18 changed files with 138 additions and 168880 deletions
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@ -1,15 +0,0 @@
 # To get started with Dependabot version updates, you'll need to specify which
 # package ecosystems to update and where the package manifests are located.
 # Please see the documentation for all configuration options:
 # https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
 version: 2
 updates:
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "daily"
      timezone: "Asia/Shanghai"
      time: "07:00"
    pull-request-branch-name:
      separator: "-"
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@ -0,0 +1,137 @@
 name: Generate RULE-SET for Premium Edition of Clash
 on:
  schedule:
    - cron: "30 22 * * *"
  push:
    branches:
      - master
    paths-ignore:
      - "**/README.md"
 jobs:
  build:
    name: Build
    runs-on: ubuntu-latest
    steps:
      - name: Set variables
        run: |
          echo "::set-env name=RELEASE_NAME::Released on $(date +%Y%m%d%H%M)"
          echo "::set-env name=TAG_NAME::$(date +%Y%m%d%H%M)"
          echo "::set-env name=v2fly_reject::https://raw.githubusercontent.com/v2fly/domain-list-community/release/category-ads-all.txt"
          echo "::set-env name=v2fly_not_cn::https://raw.githubusercontent.com/v2fly/domain-list-community/release/geolocation-!cn.txt"
          echo "::set-env name=v2fly_cn::https://raw.githubusercontent.com/v2fly/domain-list-community/release/cn.txt"
          echo "::set-env name=v2fly_icloud::https://raw.githubusercontent.com/v2fly/domain-list-community/release/icloud.txt"
          echo "::set-env name=v2fly_apple::https://raw.githubusercontent.com/v2fly/domain-list-community/release/apple.txt"
          echo "::set-env name=Loyalsoldier_reject::https://raw.githubusercontent.com/Loyalsoldier/v2ray-rules-dat/release/reject-list.txt"
          echo "::set-env name=Loyalsoldier_proxy::https://raw.githubusercontent.com/Loyalsoldier/v2ray-rules-dat/release/proxy-list.txt"
          echo "::set-env name=Loyalsoldier_direct::https://raw.githubusercontent.com/Loyalsoldier/v2ray-rules-dat/release/direct-list.txt"
          echo "::set-env name=felixonmars_apple::https://raw.githubusercontent.com/felixonmars/dnsmasq-china-list/master/apple.china.conf"
          echo "::set-env name=felixonmars_google::https://raw.githubusercontent.com/felixonmars/dnsmasq-china-list/master/google.china.conf"
          echo "::set-env name=ipipnet_chinaiplist::https://raw.githubusercontent.com/17mon/china_ip_list/master/china_ip_list.txt"
        shell: bash
      - name: Checkout the "hidden" branch
        uses: actions/checkout@v2.3.1
        with:
          ref: hidden
      - name: Generate icloud.txt file
        run: |
          echo "payload:" > icloud.txt
          curl -sSL ${v2fly_icloud} | grep -e "^full:" -e "^domain:" | awk -F ':' '{printf "  - |+.%s|\n", $2}' | sed "s/|/'/g" >> icloud.txt
      - name: Generate google.txt file
        run: |
          echo "payload:" > google.txt
          curl -sSL ${felixonmars_google} | awk -F '/' '{printf "  - |+.%s|\n", $2}' | sed "s/|/'/g" >> google.txt
      - name: Get and add apple domains into apple.temp file
        run: |
          curl -sSL ${felixonmars_apple} | awk -F '/' '{print $2}' > apple.temp
          curl -sSL ${v2fly_apple} | grep -e "^full:" -e "^domain:" | awk -F ':' '{print $2}' >> apple.temp
      - name: Get and add direct domains into direct.temp file
        run: |
          curl -sSL ${Loyalsoldier_direct} | perl -ne '/^([-_a-zA-Z0-9]+(\.[-_a-zA-Z0-9]+)+)\n/ && print "$1\n"' > direct.temp
          curl -sSL ${v2fly_cn} | grep -e "^full:" -e "^domain:" | awk -F ':' '{print $2}' >> direct.temp
      - name: Get and add proxy domains into proxy.temp file
        run: |
          curl -sSL ${Loyalsoldier_proxy} | perl -ne '/^([-_a-zA-Z0-9]+(\.[-_a-zA-Z0-9]+)+)\n/ && print "$1\n"' > proxy.temp
          curl -sSL ${v2fly_not_cn} | grep -e "^full:" -e "^domain:" | awk -F ':' '{print $2}' | perl -ne 'print if not /(.+\.cn$)/' >> proxy.temp
      - name: Get and add reject domains into reject.temp file
        run: |
          curl -sSL ${Loyalsoldier_reject} | perl -ne '/^([-_a-zA-Z0-9]+(\.[-_a-zA-Z0-9]+)+)\n/ && print "$1\n"' > reject.temp
          curl -sSL ${v2fly_reject} | grep -e "^full:" -e "^domain:" | awk -F ':' '{print $2}' >> reject.temp
      - name: Sort and generate redundant lists
        run: |
          cat apple.temp | sort --ignore-case -u > apple-list-with-redundant
          cat direct.temp | sort --ignore-case -u > direct-list-with-redundant
          cat proxy.temp | sort --ignore-case -u > proxy-list-with-redundant
          cat reject.temp | sort --ignore-case -u > reject-list-with-redundant
      - name: Remove redundant domains
        run: |
          chmod +x findRedundantDomain.py
          ./findRedundantDomain.py ./apple-list-with-redundant ./apple-list-deleted-unsort
          ./findRedundantDomain.py ./direct-list-with-redundant ./direct-list-deleted-unsort
          ./findRedundantDomain.py ./proxy-list-with-redundant ./proxy-list-deleted-unsort
          ./findRedundantDomain.py ./reject-list-with-redundant ./reject-list-deleted-unsort
          [ ! -f "apple-list-deleted-unsort" ] && touch apple-list-deleted-unsort
          [ ! -f "direct-list-deleted-unsort" ] && touch direct-list-deleted-unsort
          [ ! -f "proxy-list-deleted-unsort" ] && touch proxy-list-deleted-unsort
          [ ! -f "reject-list-deleted-unsort" ] && touch reject-list-deleted-unsort
          sort ./apple-list-deleted-unsort > ./apple-list-deleted-sort
          sort ./direct-list-deleted-unsort > ./direct-list-deleted-sort
          sort ./proxy-list-deleted-unsort > ./proxy-list-deleted-sort
          sort ./reject-list-deleted-unsort > ./reject-list-deleted-sort
          diff ./apple-list-deleted-sort ./apple-list-with-redundant | awk '/^>/{print $2}' > ./apple-list-without-redundant
          diff ./direct-list-deleted-sort ./direct-list-with-redundant | awk '/^>/{print $2}' > ./direct-list-without-redundant
          diff ./proxy-list-deleted-sort ./proxy-list-with-redundant | awk '/^>/{print $2}' > ./proxy-list-without-redundant
          diff ./reject-list-deleted-sort ./reject-list-with-redundant | awk '/^>/{print $2}' > ./reject-list-without-redundant
      - name: Write to files
        run: |
          echo "payload:" > apple.txt
          echo "payload:" > direct.txt
          echo "payload:" > proxy.txt
          echo "payload:" > reject.txt
          cat apple-list-without-redundant | awk '{printf "  - |+.%s|\n", $1}' | sed "s/|/'/g" >> apple.txt
          cat direct-list-without-redundant | awk '{printf "  - |+.%s|\n", $1}' | sed "s/|/'/g" >> direct.txt
          cat proxy-list-without-redundant | awk '{printf "  - |+.%s|\n", $1}' | sed "s/|/'/g" >> proxy.txt
          cat reject-list-without-redundant | awk '{printf "  - |+.%s|\n", $1}' | sed "s/|/'/g" >> reject.txt
      - name: Generate cncidr.txt file
        run: |
          echo "payload:" > cncidr.txt
          curl -sSL ${ipipnet_chinaiplist} | perl -ne '/^(\d{1,3}(\.\d{1,3}){3}\/\d{1,2})/ && print "  - |$1|\n"' | sed "s/|/'/g" >> cncidr.txt
      - name: Move files to publish directory
        run: |
          mkdir -p publish
          install -p {apple,icloud,google,proxy,direct,reject,cncidr,lancidr}.txt ./publish/
      - name: Release and upload assets
        uses: softprops/action-gh-release@v1
        with:
          name: ${{ env.RELEASE_NAME }}
          tag_name: ${{ env.TAG_NAME }}
          draft: false
          prerelease: false
          files: |
            ./publish/*
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      - name: Git push assets to "release" branch
        run: |
          cd publish
          git init
          git config --local user.name "actions"
          git config --local user.email "action@github.com"
          git checkout -b release
          git add .
