPV4\033[0m" \
+            "2) \033[36mIPV6\033[0m" \
+            "" \
+            "0) $COMMON_BACK"
+        read -r -p "请输入对应数字> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        1)
+            use_ipv6=0
+            serv=services
+            set_ddns_service
+            break
+            ;;
+        2)
+            use_ipv6=1
+            serv=services_ipv6
+            set_ddns_service
+            break
+            ;;
+        *)
+            msg_alert "\033[33m输入错误，请重新输入！\033[0m"
+            ;;
+        esac
+    done
+}
+
+rev_ddns_service() {
+    while true; do
+        enabled=$(uci get ddns."$service".enabled)
+        [ "$enabled" = 1 ] && enabled_b="停用" || enabled_b="启用"
+        comp_box "1) \033[32m立即更新\033[0m" \
+            "2) 编辑当前服务" \
+            "3) $enabled_b当前服务" \
+            "4) 移除当前服务" \
+            "5) 查看运行日志" \
+            "" \
+            "0) 返回上级菜单"
+        read -r -p "请输入对应数字> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        1)
+            /usr/lib/ddns/dynamic_dns_updater.sh -S "$service" start >/dev/null 2>&1 &
+            sleep 3
+            break
+            ;;
+        2)
+            domain=$(uci get ddns."$service".domain 2>/dev/null)
+            username=$(uci get ddns."$service".username 2>/dev/null)
+            password=$(uci get ddns."$service".password 2>/dev/null)
+            service_name=$(uci get ddns."$service".service_name 2>/dev/null)
+            uci delete ddns."$service"
+            set_ddns
+            break
+            ;;
+        3)
+            [ "$enabled" = 1 ] && uci set ddns."$service".enabled='0' || uci set ddns."$service".enabled='1' && sleep 3
+            uci commit ddns."$service"
+            break
+            ;;
+        4)
+            uci delete ddns."$service"
+            uci commit ddns."$service"
+            break
+            ;;
+        5)
+            line_break
+            echo "==========================================================="
+            cat /var/log/ddns/"$service".log 2>/dev/null
+            echo "==========================================================="
+            break
+            ;;
+        *)
+            msg_alert "\033[33m输入错误，请重新输入！\033[0m"
+            ;;
+        esac
+    done
+}
+
+load_ddns() {
+    while true; do
+        ddns_dir=/etc/config/ddns
+        tmp_dir="$TMPDIR"/ddns
+        [ ! -f "$ddns_dir" ] && {
+            btm_box "\033[31m本脚本依赖OpenWrt内置的DDNS服务,当前设备无法运行,已退出！\033[0m"
+            sleep 1
+            return 1
+        }
+        nr=0
+        cat "$ddns_dir" | grep 'config service' | awk '{print $3}' | sed "s/'//g" | sed 's/"//g' >"$tmp_dir"
+        separator_line "="
+        content_line "    列表      域名       启用     IP地址"
+        content_line ""
+        [ -s "$tmp_dir" ] && for service in $(cat "$tmp_dir"); do
+            # echo $service >>$tmp_dir
+            nr=$((nr + 1))
+            enabled=$(uci get ddns."$service".enabled 2>/dev/null)
+            domain=$(uci get ddns."$service".domain 2>/dev/null)
+            local_ip=$(sed '1!G;h;$!d' /var/log/ddns/"$service".log 2>/dev/null | grep -E 'Registered IP' | tail -1 | awk -F "'" '{print $2}' | tr -d "'\"")
+            content_line "$nr)   $domain  $enabled   $local_ip"
+        done
+        content_line "$((nr + 1))) 添加DDNS服务"
+        content_line "0) 退出"
+        separator_line "="
+        read -r -p "请输入对应序号> " num
+        if [ -z "$num" ] || [ "$num" = 0 ]; then
+            i=
+            rm -rf "$tmp_dir"
+            break
+        elif [ "$num" -gt $nr ]; then
+            set_ddns_type
+        elif [ "$num" -gt 0 ] && [ "$num" -le $nr ]; then
+            service=$(cat "$tmp_dir" | sed -n "$num"p)
+            rev_ddns_service
+        else
+            msg_alert "\033[33m请输入正确数字！\033[0m"
+        fi
+    done
+}

