# Updated 2015/11/09 16:00 UTC+8
#
# Github: https://github.com/crystoneme/surge.conf/rules-safe.conf
# This conf is used for safe surfing consideration when you're connect to public wifi.
# This rules conf file is tested for surge.app 1.1.0 Build 335 under iOS 9.0+
# It's for my own use purpose, consider some modification work to suitable for your own situation.
# This file depends on the server.conf which defines your own proxy.
# Created for myself (@crystone), based on other people's work:
#Gist from janlay: https://gist.github.com/janlay/b57476c72a93b7e622a6
#Gist from soffchen: https://gist.github.com/soffchen/47a44825626b1cbd0948
#Gist from scomper: https://gist.github.com/scomper/b0c6129840272c136a82
#Gist from iyee: https://gist.github.com/iyee/2e27c124af2f7a4f0d5a
#Gist from kemychen: https://gist.github.com/kemychen/8c2cf04bbb226470a008
#Gist from Blankwonder: https://gist.github.com/Blankwonder/feefe4e23865d1464d5f
#Gist from jason5ng32: https://gist.github.com/jason5ng32/648597df6ca7da5aeb41
#Repo from hzlzh: https://github.com/hzlzh/Surge.conf/blob/master/surge-HTTP-Proxy.conf
#Gist from tufu9441: https://gist.github.com/tufu9441/a0148457d0ccbd4469e7#file-surge-conf-L29
#Gist from laincat: https://gist.github.com/laincat/27a9e040c216eda81575
#sofish: http://proxy.sofi.sh/
# Surge's site: https://surge.run/
# Forum: https://surge.tips/
# Your server.conf will look like this:
# ---- START ----
# #!PROXY-OVERRIDE:rules.conf
# [Proxy]
# Proxy = http,$IP,$PORT,$USERNAME,$PASSWORD
# Proxy = https,$IP,$PORT,$USERNAME,$PASSWORD
# Proxy = socks,$IP,$PORT,$USERNAME,$PASSWORD
# ShadowSocks,custom不要变，修改服务器地址、端口、加密方式、密码
# Proxy = custom,1.2.3.4,443,encrpt-type,password,https://raw.githubusercontent.com/crystoneme/surge.conf/master/SSEncrypt.module
# Shadowsocks tcp-fast-open打开（TFO 需要服务器端程序及内核支持）
# Proxy = custom,1.2.3.4,443,encrpt-type,password,https://raw.githubusercontent.com/crystoneme/surge.conf/master/SSEncrypt.module,tcp-fast-open=true
# SSLEdge,自行修改 Proxy 中的服务器地址、端口、用户名、密码，加密推荐TLS_RSA_WITH_AES_128_GCM_SHA256
# Proxy = https,1.2.3.4,443,username,password,cipher=TLS_RSA_WITH_AES_128_GCM_SHA256
# ---- END ----
# Make sure the PROXY-OVERRIDE line included in the server.conf
[General]
loglevel = notify
skip-proxy = 192.168.0.0/16, 10.0.0.0/8, 172.16.0.0/12, 100.64.0.0/10, localhost, *.local, e.crashlytics.com
bypass-tun = 0.0.0.0/8, 1.0.0.0/9, 1.160.0.0/11, 1.192.0.0/11, 10.0.0.0/8, 14.0.0.0/11, 14.96.0.0/11, 14.128.0.0/11, 14.192.0.0/11, 27.0.0.0/10, 27.96.0.0/11, 27.128.0.0/9, 36.0.0.0/10, 36.96.0.0/11, 36.128.0.0/9, 39.0.0.0/11, 39.64.0.0/10, 39.128.0.0/10, 42.0.0.0/8, 43.224.0.0/11, 45.64.0.0/10, 47.64.0.0/10, 49.0.0.0/9, 49.128.0.0/11, 49.192.0.0/10, 54.192.0.0/11, 58.0.0.0/9, 58.128.0.0/11, 58.192.0.0/10, 59.32.0.0/11, 59.64.0.0/10, 59.128.0.0/9, 60.0.0.0/10, 60.160.0.0/11, 60.192.0.0/10, 61.0.0.0/10, 61.64.0.0/11, 61.128.0.0/10, 61.224.0.0/11, 100.64.0.0/10, 101.0.0.0/9, 101.128.0.0/11, 101.192.0.0/10, 103.0.0.0/10, 103.192.0.0/10, 106.0.0.0/9, 106.224.0.0/11, 110.0.0.0/7, 112.0.0.0/9, 112.128.0.0/11, 112.192.0.0/10, 113.0.0.0/9, 113.128.0.0/11, 113.192.0.0/10, 114.0.0.0/9, 114.128.0.0/11, 114.192.0.0/10, 115.0.0.0/8, 116.0.0.0/8, 117.0.0.0/9, 117.128.0.0/10, 118.0.0.0/11, 118.64.0.0/10, 118.128.0.0/9, 119.0.0.0/9, 119.128.0.0/10, 119.224.0.0/11, 120.0.0.0/10, 120.64.0.0/11, 120.128.0.0/11, 120.192.0.0/10, 121.0.0.0/9, 121.192.0.0/10, 122.0.0.0/7, 124.0.0.0/8, 125.0.0.0/9, 125.160.0.0/11, 125.192.0.0/10, 127.0.0.0/8, 139.0.0.0/11, 139.128.0.0/9, 140.64.0.0/11, 140.128.0.0/11, 140.192.0.0/10, 144.0.0.0/10, 144.96.0.0/11, 144.224.0.0/11, 150.0.0.0/11, 150.96.0.0/11, 150.128.0.0/11, 150.192.0.0/10, 152.96.0.0/11, 153.0.0.0/10, 153.96.0.0/11, 157.0.0.0/10, 157.96.0.0/11, 157.128.0.0/11, 157.224.0.0/11, 159.224.0.0/11, 161.192.0.0/11, 162.96.0.0/11, 163.0.0.0/10, 163.96.0.0/11, 163.128.0.0/10, 163.192.0.0/11, 166.96.0.0/11, 167.128.0.0/10, 167.192.0.0/11, 168.160.0.0/11, 169.254.0.0/16, 171.0.0.0/9, 171.192.0.0/11, 172.16.0.0/12, 175.0.0.0/9, 175.128.0.0/10, 180.64.0.0/10, 180.128.0.0/9, 182.0.0.0/8, 183.0.0.0/10, 183.64.0.0/11, 183.128.0.0/9, 192.0.0.0/24, 192.0.2.0/24, 192.88.99.0/24, 192.96.0.0/11, 192.160.0.0/11, 198.18.0.0/15, 198.51.100.0/24, 202.0.0.0/9, 202.128.0.0/10, 202.192.0.0/11, 203.0.0.0/9, 203.128.0.0/10, 203.192.0.0/11, 210.0.0.0/10, 210.64.0.0/11, 210.160.0.0/11, 210.192.0.0/11, 211.64.0.0/10, 211.128.0.0/10, 218.0.0.0/9, 218.160.0.0/11, 218.192.0.0/10, 219.64.0.0/11, 219.128.0.0/11, 219.192.0.0/10, 220.96.0.0/11, 220.128.0.0/9, 221.0.0.0/11, 221.96.0.0/11, 221.128.0.0/9, 222.0.0.0/8, 223.0.0.0/11, 223.64.0.0/10, 223.128.0.0/9
dns-server = 119.29.29.29, 223.5.5.5, 114.114.114.114, 8.8.8.8
[Proxy]
# 在server.conf中填些你的服务器信息
Proxy = https,1.2.3.4,1234