          git commit -m "${{ env.RELEASE_NAME }}"
          git remote add origin "https://${{ github.actor }}:${{ secrets.GITHUB_TOKEN }}@github.com/${{ github.repository }}"
          git push -f -u origin release
--- a/.github/workflows/run.yml
+++ b/.github/workflows/run.yml
@ -1,141 +0,0 @@
 name: Generate RULE-SET for Premium Edition of Clash
 on:
  workflow_dispatch:
  schedule:
    - cron: "30 22 * * *"
  push:
    branches:
      - master
    paths-ignore:
      - "**/README.md"
 jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - name: Set variables
        run: |
          echo "RELEASE_NAME=Released on $(date +%Y%m%d%H%M)" >> $GITHUB_ENV
          echo "TAG_NAME=$(date +%Y%m%d%H%M)" >> $GITHUB_ENV
          echo "custom_icloud=https://raw.githubusercontent.com/Loyalsoldier/domain-list-custom/release/icloud.txt" >> $GITHUB_ENV
          echo "custom_tld_not_cn=https://raw.githubusercontent.com/Loyalsoldier/domain-list-custom/release/tld-!cn.txt" >> $GITHUB_ENV
          echo "custom_private=https://raw.githubusercontent.com/Loyalsoldier/domain-list-custom/release/private.txt" >> $GITHUB_ENV
          echo "Loyalsoldier_reject=https://raw.githubusercontent.com/Loyalsoldier/v2ray-rules-dat/release/reject-list.txt" >> $GITHUB_ENV
          echo "Loyalsoldier_proxy=https://raw.githubusercontent.com/Loyalsoldier/v2ray-rules-dat/release/proxy-list.txt" >> $GITHUB_ENV
          echo "Loyalsoldier_direct=https://raw.githubusercontent.com/Loyalsoldier/v2ray-rules-dat/release/direct-list.txt" >> $GITHUB_ENV
          echo "Loyalsoldier_gfw=https://raw.githubusercontent.com/Loyalsoldier/v2ray-rules-dat/release/gfw.txt" >> $GITHUB_ENV
          echo "Loyalsoldier_greatfire=https://raw.githubusercontent.com/Loyalsoldier/v2ray-rules-dat/release/greatfire.txt" >> $GITHUB_ENV
          echo "felixonmars_apple=https://raw.githubusercontent.com/felixonmars/dnsmasq-china-list/master/apple.china.conf" >> $GITHUB_ENV
          echo "felixonmars_google=https://raw.githubusercontent.com/felixonmars/dnsmasq-china-list/master/google.china.conf" >> $GITHUB_ENV
          echo "cn_cidr=https://raw.githubusercontent.com/Loyalsoldier/geoip/release/text/cn.txt" >> $GITHUB_ENV
          echo "lan_cidr=https://raw.githubusercontent.com/Loyalsoldier/geoip/release/text/private.txt" >> $GITHUB_ENV
          echo "telegram_cidr=https://raw.githubusercontent.com/Loyalsoldier/geoip/release/text/telegram.txt" >> $GITHUB_ENV
        shell: bash
      - name: Checkout the "hidden" branch
        uses: actions/checkout@v4
        with:
          ref: hidden
      - name: Generate icloud.txt file
        run: |
          echo "payload:" > icloud.txt
          curl -sSL ${custom_icloud} | grep -E "^(full|domain):" | awk -F ':' '{printf "  - |+.%s|\n", $2}' | sed "s/|/'/g" >> icloud.txt
      - name: Generate google.txt file
        run: |
          echo "payload:" > google.txt
          curl -sSL ${felixonmars_google} | perl -ne '/^server=\/([^\/]+)\// && print "  - |+.$1|\n"' | sed "s/|/'/g" >> google.txt
      - name: Generate apple.txt file
        run: |
          echo "payload:" > apple.txt
          curl -sSL ${felixonmars_apple} | perl -ne '/^server=\/([^\/]+)\// && print "  - |+.$1|\n"' | sed "s/|/'/g" >> apple.txt
      - name: Generate private.txt file
        run: |
          echo "payload:" > private.txt
          curl -sSL ${custom_private} | awk -F ':' '/^full:/ {printf "  - |%s|\n", $2}' | sed "s/|/'/g" >> private.txt
          curl -sSL ${custom_private} | awk -F ':' '/^domain:/ {printf "  - |+.%s|\n", $2}' | sed "s/|/'/g" >> private.txt
      - name: Generate direct.txt file
        run: |
          echo "payload:" > direct.txt
          curl -sSL ${Loyalsoldier_direct} | grep -Ev "^(regexp|keyword):" | perl -ne '/^(full:)([-_a-zA-Z0-9]+(\.[-_a-zA-Z0-9]+)*)/ && print "  - |$2|\n"' | sed "s/|/'/g" >> direct.txt
          curl -sSL ${Loyalsoldier_direct} | grep -Ev "^(regexp|keyword|full):" | perl -ne '/^(domain:)?([-_a-zA-Z0-9]+(\.[-_a-zA-Z0-9]+)*)/ && print "  - |+.$2|\n"' | sed "s/|/'/g" >> direct.txt
      - name: Generate proxy.txt file
        run: |
          echo "payload:" > proxy.txt
          curl -sSL ${Loyalsoldier_proxy} | grep -Ev "^(regexp|keyword):" | perl -ne '/^(full:)([-_a-zA-Z0-9]+(\.[-_a-zA-Z0-9]+)*)/ && print "  - |$2|\n"' | sed "s/|/'/g" >> proxy.txt
          curl -sSL ${Loyalsoldier_proxy} | grep -Ev "^(regexp|keyword|full):" | perl -ne '/^(domain:)?([-_a-zA-Z0-9]+(\.[-_a-zA-Z0-9]+)*)/ && print "  - |+.$2|\n"' | sed "s/|/'/g" >> proxy.txt
      - name: Generate reject.txt file
        run: |
          echo "payload:" > reject.txt
          curl -sSL ${Loyalsoldier_reject} | grep -Ev "^(regexp|keyword):" | perl -ne '/^(domain:|full:)?([-_a-zA-Z0-9]+(\.[-_a-zA-Z0-9]+)*)/ && print "  - |+.$2|\n"' | sed "s/|/'/g" >> reject.txt
      - name: Generate gfw.txt file
        run: |
          echo "payload:" > gfw.txt
          curl -sSL ${Loyalsoldier_gfw} | grep -Ev "^(regexp|keyword):" | perl -ne '/^(domain:|full:)?([-_a-zA-Z0-9]+(\.[-_a-zA-Z0-9]+)*)/ && print "  - |+.$2|\n"' | sed "s/|/'/g" >> gfw.txt
