(.*\.||)(dafahao|mingjinglive|chinaaid|botanwang|xinsheng|rfi|breakgfw|chengmingmag|jinpianwang|xizang-zhiye|breakgfw|qi-gong|voachinese|mhradio|rfa|edoors|edoors|renminbao|soundofhope|zhengjian|dafahao|minghui|dongtaiwang|epochtimes|ntdtv|falundafa|wujieliulan|aboluowang|bannedbook|secretchina|dajiyuan|boxun|chinadigitaltimes|huaglad|dwnews|creaders|oneplusnews|rfa)\.(cn|com|org|net|club|net|fr|tw|hk|eu|info|me)
(.*\.||)(gov|12377|12315|talk.news.pts.org|creaders|zhuichaguoji|efcc.org|cyberpolice|aboluowang|tuidang|epochtimes|nytimes|dafahao|falundafa|minghui|falunaz|zhengjian|110.qq|mingjingnews|inmediahk|xinsheng|bannedbook|ntdtv|falungong|12321|secretchina|epochweekly|cn.rfi)\.(cn|com|org|net|club|net|fr|tw|hk|eu|info|me)
BitTorrent protocol
Private Tracker protocol
(.*.||)(gov|12377|12315|talk.news.pts.org|cread­ers|zhuich­aguoji|efcc.org|cy­ber­po­lice|abolu­owang|tu­idang|epochtimes|ny­times|zhengjian|110.qq|mingjingnews|in­medi­ahk|xin­sheng|banned­book|nt­dtv|12321|se­cretchina|epochweekly|cn.rfi).(cn|com|org|net|club|net|fr|tw|hk)
(torrent|\.torrent|peer_id=|info_hash|get_peers|find_node|BitTorrent|announce_peer|announce\.php\?passkey=)
(.?)(xunlei|sandai|Thunder|XLLiveUD)(.)
(.*\.||)(gash)\.(com|tw)
(.*\.||)(mycard)\.(com|tw)
(.+\.|^)(360|so)\.(cn|com)
(\.guanjia\.qq\.com|qqpcmgr|QQPCMGR)
(api|ps|sv|offnavi|newvector|ulog\.imap|newloc)(\.map|)\.(baidu|n\.shifen)\.com
(^.*@)(guerrillamail|guerrillamailblock|sharklasers|grr|pokemail|spam4|bccto|chacuo|027168).(info|biz|com|de|net|org|me|la)
(.*\.||)(gash)\.(com|tw)
(.*\.||)(mycard)\.(com|tw)
(.*\.||)(taobao)\.(com)
(.*\.||)(metatrader4|metatrader5|mql5)\.(org|com|net)
(.*\.||)(rising|kingsoft|duba|xindubawukong|jinshanduba)\.(com|net|org)

