forcerule.yml

mixed-port: 10808
allow-lan: true
ipv6: true
# This is only applicable when `allow-lan` is `true`
# '*': bind all IP addresses
# 192.168.122.11: bind a single IPv4 address
# "[aaaa::a8aa:ff:fe09:57d8]": bind a single IPv6 address
bind-address: '192.168.1.1'
mode: Rule
log-level: info
external-controller: 192.168.1.1:9898
external-ui: dashboard_Razord
cfw-bypass:
  - qq.com
  - music.163.com
  - '*.music.126.net'
  - localhost
  - 127.*
cfw-latency-timeout: 5000
dns:
  enable: true
  ipv6: true
  listen: 192.168.1.1:5353
  # enhanced-mode: redir-host # 或 fake-ip
  # These nameservers are used to resolve the DNS nameserver hostnames below.
  # Specify IP addresses only
  default-nameserver:
    - 114.114.114.114
    - 119.29.29.29

  nameserver: # fallback 与 nameserver 内的服务器列表同时发起请求，depend Country.mmdb当规则符合 GEOIP 在 CN 以外时，fallback 列表内的域名服务器生效。      
    - https://146.112.41.2/dns-query
    - https://[2620:119:fc::2]/dns-query

    #- 202.141.162.123:5353
    #doh_opendns_com
    #- https://208.67.220.220/dns-query
    #A DoH frontend to cisco standard production DNS service as provided on 208.67.222.222 and 208.67.220.220
    #- tls://208.67.222.222:853

    #- tls://1.0.0.1:853
    #- tls://dns.google:853
    #- tls://13800000000.rubyfish.cn:853
    #- https://13800000000.rubyfish.cn/
    #- https://cloudflare-dns.com/dns-query
    #- https://101.6.6.6:8443/dns-query
Proxy: ~
Proxy Group: ~
Rule: ~
rules: # bypass ddns for looking up ip   
 - DOMAIN-SUFFIX,ident.me,DIRECT
 - DOMAIN-SUFFIX,ipv6.dynv6.com,DIRECT