{"id":473759,"date":"2021-05-05T14:17:32","date_gmt":"2021-05-05T06:17:32","guid":{"rendered":"http:\/\/4563.org\/?p=473759"},"modified":"2021-05-05T14:17:32","modified_gmt":"2021-05-05T06:17:32","slug":"clash-premium-%e6%97%81%e8%b7%af%e7%bd%91%e5%85%b3%e8%ae%a8%e8%ae%ba%e3%80%82","status":"publish","type":"post","link":"http:\/\/4563.org\/?p=473759","title":{"rendered":"Clash Premium \u65c1\u8def\u7f51\u5173\u8ba8\u8bba\u3002"},"content":{"rendered":"\n

\t\t\t\t\tmyhost<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

Clash Premium \u65c1\u8def\u7f51\u5173\u8ba8\u8bba\u3002<\/h3>\n

\t\t \u672c\u5e16\u6700\u540e\u7531 myhost \u4e8e 2021-5-5 14:30 \u7f16\u8f91 <\/p>\n

\u5404\u4f4d\u5927\u4f6c\u8bf7\u6307\u70b9\u4e0b\uff0c\u770b\u770b\u6709\u65e0\u9519\u8bef<\/p>\n

\u5c40\u57df\u7f51\u7f51\u6bb5\uff1a10.0.0.1\/24<\/p>\n

Clash\u670d\u52a1\u5668IP\uff1a10.0.0.55<\/p>\n

\u8def\u7531\u5668IP\uff1a10.0.0.254<\/p>\n

https:\/\/github.com\/Dreamacro\/clash\/releases\/tag\/premium \/\/\u4f7f\u7528\u7684\u662fClash Premium\uff0c\u5e76\u5f00\u542fTUN<\/p>\n

Clash Premium\u914d\u7f6e\uff1a<\/p>\n

# \u4ee5\u4e0b\u90e8\u5206\u4e0d\u8981\u4fee\u6539\uff01
port: 7890
socks-port: 7891
redir-port: 7892
allow-lan: true<\/p>\n

mode: Rule<\/p>\n

log-level: info
# external-controller \u4e3b\u8981\u662f\u7528\u4e8e web \u7aef\u7ba1\u7406\u9875\u9762\uff0c\u5fc5\u987b\u76d1\u542c\u5728 0.0.0.0
external-controller: 0.0.0.0:9090<\/p>\n

# secret \u662f\u8fdb\u5165\u7ba1\u7406\u9762\u677f\u6240\u9700\u8981\u7684\u5bc6\u7801\uff0c\u53ef\u586b\u53ef\u4e0d\u586b\uff0c\u5efa\u8bae\u586b\u4e0a
secret: "123456"<\/p>\n

# external-ui \u8868\u793a\u7ba1\u7406\u9762\u677f\u7684\u8def\u5f84
external-ui: dashboard<\/p>\n

dns:
enable: true # set true to enable dns (default is false)
ipv6: false # default is false
listen: 0.0.0.0:53
enhanced-mode: redir-host # or fake-ip
fake-ip-range: 198.18.0.1\/16 # if you don’t know what it is, don’t change it
nameserver:
   – 119.29.29.29
   – ‘tcp:\/\/223.5.5.5’
   – https:\/\/doh.pub\/dns-query
   – https:\/\/dns.alidns.com\/dns-query
   – https:\/\/i.233py.com\/dns-query
fallback:
   – https:\/\/cloudflare-dns.com\/dns-query
   – https:\/\/doh.opendns.com\/dns-query
   – https:\/\/dns.google\/dns-query
   – https:\/\/dns.nextdns.io\/dns-query
   – https:\/\/doh.233py.com\/dns-query
   – ‘tls:\/\/223.5.5.5:853’
   – ‘https:\/\/223.5.5.5\/dns-query’
fallback-filter:
    geoip: true
    ipcidr:
      – 240.0.0.0\/4<\/p>\n

interface-name: ens160<\/p>\n

tun:
enable: true
stack: system
dns-hijack:
    – 8.8.8.8:53
    – tcp:\/\/8.8.8.8:53
#macOS-auto-route: true # auto set global route<\/p>\n

IPtables\u914d\u7f6e\uff1a<\/p>\n

iptables -t nat -N clash
iptables -t nat -N clash_dns<\/p>\n

# \u8fd9\u4e2a\u662ffake-ip\u5bf9\u5e94\u7684dns\u5730\u5740\uff0c\u4e00\u822c\u4e0d\u7528\u52a8
iptables -t nat -A PREROUTING -p tcp –dport 53 -d 198.19.0.0\/24 -j clash_dns
iptables -t nat -A PREROUTING -p udp –dport 53 -d 198.19.0.0\/24 -j clash_dns
iptables -t nat -A PREROUTING -p tcp -j clash<\/p>\n