###################################### START OF RULES ######################################

[Rule]
#常用网站，代理
DOMAIN-KEYWORD,facebook,Proxy,force-remote-dns
DOMAIN-KEYWORD,gmail,Proxy,force-remote-dns
DOMAIN-KEYWORD,google,Proxy,force-remote-dns
DOMAIN-KEYWORD,instagram,Proxy,force-remote-dns
DOMAIN-KEYWORD,twitter,Proxy,force-remote-dns
DOMAIN-KEYWORD,youtube,Proxy,force-remote-dns
DOMAIN-KEYWORD,blogspot,Proxy,force-remote-dns
DOMAIN-SUFFIX,fbcdn.net,Proxy,force-remote-dns
DOMAIN-SUFFIX,t.co,Proxy,force-remote-dns
DOMAIN-SUFFIX,twimg.com,Proxy,force-remote-dns
DOMAIN-SUFFIX,kenengba.com,Proxy,force-remote-dns
DOMAIN-SUFFIX,vineapp.com,Proxy,force-remote-dns
DOMAIN-SUFFIX,vine.co,Proxy,force-remote-dns

# baidu全家桶
DOMAIN,a.baidu.com,REJECT
DOMAIN,bar.baidu.com,REJECT
DOMAIN,bardutv.baidu.com,REJECT
DOMAIN,c.baidu.com,REJECT
DOMAIN,cjhq.baidu.com,REJECT
DOMAIN,drmcmm.baidu.com,REJECT
DOMAIN,e.baidu.com,REJECT
DOMAIN,eiv.baidu.com,REJECT
DOMAIN,hc.baidu.com,REJECT
DOMAIN,hm.baidu.com,REJECT
DOMAIN,hmma.baidu.com,REJECT
DOMAIN,ma.baidu.com,REJECT
DOMAIN,nsclick.baidu.com,REJECT
DOMAIN,spcode.baidu.com,REJECT
DOMAIN,tk.baidu.com,REJECT
DOMAIN,ucstat.baidu.com,REJECT
DOMAIN,union.baidu.com,REJECT
DOMAIN,utility.baidu.com,REJECT
DOMAIN,utk.baidu.com,REJECT
DOMAIN,eclick.baidu.com,REJECT
DOMAIN,entry.baidu.com,REJECT
DOMAIN,mobads-logs.baidu.com,REJECT
DOMAIN,mobads.baidu.com,REJECT
DOMAIN-SUFFIX,pos.baidu.com,REJECT
DOMAIN,cbjs.baidu.com,REJECT
DOMAIN,mtj.baidu.com,REJECT
DOMAIN,cpro.baidu.com,REJECT
DOMAIN-SUFFIX,mobads.baidu.com,REJECT
DOMAIN-SUFFIX,mobads-logs.baidu.com,REJECT
DOMAIN-SUFFIX,baidustatic.com,REJECT

# 屏蔽隐私采集app
DOMAIN-KEYWORD,umeng.co,REJECT
DOMAIN-KEYWORD,flurry.co,REJECT
DOMAIN-KEYWORD,cnzz,REJECT
DOMAIN-KEYWORD,analytics,REJECT
DOMAIN-KEYWORD,openx,REJECT
DOMAIN-KEYWORD,trace,REJECT
DOMAIN-KEYWORD,track,REJECT
DOMAIN-KEYWORD,traffic,REJECT
DOMAIN-KEYWORD,usage,REJECT
DOMAIN-SUFFIX,mmstat.com,REJECT
DOMAIN-SUFFIX,doubleclick.net,REJECT
DOMAIN-SUFFIX,monitor.uu.qq.com,REJECT
DOMAIN-SUFFIX,youmi.net,REJECT
DOMAIN-SUFFIX,mob.com,REJECT
DOMAIN-SUFFIX,127.net,REJECT
DOMAIN-SUFFIX,sinajs.cn,REJECT
DOMAIN-SUFFIX,beacon.qq.com,REJECT
