# Domestic / LAN / captive portal direct rules # Target policy group: DIRECT # LAN and local discovery. DOMAIN-SUFFIX,local,DIRECT DOMAIN-SUFFIX,lan,DIRECT DOMAIN-SUFFIX,home.arpa,DIRECT IP-CIDR,127.0.0.0/8,DIRECT,no-resolve IP-CIDR,10.0.0.0/8,DIRECT,no-resolve IP-CIDR,172.16.0.0/12,DIRECT,no-resolve IP-CIDR,192.168.0.0/16,DIRECT,no-resolve IP-CIDR,224.0.0.0/4,DIRECT,no-resolve # Personal gateway and office/mobile baseline. DOMAIN,api.huangjia.xin,DIRECT DOMAIN-SUFFIX,huangjia.xin,DIRECT DOMAIN-SUFFIX,thundersoft.com,DIRECT DOMAIN-SUFFIX,thundercomm.com,DIRECT # Captive portal and connectivity checks. DOMAIN,captive.apple.com,DIRECT DOMAIN,www.apple.com,DIRECT DOMAIN,connectivitycheck.gstatic.com,DIRECT DOMAIN,clients3.google.com,DIRECT DOMAIN,www.msftconnecttest.com,DIRECT DOMAIN-SUFFIX,msftconnecttest.com,DIRECT DOMAIN-SUFFIX,msftncsi.com,DIRECT # Apple core services. Keep direct first; add special proxy rules later only for specific features. DOMAIN-SUFFIX,apple.com,DIRECT DOMAIN-SUFFIX,icloud.com,DIRECT DOMAIN-SUFFIX,icloud-content.com,DIRECT DOMAIN-SUFFIX,mzstatic.com,DIRECT DOMAIN-SUFFIX,aaplimg.com,DIRECT DOMAIN-SUFFIX,cdn-apple.com,DIRECT # China collaboration / office SaaS. DOMAIN-SUFFIX,feishu.cn,DIRECT DOMAIN-SUFFIX,larksuite.com,DIRECT DOMAIN-SUFFIX,byted.org,DIRECT DOMAIN-SUFFIX,volces.com,DIRECT DOMAIN-SUFFIX,volcengine.com,DIRECT DOMAIN-SUFFIX,dingtalk.com,DIRECT # Microsoft is direct by current router baseline. DOMAIN-SUFFIX,microsoft.com,DIRECT DOMAIN-SUFFIX,microsoftonline.com,DIRECT DOMAIN-SUFFIX,office.com,DIRECT DOMAIN-SUFFIX,live.com,DIRECT DOMAIN-SUFFIX,windowsupdate.com,DIRECT # Tencent / WeChat / payments. DOMAIN-SUFFIX,qq.com,DIRECT DOMAIN-SUFFIX,wechat.com,DIRECT DOMAIN-SUFFIX,weixin.qq.com,DIRECT DOMAIN-SUFFIX,tencent.com,DIRECT DOMAIN-SUFFIX,gtimg.com,DIRECT DOMAIN-SUFFIX,qpic.cn,DIRECT DOMAIN-SUFFIX,wx.qq.com,DIRECT DOMAIN-SUFFIX,work.weixin.qq.com,DIRECT # Domestic daily apps. DOMAIN-SUFFIX,alipay.com,DIRECT DOMAIN-SUFFIX,alicdn.com,DIRECT DOMAIN-SUFFIX,taobao.com,DIRECT DOMAIN-SUFFIX,tmall.com,DIRECT DOMAIN-SUFFIX,jd.com,DIRECT DOMAIN-SUFFIX,meituan.com,DIRECT DOMAIN-SUFFIX,dianping.com,DIRECT DOMAIN-SUFFIX,amap.com,DIRECT DOMAIN-SUFFIX,baidu.com,DIRECT DOMAIN-SUFFIX,bilibili.com,DIRECT DOMAIN-SUFFIX,douyin.com,DIRECT DOMAIN-SUFFIX,bytedance.com,DIRECT # China IP fallback. GEOIP,CN,DIRECT