## v2board对接soga

regexp:(api|ps|sv|offnavi|newvector|ulog.imap|newloc)(.map|).(baidu|n.shifen).com
regexp:(..)(^360|0360|1360|3600|360safe|qhimg|qhmsg|^yun­pan|qi­hoo|qhcdn|qhup­date|360­to­talse­cu­rity|360shouji|qi­hucdn|360kan|secmp).(cn|com|net)
regexp:(Subject|HELO|SMTP)
regexp:(torrent|.torrent|peer_id=|info_hash|get_peers|find_node|BitTorrent|announce_peer|announce.php?passkey=)
regexp:(^.@)(guerrillamail|guerrillamailblock|sharklasers|grr|pokemail|spam4|bccto|chacuo|027168).(info|biz|com|de|net|org|me|la)
regexp:(.?)(xunlei|sandai|Thunder|XLLiveUD)(.)
regexp:(..||)(dafahao|mingjinglive|botanwang|minghui|dongtaiwang|falunaz|epochtimes|ntdtv|falundafa|falungong|wujieliulan|zhengjian).(org|com|net)
regexp:(ed2k|.torrent|peer_id=|announce|info_hash|get_peers|find_node|BitTorrent|announce_peer|announce.php?passkey=|magnet:|xunlei|sandai|Thunder|XLLiveUD|bt_key)
regexp:(.+.|^)(360|speedtest|fast).(cn|com|net)
regexp:(..||)(guanjia.qq.com|qqpcmgr|QQPCMGR)
regexp:(..||)(rising|kingsoft|duba|xindubawukong|jinshanduba).(com|net|org)
regexp:(..||)(netvigator|torproject).(com|cn|net|org)
regexp:(..||)(visa|mycard|mastercard|gash|beanfun).
regexp:(..||)(gov|12377|12315|talk.news.pts.org|creaders|zhuichaguoji|efcc.org|cyberpolice|aboluowang|tuidang|epochtimes|110.qq|mingjingnews|newhighlandvision|inmediahk|xinsheng|breakgfw|chengmingmag|jinpianwang|qi-gong|mhradio|edoors|renminbao|soundofhope|xizang-zhiye|bannedbook|ntdtv|12321|secretchina|dajiyuan|boxun|dwnews|huaglad|oneplusnews|epochweekly|cn.rfi).(cn|com|org|net|club|net|fr|tw|hk|eu|info|me)
regexp:(..||)(miaozhen|cnzz|talkingdata|umeng).(cn|com)
regexp:(..||)(mycard).(com|tw)
regexp:(..||)(gash).(com|tw)
regexp:(..||)(pincong).(rocks)
regexp:(..||)(taobao).(com)
regexp:(..)(tcbox|wappass|tieba|nsclick|sofire|gips0|afd|als|hmma|info|bgg|mbd|afdconf|).(tuisong|baidu|bdstatic).(cn|com|net)
regexp:(.+.|^)(zhuanzhuan|pinduoduo|kskwai|kwaizt|gifshow|kuaishouzt|kwimgs|yximgs|ksapisrv|kuaishou|autonavi|xfinfr).(cn|com|net)
regexp:(.+.|^)(zhihu).(com)
regexp:(..)(xiaohongshu|xhscdn).(cn|com|net)
regexp:(..)(weibo|sinaimg).(cn|com|net)
regexp:(.+.|^)(amemv|ecombdapi|toutiao|baike|zijieapi|douyinpic|bytedance|pstatp|bdurlsnssdk|awemueughun|oceanengine|douyinstatic).(cn|com|net)
regexp:(eth|asia|eth-eu|eth-us|cn|eth-backup|eth-na|stratum-etheth-eu1|eth-eu2).(antpool|sparkpool|f2pool|nanopool).(org|com)