      - name: Generate greatfire.txt file
        run: |
          echo "payload:" > greatfire.txt
          curl -sSL ${Loyalsoldier_greatfire} | grep -Ev "^(regexp|keyword):" | perl -ne '/^(domain:|full:)?([-_a-zA-Z0-9]+(\.[-_a-zA-Z0-9]+)*)/ && print "  - |+.$2|\n"' | sed "s/|/'/g" >> greatfire.txt
      - name: Generate tld-not-cn.txt file
        run: |
          echo "payload:" > tld-not-cn.txt
          curl -sSL "${custom_tld_not_cn}" | perl -ne '/^domain:([-_a-zA-Z0-9]+(\.[-_a-zA-Z0-9]+)*)/ && print "  - |+.$1|\n"' | sed "s/|/'/g" >> tld-not-cn.txt
      - name: Generate cncidr.txt file
        run: |
          echo "payload:" > cncidr.txt
          curl -sSL ${cn_cidr} | perl -ne '/(.+\/\d+)/ && print "  - |$1|\n"' | sed "s/|/'/g" >> cncidr.txt
      - name: Generate telegramcidr.txt file
        run: |
          echo "payload:" > telegramcidr.txt
          curl -sSL ${telegram_cidr} | perl -ne '/(.+\/\d+)/ && print "  - |$1|\n"' | sed "s/|/'/g" >> telegramcidr.txt
      - name: Generate lancidr.txt file
        run: |
          echo "payload:" > lancidr.txt
          curl -sSL ${lan_cidr} | perl -ne '/(.+\/\d+)/ && print "  - |$1|\n"' | sed "s/|/'/g" >> lancidr.txt
      - name: Move files to publish directory
        run: |
          mkdir -p publish
          cp *.txt ./publish/
      - name: Release and upload assets
        uses: softprops/action-gh-release@v1
        with:
          name: ${{ env.RELEASE_NAME }}
          tag_name: ${{ env.TAG_NAME }}
          draft: false
          prerelease: false
          files: |
            ./publish/*
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      - name: Git push assets to "release" branch
        run: |
          cd publish || exit 1
          git init
          git config --local user.name "github-actions[bot]"
          git config --local user.email "41898282+github-actions[bot]@users.noreply.github.com"
          git checkout -b release
          git add .
          git commit -m "${{ env.RELEASE_NAME }}"
          git remote add origin "https://${{ github.actor }}:${{ secrets.GITHUB_TOKEN }}@github.com/${{ github.repository }}"
          git push -f origin release
      - name: Purge jsdelivr CDN
        run: |
          cd publish || exit 1
          for file in $(ls); do
            curl -i "https://purge.jsdelivr.net/gh/${{ github.repository }}@release/${file}"
          done
--- a/README.md
+++ b/README.md
@ -1,223 +1 @@
-# 简介
+# clash-rules
 本项目生成适用于 [**Clash Premium 内核**](https://github.com/Dreamacro/clash/releases/tag/premium)的规则集（RULE-SET），同时适用于所有使用 Clash Premium 内核的 Clash 图形用户界面（GUI）客户端。使用 GitHub Actions 北京时间每天早上 6:30 自动构建，保证规则最新。
 ## 说明
 本项目规则集（RULE-SET）的数据主要来源于项目 [@Loyalsoldier/v2ray-rules-dat](https://github.com/Loyalsoldier/v2ray-rules-dat) 和 [@v2fly/domain-list-community](https://github.com/v2fly/domain-list-community)；[`Apple`](https://github.com/Loyalsoldier/clash-rules/blob/release/apple.txt) 和 [`Google`](https://github.com/Loyalsoldier/clash-rules/blob/release/google.txt) 列表里的域名来源于项目 [@felixonmars/dnsmasq-china-list](https://github.com/felixonmars/dnsmasq-china-list)；中国大陆 IPv4 地址数据使用 [@17mon/china_ip_list](https://github.com/17mon/china_ip_list)。
 本项目的规则集（RULE-SET）只适用于 Clash **Premium** 版本。Clash Premium 相对于普通版，增加了 **TUN 增强模式**，能接管设备所有 TCP 和 UDP 流量，类似 [Surge for Mac](https://nssurge.com) 的增强模式。更多高级特性请看[官方文档](https://github.com/Dreamacro/clash/wiki/Clash-Premium-Features)。
 ### Clash Premium 各版本下载地址
 - Clash Premium **命令行**版（适用于 Windows、macOS、Linux、OpenWRT 等多种平台）：[https://github.com/Dreamacro/clash/releases/tag/premium](https://github.com/Dreamacro/clash/releases/tag/premium)
 - Clash Premium **图形用户界面**版：
  - [ClashX Pro](https://install.appcenter.ms/users/clashx/apps/clashx-pro/distribution_groups/public)（适用于 macOS）
  - [Clash for Windows](https://github.com/Fndroid/clash_for_windows_pkg/releases)（适用于 Windows、macOS、Linux）
  - [Clash for Android](https://github.com/Kr328/ClashForAndroid/releases)（适用于 Android）
 ## 规则文件地址及使用方式
 ### 在线地址（URL）
 > 如果无法访问域名 `raw.githubusercontent.com`，可以使用第二个地址（`cdn.jsdelivr.net`），但是内容更新会有 12 小时的延迟。以下地址填写在 Clash 配置文件里的 `rule-providers` 里的 `url` 配置项中。
 - **直连域名列表 direct.txt**：
  - [https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/direct.txt](https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/direct.txt)
  - [https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt](https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt)
 - **代理域名列表 proxy.txt**：
  - [https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/proxy.txt](https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/proxy.txt)
  - [https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt](https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt)
 - **广告域名列表 reject.txt**：
  - [https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/reject.txt](https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/reject.txt)
  - [https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt](https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt)
 - **私有网络专用域名列表 private.txt**：
