添加

This reverts commit fa12eabc89.

.github/dependabot.yml

@@ -0,0 +1,15 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+      timezone: "Asia/Shanghai"
+      time: "07:00"
+    pull-request-branch-name:
+      separator: "-"

.github/workflows/run.yml

@@ -0,0 +1,141 @@
+name: Generate RULE-SET for Premium Edition of Clash
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: "30 22 * * *"
+  push:
+    branches:
+      - master
+    paths-ignore:
+      - "**/README.md"
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Set variables
+        run: |
+          echo "RELEASE_NAME=Released on $(date +%Y%m%d%H%M)" >> $GITHUB_ENV
+          echo "TAG_NAME=$(date +%Y%m%d%H%M)" >> $GITHUB_ENV
+          echo "custom_icloud=https://raw.githubusercontent.com/Loyalsoldier/domain-list-custom/release/icloud.txt" >> $GITHUB_ENV
+          echo "custom_tld_not_cn=https://raw.githubusercontent.com/Loyalsoldier/domain-list-custom/release/tld-!cn.txt" >> $GITHUB_ENV
+          echo "custom_private=https://raw.githubusercontent.com/Loyalsoldier/domain-list-custom/release/private.txt" >> $GITHUB_ENV
+          echo "Loyalsoldier_reject=https://raw.githubusercontent.com/Loyalsoldier/v2ray-rules-dat/release/reject-list.txt" >> $GITHUB_ENV
+          echo "Loyalsoldier_proxy=https://raw.githubusercontent.com/Loyalsoldier/v2ray-rules-dat/release/proxy-list.txt" >> $GITHUB_ENV
+          echo "Loyalsoldier_direct=https://raw.githubusercontent.com/Loyalsoldier/v2ray-rules-dat/release/direct-list.txt" >> $GITHUB_ENV
+          echo "Loyalsoldier_gfw=https://raw.githubusercontent.com/Loyalsoldier/v2ray-rules-dat/release/gfw.txt" >> $GITHUB_ENV
+          echo "Loyalsoldier_greatfire=https://raw.githubusercontent.com/Loyalsoldier/v2ray-rules-dat/release/greatfire.txt" >> $GITHUB_ENV
+          echo "felixonmars_apple=https://raw.githubusercontent.com/felixonmars/dnsmasq-china-list/master/apple.china.conf" >> $GITHUB_ENV
+          echo "felixonmars_google=https://raw.githubusercontent.com/felixonmars/dnsmasq-china-list/master/google.china.conf" >> $GITHUB_ENV
+          echo "cn_cidr=https://raw.githubusercontent.com/Loyalsoldier/geoip/release/text/cn.txt" >> $GITHUB_ENV
+          echo "lan_cidr=https://raw.githubusercontent.com/Loyalsoldier/geoip/release/text/private.txt" >> $GITHUB_ENV
+          echo "telegram_cidr=https://raw.githubusercontent.com/Loyalsoldier/geoip/release/text/telegram.txt" >> $GITHUB_ENV
+        shell: bash
+
+      - name: Checkout the "hidden" branch
+        uses: actions/checkout@v4
+        with:
+          ref: hidden
+
+      - name: Generate icloud.txt file
+        run: |
+          echo "payload:" > icloud.txt
+          curl -sSL ${custom_icloud} | grep -E "^(full|domain):" | awk -F ':' '{printf "  - |+.%s|\n", $2}' | sed "s/|/'/g" >> icloud.txt
+
+      - name: Generate google.txt file
+        run: |
+          echo "payload:" > google.txt
+          curl -sSL ${felixonmars_google} | perl -ne '/^server=\/([^\/]+)\// && print "  - |+.$1|\n"' | sed "s/|/'/g" >> google.txt
+
+      - name: Generate apple.txt file
+        run: |
+          echo "payload:" > apple.txt
+          curl -sSL ${felixonmars_apple} | perl -ne '/^server=\/([^\/]+)\// && print "  - |+.$1|\n"' | sed "s/|/'/g" >> apple.txt
+
+      - name: Generate private.txt file
+        run: |
+          echo "payload:" > private.txt
+          curl -sSL ${custom_private} | awk -F ':' '/^full:/ {printf "  - |%s|\n", $2}' | sed "s/|/'/g" >> private.txt
+          curl -sSL ${custom_private} | awk -F ':' '/^domain:/ {printf "  - |+.%s|\n", $2}' | sed "s/|/'/g" >> private.txt
+
+      - name: Generate direct.txt file
+        run: |
+          echo "payload:" > direct.txt
+          curl -sSL ${Loyalsoldier_direct} | grep -Ev "^(regexp|keyword):" | perl -ne '/^(full:)([-_a-zA-Z0-9]+(\.[-_a-zA-Z0-9]+)*)/ && print "  - |$2|\n"' | sed "s/|/'/g" >> direct.txt
+          curl -sSL ${Loyalsoldier_direct} | grep -Ev "^(regexp|keyword|full):" | perl -ne '/^(domain:)?([-_a-zA-Z0-9]+(\.[-_a-zA-Z0-9]+)*)/ && print "  - |+.$2|\n"' | sed "s/|/'/g" >> direct.txt
+
+      - name: Generate proxy.txt file
+        run: |
+          echo "payload:" > proxy.txt
+          curl -sSL ${Loyalsoldier_proxy} | grep -Ev "^(regexp|keyword):" | perl -ne '/^(full:)([-_a-zA-Z0-9]+(\.[-_a-zA-Z0-9]+)*)/ && print "  - |$2|\n"' | sed "s/|/'/g" >> proxy.txt
+          curl -sSL ${Loyalsoldier_proxy} | grep -Ev "^(regexp|keyword|full):" | perl -ne '/^(domain:)?([-_a-zA-Z0-9]+(\.[-_a-zA-Z0-9]+)*)/ && print "  - |+.$2|\n"' | sed "s/|/'/g" >> proxy.txt
+
+      - name: Generate reject.txt file
+        run: |
+          echo "payload:" > reject.txt
+          curl -sSL ${Loyalsoldier_reject} | grep -Ev "^(regexp|keyword):" | perl -ne '/^(domain:|full:)?([-_a-zA-Z0-9]+(\.[-_a-zA-Z0-9]+)*)/ && print "  - |+.$2|\n"' | sed "s/|/'/g" >> reject.txt
+
+      - name: Generate gfw.txt file
+        run: |
+          echo "payload:" > gfw.txt
+          curl -sSL ${Loyalsoldier_gfw} | grep -Ev "^(regexp|keyword):" | perl -ne '/^(domain:|full:)?([-_a-zA-Z0-9]+(\.[-_a-zA-Z0-9]+)*)/ && print "  - |+.$2|\n"' | sed "s/|/'/g" >> gfw.txt
+
+      - name: Generate greatfire.txt file
+        run: |
+          echo "payload:" > greatfire.txt
+          curl -sSL ${Loyalsoldier_greatfire} | grep -Ev "^(regexp|keyword):" | perl -ne '/^(domain:|full:)?([-_a-zA-Z0-9]+(\.[-_a-zA-Z0-9]+)*)/ && print "  - |+.$2|\n"' | sed "s/|/'/g" >> greatfire.txt
+
+      - name: Generate tld-not-cn.txt file
+        run: |
+          echo "payload:" > tld-not-cn.txt
+          curl -sSL "${custom_tld_not_cn}" | perl -ne '/^domain:([-_a-zA-Z0-9]+(\.[-_a-zA-Z0-9]+)*)/ && print "  - |+.$1|\n"' | sed "s/|/'/g" >> tld-not-cn.txt
+
+      - name: Generate cncidr.txt file
+        run: |
+          echo "payload:" > cncidr.txt
+          curl -sSL ${cn_cidr} | perl -ne '/(.+\/\d+)/ && print "  - |$1|\n"' | sed "s/|/'/g" >> cncidr.txt
+
+      - name: Generate telegramcidr.txt file
+        run: |
+          echo "payload:" > telegramcidr.txt
+          curl -sSL ${telegram_cidr} | perl -ne '/(.+\/\d+)/ && print "  - |$1|\n"' | sed "s/|/'/g" >> telegramcidr.txt
+
+      - name: Generate lancidr.txt file
+        run: |
+          echo "payload:" > lancidr.txt
+          curl -sSL ${lan_cidr} | perl -ne '/(.+\/\d+)/ && print "  - |$1|\n"' | sed "s/|/'/g" >> lancidr.txt
+
+      - name: Move files to publish directory
+        run: |
+          mkdir -p publish
+          cp *.txt ./publish/
+
+      - name: Release and upload assets
+        uses: softprops/action-gh-release@v1
+        with:
+          name: ${{ env.RELEASE_NAME }}
+          tag_name: ${{ env.TAG_NAME }}
+          draft: false
+          prerelease: false
+          files: |
+            ./publish/*
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Git push assets to "release" branch
+        run: |
+          cd publish || exit 1
+          git init
+          git config --local user.name "github-actions[bot]"
+          git config --local user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git checkout -b release
+          git add .
+          git commit -m "${{ env.RELEASE_NAME }}"
+          git remote add origin "https://${{ github.actor }}:${{ secrets.GITHUB_TOKEN }}@github.com/${{ github.repository }}"
+          git push -f origin release
+
+      - name: Purge jsdelivr CDN
+        run: |
+          cd publish || exit 1
+          for file in $(ls); do
+            curl -i "https://purge.jsdelivr.net/gh/${{ github.repository }}@release/${file}"
+          done

