# Shadowrocket: 2026-05-03 20:28:13 [General] bypass-system = true skip-proxy = 192.168.0.0/16, 10.0.0.0/8, 172.16.0.0/12, localhost, *.local, captive.apple.com tun-excluded-routes = 10.0.0.0/8, 100.64.0.0/10, 127.0.0.0/8, 169.254.0.0/16, 172.16.0.0/12, 192.0.0.0/24, 192.0.2.0/24, 192.88.99.0/24, 192.168.0.0/16, 198.51.100.0/24, 203.0.113.0/24, 224.0.0.0/4, 255.255.255.255/32, 239.255.255.250/32 dns-server = system fallback-dns-server = system # Enable full IPv6 support ipv6 = false prefer-ipv6 = false # If a domain uses the direct policy, after enabling this, Shadowrocket will use the system DNS to resolve it. dns-direct-system = false # If true, Shadowrocket will automatically reply to ICMP packets. icmp-auto-reply = true # If true, Shadowrocket always executes reject urlrewrite rules even though the global routing is not config. always-reject-url-rewrite = false # If false, the domain resolution returns a private IP and Shadowrocket assumes that the domain is hijacked and forces the use of a proxy. private-ip-answer = true # If a domain uses the direct policy, automatically switch to the proxy rule if direct DNS resolution fails. dns-direct-fallback-proxy = false # The fallback behavior when UDP traffic matches a policy that doesn't support the UDP relay. Possible values: DIRECT, REJECT. udp-policy-not-supported-behaviour = REJECT # By default, DNS lookup is always performed on the remote server with a proxy policy. # If true, Shadowrocket will use the mapped address for the proxy connection instead of the host if a local DNS mapping exists. use-local-host-item-for-proxy = false [Rule] # Block HTTP3/QUIC # AND,((PROTOCOL,UDP),(DEST-PORT,443)),REJECT-NO-DROP # Apple Intelligence, Siri # https://support.apple.com/en-us/101555 DOMAIN-SUFFIX,apple-relay.akamaized.net,PROXY DOMAIN-SUFFIX,apple-relay.apple.com,PROXY DOMAIN-SUFFIX,apple-relay.cloudflare.com,PROXY DOMAIN-SUFFIX,apple-relay.fastly-edge.com,PROXY # Copilot DOMAIN,copilot.microsoft.com,PROXY DOMAIN,copilot.bing.com,PROXY # LINE DOMAIN-SUFFIX,scdn.co,PROXY DOMAIN-SUFFIX,line.naver.jp,PROXY DOMAIN-SUFFIX,line.me,PROXY DOMAIN-SUFFIX,line-apps.com,PROXY DOMAIN-SUFFIX,line-cdn.net,PROXY DOMAIN-SUFFIX,line-scdn.net,PROXY USER-AGENT,Line*,PROXY # Google DOMAIN-KEYWORD,blogspot,PROXY DOMAIN-KEYWORD,google,PROXY DOMAIN-SUFFIX,abc.xyz,PROXY DOMAIN-SUFFIX,goog,PROXY DOMAIN-SUFFIX,admin.recaptcha.net,PROXY DOMAIN-SUFFIX,ampproject.org,PROXY DOMAIN-SUFFIX,android.com,PROXY DOMAIN-SUFFIX,androidify.com,PROXY DOMAIN-SUFFIX,appspot.com,PROXY DOMAIN-SUFFIX,autodraw.com,PROXY DOMAIN-SUFFIX,blogger.com,PROXY DOMAIN-SUFFIX,capitalg.com,PROXY