  - [https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/private.txt](https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/private.txt)
  - [https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt](https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt)
 - **Apple 在中国大陆可直连的域名列表 apple.txt**：
  - [https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/apple.txt](https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/apple.txt)
  - [https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/apple.txt](https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/apple.txt)
 - **iCloud 域名列表 icloud.txt**：
  - [https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/icloud.txt](https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/icloud.txt)
  - [https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/icloud.txt](https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/icloud.txt)
 - **[慎用]Google 在中国大陆可直连的域名列表 google.txt**：
  - [https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/google.txt](https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/google.txt)
  - [https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/google.txt](https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/google.txt)
 - **GFWList 域名列表 gfw.txt**：
  - [https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/gfw.txt](https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/gfw.txt)
  - [https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/gfw.txt](https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/gfw.txt)
 - **非中国大陆使用的顶级域名列表 tld-not-cn.txt**：
  - [https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/tld-not-cn.txt](https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/tld-not-cn.txt)
  - [https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/tld-not-cn.txt](https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/tld-not-cn.txt)
 - **Telegram 使用的 IP 地址列表 telegramcidr.txt**：
  - [https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/telegramcidr.txt](https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/telegramcidr.txt)
  - [https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/telegramcidr.txt](https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/telegramcidr.txt)
 - **局域网 IP 及保留 IP 地址列表 lancidr.txt**：
  - [https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/lancidr.txt](https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/lancidr.txt)
  - [https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/lancidr.txt](https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/lancidr.txt)
 - **中国大陆 IP 地址列表 cncidr.txt**：
  - [https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/cncidr.txt](https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/cncidr.txt)
  - [https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/cncidr.txt](https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/cncidr.txt)
 - **需要直连的常见软件列表 applications.txt**：
  - [https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/applications.txt](https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/applications.txt)
  - [https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/applications.txt](https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/applications.txt)
 ### 使用方式
 关于 Clash Premium 使用方式，请查看[官方文档](https://github.com/Dreamacro/clash/wiki/Clash-Premium-Features) 或 [Lancellc's GitBook](https://lancellc.gitbook.io/clash/)。
 要想使用本项目的规则集，只需要在 Clash 配置文件中添加如下 `rule-providers` 和 `rules`。
 #### Rule Providers 配置方式
 ```yaml
 rule-providers:
  reject:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt"
    path: ./ruleset/reject.yaml
    interval: 86400
  icloud:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/icloud.txt"
    path: ./ruleset/icloud.yaml
    interval: 86400
  apple:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/apple.txt"
    path: ./ruleset/apple.yaml
    interval: 86400
  google:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/google.txt"
    path: ./ruleset/google.yaml
    interval: 86400
  proxy:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt"
    path: ./ruleset/proxy.yaml
    interval: 86400
  direct:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt"
    path: ./ruleset/direct.yaml
    interval: 86400
  private:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt"
    path: ./ruleset/private.yaml
    interval: 86400
  gfw:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/gfw.txt"
    path: ./ruleset/gfw.yaml
    interval: 86400
  tld-not-cn:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/tld-not-cn.txt"
    path: ./ruleset/tld-not-cn.yaml
    interval: 86400
  telegramcidr:
    type: http
    behavior: ipcidr
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/telegramcidr.txt"
    path: ./ruleset/telegramcidr.yaml
    interval: 86400
  cncidr:
    type: http
    behavior: ipcidr
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/cncidr.txt"
    path: ./ruleset/cncidr.yaml
    interval: 86400
  lancidr:
    type: http
    behavior: ipcidr
