mirror of
https://github.com/MHSanaei/3x-ui.git
synced 2026-06-03 02:49:36 +00:00
8f5a7b9434
xray-core >=26.5 makes the freedom finalRules context-aware: reverse-proxy traffic defaults to "block all targets". The template seeded finalRules with only allow geoip:private, so a bridge could not exit to WAN and reverse proxy silently broke Switch the default direct freedom to a no-condition allow rule, the documented way to restore pre-policy behavior. Unlike an ip-based rule (0.0.0.0/0 or !geoip:private), it does not force per-connection OS DNS resolution under domainStrategy AsIs, so happyEyeballs/AsIs pass-through stay intact. LAN is still blocked by the geoip:private->blocked routing rule, and removing that rule still regains LAN access Note: only affects new configs; existing installs keep their stored finalRules until reset or a follow-up migration.
86 lines
1.5 KiB
JSON
86 lines
1.5 KiB
JSON
{
|
|
"api": {
|
|
"services": [
|
|
"HandlerService",
|
|
"LoggerService",
|
|
"StatsService"
|
|
],
|
|
"tag": "api"
|
|
},
|
|
"inbounds": [{
|
|
"listen": "127.0.0.1",
|
|
"port": 62789,
|
|
"protocol": "tunnel",
|
|
"settings": {
|
|
"rewriteAddress": "127.0.0.1"
|
|
},
|
|
"tag": "api"
|
|
}],
|
|
"log": {
|
|
"access": "none",
|
|
"dnsLog": false,
|
|
"error": "",
|
|
"loglevel": "warning",
|
|
"maskAddress": ""
|
|
},
|
|
"metrics": {
|
|
"listen": "127.0.0.1:11111",
|
|
"tag": "metrics_out"
|
|
},
|
|
"outbounds": [{
|
|
"protocol": "freedom",
|
|
"settings": {
|
|
"domainStrategy": "AsIs",
|
|
"finalRules": [
|
|
{ "action": "allow" }
|
|
]
|
|
},
|
|
"tag": "direct"
|
|
},
|
|
{
|
|
"protocol": "blackhole",
|
|
"settings": {},
|
|
"tag": "blocked"
|
|
}
|
|
],
|
|
"policy": {
|
|
"levels": {
|
|
"0": {
|
|
"statsUserDownlink": true,
|
|
"statsUserUplink": true
|
|
}
|
|
},
|
|
"system": {
|
|
"statsInboundDownlink": true,
|
|
"statsInboundUplink": true,
|
|
"statsOutboundDownlink": false,
|
|
"statsOutboundUplink": false
|
|
}
|
|
},
|
|
"routing": {
|
|
"domainStrategy": "AsIs",
|
|
"rules": [{
|
|
"inboundTag": [
|
|
"api"
|
|
],
|
|
"outboundTag": "api",
|
|
"type": "field"
|
|
},
|
|
{
|
|
"ip": [
|
|
"geoip:private"
|
|
],
|
|
"outboundTag": "blocked",
|
|
"type": "field"
|
|
},
|
|
{
|
|
"outboundTag": "blocked",
|
|
"protocol": [
|
|
"bittorrent"
|
|
],
|
|
"type": "field"
|
|
}
|
|
]
|
|
},
|
|
"stats": {}
|
|
} |