优化 DNS 配置；新增 ShellCrash 搭配 AdGuard Home 时的提示语

Author: DustinWin

_posts/2024-08-21-dnsbypass-mihomo-geodata.md

@@ -24,10 +24,6 @@ geosite.dat 文件须包含 `fakeip-filter`、`cn` 和 `proxy`，推荐导入我
 2. 连接 SSH 后执行命令 `vi $CRASHDIR/yamls/user.yaml`，按一下 Ins 键（Insert 键），粘贴如下内容：
 
 ```yaml
-hosts:
-  dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
-  doh.pub: [1.12.12.12, 1.12.12.21, 120.53.53.53]
-
 dns:
   enable: true
   prefer-h3: true
@@ -42,9 +38,7 @@ dns:
     - GEOSITE,proxy,fake-ip
     - GEOSITE,cn,real-ip  # 此条仅演示，可删除
     - MATCH,real-ip
-  nameserver:
-    - https://dns.alidns.com/dns-query
-    - https://doh.pub/dns-query
+  nameserver: [system]
 ```
 
 按一下 Esc 键（退出键），输入英文冒号 `:`，继续输入 `wq` 并回车

_posts/2024-08-21-dnsbypass-mihomo-ruleset.md

@@ -51,10 +51,6 @@ rule-providers:
 2. 连接 SSH 后执行命令 `vi $CRASHDIR/yamls/user.yaml`，按一下 Ins 键（Insert 键），粘贴如下内容：
 
 ```yaml
-hosts:
-  dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
-  doh.pub: [1.12.12.12, 1.12.12.21, 120.53.53.53]
-
 dns:
   enable: true
   prefer-h3: true
@@ -69,9 +65,7 @@ dns:
     - RULE-SET,proxy,fake-ip
     - RULE-SET,cn,real-ip  # 此条仅演示，可删除
     - MATCH,real-ip
-  nameserver:
-    - https://dns.alidns.com/dns-query
-    - https://doh.pub/dns-query
+  nameserver: [system]
 ```
 
 按一下 Esc 键（退出键），输入英文冒号 `:`，继续输入 `wq` 并回车

_posts/2024-08-21-dnsnoleaks-mihomo-geodata.md

@@ -27,12 +27,6 @@ geosite.dat 文件须包含 `fakeip-filter`、`cn` 和 `proxy`，推荐导入我
 {: .prompt-info }
 
 ```yaml
-hosts:
-  dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
-  doh.pub: [1.12.12.12, 1.12.12.21, 120.53.53.53]
-  dns.google: [8.8.8.8, 8.8.4.4, 2001:4860:4860::8888, 2001:4860:4860::8844]
-  dns11.quad9.net: [9.9.9.11, 149.112.112.11, 2620:fe::11, 2620:fe::fe:11]
-
 dns:
   enable: true
   ipv6: true
@@ -51,12 +45,8 @@ dns:
     # 推荐将 `ecs` 设置为当前网络的公网 IP 段
     - 'https://dns.google/dns-query#ecs=202.103.17.0/24'
     - 'https://dns11.quad9.net/dns-query#ecs=202.103.17.0/24'
-  proxy-server-nameserver:
-    - https://dns.alidns.com/dns-query
-    - https://doh.pub/dns-query
-  direct-nameserver:
-    - https://dns.alidns.com/dns-query
-    - https://doh.pub/dns-query
+  proxy-server-nameserver: [system]
+  direct-nameserver: [system]
 ```
 
 按一下 Esc 键（退出键），输入英文冒号 `:`，继续输入 `wq` 并回车
@@ -72,10 +62,6 @@ dns:
 - ② 连接 SSH 后执行 `vi $CRASHDIR/yamls/user.yaml`，按一下 Ins 键（Insert 键），粘贴如下内容：
 
   ```yaml
-  hosts:
-    dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
-    doh.pub: [1.12.12.12, 1.12.12.21, 120.53.53.53]
-
   dns:
     enable: true
     prefer-h3: true
@@ -88,9 +74,7 @@ dns:
     fake-ip-filter:
     - GEOSITE,fakeip-filter,real-ip
     - MATCH,fake-ip
-    nameserver:
-      - https://dns.alidns.com/dns-query
-      - https://doh.pub/dns-query
+    nameserver: [system]
   ```
 