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/lancidr.txt"
    path: ./ruleset/lancidr.yaml
    interval: 86400
  applications:
    type: http
    behavior: classical
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/applications.txt"
    path: ./ruleset/applications.yaml
    interval: 86400
 ```
 #### 白名单模式 Rules 配置方式（推荐）
 - 白名单模式，意为「**没有命中规则的网络流量，统统使用代理**」，适用于服务器线路网络质量稳定、快速，不缺服务器流量的用户。
 - 以下配置中，除了 `DIRECT` 和 `REJECT` 是默认存在于 Clash 中的 policy（路由策略/流量处理策略），其余均为自定义 policy，对应配置文件中 `proxies` 或 `proxy-groups` 中的 `name`。如你直接使用下面的 `rules` 规则，则需要在 `proxies` 或 `proxy-groups` 中手动配置一个 `name` 为 `PROXY` 的 policy。
 - 如你希望 Apple、iCloud 和 Google 列表中的域名使用代理，则把 policy 由 `DIRECT` 改为 `PROXY`，以此类推，举一反三。
 - 如你不希望进行 DNS 解析，可在 `GEOIP` 规则的最后加上 `,no-resolve`，如 `GEOIP,CN,DIRECT,no-resolve`。
 ```yaml
 rules:
  - RULE-SET,applications,DIRECT
  - DOMAIN,clash.razord.top,DIRECT
  - DOMAIN,yacd.haishan.me,DIRECT
  - RULE-SET,private,DIRECT
  - RULE-SET,reject,REJECT
  - RULE-SET,icloud,DIRECT
  - RULE-SET,apple,DIRECT
  - RULE-SET,google,DIRECT
  - RULE-SET,proxy,PROXY
  - RULE-SET,direct,DIRECT
  - RULE-SET,lancidr,DIRECT
  - RULE-SET,cncidr,DIRECT
  - RULE-SET,telegramcidr,PROXY
  - GEOIP,LAN,DIRECT
  - GEOIP,CN,DIRECT
  - MATCH,PROXY
 ```
 #### 黑名单模式 Rules 配置方式
 - 黑名单模式，意为「**只有命中规则的网络流量，才使用代理**」，适用于服务器线路网络质量不稳定或不够快，或服务器流量紧缺的用户。通常也是软路由用户、家庭网关用户的常用模式。
 - 以下配置中，除了 `DIRECT` 和 `REJECT` 是默认存在于 Clash 中的 policy（路由策略/流量处理策略），其余均为自定义 policy，对应配置文件中 `proxies` 或 `proxy-groups` 中的 `name`。如你直接使用下面的 `rules` 规则，则需要在 `proxies` 或 `proxy-groups` 中手动配置一个 `name` 为 `PROXY` 的 policy。
 ```yaml
 rules:
  - RULE-SET,applications,DIRECT
  - DOMAIN,clash.razord.top,DIRECT
  - DOMAIN,yacd.haishan.me,DIRECT
  - RULE-SET,private,DIRECT
  - RULE-SET,reject,REJECT
  - RULE-SET,tld-not-cn,PROXY
  - RULE-SET,gfw,PROXY
  - RULE-SET,telegramcidr,PROXY
  - MATCH,DIRECT
 ```
 ## 致谢
 - [@Loyalsoldier/geoip](https://github.com/Loyalsoldier/geoip)
 - [@Loyalsoldier/v2ray-rules-dat](https://github.com/Loyalsoldier/v2ray-rules-dat)
 - [@gfwlist/gfwlist](https://github.com/gfwlist/gfwlist)
 - [@v2fly/domain-list-community](https://github.com/v2fly/domain-list-community)
 - [@felixonmars/dnsmasq-china-list](https://github.com/felixonmars/dnsmasq-china-list)
 - [@17mon/china_ip_list](https://github.com/17mon/china_ip_list)
 ## 项目 Star 数增长趋势
 [![Stargazers over time](https://starchart.cc/Loyalsoldier/clash-rules.svg)](https://starchart.cc/Loyalsoldier/clash-rules)
--- a/rules/apple.txt
+++ b/rules/apple.txt
@ -1,141 +0,0 @@
 payload:
  - '+.a1.mzstatic.com'
  - '+.a2.mzstatic.com'
  - '+.a3.mzstatic.com'
  - '+.a4.mzstatic.com'
  - '+.a5.mzstatic.com'
  - '+.adcdownload.apple.com.akadns.net'
  - '+.adcdownload.apple.com'
  - '+.app-site-association.cdn-apple.com'
  - '+.appldnld.apple.com'
  - '+.appldnld.g.aaplimg.com'
  - '+.appleid.cdn-apple.com'
  - '+.apps.apple.com'
  - '+.apps.mzstatic.com'
  - '+.cdn-cn1.apple-mapkit.com'
  - '+.cdn-cn2.apple-mapkit.com'
  - '+.cdn-cn3.apple-mapkit.com'
  - '+.cdn-cn4.apple-mapkit.com'
  - '+.cdn.apple-mapkit.com'
  - '+.cdn1.apple-mapkit.com'
  - '+.cdn2.apple-mapkit.com'
  - '+.cdn3.apple-mapkit.com'
  - '+.cdn4.apple-mapkit.com'
  - '+.cds-cdn.v.aaplimg.com'
  - '+.cds.apple.com.akadns.net'
  - '+.cds.apple.com'
  - '+.cdsassets.apple.com'
  - '+.cl1-cdn.origin-apple.com.akadns.net'
  - '+.cl1.apple.com'
  - '+.cl2-cn.apple.com'
  - '+.cl2.apple.com'
  - '+.cl3-cdn.origin-apple.com.akadns.net'
  - '+.cl3.apple.com'
  - '+.cl4-cdn.origin-apple.com.akadns.net'
  - '+.cl4-cn.apple.com'
  - '+.cl4.apple.com'
  - '+.cl5-cdn.origin-apple.com.akadns.net'
  - '+.cl5.apple.com'
  - '+.clientflow.apple.com.akadns.net'
  - '+.clientflow.apple.com'
  - '+.configuration.apple.com.akadns.net'
  - '+.configuration.apple.com'
  - '+.cstat.apple.com'
  - '+.cstat.cdn-apple.com'
  - '+.dd-cdn.origin-apple.com.akadns.net'
  - '+.download.developer.apple.com'
  - '+.gs-loc-cn.apple.com'
  - '+.gs-loc.apple.com'
  - '+.gsp10-ssl-cn.ls.apple.com'
  - '+.gsp13-cn.ls.apple.com'
  - '+.gsp4-cn.ls.apple.com.edgekey.net.globalredir.akadns.net'
  - '+.gsp4-cn.ls.apple.com.edgekey.net'
  - '+.gsp4-cn.ls.apple.com'
  - '+.gsp5-cn.ls.apple.com'
  - '+.gsp85-cn-ssl.ls.apple.com'
  - '+.gspe19-cn-ssl.ls.apple.com'
  - '+.gspe19-cn.ls-apple.com.akadns.net'
  - '+.gspe19-cn.ls.apple.com'
  - '+.gspe21-ssl.ls.apple.com'
  - '+.gspe21.ls.apple.com'
  - '+.gspe35-ssl.ls.apple.com'
  - '+.guzzoni-apple-com.v.aaplimg.com'
  - '+.guzzoni.apple.com'
  - '+.iadsdk.apple.com'
  - '+.icloud-cdn.icloud.com.akadns.net'
  - '+.icloud.cdn-apple.com'
  - '+.images.apple.com.akadns.net'
  - '+.images.apple.com.edgekey.net.globalredir.akadns.net'
  - '+.images.apple.com'
  - '+.init-p01md-lb.push-apple.com.akadns.net'
  - '+.init-p01md.apple.com'
  - '+.init-p01st-lb.push-apple.com.akadns.net'
  - '+.init-p01st.push.apple.com'
  - '+.init-s01st-lb.push-apple.com.akadns.net'
  - '+.init-s01st.push.apple.com'
  - '+.iosapps.itunes.g.aaplimg.com'
  - '+.ipcdn.apple.com'
  - '+.iphone-ld.apple.com'
  - '+.iphone-ld.origin-apple.com.akadns.net'
  - '+.is1-ssl.mzstatic.com'