README.md

@@ -1 +1,223 @@
-# clash-rules
+# 简介
+
+本项目生成适用于 [**Clash Premium 内核**](https://github.com/Dreamacro/clash/releases/tag/premium)的规则集（RULE-SET），同时适用于所有使用 Clash Premium 内核的 Clash 图形用户界面（GUI）客户端。使用 GitHub Actions 北京时间每天早上 6:30 自动构建，保证规则最新。
+
+## 说明
+
+本项目规则集（RULE-SET）的数据主要来源于项目 [@Loyalsoldier/v2ray-rules-dat](https://github.com/Loyalsoldier/v2ray-rules-dat) 和 [@v2fly/domain-list-community](https://github.com/v2fly/domain-list-community)；[`Apple`](https://github.com/Loyalsoldier/clash-rules/blob/release/apple.txt) 和 [`Google`](https://github.com/Loyalsoldier/clash-rules/blob/release/google.txt) 列表里的域名来源于项目 [@felixonmars/dnsmasq-china-list](https://github.com/felixonmars/dnsmasq-china-list)；中国大陆 IPv4 地址数据使用 [@17mon/china_ip_list](https://github.com/17mon/china_ip_list)。
+
+本项目的规则集（RULE-SET）只适用于 Clash **Premium** 版本。Clash Premium 相对于普通版，增加了 **TUN 增强模式**，能接管设备所有 TCP 和 UDP 流量，类似 [Surge for Mac](https://nssurge.com) 的增强模式。更多高级特性请看[官方文档](https://github.com/Dreamacro/clash/wiki/Clash-Premium-Features)。
+
+### Clash Premium 各版本下载地址
+
+- Clash Premium **命令行**版（适用于 Windows、macOS、Linux、OpenWRT 等多种平台）：[https://github.com/Dreamacro/clash/releases/tag/premium](https://github.com/Dreamacro/clash/releases/tag/premium)
+- Clash Premium **图形用户界面**版：
+  - [ClashX Pro](https://install.appcenter.ms/users/clashx/apps/clashx-pro/distribution_groups/public)（适用于 macOS）
+  - [Clash for Windows](https://github.com/Fndroid/clash_for_windows_pkg/releases)（适用于 Windows、macOS、Linux）
+  - [Clash for Android](https://github.com/Kr328/ClashForAndroid/releases)（适用于 Android）
+
+## 规则文件地址及使用方式
+
+### 在线地址（URL）
+
+> 如果无法访问域名 `raw.githubusercontent.com`，可以使用第二个地址（`cdn.jsdelivr.net`），但是内容更新会有 12 小时的延迟。以下地址填写在 Clash 配置文件里的 `rule-providers` 里的 `url` 配置项中。
+
+- **直连域名列表 direct.txt**：
+  - [https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/direct.txt](https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/direct.txt)
+  - [https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt](https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt)
+- **代理域名列表 proxy.txt**：
+  - [https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/proxy.txt](https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/proxy.txt)
+  - [https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt](https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt)
+- **广告域名列表 reject.txt**：
+  - [https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/reject.txt](https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/reject.txt)
+  - [https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt](https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt)
+- **私有网络专用域名列表 private.txt**：
+  - [https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/private.txt](https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/private.txt)
+  - [https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt](https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt)
+- **Apple 在中国大陆可直连的域名列表 apple.txt**：
+  - [https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/apple.txt](https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/apple.txt)
+  - [https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/apple.txt](https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/apple.txt)
+- **iCloud 域名列表 icloud.txt**：
+  - [https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/icloud.txt](https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/icloud.txt)
+  - [https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/icloud.txt](https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/icloud.txt)
+- **[慎用]Google 在中国大陆可直连的域名列表 google.txt**：
+  - [https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/google.txt](https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/google.txt)
+  - [https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/google.txt](https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/google.txt)
+- **GFWList 域名列表 gfw.txt**：
+  - [https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/gfw.txt](https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/gfw.txt)
+  - [https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/gfw.txt](https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/gfw.txt)
+- **非中国大陆使用的顶级域名列表 tld-not-cn.txt**：
+  - [https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/tld-not-cn.txt](https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/tld-not-cn.txt)
+  - [https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/tld-not-cn.txt](https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/tld-not-cn.txt)
+- **Telegram 使用的 IP 地址列表 telegramcidr.txt**：
+  - [https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/telegramcidr.txt](https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/telegramcidr.txt)
+  - [https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/telegramcidr.txt](https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/telegramcidr.txt)
+- **局域网 IP 及保留 IP 地址列表 lancidr.txt**：
+  - [https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/lancidr.txt](https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/lancidr.txt)
