@cwxiaos 是的文档里标注了 1.12 的新字段，然后 iOS 端 vt 用的是 1.11 ，很让人恼火

视频实录： https://www.youtube.com/watch?v=MIjjQgbZico

@411161555 #3 啊？可能是我记错了。我开的是 BIGGERBOX-20-1024 ，年付只要 34 刀。是上半年别人给邀请码直接开的

@411161555 我现在主力就是瓦工的 dc99 确实稳如老狗

@M5tuA ok 贴了

@williamszz 这个最好用，感谢层主。

后面有人要是看到这里：
1. fallback 中 dns 添加后缀（如：tls:8.8.8.8#节点选择）
2. dns 配置中增加一个 proxy-server-nameserver （用来解析代理节点本身）

@williamszz 🐮

@bjzhou1990 我这里现在 1.1.1.1 的 dot 和 https://v.recipes/dns-query 这俩可以用

@WizardLeo 1. 规则外的域名分流 2. 解析节点本身的 ip

@tifang 他劫持的就是 ip 类似 8.8.8.8 在江苏 ping 只有二十几 ms 然后结果都是污染的

@Yanlongli 还真是，cf 的似乎没被劫持（ ping 1.1.1.1 还是 100 多 ms ），但是 cf 的 doh 还是不能用，dot 可以，是不是 cf 关闭了 doh 服务器。。。