DOMAIN-SUFFIX,51.la,REJECT
DOMAIN-SUFFIX,ad.unimhk.com,REJECT
DOMAIN-SUFFIX,adchina.com,REJECT
DOMAIN-SUFFIX,adjust.com,REJECT
DOMAIN-SUFFIX,aduu.cn,REJECT
DOMAIN-SUFFIX,adxmi.com,REJECT
DOMAIN-SUFFIX,adzerk.net,REJECT
DOMAIN-SUFFIX,allyes.com,REJECT
DOMAIN-SUFFIX,anquan.org,REJECT
DOMAIN-SUFFIX,appsflyer.com,REJECT
DOMAIN-SUFFIX,baifendian.com,REJECT
DOMAIN-SUFFIX,beacon.sina.com.cn,REJECT
DOMAIN-SUFFIX,cmcore.com,REJECT
DOMAIN-SUFFIX,cnzz.com,REJECT
DOMAIN-SUFFIX,coremetrics.com,REJECT
DOMAIN-SUFFIX,flurry.com,REJECT
DOMAIN-SUFFIX,googleadservices.com,REJECT
DOMAIN-SUFFIX,googleadsserving.cn,REJECT
DOMAIN-SUFFIX,googlesyndication.com,REJECT
DOMAIN-SUFFIX,googletagservices.com,REJECT
DOMAIN-SUFFIX,ib.adnxs.com,REJECT
DOMAIN-SUFFIX,irs01.com,REJECT
DOMAIN-SUFFIX,localytics.com,REJECT
DOMAIN-SUFFIX,madmini.com,REJECT
DOMAIN-SUFFIX,mixpanel.com,REJECT
DOMAIN-SUFFIX,pingtcss.qq.com,REJECT
DOMAIN-SUFFIX,report.qq.com,REJECT
DOMAIN-SUFFIX,responsys.net,REJECT
DOMAIN-SUFFIX,sax.sina.cn,REJECT
DOMAIN-SUFFIX,scorecardresearch.com,REJECT
DOMAIN-SUFFIX,simaba.taobao.com,REJECT
DOMAIN-SUFFIX,ads.genieessp.com,REJECT
DOMAIN-SUFFIX,smartmad.com,REJECT
DOMAIN-SUFFIX,stat.ws.126.net,REJECT
DOMAIN-SUFFIX,tajs.qq.com,REJECT
DOMAIN-SUFFIX,tanx.com,REJECT
DOMAIN-SUFFIX,umeng.net,REJECT
DOMAIN-SUFFIX,union.youdao.com,REJECT
DOMAIN-SUFFIX,ushaqi.com,REJECT
DOMAIN-SUFFIX,waps.cn,REJECT
DOMAIN-SUFFIX,wiyun.com,REJECT
DOMAIN-SUFFIX,wooboo.com.cn,REJECT
DOMAIN-SUFFIX,wqmobile.com,REJECT
DOMAIN-SUFFIX,wrating.com,REJECT
DOMAIN-SUFFIX,x.jd.com,REJECT
DOMAIN,acjs.aliyun.com,REJECT
DOMAIN,ad.api.3g.tudou.com,REJECT
DOMAIN,adash.m.taobao.com,REJECT
DOMAIN,bam.nr-data.net,REJECT
DOMAIN,counter.kingsoft.com,REJECT
DOMAIN,csi.gstatic.com,REJECT
DOMAIN,dsp.youdao.com,REJECT
DOMAIN,g.163.com,REJECT
DOMAIN,js-agent.newrelic.com,REJECT
DOMAIN,pingjs.qq.com,REJECT
DOMAIN,pixel.wp.com,REJECT
DOMAIN,sax.sina.cn,REJECT
DOMAIN,temp.163.com,REJECT
DOMAIN,static.googleadsserving.cn,REJECT
DOMAIN,pagead2.googlesyndication.com,REJECT
DOMAIN,pingma.qq.com,REJECT
DOMAIN,stat.m.jd.com,REJECT
DOMAIN,ads.mopub.com,REJECT
DOMAIN,collector.githubapp.com,REJECT

