Skip to content

Instantly share code, notes, and snippets.

@RoyXiang
Created January 2, 2018 06:34
Show Gist options
  • Select an option

  • Save RoyXiang/d21c4bf263182df3ba136eb1a4d1bc84 to your computer and use it in GitHub Desktop.

Select an option

Save RoyXiang/d21c4bf263182df3ba136eb1a4d1bc84 to your computer and use it in GitHub Desktop.

Revisions

  1. RoyXiang created this gist Jan 2, 2018.
    181 changes: 181 additions & 0 deletions Config.ini
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,181 @@
    [Base]
    Version = 0.45
    File Refresh Time = 15
    Large Buffer Size = 4096
    Additional Path =
    Hosts File Name = Hosts.ini
    IPFilter File Name = IPFilter.ini|Routing.txt

    [Log]
    Print Log Level = 3
    Log Maximum Size = 8MB

    [Listen]
    Pcap Capture = 1
    Pcap Devices Blacklist = AnyConnect|Host|Hyper|ISATAP|IKE|L2TP|Only|Oracle|PPTP|Pseudo|Teredo|Tunnel|Virtual|VMNet|VMware|VPN|any|gif|lo|stf|utun
    Pcap Reading Timeout = 250
    Listen Protocol = IPv6 + IPv4 + TCP + UDP
    Listen Port = 53
    Operation Mode = Private
    IPFilter Type = Deny
    IPFilter Level < 0
    Accept Type =

    [DNS]
    Outgoing Protocol = IPv4 + TCP
    Direct Request = 1
    Cache Type = Timer + Queue
    Cache Parameter = 128
    Cache Single IPv4 Address Prefix = 0
    Cache Single IPv6 Address Prefix = 0
    Default TTL = 900

    [Local DNS]
    Local Protocol = IPv4 + UDP
    Local Force Request = 0
    Local Hosts = 0
    Local Main = 1
    Local Routing = 1

    [Addresses]
    IPv4 Listen Address =
    IPv4 EDNS Client Subnet Address =
    IPv4 Main DNS Address = 123.207.5.200:3306
    IPv4 Alternate DNS Address = 208.67.220.220:443|119.23.211.116:22|119.29.1.150:443
    IPv4 Local Main DNS Address = 119.29.29.29:53
    IPv4 Local Alternate DNS Address = 114.114.115.115:53|223.6.6.6:53
    IPv6 Listen Address =
    IPv6 EDNS Client Subnet Address =
    IPv6 Main DNS Address = [2001:4860:4860::8844]:53
    IPv6 Alternate DNS Address = [2001:4860:4860::8888]:53|[2620:0:CCD::2]:443|[2620:0:CCC::2]:5353
    IPv6 Local Main DNS Address =
    IPv6 Local Alternate DNS Address =

    [Values]
    Thread Pool Base Number = 0
    Thread Pool Maximum Number = 128
    Thread Pool Reset Time = 120
    Queue Limits Reset Time = 0
    EDNS Payload Size = 1220
    IPv4 Packet TTL = 32 - 255
    IPv4 Main DNS TTL = 0
    IPv4 Alternate DNS TTL = 0
    IPv6 Packet Hop Limits = 32 - 255
    IPv6 Main DNS Hop Limits = 0
    IPv6 Alternate DNS Hop Limits = 0
    Hop Limits Fluctuation = 2
    Reliable Once Socket Timeout = 3000
    Reliable Serial Socket Timeout = 1500
    Unreliable Once Socket Timeout = 2000
    Unreliable Serial Socket Timeout = 1000
    TCP Fast Open = 0
    Receive Waiting = 0
    ICMP Test = 900
    Domain Test = 900
    Alternate Times = 10
    Alternate Time Range = 60
    Alternate Reset Time = 300
    Multiple Request Times = 0

    [Switches]
    Domain Case Conversion = 0
    Compression Pointer Mutation = 0
    EDNS Label = 0
    EDNS Client Subnet Relay = 0
    DNSSEC Request = 0
    DNSSEC Validation = 0
    DNSSEC Force Validation = 0
    Alternate Multiple Request = 1
    IPv4 Do Not Fragment = 0
    IPv4 Data Filter = 0
    TCP Data Filter = 1
    DNS Data Filter = 1
    Blacklist Filter = 1
    Strict Resource Record TTL Filter = 0

    [Data]
    ICMP ID =
    ICMP Sequence =
    ICMP PaddingData =
    Domain Test ID =
    Domain Test Data =
    Local Machine Server Name =

