Clash Verge rev 避免DNS泄露 - 李夜落的博客

1. 开启虚拟网卡模式#

在 Clash Verge 设置中，确保已启用 Tun 模式（或虚拟网卡模式），这是实现全局代理并接管 DNS 请求的前提。

2. 配置 DNS 覆写#

进入 Clash Verge → DNS 覆写 → 高级，将以下代码复制进去并点击保存：

1
dns:
2
  enable: true
3
  listen: '0.0.0.0:53'
4
  enhanced-mode: 'fake-ip'
5
  fake-ip-range: '198.18.0.1/16'
6
  fake-ip-range6: 'fdfe:dcba:9876::1/64'
7
  fake-ip-filter-mode: 'blacklist'
8
  prefer-h3: false
9
  respect-rules: true
10
  use-hosts: false
11
  use-system-hosts: false
12
  ipv6: false
13
  fake-ip-filter:
14
    - '*.lan'
15
    - '*.local'
16
    - '*.arpa'
17
    - '*.s2c.cc.cd'
18
  default-nameserver:
19
    - '223.5.5.5'
20
    - '119.29.29.29'
21
  nameserver:
22
    - 'https://dns.google/dns-query'
23
    - 'https://cloudflare-dns.com/dns-query'
24
  direct-nameserver-follow-policy: false
25
  fallback-filter:
26
    geoip: true
27
    geoip-code: 'CN'
28
    ipcidr:
29
      - '240.0.0.0/4'
30
      - '0.0.0.0/32'
31
    domain:
32
      - '+.google.com'
33
      - '+.facebook.com'
34
      - '+.youtube.com'
35
  fallback:
36
    - 'https://dns.google/dns-query'
37
    - 'https://cloudflare-dns.com/dns-query'
38
  proxy-server-nameserver:
39
    - '223.5.5.5'
40
    - '119.29.29.29'
41
  direct-nameserver:
42
    - '223.5.5.5'
43
    - '119.29.29.29'
44
  nameserver-policy:
45
    +.s2c.cc.cd:
46
      - '223.5.5.5'
47
      - '119.29.29.29'