regexp:(..)(gash).(com|tw)
regexp:.gov.cn
regexp:.go.kr.
regexp:(..)(cyberpolice|12377|110|12389|jubao|8221110|cctv|81|12388|isc|12339|js12377).(org|com|net|cn|gov)
regexp:(..)(ipaddress|whatismyipaddress|iplocation|ip138).(org|com|net|my|to|co)
regexp:(..)(metatrader4|metatrader5|mql5).(org|com|net)
regexp:(.+.|^)(whatismyip|whatismyipaddress|ipip|iplocation|myip|whatismybrowser).(cn|com|net|com|network)
regexp:(..)(adsafe).(com)
regexp:(..)(64tianwang|beijingspring|boxun|broadpressinc|chengmingmag|chenpokong|chinaaffairs|chinesepen|dalailamaworld|dalianmeng|erabaru|fgmtv|hrichina|huanghuagang|hxwq|jiangweiping|lagranepoca|lantosfoundation|minzhuzhongguo|ned|ninecommentaries|ogate|rfa|shenyun|shenyunperformingarts|shenzhoufilm|tiantibooks|tibetpost|truthmoviegroup.wixsite|uhrp|uyghuramerican|voachinese|vot|weijingsheng|xizang-zhiye).(org|com|net)
regexp:(..)(speed).(io)
regexp:(..)(weixin|qq|weixin110|weibo|zhihu|toutiao|bytedance|zijieapi|xiaohongshu|xhscdn|umengcloud|fengkongcloud|cpatrk|ctobsnssdk|shuzilm|soulapp|immomo|momocdn|douyinvod|douyin).(cn|com|net)
regexp:(..)(antpool|foundrydigital|f2pool|viabtc|mining-dutch|solopool|hiveon|minergate|comining|give-me-coins|arsmine|baikalmine|litecoinpoo|clona|btc|slushpool|pandaminer|beepool|maxhash|coinminerz|bwpool|poolin|uupool|miningcore|multipools|minexmr|sbicrypto|marathondh|emcd|luxor|sigmapool|okkong|hpt|minerium|ckpool|mmpool|hashcity|uutest|huobipool|sparkpool|qkl123|webkaka|2miners|51szzc|666pool|91pool|atticpool|anomp|aapool|antpool|ash-shanghai.globalpool|asia.zcoin.miningpoolhub|blackpool|blockmasters|btchd|bitminter|bitcoin|bhdpool|bginpoolbaimin|bi-chi|bohemianpool|bixin|bwpool|btcguild|batpool|bw|btcc|btc|bitfury|bitclubnetwork|beepool|coinhive|chainpool|connectbtc|cybtc|canoepool|cryptograben|cryptonotepool|coinotron|dashcoinpool|dxpool|dwarfpool|dpool|dmpools|everstake|epool|ethpool|ethfans|easy2mine|ethermine|extremepool|firepool|fir|fkpool|flypool|f3pool|gridcash|gath3r|grin-pool|grinmint|gbminers|get.bi-chi|globalpool|give-me-ltc|honeyminer|honestmining|hashquark|hashrabbit|hummerpool|hdpool|h-pool|hashvault|hpool|huobipool|haopool|pool.btc).(com|cn|net|org|io|im|cc|pro|top|one|co|info)
regexp:(..)(onedrive).(cn|com|org|net|club|net|fr|tw|hk|eu|info|me|io)
regexp:(.*.)(netvi­ga­tor|tor­pro­ject).(cn|com|net|org)