   按一下 Esc 键（退出键），输入英文冒号 `:`，继续输入 `wq` 并回车
@@ -101,12 +85,6 @@ dns:
 {: .prompt-info }
 
 ```yaml
-hosts:
-  dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
-  doh.pub: [1.12.12.12, 1.12.12.21, 120.53.53.53]
-  dns.google: [8.8.8.8, 8.8.4.4, 2001:4860:4860::8888, 2001:4860:4860::8844]
-  dns11.quad9.net: [9.9.9.11, 149.112.112.11, 2620:fe::11, 2620:fe::fe:11]
-
 dns:
   enable: true
   ipv6: true
@@ -120,12 +98,8 @@ dns:
     # 推荐将 `ecs` 设置为当前网络的公网 IP 段
     - 'https://dns.google/dns-query#ecs=202.103.17.0/24'
     - 'https://dns11.quad9.net/dns-query#ecs=202.103.17.0/24'
-  proxy-server-nameserver:
-    - https://dns.alidns.com/dns-query
-    - https://doh.pub/dns-query
-  direct-nameserver:
-    - https://dns.alidns.com/dns-query
-    - https://doh.pub/dns-query
+  proxy-server-nameserver: [system]
+  direct-nameserver: [system]
 ```
 
 按一下 Esc 键（退出键），输入英文冒号 `:`，继续输入 `wq` 并回车

_posts/2024-08-21-dnsnoleaks-mihomo-ruleset.md

@@ -54,12 +54,6 @@ rule-providers:
 {: .prompt-info }
 
 ```yaml
-hosts:
-  dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
-  doh.pub: [1.12.12.12, 1.12.12.21, 120.53.53.53]
-  dns.google: [8.8.8.8, 8.8.4.4, 2001:4860:4860::8888, 2001:4860:4860::8844]
-  dns11.quad9.net: [9.9.9.11, 149.112.112.11, 2620:fe::11, 2620:fe::fe:11]
-
 dns:
   enable: true
   ipv6: true
@@ -78,12 +72,8 @@ dns:
     # 推荐将 `ecs` 设置为当前网络的公网 IP 段
     - 'https://dns.google/dns-query#ecs=202.103.17.0/24'
     - 'https://dns11.quad9.net/dns-query#ecs=202.103.17.0/24'
-  proxy-server-nameserver:
-    - https://dns.alidns.com/dns-query
-    - https://doh.pub/dns-query
-  direct-nameserver:
-    - https://dns.alidns.com/dns-query
-    - https://doh.pub/dns-query
+  proxy-server-nameserver: [system]
+  direct-nameserver: [system]
 ```
 
 按一下 Esc 键（退出键），输入英文冒号 `:`，继续输入 `wq` 并回车
@@ -101,10 +91,6 @@ dns:
 - ② 连接 SSH 后执行 `vi $CRASHDIR/yamls/user.yaml`，按一下 Ins 键（Insert 键），粘贴如下内容：
 
   ```yaml
-  hosts:
-    dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
-    doh.pub: [1.12.12.12, 1.12.12.21, 120.53.53.53]
-
   dns:
     enable: true
     prefer-h3: true
@@ -117,9 +103,7 @@ dns:
     fake-ip-filter:
     - RULE-SET,fakeip-filter,real-ip
     - MATCH,fake-ip
-    nameserver:
-      - https://dns.alidns.com/dns-query
-      - https://doh.pub/dns-query
+    nameserver: [system]
   ```
 
   按一下 Esc 键（退出键），输入英文冒号 `:`，继续输入 `wq` 并回车
@@ -130,12 +114,6 @@ dns:
 {: .prompt-info }
 
 ```yaml
-hosts:
-  dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
-  doh.pub: [1.12.12.12, 1.12.12.21, 120.53.53.53]
-  dns.google: [8.8.8.8, 8.8.4.4, 2001:4860:4860::8888, 2001:4860:4860::8844]
-  dns11.quad9.net: [9.9.9.11, 149.112.112.11, 2620:fe::11, 2620:fe::fe:11]
-
 dns:
   enable: true
   ipv6: true
@@ -149,12 +127,8 @@ dns:
     # 推荐将 `ecs` 设置为当前网络的公网 IP 段
     - 'https://dns.google/dns-query#ecs=202.103.17.0/24'
     - 'https://dns11.quad9.net/dns-query#ecs=202.103.17.0/24'
-  proxy-server-nameserver:
-    - https://dns.alidns.com/dns-query
-    - https://doh.pub/dns-query
-  direct-nameserver:
-    - https://dns.alidns.com/dns-query
-    - https://doh.pub/dns-query
+  proxy-server-nameserver: [system]
+  direct-nameserver: [system]
 ```
 