@bli22ard 出问题的环节是本地解析节点地址。。。另外本地其实还是需要一组可信境外 dns 的，用来判断列表外的域名是否需要代理

@383394544 我主贴表达有误 其实就是 nameserver 组和 fallback 组 就是只影响节点本身和列表外的域名

再贴一个美化版的 yaml 配置（其实只是填了 icon 字段），话说为啥流行的模板都用的 emoji 而不是 icon 呢
```yaml
port: 7890
socks-port: 7891
allow-lan: true
mode: Rule
log-level: info
external-controller: :9090
dns:
enable: true
prefer-h3: true
default-nameserver:
- 114.114.114.114
- 119.29.29.29
nameserver:
- 114.114.114.114
- 119.29.29.29
fallback:
- https://dns.google/dns-query
- https://dns.cloudflare.com/dns-query
fake-ip-filter:
[
"*.n.n.srv.nintendo.net",
+.stun.playstation.net,
xbox.*.*.microsoft.com,
"*.msftncsi.com",
"*.msftconnecttest.com",
WORKGROUP,
"*.lan",
stun.*.*,
stun.*.*.*,
+.stun.*.*,
+.stun.*.*.*,
+.stun.*.*.*.*,
+.stun.*.*.*.*.*,
time.windows.com,
time.nist.gov,
time.apple.com,
time.asia.apple.com,
"*.ntp.org.cn",
"*.openwrt.pool.ntp.org",
time1.cloud.tencent.com,
time.ustc.edu.cn,
pool.ntp.org,
ntp.ubuntu.com,
"*.*.xboxlive.com",
speedtest.cros.wr.pvp.net,
]
proxies: ~

proxy-groups:
- name: 节点选择
type: select
proxies:
- 自动选择
- DIRECT
icon: https://raw.githubusercontent.com/Koolson/Qure/refs/heads/master/IconSet/Color/Dinosaur.png

- name: 自动选择
type: url-test
url: http://www.gstatic.com/generate_204
interval: 300
icon: https://raw.githubusercontent.com/Koolson/Qure/refs/heads/master/IconSet/Color/Speedtest.png

- name: 全球直连
type: select
proxies:
- DIRECT
- 节点选择
- 自动选择
icon: https://raw.githubusercontent.com/Koolson/Qure/refs/heads/master/IconSet/Color/Bypass.png

- name: 一堵高墙
type: select
proxies:
- 节点选择
- 自动选择
- 全球直连
icon: https://raw.githubusercontent.com/Koolson/Qure/refs/heads/master/IconSet/Color/Unlock.png

- name: Google
type: select
proxies:
- 节点选择
- 自动选择
- 全球直连
icon: https://raw.githubusercontent.com/Koolson/Qure/refs/heads/master/IconSet/Color/Google_Search.png

- name: Telegram
type: select
proxies:
- 节点选择
- 自动选择
- 全球直连
icon: https://raw.githubusercontent.com/Koolson/Qure/refs/heads/master/IconSet/Color/Telegram.png

- name: iCloud
type: select
proxies:
- 节点选择
- 自动选择
- 全球直连
icon: https://raw.githubusercontent.com/Koolson/Qure/refs/heads/master/IconSet/Color/iCloud.png

- name: Apple
type: select
proxies:
- 节点选择
- 自动选择
- 全球直连
icon: https://raw.githubusercontent.com/Koolson/Qure/refs/heads/master/IconSet/Color/Apple_1.png

- name: 境外
type: select
proxies:
- 节点选择
- 自动选择
- 全球直连
icon: https://raw.githubusercontent.com/Koolson/Qure/refs/heads/master/IconSet/Color/United_States.png

- name: 私有
type: select
proxies:
- 全球直连
- 节点选择
- 自动选择
icon: https://raw.githubusercontent.com/Koolson/Qure/refs/heads/master/IconSet/Color/Clubhouse_2.png

- name: 境内
type: select
proxies:
- 全球直连
- 节点选择
- 自动选择
icon: https://raw.githubusercontent.com/Koolson/Qure/refs/heads/master/IconSet/Color/China.png

- name: 常用软件
type: select
proxies:
- 全球直连
- 节点选择
- 自动选择
icon: https://raw.githubusercontent.com/Koolson/Qure/refs/heads/master/IconSet/Color/App_Store.png

- name: 漏网之鱼
type: select
proxies:
- 节点选择
- 自动选择
- 全球直连
icon: https://raw.githubusercontent.com/Koolson/Qure/refs/heads/master/IconSet/Color/Global.png

rule-providers:
icloud:
type: http
behavior: domain
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/icloud.txt"
path: ./ruleset/icloud.yaml
interval: 86400

apple:
type: http
behavior: domain
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/apple.txt"
path: ./ruleset/apple.yaml
interval: 86400

google:
type: http
behavior: domain
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/google.txt"
path: ./ruleset/google.yaml
interval: 86400

proxy:
type: http
behavior: domain
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt"
path: ./ruleset/proxy.yaml
interval: 86400

direct:
type: http
behavior: domain
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt"
path: ./ruleset/direct.yaml
interval: 86400

private:
type: http
behavior: domain
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt"
path: ./ruleset/private.yaml
interval: 86400

gfw:
type: http
behavior: domain
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/gfw.txt"
path: ./ruleset/gfw.yaml
interval: 86400

tld-not-cn:
type: http
behavior: domain
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/tld-not-cn.txt"
path: ./ruleset/tld-not-cn.yaml
interval: 86400

telegramcidr:
type: http
behavior: ipcidr
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/telegramcidr.txt"
path: ./ruleset/telegramcidr.yaml
interval: 86400

cncidr:
type: http
behavior: ipcidr
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/cncidr.txt"
path: ./ruleset/cncidr.yaml
interval: 86400

lancidr:
type: http
behavior: ipcidr
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/lancidr.txt"
path: ./ruleset/lancidr.yaml
interval: 86400

applications:
type: http
behavior: classical
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/applications.txt"
path: ./ruleset/applications.yaml
interval: 86400

rules:
# 普通规则
- RULE-SET,private,私有
- RULE-SET,applications,常用软件
- RULE-SET,direct,境内
- RULE-SET,gfw,一堵高墙
- RULE-SET,icloud,iCloud
- RULE-SET,apple,Apple
- RULE-SET,google,Google
- RULE-SET,proxy,境外
# IP 地址规则
- RULE-SET,telegramcidr,Telegram
- RULE-SET,lancidr,私有
- RULE-SET,cncidr,境内
- GEOIP,LAN,私有
- GEOIP,CN,境内
# 兜底规则
- MATCH,漏网之鱼
```

@lihaohenqiang 主要是存在普遍的误解误传，dns 的运行流程和“DNS 泄露”都是