    [Proxy]
    SOCKS Proxy = 0
    SOCKS Version = 5
    SOCKS Protocol = IPv4 + TCP
    SOCKS UDP No Handshake = 1
    SOCKS Proxy Only = 0
    SOCKS IPv4 Address = 127.0.0.1:1080
    SOCKS IPv6 Address = [::1]:1080
    SOCKS Target Server = 8.8.4.4:53
    SOCKS Username =
    SOCKS Password =
    HTTP CONNECT Proxy = 0
    HTTP CONNECT Protocol = IPv4
    HTTP CONNECT Proxy Only = 0
    HTTP CONNECT IPv4 Address = 127.0.0.1:1080
    HTTP CONNECT IPv6 Address = [::1]:1080
    HTTP CONNECT Target Server = 8.8.4.4:53
    HTTP CONNECT TLS Handshake = 0
    HTTP CONNECT TLS Version = 0
    HTTP CONNECT TLS Validation = 1
    HTTP CONNECT TLS Server Name Indication =
    HTTP CONNECT TLS ALPN = 0
    HTTP CONNECT Version = 1.1
    HTTP CONNECT Header Field = User-Agent: Pcap_DNSProxy/0.4.5.0
    HTTP CONNECT Header Field = Accept: */*
    HTTP CONNECT Header Field = Cache-Control: no-cache
    HTTP CONNECT Header Field = Pragma: no-cache
    HTTP CONNECT Proxy Authorization =

    [DNSCurve]
    DNSCurve = 0
    DNSCurve Protocol = IPv4 + UDP
    DNSCurve Payload Size = 512
    DNSCurve Reliable Socket Timeout = 3000
    DNSCurve Unreliable Socket Timeout = 2000
    DNSCurve Encryption = 1
    DNSCurve Encryption Only = 0
    DNSCurve Client Ephemeral Key = 0
    DNSCurve Key Recheck Time = 1800

    [DNSCurve Database]
    DNSCurve Database Name = dnscrypt-resolvers.csv
    DNSCurve Database IPv4 Main DNS = cisco
    DNSCurve Database IPv4 Alternate DNS =
    DNSCurve Database IPv6 Main DNS = cisco-ipv6
    DNSCurve Database IPv6 Alternate DNS =

    [DNSCurve Addresses]
    DNSCurve IPv4 Main DNS Address = 208.67.220.220:443
    DNSCurve IPv4 Alternate DNS Address =
    DNSCurve IPv6 Main DNS Address = [2620:0:CCC::2]:443
    DNSCurve IPv6 Alternate DNS Address =
    DNSCurve IPv4 Main Provider Name = 2.dnscrypt-cert.opendns.com
    DNSCurve IPv4 Alternate Provider Name =
    DNSCurve IPv6 Main Provider Name = 2.dnscrypt-cert.opendns.com
    DNSCurve IPv6 Alternate Provider Name =

    [DNSCurve Keys]
    DNSCurve Client Public Key =
    DNSCurve Client Secret Key =
    DNSCurve IPv4 Main DNS Public Key = B735:1140:206F:225D:3E2B:D822:D7FD:691E:A1C3:3CC8:D666:8D0C:BE04:BFAB:CA43:FB79
    DNSCurve IPv4 Alternate DNS Public Key =
    DNSCurve IPv6 Main DNS Public Key = B735:1140:206F:225D:3E2B:D822:D7FD:691E:A1C3:3CC8:D666:8D0C:BE04:BFAB:CA43:FB79
    DNSCurve IPv6 Alternate DNS Public Key =
    DNSCurve IPv4 Main DNS Fingerprint =
    DNSCurve IPv4 Alternate DNS Fingerprint =
    DNSCurve IPv6 Main DNS Fingerprint =
    DNSCurve IPv6 Alternate DNS Fingerprint =

    [DNSCurve Magic Number]
    DNSCurve IPv4 Main Receive Magic Number =
    DNSCurve IPv4 Alternate Receive Magic Number =
    DNSCurve IPv6 Main Receive Magic Number =
    DNSCurve IPv6 Alternate Receive Magic Number =
    DNSCurve IPv4 Main DNS Magic Number =
    DNSCurve IPv4 Alternate DNS Magic Number =
    DNSCurve IPv6 Main DNS Magic Number =
    DNSCurve IPv6 Alternate DNS Magic Number =
    23 changes: 23 additions & 0 deletions Hosts.ini
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,23 @@
    [Hosts]
    BANNED promotion.aliyun.com
    BANNED bzclk.baidu.com
    BANNED hm.baidu.com
    BANNED monitor.uu.qq.com
    BANNED tajs.qq.com