DOMAIN-SUFFIX,certificate-transparency.org,PROXY DOMAIN-SUFFIX,chrome.com,PROXY DOMAIN-SUFFIX,chromeexperiments.com,PROXY DOMAIN-SUFFIX,chromestatus.com,PROXY DOMAIN-SUFFIX,chromium.org,PROXY DOMAIN-SUFFIX,creativelab5.com,PROXY DOMAIN-SUFFIX,debug.com,PROXY DOMAIN-SUFFIX,deepmind.com,PROXY DOMAIN-SUFFIX,dialogflow.com,PROXY DOMAIN-SUFFIX,firebaseio.com,PROXY DOMAIN-SUFFIX,getmdl.io,PROXY DOMAIN-SUFFIX,getoutline.org,PROXY DOMAIN-SUFFIX,ggpht.com,PROXY DOMAIN-SUFFIX,gmail.com,PROXY DOMAIN-SUFFIX,gmodules.com,PROXY DOMAIN-SUFFIX,godoc.org,PROXY DOMAIN-SUFFIX,golang.org,PROXY DOMAIN-SUFFIX,gstatic.com,PROXY DOMAIN-SUFFIX,gv.com,PROXY DOMAIN-SUFFIX,gvt0.com,PROXY DOMAIN-SUFFIX,gvt1.com,PROXY DOMAIN-SUFFIX,gvt3.com,PROXY DOMAIN-SUFFIX,gwtproject.org,PROXY DOMAIN-SUFFIX,itasoftware.com,PROXY DOMAIN-SUFFIX,madewithcode.com,PROXY DOMAIN-SUFFIX,material.io,PROXY DOMAIN-SUFFIX,polymer-project.org,PROXY DOMAIN-SUFFIX,recaptcha.net,PROXY DOMAIN-SUFFIX,shattered.io,PROXY DOMAIN-SUFFIX,synergyse.com,PROXY DOMAIN-SUFFIX,telephony.goog,PROXY DOMAIN-SUFFIX,tensorflow.org,PROXY DOMAIN-SUFFIX,tfhub.dev,PROXY DOMAIN-SUFFIX,tiltbrush.com,PROXY DOMAIN-SUFFIX,waveprotocol.org,PROXY DOMAIN-SUFFIX,waymo.com,PROXY DOMAIN-SUFFIX,webmproject.org,PROXY DOMAIN-SUFFIX,webrtc.org,PROXY DOMAIN-SUFFIX,whatbrowser.org,PROXY DOMAIN-SUFFIX,widevine.com,PROXY DOMAIN-SUFFIX,x.company,PROXY DOMAIN-SUFFIX,xn--ngstr-lra8j.com,PROXY DOMAIN-SUFFIX,youtu.be,PROXY DOMAIN-SUFFIX,yt.be,PROXY DOMAIN-SUFFIX,ytimg.com,PROXY # Clubhouse DOMAIN-SUFFIX,clubhouseapi.com,PROXY DOMAIN-SUFFIX,clubhouse.pubnub.com,PROXY DOMAIN-SUFFIX,joinclubhouse.com,PROXY DOMAIN-SUFFIX,ap3.agora.io,PROXY # Top blocked sites DOMAIN-KEYWORD,aka,PROXY DOMAIN-KEYWORD,facebook,PROXY DOMAIN-KEYWORD,youtube,PROXY DOMAIN-KEYWORD,twitter,PROXY DOMAIN-SUFFIX,instagram.com,PROXY DOMAIN-SUFFIX,cdninstagram.com,PROXY DOMAIN-KEYWORD,instagram,PROXY DOMAIN-SUFFIX,instagr.am,PROXY DOMAIN-KEYWORD,gmail,PROXY DOMAIN-KEYWORD,pixiv,PROXY DOMAIN-SUFFIX,fb.com,PROXY DOMAIN-SUFFIX,meta.com,PROXY DOMAIN-SUFFIX,twimg.com,PROXY DOMAIN-SUFFIX,x.com,PROXY DOMAIN-SUFFIX,t.co,PROXY DOMAIN-SUFFIX,kenengba.com,PROXY DOMAIN-SUFFIX,akamai.net,PROXY DOMAIN-SUFFIX,whatsapp.net,PROXY DOMAIN-SUFFIX,whatsapp.com,PROXY DOMAIN-SUFFIX,snapchat.com,PROXY DOMAIN-SUFFIX,amazonaws.com,PROXY DOMAIN-SUFFIX,angularjs.org,PROXY DOMAIN-SUFFIX,akamaihd.net,PROXY DOMAIN-SUFFIX,amazon.com,PROXY DOMAIN-SUFFIX,bit.ly,PROXY DOMAIN-SUFFIX,bitbucket.org,PROXY DOMAIN-SUFFIX,blog.com,PROXY DOMAIN-SUFFIX,blogcdn.com,PROXY DOMAIN-SUFFIX,blogsmithmedia.com,PROXY DOMAIN-SUFFIX,box.net,PROXY DOMAIN-SUFFIX,bloomberg.com,PROXY