 按一下 Esc 键（退出键），输入英文冒号 `:`，继续输入 `wq` 并回车

_posts/2024-08-21-pin-shellcrashadguardhome-mihomo.md

@@ -295,7 +295,7 @@ echo -e '12345678\n12345678' | passwd root
     - 注：使用“Tun 模式”前须进入主菜单 → 8 工具与优化，开启 8 小米设备 Tun 模块修复
 
   - ➋ 进入 2 功能设置 → 2 DNS 设置（推荐“MIX 模式”）
-  - ➌ 进入 2 DNS 设置 → 7 DNS 劫持端口，设置为 `5353`（AdGuard Home 的“DNS 服务器端口”须设置为 `5353`）
+  - ➌ 进入 2 DNS 设置 → 7 DNS 劫持端口，设置为 `5353`（须完成《[六、 1](https://proxy-tutorials.dustinwin.us.kg/posts/pin-shellcrashadguardhome-mihomo/#1-adguard-home-%E5%AE%89%E8%A3%85)》后才可设置）
   - ➍ 进入 2 DNS 设置 → 9 修改 DNS 服务器，选择 4 一键配置加密 DNS
     - 注：推荐设置 DNS 分流（单独使用 ShellCrash 以及 ShellCrash 搭配 AdGuard Home 都适用），请看《[搭载 mihomo 内核进行 DNS 分流教程-geodata 方案](https://proxy-tutorials.dustinwin.us.kg/posts/dnsbypass-mihomo-geodata)》或《[搭载 mihomo 内核进行 DNS 分流教程-ruleset 方案](https://proxy-tutorials.dustinwin.us.kg/posts/dnsbypass-mihomo-ruleset)》
 
@@ -413,20 +413,8 @@ echo -e '12345678\n12345678' | passwd root
 
     <img src="/assets/img/pin/adguardhome-up-dns.png" alt="AdGuard Home 配置 1" width="60%" />
 
-  - ➋ “后备 DNS 服务器”设置为：
-
-    ```text
-    quic://dns.alidns.com:853
-    https://doh.pub/dns-query
-    ```
-
-  - ➌ “Bootstrap DNS 服务器”设置为：
-
-    ```text
-    223.5.5.5
-    119.29.29.29
-    ```
-
+  - ➋ “后备 DNS 服务器”设置为 `https://doh.pub/dns-query`
+  - ➌ “Bootstrap DNS 服务器”设置为 `119.29.29.29`
   - ➍ 直接点击“应用”即可  
     <img src="/assets/img/pin/adguardhome-dns.png" alt="AdGuard Home 配置 2" width="60%" />
 

_posts/2024-08-21-pin-shellcrashadguardhome-singboxr.md

@@ -301,7 +301,7 @@ echo -e '12345678\n12345678' | passwd root
     - 注：使用“Tun 模式”前须进入主菜单 → 8 工具与优化，开启 8 小米设备 Tun 模块修复
 
   - ➋ 进入 2 功能设置 → 2 DNS 设置（推荐“MIX 模式”）
-  - ➌ 进入 2 DNS 设置 → 7 DNS 劫持端口，设置为 `5353`（AdGuard Home 的“DNS 服务器端口”须设置为 `5353`）
+  - ➌ 进入 2 DNS 设置 → 7 DNS 劫持端口，设置为 `5353`（须完成《[六、 1](https://proxy-tutorials.dustinwin.us.kg/posts/pin-shellcrashadguardhome-singboxr/#1-adguard-home-%E5%AE%89%E8%A3%85)》后才可设置）
   - ➍ 进入 2 DNS 设置 → 9 修改 DNS 服务器，选择 4 一键配置加密 DNS
     - 注：推荐设置 DNS 分流（单独使用 ShellCrash 以及 ShellCrash 搭配 AdGuard Home 都适用），请看《[搭载 sing-boxr 内核进行 DNS 分流教程-ruleset 方案](https://proxy-tutorials.dustinwin.us.kg/posts/dnsbypass-singboxr-ruleset)》
 
@@ -419,20 +419,8 @@ echo -e '12345678\n12345678' | passwd root
 
     <img src="/assets/img/pin/adguardhome-up-dns.png" alt="AdGuard Home 配置 1" width="60%" />
 
-  - ➋ “后备 DNS 服务器”设置为：
-
-    ```text
-    quic://dns.alidns.com:853
-    https://doh.pub/dns-query
-    ```
-
-  - ➌ “Bootstrap DNS 服务器”设置为：
-
-    ```text
-    223.5.5.5
-    119.29.29.29
-    ```
-
+  - ➋ “后备 DNS 服务器”设置为 `https://doh.pub/dns-query`
+  - ➌ “Bootstrap DNS 服务器”设置为 `119.29.29.29`
   - ➍ 直接点击“应用”即可  
     <img src="/assets/img/pin/adguardhome-dns.png" alt="AdGuard Home 配置 2" width="60%" />
 