+  - [https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/lancidr.txt](https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/lancidr.txt)
+- **中国大陆 IP 地址列表 cncidr.txt**：
+  - [https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/cncidr.txt](https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/cncidr.txt)
+  - [https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/cncidr.txt](https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/cncidr.txt)
+- **需要直连的常见软件列表 applications.txt**：
+  - [https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/applications.txt](https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/applications.txt)
+  - [https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/applications.txt](https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/applications.txt)
+
+### 使用方式
+
+关于 Clash Premium 使用方式，请查看[官方文档](https://github.com/Dreamacro/clash/wiki/Clash-Premium-Features) 或 [Lancellc's GitBook](https://lancellc.gitbook.io/clash/)。
+
+要想使用本项目的规则集，只需要在 Clash 配置文件中添加如下 `rule-providers` 和 `rules`。
+
+#### Rule Providers 配置方式
+
+```yaml
+rule-providers:
+  reject:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt"
+    path: ./ruleset/reject.yaml
+    interval: 86400
+
+  icloud:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/icloud.txt"
+    path: ./ruleset/icloud.yaml
+    interval: 86400
+
+  apple:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/apple.txt"
+    path: ./ruleset/apple.yaml
+    interval: 86400
+
+  google:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/google.txt"
+    path: ./ruleset/google.yaml
+    interval: 86400
+
+  proxy:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt"
+    path: ./ruleset/proxy.yaml
+    interval: 86400
+
+  direct:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt"
+    path: ./ruleset/direct.yaml
+    interval: 86400
+
+  private:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt"
+    path: ./ruleset/private.yaml
+    interval: 86400
+
+  gfw:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/gfw.txt"
+    path: ./ruleset/gfw.yaml
+    interval: 86400
+
+  tld-not-cn:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/tld-not-cn.txt"
+    path: ./ruleset/tld-not-cn.yaml
+    interval: 86400
+
+  telegramcidr:
+    type: http
+    behavior: ipcidr
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/telegramcidr.txt"
+    path: ./ruleset/telegramcidr.yaml
+    interval: 86400
+
+  cncidr:
+    type: http
+    behavior: ipcidr
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/cncidr.txt"
+    path: ./ruleset/cncidr.yaml
+    interval: 86400
+
+  lancidr:
+    type: http
+    behavior: ipcidr
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/lancidr.txt"
+    path: ./ruleset/lancidr.yaml
+    interval: 86400
+
+  applications:
+    type: http
+    behavior: classical
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/applications.txt"
+    path: ./ruleset/applications.yaml
+    interval: 86400
+```
+
+#### 白名单模式 Rules 配置方式（推荐）
+
+- 白名单模式，意为「**没有命中规则的网络流量，统统使用代理**」，适用于服务器线路网络质量稳定、快速，不缺服务器流量的用户。
+- 以下配置中，除了 `DIRECT` 和 `REJECT` 是默认存在于 Clash 中的 policy（路由策略/流量处理策略），其余均为自定义 policy，对应配置文件中 `proxies` 或 `proxy-groups` 中的 `name`。如你直接使用下面的 `rules` 规则，则需要在 `proxies` 或 `proxy-groups` 中手动配置一个 `name` 为 `PROXY` 的 policy。
+- 如你希望 Apple、iCloud 和 Google 列表中的域名使用代理，则把 policy 由 `DIRECT` 改为 `PROXY`，以此类推，举一反三。
+- 如你不希望进行 DNS 解析，可在 `GEOIP` 规则的最后加上 `,no-resolve`，如 `GEOIP,CN,DIRECT,no-resolve`。
+
+```yaml
+rules:
+  - RULE-SET,applications,DIRECT
+  - DOMAIN,clash.razord.top,DIRECT
+  - DOMAIN,yacd.haishan.me,DIRECT
+  - RULE-SET,private,DIRECT
+  - RULE-SET,reject,REJECT
+  - RULE-SET,icloud,DIRECT
+  - RULE-SET,apple,DIRECT
+  - RULE-SET,google,DIRECT
+  - RULE-SET,proxy,PROXY
+  - RULE-SET,direct,DIRECT
+  - RULE-SET,lancidr,DIRECT
+  - RULE-SET,cncidr,DIRECT
+  - RULE-SET,telegramcidr,PROXY
+  - GEOIP,LAN,DIRECT
+  - GEOIP,CN,DIRECT
+  - MATCH,PROXY
+```
+
+#### 黑名单模式 Rules 配置方式
+
+- 黑名单模式，意为「**只有命中规则的网络流量，才使用代理**」，适用于服务器线路网络质量不稳定或不够快，或服务器流量紧缺的用户。通常也是软路由用户、家庭网关用户的常用模式。
+- 以下配置中，除了 `DIRECT` 和 `REJECT` 是默认存在于 Clash 中的 policy（路由策略/流量处理策略），其余均为自定义 policy，对应配置文件中 `proxies` 或 `proxy-groups` 中的 `name`。如你直接使用下面的 `rules` 规则，则需要在 `proxies` 或 `proxy-groups` 中手动配置一个 `name` 为 `PROXY` 的 policy。
+
+```yaml
+rules:
+  - RULE-SET,applications,DIRECT
+  - DOMAIN,clash.razord.top,DIRECT
+  - DOMAIN,yacd.haishan.me,DIRECT
+  - RULE-SET,private,DIRECT
+  - RULE-SET,reject,REJECT
+  - RULE-SET,tld-not-cn,PROXY
+  - RULE-SET,gfw,PROXY
+  - RULE-SET,telegramcidr,PROXY
+  - MATCH,DIRECT
+```
+
+## 致谢
+
+- [@Loyalsoldier/geoip](https://github.com/Loyalsoldier/geoip)
+- [@Loyalsoldier/v2ray-rules-dat](https://github.com/Loyalsoldier/v2ray-rules-dat)
+- [@gfwlist/gfwlist](https://github.com/gfwlist/gfwlist)
+- [@v2fly/domain-list-community](https://github.com/v2fly/domain-list-community)
+- [@felixonmars/dnsmasq-china-list](https://github.com/felixonmars/dnsmasq-china-list)
+- [@17mon/china_ip_list](https://github.com/17mon/china_ip_list)
+
+## 项目 Star 数增长趋势
+
+[![Stargazers over time](https://starchart.cc/Loyalsoldier/clash-rules.svg)](https://starchart.cc/Loyalsoldier/clash-rules)