DOMAIN-SUFFIX,cl.ly,PROXY DOMAIN-SUFFIX,cloudfront.net,PROXY DOMAIN-SUFFIX,cloudflare.com,PROXY DOMAIN-SUFFIX,cocoapods.org,PROXY DOMAIN-SUFFIX,dribbble.com,PROXY DOMAIN-SUFFIX,dropbox.com,PROXY DOMAIN-SUFFIX,dropboxstatic.com,PROXY DOMAIN-SUFFIX,dropboxusercontent.com,PROXY DOMAIN-SUFFIX,docker.com,PROXY DOMAIN-SUFFIX,duckduckgo.com,PROXY DOMAIN-SUFFIX,digicert.com,PROXY DOMAIN-SUFFIX,dnsimple.com,PROXY DOMAIN-SUFFIX,edgecastcdn.net,PROXY DOMAIN-SUFFIX,engadget.com,PROXY DOMAIN-SUFFIX,eurekavpt.com,PROXY DOMAIN-SUFFIX,fb.me,PROXY DOMAIN-SUFFIX,fbcdn.net,PROXY DOMAIN-SUFFIX,fc2.com,PROXY DOMAIN-SUFFIX,feedburner.com,PROXY DOMAIN-SUFFIX,fabric.io,PROXY DOMAIN-SUFFIX,flickr.com,PROXY DOMAIN-SUFFIX,fastly.net,PROXY DOMAIN-SUFFIX,github.com,PROXY DOMAIN-SUFFIX,github.io,PROXY DOMAIN-SUFFIX,githubusercontent.com,PROXY DOMAIN-SUFFIX,goo.gl,PROXY DOMAIN-SUFFIX,godaddy.com,PROXY DOMAIN-SUFFIX,gravatar.com,PROXY DOMAIN-SUFFIX,imageshack.us,PROXY DOMAIN-SUFFIX,imgur.com,PROXY DOMAIN-SUFFIX,jshint.com,PROXY DOMAIN-SUFFIX,ift.tt,PROXY DOMAIN-SUFFIX,j.mp,PROXY DOMAIN-SUFFIX,kat.cr,PROXY DOMAIN-SUFFIX,linode.com,PROXY DOMAIN-SUFFIX,lithium.com,PROXY DOMAIN-SUFFIX,megaupload.com,PROXY DOMAIN-SUFFIX,mobile01.com,PROXY DOMAIN-SUFFIX,modmyi.com,PROXY DOMAIN-SUFFIX,nytimes.com,PROXY DOMAIN-SUFFIX,name.com,PROXY DOMAIN-SUFFIX,openvpn.net,PROXY DOMAIN-SUFFIX,openwrt.org,PROXY DOMAIN-SUFFIX,ow.ly,PROXY DOMAIN-SUFFIX,pinboard.in,PROXY DOMAIN-SUFFIX,ssl-images-amazon.com,PROXY DOMAIN-SUFFIX,sstatic.net,PROXY DOMAIN-SUFFIX,stackoverflow.com,PROXY DOMAIN-SUFFIX,staticflickr.com,PROXY DOMAIN-SUFFIX,squarespace.com,PROXY DOMAIN-SUFFIX,symcd.com,PROXY DOMAIN-SUFFIX,symcb.com,PROXY DOMAIN-SUFFIX,symauth.com,PROXY DOMAIN-SUFFIX,ubnt.com,PROXY DOMAIN-SUFFIX,thepiratebay.org,PROXY DOMAIN-SUFFIX,tumblr.com,PROXY DOMAIN-SUFFIX,twitch.tv,PROXY DOMAIN-SUFFIX,twitter.com,PROXY DOMAIN-SUFFIX,wikipedia.com,PROXY DOMAIN-SUFFIX,wikipedia.org,PROXY DOMAIN-SUFFIX,wikimedia.org,PROXY DOMAIN-SUFFIX,wordpress.com,PROXY DOMAIN-SUFFIX,wsj.com,PROXY DOMAIN-SUFFIX,wsj.net,PROXY DOMAIN-SUFFIX,wp.com,PROXY DOMAIN-SUFFIX,vimeo.com,PROXY DOMAIN-SUFFIX,tapbots.com,PROXY DOMAIN-SUFFIX,ykimg.com,DIRECT DOMAIN-SUFFIX,medium.com,PROXY DOMAIN-SUFFIX,fast.com,PROXY DOMAIN-SUFFIX,nflxvideo.net,PROXY DOMAIN-SUFFIX,linkedin.com,PROXY DOMAIN-SUFFIX,licdn.com,PROXY DOMAIN-SUFFIX,bing.com,PROXY DOMAIN-SUFFIX,zoom.us,PROXY # SoundCloud DOMAIN-SUFFIX,soundcloud.com,PROXY DOMAIN-SUFFIX,sndcdn.com,PROXY # ChatGPT DOMAIN,api.statsig.com,PROXY DOMAIN,browser-intake-datadoghq.com,PROXY DOMAIN,chat.openai.com.cdn.cloudflare.net,PROXY