scripts/menus/dns.sh

@@ -0,0 +1,395 @@
+#!/bin/sh
+# Copyright (C) Juewuy
+
+[ -n "$__IS_MODULE_DNS_LOADED" ] && return
+__IS_MODULE_DNS_LOADED=1
+
+load_lang dns
+
+# DNS 模式设置
+set_dns_mod() {
+    while true; do
+        [ -z "$hosts_opt" ] && hosts_opt=ON
+        [ -z "$dns_protect" ] && dns_protect=ON
+        [ -z "$ecs_subnet" ] && ecs_subnet=OFF
+        comp_box "$DNS_CURRENT_MODE\033[47;30m $dns_mod \033[0m" \
+            "\033[33m$DNS_RESTART_NOTICE\033[0m"
+        content_line "1) 设为MIX$COMMON_MOD：\t\033[32m$DNS_MODE_MIX_DESC\033[0m"
+        content_line "2) 设为Route$COMMON_MOD：\t\033[32m$DNS_MODE_ROUTE_DESC\033[0m"
+        content_line "3) 设为Redir$COMMON_MOD：\t\033[33m$DNS_MODE_REDIR_DESC\033[0m"
+        content_line ""
+        content_line "4) $DNS_MENU_PROTECT：\t \033[36m$dns_protect\033[0m\t$DNS_PROTECT_DESC"
+        content_line "5) $DNS_MENU_HOSTS：\t \033[36m$hosts_opt\033[0m\t$DNS_HOSTS_DESC"
+        content_line "6) $DNS_MENU_ECS：\t \033[36m$ecs_subnet\033[0m\t$DNS_ECS_DESC"
+        content_line "7) $DNS_MENU_REDIR：\033[36m$dns_redir_port\033[0m\t$DNS_REDIR_PORT_DESC"
+        [ "$dns_mod" = "mix" ] &&
+            content_line "8) \033[33m$DNS_FAKEIP_MENU\033[0m"
+        content_line "9) \033[36m$DNS_ADV_MENU\033[0m"
+        content_line ""
+        content_line "0) $COMMON_BACK"
+        separator_line "="
+        read -r -p "$COMMON_INPUT> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        1 | 2)
+            if echo "$crashcore" | grep -q 'singbox' || [ "$crashcore" = meta ]; then
+                [ "$num" = 1 ] && dns_mod=mix || dns_mod=route
+                setconfig dns_mod "$dns_mod"
+                msg_alert "\033[36m$DNS_SET_OK：$dns_mod\033[0m"
+            else
+                msg_alert "\033[31m$DNS_CORE_UNSUPPORTED\033[0m"
+            fi
+            ;;
+        3)
+            dns_mod=redir_host
+            setconfig dns_mod "$dns_mod"
+            msg_alert "\033[36m$DNS_SET_OK：$dns_mod\033[0m"
+            ;;
+        4)
+            while true; do
+                line_break
+                separator_line "="
+                if [ "$dns_protect" = ON ]; then
+                    content_line "当前\033[33m已启用\033[0mDNS防泄漏，是否确认禁用？"
+                else
+                    content_line "当前\033[33m已禁用\033[0mDNS防泄漏，是否确认启用？"
+                fi
+                separator_line "="
+                btm_box "1) 是" \
+                    "2) 重置为默认值" \
+                    "0) 否，返回上级菜单"
+                read -r -p "$COMMON_INPUT> " num
+                case "$num" in
+                0)
+                    break
+                    ;;
+                1)
+                    if [ "$dns_protect" = ON ]; then
+                        dns_protect=OFF
+                    else
+                        dns_protect=ON
+                    fi
+                    ;;
+                2)
+                    dns_protect=ON
+                    ;;
+                *)
+                    errornum
+                    continue
+                    ;;
+                esac
+                setconfig dns_protect "$dns_protect"
+                common_success
+            done
+            ;;
+        5)
+            while true; do
+                line_break
+                separator_line "="
+                if [ "$hosts_opt" = ON ]; then
+                    content_line "当前\033[33m已启用\033[0mHosts优化，是否确认禁用？"
+                else
+                    content_line "当前\033[33m已禁用\033[0mHosts优化，是否确认启用？"
+                fi
+                separator_line "="
+                btm_box "1) 是" \
+                    "2) 重置为默认值" \
+                    "0) 否，返回上级菜单"
+                read -r -p "$COMMON_INPUT> " num
+                case "$num" in
+                0)
+                    break
+                    ;;
+                1)
+                    if [ "$hosts_opt" = ON ]; then
+                        hosts_opt=OFF
+                    else
+                        hosts_opt=ON
+                    fi
+                    ;;
+                2)
+                    hosts_opt=ON
+                    ;;
+                *)
+                    errornum
+                    continue
+                    ;;
+                esac
+                setconfig dns_protect "$hosts_opt"
+                common_success
+            done
+            ;;
+        6)
+
+            while true; do
+                line_break
+                separator_line "="
+                if [ "$ecs_subnet" = ON ]; then
+                    content_line "当前\033[33m已启用\033[0mHosts优化，是否确认禁用？"
+                else
+                    content_line "当前\033[33m已禁用\033[0mHosts优化，是否确认启用？"
+                fi
+                separator_line "="
+                btm_box "1) 是" \
+                    "2) 重置为默认值" \
+                    "0) 否，返回上级菜单"
+                read -r -p "$COMMON_INPUT> " num
+                case "$num" in
+                0)
+                    break
+                    ;;
+                1)
+                    if [ "$ecs_subnet" = ON ]; then
+                        ecs_subnet=OFF
+                    else
+                        ecs_subnet=ON
+                    fi
+                    ;;
+                2)
+                    ecs_subnet=OFF
+                    ;;
+                *)
+                    errornum
+                    continue
+                    ;;
+                esac
+                setconfig dns_protect "$ecs_subnet"
+                common_success
+            done
+            ;;
+        7)
+            while true; do
+                comp_box "\033[31m$DNS_REDIR_WARN\033[0m" \
+                    "\033[33m$DNS_REDIR_HINT 127.0.0.1:$dns_port\033[0m" \
+                    "" \
+                    "\033[36m请直接输入旁路由IPV4地址\033[0m" \
+                    "或输入 r 重置DNS劫持端口" \
+                    "或输入 0 返回上级菜单"
+                read -r -p "请输入> " num
+                case "$num" in
+                0)
+                    break
+                    ;;
+                r)
+                    dns_redir_port="$dns_port"
+                    setconfig dns_redir_port
+                    common_success
+                    break
+                    ;;
+                *)
+                    if [ "$num" -ge 1 ] && [ "$num" -lt 65535 ]; then
+                        if ckcmd netstat && netstat -ntul | grep -q ":$num "; then
+                            dns_redir_port="$num"
+                            setconfig dns_redir_port "$dns_redir_port"
+                            common_success
+                            break
+                        else
+                            msg_alert
+                        fi
+                    else
+                        errornum
+                    fi
+                    ;;
+                esac
+            done
+            ;;
+        8)
+            fake_ip_filter
+            ;;
+        9)
+            set_dns_adv
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}
+
+fake_ip_filter() {
+    while true; do
+        comp_box "\033[32m$DNS_FAKEIP_DESC\033[0m" \
+            "\033[31m$DNS_FAKEIP_TIP\033[0m" \
+            "\033[36m$DNS_FAKEIP_EXAMPLE\033[0m"
+        if [ -s "$CRASHDIR/configs/fake_ip_filter" ]; then
+            content_line "\033[33m$DNS_FAKEIP_EXIST\033[0m"
+            content_line ""
+            awk '{print NR") "$1}' "$CRASHDIR/configs/fake_ip_filter" |
+                while IFS= read -r line; do
+                    content_line "$line"
+                done
+        else
+            content_line "\033[33m$DNS_FAKEIP_EMPTY\033[0m"
+        fi
+        btm_box "" \
+            "0) 返回上级菜单"
+        read -r -p "$DNS_FAKEIP_EDIT> " input
+        case "$input" in
+        "" | 0)
+            break
+            ;;
+        *)
+            if [ "$input" -ge 1 ] 2>/dev/null; then
+                if sed -i "${input}d" "$CRASHDIR/configs/fake_ip_filter"; then
+                    msg_alert "\033[32m移除成功\033[0m"
+                else
+                    msg_alert "\033[31m移除失败\033[0m"
+                fi
+            else
+                comp_box "请确认需要添加的地址：\033[32m$input\033[0m"
+                btm_box "1) 确认无误" \
+                    "0) 返回上级菜单"
+                read -r -p "$COMMON_INPUT>" res
+                if [ "$res" = 1 ]; then
+                    if echo "$input" >>"$CRASHDIR/configs/fake_ip_filter"; then
+                        msg_alert "\033[32m添加成功\033[0m"
+                    else
+                        msg_alert "\033[31m添加失败\033[0m"
+                    fi
+                else
+                    break
+                fi
+            fi
+            ;;
+        esac
+    done
+}
+
+# DNS详细设置
+set_dns_adv() {
+    while true; do
+        comp_box "\033[31m$DNS_ADV_SINGBOX_LIMIT\033[0m" \
+            "$DNS_ADV_SPLIT" \
+            "\033[33m$DNS_ADV_CERT\033[0m" \
+            "" \
+            "DIRECT-DNS：" \
+            "\033[32m$dns_nameserver\033[0m" \
+            "" \
+            "PROXY-DNS：" \
+            "\033[36m$dns_fallback\033[0m" \
+            "" \
+            "DEFAULT-DNS：" \
+            "\033[33m$dns_resolver\033[0m" \
+            ""
+        btm_box "1) $DNS_ADV_EDIT_DIRECT" \
+            "2) $DNS_ADV_EDIT_PROXY" \
+            "3) $DNS_ADV_EDIT_DEFAULT" \
+            "4) \033[32m$DNS_ADV_AUTO_ENCRYPT\033[0m" \
+            "9) \033[33m$DNS_ADV_RESET\033[0m" \
+            "" \
+            "0) $COMMON_BACK"
+        read -r -p "$COMMON_INPUT> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        1)
+            comp_box "当前DIRECT-DNS：\033[32m$dns_nameserver\033[0m"
+            btm_box "\033[36m请直接输入新的DIRECT-DNS地址\033[0m" \
+                "或输入 r 重置DIRECT-DNS地址" \
+                "或输入 0 返回上级菜单"
+            read -r -p "请输入> " res
+            case "$res" in
+            0)
+                continue
+                ;;
+            r)
+                dns_nameserver="127.0.0.1"
+                setconfig dns_nameserver "'$dns_nameserver'"
+                common_success
+                ;;
+            *)
+                dns_nameserver=$(echo "$res" | sed 's#|#,\ #g')
+                if [ -n "$dns_nameserver" ]; then
+                    setconfig dns_nameserver "'$dns_nameserver'"
+                    common_success
+                else
+                    common_failed
+                fi
+                ;;
+            esac
+            ;;
+        2)
+            comp_box "当前PROXY-DNS：\033[32m$dns_fallback\033[0m"
+            btm_box "\033[36m请直接输入新的PROXY-DNS地址\033[0m" \
+                "或输入 r 重置PROXY-DNS地址" \
+                "或输入 0 返回上级菜单"
+            read -r -p "请输入> " res
+            case "$res" in
+            0)
+                continue
+                ;;
+            r)
+                dns_fallback="1.1.1.1, 8.8.8.8"
+                setconfig dns_fallback "'$dns_fallback'"
+                common_success
+                ;;
+            *)
+                dns_fallback=$(echo "$res" | sed 's#|#,\ #g')
+                if [ -n "$dns_fallback" ]; then
+                    setconfig dns_fallback "'$dns_fallback'"
+                    common_success
+                else
+                    common_failed
+                fi
+                ;;
+            esac
+            ;;
+        3)
+            comp_box "当前DEFAULT-DNS：\033[32m$dns_resolver\033[0m"
+            btm_box "\033[36m请直接输入新的DEFAULT-DNS地址\033[0m" \
+                "或输入 r 重置DEFAULT-DNS地址" \
+                "或输入 0 返回上级菜单"
+            separator_line "="
+            read -r -p "请输入> " res
+            case "$res" in
+            0)
+                continue
+                ;;
+            "r")
+                dns_resolver="223.5.5.5, 2400:3200::1"
+                setconfig dns_resolver "'$dns_resolver'"
+                common_failed
+                ;;
+            *)
+                if echo "$res" | grep -qE '://.*::'; then
+                    msg_alert "\033[31m$DNS_IPV6_NOT_SUPPORT\033[0m"
+                else
+                    dns_resolver=$(echo "$res" | sed 's#|#,\ #g')
+                    setconfig dns_resolver "'$dns_resolver'"
+                    msg_alert "\033[32m$COMMON_SUCCESS\033[0m"
+                fi
+                ;;
+            esac
+            ;;
+        4)
+            line_break
+            separator_line "="
+            if echo "$crashcore" | grep -qE 'meta|singbox'; then
+                dns_nameserver='https://dns.alidns.com/dns-query, https://doh.pub/dns-query'
+                dns_fallback='https://cloudflare-dns.com/dns-query, https://dns.google/dns-query, https://doh.opendns.com/dns-query'
+                dns_resolver='https://223.5.5.5/dns-query, 2400:3200::1'
+                setconfig dns_nameserver "'$dns_nameserver'"
+                setconfig dns_fallback "'$dns_fallback'"
+                setconfig dns_resolver "'$dns_resolver'"
+                content_line "\033[32m$DNS_ENCRYPT_OK\033[0m"
+            else
+                content_line "\033[31m$DNS_CORE_REQUIRE\033[0m"
+            fi
+            separator_line "="
+            ;;
+        9)
+            setconfig dns_nameserver
+            setconfig dns_fallback
+            setconfig dns_resolver
+            . "$CRASHDIR/libs/get_config.sh"
+            common_success
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}