_posts/2024-08-21-share-android-mihomo-ruleset.md

@@ -305,12 +305,7 @@ proxy-groups:
 - 2. 推荐将 `ecs` 设置为当前网络的公网 IP 段，如当前网络公网 IP 为 `202.103.17.123`，可设置为 `202.103.17.0/24`
 
 ```yaml
-hosts:
-  dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
-  doh.pub: [1.12.12.12, 1.12.12.21, 120.53.53.53]
-  dns.google: [8.8.8.8, 8.8.4.4, 2001:4860:4860::8888, 2001:4860:4860::8844]
-  dns11.quad9.net: [9.9.9.11, 149.112.112.11, 2620:fe::11, 2620:fe::fe:11]
-  miwifi.com: [192.168.31.1, 127.0.0.1]
+hosts: {miwifi.com: [192.168.31.1, 127.0.0.1]}
 
 dns:
   enable: true
@@ -325,12 +320,8 @@ dns:
     # 推荐将 `ecs` 设置为当前网络的公网 IP 段
     - 'https://dns.google/dns-query#ecs=202.103.17.0/24'
     - 'https://dns11.quad9.net/dns-query#ecs=202.103.17.0/24'
-  proxy-server-nameserver:
-    - quic://dns.alidns.com:853
-    - https://doh.pub/dns-query
-  direct-nameserver:
-    - quic://dns.alidns.com:853
-    - https://doh.pub/dns-query
+  proxy-server-nameserver: [system]
+  direct-nameserver: [system]
   nameserver-policy: {'rule-set:ads': [rcode://success]}
 ```
 