    BANNED ^.*click\.baidu\.com$
    BANNED ^.*pos\.baidu\.com$
    BANNED ^ping.*\.qq\.com$
    BANNED ^.*speed\.qq\.com$
    BANNED ^.*click\.taobao\.com$

    BANNED ^.*\.cnzz\.com$
    BANNED ^.*\.jiathis\.com$
    BANNED ^.*\.jiuzhilan\.com$
    BANNED ^.*\.tanx\.com$

    BANNED ^.*\.doubleclick\.com$
    BANNED ^.*\.doubleclick\.net$
    BANNED ^.*\.google-analytics\.com$
    BANNED ^.*\.googleadservices\.com$
    BANNED ^.*\.googlesyndication\.com$
    93 changes: 93 additions & 0 deletions IPFilter.ini
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,93 @@
    ## Example:
    #
    # [Blacklist]
    # 127.0.0.1 test
    # ::1 test
    #
    # [IPFilter]
    # Address(Start) - Address(End) , Level, Comments
    # 127.0.0.0 - 127.255.255.255 , 0, IPv4 Link-Local addresses
    # :: - ::1 , 0, IPv6 Link-Local addresses
    #
    # [Local Routing]
    # 0.0.0.0/32
    # ::/128
    #

    [Blacklist]
    # DNS provider or ISP advertisement/cache server addresses
    # Some DNS providers will return certain IP addresses for non-exist domain for their advertisement.
    # Some ISPs will hijack domains to their cache servers.
    ## China Mobile
    103.207.229.0-103.207.229.255 ALL
    111.11.208.2 ALL
    120.192.83.163 ALL
    120.196.0.0-120.196.0.255 ALL
    120.198.244.0-120.198.244.255 ALL
    120.209.138.64 ALL
    183.207.232.253 ALL
    183.221.242.172 ALL
    183.221.250.11 ALL
    183.224.40.24 ALL
    211.98.70.226|211.98.70.227 ALL
    211.98.71.195 ALL
    211.136.113.1 ALL
    211.137.130.101 ALL
    211.138.74.132 ALL
    211.138.102.198 ALL
    211.139.136.0-211.139.136.255 ALL
    221.179.46.190|221.179.46.194 ALL
    223.82.248.117 ALL
    ## China Telecom
    42.123.125.237 ALL
    58.53.211.46|58.53.211.47 ALL
    60.191.124.236|60.191.124.252 ALL
    61.131.208.210|61.131.208.211 ALL
    61.183.1.186 ALL
    61.139.8.101-61.139.8.104 ALL
    61.191.206.4 ALL
    101.110.118.0-101.110.118.255 ALL
    111.175.220.163 ALL
    111.175.221.58 ALL
    113.12.83.4|113.12.83.5 ALL
    124.232.132.94 ALL
    125.76.239.244|125.76.239.245 ALL
    125.88.131.0-125.88.131.255 ALL
    180.153.103.224 ALL
    180.168.41.175 ALL
    202.100.68.117 ALL
    202.100.220.54 ALL
    202.102.110.203-202.102.110.205 ALL
    220.165.8.172|220.165.8.174 ALL
    218.30.64.194 ALL
    219.146.13.36 ALL
    222.221.5.204|222.221.5.252|222.221.5.253 ALL
    ## China Unicom
    60.19.29.21-60.19.29.27 ALL
    120.52.72.0-120.52.73.255 ALL
    123.129.254.11-123.129.254.19 ALL
    125.211.213.130-125.211.213.134 ALL
    202.98.24.121-202.98.24.125 ALL
    202.99.254.230-202.99.254.232 ALL
    202.106.199.34-202.106.199.38 ALL
    218.28.144.36-218.28.144.42 ALL
    218.68.250.117-218.68.250.121 ALL
    220.250.64.18-220.250.64.30 ALL
    220.250.64.225-220.250.64.228 ALL
    221.192.153.41-221.192.153.49 ALL
    221.204.244.36-221.204.244.41 ALL
    ## DNSPai
    101.226.10.8 ALL
    123.125.81.12 ALL
    ## Great Wall Broadband Network
    114.112.163.232|114.112.163.254 ALL
    124.14.8.196 ALL
    ## OpenDNS
    67.215.65.132|67.215.77.132 ALL
    208.69.34.132|208.69.32.132 ALL

    [IPFilter]


    [Local Routing]

    9,202 changes: 9,202 additions & 0 deletions Routing.txt
    9,202 additions, 0 deletions not shown because the diff is too large. Please use a local Git client to view these changes.