DOMAIN,o33249.ingest.sentry.io,PROXY DOMAIN,openai-api.arkoselabs.com,PROXY DOMAIN,openaicom-api-bdcpf8c6d2e9atf6.z01.azurefd.net,PROXY DOMAIN,openaicomproductionae4b.blob.core.windows.net,PROXY DOMAIN,production-openaicom-storage.azureedge.net,PROXY DOMAIN,static.cloudflareinsights.com,PROXY DOMAIN-KEYWORD,openaicom-api,PROXY DOMAIN-SUFFIX,algolia.net,PROXY DOMAIN-SUFFIX,auth0.com,PROXY DOMAIN-SUFFIX,cdn.cloudflare.net,PROXY DOMAIN-SUFFIX,challenges.cloudflare.com,PROXY DOMAIN-SUFFIX,chatgpt.livekit.cloud,PROXY DOMAIN-SUFFIX,client-api.arkoselabs.com,PROXY DOMAIN-SUFFIX,events.statsigapi.net,PROXY DOMAIN-SUFFIX,featuregates.org,PROXY DOMAIN-SUFFIX,host.livekit.cloud,PROXY DOMAIN-SUFFIX,identrust.com,PROXY DOMAIN-SUFFIX,intercom.io,PROXY DOMAIN-SUFFIX,intercomcdn.com,PROXY DOMAIN-SUFFIX,launchdarkly.com,PROXY DOMAIN-SUFFIX,oaistatic.com,PROXY DOMAIN-SUFFIX,oaiusercontent.com,PROXY DOMAIN-SUFFIX,observeit.net,PROXY DOMAIN-SUFFIX,openai.com,PROXY DOMAIN-SUFFIX,openaiapi-site.azureedge.net,PROXY DOMAIN-SUFFIX,openaicom.imgix.net,PROXY DOMAIN-SUFFIX,poe.com,PROXY DOMAIN-SUFFIX,segment.io,PROXY DOMAIN-SUFFIX,sentry.io,PROXY DOMAIN-SUFFIX,stripe.com,PROXY DOMAIN-SUFFIX,turn.livekit.cloud,PROXY IP-CIDR,24.199.123.28/32,PROXY,no-resolve IP-CIDR,45.76.214.191/32,PROXY,no-resolve IP-CIDR,64.23.132.171/32,PROXY,no-resolve IP-CIDR,143.198.200.27/32,PROXY,no-resolve IP-CIDR,159.89.204.203/32,PROXY,no-resolve # Telegram DOMAIN-SUFFIX,t.me,PROXY DOMAIN-SUFFIX,tdesktop.com,PROXY DOMAIN-SUFFIX,telegra.ph,PROXY DOMAIN-SUFFIX,telegram.me,PROXY DOMAIN-SUFFIX,telegram.org,PROXY DOMAIN-SUFFIX,telesco.pe,PROXY IP-CIDR,91.108.4.0/22,PROXY,no-resolve IP-CIDR,91.108.8.0/22,PROXY,no-resolve IP-CIDR,91.108.12.0/22,PROXY,no-resolve IP-CIDR,91.108.16.0/22,PROXY,no-resolve IP-CIDR,91.108.56.0/22,PROXY,no-resolve IP-CIDR,109.239.140.0/24,PROXY,no-resolve IP-CIDR,149.154.160.0/20,PROXY,no-resolve IP-CIDR,2001:B28:F23D::/48,PROXY,no-resolve IP-CIDR,2001:B28:F23F::/48,PROXY,no-resolve IP-CIDR,2001:67C:4E8::/48,PROXY,no-resolve # DNS Leak DOMAIN-SUFFIX,dnsleaktest.com,PROXY DOMAIN-SUFFIX,dnsleak.com,PROXY DOMAIN-SUFFIX,expressvpn.com,PROXY DOMAIN-SUFFIX,nordvpn.com,PROXY DOMAIN-SUFFIX,surfshark.com,PROXY DOMAIN-SUFFIX,ipleak.net,PROXY DOMAIN-SUFFIX,perfect-privacy.com,PROXY DOMAIN-SUFFIX,browserleaks.com,PROXY DOMAIN-SUFFIX,browserleaks.org,PROXY DOMAIN-SUFFIX,vpnunlimited.com,PROXY DOMAIN-SUFFIX,whoer.net,PROXY DOMAIN-SUFFIX,whrq.net,PROXY # LAN IP-CIDR,192.168.0.0/16,DIRECT IP-CIDR,10.0.0.0/8,DIRECT IP-CIDR,172.16.0.0/12,DIRECT IP-CIDR,127.0.0.0/8,DIRECT # --- Everything else --- FINAL,DIRECT [Host] localhost = 127.0.0.1