## 前言 --- 记录下ios端app小火箭/shadowrocket的配置和使用.  ## Geoip 数据库 --- 小火箭/shadowrocket内置的默认Geoip数据库更新周期很长, 不及时的更新可能导致部分分流策略错误, 导致部分应用/请求失败, 如ChatGPT流量不走代理. 这里介绍Github维护的第三方小火箭/shadowrocket Geoip数据库 * 以下摘录自: https://blog.shadowrocketsub.com/post/shadowrocket-geoip-rule-optimisation/ **介绍** * 项目地址: [https://github.com/Hackl0us/GeoIP2-CN](https://github.com/Hackl0us/GeoIP2-CN) * 去除了非中国大陆 IP，减少体积，提高匹配效率 * 更精确的中国大陆 IP 地址 * 3天更新一次 **使用** 在 [设置] - [GeoLite2 数据库] - [国家] 中(替换)填写`URL`为如下内容, 之后点击下方 `更新` ，完成 ```bash https://cdn.jsdelivr.net/gh/Hackl0us/GeoIP2-CN@release/Country.mmdb ```  ![]() ## DNS泄露 --- 在开启VPN分流代理的过程, 很多人并没有及时注意到可能得DNS泄露存在的安全问题. **验证站点** * https://ipleak.net * https://www.yalala.com **配置文件** * 链接：[https://cf.buliang0.cf/shadowrocket-rules/nodnsleak-pk.ini](https://cf.buliang0.cf/shadowrocket-rules/nodnsleak-pk.ini) * 转载自: https://macin.top/posts/f08be643/ * 详细内容如下: ```ini # Shadowrocket配置文件,解决DNS泄露 [General] bypass-system = true skip-proxy = 192.168.0.0/16, 10.0.0.0/8, 172.16.0.0/12, localhost, *.local, captive.apple.com tun-excluded-routes = 10.0.0.0/8, 100.64.0.0/10, 127.0.0.0/8, 169.254.0.0/16, 172.16.0.0/12, 192.0.0.0/24, 192.0.2.0/24, 192.88.99.0/24, 192.168.0.0/16, 198.51.100.0/24, 203.0.113.0/24, 224.0.0.0/4, 255.255.255.255/32, 239.255.255.250/32 dns-server = system ipv6 = false prefer-ipv6 = false dns-fallback-system = false dns-direct-system = false icmp-auto-reply = true always-reject-url-rewrite = false private-ip-answer = true dns-direct-fallback-proxy = true [Rule] RULE-SET,https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/LocalAreaNetwork.list,DIRECT RULE-SET,https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/UnBan.list,DIRECT RULE-SET,https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/ChinaDomain.list,DIRECT RULE-SET,https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/ChinaMedia.list,DIRECT RULE-SET,https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/BanAD.list,REJECT RULE-SET,https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/BanProgramAD.list,REJECT RULE-SET,https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/ChinaCompanyIp.list,DIRECT RULE-SET,https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/ChinaIp.list,DIRECT GEOIP,CN,DIRECT,no-resolve FINAL,PROXY [Host] localhost = 127.0.0.1 [URL Rewrite] ^https?://(www.)?g.cn https://www.google.com 302 ^https?://(www.)?google.cn https://www.google.com 302 ``` **备注:** DNS泄露也与代理节点对UDP转发的支持有关, 如果以上配置完毕后依然在开启VPN+配置分流模式下存在DNS泄露问题, 可以从此方向排查代理节点可能存在的相关问题.