[help]全网找不到答案，clash geo规格和adguard 共存

开发调优
1

昨天在LinuxDo发帖子，adguard和clash的共存，
在L站大佬的协助下下，找到了原因，clash 配置中的Geodata信息和adguard有冲突，会出现无法科学的情况，

如果去掉geo的相关配置，就可以正常翻墙了。

clash meta的geo配置和adguard home的共存，大家有什么改进方案么？

下面是我的原始clash meta配置：

mixed-port: 7890 # 局域网访问Port
bind-address: '*' #绑定IP地址
allow-lan: true # 允许局域网访问
mode: rule # 模式
log-level: warning # 日志等级
external-controller: 0.0.0.0:9090 # 网页端口
find-process-mode: strict   # 匹配所有进程
tcp-concurrent: true # tcp 并发模式
ipv6: false #软路由上不建议开启

# ui部分
# secret: ""
# external-ui: .\ui\public

#自动更新geoip和geosite文件
geodata-mode: false
geo-auto-update: false
geo-update-interval: 24

geox-url:                           # 自定义 geodata url, 需要有代理的前提才能下载geoip和geosite
    geoip: "https://cdn.jsdelivr.net/gh/Loyalsoldier/v2ray-rules-dat@release/geoip.dat"
    geosite: "https://cdn.jsdelivr.net/gh/Loyalsoldier/v2ray-rules-dat@release/geosite.dat"
    mmdb: "https://cdn.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/country.mmdb"

keep-alive-interval: 15
# fakeip 本地存储，省略DNS查询
profile:
    store-selected: false      # 存储 select 选择记录
    store-fake-ip: true        # 持久化 fake-ip

# Tun 配置 Windows使用
# tun:
#     enable: false  #PC端开启 路由器不开启
#     stack: mixed # gvisor / lwip
#     dns-hijack:
#         - 0.0.0.0:53 # 需要劫持的 DNS
#     auto-route: true # 自动设置全局路由，可以自动将全局流量路由进入tun网卡。
#     auto-detect-interface: true # 自动识别出口网卡
#     endpoint-independent-nat: true
#     inet4-route-address: # 启用 auto-route 时使用自定义路由而不是默认路由
#         - 0.0.0.0/1
#         - 128.0.0.0/1
#  inet6-route-address: # 启用 auto-route 时使用自定义路由而不是默认路由
#    - "::/1"
#    - "8000::/1"

dns:
    enable: true # 关闭将使用系统 DNS
    prefer-h3: true # 开启 DoH 支持 HTTP/3，将并发尝试
    listen: ':53' # 开启 DNS 服务器监听
    default-nameserver:
        - 114.114.114.114
        - 8.8.8.8
        - tls://223.5.5.5:853
        - 192.168.68.1 # 如果是windows或安卓客户端可使用system，如果是软路由填写你的拨号光猫/路由器的IP地址