rules/apple.txt

@@ -0,0 +1,141 @@
+payload:
+  - '+.a1.mzstatic.com'
+  - '+.a2.mzstatic.com'
+  - '+.a3.mzstatic.com'
+  - '+.a4.mzstatic.com'
+  - '+.a5.mzstatic.com'
+  - '+.adcdownload.apple.com.akadns.net'
+  - '+.adcdownload.apple.com'
+  - '+.app-site-association.cdn-apple.com'
+  - '+.appldnld.apple.com'
+  - '+.appldnld.g.aaplimg.com'
+  - '+.appleid.cdn-apple.com'
+  - '+.apps.apple.com'
+  - '+.apps.mzstatic.com'
+  - '+.cdn-cn1.apple-mapkit.com'
+  - '+.cdn-cn2.apple-mapkit.com'
+  - '+.cdn-cn3.apple-mapkit.com'
+  - '+.cdn-cn4.apple-mapkit.com'
+  - '+.cdn.apple-mapkit.com'
+  - '+.cdn1.apple-mapkit.com'
+  - '+.cdn2.apple-mapkit.com'
+  - '+.cdn3.apple-mapkit.com'
+  - '+.cdn4.apple-mapkit.com'
+  - '+.cds-cdn.v.aaplimg.com'
+  - '+.cds.apple.com.akadns.net'
+  - '+.cds.apple.com'
+  - '+.cdsassets.apple.com'
+  - '+.cl1-cdn.origin-apple.com.akadns.net'
+  - '+.cl1.apple.com'
+  - '+.cl2-cn.apple.com'
+  - '+.cl2.apple.com'
+  - '+.cl3-cdn.origin-apple.com.akadns.net'
+  - '+.cl3.apple.com'
+  - '+.cl4-cdn.origin-apple.com.akadns.net'
+  - '+.cl4-cn.apple.com'
+  - '+.cl4.apple.com'
+  - '+.cl5-cdn.origin-apple.com.akadns.net'
+  - '+.cl5.apple.com'
+  - '+.clientflow.apple.com.akadns.net'
+  - '+.clientflow.apple.com'
+  - '+.configuration.apple.com.akadns.net'
+  - '+.configuration.apple.com'
+  - '+.cstat.apple.com'
+  - '+.cstat.cdn-apple.com'
+  - '+.dd-cdn.origin-apple.com.akadns.net'
+  - '+.download.developer.apple.com'
+  - '+.gs-loc-cn.apple.com'
+  - '+.gs-loc.apple.com'
+  - '+.gsp10-ssl-cn.ls.apple.com'
+  - '+.gsp13-cn.ls.apple.com'
+  - '+.gsp4-cn.ls.apple.com.edgekey.net.globalredir.akadns.net'
+  - '+.gsp4-cn.ls.apple.com.edgekey.net'
+  - '+.gsp4-cn.ls.apple.com'
+  - '+.gsp5-cn.ls.apple.com'
+  - '+.gsp85-cn-ssl.ls.apple.com'
+  - '+.gspe19-cn-ssl.ls.apple.com'
+  - '+.gspe19-cn.ls-apple.com.akadns.net'
+  - '+.gspe19-cn.ls.apple.com'
+  - '+.gspe21-ssl.ls.apple.com'
+  - '+.gspe21.ls.apple.com'
+  - '+.gspe35-ssl.ls.apple.com'
+  - '+.guzzoni-apple-com.v.aaplimg.com'
+  - '+.guzzoni.apple.com'
+  - '+.iadsdk.apple.com'
+  - '+.icloud-cdn.icloud.com.akadns.net'
+  - '+.icloud.cdn-apple.com'
+  - '+.images.apple.com.akadns.net'
+  - '+.images.apple.com.edgekey.net.globalredir.akadns.net'
+  - '+.images.apple.com'
+  - '+.init-p01md-lb.push-apple.com.akadns.net'
+  - '+.init-p01md.apple.com'
+  - '+.init-p01st-lb.push-apple.com.akadns.net'
+  - '+.init-p01st.push.apple.com'
+  - '+.init-s01st-lb.push-apple.com.akadns.net'
+  - '+.init-s01st.push.apple.com'
+  - '+.iosapps.itunes.g.aaplimg.com'
+  - '+.ipcdn.apple.com'
+  - '+.iphone-ld.apple.com'
+  - '+.iphone-ld.origin-apple.com.akadns.net'
+  - '+.is1-ssl.mzstatic.com'
+  - '+.is1.mzstatic.com'
+  - '+.is2-ssl.mzstatic.com'
+  - '+.is2.mzstatic.com'
+  - '+.is3-ssl.mzstatic.com'
+  - '+.is3.mzstatic.com'
+  - '+.is4-ssl.mzstatic.com'
+  - '+.is4.mzstatic.com'
+  - '+.is5-ssl.mzstatic.com'
+  - '+.is5.mzstatic.com'
+  - '+.itunes-apple.com.akadns.net'
+  - '+.itunes.apple.com'
+  - '+.itunesconnect.apple.com'
+  - '+.mesu-cdn.apple.com.akadns.net'
+  - '+.mesu-china.apple.com.akadns.net'
+  - '+.mesu.apple.com'
+  - '+.music.apple.com'
+  - '+.ocsp-lb.apple.com.akadns.net'
+  - '+.ocsp.apple.com'
+  - '+.ocsp2.apple.com'
+  - '+.oscdn.apple.com'
+  - '+.oscdn.origin-apple.com.akadns.net'
+  - '+.osxapps.itunes.g.aaplimg.com'
+  - '+.pancake.apple.com'
+  - '+.pancake.cdn-apple.com.akadns.net'
+  - '+.prod-support.apple-support.akadns.net'
+  - '+.publicassets.cdn-apple.com'
+  - '+.reserve-prime.apple.com'
+  - '+.s.mzstatic.com'
+  - '+.smp-device-content.apple.com'
+  - '+.stocks-sparkline-lb.apple.com.akadns.net'
+  - '+.stocks-sparkline.apple.com'
+  - '+.store.apple.com.edgekey.net.globalredir.akadns.net'
+  - '+.store.apple.com.edgekey.net'
+  - '+.store.apple.com'
+  - '+.store.storeimages.apple.com.akadns.net'
+  - '+.store.storeimages.cdn-apple.com'
+  - '+.support-china.apple-support.akadns.net'
+  - '+.support.apple.com'
+  - '+.swallow.apple.com'
+  - '+.swallow-apple-com.v.aaplimg.com'
+  - '+.swcatalog-cdn.apple.com.akadns.net'
+  - '+.swcatalog.apple.com'
+  - '+.swcdn.apple.com'
+  - '+.swcdn.g.aaplimg.com'
+  - '+.swdist.apple.com.akadns.net'
+  - '+.swdist.apple.com'
+  - '+.swscan-cdn.apple.com.akadns.net'
+  - '+.swscan.apple.com'
+  - '+.updates-http.cdn-apple.com.akadns.net'
+  - '+.updates-http.cdn-apple.com'
+  - '+.updates.cdn-apple.com'
+  - '+.valid.apple.com'
+  - '+.valid.origin-apple.com.akadns.net'
+  - '+.weather-data.apple.com.akadns.net'
+  - '+.weather-data.apple.com'
+  - '+.weather-map.apple.com'
+  - '+.weather-map2.apple.com'
+  - '+.www.apple.com.edgekey.net.globalredir.akadns.net'
+  - '+.www.apple.com.edgekey.net'
+  - '+.www.apple.com'
+  - '+.xp.apple.com'