scripts/menus/fw_filter.sh

@@ -0,0 +1,502 @@
+#!/bin/sh
+# Copyright (C) Juewuy
+
+[ -n "$__IS_MODULE_FW_FILTER_LOADED" ] && return
+__IS_MODULE_FW_FILTER_LOADED=1
+
+# 流量过滤
+set_fw_filter() {
+    while true; do
+        [ -z "$common_ports" ] && common_ports=ON
+        [ -z "$quic_rj" ] && quic_rj=OFF
+        [ -z "$cn_ip_route" ] && cn_ip_route=OFF
+        touch "$CRASHDIR"/configs/mac "$CRASHDIR"/configs/ip_filter
+        [ -z "$(cat "$CRASHDIR"/configs/mac "$CRASHDIR"/configs/ip_filter 2>/dev/null)" ] && mac_return=OFF || mac_return=ON
+        comp_box "1) 过滤非常用端口： 	\033[36m$common_ports\033[0m	———用于过滤P2P流量" \
+            "2) 过滤局域网设备：	\033[36m$mac_return\033[0m	———使用黑/白名单进行过滤" \
+            "3) 过滤QUIC协议：	\033[36m$quic_rj\033[0m	———优化视频性能" \
+            "4) 过滤CN_IP(4&6)列表：\033[36m$cn_ip_route\033[0m	———优化性能" \
+            "5) 自定义透明路由ipv4网段：适合vlan等复杂网络环境" \
+            "6) 自定义保留地址ipv4网段：需要以保留地址为访问目标的环境" \
+            "" \
+            "0) $COMMON_BACK"
+        read -r -p "$COMMON_INPUT> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        1)
+            if [ -n "$(pidof CrashCore)" ] && [ "$firewall_mod" = 'iptables' ]; then
+                comp_box "切换时将停止服务，是否继续："
+                btm_box "1) 是" \
+                    "0) 否，返回上级菜单"
+                read -r -p "$COMMON_INPUT> " res
+                [ "$res" = 1 ] && "$CRASHDIR"/start.sh stop && set_common_ports
+            else
+                set_common_ports
+            fi
+            ;;
+        2)
+            checkcfg_mac=$(cat "$CRASHDIR"/configs/mac)
+            fw_filter_lan
+            if [ -n "$PID" ]; then
+                checkcfg_mac_new=$(cat "$CRASHDIR"/configs/mac)
+                [ "$checkcfg_mac" != "$checkcfg_mac_new" ] && checkrestart
+            fi
+            ;;
+        3)
+            if [ "$quic_rj" = "OFF" ]; then
+                quic_rj=ON
+                msg_alert "\033[33m已禁止QUIC流量通过ShellCrash内核！\033[0m"
+            else
+                quic_rj=OFF
+                msg_alert "\033[33m已取消禁止QUIC协议流量！\033[0m"
+            fi
+            setconfig quic_rj $quic_rj
+            ;;
+        4)
+            if [ -n "$(ipset -v 2>/dev/null)" ] || [ "$firewall_mod" = 'nftables' ]; then
+                if [ "$cn_ip_route" = "OFF" ]; then
+                    cn_ip_route=ON
+                    msg_alert -t 2 "\033[32m已开启CN_IP绕过内核功能！\033[0m" \
+                        "\033[31m注意：此功能会导致全局模式及一切CN相关规则失效！\033[0m"
+                else
+                    cn_ip_route=OFF
+                    msg_alert "\033[33m已禁用CN_IP绕过内核功能！\033[0m"
+                fi
+                setconfig cn_ip_route $cn_ip_route
+            else
+                msg_alert "\033[31m当前设备缺少ipset模块或未使用nftables模式，无法启用绕过功能！\033[0m"
+            fi
+            ;;
+        5)
+            set_cust_host_ipv4
+            ;;
+        6)
+            set_reserve_ipv4
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}
+
+set_common_ports() {
+    while true; do
+        [ -z "$multiport" ] && multiport='22,80,443,8080,8443'
+        line_break
+        separator_line "="
+        content_line "\033[31m注意：\n\033[0mMIX模式下，所有fake-ip来源的非常用端口流量不会被过滤"
+        if [ -n "$common_ports" ]; then
+            content_line ""
+            content_line "当前已放行端口：\033[36m$multiport\033[0m"
+        fi
+        separator_line "="
+        btm_box "1) 启用/关闭端口过滤:	\033[36m$common_ports\033[0m" \
+            "2) 添加放行端口" \
+            "3) 移除指定放行端口" \
+            "4) 重置默认放行端口" \
+            "5) 重置为旧版放行端口" \
+            "" \
+            "0) $COMMON_BACK"
+        read -r -p "$COMMON_INPUT> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        1)
+            if [ "$common_ports" = ON ]; then
+                common_ports=OFF
+            else
+                common_ports=ON
+            fi
+
+            if setconfig common_ports "$common_ports"; then
+                msg_alert "\033[32m$COMMON_SUCCESS\033[0m"
+            else
+                msg_alert "\033[31m$COMMON_FAILED\033[0m"
+            fi
+            ;;
+        2)
+            while true; do
+                port_count=$(echo "$multiport" | awk -F',' '{print NF}')
+                if [ "$port_count" -ge 15 ]; then
+                    comp_box "\033[31m最多支持设置放行15个端口，请先减少一些！\033[0m"
+                else
+                    comp_box "当前已放行端口：\033[36m$multiport\033[0m"
+                    btm_box "\033[36m请直接输入要放行的端口号\033[0m\n（每次只能输入一个端口号，切勿一次添加多个端口号）" \
+                        "或输入 0 返回上级菜单"
+                    read -r -p "请输入> " port
+                    if [ "$port" = 0 ]; then
+                        break
+                    elif echo ",$multiport," | grep -q ",$port,"; then
+                        msg_alert "\033[31m输入错误！请勿重复添加！\033[0m"
+                    elif [ "$port" -lt 1 ] || [ "$port" -gt 65535 ]; then
+                        msg_alert "\033[31m输入错误！请输入正确的数值（1～65535）！\033[0m"
+                    else
+                        multiport=$(echo "$multiport,$port" | sed "s/^,//")
+
+                        if setconfig multiport "$multiport"; then
+                            msg_alert "\033[32m$COMMON_SUCCESS\033[0m"
+                        else
+                            msg_alert "\033[31m$COMMON_FAILED\033[0m"
+                        fi
+                    fi
+                fi
+            done
+            ;;
+        3)
+            while true; do
+                comp_box "当前已放行端口：\033[36m$multiport\033[0m"
+                btm_box "\033[36m请直接输入要移除的端口号\033[0m\n（每次只能输入一个端口号，切勿一次添加多个端口号）" \
+                    "或输入 0 返回上级菜单"
+                read -r -p "请输入> " port
+                if [ "$port" = 0 ]; then
+                    break
+                elif echo ",$multiport," | grep -q ",$port,"; then
+                    if [ "$port" -lt 1 ] || [ "$port" -gt 65535 ]; then
+                        msg_alert "\033[31m输入错误！请输入正确的数值（1～65535）！\033[0m"
+                    else
+                        multiport=$(echo ",$multiport," | sed "s/,$port//; s/^,//; s/,$//")
+                        if setconfig multiport "$multiport"; then
+                            msg_alert "\033[32m$COMMON_SUCCESS\033[0m"
+                        else
+                            msg_alert "\033[31m$COMMON_FAILED\033[0m"
+                        fi
+                    fi
+                else
+                    msg_alert "\033[31m输入错误！请输入已添加过的端口！\033[0m"
+                fi
+            done
+            ;;
+        4)
+            multiport=''
+            if setconfig multiport; then
+                msg_alert "\033[32m$COMMON_SUCCESS\033[0m"
+            else
+                msg_alert "\033[31m$COMMON_FAILED\033[0m"
+            fi
+            ;;
+        5)
+            multiport='22,80,143,194,443,465,587,853,993,995,5222,8080,8443'
+            if setconfig multiport "$multiport"; then
+                msg_alert "\033[32m$COMMON_SUCCESS\033[0m"
+            else
+                msg_alert "\033[31m$COMMON_FAILED\033[0m"
+            fi
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}
+
+# 自定义ipv4透明路由、保留地址网段
+set_cust_host_ipv4() {
+    while true; do
+        [ -z "$replace_default_host_ipv4" ] && replace_default_host_ipv4="OFF"
+        . "$CRASHDIR"/starts/fw_getlanip.sh && getlanip
+        comp_box "当前默认透明路由的网段为：\033[32m$host_ipv4\033[0m" \
+            "当前已添加的自定义网段为：\033[36m$cust_host_ipv4\033[0m"
+        btm_box "1) 移除所有自定义网段" \
+            "2) 使用自定义网段覆盖默认网段	\033[36m$replace_default_host_ipv4\033[0m" \
+            "" \
+            "0) $COMMON_BACK"
+        read -r -p "请输入对应的序号或需要额外添加的网段> " text
+        case "$text" in
+        "" | 0)
+            break
+            ;;
+        1)
+            unset cust_host_ipv4
+            if setconfig cust_host_ipv4; then
+                msg_alert "\033[32m$COMMON_SUCCESS\033[0m"
+            else
+                msg_alert "\033[31m$COMMON_FAILED\033[0m"
+            fi
+            ;;
+        2)
+            if [ "$replace_default_host_ipv4" = "OFF" ]; then
+                replace_default_host_ipv4="ON"
+            else
+                replace_default_host_ipv4="OFF"
+            fi
+
+            if setconfig replace_default_host_ipv4 "$replace_default_host_ipv4"; then
+                msg_alert "\033[32m$COMMON_SUCCESS\033[0m"
+            else
+                msg_alert "\033[31m$COMMON_FAILED\033[0m"
+            fi
+            ;;
+        *)
+            if echo "$text" | grep -Eq '^([0-9]{1,3}\.){3}[0-9]{1,3}/[0-9]{1,2}' && [ -z "$(echo $cust_host_ipv4 | grep "$text")" ]; then
+                cust_host_ipv4="$cust_host_ipv4 $text"
+                if setconfig cust_host_ipv4 "'$cust_host_ipv4'"; then
+                    msg_alert "\033[32m$COMMON_SUCCESS\033[0m"
+                else
+                    msg_alert "\033[31m$COMMON_FAILED\033[0m"
+                fi
+            else
+                msg_alert "\033[31m请输入正确的网段地址！\033[0m"
+            fi
+            ;;
+        esac
+    done
+}
+
+set_reserve_ipv4() {
+    while true; do
+        [ -z "$reserve_ipv4" ] && reserve_ipv4="0.0.0.0/8 10.0.0.0/8 127.0.0.0/8 100.64.0.0/10 169.254.0.0/16 172.16.0.0/12 192.168.0.0/16 224.0.0.0/4 240.0.0.0/4"
+        comp_box "\033[33m注意：地址必须是空格分隔，错误的设置可能导致网络回环或启动报错，请务必谨慎！\033[0m" \
+            "" \
+            "当前网段：" \
+            "\033[36m$reserve_ipv4\033[0m"
+        btm_box "\033[36m请直接输入自定义保留地址ipv4网段\033[0m" \
+            "或输入 1 重置默认网段" \
+            "或输入 0 返回上级菜单"
+        read -r -p "请输入> " text
+        case "$text" in
+        "" | 0)
+            break
+            ;;
+        1)
+            unset reserve_ipv4
+            if setconfig reserve_ipv4; then
+                msg_alert "\033[32m$COMMON_SUCCESS\033[0m"