_posts/2024-08-21-share-android-singboxr-ruleset.md

@@ -47,7 +47,7 @@ tags: [sing-box, sing-boxr, Android, ruleset, rule_set, 分享]
   "dns": {
     "servers": [
       {
-        "tag": "hosts",
+        "tag": "dns_hosts",
         "type": "hosts",
         "predefined": {
           "dns.alidns.com": [ "223.5.5.5", "223.6.6.6", "2400:3200::1", "2400:3200:baba::1" ],
@@ -57,11 +57,11 @@ tags: [sing-box, sing-boxr, Android, ruleset, rule_set, 分享]
       },
       { "tag": "dns_resolver", "type": "https", "server": "223.5.5.5" },
       { "tag": "dns_direct", "type": "quic", "server": "dns.alidns.com", "domain_resolver": "dns_resolver" },
-      { "tag": "dns_proxy", "type": "https", "server": "dns.google", "domain_resolver": "dns_resolver", "detour": "节点选择" },
+      { "tag": "dns_proxy", "type": "https", "server": "dns.google", "detour": "GLOBAL" },
       { "tag": "dns_fakeip", "type": "fakeip", "inet4_range": "28.0.0.0/8", "inet6_range": "fc00::/16" }
     ],
     "rules": [
-      { "ip_accept_any": true, "server": "hosts" },
+      { "ip_accept_any": true, "server": "dns_hosts" },
       { "clash_mode": [ "Direct" ], "query_type": [ "A", "AAAA" ], "server": "dns_direct" },
       { "clash_mode": [ "Global" ], "query_type": [ "A", "AAAA" ], "server": "dns_proxy" },
       { "rule_set": [ "ads" ], "action": "predefined" },
@@ -98,7 +98,7 @@ tags: [sing-box, sing-boxr, Android, ruleset, rule_set, 分享]
     { "tag": "全球拦截", "type": "block" },
     { "tag": "全球直连", "type": "selector", "outbounds": [ "DIRECT" ] },
     { "tag": "DIRECT", "type": "direct" },
-    { "tag": "GLOBAL", "type": "selector", "outbounds": [ "DIRECT", "节点选择" ] },
+    { "tag": "GLOBAL", "type": "selector", "outbounds": [ "节点选择", "DIRECT" ] },
     // 若没有单个出站节点，须删除所有 `🆚 vless 节点` 相关内容
     {
       "tag": "🆚 vless 节点",
@@ -119,7 +119,7 @@ tags: [sing-box, sing-boxr, Android, ruleset, rule_set, 分享]
     { "tag": "免费节点", "type": "urltest", "tolerance": 100, "providers": [ "🆓 免费订阅" ] }
   ],
   "route": {
-    "default_domain_resolver": { "server": "dns_direct" },
+    "default_domain_resolver": { "server": "dns_resolver" },
     "rules": [
       { "action": "sniff" },
       { "protocol": [ "dns" ], "action": "hijack-dns" },
@@ -313,25 +313,18 @@ tags: [sing-box, sing-boxr, Android, ruleset, rule_set, 分享]
 {
   "dns": {
     "servers": [
-      {
-        "tag": "hosts",
-        "type": "hosts",
-        "predefined": {
-          "dns.alidns.com": [ "223.5.5.5", "223.6.6.6", "2400:3200::1", "2400:3200:baba::1" ],
-          "dns.google": [ "8.8.8.8", "8.8.4.4", "2001:4860:4860::8888", "2001:4860:4860::8844" ],
-          "miwifi.com": [ "192.168.31.1", "127.0.0.1" ]
-        }
-      },
-      { "tag": "dns_resolver", "type": "https", "server": "223.5.5.5" },
-      { "tag": "dns_direct", "type": "quic", "server": "dns.alidns.com", "domain_resolver": "dns_resolver" },
-      { "tag": "dns_proxy", "type": "https", "server": "dns.google", "domain_resolver": "dns_resolver", "detour": "节点选择" },
+      { "tag": "dns_hosts", "type": "hosts", "predefined": { "miwifi.com": [ "192.168.31.1", "127.0.0.1" ] } },
+      { "tag": "dns_resolver", "type": "local" },
+      { "tag": "dns_direct", "type": "https", "server": "doh.pub", "domain_resolver": "dns_resolver" },
+      { "tag": "dns_proxy", "type": "https", "server": "dns.google", "detour": "GLOBAL" },
       { "tag": "dns_fakeip", "type": "fakeip", "inet4_range": "28.0.0.0/8", "inet6_range": "fc00::/16" }
     ],
     "rules": [
-      { "ip_accept_any": true, "server": "hosts" },
+      { "ip_accept_any": true, "server": "dns_hosts" },
       { "clash_mode": [ "Direct" ], "query_type": [ "A", "AAAA" ], "server": "dns_direct" },
       { "clash_mode": [ "Global" ], "query_type": [ "A", "AAAA" ], "server": "dns_proxy" },
       { "rule_set": [ "ads" ], "action": "predefined" },
+      { "rule_set": [ "microsoft-cn", "apple-cn", "google-cn", "games-cn" ], "query_type": [ "A", "AAAA" ], "server": "dns_direct", "rewrite_ttl": 1 },
       { "rule_set": [ "proxy" ], "query_type": [ "A", "AAAA" ], "server": "dns_fakeip" },
       { "rule_set": [ "private", "cn" ], "query_type": [ "A", "AAAA" ], "server": "dns_direct", "rewrite_ttl": 1 }
     ],

_posts/2024-08-21-share-shellcrash-mihomo-geodata.md

@@ -200,12 +200,7 @@ dns:
 - 2. 推荐将 `ecs` 设置为当前网络的公网 IP 段，如当前网络公网 IP 为 `202.103.17.123`，可设置为 `202.103.17.0/24`（后续维护更新可直接执行命令 `sed -i -E "s/(ecs=)[0-9.]+\/[0-9]+/\1$(curl -s 4.ipw.cn | cut -d. -f1-3).0\/24/" $CRASHDIR/yamls/user.yaml`）
 
 ```yaml
-hosts:
-  dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
-  doh.pub: [1.12.12.12, 1.12.12.21, 120.53.53.53]
-  dns.google: [8.8.8.8, 8.8.4.4, 2001:4860:4860::8888, 2001:4860:4860::8844]
-  dns11.quad9.net: [9.9.9.11, 149.112.112.11, 2620:fe::11, 2620:fe::fe:11]
-  miwifi.com: [192.168.31.1, 127.0.0.1]
+hosts: {miwifi.com: [192.168.31.1, 127.0.0.1]}
 
 dns:
   enable: true
@@ -221,12 +216,8 @@ dns:
     # 推荐将 `ecs` 设置为当前网络的公网 IP 段
     - 'https://dns.google/dns-query#ecs=202.103.17.0/24'
     - 'https://dns11.quad9.net/dns-query#ecs=202.103.17.0/24'
-  proxy-server-nameserver:
-    - quic://dns.alidns.com:853
-    - https://doh.pub/dns-query
-  direct-nameserver:
-    - quic://dns.alidns.com:853
-    - https://doh.pub/dns-query
+  proxy-server-nameserver: [system]
+  direct-nameserver: [system]
   nameserver-policy: {'geosite:ads': [rcode://success]}
 ```