rules/applications.txt

@@ -0,0 +1,81 @@
+payload:
+  - PROCESS-NAME,hysteria
+  - PROCESS-NAME,hysteria.exe
+  - PROCESS-NAME,leaf
+  - PROCESS-NAME,leaf.exe
+  - PROCESS-NAME,naive
+  - PROCESS-NAME,naive.exe
+  - PROCESS-NAME,privoxy
+  - PROCESS-NAME,privoxy.exe
+  - PROCESS-NAME,proxifier
+  - PROCESS-NAME,proxifier.exe
+  - PROCESS-NAME,shadowsocks
+  - PROCESS-NAME,shadowsocks.exe
+  - PROCESS-NAME,shadowsocksr
+  - PROCESS-NAME,shadowsocksr.exe
+  - PROCESS-NAME,sing-box
+  - PROCESS-NAME,sing-box.exe
+  - PROCESS-NAME,speeder
+  - PROCESS-NAME,speeder.exe
+  - PROCESS-NAME,speederv2
+  - PROCESS-NAME,speederv2.exe
+  - PROCESS-NAME,ss-local
+  - PROCESS-NAME,ss-local.exe
+  - PROCESS-NAME,sslocal
+  - PROCESS-NAME,sslocal.exe
+  - PROCESS-NAME,tinyvpn
+  - PROCESS-NAME,tinyvpn.exe
+  - PROCESS-NAME,trojan
+  - PROCESS-NAME,trojan.exe
+  - PROCESS-NAME,trojan-go
+  - PROCESS-NAME,trojan-go.exe
+  - PROCESS-NAME,tuic
+  - PROCESS-NAME,tuic.exe
+  - PROCESS-NAME,tuic-client
+  - PROCESS-NAME,tuic-client.exe
+  - PROCESS-NAME,udp2raw
+  - PROCESS-NAME,udp2raw.exe
+  - PROCESS-NAME,udp2raw_mp
+  - PROCESS-NAME,udp2raw_mp.exe
+  - PROCESS-NAME,v2ray
+  - PROCESS-NAME,v2ray.exe
+  - PROCESS-NAME,xray
+  - PROCESS-NAME,xray.exe
+  - PROCESS-NAME,Surge
+  - PROCESS-NAME,Surge 2
+  - PROCESS-NAME,Surge 3
+  - PROCESS-NAME,Surge 4
+  - PROCESS-NAME,Surge%202
+  - PROCESS-NAME,Surge%203
+  - PROCESS-NAME,Surge%204
+  - PROCESS-NAME,BitComet
+  - PROCESS-NAME,BitComet.exe
+  - PROCESS-NAME,DownloadService
+  - PROCESS-NAME,Folx
+  - PROCESS-NAME,NeatDM
+  - PROCESS-NAME,NeatDM.exe
+  - PROCESS-NAME,NetTransport
+  - PROCESS-NAME,NetTransport.exe
+  - PROCESS-NAME,Thunder
+  - PROCESS-NAME,Thunder.exe
+  - PROCESS-NAME,ThunderVIP.exe
+  - PROCESS-NAME,Transmission
+  - PROCESS-NAME,WebTorrent
+  - PROCESS-NAME,WebTorrent.exe
+  - PROCESS-NAME,aria2
+  - PROCESS-NAME,aria2.exe
+  - PROCESS-NAME,aria2c
+  - PROCESS-NAME,aria2c.exe
+  - PROCESS-NAME,fdm
+  - PROCESS-NAME,fdm.exe
+  - PROCESS-NAME,qBittorrent
+  - PROCESS-NAME,qbittorrent.exe
+  - PROCESS-NAME,qbittorrent-nox
+  - PROCESS-NAME,transmission-daemon.exe
+  - PROCESS-NAME,transmission-qt.exe
+  - PROCESS-NAME,uTorrent
+  - PROCESS-NAME,uTorrent.exe
+  - PROCESS-NAME,xdm
+  - PROCESS-NAME,xdm.exe
+  - PROCESS-NAME,xdman
+  - PROCESS-NAME,xdman.exe