    enhanced-mode: fake-ip
    fake-ip-range: 198.18.0.1/16
    fake-ip-filter:   #这里可以填写不使用fakeip的域名
        - '*.lan'
        - '*.battlenet.com.cn'
        - '*.battlenet.com'
        - '*.blzstatic.cn'
        - '*.battle.net'
        # === Linksys Wireless Router ===
        - '*.linksys.com'
        - '*.linksyssmartwifi.com'
        # === Apple Software Update Service ===
        - swscan.apple.com
        - mesu.apple.com
        # === Windows 10 Connnect Detection ===
        - '*.msftconnecttest.com'
        - '*.msftncsi.com'
        # === NTP Service ===
        - 'time.*.com'
        - 'time.*.gov'
        - 'time.*.edu.cn'
        - 'time.*.apple.com'
        - 'time1.*.com'
        - 'time2.*.com'
        - 'time3.*.com'
        - 'time4.*.com'
        - 'time5.*.com'
        - 'time6.*.com'
        - 'time7.*.com'
        - 'ntp.*.com'
        - 'ntp.*.com'
        - 'ntp1.*.com'
        - 'ntp2.*.com'
        - 'ntp3.*.com'
        - 'ntp4.*.com'
        - 'ntp5.*.com'
        - 'ntp6.*.com'
        - 'ntp7.*.com'
        - '*.time.edu.cn'
        - '*.ntp.org.cn'
        - '+.pool.ntp.org'
        - time1.cloud.tencent.com
        # === Music Service ===
        ## NetEase
        - '+.music.163.com'
        - '*.126.net'
        ## Baidu
        - musicapi.taihe.com
        - music.taihe.com
        ## Kugou
        - songsearch.kugou.com
        - trackercdn.kugou.com
        ## Kuwo
        - '*.kuwo.cn'
        ## JOOX
        - api-jooxtt.sanook.com
        - api.joox.com
        - joox.com
        ## QQ
        - '*.qq.com'
        - report.url.cn
        ## Xiami
        - '*.xiami.com'
        ## Migu
        - '+.music.migu.cn'
        # === Game Service ===
        ## Nintendo Switch
        - '+.srv.nintendo.net'
        ## Sony PlayStation
        - '+.playstation.net'
        - '+.playstation.com'
        - '+.stun.playstation.net'
        ## Microsoft Xbox
        - 'xbox.*.microsoft.com'
        - '+.xboxlive.com'
        # === Other ===
        ## QQ Quick Login
        - localhost.ptlogin2.qq.com
        ## Golang
        - proxy.golang.org
        ## STUN Server
        - 'stun.*.*'
        - 'stun.*.*.*'
        ## Bilibili CDN
        - '*.mcdn.bilivideo.cn'
        # === Other ===
        - '*.bilibili.com'
        - '*.1huizhan.com'
        - '*.3.cn'
        - '*.300hu.com'
        - '*.360buy.cn'
        - '*.360buy.com'
        - '*.360buy.com.cn'
        - '*.360buyimg.com'
        - '*.360buyinternational.com'
        - '*.360top.com'
        - '*.jd.com'
        # WiFi-Calling 如果你发现你的WiFi Calling不能发图片 大概率是节点UDP问题
        - t-mobile.com
        - crl.t-mobile.com
        - eas3.msg.t-mobile.com
        - mascns.t-mobile.com
        - ns.sipgeo.t-mobile.com
        - epdg.epc.mnc240.mcc310.pub.3gppnetwork.org
        - epdg.epc.mnc260.mcc310.pub.3gppnetwork.org
        - ss.epdg.epc.mnc260.mcc310.pub.3gppnetwork.org
        - ss.epdg.epc.geo.mnc260.mcc310.pub.3gppnetwork.org 
        # Hygege提供
        - services.googleapis.cn
        - xn--ngstr-lra8j.com
        
    
    nameserver:
        - 114.114.114.114 # default value
        - 8.8.8.8
        - tls://223.5.5.5:853 # DNS over TLS
        - https://doh.pub/dns-query
        - https://dns.alidns.com/dns-query#h3=true 
        - system
        
    nameserver-policy:
    "geosite:cn,private":
        - https://120.53.53.53/dns-query
        - https://223.5.5.5/dns-query
    "geosite:geolocation-!cn":
        - "https://dns.cloudflare.com/dns-query"
        - "https://dns.google/dns-query"

#节点存放地址
proxies:
    - name: yoson                                # 可以自定义节点名称
      type: ss
      server: ss.ss.ss                            # 解析的 IP / 域名
      port: 123456                                        # 自定义端口
      cipher: chacha20-ietf-poly1305                              # 自定义加密方式，详细请查阅 Clash Meta 文档
      password: *************                               # 自定义认证密码

#代理组
proxy-groups:    
#自动选择
    - name: "Auto"
      type: url-test # 下面开启了自动测速
      proxies:
         - yoson
      use:
#          - subscribe_groups 
      url: "http://www.gstatic.com/generate_204"
      interval: 300   #自动测速周期，单位：秒  
#其他规则
    - name: "PROXY"
      type: select # 下面开启了自动测速
      proxies:
          - yoson
          - "Auto"
      use:
#          - subscribe_groups 
# 声破天      
    - name: "Spotify"
      type: select # 下面开启了自动测速
      proxies:
          - yoson
          - "Auto"
      use:
#          - subscribe_groups 
# 电报      
    - name: "Telegram"
      type: select # 下面开启了自动测速
      proxies:
          - yoson
          - "Auto"
      use:
#          - subscribe_groups  
# chatgpt      
    - name: "OpenAI"
      type: select # 下面开启了自动测速
      proxies:
          - yoson
          - "Auto"
      use:
#          - subscribe_groups  
# Onedrive
    - name: "Onedrive"
      type: select # 下面开启了自动测速
      proxies:
          - yoson
          - "Auto"
      use:
#          - subscribe_groups      
          
#代理集  如果是自建节点屏蔽这里  
# proxy-providers:
    #自定义机场名称subscribe_groups
#     subscribe_groups:
#         type: http # http 的 path 可空置,默认储存路径为 homedir的proxies文件夹,文件名为url的md5
#         url: "" #订阅链接存放在双引号内
#         interval: 86400 #机场订阅自动更新时间 单位：秒
#         path: ./hj_sub.yaml # 默认只允许存储在 clash 的 Home Dir，如果想存储到任意位置，添加环境变量 SKIP_SAFE_PATH_CHECK=1
#         health-check:
#             enable: true
#             interval: 165
#             # lazy: true
#             url: http://cp.cloudflare.com/generate_204
      