# Xcode Ghost
DOMAIN-SUFFIX,icloud-analysis.com,REJECT
IP-CIDR,221.179.140.0/24,REJECT,no-resolve

# 屏蔽广告
DOMAIN-KEYWORD,adsmogo,REJECT
DOMAIN-SUFFIX,optaim.com,REJECT
DOMAIN-SUFFIX,acs86.com,REJECT
DOMAIN-SUFFIX,adcome.cn,REJECT
DOMAIN-SUFFIX,adinfuse.com,REJECT
DOMAIN-SUFFIX,admaster.com.cn,REJECT
DOMAIN-SUFFIX,admob.com,REJECT
DOMAIN-SUFFIX,adsage.cn,REJECT
DOMAIN-SUFFIX,adsage.com,REJECT
DOMAIN-SUFFIX,adsmogo.org,REJECT
DOMAIN-SUFFIX,ads.mobclix.com,REJECT
DOMAIN-SUFFIX,adview.cn,REJECT
DOMAIN-SUFFIX,adwhirl.com,REJECT
DOMAIN-SUFFIX,adwo.com,REJECT
DOMAIN-SUFFIX,appads.com,REJECT
DOMAIN-SUFFIX,domob.cn,REJECT
DOMAIN-SUFFIX,domob.com.cn,REJECT
DOMAIN-SUFFIX,domob.org,REJECT
DOMAIN-SUFFIX,duomeng.cn,REJECT
DOMAIN-SUFFIX,duomeng.net,REJECT
DOMAIN-SUFFIX,duomeng.org,REJECT
DOMAIN-SUFFIX,googeadsserving.cn,REJECT
DOMAIN-SUFFIX,guomob.com,REJECT
DOMAIN-SUFFIX,immob.cn,REJECT
DOMAIN-SUFFIX,inmobi.com,REJECT
DOMAIN-SUFFIX,smartadserver.com,REJECT
DOMAIN-SUFFIX,tapjoyads.com,REJECT
DOMAIN-SUFFIX,umeng.co,REJECT
DOMAIN-SUFFIX,umeng.com,REJECT
DOMAIN-SUFFIX,umtrack.com,REJECT
DOMAIN-SUFFIX,uyunad.com,REJECT
DOMAIN-SUFFIX,adnxs.com,REJECT
DOMAIN-SUFFIX,ads.yahoo.com,REJECT
DOMAIN-SUFFIX,advertising.com,REJECT
DOMAIN-SUFFIX,biddingx.com,REJECT
DOMAIN-SUFFIX,ipinyou.com,REJECT
DOMAIN-SUFFIX,kejet.net,REJECT
DOMAIN-SUFFIX,miaozhen.com,REJECT
DOMAIN-SUFFIX,mobclix.com,REJECT
DOMAIN-SUFFIX,optimix.asia,REJECT
DOMAIN-SUFFIX,quantserve.com,REJECT
DOMAIN-SUFFIX,tiqcdn.com,REJECT
DOMAIN-SUFFIX,unimhk.com,REJECT
DOMAIN-SUFFIX,zhiziyun.com,REJECT
DOMAIN-KEYWORD,17jifen,REJECT
DOMAIN-SUFFIX,applifier.com,REJECT
DOMAIN-SUFFIX,applovin.com,REJECT
DOMAIN-SUFFIX,chartboost.com,REJECT
DOMAIN-SUFFIX,guohead.com,REJECT
DOMAIN-SUFFIX,howbuy.com,REJECT
DOMAIN-SUFFIX,tdimg.com,REJECT
DOMAIN-SUFFIX,unlitui.com,REJECT
DOMAIN-SUFFIX,switchadhub.com,REJECT
DOMAIN-SUFFIX,intely.cn,REJECT
DOMAIN,sdkapp.mobile.sina.cn,REJECT
DOMAIN,wbapp.mobile.sina.cn,REJECT