+            else
+                msg_alert "\033[31m$COMMON_FAILED\033[0m"
+            fi
+            ;;
+        *)
+            if echo "$text" | grep -Eq "(((25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])\.){3}(25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])/(3[0-2]|[1-2]?[0-9]))( +|$)+"; then
+                reserve_ipv4="$text"
+                if setconfig reserve_ipv4 "'$reserve_ipv4'"; then
+                    msg_alert "已将保留地址网段设为：\033[32m$reserve_ipv4\033[0m"
+                else
+                    msg_alert "\033[31m$COMMON_FAILED\033[0m"
+                fi
+            else
+                msg_alert "\033[31m输入有误，请重新输入！\033[0m"
+            fi
+            ;;
+        esac
+    done
+}
+
+# 局域网设备过滤
+fw_filter_lan() {
+    get_devinfo() {
+        dev_ip=$(cat "$dhcpdir" | grep " $dev " | awk '{print $3}') && [ -z "$dev_ip" ] && dev_ip=$dev
+        dev_mac=$(cat "$dhcpdir" | grep " $dev " | awk '{print $2}') && [ -z "$dev_mac" ] && dev_mac=$dev
+        dev_name=$(cat "$dhcpdir" | grep " $dev " | awk '{print $4}') && [ -z "$dev_name" ] && dev_name='未知设备'
+    }
+    add_mac() {
+        while true; do
+            comp_box "手动输入mac地址时仅支持\033[32mxx:xx:xx:xx:xx:xx\033[0m的形式"
+            content_line "已添加的mac地址："
+            content_line ""
+            if [ -s "$CRASHDIR/configs/mac" ]; then
+                while IFS= read -r line; do
+                    content_line "$line"
+                done <"$CRASHDIR/configs/mac"
+            else
+                content_line "暫未添加任何mac地址"
+            fi
+            separator_line "="
+            content_line "序号   \033[33m设备IP       设备mac地址       设备名称\033[0m"
+            if [ -s "$dhcpdir" ]; then
+                awk '{print NR") "$3,$2,$4}' "$dhcpdir" |
+                    while IFS= read -r line; do
+                        content_line "$line"
+                    done
+            else
+                content_line "无纪录"
+            fi
+            btm_box "" \
+                "0) $COMMON_BACK"
+            read -r -p "请输入对应序号或直接输入mac地址> " num
+            if [ -z "$num" ] || [ "$num" = 0 ]; then
+                i=
+                break
+            elif echo "$num" | grep -aEq '^([0-9A-Fa-f]{2}[:]){5}([0-9A-Fa-f]{2})$'; then
+                if [ -z "$(cat "$CRASHDIR"/configs/mac | grep -E "$num")" ]; then
+                    echo "$num" | grep -oE '^([0-9A-Fa-f]{2}[:]){5}([0-9A-Fa-f]{2})$' >>"$CRASHDIR"/configs/mac
+                else
+                    msg_alert "\033[31m已添加的设备，请勿重复添加！\033[0m"
+                fi
+            elif [ "$num" -le $(cat $dhcpdir 2>/dev/null | awk 'END{print NR}') ]; then
+                macadd=$(cat "$dhcpdir" | awk '{print $2}' | sed -n "$num"p)
+                if [ -z "$(cat "$CRASHDIR"/configs/mac | grep -E "$macadd")" ]; then
+                    echo "$macadd" >>"$CRASHDIR"/configs/mac
+                else
+                    msg_alert "\033[31m已添加的设备，请勿重复添加！\033[0m"
+                fi
+            else
+                msg_alert "\033[31m输入有误，请重新输入！\033[0m"
+            fi
+        done
+    }
+
+    add_ip() {
+        while true; do
+            comp_box "手动输入时仅支持 \033[32m192.168.1.0/24\033[0m 或 \033[32m192.168.1.0\033[0m 的形式" \
+                "不支持ipv6地址过滤，可能导致过滤失败，建议使用mac地址过滤"
+            content_line "已添加的IP地址（段）："
+            content_line ""
+            if [ -s "$CRASHDIR/configs/ip_filter" ]; then
+                while IFS= read -r line; do
+                    content_line "$line"
+                done <"$CRASHDIR/configs/ip_filter"
+            else
+                content_line "暫未添加任何IP地址（段）"
+            fi
+
+            separator_line "="
+            content_line "\033[33m序号   设备IP     设备名称\033[32m"
+            if [ -s "$dhcpdir" ]; then
+                awk '{print NR") "$3, $4}' "$dhcpdir" |
+                    while IFS= read -r line; do
+                        content_line "$line"
+                    done
+            else
+                content_line "无纪录"
+            fi
+            btm_box "" \
+                "0) $COMMON_BACK"
+            read -r -p "请输入对应序号或直接输入IP地址段> " num
+            if [ -z "$num" ] || [ "$num" = 0 ]; then
+                i=
+                break
+            elif echo "$num" | grep -aEq '^((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)(/(3[0-2]|[12]?[0-9]))?$'; then
+                if [ -z "$(cat "$CRASHDIR"/configs/ip_filter | grep -E "$num")" ]; then
+                    echo "$num" | grep -oE '^((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)(/(3[0-2]|[12]?[0-9]))?$' >>"$CRASHDIR"/configs/ip_filter
+                else
+                    msg_alert "\033[31m已添加的地址，请勿重复添加！\033[0m"
+                fi
+            elif [ "$num" -le "$(cat "$dhcpdir" 2>/dev/null | awk 'END{print NR}')" ]; then
+                ipadd=$(cat "$dhcpdir" | awk '{print $3}' | sed -n "$num"p)
+                if [ -z "$(cat "$CRASHDIR"/configs/mac | grep -E "$ipadd")" ]; then
+                    echo "$ipadd" >>"$CRASHDIR"/configs/ip_filter
+                else
+                    msg_alert "\033[31m已添加的地址，请勿重复添加！\033[0m"
+                fi
+            else
+                msg_alert "\033[31m输入有误，请重新输入！\033[0m"
+            fi
+        done
+    }
+
+    del_all() {
+        while true; do
+            if [ -z "$(cat "$CRASHDIR"/configs/mac "$CRASHDIR"/configs/ip_filter 2>/dev/null)" ]; then
+                msg_alert "\033[31m列表中没有需要移除的设备！\033[0m"
+                break
+            else
+                comp_box "请选择需要移除的设备："
+                content_line "      \033[32m设备IP             \033[36m设备mac地址     \033[35m设备名称\033[0m"
+                i=1
+                for dev in $(cat "$CRASHDIR"/configs/mac "$CRASHDIR"/configs/ip_filter 2>/dev/null); do
+                    get_devinfo
+                    content_line "$(printf "%s) \033[32m%-18s \033[36m%-18s \033[35m%s\033[0m" \
+                        "$i" "$dev_ip" "$dev_mac" "$dev_name")"
+                    i=$((i + 1))
+                done
+                btm_box "" \
+                    "0) $COMMON_BACK"
+                read -r -p "$COMMON_INPUT> " num
+                mac_filter_rows=$(cat "$CRASHDIR"/configs/mac 2>/dev/null | wc -l)
+                ip_filter_rows=$(cat "$CRASHDIR"/configs/ip_filter 2>/dev/null | wc -l)
+                if [ -z "$num" ] || [ "$num" -le 0 ]; then
+                    n=
+                    break
+                elif [ "$num" -le "$mac_filter_rows" ]; then
+                    sed -i "${num}d" "$CRASHDIR"/configs/mac
+                    msg_alert "\033[32m对应设备已移除！\033[0m"
+                elif [ "$num" -le $((mac_filter_rows + ip_filter_rows)) ]; then
+                    num=$((num - mac_filter_rows))
+                    sed -i "${num}d" "$CRASHDIR"/configs/ip_filter
+                    msg_alert "\033[32m对应设备已移除！\033[0m"
+                else
+                    msg_alert "\033[31m输入有误，请重新输入！\033[0m"
+                fi
+            fi
+        done
+    }
+
+    while true; do
+        [ -z "$dhcpdir" ] && [ -f /var/lib/dhcp/dhcpd.leases ] && dhcpdir='/var/lib/dhcp/dhcpd.leases'
+        [ -z "$dhcpdir" ] && [ -f /var/lib/dhcpd/dhcpd.leases ] && dhcpdir='/var/lib/dhcpd/dhcpd.leases'
+        [ -z "$dhcpdir" ] && [ -f /tmp/dhcp.leases ] && dhcpdir='/tmp/dhcp.leases'
+        [ -z "$dhcpdir" ] && [ -f /tmp/dnsmasq.leases ] && dhcpdir='/tmp/dnsmasq.leases'
+        [ -z "$dhcpdir" ] && dhcpdir='/dev/null'
+        [ -z "$macfilter_type" ] && macfilter_type='黑名单'
+        if [ "$macfilter_type" = "黑名单" ]; then
+            fw_filter_lan_over='白名单'
+            fw_filter_lan_scrip='不'
+        else
+            fw_filter_lan_over='黑名单'
+            fw_filter_lan_scrip=''
+        fi
+
+        comp_box "\033[30;47m请在此添加或移除设备\033[0m" \
+            "" \
+            "当前过滤方式为：\033[33m$macfilter_type模式\033[0m" \
+            "仅列表内设备流量\033[36m$fw_filter_lan_scrip经过\033[0m内核"
+        if [ -n "$(cat "$CRASHDIR"/configs/mac)" ]; then
+            content_line "当前已过滤设备为："
+            content_line ""
+            content_line "  \033[36m设备mac/ip地址\033[0m     \033[35m设备名称\033[0m"
+            for dev in $(cat "$CRASHDIR"/configs/mac 2>/dev/null); do
+                get_devinfo
+                content_line "$(printf "\033[36m%-20s \033[35m%s\033[0m" \
+                    "$dev_mac" "$dev_name")"
+            done
+            for dev in $(cat "$CRASHDIR"/configs/ip_filter 2>/dev/null); do
+                get_devinfo
+                content_line "$(printf "\033[36m%-20s \033[35m%s\033[0m" \
+                    "$dev_ip" "$dev_name")"
+            done
+            separator_line "="
+        fi
+        btm_box "1) 切换为\033[33m$fw_filter_lan_over模式\033[0m" \
+            "2) \033[32m添加指定设备（mac地址）\033[0m" \
+            "3) \033[32m添加指定设备（IP地址／网段）\033[0m" \
+            "4) \033[36m移除指定设备\033[0m" \
+            "9) \033[31m清空整个列表\033[0m" \
+            "" \
+            "0) $COMMON_BACK"
+        read -r -p "$COMMON_INPUT> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        1)
+            macfilter_type=$fw_filter_lan_over
+            if setconfig macfilter_type $macfilter_type; then
+                msg_alert "\033[32m已切换为$macfilter_type模式！\033[0m"
+            else
+                msg_alert "\033[31m$COMMON_FAILED\033[0m"
+            fi
+            ;;
+        2)
+            add_mac
+            ;;
+        3)
+            add_ip
+            ;;
+        4)
+            del_all
+            ;;
+        9)
+            : >"$CRASHDIR"/configs/mac
+            : >"$CRASHDIR"/configs/ip_filter
+            msg_alert "\033[31m设备列表已清空！\033[0m"
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}