  - '+.is1.mzstatic.com'
  - '+.is2-ssl.mzstatic.com'
  - '+.is2.mzstatic.com'
  - '+.is3-ssl.mzstatic.com'
  - '+.is3.mzstatic.com'
  - '+.is4-ssl.mzstatic.com'
  - '+.is4.mzstatic.com'
  - '+.is5-ssl.mzstatic.com'
  - '+.is5.mzstatic.com'
  - '+.itunes-apple.com.akadns.net'
  - '+.itunes.apple.com'
  - '+.itunesconnect.apple.com'
  - '+.mesu-cdn.apple.com.akadns.net'
  - '+.mesu-china.apple.com.akadns.net'
  - '+.mesu.apple.com'
  - '+.music.apple.com'
  - '+.ocsp-lb.apple.com.akadns.net'
  - '+.ocsp.apple.com'
  - '+.ocsp2.apple.com'
  - '+.oscdn.apple.com'
  - '+.oscdn.origin-apple.com.akadns.net'
  - '+.osxapps.itunes.g.aaplimg.com'
  - '+.pancake.apple.com'
  - '+.pancake.cdn-apple.com.akadns.net'
  - '+.prod-support.apple-support.akadns.net'
  - '+.publicassets.cdn-apple.com'
  - '+.reserve-prime.apple.com'
  - '+.s.mzstatic.com'
  - '+.smp-device-content.apple.com'
  - '+.stocks-sparkline-lb.apple.com.akadns.net'
  - '+.stocks-sparkline.apple.com'
  - '+.store.apple.com.edgekey.net.globalredir.akadns.net'
  - '+.store.apple.com.edgekey.net'
  - '+.store.apple.com'
  - '+.store.storeimages.apple.com.akadns.net'
  - '+.store.storeimages.cdn-apple.com'
  - '+.support-china.apple-support.akadns.net'
  - '+.support.apple.com'
  - '+.swallow.apple.com'
  - '+.swallow-apple-com.v.aaplimg.com'
  - '+.swcatalog-cdn.apple.com.akadns.net'
  - '+.swcatalog.apple.com'
  - '+.swcdn.apple.com'
  - '+.swcdn.g.aaplimg.com'
  - '+.swdist.apple.com.akadns.net'
  - '+.swdist.apple.com'
  - '+.swscan-cdn.apple.com.akadns.net'
  - '+.swscan.apple.com'
  - '+.updates-http.cdn-apple.com.akadns.net'
  - '+.updates-http.cdn-apple.com'
  - '+.updates.cdn-apple.com'
  - '+.valid.apple.com'
  - '+.valid.origin-apple.com.akadns.net'
  - '+.weather-data.apple.com.akadns.net'
  - '+.weather-data.apple.com'
  - '+.weather-map.apple.com'
  - '+.weather-map2.apple.com'
  - '+.www.apple.com.edgekey.net.globalredir.akadns.net'
  - '+.www.apple.com.edgekey.net'
  - '+.www.apple.com'
  - '+.xp.apple.com'
--- a/rules/applications.txt
+++ b/rules/applications.txt
@ -1,81 +0,0 @@
 payload:
  - PROCESS-NAME,hysteria
  - PROCESS-NAME,hysteria.exe
  - PROCESS-NAME,leaf
  - PROCESS-NAME,leaf.exe
  - PROCESS-NAME,naive
  - PROCESS-NAME,naive.exe
  - PROCESS-NAME,privoxy
  - PROCESS-NAME,privoxy.exe
  - PROCESS-NAME,proxifier
  - PROCESS-NAME,proxifier.exe
  - PROCESS-NAME,shadowsocks
  - PROCESS-NAME,shadowsocks.exe
  - PROCESS-NAME,shadowsocksr
  - PROCESS-NAME,shadowsocksr.exe
  - PROCESS-NAME,sing-box
  - PROCESS-NAME,sing-box.exe
  - PROCESS-NAME,speeder
  - PROCESS-NAME,speeder.exe
  - PROCESS-NAME,speederv2
  - PROCESS-NAME,speederv2.exe
  - PROCESS-NAME,ss-local
  - PROCESS-NAME,ss-local.exe
  - PROCESS-NAME,sslocal
  - PROCESS-NAME,sslocal.exe
  - PROCESS-NAME,tinyvpn
  - PROCESS-NAME,tinyvpn.exe
  - PROCESS-NAME,trojan
  - PROCESS-NAME,trojan.exe
  - PROCESS-NAME,trojan-go
  - PROCESS-NAME,trojan-go.exe
  - PROCESS-NAME,tuic
  - PROCESS-NAME,tuic.exe
  - PROCESS-NAME,tuic-client
  - PROCESS-NAME,tuic-client.exe
  - PROCESS-NAME,udp2raw
  - PROCESS-NAME,udp2raw.exe
  - PROCESS-NAME,udp2raw_mp
  - PROCESS-NAME,udp2raw_mp.exe
  - PROCESS-NAME,v2ray
  - PROCESS-NAME,v2ray.exe
  - PROCESS-NAME,xray
  - PROCESS-NAME,xray.exe
  - PROCESS-NAME,Surge
  - PROCESS-NAME,Surge 2
  - PROCESS-NAME,Surge 3
  - PROCESS-NAME,Surge 4
  - PROCESS-NAME,Surge%202
  - PROCESS-NAME,Surge%203
  - PROCESS-NAME,Surge%204
  - PROCESS-NAME,BitComet
  - PROCESS-NAME,BitComet.exe
  - PROCESS-NAME,DownloadService
  - PROCESS-NAME,Folx
  - PROCESS-NAME,NeatDM
  - PROCESS-NAME,NeatDM.exe
  - PROCESS-NAME,NetTransport
  - PROCESS-NAME,NetTransport.exe
  - PROCESS-NAME,Thunder
  - PROCESS-NAME,Thunder.exe
  - PROCESS-NAME,ThunderVIP.exe
  - PROCESS-NAME,Transmission
  - PROCESS-NAME,WebTorrent
  - PROCESS-NAME,WebTorrent.exe
  - PROCESS-NAME,aria2
  - PROCESS-NAME,aria2.exe
  - PROCESS-NAME,aria2c
  - PROCESS-NAME,aria2c.exe
  - PROCESS-NAME,fdm
  - PROCESS-NAME,fdm.exe
  - PROCESS-NAME,qBittorrent
  - PROCESS-NAME,qbittorrent.exe
  - PROCESS-NAME,qbittorrent-nox
  - PROCESS-NAME,transmission-daemon.exe
  - PROCESS-NAME,transmission-qt.exe
  - PROCESS-NAME,uTorrent
  - PROCESS-NAME,uTorrent.exe
  - PROCESS-NAME,xdm
  - PROCESS-NAME,xdm.exe
  - PROCESS-NAME,xdman
  - PROCESS-NAME,xdman.exe
--- a/rules/cncidr.txt
+++ b/rules/cncidr.txt
--- a/rules/direct.txt
+++ b/rules/direct.txt
--- a/rules/gfw.txt
+++ b/rules/gfw.txt
--- a/rules/google.txt
+++ b/rules/google.txt
@ -1,160 +0,0 @@
 payload:
  - '+.265.com'
  - '+.2mdn-cn.net'
  - '+.2mdn.net'
  - '+.accounts.googlers.com'
  - '+.accounts.xn--9trs65b.com'
  - '+.accounts.xn--ggle-55da.com'
  - '+.admob-cn.com'
  - '+.adservice.google.com'
  - '+.ai.ytimg.com'
  - '+.app-measurement-cn.com'
  - '+.app-measurement.com'
  - '+.apps5.oingo.com'
  - '+.avail.googleflights.net'
  - '+.beacons.gcp.gvt2.com'
  - '+.beacons.gvt2.com'
  - '+.beacons2.gvt2.com'
  - '+.beacons3.gvt2.com'
  - '+.borgmon.adz.google.com'
  - '+.c.admob.com'
  - '+.c.android.clients.google.com'
  - '+.cache-management-prod.google.com'