#规则集
rule-providers:     
    lancidr:
        type: http
        behavior: ipcidr
        interval: 86400
        path: ./ruleset/lancidr.yaml
        url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/lancidr.txt"  
    private:
        type: http
        behavior: domain
        interval: 86400
        path: ./ruleset/private.yaml
        url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt"
    direct:
        type: http
        behavior: domain
        interval: 86400
        path: ./ruleset/direct.yaml
        url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt"      
    applications:
        type: http
        behavior: classical
        interval: 86400
        path: ./ruleset/applications.yaml
        url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/applications.txt"
    icloud:
        type: http
        behavior: domain
        interval: 86400
        path: ./ruleset/icloud.yaml
        url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/icloud.txt"        
    apple:
        type: http
        behavior: domain
        interval: 86400
        path: ./ruleset/apple.yaml
        url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/apple.txt"
    cncidr:
        type: http
        behavior: ipcidr
        interval: 86400
        path: ./ruleset/cncidr.yaml
        url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/cncidr.txt"  
    gfw:
        type: http
        behavior: domain
        interval: 86400   
        path: ./ruleset/gfw.yaml        
        url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/gfw.txt"     
    reject:
        type: http
        behavior: domain
        url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt"
        path: ./ruleset/reject.yaml
        interval: 86400
    
rules:
    - RULE-SET,reject,REJECT
    - DOMAIN,events.data.microsoft.com,REJECT #拦截微软部分遥测
    - GEOSITE,adobe,REJECT #屏蔽adobe

#域名规则
    - RULE-SET,applications,DIRECT
    - RULE-SET,private,DIRECT
    - RULE-SET,icloud,DIRECT
    - RULE-SET,apple,DIRECT
    - GEOSITE,microsoft@cn,DIRECT 
    - GEOSITE,steam@cn,DIRECT
    - GEOSITE,category-games@cn,DIRECT 
#在这里添加自定义直连规则
    - DOMAIN,xn--ngstr-lra8j.com,PROXY
    - DOMAIN,deeplx.doi9.top,DIRECT
    - DOMAIN,services.googleapis.cn,PROXY
    - DOMAIN,mtalk.google.com,PROXY
    - DOMAIN-SUFFIX,voidsec.com,PROXY   #voidsec 礼貌性添加所谓的dns泄露检测站
    - DOMAIN-SUFFIX,browserleaks.com,PROXY #browserleaks 礼貌性添加所谓的dns泄露检测站
    - DOMAIN-SUFFIX,ipleak.net,PROXY #ipleak 礼貌性添加所谓的dns泄露检测站




    - GEOSITE,onedrive,Onedrive
    - GEOSITE,telegram,Telegram
    - GEOSITE,spotify,Spotify
    - GEOSITE,facebook,PROXY
    - GEOSITE,google,PROXY
    - GEOSITE,category-scholar-!cn,PROXY
    - GEOSITE,geolocation-!cn,PROXY
    - RULE-SET,gfw,PROXY
    - RULE-SET,direct,DIRECT
    - RULE-SET,lancidr,DIRECT
    - GEOSITE,cn,DIRECT  
#IP规则    
    - GEOIP,private,DIRECT,no-resolve 
    - RULE-SET,cncidr,DIRECT
    - GEOIP,CN,DIRECT     
    - GEOIP,telegram,PROXY,no-resolve
    - GEOIP,google,PROXY,no-resolve
    - GEOIP,twitter,PROXY,no-resolve
    - GEOIP,JP,PROXY,no-resolve    

#最终匹配 白名单模式
    - MATCH,PROXY
1 个赞
2

这位佬说得应该很清楚了，所谓冲突，是因为 ADGuard Home 需要劫持 DNS 才能生效，而 clash 也有 DNS 管理的功能，具体操作方法按佬的来就行了。

另，按我自己猜的话，可能是"https://cdn.jsdelivr.net/"这个域名被 ADGuard Home 拦截，可能在它里面配置一下放行就可以了

1 个赞
3

adg的规则对于hsdelivr是放行的

2520×1268 287 KB

4

应该是查cdn.jsdelivr.net…具体测试方法，可以在联网后浏览器里访问一下 https://cdn.jsdelivr.net/gh/Loyalsoldier/v2ray-rules-dat@release/geosite.dat

如果还不行，建议跟之前的大佬交流，我确实技术有限，对这块不够了解 tieba_087

5

无论如何，谢谢大佬你的时间和回复，

cdn.jsdelivr.net我也是放行的，具体如下图：

2652×1084 125 KB