scripts/menus/override.sh

@@ -0,0 +1,550 @@
+#!/bin/sh
+# Copyright (C) Juewuy
+
+[ -n "$__IS_MODULE_OVERRIDE" ] && return
+__IS_MODULE_OVERRIDE=1
+
+YAMLSDIR="$CRASHDIR"/yamls
+JSONSDIR="$CRASHDIR"/jsons
+
+# 配置文件覆写
+override() {
+    while true; do
+        [ -z "$rule_link" ] && rule_link=1
+        [ -z "$server_link" ] && server_link=1
+        comp_box "\033[30;47m 欢迎使用配置文件覆写功能！\033[0m"
+        content_line "2) 管理\033[36m自定义规则\033[0m"
+        echo "$crashcore" | grep -q 'singbox' || {
+            content_line "3) 管理\033[33m自定义节点\033[0m"
+            content_line "4) 管理\033[36m自定义策略组\033[0m"
+        }
+        content_line "5) \033[32m自定义\033[0m高级功能"
+        [ "$disoverride" != 1 ] && content_line "9) \033[33m禁用\033[0m配置文件覆写"
+        content_line ""
+        content_line "0) 返回上级菜单"
+        separator_line "="
+        read -r -p "请输入对应数字> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        2)
+            setrules
+            ;;
+        3)
+            setproxies
+            ;;
+        4)
+            setgroups
+            ;;
+        5)
+            if echo "$crashcore" | grep -q 'singbox'; then
+                set_singbox_adv
+            else
+                set_clash_adv
+            fi
+            sleep 3
+            ;;
+        9)
+            comp_box "\033[33m此功能可能会导致严重问题！启用后脚本中大部分功能都将禁用！！！\033[0m" \
+                "如果你不是非常了解$crashcore的运行机制，切勿开启！\033[0m" \
+                "\033[33m继续后如出现任何问题，请务必自行解决，一切提问恕不受理！\033[0m"
+            sleep 2
+            btm_box "1) 我确认遇到问题可以自行解决" \
+                "0) 返回上级菜单"
+            read -r -p "$COMMON_INPUT> " res
+            [ "$res" = '1' ] && {
+                disoverride=1
+                if setconfig disoverride $disoverride; then
+                    common_success
+                else
+                    common_failed
+                fi
+            }
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}
+
+# 自定义规则
+setrules() {
+    set_rule_type() {
+        comp_box "\033[33m请选择规则类型：\033[0m"
+        printf '%s\n' "$rule_type" |
+            awk '{for (i = 1; i <= NF; i++) print i") " $i}' |
+            while IFS= read -r line; do
+                content_line "$line"
+            done
+        btm_box "" \
+            "0) 返回上级菜单"
+        read -r -p "请输入对应数字> " num
+        case "$num" in
+        "" | 0) ;;
+        [0-9]*)
+            if [ "$num" -gt $(echo $rule_type | awk -F " " '{print NF}') ]; then
+                errornum
+            else
+                rule_type_set=$(echo "$rule_type" | cut -d' ' -f"$num")
+                comp_box "\033[33m请输入规则语句，\n可以是域名、泛域名、IP网段或者其他匹配规则类型的内容\033[0m"
+                read -r -p "请输入对应规则> " rule_state_set
+                if [ -n "$rule_state_set" ]; then
+                    set_group_type
+                else
+                    errornum
+                fi
+            fi
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    }
+
+    set_group_type() {
+        comp_box "\033[36m请选择具体规则\033[0m" \
+            "\033[33m此处规则读取自现有配置文件，如果你后续更换配置文件时运行出错，请尝试重新添加\033[0m"
+        printf '%s\n' "$rule_group" |
+            awk -F '#' '{for (i = 1; i <= NF; i++) print i") " $i}' |
+            while IFS= read -r line; do
+                content_line "$line"
+            done
+        btm_box "" \
+            "0) 返回上级菜单"
+        read -r -p "请输入对应数字> " num
+        case "$num" in
+        "" | 0) ;;
+        [0-9]*)
+            if [ "$num" -gt "$(echo "$rule_group" | awk -F "#" '{print NF}')" ]; then
+                errornum
+            else
+                rule_group_set=$(echo "$rule_group" | cut -d'#' -f"$num")
+                rule_all="- ${rule_type_set},${rule_state_set},${rule_group_set}"
+                echo "IP-CIDR SRC-IP-CIDR IP-CIDR6" | grep -q -- "$rule_type_set" && rule_all="${rule_all},no-resolve"
+                echo "$rule_all" >>"$YAMLSDIR"/rules.yaml
+                msg_alert "\033[32m添加成功！\033[0m"
+            fi
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    }
+
+    del_rule_type() {
+        while true; do
+            comp_box "输入对应数字即可移除相应规则："
+            sed -i '/^ *$/d; /^#/d' "$YAMLSDIR"/rules.yaml
+            awk -F '#' '!/^#/ {print NR") "$1 $2 $3}' "$YAMLSDIR/rules.yaml" |
+                while IFS= read -r line; do
+                    content_line "$line"
+                done
+            btm_box "" \
+                "0) 返回上级菜单"
+            read -r -p "请输入对应数字> " num
+            case "$num" in
+            "" | 0)
+                break
+                ;;
+            *)
+                if [ "$num" -le "$(wc -l <"$YAMLSDIR"/rules.yaml)" ]; then
+                    if sed -i "${num}d" "$YAMLSDIR"/rules.yaml; then
+                        common_success
+                    else
+                        common_failed
+                    fi
+                    sleep 1
+                else
+                    errornum
+                fi
+                ;;
+            esac
+        done
+    }
+
+    get_rule_group() {
+        . "$CRASHDIR"/libs/web_save.sh
+        get_save http://127.0.0.1:${db_port}/proxies | sed 's/:{/!/g' | awk -F '!' '{for(i=1;i<=NF;i++) print $i}' | grep -aE '"Selector|URLTest|LoadBalance"' | grep -aoE '"name":.*"now":".*",' | awk -F '"' '{print "#"$4}' | tr -d '\n'
+    }
+
+    while true; do
+        comp_box "\033[33m你可以在这里快捷管理自定义规则\033[0m" \
+            "如需批量操作，请手动编辑：\033[36m $YAMLSDIR/rules.yaml\033[0m" \
+            "\033[33msingbox和clash共用此处规则，可无缝切换！\033[0m" \
+            "大量规则请尽量使用rule-set功能添加，\n\033[31m此处过量添加可能导致启动卡顿！\033[0m"
+        content_line "1) 新增自定义规则"
+        content_line "2) 移除自定义规则"
+        content_line "3) 清空规则列表"
+        echo "$crashcore" | grep -q 'singbox' || content_line "4) 配置节点绕过：	\033[36m$proxies_bypass\033[0m"
+        content_line ""
+        content_line "0) 返回上级菜单"
+        separator_line "="
+        read -r -p "请输入对应数字> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        1)
+            rule_type="DOMAIN-SUFFIX DOMAIN-KEYWORD IP-CIDR SRC-IP-CIDR DST-PORT SRC-PORT GEOIP GEOSITE IP-CIDR6 DOMAIN PROCESS-NAME"
+            rule_group="DIRECT#REJECT$(get_rule_group)"
+            set_rule_type
+            ;;
+        2)
+            if [ -s "$YAMLSDIR"/rules.yaml ]; then
+                del_rule_type
+            else
+                msg_alert "请先添加自定义规则！"
+            fi
+            ;;
+        3)
+            comp_box "是否确认清空全部自定义规则？"
+            btm_box "1) 是" \
+                "0) 否，返回上级菜单"
+            read -r -p "$COMMON_INPUT> " res
+            if [ "$res" = "1" ]; then
+                if sed -i '/^\s*[^#]/d' "$YAMLSDIR"/rules.yaml; then
+                    common_success
+                else
+                    common_failed
+                fi
+            fi
+            ;;
+        4)
+            if [ "$proxies_bypass" = "OFF" ]; then
+                comp_box "\033[33m本功能会自动将当前配置文件中的节点域名或IP设置为直连规则以防止出现双重流量！\033[0m" \
+                    "\033[33m请确保下游设备使用的节点与ShellCrash中使用的节点相同，否则无法生效！\033[0m" \
+                    "" \
+                    "是否启用节点绕过？"
+                btm_box
+                "1) 是" \
+                    "0) 否，返回上级菜单"
+                read -r -p "$COMMON_INPUT> " res
+                if [ "$res" = "1" ]; then
+                    proxies_bypass=ON
+                else
+                    continue
+                fi
+            else
+                proxies_bypass=OFF
+            fi
+
+            if setconfig proxies_bypass "$proxies_bypass"; then
+                common_success
+            else
+                common_failed
+            fi
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}
+
+# 自定义clash策略组
+setgroups() {
+    set_group_type() {
+        comp_box "\033[33m注意策略组名称必须和【自定义规则】或【自定义节点】功能中指定的策略组一致！\033[0m" \
+            "\033[33m建议先创建策略组，之后可在【自定义规则】或【自定义节点】功能中智能指定\033[0m" \
+            "\033[33m如需在当前策略组下添加节点，请手动编辑$YAMLSDIR/proxy-groups.yaml\033[0m"
+        btm_box "\033[36m请直接输入自定义策略组名称\033[0m\n（不支持纯数字且不要包含特殊字符！）" \
+            "或输入 0 返回上级菜单"
+        read -r -p "请输入> " new_group_name
+
+        comp_box "\033[32m请选择策略组【$new_group_name】的类型：\033[0m"
+        printf '%s\n' "$group_type_cn" |
+            awk '{for (i = 1; i <= NF; i++) print i") " $i}' |
+            while IFS= read -r line; do
+                content_line "$line"
+            done
+        separator_line "="
+        read -r -p "请输入对应数字> " num
+        new_group_type=$(echo "$group_type" | awk '{print $'"$num"'}')
+        if [ "$num" = "1" ]; then
+            unset new_group_url interval
+        else
+            comp_box "请输入测速地址" \
+                "或直接回车使用默认地址：https://www.gstatic.com/generate_204"
+            read -r -p "请输入> " new_group_url
+            [ -z "$new_group_url" ] && new_group_url=https://www.gstatic.com/generate_204
+            new_group_url="url: '$new_group_url'"
+            interval="interval: 300"
+        fi
+        set_group_add
+        # 添加自定义策略组
+        cat >>"$YAMLSDIR"/proxy-groups.yaml <<EOF
+  - name: $new_group_name
+    type: $new_group_type
+    $new_group_url
+    $interval
+    proxies:
+     - DIRECT
+EOF
+        sed -i "/^ *$/d" "$YAMLSDIR"/proxy-groups.yaml
+        msg_alert "\033[32m添加成功！\033[0m"
+
+    }
+
+    set_group_add() {
+        comp_box "\033[36m请选择想要将本策略添加到的策略组\033[0m" \
+            "\033[32m如需添加到多个策略组，请一次性输入多个数字并用空格隔开\033[0m"
+        printf '%s\n' "$proxy_group" |
+            awk -F '#' '{for (i = 1; i <= NF; i++) print i") " $i}' |
+            while IFS= read -r line; do
+                content_line "$line"
+            done
+        content_line ""
+        content_line "0) 跳过添加"
+        separator_line "="
+        read -r -p "请输入对应数字（多个用空格分隔）> " char
+        case "$char" in
+        "" | 0) ;;
+        *)
+            for num in $char; do
+                rule_group_set=$(echo "$proxy_group" | cut -d'#' -f"$num")
+                rule_group_add="${rule_group_add}#${rule_group_set}"
+            done
+            if [ -n "$rule_group_add" ]; then
+                new_group_name="$new_group_name$rule_group_add"
+                unset rule_group_add
+            else
+                errornum
+            fi
+            ;;
+        esac
+    }
+
+    while true; do
+        comp_box "\033[33m你可以在这里快捷管理自定义策略组\033[0m" \
+            "\033[36m如需修改或批量操作，请手动编辑：$YAMLSDIR/proxy-groups.yaml\033[0m"
+        btm_box "1) 添加自定义策略组" \
+            "2) 查看自定义策略组" \
+            "3) 清空自定义策略组" \
+            "" \
+            "0) 返回上级菜单"
+        read -r -p "请输入对应数字> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        1)
+            group_type="select url-test fallback load-balance"
+            group_type_cn="手动选择 自动选择 故障转移 负载均衡"
+            proxy_group="$(cat "$YAMLSDIR"/proxy-groups.yaml "$YAMLSDIR"/config.yaml 2>/dev/null | sed "/#自定义策略组开始/,/#自定义策略组结束/d" | grep -Ev '^#' | grep -o '\- name:.*' | sed 's/#.*//' | sed 's/- name: /#/g' | tr -d '\n' | sed 's/#//')"
+            set_group_type
+            ;;
+        2)
+            line_break
+            echo "==========================================================="
+            cat "$YAMLSDIR"/proxy-groups.yaml
+            echo ""
+            echo "==========================================================="
+            ;;
+        3)
+            comp_box "是否确认清空全部自定义策略组？"
+            btm_box "1) 是" \
+                "0) 否，返回上级菜单"
+            read -r -p "$COMMON_INPUT> " res
+            if [ "$res" = "1" ]; then
+                if echo '#用于添加自定义策略组' >"$YAMLSDIR"/proxy-groups.yaml; then
+                    common_success
+                else
+                    common_failed
+                fi
+            fi
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}
+
+# 自定义clash节点
+setproxies() {
+
+    set_proxy_type() {
+        while true; do
+            comp_box "\033[33m注意\n节点格式必须是单行、不包括括号、“name:”为开头，例如：\033[0m" \
+                "\033[36m【name: \"test\", server: 192.168.1.1, port: 12345, type: socks5, udp: true】\033[0m" \
+                "更多写法请参考：\033[32mhttps://juewuy.github.io/\033[0m"
+            btm_box "\033[36m请直接输入自定义节点\033[0m" \
+                "或输入 0 返回上级菜单"
+            read -r -p "请输入> " proxy_state_set
+            if [ "$proxy_state_set" = 0 ]; then
+                break
+            elif echo "$proxy_state_set" | grep -q "#"; then
+                msg_alert "\033[33m绝对禁止包含【#】号！\033[0m"
+            elif echo "$proxy_state_set" | grep -Eq "^name:"; then
+                set_group_add
+            else
+                errornum
+            fi
+        done
+    }
+
+    set_group_add() {
+        comp_box "\033[36m请选择想要将节点添加到的策略组\033[0m" \
+            "\033[32m如需添加到多个策略组，请一次性输入多个数字并用空格隔开\033[0m" \
+            "\033[33m如需自定义策略组，请先使用【管理自定义策略组功能】添加\033[0m"
+        printf '%s\n' "$proxy_group" |
+            awk -F '#' '{for (i = 1; i <= NF; i++) print i") " $i}' |
+            while IFS= read -r line; do
+                content_line "$line"
+            done
+        btm_box "" \
+            "0) 返回上级菜单"
+        read -r -p "请输入对应数字（多个用空格分隔）> " char
+        case "$char" in
+        "" | 0) ;;
+        *)
+            for num in $char; do
+                rule_group_set=$(echo "$proxy_group" | cut -d'#' -f"$num")
+                rule_group_add="${rule_group_add}#${rule_group_set}"
+            done
+            if [ -n "$rule_group_add" ]; then
+                echo "- {$proxy_state_set}$rule_group_add" >>"$YAMLSDIR"/proxies.yaml
+                msg_alert "\033[32m添加成功！\033[0m"
+                unset rule_group_add
+            else
+                errornum
+            fi
+            ;;
+        esac
+    }
+
+    while true; do
+        comp_box "\033[33m你可以在这里快捷管理自定义节点\033[0m" \
+            "\033[36m如需批量操作，请手动编辑：$YAMLSDIR/proxies.yaml\033[0m"
+        btm_box "1) 添加自定义节点" \
+            "2) 管理自定义节点" \
+            "3) 清空自定义节点" \
+            "4) 配置节点绕过：	\033[36m$proxies_bypass\033[0m" \
+            "" \
+            "0) 返回上级菜单"
+        read -r -p "请输入对应数字> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        1)
+            proxy_type="DOMAIN-SUFFIX DOMAIN-KEYWORD IP-CIDR SRC-IP-CIDR DST-PORT SRC-PORT GEOIP GEOSITE IP-CIDR6 DOMAIN MATCH"
+            proxy_group="$(cat "$YAMLSDIR"/proxy-groups.yaml "$YAMLSDIR"/config.yaml 2>/dev/null | sed "/#自定义策略组开始/,/#自定义策略组结束/d" | grep -Ev '^#' | grep -o '\- name:.*' | sed 's/#.*//' | sed 's/- name: /#/g' | tr -d '\n' | sed 's/#//')"
+            set_proxy_type
+            ;;
+        2)
+            sed -i '/^ *$/d' "$YAMLSDIR"/proxies.yaml 2>/dev/null
+            if [ -s "$YAMLSDIR"/proxies.yaml ]; then
+                comp_box "\033[33m输入节点对应数字可以移除对应节点\033[0m" \
+                    "当前已添加的自定义节点为："
+                grep -Ev '^#' "$YAMLSDIR/proxies.yaml" |
+                    awk -F '[,}]' '{print NR") " $1 " " $NF}' |
+                    sed 's/- {//g' |
+                    while IFS= read -r line; do
+                        content_line "$line"
+                    done
+                btm_box "" \
+                    "0) 返回上级菜单"
+                read -r -p "请输入对应数字> " num
+                if [ "$num" = 0 ]; then
+                    continue
+                elif [ "$num" -le $(cat "$YAMLSDIR"/proxies.yaml | grep -Ev '^#' | wc -l) ]; then
+                    if sed -i "$num{/^\s*[^#]/d}" "$YAMLSDIR"/proxies.yaml; then
+                        common_success
+                    else
+                        common_failed
+                    fi
+                else
+                    errornum
+                fi
+            else
+                msg_alert "请先添加自定义节点！"
+            fi
+            ;;
+        3)
+            comp_box "是否确认清空全部自定义节点？"
+            btm_box "1) 是" \
+                "0) 否，返回上级菜单"
+            read -r -p "$COMMON_INPUT> " res
+            if [ "$res" = "1" ]; then
+                if sed -i '/^\s*[^#]/d' "$YAMLSDIR"/proxies.yaml 2>/dev/null; then
+                    common_success
+                else
+                    common_failed
+                fi
+            else
+                continue
+            fi
+            ;;
+        4)
+            if [ "$proxies_bypass" = "OFF" ]; then
+                comp_box "\033[33m本功能会自动将当前配置文件中的节点域名或IP设置为直连规则以防止出现双重流量！\033[0m" \
+                    "\033[33m请确保下游设备使用的节点与ShellCrash中使用的节点相同，否则无法生效！\033[0m" \
+                    "" \
+                    "是否确定启用节点绕过："
+                btm_box "1) 是" \
+                    "0) 否，返回上级菜单"
+                read -r -p "$COMMON_INPUT> " res
+                if [ "$res" = "1" ]; then
+                    proxies_bypass=ON
+                else
+                    continue
+                fi
+            else
+                proxies_bypass=OFF
+            fi
+            setconfig proxies_bypass "$proxies_bypass"
+            sleep 1
+            setrules
+            break
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}
+
+# 自定义clash高级规则
+set_clash_adv() {
+    [ ! -f "$YAMLSDIR"/user.yaml ] && cat >"$YAMLSDIR"/user.yaml <<EOF
+#用于编写自定义设定(可参考https://lancellc.gitbook.io/clash/clash-config-file/general 或 https://docs.metacubex.one/function/general)
+#端口之类请在脚本中修改，否则不会加载
+#port: 7890
+EOF
+    [ ! -f "$YAMLSDIR"/others.yaml ] && cat >"$YAMLSDIR"/others.yaml <<EOF
+#用于编写自定义的锚点、入站、proxy-providers、sub-rules、rule-set、script等功能
+#可参考 https://github.com/MetaCubeX/Clash.Meta/blob/Meta/docs/config.yaml 或 https://lancellc.gitbook.io/clash/clash-config-file/an-example-configuration-file
+#此处内容会被添加在配置文件的“proxy-group：”模块的末尾与“rules：”模块之前的位置
+#例如：
+#proxy-providers:
+#rule-providers:
+#sub-rules:
+#tunnels:
+#script:
+#listeners:
+EOF
+
+    comp_box "\033[32m已经创建自定义设定文件：$YAMLSDIR/user.yaml ！\033[0m" \
+        "\033[33m可用于编写自定义的DNS等功能\033[0m" \
+        "" \
+        "\033[32m已经创建自定义功能文件：$YAMLSDIR/others.yaml ！\033[0m" \
+        "\033[33m可用于编写自定义的锚点、入站、proxy-providers、rule-set、sub-rules、script等功能\033[0m"
+
+    btm_box "Windows下请使用\033[33mWinSCP软件\033[0m进行编辑！\033[0m" \
+        "MacOS下请使用\033[33mSecureFX软件\033[0m进行编辑！\033[0m" \
+        "Linux可使用\033[33mvim\033[0m进行编辑（路由设备若不显示中文请勿使用）！\033[0m"
+}
+
+# s自定义singbox配置文件
+set_singbox_adv() {
+    comp_box "支持覆盖脚本设置的模块有：\033[0m" \
+        "\033[36mlog dns ntp certificate experimental\033[0m" \
+        "支持与内置功能合并（但不可冲突）的模块有：\033[0m" \
+        "\033[36mendpoints inbounds outbounds providers route services\033[0m" \
+        "将相应json文件放入\033[33m$JSONSDIR\033[0m目录后即可在启动时自动加载" \
+        "" \
+        "使用前请务必参考配置教程：\033[32;4m https://juewuy.github.io/nWTjEpkSK \033[0m"
+}