  - '+.cache.pack.google.com'
  - '+.checkin.gstatic.com'
  - '+.clickserve.cc-dt.com'
  - '+.clickserve.dartsearch.net'
  - '+.clickserver.googleads.com'
  - '+.clientservices.googleapis.com'
  - '+.cn.widevine.com'
  - '+.cnappinstall.googleadapis.com'
  - '+.connectivitycheck.gstatic.com'
  - '+.content.googleadapis.com'
  - '+.corp.google.com'
  - '+.corp.googleapis.com'
  - '+.crashlyticsreports-pa.googleapis.com'
  - '+.crl.pki.goog'
  - '+.csi.gstatic.com'
  - '+.dartsearch-cn.net'
  - '+.dg-meta.video.google.com'
  - '+.distribution.qatp1.net'
  - '+.distribution.qcpp1.net'
  - '+.distribution.qpdp1.net'
  - '+.dl.google.com'
  - '+.dl.l.google.com'
  - '+.doubleclick-cn.net'
  - '+.doubleclick.net'
  - '+.download.mlcc.google.com'
  - '+.download.qatp1.net'
  - '+.download.qcpp1.net'
  - '+.download.qpdp1.net'
  - '+.download.tensorflow.google.com'
  - '+.emmapplecodevice.googleapis.com'
  - '+.firebase-settings.crashlytics.com'
  - '+.fontfiles.googleadapis.com'
  - '+.fontfiles.googleapis.com'
  - '+.fonts.googleadapis.com'
  - '+.fonts.googleapis.com'
  - '+.fonts.gstatic.com'
  - '+.g0.gstatic.com'
  - '+.g1.gstatic.com'
  - '+.g2.gstatic.com'
  - '+.g3.gstatic.com'
  - '+.gcpnode.com'
  - '+.gonglchuangl.net'
  - '+.gongyichuangyi.net'
  - '+.google-analytics-cn.com'
  - '+.google-analytics.com'
  - '+.googleadservices-cn.com'
  - '+.googleadservices.com'
  - '+.googleanalytics.com'
  - '+.googleapis-cn.com'
  - '+.googleapps-cn.com'
  - '+.googleflights-cn.net'
  - '+.googleoptimize-cn.com'
  - '+.googleoptimize.com'
  - '+.googleplex.com'
  - '+.googlesyndication-cn.com'
  - '+.googlesyndication.com'
  - '+.googletagmanager-cn.com'
  - '+.googletagmanager.com'
  - '+.googletagservices-cn.com'
  - '+.googletagservices.com'
  - '+.googletraveladservices-cn.com'
  - '+.googletraveladservices.com'
  - '+.googlevads-cn.com'
  - '+.goto.google.com'
  - '+.gstatic-cn.com'
  - '+.gstaticadssl.l.google.com'
  - '+.gtm.oasisfeng.com'
  - '+.gvt1-cn.com'
  - '+.gvt2-cn.com'
  - '+.imasdk.googleapis.com'
  - '+.monitoring.qatp1.net'
  - '+.monitoring.qcpp1.net'
  - '+.monitoring.qpdp1.net'
  - '+.ocsp.pki.goog'
  - '+.pagead-googlehosted.l.google.com'
  - '+.performanceparameters.googleapis.com'
  - '+.pki-goog.l.google.com'
  - '+.play.1ucrs.com'
  - '+.prod-controlbe.floonet.goog'
  - '+.prod-databe.floonet.goog'
  - '+.prod.databe.floonet.goog'
  - '+.qagpublic.qatp1.net'
  - '+.qagpublic.qcpp1.net'
  - '+.qagpublic.qpdp1.net'
  - '+.qgadmin.qatp1.net'
  - '+.qgadmin.qcpp1.net'
  - '+.qgadmin.qpdp1.net'
  - '+.qpx.googleflights.net'
  - '+.qualysapi.qatp1.net'
  - '+.qualysapi.qcpp1.net'
  - '+.qualysapi.qpdp1.net'
  - '+.qualysguard.qatp1.net'
  - '+.qualysguard.qcpp1.net'
  - '+.qualysguard.qpdp1.net'
  - '+.recaptcha.net'
  - '+.redirector.bdn.dev'
  - '+.redirector.c.chat.google.com'
  - '+.redirector.c.mail.google.com'
  - '+.redirector.c.pack.google.com'
  - '+.redirector.c.play.google.com'
  - '+.redirector.c.youtubeeducation.com'
  - '+.redirector.gcpcdn.gvt1.com'
  - '+.redirector.gvt1.com'
  - '+.redirector.offline-maps.gvt1.com'
  - '+.redirector.snap.gvt1.com'
  - '+.redirector.xn--ngstr-lra8j.com'
  - '+.regioninfo-pa.googleapis.com'
  - '+.safebrowsing.googleapis.com'
  - '+.scanservice1.qatp1.net'
  - '+.scanservice1.qcpp1.net'
  - '+.scanservice1.qpdp1.net'
  - '+.service.urchin.com'
  - '+.settings.xn--9trs65b.com'
  - '+.ssl-google-analytics.l.google.com'
  - '+.ssl.gstatic.com'
  - '+.staging-controlbe.floonet.goog'
  - '+.staging-databe.floonet.goog'
  - '+.staging-regioninfo-pa.googleapis.com'
  - '+.staging.databe.floonet.goog'
  - '+.support.1ucrs.com'
  - '+.tac.googleapis.com'
  - '+.test.bugs-qa.chromium.org'
  - '+.test.gbugs-qa.chromium.org'
  - '+.tools.google.com'
  - '+.tools.l.google.com'
  - '+.up.corp.goog'
  - '+.up.gcp.googlers.com'
  - '+.update.crashlytics.com'
  - '+.update.googleapis.com'
  - '+.wear.googleapis.com'
  - '+.www-google-analytics.l.google.com'
  - '+.www-googletagmanager.l.google.com'
  - '+.www.destinationurl.com'
  - '+.www.googleadapis.com'
  - '+.www.gstatic.com'
  - '+.www.pxcc.com'
  - '+.xn--9kr7l.com'
  - '+.xn--flw351e.com'
--- a/rules/greatfire.txt
+++ b/rules/greatfire.txt
@ -1,9 +0,0 @@
 payload:
  - '+.applecensorship.com'
  - '+.freebrowser.org'
  - '+.freewechat.com'
  - '+.freeweibo.com'
  - '+.freezhihu.org'
  - '+.greatfire.org'
  - '+.pao-pao.net'
  - '+.wikiunblocked.org'
--- a/rules/icloud.txt
+++ b/rules/icloud.txt
@ -1,51 +0,0 @@
 payload:
  - '+.www-cdn.icloud.com.akadns.net'
  - '+.applemx-icloud.com'
  - '+.icloud-content.com'
  - '+.icloud-isupport.com'
  - '+.icloud.ch'
  - '+.icloud.com'
  - '+.icloud.de'
  - '+.icloud.ee'
  - '+.icloud.fi'
  - '+.icloud.fr'
  - '+.icloud.hu'
  - '+.icloud.ie'
  - '+.icloud.is'
  - '+.icloud.jp'
  - '+.icloud.lv'
  - '+.icloud.om'
  - '+.icloud.org'
  - '+.icloud.pt'
  - '+.icloud.ro'
  - '+.icloud.se'
  - '+.icloud.si'
  - '+.icloud.sk'
  - '+.icloud.vn'
  - '+.icloudads.net'
  - '+.icloudbox.net'
  - '+.icloudbrowser.net'
  - '+.icloude.com'
  - '+.icloudhome.com'