rules/google.txt

@@ -0,0 +1,160 @@
+payload:
+  - '+.265.com'
+  - '+.2mdn-cn.net'
+  - '+.2mdn.net'
+  - '+.accounts.googlers.com'
+  - '+.accounts.xn--9trs65b.com'
+  - '+.accounts.xn--ggle-55da.com'
+  - '+.admob-cn.com'
+  - '+.adservice.google.com'
+  - '+.ai.ytimg.com'
+  - '+.app-measurement-cn.com'
+  - '+.app-measurement.com'
+  - '+.apps5.oingo.com'
+  - '+.avail.googleflights.net'
+  - '+.beacons.gcp.gvt2.com'
+  - '+.beacons.gvt2.com'
+  - '+.beacons2.gvt2.com'
+  - '+.beacons3.gvt2.com'
+  - '+.borgmon.adz.google.com'
+  - '+.c.admob.com'
+  - '+.c.android.clients.google.com'
+  - '+.cache-management-prod.google.com'
+  - '+.cache.pack.google.com'
+  - '+.checkin.gstatic.com'
+  - '+.clickserve.cc-dt.com'
+  - '+.clickserve.dartsearch.net'
+  - '+.clickserver.googleads.com'
+  - '+.clientservices.googleapis.com'
+  - '+.cn.widevine.com'
+  - '+.cnappinstall.googleadapis.com'
+  - '+.connectivitycheck.gstatic.com'
+  - '+.content.googleadapis.com'
+  - '+.corp.google.com'
+  - '+.corp.googleapis.com'
+  - '+.crashlyticsreports-pa.googleapis.com'
+  - '+.crl.pki.goog'
+  - '+.csi.gstatic.com'
+  - '+.dartsearch-cn.net'
+  - '+.dg-meta.video.google.com'
+  - '+.distribution.qatp1.net'
+  - '+.distribution.qcpp1.net'
+  - '+.distribution.qpdp1.net'
+  - '+.dl.google.com'
+  - '+.dl.l.google.com'
+  - '+.doubleclick-cn.net'
+  - '+.doubleclick.net'
+  - '+.download.mlcc.google.com'
+  - '+.download.qatp1.net'
+  - '+.download.qcpp1.net'
+  - '+.download.qpdp1.net'
+  - '+.download.tensorflow.google.com'
+  - '+.emmapplecodevice.googleapis.com'
+  - '+.firebase-settings.crashlytics.com'
+  - '+.fontfiles.googleadapis.com'
+  - '+.fontfiles.googleapis.com'
+  - '+.fonts.googleadapis.com'
+  - '+.fonts.googleapis.com'
+  - '+.fonts.gstatic.com'
+  - '+.g0.gstatic.com'
+  - '+.g1.gstatic.com'
+  - '+.g2.gstatic.com'
+  - '+.g3.gstatic.com'
+  - '+.gcpnode.com'
+  - '+.gonglchuangl.net'
+  - '+.gongyichuangyi.net'
+  - '+.google-analytics-cn.com'
+  - '+.google-analytics.com'
+  - '+.googleadservices-cn.com'
+  - '+.googleadservices.com'
+  - '+.googleanalytics.com'
+  - '+.googleapis-cn.com'
+  - '+.googleapps-cn.com'
+  - '+.googleflights-cn.net'
+  - '+.googleoptimize-cn.com'
+  - '+.googleoptimize.com'
+  - '+.googleplex.com'
+  - '+.googlesyndication-cn.com'
+  - '+.googlesyndication.com'
+  - '+.googletagmanager-cn.com'
+  - '+.googletagmanager.com'
+  - '+.googletagservices-cn.com'
+  - '+.googletagservices.com'
+  - '+.googletraveladservices-cn.com'
+  - '+.googletraveladservices.com'
+  - '+.googlevads-cn.com'
+  - '+.goto.google.com'
+  - '+.gstatic-cn.com'
+  - '+.gstaticadssl.l.google.com'
+  - '+.gtm.oasisfeng.com'
+  - '+.gvt1-cn.com'
+  - '+.gvt2-cn.com'
+  - '+.imasdk.googleapis.com'
+  - '+.monitoring.qatp1.net'
+  - '+.monitoring.qcpp1.net'
+  - '+.monitoring.qpdp1.net'
+  - '+.ocsp.pki.goog'
+  - '+.pagead-googlehosted.l.google.com'
+  - '+.performanceparameters.googleapis.com'
+  - '+.pki-goog.l.google.com'
+  - '+.play.1ucrs.com'
+  - '+.prod-controlbe.floonet.goog'
+  - '+.prod-databe.floonet.goog'
+  - '+.prod.databe.floonet.goog'
+  - '+.qagpublic.qatp1.net'
+  - '+.qagpublic.qcpp1.net'
+  - '+.qagpublic.qpdp1.net'
+  - '+.qgadmin.qatp1.net'
+  - '+.qgadmin.qcpp1.net'
+  - '+.qgadmin.qpdp1.net'
+  - '+.qpx.googleflights.net'
+  - '+.qualysapi.qatp1.net'
+  - '+.qualysapi.qcpp1.net'
+  - '+.qualysapi.qpdp1.net'
+  - '+.qualysguard.qatp1.net'
+  - '+.qualysguard.qcpp1.net'
+  - '+.qualysguard.qpdp1.net'
+  - '+.recaptcha.net'
+  - '+.redirector.bdn.dev'
+  - '+.redirector.c.chat.google.com'
+  - '+.redirector.c.mail.google.com'
+  - '+.redirector.c.pack.google.com'
+  - '+.redirector.c.play.google.com'
+  - '+.redirector.c.youtubeeducation.com'
+  - '+.redirector.gcpcdn.gvt1.com'
+  - '+.redirector.gvt1.com'
+  - '+.redirector.offline-maps.gvt1.com'
+  - '+.redirector.snap.gvt1.com'
+  - '+.redirector.xn--ngstr-lra8j.com'
+  - '+.regioninfo-pa.googleapis.com'
+  - '+.safebrowsing.googleapis.com'
+  - '+.scanservice1.qatp1.net'
+  - '+.scanservice1.qcpp1.net'
+  - '+.scanservice1.qpdp1.net'
+  - '+.service.urchin.com'
+  - '+.settings.xn--9trs65b.com'
+  - '+.ssl-google-analytics.l.google.com'
+  - '+.ssl.gstatic.com'
+  - '+.staging-controlbe.floonet.goog'
+  - '+.staging-databe.floonet.goog'
+  - '+.staging-regioninfo-pa.googleapis.com'
+  - '+.staging.databe.floonet.goog'
+  - '+.support.1ucrs.com'
+  - '+.tac.googleapis.com'
+  - '+.test.bugs-qa.chromium.org'
+  - '+.test.gbugs-qa.chromium.org'
+  - '+.tools.google.com'
+  - '+.tools.l.google.com'
+  - '+.up.corp.goog'
+  - '+.up.gcp.googlers.com'
+  - '+.update.crashlytics.com'
+  - '+.update.googleapis.com'
+  - '+.wear.googleapis.com'
+  - '+.www-google-analytics.l.google.com'
+  - '+.www-googletagmanager.l.google.com'
+  - '+.www.destinationurl.com'
+  - '+.www.googleadapis.com'
+  - '+.www.gstatic.com'
+  - '+.www.pxcc.com'
+  - '+.xn--9kr7l.com'
+  - '+.xn--flw351e.com'

