OpenClash 如何在 fake-ip 模式使用绕过大陆和黑白名单？

[efsg]

redir-host 经常 DNS 污染，fake-ip 页面的绕过大陆依赖 DNSMASQ ，但 DNS 选项只有防火墙转发才有黑白名单功能，试过 mosdns+shellclash 组合总是有玄学问题，有没有解决方法？

[vB4h3r2AS7wOYkY0]

```yaml
port: 7890
socks-port: 7891
allow-lan: false
mode: rule
log-level: silent
ipv6: true

profile:
store-selected: true
store-fake-ip: true

dns:
enable: true
listen: 127.0.0.1:53
enhanced-mode: fake-ip
fake-ip-range: 28.0.0.0/8
fake-ip-filter:
- "+.stun.*.*"
- "+.stun.*.*.*"
- "+.stun.*.*.*.*"
- "+.stun.*.*.*.*.*"
- "+.pool.ntp.org"
- "lens.l.google.com"
- "*.mcdn.bilivideo.cn"
nameserver:
- 223.5.5.5
- 223.6.6.6
default-nameserver:
- 223.5.5.5

rule-providers:
apple:
behavior: domain
type: http
url: "https://cdn.jsdelivr.net/gh/akiirui/clash-rule-china@main/release/apple.yaml"
path: ./apple.yaml
china:
behavior: domain
type: http
url: "https://cdn.jsdelivr.net/gh/akiirui/clash-rule-china@main/release/china.yaml"
path: ./china.yaml

rules:
# ANDROID
- DOMAIN-SUFFIX,googleapis.cn,PROXY
- DOMAIN-SUFFIX,googleapis.com,PROXY
# DIRECT
- RULE-SET,apple,DIRECT
- RULE-SET,china,DIRECT
- DOMAIN-SUFFIX,lan,DIRECT
- DOMAIN-SUFFIX,steamserver.net,DIRECT
- GEOIP,CN,DIRECT,no-resolve
# FINAL
- MATCH,PROXY
```