## XrayR审计规则说明

默认屏蔽这些端口<span class="hljs-number">22</span>,<span class="hljs-number">23</span>,<span class="hljs-number">24</span>,<span class="hljs-number">25</span>,<span class="hljs-number">107</span>,<span class="hljs-number">194</span>,<span class="hljs-number">445</span>,<span class="hljs-number">465</span>,<span class="hljs-number">587</span>,<span class="hljs-number">992</span>,<span class="hljs-number">3389</span>,<span class="hljs-number">6665</span><span class="hljs-number">-6669</span>,<span class="hljs-number">6679</span>,<span class="hljs-number">6697</span>,<span class="hljs-number">6881</span><span class="hljs-number">-6999</span>,<span class="hljs-number">7000</span>,<span class="hljs-number">10000</span><span class="hljs-number">-65535</span>

route.json
</code></pre></td></tr></table></figure>
{
  “domainStrategy”: “IPOnDemand”,
  “rules”: [
    {
      “type”: “field”,
      “outboundTag”: “block”,
      “ip”: [
        “geoip:private”
      ]
    },
    {
      “type”: “field”,
      “outboundTag”: “block”,
      “domain”: [
        “regexp:(api|ps|sv|offnavi|newvector|ulog.imap|newloc)(.map|).(baidu|n.shifen).com”,
        “regexp:(.+.|^)(360|so).(cn|com)”,
        “regexp:(Subject|HELO|SMTP)”,
        “regexp:(torrent|.torrent|peer_id=|info_hash|get_peers|find_node|BitTorrent|announce_peer|announce.php?passkey=)”,
        “regexp:(^.@)(guerrillamail|guerrillamailblock|sharklasers|grr|pokemail|spam4|bccto|chacuo|027168).(info|biz|com|de|net|org|me|la)”,
        “regexp:(.?)(xunlei|sandai|Thunder|XLLiveUD)(.)”,
        “regexp:(..||)(dafahao|mingjinglive|botanwang|minghui|dongtaiwang|falunaz|epochtimes|ntdtv|falundafa|falungong|wujieliulan|zhengjian).(org|com|net)”,
        “regexp:(ed2k|.torrent|peer_id=|announce|info_hash|get_peers|find_node|BitTorrent|announce_peer|announce.php?passkey=|magnet:|xunlei|sandai|Thunder|XLLiveUD|bt_key)”,
        “regexp:(.+.|^)(360|speedtest|fast|so).(cn|com|net)”,
        “regexp:(.<em>.||)(guanjia.qq.com|qqpcmgr|QQPCMGR)”,
        “regexp:(.</em>.||)(rising|kingsoft|duba|xindubawukong|jinshanduba).(com|net|org)”,
        “regexp:(.<em>.||)(netvigator|torproject).(com|cn|net|org)”,
        “regexp:(..||)(visa|mycard|mastercard|gov|gash|beanfun|bank).”,
        “regexp:(.</em>.||)(gov|12377|12315|talk.news.pts.org|creaders|zhuichaguoji|efcc.org|cyberpolice|aboluowang|tuidang|epochtimes|nytimes|zhengjian|110.qq|mingjingnews|inmediahk|xinsheng|breakgfw|chengmingmag|jinpianwang|qi-gong|mhradio|edoors|renminbao|soundofhope|xizang-zhiye|bannedbook|ntdtv|12321|secretchina|dajiyuan|boxun|chinadigitaltimes|dwnews|huaglad|oneplusnews|epochweekly|cn.rfi).(cn|com|org|net|club|net|fr|tw|hk|eu|info|me)”,
        “regexp:(.<em>.||)(miaozhen|cnzz|talkingdata|umeng).(cn|com)”,
        “regexp:(.</em>.||)(mycard).(com|tw)”,
        “regexp:(.<em>.||)(gash).(com|tw)”,
        “regexp:(.bank.)”,
        “regexp:(.</em>.||)(pincong).(rocks)”,
        “regexp:(.*.||)(taobao).(com)”
      ]
    },
    {
      “type”: “field”,
      “outboundTag”: “block”,
      “ip”: [
          “127.0.0.1/32”,
          “10.0.0.0/8”,
          “fc00::/7”,
          “fe80::/10”,
          “172.16.0.0/12”
      ]
    },
    {
      “type”: “field”,
      “outboundTag”: “block”,
      “protocol”: [“bittorrent”]
    },
    {
      “type”: “field”,
      “outboundTag”: “block”,
      “port”: “22,23,24,25,107,194,445,465,587,992,3389,6665-6669,6679,6697,6881-6999,7000,10000-65535”
    }
  ]
}
<figure class="highlight mipsasm"><table><tr><td class="gutter"><pre><span class="line">1</span>
<span class="line">2</span>
<span class="line">3</span>
</pre></td><td class="code"><pre><code class="hljs mipsasm">
custom_outbound.<span class="hljs-keyword">json</span>
<span class="hljs-keyword"></span>
</code></pre></td></tr></table></figure>
[
  {
    “tag”: “IPv4_out”,
    “protocol”: “freedom”,
    “settings”: {}
  },
  {
    “tag”: “IPv6_out”,
    “protocol”: “freedom”,
    “settings”: {
      “domainStrategy”: “UseIPv6”
    }
  },
  {
    “protocol”: “blackhole”,
    “tag”: “block”
  }
]
<code></code>

config.yml

RouteConfigPath和OutboundConfigPath 后面的#号去除

## 其它规则

<a href="https://github.com/Rakau/blockList">https://github.com/Rakau/blockList</a>

### Soga用法

以Root权限运行之后重启你的Soga
<figure class="highlight awk"><table><tr><td class="gutter"><pre><span class="line">1</span>
</pre></td><td class="code"><pre><code class="hljs awk">wget https:<span class="hljs-regexp">//</span>raw.githubusercontent.com<span class="hljs-regexp">/Rakau/</span>blockList<span class="hljs-regexp">/main/</span>blockList -O <span class="hljs-regexp">/etc/</span>soga/blockList
</code></pre></td></tr></table></figure>

### XrayR用法

以Root权限运行之后，编辑/etc/XrayR/config.yml找到RuleListPath这一项，去掉#和无用语句后保存重启XrayR
<figure class="highlight bash"><table><tr><td class="gutter"><pre><span class="line">1</span>
</pre></td><td class="code"><pre><code class="hljs bash">wget https://raw.githubusercontent.com/Rakau/blockList/main/blockList -O /etc/XrayR/rulelis
</code></pre></td></tr></table></figure>