rules/greatfire.txt

@@ -0,0 +1,9 @@
+payload:
+  - '+.applecensorship.com'
+  - '+.freebrowser.org'
+  - '+.freewechat.com'
+  - '+.freeweibo.com'
+  - '+.freezhihu.org'
+  - '+.greatfire.org'
+  - '+.pao-pao.net'
+  - '+.wikiunblocked.org'

rules/icloud.txt

@@ -0,0 +1,51 @@
+payload:
+  - '+.www-cdn.icloud.com.akadns.net'
+  - '+.applemx-icloud.com'
+  - '+.icloud-content.com'
+  - '+.icloud-isupport.com'
+  - '+.icloud.ch'
+  - '+.icloud.com'
+  - '+.icloud.de'
+  - '+.icloud.ee'
+  - '+.icloud.fi'
+  - '+.icloud.fr'
+  - '+.icloud.hu'
+  - '+.icloud.ie'
+  - '+.icloud.is'
+  - '+.icloud.jp'
+  - '+.icloud.lv'
+  - '+.icloud.om'
+  - '+.icloud.org'
+  - '+.icloud.pt'
+  - '+.icloud.ro'
+  - '+.icloud.se'
+  - '+.icloud.si'
+  - '+.icloud.sk'
+  - '+.icloud.vn'
+  - '+.icloudads.net'
+  - '+.icloudbox.net'
+  - '+.icloudbrowser.net'
+  - '+.icloude.com'
+  - '+.icloudhome.com'
+  - '+.icloudmail.net'
+  - '+.icloudmusic.net'
+  - '+.icloudnet.net'
+  - '+.icloudpay.net'
+  - '+.icloudo.com'
+  - '+.icloudo.de'
+  - '+.icloudo.net'
+  - '+.icloudos.de'
+  - '+.icloudos.net'
+  - '+.icloudsecure.net'
+  - '+.icloudsetup.com'
+  - '+.ios-icloud.com'
+  - '+.me.com'
+  - '+.myicloud.net'
+  - '+.mylcloud.net'
+  - '+.wwwicloud.com'
+  - '+.apple-icloud.cn'
+  - '+.appleicloud.cn'
+  - '+.icloud-apple.cn'
+  - '+.icloud.com.cn'
+  - '+.icloud.net.cn'
+  - '+.icloudapple.cn'

rules/lancidr.txt

@@ -0,0 +1,19 @@
+payload:
+  - '0.0.0.0/8'
+  - '10.0.0.0/8'
+  - '100.64.0.0/10'
+  - '127.0.0.0/8'
+  - '169.254.0.0/16'
+  - '172.16.0.0/12'
+  - '192.0.0.0/24'
+  - '192.0.2.0/24'
+  - '192.88.99.0/24'
+  - '192.168.0.0/16'
+  - '198.18.0.0/15'
+  - '198.51.100.0/24'
+  - '203.0.113.0/24'
+  - '224.0.0.0/3'
+  - '::/127'
+  - 'fc00::/7'
+  - 'fe80::/10'
+  - 'ff00::/8'