scripts/menus/providers.sh

@@ -0,0 +1,103 @@
+#!/bin/sh
+# Copyright (C) Juewuy
+
+[ -n "$__IS_MODULE_PROVIDERS" ] && return
+__IS_MODULE_PROVIDERS=1
+
+if [ "$crashcore" = singboxr ]; then
+    CORE_TYPE=singbox
+else
+    CORE_TYPE=clash
+fi
+
+providers() {
+    while true; do
+        # 获取模版名称
+        if [ -z "$(grep "provider_temp_${CORE_TYPE}" "$CRASHDIR"/configs/ShellCrash.cfg)" ]; then
+            provider_temp_des=$(sed -n "1 p" "$CRASHDIR"/configs/"${CORE_TYPE}"_providers.list | awk '{print $1}')
+        else
+            provider_temp_file=$(grep "provider_temp_${CORE_TYPE}" "$CRASHDIR"/configs/ShellCrash.cfg | awk -F '=' '{print $2}')
+            provider_temp_des=$(grep "$provider_temp_file" "$CRASHDIR"/configs/"${CORE_TYPE}"_providers.list | awk '{print $1}')
+            [ -z "$provider_temp_des" ] && provider_temp_des=$provider_temp_file
+        fi
+
+        comp_box "1) \033[32m生成\033[0m包含全部提供者的配置文件" \
+            "2) 选择\033[33m规则模版\033[0m     \033[32m$provider_temp_des\033[0m" \
+            "3) \033[33m清理\033[0mproviders目录文件" \
+            "" \
+            "0) $COMMON_BACK"
+        read -r -p "请输入对应字母或数字> " num
+        case "$num" in
+        "" | 0)
+            break
+            ;;
+        1)
+            if [ -s "$CRASHDIR"/configs/providers.cfg ] || [ -s "$CRASHDIR"/configs/providers_uri.cfg ]; then
+                . "$CRASHDIR/menus/providers_$CORE_TYPE.sh"
+                gen_providers
+            else
+                msg_alert "\033[31m你还未添加链接或本地配置文件，请先添加！\033[0m"
+            fi
+            ;;
+        2)
+            list=$(cat "$CRASHDIR/configs/${CORE_TYPE}_providers.list" | awk '{print $1}')
+
+            comp_box "当前规则模版为：\033[32m$provider_temp_des\033[0m" \
+                "\033[33m请选择在线模版：\033[0m"
+            list_box "$list"
+            btm_box "" \
+                "a) 使用\033[36m本地模版\033[0m" \
+                "" \
+                "0) $COMMON_BACK"
+            read -r -p "请输入对应字母或数字> " num
+            case "$num" in
+            "" | 0) ;;
+            a)
+                line_break
+                read -r -p "请输入模版的路径（绝对路径）> " dir
+                if [ -s "$dir" ]; then
+                    provider_temp_file=$dir
+                    if setconfig provider_temp_"$CORE_TYPE" "$provider_temp_file"; then
+                        common_success
+                    else
+                        common_failed
+                    fi
+                else
+                    msg_alert "\033[31m输入错误，找不到对应模版文件！\033[0m"
+                fi
+                ;;
+            *)
+                provider_temp_file=$(sed -n "$num p" "$CRASHDIR"/configs/"${CORE_TYPE}"_providers.list 2>/dev/null | awk '{print $2}')
+                if [ -z "$provider_temp_file" ]; then
+                    errornum
+                else
+                    if setconfig provider_temp_"$CORE_TYPE" "$provider_temp_file"; then
+                        common_success
+                    else
+                        common_failed
+                    fi
+                fi
+                ;;
+            esac
+            ;;
+        3)
+            comp_box "\033[33m将清空 $CRASHDIR/providers 目录下所有内容\033[0m" \
+                "" \
+                "是否继续？"
+            btm_box "1) 是" \
+                "0) 否"
+            read -r -p "$COMMON_INPUT> " res
+            if [ "$res" = "1" ]; then
+                if rm -rf "$CRASHDIR"/providers; then
+                    common_success
+                else
+                    common_failed
+                fi
+            fi
+            ;;
+        *)
+            errornum
+            ;;
+        esac
+    done
+}