# 屏蔽视频广告
DOMAIN, ad.api.3g.youku.com, REJECT
DOMAIN, atm.youku.com, REJECT
DOMAIN, lives.l.qq.com, REJECT
DOMAIN, ark.letv.com, REJECT
DOMAIN, asimgs.pplive.cn, REJECT
IP-CIDR,123.125.0.0/16,REJECT,no-resolve
DOMAIN,adcontrol.tudou.com,REJECT
DOMAIN,adplay.tudou.com,REJECT
DOMAIN,afp.qiyi.com,REJECT
DOMAIN,bi-collector.oneapm.com,REJECT
DOMAIN,focusbaduafp.allyes.com,REJECT
DOMAIN,ifacelog.iqiyi.com,REJECT
DOMAIN,iwstat.tudou.com,REJECT
DOMAIN,log.51network.com,REJECT
DOMAIN,msg.71.am,REJECT
DOMAIN,msg.iqiyi.com,REJECT
DOMAIN,msg.video.qiyi.com,REJECT
DOMAIN,msg2.video.qiyi.com,REJECT
DOMAIN,nstat.tudou.com,REJECT
DOMAIN,pro.letv.com,REJECT
DOMAIN,s.cr-nielsen.com,REJECT
DOMAIN,stat.tudou.com,REJECT
DOMAIN,stat.youku.com,REJECT
DOMAIN,static.g.ppstream.com,REJECT
DOMAIN,static.lstat.youku.com,REJECT
DOMAIN,static.qiyi.com,REJECT
DOMAIN,stats.tudou.com,REJECT
DOMAIN,tcss.qq.com,REJECT
DOMAIN,uestat.video.qiyi.com,REJECT
DOMAIN-SUFFIX,aty.sohu.com,REJECT
DOMAIN-SUFFIX,cupid.qiyi.com,REJECT
DOMAIN-SUFFIX,rcd.iqiyi.com,REJECT

# 屏蔽 feng.com 论坛广告
DOMAIN-SUFFIX,yes1.feng.com,REJECT
DOMAIN-SUFFIX,jusha.com,REJECT

# youdao广告
DOMAIN-SUFFIX,ydstatic.com,REJECT
DOMAIN,kouyu.youdao.com,REJECT

# Telegram 单独处理
IP-CIDR,91.108.4.0/22,Proxy,no-resolve
IP-CIDR,91.108.56.0/22,Proxy,no-resolve
IP-CIDR,109.239.140.0/24,Proxy,no-resolve
IP-CIDR,149.154.160.0/20,Proxy,no-resolve

# Fix incorrect GeopIP data
IP-CIDR,91.108.56.0/22,Proxy,tcp-force
IP-CIDR,91.108.4.0/22,Proxy,tcp-force
IP-CIDR,109.239.140.0/24,Proxy,tcp-force
IP-CIDR,149.154.160.0/20,Proxy,tcp-force

# LAN
IP-CIDR,192.168.0.0/16,DIRECT
IP-CIDR,10.0.0.0/8,DIRECT
IP-CIDR,172.0.0.0/8,DIRECT
IP-CIDR,127.0.0.0/8,DIRECT
IP-CIDR,100.64.0.0/10,DIRECT

# 国内IP
GEOIP,CN,Proxy

# 其它情形默认走代理，如果代理速度不快，可以改成FINAL,DIRECT
FINAL,Proxy
###################################### END OF RULES ######################################