rules/private.txt

@@ -0,0 +1,136 @@
+payload:
+  - 'instant.arubanetworks.com'
+  - 'setmeup.arubanetworks.com'
+  - 'asusrouter.com'
+  - 'router.asus.com'
+  - 'www.asusrouter.com'
+  - 'cp.cloudflare.com'
+  - 'detectportal.firefox.com'
+  - 'routerlogin.com'
+  - 'www.routerlogin.com'
+  - 'tplogin.cn'
+  - 'miwifi.com'
+  - 'www.mifiwi.com'
+  - '+.lan'
+  - '+.localdomain'
+  - '+.example'
+  - '+.invalid'
+  - '+.localhost'
+  - '+.test'
+  - '+.local'
+  - '+.msftconnecttest.com'
+  - '+.leike.cc'
+  - '+.ts.net'
+  - '+.zte.home'
+  - '+.msftncsi.com'
+  - '+.home.arpa'
+  - '+.tplinkwifi.net'
+  - '+.tendawifi.com'
+  - '+.plex.direct'
+  - '+.router.ctc'
+  - '+.phicomm.me'
+  - '+.peiluyou.com'
+  - '+.my.router'
+  - '+.hiwifi.com'
+  - '+.10.in-addr.arpa'
+  - '+.networkcheck.kde.org'
+  - '+.connectivitycheck.gstatic.com'
+  - '+.captive.apple.com'
+  - '+.127.in-addr.arpa'
+  - '+.0.in-addr.arpa'
+  - '+.113.100.in-addr.arpa'
+  - '+.97.100.in-addr.arpa'
+  - '+.16.172.in-addr.arpa'
+  - '+.17.172.in-addr.arpa'
+  - '+.18.172.in-addr.arpa'
+  - '+.19.172.in-addr.arpa'
+  - '+.20.172.in-addr.arpa'
+  - '+.21.172.in-addr.arpa'
+  - '+.d.f.ip6.arpa'
+  - '+.localhost.ptlogin2.qq.com'
+  - '+.localhost.sec.qq.com'
+  - '+.22.172.in-addr.arpa'
+  - '+.23.172.in-addr.arpa'
+  - '+.24.172.in-addr.arpa'
+  - '+.64.100.in-addr.arpa'
+  - '+.65.100.in-addr.arpa'
+  - '+.66.100.in-addr.arpa'
+  - '+.67.100.in-addr.arpa'
+  - '+.68.100.in-addr.arpa'
+  - '+.69.100.in-addr.arpa'
+  - '+.70.100.in-addr.arpa'
+  - '+.71.100.in-addr.arpa'
+  - '+.72.100.in-addr.arpa'
+  - '+.73.100.in-addr.arpa'
+  - '+.74.100.in-addr.arpa'
+  - '+.75.100.in-addr.arpa'
+  - '+.76.100.in-addr.arpa'
+  - '+.77.100.in-addr.arpa'
+  - '+.78.100.in-addr.arpa'
+  - '+.79.100.in-addr.arpa'
+  - '+.80.100.in-addr.arpa'
+  - '+.81.100.in-addr.arpa'
+  - '+.82.100.in-addr.arpa'
+  - '+.83.100.in-addr.arpa'
+  - '+.84.100.in-addr.arpa'
+  - '+.85.100.in-addr.arpa'
+  - '+.86.100.in-addr.arpa'
+  - '+.87.100.in-addr.arpa'
+  - '+.88.100.in-addr.arpa'
+  - '+.89.100.in-addr.arpa'
+  - '+.90.100.in-addr.arpa'
+  - '+.91.100.in-addr.arpa'
+  - '+.92.100.in-addr.arpa'
+  - '+.93.100.in-addr.arpa'
+  - '+.94.100.in-addr.arpa'
+  - '+.95.100.in-addr.arpa'
+  - '+.96.100.in-addr.arpa'
+  - '+.254.169.in-addr.arpa'
+  - '+.98.100.in-addr.arpa'
+  - '+.99.100.in-addr.arpa'
+  - '+.100.100.in-addr.arpa'
+  - '+.101.100.in-addr.arpa'
+  - '+.102.100.in-addr.arpa'
+  - '+.103.100.in-addr.arpa'
+  - '+.104.100.in-addr.arpa'
+  - '+.105.100.in-addr.arpa'
+  - '+.106.100.in-addr.arpa'
+  - '+.107.100.in-addr.arpa'
+  - '+.108.100.in-addr.arpa'
+  - '+.109.100.in-addr.arpa'
+  - '+.110.100.in-addr.arpa'
+  - '+.111.100.in-addr.arpa'
+  - '+.112.100.in-addr.arpa'
+  - '+.168.192.in-addr.arpa'
+  - '+.114.100.in-addr.arpa'
+  - '+.115.100.in-addr.arpa'
+  - '+.116.100.in-addr.arpa'
+  - '+.117.100.in-addr.arpa'
+  - '+.118.100.in-addr.arpa'
+  - '+.119.100.in-addr.arpa'
+  - '+.120.100.in-addr.arpa'
+  - '+.121.100.in-addr.arpa'
+  - '+.122.100.in-addr.arpa'
+  - '+.123.100.in-addr.arpa'
+  - '+.124.100.in-addr.arpa'
+  - '+.125.100.in-addr.arpa'
+  - '+.126.100.in-addr.arpa'
+  - '+.127.100.in-addr.arpa'
+  - '+.31.172.in-addr.arpa'
+  - '+.30.172.in-addr.arpa'
+  - '+.29.172.in-addr.arpa'
+  - '+.28.172.in-addr.arpa'
+  - '+.27.172.in-addr.arpa'
+  - '+.26.172.in-addr.arpa'
+  - '+.25.172.in-addr.arpa'
+  - '+.b.e.f.ip6.arpa'
+  - '+.a.e.f.ip6.arpa'
+  - '+.9.e.f.ip6.arpa'
+  - '+.8.e.f.ip6.arpa'
+  - '+.113.0.203.in-addr.arpa'
+  - '+.100.51.198.in-addr.arpa'
+  - '+.2.0.192.in-addr.arpa'
+  - '+.255.255.255.255.in-addr.arpa'
+  - '+.8.b.d.0.1.0.0.2.ip6.arpa'
+  - '+.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa'
+  - '+.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa'

rules/telegramcidr.txt

@@ -0,0 +1,13 @@
+payload:
+  - '91.105.192.0/23'
+  - '91.108.4.0/22'
+  - '91.108.8.0/21'
+  - '91.108.16.0/21'
+  - '91.108.56.0/22'
+  - '95.161.64.0/20'
+  - '149.154.160.0/20'
+  - '185.76.151.0/24'
+  - '2001:67c:4e8::/48'
+  - '2001:b28:f23c::/47'
+  - '2001:b28:f23f::/48'
+  - '2a0a:f280::/32'