scripts/menus/providers_clash.sh

@@ -0,0 +1,125 @@
+#!/bin/sh
+# Copyright (C) Juewuy
+
+[ -n "$__IS_PROVIDERS_CLASH" ] && return
+__IS_PROVIDERS_CLASH=1
+
+. "$CRASHDIR"/libs/web_get_bin.sh
+
+# 生成clash的providers配置文件
+gen_providers() {
+    if [ -z "$(grep "provider_temp_${CORE_TYPE}" "$CRASHDIR"/configs/ShellCrash.cfg)" ]; then
+        provider_temp_file="$(sed -n "1 p" "$CRASHDIR"/configs/"${CORE_TYPE}"_providers.list | awk '{print $2}')"
+    else
+        provider_temp_file=$(grep "provider_temp_${CORE_TYPE}" "$CRASHDIR"/configs/ShellCrash.cfg | awk -F '=' '{print $2}')
+    fi
+
+    if [ -s "$provider_temp_file" ]; then
+        ln -sf "$provider_temp_file" "$TMPDIR"/provider_temp_file
+    else
+        msg_alert "\033[33m正在获取在线模版......\033[0m"
+        get_bin "$TMPDIR"/provider_temp_file "rules/${CORE_TYPE}_providers/$provider_temp_file"
+        [ -z "$(grep -o 'rules' "$TMPDIR"/provider_temp_file)" ] && {
+            msg_alert "\033[31m下载失败，请尝试更换安装源！\033[0m"
+            . "$CRASHDIR"/menus/9_upgrade.sh && setserver
+            setproviders
+        }
+    fi
+    # 生成proxy_providers模块
+    mkdir -p "$TMPDIR"/providers
+    # 预创建文件并写入对应文件头
+    echo 'proxy-providers:' >"$TMPDIR"/providers/providers.yaml
+    # 切割模版文件
+    sed -n '/^proxy-groups:/,/^[a-z]/ { /^rule/d; p; }' "$TMPDIR"/provider_temp_file >"$TMPDIR"/providers/proxy-groups.yaml
+    sed -n '/^rule/,$p' "$TMPDIR"/provider_temp_file >"$TMPDIR"/providers/rules.yaml
+    rm -rf "$TMPDIR"/provider_temp_file
+    # 基于单订阅生成providers模块
+    if [ -n "$1" ]; then
+        gen_providers_txt "$@"
+        providers_tags=$1
+    else
+        # 基于全部订阅/本地文件生成
+        [ -s "$CRASHDIR"/configs/providers.cfg ] && {
+            providers_tags=''
+            while read -r line; do
+                gen_providers_txt $line
+                providers_tags=$(echo "$providers_tags, $tag" | sed 's/^, //')
+            done <"$CRASHDIR"/configs/providers.cfg
+        }
+        # 基于全部节点分享链接生成
+        [ -s "$CRASHDIR"/configs/providers_uri.cfg ] && {
+            mkdir -p "$CRASHDIR"/providers
+            awk '{ print ($1=="vmess" ? $2 : $2 "#" $1) }' "$CRASHDIR"/configs/providers_uri.cfg >"$CRASHDIR"/providers/uri_group
+            gen_providers_txt "Uri_group" "./providers/uri_group" "3" "12"
+            providers_tags=$(echo "$providers_tags, Uri_group" | sed 's/^, //')
+        }
+    fi
+    # 修饰模版文件并合并
+    sed -i "s/{providers_tags}/$providers_tags/g" "$TMPDIR"/providers/proxy-groups.yaml
+    cut -c 1- "$TMPDIR"/providers/providers.yaml "$TMPDIR"/providers/proxy-groups.yaml "$TMPDIR"/providers/rules.yaml >"$TMPDIR"/config.yaml
+    rm -rf "$TMPDIR"/providers
+    # 调用内核测试
+    . "$CRASHDIR"/starts/check_core.sh && check_core && "$TMPDIR"/CrashCore -t -d "$BINDIR" -f "$TMPDIR"/config.yaml
+    if [ "$?" = 0 ]; then
+        msg_alert "\033[32m配置文件生成成功！\033[0m"
+        mkdir -p "$CRASHDIR"/yamls
+        mv -f "$TMPDIR"/config.yaml "$CRASHDIR"/yamls/config.yaml
+        comp_box "是否立即启动/重启服务？"
+        btm_box "1) 是" \
+            "0) 否"
+        read -r -p "$COMMON_INPUT> " res
+        [ "$res" = 1 ] && {
+            start_core && . "$CRASHDIR"/libs/set_cron.sh && cronset '更新订阅'
+            exit
+        }
+    else
+        rm -rf "$TMPDIR"/CrashCore
+        rm -rf "$TMPDIR"/config.yaml
+        msg_alert "\033[31m生成配置文件出错，请仔细检查输入！\033[0m"
+    fi
+}
+
+gen_providers_txt() {
+    if [ -n "$(echo "$2" | grep -E '^./')" ]; then
+        type=file
+        path=$2
+        download_url=
+    else
+        type=http
+        path="./providers/$1.yaml"
+        download_url=$2
+    fi
+    tag=$1
+    interval=${3:-3}
+    interval2=${4:-12}
+    ua=${5:-clash.meta}
+    exclude=${6#\#}
+    include=${7#\#}
+
+    cat >>"$TMPDIR"/providers/providers.yaml <<EOF
+  ${1}:
+    type: $type
+    url: "$download_url"
+    path: "$path"
+    interval: $((interval2 * 3600))
+    health-check:
+      enable: true
+      lazy: true
+      url: "https://www.gstatic.com/generate_204"
+      interval: $((interval * 60))
+EOF
+    [ "$crashcore" = 'meta' ] && {
+        [ "$skip_cert" != "OFF" ] && skip_cert_verify='skip-cert-verify: true'
+        cat >>"$TMPDIR"/providers/providers.yaml <<EOF
+    header:
+      User-Agent: ["$ua"]
+    override:
+      udp: true
+      $skip_cert_verify
+    filter: "$include"
+    exclude-filter: "$exclude"
+EOF
+    }
+    # 写入提供者
+    echo '  - {name: '"$tag"', type: url-test, tolerance: 100, lazy: true, use: ['"$tag"']}' >>"$TMPDIR"/providers/proxy-groups.yaml
+}