# \u8fd9\u91cc\u9700\u8981\u6ce8\u610f\u7684\u662f\uff0c\u4e0b\u9762\u4e24\u884c\u6700\u540e\u7684 192.168.1.21 \u662f\u5f53\u524d\u65c1\u8def\u7531\u7684 IP \u5730\u5740\uff0c\u8bf7\u6839\u636e\u4f60\u81ea\u5df1\u7684\u5b9e\u9645\u60c5\u51b5\u4fee\u6539
# \u5982\u679c\u4f60\u81ea\u5df1\u7684\u65c1\u8def\u7531 IP \u8ddf\u4e0b\u9762\u7684 IP \u5730\u5740\u4e0d\u5bf9\u7684\u8bdd\u4f1a\u9020\u6210\u65e0\u6cd5\u4e0a\u7f51\u4ee3\u7406
iptables -t nat -A clash_dns -p udp –dport 53 -d 198.19.0.0\/24 -j DNAT –to-destination 10.0.0.55:53
iptables -t nat -A clash_dns -p tcp –dport 53 -d 198.19.0.0\/24 -j DNAT –to-destination 10.0.0.55:53<\/p>\n

# \u7ed5\u8fc7\u4e00\u4e9b\u5185\u7f51\u5730\u5740
iptables -t nat -A clash -d 0.0.0.0\/8 -j RETURN
iptables -t nat -A clash -d 10.0.0.0\/8 -j RETURN
iptables -t nat -A clash -d 127.0.0.0\/8 -j RETURN
iptables -t nat -A clash -d 169.254.0.0\/16 -j RETURN
iptables -t nat -A clash -d 172.16.0.0\/12 -j RETURN
iptables -t nat -A clash -d 192.168.0.0\/16 -j RETURN
iptables -t nat -A clash -d 224.0.0.0\/4 -j RETURN
iptables -t nat -A clash -d 240.0.0.0\/4 -j RETURN<\/p>\n

# \u6ce8\u610f, \u8fd9\u8fb9\u76847892\u5bf9\u5e94\u540e\u7eedclash\u914d\u7f6e\u91cc\u7684redir-port
iptables -t nat -A clash -p tcp -j REDIRECT –to-ports 7892<\/p>\n

clash\u670d\u52a1\u5668\u7f51\u7edc\u5217\u8868\uff1a<\/p>\n

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link\/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1\/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1\/128 scope host
       valid_lft forever preferred_lft forever
2: ens160: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    link\/ether 00:0c:29:9a:32:0b brd ff:ff:ff:ff:ff:ff
    inet 10.0.0.55\/24 brd 10.0.0.255 scope global dynamic ens160
       valid_lft 30328sec preferred_lft 30328sec
    inet6 fe80::20c:29ff:fe9a:320b\/64 scope link
       valid_lft forever preferred_lft forever
3: utun: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 9000 qdisc fq_codel state UNKNOWN group default qlen 500
    link\/none
    inet 198.18.0.1\/16 scope global utun
       valid_lft forever preferred_lft forever
    inet6 fe80::89bb:e4d4:9e59:4612\/64 scope link stable-privacy
       valid_lft forever preferred_lft forever<\/p>\n

\u5ba2\u6237\u7aef\u914d\u7f6e\uff1a<\/p>\n

IP\uff1a10.0.0.1XX   \/\/
\u5b50\u7f51\u63a9\u7801\uff1a255.255.255.0
\u7f51\u5173\uff1a10.0.0.200 \/\/clash\u670d\u52a1\u5668\u5730\u5740
DNS\uff1a198.19.0.1 \/\/fake-ip<\/p>\n

\u76ee\u524d\u53ef\u4ee5\u6b63\u5e38\u4f7f\u7528<\/p>\n

\u7591\u95ee\uff1a
1.\u662f\u5426\u53ef\u4ee5\u628a198.18.0.1\u4f5c\u4e3aDNS\u670d\u52a1\u5668\uff0c\u90e8\u7f72\u7ed9\u6240\u6709\u5ba2\u6237\u7aef\uff0c\u4f7f\u7528dhcp\u4e0b\u53d1
2.clash\u670d\u52a1\u5668\u81ea\u8eab\u7684dns\u5982\u4f55\u8bbe\u7f6e\u5462\uff1f\u76ee\u524d\u4f7f\u7528\u7684\u662f8.8.8.8<\/p>\n

\t\t\t <\/p>\n","protected":false},"excerpt":{"rendered":"

myhost \u5927\u4f6c\u6709\u8bdd\u8bf4 : Cl…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[],"tags":[],"_links":{"self":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/473759"}],"collection":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=473759"}],"version-history":[{"count":0,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/473759\/revisions"}],"wp:attachment":[{"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=473759"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=473759"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=473759"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}