##########################################
# Application: Shadowrocket Configuration
# Purpose: Direct Iran-specific Domains and IPs
# Last Updated: 2025-12-21 at 03:00 (UTC)
# Created by: @IRAN_VPN_Guide_bot
# Maintained by: Phoenix-999
##########################################

[General]
fallback-dns-server = 
private-ip-answer = false
bypass-system = true
skip-proxy = 192.168.0.0/16, 10.0.0.0/8, 172.16.0.0/12, localhost, *.local, captive.apple.com
tun-excluded-routes = 10.0.0.0/8, 100.64.0.0/10, 127.0.0.0/8, 169.254.0.0/16, 172.16.0.0/12, 192.0.0.0/24, 192.0.2.0/24, 192.88.99.0/24, 192.168.0.0/16, 198.18.0.0/15, 198.51.100.0/24, 203.0.113.0/24, 224.0.0.0/4, 255.255.255.255/32
dns-server = 1.1.1.1,1.0.0.1,1.1.1.2,1.0.0.2,1.1.1.3,1.0.0.3,2606:4700:4700::1111,2606:4700:4700::1001,2606:4700:4700::1112,2606:4700:4700::1002,2606:4700:4700::1113,2606:4700:4700::1003
dns-fallback-system = false
dns-direct-system = false
dns-direct-fallback-proxy = true
ipv6 = true
update-url = https://raw.githubusercontent.com/Phoenix-999/IRAN-Routing-Ruleset-Client-Apps/main/SHADOWROCKET-APP/%F0%9F%87%AE%F0%9F%87%B7IRAN-Routing-Ruleset.conf

[Rule]

######################################################
# 0. Local & Private Networks (DIRECT)
######################################################
IP-CIDR,192.168.0.0/16,DIRECT,no-resolve
IP-CIDR,10.0.0.0/8,DIRECT,no-resolve
IP-CIDR,172.16.0.0/12,DIRECT,no-resolve
IP-CIDR,127.0.0.0/8,DIRECT,no-resolve

######################################################
# 1. Security & Ad Blocking (REJECT) — evaluated first
######################################################
DOMAIN-SET,https://raw.githubusercontent.com/Phoenix-999/IRAN-Routing-Ruleset-Client-Apps/main/SHADOWROCKET-APP/IR-ADS-BLOCK-LIST.TXT,REJECT
RULE-SET,https://raw.githubusercontent.com/Phoenix-999/IRAN-Routing-Ruleset-Client-Apps/main/SHADOWROCKET-APP/CATEGORY-ADS-ALL.TXT,REJECT
RULE-SET,https://raw.githubusercontent.com/Phoenix-999/IRAN-Routing-Ruleset-Client-Apps/main/SHADOWROCKET-APP/MALWARE.TXT,REJECT
RULE-SET,https://raw.githubusercontent.com/Phoenix-999/IRAN-Routing-Ruleset-Client-Apps/main/SHADOWROCKET-APP/PHISHING.TXT,REJECT
RULE-SET,https://raw.githubusercontent.com/Phoenix-999/IRAN-Routing-Ruleset-Client-Apps/main/SHADOWROCKET-APP/CRYPTOMINERS.TXT,REJECT
RULE-SET,https://raw.githubusercontent.com/Phoenix-999/IRAN-Routing-Ruleset-Client-Apps/main/SHADOWROCKET-APP/MALWARE-IP.TXT,REJECT,no-resolve
RULE-SET,https://raw.githubusercontent.com/Phoenix-999/IRAN-Routing-Ruleset-Client-Apps/main/SHADOWROCKET-APP/PHISHING-IP.TXT,REJECT,no-resolve

######################################################
# 2. Iran Routing (DIRECT) — fastest path first
######################################################
# Large curated list (DOMAIN-SET expects one domain per line; leading dot = includes subdomains)
DOMAIN-SET,https://raw.githubusercontent.com/Phoenix-999/IRAN-Routing-Ruleset-Client-Apps/main/SHADOWROCKET-APP/IR-DOMAINS-LIST.TXT,DIRECT
# Catch-all for any .ir domain (cheap and effective)
DOMAIN-SUFFIX,ir,DIRECT

# Iran IP ranges (fallback for apps that bypass DNS / hardcode IPs)
RULE-SET,https://raw.githubusercontent.com/Phoenix-999/IRAN-Routing-Ruleset-Client-Apps/main/SHADOWROCKET-APP/IR-CIDR-LIST-IPV4.TXT,DIRECT,no-resolve
RULE-SET,https://raw.githubusercontent.com/Phoenix-999/IRAN-Routing-Ruleset-Client-Apps/main/SHADOWROCKET-APP/IR-CIDR-LIST-IPV6.TXT,DIRECT,no-resolve

# Optional: GeoIP fallback (depends on your GeoIP DB freshness)
GEOIP,IR,DIRECT

######################################################
# 3. Default
######################################################
FINAL,PROXY

[Host]
localhost = 127.0.0.1