scripts/menus/providers_singbox.sh

@@ -0,0 +1,133 @@
+#!/bin/sh
+# Copyright (C) Juewuy
+
+[ -n "$__IS_PROVIDERS_SINGBOX" ] && return
+__IS_PROVIDERS_SINGBOX=1
+
+. "$CRASHDIR"/libs/web_get_bin.sh
+
+# 生成singbox的providers配置文件
+gen_providers() {
+    if [ -z "$(grep "provider_temp_${CORE_TYPE}" "$CRASHDIR"/configs/ShellCrash.cfg)" ]; then
+        provider_temp_file="$(sed -n "1 p" "$CRASHDIR"/configs/"${CORE_TYPE}"_providers.list | awk '{print $2}')"
+    else
+        provider_temp_file=$(grep "provider_temp_${CORE_TYPE}" "$CRASHDIR"/configs/ShellCrash.cfg | awk -F '=' '{print $2}')
+    fi
+    if [ -s "$provider_temp_file" ]; then
+        ln -sf "$provider_temp_file" "$TMPDIR"/provider_temp_file
+    else
+        msg_alert "\033[33m正在获取在线模版......\033[0m"
+        get_bin "$TMPDIR"/provider_temp_file "rules/${CORE_TYPE}_providers/$provider_temp_file"
+        [ -z "$(grep -o 'route' "$TMPDIR"/provider_temp_file)" ] && {
+            msg_alert "\033[31m下载失败，请尝试更换安装源！\033[0m"
+            . "$CRASHDIR"/menus/9_upgrade.sh && setserver
+            setproviders
+        }
+    fi
+    # 生成outbound_providers模块
+    mkdir -p "$TMPDIR"/providers
+    # 预创建文件并写入对应文件头
+    cat >"$TMPDIR"/providers/providers.json <<EOF
+{
+  "providers": [
+EOF
+    cat >"$TMPDIR"/providers/outbounds_add.json <<EOF
+{
+  "outbounds": [
+EOF
+    # 基于单订阅生成providers模块
+    if [ -n "$1" ]; then
+        gen_providers_txt "$@"
+        providers_tags=\"$1\"
+    else
+        # 基于全部订阅/本地文件生成
+        [ -s "$CRASHDIR"/configs/providers.cfg ] && {
+            providers_tags=''
+            while read -r line; do
+                gen_providers_txt $line
+                providers_tags=$(echo "$providers_tags, \"$tag\"" | sed 's/^, //')
+            done <"$CRASHDIR"/configs/providers.cfg
+        }
+        # 基于全部节点分享链接生成
+        [ -s "$CRASHDIR"/configs/providers_uri.cfg ] && {
+            mkdir -p "$CRASHDIR"/providers
+            awk '{ print ($1=="vmess" ? $2 : $2 "#" $1) }' "$CRASHDIR"/configs/providers_uri.cfg >"$CRASHDIR"/providers/uri_group
+            gen_providers_txt "Uri_group" "./providers/uri_group" "3" "12"
+            providers_tags=$(echo "$providers_tags, \"Uri_group\"" | sed 's/^, //')
+        }
+    fi
+    # 修复文件格式
+    sed -i '$s/},/}]}/' "$TMPDIR"/providers/outbounds_add.json
+    sed -i '$s/},/}]}/' "$TMPDIR"/providers/providers.json
+    # 使用模版生成outbounds和rules模块
+    cat "$TMPDIR"/provider_temp_file | sed "s/{providers_tags}/$providers_tags/g" | sed "s/\"providers_tags\"/$providers_tags/g" >"$TMPDIR"/providers/outbounds.json
+    rm -rf "$TMPDIR"/provider_temp_file
+    # 调用内核测试
+    . "$CRASHDIR"/starts/check_core.sh && check_core && "$TMPDIR"/CrashCore merge "$TMPDIR"/config.json -C "$TMPDIR"/providers
+    if [ "$?" = 0 ]; then
+        msg_alert "\033[32m配置文件生成成功！如果启动超时建议更新里手动安装Singbox-srs数据库常用包！\033[0m"
+        mkdir -p "$CRASHDIR"/jsons
+        mv -f "$TMPDIR"/config.json "$CRASHDIR"/jsons/config.json
+        rm -rf "$TMPDIR"/providerss
+        comp_box "是否立即启动/重启服务？"
+        btm_box "1) 是" \
+            "0) 否"
+        read -r -p "$COMMON_INPUT> " res
+        [ "$res" = 1 ] && {
+            start_core && . "$CRASHDIR"/libs/set_cron.sh && cronset '更新订阅'
+            exit
+        }
+    else
+        rm -rf "$TMPDIR"/CrashCore
+        msg_alert "\033[31m生成配置文件出错，请仔细检查输入！\033[0m"
+        # rm -rf "$TMPDIR"/providers
+    fi
+}
+
+gen_providers_txt() {
+    tag=$1
+    interval=${3:-3}
+    interval2=${4:-12}
+    ua=${5:-clash.meta}
+    exclude=${6#\#}
+    include=${7#\#}
+    [ -n "$exclude" ] && exclude_ele="\"exclude\": \"$exclude\","
+    [ -n "$include" ] && include_ele="\"include\": \"$include\","
+    if [ -n "$(echo "$2" | grep -E '^./')" ]; then
+        cat >>"$TMPDIR"/providers/providers.json <<EOF
+	{
+      "tag": "$tag",
+      "type": "local",
+	  "path": "$2",
+EOF
+    else
+        cat >>"$TMPDIR"/providers/providers.json <<EOF
+	{
+      "tag": "$tag",
+      "type": "remote",
+      "url": "$2",
+      "path": "./providers/$tag.yaml",
+      "user_agent": "$ua",
+      "update_interval": "${interval2}h",
+	  $exclude_ele
+      $include_ele
+EOF
+    fi
+    # 通用部分生成
+    [ "$skip_cert" != "OFF" ] && override_tls='true' || override_tls='false'
+    cat >>"$TMPDIR"/providers/providers.json <<EOF
+      "health_check": {
+        "enabled": true,
+        "url": "https://www.gstatic.com/generate_204",
+        "interval": "${interval}m",
+        "timeout": "3s"
+      },
+	  "override_tls": {
+		"enabled": true,
+		"insecure": $override_tls
+	  }
+	},
+EOF
+    # 写入提供者
+    echo '{ "tag": "'"$tag"'", "type": "urltest", "tolerance": 100, "providers": ["'"$tag"'"], "include": ".*" },' >>"$TMPDIR"/providers/outbounds_add.json
+}

scripts/menus/running_status.sh

@@ -0,0 +1,13 @@
+
+running_status(){
+	VmRSS=$(awk '/^VmRSS:/ {printf "%.2f MB\n", ($2 * 1024) / 1000000}' /proc/$PID/status)
+	#获取运行时长
+	touch "$TMPDIR"/crash_start_time #用于延迟启动的校验
+	start_time=$(cat "$TMPDIR"/crash_start_time)
+	if [ -n "$start_time" ]; then
+		time=$(($(date +%s) - start_time))
+		day=$((time / 86400))
+		[ "$day" = "0" ] && day='' || day="$dayD"
+		time=$(date -u -d @${time} +%H:%M:%S)
+	fi
+}

scripts/menus/set_crashdir.sh

@@ -0,0 +1,187 @@
+#!/bin/sh
+# Copyright (C) Juewuy
+
+[ -f /tmp/SC_tmp/libs/check_dir_avail.sh ] && . /tmp/SC_tmp/libs/check_dir_avail.sh
+
+set_usb_dir() {
+    while true; do
+        comp_box "请选择安装目录："
+        du -hL /mnt |
+            awk '{print NR") "$2 " " $1}' |
+            while IFS= read -r line; do
+                content_line "$line"
+            done
+        separator_line "="
+        read -r -p "请输入相应数字> " num
+        dir=$(du -hL /mnt | awk '{print $2}' | sed -n "$num"p)
+        if [ -z "$dir" ]; then
+            msg_alert "\033[31m输入错误！请重新设置！\033[0m"
+            continue
+        fi
+        break 1
+    done
+}
+
+set_xiaomi_dir() {
+    comp_box "\033[33m检测到当前设备为小米官方系统，请选择安装位置：\033[0m"
+    [ -d /data ] && content_line "1) /data目录，剩余空间：$(dir_avail /data -h) （支持软固化功能）"
+    [ -d /userdisk ] && content_line "2) /userdisk目录，剩余空间：$(dir_avail /userdisk -h) （支持软固化功能）"
+    [ -d /data/other_vol ] && content_line "3) /data/other_vol目录，剩余空间：$(dir_avail /data/other_vol -h) （支持软固化功能）"
+    content_line "4) 自定义目录（不推荐，不明勿用！）"
+    content_line ""
+    content_line "0) 退出安装"
+    separator_line "="
+    read -r -p "请输入相应数字> " num
+    case "$num" in
+    1)
+        dir=/data
+        ;;
+    2)
+        dir=/userdisk
+        ;;
+    3)
+        dir=/data/other_vol
+        ;;
+    4)
+        set_cust_dir
+        ;;
+    *)
+        line_break
+        exit 1
+        ;;
+    esac
+}
+
+set_asus_usb() {
+    while true; do
+        comp_box "请选择U盘目录："
+        du -hL /tmp/mnt |
+            awk -F/ 'NF<=4 {print NR") "$2 " " $1}' |
+            while IFS= read -r line; do
+                content_line "$line"
+            done
+        separator_line "="
+        read -r -p "请输入相应数字> " num
+        dir=$(du -hL /tmp/mnt | awk -F/ 'NF<=4' | awk '{print $2}' | sed -n "$num"p)
+        if [ ! -f "$dir/asusware.arm/etc/init.d/S50downloadmaster" ]; then
+            msg_alert "\033[31m未找到下载大师自启文件：$dir/asusware.arm/etc/init.d/S50downloadmaster，请检查设置！\033[0m"
+        else
+            break
+        fi
+    done
+}
+
+set_asus_dir() {
+    separator_line "="
+    btm_box "\033[33m检测到当前设备为华硕固件，请选择安装方式\033[0m" \
+        "1) 基于U盘+下载大师安装（支持所有固件，限ARM设备，须插入U盘或移动硬盘）" \
+        "2) 基于自启脚本安装（仅持部分梅林固件）" \
+        "" \
+        "0) 退出安装"
+    read -r -p "请输入相应数字> " num
+    case "$num" in
+    1)
+        msg_alert -t 2 "请先在路由器网页后台安装下载大师并启用，之后选择外置存储所在目录！"
+        set_asus_usb
+        ;;
+    2)
+        msg_alert -t 2 "如开机无法正常自启，请重新使用U盘+下载大师安装！"
+        dir=/jffs
+        ;;
+    *)
+        line_break
+        exit 1
+        ;;
+    esac
+}
+
+set_cust_dir() {
+    while true; do
+        comp_box "路径是必须带 / 的格式，注意写入虚拟内存(/tmp,/opt,/sys...)的文件会在重启后消失！" \
+            "" \
+            "可用路径 剩余空间："
+        df -h |
+            awk '{print $6, $4}' |
+            sed '1d' |
+            while IFS= read -r line; do
+                content_line "$line"
+            done
+        separator_line "="
+        read -r -p "请输入自定义路径> " dir
+        if [ "$(dir_avail "$dir")" = 0 ] || [ -n "$(echo "$dir" | grep -Eq '^/(tmp|opt|sys)(/|$)')" ]; then
+            msg_alert "\033[31m路径错误！请重新设置！\033[0m"
+            continue
+        fi
+        break 1
+    done
+}
+
+set_crashdir() {
+    while true; do
+        top_box "\033[33m注意：安装ShellCrash至少需要预留约1MB的磁盘空间\033[0m"
+        case "$systype" in
+        Padavan)
+            dir=/etc/storage
+            ;;
+        mi_snapshot)
+            set_xiaomi_dir
+            ;;
+        asusrouter)
+            set_asus_dir
+            ;;
+        ng_snapshot)
+            dir=/tmp/mnt
+            ;;
+        *)
+            separator_line "="
+            btm_box "1) 在\033[32m/etc目录\033[0m下安装（适合root用户）" \
+                "2) 在\033[32m/usr/share目录\033[0m下安装（适合Linux系统）" \
+                "3) 在\033[32m当前用户目录\033[0m下安装（适合非root用户）" \
+                "4) 在\033[32m外置存储\033[0m中安装" \
+                "5) 手动设置安装目录" \
+                "" \
+                "0) 退出安装"
+            read -r -p "请输入相应数字> " num
+            # 设置目录
+            case "$num" in
+            1)
+                dir=/etc
+                ;;
+            2)
+                dir=/usr/share
+                ;;
+            3)
+                dir=~/.local/share
+                mkdir -p ~/.config/systemd/user
+                ;;
+            4)
+                set_usb_dir
+                ;;
+            5)
+                set_cust_dir
+                ;;
+            *)
+                msg_alert "安装已取消"
+                line_break
+                exit 1
+                ;;
+            esac
+            ;;
+        esac
+
+        if [ ! -w "$dir" ]; then
+            msg_alert "\033[31m没有$dir目录写入权限！请重新设置！\033[0m"
+        else
+            comp_box "目标目录\033[32m$dir\033[0m空间剩余：$(dir_avail "$dir" -h)" \
+                "" \
+                "是否确认安装？"
+            btm_box "1) 是" \
+                "0) 否"
+            read -r -p "请输入相应数字> " res
+            if [ "$res" = "1" ]; then
+                CRASHDIR="$dir"/ShellCrash
+                break
+            fi
+        fi
+    done
+}