  - '+.icloudmail.net'
  - '+.icloudmusic.net'
  - '+.icloudnet.net'
  - '+.icloudpay.net'
  - '+.icloudo.com'
  - '+.icloudo.de'
  - '+.icloudo.net'
  - '+.icloudos.de'
  - '+.icloudos.net'
  - '+.icloudsecure.net'
  - '+.icloudsetup.com'
  - '+.ios-icloud.com'
  - '+.me.com'
  - '+.myicloud.net'
  - '+.mylcloud.net'
  - '+.wwwicloud.com'
  - '+.apple-icloud.cn'
  - '+.appleicloud.cn'
  - '+.icloud-apple.cn'
  - '+.icloud.com.cn'
  - '+.icloud.net.cn'
  - '+.icloudapple.cn'
--- a/rules/lancidr.txt
+++ b/rules/lancidr.txt
@ -1,19 +0,0 @@
 payload:
  - '0.0.0.0/8'
  - '10.0.0.0/8'
  - '100.64.0.0/10'
  - '127.0.0.0/8'
  - '169.254.0.0/16'
  - '172.16.0.0/12'
  - '192.0.0.0/24'
  - '192.0.2.0/24'
  - '192.88.99.0/24'
  - '192.168.0.0/16'
  - '198.18.0.0/15'
  - '198.51.100.0/24'
  - '203.0.113.0/24'
  - '224.0.0.0/3'
  - '::/127'
  - 'fc00::/7'
  - 'fe80::/10'
  - 'ff00::/8'
--- a/rules/private.txt
+++ b/rules/private.txt
@ -1,136 +0,0 @@
 payload:
  - 'instant.arubanetworks.com'
  - 'setmeup.arubanetworks.com'
  - 'asusrouter.com'
  - 'router.asus.com'
  - 'www.asusrouter.com'
  - 'cp.cloudflare.com'
  - 'detectportal.firefox.com'
  - 'routerlogin.com'
  - 'www.routerlogin.com'
  - 'tplogin.cn'
  - 'miwifi.com'
  - 'www.mifiwi.com'
  - '+.lan'
  - '+.localdomain'
  - '+.example'
  - '+.invalid'
  - '+.localhost'
  - '+.test'
  - '+.local'
  - '+.msftconnecttest.com'
  - '+.leike.cc'
  - '+.ts.net'
  - '+.zte.home'
  - '+.msftncsi.com'
  - '+.home.arpa'
  - '+.tplinkwifi.net'
  - '+.tendawifi.com'
  - '+.plex.direct'
  - '+.router.ctc'
  - '+.phicomm.me'
  - '+.peiluyou.com'
  - '+.my.router'
  - '+.hiwifi.com'
  - '+.10.in-addr.arpa'
  - '+.networkcheck.kde.org'
  - '+.connectivitycheck.gstatic.com'
  - '+.captive.apple.com'
  - '+.127.in-addr.arpa'
  - '+.0.in-addr.arpa'
  - '+.113.100.in-addr.arpa'
  - '+.97.100.in-addr.arpa'
  - '+.16.172.in-addr.arpa'
  - '+.17.172.in-addr.arpa'
  - '+.18.172.in-addr.arpa'
  - '+.19.172.in-addr.arpa'
  - '+.20.172.in-addr.arpa'
  - '+.21.172.in-addr.arpa'
  - '+.d.f.ip6.arpa'
  - '+.localhost.ptlogin2.qq.com'
  - '+.localhost.sec.qq.com'
  - '+.22.172.in-addr.arpa'
  - '+.23.172.in-addr.arpa'
  - '+.24.172.in-addr.arpa'
  - '+.64.100.in-addr.arpa'
  - '+.65.100.in-addr.arpa'
  - '+.66.100.in-addr.arpa'
  - '+.67.100.in-addr.arpa'
  - '+.68.100.in-addr.arpa'
  - '+.69.100.in-addr.arpa'
  - '+.70.100.in-addr.arpa'
  - '+.71.100.in-addr.arpa'
  - '+.72.100.in-addr.arpa'
  - '+.73.100.in-addr.arpa'
  - '+.74.100.in-addr.arpa'
  - '+.75.100.in-addr.arpa'
  - '+.76.100.in-addr.arpa'
  - '+.77.100.in-addr.arpa'
  - '+.78.100.in-addr.arpa'
  - '+.79.100.in-addr.arpa'
  - '+.80.100.in-addr.arpa'
  - '+.81.100.in-addr.arpa'
  - '+.82.100.in-addr.arpa'
  - '+.83.100.in-addr.arpa'
  - '+.84.100.in-addr.arpa'
  - '+.85.100.in-addr.arpa'
  - '+.86.100.in-addr.arpa'
  - '+.87.100.in-addr.arpa'
  - '+.88.100.in-addr.arpa'
  - '+.89.100.in-addr.arpa'
  - '+.90.100.in-addr.arpa'
  - '+.91.100.in-addr.arpa'
  - '+.92.100.in-addr.arpa'
  - '+.93.100.in-addr.arpa'
  - '+.94.100.in-addr.arpa'
  - '+.95.100.in-addr.arpa'
  - '+.96.100.in-addr.arpa'
  - '+.254.169.in-addr.arpa'
  - '+.98.100.in-addr.arpa'
  - '+.99.100.in-addr.arpa'
  - '+.100.100.in-addr.arpa'
  - '+.101.100.in-addr.arpa'
  - '+.102.100.in-addr.arpa'
  - '+.103.100.in-addr.arpa'
  - '+.104.100.in-addr.arpa'
  - '+.105.100.in-addr.arpa'
  - '+.106.100.in-addr.arpa'
  - '+.107.100.in-addr.arpa'
  - '+.108.100.in-addr.arpa'
  - '+.109.100.in-addr.arpa'
  - '+.110.100.in-addr.arpa'
  - '+.111.100.in-addr.arpa'
  - '+.112.100.in-addr.arpa'
  - '+.168.192.in-addr.arpa'
  - '+.114.100.in-addr.arpa'
  - '+.115.100.in-addr.arpa'
  - '+.116.100.in-addr.arpa'
  - '+.117.100.in-addr.arpa'
  - '+.118.100.in-addr.arpa'
  - '+.119.100.in-addr.arpa'
  - '+.120.100.in-addr.arpa'
  - '+.121.100.in-addr.arpa'
  - '+.122.100.in-addr.arpa'
  - '+.123.100.in-addr.arpa'
  - '+.124.100.in-addr.arpa'
  - '+.125.100.in-addr.arpa'
  - '+.126.100.in-addr.arpa'
  - '+.127.100.in-addr.arpa'
  - '+.31.172.in-addr.arpa'
  - '+.30.172.in-addr.arpa'
  - '+.29.172.in-addr.arpa'
  - '+.28.172.in-addr.arpa'
  - '+.27.172.in-addr.arpa'
  - '+.26.172.in-addr.arpa'
  - '+.25.172.in-addr.arpa'
  - '+.b.e.f.ip6.arpa'
  - '+.a.e.f.ip6.arpa'
  - '+.9.e.f.ip6.arpa'
  - '+.8.e.f.ip6.arpa'
  - '+.113.0.203.in-addr.arpa'
  - '+.100.51.198.in-addr.arpa'
  - '+.2.0.192.in-addr.arpa'
  - '+.255.255.255.255.in-addr.arpa'
  - '+.8.b.d.0.1.0.0.2.ip6.arpa'
  - '+.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa'
  - '+.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa'
--- a/rules/proxy.txt
+++ b/rules/proxy.txt
--- a/rules/reject.txt
+++ b/rules/reject.txt
--- a/rules/telegramcidr.txt
+++ b/rules/telegramcidr.txt
@ -1,13 +0,0 @@
 payload:
  - '91.105.192.0/23'
  - '91.108.4.0/22'
  - '91.108.8.0/21'
  - '91.108.16.0/21'
  - '91.108.56.0/22'
  - '95.161.64.0/20'
  - '149.154.160.0/20'
  - '185.76.151.0/24'
  - '2001:67c:4e8::/48'
  - '2001:b28:f23c::/47'
  - '2001:b28:f23f::/48'
  - '2a0a:f280::/32'
--- a/rules/tld-not-cn.txt
+++ b/rules/tld-not-cn.txt